payload 3.51.0 → 3.52.0-canary.1

package/dist/admin/forms/Form.d.ts

@@ -51,6 +51,12 @@ export type FieldState = {
     fieldSchema?: Field;
     filterOptions?: FilterOptionsResult;
     initialValue?: unknown;
+    /**
+     * @experimental - Note: this property is experimental and may change in the future. Use at your own discretion.
+     * Every time a field is changed locally, this flag is set to true. Prevents form state from server from overwriting local changes.
+     * After merging server form state, this flag is reset.
+     */
+    isModified?: boolean;
     /**
      * The path of the field when its custom components were last rendered.
      * This is used to denote if a field has been rendered, and if so,
@@ -102,6 +108,11 @@ export type BuildFormStateArgs = {
     mockRSCs?: boolean;
     operation?: 'create' | 'update';
     readOnly?: boolean;
+    /**
+     * If true, will render field components within their state object.
+     * Performance optimization: Setting to `false` ensures that only fields that have changed paths will re-render, e.g. new array rows, etc.
+     * For example, you only need to render ALL fields on initial render, not on every onChange.
+     */
     renderAllFields?: boolean;
     req: PayloadRequest;
     returnLockStatus?: boolean;

package/dist/admin/forms/Form.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Form.d.ts","sourceRoot":"","sources":["../../../src/admin/forms/Form.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,MAAM,IAAI,GAAG;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,GAAG,GAAG;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE;QACjB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;KAC3B,CAAA;IACD,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE;QACjB;;;WAGG;QACH,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,SAAS,CAAA;QAC9D,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QAC5B,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QAC7B,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QAC7B,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QACvB,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QACvB,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;KACxB,CAAA;IACD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,CAAA;IACnB,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACZ;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;AAE9E,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAA;CAC5C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,cAAc,EAAE,4BAA4B,GAAG,SAAS,CAAA;IACxD,cAAc,EAAE,mBAAmB,CAAA;IACnC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,SAAS,CAAA;IAC7B,cAAc,CAAC,EAAE,KAAK,GAAG,WAAW,CAAA;IACpC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACpB,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACvB,qBAAqB,CAAC,EAAE,SAAS,CAAA;IAIjC,QAAQ,CAAC,EAAE,MAAM,kBAAkB,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAIlB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,GAAG,CACA;IACE,cAAc,EAAE,MAAM,CAAA;IAGtB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GACD;IACE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;CACnB,CACJ,CAAA"}
+{"version":3,"file":"Form.d.ts","sourceRoot":"","sources":["../../../src/admin/forms/Form.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,MAAM,IAAI,GAAG;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,GAAG,GAAG;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE;QACjB,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;KAC3B,CAAA;IACD,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,CAAA;CACpC,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,gBAAgB,CAAC,EAAE;QACjB;;;WAGG;QACH,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,SAAS,CAAA;QAC9D,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QAC5B,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QAC7B,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QAC7B,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QACvB,