payload 3.89.0-internal.95c9cba → 3.90.0

package/dist/uploads/types.d.ts

@@ -130,6 +130,10 @@ type Admin = {
         controls?: PayloadComponent[];
     };
 };
+export type ExternalFileHeaderFilterContext = {
+    isSameOrigin: boolean;
+    url: string;
+};
 export type UploadConfig = {
     /**
      * The adapter name to use for uploads. Used for storage adapter telemetry.
@@ -187,8 +191,10 @@ export type UploadConfig = {
      */
     displayPreview?: boolean;
     /**
-     *
-     * Accepts existing headers and returns the headers after filtering or modifying.
+     * Accepts existing headers and returns the headers after filtering or modifying. The optional
+     * context identifies the destination for the current request, including each redirect hop.
+     * `isSameOrigin` is true only when that destination matches a trusted origin established for a
+     * relative file URL.
      * If using this option, you should handle the removal of any sensitive cookies
      * (like payload-prefixed cookies) to prevent leaking session information to external
      * services. By default, Payload automatically filters out payload-prefixed cookies
@@ -197,7 +203,7 @@ export type UploadConfig = {
      * Useful for adding custom headers to fetch from external providers.
      * @default undefined
      */
-    externalFileHeaderFilter?: (headers: Record<string, string>) => Record<string, string>;
+    externalFileHeaderFilter?: (headers: Record<string, string>, context?: ExternalFileHeaderFilterContext) => Record<string, string>;
     /**
      * Field slugs to use for a compound index instead of the default filename index.
      */
@@ -268,6 +274,8 @@ export type UploadConfig = {
     pasteURL?: {
         allowList: AllowList;
     } | false;
+    /** @internal Require a server-issued receipt before invoking client-upload handlers. */
+    requiresClientUploadReceipt?: boolean;
     /**
      * Sharp resize options for the original image.
      * @link https://sharp.pixelplumbing.com/api-resize#resize

package/dist/uploads/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/uploads/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,MAAM,EAAE,IAAI,GAAG,MAAM,CAAA;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACnB,KAAK,EAAE,IAAI,GAAG,MAAM,CAAA;CACrB,CAAA;AAGD;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,IAAI,GAAG,MAAM,CAAA;CACnB,GAAG,QAAQ,CAAA;AAEZ,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,OAAO,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAC3C,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,KAAK,MAAM,CAAA;AAEZ,MAAM,MAAM,SAAS,GAAG;IACtB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE;QACN;;;;WAIG;QACH,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAC5B,CAAA;IACD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAA;CACzD,GAAG,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAA;AAE7C,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAAK,KAAK,GAAG,IAAI,GAAG,MAAM,CAAA;AAEjG,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAC,CAAA;AAEF,KAAK,KAAK,GAAG;IACX,UAAU,CAAC,EAAE;QACX;;WAEG;QACH,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAC9B,CAAA;CACF,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAA;IACb;;;;QAII;IACJ,cAAc,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC3C;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAA;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;;;;OAUG;IACH,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtF;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;OAEG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,CACV,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;QACJ,GAAG,EAAE,UAAU,CAAA;QACf,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,MAAM,EAAE;YACN,mBAAmB,CAAC,EAAE,OAAO,CAAA;YAC7B,UAAU,EAAE,MAAM,CAAA;YAClB,QAAQ,EAAE,MAAM,CAAA;YAChB,MAAM,CAAC,EAAE,MAAM,CAAA;SAChB,CAAA;KACF,KACE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAA;IAC3D;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAA;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,GAAG,IAAI,CAAA;IAC7E;;;;;;OAMG;IACH,QAAQ,CAAC,EACL;QACE,SAAS,EAAE,SAAS,CAAA;KACrB,GACD,KAAK,CAAA;IACT;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,GAAG,OAAO,CAAA;IACnC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B,CAAA;AACD,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,IAAI,CAAA;IACV,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;CACrC,GAAG,YAAY,CAAA;AAEhB,MAAM,MAAM,IAAI,GAAG;IACjB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,UAAU,GAClB;IACE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;CACb,GACD;IACE;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAEL,KAAK,IAAI,GAAG;IACV,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,GAAG,GAAG,IAAI,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/uploads/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,MAAM,EAAE,IAAI,GAAG,MAAM,CAAA;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IACnB,KAAK,EAAE,IAAI,GAAG,MAAM,CAAA;CACrB,CAAA;AAGD;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,IAAI,GAAG,MAAM,CAAA;CACnB,GAAG,QAAQ,CAAA;AAEZ,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,OAAO,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAC3C,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,KAAK,MAAM,CAAA;AAEZ,MAAM,MAAM,SAAS,GAAG;IACtB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE;QACN;;;;WAIG;QACH,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;QAC3B;;;;WAIG;QACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAC5B,CAAA;IACD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAA;CACzD,GAAG,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAA;AAE7C,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAAK,KAAK,GAAG,IAAI,GAAG,MAAM,CAAA;AAEjG,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAC,CAAA;AAEF,KAAK,KAAK,GAAG;IACX,UAAU,CAAC,EAAE;QACX;;WAEG;QACH,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAC9B,CAAA;CACF,CAAA;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC5C,YAAY,EAAE,OAAO,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAA;IACb;;;;QAII;IACJ,cAAc,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC3C;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAA;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;;;;;;OAYG;IACH,wBAAwB,CAAC,EAAE,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,CAAC,EAAE,+BAA+B,KACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;OAEG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,CACV,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;QACJ,GAAG,EAAE,UAAU,CAAA;QACf,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,MAAM,EAAE;YACN,mBAAmB,CAAC,EAAE,OAAO,CAAA;YAC7B,UAAU,EAAE,MAAM,CAAA;YAClB,QAAQ,EAAE,MAAM,CAAA;YAChB,MAAM,CAAC,EAAE,MAAM,CAAA;SAChB,CAAA;KACF,KACE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAA;IAC3D;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAA;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,GAAG,IAAI,CAAA;IAC7E;;;;;;OAMG;IACH,QAAQ,CAAC,EACL;QACE,SAAS,EAAE,SAAS,CAAA;KACrB,GACD,KAAK,CAAA;IACT,wFAAwF;IACxF,2BAA2B,CAAC,EAAE,OAAO,CAAA;IACrC;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,GAAG,OAAO,CAAA;IACnC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B,CAAA;AACD,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,IAAI,CAAA;IACV,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;CACrC,GAAG,YAAY,CAAA;AAEhB,MAAM,MAAM,IAAI,GAAG;IACjB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,UAAU,GAClB;IACE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;CACb,GACD;IACE;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAEL,KAAK,IAAI,GAAG;IACV,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,GAAG,GAAG,IAAI,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA"}

