payload 4.0.0-internal.2fddfc0 → 4.0.0-internal.31ba7ee

package/dist/uploads/types.d.ts

@@ -1,6 +1,7 @@
 import type { ResizeOptions, Sharp, SharpOptions } from 'sharp';
 import type { CollectionConfig, TypeWithID } from '../collections/config/types.js';
 import type { PayloadComponent } from '../config/types.js';
+import type { UploadCollectionSlug } from '../index.js';
 import type { PayloadRequest } from '../types/index.js';
 import type { WithMetadata } from './optionallyAppendMetadata.js';
 export type FileSize = {
@@ -50,7 +51,7 @@ export type GenerateImageName = (args: {
     sizeName: string;
     width: number;
 }) => string;
-export type ImageSize = {
+type ImageSizeBase = {
     /**
      * Admin UI options that control how this image size appears in list views.
      */
@@ -69,16 +70,21 @@ export type ImageSize = {
             groupBy?: boolean;
         };
     };
-    /**
-     * @deprecated prefer position
-     */
-    crop?: string;
-    formatOptions?: ImageUploadFormatOptions;
     /**
      * Generate a custom name for the file of this image size.
      */
     generateImageName?: GenerateImageName;
     name: string;
+};
+/**
+ * Image size options implemented by Payload's default Sharp image processor.
+ */
+export type SharpImageSizeOptions = {
+    /**
+     * @deprecated prefer position
+     */
+    crop?: string;
+    formatOptions?: ImageUploadFormatOptions;
     trimOptions?: ImageUploadTrimOptions;
     /**
      * When an uploaded image is smaller than the defined image size, we have 3 options:
@@ -91,6 +97,23 @@ export type ImageSize = {
      */
     withoutEnlargement?: ResizeOptions['withoutEnlargement'];
 } & Omit<ResizeOptions, 'withoutEnlargement'>;
+/**
+ * Interface to be module-augmented by image processing providers.
+ *
+ * When no provider is registered, ImageSize uses SharpImageSizeOptions.
+ * When providers are registered, ImageSize uses their registered options instead.
+ *
+ * @example
+ * declare module 'payload' {
+ *   interface RegisteredImageSizeOptions {
+ *     myProvider: MyProviderImageSizeOptions
+ *   }
+ * }
+ */
+export interface RegisteredImageSizeOptions {
+}
+type ImageSizeOptions = keyof RegisteredImageSizeOptions extends never ? SharpImageSizeOptions : RegisteredImageSizeOptions[keyof RegisteredImageSizeOptions];
+export type ImageSize = ImageSizeBase & ImageSizeOptions;
 export type GetAdminThumbnail = (args: {
     doc: Record<string, unknown>;
 }) => false | null | string;
@@ -105,14 +128,39 @@ export type FileAllowList = Array<{
     extensions: string[];
     mimeType: string;
 }>;
+export type UploadFilePreviewClientProps = {
+    filename: string;
+    filesize: number;
+    /** Resolved URL of the file (data.url). */
+    fileSrc: string;
+    height?: number;
+    mimeType: string;
+    width?: number;
+};
+type UploadFilePreviewMap = {
+    [mimeTypePattern: string]: PayloadComponent;
+};
 type Admin = {
     components?: {
         /**
          * The Controls component to extend the upload controls in the admin panel.
          */
         controls?: PayloadComponent[];
+        /**
+         * A custom component to render in place of the default Thumbnail in the upload side panel.
+         *
+         * Can be a single PayloadComponent (renders for all MIME types) or a Record keyed by
+         * MIME type patterns. Pattern resolution priority: exact match → category wildcard
+         * (e.g. `video/*`) → universal fallback (`*`). Falls back to the default Thumbnail
+         * when nothing matches.
+         */
+        filePreview?: PayloadComponent | UploadFilePreviewMap;
     };
 };
+export type ExternalFileHeaderFilterContext = {
+    isSameOrigin: boolean;
+    url: string;
+};
 export type UploadConfig = {
     /**
      * The adapter name to use for uploads. Used for storage adapter telemetry.
@@ -170,8 +218,10 @@ export type UploadConfig = {
      */
     displayPreview?: boolean;
     /**
-     *
-     * Accepts existing headers and returns the headers after filtering or modifying.
+     * Accepts existing headers and returns the headers after filtering or modifying. The optional
+     * context identifies the destination for the current request, including each redirect hop.
+     * `isSameOrigin` is true only when that destination matches a trusted origin established for a
+     * relative file URL.
      * If using this option, you should handle the removal of any sensitive cookies
      * (like payload-prefixed cookies) to prevent leaking session information to external
      * services. By default, Payload automatically filters out payload-prefixed cookies
@@ -180,7 +230,7 @@ export type UploadConfig = {
      * Useful for adding custom headers to fetch from external providers.
      * @default undefined
      */
-    externalFileHeaderFilter?: (headers: Record<string, string>) => Record<string, string>;
+    externalFileHeaderFilter?: (headers: Record<string, string>, context?: ExternalFileHeaderFilterContext) => Record<string, string>;
     /**
      * Field slugs to use for a compound index instead of the default filename index.
      */
@@ -213,10 +263,10 @@ export type UploadConfig = {
         doc: TypeWithID;
         headers?: Headers;
         params: {
-            clientUploadContext?: unknown;
             collection: string;
             filename: string;
             prefix?: string;
+            uploadReference?: unknown;
         };
     }) => Promise<Response> | Promise<void> | Response | void)[];
     /**
@@ -268,6 +318,11 @@ export type UploadConfig = {
      */
     staticDir?: string;
     trimOptions?: ImageUploadTrimOptions;
+    /**
+     * Adapter-provided upload instructions.
+     * @internal
+     */
+    uploadInstructions?: UploadInstructionsCapability;
     /**
      * Optionally append metadata to the image during processing.
      *
@@ -280,7 +335,54 @@ export type UploadConfig = {
      */
     withMetadata?: WithMetadata;
 };
+export type UploadInstructionsAccess = (args: {
+    collectionSlug: UploadCollectionSlug;
+    req: PayloadRequest;
+}) => boolean | Promise<boolean>;
+export type UploadInstructionsRequest = {
+    collectionSlug: UploadCollectionSlug;
+    docPrefix?: string;
+    filename: string;
+    filesize: number;
+    mimeType: string;
+};
+export type UploadInstructions = {
+    file: {
+        filename: string;
+        mimeType: string;
+        size: number;
+        uploadReference: Record<string, unknown>;
+    };
+} & ({
+    data?: unknown;
+    name: string;
+    type: 'dispatch';
+} | {
+    request: {
+        headers?: Record<string, string>;
+        method: 'POST' | 'PUT';
+        url: string;
+    };
+    type: 'http';
+});
+export type GenerateUploadInstructions = (args: {
+    overrideAccess?: boolean;
+    req: PayloadRequest;
+} & UploadInstructionsRequest) => Promise<UploadInstructions> | UploadInstructions;
+export type UploadInstructionsCapability = {
+    /** Generates upload instructions. The generator or supporting endpoint must check access. */
+    generate: GenerateUploadInstructions;
+    /** Require a signed server-issued reference before invoking upload handlers. @internal */
+    requiresUploadReceipt?: boolean;
+    /**
+     * Whether the Admin panel should use these instructions before saving a document.
+     * This can still be useful when upload chunks pass through Payload.
+     */
+    useInAdmin: boolean;
+};
 export type checkFileRestrictionsParams = {
+    /** Set to false when the file bytes have not been uploaded yet. */
+    checkFileContents?: boolean;
     collection: CollectionConfig;
     file: File;
     req: PayloadRequest;
@@ -319,6 +421,16 @@ export type FileToSave = {
      * The path to save the file.
      */
     path: string;
+} | {
+    /**
+     * The path to save the file.
+     */
+    path: string;
+    /**
+     * An existing file on disk to copy to `path`, instead of `buffer` - avoids loading a file
+     * that's already on disk (e.g. a temp file) fully into memory just to write it back out.
+     */
+    sourcePath: string;
 };
 type Crop = {
     height: number;