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;QACvB,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;KACxB,CAAA;IACD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,CAAA;IACnB,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACZ;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,2BAA2B,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;AAE9E,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,CAAC,IAAI,EAAE,MAAM,GAAG,2BAA2B,CAAA;CAC5C,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,cAAc,EAAE,4BAA4B,GAAG,SAAS,CAAA;IACxD,cAAc,EAAE,mBAAmB,CAAA;IACnC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,SAAS,CAAA;IAC7B,cAAc,CAAC,EAAE,KAAK,GAAG,WAAW,CAAA;IACpC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACpB,gBAAgB,CAAC,EAAE,IAAI,CAAA;IACvB,qBAAqB,CAAC,EAAE,SAAS,CAAA;IAIjC,QAAQ,CAAC,EAAE,MAAM,kBAAkB,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAC3B,GAAG,CACA;IACE,cAAc,EAAE,MAAM,CAAA;IAGtB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GACD;IACE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;CACnB,CACJ,CAAA"}

package/dist/admin/forms/Form.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/admin/forms/Form.ts"],"sourcesContent":["import { type SupportedLanguages } from '@payloadcms/translations'\n\nimport type { SanitizedDocumentPermissions } from '../../auth/types.js'\nimport type { Field, Option, Validate } from '../../fields/config/types.js'\nimport type { TypedLocale } from '../../index.js'\nimport type { DocumentPreferences } from '../../preferences/types.js'\nimport type { PayloadRequest, SelectType, Where } from '../../types/index.js'\n\nexport type Data = {\n  [key: string]: any\n}\n\nexport type Row = {\n  blockType?: string\n  collapsed?: boolean\n  customComponents?: {\n    RowLabel?: React.ReactNode\n  }\n  id: string\n  isLoading?: boolean\n  lastRenderedPath?: string\n}\n\nexport type FilterOptionsResult = {\n  [relation: string]: boolean | Where\n}\n\nexport type FieldState = {\n  /**\n   * This is used to determine if the field was added by the server.\n   * This ensures the field is not ignored by the client when merging form state.\n   * This can happen because the current local state is treated as the source of truth.\n   * See `mergeServerFormState` for more details.\n   */\n  addedByServer?: boolean\n  customComponents?: {\n    /**\n     * This is used by UI fields, as they can have arbitrary components defined if used\n     * as a vessel to bring in custom components.\n     */\n    [key: string]: React.ReactNode | React.ReactNode[] | undefined\n    AfterInput?: React.ReactNode\n    BeforeInput?: React.ReactNode\n    Description?: React.ReactNode\n    Error?: React.ReactNode\n    Field?: React.ReactNode\n    Label?: React.ReactNode\n  }\n  disableFormData?: boolean\n  errorMessage?: string\n  errorPaths?: string[]\n  /**\n   * The fieldSchema may be part of the form state if `includeSchema: true` is passed to buildFormState.\n   * This will never be in the form state of the client.\n   */\n  fieldSchema?: Field\n  filterOptions?: FilterOptionsResult\n  initialValue?: unknown\n  /**\n   * The path of the field when its custom components were last rendered.\n   * This is used to denote if a field has been rendered, and if so,\n   * what path it was rendered under last.\n   *\n   * If this path is undefined, or, if it is different\n   * from the current path of a given field, the field's components will be re-rendered.\n   */\n  lastRenderedPath?: string\n  passesCondition?: boolean\n  rows?: Row[]\n  /**\n   * The result of running `field.filterOptions` on select fields.\n   */\n  selectFilterOptions?: Option[]\n  valid?: boolean\n  validate?: Validate\n  value?: unknown\n}\n\nexport type FieldStateWithoutComponents = Omit<FieldState, 'customComponents'>\n\nexport type FormState = {\n  [path: string]: FieldState\n}\n\nexport type FormStateWithoutComponents = {\n  [path: string]: FieldStateWithoutComponents\n}\n\nexport type BuildFormStateArgs = {\n  data?: Data\n  docPermissions: SanitizedDocumentPermissions | undefined\n  docPreferences: DocumentPreferences\n  /**\n   * In case `formState` is not the top-level, document form state, this can be passed to\n   * provide the top-level form state.