package/dist/uploads/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/types.ts"],"sourcesContent":["import type { ResizeOptions, Sharp, SharpOptions } from 'sharp'\n\nimport type { CollectionConfig, TypeWithID } from '../collections/config/types.js'\nimport type { PayloadComponent } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\nimport type { WithMetadata } from './optionallyAppendMetadata.js'\n\nexport type FileSize = {\n  filename: null | string\n  filesize: null | number\n  height: null | number\n  mimeType: null | string\n  url?: null | string // TODO V4: make non-optional\n  width: null | number\n}\n\n// TODO: deprecate in Payload v4.\n/**\n * FileSizeImproved is a more precise type, and will replace FileSize in Payload v4.\n * This type is for internal use only as it will be deprecated in the future.\n * @internal\n */\nexport type FileSizeImproved = {\n  url: null | string\n} & FileSize\n\nexport type FileSizes = {\n  [size: string]: FileSize\n}\n\nexport type FileData = {\n  filename: string\n  filesize: number\n  focalX?: number\n  focalY?: number\n  height: number\n  mimeType: string\n  sizes: FileSizes\n  tempFilePath?: string\n  url?: string\n  width: number\n}\n\nexport type ProbedImageSize = {\n  height: number\n  width: number\n}\n\n/**\n * Params sent to the sharp `toFormat()` function\n * @link https://sharp.pixelplumbing.com/api-output#toformat\n */\nexport type ImageUploadFormatOptions = {\n  format: Parameters<Sharp['toFormat']>[0]\n  options?: Parameters<Sharp['toFormat']>[1]\n}\n\n/**\n * Params sent to the sharp trim() function\n * @link https://sharp.pixelplumbing.com/api-resize#trim\n */\nexport type ImageUploadTrimOptions = Parameters<Sharp['trim']>[0]\n\nexport type GenerateImageName = (args: {\n  extension: string\n  height: number\n  originalName: string\n  sizeName: string\n  width: number\n}) => string\n\nexport type ImageSize = {\n  /**\n   * Admin UI options that control how this image size appears in list views.\n   *\n   * NOTE: In Payload v4, these options (`disableGroupBy`, `disableListColumn` and `disableListFilter`)\n   * should default to `true` so image size subfields are hidden from list columns\n   * and filters by default, reducing noise in the admin UI.\n   */\n  admin?: {\n    /**\n     * If set to true, this image size will not be available\n     * as a selectable groupBy option in the collection list view.\n     * @default false\n     */\n    disableGroupBy?: boolean\n    /**\n     * If set to true, this image size will not be available\n     * as a selectable column in the collection list view.\n     * @default false\n     */\n    disableListColumn?: boolean\n    /**\n     * If set to true, this image size will not be available\n     * as a filter option in the collection list view.\n     * @default false\n     */\n    disableListFilter?: boolean\n  }\n  /**\n   * @deprecated prefer position\n   */\n  crop?: string // comes from sharp package\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Generate a custom name for the file of this image size.\n   */\n  generateImageName?: GenerateImageName\n  name: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * When an uploaded image is smaller than the defined image size, we have 3 options:\n   *\n   * `undefined | false | true`\n   *\n   * 1. `undefined` [default]: uploading images with smaller width AND height than the image size will return null\n   * 2. `false`: always enlarge images to the image size\n   * 3. `true`: if the image is smaller than the image size, return the original image\n   */\n  withoutEnlargement?: ResizeOptions['withoutEnlargement']\n} & Omit<ResizeOptions, 'withoutEnlargement'>\n\nexport type GetAdminThumbnail = (args: { doc: Record<string, unknown> }) => false | null | string\n\nexport type AllowList = Array<{\n  hostname: string\n  pathname?: string\n  port?: string\n  protocol?: 'http' | 'https'\n  search?: string\n}>\n\nexport type FileAllowList = Array<{\n  extensions: string[]\n  mimeType: string\n}>\n\ntype Admin = {\n  components?: {\n    /**\n     * The Controls component to extend the upload controls in the admin panel.\n     */\n    controls?: PayloadComponent[]\n  }\n}\n\nexport type UploadConfig = {\n  /**\n   * The adapter name to use for uploads. Used for storage adapter telemetry.\n   * @default undefined\n   */\n  adapter?: string\n  /**\n   * The admin configuration for the upload field.\n   */\n  admin?: Admin\n  /**\n   * Represents an admin thumbnail, which can be either a React component or a string.\n   * - If a string, it should be one of the image size names.\n   * - A function that generates a fully qualified URL for the thumbnail, receives the doc as the only argument.\n   **/\n  adminThumbnail?: GetAdminThumbnail | string\n  /**\n   * Allow restricted file types known to be problematic.\n   * - If set to `true`, it will allow all file types.\n   * - If set to `false`, it will not allow file types and extensions known to be problematic.\n   * - This setting is overriden by the `mimeTypes` option.\n   * @default false\n   */\n  allowRestrictedFileTypes?: boolean\n  /**\n   * Enables bulk upload of files from the list view.\n   * @default true\n   */\n  bulkUpload?: boolean\n  /**\n   * Appends a cache tag to the image URL when fetching the thumbnail in the admin panel. It may be desirable to disable this when hosting via CDNs with strict parameters.\n   *\n   * @default true\n   */\n  cacheTags?: boolean\n  /**\n   * Sharp constructor options to be passed to the uploaded file.\n   * @link https://sharp.pixelplumbing.com/api-constructor/#sharp\n   */\n  constructorOptions?: SharpOptions\n  /**\n   * Enables cropping of images.\n   * @default true\n   */\n  crop?: boolean\n  /**\n   * Disable the ability to save files to disk.\n   * @default false\n   */\n  disableLocalStorage?: boolean\n  /**\n   * Enable displaying preview of the uploaded file in Upload fields related to this Collection.\n   * Can be locally overridden by `displayPreview` option in Upload field.\n   * @default false\n   */\n  displayPreview?: boolean\n  /**\n   *\n   * Accepts existing headers and returns the headers after filtering or modifying.\n   * If using this option, you should handle the removal of any sensitive cookies\n   * (like payload-prefixed cookies) to prevent leaking session information to external\n   * services. By default, Payload automatically filters out payload-prefixed cookies\n   * when this option is NOT defined.\n   *\n   * Useful for adding custom headers to fetch from external providers.\n   * @default undefined\n   */\n  externalFileHeaderFilter?: (headers: Record<string, string>) => Record<string, string>\n  /**\n   * Field slugs to use for a compound index instead of the default filename index.\n   */\n  filenameCompoundIndex?: string[]\n  /**\n   * Require files to be uploaded when creating a document.\n   * @default true\n   */\n  filesRequiredOnCreate?: boolean\n  /**\n   * Enables focal point positioning for image manipulation.\n   * @default true\n   */\n  focalPoint?: boolean\n  /**\n   * Format options for the uploaded file. Formatting image sizes needs to be done within each formatOptions individually.\n   */\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Custom handlers to run when a file is fetched.\n   *\n   * - If a handler returns a Response, the response will be sent to the client and no further handlers will be run.\n   * - If a handler returns null, the next handler will be run.\n   * - If no handlers return a response the file will be returned by default.\n   *\n   * @link https://sharp.pixelplumbing.com/api-output/#toformat\n   * @default undefined\n   */\n  handlers?: ((\n    req: PayloadRequest,\n    args: {\n      doc: TypeWithID\n      headers?: Headers\n      params: {\n        clientUploadContext?: unknown\n        collection: string\n        filename: string\n        prefix?: string\n      }\n    },\n  ) => Promise<Response> | Promise<void> | Response | void)[]\n  /**\n   * Set to `true` to prevent the admin UI from showing file inputs during document creation, useful for programmatic file generation.\n   */\n  hideFileInputOnCreate?: boolean\n  /**\n   * Set to `true` to prevent the admin UI having a way to remove an existing file while editing.\n   */\n  hideRemoveFile?: boolean\n  imageSizes?: ImageSize[]\n  /**\n   * Restrict mimeTypes in the file picker. Array of valid mime types or mimetype wildcards\n   * @example ['image/*', 'application/pdf']\n   * @default undefined\n   */\n  mimeTypes?: string[]\n  /**\n   * Ability to modify the response headers fetching a file.\n   * @default undefined\n   */\n  modifyResponseHeaders?: ({ headers }: { headers: Headers }) => Headers | void\n  /**\n   * Controls the behavior of pasting/uploading files from URLs.\n   * If set to `false`, fetching from remote URLs is disabled.\n   * If an `allowList` is provided, server-side fetching will be enabled for specified URLs.\n   *\n   * @default true (client-side fetching enabled)\n   */\n  pasteURL?:\n    | {\n        allowList: AllowList\n      }\n    | false\n  /**\n   * Sharp resize options for the original image.\n   * @link https://sharp.pixelplumbing.com/api-resize#resize\n   * @default undefined\n   */\n  resizeOptions?: ResizeOptions\n  /**\n   *  Skip safe fetch when using server-side fetching for external files from these URLs.\n   *  @default false\n   */\n  skipSafeFetch?: AllowList | boolean\n  /**\n   * The directory to serve static files from. Defaults to collection slug.\n   * @default undefined\n   */\n  staticDir?: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * Optionally append metadata to the image during processing.\n   *\n   * Can be a boolean or a function.\n   *\n   * If true, metadata will be appended to the image.\n   * If false, no metadata will be appended.\n   * If a function, it will receive an object containing the metadata and should return a boolean indicating whether to append the metadata.\n   * @default false\n   */\n  withMetadata?: WithMetadata\n}\nexport type checkFileRestrictionsParams = {\n  collection: CollectionConfig\n  file: File\n  req: PayloadRequest\n}\n\nexport type SanitizedUploadConfig = {\n  staticDir: UploadConfig['staticDir']\n} & UploadConfig\n\nexport type File = {\n  /**\n   * The buffer of the file.\n   */\n  data: Buffer\n  /**\n   * The mimetype of the file.\n   */\n  mimetype: string\n  /**\n   * The name of the file.\n   */\n  name: string\n  /**\n   * The size of the file in bytes.\n   */\n  size: number\n  /**\n   * Path to the temp file on disk when useTempFiles is enabled. In this case file.data will be an empty buffer.\n   */\n  tempFilePath?: string\n}\n\nexport type FileToSave =\n  | {\n      /**\n       * The buffer of the file.\n       */\n      buffer: Buffer\n      /**\n       * The path to save the file.\n       */\n      path: string\n    }\n  | {\n      /**\n       * The path to save the file.\n       */\n      path: string\n      /**\n       * An existing file on disk to copy to `path`, instead of `buffer` - avoids loading a file\n       * that's already on disk (e.g. a temp file) fully into memory just to write it back out.\n       */\n      sourcePath: string\n    }\n\ntype Crop = {\n  height: number\n  unit: '%' | 'px'\n  width: number\n  x: number\n  y: number\n}\n\nexport type FocalPoint = {\n  x: number\n  y: number\n}\n\nexport type UploadEdits = {\n  crop?: Crop\n  focalPoint?: FocalPoint\n  heightInPixels?: number\n  widthInPixels?: number\n}\n"],"names":[],"mappings":"AAiYA,WAKC"}
