payload 3.89.0 → 3.90.1

package/dist/versions/getRestoredStatusesToAuthorize.js

@@ -0,0 +1,22 @@
+/**
+ * Returns the distinct publication statuses a restore will write, so `access.update` can be
+ * checked for each one. `_status` is a scalar, or a per-locale object when
+ * `versions.drafts.localizeStatus` is on - a localized restore can publish and unpublish locales
+ * at once, so both intents are returned and each must pass. Empty when `_status` is absent.
+ */ export const getRestoredStatusesToAuthorize = (rawStatus)=>{
+    if (typeof rawStatus === 'string') {
+        return [
+            rawStatus === 'published' ? 'published' : 'draft'
+        ];
+    }
+    if (rawStatus && typeof rawStatus === 'object' && !Array.isArray(rawStatus)) {
+        const statuses = new Set();
+        for (const value of Object.values(rawStatus)){
+            statuses.add(value === 'published' ? 'published' : 'draft');
+        }
+        return Array.from(statuses);
+    }
+    return [];
+};
+
+//# sourceMappingURL=getRestoredStatusesToAuthorize.js.map

package/dist/versions/getRestoredStatusesToAuthorize.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/versions/getRestoredStatusesToAuthorize.ts"],"sourcesContent":["export type RestoredStatus = 'draft' | 'published'\n\n/**\n * Returns the distinct publication statuses a restore will write, so `access.update` can be\n * checked for each one. `_status` is a scalar, or a per-locale object when\n * `versions.drafts.localizeStatus` is on - a localized restore can publish and unpublish locales\n * at once, so both intents are returned and each must pass. Empty when `_status` is absent.\n */\nexport const getRestoredStatusesToAuthorize = (rawStatus: unknown): RestoredStatus[] => {\n  if (typeof rawStatus === 'string') {\n    return [rawStatus === 'published' ? 'published' : 'draft']\n  }\n\n  if (rawStatus && typeof rawStatus === 'object' && !Array.isArray(rawStatus)) {\n    const statuses = new Set<RestoredStatus>()\n\n    for (const value of Object.values(rawStatus as Record<string, unknown>)) {\n      statuses.add(value === 'published' ? 'published' : 'draft')\n    }\n\n    return Array.from(statuses)\n  }\n\n  return []\n}\n"],"names":["getRestoredStatusesToAuthorize","rawStatus","Array","isArray","statuses","Set","value","Object","values","add","from"],"mappings":"AAEA;;;;;CAKC,GACD,OAAO,MAAMA,iCAAiC,CAACC;IAC7C,IAAI,OAAOA,cAAc,UAAU;QACjC,OAAO;YAACA,cAAc,cAAc,cAAc;SAAQ;IAC5D;IAEA,IAAIA,aAAa,OAAOA,cAAc,YAAY,CAACC,MAAMC,OAAO,CAACF,YAAY;QAC3E,MAAMG,WAAW,IAAIC;QAErB,KAAK,MAAMC,SAASC,OAAOC,MAAM,CAACP,WAAuC;YACvEG,SAASK,GAAG,CAACH,UAAU,cAAc,cAAc;QACrD;QAEA,OAAOJ,MAAMQ,IAAI,CAACN;IACpB;IAEA,OAAO,EAAE;AACX,EAAC"}

package/dist/versions/getRestoredStatusesToAuthorize.spec.js

@@ -0,0 +1,50 @@
+import { describe, expect, it } from 'vitest';
+import { getRestoredStatusesToAuthorize } from './getRestoredStatusesToAuthorize.js';
+describe('getRestoredStatusesToAuthorize', ()=>{
+    it('should return the scalar published status', ()=>{
+        expect(getRestoredStatusesToAuthorize('published')).toStrictEqual([
+            'published'
+        ]);
+    });
+    it('should return the scalar draft status', ()=>{
+        expect(getRestoredStatusesToAuthorize('draft')).toStrictEqual([
+            'draft'
+        ]);
+    });
+    it('should return a single published status when every locale is published', ()=>{
+        expect(getRestoredStatusesToAuthorize({
+            de: 'published',
+            en: 'published'
+        })).toStrictEqual([
+            'published'
+        ]);
+    });
+    it('should return a single draft status when every locale is draft', ()=>{
+        expect(getRestoredStatusesToAuthorize({
+            de: 'draft',
+            en: 'draft'
+        })).toStrictEqual([
+            'draft'
+        ]);
+    });
+    it('should return both statuses for a mixed-locale object so each transition is authorized', ()=>{
+        const result = getRestoredStatusesToAuthorize({
+            de: 'published',
+            en: 'draft'
+        });
+        expect(result).toHaveLength(2);
+        expect(result).toContain('draft');
+        expect(result).toContain('published');
+    });
+    it('should return an empty array when the status is missing', ()=>{
+        expect(getRestoredStatusesToAuthorize(undefined)).toStrictEqual([]);
+        expect(getRestoredStatusesToAuthorize(null)).toStrictEqual([]);
+    });
+    it('should return an empty array for an array status shape', ()=>{
+        expect(getRestoredStatusesToAuthorize([
+            'published'
+        ])).toStrictEqual([]);
+    });
+});
+
+//# sourceMappingURL=getRestoredStatusesToAuthorize.spec.js.map