\n   */\n  documentFormState?: FormState\n  fallbackLocale?: false | TypedLocale\n  formState?: FormState\n  id?: number | string\n  initialBlockData?: Data\n  initialBlockFormState?: FormState\n  /*\n    If not i18n was passed, the language can be passed to init i18n\n  */\n  language?: keyof SupportedLanguages\n  locale?: string\n  /**\n   * If true, will not render RSCs and instead return a simple string in their place.\n   * This is useful for environments that lack RSC support, such as Jest.\n   * Form state can still be built, but any server components will be omitted.\n   * @default false\n   */\n  mockRSCs?: boolean\n  operation?: 'create' | 'update'\n  readOnly?: boolean\n  /*\n    If true, will render field components within their state object\n  */\n  renderAllFields?: boolean\n  req: PayloadRequest\n  returnLockStatus?: boolean\n  schemaPath: string\n  select?: SelectType\n  skipValidation?: boolean\n  updateLastEdited?: boolean\n} & (\n  | {\n      collectionSlug: string\n      // Do not type it as never. This still makes it so that either collectionSlug or globalSlug is required, but makes it easier to provide both collectionSlug and globalSlug if it's\n      // unclear which one is actually available.\n      globalSlug?: string\n    }\n  | {\n      collectionSlug?: string\n      globalSlug: string\n    }\n)\n"],"names":[],"mappings":"AAwFA,WAiDC"}
+{"version":3,"sources":["../../../src/admin/forms/Form.ts"],"sourcesContent":["import { type SupportedLanguages } from '@payloadcms/translations'\n\nimport type { SanitizedDocumentPermissions } from '../../auth/types.js'\nimport type { Field, Option, Validate } from '../../fields/config/types.js'\nimport type { TypedLocale } from '../../index.js'\nimport type { DocumentPreferences } from '../../preferences/types.js'\nimport type { PayloadRequest, SelectType, Where } from '../../types/index.js'\n\nexport type Data = {\n  [key: string]: any\n}\n\nexport type Row = {\n  blockType?: string\n  collapsed?: boolean\n  customComponents?: {\n    RowLabel?: React.ReactNode\n  }\n  id: string\n  isLoading?: boolean\n  lastRenderedPath?: string\n}\n\nexport type FilterOptionsResult = {\n  [relation: string]: boolean | Where\n}\n\nexport type FieldState = {\n  /**\n   * This is used to determine if the field was added by the server.\n   * This ensures the field is not ignored by the client when merging form state.\n   * This can happen because the current local state is treated as the source of truth.\n   * See `mergeServerFormState` for more details.\n   */\n  addedByServer?: boolean\n  customComponents?: {\n    /**\n     * This is used by UI fields, as they can have arbitrary components defined if used\n     * as a vessel to bring in custom components.\n     */\n    [key: string]: React.ReactNode | React.ReactNode[] | undefined\n    AfterInput?: React.ReactNode\n    BeforeInput?: React.ReactNode\n    Description?: React.ReactNode\n    Error?: React.ReactNode\n    Field?: React.ReactNode\n    Label?: React.ReactNode\n  }\n  disableFormData?: boolean\n  errorMessage?: string\n  errorPaths?: string[]\n  /**\n   * The fieldSchema may be part of the form state if `includeSchema: true` is passed to buildFormState.\n   * This will never be in the form state of the client.\n   */\n  fieldSchema?: Field\n  filterOptions?: FilterOptionsResult\n  initialValue?: unknown\n  /**\n   * @experimental - Note: this property is experimental and may change in the future. Use at your own discretion.\n   * Every time a field is changed locally, this flag is set to true. Prevents form state from server from overwriting local changes.\n   * After merging server form state, this flag is reset.\n   */\n  isModified?: boolean\n  /**\n   * The path of the field when its custom components were last rendered.