payload 4.0.0-internal.2fddfc0 → 4.0.0-internal.31ba7ee

package/dist/utilities/entityInputSchema/validateEntityData.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utilities/entityInputSchema/validateEntityData.ts"],"sourcesContent":["import type { core } from 'zod'\n\nimport { fromJSONSchema } from 'zod'\n\nimport type { CollectionSlug, GlobalSlug, PayloadRequest } from '../../index.js'\nimport type { EntityInputSchema } from './types.js'\n\nimport { ValidationError } from '../../errors/ValidationError.js'\nimport { getCollectionInputSchema, getGlobalInputSchema } from './getEntityInputSchema.js'\n\nexport const validateCollectionData = ({\n  slug,\n  data,\n  partial,\n  req,\n}: {\n  data: Record<string, unknown>\n  partial?: boolean\n  req: PayloadRequest\n  slug: CollectionSlug\n}): void => {\n  const schema = getCollectionInputSchema({ collectionSlug: slug, req })\n\n  validateEntityData({ slug, data, entity: 'collection', partial, req, schema })\n}\n\nexport const validateGlobalData = ({\n  slug,\n  data,\n  req,\n}: {\n  data: Record<string, unknown>\n  req: PayloadRequest\n  slug: GlobalSlug\n}): void => {\n  const schema = getGlobalInputSchema({ globalSlug: slug, req })\n\n  validateEntityData({ slug, data, entity: 'global', partial: true, req, schema })\n}\n\nconst validateEntityData = ({\n  slug,\n  data,\n  entity,\n  partial,\n  req,\n  schema,\n}: {\n  data: Record<string, unknown>\n  entity: 'collection' | 'global'\n  partial?: boolean\n  req: PayloadRequest\n  schema: EntityInputSchema | null\n  slug: string\n}): void => {\n  if (!schema) {\n    return\n  }\n\n  const validationSchema = partial ? withoutRequired(schema) : schema\n  const result = fromJSONSchema(validationSchema as Parameters<typeof fromJSONSchema>[0]).safeParse(\n    data,\n  )\n\n  if (result.success) {\n    return\n  }\n\n  throw new ValidationError({\n    [entity]: slug,\n    errors: getUsefulIssues(result.error.issues).map(({ message, path }) => ({\n      message,\n      path: formatDataPath(path),\n    })),\n    req,\n  })\n}\n\n/** Updates and drafts accept partial data, including partial nested objects and array rows. */\nconst withoutRequired = (schema: EntityInputSchema): EntityInputSchema => {\n  const {\n    $defs,\n    additionalProperties,\n    anyOf,\n    items,\n    oneOf,\n    properties,\n    required: _required,\n    ...partialSchema\n  } = schema\n\n  return {\n    ...partialSchema,\n    ...($defs ? { $defs: mapSchemaRecord($defs) } : {}),\n    ...(typeof additionalProperties === 'object'\n      ? { additionalProperties: withoutRequired(additionalProperties) }\n      : additionalProperties !== undefined\n        ? { additionalProperties }\n        : {}),\n    ...(anyOf ? { anyOf: anyOf.map(makeSchemaPartial) } : {}),\n    ...(items\n      ? {\n          items: Array.isArray(items)\n            ? items.map((item) => withoutRequired(item))\n            : withoutRequired(items),\n        }\n      : {}),\n    ...(oneOf ? { oneOf: oneOf.map(makeSchemaPartial) } : {}),\n    ...(properties ? { properties: mapSchemaRecord(properties) } : {}),\n  }\n}\n\nconst makeSchemaPartial = (schema: boolean | EntityInputSchema): boolean | EntityInputSchema =>\n  typeof schema === 'boolean' ? schema : withoutRequired(schema)\n\nconst mapSchemaRecord = <T extends boolean | EntityInputSchema>(\n  schemas: Record<string, T>,\n): Record<string, T> =>\n  Object.fromEntries(\n    Object.entries(schemas).map(([name, schema]) => [name, makeSchemaPartial(schema)]),\n  ) as Record<string, T>\n\n/**\n * Zod keeps every failed recursive-union branch. Select the closest matching branch instead of\n * returning a very large error tree to CLI and MCP clients.\n */\nconst getUsefulIssues = (\n  issues: core.$ZodIssue[],\n  parentPath: PropertyKey[] = [],\n): core.$ZodIssue[] => {\n  const selectedIssues = issues.flatMap((issue) => {\n    if (issue.code !== 'invalid_union') {\n      return [{ ...issue, path: [...parentPath, ...issue.path] }]\n    }\n\n    const unionPath = [...parentPath, ...issue.path]\n    const closestBranch = issue.errors\n      .filter((branch) => branch.length > 0)\n      .sort(compareIssueBranches)[0]\n\n    return closestBranch\n      ? getUsefulIssues(closestBranch, unionPath)\n      : [{ ...issue, path: unionPath }]\n  })\n  const uniqueIssues = new Map<string, core.$ZodIssue>()\n\n  for (const issue of selectedIssues) {\n    const key = `${issue.path.map(String).join('.')}:${issue.message}`\n\n    if (!uniqueIssues.has(key)) {\n      uniqueIssues.set(key, issue)\n    }\n  }\n\n  return [...uniqueIssues.values()].slice(0, 10)\n}\n\nconst compareIssueBranches = (left: core.$ZodIssue[], right: core.$ZodIssue[]): number => {\n  const discriminatorDifference = countDiscriminatorIssues(left) - countDiscriminatorIssues(right)\n\n  if (discriminatorDifference !== 0) {\n    return discriminatorDifference\n  }\n\n  const pathDepthDifference = getDeepestPath(right) - getDeepestPath(left)\n\n  if (pathDepthDifference !== 0) {\n    return pathDepthDifference\n  }\n\n  return left.length - right.length\n}\n\nconst countDiscriminatorIssues = (issues: core.$ZodIssue[]): number =>\n  issues.filter((issue) => {\n    const field = issue.path.at(-1)\n\n    return field === 'blockType' || field === 'relationTo' || field === 'type'\n  }).length\n\nconst getDeepestPath = (issues: core.$ZodIssue[]): number =>\n  Math.max(0, ...issues.map((issue) => issue.path.length))\n\nconst formatDataPath = (path: PropertyKey[]): string =>\n  path.reduce<string>(\n    (result, segment) =>\n      typeof segment === 'number' ? `${result}[${segment}]` : `${result}.${String(segment)}`,\n    'data',\n  )\n"],"names":["fromJSONSchema","ValidationError","getCollectionInputSchema","getGlobalInputSchema","validateCollectionData","slug","data","partial","req","schema","collectionSlug","validateEntityData","entity","validateGlobalData","globalSlug","validationSchema","withoutRequired","result","safeParse","success","errors","getUsefulIssues","error","issues","map","message","path","formatDataPath","$defs","additionalProperties","anyOf","items","oneOf","properties","required","_required","partialSchema","mapSchemaRecord","undefined","makeSchemaPartial","Array","isArray","item","schemas","Object","fromEntries","entries","name","parentPath","selectedIssues","flatMap","issue","code","unionPath","closestBranch","filter","branch","length","sort","compareIssueBranches","uniqueIssues","Map","key","String","join","has","set","values","slice","left","right","discriminatorDifference","countDiscriminatorIssues","pathDepthDifference","getDeepestPath","field","at","Math","max","reduce","segment"],"mappings":"AAEA,SAASA,cAAc,QAAQ,MAAK;AAKpC,SAASC,eAAe,QAAQ,kCAAiC;AACjE,SAASC,wBAAwB,EAAEC,oBAAoB,QAAQ,4BAA2B;AAE1F,OAAO,MAAMC,yBAAyB,CAAC,EACrCC,IAAI,EACJC,IAAI,EACJC,OAAO,EACPC,GAAG,EAMJ;IACC,MAAMC,SAASP,yBAAyB;QAAEQ,gBAAgBL;QAAMG;IAAI;IAEpEG,mBAAmB;QAAEN;QAAMC;QAAMM,QAAQ;QAAcL;QAASC;QAAKC;IAAO;AAC9E,EAAC;AAED,OAAO,MAAMI,qBAAqB,CAAC,EACjCR,IAAI,EACJC,IAAI,EACJE,GAAG,EAKJ;IACC,MAAMC,SAASN,qBAAqB;QAAEW,YAAYT;QAAMG;IAAI;IAE5DG,mBAAmB;QAAEN;QAAMC;QAAMM,QAAQ;QAAUL,SAAS;QAAMC;QAAKC;IAAO;AAChF,EAAC;AAED,MAAME,qBAAqB,CAAC,EAC1BN,IAAI,EACJC,IAAI,EACJM,MAAM,EACNL,OAAO,EACPC,GAAG,EACHC,MAAM,EAQP;IACC,IAAI,CAACA,QAAQ;QACX;IACF;IAEA,MAAMM,mBAAmBR,UAAUS,gBAAgBP,UAAUA;IAC7D,MAAMQ,SAASjB,eAAee,kBAA0DG,SAAS,CAC/FZ;IAGF,IAAIW,OAAOE,OAAO,EAAE;QAClB;IACF;IAEA,MAAM,IAAIlB,gBAAgB;QACxB,CAACW,OAAO,EAAEP;QACVe,QAAQC,gBAAgBJ,OAAOK,KAAK,CAACC,MAAM,EAAEC,GAAG,CAAC,CAAC,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAAM,CAAA;gBACvED;gBACAC,MAAMC,eAAeD;YACvB,CAAA;QACAlB;IACF;AACF;AAEA,6FAA6F,GAC7F,MAAMQ,kBAAkB,CAACP;IACvB,MAAM,EACJmB,KAAK,EACLC,oBAAoB,EACpBC,KAAK,EACLC,KAAK,EACLC,KAAK,EACLC,UAAU,EACVC,UAAUC,SAAS,EACnB,GAAGC,eACJ,GAAG3B;IAEJ,OAAO;QACL,GAAG2B,aAAa;QAChB,GAAIR,QAAQ;YAAEA,OAAOS,gBAAgBT;QAAO,IAAI,CAAC,CAAC;QAClD,GAAI,OAAOC,yBAAyB,WAChC;YAAEA,sBAAsBb,gBAAgBa;QAAsB,IAC9DA,yBAAyBS,YACvB;YAAET;QAAqB,IACvB,CAAC,CAAC;QACR,GAAIC,QAAQ;YAAEA,OAAOA,MAAMN,GAAG,CAACe;QAAmB,IAAI,CAAC,CAAC;QACxD,GAAIR,QACA;YACEA,OAAOS,MAAMC,OAAO,CAACV,SACjBA,MAAMP,GAAG,CAAC,CAACkB,OAAS1B,gBAAgB0B,SACpC1B,gBAAgBe;QACtB,IACA,CAAC,CAAC;QACN,GAAIC,QAAQ;YAAEA,OAAOA,MAAMR,GAAG,CAACe;QAAmB,IAAI,CAAC,CAAC;QACxD,GAAIN,aAAa;YAAEA,YAAYI,gBAAgBJ;QAAY,IAAI,CAAC,CAAC;IACnE;AACF;AAEA,MAAMM,oBAAoB,CAAC9B,SACzB,OAAOA,WAAW,YAAYA,SAASO,gBAAgBP;AAEzD,MAAM4B,kBAAkB,CACtBM,UAEAC,OAAOC,WAAW,CAChBD,OAAOE,OAAO,CAACH,SAASnB,GAAG,CAAC,CAAC,CAACuB,MAAMtC,OAAO,GAAK;YAACsC;YAAMR,kBAAkB9B;SAAQ;AAGrF;;;CAGC,GACD,MAAMY,kBAAkB,CACtBE,QACAyB,aAA4B,EAAE;IAE9B,MAAMC,iBAAiB1B,OAAO2B,OAAO,CAAC,CAACC;QACrC,IAAIA,MAAMC,IAAI,KAAK,iBAAiB;YAClC,OAAO;gBAAC;oBAAE,GAAGD,KAAK;oBAAEzB,MAAM;2BAAIsB;2BAAeG,MAAMzB,IAAI;qBAAC;gBAAC;aAAE;QAC7D;QAEA,MAAM2B,YAAY;eAAIL;eAAeG,MAAMzB,IAAI;SAAC;QAChD,MAAM4B,gBAAgBH,MAAM/B,MAAM,CAC/BmC,MAAM,CAAC,CAACC,SAAWA,OAAOC,MAAM,GAAG,GACnCC,IAAI,CAACC,qBAAqB,CAAC,EAAE;QAEhC,OAAOL,gBACHjC,gBAAgBiC,eAAeD,aAC/B;YAAC;gBAAE,GAAGF,KAAK;gBAAEzB,MAAM2B;YAAU;SAAE;IACrC;IACA,MAAMO,eAAe,IAAIC;IAEzB,KAAK,MAAMV,SAASF,eAAgB;QAClC,MAAMa,MAAM,GAAGX,MAAMzB,IAAI,CAACF,GAAG,CAACuC,QAAQC,IAAI,CAAC,KAAK,CAAC,EAAEb,MAAM1B,OAAO,EAAE;QAElE,IAAI,CAACmC,aAAaK,GAAG,CAACH,MAAM;YAC1BF,aAAaM,GAAG,CAACJ,KAAKX;QACxB;IACF;IAEA,OAAO;WAAIS,aAAaO,MAAM;KAAG,CAACC,KAAK,CAAC,GAAG;AAC7C;AAEA,MAAMT,uBAAuB,CAACU,MAAwBC;IACpD,MAAMC,0BAA0BC,yBAAyBH,QAAQG,yBAAyBF;IAE1F,IAAIC,4BAA4B,GAAG;QACjC,OAAOA;IACT;IAEA,MAAME,sBAAsBC,eAAeJ,SAASI,eAAeL;IAEnE,IAAII,wBAAwB,GAAG;QAC7B,OAAOA;IACT;IAEA,OAAOJ,KAAKZ,MAAM,GAAGa,MAAMb,MAAM;AACnC;AAEA,MAAMe,2BAA2B,CAACjD,SAChCA,OAAOgC,MAAM,CAAC,CAACJ;QACb,MAAMwB,QAAQxB,MAAMzB,IAAI,CAACkD,EAAE,CAAC,CAAC;QAE7B,OAAOD,UAAU,eAAeA,UAAU,gBAAgBA,UAAU;IACtE,GAAGlB,MAAM;AAEX,MAAMiB,iBAAiB,CAACnD,SACtBsD,KAAKC,GAAG,CAAC,MAAMvD,OAAOC,GAAG,CAAC,CAAC2B,QAAUA,MAAMzB,IAAI,CAAC+B,MAAM;AAExD,MAAM9B,iBAAiB,CAACD,OACtBA,KAAKqD,MAAM,CACT,CAAC9D,QAAQ+D,UACP,OAAOA,YAAY,WAAW,GAAG/D,OAAO,CAAC,EAAE+D,QAAQ,CAAC,CAAC,GAAG,GAAG/D,OAAO,CAAC,EAAE8C,OAAOiB,UAAU,EACxF"}

