payload 0.17.1 → 0.18.0

package/dist/webpack/getProdConfig.d.ts

@@ -1,4 +1,4 @@
-import { Configuration } from 'webpack';
-import { SanitizedConfig } from '../config/types';
-declare const _default: (payloadConfig: SanitizedConfig) => Configuration;
-export default _default;
+import { Configuration } from 'webpack';
+import { SanitizedConfig } from '../config/types';
+declare const _default: (payloadConfig: SanitizedConfig) => Configuration;
+export default _default;

package/dist/webpack/getProdConfig.js

@@ -1,70 +1,70 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const terser_webpack_plugin_1 = __importDefault(require("terser-webpack-plugin"));
-const mini_css_extract_plugin_1 = __importDefault(require("mini-css-extract-plugin"));
-const css_minimizer_webpack_plugin_1 = __importDefault(require("css-minimizer-webpack-plugin"));
-const webpack_bundle_analyzer_1 = require("webpack-bundle-analyzer");
-const path_1 = __importDefault(require("path"));
-const getBaseConfig_1 = __importDefault(require("./getBaseConfig"));
-exports.default = (payloadConfig) => {
-    const baseConfig = (0, getBaseConfig_1.default)(payloadConfig);
-    let config = {
-        ...baseConfig,
-        output: {
-            publicPath: `${payloadConfig.routes.admin}/`,
-            path: path_1.default.resolve(process.cwd(), 'build'),
-            filename: '[name].[chunkhash].js',
-            chunkFilename: '[name].[chunkhash].js',
-        },
-        mode: 'production',
-        stats: 'errors-only',
-        optimization: {
-            minimizer: [new terser_webpack_plugin_1.default({}), new css_minimizer_webpack_plugin_1.default()],
-            splitChunks: {
-                cacheGroups: {
-                    styles: {
-                        name: 'styles',
-                        test: /\.(sa|sc|c)ss$/,
-                        chunks: 'all',
-                        enforce: true,
-                    },
-                },
-            },
-        },
-        plugins: [
-            ...baseConfig.plugins,
-            new mini_css_extract_plugin_1.default({
-                filename: '[name].css',
-                ignoreOrder: true,
-            }),
-        ],
-    };
-    config.module.rules.push({
-        test: /\.(scss|css)$/,
-        sideEffects: true,
-        use: [
-            mini_css_extract_plugin_1.default.loader,
-            require.resolve('css-loader'),
-            {
-                loader: require.resolve('postcss-loader'),
-                options: {
-                    postcssOptions: {
-                        plugins: [require.resolve('postcss-preset-env')],
-                    },
-                },
-            },
-            require.resolve('sass-loader'),
-        ],
-    });
-    if (process.env.PAYLOAD_ANALYZE_BUNDLE) {
-        config.plugins.push(new webpack_bundle_analyzer_1.BundleAnalyzerPlugin());
-    }
-    if (payloadConfig.admin.webpack && typeof payloadConfig.admin.webpack === 'function') {
-        config = payloadConfig.admin.webpack(config);
-    }
-    return config;
-};
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const terser_webpack_plugin_1 = __importDefault(require("terser-webpack-plugin"));
+const mini_css_extract_plugin_1 = __importDefault(require("mini-css-extract-plugin"));
+const css_minimizer_webpack_plugin_1 = __importDefault(require("css-minimizer-webpack-plugin"));
+const webpack_bundle_analyzer_1 = require("webpack-bundle-analyzer");
+const path_1 = __importDefault(require("path"));
+const getBaseConfig_1 = __importDefault(require("./getBaseConfig"));
+exports.default = (payloadConfig) => {
+    const baseConfig = (0, getBaseConfig_1.default)(payloadConfig);
+    let config = {
+        ...baseConfig,
+        output: {
+            publicPath: `${payloadConfig.routes.admin}/`,
+            path: path_1.default.resolve(process.cwd(), 'build'),
+            filename: '[name].[chunkhash].js',
+            chunkFilename: '[name].[chunkhash].js',
+        },
+        mode: 'production',
+        stats: 'errors-only',
+        optimization: {
+            minimizer: [new terser_webpack_plugin_1.default({}), new css_minimizer_webpack_plugin_1.default()],
+            splitChunks: {
+                cacheGroups: {
+                    styles: {
+                        name: 'styles',
+                        test: /\.(sa|sc|c)ss$/,
+                        chunks: 'all',
+                        enforce: true,
+                    },
+                },
+            },
+        },
+        plugins: [
+            ...baseConfig.plugins,
+            new mini_css_extract_plugin_1.default({
+                filename: '[name].css',
+                ignoreOrder: true,
+            }),
+        ],
+    };
+    config.module.rules.push({
+        test: /\.(scss|css)$/,
+        sideEffects: true,
+        use: [
+            mini_css_extract_plugin_1.default.loader,
+            require.resolve('css-loader'),
+            {
+                loader: require.resolve('postcss-loader'),
+                options: {
+                    postcssOptions: {
+                        plugins: [require.resolve('postcss-preset-env')],
+                    },
+                },
+            },
+            require.resolve('sass-loader'),
+        ],
+    });
+    if (process.env.PAYLOAD_ANALYZE_BUNDLE) {
+        config.plugins.push(new webpack_bundle_analyzer_1.BundleAnalyzerPlugin());
+    }
+    if (payloadConfig.admin.webpack && typeof payloadConfig.admin.webpack === 'function') {
+        config = payloadConfig.admin.webpack(config);
+    }
+    return config;
+};
 //# sourceMappingURL=data:application/json;base64,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