package/dist/versions/getRestoredStatusesToAuthorize.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/versions/getRestoredStatusesToAuthorize.spec.ts"],"sourcesContent":["import { describe, expect, it } from 'vitest'\n\nimport { getRestoredStatusesToAuthorize } from './getRestoredStatusesToAuthorize.js'\n\ndescribe('getRestoredStatusesToAuthorize', () => {\n  it('should return the scalar published status', () => {\n    expect(getRestoredStatusesToAuthorize('published')).toStrictEqual(['published'])\n  })\n\n  it('should return the scalar draft status', () => {\n    expect(getRestoredStatusesToAuthorize('draft')).toStrictEqual(['draft'])\n  })\n\n  it('should return a single published status when every locale is published', () => {\n    expect(getRestoredStatusesToAuthorize({ de: 'published', en: 'published' })).toStrictEqual([\n      'published',\n    ])\n  })\n\n  it('should return a single draft status when every locale is draft', () => {\n    expect(getRestoredStatusesToAuthorize({ de: 'draft', en: 'draft' })).toStrictEqual(['draft'])\n  })\n\n  it('should return both statuses for a mixed-locale object so each transition is authorized', () => {\n    const result = getRestoredStatusesToAuthorize({ de: 'published', en: 'draft' })\n\n    expect(result).toHaveLength(2)\n    expect(result).toContain('draft')\n    expect(result).toContain('published')\n  })\n\n  it('should return an empty array when the status is missing', () => {\n    expect(getRestoredStatusesToAuthorize(undefined)).toStrictEqual([])\n    expect(getRestoredStatusesToAuthorize(null)).toStrictEqual([])\n  })\n\n  it('should return an empty array for an array status shape', () => {\n    expect(getRestoredStatusesToAuthorize(['published'])).toStrictEqual([])\n  })\n})\n"],"names":["describe","expect","it","getRestoredStatusesToAuthorize","toStrictEqual","de","en","result","toHaveLength","toContain","undefined"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,8BAA8B,QAAQ,sCAAqC;AAEpFH,SAAS,kCAAkC;IACzCE,GAAG,6CAA6C;QAC9CD,OAAOE,+BAA+B,cAAcC,aAAa,CAAC;YAAC;SAAY;IACjF;IAEAF,GAAG,yCAAyC;QAC1CD,OAAOE,+BAA+B,UAAUC,aAAa,CAAC;YAAC;SAAQ;IACzE;IAEAF,GAAG,0EAA0E;QAC3ED,OAAOE,+BAA+B;YAAEE,IAAI;YAAaC,IAAI;QAAY,IAAIF,aAAa,CAAC;YACzF;SACD;IACH;IAEAF,GAAG,kEAAkE;QACnED,OAAOE,+BAA+B;YAAEE,IAAI;YAASC,IAAI;QAAQ,IAAIF,aAAa,CAAC;YAAC;SAAQ;IAC9F;IAEAF,GAAG,0FAA0F;QAC3F,MAAMK,SAASJ,+BAA+B;YAAEE,IAAI;YAAaC,IAAI;QAAQ;QAE7EL,OAAOM,QAAQC,YAAY,CAAC;QAC5BP,OAAOM,QAAQE,SAAS,CAAC;QACzBR,OAAOM,QAAQE,SAAS,CAAC;IAC3B;IAEAP,GAAG,2DAA2D;QAC5DD,OAAOE,+BAA+BO,YAAYN,aAAa,CAAC,EAAE;QAClEH,OAAOE,+BAA+B,OAAOC,aAAa,CAAC,EAAE;IAC/D;IAEAF,GAAG,0DAA0D;QAC3DD,OAAOE,+BAA+B;YAAC;SAAY,GAAGC,aAAa,CAAC,EAAE;IACxE;AACF"}

package/dist/versions/schedule/job.d.ts

@@ -1,11 +1,11 @@
 import type { TaskConfig } from '../../queues/config/types/taskTypes.js';
 import type { SchedulePublishTaskInput } from './types.js';
 type Args = {
-    adminUserSlug: string;
+    authCollectionSlugs: string[];
     collections: string[];
     globals: string[];
 };
-export declare const getSchedulePublishTask: ({ adminUserSlug, collections, globals, }: Args) => TaskConfig<{
+export declare const getSchedulePublishTask: ({ authCollectionSlugs, collections, globals, }: Args) => TaskConfig<{
     input: SchedulePublishTaskInput;
     output: object;
 }>;