+{"version":3,"sources":["../../src/uploads/types.ts"],"sourcesContent":["import type { ResizeOptions, Sharp, SharpOptions } from 'sharp'\n\nimport type { CollectionConfig, TypeWithID } from '../collections/config/types.js'\nimport type { PayloadComponent } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\nimport type { WithMetadata } from './optionallyAppendMetadata.js'\n\nexport type FileSize = {\n  filename: null | string\n  filesize: null | number\n  height: null | number\n  mimeType: null | string\n  url?: null | string // TODO V4: make non-optional\n  width: null | number\n}\n\n// TODO: deprecate in Payload v4.\n/**\n * FileSizeImproved is a more precise type, and will replace FileSize in Payload v4.\n * This type is for internal use only as it will be deprecated in the future.\n * @internal\n */\nexport type FileSizeImproved = {\n  url: null | string\n} & FileSize\n\nexport type FileSizes = {\n  [size: string]: FileSize\n}\n\nexport type FileData = {\n  filename: string\n  filesize: number\n  focalX?: number\n  focalY?: number\n  height: number\n  mimeType: string\n  sizes: FileSizes\n  tempFilePath?: string\n  url?: string\n  width: number\n}\n\nexport type ProbedImageSize = {\n  height: number\n  width: number\n}\n\n/**\n * Params sent to the sharp `toFormat()` function\n * @link https://sharp.pixelplumbing.com/api-output#toformat\n */\nexport type ImageUploadFormatOptions = {\n  format: Parameters<Sharp['toFormat']>[0]\n  options?: Parameters<Sharp['toFormat']>[1]\n}\n\n/**\n * Params sent to the sharp trim() function\n * @link https://sharp.pixelplumbing.com/api-resize#trim\n */\nexport type ImageUploadTrimOptions = Parameters<Sharp['trim']>[0]\n\nexport type GenerateImageName = (args: {\n  extension: string\n  height: number\n  originalName: string\n  sizeName: string\n  width: number\n}) => string\n\nexport type ImageSize = {\n  /**\n   * Admin UI options that control how this image size appears in list views.\n   *\n   * NOTE: In Payload v4, these options (`disableGroupBy`, `disableListColumn` and `disableListFilter`)\n   * should default to `true` so image size subfields are hidden from list columns\n   * and filters by default, reducing noise in the admin UI.\n   */\n  admin?: {\n    /**\n     * If set to true, this image size will not be available\n     * as a selectable groupBy option in the collection list view.\n     * @default false\n     */\n    disableGroupBy?: boolean\n    /**\n     * If set to true, this image size will not be available\n     * as a selectable column in the collection list view.\n     * @default false\n     */\n    disableListColumn?: boolean\n    /**\n     * If set to true, this image size will not be available\n     * as a filter option in the collection list view.\n     * @default false\n     */\n    disableListFilter?: boolean\n  }\n  /**\n   * @deprecated prefer position\n   */\n  crop?: string // comes from sharp package\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Generate a custom name for the file of this image size.\n   */\n  generateImageName?: GenerateImageName\n  name: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * When an uploaded image is smaller than the defined image size, we have 3 options:\n   *\n   * `undefined | false | true`\n   *\n   * 1. `undefined` [default]: uploading images with smaller width AND height than the image size will return null\n   * 2. `false`: always enlarge images to the image size\n   * 3. `true`: if the image is smaller than the image size, return the original image\n   */\n  withoutEnlargement?: ResizeOptions['withoutEnlargement']\n} & Omit<ResizeOptions, 'withoutEnlargement'>\n\nexport type GetAdminThumbnail = (args: { doc: Record<string, unknown> }) => false | null | string\n\nexport type AllowList = Array<{\n  hostname: string\n  pathname?: string\n  port?: string\n  protocol?: 'http' | 'https'\n  search?: string\n}>\n\nexport type FileAllowList = Array<{\n  extensions: string[]\n  mimeType: string\n}>\n\ntype Admin = {\n  components?: {\n    /**\n     * The Controls component to extend the upload controls in the admin panel.\n     */\n    controls?: PayloadComponent[]\n  }\n}\n\nexport type ExternalFileHeaderFilterContext = {\n  isSameOrigin: boolean\n  url: string\n}\n\nexport type UploadConfig = {\n  /**\n   * The adapter name to use for uploads. Used for storage adapter telemetry.\n   * @default undefined\n   */\n  adapter?: string\n  /**\n   * The admin configuration for the upload field.\n   */\n  admin?: Admin\n  /**\n   * Represents an admin thumbnail, which can be either a React component or a string.\n   * - If a string, it should be one of the image size names.\n   * - A function that generates a fully qualified URL for the thumbnail, receives the doc as the only argument.\n   **/\n  adminThumbnail?: GetAdminThumbnail | string\n  /**\n   * Allow restricted file types known to be problematic.\n   * - If set to `true`, it will allow all file types.\n   * - If set to `false`, it will not allow file types and extensions known to be problematic.\n   * - This setting is overriden by the `mimeTypes` option.\n   * @default false\n   */\n  allowRestrictedFileTypes?: boolean\n  /**\n   * Enables bulk upload of files from the list view.\n   * @default true\n   */\n  bulkUpload?: boolean\n  /**\n   * Appends a cache tag to the image URL when fetching the thumbnail in the admin panel. It may be desirable to disable this when hosting via CDNs with strict parameters.\n   *\n   * @default true\n   */\n  cacheTags?: boolean\n  /**\n   * Sharp constructor options to be passed to the uploaded file.\n   * @link https://sharp.pixelplumbing.com/api-constructor/#sharp\n   */\n  constructorOptions?: SharpOptions\n  /**\n   * Enables cropping of images.\n   * @default true\n   */\n  crop?: boolean\n  /**\n   * Disable the ability to save files to disk.\n   * @default false\n   */\n  disableLocalStorage?: boolean\n  /**\n   * Enable displaying preview of the uploaded file in Upload fields related to this Collection.\n   * Can be locally overridden by `displayPreview` option in Upload field.\n   * @default false\n   */\n  displayPreview?: boolean\n  /**\n   * Accepts existing headers and returns the headers after filtering or modifying. The optional\n   * context identifies the destination for the current request, including each redirect hop.\n   * `isSameOrigin` is true only when that destination matches a trusted origin established for a\n   * relative file URL.\n   * If using this option, you should handle the removal of any sensitive cookies\n   * (like payload-prefixed cookies) to prevent leaking session information to external\n   * services. By default, Payload automatically filters out payload-prefixed cookies\n   * when this option is NOT defined.\n   *\n   * Useful for adding custom headers to fetch from external providers.\n   * @default undefined\n   */\n  externalFileHeaderFilter?: (\n    headers: Record<string, string>,\n    context?: ExternalFileHeaderFilterContext,\n  ) => Record<string, string>\n  /**\n   * Field slugs to use for a compound index instead of the default filename index.\n   */\n  filenameCompoundIndex?: string[]\n  /**\n   * Require files to be uploaded when creating a document.\n   * @default true\n   */\n  filesRequiredOnCreate?: boolean\n  /**\n   * Enables focal point positioning for image manipulation.\n   * @default true\n   */\n  focalPoint?: boolean\n  /**\n   * Format options for the uploaded file. Formatting image sizes needs to be done within each formatOptions individually.\n   */\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Custom handlers to run when a file is fetched.\n   *\n   * - If a handler returns a Response, the response will be sent to the client and no further handlers will be run.\n   * - If a handler returns null, the next handler will be run.\n   * - If no handlers return a response the file will be returned by default.\n   *\n   * @link https://sharp.pixelplumbing.com/api-output/#toformat\n   * @default undefined\n   */\n  handlers?: ((\n    req: PayloadRequest,\n    args: {\n      doc: TypeWithID\n      headers?: Headers\n      params: {\n        clientUploadContext?: unknown\n        collection: string\n        filename: string\n        prefix?: string\n      }\n    },\n  ) => Promise<Response> | Promise<void> | Response | void)[]\n  /**\n   * Set to `true` to prevent the admin UI from showing file inputs during document creation, useful for programmatic file generation.\n   */\n  hideFileInputOnCreate?: boolean\n  /**\n   * Set to `true` to prevent the admin UI having a way to remove an existing file while editing.\n   */\n  hideRemoveFile?: boolean\n  imageSizes?: ImageSize[]\n  /**\n   * Restrict mimeTypes in the file picker. Array of valid mime types or mimetype wildcards\n   * @example ['image/*', 'application/pdf']\n   * @default undefined\n   */\n  mimeTypes?: string[]\n  /**\n   * Ability to modify the response headers fetching a file.\n   * @default undefined\n   */\n  modifyResponseHeaders?: ({ headers }: { headers: Headers }) => Headers | void\n  /**\n   * Controls the behavior of pasting/uploading files from URLs.\n   * If set to `false`, fetching from remote URLs is disabled.\n   * If an `allowList` is provided, server-side fetching will be enabled for specified URLs.\n   *\n   * @default true (client-side fetching enabled)\n   */\n  pasteURL?:\n    | {\n        allowList: AllowList\n      }\n    | false\n  /** @internal Require a server-issued receipt before invoking client-upload handlers. */\n  requiresClientUploadReceipt?: boolean\n  /**\n   * Sharp resize options for the original image.\n   * @link https://sharp.pixelplumbing.com/api-resize#resize\n   * @default undefined\n   */\n  resizeOptions?: ResizeOptions\n  /**\n   *  Skip safe fetch when using server-side fetching for external files from these URLs.\n   *  @default false\n   */\n  skipSafeFetch?: AllowList | boolean\n  /**\n   * The directory to serve static files from. Defaults to collection slug.\n   * @default undefined\n   */\n  staticDir?: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * Optionally append metadata to the image during processing.\n   *\n   * Can be a boolean or a function.\n   *\n   * If true, metadata will be appended to the image.\n   * If false, no metadata will be appended.\n   * If a function, it will receive an object containing the metadata and should return a boolean indicating whether to append the metadata.\n   * @default false\n   */\n  withMetadata?: WithMetadata\n}\nexport type checkFileRestrictionsParams = {\n  collection: CollectionConfig\n  file: File\n  req: PayloadRequest\n}\n\nexport type SanitizedUploadConfig = {\n  staticDir: UploadConfig['staticDir']\n} & UploadConfig\n\nexport type File = {\n  /**\n   * The buffer of the file.\n   */\n  data: Buffer\n  /**\n   * The mimetype of the file.\n   */\n  mimetype: string\n  /**\n   * The name of the file.\n   */\n  name: string\n  /**\n   * The size of the file in bytes.\n   */\n  size: number\n  /**\n   * Path to the temp file on disk when useTempFiles is enabled. In this case file.data will be an empty buffer.\n   */\n  tempFilePath?: string\n}\n\nexport type FileToSave =\n  | {\n      /**\n       * The buffer of the file.\n       */\n      buffer: Buffer\n      /**\n       * The path to save the file.\n       */\n      path: string\n    }\n  | {\n      /**\n       * The path to save the file.\n       */\n      path: string\n      /**\n       * An existing file on disk to copy to `path`, instead of `buffer` - avoids loading a file\n       * that's already on disk (e.g. a temp file) fully into memory just to write it back out.\n       */\n      sourcePath: string\n    }\n\ntype Crop = {\n  height: number\n  unit: '%' | 'px'\n  width: number\n  x: number\n  y: number\n}\n\nexport type FocalPoint = {\n  x: number\n  y: number\n}\n\nexport type UploadEdits = {\n  crop?: Crop\n  focalPoint?: FocalPoint\n  heightInPixels?: number\n  widthInPixels?: number\n}\n"],"names":[],"mappings":"AA6YA,WAKC"}