\n   * This is used to denote if a field has been rendered, and if so,\n   * what path it was rendered under last.\n   *\n   * If this path is undefined, or, if it is different\n   * from the current path of a given field, the field's components will be re-rendered.\n   */\n  lastRenderedPath?: string\n  passesCondition?: boolean\n  rows?: Row[]\n  /**\n   * The result of running `field.filterOptions` on select fields.\n   */\n  selectFilterOptions?: Option[]\n  valid?: boolean\n  validate?: Validate\n  value?: unknown\n}\n\nexport type FieldStateWithoutComponents = Omit<FieldState, 'customComponents'>\n\nexport type FormState = {\n  [path: string]: FieldState\n}\n\nexport type FormStateWithoutComponents = {\n  [path: string]: FieldStateWithoutComponents\n}\n\nexport type BuildFormStateArgs = {\n  data?: Data\n  docPermissions: SanitizedDocumentPermissions | undefined\n  docPreferences: DocumentPreferences\n  /**\n   * In case `formState` is not the top-level, document form state, this can be passed to\n   * provide the top-level form state.\n   */\n  documentFormState?: FormState\n  fallbackLocale?: false | TypedLocale\n  formState?: FormState\n  id?: number | string\n  initialBlockData?: Data\n  initialBlockFormState?: FormState\n  /*\n    If not i18n was passed, the language can be passed to init i18n\n  */\n  language?: keyof SupportedLanguages\n  locale?: string\n  /**\n   * If true, will not render RSCs and instead return a simple string in their place.\n   * This is useful for environments that lack RSC support, such as Jest.\n   * Form state can still be built, but any server components will be omitted.\n   * @default false\n   */\n  mockRSCs?: boolean\n  operation?: 'create' | 'update'\n  readOnly?: boolean\n  /**\n   * If true, will render field components within their state object.\n   * Performance optimization: Setting to `false` ensures that only fields that have changed paths will re-render, e.g. new array rows, etc.\n   * For example, you only need to render ALL fields on initial render, not on every onChange.\n   */\n  renderAllFields?: boolean\n  req: PayloadRequest\n  returnLockStatus?: boolean\n  schemaPath: string\n  select?: SelectType\n  skipValidation?: boolean\n  updateLastEdited?: boolean\n} & (\n  | {\n      collectionSlug: string\n      // Do not type it as never. This still makes it so that either collectionSlug or globalSlug is required, but makes it easier to provide both collectionSlug and globalSlug if it's\n      // unclear which one is actually available.\n      globalSlug?: string\n    }\n  | {\n      collectionSlug?: string\n      globalSlug: string\n    }\n)\n"],"names":[],"mappings":"AA8FA,WAmDC"}

package/dist/uploads/getExternalFile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getExternalFile.d.ts","sourceRoot":"","sources":["../../src/uploads/getExternalFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAM9D,KAAK,IAAI,GAAG;IACV,IAAI,EAAE,QAAQ,CAAA;IACd,GAAG,EAAE,cAAc,CAAA;IACnB,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAA;AACD,eAAO,MAAM,eAAe,gCAAuC,IAAI,KAAG,OAAO,CAAC,IAAI,CAkErF,CAAA"}
+{"version":3,"file":"getExternalFile.d.ts","sourceRoot":"","sources":["../../src/uploads/getExternalFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAM9D,KAAK,IAAI,GAAG;IACV,IAAI,EAAE,QAAQ,CAAA;IACd,GAAG,EAAE,cAAc,CAAA;IACnB,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAA;AACD,eAAO,MAAM,eAAe,gCAAuC,IAAI,KAAG,OAAO,CAAC,IAAI,CAwErF,CAAA"}

package/dist/uploads/getExternalFile.js

@@ -3,14 +3,21 @@ import { isURLAllowed } from '../utilities/isURLAllowed.js';
 import { safeFetch } from './safeFetch.js';
 export const getExternalFile = async ({ data, req, uploadConfig })=>{
     const { filename, url } = data;
+    let trimAuthCookies = true;
     if (typeof url === 'string') {
         let fileURL = url;
         if (!url.startsWith('http')) {
+            // URL points to the same server - we can send any cookies safely to our server.
