payload 4.0.0-internal.cd69eef → 4.0.0-internal.ce66a41

package/dist/utilities/entityInputSchema/validateEntityData.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utilities/entityInputSchema/validateEntityData.ts"],"sourcesContent":["import type { core } from 'zod'\n\nimport { fromJSONSchema } from 'zod'\n\nimport type { CollectionSlug, GlobalSlug, PayloadRequest } from '../../index.js'\nimport type { EntityInputSchema } from './types.js'\n\nimport { ValidationError } from '../../errors/ValidationError.js'\nimport { getCollectionInputSchema, getGlobalInputSchema } from './getEntityInputSchema.js'\n\nexport const validateCollectionData = ({\n  slug,\n  data,\n  partial,\n  req,\n}: {\n  data: Record<string, unknown>\n  partial?: boolean\n  req: PayloadRequest\n  slug: CollectionSlug\n}): void => {\n  const schema = getCollectionInputSchema({ collectionSlug: slug, req })\n\n  validateEntityData({ slug, data, entity: 'collection', partial, req, schema })\n}\n\nexport const validateGlobalData = ({\n  slug,\n  data,\n  req,\n}: {\n  data: Record<string, unknown>\n  req: PayloadRequest\n  slug: GlobalSlug\n}): void => {\n  const schema = getGlobalInputSchema({ globalSlug: slug, req })\n\n  validateEntityData({ slug, data, entity: 'global', partial: true, req, schema })\n}\n\nconst validateEntityData = ({\n  slug,\n  data,\n  entity,\n  partial,\n  req,\n  schema,\n}: {\n  data: Record<string, unknown>\n  entity: 'collection' | 'global'\n  partial?: boolean\n  req: PayloadRequest\n  schema: EntityInputSchema | null\n  slug: string\n}): void => {\n  if (!schema) {\n    return\n  }\n\n  const validationSchema = partial ? withoutRequired(schema) : schema\n  const result = fromJSONSchema(validationSchema as Parameters<typeof fromJSONSchema>[0]).safeParse(\n    data,\n  )\n\n  if (result.success) {\n    return\n  }\n\n  throw new ValidationError({\n    [entity]: slug,\n    errors: getUsefulIssues(result.error.issues).map(({ message, path }) => ({\n      message,\n      path: formatDataPath(path),\n    })),\n    req,\n  })\n}\n\n/** Updates and drafts accept partial data, including partial nested objects and array rows. */\nconst withoutRequired = (schema: EntityInputSchema): EntityInputSchema => {\n  const {\n    $defs,\n    additionalProperties,\n    anyOf,\n    items,\n    oneOf,\n    properties,\n    required: _required,\n    ...partialSchema\n  } = schema\n\n  return {\n    ...partialSchema,\n    ...($defs ? { $defs: mapSchemaRecord($defs) } : {}),\n    ...(typeof additionalProperties === 'object'\n      ? { additionalProperties: withoutRequired(additionalProperties) }\n      : additionalProperties !== undefined\n        ? { additionalProperties }\n        : {}),\n    ...(anyOf ? { anyOf: anyOf.map(makeSchemaPartial) } : {}),\n    ...(items\n      ? {\n          items: Array.isArray(items)\n            ? items.map((item) => withoutRequired(item))\n            : withoutRequired(items),\n        }\n      : {}),\n    ...(oneOf ? { oneOf: oneOf.map(makeSchemaPartial) } : {}),\n    ...(properties ? { properties: mapSchemaRecord(properties) } : {}),\n  }\n}\n\nconst makeSchemaPartial = (schema: boolean | EntityInputSchema): boolean | EntityInputSchema =>\n  typeof schema === 'boolean' ? schema : withoutRequired(schema)\n\nconst mapSchemaRecord = <T extends boolean | EntityInputSchema>(\n  schemas: Record<string, T>,\n): Record<string, T> =>\n  Object.fromEntries(\n    Object.entries(schemas).map(([name, schema]) => [name, makeSchemaPartial(schema)]),\n  ) as Record<string, T>\n\n/**\n * Zod keeps every failed recursive-union branch. Select the closest matching branch instead of\n * returning a very large error tree to CLI and MCP clients.\n */\nconst getUsefulIssues = (\n  issues: core.$ZodIssue[],\n  parentPath: PropertyKey[] = [],\n): core.$ZodIssue[] => {\n  const selectedIssues = issues.flatMap((issue) => {\n    if (issue.code !== 'invalid_union') {\n      return [{ ...issue, path: [...parentPath, ...issue.path] }]\n    }\n\n    const unionPath = [...parentPath, ...issue.path]\n    const closestBranch = issue.errors\n      .filter((branch) => branch.length > 0)\n      .sort(compareIssueBranches)[0]\n\n    return closestBranch\n      ? getUsefulIssues(closestBranch, unionPath)\n      : [{ ...issue, path: unionPath }]\n  })\n  const uniqueIssues = new Map<string, core.$ZodIssue>()\n\n  for (const issue of selectedIssues) {\n    const key = `${issue.path.map(String).join('.')}:${issue.message}`\n\n    if (!uniqueIssues.has(key)) {\n      uniqueIssues.set(key, issue)\n    }\n  }\n\n  return [...uniqueIssues.values()].slice(0, 10)\n}\n\nconst compareIssueBranches = (left: core.$ZodIssue[], right: core.$ZodIssue[]): number => {\n  const discriminatorDifference = countDiscriminatorIssues(left) - countDiscriminatorIssues(right)\n\n  if (discriminatorDifference !== 0) {\n    return discriminatorDifference\n  }\n\n  const pathDepthDifference = getDeepestPath(right) - getDeepestPath(left)\n\n  if (pathDepthDifference !== 0) {\n    return pathDepthDifference\n  }\n\n  return left.length - right.length\n}\n\nconst countDiscriminatorIssues = (issues: core.$ZodIssue[]): number =>\n  issues.filter((issue) => {\n    const field = issue.path.at(-1)\n\n    return field === 'blockType' || field === 'relationTo' || field === 'type'\n  }).length\n\nconst getDeepestPath = (issues: core.$ZodIssue[]): number =>\n  Math.max(0, ...issues.map((issue) => issue.path.length))\n\nconst formatDataPath = (path: PropertyKey[]): string =>\n  path.reduce<string>(\n    (result, segment) =>\n      typeof segment === 'number' ? `${result}[${segment}]` : `${result}.${String(segment)}`,\n    'data',\n  )\n"],"names":["fromJSONSchema","ValidationError","getCollectionInputSchema","getGlobalInputSchema","validateCollectionData","slug","data","partial","req","schema","collectionSlug","validateEntityData","entity","validateGlobalData","globalSlug","validationSchema","withoutRequired","result","safeParse","success","errors","getUsefulIssues","error","issues","map","message","path","formatDataPath","$defs","additionalProperties","anyOf","items","oneOf","properties","required","_required","partialSchema","mapSchemaRecord","undefined","makeSchemaPartial","Array","isArray","item","schemas","Object","fromEntries","entries","name","parentPath","selectedIssues","flatMap","issue","code","unionPath","closestBranch","filter","branch","length","sort","compareIssueBranches","uniqueIssues","Map","key","String","join","has","set","values","slice","left","right","discriminatorDifference","countDiscriminatorIssues","pathDepthDifference","getDeepestPath","field","at","Math","max","reduce","segment"],"mappings":"AAEA,SAASA,cAAc,QAAQ,MAAK;AAKpC,SAASC,eAAe,QAAQ,kCAAiC;AACjE,SAASC,wBAAwB,EAAEC,oBAAoB,QAAQ,4BAA2B;AAE1F,OAAO,MAAMC,yBAAyB,CAAC,EACrCC,IAAI,EACJC,IAAI,EACJC,OAAO,EACPC,GAAG,EAMJ;IACC,MAAMC,SAASP,yBAAyB;QAAEQ,gBAAgBL;QAAMG;IAAI;IAEpEG,mBAAmB;QAAEN;QAAMC;QAAMM,QAAQ;QAAcL;QAASC;QAAKC;IAAO;AAC9E,EAAC;AAED,OAAO,MAAMI,qBAAqB,CAAC,EACjCR,IAAI,EACJC,IAAI,EACJE,GAAG,EAKJ;IACC,MAAMC,SAASN,qBAAqB;QAAEW,YAAYT;QAAMG;IAAI;IAE5DG,mBAAmB;QAAEN;QAAMC;QAAMM,QAAQ;QAAUL,SAAS;QAAMC;QAAKC;IAAO;AAChF,EAAC;AAED,MAAME,qBAAqB,CAAC,EAC1BN,IAAI,EACJC,IAAI,EACJM,MAAM,EACNL,OAAO,EACPC,GAAG,EACHC,MAAM,EAQP;IACC,IAAI,CAACA,QAAQ;QACX;IACF;IAEA,MAAMM,mBAAmBR,UAAUS,gBAAgBP,UAAUA;IAC7D,MAAMQ,SAASjB,eAAee,kBAA0DG,SAAS,CAC/FZ;IAGF,IAAIW,OAAOE,OAAO,EAAE;QAClB;IACF;IAEA,MAAM,IAAIlB,gBAAgB;QACxB,CAACW,OAAO,EAAEP;QACVe,QAAQC,gBAAgBJ,OAAOK,KAAK,CAACC,MAAM,EAAEC,GAAG,CAAC,CAAC,EAAEC,OAAO,EAAEC,IAAI,EAAE,GAAM,CAAA;gBACvED;gBACAC,MAAMC,eAAeD;YACvB,CAAA;QACAlB;IACF;AACF;AAEA,6FAA6F,GAC7F,MAAMQ,kBAAkB,CAACP;IACvB,MAAM,EACJmB,KAAK,EACLC,oBAAoB,EACpBC,KAAK,EACLC,KAAK,EACLC,KAAK,EACLC,UAAU,EACVC,UAAUC,SAAS,EACnB,GAAGC,eACJ,GAAG3B;IAEJ,OAAO;QACL,GAAG2B,aAAa;QAChB,GAAIR,QAAQ;YAAEA,OAAOS,gBAAgBT;QAAO,IAAI,CAAC,CAAC;QAClD,GAAI,OAAOC,yBAAyB,WAChC;YAAEA,sBAAsBb,gBAAgBa;QAAsB,IAC9DA,yBAAyBS,YACvB;YAAET;QAAqB,IACvB,CAAC,CAAC;QACR,GAAIC,QAAQ;YAAEA,OAAOA,MAAMN,GAAG,CAACe;QAAmB,IAAI,CAAC,CAAC;QACxD,GAAIR,QACA;YACEA,OAAOS,MAAMC,OAAO,CAACV,SACjBA,MAAMP,GAAG,CAAC,CAACkB,OAAS1B,gBAAgB0B,SACpC1B,gBAAgBe;QACtB,IACA,CAAC,CAAC;QACN,GAAIC,QAAQ;YAAEA,OAAOA,MAAMR,GAAG,CAACe;QAAmB,IAAI,CAAC,CAAC;QACxD,GAAIN,aAAa;YAAEA,YAAYI,gBAAgBJ;QAAY,IAAI,CAAC,CAAC;IACnE;AACF;AAEA,MAAMM,oBAAoB,CAAC9B,SACzB,OAAOA,WAAW,YAAYA,SAASO,gBAAgBP;AAEzD,MAAM4B,kBAAkB,CACtBM,UAEAC,OAAOC,WAAW,CAChBD,OAAOE,OAAO,CAACH,SAASnB,GAAG,CAAC,CAAC,CAACuB,MAAMtC,OAAO,GAAK;YAACsC;YAAMR,kBAAkB9B;SAAQ;AAGrF;;;CAGC,GACD,MAAMY,kBAAkB,CACtBE,QACAyB,aAA4B,EAAE;IAE9B,MAAMC,iBAAiB1B,OAAO2B,OAAO,CAAC,CAACC;QACrC,IAAIA,MAAMC,IAAI,KAAK,iBAAiB;YAClC,OAAO;gBAAC;oBAAE,GAAGD,KAAK;oBAAEzB,MAAM;2BAAIsB;2BAAeG,MAAMzB,IAAI;qBAAC;gBAAC;aAAE;QAC7D;QAEA,MAAM2B,YAAY;eAAIL;eAAeG,MAAMzB,IAAI;SAAC;QAChD,MAAM4B,gBAAgBH,MAAM/B,MAAM,CAC/BmC,MAAM,CAAC,CAACC,SAAWA,OAAOC,MAAM,GAAG,GACnCC,IAAI,CAACC,qBAAqB,CAAC,EAAE;QAEhC,OAAOL,gBACHjC,gBAAgBiC,eAAeD,aAC/B;YAAC;gBAAE,GAAGF,KAAK;gBAAEzB,MAAM2B;YAAU;SAAE;IACrC;IACA,MAAMO,eAAe,IAAIC;IAEzB,KAAK,MAAMV,SAASF,eAAgB;QAClC,MAAMa,MAAM,GAAGX,MAAMzB,IAAI,CAACF,GAAG,CAACuC,QAAQC,IAAI,CAAC,KAAK,CAAC,EAAEb,MAAM1B,OAAO,EAAE;QAElE,IAAI,CAACmC,aAAaK,GAAG,CAACH,MAAM;YAC1BF,aAAaM,GAAG,CAACJ,KAAKX;QACxB;IACF;IAEA,OAAO;WAAIS,aAAaO,MAAM;KAAG,CAACC,KAAK,CAAC,GAAG;AAC7C;AAEA,MAAMT,uBAAuB,CAACU,MAAwBC;IACpD,MAAMC,0BAA0BC,yBAAyBH,QAAQG,yBAAyBF;IAE1F,IAAIC,4BAA4B,GAAG;QACjC,OAAOA;IACT;IAEA,MAAME,sBAAsBC,eAAeJ,SAASI,eAAeL;IAEnE,IAAII,wBAAwB,GAAG;QAC7B,OAAOA;IACT;IAEA,OAAOJ,KAAKZ,MAAM,GAAGa,MAAMb,MAAM;AACnC;AAEA,MAAMe,2BAA2B,CAACjD,SAChCA,OAAOgC,MAAM,CAAC,CAACJ;QACb,MAAMwB,QAAQxB,MAAMzB,IAAI,CAACkD,EAAE,CAAC,CAAC;QAE7B,OAAOD,UAAU,eAAeA,UAAU,gBAAgBA,UAAU;IACtE,GAAGlB,MAAM;AAEX,MAAMiB,iBAAiB,CAACnD,SACtBsD,KAAKC,GAAG,CAAC,MAAMvD,OAAOC,GAAG,CAAC,CAAC2B,QAAUA,MAAMzB,IAAI,CAAC+B,MAAM;AAExD,MAAM9B,iBAAiB,CAACD,OACtBA,KAAKqD,MAAM,CACT,CAAC9D,QAAQ+D,UACP,OAAOA,YAAY,WAAW,GAAG/D,OAAO,CAAC,EAAE+D,QAAQ,CAAC,CAAC,GAAG,GAAG/D,OAAO,CAAC,EAAE8C,OAAOiB,UAAU,EACxF"}