package/dist/utilities/escapeRegExp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"escapeRegExp.d.ts","sourceRoot":"","sources":["../../src/utilities/escapeRegExp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,QAAQ,MAAM,KAAG,MACC,CAAA"}
+{"version":3,"file":"escapeRegExp.d.ts","sourceRoot":"","sources":["../../src/utilities/escapeRegExp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,YAAY,WAAY,MAAM,KAAG,MACC,CAAA"}

package/dist/utilities/extractID.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extractID.d.ts","sourceRoot":"","sources":["../../src/utilities/extractID.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,GAAI,MAAM,SAAS,MAAM,GAAG,MAAM,EACtD,YAAY;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,KAClC,MAMF,CAAA"}
+{"version":3,"file":"extractID.d.ts","sourceRoot":"","sources":["../../src/utilities/extractID.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,GAAI,MAAM,SAAS,MAAM,GAAG,MAAM,cAC1C;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,KAClC,MAMF,CAAA"}

package/dist/utilities/fieldPath.d.ts

@@ -0,0 +1,13 @@
+export declare const hasUnsupportedFieldPathSegment: ({ segments, }: {
+    segments: readonly string[];
+}) => boolean;
+export declare const setOwnProperty: <TTarget extends object>({ key, target, value, }: {
+    key: PropertyKey;
+    target: TTarget;
+    value: unknown;
+}) => TTarget;
+export declare const expandOwnDottedKey: ({ key, target, }: {
+    key: string;
+    target: Record<string, unknown>;
+}) => boolean;
+//# sourceMappingURL=fieldPath.d.ts.map

package/dist/utilities/fieldPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPath.d.ts","sourceRoot":"","sources":["../../src/utilities/fieldPath.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,8BAA8B,kBAExC;IACD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5B,KAAG,OAAgF,CAAA;AAEpF,eAAO,MAAM,cAAc,GAAI,OAAO,SAAS,MAAM,2BAIlD;IACD,GAAG,EAAE,WAAW,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,OAAO,CAAA;CACf,KAAG,OAiBH,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAG5B;IACD,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC,KAAG,OA0BH,CAAA"}

package/dist/utilities/fieldPath.js

@@ -0,0 +1,51 @@
+const unsupportedFieldPathSegments = new Set([
+    '__proto__'
+]);
+export const hasUnsupportedFieldPathSegment = ({ segments })=>segments.some((segment)=>unsupportedFieldPathSegments.has(segment));
+export const setOwnProperty = ({ key, target, value })=>{
+    if (Object.hasOwn(target, key) || !(key in target)) {
+        if (!Reflect.set(target, key, value)) {
+            throw new TypeError(`Cannot assign to property ${String(key)}`);
+        }
+        return target;
+    }
+    Object.defineProperty(target, key, {
+        configurable: true,
+        enumerable: true,
+        value,
+        writable: true
+    });
+    return target;
+};
+export const expandOwnDottedKey = ({ key, target })=>{
+    if (!Object.hasOwn(target, key) || !key.includes('.')) {
+        return false;
+    }
+    const segments = key.split('.');
+    if (hasUnsupportedFieldPathSegment({
+        segments
+    })) {
+        delete target[key];
+        return false;
+    }
+    const firstDotIndex = key.indexOf('.');
+    const fieldName = key.substring(0, firstDotIndex);
+    const remainingPath = key.substring(firstDotIndex + 1);
+    if (!Object.hasOwn(target, fieldName) || !target[fieldName]) {
+        setOwnProperty({
+            key: fieldName,
+            target,
+            value: {}
+        });
+    }
+    const nestedTarget = target[fieldName];
+    setOwnProperty({
+        key: remainingPath,
+        target: nestedTarget,
+        value: target[key]
+    });
+    delete target[key];
+    return true;
+};
+
+//# sourceMappingURL=fieldPath.js.map

package/dist/utilities/fieldPath.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/fieldPath.ts"],"sourcesContent":["const unsupportedFieldPathSegments = new Set(['__proto__'])\n\nexport const hasUnsupportedFieldPathSegment = ({\n  segments,\n}: {\n  segments: readonly string[]\n}): boolean => segments.some((segment) => unsupportedFieldPathSegments.has(segment))\n\nexport const setOwnProperty = <TTarget extends object>({\n  key,\n  target,\n  value,\n}: {\n  key: PropertyKey\n  target: TTarget\n  value: unknown\n}): TTarget => {\n  if (Object.hasOwn(target, key) || !(key in target)) {\n    if (!Reflect.set(target, key, value)) {\n      throw new TypeError(`Cannot assign to property ${String(key)}`)\n    }\n\n    return target\n  }\n\n  Object.defineProperty(target, key, {\n    configurable: true,\n    enumerable: true,\n    value,\n    writable: true,\n  })\n\n  return target\n}\n\nexport const expandOwnDottedKey = ({\n  key,\n  target,\n}: {\n  key: string\n  target: Record<string, unknown>\n}): boolean => {\n  if (!Object.hasOwn(target, key) || !key.includes('.')) {\n    return false\n  }\n\n  const segments = key.split('.')\n\n  if (hasUnsupportedFieldPathSegment({ segments })) {\n    delete target[key]\n    return false\n  }\n\n  const firstDotIndex = key.indexOf('.')\n  const fieldName = key.substring(0, firstDotIndex)\n  const remainingPath = key.substring(firstDotIndex + 1)\n\n  if (!Object.hasOwn(target, fieldName) || !target[fieldName]) {\n    setOwnProperty({ key: fieldName, target, value: {} })\n  }\n\n  const nestedTarget = target[fieldName] as Record<string, unknown>\n\n  setOwnProperty({ key: remainingPath, target: nestedTarget, value: target[key] })\n  delete target[key]\n\n  return true\n}\n"],"names":["unsupportedFieldPathSegments","Set","hasUnsupportedFieldPathSegment","segments","some","segment","has","setOwnProperty","key","target","value","Object","hasOwn","Reflect","set","TypeError","String","defineProperty","configurable","enumerable","writable","expandOwnDottedKey","includes","split","firstDotIndex","indexOf","fieldName","substring","remainingPath","nestedTarget"],"mappings":"AAAA,MAAMA,+BAA+B,IAAIC,IAAI;IAAC;CAAY;AAE1D,OAAO,MAAMC,iCAAiC,CAAC,EAC7CC,QAAQ,EAGT,GAAcA,SAASC,IAAI,CAAC,CAACC,UAAYL,6BAA6BM,GAAG,CAACD,UAAS;AAEpF,OAAO,MAAME,iBAAiB,CAAyB,EACrDC,GAAG,EACHC,MAAM,EACNC,KAAK,EAKN;IACC,IAAIC,OAAOC,MAAM,CAACH,QAAQD,QAAQ,CAAEA,CAAAA,OAAOC,MAAK,GAAI;QAClD,IAAI,CAACI,QAAQC,GAAG,CAACL,QAAQD,KAAKE,QAAQ;YACpC,MAAM,IAAIK,UAAU,CAAC,0BAA0B,EAAEC,OAAOR,MAAM;QAChE;QAEA,OAAOC;IACT;IAEAE,OAAOM,cAAc,CAACR,QAAQD,KAAK;QACjCU,cAAc;QACdC,YAAY;QACZT;QACAU,UAAU;IACZ;IAEA,OAAOX;AACT,EAAC;AAED,OAAO,MAAMY,qBAAqB,CAAC,EACjCb,GAAG,EACHC,MAAM,EAIP;IACC,IAAI,CAACE,OAAOC,MAAM,CAACH,QAAQD,QAAQ,CAACA,IAAIc,QAAQ,CAAC,MAAM;QACrD,OAAO;IACT;IAEA,MAAMnB,WAAWK,IAAIe,KAAK,CAAC;IAE3B,IAAIrB,+BAA+B;QAAEC;IAAS,IAAI;QAChD,OAAOM,MAAM,CAACD,IAAI;QAClB,OAAO;IACT;IAEA,MAAMgB,gBAAgBhB,IAAIiB,OAAO,CAAC;IAClC,MAAMC,YAAYlB,IAAImB,SAAS,CAAC,GAAGH;IACnC,MAAMI,gBAAgBpB,IAAImB,SAAS,CAACH,gBAAgB;IAEpD,IAAI,CAACb,OAAOC,MAAM,CAACH,QAAQiB,cAAc,CAACjB,MAAM,CAACiB,UAAU,EAAE;QAC3DnB,eAAe;YAAEC,KAAKkB;YAAWjB;YAAQC,OAAO,CAAC;QAAE;IACrD;IAEA,MAAMmB,eAAepB,MAAM,CAACiB,UAAU;IAEtCnB,eAAe;QAAEC,KAAKoB;QAAenB,QAAQoB;QAAcnB,OAAOD,MAAM,CAACD,IAAI;IAAC;IAC9E,OAAOC,MAAM,CAACD,IAAI;IAElB,OAAO;AACT,EAAC"}

package/dist/utilities/fieldValueExists.d.ts

@@ -0,0 +1,29 @@
+import type { DefaultDocumentIDType, Locale } from '../index.js';
+import type { PayloadRequest } from '../types/index.js';
+type Args = {
+    collection: string;
+    /**
+     * When true, also matches documents whose value only exists in a draft version. A versioned
+     * collection keeps draft data in `_versions`, which the main-collection query — and the unique
+     * index — would miss.
+     */
+    draftsEnabled?: boolean;
+    field: string;
+    /** Exclude this document, so a doc doesn't conflict with itself on update. */
+    id?: DefaultDocumentIDType;
+    locale?: Locale['code'];
+    overrideAccess?: boolean;
+    req: PayloadRequest;
+    value: unknown;
+};
+/**
+ * Whether another document in `collection` already uses `value` for `field`.
+ *
+ * Runs the `find` operation outside the caller's transaction while preserving the rest of the
+ * request. A committed read is what a uniqueness check wants, and isolating the transaction avoids
+ * the "cursor on a session with a transaction in progress" error from a hook. `draft` includes
+ * slugs that only exist in a draft version.
+ */
+export declare const fieldValueExists: ({ id, collection, draftsEnabled, field, locale, overrideAccess, req, value, }: Args) => Promise<boolean>;
+export {};
+//# sourceMappingURL=fieldValueExists.d.ts.map

package/dist/utilities/fieldValueExists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldValueExists.d.ts","sourceRoot":"","sources":["../../src/utilities/fieldValueExists.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIvD,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,8EAA8E;IAC9E,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,GAAG,EAAE,cAAc,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,kFAS1B,IAAI,KAAG,OAAO,CAAC,OAAO,CAmBxB,CAAA"}