package/dist/versions/schedule/job.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"job.d.ts","sourceRoot":"","sources":["../../../src/versions/schedule/job.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAA;AACxE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAE1D,KAAK,IAAI,GAAG;IACV,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,sBAAsB,6CAIhC,IAAI,KAAG,UAAU,CAAC;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAsGvE,CAAA"}
+{"version":3,"file":"job.d.ts","sourceRoot":"","sources":["../../../src/versions/schedule/job.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wCAAwC,CAAA;AACxE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAE1D,KAAK,IAAI,GAAG;IACV,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB,CAAA;AAED,eAAO,MAAM,sBAAsB,mDAIhC,IAAI,KAAG,UAAU,CAAC;IAAE,KAAK,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAiHvE,CAAA"}

package/dist/versions/schedule/job.js

@@ -1,17 +1,21 @@
-export const getSchedulePublishTask = ({ adminUserSlug, collections, globals })=>{
+export const getSchedulePublishTask = ({ authCollectionSlugs, collections, globals })=>{
     return {
         slug: 'schedulePublish',
         handler: async ({ input, req })=>{
             const _status = input?.type === 'publish' || !input?.type ? 'published' : 'draft';
-            const userID = input.user;
             let user = null;
-            if (userID) {
+            if (input.user != null) {
+                if (typeof input.user !== 'object') {
+                    // Legacy jobs lack enough information to restore the scheduling user identity safely, so fail closed.
+                    const target = input.doc ? ` for the ${input.doc.relationTo} document with ID ${input.doc.value}` : input.global ? ` for the ${input.global} global` : '';
+                    throw new Error(`Scheduled publish job was queued before Payload preserved the scheduling user's auth collection and cannot be run safely. Re-schedule the publish${target} from the admin panel.`);
+                }
                 user = await req.payload.findByID({
-                    id: userID,
-                    collection: adminUserSlug,
+                    id: input.user.value,
+                    collection: input.user.relationTo,
                     depth: 0
                 });
-                user.collection = adminUserSlug;
+                user.collection = input.user.relationTo;
             }
             let publishSpecificLocale;
             if (input?.type === 'publish' && input.locale && req.payload.config.localization) {
@@ -81,7 +85,7 @@ export const getSchedulePublishTask = ({ adminUserSlug, collections, globals })=
             {
                 name: 'user',
                 type: 'relationship',
-                relationTo: adminUserSlug
+                relationTo: authCollectionSlugs
             }
         ]
     };