package/dist/utilities/fieldPath.d.ts

@@ -0,0 +1,13 @@
+export declare const hasUnsupportedFieldPathSegment: ({ segments, }: {
+    segments: readonly string[];
+}) => boolean;
+export declare const setOwnProperty: <TTarget extends object>({ key, target, value, }: {
+    key: PropertyKey;
+    target: TTarget;
+    value: unknown;
+}) => TTarget;
+export declare const expandOwnDottedKey: ({ key, target, }: {
+    key: string;
+    target: Record<string, unknown>;
+}) => boolean;
+//# sourceMappingURL=fieldPath.d.ts.map

package/dist/utilities/fieldPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldPath.d.ts","sourceRoot":"","sources":["../../src/utilities/fieldPath.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,8BAA8B,kBAExC;IACD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5B,KAAG,OAAgF,CAAA;AAEpF,eAAO,MAAM,cAAc,GAAI,OAAO,SAAS,MAAM,2BAIlD;IACD,GAAG,EAAE,WAAW,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,OAAO,CAAA;CACf,KAAG,OAiBH,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAG5B;IACD,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC,KAAG,OA0BH,CAAA"}

package/dist/utilities/fieldPath.js

@@ -0,0 +1,51 @@
+const unsupportedFieldPathSegments = new Set([
+    '__proto__'
+]);
+export const hasUnsupportedFieldPathSegment = ({ segments })=>segments.some((segment)=>unsupportedFieldPathSegments.has(segment));
+export const setOwnProperty = ({ key, target, value })=>{
+    if (Object.hasOwn(target, key) || !(key in target)) {
+        if (!Reflect.set(target, key, value)) {
+            throw new TypeError(`Cannot assign to property ${String(key)}`);
+        }
+        return target;
+    }
+    Object.defineProperty(target, key, {
+        configurable: true,
+        enumerable: true,
+        value,
+        writable: true
+    });
+    return target;
+};
+export const expandOwnDottedKey = ({ key, target })=>{
+    if (!Object.hasOwn(target, key) || !key.includes('.')) {
+        return false;
+    }
+    const segments = key.split('.');
+    if (hasUnsupportedFieldPathSegment({
+        segments
+    })) {
+        delete target[key];
+        return false;
+    }
+    const firstDotIndex = key.indexOf('.');
+    const fieldName = key.substring(0, firstDotIndex);
+    const remainingPath = key.substring(firstDotIndex + 1);
+    if (!Object.hasOwn(target, fieldName) || !target[fieldName]) {
+        setOwnProperty({
+            key: fieldName,
+            target,
+            value: {}
+        });
+    }
+    const nestedTarget = target[fieldName];
+    setOwnProperty({
+        key: remainingPath,
+        target: nestedTarget,
+        value: target[key]
+    });
+    delete target[key];
+    return true;
+};
+
+//# sourceMappingURL=fieldPath.js.map