package/dist/uploads/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/uploads/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,MAAM,EAAE,IAAI,GAAG,MAAM,CAAA;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,GAAG,EAAE,IAAI,GAAG,MAAM,CAAA;IAClB,KAAK,EAAE,IAAI,GAAG,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,OAAO,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAC3C,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,KAAK,MAAM,CAAA;AAEZ,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,KAAK,CAAC,EAAE;QACN;;;;;;;WAOG;QACH,QAAQ,CAAC,EAAE;YACT,MAAM,CAAC,EAAE,OAAO,CAAA;YAChB,MAAM,CAAC,EAAE,OAAO,CAAA;YAChB,OAAO,CAAC,EAAE,OAAO,CAAA;SAClB,CAAA;KACF,CAAA;IACD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAA;CACzD,GAAG,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAA;AAE7C,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAAK,KAAK,GAAG,IAAI,GAAG,MAAM,CAAA;AAEjG,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAC,CAAA;AAEF,KAAK,KAAK,GAAG;IACX,UAAU,CAAC,EAAE;QACX;;WAEG;QACH,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;KAC9B,CAAA;CACF,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAA;IACb;;;;QAII;IACJ,cAAc,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC3C;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAA;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;;;;OAUG;IACH,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtF;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;OAEG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,CACV,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;QACJ,GAAG,EAAE,UAAU,CAAA;QACf,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,MAAM,EAAE;YACN,mBAAmB,CAAC,EAAE,OAAO,CAAA;YAC7B,UAAU,EAAE,MAAM,CAAA;YAClB,QAAQ,EAAE,MAAM,CAAA;YAChB,MAAM,CAAC,EAAE,MAAM,CAAA;SAChB,CAAA;KACF,KACE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAA;IAC3D;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAA;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,GAAG,IAAI,CAAA;IAC7E;;;;;;OAMG;IACH,QAAQ,CAAC,EACL;QACE,SAAS,EAAE,SAAS,CAAA;KACrB,GACD,KAAK,CAAA;IACT;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,GAAG,OAAO,CAAA;IACnC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B,CAAA;AACD,MAAM,MAAM,2BAA2B,GAAG;IACxC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,IAAI,CAAA;IACV,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;CACrC,GAAG,YAAY,CAAA;AAEhB,MAAM,MAAM,IAAI,GAAG;IACjB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,KAAK,IAAI,GAAG;IACV,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,GAAG,GAAG,IAAI,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/uploads/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,MAAM,EAAE,IAAI,GAAG,MAAM,CAAA;IACrB,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAA;IACvB,GAAG,EAAE,IAAI,GAAG,MAAM,CAAA;IAClB,KAAK,EAAE,IAAI,GAAG,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,SAAS,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,OAAO,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;CAC3C,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd,KAAK,MAAM,CAAA;AAEZ,KAAK,aAAa,GAAG;IACnB;;OAEG;IACH,KAAK,CAAC,EAAE;QACN;;;;;;;WAOG;QACH,QAAQ,CAAC,EAAE;YACT,MAAM,CAAC,EAAE,OAAO,CAAA;YAChB,MAAM,CAAC,EAAE,OAAO,CAAA;YAChB,OAAO,CAAC,EAAE,OAAO,CAAA;SAClB,CAAA;KACF,CAAA;IACD;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAA;CACzD,GAAG,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAA;AAE7C;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,0BAA0B;CAAG;AAE9C,KAAK,gBAAgB,GAAG,MAAM,0BAA0B,SAAS,KAAK,GAClE,qBAAqB,GACrB,0BAA0B,CAAC,MAAM,0BAA0B,CAAC,CAAA;AAEhE,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,gBAAgB,CAAA;AAExD,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,KAAK,KAAK,GAAG,IAAI,GAAG,MAAM,CAAA;AAEjG,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAC,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC;IAChC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAC,CAAA;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,KAAK,oBAAoB,GAAG;IAC1B,CAAC,eAAe,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAC5C,CAAA;AAED,KAAK,KAAK,GAAG;IACX,UAAU,CAAC,EAAE;QACX;;WAEG;QACH,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;QAC7B;;;;;;;WAOG;QACH,WAAW,CAAC,EAAE,gBAAgB,GAAG,oBAAoB,CAAA;KACtD,CAAA;CACF,CAAA;AAED,MAAM,MAAM,+BAA+B,GAAG;IAC5C,YAAY,EAAE,OAAO,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAA;IACb;;;;QAII;IACJ,cAAc,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC3C;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,YAAY,CAAA;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;;;;;;OAYG;IACH,wBAAwB,CAAC,EAAE,CACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,CAAC,EAAE,+BAA+B,KACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAA;IAChC;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;OAEG;IACH,aAAa,CAAC,EAAE,wBAAwB,CAAA;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,CACV,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE;QACJ,GAAG,EAAE,UAAU,CAAA;QACf,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,MAAM,EAAE;YACN,UAAU,EAAE,MAAM,CAAA;YAClB,QAAQ,EAAE,MAAM,CAAA;YAChB,MAAM,CAAC,EAAE,MAAM,CAAA;YACf,eAAe,CAAC,EAAE,OAAO,CAAA;SAC1B,CAAA;KACF,KACE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAA;IAC3D;;OAEG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;OAEG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAA;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,GAAG,IAAI,CAAA;IAC7E;;;;;;OAMG;IACH,QAAQ,CAAC,EACL;QACE,SAAS,EAAE,SAAS,CAAA;KACrB,GACD,KAAK,CAAA;IACT;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,GAAG,OAAO,CAAA;IACnC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,sBAAsB,CAAA;IACpC;;;OAGG;IACH,kBAAkB,CAAC,EAAE,4BAA4B,CAAA;IACjD;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE;IAC5C,cAAc,EAAE,oBAAoB,CAAA;IACpC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;AAEhC,MAAM,MAAM,yBAAyB,GAAG;IACtC,cAAc,EAAE,oBAAoB,CAAA;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,IAAI,EAAE,MAAM,CAAA;QACZ,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KACzC,CAAA;CACF,GAAG,CACA;IACE,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,UAAU,CAAA;CACjB,GACD;IACE,OAAO,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAA;QACtB,GAAG,EAAE,MAAM,CAAA;KACZ,CAAA;IACD,IAAI,EAAE,MAAM,CAAA;CACb,CACJ,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG,CACvC,IAAI,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,GAAG,yBAAyB,KAChF,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAA;AAErD,MAAM,MAAM,4BAA4B,GAAG;IACzC,6FAA6F;IAC7F,QAAQ,EAAE,0BAA0B,CAAA;IACpC,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAA;CACpB,CAAA;AACD,MAAM,MAAM,2BAA2B,GAAG;IACxC,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,IAAI,CAAA;IACV,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;CACrC,GAAG,YAAY,CAAA;AAEhB,MAAM,MAAM,IAAI,GAAG;IACjB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,UAAU,GAClB;IACE;;OAEG;IACH,MAAM,EAAE,MAAM,CAAA;IACd;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;CACb,GACD;IACE;;OAEG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAEL,KAAK,IAAI,GAAG;IACV,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,GAAG,GAAG,IAAI,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;CACV,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA"}