package/dist/uploads/unlinkClientUploadTempFile.d.ts

@@ -0,0 +1,20 @@
+import type { PayloadRequest } from '../types/index.js';
+type Args = {
+    /**
+     * A path the caller has already removed, so the redundant unlink is skipped.
+     */
+    alreadyUnlinkedPath?: string;
+    req: PayloadRequest;
+};
+/**
+ * Removes the temp file a client upload materialized, if it is still on disk. Logs rather than
+ * throws, so cleanup can never replace a response or mask the error that a caller is handling.
+ *
+ * The path is tracked on `req.context` rather than read back off `req.file` because the file
+ * can outlive both: plugin-cloud-storage's afterChange hook clears `req.file` before cleanup
+ * runs, and the request parser materializes the file for whatever `collectionSlug` the multipart
+ * field names, which does not have to be a collection the endpoint writes a document to.
+ */
+export declare const unlinkClientUploadTempFile: (args: Args) => Promise<void>;
+export {};
+//# sourceMappingURL=unlinkClientUploadTempFile.d.ts.map

package/dist/uploads/unlinkClientUploadTempFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unlinkClientUploadTempFile.d.ts","sourceRoot":"","sources":["../../src/uploads/unlinkClientUploadTempFile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIvD,KAAK,IAAI,GAAG;IACV;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAqBpE,CAAA"}

package/dist/uploads/unlinkClientUploadTempFile.js

@@ -0,0 +1,30 @@
+import fs from 'fs/promises';
+import { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js';
+/**
+ * Removes the temp file a client upload materialized, if it is still on disk. Logs rather than
+ * throws, so cleanup can never replace a response or mask the error that a caller is handling.
+ *
+ * The path is tracked on `req.context` rather than read back off `req.file` because the file
+ * can outlive both: plugin-cloud-storage's afterChange hook clears `req.file` before cleanup
+ * runs, and the request parser materializes the file for whatever `collectionSlug` the multipart
+ * field names, which does not have to be a collection the endpoint writes a document to.
+ */ export const unlinkClientUploadTempFile = async ({ alreadyUnlinkedPath, req })=>{
+    const tempFilePath = req.context?.[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY];
+    if (typeof tempFilePath !== 'string') {
+        return;
+    }
+    delete req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY];
+    if (tempFilePath === alreadyUnlinkedPath) {
+        return;
+    }
+    try {
+        await fs.unlink(tempFilePath);
+    } catch (error) {
+        req.payload.logger.error({
+            err: error,
+            msg: 'Failed to remove client upload temp file'
+        });
+    }
+};
+
+//# sourceMappingURL=unlinkClientUploadTempFile.js.map

package/dist/uploads/unlinkClientUploadTempFile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/unlinkClientUploadTempFile.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js'\n\ntype Args = {\n  /**\n   * A path the caller has already removed, so the redundant unlink is skipped.\n   */\n  alreadyUnlinkedPath?: string\n  req: PayloadRequest\n}\n\n/**\n * Removes the temp file a client upload materialized, if it is still on disk. Logs rather than\n * throws, so cleanup can never replace a response or mask the error that a caller is handling.\n *\n * The path is tracked on `req.context` rather than read back off `req.file` because the file\n * can outlive both: plugin-cloud-storage's afterChange hook clears `req.file` before cleanup\n * runs, and the request parser materializes the file for whatever `collectionSlug` the multipart\n * field names, which does not have to be a collection the endpoint writes a document to.\n */\nexport const unlinkClientUploadTempFile: (args: Args) => Promise<void> = async ({\n  alreadyUnlinkedPath,\n  req,\n}) => {\n  const tempFilePath = req.context?.[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]\n\n  if (typeof tempFilePath !== 'string') {\n    return\n  }\n\n  delete req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]\n\n  if (tempFilePath === alreadyUnlinkedPath) {\n    return\n  }\n\n  try {\n    await fs.unlink(tempFilePath)\n  } catch (error) {\n    req.payload.logger.error({ err: error, msg: 'Failed to remove client upload temp file' })\n  }\n}\n"],"names":["fs","CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY","unlinkClientUploadTempFile","alreadyUnlinkedPath","req","tempFilePath","context","unlink","error","payload","logger","err","msg"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAI5B,SAASC,wCAAwC,QAAQ,+BAA8B;AAUvF;;;;;;;;CAQC,GACD,OAAO,MAAMC,6BAA4D,OAAO,EAC9EC,mBAAmB,EACnBC,GAAG,EACJ;IACC,MAAMC,eAAeD,IAAIE,OAAO,EAAE,CAACL,yCAAyC;IAE5E,IAAI,OAAOI,iBAAiB,UAAU;QACpC;IACF;IAEA,OAAOD,IAAIE,OAAO,CAACL,yCAAyC;IAE5D,IAAII,iBAAiBF,qBAAqB;QACxC;IACF;IAEA,IAAI;QACF,MAAMH,GAAGO,MAAM,CAACF;IAClB,EAAE,OAAOG,OAAO;QACdJ,IAAIK,OAAO,CAACC,MAAM,CAACF,KAAK,CAAC;YAAEG,KAAKH;YAAOI,KAAK;QAA2C;IACzF;AACF,EAAC"}

package/dist/uploads/unlinkTempFiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unlinkTempFiles.d.ts","sourceRoot":"","sources":["../../src/uploads/unlinkTempFiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,KAAK,IAAI,GAAG;IACV,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,MAAM,EAAE,eAAe,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAgCzD,CAAA"}
+{"version":3,"file":"unlinkTempFiles.d.ts","sourceRoot":"","sources":["../../src/uploads/unlinkTempFiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,KAAK,IAAI,GAAG;IACV,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,MAAM,EAAE,eAAe,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAuBzD,CAAA"}

package/dist/uploads/unlinkTempFiles.js

@@ -1,11 +1,12 @@
 import fs from 'fs/promises';
 import { mapAsync } from '../utilities/mapAsync.js';
-import { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js';
+import { unlinkClientUploadTempFile } from './unlinkClientUploadTempFile.js';
 /**
  * Cleanup temp files after operation lifecycle
  */ export const unlinkTempFiles = async ({ collectionConfig, config, req })=>{
     const { file } = req;
     const isClientUploadTempFile = Boolean(file?.tempFilePath && Object.prototype.hasOwnProperty.call(file, 'clientUploadContext'));
+    let unlinkedTempFilePath;
     if (collectionConfig.upload && (config.upload?.useTempFiles || isClientUploadTempFile)) {
         const fileArray = [
             {
@@ -16,17 +17,14 @@ import { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpl
             // Still need this check because this will not be populated if using local API
             if (file?.tempFilePath) {
                 await fs.unlink(file.tempFilePath);
+                unlinkedTempFilePath = file.tempFilePath;
             }
         });
     }
-    // plugin-cloud-storage's afterChange hook clears req.file after uploading generated image
-    // sizes, before this cleanup runs, so the materializer's temp file is tracked separately and
-    // may still need removing even though req.file no longer references it.
-    const clientUploadTempFilePath = req.context?.[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY];
-    if (typeof clientUploadTempFilePath === 'string' && clientUploadTempFilePath !== file?.tempFilePath) {
-        delete req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY];
-        await fs.unlink(clientUploadTempFilePath);
-    }
+    await unlinkClientUploadTempFile({
+        alreadyUnlinkedPath: unlinkedTempFilePath,
+        req
+    });
 };
 