package/dist/utilities/fieldPath.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/fieldPath.ts"],"sourcesContent":["const unsupportedFieldPathSegments = new Set(['__proto__'])\n\nexport const hasUnsupportedFieldPathSegment = ({\n  segments,\n}: {\n  segments: readonly string[]\n}): boolean => segments.some((segment) => unsupportedFieldPathSegments.has(segment))\n\nexport const setOwnProperty = <TTarget extends object>({\n  key,\n  target,\n  value,\n}: {\n  key: PropertyKey\n  target: TTarget\n  value: unknown\n}): TTarget => {\n  if (Object.hasOwn(target, key) || !(key in target)) {\n    if (!Reflect.set(target, key, value)) {\n      throw new TypeError(`Cannot assign to property ${String(key)}`)\n    }\n\n    return target\n  }\n\n  Object.defineProperty(target, key, {\n    configurable: true,\n    enumerable: true,\n    value,\n    writable: true,\n  })\n\n  return target\n}\n\nexport const expandOwnDottedKey = ({\n  key,\n  target,\n}: {\n  key: string\n  target: Record<string, unknown>\n}): boolean => {\n  if (!Object.hasOwn(target, key) || !key.includes('.')) {\n    return false\n  }\n\n  const segments = key.split('.')\n\n  if (hasUnsupportedFieldPathSegment({ segments })) {\n    delete target[key]\n    return false\n  }\n\n  const firstDotIndex = key.indexOf('.')\n  const fieldName = key.substring(0, firstDotIndex)\n  const remainingPath = key.substring(firstDotIndex + 1)\n\n  if (!Object.hasOwn(target, fieldName) || !target[fieldName]) {\n    setOwnProperty({ key: fieldName, target, value: {} })\n  }\n\n  const nestedTarget = target[fieldName] as Record<string, unknown>\n\n  setOwnProperty({ key: remainingPath, target: nestedTarget, value: target[key] })\n  delete target[key]\n\n  return true\n}\n"],"names":["unsupportedFieldPathSegments","Set","hasUnsupportedFieldPathSegment","segments","some","segment","has","setOwnProperty","key","target","value","Object","hasOwn","Reflect","set","TypeError","String","defineProperty","configurable","enumerable","writable","expandOwnDottedKey","includes","split","firstDotIndex","indexOf","fieldName","substring","remainingPath","nestedTarget"],"mappings":"AAAA,MAAMA,+BAA+B,IAAIC,IAAI;IAAC;CAAY;AAE1D,OAAO,MAAMC,iCAAiC,CAAC,EAC7CC,QAAQ,EAGT,GAAcA,SAASC,IAAI,CAAC,CAACC,UAAYL,6BAA6BM,GAAG,CAACD,UAAS;AAEpF,OAAO,MAAME,iBAAiB,CAAyB,EACrDC,GAAG,EACHC,MAAM,EACNC,KAAK,EAKN;IACC,IAAIC,OAAOC,MAAM,CAACH,QAAQD,QAAQ,CAAEA,CAAAA,OAAOC,MAAK,GAAI;QAClD,IAAI,CAACI,QAAQC,GAAG,CAACL,QAAQD,KAAKE,QAAQ;YACpC,MAAM,IAAIK,UAAU,CAAC,0BAA0B,EAAEC,OAAOR,MAAM;QAChE;QAEA,OAAOC;IACT;IAEAE,OAAOM,cAAc,CAACR,QAAQD,KAAK;QACjCU,cAAc;QACdC,YAAY;QACZT;QACAU,UAAU;IACZ;IAEA,OAAOX;AACT,EAAC;AAED,OAAO,MAAMY,qBAAqB,CAAC,EACjCb,GAAG,EACHC,MAAM,EAIP;IACC,IAAI,CAACE,OAAOC,MAAM,CAACH,QAAQD,QAAQ,CAACA,IAAIc,QAAQ,CAAC,MAAM;QACrD,OAAO;IACT;IAEA,MAAMnB,WAAWK,IAAIe,KAAK,CAAC;IAE3B,IAAIrB,+BAA+B;QAAEC;IAAS,IAAI;QAChD,OAAOM,MAAM,CAACD,IAAI;QAClB,OAAO;IACT;IAEA,MAAMgB,gBAAgBhB,IAAIiB,OAAO,CAAC;IAClC,MAAMC,YAAYlB,IAAImB,SAAS,CAAC,GAAGH;IACnC,MAAMI,gBAAgBpB,IAAImB,SAAS,CAACH,gBAAgB;IAEpD,IAAI,CAACb,OAAOC,MAAM,CAACH,QAAQiB,cAAc,CAACjB,MAAM,CAACiB,UAAU,EAAE;QAC3DnB,eAAe;YAAEC,KAAKkB;YAAWjB;YAAQC,OAAO,CAAC;QAAE;IACrD;IAEA,MAAMmB,eAAepB,MAAM,CAACiB,UAAU;IAEtCnB,eAAe;QAAEC,KAAKoB;QAAenB,QAAQoB;QAAcnB,OAAOD,MAAM,CAACD,IAAI;IAAC;IAC9E,OAAOC,MAAM,CAACD,IAAI;IAElB,OAAO;AACT,EAAC"}

package/dist/utilities/fieldValueExists.d.ts

@@ -0,0 +1,29 @@
+import type { DefaultDocumentIDType, Locale } from '../index.js';
+import type { PayloadRequest } from '../types/index.js';
+type Args = {
+    collection: string;
+    /**
+     * When true, also matches documents whose value only exists in a draft version. A versioned
+     * collection keeps draft data in `_versions`, which the main-collection query — and the unique
+     * index — would miss.
+     */
+    draftsEnabled?: boolean;
+    field: string;
+    /** Exclude this document, so a doc doesn't conflict with itself on update. */
+    id?: DefaultDocumentIDType;
+    locale?: Locale['code'];
+    overrideAccess?: boolean;
+    req: PayloadRequest;
+    value: unknown;
+};
+/**
+ * Whether another document in `collection` already uses `value` for `field`.
+ *
+ * Runs the `find` operation outside the caller's transaction while preserving the rest of the
+ * request. A committed read is what a uniqueness check wants, and isolating the transaction avoids
+ * the "cursor on a session with a transaction in progress" error from a hook. `draft` includes
+ * slugs that only exist in a draft version.
+ */
+export declare const fieldValueExists: ({ id, collection, draftsEnabled, field, locale, overrideAccess, req, value, }: Args) => Promise<boolean>;
+export {};
+//# sourceMappingURL=fieldValueExists.d.ts.map

package/dist/utilities/fieldValueExists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fieldValueExists.d.ts","sourceRoot":"","sources":["../../src/utilities/fieldValueExists.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAIvD,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,8EAA8E;IAC9E,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACvB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,GAAG,EAAE,cAAc,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,kFAS1B,IAAI,KAAG,OAAO,CAAC,OAAO,CAmBxB,CAAA"}

package/dist/utilities/fieldValueExists.js

@@ -0,0 +1,37 @@
+import { isolateObjectProperty } from './isolateObjectProperty.js';
+/**
+ * Whether another document in `collection` already uses `value` for `field`.
+ *
+ * Runs the `find` operation outside the caller's transaction while preserving the rest of the
+ * request. A committed read is what a uniqueness check wants, and isolating the transaction avoids
+ * the "cursor on a session with a transaction in progress" error from a hook. `draft` includes
+ * slugs that only exist in a draft version.
+ */ export const fieldValueExists = async ({ id, collection, draftsEnabled, field, locale, overrideAccess = false, req, value })=>{
+    const queryReq = isolateObjectProperty(req, [
+        'query',
+        'transactionID'
+    ]);
+    queryReq.query = {
+        ...req.query
+    };
+    delete queryReq.transactionID;
+    const { docs } = await req.payload.find({
+        collection,
+        depth: 0,
+        disableErrors: true,
+        draft: Boolean(draftsEnabled),
+        limit: 2,
+        locale: locale,
+        overrideAccess,
+        pagination: false,
+        req: queryReq,
+        where: {
+            [field]: {
+                equals: value
+            }
+        }
+    });
+    return docs.some((doc)=>doc.id !== id);
+};
+
+//# sourceMappingURL=fieldValueExists.js.map

