payload-react-router 0.0.0-stage → 0.1.0

package/dist/server/rest.d.ts

@@ -0,0 +1,34 @@
+import type { SanitizedConfig } from 'payload';
+type ConfigInput = Promise<SanitizedConfig> | SanitizedConfig;
+/**
+ * Routes an `/api/*` request to Payload: `POST {api}{graphQL}` to the GraphQL
+ * handler, everything else to the REST endpoint handler. Plain Web `Request` →
+ * `Response`; nothing React Router specific.
+ */
+export declare function handleAPIRoute({ config, request, }: {
+    config: ConfigInput;
+    request: Request;
+}): Promise<Response>;
+type RouteArgs = {
+    request: Request;
+};
+/**
+ * Builds the exports of the `/api/*` resource route:
+ *
+ * ```ts
+ * // app/routes/payload/api.ts
+ * export const { action, loader, middleware } = createAPIRoute({ config })
+ * ```
+ *
+ * `loader` answers GET; `action` answers POST / PUT / PATCH / DELETE.
+ * React Router calls neither for OPTIONS (CORS preflight), so a route
+ * middleware answers it.
+ */
+export declare function createAPIRoute({ config }: {
+    config: ConfigInput;
+}): {
+    action: ({ request }: RouteArgs) => Promise<Response>;
+    loader: ({ request }: RouteArgs) => Promise<Response>;
+    middleware: (({ request }: RouteArgs, next: () => Promise<Response>) => Promise<Response>)[];
+};
+export {};

package/dist/server/rest.js

@@ -0,0 +1,54 @@
+import { handleEndpoints } from 'payload';
+import { handleGraphQL } from "./graphql.js";
+/**
+ * Routes an `/api/*` request to Payload: `POST {api}{graphQL}` to the GraphQL
+ * handler, everything else to the REST endpoint handler. Plain Web `Request` →
+ * `Response`; nothing React Router specific.
+ */
+export async function handleAPIRoute({ config, request, }) {
+    const resolvedConfig = await config;
+    const apiRoute = resolvedConfig.routes.api;
+    const { pathname } = new URL(request.url);
+    const slug = pathname.startsWith(apiRoute) ? pathname.slice(apiRoute.length) : pathname;
+    const segments = slug.split('/').filter(Boolean);
+    const path = segments.length > 0 ? `${apiRoute}/${segments.join('/')}` : apiRoute;
+    const graphQLRoute = `${apiRoute}${resolvedConfig.routes.graphQL}`;
+    if (request.method === 'POST' && path === graphQLRoute) {
+        return handleGraphQL({ config: resolvedConfig, request });
+    }
+    return handleEndpoints({ config: resolvedConfig, path, request });
+}
+/**
+ * Builds the exports of the `/api/*` resource route:
+ *
+ * ```ts
+ * // app/routes/payload/api.ts
+ * export const { action, loader, middleware } = createAPIRoute({ config })
+ * ```
+ *
+ * `loader` answers GET; `action` answers POST / PUT / PATCH / DELETE.
+ * React Router calls neither for OPTIONS (CORS preflight), so a route
+ * middleware answers it.
+ */
+export function createAPIRoute({ config }) {
+    const handle = ({ request }) => handleAPIRoute({ config, request });
+    const answerPreflight = async ({ request }, next) => {
+        if (request.method !== 'OPTIONS') {
+            return next();
+        }
+        const response = await handle({ request });
+        // In RSC mode, a response produced by a resource route's middleware is not
+        // tagged as a resource response (react-router 8.4 `generateResourceResponse`
+        // only tags handler output), so the HTML renderer would try to decode it as
+        // an RSC stream. Tag it here. See NOTES.md, P10.
+        const headers = new Headers(response.headers);
+        headers.set('React-Router-Resource', 'true');
+        return new Response(response.body, { headers, status: response.status, statusText: response.statusText });
+    };
+    return {
+        action: handle,
+        loader: handle,
+        middleware: [answerPreflight],
+    };
+}
+//# sourceMappingURL=rest.js.map

package/dist/server/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../src/server/rest.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAI5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,GAIR;IACC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAA;IACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAA;IAC1C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;IACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;IAEjF,MAAM,YAAY,GAAG,GAAG,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACvD,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3D,CAAC;IAED,OAAO,eAAe,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;AACnE,CAAC;AAID;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,MAAM,EAA2B;IAChE,MAAM,MAAM,GAAG,CAAC,EAAE,OAAO,EAAa,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IAE9E,MAAM,eAAe,GAAG,KAAK,EAAE,EAAE,OAAO,EAAa,EAAE,IAA6B,EAAE,EAAE;QACtF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1C,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,iDAAiD;QACjD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC7C,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;QAC5C,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAA;IAC3G,CAAC,CAAA;IAED,OAAO;QACL,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,CAAC,eAAe,CAAC;KAC9B,CAAA;AACH,CAAC"}