package/dist/webpack/init.d.ts

@@ -1,4 +1,4 @@
-import { Router } from 'express';
-import { SanitizedConfig } from '../config/types';
-declare function initWebpack(config: SanitizedConfig): Router;
-export default initWebpack;
+import { Router } from 'express';
+import { SanitizedConfig } from '../config/types';
+declare function initWebpack(config: SanitizedConfig): Router;
+export default initWebpack;

package/dist/webpack/init.js

@@ -1,22 +1,22 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const webpack_1 = __importDefault(require("webpack"));
-const express_1 = __importDefault(require("express"));
-const webpack_dev_middleware_1 = __importDefault(require("webpack-dev-middleware"));
-const webpack_hot_middleware_1 = __importDefault(require("webpack-hot-middleware"));
-const getDevConfig_1 = __importDefault(require("./getDevConfig"));
-const router = express_1.default.Router();
-function initWebpack(config) {
-    const webpackDevConfig = (0, getDevConfig_1.default)(config);
-    const compiler = (0, webpack_1.default)(webpackDevConfig);
-    router.use((0, webpack_dev_middleware_1.default)(compiler, {
-        publicPath: webpackDevConfig.output.publicPath,
-    }));
-    router.use((0, webpack_hot_middleware_1.default)(compiler));
-    return router;
-}
-exports.default = initWebpack;
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const webpack_1 = __importDefault(require("webpack"));
+const express_1 = __importDefault(require("express"));
+const webpack_dev_middleware_1 = __importDefault(require("webpack-dev-middleware"));
+const webpack_hot_middleware_1 = __importDefault(require("webpack-hot-middleware"));
+const getDevConfig_1 = __importDefault(require("./getDevConfig"));
+const router = express_1.default.Router();
+function initWebpack(config) {
+    const webpackDevConfig = (0, getDevConfig_1.default)(config);
+    const compiler = (0, webpack_1.default)(webpackDevConfig);
+    router.use((0, webpack_dev_middleware_1.default)(compiler, {
+        publicPath: webpackDevConfig.output.publicPath,
+    }));
+    router.use((0, webpack_hot_middleware_1.default)(compiler));
+    return router;
+}
+exports.default = initWebpack;
 //# sourceMappingURL=data:application/json;base64,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

package/dist/webpack/mocks/dotENV.d.ts

@@ -1,4 +1,4 @@
-declare namespace _default {
-    function config(): any;
-}
-export default _default;
+declare namespace _default {
+    function config(): any;
+}
+export default _default;

package/dist/webpack/mocks/dotENV.js

@@ -1,6 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = {
-    config: () => null,
-};
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = {
+    config: () => null,
+};
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZG90RU5WLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL3dlYnBhY2svbW9ja3MvZG90RU5WLmpzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsa0JBQWU7SUFDYixNQUFNLEVBQUUsR0FBRyxFQUFFLENBQUMsSUFBSTtDQUNuQixDQUFDIn0=

package/dist/webpack/mocks/emptyModule.d.ts

@@ -1,2 +1,2 @@
-declare function _default(): void;
-export default _default;
+declare function _default(): void;
+export default _default;

package/dist/webpack/mocks/emptyModule.js

@@ -1,4 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = () => { };
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = () => { };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW1wdHlNb2R1bGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvd2VicGFjay9tb2Nrcy9lbXB0eU1vZHVsZS5qcyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBLGtCQUFlLEdBQUcsRUFBRSxHQUFFLENBQUMsQ0FBQyJ9

package/dist/webpack/mocks/fileMock.d.ts

@@ -1,2 +1,2 @@
-declare var _default: "file-stub";
-export default _default;
+declare var _default: "file-stub";
+export default _default;

package/dist/webpack/mocks/fileMock.js

@@ -1,4 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.default = 'file-stub';
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = 'file-stub';
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZmlsZU1vY2suanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvd2VicGFjay9tb2Nrcy9maWxlTW9jay5qcyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBLGtCQUFlLFdBQVcsQ0FBQyJ9

package/docs/access-control/collections.mdx

@@ -46,52 +46,124 @@ export default {
 
 Returns a boolean which allows/denies access to the `create` request.
 