package/dist/utilities/fieldValueExists.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/fieldValueExists.ts"],"sourcesContent":["import type { DefaultDocumentIDType, Locale } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { isolateObjectProperty } from './isolateObjectProperty.js'\n\ntype Args = {\n  collection: string\n  /**\n   * When true, also matches documents whose value only exists in a draft version. A versioned\n   * collection keeps draft data in `_versions`, which the main-collection query — and the unique\n   * index — would miss.\n   */\n  draftsEnabled?: boolean\n  field: string\n  /** Exclude this document, so a doc doesn't conflict with itself on update. */\n  id?: DefaultDocumentIDType\n  locale?: Locale['code']\n  overrideAccess?: boolean\n  req: PayloadRequest\n  value: unknown\n}\n\n/**\n * Whether another document in `collection` already uses `value` for `field`.\n *\n * Runs the `find` operation outside the caller's transaction while preserving the rest of the\n * request. A committed read is what a uniqueness check wants, and isolating the transaction avoids\n * the \"cursor on a session with a transaction in progress\" error from a hook. `draft` includes\n * slugs that only exist in a draft version.\n */\nexport const fieldValueExists = async ({\n  id,\n  collection,\n  draftsEnabled,\n  field,\n  locale,\n  overrideAccess = false,\n  req,\n  value,\n}: Args): Promise<boolean> => {\n  const queryReq = isolateObjectProperty(req, ['query', 'transactionID'])\n  queryReq.query = { ...req.query }\n  delete queryReq.transactionID\n\n  const { docs } = await req.payload.find({\n    collection,\n    depth: 0,\n    disableErrors: true,\n    draft: Boolean(draftsEnabled),\n    limit: 2,\n    locale: locale as Parameters<typeof req.payload.find>[0]['locale'],\n    overrideAccess,\n    pagination: false,\n    req: queryReq,\n    where: { [field]: { equals: value } },\n  })\n\n  return docs.some((doc) => doc.id !== id)\n}\n"],"names":["isolateObjectProperty","fieldValueExists","id","collection","draftsEnabled","field","locale","overrideAccess","req","value","queryReq","query","transactionID","docs","payload","find","depth","disableErrors","draft","Boolean","limit","pagination","where","equals","some","doc"],"mappings":"AAGA,SAASA,qBAAqB,QAAQ,6BAA4B;AAmBlE;;;;;;;CAOC,GACD,OAAO,MAAMC,mBAAmB,OAAO,EACrCC,EAAE,EACFC,UAAU,EACVC,aAAa,EACbC,KAAK,EACLC,MAAM,EACNC,iBAAiB,KAAK,EACtBC,GAAG,EACHC,KAAK,EACA;IACL,MAAMC,WAAWV,sBAAsBQ,KAAK;QAAC;QAAS;KAAgB;IACtEE,SAASC,KAAK,GAAG;QAAE,GAAGH,IAAIG,KAAK;IAAC;IAChC,OAAOD,SAASE,aAAa;IAE7B,MAAM,EAAEC,IAAI,EAAE,GAAG,MAAML,IAAIM,OAAO,CAACC,IAAI,CAAC;QACtCZ;QACAa,OAAO;QACPC,eAAe;QACfC,OAAOC,QAAQf;QACfgB,OAAO;QACPd,QAAQA;QACRC;QACAc,YAAY;QACZb,KAAKE;QACLY,OAAO;YAAE,CAACjB,MAAM,EAAE;gBAAEkB,QAAQd;YAAM;QAAE;IACtC;IAEA,OAAOI,KAAKW,IAAI,CAAC,CAACC,MAAQA,IAAIvB,EAAE,KAAKA;AACvC,EAAC"}

package/dist/utilities/flattenAllFields.js

@@ -7,7 +7,7 @@ export const flattenBlock = ({ block })=>{
         })
     };
 };
-const flattenedFieldsCache = new Map();
+const flattenedFieldsCache = new WeakMap();
 /**
  * Flattens all fields in a collection, preserving the nested field structure.
  * @param cache