package/dist/utilities/fieldValueExists.js

@@ -0,0 +1,37 @@
+import { isolateObjectProperty } from './isolateObjectProperty.js';
+/**
+ * Whether another document in `collection` already uses `value` for `field`.
+ *
+ * Runs the `find` operation outside the caller's transaction while preserving the rest of the
+ * request. A committed read is what a uniqueness check wants, and isolating the transaction avoids
+ * the "cursor on a session with a transaction in progress" error from a hook. `draft` includes
+ * slugs that only exist in a draft version.
+ */ export const fieldValueExists = async ({ id, collection, draftsEnabled, field, locale, overrideAccess = false, req, value })=>{
+    const queryReq = isolateObjectProperty(req, [
+        'query',
+        'transactionID'
+    ]);
+    queryReq.query = {
+        ...req.query
+    };
+    delete queryReq.transactionID;
+    const { docs } = await req.payload.find({
+        collection,
+        depth: 0,
+        disableErrors: true,
+        draft: Boolean(draftsEnabled),
+        limit: 2,
+        locale: locale,
+        overrideAccess,
+        pagination: false,
+        req: queryReq,
+        where: {
+            [field]: {
+                equals: value
+            }
+        }
+    });
+    return docs.some((doc)=>doc.id !== id);
+};
+
+//# sourceMappingURL=fieldValueExists.js.map

package/dist/utilities/fieldValueExists.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/fieldValueExists.ts"],"sourcesContent":["import type { DefaultDocumentIDType, Locale } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { isolateObjectProperty } from './isolateObjectProperty.js'\n\ntype Args = {\n  collection: string\n  /**\n   * When true, also matches documents whose value only exists in a draft version. A versioned\n   * collection keeps draft data in `_versions`, which the main-collection query — and the unique\n   * index — would miss.\n   */\n  draftsEnabled?: boolean\n  field: string\n  /** Exclude this document, so a doc doesn't conflict with itself on update. */\n  id?: DefaultDocumentIDType\n  locale?: Locale['code']\n  overrideAccess?: boolean\n  req: PayloadRequest\n  value: unknown\n}\n\n/**\n * Whether another document in `collection` already uses `value` for `field`.\n *\n * Runs the `find` operation outside the caller's transaction while preserving the rest of the\n * request. A committed read is what a uniqueness check wants, and isolating the transaction avoids\n * the \"cursor on a session with a transaction in progress\" error from a hook. `draft` includes\n * slugs that only exist in a draft version.\n */\nexport const fieldValueExists = async ({\n  id,\n  collection,\n  draftsEnabled,\n  field,\n  locale,\n  overrideAccess = false,\n  req,\n  value,\n}: Args): Promise<boolean> => {\n  const queryReq = isolateObjectProperty(req, ['query', 'transactionID'])\n  queryReq.query = { ...req.query }\n  delete queryReq.transactionID\n\n  const { docs } = await req.payload.find({\n    collection,\n    depth: 0,\n    disableErrors: true,\n    draft: Boolean(draftsEnabled),\n    limit: 2,\n    locale: locale as Parameters<typeof req.payload.find>[0]['locale'],\n    overrideAccess,\n    pagination: false,\n    req: queryReq,\n    where: { [field]: { equals: value } },\n  })\n\n  return docs.some((doc) => doc.id !== id)\n}\n"],"names":["isolateObjectProperty","fieldValueExists","id","collection","draftsEnabled","field","locale","overrideAccess","req","value","queryReq","query","transactionID","docs","payload","find","depth","disableErrors","draft","Boolean","limit","pagination","where","equals","some","doc"],"mappings":"AAGA,SAASA,qBAAqB,QAAQ,6BAA4B;AAmBlE;;;;;;;CAOC,GACD,OAAO,MAAMC,mBAAmB,OAAO,EACrCC,EAAE,EACFC,UAAU,EACVC,aAAa,EACbC,KAAK,EACLC,MAAM,EACNC,iBAAiB,KAAK,EACtBC,GAAG,EACHC,KAAK,EACA;IACL,MAAMC,WAAWV,sBAAsBQ,KAAK;QAAC;QAAS;KAAgB;IACtEE,SAASC,KAAK,GAAG;QAAE,GAAGH,IAAIG,KAAK;IAAC;IAChC,OAAOD,SAASE,aAAa;IAE7B,MAAM,EAAEC,IAAI,EAAE,GAAG,MAAML,IAAIM,OAAO,CAACC,IAAI,CAAC;QACtCZ;QACAa,OAAO;QACPC,eAAe;QACfC,OAAOC,QAAQf;QACfgB,OAAO;QACPd,QAAQA;QACRC;QACAc,YAAY;QACZb,KAAKE;QACLY,OAAO;YAAE,CAACjB,MAAM,EAAE;gBAAEkB,QAAQd;YAAM;QAAE;IACtC;IAEA,OAAOI,KAAKW,IAAI,CAAC,CAACC,MAAQA,IAAIvB,EAAE,KAAKA;AACvC,EAAC"}

package/dist/utilities/flattenAllFields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flattenAllFields.d.ts","sourceRoot":"","sources":["../../src/utilities/flattenAllFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,KAAK,EACL,cAAc,EAEd,cAAc,EAEf,MAAM,2BAA2B,CAAA;AAIlC,eAAO,MAAM,YAAY,GAAI,WAAW;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,KAAG,cAK1D,CAAA;AAID;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,oBAG9B;IACD,wGAAwG;IACxG,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,KAAK,EAAE,CAAA;CAChB,KAAG,cAAc,EAoFjB,CAAA"}
+{"version":3,"file":"flattenAllFields.d.ts","sourceRoot":"","sources":["../../src/utilities/flattenAllFields.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,KAAK,EACL,cAAc,EAEd,cAAc,EAEf,MAAM,2BAA2B,CAAA;AAIlC,eAAO,MAAM,YAAY,cAAe;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,KAAG,cAK1D,CAAA;AAID;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,uBAG1B;IACD,wGAAwG;IACxG,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,KAAK,EAAE,CAAA;CAChB,KAAG,cAAc,EAoFjB,CAAA"}

package/dist/utilities/formatAdminURL.d.ts

@@ -40,5 +40,6 @@ type FormatURLArgs = ({
     apiRoute: NonNullable<Config['routes']>['api'];
 } & BaseFormatURLArgs);
 export declare const formatAdminURL: (args: FormatURLArgs) => string;
+export declare const stripTrailingSlash: (path: string) => string;
 export {};
 //# sourceMappingURL=formatAdminURL.d.ts.map

package/dist/utilities/formatAdminURL.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatAdminURL.d.ts","sourceRoot":"","sources":["../../src/utilities/formatAdminURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,iBAAiB,GAAG;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAE7B,KAAK,aAAa,GACd,CAAC;IACC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClD,QAAQ,CAAC,EAAE,KAAK,CAAA;CACjB,GAAG,iBAAiB,CAAC,GACtB,CAAC;IACC,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;CAC/C,GAAG,iBAAiB,CAAC,CAAA;AAE1B,eAAO,MAAM,cAAc,GAAI,MAAM,aAAa,KAAG,MAyBpD,CAAA"}
+{"version":3,"file":"formatAdminURL.d.ts","sourceRoot":"","sources":["../../src/utilities/formatAdminURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,iBAAiB,GAAG;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAE7B,KAAK,aAAa,GACd,CAAC;IACC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClD,QAAQ,CAAC,EAAE,KAAK,CAAA;CACjB,GAAG,iBAAiB,CAAC,GACtB,CAAC;IACC,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;CAC/C,GAAG,iBAAiB,CAAC,CAAA;AAE1B,eAAO,MAAM,cAAc,SAAU,aAAa,KAAG,MAyBpD,CAAA;AAED,eAAO,MAAM,kBAAkB,SAAU,MAAM,KAAG,MAMjD,CAAA"}

package/dist/utilities/formatAdminURL.js

@@ -7,16 +7,34 @@ export const formatAdminURL = (args)=>{
         path && path
     ].filter(Boolean);
     const pathname = segments.join('') || '/';
-    const pathnameWithBase = (basePath + pathname).replace(/\/$/, '') || '/';
+    const pathnameWithBase = stripTrailingSlash(basePath + pathname) || '/';
     const includeBasePath = includeBasePathArg ?? (adminRoute ? false : true);
     if (relative || !serverURL) {
         if (includeBasePath && basePath) {
-            return pathnameWithBase;
+            return applyTrailingSlash(pathnameWithBase);
         }
-        return pathname;
+        return applyTrailingSlash(pathname);
     }
     const serverURLObj = new URL(serverURL);
-    return new URL(pathnameWithBase, serverURLObj.origin).toString();
+    return applyTrailingSlash(new URL(pathnameWithBase, serverURLObj.origin).toString());
+};
+export const stripTrailingSlash = (path)=>{
+    if (path.length > 1 && path.endsWith('/')) {
+        return path.slice(0, -1);
+    }
+    return path;
+};
+const applyTrailingSlash = (url)=>{
+    if (process.env.NEXT_TRAILING_SLASH !== 'true') {
+        return url;
+    }
+    const queryIndex = url.search(/[?#]/);
+    const pathPart = queryIndex === -1 ? url : url.slice(0, queryIndex);
+    const queryPart = queryIndex === -1 ? '' : url.slice(queryIndex);
+    if (pathPart.endsWith('/')) {
+        return url;
+    }
+    return `${pathPart}/${queryPart}`;
 };
 