-**Available argument properties :**
+**Available argument properties:**
 
 | Option     | Description |
 | ---------- | ----------- |
 | **`req`**  | The Express `request` object containing the currently authenticated `user` |
 | **`data`** | The data passed to create the document with. |
 
+**Example:**
+
+```js
+const PublicUsers = {
+  slug: 'public-users',
+  access: {
+    // highlight-start
+    // allow guest users to self-registration
+    create: () => true,
+    // highlight-end
+    ...
+  },
+  fields: [ ... ],
+}
+```
+
 ### Read
 
 Read access functions can return a boolean result or optionally return a [query constraint](/docs/queries/overview) which limits the documents that are returned to only those that match the constraint you provide. This can be helpful to restrict users' access to only certain documents however you specify.
 
-**Available argument properties :**
+**Available argument properties:**
 
 | Option    | Description |
 | --------- | ----------- |
 | **`req`** | The Express `request` object containing the currently authenticated `user` |
-| **`id`**  | `id` of document requested, if within `findByID`. Otherwise, `id` is undefined. |
+| **`id`**  | `id` of document requested, if within `findByID` |
+
+**Example:**
+
+```js
+const canReadPage = ({ req: { user } }) => {
+  // allow authenticated users
+  if (user) {
+    return true;
+  }
+  // using a query constraint, guest users can access when a field named 'isPublic' is set to true
+  return {
+    where: {
+      // assumes we have a checkbox field named 'isPublic'
+      isPublic: {
+        equals: true
+      }
+    }
+  }
+};
+```
 
 ### Update
 
 Update access functions can return a boolean result or optionally return a [query constraint](/docs/queries/overview) to limit the document(s) that can be updated by the currently authenticated user. For example, returning a `query` from the `update` Access Control is helpful in cases where you would like to restrict a user to only being able to update the documents containing a `createdBy` relationship field equal to the user's ID.
 
-**Available argument properties :**
+**Available argument properties:**
 
 | Option     | Description |
 | ---------- | ----------- |
 | **`req`**  | The Express `request` object containing the currently authenticated `user` |
 | **`id`**   | `id` of document requested to update |
-| **`data`** | The data passed to update the document with. |
+| **`data`** | The data passed to update the document with |
+
+**Example:**
+
+```js
+
+const canUpdateUser = ({ req: { user }, id }) => {
+  // allow users with a role of 'admin'
+  if (user.roles && user.roles.some((role) => role === 'admin')) {
+    return true;
+  }
+  // allow any other users to update only oneself
+  return user.id === id;
+};
+```
 
 ### Delete
 
 Similarly to the Update function, returns a boolean or a [query constraint](/docs/queries/overview) to limit which documents can be deleted by which users.
 
-**Available argument properties :**
+**Available argument properties:**
 
 | Option    | Description |
 | --------- | ----------- |
 | **`req`** | The Express `request` object with additional `user` property, which is the currently logged in user |
 | **`id`**  | `id` of document requested to delete |
 
+**Example:**
+
+```js
+const canDeleteCustomer = async ({ req, id }) => {
+  if (!id) {
+    // allow the admin UI to show controls to delete since it is indeterminate without the id
+    return true;
+  }
+  // query another collection using the id
+  const result = await req.payload.find({
+    collection: 'contracts',
+    limit: 0,
+    depth: 0,
+    where: {
+      customer: { equals: id },
+    },
+  });
+
+  return result.totalDocs === 0;
+};
+```
+
 ### Admin
 
 If the Collection is [used to access the Payload Admin panel](/docs/admin/overview#the-admin-user-collection), the `Admin` Access Control function determines whether or not the currently logged in user can access the admin UI.
 
-**Available argument properties :**
+**Available argument properties:**
 
 | Option    | Description |
 | --------- | ----------- |
@@ -101,7 +173,7 @@ If the Collection is [used to access the Payload Admin panel](/docs/admin/overvi
 
 Determines which users can [unlock](/docs/authentication/operations#unlock) other users who may be blocked from authenticating successfully due to [failing too many login attempts](/docs/authentication/config#options).
 