package/dist/versions/schedule/job.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/versions/schedule/job.ts"],"sourcesContent":["import type { Field } from '../../fields/config/types.js'\nimport type { TypedUser } from '../../index.js'\nimport type { TaskConfig } from '../../queues/config/types/taskTypes.js'\nimport type { SchedulePublishTaskInput } from './types.js'\n\ntype Args = {\n  adminUserSlug: string\n  collections: string[]\n  globals: string[]\n}\n\nexport const getSchedulePublishTask = ({\n  adminUserSlug,\n  collections,\n  globals,\n}: Args): TaskConfig<{ input: SchedulePublishTaskInput; output: object }> => {\n  return {\n    slug: 'schedulePublish',\n    handler: async ({ input, req }) => {\n      const _status = input?.type === 'publish' || !input?.type ? 'published' : 'draft'\n\n      const userID = input.user\n\n      let user: null | TypedUser = null\n\n      if (userID) {\n        user = (await req.payload.findByID({\n          id: userID,\n          collection: adminUserSlug,\n          depth: 0,\n        })) as TypedUser\n\n        user.collection = adminUserSlug\n      }\n\n      let publishSpecificLocale: string\n\n      if (input?.type === 'publish' && input.locale && req.payload.config.localization) {\n        const matchedLocale = req.payload.config.localization.locales.find(\n          ({ code }) => code === input.locale,\n        )\n\n        if (matchedLocale) {\n          publishSpecificLocale = input.locale\n        }\n      }\n\n      if (input.doc) {\n        // input.doc.value is always a string (#10481); coerce back to the real ID type.\n        const idType =\n          req.payload.collections[input.doc.relationTo]?.customIDType ??\n          req.payload.db?.defaultIDType ??\n          'text'\n        const id = idType === 'number' ? Number(input.doc.value) : input.doc.value\n\n        await req.payload.update({\n          id,\n          collection: input.doc.relationTo,\n          data: {\n            _status,\n          },\n          depth: 0,\n          overrideAccess: user === null,\n          publishSpecificLocale: publishSpecificLocale!,\n          user,\n        })\n      }\n\n      if (input.global) {\n        await req.payload.updateGlobal({\n          slug: input.global,\n          data: {\n            _status,\n          },\n          depth: 0,\n          overrideAccess: user === null,\n          publishSpecificLocale: publishSpecificLocale!,\n          user,\n        })\n      }\n\n      return {\n        output: {},\n      }\n    },\n    inputSchema: [\n      {\n        name: 'type',\n        type: 'radio',\n        defaultValue: 'publish',\n        options: ['publish', 'unpublish'],\n      },\n      {\n        name: 'locale',\n        type: 'text',\n      },\n      ...(collections.length > 0\n        ? [\n            {\n              name: 'doc',\n              type: 'relationship',\n              relationTo: collections,\n            } satisfies Field,\n          ]\n        : []),\n      {\n        name: 'global',\n        type: 'select',\n        options: globals,\n      },\n      {\n        name: 'user',\n        type: 'relationship',\n        relationTo: adminUserSlug,\n      },\n    ],\n  }\n}\n"],"names":["getSchedulePublishTask","adminUserSlug","collections","globals","slug","handler","input","req","_status","type","userID","user","payload","findByID","id","collection","depth","publishSpecificLocale","locale","config","localization","matchedLocale","locales","find","code","doc","idType","relationTo","customIDType","db","defaultIDType","Number","value","update","data","overrideAccess","global","updateGlobal","output","inputSchema","name","defaultValue","options","length"],"mappings":"AAWA,OAAO,MAAMA,yBAAyB,CAAC,EACrCC,aAAa,EACbC,WAAW,EACXC,OAAO,EACF;IACL,OAAO;QACLC,MAAM;QACNC,SAAS,OAAO,EAAEC,KAAK,EAAEC,GAAG,EAAE;YAC5B,MAAMC,UAAUF,OAAOG,SAAS,aAAa,CAACH,OAAOG,OAAO,cAAc;YAE1E,MAAMC,SAASJ,MAAMK,IAAI;