 //# sourceMappingURL=formatAdminURL.js.map

package/dist/utilities/formatAdminURL.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/formatAdminURL.ts"],"sourcesContent":["import type { Config } from '../config/types.js'\n\n/**\n * Builds correct URLs for admin panel and API routing.\n * Use this for both admin routes (`adminRoute`) and API routes (`apiRoute`).\n *\n * Its primary responsibilities are:\n * 1. Read from your `routes.admin` or `routes.api` config and appropriately handle `\"/\"` paths\n * 2. Prepend the `basePath` from your Next.js config, if specified\n * 3. Return relative or absolute URLs, as needed\n *\n * @example\n * // Admin route\n * formatAdminURL({ adminRoute, path: `/collections/${slug}` })\n *\n * @example\n * // API route with query params\n * const queryString = qs.stringify({ where, limit, page }, { addQueryPrefix: true })\n * formatAdminURL({ apiRoute: api, path: `/${slug}${queryString}`, serverURL })\n */\ntype BaseFormatURLArgs = {\n  /**\n   * The subpath of your application, if specified.\n   * @see https://nextjs.org/docs/app/api-reference/config/next-config-js/basePath\n   * @example '/docs'\n   */\n  basePath?: string\n  includeBasePath?: boolean\n  path?: '' | `/${string}` | null\n  /**\n   * Return a relative URL, e.g. ignore `serverURL`.\n   * Useful for route-matching, etc.\n   */\n  relative?: boolean\n} & Pick<Config, 'serverURL'>\n\ntype FormatURLArgs =\n  | ({\n      adminRoute: NonNullable<Config['routes']>['admin']\n      apiRoute?: never\n    } & BaseFormatURLArgs)\n  | ({\n      adminRoute?: never\n      apiRoute: NonNullable<Config['routes']>['api']\n    } & BaseFormatURLArgs)\n\nexport const formatAdminURL = (args: FormatURLArgs): string => {\n  const {\n    adminRoute,\n    apiRoute,\n    includeBasePath: includeBasePathArg,\n    path = '',\n    relative = false,\n    serverURL,\n  } = args\n  const basePath = process.env.NEXT_BASE_PATH || args.basePath || ''\n  const routePath = adminRoute || apiRoute\n  const segments = [routePath && routePath !== '/' && routePath, path && path].filter(Boolean)\n  const pathname = segments.join('') || '/'\n  const pathnameWithBase = (basePath + pathname).replace(/\\/$/, '') || '/'\n  const includeBasePath = includeBasePathArg ?? (adminRoute ? false : true)\n\n  if (relative || !serverURL) {\n    if (includeBasePath && basePath) {\n      return pathnameWithBase\n    }\n    return pathname\n  }\n\n  const serverURLObj = new URL(serverURL)\n  return new URL(pathnameWithBase, serverURLObj.origin).toString()\n}\n"],"names":["formatAdminURL","args","adminRoute","apiRoute","includeBasePath","includeBasePathArg","path","relative","serverURL","basePath","process","env","NEXT_BASE_PATH","routePath","segments","filter","Boolean","pathname","join","pathnameWithBase","replace","serverURLObj","URL","origin","toString"],"mappings":"AA8CA,OAAO,MAAMA,iBAAiB,CAACC;IAC7B,MAAM,EACJC,UAAU,EACVC,QAAQ,EACRC,iBAAiBC,kBAAkB,EACnCC,OAAO,EAAE,EACTC,WAAW,KAAK,EAChBC,SAAS,EACV,GAAGP;IACJ,MAAMQ,WAAWC,QAAQC,GAAG,CAACC,cAAc,IAAIX,KAAKQ,QAAQ,IAAI;IAChE,MAAMI,YAAYX,cAAcC;IAChC,MAAMW,WAAW;QAACD,aAAaA,cAAc,OAAOA;QAAWP,QAAQA;KAAK,CAACS,MAAM,CAACC;IACpF,MAAMC,WAAWH,SAASI,IAAI,CAAC,OAAO;IACtC,MAAMC,mBAAmB,AAACV,CAAAA,WAAWQ,QAAO,EAAGG,OAAO,CAAC,OAAO,OAAO;IACrE,MAAMhB,kBAAkBC,sBAAuBH,CAAAA,aAAa,QAAQ,IAAG;IAEvE,IAAIK,YAAY,CAACC,WAAW;QAC1B,IAAIJ,mBAAmBK,UAAU;YAC/B,OAAOU;QACT;QACA,OAAOF;IACT;IAEA,MAAMI,eAAe,IAAIC,IAAId;IAC7B,OAAO,IAAIc,IAAIH,kBAAkBE,aAAaE,MAAM,EAAEC,QAAQ;AAChE,EAAC"}
+{"version":3,"sources":["../../src/utilities/formatAdminURL.ts"],"sourcesContent":["import type { Config } from '../config/types.js'\n\n/**\n * Builds correct URLs for admin panel and API routing.\n * Use this for both admin routes (`adminRoute`) and API routes (`apiRoute`).\n *\n * Its primary responsibilities are:\n * 1. Read from your `routes.admin` or `routes.api` config and appropriately handle `\"/\"` paths\n * 2. Prepend the `basePath` from your Next.js config, if specified\n * 3. Return relative or absolute URLs, as needed\n *\n * @example\n * // Admin route\n * formatAdminURL({ adminRoute, path: `/collections/${slug}` })\n *\n * @example\n * // API route with query params\n * const queryString = qs.stringify({ where, limit, page }, { addQueryPrefix: true })\n * formatAdminURL({ apiRoute: api, path: `/${slug}${queryString}`, serverURL })\n */\ntype BaseFormatURLArgs = {\n  /**\n   * The subpath of your application, if specified.\n   * @see https://nextjs.org/docs/app/api-reference/config/next-config-js/basePath\n   * @example '/docs'\n   */\n  basePath?: string\n  includeBasePath?: boolean\n  path?: '' | `/${string}` | null\n  /**\n   * Return a relative URL, e.g. ignore `serverURL`.\n   * Useful for route-matching, etc.\n   */\n  relative?: boolean\n} & Pick<Config, 'serverURL'>\n\ntype FormatURLArgs =\n  | ({\n      adminRoute: NonNullable<Config['routes']>['admin']\n      apiRoute?: never\n    } & BaseFormatURLArgs)\n  | ({\n      adminRoute?: never\n      apiRoute: NonNullable<Config['routes']>['api']\n    } & BaseFormatURLArgs)\n\nexport const formatAdminURL = (args: FormatURLArgs): string => {\n  const {\n    adminRoute,\n    apiRoute,\n    includeBasePath: includeBasePathArg,\n    path = '',\n    relative = false,\n    serverURL,\n  } = args\n  const basePath = process.env.NEXT_BASE_PATH || args.basePath || ''\n  const routePath = adminRoute || apiRoute\n  const segments = [routePath && routePath !== '/' && routePath, path && path].filter(Boolean)\n  const pathname = segments.join('') || '/'\n  const pathnameWithBase = stripTrailingSlash(basePath + pathname) || '/'\n  const includeBasePath = includeBasePathArg ?? (adminRoute ? false : true)\n\n  if (relative || !serverURL) {\n    if (includeBasePath && basePath) {\n      return applyTrailingSlash(pathnameWithBase)\n    }\n    return applyTrailingSlash(pathname)\n  }\n\n  const serverURLObj = new URL(serverURL)\n  return applyTrailingSlash(new URL(pathnameWithBase, serverURLObj.origin).toString())\n}\n\nexport const stripTrailingSlash = (path: string): string => {\n  if (path.length > 1 && path.endsWith('/')) {\n    return path.slice(0, -1)\n  }\n\n  return path\n}\n\nconst applyTrailingSlash = (url: string): string => {\n  if (process.env.NEXT_TRAILING_SLASH !== 'true') {\n    return url\n  }\n  const queryIndex = url.search(/[?#]/)\n  const pathPart = queryIndex === -1 ? url : url.slice(0, queryIndex)\n  const queryPart = queryIndex === -1 ? '' : url.slice(queryIndex)\n  if (pathPart.endsWith('/')) {\n    return url\n  }\n  return `${pathPart}/${queryPart}`\n}\n"],"names":["formatAdminURL","args","adminRoute","apiRoute","includeBasePath","includeBasePathArg","path","relative","serverURL","basePath","process","env","NEXT_BASE_PATH","routePath","segments","filter","Boolean","pathname","join","pathnameWithBase","stripTrailingSlash","applyTrailingSlash","serverURLObj","URL","origin","toString","length","endsWith","slice","url","NEXT_TRAILING_SLASH","queryIndex","search","pathPart","queryPart"],"mappings":"AA8CA,OAAO,MAAMA,iBAAiB,CAACC;IAC7B,MAAM,EACJC,UAAU,EACVC,QAAQ,EACRC,iBAAiBC,kBAAkB,EACnCC,OAAO,EAAE,EACTC,WAAW,KAAK,EAChBC,SAAS,EACV,GAAGP;IACJ,MAAMQ,WAAWC,QAAQC,GAAG,CAACC,cAAc,IAAIX,KAAKQ,QAAQ,IAAI;IAChE,MAAMI,YAAYX,cAAcC;IAChC,MAAMW,WAAW;QAACD,aAAaA,cAAc,OAAOA;QAAWP,QAAQA;KAAK,CAACS,MAAM,CAACC;IACpF,MAAMC,WAAWH,SAASI,IAAI,CAAC,OAAO;IACtC,MAAMC,mBAAmBC,mBAAmBX,WAAWQ,aAAa;IACpE,MAAMb,kBAAkBC,sBAAuBH,CAAAA,aAAa,QAAQ,IAAG;IAEvE,IAAIK,YAAY,CAACC,WAAW;QAC1B,IAAIJ,mBAAmBK,UAAU;YAC/B,OAAOY,mBAAmBF;QAC5B;QACA,OAAOE,mBAAmBJ;IAC5B;IAEA,MAAMK,eAAe,IAAIC,IAAIf;IAC7B,OAAOa,mBAAmB,IAAIE,IAAIJ,kBAAkBG,aAAaE,MAAM,EAAEC,QAAQ;AACnF,EAAC;AAED,OAAO,MAAML,qBAAqB,CAACd;IACjC,IAAIA,KAAKoB,MAAM,GAAG,KAAKpB,KAAKqB,QAAQ,CAAC,MAAM;QACzC,OAAOrB,KAAKsB,KAAK,CAAC,GAAG,CAAC;IACxB;IAEA,OAAOtB;AACT,EAAC;AAED,MAAMe,qBAAqB,CAACQ;IAC1B,IAAInB,QAAQC,GAAG,CAACmB,mBAAmB,KAAK,QAAQ;QAC9C,OAAOD;IACT;IACA,MAAME,aAAaF,IAAIG,MAAM,CAAC;IAC9B,MAAMC,WAAWF,eAAe,CAAC,IAAIF,MAAMA,IAAID,KAAK,CAAC,GAAGG;IACxD,MAAMG,YAAYH,eAAe,CAAC,IAAI,KAAKF,IAAID,KAAK,CAACG;IACrD,IAAIE,SAASN,QAAQ,CAAC,MAAM;QAC1B,OAAOE;IACT;IACA,OAAO,GAAGI,SAAS,CAAC,EAAEC,WAAW;AACnC"}

package/dist/utilities/formatErrors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatErrors.d.ts","sourceRoot":"","sources":["../../src/utilities/formatErrors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAGhD,eAAO,MAAM,YAAY,GAAI,UAAU;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,QAAQ,KAAG,WAmE9E,CAAA"}
+{"version":3,"file":"formatErrors.d.ts","sourceRoot":"","sources":["../../src/utilities/formatErrors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAErD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAGhD,eAAO,MAAM,YAAY,aAAc;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,QAAQ,KAAG,WAmE9E,CAAA"}

package/dist/utilities/formatLabels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatLabels.d.ts","sourceRoot":"","sources":["../../src/utilities/formatLabels.ts"],"names":[],"mappings":"AAMA,QAAA,MAAM,OAAO,GAAI,aAAa,MAAM,EAAE,mBAAiB,KAAG,MAczD,CAAA;AAED,QAAA,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAYtE,CAAA;AAED,QAAA,MAAM,WAAW,GAAI,MAAM,MAAM,KAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAWrE,CAAA;AAED,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA"}
+{"version":3,"file":"formatLabels.d.ts","sourceRoot":"","sources":["../../src/utilities/formatLabels.ts"],"names":[],"mappings":"AAMA,QAAA,MAAM,OAAO,gBAAiB,MAAM,0BAAsB,MAczD,CAAA;AAED,QAAA,MAAM,YAAY,SAAU,MAAM,KAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAYtE,CAAA;AAED,QAAA,MAAM,WAAW,SAAU,MAAM,KAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAWrE,CAAA;AAED,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA"}

package/dist/utilities/getBestFitFromSizes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getBestFitFromSizes.d.ts","sourceRoot":"","sources":["../../src/utilities/getBestFitFromSizes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,GAAI,oEAOjC;IACD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,WA0CA,CAAA"}
+{"version":3,"file":"getBestFitFromSizes.d.ts","sourceRoot":"","sources":["../../src/utilities/getBestFitFromSizes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB,uEAO7B;IACD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,WA0CA,CAAA"}

package/dist/utilities/getBlockSelect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getBlockSelect.d.ts","sourceRoot":"","sources":["../../src/utilities/getBlockSelect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE/D;;;;GAIG;AACH,eAAO,MAAM,cAAc,GAAI,gCAI5B;IACD,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IAC1B,UAAU,EAAE,UAAU,CAAA;CACvB,KAAG;IAAE,WAAW,EAAE,OAAO,GAAG,UAAU,CAAC;IAAC,eAAe,EAAE,UAAU,CAAA;CAqCnE,CAAA"}
+{"version":3,"file":"getBlockSelect.d.ts","sourceRoot":"","sources":["../../src/utilities/getBlockSelect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE/D;;;;GAIG;AACH,eAAO,MAAM,cAAc,mCAIxB;IACD,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IAC1B,UAAU,EAAE,UAAU,CAAA;CACvB,KAAG;IAAE,WAAW,EAAE,OAAO,GAAG,UAAU,CAAC;IAAC,eAAe,EAAE,UAAU,CAAA;CAqCnE,CAAA"}

package/dist/utilities/getDataByPath.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getDataByPath.d.ts","sourceRoot":"","sources":["../../src/utilities/getDataByPath.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAIlD,eAAO,MAAM,aAAa,GAAI,CAAC,GAAG,OAAO,EAAE,QAAQ,SAAS,EAAE,MAAM,MAAM,KAAG,CAkB5E,CAAA"}
+{"version":3,"file":"getDataByPath.d.ts","sourceRoot":"","sources":["../../src/utilities/getDataByPath.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAIlD,eAAO,MAAM,aAAa,GAAI,CAAC,GAAG,OAAO,UAAU,SAAS,QAAQ,MAAM,KAAG,CAkB5E,CAAA"}

package/dist/utilities/getEntityPermissions/entityDocExists.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entityDocExists.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAA;AAEvB;;GAEG;AACH,wBAAsB,eAAe,CAAC,EACpC,EAAE,EACF,IAAI,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,GAAG,EACH,KAAK,GACN,EAAE;IACD,UAAU,EAAE,YAAY,GAAG,QAAQ,CAAA;IACnC,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,KAAK,CAAA;CACb,GAAG,OAAO,CAAC,OAAO,CAAC,CAqCnB"}
+{"version":3,"file":"entityDocExists.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAA;AAIvB;;GAEG;AACH,wBAAsB,eAAe,CAAC,EACpC,EAAE,EACF,IAAI,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,GAAG,EACH,KAAK,GACN,EAAE;IACD,UAAU,EAAE,YAAY,GAAG,QAAQ,CAAA;IACnC,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,KAAK,CAAA;CACb,GAAG,OAAO,CAAC,OAAO,CAAC,CA0EnB"}