package/dist/server/searchParams.d.ts

@@ -0,0 +1,6 @@
+export type SearchParams = Record<string, string | string[]>;
+/**
+ * `URL.searchParams` in the shape Payload views expect (Next's `searchParams`):
+ * a repeated key becomes an array, a single one stays a string.
+ */
+export declare function toSearchParams(url: URL): SearchParams;

package/dist/server/searchParams.js

@@ -0,0 +1,13 @@
+/**
+ * `URL.searchParams` in the shape Payload views expect (Next's `searchParams`):
+ * a repeated key becomes an array, a single one stays a string.
+ */
+export function toSearchParams(url) {
+    const result = {};
+    for (const key of new Set(url.searchParams.keys())) {
+        const values = url.searchParams.getAll(key);
+        result[key] = values.length > 1 ? values : values[0];
+    }
+    return result;
+}
+//# sourceMappingURL=searchParams.js.map

package/dist/server/searchParams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchParams.js","sourceRoot":"","sources":["../../src/server/searchParams.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAA;IACvD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/server/serverAdapter.d.ts

@@ -0,0 +1,28 @@
+import type { ServerAdapter } from 'payload';
+/**
+ * `ServerAdapter` for React Router, used everywhere except while rendering an
+ * admin page (see {@link createPageRenderServerAdapter}).
+ *
+ * Navigation throws a `Response`, which React Router honours from loaders,
+ * actions, resource routes and server functions alike. Unlike the TanStack
+ * adapter, `forbidden` / `unauthorized` / `permanentRedirect` keep their real
+ * HTTP status (403 / 401 / 308).
+ */
+export declare const reactRouterServerAdapter: ServerAdapter;
+/** Navigation requested while an admin page was rendering. */
+export type PageNavIntent = {
+    type?: 'notFound' | 'redirect';
+    url?: string;
+};
+/**
+ * `ServerAdapter` for the admin page render (`renderRoot`).
+ *
+ * Views call `req.server.redirect()` / `.notFound()` deep inside async server
+ * components. A throw there happens while the tree is being serialized and can
+ * no longer change the HTTP response, so — like the TanStack adapter — the intent
+ * is recorded on `nav` and the framework-neutral string errors are thrown:
+ * `Error('redirect:<url>')` and `Error('not-found')`. `DocumentView` already
+ * recognises both (`@payloadcms/ui/views/Document`), so no shared code changes.
+ * `loadAdminPage` renders the tree to completion, then honours `nav`.
+ */
+export declare const createPageRenderServerAdapter: (nav: PageNavIntent) => ServerAdapter;

package/dist/server/serverAdapter.js

@@ -0,0 +1,79 @@
+import { parseCookies } from 'payload';
+import { redirect } from 'react-router';
+import { serializeCookie } from "./cookies.js";
+import { getRequest, getRequestStore } from "./requestStore.js";
+function buildCookieStore(headers) {
+    const cookies = parseCookies(headers);
+    return {
+        get: (name) => {
+            const value = cookies.get(name);
+            return value !== undefined ? { name, value } : undefined;
+        },
+        getAll: () => Array.from(cookies.entries()).map(([name, value]) => ({ name, value })),
+    };
+}
+/**
+ * `ServerAdapter` for React Router, used everywhere except while rendering an
+ * admin page (see {@link createPageRenderServerAdapter}).
+ *
+ * Navigation throws a `Response`, which React Router honours from loaders,
+ * actions, resource routes and server functions alike. Unlike the TanStack
+ * adapter, `forbidden` / `unauthorized` / `permanentRedirect` keep their real
+ * HTTP status (403 / 401 / 308).
+ */
+export const reactRouterServerAdapter = {
+    forbidden: () => {
+        // eslint-disable-next-line @typescript-eslint/only-throw-error -- React Router control flow
+        throw new Response('Forbidden', { status: 403 });
+    },
+    getCookies: () => buildCookieStore(getRequest().headers),
+    getHeaders: () => new Headers(getRequest().headers),
+    notFound: () => {
+        // eslint-disable-next-line @typescript-eslint/only-throw-error -- React Router control flow
+        throw new Response('Not Found', { status: 404 });
+    },
+    permanentRedirect: (path) => {
+        // eslint-disable-next-line @typescript-eslint/only-throw-error -- React Router control flow
+        throw redirect(path, 308);
+    },
+    redirect: (path) => {
+        // eslint-disable-next-line @typescript-eslint/only-throw-error -- React Router control flow
+        throw redirect(path);
+    },
+    setCookie: (name, value, options) => {
+        getRequestStore().setCookies.push(serializeCookie(name, value, options));
+    },
+    unauthorized: () => {
+        // eslint-disable-next-line @typescript-eslint/only-throw-error -- React Router control flow
+        throw new Response('Unauthorized', { status: 401 });
+    },
+};
+/**
+ * `ServerAdapter` for the admin page render (`renderRoot`).
+ *
+ * Views call `req.server.redirect()` / `.notFound()` deep inside async server
+ * components. A throw there happens while the tree is being serialized and can
+ * no longer change the HTTP response, so — like the TanStack adapter — the intent
+ * is recorded on `nav` and the framework-neutral string errors are thrown:
+ * `Error('redirect:<url>')` and `Error('not-found')`. `DocumentView` already
+ * recognises both (`@payloadcms/ui/views/Document`), so no shared code changes.
+ * `loadAdminPage` renders the tree to completion, then honours `nav`.
+ */
+export const createPageRenderServerAdapter = (nav) => ({
+    ...reactRouterServerAdapter,
+    notFound: () => {
+        nav.type = 'notFound';
+        throw new Error('not-found');
+    },
+    permanentRedirect: (path) => {
+        nav.type = 'redirect';
+        nav.url = path;
+        throw new Error(`redirect:${path}`);
+    },
+    redirect: (path) => {
+        nav.type = 'redirect';
+        nav.url = path;
+        throw new Error(`redirect:${path}`);
+    },
+});
+//# sourceMappingURL=serverAdapter.js.map