-**Available argument properties :**
+**Available argument properties:**
 
 | Option    | Description |
 | --------- | ----------- |

package/docs/access-control/overview.mdx

@@ -43,3 +43,30 @@ You can manage access within Payload on three different levels:
 - [Collections](/docs/access-control/collections)
 - [Fields](/docs/access-control/fields)
 - [Globals](/docs/access-control/globals)
+
+
+### When Access Control is Executed
+
+<Banner type="success">
+  <strong>Note:</strong><br/>
+  Access control functions are utilized in two places. It's important to understand how and when your access control is executed.
+</Banner>
+
+#### As you execute operations
+
+When you perform Payload operations like `create`, `read`, `update`, and `delete`, your access control functions will be executed before any changes or operations are completed.
+
+#### Within the Admin UI
+
+The Payload Admin UI responds dynamically to the access control that you define. For example, if you restrict editing a `ExampleCollection` to only users that feature a `role` of `admin`, the Payload Admin UI will **hide** the `ExampleCollection` from the Admin UI entirely. This is super powerful and allows you to control who can do what with your Admin UI.
+
+To accomplish this, Payload ships with an `Access` operation, which is executed when a user logs into the Admin UI. Payload will execute each one of your access control functions, across all collections, globals, and fields, at the top level and return a response that contains a reflection of what the currently authenticated user can do with your application.
+
+### Argument Availability
+
+<Banner type="warning">
+  <strong>Important:</strong><br/>
+  When your access control functions are executed via the <strong>access</strong> operation, the <strong>id</strong> and <strong>data</strong> arguments will be <strong>undefined</strong>, because Payload is executing your functions without referencing a specific document.
+</Banner>
+
+If you use `id` or `data` within your access control functions, make sure to check that they are defined first. If they are not, then you can assume that your access control is being executed via the `access` operation, to determine solely what the user can do within the Admin UI.

package/docs/admin/customizing-css.mdx

@@ -35,16 +35,6 @@ You can specify your own SCSS variable stylesheet that will allow for the overri
 
 To do so, provide your base Payload config with a path to your own SCSS variable sheet.
 
-**NOTE: Before you start editing your SCSS file, make sure you install 'sass-loader' & 'node-sass' as dev dependencies.**
-**Node**
-```
-npm install sass-loader node-sass --save-dev
-```
-**YARN**
-```
-yarn add sass-loader node-sass --save-dev
-```
-
 **Example in payload.config.js:**
 ```js
 import { buildConfig } from 'payload/config';

package/docs/configuration/collections.mdx

@@ -25,6 +25,7 @@ It's often best practice to write your Collections in separate files and then im
 | **`upload`**     | Specify options if you would like this Collection to support file uploads. For more, consult the [Uploads](/docs/upload/overview) documentation. |
 | **`timestamps`** | Set to false to disable documents' automatically generated `createdAt` and `updatedAt` timestamps. |
 | **`versions`**   | Set to true to enable default options, or configure with object properties. [More](/docs/versions/overview#collection-config)|
+| **`endpoints`**  | Add custom routes to the REST API. [More](/docs/rest-api#custom-endpoints) |
 
 *\* An asterisk denotes that a property is required.*
 
@@ -80,25 +81,25 @@ If the function is specified, a Preview button will automatically appear in the
 **Example collection with preview function:**
 
 ```js
-{
+const Posts = {
 	slug: 'posts',
 	fields: [
 		{
 			name: 'slug',
 			type: 'text',
 			required: true,
-		}
-	]
+		},
+	],
 	admin: {
 		preview: (doc, { locale }) => {
 			if (doc?.slug) {
-				return `https://bigbird.com/preview/posts/${doc.slug}?locale=${locale}`,
+				return `https://bigbird.com/preview/posts/${doc.slug}?locale=${locale}`;
 			}
 
 			return null;
-		}
-	}
-}
+		},
+	},
+};
 ```
 
 ### Access control

package/docs/configuration/globals.mdx

@@ -22,6 +22,7 @@ As with Collection configs, it's often best practice to write your Globals in se
 | **`hooks`**      | Entry points to "tie in" to collection actions at specific points. [More](/docs/hooks/overview#global-hooks) |
 | **`access`**     | Provide access control functions to define exactly who should be able to do what with this Global. [More](/docs/access-control/overview/#globals) |
 | **`versions`**   | Set to true to enable default options, or configure with object properties. [More](/docs/versions/overview#globals-config)|
+| **`endpoints`**  | Add custom routes to the REST API. [More](/docs/rest-api#custom-endpoints)|
 
 *\* An asterisk denotes that a property is required.*
 

package/docs/fields/overview.mdx

@@ -200,35 +200,6 @@ The `condition` function should return a boolean that will control if the field
 }
 ```
 