package/dist/utilities/getEntityPermissions/entityDocExists.js

@@ -1,8 +1,29 @@
+import { sanitizeWhereQuery } from '../../database/sanitizeWhereQuery.js';
 import { combineQueries } from '../../index.js';
+import { buildVersionCollectionFields } from '../../versions/buildCollectionFields.js';
+import { buildVersionGlobalFields } from '../../versions/buildGlobalFields.js';
 /**
  * Returns whether or not the entity doc exists based on the where query.
  */ export async function entityDocExists({ id, slug, entityType, locale, operation, req, where }) {
     if (entityType === 'global') {
+        if (operation === 'readVersions') {
+            const global = req.payload.globals.config.find(({ slug: globalSlug })=>globalSlug === slug);
+            if (!global) {
+                return false;
+            }
+            sanitizeWhereQuery({
+                fields: buildVersionGlobalFields(req.payload.config, global, true),
+                payload: req.payload,
+                where
+            });
+            const count = await req.payload.db.countGlobalVersions({
+                global: slug,
+                locale,
+                req,
+                where
+            });
+            return count.totalDocs > 0;
+        }
         const global = await req.payload.db.findGlobal({
             slug,
             locale,
@@ -15,15 +36,25 @@ import { combineQueries } from '../../index.js';
     }
     if (entityType === 'collection' && id) {
         if (operation === 'readVersions') {
+            const collection = req.payload.collections[slug]?.config;
+            if (!collection) {
+                return false;
+            }
+            const fullWhere = combineQueries(where, {
+                parent: {
+                    equals: id
+                }
+            });
+            sanitizeWhereQuery({
+                fields: buildVersionCollectionFields(req.payload.config, collection, true),
+                payload: req.payload,
+                where: fullWhere
+            });
             const count = await req.payload.db.countVersions({
                 collection: slug,
                 locale,
                 req,
-                where: combineQueries(where, {
-                    parent: {
-                        equals: id
-                    }
-                })
+                where: fullWhere
             });
             return count.totalDocs > 0;
         }

package/dist/utilities/getEntityPermissions/entityDocExists.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"sourcesContent":["import {\n  type AllOperations,\n  combineQueries,\n  type DefaultDocumentIDType,\n  type PayloadRequest,\n  type Where,\n} from '../../index.js'\n\n/**\n * Returns whether or not the entity doc exists based on the where query.\n */\nexport async function entityDocExists({\n  id,\n  slug,\n  entityType,\n  locale,\n  operation,\n  req,\n  where,\n}: {\n  entityType: 'collection' | 'global'\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation?: AllOperations\n  req: PayloadRequest\n  slug: string\n  where: Where\n}): Promise<boolean> {\n  if (entityType === 'global') {\n    const global = await req.payload.db.findGlobal({\n      slug,\n      locale,\n      req,\n      select: {},\n      where,\n    })\n\n    const hasGlobalDoc = Boolean(global && Object.keys(global).length > 0)\n\n    return hasGlobalDoc\n  }\n\n  if (entityType === 'collection' && id) {\n    if (operation === 'readVersions') {\n      const count = await req.payload.db.countVersions({\n        collection: slug,\n        locale,\n        req,\n        where: combineQueries(where, { parent: { equals: id } }),\n      })\n      return count.totalDocs > 0\n    }\n\n    const count = await req.payload.db.count({\n      collection: slug,\n      locale,\n      req,\n      where: combineQueries(where, { id: { equals: id } }),\n    })\n\n    return count.totalDocs > 0\n  }\n\n  return false\n}\n"],"names":["combineQueries","entityDocExists","id","slug","entityType","locale","operation","req","where","global","payload","db","findGlobal","select","hasGlobalDoc","Boolean","Object","keys","length","count","countVersions","collection","parent","equals","totalDocs"],"mappings":"AAAA,SAEEA,cAAc,QAIT,iBAAgB;AAEvB;;CAEC,GACD,OAAO,eAAeC,gBAAgB,EACpCC,EAAE,EACFC,IAAI,EACJC,UAAU,EACVC,MAAM,EACNC,SAAS,EACTC,GAAG,EACHC,KAAK,EASN;IACC,IAAIJ,eAAe,UAAU;QAC3B,MAAMK,SAAS,MAAMF,IAAIG,OAAO,CAACC,EAAE,CAACC,UAAU,CAAC;YAC7CT;YACAE;YACAE;YACAM,QAAQ,CAAC;YACTL;QACF;QAEA,MAAMM,eAAeC,QAAQN,UAAUO,OAAOC,IAAI,CAACR,QAAQS,MAAM,GAAG;QAEpE,OAAOJ;IACT;IAEA,IAAIV,eAAe,gBAAgBF,IAAI;QACrC,IAAII,cAAc,gBAAgB;YAChC,MAAMa,QAAQ,MAAMZ,IAAIG,OAAO,CAACC,EAAE,CAACS,aAAa,CAAC;gBAC/CC,YAAYlB;gBACZE;gBACAE;gBACAC,OAAOR,eAAeQ,OAAO;oBAAEc,QAAQ;wBAAEC,QAAQrB;oBAAG;gBAAE;YACxD;YACA,OAAOiB,MAAMK,SAAS,GAAG;QAC3B;QAEA,MAAML,QAAQ,MAAMZ,IAAIG,OAAO,CAACC,EAAE,CAACQ,KAAK,CAAC;YACvCE,YAAYlB;YACZE;YACAE;YACAC,OAAOR,eAAeQ,OAAO;gBAAEN,IAAI;oBAAEqB,QAAQrB;gBAAG;YAAE;QACpD;QAEA,OAAOiB,MAAMK,SAAS,GAAG;IAC3B;IAEA,OAAO;AACT"}
+{"version":3,"sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"sourcesContent":["import { sanitizeWhereQuery } from '../../database/sanitizeWhereQuery.js'\nimport {\n  type AllOperations,\n  combineQueries,\n  type DefaultDocumentIDType,\n  type PayloadRequest,\n  type Where,\n} from '../../index.js'\nimport { buildVersionCollectionFields } from '../../versions/buildCollectionFields.js'\nimport { buildVersionGlobalFields } from '../../versions/buildGlobalFields.js'\n\n/**\n * Returns whether or not the entity doc exists based on the where query.\n */\nexport async function entityDocExists({\n  id,\n  slug,\n  entityType,\n  locale,\n  operation,\n  req,\n  where,\n}: {\n  entityType: 'collection' | 'global'\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation?: AllOperations\n  req: PayloadRequest\n  slug: string\n  where: Where\n}): Promise<boolean> {\n  if (entityType === 'global') {\n    if (operation === 'readVersions') {\n      const global = req.payload.globals.config.find(({ slug: globalSlug }) => globalSlug === slug)\n\n      if (!global) {\n        return false\n      }\n\n      sanitizeWhereQuery({\n        fields: buildVersionGlobalFields(req.payload.config, global, true),\n        payload: req.payload,\n        where,\n      })\n\n      const count = await req.payload.db.countGlobalVersions({\n        global: slug,\n        locale,\n        req,\n        where,\n      })\n\n      return count.totalDocs > 0\n    }\n\n    const global = await req.payload.db.findGlobal({\n      slug,\n      locale,\n      req,\n      select: {},\n      where,\n    })\n\n    const hasGlobalDoc = Boolean(global && Object.keys(global).length > 0)\n\n    return hasGlobalDoc\n  }\n\n  if (entityType === 'collection' && id) {\n    if (operation === 'readVersions') {\n      const collection = req.payload.collections[slug]?.config\n\n      if (!collection) {\n        return false\n      }\n\n      const fullWhere = combineQueries(where, { parent: { equals: id } })\n\n      sanitizeWhereQuery({\n        fields: buildVersionCollectionFields(req.payload.config, collection, true),\n        payload: req.payload,\n        where: fullWhere,\n      })\n\n      const count = await req.payload.db.countVersions({\n        collection: slug,\n        locale,\n        req,\n        where: fullWhere,\n      })\n      return count.totalDocs > 0\n    }\n\n    const count = await req.payload.db.count({\n      collection: slug,\n      locale,\n      req,\n      where: combineQueries(where, { id: { equals: id } }),\n    })\n\n    return count.totalDocs > 0\n  }\n\n  return false\n}\n"],"names":["sanitizeWhereQuery","combineQueries","buildVersionCollectionFields","buildVersionGlobalFields","entityDocExists","id","slug","entityType","locale","operation","req","where","global","payload","globals","config","find","globalSlug","fields","count","db","countGlobalVersions","totalDocs","findGlobal","select","hasGlobalDoc","Boolean","Object","keys","length","collection","collections","fullWhere","parent","equals","countVersions"],"mappings":"AAAA,SAASA,kBAAkB,QAAQ,uCAAsC;AACzE,SAEEC,cAAc,QAIT,iBAAgB;AACvB,SAASC,4BAA4B,QAAQ,0CAAyC;AACtF,SAASC,wBAAwB,QAAQ,sCAAqC;AAE9E;;CAEC,GACD,OAAO,eAAeC,gBAAgB,EACpCC,EAAE,EACFC,IAAI,EACJC,UAAU,EACVC,MAAM,EACNC,SAAS,EACTC,GAAG,EACHC,KAAK,EASN;IACC,IAAIJ,eAAe,UAAU;QAC3B,IAAIE,cAAc,gBAAgB;YAChC,MAAMG,SAASF,IAAIG,OAAO,CAACC,OAAO,CAACC,MAAM,CAACC,IAAI,CAAC,CAAC,EAAEV,MAAMW,UAAU,EAAE,GAAKA,eAAeX;YAExF,IAAI,CAACM,QAAQ;gBACX,OAAO;YACT;YAEAZ,mBAAmB;gBACjBkB,QAAQf,yBAAyBO,IAAIG,OAAO,CAACE,MAAM,EAAEH,QAAQ;gBAC7DC,SAASH,IAAIG,OAAO;gBACpBF;YACF;YAEA,MAAMQ,QAAQ,MAAMT,IAAIG,OAAO,CAACO,EAAE,CAACC,mBAAmB,CAAC;gBACrDT,QAAQN;gBACRE;gBACAE;gBACAC;YACF;YAEA,OAAOQ,MAAMG,SAAS,GAAG;QAC3B;QAEA,MAAMV,SAAS,MAAMF,IAAIG,OAAO,CAACO,EAAE,CAACG,UAAU,CAAC;YAC7CjB;YACAE;YACAE;YACAc,QAAQ,CAAC;YACTb;QACF;QAEA,MAAMc,eAAeC,QAAQd,UAAUe,OAAOC,IAAI,CAAChB,QAAQiB,MAAM,GAAG;QAEpE,OAAOJ;IACT;IAEA,IAAIlB,eAAe,gBAAgBF,IAAI;QACrC,IAAII,cAAc,gBAAgB;YAChC,MAAMqB,aAAapB,IAAIG,OAAO,CAACkB,WAAW,CAACzB,KAAK,EAAES;YAElD,IAAI,CAACe,YAAY;gBACf,OAAO;YACT;YAEA,MAAME,YAAY/B,eAAeU,OAAO;gBAAEsB,QAAQ;oBAAEC,QAAQ7B;gBAAG;YAAE;YAEjEL,mBAAmB;gBACjBkB,QAAQhB,6BAA6BQ,IAAIG,OAAO,CAACE,MAAM,EAAEe,YAAY;gBACrEjB,SAASH,IAAIG,OAAO;gBACpBF,OAAOqB;YACT;YAEA,MAAMb,QAAQ,MAAMT,IAAIG,OAAO,CAACO,EAAE,CAACe,aAAa,CAAC;gBAC/CL,YAAYxB;gBACZE;gBACAE;gBACAC,OAAOqB;YACT;YACA,OAAOb,MAAMG,SAAS,GAAG;QAC3B;QAEA,MAAMH,QAAQ,MAAMT,IAAIG,OAAO,CAACO,EAAE,CAACD,KAAK,CAAC;YACvCW,YAAYxB;YACZE;YACAE;YACAC,OAAOV,eAAeU,OAAO;gBAAEN,IAAI;oBAAE6B,QAAQ7B;gBAAG;YAAE;QACpD;QAEA,OAAOc,MAAMG,SAAS,GAAG;IAC3B;IAEA,OAAO;AACT"}

package/dist/utilities/getEntityPermissions/getEntityPermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getEntityPermissions.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EAEpB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAS,MAAM,sBAAsB,CAAA;AAO5F,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAC7C,SAAS,EACT,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAC7C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAE/C,KAAK,UAAU,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI,WAAW,SAAS,QAAQ,GACvF,gBAAgB,GAChB,oBAAoB,CAAA;AAExB,KAAK,IAAI,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,WAAW,SAAS,YAAY,GAAG,yBAAyB,GAAG,qBAAqB,CAAA;IAC5F,UAAU,EAAE,WAAW,CAAA;IACvB;;OAEG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,GAAG,EAAE,cAAc,CAAA;CACpB,GAAG,CACA;IACE,SAAS,EAAE,KAAK,CAAA;IAChB,EAAE,CAAC,EAAE,KAAK,CAAA;CACX,GACD;IACE,SAAS,EAAE,IAAI,CAAA;IACf,EAAE,EAAE,WAAW,SAAS,YAAY,GAAG,qBAAqB,GAAG,SAAS,CAAA;CACzE,CACJ,CAAA;AAYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,EACpF,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,GACtB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAwJlC"}
+{"version":3,"file":"getEntityPermissions.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EAEpB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAS,MAAM,sBAAsB,CAAA;AAO5F,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAC7C,SAAS,EACT,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAC7C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAE/C,KAAK,UAAU,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI,WAAW,SAAS,QAAQ,GACvF,gBAAgB,GAChB,oBAAoB,CAAA;AAExB,KAAK,IAAI,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,WAAW,SAAS,YAAY,GAAG,yBAAyB,GAAG,qBAAqB,CAAA;IAC5F,UAAU,EAAE,WAAW,CAAA;IACvB;;OAEG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,GAAG,EAAE,cAAc,CAAA;CACpB,GAAG,CACA;IACE,SAAS,EAAE,KAAK,CAAA;IAChB,EAAE,CAAC,EAAE,KAAK,CAAA;CACX,GACD;IACE,SAAS,EAAE,IAAI,CAAA;IACf,EAAE,EAAE,WAAW,SAAS,YAAY,GAAG,qBAAqB,GAAG,SAAS,CAAA;CACzE,CACJ,CAAA;AAYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,EACpF,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,GACtB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CA4JlC"}