package/dist/server/serverAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverAdapter.js","sourceRoot":"","sources":["../../src/server/serverAdapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAE/D,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAErC,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC/B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1D,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;KACtF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAkB;IACrD,SAAS,EAAE,GAAG,EAAE;QACd,4FAA4F;QAC5F,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,UAAU,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC;IACxD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC;IACnD,QAAQ,EAAE,GAAG,EAAE;QACb,4FAA4F;QAC5F,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAClD,CAAC;IACD,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE;QAC1B,4FAA4F;QAC5F,MAAM,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC3B,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,4FAA4F;QAC5F,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IACD,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAClC,eAAe,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,YAAY,EAAE,GAAG,EAAE;QACjB,4FAA4F;QAC5F,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACrD,CAAC;CACF,CAAA;AAQD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAkB,EAAiB,EAAE,CAAC,CAAC;IACnF,GAAG,wBAAwB;IAC3B,QAAQ,EAAE,GAAG,EAAE;QACb,GAAG,CAAC,IAAI,GAAG,UAAU,CAAA;QACrB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAA;IAC9B,CAAC;IACD,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE;QAC1B,GAAG,CAAC,IAAI,GAAG,UAAU,CAAA;QACrB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAA;QACd,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACrC,CAAC;IACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACjB,GAAG,CAAC,IAAI,GAAG,UAAU,CAAA;QACrB,GAAG,CAAC,GAAG,GAAG,IAAI,CAAA;QACd,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IACrC,CAAC;CACF,CAAC,CAAA"}

package/dist/server/serverFunctions.d.ts

@@ -0,0 +1,21 @@
+import type { ServerFunctionHandler } from 'payload';
+/**
+ * Payload's server-function dispatcher bound to React Router's request.
+ *
+ * In React Router's RSC mode, server functions are real React Server Functions
+ * (`'use server'`), so their results — including the `ReactNode`s returned by
+ * `render-document`, `render-list` or `form-state` — travel over the Flight
+ * protocol natively, as under Next.js. No `transformResult` is needed (TanStack
+ * needs `serializeForRsc` because its server functions use seroval).
+ *
+ * Call it from an app-owned `'use server'` module that binds `config` and the
+ * generated `importMap`:
+ *
+ * ```ts
+ * 'use server'
+ * export async function serverFunction(args, _options) {
+ *   return handleServerFunctions({ ...args, config, importMap })
+ * }
+ * ```
+ */
+export declare const handleServerFunctions: ServerFunctionHandler;

package/dist/server/serverFunctions.js

@@ -0,0 +1,25 @@
+import { createServerFunctionHandler } from '@payloadcms/ui/utilities/handleServerFunctions';
+import { initAdminContext } from "./initAdminContext.js";
+/**
+ * Payload's server-function dispatcher bound to React Router's request.
+ *
+ * In React Router's RSC mode, server functions are real React Server Functions
+ * (`'use server'`), so their results — including the `ReactNode`s returned by
+ * `render-document`, `render-list` or `form-state` — travel over the Flight
+ * protocol natively, as under Next.js. No `transformResult` is needed (TanStack
+ * needs `serializeForRsc` because its server functions use seroval).
+ *
+ * Call it from an app-owned `'use server'` module that binds `config` and the
+ * generated `importMap`:
+ *
+ * ```ts
+ * 'use server'
+ * export async function serverFunction(args, _options) {
+ *   return handleServerFunctions({ ...args, config, importMap })
+ * }
+ * ```
+ */
+export const handleServerFunctions = createServerFunctionHandler({
+    initAdminContext: ({ configPromise, importMap }) => initAdminContext({ configPromise, importMap, key: 'RootLayout' }),
+});
+//# sourceMappingURL=serverFunctions.js.map