YAEzB,IAAIA,OAAyB;YAE7B,IAAID,QAAQ;gBACVC,OAAQ,MAAMJ,IAAIK,OAAO,CAACC,QAAQ,CAAC;oBACjCC,IAAIJ;oBACJK,YAAYd;oBACZe,OAAO;gBACT;gBAEAL,KAAKI,UAAU,GAAGd;YACpB;YAEA,IAAIgB;YAEJ,IAAIX,OAAOG,SAAS,aAAaH,MAAMY,MAAM,IAAIX,IAAIK,OAAO,CAACO,MAAM,CAACC,YAAY,EAAE;gBAChF,MAAMC,gBAAgBd,IAAIK,OAAO,CAACO,MAAM,CAACC,YAAY,CAACE,OAAO,CAACC,IAAI,CAChE,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAASlB,MAAMY,MAAM;gBAGrC,IAAIG,eAAe;oBACjBJ,wBAAwBX,MAAMY,MAAM;gBACtC;YACF;YAEA,IAAIZ,MAAMmB,GAAG,EAAE;gBACb,gFAAgF;gBAChF,MAAMC,SACJnB,IAAIK,OAAO,CAACV,WAAW,CAACI,MAAMmB,GAAG,CAACE,UAAU,CAAC,EAAEC,gBAC/CrB,IAAIK,OAAO,CAACiB,EAAE,EAAEC,iBAChB;gBACF,MAAMhB,KAAKY,WAAW,WAAWK,OAAOzB,MAAMmB,GAAG,CAACO,KAAK,IAAI1B,MAAMmB,GAAG,CAACO,KAAK;gBAE1E,MAAMzB,IAAIK,OAAO,CAACqB,MAAM,CAAC;oBACvBnB;oBACAC,YAAYT,MAAMmB,GAAG,CAACE,UAAU;oBAChCO,MAAM;wBACJ1B;oBACF;oBACAQ,OAAO;oBACPmB,gBAAgBxB,SAAS;oBACzBM,uBAAuBA;oBACvBN;gBACF;YACF;YAEA,IAAIL,MAAM8B,MAAM,EAAE;gBAChB,MAAM7B,IAAIK,OAAO,CAACyB,YAAY,CAAC;oBAC7BjC,MAAME,MAAM8B,MAAM;oBAClBF,MAAM;wBACJ1B;oBACF;oBACAQ,OAAO;oBACPmB,gBAAgBxB,SAAS;oBACzBM,uBAAuBA;oBACvBN;gBACF;YACF;YAEA,OAAO;gBACL2B,QAAQ,CAAC;YACX;QACF;QACAC,aAAa;YACX;gBACEC,MAAM;gBACN/B,MAAM;gBACNgC,cAAc;gBACdC,SAAS;oBAAC;oBAAW;iBAAY;YACnC;YACA;gBACEF,MAAM;gBACN/B,MAAM;YACR;eACIP,YAAYyC,MAAM,GAAG,IACrB;gBACE;oBACEH,MAAM;oBACN/B,MAAM;oBACNkB,YAAYzB;gBACd;aACD,GACD,EAAE;YACN;gBACEsC,MAAM;gBACN/B,MAAM;gBACNiC,SAASvC;YACX;YACA;gBACEqC,MAAM;gBACN/B,MAAM;gBACNkB,YAAY1B;YACd;SACD;IACH;AACF,EAAC"}
+{"version":3,"sources":["../../../src/versions/schedule/job.ts"],"sourcesContent":["import type { Field } from '../../fields/config/types.js'\nimport type { TypedUser } from '../../index.js'\nimport type { TaskConfig } from '../../queues/config/types/taskTypes.js'\nimport type { SchedulePublishTaskInput } from './types.js'\n\ntype Args = {\n  authCollectionSlugs: string[]\n  collections: string[]\n  globals: string[]\n}\n\nexport const getSchedulePublishTask = ({\n  authCollectionSlugs,\n  collections,\n  globals,\n}: Args): TaskConfig<{ input: SchedulePublishTaskInput; output: object }> => {\n  return {\n    slug: 'schedulePublish',\n    handler: async ({ input, req }) => {\n      const _status = input?.type === 'publish' || !input?.type ? 'published' : 'draft'\n\n      let user: null | TypedUser = null\n\n      if (input.user != null) {\n        if (typeof input.user !== 'object') {\n          // Legacy jobs lack enough information to restore the scheduling user identity safely, so fail closed.\n          const target = input.doc\n            ? ` for the ${input.doc.relationTo} document with ID ${input.doc.value}`\n            : input.global\n              ? ` for the ${input.global} global`\n              : ''\n\n          throw new Error(\n            `Scheduled publish job was queued before Payload preserved the scheduling user's auth collection and cannot be run safely. Re-schedule the publish${target} from the admin panel.`,\n          )\n        }\n\n        user = (await req.payload.findByID({\n          id: input.user.value,\n          collection: input.user.relationTo,\n          depth: 0,\n        })) as TypedUser\n\n        user.collection = input.user.relationTo\n      }\n\n      let publishSpecificLocale: string\n\n      if (input?.type === 'publish' && input.locale && req.payload.config.localization) {\n        const matchedLocale = req.payload.config.localization.locales.find(\n          ({ code }) => code === input.locale,\n        )\n\n        if (matchedLocale) {\n          publishSpecificLocale = input.locale\n        }\n      }\n\n      if (input.doc) {\n        // input.doc.value is always a string (#10481); coerce back to the real ID type.\n        const idType =\n          req.payload.collections[input.doc.relationTo]?.customIDType ??\n          req.payload.db?.defaultIDType ??