package/dist/utilities/getEntityPermissions/getEntityPermissions.js

@@ -83,6 +83,7 @@ const topLevelGlobalPermissions = [
                     operation,
                     result: Promise.resolve(accessFunction({
                         id,
+                        slug: entity.slug,
                         data,
                         req
                     }))
@@ -127,8 +128,10 @@ const topLevelGlobalPermissions = [
     await Promise.all(wherePromises);
     populateFieldPermissions({
         blockReferencesPermissions,
+        collection: entityType === 'collection' ? entity : null,
         data,
         fields: entity.fields,
+        global: entityType === 'global' ? entity : null,
         operations,
         parentPermissionsObject: entityPermissions,
         permissionsObject: fieldsPermissions,

package/dist/utilities/getEntityPermissions/getEntityPermissions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'util'\n\nimport type {\n  BlockPermissions,\n  CollectionPermission,\n  FieldsPermissions,\n  GlobalPermission,\n  Permission,\n} from '../../auth/types.js'\nimport type { SanitizedCollectionConfig, TypeWithID } from '../../collections/config/types.js'\nimport type { SanitizedGlobalConfig } from '../../globals/config/types.js'\nimport type { BlockSlug, DefaultDocumentIDType } from '../../index.js'\nimport type { AllOperations, JsonObject, PayloadRequest, Where } from '../../types/index.js'\n\nimport { entityDocExists } from './entityDocExists.js'\nimport { populateFieldPermissions } from './populateFieldPermissions.js'\n\ntype WhereQueryCache = { result: Promise<boolean>; where: Where }[]\n\nexport type BlockReferencesPermissions = Record<\n  BlockSlug,\n  BlockPermissions | Promise<BlockPermissions>\n>\n\nexport type EntityDoc = JsonObject | TypeWithID\n\ntype ReturnType<TEntityType extends 'collection' | 'global'> = TEntityType extends 'global'\n  ? GlobalPermission\n  : CollectionPermission\n\ntype Args<TEntityType extends 'collection' | 'global'> = {\n  blockReferencesPermissions: BlockReferencesPermissions\n  /**\n   * If the document data is passed, it will be used to check access instead of fetching the document from the database.\n   */\n  data?: JsonObject\n  entity: TEntityType extends 'collection' ? SanitizedCollectionConfig : SanitizedGlobalConfig\n  entityType: TEntityType\n  /**\n   * Operations to check access for\n   */\n  operations: AllOperations[]\n  req: PayloadRequest\n} & (\n  | {\n      fetchData: false\n      id?: never\n    }\n  | {\n      fetchData: true\n      id: TEntityType extends 'collection' ? DefaultDocumentIDType : undefined\n    }\n)\n\nconst topLevelCollectionPermissions = [\n  'create',\n  'delete',\n  'read',\n  'readVersions',\n  'update',\n  'unlock',\n]\nconst topLevelGlobalPermissions = ['read', 'readVersions', 'update']\n\n/**\n * Build up permissions object for an entity (collection or global).\n * This is not run during any update and reflects the current state of the entity data => doc and data is the same.\n *\n * When `fetchData` is false:\n * - returned `Where` are not run and evaluated as \"does not have permission\".\n * - If req.data is passed: `data` and `doc` is passed to access functions.\n * - If req.data is not passed: `data` and `doc` is not passed to access functions.\n *\n * When `fetchData` is true:\n * - `Where` are run and evaluated as \"has permission\" or \"does not have permission\".\n * - `data` and `doc` are always passed to access functions.\n * - Error is thrown if `entityType` is 'collection' and `id` is not passed.\n *\n * In both cases:\n * We cannot include siblingData or blockData here, as we do not have siblingData available once we reach block or array\n * rows, as we're calculating schema permissions, which do not include individual rows.\n * For consistency, it's thus better to never include the siblingData and blockData\n *\n * @internal\n */\nexport async function getEntityPermissions<TEntityType extends 'collection' | 'global'>(\n  args: Args<TEntityType>,\n): Promise<ReturnType<TEntityType>> {\n  const {\n    id,\n    blockReferencesPermissions,\n    data: _data,\n    entity,\n    entityType,\n    fetchData,\n    operations,\n    req,\n  } = args\n  const { locale: _locale, user } = req\n\n  const locale = _locale ? _locale : undefined\n\n  if (fetchData && entityType === 'collection' && !id) {\n    throw new Error('ID is required when fetching data for a collection')\n  }\n\n  const hasData = _data && Object.keys(_data).length > 0\n  const data: JsonObject | undefined = hasData\n    ? _data\n    : fetchData\n      ? await (async () => {\n          if (entityType === 'global') {\n            return req.payload.findGlobal({\n              slug: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n            })\n          }\n\n          if (entityType === 'collection') {\n            return req.payload.findByID({\n              id: id!,\n              collection: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n              trash: true,\n            })\n          }\n        })()\n      : undefined\n\n  const isLoggedIn = !!user\n\n  const fieldsPermissions: FieldsPermissions = {}\n\n  const entityPermissions: ReturnType<TEntityType> = {\n    fields: fieldsPermissions,\n  } as ReturnType<TEntityType>\n\n  const promises: Promise<void>[] = []\n\n  // Phase 1: Resolve all access functions to get where queries\n  const accessResults: {\n    operation: keyof typeof entity.access\n    result: Promise<boolean | Where>\n  }[] = []\n\n  for (const _operation of operations) {\n    const operation = _operation as keyof typeof entity.access\n    const accessFunction = entity.access[operation]\n\n    if (\n      (entityType === 'collection' && topLevelCollectionPermissions.includes(operation)) ||\n      (entityType === 'global' && topLevelGlobalPermissions.includes(operation))\n    ) {\n      if (typeof accessFunction === 'function') {\n        accessResults.push({\n          operation,\n          result: Promise.resolve(accessFunction({ id, data, req })) as Promise<boolean | Where>,\n        })\n      } else {\n        entityPermissions[operation] = {\n          permission: isLoggedIn,\n        }\n      }\n    }\n  }\n\n  // Await all access functions in parallel\n  const resolvedAccessResults = await Promise.all(\n    accessResults.map(async (item) => ({\n      operation: item.operation,\n      result: await item.result,\n    })),\n  )\n\n  // Phase 2: Process where queries with cache and resolve in parallel\n  const whereQueryCache: WhereQueryCache = []\n  const wherePromises: Promise<void>[] = []\n\n  for (const { operation, result: accessResult } of resolvedAccessResults) {\n    if (typeof accessResult === 'object') {\n      processWhereQuery({\n        id,\n        slug: entity.slug,\n        accessResult,\n        entityPermissions,\n        entityType,\n        fetchData,\n        locale,\n        operation,\n        req,\n        wherePromises,\n        whereQueryCache,\n      })\n    } else if (entityPermissions[operation]?.permission !== false) {\n      entityPermissions[operation] = { permission: !!accessResult }\n    }\n  }\n\n  // Await all where query DB calls in parallel\n  await Promise.all(wherePromises)\n\n  populateFieldPermissions({\n    blockReferencesPermissions,\n    data,\n    fields: entity.fields,\n    operations,\n    parentPermissionsObject: entityPermissions,\n    permissionsObject: fieldsPermissions,\n    promises,\n    req,\n  })\n\n  /**\n   * Await all promises in parallel.\n   * A promise can add more promises to the promises array (group of fields calls populateFieldPermissions again in their own promise), which will not be\n   * awaited in the first run.\n   * This is why we need to loop again to process the new promises, until there are no more promises left.\n   */\n  let iterations = 0\n  while (promises.length > 0) {\n    const currentPromises = promises.splice(0, promises.length)\n\n    await Promise.all(currentPromises)\n\n    iterations++\n    if (iterations >= 100) {\n      throw new Error('Infinite getEntityPermissions promise loop detected.')\n    }\n  }\n\n  return entityPermissions\n}\n\nconst processWhereQuery = ({\n  id,\n  slug,\n  accessResult,\n  entityPermissions,\n  entityType,\n  fetchData,\n  locale,\n  operation,\n  req,\n  wherePromises,\n  whereQueryCache,\n}: {\n  accessResult: Where\n  entityPermissions: CollectionPermission | GlobalPermission\n  entityType: 'collection' | 'global'\n  fetchData: boolean\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation: Extract<keyof (CollectionPermission | GlobalPermission), AllOperations>\n  req: PayloadRequest\n  slug: string\n  wherePromises: Promise<void>[]\n  whereQueryCache: WhereQueryCache\n}): void => {\n  if (fetchData) {\n    // Check cache for identical where query using deep comparison\n    let cached = whereQueryCache.find((entry) => isDeepStrictEqual(entry.where, accessResult))\n\n    if (!cached) {\n      // Cache miss - start DB query (don't await)\n      cached = {\n        result: entityDocExists({\n          id,\n          slug,\n          entityType,\n          locale,\n          operation,\n          req,\n          where: accessResult,\n        }),\n        where: accessResult,\n      }\n      whereQueryCache.push(cached)\n    }\n\n    // Defer resolution to Promise.all (cache hits reuse same promise)\n    wherePromises.push(\n      cached.result.then((hasPermission) => {\n        entityPermissions[operation] = {\n          permission: hasPermission,\n          where: accessResult,\n        } as Permission\n      }),\n    )\n  } else {\n    // TODO: 4.0: Investigate defaulting to `false` here, if where query is returned but ignored as we don't\n    // have the document data available. This seems more secure.\n    // Alternatively, we could set permission to a third state, like 'unknown'.\n    // Even after calling sanitizePermissions, the permissions will still be true if the where query is returned but ignored as we don't have the document data available.\n    entityPermissions[operation] = { permission: true, where: accessResult } as Permission\n  }\n}\n"],"names":["isDeepStrictEqual","entityDocExists","populateFieldPermissions","topLevelCollectionPermissions","topLevelGlobalPermissions","getEntityPermissions","args","id","blockReferencesPermissions","data","_data","entity","entityType","fetchData","operations","req","locale","_locale","user","undefined","Error","hasData","Object","keys","length","payload","findGlobal","slug","depth","fallbackLocale","overrideAccess","findByID","collection","trash","isLoggedIn","fieldsPermissions","entityPermissions","fields","promises","accessResults","_operation","operation","accessFunction","access","includes","push","result","Promise","resolve","permission","resolvedAccessResults","all","map","item","whereQueryCache","wherePromises","accessResult","processWhereQuery","parentPermissionsObject","permissionsObject","iterations","currentPromises","splice","cached","find","entry","where","then","hasPermission"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,OAAM;AAcxC,SAASC,eAAe,QAAQ,uBAAsB;AACtD,SAASC,wBAAwB,QAAQ,gCAA+B;AAuCxE,MAAMC,gCAAgC;IACpC;IACA;IACA;IACA;IACA;IACA;CACD;AACD,MAAMC,4BAA4B;IAAC;IAAQ;IAAgB;CAAS;AAEpE;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,eAAeC,qBACpBC,IAAuB;IAEvB,MAAM,EACJC,EAAE,EACFC,0BAA0B,EAC1BC,MAAMC,KAAK,EACXC,MAAM,EACNC,UAAU,EACVC,SAAS,EACTC,UAAU,EACVC,GAAG,EACJ,GAAGT;IACJ,MAAM,EAAEU,QAAQC,OAAO,EAAEC,IAAI,EAAE,GAAGH;IAElC,MAAMC,SAASC,UAAUA,UAAUE;IAEnC,IAAIN,aAAaD,eAAe,gBAAgB,CAACL,IAAI;QACnD,MAAM,IAAIa,MAAM;IAClB;IAEA,MAAMC,UAAUX,SAASY,OAAOC,IAAI,CAACb,OAAOc,MAAM,GAAG;IACrD,MAAMf,OAA+BY,UACjCX,QACAG,YACE,MAAM,AAAC,CAAA;QACL,IAAID,eAAe,UAAU;YAC3B,OAAOG,IAAIU,OAAO,CAACC,UAAU,CAAC;gBAC5BC,MAAMhB,OAAOgB,IAAI;gBACjBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;YACF;QACF;QAEA,IAAIH,eAAe,cAAc;YAC/B,OAAOG,IAAIU,OAAO,CAACM,QAAQ,CAAC;gBAC1BxB,IAAIA;gBACJyB,YAAYrB,OAAOgB,IAAI;gBACvBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;gBACAkB,OAAO;YACT;QACF;IACF,CAAA,MACAd;IAEN,MAAMe,aAAa,CAAC,CAAChB;IAErB,MAAMiB,oBAAuC,CAAC;IAE9C,MAAMC,oBAA6C;QACjDC,QAAQF;IACV;IAEA,MAAMG,WAA4B,EAAE;IAEpC,6DAA6D;IAC7D,MAAMC,gBAGA,EAAE;IAER,KAAK,MAAMC,cAAc1B,WAAY;QACnC,MAAM2B,YAAYD;QAClB,MAAME,iBAAiB/B,OAAOgC,MAAM,CAACF,UAAU;QAE/C,IACE,AAAC7B,eAAe,gBAAgBT,8BAA8ByC,QAAQ,CAACH,cACtE7B,eAAe,YAAYR,0BAA0BwC,QAAQ,CAACH,YAC/D;YACA,IAAI,OAAOC,mBAAmB,YAAY;gBACxCH,cAAcM,IAAI,CAAC;oBACjBJ;oBACAK,QAAQC,QAAQC,OAAO,CAACN,eAAe;wBAAEnC;wBAAIE;wBAAMM;oBAAI;gBACzD;YACF,OAAO;gBACLqB,iBAAiB,CAACK,UAAU,GAAG;oBAC7BQ,YAAYf;gBACd;YACF;QACF;IACF;IAEA,yCAAyC;IACzC,MAAMgB,wBAAwB,MAAMH,QAAQI,GAAG,CAC7CZ,cAAca,GAAG,CAAC,OAAOC,OAAU,CAAA;YACjCZ,WAAWY,KAAKZ,SAAS;YACzBK,QAAQ,MAAMO,KAAKP,MAAM;QAC3B,CAAA;IAGF,oEAAoE;IACpE,MAAMQ,kBAAmC,EAAE;IAC3C,MAAMC,gBAAiC,EAAE;IAEzC,KAAK,MAAM,EAAEd,SAAS,EAAEK,QAAQU,YAAY,EAAE,IAAIN,sBAAuB;QACvE,IAAI,OAAOM,iBAAiB,UAAU;YACpCC,kBAAkB;gBAChBlD;gBACAoB,MAAMhB,OAAOgB,IAAI;gBACjB6B;gBACApB;gBACAxB;gBACAC;gBACAG;gBACAyB;gBACA1B;gBACAwC;gBACAD;YACF;QACF,OAAO,IAAIlB,iBAAiB,CAACK,UAAU,EAAEQ,eAAe,OAAO;YAC7Db,iBAAiB,CAACK,UAAU,GAAG;gBAAEQ,YAAY,CAAC,CAACO;YAAa;QAC9D;IACF;IAEA,6CAA6C;IAC7C,MAAMT,QAAQI,GAAG,CAACI;IAElBrD,yBAAyB;QACvBM;QACAC;QACA4B,QAAQ1B,OAAO0B,MAAM;QACrBvB;QACA4C,yBAAyBtB;QACzBuB,mBAAmBxB;QACnBG;QACAvB;IACF;IAEA;;;;;GAKC,GACD,IAAI6C,aAAa;IACjB,MAAOtB,SAASd,MAAM,GAAG,EAAG;QAC1B,MAAMqC,kBAAkBvB,SAASwB,MAAM,CAAC,GAAGxB,SAASd,MAAM;QAE1D,MAAMuB,QAAQI,GAAG,CAACU;QAElBD;QACA,IAAIA,cAAc,KAAK;YACrB,MAAM,IAAIxC,MAAM;QAClB;IACF;IAEA,OAAOgB;AACT;AAEA,MAAMqB,oBAAoB,CAAC,EACzBlD,EAAE,EACFoB,IAAI,EACJ6B,YAAY,EACZpB,iBAAiB,EACjBxB,UAAU,EACVC,SAAS,EACTG,MAAM,EACNyB,SAAS,EACT1B,GAAG,EACHwC,aAAa,EACbD,eAAe,EAahB;IACC,IAAIzC,WAAW;QACb,8DAA8D;QAC9D,IAAIkD,SAAST,gBAAgBU,IAAI,CAAC,CAACC,QAAUjE,kBAAkBiE,MAAMC,KAAK,EAAEV;QAE5E,IAAI,CAACO,QAAQ;YACX,4CAA4C;YAC5CA,SAAS;gBACPjB,QAAQ7C,gBAAgB;oBACtBM;oBACAoB;oBACAf;oBACAI;oBACAyB;oBACA1B;oBACAmD,OAAOV;gBACT;gBACAU,OAAOV;YACT;YACAF,gBAAgBT,IAAI,CAACkB;QACvB;QAEA,kEAAkE;QAClER,cAAcV,IAAI,CAChBkB,OAAOjB,MAAM,CAACqB,IAAI,CAAC,CAACC;YAClBhC,iBAAiB,CAACK,UAAU,GAAG;gBAC7BQ,YAAYmB;gBACZF,OAAOV;YACT;QACF;IAEJ,OAAO;QACL,wGAAwG;QACxG,4DAA4D;QAC5D,2EAA2E;QAC3E,sKAAsK;QACtKpB,iBAAiB,CAACK,UAAU,GAAG;YAAEQ,YAAY;YAAMiB,OAAOV;QAAa;IACzE;AACF"}