package/dist/server/serverFunctions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverFunctions.js","sourceRoot":"","sources":["../../src/server/serverFunctions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gDAAgD,CAAA;AAE5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA0B,2BAA2B,CAAC;IACtF,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,EAAE,CACjD,gBAAgB,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;CACpE,CAAC,CAAA"}

package/dist/vite/config/external.d.ts

@@ -0,0 +1,43 @@
+/**
+ * SSR/RSC externalization config used by `withPayload`. Kept separate from the
+ * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.
+ */
+/**
+ * Packages externalized during dev serve (`ssr.external`). Node's loader resolves
+ * their CJS/UMD directly; letting Vite's dev SSR transform touch them can break
+ * fragile UMD wrappers (e.g. `pluralize`, whose `this`-based global assignment
+ * throws when transformed rather than required).
+ *
+ * Safe here whoever declared the entry: Node resolves from the importing package,
+ * so pnpm's isolated layout never applies. The build is stricter — see
+ * {@link buildBundledPackages}.
+ */
+export declare const ssrExternalPackages: string[];
+/**
+ * Entries of {@link ssrExternalPackages} that must bundle in the production build.
+ *
+ * Externalizing only works for specifiers resolvable from the project root. These
+ * are leaf deps of Payload packages, so under pnpm they live in `.pnpm/…` and a bare
+ * specifier in a root-resolved chunk is invisible — `ERR_MODULE_NOT_FOUND` at
+ * runtime, or a build-time resolve failure under Nitro's re-bundle pass.
+ *
+ * `pluralize` also needs forcing back via `noExternal` (see `withPayload`); the
+ * storage leaves don't, since their adapters are already `noExternal`.
+ */
+export declare const buildBundledPackages: string[];
+/**
+ * External packages for the production `vite build` only (not dev serve).
+ *
+ * Externalizes the `@payloadcms/*` package boundaries — plus `payload` — so each
+ * resolves its own transitive Node deps (`pino`, `drizzle-orm`, `libsql`, …) from
+ * its own `node_modules` at runtime. Externalizing only the leaf deps breaks under
+ * pnpm: a leaf imported by bundled code becomes an unresolvable bare specifier from
+ * `dist/`, since pnpm does not hoist it; see {@link buildBundledPackages}.
+ *
+ * Kept out of dev's `ssr.external` on purpose: the monorepo resolves these to
+ * TypeScript source (`.ts` imported via `.js` specifiers), which only Vite's
+ * transform can resolve — an externalized copy would hit Node's raw resolver and
+ * fail on the `.js`→`.ts` mismatch.
+ */
+export declare const buildExternalPackages: string[];
+export declare const payloadNoExternalPatterns: Array<RegExp | string>;