 //# sourceMappingURL=unlinkTempFiles.js.map

package/dist/uploads/unlinkTempFiles.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/unlinkTempFiles.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nimport type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { mapAsync } from '../utilities/mapAsync.js'\nimport { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js'\n\ntype Args = {\n  collectionConfig: SanitizedCollectionConfig\n  config: SanitizedConfig\n  req: PayloadRequest\n}\n/**\n * Cleanup temp files after operation lifecycle\n */\nexport const unlinkTempFiles: (args: Args) => Promise<void> = async ({\n  collectionConfig,\n  config,\n  req,\n}) => {\n  const { file } = req\n  const isClientUploadTempFile = Boolean(\n    file?.tempFilePath && Object.prototype.hasOwnProperty.call(file, 'clientUploadContext'),\n  )\n\n  if (collectionConfig.upload && (config.upload?.useTempFiles || isClientUploadTempFile)) {\n    const fileArray = [{ file }]\n    await mapAsync(fileArray, async ({ file }) => {\n      // Still need this check because this will not be populated if using local API\n      if (file?.tempFilePath) {\n        await fs.unlink(file.tempFilePath)\n      }\n    })\n  }\n\n  // plugin-cloud-storage's afterChange hook clears req.file after uploading generated image\n  // sizes, before this cleanup runs, so the materializer's temp file is tracked separately and\n  // may still need removing even though req.file no longer references it.\n  const clientUploadTempFilePath = req.context?.[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]\n\n  if (\n    typeof clientUploadTempFilePath === 'string' &&\n    clientUploadTempFilePath !== file?.tempFilePath\n  ) {\n    delete req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]\n    await fs.unlink(clientUploadTempFilePath)\n  }\n}\n"],"names":["fs","mapAsync","CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY","unlinkTempFiles","collectionConfig","config","req","file","isClientUploadTempFile","Boolean","tempFilePath","Object","prototype","hasOwnProperty","call","upload","useTempFiles","fileArray","unlink","clientUploadTempFilePath","context"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAM5B,SAASC,QAAQ,QAAQ,2BAA0B;AACnD,SAASC,wCAAwC,QAAQ,+BAA8B;AAOvF;;CAEC,GACD,OAAO,MAAMC,kBAAiD,OAAO,EACnEC,gBAAgB,EAChBC,MAAM,EACNC,GAAG,EACJ;IACC,MAAM,EAAEC,IAAI,EAAE,GAAGD;IACjB,MAAME,yBAAyBC,QAC7BF,MAAMG,gBAAgBC,OAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,MAAM;IAGnE,IAAIH,iBAAiBW,MAAM,IAAKV,CAAAA,OAAOU,MAAM,EAAEC,gBAAgBR,sBAAqB,GAAI;QACtF,MAAMS,YAAY;YAAC;gBAAEV;YAAK;SAAE;QAC5B,MAAMN,SAASgB,WAAW,OAAO,EAAEV,IAAI,EAAE;YACvC,8EAA8E;YAC9E,IAAIA,MAAMG,cAAc;gBACtB,MAAMV,GAAGkB,MAAM,CAACX,KAAKG,YAAY;YACnC;QACF;IACF;IAEA,0FAA0F;IAC1F,6FAA6F;IAC7F,wEAAwE;IACxE,MAAMS,2BAA2Bb,IAAIc,OAAO,EAAE,CAAClB,yCAAyC;IAExF,IACE,OAAOiB,6BAA6B,YACpCA,6BAA6BZ,MAAMG,cACnC;QACA,OAAOJ,IAAIc,OAAO,CAAClB,yCAAyC;QAC5D,MAAMF,GAAGkB,MAAM,CAACC;IAClB;AACF,EAAC"}
+{"version":3,"sources":["../../src/uploads/unlinkTempFiles.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nimport type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { mapAsync } from '../utilities/mapAsync.js'\nimport { unlinkClientUploadTempFile } from './unlinkClientUploadTempFile.js'\n\ntype Args = {\n  collectionConfig: SanitizedCollectionConfig\n  config: SanitizedConfig\n  req: PayloadRequest\n}\n/**\n * Cleanup temp files after operation lifecycle\n */\nexport const unlinkTempFiles: (args: Args) => Promise<void> = async ({\n  collectionConfig,\n  config,\n  req,\n}) => {\n  const { file } = req\n  const isClientUploadTempFile = Boolean(\n    file?.tempFilePath && Object.prototype.hasOwnProperty.call(file, 'clientUploadContext'),\n  )\n  let unlinkedTempFilePath: string | undefined\n\n  if (collectionConfig.upload && (config.upload?.useTempFiles || isClientUploadTempFile)) {\n    const fileArray = [{ file }]\n    await mapAsync(fileArray, async ({ file }) => {\n      // Still need this check because this will not be populated if using local API\n      if (file?.tempFilePath) {\n        await fs.unlink(file.tempFilePath)\n        unlinkedTempFilePath = file.tempFilePath\n      }\n    })\n  }\n\n  await unlinkClientUploadTempFile({ alreadyUnlinkedPath: unlinkedTempFilePath, req })\n}\n"],"names":["fs","mapAsync","unlinkClientUploadTempFile","unlinkTempFiles","collectionConfig","config","req","file","isClientUploadTempFile","Boolean","tempFilePath","Object","prototype","hasOwnProperty","call","unlinkedTempFilePath","upload","useTempFiles","fileArray","unlink","alreadyUnlinkedPath"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAM5B,SAASC,QAAQ,QAAQ,2BAA0B;AACnD,SAASC,0BAA0B,QAAQ,kCAAiC;AAO5E;;CAEC,GACD,OAAO,MAAMC,kBAAiD,OAAO,EACnEC,gBAAgB,EAChBC,MAAM,EACNC,GAAG,EACJ;IACC,MAAM,EAAEC,IAAI,EAAE,GAAGD;IACjB,MAAME,yBAAyBC,QAC7BF,MAAMG,gBAAgBC,OAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACP,MAAM;IAEnE,IAAIQ;IAEJ,IAAIX,iBAAiBY,MAAM,IAAKX,CAAAA,OAAOW,MAAM,EAAEC,gBAAgBT,sBAAqB,GAAI;QACtF,MAAMU,YAAY;YAAC;gBAAEX;YAAK;SAAE;QAC5B,MAAMN,SAASiB,WAAW,OAAO,EAAEX,IAAI,EAAE;YACvC,8EAA8E;YAC9E,IAAIA,MAAMG,cAAc;gBACtB,MAAMV,GAAGmB,MAAM,CAACZ,KAAKG,YAAY;gBACjCK,uBAAuBR,KAAKG,YAAY;YAC1C;QACF;IACF;IAEA,MAAMR,2BAA2B;QAAEkB,qBAAqBL;QAAsBT;IAAI;AACpF,EAAC"}

package/dist/uploads/unlinkTempFiles.spec.js

@@ -1,7 +1,7 @@
 import fs from 'fs/promises';
 import os from 'os';
 import path from 'path';
-import { afterEach, describe, expect, it } from 'vitest';
+import { afterEach, describe, expect, it, vi } from 'vitest';
 import { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js';
 import { unlinkTempFiles } from './unlinkTempFiles.js';
 const createTempFile = async (contents = 'temp-file-contents')=>{
@@ -22,6 +22,7 @@ const collectionConfig = {
         disableLocalStorage: true
     }
 };
+const nonUploadCollectionConfig = {};
 describe('unlinkTempFiles', ()=>{
     const tempFilesToRemove = [];
     afterEach(async ()=>{
@@ -152,6 +153,65 @@ describe('unlinkTempFiles', ()=>{
         })).resolves.not.toThrow();
         expect(await fileExists(tempFilePath)).toBe(false);
     });
+    it('removes a client-upload temp file when the collection is not an upload collection', async ()=>{
+        const tempFilePath = await createTempFile();
+        tempFilesToRemove.push(tempFilePath);
+        // A forged `collectionSlug` in the multipart file field materializes a temp file for a
+        // collection that never accepts uploads, so nothing in the upload branch removes it.
+        const req = {
+            context: {
+                [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: tempFilePath
+            },
+            file: {
+                clientUploadContext: {
+                    prefix: ''
+                },
+                data: Buffer.alloc(0),
+                mimetype: 'video/mp4',
+                name: 'clip.mp4',
+                size: 10,
+                tempFilePath
+            }
+        };
+        await unlinkTempFiles({
+            collectionConfig: nonUploadCollectionConfig,
+            config: {
+                upload: {
+                    useTempFiles: false
+                }
+            },
+            req
+        });
+        expect(await fileExists(tempFilePath)).toBe(false);
+        expect(req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]).toBeUndefined();
+    });
+    it('logs instead of throwing when a client-upload temp file can no longer be removed', async ()=>{
+        const req = {
+            context: {
+                [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: path.join(os.tmpdir(), 'unlink-temp-files-spec-missing-file')
+            },
+            payload: {
+                logger: {
+                    error: vi.fn()
+                }
+            }
+        };
+        await expect(unlinkTempFiles({
+            collectionConfig,
+            config: {
+                upload: {
+                    useTempFiles: false
+                }
+            },
+            req
+        })).resolves.toBeUndefined();
+        expect(req.payload.logger.error).toHaveBeenCalledWith({
+            err: expect.objectContaining({
+                code: 'ENOENT'
+            }),
+            msg: 'Failed to remove client upload temp file'
+        });
+    });
 });
 