package/dist/uploads/types.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/types.ts"],"sourcesContent":["import type { ResizeOptions, Sharp, SharpOptions } from 'sharp'\n\nimport type { CollectionConfig, TypeWithID } from '../collections/config/types.js'\nimport type { PayloadComponent } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\nimport type { WithMetadata } from './optionallyAppendMetadata.js'\n\nexport type FileSize = {\n  filename: null | string\n  filesize: null | number\n  height: null | number\n  mimeType: null | string\n  url: null | string\n  width: null | number\n}\n\nexport type FileSizes = {\n  [size: string]: FileSize\n}\n\nexport type FileData = {\n  filename: string\n  filesize: number\n  focalX?: number\n  focalY?: number\n  height: number\n  mimeType: string\n  sizes: FileSizes\n  tempFilePath?: string\n  url?: string\n  width: number\n}\n\nexport type ProbedImageSize = {\n  height: number\n  width: number\n}\n\n/**\n * Params sent to the sharp `toFormat()` function\n * @link https://sharp.pixelplumbing.com/api-output#toformat\n */\nexport type ImageUploadFormatOptions = {\n  format: Parameters<Sharp['toFormat']>[0]\n  options?: Parameters<Sharp['toFormat']>[1]\n}\n\n/**\n * Params sent to the sharp trim() function\n * @link https://sharp.pixelplumbing.com/api-resize#trim\n */\nexport type ImageUploadTrimOptions = Parameters<Sharp['trim']>[0]\n\nexport type GenerateImageName = (args: {\n  extension: string\n  height: number\n  originalName: string\n  sizeName: string\n  width: number\n}) => string\n\nexport type ImageSize = {\n  /**\n   * Admin UI options that control how this image size appears in list views.\n   */\n  admin?: {\n    /**\n     * Controls visibility of this image size in the collection list view.\n     * Defaults to hiding the image size from columns, filters, and group-by to reduce noise.\n     *\n     * - `column` — whether to hide this size from selectable list columns. @default false\n     * - `filter` — whether to hide this size from filter options. @default false\n     * - `groupBy` — whether to hide this size from group-by options. @default false\n     */\n    disabled?: {\n      column?: boolean\n      filter?: boolean\n      groupBy?: boolean\n    }\n  }\n  /**\n   * @deprecated prefer position\n   */\n  crop?: string // comes from sharp package\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Generate a custom name for the file of this image size.\n   */\n  generateImageName?: GenerateImageName\n  name: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * When an uploaded image is smaller than the defined image size, we have 3 options:\n   *\n   * `undefined | false | true`\n   *\n   * 1. `undefined` [default]: uploading images with smaller width AND height than the image size will return null\n   * 2. `false`: always enlarge images to the image size\n   * 3. `true`: if the image is smaller than the image size, return the original image\n   */\n  withoutEnlargement?: ResizeOptions['withoutEnlargement']\n} & Omit<ResizeOptions, 'withoutEnlargement'>\n\nexport type GetAdminThumbnail = (args: { doc: Record<string, unknown> }) => false | null | string\n\nexport type AllowList = Array<{\n  hostname: string\n  pathname?: string\n  port?: string\n  protocol?: 'http' | 'https'\n  search?: string\n}>\n\nexport type FileAllowList = Array<{\n  extensions: string[]\n  mimeType: string\n}>\n\ntype Admin = {\n  components?: {\n    /**\n     * The Controls component to extend the upload controls in the admin panel.\n     */\n    controls?: PayloadComponent[]\n  }\n}\n\nexport type UploadConfig = {\n  /**\n   * The adapter name to use for uploads. Used for storage adapter telemetry.\n   * @default undefined\n   */\n  adapter?: string\n  /**\n   * The admin configuration for the upload field.\n   */\n  admin?: Admin\n  /**\n   * Represents an admin thumbnail, which can be either a React component or a string.\n   * - If a string, it should be one of the image size names.\n   * - A function that generates a fully qualified URL for the thumbnail, receives the doc as the only argument.\n   **/\n  adminThumbnail?: GetAdminThumbnail | string\n  /**\n   * Allow restricted file types known to be problematic.\n   * - If set to `true`, it will allow all file types.\n   * - If set to `false`, it will not allow file types and extensions known to be problematic.\n   * - This setting is overriden by the `mimeTypes` option.\n   * @default false\n   */\n  allowRestrictedFileTypes?: boolean\n  /**\n   * Enables bulk upload of files from the list view.\n   * @default true\n   */\n  bulkUpload?: boolean\n  /**\n   * Appends a cache tag to the image URL when fetching the thumbnail in the admin panel. It may be desirable to disable this when hosting via CDNs with strict parameters.\n   *\n   * @default true\n   */\n  cacheTags?: boolean\n  /**\n   * Sharp constructor options to be passed to the uploaded file.\n   * @link https://sharp.pixelplumbing.com/api-constructor/#sharp\n   */\n  constructorOptions?: SharpOptions\n  /**\n   * Enables cropping of images.\n   * @default true\n   */\n  crop?: boolean\n  /**\n   * Disable the ability to save files to disk.\n   * @default false\n   */\n  disableLocalStorage?: boolean\n  /**\n   * Enable displaying preview of the uploaded file in Upload fields related to this Collection.\n   * Can be locally overridden by `displayPreview` option in Upload field.\n   * @default false\n   */\n  displayPreview?: boolean\n  /**\n   *\n   * Accepts existing headers and returns the headers after filtering or modifying.\n   * If using this option, you should handle the removal of any sensitive cookies\n   * (like payload-prefixed cookies) to prevent leaking session information to external\n   * services. By default, Payload automatically filters out payload-prefixed cookies\n   * when this option is NOT defined.\n   *\n   * Useful for adding custom headers to fetch from external providers.\n   * @default undefined\n   */\n  externalFileHeaderFilter?: (headers: Record<string, string>) => Record<string, string>\n  /**\n   * Field slugs to use for a compound index instead of the default filename index.\n   */\n  filenameCompoundIndex?: string[]\n  /**\n   * Require files to be uploaded when creating a document.\n   * @default true\n   */\n  filesRequiredOnCreate?: boolean\n  /**\n   * Enables focal point positioning for image manipulation.\n   * @default true\n   */\n  focalPoint?: boolean\n  /**\n   * Format options for the uploaded file. Formatting image sizes needs to be done within each formatOptions individually.\n   */\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Custom handlers to run when a file is fetched.\n   *\n   * - If a handler returns a Response, the response will be sent to the client and no further handlers will be run.\n   * - If a handler returns null, the next handler will be run.\n   * - If no handlers return a response the file will be returned by default.\n   *\n   * @link https://sharp.pixelplumbing.com/api-output/#toformat\n   * @default undefined\n   */\n  handlers?: ((\n    req: PayloadRequest,\n    args: {\n      doc: TypeWithID\n      headers?: Headers\n      params: {\n        clientUploadContext?: unknown\n        collection: string\n        filename: string\n        prefix?: string\n      }\n    },\n  ) => Promise<Response> | Promise<void> | Response | void)[]\n  /**\n   * Set to `true` to prevent the admin UI from showing file inputs during document creation, useful for programmatic file generation.\n   */\n  hideFileInputOnCreate?: boolean\n  /**\n   * Set to `true` to prevent the admin UI having a way to remove an existing file while editing.\n   */\n  hideRemoveFile?: boolean\n  imageSizes?: ImageSize[]\n  /**\n   * Restrict mimeTypes in the file picker. Array of valid mime types or mimetype wildcards\n   * @example ['image/*', 'application/pdf']\n   * @default undefined\n   */\n  mimeTypes?: string[]\n  /**\n   * Ability to modify the response headers fetching a file.\n   * @default undefined\n   */\n  modifyResponseHeaders?: ({ headers }: { headers: Headers }) => Headers | void\n  /**\n   * Controls the behavior of pasting/uploading files from URLs.\n   * If set to `false`, fetching from remote URLs is disabled.\n   * If an `allowList` is provided, server-side fetching will be enabled for specified URLs.\n   *\n   * @default true (client-side fetching enabled)\n   */\n  pasteURL?:\n    | {\n        allowList: AllowList\n      }\n    | false\n  /**\n   * Sharp resize options for the original image.\n   * @link https://sharp.pixelplumbing.com/api-resize#resize\n   * @default undefined\n   */\n  resizeOptions?: ResizeOptions\n  /**\n   *  Skip safe fetch when using server-side fetching for external files from these URLs.\n   *  @default false\n   */\n  skipSafeFetch?: AllowList | boolean\n  /**\n   * The directory to serve static files from. Defaults to collection slug.\n   * @default undefined\n   */\n  staticDir?: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * Optionally append metadata to the image during processing.\n   *\n   * Can be a boolean or a function.\n   *\n   * If true, metadata will be appended to the image.\n   * If false, no metadata will be appended.\n   * If a function, it will receive an object containing the metadata and should return a boolean indicating whether to append the metadata.\n   * @default false\n   */\n  withMetadata?: WithMetadata\n}\nexport type checkFileRestrictionsParams = {\n  collection: CollectionConfig\n  file: File\n  req: PayloadRequest\n}\n\nexport type SanitizedUploadConfig = {\n  staticDir: UploadConfig['staticDir']\n} & UploadConfig\n\nexport type File = {\n  /**\n   * The buffer of the file.\n   */\n  data: Buffer\n  /**\n   * The mimetype of the file.\n   */\n  mimetype: string\n  /**\n   * The name of the file.\n   */\n  name: string\n  /**\n   * The size of the file in bytes.\n   */\n  size: number\n  /**\n   * Path to the temp file on disk when useTempFiles is enabled. In this case file.data will be an empty buffer.\n   */\n  tempFilePath?: string\n}\n\nexport type FileToSave = {\n  /**\n   * The buffer of the file.\n   */\n  buffer: Buffer\n  /**\n   * The path to save the file.\n   */\n  path: string\n}\n\ntype Crop = {\n  height: number\n  unit: '%' | 'px'\n  width: number\n  x: number\n  y: number\n}\n\nexport type FocalPoint = {\n  x: number\n  y: number\n}\n\nexport type UploadEdits = {\n  crop?: Crop\n  focalPoint?: FocalPoint\n  heightInPixels?: number\n  widthInPixels?: number\n}\n"],"names":[],"mappings":"AAkWA,WAKC"}
+{"version":3,"sources":["../../src/uploads/types.ts"],"sourcesContent":["import type { ResizeOptions, Sharp, SharpOptions } from 'sharp'\n\nimport type { CollectionConfig, TypeWithID } from '../collections/config/types.js'\nimport type { PayloadComponent } from '../config/types.js'\nimport type { UploadCollectionSlug } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\nimport type { WithMetadata } from './optionallyAppendMetadata.js'\n\nexport type FileSize = {\n  filename: null | string\n  filesize: null | number\n  height: null | number\n  mimeType: null | string\n  url: null | string\n  width: null | number\n}\n\nexport type FileSizes = {\n  [size: string]: FileSize\n}\n\nexport type FileData = {\n  filename: string\n  filesize: number\n  focalX?: number\n  focalY?: number\n  height: number\n  mimeType: string\n  sizes: FileSizes\n  tempFilePath?: string\n  url?: string\n  width: number\n}\n\nexport type ProbedImageSize = {\n  height: number\n  width: number\n}\n\n/**\n * Params sent to the sharp `toFormat()` function\n * @link https://sharp.pixelplumbing.com/api-output#toformat\n */\nexport type ImageUploadFormatOptions = {\n  format: Parameters<Sharp['toFormat']>[0]\n  options?: Parameters<Sharp['toFormat']>[1]\n}\n\n/**\n * Params sent to the sharp trim() function\n * @link https://sharp.pixelplumbing.com/api-resize#trim\n */\nexport type ImageUploadTrimOptions = Parameters<Sharp['trim']>[0]\n\nexport type GenerateImageName = (args: {\n  extension: string\n  height: number\n  originalName: string\n  sizeName: string\n  width: number\n}) => string\n\ntype ImageSizeBase = {\n  /**\n   * Admin UI options that control how this image size appears in list views.\n   */\n  admin?: {\n    /**\n     * Controls visibility of this image size in the collection list view.\n     * Defaults to hiding the image size from columns, filters, and group-by to reduce noise.