package/dist/vite/config/external.js

@@ -0,0 +1,102 @@
+/**
+ * SSR/RSC externalization config used by `withPayload`. Kept separate from the
+ * client optimizer config (`./optimizeDeps.ts`) so each concern stays small.
+ */
+/**
+ * Packages externalized during dev serve (`ssr.external`). Node's loader resolves
+ * their CJS/UMD directly; letting Vite's dev SSR transform touch them can break
+ * fragile UMD wrappers (e.g. `pluralize`, whose `this`-based global assignment
+ * throws when transformed rather than required).
+ *
+ * Safe here whoever declared the entry: Node resolves from the importing package,
+ * so pnpm's isolated layout never applies. The build is stricter — see
+ * {@link buildBundledPackages}.
+ */
+export const ssrExternalPackages = [
+    'zod',
+    'fast-uri',
+    'drizzle-kit',
+    'drizzle-kit/api',
+    'drizzle-orm',
+    'sharp',
+    'require-in-the-middle',
+    'json-schema-to-typescript',
+    'pino',
+    'pino-pretty',
+    'graphql',
+    'nodemailer',
+    'aws4',
+    'pluralize',
+    'console-table-printer',
+    '@azure/storage-blob',
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@google-cloud/storage',
+    // Database drivers + their lazily-required companions, one group per adapter.
+    // Postgres (`@payloadcms/db-postgres`, `@payloadcms/db-vercel-postgres`)
+    'pg',
+    'pg-native',
+    'pg-cloudflare',
+    // SQLite (`@payloadcms/db-sqlite`)
+    'better-sqlite3',
+    'libsql',
+    // Mongo (`@payloadcms/db-mongodb`)
+    'mongodb',
+    'mongoose',
+];
+/**
+ * Entries of {@link ssrExternalPackages} that must bundle in the production build.
+ *
+ * Externalizing only works for specifiers resolvable from the project root. These
+ * are leaf deps of Payload packages, so under pnpm they live in `.pnpm/…` and a bare
+ * specifier in a root-resolved chunk is invisible — `ERR_MODULE_NOT_FOUND` at
+ * runtime, or a build-time resolve failure under Nitro's re-bundle pass.
+ *
+ * `pluralize` also needs forcing back via `noExternal` (see `withPayload`); the
+ * storage leaves don't, since their adapters are already `noExternal`.
+ */
+export const buildBundledPackages = [
+    'pluralize',
+    // Leaf deps of the `@payloadcms/storage-*` adapters.
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@azure/storage-blob',
+    '@google-cloud/storage',
+];
+/**
+ * External packages for the production `vite build` only (not dev serve).
+ *
+ * Externalizes the `@payloadcms/*` package boundaries — plus `payload` — so each
+ * resolves its own transitive Node deps (`pino`, `drizzle-orm`, `libsql`, …) from
+ * its own `node_modules` at runtime. Externalizing only the leaf deps breaks under
+ * pnpm: a leaf imported by bundled code becomes an unresolvable bare specifier from
+ * `dist/`, since pnpm does not hoist it; see {@link buildBundledPackages}.
+ *
+ * Kept out of dev's `ssr.external` on purpose: the monorepo resolves these to
+ * TypeScript source (`.ts` imported via `.js` specifiers), which only Vite's
+ * transform can resolve — an externalized copy would hit Node's raw resolver and
+ * fail on the `.js`→`.ts` mismatch.
+ */
+export const buildExternalPackages = [
+    'payload',
+    'payload/node',
+    '@payloadcms/drizzle',
+    '@payloadcms/db-mongodb',
+    '@payloadcms/db-postgres',
+    '@payloadcms/db-vercel-postgres',
+    '@payloadcms/db-sqlite',
+    '@payloadcms/db-d1-sqlite',
+    ...ssrExternalPackages.filter((pkg) => !buildBundledPackages.includes(pkg)),
+];
+export const payloadNoExternalPatterns = [
+    '@payloadcms/ui',
+    '@payloadcms/translations',
+    'payload-react-router',
+    // Imported by the adapter's GraphQL handler; bundled so the server build does
+    // not need it next to the app's own dependencies.
+    'graphql-http',
+    /^@payloadcms\/richtext-lexical/,
+    /^@payloadcms\/plugin-/,
+    /^@payloadcms\/storage-/,
+];
+//# sourceMappingURL=external.js.map

package/dist/vite/config/external.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external.js","sourceRoot":"","sources":["../../../src/vite/config/external.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAa;IAC3C,KAAK;IACL,UAAU;IACV,aAAa;IACb,iBAAiB;IACjB,aAAa;IACb,OAAO;IACP,uBAAuB;IACvB,2BAA2B;IAC3B,MAAM;IACN,aAAa;IACb,SAAS;IACT,YAAY;IACZ,MAAM;IACN,WAAW;IACX,uBAAuB;IACvB,qBAAqB;IACrB,oBAAoB;IACpB,+BAA+B;IAC/B,uBAAuB;IACvB,8EAA8E;IAC9E,yEAAyE;IACzE,IAAI;IACJ,WAAW;IACX,eAAe;IACf,mCAAmC;IACnC,gBAAgB;IAChB,QAAQ;IACR,mCAAmC;IACnC,SAAS;IACT,UAAU;CACX,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC5C,WAAW;IACX,qDAAqD;IACrD,oBAAoB;IACpB,+BAA+B;IAC/B,qBAAqB;IACrB,uBAAuB;CACxB,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC7C,SAAS;IACT,cAAc;IACd,qBAAqB;IACrB,wBAAwB;IACxB,yBAAyB;IACzB,gCAAgC;IAChC,uBAAuB;IACvB,0BAA0B;IAC1B,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;CAC5E,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAA2B;IAC/D,gBAAgB;IAChB,0BAA0B;IAC1B,sBAAsB;IACtB,8EAA8E;IAC9E,kDAAkD;IAClD,cAAc;IACd,gCAAgC;IAChC,uBAAuB;IACvB,wBAAwB;CACzB,CAAA"}