 //# sourceMappingURL=unlinkTempFiles.spec.js.map

package/dist/uploads/unlinkTempFiles.spec.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/unlinkTempFiles.spec.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport fs from 'fs/promises'\nimport os from 'os'\nimport path from 'path'\nimport { afterEach, describe, expect, it } from 'vitest'\n\nimport { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js'\nimport { unlinkTempFiles } from './unlinkTempFiles.js'\n\nconst createTempFile = async (contents = 'temp-file-contents'): Promise<string> => {\n  const tempFilePath = path.join(\n    os.tmpdir(),\n    `unlink-temp-files-spec-${Date.now()}-${Math.random()}`,\n  )\n  await fs.writeFile(tempFilePath, contents)\n  return tempFilePath\n}\n\nconst fileExists = async (filePath: string): Promise<boolean> => {\n  try {\n    await fs.access(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\nconst collectionConfig = {\n  upload: { disableLocalStorage: true },\n} as unknown as SanitizedCollectionConfig\n\ndescribe('unlinkTempFiles', () => {\n  const tempFilesToRemove: string[] = []\n\n  afterEach(async () => {\n    for (const tempFilePath of tempFilesToRemove) {\n      await fs.rm(tempFilePath, { force: true })\n    }\n    tempFilesToRemove.length = 0\n  })\n\n  it('removes a client-upload materialized temp file even when useTempFiles is false', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      file: {\n        clientUploadContext: undefined,\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n  })\n\n  it('leaves a local-API temp file alone when useTempFiles is false', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      file: {\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(true)\n  })\n\n  it('removes a multipart temp file when useTempFiles is true', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      file: {\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: true } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n  })\n\n  it('removes a client-upload temp file tracked on req.context after req.file was cleared', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    // Mirrors plugin-cloud-storage's afterChange hook, which clears req.file after uploading\n    // generated image sizes but leaves req.context untouched.\n    const req = {\n      context: { [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: tempFilePath },\n      file: undefined,\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n    expect(req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]).toBeUndefined()\n  })\n\n  it('does not attempt a second unlink when the context-tracked path matches req.file.tempFilePath', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      context: { [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: tempFilePath },\n      file: {\n        clientUploadContext: undefined,\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await expect(\n      unlinkTempFiles({\n        collectionConfig,\n        config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n        req,\n      }),\n    ).resolves.not.toThrow()\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n  })\n})\n"],"names":["fs","os","path","afterEach","describe","expect","it","CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY","unlinkTempFiles","createTempFile","contents","tempFilePath","join","tmpdir","Date","now","Math","random","writeFile","fileExists","filePath","access","collectionConfig","upload","disableLocalStorage","tempFilesToRemove","rm","force","length","push","req","file","clientUploadContext","undefined","data","Buffer","alloc","mimetype","name","size","config","useTempFiles","toBe","context","toBeUndefined","resolves","not","toThrow"],"mappings":"AAIA,OAAOA,QAAQ,cAAa;AAC5B,OAAOC,QAAQ,KAAI;AACnB,OAAOC,UAAU,OAAM;AACvB,SAASC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAExD,SAASC,wCAAwC,QAAQ,+BAA8B;AACvF,SAASC,eAAe,QAAQ,uBAAsB;AAEtD,MAAMC,iBAAiB,OAAOC,WAAW,oBAAoB;IAC3D,MAAMC,eAAeT,KAAKU,IAAI,CAC5BX,GAAGY,MAAM,IACT,CAAC,uBAAuB,EAAEC,KAAKC,GAAG,GAAG,CAAC,EAAEC,KAAKC,MAAM,IAAI;IAEzD,MAAMjB,GAAGkB,SAAS,CAACP,cAAcD;IACjC,OAAOC;AACT;AAEA,MAAMQ,aAAa,OAAOC;IACxB,IAAI;QACF,MAAMpB,GAAGqB,MAAM,CAACD;QAChB,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,MAAME,mBAAmB;IACvBC,QAAQ;QAAEC,qBAAqB;IAAK;AACtC;AAEApB,SAAS,mBAAmB;IAC1B,MAAMqB,oBAA8B,EAAE;IAEtCtB,UAAU;QACR,KAAK,MAAMQ,gBAAgBc,kBAAmB;YAC5C,MAAMzB,GAAG0B,EAAE,CAACf,cAAc;gBAAEgB,OAAO;YAAK;QAC1C;QACAF,kBAAkBG,MAAM,GAAG;IAC7B;IAEAtB,GAAG,kFAAkF;QACnF,MAAMK,eAAe,MAAMF;QAC3BgB,kBAAkBI,IAAI,CAAClB;QAEvB,MAAMmB,MAAM;YACVC,MAAM;gBACJC,qBAAqBC;gBACrBC,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN5B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc;YACAkB,QAAQ;gBAAEjB,QAAQ;oBAAEkB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEAzB,OAAO,MAAMc,WAAWR,eAAe+B,IAAI,CAAC;IAC9C;IAEApC,GAAG,iEAAiE;QAClE,MAAMK,eAAe,MAAMF;QAC3BgB,kBAAkBI,IAAI,CAAClB;QAEvB,MAAMmB,MAAM;YACVC,MAAM;gBACJG,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN5B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc;YACAkB,QAAQ;gBAAEjB,QAAQ;oBAAEkB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEAzB,OAAO,MAAMc,WAAWR,eAAe+B,IAAI,CAAC;IAC9C;IAEApC,GAAG,2DAA2D;QAC5D,MAAMK,eAAe,MAAMF;QAC3BgB,kBAAkBI,IAAI,CAAClB;QAEvB,MAAMmB,MAAM;YACVC,MAAM;gBACJG,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN5B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc;YACAkB,QAAQ;gBAAEjB,QAAQ;oBAAEkB,cAAc;gBAAK;YAAE;YACzCX;QACF;QAEAzB,OAAO,MAAMc,WAAWR,eAAe+B,IAAI,CAAC;IAC9C;IAEApC,GAAG,uFAAuF;QACxF,MAAMK,eAAe,MAAMF;QAC3BgB,kBAAkBI,IAAI,CAAClB;QAEvB,yFAAyF;QACzF,0DAA0D;QAC1D,MAAMmB,MAAM;YACVa,SAAS;gBAAE,CAACpC,yCAAyC,EAAEI;YAAa;YACpEoB,MAAME;QACR;QAEA,MAAMzB,gBAAgB;YACpBc;YACAkB,QAAQ;gBAAEjB,QAAQ;oBAAEkB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEAzB,OAAO,MAAMc,WAAWR,eAAe+B,IAAI,CAAC;QAC5CrC,OAAOyB,IAAIa,OAAO,CAACpC,yCAAyC,EAAEqC,aAAa;IAC7E;IAEAtC,GAAG,gGAAgG;QACjG,MAAMK,eAAe,MAAMF;QAC3BgB,kBAAkBI,IAAI,CAAClB;QAEvB,MAAMmB,MAAM;YACVa,SAAS;gBAAE,CAACpC,yCAAyC,EAAEI;YAAa;YACpEoB,MAAM;gBACJC,qBAAqBC;gBACrBC,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN5B;YACF;QACF;QAEA,MAAMN,OACJG,gBAAgB;YACdc;YACAkB,QAAQ;gBAAEjB,QAAQ;oBAAEkB,cAAc;gBAAM;YAAE;YAC1CX;QACF,IACAe,QAAQ,CAACC,GAAG,CAACC,OAAO;QAEtB1C,OAAO,MAAMc,WAAWR,eAAe+B,IAAI,CAAC;IAC9C;AACF"}
+{"version":3,"sources":["../../src/uploads/unlinkTempFiles.spec.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport fs from 'fs/promises'\nimport os from 'os'\nimport path from 'path'\nimport { afterEach, describe, expect, it, vi } from 'vitest'\n\nimport { CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY } from './getFileFromClientUpload.js'\nimport { unlinkTempFiles } from './unlinkTempFiles.js'\n\nconst createTempFile = async (contents = 'temp-file-contents'): Promise<string> => {\n  const tempFilePath = path.join(\n    os.tmpdir(),\n    `unlink-temp-files-spec-${Date.now()}-${Math.random()}`,\n  )\n  await fs.writeFile(tempFilePath, contents)\n  return tempFilePath\n}\n\nconst fileExists = async (filePath: string): Promise<boolean> => {\n  try {\n    await fs.access(filePath)\n    return true\n  } catch {\n    return false\n  }\n}\n\nconst collectionConfig = {\n  upload: { disableLocalStorage: true },\n} as unknown as SanitizedCollectionConfig\n\nconst nonUploadCollectionConfig = {} as unknown as SanitizedCollectionConfig\n\ndescribe('unlinkTempFiles', () => {\n  const tempFilesToRemove: string[] = []\n\n  afterEach(async () => {\n    for (const tempFilePath of tempFilesToRemove) {\n      await fs.rm(tempFilePath, { force: true })\n    }\n    tempFilesToRemove.length = 0\n  })\n\n  it('removes a client-upload materialized temp file even when useTempFiles is false', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      file: {\n        clientUploadContext: undefined,\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n  })\n\n  it('leaves a local-API temp file alone when useTempFiles is false', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      file: {\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(true)\n  })\n\n  it('removes a multipart temp file when useTempFiles is true', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      file: {\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: true } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n  })\n\n  it('removes a client-upload temp file tracked on req.context after req.file was cleared', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    // Mirrors plugin-cloud-storage's afterChange hook, which clears req.file after uploading\n    // generated image sizes but leaves req.context untouched.\n    const req = {\n      context: { [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: tempFilePath },\n      file: undefined,\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n    expect(req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]).toBeUndefined()\n  })\n\n  it('does not attempt a second unlink when the context-tracked path matches req.file.tempFilePath', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    const req = {\n      context: { [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: tempFilePath },\n      file: {\n        clientUploadContext: undefined,\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await expect(\n      unlinkTempFiles({\n        collectionConfig,\n        config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n        req,\n      }),\n    ).resolves.not.toThrow()\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n  })\n\n  it('removes a client-upload temp file when the collection is not an upload collection', async () => {\n    const tempFilePath = await createTempFile()\n    tempFilesToRemove.push(tempFilePath)\n\n    // A forged `collectionSlug` in the multipart file field materializes a temp file for a\n    // collection that never accepts uploads, so nothing in the upload branch removes it.\n    const req = {\n      context: { [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: tempFilePath },\n      file: {\n        clientUploadContext: { prefix: '' },\n        data: Buffer.alloc(0),\n        mimetype: 'video/mp4',\n        name: 'clip.mp4',\n        size: 10,\n        tempFilePath,\n      },\n    } as unknown as PayloadRequest\n\n    await unlinkTempFiles({\n      collectionConfig: nonUploadCollectionConfig,\n      config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n      req,\n    })\n\n    expect(await fileExists(tempFilePath)).toBe(false)\n    expect(req.context[CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]).toBeUndefined()\n  })\n\n  it('logs instead of throwing when a client-upload temp file can no longer be removed', async () => {\n    const req = {\n      context: {\n        [CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY]: path.join(\n          os.tmpdir(),\n          'unlink-temp-files-spec-missing-file',\n        ),\n      },\n      payload: { logger: { error: vi.fn() } },\n    } as unknown as PayloadRequest\n\n    await expect(\n      unlinkTempFiles({\n        collectionConfig,\n        config: { upload: { useTempFiles: false } } as unknown as SanitizedConfig,\n        req,\n      }),\n    ).resolves.toBeUndefined()\n\n    expect(req.payload.logger.error).toHaveBeenCalledWith({\n      err: expect.objectContaining({ code: 'ENOENT' }),\n      msg: 'Failed to remove client upload temp file',\n    })\n  })\n})\n"],"names":["fs","os","path","afterEach","describe","expect","it","vi","CLIENT_UPLOAD_TEMP_FILE_PATH_CONTEXT_KEY","unlinkTempFiles","createTempFile","contents","tempFilePath","join","tmpdir","Date","now","Math","random","writeFile","fileExists","filePath","access","collectionConfig","upload","disableLocalStorage","nonUploadCollectionConfig","tempFilesToRemove","rm","force","length","push","req","file","clientUploadContext","undefined","data","Buffer","alloc","mimetype","name","size","config","useTempFiles","toBe","context","toBeUndefined","resolves","not","toThrow","prefix","payload","logger","error","fn","toHaveBeenCalledWith","err","objectContaining","code","msg"],"mappings":"AAIA,OAAOA,QAAQ,cAAa;AAC5B,OAAOC,QAAQ,KAAI;AACnB,OAAOC,UAAU,OAAM;AACvB,SAASC,SAAS,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE5D,SAASC,wCAAwC,QAAQ,+BAA8B;AACvF,SAASC,eAAe,QAAQ,uBAAsB;AAEtD,MAAMC,iBAAiB,OAAOC,WAAW,oBAAoB;IAC3D,MAAMC,eAAeV,KAAKW,IAAI,CAC5BZ,GAAGa,MAAM,IACT,CAAC,uBAAuB,EAAEC,KAAKC,GAAG,GAAG,CAAC,EAAEC,KAAKC,MAAM,IAAI;IAEzD,MAAMlB,GAAGmB,SAAS,CAACP,cAAcD;IACjC,OAAOC;AACT;AAEA,MAAMQ,aAAa,OAAOC;IACxB,IAAI;QACF,MAAMrB,GAAGsB,MAAM,CAACD;QAChB,OAAO;IACT,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,MAAME,mBAAmB;IACvBC,QAAQ;QAAEC,qBAAqB;IAAK;AACtC;AAEA,MAAMC,4BAA4B,CAAC;AAEnCtB,SAAS,mBAAmB;IAC1B,MAAMuB,oBAA8B,EAAE;IAEtCxB,UAAU;QACR,KAAK,MAAMS,gBAAgBe,kBAAmB;YAC5C,MAAM3B,GAAG4B,EAAE,CAAChB,cAAc;gBAAEiB,OAAO;YAAK;QAC1C;QACAF,kBAAkBG,MAAM,GAAG;IAC7B;IAEAxB,GAAG,kFAAkF;QACnF,MAAMM,eAAe,MAAMF;QAC3BiB,kBAAkBI,IAAI,CAACnB;QAEvB,MAAMoB,MAAM;YACVC,MAAM;gBACJC,qBAAqBC;gBACrBC,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN7B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc;YACAmB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEA3B,OAAO,MAAMe,WAAWR,eAAegC,IAAI,CAAC;IAC9C;IAEAtC,GAAG,iEAAiE;QAClE,MAAMM,eAAe,MAAMF;QAC3BiB,kBAAkBI,IAAI,CAACnB;QAEvB,MAAMoB,MAAM;YACVC,MAAM;gBACJG,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN7B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc;YACAmB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEA3B,OAAO,MAAMe,WAAWR,eAAegC,IAAI,CAAC;IAC9C;IAEAtC,GAAG,2DAA2D;QAC5D,MAAMM,eAAe,MAAMF;QAC3BiB,kBAAkBI,IAAI,CAACnB;QAEvB,MAAMoB,MAAM;YACVC,MAAM;gBACJG,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN7B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc;YACAmB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAK;YAAE;YACzCX;QACF;QAEA3B,OAAO,MAAMe,WAAWR,eAAegC,IAAI,CAAC;IAC9C;IAEAtC,GAAG,uFAAuF;QACxF,MAAMM,eAAe,MAAMF;QAC3BiB,kBAAkBI,IAAI,CAACnB;QAEvB,yFAAyF;QACzF,0DAA0D;QAC1D,MAAMoB,MAAM;YACVa,SAAS;gBAAE,CAACrC,yCAAyC,EAAEI;YAAa;YACpEqB,MAAME;QACR;QAEA,MAAM1B,gBAAgB;YACpBc;YACAmB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEA3B,OAAO,MAAMe,WAAWR,eAAegC,IAAI,CAAC;QAC5CvC,OAAO2B,IAAIa,OAAO,CAACrC,yCAAyC,EAAEsC,aAAa;IAC7E;IAEAxC,GAAG,gGAAgG;QACjG,MAAMM,eAAe,MAAMF;QAC3BiB,kBAAkBI,IAAI,CAACnB;QAEvB,MAAMoB,MAAM;YACVa,SAAS;gBAAE,CAACrC,yCAAyC,EAAEI;YAAa;YACpEqB,MAAM;gBACJC,qBAAqBC;gBACrBC,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN7B;YACF;QACF;QAEA,MAAMP,OACJI,gBAAgB;YACdc;YACAmB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAM;YAAE;YAC1CX;QACF,IACAe,QAAQ,CAACC,GAAG,CAACC,OAAO;QAEtB5C,OAAO,MAAMe,WAAWR,eAAegC,IAAI,CAAC;IAC9C;IAEAtC,GAAG,qFAAqF;QACtF,MAAMM,eAAe,MAAMF;QAC3BiB,kBAAkBI,IAAI,CAACnB;QAEvB,uFAAuF;QACvF,qFAAqF;QACrF,MAAMoB,MAAM;YACVa,SAAS;gBAAE,CAACrC,yCAAyC,EAAEI;YAAa;YACpEqB,MAAM;gBACJC,qBAAqB;oBAAEgB,QAAQ;gBAAG;gBAClCd,MAAMC,OAAOC,KAAK,CAAC;gBACnBC,UAAU;gBACVC,MAAM;gBACNC,MAAM;gBACN7B;YACF;QACF;QAEA,MAAMH,gBAAgB;YACpBc,kBAAkBG;YAClBgB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAM;YAAE;YAC1CX;QACF;QAEA3B,OAAO,MAAMe,WAAWR,eAAegC,IAAI,CAAC;QAC5CvC,OAAO2B,IAAIa,OAAO,CAACrC,yCAAyC,EAAEsC,aAAa;IAC7E;IAEAxC,GAAG,oFAAoF;QACrF,MAAM0B,MAAM;YACVa,SAAS;gBACP,CAACrC,yCAAyC,EAAEN,KAAKW,IAAI,CACnDZ,GAAGa,MAAM,IACT;YAEJ;YACAqC,SAAS;gBAAEC,QAAQ;oBAAEC,OAAO9C,GAAG+C,EAAE;gBAAG;YAAE;QACxC;QAEA,MAAMjD,OACJI,gBAAgB;YACdc;YACAmB,QAAQ;gBAAElB,QAAQ;oBAAEmB,cAAc;gBAAM;YAAE;YAC1CX;QACF,IACAe,QAAQ,CAACD,aAAa;QAExBzC,OAAO2B,IAAImB,OAAO,CAACC,MAAM,CAACC,KAAK,EAAEE,oBAAoB,CAAC;YACpDC,KAAKnD,OAAOoD,gBAAgB,CAAC;gBAAEC,MAAM;YAAS;YAC9CC,KAAK;QACP;IACF;AACF"}