\n          'text'\n        const id = idType === 'number' ? Number(input.doc.value) : input.doc.value\n\n        await req.payload.update({\n          id,\n          collection: input.doc.relationTo,\n          data: {\n            _status,\n          },\n          depth: 0,\n          overrideAccess: user === null,\n          publishSpecificLocale: publishSpecificLocale!,\n          user,\n        })\n      }\n\n      if (input.global) {\n        await req.payload.updateGlobal({\n          slug: input.global,\n          data: {\n            _status,\n          },\n          depth: 0,\n          overrideAccess: user === null,\n          publishSpecificLocale: publishSpecificLocale!,\n          user,\n        })\n      }\n\n      return {\n        output: {},\n      }\n    },\n    inputSchema: [\n      {\n        name: 'type',\n        type: 'radio',\n        defaultValue: 'publish',\n        options: ['publish', 'unpublish'],\n      },\n      {\n        name: 'locale',\n        type: 'text',\n      },\n      ...(collections.length > 0\n        ? [\n            {\n              name: 'doc',\n              type: 'relationship',\n              relationTo: collections,\n            } satisfies Field,\n          ]\n        : []),\n      {\n        name: 'global',\n        type: 'select',\n        options: globals,\n      },\n      {\n        name: 'user',\n        type: 'relationship',\n        relationTo: authCollectionSlugs,\n      },\n    ],\n  }\n}\n"],"names":["getSchedulePublishTask","authCollectionSlugs","collections","globals","slug","handler","input","req","_status","type","user","target","doc","relationTo","value","global","Error","payload","findByID","id","collection","depth","publishSpecificLocale","locale","config","localization","matchedLocale","locales","find","code","idType","customIDType","db","defaultIDType","Number","update","data","overrideAccess","updateGlobal","output","inputSchema","name","defaultValue","options","length"],"mappings":"AAWA,OAAO,MAAMA,yBAAyB,CAAC,EACrCC,mBAAmB,EACnBC,WAAW,EACXC,OAAO,EACF;IACL,OAAO;QACLC,MAAM;QACNC,SAAS,OAAO,EAAEC,KAAK,EAAEC,GAAG,EAAE;YAC5B,MAAMC,UAAUF,OAAOG,SAAS,aAAa,CAACH,OAAOG,OAAO,cAAc;YAE1E,IAAIC,OAAyB;YAE7B,IAAIJ,MAAMI,IAAI,IAAI,MAAM;gBACtB,IAAI,OAAOJ,MAAMI,IAAI,KAAK,UAAU;oBAClC,sGAAsG;oBACtG,MAAMC,SAASL,MAAMM,GAAG,GACpB,CAAC,SAAS,EAAEN,MAAMM,GAAG,CAACC,UAAU,CAAC,kBAAkB,EAAEP,MAAMM,GAAG,CAACE,KAAK,EAAE,GACtER,MAAMS,MAAM,GACV,CAAC,SAAS,EAAET,MAAMS,MAAM,CAAC,OAAO,CAAC,GACjC;oBAEN,MAAM,IAAIC,MACR,CAAC,iJAAiJ,EAAEL,OAAO,sBAAsB,CAAC;gBAEtL;gBAEAD,OAAQ,MAAMH,IAAIU,OAAO,CAACC,QAAQ,CAAC;oBACjCC,IAAIb,MAAMI,IAAI,CAACI,KAAK;oBACpBM,YAAYd,MAAMI,IAAI,CAACG,UAAU;oBACjCQ,OAAO;gBACT;gBAEAX,KAAKU,UAAU,GAAGd,MAAMI,IAAI,CAACG,UAAU;YACzC;YAEA,IAAIS;YAEJ,IAAIhB,OAAOG,SAAS,aAAaH,MAAMiB,MAAM,IAAIhB,IAAIU,OAAO,CAACO,MAAM,CAACC,YAAY,EAAE;gBAChF,MAAMC,gBAAgBnB,IAAIU,OAAO,CAACO,MAAM,CAACC,YAAY,CAACE,OAAO,CAACC,IAAI,CAChE,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAASvB,MAAMiB,MAAM;gBAGrC,IAAIG,eAAe;oBACjBJ,wBAAwBhB,MAAMiB,MAAM;gBACtC;YACF;YAEA,IAAIjB,MAAMM,GAAG,EAAE;gBACb,gFAAgF;gBAChF,MAAMkB,SACJvB,IAAIU,OAAO,CAACf,WAAW,CAACI,MAAMM,GAAG,CAACC,UAAU,CAAC,EAAEkB,gBAC/CxB,IAAIU,OAAO,CAACe,EAAE,EAAEC,iBAChB;gBACF,MAAMd,KAAKW,WAAW,WAAWI,OAAO5B,MAAMM,GAAG,CAACE,KAAK,IAAIR,MAAMM,GAAG,CAACE,KAAK;gBAE1E,MAAMP,IAAIU,OAAO,CAACkB,MAAM,CAAC;oBACvBhB;oBACAC,YAAYd,MAAMM,GAAG,CAACC,UAAU;oBAChCuB,MAAM;wBACJ5B;oBACF;oBACAa,OAAO;oBACPgB,gBAAgB3B,SAAS;oBACzBY,uBAAuBA;oBACvBZ;gBACF;YACF;YAEA,IAAIJ,MAAMS,MAAM,EAAE;gBAChB,MAAMR,IAAIU,OAAO,CAACqB,YAAY,CAAC;oBAC7BlC,MAAME,MAAMS,MAAM;oBAClBqB,MAAM;wBACJ5B;oBACF;oBACAa,OAAO;oBACPgB,gBAAgB3B,SAAS;oBACzBY,uBAAuBA;oBACvBZ;gBACF;YACF;YAEA,OAAO;gBACL6B,QAAQ,CAAC;YACX;QACF;QACAC,aAAa;YACX;gBACEC,MAAM;gBACNhC,MAAM;gBACNiC,cAAc;gBACdC,SAAS;oBAAC;oBAAW;iBAAY;YACnC;YACA;gBACEF,MAAM;gBACNhC,MAAM;YACR;eACIP,YAAY0C,MAAM,GAAG,IACrB;gBACE;oBACEH,MAAM;oBACNhC,MAAM;oBACNI,YAAYX;gBACd;aACD,GACD,EAAE;YACN;gBACEuC,MAAM;gBACNhC,MAAM;gBACNkC,SAASxC;YACX;YACA;gBACEsC,MAAM;gBACNhC,MAAM;gBACNI,YAAYZ;YACd;SACD;IACH;AACF,EAAC"}