package/dist/vite/config/optimizeDeps.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Client dep-optimizer config used by `withPayload`. Kept separate from the
+ * SSR/RSC externalization config (`./external.ts`) so each concern stays small.
+ */
+/**
+ * Packages we know contain Node-only code or top-level side effects requiring
+ * Node APIs. Excluding them from the client optimizer prevents Vite from
+ * walking into their main entries and trying to bundle server-only imports
+ * for the browser.
+ */
+export declare const optimizeDepsExcludeDefaults: string[];
+/**
+ * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be
+ * pre-bundled for the client. Vite's auto-discovery doesn't reliably pick
+ * these up because their parent packages are in `optimizeDeps.exclude`, so we
+ * list them explicitly using the `parent > child` syntax.
+ *
+ * Each entry below fixes a specific late-discovery re-optimization: without it,
+ * Vite discovers the dep *after* its initial crawl, forcing a full dep
+ * re-optimization mid-session that 404s in-flight `.vite/deps/*` chunks and
+ * remounts the admin (dropping client state). This is why the list can't simply
+ * be deleted — it is the "complete first pass" for the admin's dep graph.
+ */
+export declare const optimizeDepsIncludeDefaults: string[];

package/dist/vite/config/optimizeDeps.js

@@ -0,0 +1,162 @@
+/**
+ * Client dep-optimizer config used by `withPayload`. Kept separate from the
+ * SSR/RSC externalization config (`./external.ts`) so each concern stays small.
+ */
+/**
+ * Packages we know contain Node-only code or top-level side effects requiring
+ * Node APIs. Excluding them from the client optimizer prevents Vite from
+ * walking into their main entries and trying to bundle server-only imports
+ * for the browser.
+ */
+export const optimizeDepsExcludeDefaults = [
+    'sharp',
+    '@payloadcms/ui',
+    'payload-react-router',
+    'payload',
+    'pino',
+    'pino-pretty',
+    'busboy',
+    'get-tsconfig',
+    'ws',
+    'croner',
+    'prompts',
+    'file-type',
+    // Server-only SDKs used by `@payloadcms/storage-*` adapters. Vite
+    // sometimes walks these from the main package entry while scanning
+    // workspace deps, and the browser sub-bundles do not expose the
+    // server-only APIs (e.g. `BlobSASPermissions`), which crashes the dev
+    // server with a `MISSING_EXPORT` error before any test runs.
+    '@azure/storage-blob',
+    // Preserve RSC client boundaries on storage admin upload handlers.
+    '@payloadcms/storage-azure',
+    '@payloadcms/storage-r2',
+    '@payloadcms/storage-vercel-blob',
+    '@aws-sdk/client-s3',
+    '@aws-sdk/s3-request-presigner',
+    '@google-cloud/storage',
+    // Packages whose admin component barrel re-exports `'use client'` modules
+    // without carrying the directive itself. Pre-bundling one puts those modules
+    // in the optimized dep chunk *and* in the `rsc` environment as client
+    // references, which `@vitejs/plugin-rsc` warns about ("client component
+    // dependency is inconsistently optimized") once per component. Barrels that
+    // start with `'use client'` (e.g. `richtext-lexical`, `plugin-stripe`) don't
+    // warn and stay pre-bundled. Only shows up in published installs; workspace
+    // source is never pre-bundled.
+    '@payloadcms/plugin-cloud-storage',
+    '@payloadcms/plugin-ecommerce',
+    '@payloadcms/plugin-form-builder',
+    '@payloadcms/plugin-import-export',
+    '@payloadcms/plugin-multi-tenant',
+    '@payloadcms/plugin-search',
+    '@payloadcms/plugin-sentry',
+    '@payloadcms/plugin-seo',
+    // Database adapters and their drivers. The client scan reaches them through the
+    // Payload config (it follows server functions' `import('@payload-config')`
+    // without TanStack's server-fn stripping), so Vite would pre-bundle the whole
+    // driver for a browser that never loads it. Mongoose 9 has no browser build, so
+    // that bundles `mongodb`, whose optional `@aws-sdk/credential-providers` peer —
+    // when linked, as in the monorepo via `@payloadcms/payload-cloud` — fails the
+    // same `MISSING_EXPORT` way. Published installs reach the adapter packages;
+    // the monorepo, which resolves them to source, reaches the drivers.
+    '@payloadcms/db-d1-sqlite',
+    '@payloadcms/db-mongodb',
+    '@payloadcms/db-postgres',
+    '@payloadcms/db-sqlite',
+    '@payloadcms/db-vercel-postgres',
+    '@payloadcms/drizzle',
+    'mongodb',
+    'mongoose',
+];
+/**
+ * Transitive dependencies of `@payloadcms/ui` and `payload` that need to be
+ * pre-bundled for the client. Vite's auto-discovery doesn't reliably pick
+ * these up because their parent packages are in `optimizeDeps.exclude`, so we
+ * list them explicitly using the `parent > child` syntax.
+ *
+ * Each entry below fixes a specific late-discovery re-optimization: without it,