\n     *\n     * - `column` — whether to hide this size from selectable list columns. @default false\n     * - `filter` — whether to hide this size from filter options. @default false\n     * - `groupBy` — whether to hide this size from group-by options. @default false\n     */\n    disabled?: {\n      column?: boolean\n      filter?: boolean\n      groupBy?: boolean\n    }\n  }\n  /**\n   * Generate a custom name for the file of this image size.\n   */\n  generateImageName?: GenerateImageName\n  name: string\n}\n\n/**\n * Image size options implemented by Payload's default Sharp image processor.\n */\nexport type SharpImageSizeOptions = {\n  /**\n   * @deprecated prefer position\n   */\n  crop?: string // comes from sharp package\n  formatOptions?: ImageUploadFormatOptions\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * When an uploaded image is smaller than the defined image size, we have 3 options:\n   *\n   * `undefined | false | true`\n   *\n   * 1. `undefined` [default]: uploading images with smaller width AND height than the image size will return null\n   * 2. `false`: always enlarge images to the image size\n   * 3. `true`: if the image is smaller than the image size, return the original image\n   */\n  withoutEnlargement?: ResizeOptions['withoutEnlargement']\n} & Omit<ResizeOptions, 'withoutEnlargement'>\n\n/**\n * Interface to be module-augmented by image processing providers.\n *\n * When no provider is registered, ImageSize uses SharpImageSizeOptions.\n * When providers are registered, ImageSize uses their registered options instead.\n *\n * @example\n * declare module 'payload' {\n *   interface RegisteredImageSizeOptions {\n *     myProvider: MyProviderImageSizeOptions\n *   }\n * }\n */\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type -- Intentionally empty so image processing providers can augment it.\nexport interface RegisteredImageSizeOptions {}\n\ntype ImageSizeOptions = keyof RegisteredImageSizeOptions extends never\n  ? SharpImageSizeOptions\n  : RegisteredImageSizeOptions[keyof RegisteredImageSizeOptions]\n\nexport type ImageSize = ImageSizeBase & ImageSizeOptions\n\nexport type GetAdminThumbnail = (args: { doc: Record<string, unknown> }) => false | null | string\n\nexport type AllowList = Array<{\n  hostname: string\n  pathname?: string\n  port?: string\n  protocol?: 'http' | 'https'\n  search?: string\n}>\n\nexport type FileAllowList = Array<{\n  extensions: string[]\n  mimeType: string\n}>\n\nexport type UploadFilePreviewClientProps = {\n  filename: string\n  filesize: number\n  /** Resolved URL of the file (data.url). */\n  fileSrc: string\n  height?: number\n  mimeType: string\n  width?: number\n}\n\ntype UploadFilePreviewMap = {\n  [mimeTypePattern: string]: PayloadComponent\n}\n\ntype Admin = {\n  components?: {\n    /**\n     * The Controls component to extend the upload controls in the admin panel.\n     */\n    controls?: PayloadComponent[]\n    /**\n     * A custom component to render in place of the default Thumbnail in the upload side panel.\n     *\n     * Can be a single PayloadComponent (renders for all MIME types) or a Record keyed by\n     * MIME type patterns. Pattern resolution priority: exact match → category wildcard\n     * (e.g. `video/*`) → universal fallback (`*`). Falls back to the default Thumbnail\n     * when nothing matches.\n     */\n    filePreview?: PayloadComponent | UploadFilePreviewMap\n  }\n}\n\nexport type ExternalFileHeaderFilterContext = {\n  isSameOrigin: boolean\n  url: string\n}\n\nexport type UploadConfig = {\n  /**\n   * The adapter name to use for uploads. Used for storage adapter telemetry.\n   * @default undefined\n   */\n  adapter?: string\n  /**\n   * The admin configuration for the upload field.\n   */\n  admin?: Admin\n  /**\n   * Represents an admin thumbnail, which can be either a React component or a string.\n   * - If a string, it should be one of the image size names.\n   * - A function that generates a fully qualified URL for the thumbnail, receives the doc as the only argument.\n   **/\n  adminThumbnail?: GetAdminThumbnail | string\n  /**\n   * Allow restricted file types known to be problematic.\n   * - If set to `true`, it will allow all file types.\n   * - If set to `false`, it will not allow file types and extensions known to be problematic.\n   * - This setting is overriden by the `mimeTypes` option.\n   * @default false\n   */\n  allowRestrictedFileTypes?: boolean\n  /**\n   * Enables bulk upload of files from the list view.\n   * @default true\n   */\n  bulkUpload?: boolean\n  /**\n   * Appends a cache tag to the image URL when fetching the thumbnail in the admin panel. It may be desirable to disable this when hosting via CDNs with strict parameters.\n   *\n   * @default true\n   */\n  cacheTags?: boolean\n  /**\n   * Sharp constructor options to be passed to the uploaded file.\n   * @link https://sharp.pixelplumbing.com/api-constructor/#sharp\n   */\n  constructorOptions?: SharpOptions\n  /**\n   * Enables cropping of images.\n   * @default true\n   */\n  crop?: boolean\n  /**\n   * Disable the ability to save files to disk.\n   * @default false\n   */\n  disableLocalStorage?: boolean\n  /**\n   * Enable displaying preview of the uploaded file in Upload fields related to this Collection.\n   * Can be locally overridden by `displayPreview` option in Upload field.\n   * @default false\n   */\n  displayPreview?: boolean\n  /**\n   * Accepts existing headers and returns the headers after filtering or modifying. The optional\n   * context identifies the destination for the current request, including each redirect hop.\n   * `isSameOrigin` is true only when that destination matches a trusted origin established for a\n   * relative file URL.\n   * If using this option, you should handle the removal of any sensitive cookies\n   * (like payload-prefixed cookies) to prevent leaking session information to external\n   * services. By default, Payload automatically filters out payload-prefixed cookies\n   * when this option is NOT defined.\n   *\n   * Useful for adding custom headers to fetch from external providers.\n   * @default undefined\n   */\n  externalFileHeaderFilter?: (\n    headers: Record<string, string>,\n    context?: ExternalFileHeaderFilterContext,\n  ) => Record<string, string>\n  /**\n   * Field slugs to use for a compound index instead of the default filename index.\n   */\n  filenameCompoundIndex?: string[]\n  /**\n   * Require files to be uploaded when creating a document.\n   * @default true\n   */\n  filesRequiredOnCreate?: boolean\n  /**\n   * Enables focal point positioning for image manipulation.\n   * @default true\n   */\n  focalPoint?: boolean\n  /**\n   * Format options for the uploaded file. Formatting image sizes needs to be done within each formatOptions individually.\n   */\n  formatOptions?: ImageUploadFormatOptions\n  /**\n   * Custom handlers to run when a file is fetched.\n   *\n   * - If a handler returns a Response, the response will be sent to the client and no further handlers will be run.\n   * - If a handler returns null, the next handler will be run.\n   * - If no handlers return a response the file will be returned by default.\n   *\n   * @link https://sharp.pixelplumbing.com/api-output/#toformat\n   * @default undefined\n   */\n  handlers?: ((\n    req: PayloadRequest,\n    args: {\n      doc: TypeWithID\n      headers?: Headers\n      params: {\n        collection: string\n        filename: string\n        prefix?: string\n        uploadReference?: unknown\n      }\n    },\n  ) => Promise<Response> | Promise<void> | Response | void)[]\n  /**\n   * Set to `true` to prevent the admin UI from showing file inputs during document creation, useful for programmatic file generation.\n   */\n  hideFileInputOnCreate?: boolean\n  /**\n   * Set to `true` to prevent the admin UI having a way to remove an existing file while editing.\n   */\n  hideRemoveFile?: boolean\n  imageSizes?: ImageSize[]\n  /**\n   * Restrict mimeTypes in the file picker. Array of valid mime types or mimetype wildcards\n   * @example ['image/*', 'application/pdf']\n   * @default undefined\n   */\n  mimeTypes?: string[]\n  /**\n   * Ability to modify the response headers fetching a file.\n   * @default undefined\n   */\n  modifyResponseHeaders?: ({ headers }: { headers: Headers }) => Headers | void\n  /**\n   * Controls the behavior of pasting/uploading files from URLs.\n   * If set to `false`, fetching from remote URLs is disabled.\n   * If an `allowList` is provided, server-side fetching will be enabled for specified URLs.\n   *\n   * @default true (client-side fetching enabled)\n   */\n  pasteURL?:\n    | {\n        allowList: AllowList\n      }\n    | false\n  /**\n   * Sharp resize options for the original image.\n   * @link https://sharp.pixelplumbing.com/api-resize#resize\n   * @default undefined\n   */\n  resizeOptions?: ResizeOptions\n  /**\n   *  Skip safe fetch when using server-side fetching for external files from these URLs.\n   *  @default false\n   */\n  skipSafeFetch?: AllowList | boolean\n  /**\n   * The directory to serve static files from. Defaults to collection slug.\n   * @default undefined\n   */\n  staticDir?: string\n  trimOptions?: ImageUploadTrimOptions\n  /**\n   * Adapter-provided upload instructions.\n   * @internal\n   */\n  uploadInstructions?: UploadInstructionsCapability\n  /**\n   * Optionally append metadata to the image during processing.\n   *\n   * Can be a boolean or a function.\n   *\n   * If true, metadata will be appended to the image.\n   * If false, no metadata will be appended.\n   * If a function, it will receive an object containing the metadata and should return a boolean indicating whether to append the metadata.\n   * @default false\n   */\n  withMetadata?: WithMetadata\n}\n\nexport type UploadInstructionsAccess = (args: {\n  collectionSlug: UploadCollectionSlug\n  req: PayloadRequest\n}) => boolean | Promise<boolean>\n\nexport type UploadInstructionsRequest = {\n  collectionSlug: UploadCollectionSlug\n  docPrefix?: string\n  filename: string\n  filesize: number\n  mimeType: string\n}\n\nexport type UploadInstructions = {\n  file: {\n    filename: string\n    mimeType: string\n    size: number\n    uploadReference: Record<string, unknown>\n  }\n} & (\n  | {\n      data?: unknown\n      name: string\n      type: 'dispatch'\n    }\n  | {\n      request: {\n        headers?: Record<string, string>\n        method: 'POST' | 'PUT'\n        url: string\n      }\n      type: 'http'\n    }\n)\n\nexport type GenerateUploadInstructions = (\n  args: { overrideAccess?: boolean; req: PayloadRequest } & UploadInstructionsRequest,\n) => Promise<UploadInstructions> | UploadInstructions\n\nexport type UploadInstructionsCapability = {\n  /** Generates upload instructions. The generator or supporting endpoint must check access. */\n  generate: GenerateUploadInstructions\n  /** Require a signed server-issued reference before invoking upload handlers. @internal */\n  requiresUploadReceipt?: boolean\n  /**\n   * Whether the Admin panel should use these instructions before saving a document.\n   * This can still be useful when upload chunks pass through Payload.\n   */\n  useInAdmin: boolean\n}\nexport type checkFileRestrictionsParams = {\n  /** Set to false when the file bytes have not been uploaded yet. */\n  checkFileContents?: boolean\n  collection: CollectionConfig\n  file: File\n  req: PayloadRequest\n}\n\nexport type SanitizedUploadConfig = {\n  staticDir: UploadConfig['staticDir']\n} & UploadConfig\n\nexport type File = {\n  /**\n   * The buffer of the file.\n   */\n  data: Buffer\n  /**\n   * The mimetype of the file.\n   */\n  mimetype: string\n  /**\n   * The name of the file.\n   */\n  name: string\n  /**\n   * The size of the file in bytes.\n   */\n  size: number\n  /**\n   * Path to the temp file on disk when useTempFiles is enabled. In this case file.data will be an empty buffer.\n   */\n  tempFilePath?: string\n}\n\nexport type FileToSave =\n  | {\n      /**\n       * The buffer of the file.\n       */\n      buffer: Buffer\n      /**\n       * The path to save the file.\n       */\n      path: string\n    }\n  | {\n      /**\n       * The path to save the file.\n       */\n      path: string\n      /**\n       * An existing file on disk to copy to `path`, instead of `buffer` - avoids loading a file\n       * that's already on disk (e.g. a temp file) fully into memory just to write it back out.\n       */\n      sourcePath: string\n    }\n\ntype Crop = {\n  height: number\n  unit: '%' | 'px'\n  width: number\n  x: number\n  y: number\n}\n\nexport type FocalPoint = {\n  x: number\n  y: number\n}\n\nexport type UploadEdits = {\n  crop?: Crop\n  focalPoint?: FocalPoint\n  heightInPixels?: number\n  widthInPixels?: number\n}\n"],"names":[],"mappings":"AAueA,WAKC"}