+            trimAuthCookies = false;
             const baseUrl = req.headers.get('origin') || `${req.protocol}://${req.headers.get('host')}`;
             fileURL = `${baseUrl}${url}`;
         }
+        let cookies = (req.headers.get('cookie') ?? '').split(';');
+        if (trimAuthCookies) {
+            cookies = cookies.filter((cookie)=>!cookie.trim().startsWith(req.payload.config.cookiePrefix));
+        }
         const headers = uploadConfig.externalFileHeaderFilter ? uploadConfig.externalFileHeaderFilter(Object.fromEntries(new Headers(req.headers))) : {
-            cookie: req.headers.get('cookie')?.split(';').filter((cookie)=>!cookie.trim().startsWith(req.payload.config.cookiePrefix)).join(';') || ''
+            cookie: cookies.join(';')
         };
         // Check if URL is allowed because of skipSafeFetch allowList
         const skipSafeFetch = uploadConfig.skipSafeFetch === true ? uploadConfig.skipSafeFetch : Array.isArray(uploadConfig.skipSafeFetch) && isURLAllowed(fileURL, uploadConfig.skipSafeFetch);

package/dist/uploads/getExternalFile.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/getExternalFile.ts"],"sourcesContent":["import type { PayloadRequest } from '../types/index.js'\nimport type { File, FileData, UploadConfig } from './types.js'\n\nimport { APIError } from '../errors/index.js'\nimport { isURLAllowed } from '../utilities/isURLAllowed.js'\nimport { safeFetch } from './safeFetch.js'\n\ntype Args = {\n  data: FileData\n  req: PayloadRequest\n  uploadConfig: UploadConfig\n}\nexport const getExternalFile = async ({ data, req, uploadConfig }: Args): Promise<File> => {\n  const { filename, url } = data\n\n  if (typeof url === 'string') {\n    let fileURL = url\n    if (!url.startsWith('http')) {\n      const baseUrl = req.headers.get('origin') || `${req.protocol}://${req.headers.get('host')}`\n      fileURL = `${baseUrl}${url}`\n    }\n\n    const headers = uploadConfig.externalFileHeaderFilter\n      ? uploadConfig.externalFileHeaderFilter(Object.fromEntries(new Headers(req.headers)))\n      : {\n          cookie:\n            req.headers\n              .get('cookie')\n              ?.split(';')\n              .filter((cookie) => !cookie.trim().startsWith(req.payload.config.cookiePrefix))\n              .join(';') || '',\n        }\n\n    // Check if URL is allowed because of skipSafeFetch allowList\n    const skipSafeFetch: boolean =\n      uploadConfig.skipSafeFetch === true\n        ? uploadConfig.skipSafeFetch\n        : Array.isArray(uploadConfig.skipSafeFetch) &&\n          isURLAllowed(fileURL, uploadConfig.skipSafeFetch)\n\n    // Check if URL is allowed because of pasteURL allowList\n    const isAllowedPasteUrl: boolean | undefined =\n      uploadConfig.pasteURL &&\n      uploadConfig.pasteURL.allowList &&\n      isURLAllowed(fileURL, uploadConfig.pasteURL.allowList)\n\n    let res\n    if (skipSafeFetch || isAllowedPasteUrl) {\n      // Allowed\n      res = await fetch(fileURL, {\n        credentials: 'include',\n        headers,\n        method: 'GET',\n      })\n    } else {\n      // Default\n      res = await safeFetch(fileURL, {\n        credentials: 'include',\n        headers,\n        method: 'GET',\n      })\n    }\n\n    if (!res.ok) {\n      throw new APIError(`Failed to fetch file from ${fileURL}`, res.status)\n    }\n\n    const data = await res.arrayBuffer()\n\n    return {\n      name: filename,\n      data: Buffer.from(data),\n      mimetype: res.headers.get('content-type') || undefined!,\n      size: Number(res.headers.get('content-length')) || 0,\n    }\n  }\n\n  throw new APIError('Invalid file url', 400)\n}\n"],"names":["APIError","isURLAllowed","safeFetch","getExternalFile","data","req","uploadConfig","filename","url","fileURL","startsWith","baseUrl","headers","get","protocol","externalFileHeaderFilter","Object","fromEntries","Headers","cookie","split","filter","trim","payload","config","cookiePrefix","join","skipSafeFetch","Array","isArray","isAllowedPasteUrl","pasteURL","allowList","res","fetch","credentials","method","ok","status","arrayBuffer","name","Buffer","from","mimetype","undefined","size","Number"],"mappings":"AAGA,SAASA,QAAQ,QAAQ,qBAAoB;AAC7C,SAASC,YAAY,QAAQ,+BAA8B;AAC3D,SAASC,SAAS,QAAQ,iBAAgB;AAO1C,OAAO,MAAMC,kBAAkB,OAAO,EAAEC,IAAI,EAAEC,GAAG,EAAEC,YAAY,EAAQ;IACrE,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAE,GAAGJ;IAE1B,IAAI,OAAOI,QAAQ,UAAU;QAC3B,IAAIC,UAAUD;QACd,IAAI,CAACA,IAAIE,UAAU,CAAC,SAAS;YAC3B,MAAMC,UAAUN,IAAIO,OAAO,CAACC,GAAG,CAAC,aAAa,GAAGR,IAAIS,QAAQ,CAAC,GAAG,EAAET,IAAIO,OAAO,CAACC,GAAG,CAAC,SAAS;YAC3FJ,UAAU,GAAGE,UAAUH,KAAK;QAC9B;QAEA,MAAMI,UAAUN,aAAaS,wBAAwB,GACjDT,aAAaS,wBAAwB,CAACC,OAAOC,WAAW,CAAC,IAAIC,QAAQb,IAAIO,OAAO,MAChF;YACEO,QACEd,IAAIO,OAAO,CACRC,GAAG,CAAC,WACHO,MAAM,KACPC,OAAO,CAACF,SAAW,CAACA,OAAOG,IAAI,GAAGZ,UAAU,CAACL,IAAIkB,OAAO,CAACC,MAAM,CAACC,YAAY,GAC5EC,KAAK,QAAQ;QACpB;QAEJ,6DAA6D;QAC7D,MAAMC,gBACJrB,aAAaqB,aAAa,KAAK,OAC3BrB,aAAaqB,aAAa,GAC1BC,MAAMC,OAAO,CAACvB,aAAaqB,aAAa,KACxC1B,aAAaQ,SAASH,aAAaqB,aAAa;QAEtD,wDAAwD;QACxD,MAAMG,oBACJxB,aAAayB,QAAQ,IACrBzB,aAAayB,QAAQ,CAACC,SAAS,IAC/B/B,aAAaQ,SAASH,aAAayB,QAAQ,CAACC,SAAS;QAEvD,IAAIC;QACJ,IAAIN,iBAAiBG,mBAAmB;YACtC,UAAU;YACVG,MAAM,MAAMC,MAAMzB,SAAS;gBACzB0B,aAAa;gBACbvB;gBACAwB,QAAQ;YACV;QACF,OAAO;YACL,UAAU;YACVH,MAAM,MAAM/B,UAAUO,SAAS;gBAC7B0B,aAAa;gBACbvB;gBACAwB,QAAQ;YACV;QACF;QAEA,IAAI,CAACH,IAAII,EAAE,EAAE;YACX,MAAM,IAAIrC,SAAS,CAAC,0BAA0B,EAAES,SAAS,EAAEwB,IAAIK,MAAM;QACvE;QAEA,MAAMlC,OAAO,MAAM6B,IAAIM,WAAW;QAElC,OAAO;YACLC,MAAMjC;YACNH,MAAMqC,OAAOC,IAAI,CAACtC;YAClBuC,UAAUV,IAAIrB,OAAO,CAACC,GAAG,CAAC,mBAAmB+B;YAC7CC,MAAMC,OAAOb,IAAIrB,OAAO,CAACC,GAAG,CAAC,sBAAsB;QACrD;IACF;IAEA,MAAM,IAAIb,SAAS,oBAAoB;AACzC,EAAC"}