package/dist/utilities/flattenAllFields.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/flattenAllFields.ts"],"sourcesContent":["import type {\n  Block,\n  Field,\n  FlattenedBlock,\n  FlattenedBlocksField,\n  FlattenedField,\n  FlattenedJoinField,\n} from '../fields/config/types.js'\n\nimport { fieldAffectsData, tabHasName } from '../fields/config/types.js'\n\nexport const flattenBlock = ({ block }: { block: Block }): FlattenedBlock => {\n  return {\n    ...block,\n    flattenedFields: flattenAllFields({ fields: block.fields }),\n  }\n}\n\nconst flattenedFieldsCache = new Map<Field[], FlattenedField[]>()\n\n/**\n * Flattens all fields in a collection, preserving the nested field structure.\n * @param cache\n * @param fields\n */\nexport const flattenAllFields = ({\n  cache,\n  fields,\n}: {\n  /** Allows you to get FlattenedField[] from Field[] anywhere without performance overhead by caching. */\n  cache?: boolean\n  fields: Field[]\n}): FlattenedField[] => {\n  if (cache) {\n    const maybeFields = flattenedFieldsCache.get(fields)\n    if (maybeFields) {\n      return maybeFields\n    }\n  }\n\n  const result: FlattenedField[] = []\n\n  for (const field of fields) {\n    switch (field.type) {\n      case 'array':\n      case 'group': {\n        if (fieldAffectsData(field)) {\n          result.push({ ...field, flattenedFields: flattenAllFields({ fields: field.fields }) })\n        } else {\n          for (const nestedField of flattenAllFields({ fields: field.fields })) {\n            result.push(nestedField)\n          }\n        }\n        break\n      }\n\n      case 'blocks': {\n        const blocks: (FlattenedBlock | string)[] = []\n        for (const block of field.blocks) {\n          if (typeof block === 'string') {\n            blocks.push(block)\n            continue\n          }\n          blocks.push(flattenBlock({ block }))\n        }\n\n        const resultField: FlattenedBlocksField = {\n          ...field,\n          blocks,\n        }\n\n        result.push(resultField)\n        break\n      }\n\n      case 'collapsible':\n      case 'row': {\n        for (const nestedField of flattenAllFields({ fields: field.fields })) {\n          result.push(nestedField)\n        }\n        break\n      }\n\n      case 'join': {\n        result.push(field as FlattenedJoinField)\n        break\n      }\n\n      case 'tabs': {\n        for (const tab of field.tabs) {\n          if (!tabHasName(tab)) {\n            for (const nestedField of flattenAllFields({ fields: tab.fields })) {\n              result.push(nestedField)\n            }\n          } else {\n            result.push({\n              ...tab,\n              type: 'tab',\n              flattenedFields: flattenAllFields({ fields: tab.fields }),\n            })\n          }\n        }\n        break\n      }\n\n      default: {\n        if (field.type !== 'ui') {\n          result.push(field)\n        }\n      }\n    }\n  }\n\n  flattenedFieldsCache.set(fields, result)\n\n  return result\n}\n"],"names":["fieldAffectsData","tabHasName","flattenBlock","block","flattenedFields","flattenAllFields","fields","flattenedFieldsCache","Map","cache","maybeFields","get","result","field","type","push","nestedField","blocks","resultField","tab","tabs","set"],"mappings":"AASA,SAASA,gBAAgB,EAAEC,UAAU,QAAQ,4BAA2B;AAExE,OAAO,MAAMC,eAAe,CAAC,EAAEC,KAAK,EAAoB;IACtD,OAAO;QACL,GAAGA,KAAK;QACRC,iBAAiBC,iBAAiB;YAAEC,QAAQH,MAAMG,MAAM;QAAC;IAC3D;AACF,EAAC;AAED,MAAMC,uBAAuB,IAAIC;AAEjC;;;;CAIC,GACD,OAAO,MAAMH,mBAAmB,CAAC,EAC/BI,KAAK,EACLH,MAAM,EAKP;IACC,IAAIG,OAAO;QACT,MAAMC,cAAcH,qBAAqBI,GAAG,CAACL;QAC7C,IAAII,aAAa;YACf,OAAOA;QACT;IACF;IAEA,MAAME,SAA2B,EAAE;IAEnC,KAAK,MAAMC,SAASP,OAAQ;QAC1B,OAAQO,MAAMC,IAAI;YAChB,KAAK;YACL,KAAK;gBAAS;oBACZ,IAAId,iBAAiBa,QAAQ;wBAC3BD,OAAOG,IAAI,CAAC;4BAAE,GAAGF,KAAK;4BAAET,iBAAiBC,iBAAiB;gCAAEC,QAAQO,MAAMP,MAAM;4BAAC;wBAAG;oBACtF,OAAO;wBACL,KAAK,MAAMU,eAAeX,iBAAiB;4BAAEC,QAAQO,MAAMP,MAAM;wBAAC,GAAI;4BACpEM,OAAOG,IAAI,CAACC;wBACd;oBACF;oBACA;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMC,SAAsC,EAAE;oBAC9C,KAAK,MAAMd,SAASU,MAAMI,MAAM,CAAE;wBAChC,IAAI,OAAOd,UAAU,UAAU;4BAC7Bc,OAAOF,IAAI,CAACZ;4BACZ;wBACF;wBACAc,OAAOF,IAAI,CAACb,aAAa;4BAAEC;wBAAM;oBACnC;oBAEA,MAAMe,cAAoC;wBACxC,GAAGL,KAAK;wBACRI;oBACF;oBAEAL,OAAOG,IAAI,CAACG;oBACZ;gBACF;YAEA,KAAK;YACL,KAAK;gBAAO;oBACV,KAAK,MAAMF,eAAeX,iBAAiB;wBAAEC,QAAQO,MAAMP,MAAM;oBAAC,GAAI;wBACpEM,OAAOG,IAAI,CAACC;oBACd;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACXJ,OAAOG,IAAI,CAACF;oBACZ;gBACF;YAEA,KAAK;gBAAQ;oBACX,KAAK,MAAMM,OAAON,MAAMO,IAAI,CAAE;wBAC5B,IAAI,CAACnB,WAAWkB,MAAM;4BACpB,KAAK,MAAMH,eAAeX,iBAAiB;gCAAEC,QAAQa,IAAIb,MAAM;4BAAC,GAAI;gCAClEM,OAAOG,IAAI,CAACC;4BACd;wBACF,OAAO;4BACLJ,OAAOG,IAAI,CAAC;gCACV,GAAGI,GAAG;gCACNL,MAAM;gCACNV,iBAAiBC,iBAAiB;oCAAEC,QAAQa,IAAIb,MAAM;gCAAC;4BACzD;wBACF;oBACF;oBACA;gBACF;YAEA;gBAAS;oBACP,IAAIO,MAAMC,IAAI,KAAK,MAAM;wBACvBF,OAAOG,IAAI,CAACF;oBACd;gBACF;QACF;IACF;IAEAN,qBAAqBc,GAAG,CAACf,QAAQM;IAEjC,OAAOA;AACT,EAAC"}
+{"version":3,"sources":["../../src/utilities/flattenAllFields.ts"],"sourcesContent":["import type {\n  Block,\n  Field,\n  FlattenedBlock,\n  FlattenedBlocksField,\n  FlattenedField,\n  FlattenedJoinField,\n} from '../fields/config/types.js'\n\nimport { fieldAffectsData, tabHasName } from '../fields/config/types.js'\n\nexport const flattenBlock = ({ block }: { block: Block }): FlattenedBlock => {\n  return {\n    ...block,\n    flattenedFields: flattenAllFields({ fields: block.fields }),\n  }\n}\n\nconst flattenedFieldsCache = new WeakMap<Field[], FlattenedField[]>()\n\n/**\n * Flattens all fields in a collection, preserving the nested field structure.\n * @param cache\n * @param fields\n */\nexport const flattenAllFields = ({\n  cache,\n  fields,\n}: {\n  /** Allows you to get FlattenedField[] from Field[] anywhere without performance overhead by caching. */\n  cache?: boolean\n  fields: Field[]\n}): FlattenedField[] => {\n  if (cache) {\n    const maybeFields = flattenedFieldsCache.get(fields)\n    if (maybeFields) {\n      return maybeFields\n    }\n  }\n\n  const result: FlattenedField[] = []\n\n  for (const field of fields) {\n    switch (field.type) {\n      case 'array':\n      case 'group': {\n        if (fieldAffectsData(field)) {\n          result.push({ ...field, flattenedFields: flattenAllFields({ fields: field.fields }) })\n        } else {\n          for (const nestedField of flattenAllFields({ fields: field.fields })) {\n            result.push(nestedField)\n          }\n        }\n        break\n      }\n\n      case 'blocks': {\n        const blocks: (FlattenedBlock | string)[] = []\n        for (const block of field.blocks) {\n          if (typeof block === 'string') {\n            blocks.push(block)\n            continue\n          }\n          blocks.push(flattenBlock({ block }))\n        }\n\n        const resultField: FlattenedBlocksField = {\n          ...field,\n          blocks,\n        }\n\n        result.push(resultField)\n        break\n      }\n\n      case 'collapsible':\n      case 'row': {\n        for (const nestedField of flattenAllFields({ fields: field.fields })) {\n          result.push(nestedField)\n        }\n        break\n      }\n\n      case 'join': {\n        result.push(field as FlattenedJoinField)\n        break\n      }\n\n      case 'tabs': {\n        for (const tab of field.tabs) {\n          if (!tabHasName(tab)) {\n            for (const nestedField of flattenAllFields({ fields: tab.fields })) {\n              result.push(nestedField)\n            }\n          } else {\n            result.push({\n              ...tab,\n              type: 'tab',\n              flattenedFields: flattenAllFields({ fields: tab.fields }),\n            })\n          }\n        }\n        break\n      }\n\n      default: {\n        if (field.type !== 'ui') {\n          result.push(field)\n        }\n      }\n    }\n  }\n\n  flattenedFieldsCache.set(fields, result)\n\n  return result\n}\n"],"names":["fieldAffectsData","tabHasName","flattenBlock","block","flattenedFields","flattenAllFields","fields","flattenedFieldsCache","WeakMap","cache","maybeFields","get","result","field","type","push","nestedField","blocks","resultField","tab","tabs","set"],"mappings":"AASA,SAASA,gBAAgB,EAAEC,UAAU,QAAQ,4BAA2B;AAExE,OAAO,MAAMC,eAAe,CAAC,EAAEC,KAAK,EAAoB;IACtD,OAAO;QACL,GAAGA,KAAK;QACRC,iBAAiBC,iBAAiB;YAAEC,QAAQH,MAAMG,MAAM;QAAC;IAC3D;AACF,EAAC;AAED,MAAMC,uBAAuB,IAAIC;AAEjC;;;;CAIC,GACD,OAAO,MAAMH,mBAAmB,CAAC,EAC/BI,KAAK,EACLH,MAAM,EAKP;IACC,IAAIG,OAAO;QACT,MAAMC,cAAcH,qBAAqBI,GAAG,CAACL;QAC7C,IAAII,aAAa;YACf,OAAOA;QACT;IACF;IAEA,MAAME,SAA2B,EAAE;IAEnC,KAAK,MAAMC,SAASP,OAAQ;QAC1B,OAAQO,MAAMC,IAAI;YAChB,KAAK;YACL,KAAK;gBAAS;oBACZ,IAAId,iBAAiBa,QAAQ;wBAC3BD,OAAOG,IAAI,CAAC;4BAAE,GAAGF,KAAK;4BAAET,iBAAiBC,iBAAiB;gCAAEC,QAAQO,MAAMP,MAAM;4BAAC;wBAAG;oBACtF,OAAO;wBACL,KAAK,MAAMU,eAAeX,iBAAiB;4BAAEC,QAAQO,MAAMP,MAAM;wBAAC,GAAI;4BACpEM,OAAOG,IAAI,CAACC;wBACd;oBACF;oBACA;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMC,SAAsC,EAAE;oBAC9C,KAAK,MAAMd,SAASU,MAAMI,MAAM,CAAE;wBAChC,IAAI,OAAOd,UAAU,UAAU;4BAC7Bc,OAAOF,IAAI,CAACZ;4BACZ;wBACF;wBACAc,OAAOF,IAAI,CAACb,aAAa;4BAAEC;wBAAM;oBACnC;oBAEA,MAAMe,cAAoC;wBACxC,GAAGL,KAAK;wBACRI;oBACF;oBAEAL,OAAOG,IAAI,CAACG;oBACZ;gBACF;YAEA,KAAK;YACL,KAAK;gBAAO;oBACV,KAAK,MAAMF,eAAeX,iBAAiB;wBAAEC,QAAQO,MAAMP,MAAM;oBAAC,GAAI;wBACpEM,OAAOG,IAAI,CAACC;oBACd;oBACA;gBACF;YAEA,KAAK;gBAAQ;oBACXJ,OAAOG,IAAI,CAACF;oBACZ;gBACF;YAEA,KAAK;gBAAQ;oBACX,KAAK,MAAMM,OAAON,MAAMO,IAAI,CAAE;wBAC5B,IAAI,CAACnB,WAAWkB,MAAM;4BACpB,KAAK,MAAMH,eAAeX,iBAAiB;gCAAEC,QAAQa,IAAIb,MAAM;4BAAC,GAAI;gCAClEM,OAAOG,IAAI,CAACC;4BACd;wBACF,OAAO;4BACLJ,OAAOG,IAAI,CAAC;gCACV,GAAGI,GAAG;gCACNL,MAAM;gCACNV,iBAAiBC,iBAAiB;oCAAEC,QAAQa,IAAIb,MAAM;gCAAC;4BACzD;wBACF;oBACF;oBACA;gBACF;YAEA;gBAAS;oBACP,IAAIO,MAAMC,IAAI,KAAK,MAAM;wBACvBF,OAAOG,IAAI,CAACF;oBACd;gBACF;QACF;IACF;IAEAN,qBAAqBc,GAAG,CAACf,QAAQM;IAEjC,OAAOA;AACT,EAAC"}

package/dist/utilities/formatAdminURL.d.ts

@@ -40,5 +40,6 @@ type FormatURLArgs = ({
     apiRoute: NonNullable<Config['routes']>['api'];
 } & BaseFormatURLArgs);
 export declare const formatAdminURL: (args: FormatURLArgs) => string;
+export declare const stripTrailingSlash: (path: string) => string;
 export {};
 //# sourceMappingURL=formatAdminURL.d.ts.map