+ * Vite discovers the dep *after* its initial crawl, forcing a full dep
+ * re-optimization mid-session that 404s in-flight `.vite/deps/*` chunks and
+ * remounts the admin (dropping client state). This is why the list can't simply
+ * be deleted — it is the "complete first pass" for the admin's dep graph.
+ */
+export const optimizeDepsIncludeDefaults = [
+    '@payloadcms/ui > sonner',
+    '@payloadcms/ui > @faceless-ui/modal',
+    '@payloadcms/ui > @faceless-ui/window-info',
+    '@payloadcms/ui > @faceless-ui/scroll-info',
+    '@payloadcms/ui > @dnd-kit/core',
+    '@payloadcms/ui > @dnd-kit/sortable',
+    '@payloadcms/ui > @dnd-kit/utilities',
+    '@payloadcms/ui > react-datepicker',
+    '@payloadcms/ui > react-select',
+    '@payloadcms/ui > react-select/creatable',
+    '@payloadcms/ui > react-image-crop',
+    '@payloadcms/ui > @monaco-editor/react',
+    '@payloadcms/ui > date-fns',
+    '@payloadcms/ui > date-fns/transpose',
+    '@payloadcms/ui > @date-fns/tz/date/mini',
+    '@payloadcms/ui > uuid',
+    '@payloadcms/ui > use-context-selector',
+    '@payloadcms/ui > bson-objectid',
+    '@payloadcms/ui > dequal',
+    '@payloadcms/ui > object-to-formdata',
+    '@payloadcms/ui > md5',
+    'payload > deepmerge',
+    'payload > pluralize',
+    // `scheduler` is a transitive dep of `react-dom`, not a direct dependency of
+    // the app, so a bare `'scheduler'` specifier fails to resolve from an isolated
+    // install (`test/node_modules` built with `pnpm i --ignore-workspace`), where
+    // it isn't hoisted to the top level. Path it through `react-dom` so the
+    // optimizer resolves the exact copy the runtime loads.
+    'react-dom > scheduler',
+    // `@payloadcms/ui` (in `optimizeDeps.exclude`) ships compiled output that the
+    // React Compiler rewrote to `import { c } from 'react/compiler-runtime'`.
+    // Because its parent is excluded, the optimizer never crawls in to discover
+    // this entry, so Vite serves `react/compiler-runtime` raw. That file is
+    // CommonJS (`module.exports = require(...)`), so the named `c` export can't be
+    // statically extracted and every client component throws "does not provide an
+    // export named 'c'". Pre-bundling it lets esbuild synthesize the named export.
+    'react/compiler-runtime',
+    // Transitive deps that Vite otherwise discovers *after* the initial crawl
+    // (react-select pulls in @floating-ui at runtime; react-is is reached via
+    // react-transition-group/prop-types; the default date-fns locale is loaded
+    // through a dynamic `date-fns/locale/${key}` import). A late discovery forces
+    // a full dep re-optimization mid-session, which 404s every in-flight
+    // `.vite/deps/*` chunk ("Pre-transform error: file does not exist in the
+    // optimize deps directory") and breaks the admin UI in CI cold starts.
+    // Pre-bundling them keeps the first optimization pass complete.
+    '@payloadcms/ui > react-select > @floating-ui/dom',
+    '@payloadcms/ui > react-select > @floating-ui/dom > @floating-ui/core',
+    '@payloadcms/ui > react-select > prop-types > react-is',
+    '@payloadcms/ui > date-fns/locale/en-US',
+    // Further late discoveries observed re-optimizing mid-run in CI cold starts
+    // (see CI logs: "✨ new dependencies optimized: @dnd-kit/modifiers / zod /
+    // dequal/lite"). The modular dashboard pulls in `@dnd-kit/modifiers` on first
+    // render; form-state diffing reaches `dequal/lite` (a distinct entry point
+    // from the already-listed `dequal`); client-side field validation reaches
+    // `zod` *through `payload`* — it is `ssrExternal` server-side but still
+    // bundled into the client, and must be pathed via `payload` so the optimizer
+    // pre-bundles the exact copy the runtime loads.
+    '@payloadcms/ui > @dnd-kit/modifiers',
+    '@payloadcms/ui > dequal/lite',
+    'payload > zod',
+    // The storage client-upload suites (esp. vercel-blob) crawl part of the
+    // `payload` server runtime into the client bundle and discover these late,
+    // triggering several "optimized dependencies changed. reloading" waves that
+    // reload the page mid-test (the bulk-upload drawer's Create New button /
+    // dropzone vanish and the direct-to-bucket PUT never fires). Pre-bundle the
+    // whole observed set so the first pass is complete.
+    'payload > undici',
+    'payload > jose',
+    'payload > dataloader',
+    'payload > path-to-regexp',
+    'payload > console-table-printer',
+    'payload > ci-info',
+    'payload > image-dimensions',
+    'payload > ipaddr.js',
+    'payload > range-parser',
+    'payload > sanitize-filename',
+    // `@azure/storage-blob` is excluded, so pre-bundle its CommonJS browser dependency explicitly.
+    '@azure/storage-blob > events',
+];
+//# sourceMappingURL=optimizeDeps.js.map