+{"version":3,"sources":["../../src/uploads/getExternalFile.ts"],"sourcesContent":["import type { PayloadRequest } from '../types/index.js'\nimport type { File, FileData, UploadConfig } from './types.js'\n\nimport { APIError } from '../errors/index.js'\nimport { isURLAllowed } from '../utilities/isURLAllowed.js'\nimport { safeFetch } from './safeFetch.js'\n\ntype Args = {\n  data: FileData\n  req: PayloadRequest\n  uploadConfig: UploadConfig\n}\nexport const getExternalFile = async ({ data, req, uploadConfig }: Args): Promise<File> => {\n  const { filename, url } = data\n\n  let trimAuthCookies = true\n  if (typeof url === 'string') {\n    let fileURL = url\n    if (!url.startsWith('http')) {\n      // URL points to the same server - we can send any cookies safely to our server.\n      trimAuthCookies = false\n      const baseUrl = req.headers.get('origin') || `${req.protocol}://${req.headers.get('host')}`\n      fileURL = `${baseUrl}${url}`\n    }\n\n    let cookies = (req.headers.get('cookie') ?? '').split(';')\n\n    if (trimAuthCookies) {\n      cookies = cookies.filter(\n        (cookie) => !cookie.trim().startsWith(req.payload.config.cookiePrefix),\n      )\n    }\n\n    const headers = uploadConfig.externalFileHeaderFilter\n      ? uploadConfig.externalFileHeaderFilter(Object.fromEntries(new Headers(req.headers)))\n      : {\n          cookie: cookies.join(';'),\n        }\n\n    // Check if URL is allowed because of skipSafeFetch allowList\n    const skipSafeFetch: boolean =\n      uploadConfig.skipSafeFetch === true\n        ? uploadConfig.skipSafeFetch\n        : Array.isArray(uploadConfig.skipSafeFetch) &&\n          isURLAllowed(fileURL, uploadConfig.skipSafeFetch)\n\n    // Check if URL is allowed because of pasteURL allowList\n    const isAllowedPasteUrl: boolean | undefined =\n      uploadConfig.pasteURL &&\n      uploadConfig.pasteURL.allowList &&\n      isURLAllowed(fileURL, uploadConfig.pasteURL.allowList)\n\n    let res\n    if (skipSafeFetch || isAllowedPasteUrl) {\n      // Allowed\n      res = await fetch(fileURL, {\n        credentials: 'include',\n        headers,\n        method: 'GET',\n      })\n    } else {\n      // Default\n      res = await safeFetch(fileURL, {\n        credentials: 'include',\n        headers,\n        method: 'GET',\n      })\n    }\n\n    if (!res.ok) {\n      throw new APIError(`Failed to fetch file from ${fileURL}`, res.status)\n    }\n\n    const data = await res.arrayBuffer()\n\n    return {\n      name: filename,\n      data: Buffer.from(data),\n      mimetype: res.headers.get('content-type') || undefined!,\n      size: Number(res.headers.get('content-length')) || 