package/dist/uploads/unlinkTempFiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unlinkTempFiles.d.ts","sourceRoot":"","sources":["../../src/uploads/unlinkTempFiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIvD,KAAK,IAAI,GAAG;IACV,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,MAAM,EAAE,eAAe,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAezD,CAAA"}
+{"version":3,"file":"unlinkTempFiles.d.ts","sourceRoot":"","sources":["../../src/uploads/unlinkTempFiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIvD,KAAK,IAAI,GAAG;IACV,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,MAAM,EAAE,eAAe,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AACD;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,IAAI,CAuBzD,CAAA"}

package/dist/uploads/unlinkTempFiles.js

@@ -3,8 +3,12 @@ import { mapAsync } from '../utilities/mapAsync.js';
 /**
  * Cleanup temp files after operation lifecycle
  */ export const unlinkTempFiles = async ({ collectionConfig, config, req })=>{
-    if (config.upload?.useTempFiles && collectionConfig.upload) {
-        const { file } = req;
+    const { file } = req;
+    // A file fetched from a client-upload reference always gets its own temp file for
+    // post-processing (see getFileFromUploadInstructions.ts), regardless of the global
+    // useTempFiles setting, so it must always be cleaned up here too.
+    const isClientUploadTempFile = Boolean(file?.uploadReference || req.context?._payloadClientUploadTempFile);
+    if (collectionConfig.upload && (config.upload?.useTempFiles || isClientUploadTempFile)) {
         const fileArray = [
             {
                 file