package/dist/versions/schedule/types.d.ts

@@ -1,4 +1,8 @@
 import type { CollectionSlug, GlobalSlug } from '../../index.js';
+export type SchedulePublishTaskUser = {
+    relationTo: CollectionSlug;
+    value: number | string;
+} | number | string;
 export type SchedulePublishTaskInput = {
     doc?: {
         relationTo: CollectionSlug;
@@ -7,6 +11,6 @@ export type SchedulePublishTaskInput = {
     global?: GlobalSlug;
     locale?: string;
     type?: string;
-    user?: number | string;
+    user?: SchedulePublishTaskUser;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/versions/schedule/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/versions/schedule/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhE,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,CAAC,EAAE;QACJ,UAAU,EAAE,cAAc,CAAA;QAC1B,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;IACD,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/versions/schedule/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhE,MAAM,MAAM,uBAAuB,GAC/B;IACE,UAAU,EAAE,cAAc,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB,GACD,MAAM,GACN,MAAM,CAAA;AAEV,MAAM,MAAM,wBAAwB,GAAG;IACrC,GAAG,CAAC,EAAE;QACJ,UAAU,EAAE,cAAc,CAAA;QAC1B,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;IACD,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,uBAAuB,CAAA;CAC/B,CAAA"}

package/dist/versions/schedule/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/versions/schedule/types.ts"],"sourcesContent":["import type { CollectionSlug, GlobalSlug } from '../../index.js'\n\nexport type SchedulePublishTaskInput = {\n  doc?: {\n    relationTo: CollectionSlug\n    value: string\n  }\n  global?: GlobalSlug\n  locale?: string\n  type?: string\n  user?: number | string\n}\n"],"names":[],"mappings":"AAEA,WASC"}
+{"version":3,"sources":["../../../src/versions/schedule/types.ts"],"sourcesContent":["import type { CollectionSlug, GlobalSlug } from '../../index.js'\n\nexport type SchedulePublishTaskUser =\n  | {\n      relationTo: CollectionSlug\n      value: number | string\n    }\n  | number\n  | string\n\nexport type SchedulePublishTaskInput = {\n  doc?: {\n    relationTo: CollectionSlug\n    value: string\n  }\n  global?: GlobalSlug\n  locale?: string\n  type?: string\n  user?: SchedulePublishTaskUser\n}\n"],"names":[],"mappings":"AAUA,WASC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "payload",
-  "version": "3.89.0",
+  "version": "3.90.1",
   "description": "Node, React, Headless CMS and Application Framework built on Next.js",
   "keywords": [
     "admin panel",
@@ -110,12 +110,13 @@
     "qs-esm": "8.0.1",
     "range-parser": "1.2.1",
     "sanitize-filename": "1.6.3",
+    "sax": "1.6.1",
     "ts-essentials": "10.0.3",
     "tsx": "4.22.4",
     "undici": "7.29.0",
     "uuid": "13.0.2",
     "ws": "^8.16.0",
-    "@payloadcms/translations": "3.89.0"
+    "@payloadcms/translations": "3.90.1"
   },
   "devDependencies": {
     "@hyrious/esbuild-plugin-commonjs": "0.2.6",
@@ -125,6 +126,7 @@
     "@types/nodemailer": "^8.0.0",
     "@types/pluralize": "0.0.33",
     "@types/range-parser": "1.2.7",
+    "@types/sax": "1.2.7",
     "@types/ws": "^8.5.10",
     "copyfiles": "2.4.1",
     "cross-env": "7.0.3",

package/dist/auth/baseFields/apiKey.d.ts

@@ -1,3 +0,0 @@
-import type { Field } from '../../fields/config/types.js';
-export declare const apiKeyFields: Field[];
-//# sourceMappingURL=apiKey.d.ts.map

package/dist/auth/baseFields/apiKey.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAa,MAAM,8BAA8B,CAAA;AAOpE,eAAO,MAAM,YAAY,EAoDpB,KAAK,EAAE,CAAA"}

package/dist/auth/baseFields/apiKey.js

@@ -1,59 +0,0 @@
-import crypto from 'crypto';
-const encryptKey = ({ req, value })=>value ? req.payload.encrypt(value) : null;
-const decryptKey = ({ req, value })=>value ? req.payload.decrypt(value) : undefined;
-export const apiKeyFields = [
-    {
-        name: 'enableAPIKey',
-        type: 'checkbox',
-        admin: {
-            components: {
-                Field: false
-            }
-        },
-        label: ({ t })=>t('authentication:enableAPIKey')
-    },
-    {
-        name: 'apiKey',
-        type: 'text',
-        admin: {
-            components: {
-                Field: false
-            }
-        },
-        hooks: {
-            afterRead: [
-                decryptKey
-            ],
-            beforeChange: [
-                encryptKey
-            ]
-        },
-        label: ({ t })=>t('authentication:apiKey')
-    },
-    {
-        name: 'apiKeyIndex',
-        type: 'text',
-        admin: {
-            disabled: true
-        },
-        hidden: true,
-        hooks: {
-            beforeValidate: [
-                ({ data, req, value })=>{
-                    if (data?.apiKey === false || data?.apiKey === null) {
-                        return null;
-                    }
-                    if (data?.enableAPIKey === false || data?.enableAPIKey === null) {
-                        return null;
-                    }
-                    if (data?.apiKey) {
-                        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
-                    }
-                    return value;
-                }
-            ]
-        }
-    }
-];
-
-//# sourceMappingURL=apiKey.js.map