package/dist/vite/config/optimizeDeps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimizeDeps.js","sourceRoot":"","sources":["../../../src/vite/config/optimizeDeps.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAa;IACnD,OAAO;IACP,gBAAgB;IAChB,sBAAsB;IACtB,SAAS;IACT,MAAM;IACN,aAAa;IACb,QAAQ;IACR,cAAc;IACd,IAAI;IACJ,QAAQ;IACR,SAAS;IACT,WAAW;IACX,kEAAkE;IAClE,mEAAmE;IACnE,gEAAgE;IAChE,sEAAsE;IACtE,6DAA6D;IAC7D,qBAAqB;IACrB,mEAAmE;IACnE,2BAA2B;IAC3B,wBAAwB;IACxB,iCAAiC;IACjC,oBAAoB;IACpB,+BAA+B;IAC/B,uBAAuB;IACvB,0EAA0E;IAC1E,6EAA6E;IAC7E,sEAAsE;IACtE,wEAAwE;IACxE,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,+BAA+B;IAC/B,kCAAkC;IAClC,8BAA8B;IAC9B,iCAAiC;IACjC,kCAAkC;IAClC,iCAAiC;IACjC,2BAA2B;IAC3B,2BAA2B;IAC3B,wBAAwB;IACxB,gFAAgF;IAChF,2EAA2E;IAC3E,8EAA8E;IAC9E,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE,0BAA0B;IAC1B,wBAAwB;IACxB,yBAAyB;IACzB,uBAAuB;IACvB,gCAAgC;IAChC,qBAAqB;IACrB,SAAS;IACT,UAAU;CACX,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAa;IACnD,yBAAyB;IACzB,qCAAqC;IACrC,2CAA2C;IAC3C,2CAA2C;IAC3C,gCAAgC;IAChC,oCAAoC;IACpC,qCAAqC;IACrC,mCAAmC;IACnC,+BAA+B;IAC/B,yCAAyC;IACzC,mCAAmC;IACnC,uCAAuC;IACvC,2BAA2B;IAC3B,qCAAqC;IACrC,yCAAyC;IACzC,uBAAuB;IACvB,uCAAuC;IACvC,gCAAgC;IAChC,yBAAyB;IACzB,qCAAqC;IACrC,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,wEAAwE;IACxE,uDAAuD;IACvD,uBAAuB;IACvB,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,wBAAwB;IACxB,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9E,qEAAqE;IACrE,yEAAyE;IACzE,uEAAuE;IACvE,gEAAgE;IAChE,kDAAkD;IAClD,sEAAsE;IACtE,uDAAuD;IACvD,wCAAwC;IACxC,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,gDAAgD;IAChD,qCAAqC;IACrC,8BAA8B;IAC9B,eAAe;IACf,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAC5E,oDAAoD;IACpD,kBAAkB;IAClB,gBAAgB;IAChB,sBAAsB;IACtB,0BAA0B;IAC1B,iCAAiC;IACjC,mBAAmB;IACnB,4BAA4B;IAC5B,qBAAqB;IACrB,wBAAwB;IACxB,6BAA6B;IAC7B,+FAA+F;IAC/F,8BAA8B;CAC/B,CAAA"}

package/dist/vite/config/scss.d.ts

@@ -0,0 +1,13 @@
+/**
+ * SCSS `@import`/`@use` importers applied for every Payload consumer.
+ *
+ * Resolves webpack-style `~@payloadcms/...` tilde specifiers (emitted by
+ * first-party Payload package styles, e.g. `@payloadcms/richtext-slate`) to the
+ * installed package via Node resolution. Because it goes through the package's
+ * `exports` map, it picks the workspace `src` scss in the monorepo and the
+ * published `dist` scss in a consumer install automatically — no per-app
+ * `findFileUrl` shim needed.
+ */
+export declare const payloadScssImporters: {
+    findFileUrl(url: string): null | URL;
+}[];