package/dist/uploads/unlinkTempFiles.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/unlinkTempFiles.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nimport type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { mapAsync } from '../utilities/mapAsync.js'\n\ntype Args = {\n  collectionConfig: SanitizedCollectionConfig\n  config: SanitizedConfig\n  req: PayloadRequest\n}\n/**\n * Cleanup temp files after operation lifecycle\n */\nexport const unlinkTempFiles: (args: Args) => Promise<void> = async ({\n  collectionConfig,\n  config,\n  req,\n}) => {\n  if (config.upload?.useTempFiles && collectionConfig.upload) {\n    const { file } = req\n    const fileArray = [{ file }]\n    await mapAsync(fileArray, async ({ file }) => {\n      // Still need this check because this will not be populated if using local API\n      if (file?.tempFilePath) {\n        await fs.unlink(file.tempFilePath)\n      }\n    })\n  }\n}\n"],"names":["fs","mapAsync","unlinkTempFiles","collectionConfig","config","req","upload","useTempFiles","file","fileArray","tempFilePath","unlink"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAM5B,SAASC,QAAQ,QAAQ,2BAA0B;AAOnD;;CAEC,GACD,OAAO,MAAMC,kBAAiD,OAAO,EACnEC,gBAAgB,EAChBC,MAAM,EACNC,GAAG,EACJ;IACC,IAAID,OAAOE,MAAM,EAAEC,gBAAgBJ,iBAAiBG,MAAM,EAAE;QAC1D,MAAM,EAAEE,IAAI,EAAE,GAAGH;QACjB,MAAMI,YAAY;YAAC;gBAAED;YAAK;SAAE;QAC5B,MAAMP,SAASQ,WAAW,OAAO,EAAED,IAAI,EAAE;YACvC,8EAA8E;YAC9E,IAAIA,MAAME,cAAc;gBACtB,MAAMV,GAAGW,MAAM,CAACH,KAAKE,YAAY;YACnC;QACF;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../src/uploads/unlinkTempFiles.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nimport type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { mapAsync } from '../utilities/mapAsync.js'\n\ntype Args = {\n  collectionConfig: SanitizedCollectionConfig\n  config: SanitizedConfig\n  req: PayloadRequest\n}\n/**\n * Cleanup temp files after operation lifecycle\n */\nexport const unlinkTempFiles: (args: Args) => Promise<void> = async ({\n  collectionConfig,\n  config,\n  req,\n}) => {\n  const { file } = req\n\n  // A file fetched from a client-upload reference always gets its own temp file for\n  // post-processing (see getFileFromUploadInstructions.ts), regardless of the global\n  // useTempFiles setting, so it must always be cleaned up here too.\n  const isClientUploadTempFile = Boolean(\n    file?.uploadReference || req.context?._payloadClientUploadTempFile,\n  )\n\n  if (collectionConfig.upload && (config.upload?.useTempFiles || isClientUploadTempFile)) {\n    const fileArray = [{ file }]\n    await mapAsync(fileArray, async ({ file }) => {\n      // Still need this check because this will not be populated if using local API\n      if (file?.tempFilePath) {\n        await fs.unlink(file.tempFilePath)\n      }\n    })\n  }\n}\n"],"names":["fs","mapAsync","unlinkTempFiles","collectionConfig","config","req","file","isClientUploadTempFile","Boolean","uploadReference","context","_payloadClientUploadTempFile","upload","useTempFiles","fileArray","tempFilePath","unlink"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAM5B,SAASC,QAAQ,QAAQ,2BAA0B;AAOnD;;CAEC,GACD,OAAO,MAAMC,kBAAiD,OAAO,EACnEC,gBAAgB,EAChBC,MAAM,EACNC,GAAG,EACJ;IACC,MAAM,EAAEC,IAAI,EAAE,GAAGD;IAEjB,kFAAkF;IAClF,mFAAmF;IACnF,kEAAkE;IAClE,MAAME,yBAAyBC,QAC7BF,MAAMG,mBAAmBJ,IAAIK,OAAO,EAAEC;IAGxC,IAAIR,iBAAiBS,MAAM,IAAKR,CAAAA,OAAOQ,MAAM,EAAEC,gBAAgBN,sBAAqB,GAAI;QACtF,MAAMO,YAAY;YAAC;gBAAER;YAAK;SAAE;QAC5B,MAAML,SAASa,WAAW,OAAO,EAAER,IAAI,EAAE;YACvC,8EAA8E;YAC9E,IAAIA,MAAMS,cAAc;gBACtB,MAAMf,GAAGgB,MAAM,CAACV,KAAKS,YAAY;YACnC;QACF;IACF;AACF,EAAC"}

package/dist/uploads/uploadContentSecurityPolicy.d.ts

@@ -0,0 +1,2 @@
+export declare const uploadContentSecurityPolicy = "script-src 'none'; frame-src 'none'; object-src 'none'";
+//# sourceMappingURL=uploadContentSecurityPolicy.d.ts.map

package/dist/uploads/uploadContentSecurityPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadContentSecurityPolicy.d.ts","sourceRoot":"","sources":["../../src/uploads/uploadContentSecurityPolicy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,2BAA2B,2DAA2D,CAAA"}

package/dist/uploads/uploadContentSecurityPolicy.js

@@ -0,0 +1,3 @@
+export const uploadContentSecurityPolicy = "script-src 'none'; frame-src 'none'; object-src 'none'";
+
+//# sourceMappingURL=uploadContentSecurityPolicy.js.map

package/dist/uploads/uploadContentSecurityPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/uploadContentSecurityPolicy.ts"],"sourcesContent":["export const uploadContentSecurityPolicy = \"script-src 'none'; frame-src 'none'; object-src 'none'\"\n"],"names":["uploadContentSecurityPolicy"],"mappings":"AAAA,OAAO,MAAMA,8BAA8B,yDAAwD"}

package/dist/uploads/uploadFiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploadFiles.d.ts","sourceRoot":"","sources":["../../src/uploads/uploadFiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAK5C,eAAO,MAAM,WAAW,GACtB,SAAS,OAAO,EAChB,OAAO,UAAU,EAAE,EACnB,KAAK,cAAc,KAClB,OAAO,CAAC,IAAI,CAWd,CAAA"}
+{"version":3,"file":"uploadFiles.d.ts","sourceRoot":"","sources":["../../src/uploads/uploadFiles.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAK5C,eAAO,MAAM,WAAW,YACb,OAAO,SACT,UAAU,EAAE,OACd,cAAc,KAClB,OAAO,CAAC,IAAI,CAed,CAAA"}

package/dist/uploads/uploadFiles.js

@@ -1,9 +1,14 @@
+import fs from 'fs/promises';
 import { FileUploadError } from '../errors/index.js';
 import { saveBufferToFile } from './saveBufferToFile.js';
 export const uploadFiles = async (payload, files, req)=>{
     try {
-        await Promise.all(files.map(async ({ buffer, path })=>{
-            await saveBufferToFile(buffer, path);
+        await Promise.all(files.map(async (file)=>{
+            if ('sourcePath' in file) {
+                await fs.copyFile(file.sourcePath, file.path);
+            } else {
+                await saveBufferToFile(file.buffer, file.path);
+            }
         }));
     } catch (err) {
         payload.logger.error(err);