package/dist/uploads/uploadContentSecurityPolicy.d.ts

@@ -0,0 +1,2 @@
+export declare const UPLOAD_CONTENT_SECURITY_POLICY = "script-src 'none'; frame-src 'none'; object-src 'none'";
+//# sourceMappingURL=uploadContentSecurityPolicy.d.ts.map

package/dist/uploads/uploadContentSecurityPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadContentSecurityPolicy.d.ts","sourceRoot":"","sources":["../../src/uploads/uploadContentSecurityPolicy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,2DACe,CAAA"}

package/dist/uploads/uploadContentSecurityPolicy.js

@@ -0,0 +1,3 @@
+export const UPLOAD_CONTENT_SECURITY_POLICY = "script-src 'none'; frame-src 'none'; object-src 'none'";
+
+//# sourceMappingURL=uploadContentSecurityPolicy.js.map

package/dist/uploads/uploadContentSecurityPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/uploadContentSecurityPolicy.ts"],"sourcesContent":["export const UPLOAD_CONTENT_SECURITY_POLICY =\n  \"script-src 'none'; frame-src 'none'; object-src 'none'\"\n"],"names":["UPLOAD_CONTENT_SECURITY_POLICY"],"mappings":"AAAA,OAAO,MAAMA,iCACX,yDAAwD"}

package/dist/uploads/validateISOBaseMediaFile.d.ts

@@ -0,0 +1,4 @@
+export declare const isISOBaseMediaMimeType: (mimeType: string) => boolean;
+export declare const validateISOBaseMediaBuffer: (buffer: Buffer) => Promise<boolean>;
+export declare const validateISOBaseMediaFile: (filePath: string) => Promise<boolean>;
+//# sourceMappingURL=validateISOBaseMediaFile.d.ts.map

package/dist/uploads/validateISOBaseMediaFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateISOBaseMediaFile.d.ts","sourceRoot":"","sources":["../../src/uploads/validateISOBaseMediaFile.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,sBAAsB,aAAc,MAAM,KAAG,OACjB,CAAA;AA8DzC,eAAO,MAAM,0BAA0B,WAAkB,MAAM,KAAG,OAAO,CAAC,OAAO,CAG9E,CAAA;AAEH,eAAO,MAAM,wBAAwB,aAAoB,MAAM,KAAG,OAAO,CAAC,OAAO,CAiBhF,CAAA"}

package/dist/uploads/validateISOBaseMediaFile.js

@@ -0,0 +1,91 @@
+import fs from 'fs/promises';
+const MAX_BOX_COUNT = 10_000;
+const QUICKTIME_FIRST_BOX_TYPES = new Set([
+    'free',
+    'mdat',
+    'moov',
+    'wide'
+]);
+const ISO_BASE_MEDIA_MIME_TYPES = new Set([
+    'audio/mp4',
+    'audio/x-m4a',
+    'image/avif',
+    'image/heic',
+    'image/heic-sequence',
+    'image/heif',
+    'image/heif-sequence',
+    'image/x-canon-cr3',
+    'video/3gpp',
+    'video/3gpp2',
+    'video/mp4',
+    'video/quicktime',
+    'video/x-m4v'
+]);
+export const isISOBaseMediaMimeType = (mimeType)=>ISO_BASE_MEDIA_MIME_TYPES.has(mimeType);
+const validateBoxStructure = async (size, readAt)=>{
+    if (!Number.isSafeInteger(size) || size < 24) {
+        return false;
+    }
+    let boxCount = 0;
+    let position = 0;
+    while(position < size){
+        if (++boxCount > MAX_BOX_COUNT || size - position < 8) {
+            return false;
+        }
+        const header = await readAt(position, Math.min(16, size - position));
+        if (header.length < 8) {
+            return false;
+        }
+        const boxType = header.toString('latin1', 4, 8);
+        const size32 = header.readUInt32BE(0);
+        let boxSize;
+        let headerSize = 8;
+        if (size32 === 0) {
+            boxSize = size - position;
+        } else if (size32 === 1) {
+            if (header.length < 16) {
+                return false;
+            }
+            const size64 = header.readBigUInt64BE(8);
+            if (size64 > BigInt(Number.MAX_SAFE_INTEGER)) {
+                return false;
+            }
+            boxSize = Number(size64);
+            headerSize = 16;
+        } else {
+            boxSize = size32;
+        }
+        if (boxSize < headerSize || boxSize > size - position) {
+            return false;
+        }
+        if (position === 0 && boxType === 'ftyp') {
+            const payloadSize = boxSize - headerSize;
+            if (size32 === 0 || payloadSize < 8 || (payloadSize - 8) % 4 !== 0 || boxSize === size) {
+                return false;
+            }
+        } else if (position === 0 && !QUICKTIME_FIRST_BOX_TYPES.has(boxType)) {
+            return false;
+        }
+        position += boxSize;
+    }
+    return position === size;
+};
+export const validateISOBaseMediaBuffer = async (buffer)=>validateBoxStructure(buffer.length, (position, length)=>Promise.resolve(buffer.subarray(position, position + length)));
+export const validateISOBaseMediaFile = async (filePath)=>{
+    let fileHandle;
+    try {
+        fileHandle = await fs.open(filePath, 'r');
+        const { size } = await fileHandle.stat();
+        return await validateBoxStructure(size, async (position, length)=>{
+            const buffer = Buffer.allocUnsafe(length);
+            const { bytesRead } = await fileHandle.read(buffer, 0, length, position);
+            return buffer.subarray(0, bytesRead);
+        });
+    } catch  {
+        return false;
+    } finally{
+        await fileHandle?.close();
+    }
+};
+
+//# sourceMappingURL=validateISOBaseMediaFile.js.map