package/dist/utilities/formatAdminURL.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatAdminURL.d.ts","sourceRoot":"","sources":["../../src/utilities/formatAdminURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,iBAAiB,GAAG;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAE7B,KAAK,aAAa,GACd,CAAC;IACC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClD,QAAQ,CAAC,EAAE,KAAK,CAAA;CACjB,GAAG,iBAAiB,CAAC,GACtB,CAAC;IACC,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;CAC/C,GAAG,iBAAiB,CAAC,CAAA;AAE1B,eAAO,MAAM,cAAc,SAAU,aAAa,KAAG,MAyBpD,CAAA"}
+{"version":3,"file":"formatAdminURL.d.ts","sourceRoot":"","sources":["../../src/utilities/formatAdminURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,iBAAiB,GAAG;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,IAAI,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AAE7B,KAAK,aAAa,GACd,CAAC;IACC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClD,QAAQ,CAAC,EAAE,KAAK,CAAA;CACjB,GAAG,iBAAiB,CAAC,GACtB,CAAC;IACC,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;CAC/C,GAAG,iBAAiB,CAAC,CAAA;AAE1B,eAAO,MAAM,cAAc,SAAU,aAAa,KAAG,MAyBpD,CAAA;AAED,eAAO,MAAM,kBAAkB,SAAU,MAAM,KAAG,MAMjD,CAAA"}

package/dist/utilities/formatAdminURL.js

@@ -7,16 +7,34 @@ export const formatAdminURL = (args)=>{
         path && path
     ].filter(Boolean);
     const pathname = segments.join('') || '/';
-    const pathnameWithBase = (basePath + pathname).replace(/\/$/, '') || '/';
+    const pathnameWithBase = stripTrailingSlash(basePath + pathname) || '/';
     const includeBasePath = includeBasePathArg ?? (adminRoute ? false : true);
     if (relative || !serverURL) {
         if (includeBasePath && basePath) {
-            return pathnameWithBase;
+            return applyTrailingSlash(pathnameWithBase);
         }
-        return pathname;
+        return applyTrailingSlash(pathname);
     }
     const serverURLObj = new URL(serverURL);
-    return new URL(pathnameWithBase, serverURLObj.origin).toString();
+    return applyTrailingSlash(new URL(pathnameWithBase, serverURLObj.origin).toString());
+};
+export const stripTrailingSlash = (path)=>{
+    if (path.length > 1 && path.endsWith('/')) {
+        return path.slice(0, -1);
+    }
+    return path;
+};
+const applyTrailingSlash = (url)=>{
+    if (process.env.NEXT_TRAILING_SLASH !== 'true') {
+        return url;
+    }
+    const queryIndex = url.search(/[?#]/);
+    const pathPart = queryIndex === -1 ? url : url.slice(0, queryIndex);
+    const queryPart = queryIndex === -1 ? '' : url.slice(queryIndex);
+    if (pathPart.endsWith('/')) {
+        return url;
+    }
+    return `${pathPart}/${queryPart}`;
 };
 
 //# sourceMappingURL=formatAdminURL.js.map

package/dist/utilities/formatAdminURL.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/formatAdminURL.ts"],"sourcesContent":["import type { Config } from '../config/types.js'\n\n/**\n * Builds correct URLs for admin panel and API routing.\n * Use this for both admin routes (`adminRoute`) and API routes (`apiRoute`).\n *\n * Its primary responsibilities are:\n * 1. Read from your `routes.admin` or `routes.api` config and appropriately handle `\"/\"` paths\n * 2. Prepend the `basePath` from your Next.js config, if specified\n * 3. Return relative or absolute URLs, as needed\n *\n * @example\n * // Admin route\n * formatAdminURL({ adminRoute, path: `/collections/${slug}` })\n *\n * @example\n * // API route with query params\n * const queryString = qs.stringify({ where, limit, page }, { addQueryPrefix: true })\n * formatAdminURL({ apiRoute: api, path: `/${slug}${queryString}`, serverURL })\n */\ntype BaseFormatURLArgs = {\n  /**\n   * The subpath of your application, if specified.\n   * @see https://nextjs.org/docs/app/api-reference/config/next-config-js/basePath\n   * @example '/docs'\n   */\n  basePath?: string\n  includeBasePath?: boolean\n  path?: '' | `/${string}` | null\n  /**\n   * Return a relative URL, e.g. ignore `serverURL`.\n   * Useful for route-matching, etc.\n   */\n  relative?: boolean\n} & Pick<Config, 'serverURL'>\n\ntype FormatURLArgs =\n  | ({\n      adminRoute: NonNullable<Config['routes']>['admin']\n      apiRoute?: never\n    } & BaseFormatURLArgs)\n  | ({\n      adminRoute?: never\n      apiRoute: NonNullable<Config['routes']>['api']\n    } & BaseFormatURLArgs)\n\nexport const formatAdminURL = (args: FormatURLArgs): string => {\n  const {\n    adminRoute,\n    apiRoute,\n    includeBasePath: includeBasePathArg,\n    path = '',\n    relative = false,\n    serverURL,\n  } = args\n  const basePath = process.env.NEXT_BASE_PATH || args.basePath || ''\n  const routePath = adminRoute || apiRoute\n  const segments = [routePath && routePath !== '/' && routePath, path && path].filter(Boolean)\n  const pathname = segments.join('') || '/'\n  const pathnameWithBase = (basePath + pathname).replace(/\\/$/, '') || '/'\n  const includeBasePath = includeBasePathArg ?? (adminRoute ? false : true)\n\n  if (relative || !serverURL) {\n    if (includeBasePath && basePath) {\n      return pathnameWithBase\n    }\n    return pathname\n  }\n\n  const serverURLObj = new URL(serverURL)\n  return new URL(pathnameWithBase, serverURLObj.origin).toString()\n}\n"],"names":["formatAdminURL","args","adminRoute","apiRoute","includeBasePath","includeBasePathArg","path","relative","serverURL","basePath","process","env","NEXT_BASE_PATH","routePath","segments","filter","Boolean","pathname","join","pathnameWithBase","replace","serverURLObj","URL","origin","toString"],"mappings":"AA8CA,OAAO,MAAMA,iBAAiB,CAACC;IAC7B,MAAM,EACJC,UAAU,EACVC,QAAQ,EACRC,iBAAiBC,kBAAkB,EACnCC,OAAO,EAAE,EACTC,WAAW,KAAK,EAChBC,SAAS,EACV,GAAGP;IACJ,MAAMQ,WAAWC,QAAQC,GAAG,CAACC,cAAc,IAAIX,KAAKQ,QAAQ,IAAI;IAChE,MAAMI,YAAYX,cAAcC;IAChC,MAAMW,WAAW;QAACD,aAAaA,cAAc,OAAOA;QAAWP,QAAQA;KAAK,CAACS,MAAM,CAACC;IACpF,MAAMC,WAAWH,SAASI,IAAI,CAAC,OAAO;IACtC,MAAMC,mBAAmB,AAACV,CAAAA,WAAWQ,QAAO,EAAGG,OAAO,CAAC,OAAO,OAAO;IACrE,MAAMhB,kBAAkBC,sBAAuBH,CAAAA,aAAa,QAAQ,IAAG;IAEvE,IAAIK,YAAY,CAACC,WAAW;QAC1B,IAAIJ,mBAAmBK,UAAU;YAC/B,OAAOU;QACT;QACA,OAAOF;IACT;IAEA,MAAMI,eAAe,IAAIC,IAAId;IAC7B,OAAO,IAAIc,IAAIH,kBAAkBE,aAAaE,MAAM,EAAEC,QAAQ;AAChE,EAAC"}
+{"version":3,"sources":["../../src/utilities/formatAdminURL.ts"],"sourcesContent":["import type { Config } from '../config/types.js'\n\n/**\n * Builds correct URLs for admin panel and API routing.\n * Use this for both admin routes (`adminRoute`) and API routes (`apiRoute`).\n *\n * Its primary responsibilities are:\n * 1. Read from your `routes.admin` or `routes.api` config and appropriately handle `\"/\"` paths\n * 2. Prepend the `basePath` from your Next.js config, if specified\n * 3. Return relative or absolute URLs, as needed\n *\n * @example\n * // Admin route\n * formatAdminURL({ adminRoute, path: `/collections/${slug}` })\n *\n * @example\n * // API route with query params\n * const queryString = qs.stringify({ where, limit, page }, { addQueryPrefix: true })\n * formatAdminURL({ apiRoute: api, path: `/${slug}${queryString}`, serverURL })\n */\ntype BaseFormatURLArgs = {\n  /**\n   * The subpath of your application, if specified.\n   * @see https://nextjs.org/docs/app/api-reference/config/next-config-js/basePath\n   * @example '/docs'\n   */\n  basePath?: string\n  includeBasePath?: boolean\n  path?: '' | `/${string}` | null\n  /**\n   * Return a relative URL, e.g. ignore `serverURL`.\n   * Useful for route-matching, etc.\n   */\n  relative?: boolean\n} & Pick<Config, 'serverURL'>\n\ntype FormatURLArgs =\n  | ({\n      adminRoute: NonNullable<Config['routes']>['admin']\n      apiRoute?: never\n    } & BaseFormatURLArgs)\n  | ({\n      adminRoute?: never\n      apiRoute: NonNullable<Config['routes']>['api']\n    } & BaseFormatURLArgs)\n\nexport const formatAdminURL = (args: FormatURLArgs): string => {\n  const {\n    adminRoute,\n    apiRoute,\n    includeBasePath: includeBasePathArg,\n    path = '',\n    relative = false,\n    serverURL,\n  } = args\n  const basePath = process.env.NEXT_BASE_PATH || args.basePath || ''\n  const routePath = adminRoute || apiRoute\n  const segments = [routePath && routePath !== '/' && routePath, path && path].filter(Boolean)\n  const pathname = segments.join('') || '/'\n  const pathnameWithBase = stripTrailingSlash(basePath + pathname) || '/'\n  const includeBasePath = includeBasePathArg ?? (adminRoute ? false : true)\n\n  if (relative || !serverURL) {\n    if (includeBasePath && basePath) {\n      return applyTrailingSlash(pathnameWithBase)\n    }\n    return applyTrailingSlash(pathname)\n  }\n\n  const serverURLObj = new URL(serverURL)\n  return applyTrailingSlash(new URL(pathnameWithBase, serverURLObj.origin).toString())\n}\n\nexport const stripTrailingSlash = (path: string): string => {\n  if (path.length > 1 && path.endsWith('/')) {\n    return path.slice(0, -1)\n  }\n\n  return path\n}\n\nconst applyTrailingSlash = (url: string): string => {\n  if (process.env.NEXT_TRAILING_SLASH !== 'true') {\n    return url\n  }\n  const queryIndex = url.search(/[?#]/)\n  const pathPart = queryIndex === -1 ? url : url.slice(0, queryIndex)\n  const queryPart = queryIndex === -1 ? '' : url.slice(queryIndex)\n  if (pathPart.endsWith('/')) {\n    return url\n  }\n  return `${pathPart}/${queryPart}`\n}\n"],"names":["formatAdminURL","args","adminRoute","apiRoute","includeBasePath","includeBasePathArg","path","relative","serverURL","basePath","process","env","NEXT_BASE_PATH","routePath","segments","filter","Boolean","pathname","join","pathnameWithBase","stripTrailingSlash","applyTrailingSlash","serverURLObj","URL","origin","toString","length","endsWith","slice","url","NEXT_TRAILING_SLASH","queryIndex","search","pathPart","queryPart"],"mappings":"AA8CA,OAAO,MAAMA,iBAAiB,CAACC;IAC7B,MAAM,EACJC,UAAU,EACVC,QAAQ,EACRC,iBAAiBC,kBAAkB,EACnCC,OAAO,EAAE,EACTC,WAAW,KAAK,EAChBC,SAAS,EACV,GAAGP;IACJ,MAAMQ,WAAWC,QAAQC,GAAG,CAACC,cAAc,IAAIX,KAAKQ,QAAQ,IAAI;IAChE,MAAMI,YAAYX,cAAcC;IAChC,MAAMW,WAAW;QAACD,aAAaA,cAAc,OAAOA;QAAWP,QAAQA;KAAK,CAACS,MAAM,CAACC;IACpF,MAAMC,WAAWH,SAASI,IAAI,CAAC,OAAO;IACtC,MAAMC,mBAAmBC,mBAAmBX,WAAWQ,aAAa;IACpE,MAAMb,kBAAkBC,sBAAuBH,CAAAA,aAAa,QAAQ,IAAG;IAEvE,IAAIK,YAAY,CAACC,WAAW;QAC1B,IAAIJ,mBAAmBK,UAAU;YAC/B,OAAOY,mBAAmBF;QAC5B;QACA,OAAOE,mBAAmBJ;IAC5B;IAEA,MAAMK,eAAe,IAAIC,IAAIf;IAC7B,OAAOa,mBAAmB,IAAIE,IAAIJ,kBAAkBG,aAAaE,MAAM,EAAEC,QAAQ;AACnF,EAAC;AAED,OAAO,MAAML,qBAAqB,CAACd;IACjC,IAAIA,KAAKoB,MAAM,GAAG,KAAKpB,KAAKqB,QAAQ,CAAC,MAAM;QACzC,OAAOrB,KAAKsB,KAAK,CAAC,GAAG,CAAC;IACxB;IAEA,OAAOtB;AACT,EAAC;AAED,MAAMe,qBAAqB,CAACQ;IAC1B,IAAInB,QAAQC,GAAG,CAACmB,mBAAmB,KAAK,QAAQ;QAC9C,OAAOD;IACT;IACA,MAAME,aAAaF,IAAIG,MAAM,CAAC;IAC9B,MAAMC,WAAWF,eAAe,CAAC,IAAIF,MAAMA,IAAID,KAAK,CAAC,GAAGG;IACxD,MAAMG,YAAYH,eAAe,CAAC,IAAI,KAAKF,IAAID,KAAK,CAACG;IACrD,IAAIE,SAASN,QAAQ,CAAC,MAAM;QAC1B,OAAOE;IACT;IACA,OAAO,GAAGI,SAAS,CAAC,EAAEC,WAAW;AACnC"}