package/dist/uploads/uploadFiles.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/uploadFiles.ts"],"sourcesContent":["import type { Payload } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\nimport type { FileToSave } from './types.js'\n\nimport { FileUploadError } from '../errors/index.js'\nimport { saveBufferToFile } from './saveBufferToFile.js'\n\nexport const uploadFiles = async (\n  payload: Payload,\n  files: FileToSave[],\n  req: PayloadRequest,\n): Promise<void> => {\n  try {\n    await Promise.all(\n      files.map(async ({ buffer, path }) => {\n        await saveBufferToFile(buffer, path)\n      }),\n    )\n  } catch (err) {\n    payload.logger.error(err)\n    throw new FileUploadError(req.t)\n  }\n}\n"],"names":["FileUploadError","saveBufferToFile","uploadFiles","payload","files","req","Promise","all","map","buffer","path","err","logger","error","t"],"mappings":"AAIA,SAASA,eAAe,QAAQ,qBAAoB;AACpD,SAASC,gBAAgB,QAAQ,wBAAuB;AAExD,OAAO,MAAMC,cAAc,OACzBC,SACAC,OACAC;IAEA,IAAI;QACF,MAAMC,QAAQC,GAAG,CACfH,MAAMI,GAAG,CAAC,OAAO,EAAEC,MAAM,EAAEC,IAAI,EAAE;YAC/B,MAAMT,iBAAiBQ,QAAQC;QACjC;IAEJ,EAAE,OAAOC,KAAK;QACZR,QAAQS,MAAM,CAACC,KAAK,CAACF;QACrB,MAAM,IAAIX,gBAAgBK,IAAIS,CAAC;IACjC;AACF,EAAC"}
+{"version":3,"sources":["../../src/uploads/uploadFiles.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nimport type { Payload } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\nimport type { FileToSave } from './types.js'\n\nimport { FileUploadError } from '../errors/index.js'\nimport { saveBufferToFile } from './saveBufferToFile.js'\n\nexport const uploadFiles = async (\n  payload: Payload,\n  files: FileToSave[],\n  req: PayloadRequest,\n): Promise<void> => {\n  try {\n    await Promise.all(\n      files.map(async (file) => {\n        if ('sourcePath' in file) {\n          await fs.copyFile(file.sourcePath, file.path)\n        } else {\n          await saveBufferToFile(file.buffer, file.path)\n        }\n      }),\n    )\n  } catch (err) {\n    payload.logger.error(err)\n    throw new FileUploadError(req.t)\n  }\n}\n"],"names":["fs","FileUploadError","saveBufferToFile","uploadFiles","payload","files","req","Promise","all","map","file","copyFile","sourcePath","path","buffer","err","logger","error","t"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAM5B,SAASC,eAAe,QAAQ,qBAAoB;AACpD,SAASC,gBAAgB,QAAQ,wBAAuB;AAExD,OAAO,MAAMC,cAAc,OACzBC,SACAC,OACAC;IAEA,IAAI;QACF,MAAMC,QAAQC,GAAG,CACfH,MAAMI,GAAG,CAAC,OAAOC;YACf,IAAI,gBAAgBA,MAAM;gBACxB,MAAMV,GAAGW,QAAQ,CAACD,KAAKE,UAAU,EAAEF,KAAKG,IAAI;YAC9C,OAAO;gBACL,MAAMX,iBAAiBQ,KAAKI,MAAM,EAAEJ,KAAKG,IAAI;YAC/C;QACF;IAEJ,EAAE,OAAOE,KAAK;QACZX,QAAQY,MAAM,CAACC,KAAK,CAACF;QACrB,MAAM,IAAId,gBAAgBK,IAAIY,CAAC;IACjC;AACF,EAAC"}

package/dist/uploads/validateISOBaseMediaFile.d.ts

@@ -0,0 +1,4 @@
+export declare const isISOBaseMediaMimeType: (mimeType: string) => boolean;
+export declare const validateISOBaseMediaBuffer: (buffer: Buffer) => Promise<boolean>;
+export declare const validateISOBaseMediaFile: (filePath: string) => Promise<boolean>;
+//# sourceMappingURL=validateISOBaseMediaFile.d.ts.map

package/dist/uploads/validateISOBaseMediaFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validateISOBaseMediaFile.d.ts","sourceRoot":"","sources":["../../src/uploads/validateISOBaseMediaFile.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,sBAAsB,aAAc,MAAM,KAAG,OACjB,CAAA;AA8DzC,eAAO,MAAM,0BAA0B,WAAkB,MAAM,KAAG,OAAO,CAAC,OAAO,CAG9E,CAAA;AAEH,eAAO,MAAM,wBAAwB,aAAoB,MAAM,KAAG,OAAO,CAAC,OAAO,CAiBhF,CAAA"}

package/dist/uploads/validateISOBaseMediaFile.js

@@ -0,0 +1,91 @@
+import fs from 'fs/promises';
+const MAX_BOX_COUNT = 10_000;
+const QUICKTIME_FIRST_BOX_TYPES = new Set([
+    'free',
+    'mdat',
+    'moov',
+    'wide'
+]);
+const ISO_BASE_MEDIA_MIME_TYPES = new Set([
+    'audio/mp4',
+    'audio/x-m4a',
+    'image/avif',
+    'image/heic',
+    'image/heic-sequence',
+    'image/heif',
+    'image/heif-sequence',
+    'image/x-canon-cr3',
+    'video/3gpp',
+    'video/3gpp2',
+    'video/mp4',
+    'video/quicktime',
+    'video/x-m4v'
+]);
+export const isISOBaseMediaMimeType = (mimeType)=>ISO_BASE_MEDIA_MIME_TYPES.has(mimeType);
+const validateBoxStructure = async (size, readAt)=>{
+    if (!Number.isSafeInteger(size) || size < 24) {
+        return false;
+    }
+    let boxCount = 0;
+    let position = 0;
+    while(position < size){
+        if (++boxCount > MAX_BOX_COUNT || size - position < 8) {
+            return false;
+        }
+        const header = await readAt(position, Math.min(16, size - position));
+        if (header.length < 8) {
+            return false;
+        }
+        const boxType = header.toString('latin1', 4, 8);
+        const size32 = header.readUInt32BE(0);
+        let boxSize;
+        let headerSize = 8;
+        if (size32 === 0) {
+            boxSize = size - position;
+        } else if (size32 === 1) {
+            if (header.length < 16) {
+                return false;
+            }
+            const size64 = header.readBigUInt64BE(8);
+            if (size64 > BigInt(Number.MAX_SAFE_INTEGER)) {
+                return false;
+            }
+            boxSize = Number(size64);
+            headerSize = 16;
+        } else {
+            boxSize = size32;
+        }
+        if (boxSize < headerSize || boxSize > size - position) {
+            return false;
+        }
+        if (position === 0 && boxType === 'ftyp') {
+            const payloadSize = boxSize - headerSize;
+            if (size32 === 0 || payloadSize < 8 || (payloadSize - 8) % 4 !== 0 || boxSize === size) {
+                return false;
+            }
+        } else if (position === 0 && !QUICKTIME_FIRST_BOX_TYPES.has(boxType)) {
+            return false;
+        }
+        position += boxSize;
+    }
+    return position === size;
+};
+export const validateISOBaseMediaBuffer = async (buffer)=>validateBoxStructure(buffer.length, (position, length)=>Promise.resolve(buffer.subarray(position, position + length)));
+export const validateISOBaseMediaFile = async (filePath)=>{
+    let fileHandle;
+    try {
+        fileHandle = await fs.open(filePath, 'r');
+        const { size } = await fileHandle.stat();
+        return await validateBoxStructure(size, async (position, length)=>{
+            const buffer = Buffer.allocUnsafe(length);
+            const { bytesRead } = await fileHandle.read(buffer, 0, length, position);
+            return buffer.subarray(0, bytesRead);
+        });
+    } catch  {
+        return false;
+    } finally{
+        await fileHandle?.close();
+    }
+};
+
+//# sourceMappingURL=validateISOBaseMediaFile.js.map