+{"version":3,"sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'util'\n\nimport type {\n  BlockPermissions,\n  CollectionPermission,\n  FieldsPermissions,\n  GlobalPermission,\n  Permission,\n} from '../../auth/types.js'\nimport type { SanitizedCollectionConfig, TypeWithID } from '../../collections/config/types.js'\nimport type { SanitizedGlobalConfig } from '../../globals/config/types.js'\nimport type { BlockSlug, DefaultDocumentIDType } from '../../index.js'\nimport type { AllOperations, JsonObject, PayloadRequest, Where } from '../../types/index.js'\n\nimport { entityDocExists } from './entityDocExists.js'\nimport { populateFieldPermissions } from './populateFieldPermissions.js'\n\ntype WhereQueryCache = { result: Promise<boolean>; where: Where }[]\n\nexport type BlockReferencesPermissions = Record<\n  BlockSlug,\n  BlockPermissions | Promise<BlockPermissions>\n>\n\nexport type EntityDoc = JsonObject | TypeWithID\n\ntype ReturnType<TEntityType extends 'collection' | 'global'> = TEntityType extends 'global'\n  ? GlobalPermission\n  : CollectionPermission\n\ntype Args<TEntityType extends 'collection' | 'global'> = {\n  blockReferencesPermissions: BlockReferencesPermissions\n  /**\n   * If the document data is passed, it will be used to check access instead of fetching the document from the database.\n   */\n  data?: JsonObject\n  entity: TEntityType extends 'collection' ? SanitizedCollectionConfig : SanitizedGlobalConfig\n  entityType: TEntityType\n  /**\n   * Operations to check access for\n   */\n  operations: AllOperations[]\n  req: PayloadRequest\n} & (\n  | {\n      fetchData: false\n      id?: never\n    }\n  | {\n      fetchData: true\n      id: TEntityType extends 'collection' ? DefaultDocumentIDType : undefined\n    }\n)\n\nconst topLevelCollectionPermissions = [\n  'create',\n  'delete',\n  'read',\n  'readVersions',\n  'update',\n  'unlock',\n]\nconst topLevelGlobalPermissions = ['read', 'readVersions', 'update']\n\n/**\n * Build up permissions object for an entity (collection or global).\n * This is not run during any update and reflects the current state of the entity data => doc and data is the same.\n *\n * When `fetchData` is false:\n * - returned `Where` are not run and evaluated as \"does not have permission\".\n * - If req.data is passed: `data` and `doc` is passed to access functions.\n * - If req.data is not passed: `data` and `doc` is not passed to access functions.\n *\n * When `fetchData` is true:\n * - `Where` are run and evaluated as \"has permission\" or \"does not have permission\".\n * - `data` and `doc` are always passed to access functions.\n * - Error is thrown if `entityType` is 'collection' and `id` is not passed.\n *\n * In both cases:\n * We cannot include siblingData or blockData here, as we do not have siblingData available once we reach block or array\n * rows, as we're calculating schema permissions, which do not include individual rows.\n * For consistency, it's thus better to never include the siblingData and blockData\n *\n * @internal\n */\nexport async function getEntityPermissions<TEntityType extends 'collection' | 'global'>(\n  args: Args<TEntityType>,\n): Promise<ReturnType<TEntityType>> {\n  const {\n    id,\n    blockReferencesPermissions,\n    data: _data,\n    entity,\n    entityType,\n    fetchData,\n    operations,\n    req,\n  } = args\n  const { locale: _locale, user } = req\n\n  const locale = _locale ? _locale : undefined\n\n  if (fetchData && entityType === 'collection' && !id) {\n    throw new Error('ID is required when fetching data for a collection')\n  }\n\n  const hasData = _data && Object.keys(_data).length > 0\n  const data: JsonObject | undefined = hasData\n    ? _data\n    : fetchData\n      ? await (async () => {\n          if (entityType === 'global') {\n            return req.payload.findGlobal({\n              slug: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n            })\n          }\n\n          if (entityType === 'collection') {\n            return req.payload.findByID({\n              id: id!,\n              collection: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n              trash: true,\n            })\n          }\n        })()\n      : undefined\n\n  const isLoggedIn = !!user\n\n  const fieldsPermissions: FieldsPermissions = {}\n\n  const entityPermissions: ReturnType<TEntityType> = {\n    fields: fieldsPermissions,\n  } as ReturnType<TEntityType>\n\n  const promises: Promise<void>[] = []\n\n  // Phase 1: Resolve all access functions to get where queries\n  const accessResults: {\n    operation: keyof typeof entity.access\n    result: Promise<boolean | Where>\n  }[] = []\n\n  for (const _operation of operations) {\n    const operation = _operation as keyof typeof entity.access\n    const accessFunction = entity.access[operation]\n\n    if (\n      (entityType === 'collection' && topLevelCollectionPermissions.includes(operation)) ||\n      (entityType === 'global' && topLevelGlobalPermissions.includes(operation))\n    ) {\n      if (typeof accessFunction === 'function') {\n        accessResults.push({\n          operation,\n          result: Promise.resolve(accessFunction({ id, slug: entity.slug, data, req })) as Promise<\n            boolean | Where\n          >,\n        })\n      } else {\n        entityPermissions[operation] = {\n          permission: isLoggedIn,\n        }\n      }\n    }\n  }\n\n  // Await all access functions in parallel\n  const resolvedAccessResults = await Promise.all(\n    accessResults.map(async (item) => ({\n      operation: item.operation,\n      result: await item.result,\n    })),\n  )\n\n  // Phase 2: Process where queries with cache and resolve in parallel\n  const whereQueryCache: WhereQueryCache = []\n  const wherePromises: Promise<void>[] = []\n\n  for (const { operation, result: accessResult } of resolvedAccessResults) {\n    if (typeof accessResult === 'object') {\n      processWhereQuery({\n        id,\n        slug: entity.slug,\n        accessResult,\n        entityPermissions,\n        entityType,\n        fetchData,\n        locale,\n        operation,\n        req,\n        wherePromises,\n        whereQueryCache,\n      })\n    } else if (entityPermissions[operation]?.permission !== false) {\n      entityPermissions[operation] = { permission: !!accessResult }\n    }\n  }\n\n  // Await all where query DB calls in parallel\n  await Promise.all(wherePromises)\n\n  populateFieldPermissions({\n    blockReferencesPermissions,\n    collection: entityType === 'collection' ? (entity as SanitizedCollectionConfig) : null,\n    data,\n    fields: entity.fields,\n    global: entityType === 'global' ? (entity as SanitizedGlobalConfig) : null,\n    operations,\n    parentPermissionsObject: entityPermissions,\n    permissionsObject: fieldsPermissions,\n    promises,\n    req,\n  })\n\n  /**\n   * Await all promises in parallel.\n   * A promise can add more promises to the promises array (group of fields calls populateFieldPermissions again in their own promise), which will not be\n   * awaited in the first run.\n   * This is why we need to loop again to process the new promises, until there are no more promises left.\n   */\n  let iterations = 0\n  while (promises.length > 0) {\n    const currentPromises = promises.splice(0, promises.length)\n\n    await Promise.all(currentPromises)\n\n    iterations++\n    if (iterations >= 100) {\n      throw new Error('Infinite getEntityPermissions promise loop detected.')\n    }\n  }\n\n  return entityPermissions\n}\n\nconst processWhereQuery = ({\n  id,\n  slug,\n  accessResult,\n  entityPermissions,\n  entityType,\n  fetchData,\n  locale,\n  operation,\n  req,\n  wherePromises,\n  whereQueryCache,\n}: {\n  accessResult: Where\n  entityPermissions: CollectionPermission | GlobalPermission\n  entityType: 'collection' | 'global'\n  fetchData: boolean\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation: Extract<keyof (CollectionPermission | GlobalPermission), AllOperations>\n  req: PayloadRequest\n  slug: string\n  wherePromises: Promise<void>[]\n  whereQueryCache: WhereQueryCache\n}): void => {\n  if (fetchData) {\n    // Check cache for identical where query using deep comparison\n    let cached = whereQueryCache.find((entry) => isDeepStrictEqual(entry.where, accessResult))\n\n    if (!cached) {\n      // Cache miss - start DB query (don't await)\n      cached = {\n        result: entityDocExists({\n          id,\n          slug,\n          entityType,\n          locale,\n          operation,\n          req,\n          where: accessResult,\n        }),\n        where: accessResult,\n      }\n      whereQueryCache.push(cached)\n    }\n\n    // Defer resolution to Promise.all (cache hits reuse same promise)\n    wherePromises.push(\n      cached.result.then((hasPermission) => {\n        entityPermissions[operation] = {\n          permission: hasPermission,\n          where: accessResult,\n        } as Permission\n      }),\n    )\n  } else {\n    // TODO: 4.0: Investigate defaulting to `false` here, if where query is returned but ignored as we don't\n    // have the document data available. This seems more secure.\n    // Alternatively, we could set permission to a third state, like 'unknown'.\n    // Even after calling sanitizePermissions, the permissions will still be true if the where query is returned but ignored as we don't have the document data available.\n    entityPermissions[operation] = { permission: true, where: accessResult } as Permission\n  }\n}\n"],"names":["isDeepStrictEqual","entityDocExists","populateFieldPermissions","topLevelCollectionPermissions","topLevelGlobalPermissions","getEntityPermissions","args","id","blockReferencesPermissions","data","_data","entity","entityType","fetchData","operations","req","locale","_locale","user","undefined","Error","hasData","Object","keys","length","payload","findGlobal","slug","depth","fallbackLocale","overrideAccess","findByID","collection","trash","isLoggedIn","fieldsPermissions","entityPermissions","fields","promises","accessResults","_operation","operation","accessFunction","access","includes","push","result","Promise","resolve","permission","resolvedAccessResults","all","map","item","whereQueryCache","wherePromises","accessResult","processWhereQuery","global","parentPermissionsObject","permissionsObject","iterations","currentPromises","splice","cached","find","entry","where","then","hasPermission"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,OAAM;AAcxC,SAASC,eAAe,QAAQ,uBAAsB;AACtD,SAASC,wBAAwB,QAAQ,gCAA+B;AAuCxE,MAAMC,gCAAgC;IACpC;IACA;IACA;IACA;IACA;IACA;CACD;AACD,MAAMC,4BAA4B;IAAC;IAAQ;IAAgB;CAAS;AAEpE;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,eAAeC,qBACpBC,IAAuB;IAEvB,MAAM,EACJC,EAAE,EACFC,0BAA0B,EAC1BC,MAAMC,KAAK,EACXC,MAAM,EACNC,UAAU,EACVC,SAAS,EACTC,UAAU,EACVC,GAAG,EACJ,GAAGT;IACJ,MAAM,EAAEU,QAAQC,OAAO,EAAEC,IAAI,EAAE,GAAGH;IAElC,MAAMC,SAASC,UAAUA,UAAUE;IAEnC,IAAIN,aAAaD,eAAe,gBAAgB,CAACL,IAAI;QACnD,MAAM,IAAIa,MAAM;IAClB;IAEA,MAAMC,UAAUX,SAASY,OAAOC,IAAI,CAACb,OAAOc,MAAM,GAAG;IACrD,MAAMf,OAA+BY,UACjCX,QACAG,YACE,MAAM,AAAC,CAAA;QACL,IAAID,eAAe,UAAU;YAC3B,OAAOG,IAAIU,OAAO,CAACC,UAAU,CAAC;gBAC5BC,MAAMhB,OAAOgB,IAAI;gBACjBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;YACF;QACF;QAEA,IAAIH,eAAe,cAAc;YAC/B,OAAOG,IAAIU,OAAO,CAACM,QAAQ,CAAC;gBAC1BxB,IAAIA;gBACJyB,YAAYrB,OAAOgB,IAAI;gBACvBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;gBACAkB,OAAO;YACT;QACF;IACF,CAAA,MACAd;IAEN,MAAMe,aAAa,CAAC,CAAChB;IAErB,MAAMiB,oBAAuC,CAAC;IAE9C,MAAMC,oBAA6C;QACjDC,QAAQF;IACV;IAEA,MAAMG,WAA4B,EAAE;IAEpC,6DAA6D;IAC7D,MAAMC,gBAGA,EAAE;IAER,KAAK,MAAMC,cAAc1B,WAAY;QACnC,MAAM2B,YAAYD;QAClB,MAAME,iBAAiB/B,OAAOgC,MAAM,CAACF,UAAU;QAE/C,IACE,AAAC7B,eAAe,gBAAgBT,8BAA8ByC,QAAQ,CAACH,cACtE7B,eAAe,YAAYR,0BAA0BwC,QAAQ,CAACH,YAC/D;YACA,IAAI,OAAOC,mBAAmB,YAAY;gBACxCH,cAAcM,IAAI,CAAC;oBACjBJ;oBACAK,QAAQC,QAAQC,OAAO,CAACN,eAAe;wBAAEnC;wBAAIoB,MAAMhB,OAAOgB,IAAI;wBAAElB;wBAAMM;oBAAI;gBAG5E;YACF,OAAO;gBACLqB,iBAAiB,CAACK,UAAU,GAAG;oBAC7BQ,YAAYf;gBACd;YACF;QACF;IACF;IAEA,yCAAyC;IACzC,MAAMgB,wBAAwB,MAAMH,QAAQI,GAAG,CAC7CZ,cAAca,GAAG,CAAC,OAAOC,OAAU,CAAA;YACjCZ,WAAWY,KAAKZ,SAAS;YACzBK,QAAQ,MAAMO,KAAKP,MAAM;QAC3B,CAAA;IAGF,oEAAoE;IACpE,MAAMQ,kBAAmC,EAAE;IAC3C,MAAMC,gBAAiC,EAAE;IAEzC,KAAK,MAAM,EAAEd,SAAS,EAAEK,QAAQU,YAAY,EAAE,IAAIN,sBAAuB;QACvE,IAAI,OAAOM,iBAAiB,UAAU;YACpCC,kBAAkB;gBAChBlD;gBACAoB,MAAMhB,OAAOgB,IAAI;gBACjB6B;gBACApB;gBACAxB;gBACAC;gBACAG;gBACAyB;gBACA1B;gBACAwC;gBACAD;YACF;QACF,OAAO,IAAIlB,iBAAiB,CAACK,UAAU,EAAEQ,eAAe,OAAO;YAC7Db,iBAAiB,CAACK,UAAU,GAAG;gBAAEQ,YAAY,CAAC,CAACO;YAAa;QAC9D;IACF;IAEA,6CAA6C;IAC7C,MAAMT,QAAQI,GAAG,CAACI;IAElBrD,yBAAyB;QACvBM;QACAwB,YAAYpB,eAAe,eAAgBD,SAAuC;QAClFF;QACA4B,QAAQ1B,OAAO0B,MAAM;QACrBqB,QAAQ9C,eAAe,WAAYD,SAAmC;QACtEG;QACA6C,yBAAyBvB;QACzBwB,mBAAmBzB;QACnBG;QACAvB;IACF;IAEA;;;;;GAKC,GACD,IAAI8C,aAAa;IACjB,MAAOvB,SAASd,MAAM,GAAG,EAAG;QAC1B,MAAMsC,kBAAkBxB,SAASyB,MAAM,CAAC,GAAGzB,SAASd,MAAM;QAE1D,MAAMuB,QAAQI,GAAG,CAACW;QAElBD;QACA,IAAIA,cAAc,KAAK;YACrB,MAAM,IAAIzC,MAAM;QAClB;IACF;IAEA,OAAOgB;AACT;AAEA,MAAMqB,oBAAoB,CAAC,EACzBlD,EAAE,EACFoB,IAAI,EACJ6B,YAAY,EACZpB,iBAAiB,EACjBxB,UAAU,EACVC,SAAS,EACTG,MAAM,EACNyB,SAAS,EACT1B,GAAG,EACHwC,aAAa,EACbD,eAAe,EAahB;IACC,IAAIzC,WAAW;QACb,8DAA8D;QAC9D,IAAImD,SAASV,gBAAgBW,IAAI,CAAC,CAACC,QAAUlE,kBAAkBkE,MAAMC,KAAK,EAAEX;QAE5E,IAAI,CAACQ,QAAQ;YACX,4CAA4C;YAC5CA,SAAS;gBACPlB,QAAQ7C,gBAAgB;oBACtBM;oBACAoB;oBACAf;oBACAI;oBACAyB;oBACA1B;oBACAoD,OAAOX;gBACT;gBACAW,OAAOX;YACT;YACAF,gBAAgBT,IAAI,CAACmB;QACvB;QAEA,kEAAkE;QAClET,cAAcV,IAAI,CAChBmB,OAAOlB,MAAM,CAACsB,IAAI,CAAC,CAACC;YAClBjC,iBAAiB,CAACK,UAAU,GAAG;gBAC7BQ,YAAYoB;gBACZF,OAAOX;YACT;QACF;IAEJ,OAAO;QACL,wGAAwG;QACxG,4DAA4D;QAC5D,2EAA2E;QAC3E,sKAAsK;QACtKpB,iBAAiB,CAACK,UAAU,GAAG;YAAEQ,YAAY;YAAMkB,OAAOX;QAAa;IACzE;AACF"}