package/dist/utilities/getEntityPermissions/entityDocExists.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entityDocExists.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAA;AAEvB;;GAEG;AACH,wBAAsB,eAAe,CAAC,EACpC,EAAE,EACF,IAAI,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,GAAG,EACH,KAAK,GACN,EAAE;IACD,UAAU,EAAE,YAAY,GAAG,QAAQ,CAAA;IACnC,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,KAAK,CAAA;CACb,GAAG,OAAO,CAAC,OAAO,CAAC,CAqCnB"}
+{"version":3,"file":"entityDocExists.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,KAAK,EACX,MAAM,gBAAgB,CAAA;AAIvB;;GAEG;AACH,wBAAsB,eAAe,CAAC,EACpC,EAAE,EACF,IAAI,EACJ,UAAU,EACV,MAAM,EACN,SAAS,EACT,GAAG,EACH,KAAK,GACN,EAAE;IACD,UAAU,EAAE,YAAY,GAAG,QAAQ,CAAA;IACnC,EAAE,CAAC,EAAE,qBAAqB,CAAA;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB,GAAG,EAAE,cAAc,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,KAAK,CAAA;CACb,GAAG,OAAO,CAAC,OAAO,CAAC,CA0EnB"}

package/dist/utilities/getEntityPermissions/entityDocExists.js

@@ -1,8 +1,29 @@
+import { sanitizeWhereQuery } from '../../database/sanitizeWhereQuery.js';
 import { combineQueries } from '../../index.js';
+import { buildVersionCollectionFields } from '../../versions/buildCollectionFields.js';
+import { buildVersionGlobalFields } from '../../versions/buildGlobalFields.js';
 /**
  * Returns whether or not the entity doc exists based on the where query.
  */ export async function entityDocExists({ id, slug, entityType, locale, operation, req, where }) {
     if (entityType === 'global') {
+        if (operation === 'readVersions') {
+            const global = req.payload.globals.config.find(({ slug: globalSlug })=>globalSlug === slug);
+            if (!global) {
+                return false;
+            }
+            sanitizeWhereQuery({
+                fields: buildVersionGlobalFields(req.payload.config, global, true),
+                payload: req.payload,
+                where
+            });
+            const count = await req.payload.db.countGlobalVersions({
+                global: slug,
+                locale,
+                req,
+                where
+            });
+            return count.totalDocs > 0;
+        }
         const global = await req.payload.db.findGlobal({
             slug,
             locale,
@@ -15,15 +36,25 @@ import { combineQueries } from '../../index.js';
     }
     if (entityType === 'collection' && id) {
         if (operation === 'readVersions') {
+            const collection = req.payload.collections[slug]?.config;
+            if (!collection) {
+                return false;
+            }
+            const fullWhere = combineQueries(where, {
+                parent: {
+                    equals: id
+                }
+            });
+            sanitizeWhereQuery({
+                fields: buildVersionCollectionFields(req.payload.config, collection, true),
+                payload: req.payload,
+                where: fullWhere
+            });
             const count = await req.payload.db.countVersions({
                 collection: slug,
                 locale,
                 req,
-                where: combineQueries(where, {
-                    parent: {
-                        equals: id
-                    }
-                })
+                where: fullWhere
             });
             return count.totalDocs > 0;
         }