package/dist/uploads/validateISOBaseMediaFile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/validateISOBaseMediaFile.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nconst MAX_BOX_COUNT = 10_000\nconst QUICKTIME_FIRST_BOX_TYPES = new Set(['free', 'mdat', 'moov', 'wide'])\n\nconst ISO_BASE_MEDIA_MIME_TYPES = new Set([\n  'audio/mp4',\n  'audio/x-m4a',\n  'image/avif',\n  'image/heic',\n  'image/heic-sequence',\n  'image/heif',\n  'image/heif-sequence',\n  'image/x-canon-cr3',\n  'video/3gpp',\n  'video/3gpp2',\n  'video/mp4',\n  'video/quicktime',\n  'video/x-m4v',\n])\n\ntype ReadAt = (position: number, length: number) => Promise<Buffer>\n\nexport const isISOBaseMediaMimeType = (mimeType: string): boolean =>\n  ISO_BASE_MEDIA_MIME_TYPES.has(mimeType)\n\nconst validateBoxStructure = async (size: number, readAt: ReadAt): Promise<boolean> => {\n  if (!Number.isSafeInteger(size) || size < 24) {\n    return false\n  }\n\n  let boxCount = 0\n  let position = 0\n\n  while (position < size) {\n    if (++boxCount > MAX_BOX_COUNT || size - position < 8) {\n      return false\n    }\n\n    const header = await readAt(position, Math.min(16, size - position))\n    if (header.length < 8) {\n      return false\n    }\n\n    const boxType = header.toString('latin1', 4, 8)\n    const size32 = header.readUInt32BE(0)\n    let boxSize: number\n    let headerSize = 8\n\n    if (size32 === 0) {\n      boxSize = size - position\n    } else if (size32 === 1) {\n      if (header.length < 16) {\n        return false\n      }\n\n      const size64 = header.readBigUInt64BE(8)\n      if (size64 > BigInt(Number.MAX_SAFE_INTEGER)) {\n        return false\n      }\n\n      boxSize = Number(size64)\n      headerSize = 16\n    } else {\n      boxSize = size32\n    }\n\n    if (boxSize < headerSize || boxSize > size - position) {\n      return false\n    }\n\n    if (position === 0 && boxType === 'ftyp') {\n      const payloadSize = boxSize - headerSize\n      if (size32 === 0 || payloadSize < 8 || (payloadSize - 8) % 4 !== 0 || boxSize === size) {\n        return false\n      }\n    } else if (position === 0 && !QUICKTIME_FIRST_BOX_TYPES.has(boxType)) {\n      return false\n    }\n\n    position += boxSize\n  }\n\n  return position === size\n}\n\nexport const validateISOBaseMediaBuffer = async (buffer: Buffer): Promise<boolean> =>\n  validateBoxStructure(buffer.length, (position, length) =>\n    Promise.resolve(buffer.subarray(position, position + length)),\n  )\n\nexport const validateISOBaseMediaFile = async (filePath: string): Promise<boolean> => {\n  let fileHandle: Awaited<ReturnType<typeof fs.open>> | undefined\n\n  try {\n    fileHandle = await fs.open(filePath, 'r')\n    const { size } = await fileHandle.stat()\n\n    return await validateBoxStructure(size, async (position, length) => {\n      const buffer = Buffer.allocUnsafe(length)\n      const { bytesRead } = await fileHandle!.read(buffer, 0, length, position)\n      return buffer.subarray(0, bytesRead)\n    })\n  } catch {\n    return false\n  } finally {\n    await fileHandle?.close()\n  }\n}\n"],"names":["fs","MAX_BOX_COUNT","QUICKTIME_FIRST_BOX_TYPES","Set","ISO_BASE_MEDIA_MIME_TYPES","isISOBaseMediaMimeType","mimeType","has","validateBoxStructure","size","readAt","Number","isSafeInteger","boxCount","position","header","Math","min","length","boxType","toString","size32","readUInt32BE","boxSize","headerSize","size64","readBigUInt64BE","BigInt","MAX_SAFE_INTEGER","payloadSize","validateISOBaseMediaBuffer","buffer","Promise","resolve","subarray","validateISOBaseMediaFile","filePath","fileHandle","open","stat","Buffer","allocUnsafe","bytesRead","read","close"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAE5B,MAAMC,gBAAgB;AACtB,MAAMC,4BAA4B,IAAIC,IAAI;IAAC;IAAQ;IAAQ;IAAQ;CAAO;AAE1E,MAAMC,4BAA4B,IAAID,IAAI;IACxC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAID,OAAO,MAAME,yBAAyB,CAACC,WACrCF,0BAA0BG,GAAG,CAACD,UAAS;AAEzC,MAAME,uBAAuB,OAAOC,MAAcC;IAChD,IAAI,CAACC,OAAOC,aAAa,CAACH,SAASA,OAAO,IAAI;QAC5C,OAAO;IACT;IAEA,IAAII,WAAW;IACf,IAAIC,WAAW;IAEf,MAAOA,WAAWL,KAAM;QACtB,IAAI,EAAEI,WAAWZ,iBAAiBQ,OAAOK,WAAW,GAAG;YACrD,OAAO;QACT;QAEA,MAAMC,SAAS,MAAML,OAAOI,UAAUE,KAAKC,GAAG,CAAC,IAAIR,OAAOK;QAC1D,IAAIC,OAAOG,MAAM,GAAG,GAAG;YACrB,OAAO;QACT;QAEA,MAAMC,UAAUJ,OAAOK,QAAQ,CAAC,UAAU,GAAG;QAC7C,MAAMC,SAASN,OAAOO,YAAY,CAAC;QACnC,IAAIC;QACJ,IAAIC,aAAa;QAEjB,IAAIH,WAAW,GAAG;YAChBE,UAAUd,OAAOK;QACnB,OAAO,IAAIO,WAAW,GAAG;YACvB,IAAIN,OAAOG,MAAM,GAAG,IAAI;gBACtB,OAAO;YACT;YAEA,MAAMO,SAASV,OAAOW,eAAe,CAAC;YACtC,IAAID,SAASE,OAAOhB,OAAOiB,gBAAgB,GAAG;gBAC5C,OAAO;YACT;YAEAL,UAAUZ,OAAOc;YACjBD,aAAa;QACf,OAAO;YACLD,UAAUF;QACZ;QAEA,IAAIE,UAAUC,cAAcD,UAAUd,OAAOK,UAAU;YACrD,OAAO;QACT;QAEA,IAAIA,aAAa,KAAKK,YAAY,QAAQ;YACxC,MAAMU,cAAcN,UAAUC;YAC9B,IAAIH,WAAW,KAAKQ,cAAc,KAAK,AAACA,CAAAA,cAAc,CAAA,IAAK,MAAM,KAAKN,YAAYd,MAAM;gBACtF,OAAO;YACT;QACF,OAAO,IAAIK,aAAa,KAAK,CAACZ,0BAA0BK,GAAG,CAACY,UAAU;YACpE,OAAO;QACT;QAEAL,YAAYS;IACd;IAEA,OAAOT,aAAaL;AACtB;AAEA,OAAO,MAAMqB,6BAA6B,OAAOC,SAC/CvB,qBAAqBuB,OAAOb,MAAM,EAAE,CAACJ,UAAUI,SAC7Cc,QAAQC,OAAO,CAACF,OAAOG,QAAQ,CAACpB,UAAUA,WAAWI,UACtD;AAEH,OAAO,MAAMiB,2BAA2B,OAAOC;IAC7C,IAAIC;IAEJ,IAAI;QACFA,aAAa,MAAMrC,GAAGsC,IAAI,CAACF,UAAU;QACrC,MAAM,EAAE3B,IAAI,EAAE,GAAG,MAAM4B,WAAWE,IAAI;QAEtC,OAAO,MAAM/B,qBAAqBC,MAAM,OAAOK,UAAUI;YACvD,MAAMa,SAASS,OAAOC,WAAW,CAACvB;YAClC,MAAM,EAAEwB,SAAS,EAAE,GAAG,MAAML,WAAYM,IAAI,CAACZ,QAAQ,GAAGb,QAAQJ;YAChE,OAAOiB,OAAOG,QAAQ,CAAC,GAAGQ;QAC5B;IACF,EAAE,OAAM;QACN,OAAO;IACT,SAAU;QACR,MAAML,YAAYO;IACpB;AACF,EAAC"}