0,\n    }\n  }\n\n  throw new APIError('Invalid file url', 400)\n}\n"],"names":["APIError","isURLAllowed","safeFetch","getExternalFile","data","req","uploadConfig","filename","url","trimAuthCookies","fileURL","startsWith","baseUrl","headers","get","protocol","cookies","split","filter","cookie","trim","payload","config","cookiePrefix","externalFileHeaderFilter","Object","fromEntries","Headers","join","skipSafeFetch","Array","isArray","isAllowedPasteUrl","pasteURL","allowList","res","fetch","credentials","method","ok","status","arrayBuffer","name","Buffer","from","mimetype","undefined","size","Number"],"mappings":"AAGA,SAASA,QAAQ,QAAQ,qBAAoB;AAC7C,SAASC,YAAY,QAAQ,+BAA8B;AAC3D,SAASC,SAAS,QAAQ,iBAAgB;AAO1C,OAAO,MAAMC,kBAAkB,OAAO,EAAEC,IAAI,EAAEC,GAAG,EAAEC,YAAY,EAAQ;IACrE,MAAM,EAAEC,QAAQ,EAAEC,GAAG,EAAE,GAAGJ;IAE1B,IAAIK,kBAAkB;IACtB,IAAI,OAAOD,QAAQ,UAAU;QAC3B,IAAIE,UAAUF;QACd,IAAI,CAACA,IAAIG,UAAU,CAAC,SAAS;YAC3B,gFAAgF;YAChFF,kBAAkB;YAClB,MAAMG,UAAUP,IAAIQ,OAAO,CAACC,GAAG,CAAC,aAAa,GAAGT,IAAIU,QAAQ,CAAC,GAAG,EAAEV,IAAIQ,OAAO,CAACC,GAAG,CAAC,SAAS;YAC3FJ,UAAU,GAAGE,UAAUJ,KAAK;QAC9B;QAEA,IAAIQ,UAAU,AAACX,CAAAA,IAAIQ,OAAO,CAACC,GAAG,CAAC,aAAa,EAAC,EAAGG,KAAK,CAAC;QAEtD,IAAIR,iBAAiB;YACnBO,UAAUA,QAAQE,MAAM,CACtB,CAACC,SAAW,CAACA,OAAOC,IAAI,GAAGT,UAAU,CAACN,IAAIgB,OAAO,CAACC,MAAM,CAACC,YAAY;QAEzE;QAEA,MAAMV,UAAUP,aAAakB,wBAAwB,GACjDlB,aAAakB,wBAAwB,CAACC,OAAOC,WAAW,CAAC,IAAIC,QAAQtB,IAAIQ,OAAO,MAChF;YACEM,QAAQH,QAAQY,IAAI,CAAC;QACvB;QAEJ,6DAA6D;QAC7D,MAAMC,gBACJvB,aAAauB,aAAa,KAAK,OAC3BvB,aAAauB,aAAa,GAC1BC,MAAMC,OAAO,CAACzB,aAAauB,aAAa,KACxC5B,aAAaS,SAASJ,aAAauB,aAAa;QAEtD,wDAAwD;QACxD,MAAMG,oBACJ1B,aAAa2B,QAAQ,IACrB3B,aAAa2B,QAAQ,CAACC,SAAS,IAC/BjC,aAAaS,SAASJ,aAAa2B,QAAQ,CAACC,SAAS;QAEvD,IAAIC;QACJ,IAAIN,iBAAiBG,mBAAmB;YACtC,UAAU;YACVG,MAAM,MAAMC,MAAM1B,SAAS;gBACzB2B,aAAa;gBACbxB;gBACAyB,QAAQ;YACV;QACF,OAAO;YACL,UAAU;YACVH,MAAM,MAAMjC,UAAUQ,SAAS;gBAC7B2B,aAAa;gBACbxB;gBACAyB,QAAQ;YACV;QACF;QAEA,IAAI,CAACH,IAAII,EAAE,EAAE;YACX,MAAM,IAAIvC,SAAS,CAAC,0BAA0B,EAAEU,SAAS,EAAEyB,IAAIK,MAAM;QACvE;QAEA,MAAMpC,OAAO,MAAM+B,IAAIM,WAAW;QAElC,OAAO;YACLC,MAAMnC;YACNH,MAAMuC,OAAOC,IAAI,CAACxC;YAClByC,UAAUV,IAAItB,OAAO,CAACC,GAAG,CAAC,mBAAmBgC;YAC7CC,MAAMC,OAAOb,IAAItB,OAAO,CAACC,GAAG,CAAC,sBAAsB;QACrD;IACF;IAEA,MAAM,IAAId,SAAS,oBAAoB;AACzC,EAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "payload",
-  "version": "3.51.0",
+  "version": "3.52.0-canary.1",
   "description": "Node, React, Headless CMS and Application Framework built on Next.js",
   "keywords": [
     "admin panel",
@@ -101,7 +101,7 @@
     "undici": "7.10.0",
     "uuid": "10.0.0",
     "ws": "^8.16.0",
-    "@payloadcms/translations": "3.51.0"
+    "@payloadcms/translations": "3.52.0-canary.1"
   },
   "devDependencies": {
     "@hyrious/esbuild-plugin-commonjs": "0.2.6",