package/dist/uploads/validateISOBaseMediaFile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/validateISOBaseMediaFile.ts"],"sourcesContent":["import fs from 'fs/promises'\n\nconst MAX_BOX_COUNT = 10_000\nconst QUICKTIME_FIRST_BOX_TYPES = new Set(['free', 'mdat', 'moov', 'wide'])\n\nconst ISO_BASE_MEDIA_MIME_TYPES = new Set([\n  'audio/mp4',\n  'audio/x-m4a',\n  'image/avif',\n  'image/heic',\n  'image/heic-sequence',\n  'image/heif',\n  'image/heif-sequence',\n  'image/x-canon-cr3',\n  'video/3gpp',\n  'video/3gpp2',\n  'video/mp4',\n  'video/quicktime',\n  'video/x-m4v',\n])\n\ntype ReadAt = (position: number, length: number) => Promise<Buffer>\n\nexport const isISOBaseMediaMimeType = (mimeType: string): boolean =>\n  ISO_BASE_MEDIA_MIME_TYPES.has(mimeType)\n\nconst validateBoxStructure = async (size: number, readAt: ReadAt): Promise<boolean> => {\n  if (!Number.isSafeInteger(size) || size < 24) {\n    return false\n  }\n\n  let boxCount = 0\n  let position = 0\n\n  while (position < size) {\n    if (++boxCount > MAX_BOX_COUNT || size - position < 8) {\n      return false\n    }\n\n    const header = await readAt(position, Math.min(16, size - position))\n    if (header.length < 8) {\n      return false\n    }\n\n    const boxType = header.toString('latin1', 4, 8)\n    const size32 = header.readUInt32BE(0)\n    let boxSize: number\n    let headerSize = 8\n\n    if (size32 === 0) {\n      boxSize = size - position\n    } else if (size32 === 1) {\n      if (header.length < 16) {\n        return false\n      }\n\n      const size64 = header.readBigUInt64BE(8)\n      if (size64 > BigInt(Number.MAX_SAFE_INTEGER)) {\n        return false\n      }\n\n      boxSize = Number(size64)\n      headerSize = 16\n    } else {\n      boxSize = size32\n    }\n\n    if (boxSize < headerSize || boxSize > size - position) {\n      return false\n    }\n\n    if (position === 0 && boxType === 'ftyp') {\n      const payloadSize = boxSize - headerSize\n      if (size32 === 0 || payloadSize < 8 || (payloadSize - 8) % 4 !== 0 || boxSize === size) {\n        return false\n      }\n    } else if (position === 0 && !QUICKTIME_FIRST_BOX_TYPES.has(boxType)) {\n      return false\n    }\n\n    position += boxSize\n  }\n\n  return position === size\n}\n\nexport const validateISOBaseMediaBuffer = async (buffer: Buffer): Promise<boolean> =>\n  validateBoxStructure(buffer.length, (position, length) =>\n    Promise.resolve(buffer.subarray(position, position + length)),\n  )\n\nexport const validateISOBaseMediaFile = async (filePath: string): Promise<boolean> => {\n  let fileHandle: Awaited<ReturnType<typeof fs.open>> | undefined\n\n  try {\n    fileHandle = await fs.open(filePath, 'r')\n    const { size } = await fileHandle.stat()\n\n    return await validateBoxStructure(size, async (position, length) => {\n      const buffer = Buffer.allocUnsafe(length)\n      const { bytesRead } = await fileHandle!.read(buffer, 0, length, position)\n      return buffer.subarray(0, bytesRead)\n    })\n  } catch {\n    return false\n  } finally {\n    await fileHandle?.close()\n  }\n}\n"],"names":["fs","MAX_BOX_COUNT","QUICKTIME_FIRST_BOX_TYPES","Set","ISO_BASE_MEDIA_MIME_TYPES","isISOBaseMediaMimeType","mimeType","has","validateBoxStructure","size","readAt","Number","isSafeInteger","boxCount","position","header","Math","min","length","boxType","toString","size32","readUInt32BE","boxSize","headerSize","size64","readBigUInt64BE","BigInt","MAX_SAFE_INTEGER","payloadSize","validateISOBaseMediaBuffer","buffer","Promise","resolve","subarray","validateISOBaseMediaFile","filePath","fileHandle","open","stat","Buffer","allocUnsafe","bytesRead","read","close"],"mappings":"AAAA,OAAOA,QAAQ,cAAa;AAE5B,MAAMC,gBAAgB;AACtB,MAAMC,4BAA4B,IAAIC,IAAI;IAAC;IAAQ;IAAQ;IAAQ;CAAO;AAE1E,MAAMC,4BAA4B,IAAID,IAAI;IACxC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD;AAID,OAAO,MAAME,yBAAyB,CAACC,WACrCF,0BAA0BG,GAAG,CAACD,UAAS;AAEzC,MAAME,uBAAuB,OAAOC,MAAcC;IAChD,IAAI,CAACC,OAAOC,aAAa,CAACH,SAASA,OAAO,IAAI;QAC5C,OAAO;IACT;IAEA,IAAII,WAAW;IACf,IAAIC,WAAW;IAEf,MAAOA,WAAWL,KAAM;QACtB,IAAI,EAAEI,WAAWZ,iBAAiBQ,OAAOK,WAAW,GAAG;YACrD,OAAO;QACT;QAEA,MAAMC,SAAS,MAAML,OAAOI,UAAUE,KAAKC,GAAG,CAAC,IAAIR,OAAOK;QAC1D,IAAIC,OAAOG,MAAM,GAAG,GAAG;YACrB,OAAO;QACT;QAEA,MAAMC,UAAUJ,OAAOK,QAAQ,CAAC,UAAU,GAAG;QAC7C,MAAMC,SAASN,OAAOO,YAAY,CAAC;QACnC,IAAIC;QACJ,IAAIC,aAAa;QAEjB,IAAIH,WAAW,GAAG;YAChBE,UAAUd,OAAOK;QACnB,OAAO,IAAIO,WAAW,GAAG;YACvB,IAAIN,OAAOG,MAAM,GAAG,IAAI;gBACtB,OAAO;YACT;YAEA,MAAMO,SAASV,OAAOW,eAAe,CAAC;YACtC,IAAID,SAASE,OAAOhB,OAAOiB,gBAAgB,GAAG;gBAC5C,OAAO;YACT;YAEAL,UAAUZ,OAAOc;YACjBD,aAAa;QACf,OAAO;YACLD,UAAUF;QACZ;QAEA,IAAIE,UAAUC,cAAcD,UAAUd,OAAOK,UAAU;YACrD,OAAO;QACT;QAEA,IAAIA,aAAa,KAAKK,YAAY,QAAQ;YACxC,MAAMU,cAAcN,UAAUC;YAC9B,IAAIH,WAAW,KAAKQ,cAAc,KAAK,AAACA,CAAAA,cAAc,CAAA,IAAK,MAAM,KAAKN,YAAYd,MAAM;gBACtF,OAAO;YACT;QACF,OAAO,IAAIK,aAAa,KAAK,CAACZ,0BAA0BK,GAAG,CAACY,UAAU;YACpE,OAAO;QACT;QAEAL,YAAYS;IACd;IAEA,OAAOT,aAAaL;AACtB;AAEA,OAAO,MAAMqB,6BAA6B,OAAOC,SAC/CvB,qBAAqBuB,OAAOb,MAAM,EAAE,CAACJ,UAAUI,SAC7Cc,QAAQC,OAAO,CAACF,OAAOG,QAAQ,CAACpB,UAAUA,WAAWI,UACtD;AAEH,OAAO,MAAMiB,2BAA2B,OAAOC;IAC7C,IAAIC;IAEJ,IAAI;QACFA,aAAa,MAAMrC,GAAGsC,IAAI,CAACF,UAAU;QACrC,MAAM,EAAE3B,IAAI,EAAE,GAAG,MAAM4B,WAAWE,IAAI;QAEtC,OAAO,MAAM/B,qBAAqBC,MAAM,OAAOK,UAAUI;YACvD,MAAMa,SAASS,OAAOC,WAAW,CAACvB;YAClC,MAAM,EAAEwB,SAAS,EAAE,GAAG,MAAML,WAAYM,IAAI,CAACZ,QAAQ,GAAGb,QAAQJ;YAChE,OAAOiB,OAAOG,QAAQ,CAAC,GAAGQ;QAC5B;IACF,EAAE,OAAM;QACN,OAAO;IACT,SAAU;QACR,MAAML,YAAYO;IACpB;AACF,EAAC"}

package/dist/uploads/validateSvg.d.ts

@@ -1,6 +1,12 @@
-/**
- * Validate SVG content for security vulnerabilities
- * Detects and blocks malicious patterns commonly used in SVG-based attacks
- */
+export type SvgInspection = {
+    isSafe: boolean;
+    isSvg: boolean;
+    isValid: boolean;
+};
+export declare function inspectSvg(buffer: Buffer): SvgInspection;
+export declare function inspectSvgFile(filePath: string, options?: {
+    highWaterMark?: number;
+}): Promise<SvgInspection>;
+/** Validate SVG content by parsing its XML structure and rejecting active content. */
 export declare function validateSvg(buffer: Buffer): boolean;
 //# sourceMappingURL=validateSvg.d.ts.map

package/dist/uploads/validateSvg.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validateSvg.d.ts","sourceRoot":"","sources":["../../src/uploads/validateSvg.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAqDnD"}
+{"version":3,"file":"validateSvg.d.ts","sourceRoot":"","sources":["../../src/uploads/validateSvg.ts"],"names":[],"mappings":"AAuEA,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAmMD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAiBxD;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,aAAa,CAAC,CAiCxB;AAED,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEnD"}