package/dist/utilities/getEntityPermissions/populateFieldPermissions.d.ts

@@ -1,4 +1,6 @@
 import type { CollectionPermission, FieldPermissions, FieldsPermissions, GlobalPermission } from '../../auth/types.js';
+import type { SanitizedCollectionConfig } from '../../collections/config/types.js';
+import type { SanitizedGlobalConfig } from '../../globals/config/types.js';
 import type { DefaultDocumentIDType } from '../../index.js';
 import type { AllOperations, JsonObject, PayloadRequest } from '../../types/index.js';
 import type { BlockReferencesPermissions } from './getEntityPermissions.js';
@@ -7,10 +9,14 @@ import { type Field } from '../../fields/config/types.js';
  * Build up permissions object and run access functions for each field of an entity
  * This function is synchronous and collects all async work into the promises array
  */
-export declare const populateFieldPermissions: ({ id, blockReferencesPermissions, data, fields, operations, parentPermissionsObject, permissionsObject, promises, req, }: {
+export declare const populateFieldPermissions: ({ id, blockReferencesPermissions, collection, data, fields, global, operations, parentPermissionsObject, permissionsObject, promises, req, }: {
     blockReferencesPermissions: BlockReferencesPermissions;
+    /** The collection which the fields belong to. If the fields belong to a global, this will be null. */
+    collection: null | SanitizedCollectionConfig;
     data: JsonObject | undefined;
     fields: Field[];
+    /** The global which the fields belong to. If the fields belong to a collection, this will be null. */
+    global: null | SanitizedGlobalConfig;
     id?: DefaultDocumentIDType;
     /**
      * Operations to check access for

package/dist/utilities/getEntityPermissions/populateFieldPermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"populateFieldPermissions.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/populateFieldPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAE3E,OAAO,EAAE,KAAK,KAAK,EAAc,MAAM,8BAA8B,CAAA;AAkCrE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,GAAI,0HAUtC;IACD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,IAAI,EAAE,UAAU,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,KAAK,EAAE,CAAA;IACf,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B;;OAEG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,uBAAuB,EAAE,oBAAoB,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;IACnF,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,IAmPH,CAAA"}
+{"version":3,"file":"populateFieldPermissions.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/populateFieldPermissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAA;AAE3E,OAAO,EAAE,KAAK,KAAK,EAAc,MAAM,8BAA8B,CAAA;AAkCrE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,iJAYlC;IACD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,sGAAsG;IACtG,UAAU,EAAE,IAAI,GAAG,yBAAyB,CAAA;IAC5C,IAAI,EAAE,UAAU,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,KAAK,EAAE,CAAA;IACf,sGAAsG;IACtG,MAAM,EAAE,IAAI,GAAG,qBAAqB,CAAA;IACpC,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B;;OAEG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,uBAAuB,EAAE,oBAAoB,GAAG,gBAAgB,GAAG,gBAAgB,CAAA;IACnF,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,IA2QH,CAAA"}