-If you are building custom components, and you'd like for your custom components to support conditional logic as well, you can utilize Payload's `withCondition` higher-order function by importing it and using it as follows:
-
-```js
-import { withCondition } from 'payload/components/forms';
-
-const CustomComponent = () => {
-  return (
-    <div>
-      <p>Hello, on my own, I won't respect my field's conditional logic.<p/>
-      <p>But, I will if I'm wrapped with the withCondition HOC as shown below!</p>
-    </div>
-  )
-}
-
-const CustomComponentWithCondition = withCondition(CustomComponent);
-
-const customFieldWithCondition = {
-  name: 'myCustomField',
-  type: 'text',
-  admin: {
-    condition: (data) => Boolean(data.enableCustomField),
-    components: {
-      Field: CustomComponentWithCondition,
-    }
-  }
-}
-
-```
-
 ### Default values
 
 Fields can be prefilled with starting values using the `defaultValue` property. This is used in the admin UI and also on the backend as API requests will be populated with missing or undefined field values. You can assign the defaultValue directly in the field configuration or supply a function for dynamic behavior. Values assigned during a create request on the server are added before validation occurs.
@@ -243,7 +214,7 @@ Here is an example of a defaultValue function that uses both:
 ```js
 const translation: {
     en: 'Written by',
-    es: 'escrito por',
+    es: 'Escrito por',
 };
 
 const field = {

package/docs/plugins/overview.mdx

@@ -91,7 +91,7 @@ const addLastModified = (incomingConfig: Config): Config => {
   // Find all incoming auth-enabled collections
   // so we can create a lastModifiedBy relationship field
   // to all auth collections
-  const authEnabledCollections = incomingConfig.collections.find(
+  const authEnabledCollections = incomingConfig.collections.filter(
     collection => Boolean(collection.auth)
   );
 
@@ -125,8 +125,8 @@ const addLastModified = (incomingConfig: Config): Config => {
             },
           },
         ],
-      },
-    });
+      };
+    }),
   };
 
   return config;

package/docs/rest-api/overview.mdx

@@ -43,6 +43,8 @@ The `find` endpoint supports the following additional query parameters:
 
 ## Auth Operations
 
+Auth enabled collections are also given the following endpoints:
+
 | Method   | Path                        | Description |
 | -------- | --------------------------- | ----------- |
 | `POST`   | `/api/{collectionSlug}/verify/:token`   | [Email verification](/docs/authentication/operations#verify-by-email), if enabled. |
@@ -72,3 +74,47 @@ In addition to the dynamically generated endpoints above Payload also has REST e
 | `GET`    | `/api/_preferences/{key}` | Get a preference by key   |
 | `POST`   | `/api/_preferences/{key}` | Create or update by key   |
 | `DELETE` | `/api/_preferences/{key}` | Delete a user preference by key |
+
+## Custom Endpoints
+
+Additional REST API endpoints can be added to `collections` and `globals` by providing array of `endpoints` in the configuration. These can be used to write additional middleware on existing routes or build custom functionality into Payload apps and plugins.
+
+Each endpoint object needs to have:
+
+| Property   | Description                               |
+| ---------- | ----------------------------------------- |
+| **`path`**     | A string for the endpoint route after the collection or globals slug |
+| **`method`**   | The lowercase HTTP verb to use: 'get', 'head', 'post', 'put', 'delete', 'connect' or 'options' |
+| **`handler`**  | A function or array of functions to be called with **req**, **res** and **next** arguments. [Express](https://expressjs.com/en/guide/routing.html#route-handlers) |
+
+Example:
+
+```js
+
+// a collection of 'orders' with an additional route for tracking details, reachable at /api/orders/:id/tracking
+const Orders = {
+	slug: 'orders',
+	fields: [ /* ... */ ],
+  // highlight-start
+  endpoints: [
+    {
+      path: '/:id/tracking',
+      method: 'get',
+      handler: async (req, res, next) => {
+        const tracking = await getTrackingInfo(req.params.id);
+        if (tracking) {
+          res.status('200').send({ tracking });
+        } else {
+          res.status('404').send({ error: 'not found' });
+        }
+      }
+    }
+  ],
+  // highlight-end
+}
+```
+
+<Banner>
+  <strong>Note:</strong><br/>
+  **req** will have the **payload** object and can be used inside your endpoint handlers for making calls like req.payload.find() that will make use of access control and hooks.
+</Banner>