package/dist/auth/baseFields/apiKey.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/auth/baseFields/apiKey.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { Field, FieldHook } from '../../fields/config/types.js'\n\nconst encryptKey: FieldHook = ({ req, value }) =>\n  value ? req.payload.encrypt(value as string) : null\nconst decryptKey: FieldHook = ({ req, value }) =>\n  value ? req.payload.decrypt(value as string) : undefined\n\nexport const apiKeyFields = [\n  {\n    name: 'enableAPIKey',\n    type: 'checkbox',\n    admin: {\n      components: {\n        Field: false,\n      },\n    },\n    label: ({ t }) => t('authentication:enableAPIKey'),\n  },\n  {\n    name: 'apiKey',\n    type: 'text',\n    admin: {\n      components: {\n        Field: false,\n      },\n    },\n    hooks: {\n      afterRead: [decryptKey],\n      beforeChange: [encryptKey],\n    },\n    label: ({ t }) => t('authentication:apiKey'),\n  },\n  {\n    name: 'apiKeyIndex',\n    type: 'text',\n    admin: {\n      disabled: true,\n    },\n    hidden: true,\n    hooks: {\n      beforeValidate: [\n        ({ data, req, value }) => {\n          if (data?.apiKey === false || data?.apiKey === null) {\n            return null\n          }\n          if (data?.enableAPIKey === false || data?.enableAPIKey === null) {\n            return null\n          }\n          if (data?.apiKey) {\n            return crypto\n              .createHmac('sha256', req.payload.secret)\n              .update(data.apiKey as string)\n              .digest('hex')\n          }\n          return value\n        },\n      ],\n    },\n  },\n] as Field[]\n"],"names":["crypto","encryptKey","req","value","payload","encrypt","decryptKey","decrypt","undefined","apiKeyFields","name","type","admin","components","Field","label","t","hooks","afterRead","beforeChange","disabled","hidden","beforeValidate","data","apiKey","enableAPIKey","createHmac","secret","update","digest"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAI3B,MAAMC,aAAwB,CAAC,EAAEC,GAAG,EAAEC,KAAK,EAAE,GAC3CA,QAAQD,IAAIE,OAAO,CAACC,OAAO,CAACF,SAAmB;AACjD,MAAMG,aAAwB,CAAC,EAAEJ,GAAG,EAAEC,KAAK,EAAE,GAC3CA,QAAQD,IAAIE,OAAO,CAACG,OAAO,CAACJ,SAAmBK;AAEjD,OAAO,MAAMC,eAAe;IAC1B;QACEC,MAAM;QACNC,MAAM;QACNC,OAAO;YACLC,YAAY;gBACVC,OAAO;YACT;QACF;QACAC,OAAO,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE;IACtB;IACA;QACEN,MAAM;QACNC,MAAM;QACNC,OAAO;YACLC,YAAY;gBACVC,OAAO;YACT;QACF;QACAG,OAAO;YACLC,WAAW;gBAACZ;aAAW;YACvBa,cAAc;gBAAClB;aAAW;QAC5B;QACAc,OAAO,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE;IACtB;IACA;QACEN,MAAM;QACNC,MAAM;QACNC,OAAO;YACLQ,UAAU;QACZ;QACAC,QAAQ;QACRJ,OAAO;YACLK,gBAAgB;gBACd,CAAC,EAAEC,IAAI,EAAErB,GAAG,EAAEC,KAAK,EAAE;oBACnB,IAAIoB,MAAMC,WAAW,SAASD,MAAMC,WAAW,MAAM;wBACnD,OAAO;oBACT;oBACA,IAAID,MAAME,iBAAiB,SAASF,MAAME,iBAAiB,MAAM;wBAC/D,OAAO;oBACT;oBACA,IAAIF,MAAMC,QAAQ;wBAChB,OAAOxB,OACJ0B,UAAU,CAAC,UAAUxB,IAAIE,OAAO,CAACuB,MAAM,EACvCC,MAAM,CAACL,KAAKC,MAAM,EAClBK,MAAM,CAAC;oBACZ;oBACA,OAAO1B;gBACT;aACD;QACH;IACF;CACD,CAAW"}