package/dist/utilities/getEntityPermissions/entityDocExists.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"sourcesContent":["import {\n  type AllOperations,\n  combineQueries,\n  type DefaultDocumentIDType,\n  type PayloadRequest,\n  type Where,\n} from '../../index.js'\n\n/**\n * Returns whether or not the entity doc exists based on the where query.\n */\nexport async function entityDocExists({\n  id,\n  slug,\n  entityType,\n  locale,\n  operation,\n  req,\n  where,\n}: {\n  entityType: 'collection' | 'global'\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation?: AllOperations\n  req: PayloadRequest\n  slug: string\n  where: Where\n}): Promise<boolean> {\n  if (entityType === 'global') {\n    const global = await req.payload.db.findGlobal({\n      slug,\n      locale,\n      req,\n      select: {},\n      where,\n    })\n\n    const hasGlobalDoc = Boolean(global && Object.keys(global).length > 0)\n\n    return hasGlobalDoc\n  }\n\n  if (entityType === 'collection' && id) {\n    if (operation === 'readVersions') {\n      const count = await req.payload.db.countVersions({\n        collection: slug,\n        locale,\n        req,\n        where: combineQueries(where, { parent: { equals: id } }),\n      })\n      return count.totalDocs > 0\n    }\n\n    const count = await req.payload.db.count({\n      collection: slug,\n      locale,\n      req,\n      where: combineQueries(where, { id: { equals: id } }),\n    })\n\n    return count.totalDocs > 0\n  }\n\n  return false\n}\n"],"names":["combineQueries","entityDocExists","id","slug","entityType","locale","operation","req","where","global","payload","db","findGlobal","select","hasGlobalDoc","Boolean","Object","keys","length","count","countVersions","collection","parent","equals","totalDocs"],"mappings":"AAAA,SAEEA,cAAc,QAIT,iBAAgB;AAEvB;;CAEC,GACD,OAAO,eAAeC,gBAAgB,EACpCC,EAAE,EACFC,IAAI,EACJC,UAAU,EACVC,MAAM,EACNC,SAAS,EACTC,GAAG,EACHC,KAAK,EASN;IACC,IAAIJ,eAAe,UAAU;QAC3B,MAAMK,SAAS,MAAMF,IAAIG,OAAO,CAACC,EAAE,CAACC,UAAU,CAAC;YAC7CT;YACAE;YACAE;YACAM,QAAQ,CAAC;YACTL;QACF;QAEA,MAAMM,eAAeC,QAAQN,UAAUO,OAAOC,IAAI,CAACR,QAAQS,MAAM,GAAG;QAEpE,OAAOJ;IACT;IAEA,IAAIV,eAAe,gBAAgBF,IAAI;QACrC,IAAII,cAAc,gBAAgB;YAChC,MAAMa,QAAQ,MAAMZ,IAAIG,OAAO,CAACC,EAAE,CAACS,aAAa,CAAC;gBAC/CC,YAAYlB;gBACZE;gBACAE;gBACAC,OAAOR,eAAeQ,OAAO;oBAAEc,QAAQ;wBAAEC,QAAQrB;oBAAG;gBAAE;YACxD;YACA,OAAOiB,MAAMK,SAAS,GAAG;QAC3B;QAEA,MAAML,QAAQ,MAAMZ,IAAIG,OAAO,CAACC,EAAE,CAACQ,KAAK,CAAC;YACvCE,YAAYlB;YACZE;YACAE;YACAC,OAAOR,eAAeQ,OAAO;gBAAEN,IAAI;oBAAEqB,QAAQrB;gBAAG;YAAE;QACpD;QAEA,OAAOiB,MAAMK,SAAS,GAAG;IAC3B;IAEA,OAAO;AACT"}
+{"version":3,"sources":["../../../src/utilities/getEntityPermissions/entityDocExists.ts"],"sourcesContent":["import { sanitizeWhereQuery } from '../../database/sanitizeWhereQuery.js'\nimport {\n  type AllOperations,\n  combineQueries,\n  type DefaultDocumentIDType,\n  type PayloadRequest,\n  type Where,\n} from '../../index.js'\nimport { buildVersionCollectionFields } from '../../versions/buildCollectionFields.js'\nimport { buildVersionGlobalFields } from '../../versions/buildGlobalFields.js'\n\n/**\n * Returns whether or not the entity doc exists based on the where query.\n */\nexport async function entityDocExists({\n  id,\n  slug,\n  entityType,\n  locale,\n  operation,\n  req,\n  where,\n}: {\n  entityType: 'collection' | 'global'\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation?: AllOperations\n  req: PayloadRequest\n  slug: string\n  where: Where\n}): Promise<boolean> {\n  if (entityType === 'global') {\n    if (operation === 'readVersions') {\n      const global = req.payload.globals.config.find(({ slug: globalSlug }) => globalSlug === slug)\n\n      if (!global) {\n        return false\n      }\n\n      sanitizeWhereQuery({\n        fields: buildVersionGlobalFields(req.payload.config, global, true),\n        payload: req.payload,\n        where,\n      })\n\n      const count = await req.payload.db.countGlobalVersions({\n        global: slug,\n        locale,\n        req,\n        where,\n      })\n\n      return count.totalDocs > 0\n    }\n\n    const global = await req.payload.db.findGlobal({\n      slug,\n      locale,\n      req,\n      select: {},\n      where,\n    })\n\n    const hasGlobalDoc = Boolean(global && Object.keys(global).length > 0)\n\n    return hasGlobalDoc\n  }\n\n  if (entityType === 'collection' && id) {\n    if (operation === 'readVersions') {\n      const collection = req.payload.collections[slug]?.config\n\n      if (!collection) {\n        return false\n      }\n\n      const fullWhere = combineQueries(where, { parent: { equals: id } })\n\n      sanitizeWhereQuery({\n        fields: buildVersionCollectionFields(req.payload.config, collection, true),\n        payload: req.payload,\n        where: fullWhere,\n      })\n\n      const count = await req.payload.db.countVersions({\n        collection: slug,\n        locale,\n        req,\n        where: fullWhere,\n      })\n      return count.totalDocs > 0\n    }\n\n    const count = await req.payload.db.count({\n      collection: slug,\n      locale,\n      req,\n      where: combineQueries(where, { id: { equals: id } }),\n    })\n\n    return count.totalDocs > 0\n  }\n\n  return false\n}\n"],"names":["sanitizeWhereQuery","combineQueries","buildVersionCollectionFields","buildVersionGlobalFields","entityDocExists","id","slug","entityType","locale","operation","req","where","global","payload","globals","config","find","globalSlug","fields","count","db","countGlobalVersions","totalDocs","findGlobal","select","hasGlobalDoc","Boolean","Object","keys","length","collection","collections","fullWhere","parent","equals","countVersions"],"mappings":"AAAA,SAASA,kBAAkB,QAAQ,uCAAsC;AACzE,SAEEC,cAAc,QAIT,iBAAgB;AACvB,SAASC,4BAA4B,QAAQ,0CAAyC;AACtF,SAASC,wBAAwB,QAAQ,sCAAqC;AAE9E;;CAEC,GACD,OAAO,eAAeC,gBAAgB,EACpCC,EAAE,EACFC,IAAI,EACJC,UAAU,EACVC,MAAM,EACNC,SAAS,EACTC,GAAG,EACHC,KAAK,EASN;IACC,IAAIJ,eAAe,UAAU;QAC3B,IAAIE,cAAc,gBAAgB;YAChC,MAAMG,SAASF,IAAIG,OAAO,CAACC,OAAO,CAACC,MAAM,CAACC,IAAI,CAAC,CAAC,EAAEV,MAAMW,UAAU,EAAE,GAAKA,eAAeX;YAExF,IAAI,CAACM,QAAQ;gBACX,OAAO;YACT;YAEAZ,mBAAmB;gBACjBkB,QAAQf,yBAAyBO,IAAIG,OAAO,CAACE,MAAM,EAAEH,QAAQ;gBAC7DC,SAASH,IAAIG,OAAO;gBACpBF;YACF;YAEA,MAAMQ,QAAQ,MAAMT,IAAIG,OAAO,CAACO,EAAE,CAACC,mBAAmB,CAAC;gBACrDT,QAAQN;gBACRE;gBACAE;gBACAC;YACF;YAEA,OAAOQ,MAAMG,SAAS,GAAG;QAC3B;QAEA,MAAMV,SAAS,MAAMF,IAAIG,OAAO,CAACO,EAAE,CAACG,UAAU,CAAC;YAC7CjB;YACAE;YACAE;YACAc,QAAQ,CAAC;YACTb;QACF;QAEA,MAAMc,eAAeC,QAAQd,UAAUe,OAAOC,IAAI,CAAChB,QAAQiB,MAAM,GAAG;QAEpE,OAAOJ;IACT;IAEA,IAAIlB,eAAe,gBAAgBF,IAAI;QACrC,IAAII,cAAc,gBAAgB;YAChC,MAAMqB,aAAapB,IAAIG,OAAO,CAACkB,WAAW,CAACzB,KAAK,EAAES;YAElD,IAAI,CAACe,YAAY;gBACf,OAAO;YACT;YAEA,MAAME,YAAY/B,eAAeU,OAAO;gBAAEsB,QAAQ;oBAAEC,QAAQ7B;gBAAG;YAAE;YAEjEL,mBAAmB;gBACjBkB,QAAQhB,6BAA6BQ,IAAIG,OAAO,CAACE,MAAM,EAAEe,YAAY;gBACrEjB,SAASH,IAAIG,OAAO;gBACpBF,OAAOqB;YACT;YAEA,MAAMb,QAAQ,MAAMT,IAAIG,OAAO,CAACO,EAAE,CAACe,aAAa,CAAC;gBAC/CL,YAAYxB;gBACZE;gBACAE;gBACAC,OAAOqB;YACT;YACA,OAAOb,MAAMG,SAAS,GAAG;QAC3B;QAEA,MAAMH,QAAQ,MAAMT,IAAIG,OAAO,CAACO,EAAE,CAACD,KAAK,CAAC;YACvCW,YAAYxB;YACZE;YACAE;YACAC,OAAOV,eAAeU,OAAO;gBAAEN,IAAI;oBAAE6B,QAAQ7B;gBAAG;YAAE;QACpD;QAEA,OAAOc,MAAMG,SAAS,GAAG;IAC3B;IAEA,OAAO;AACT"}

package/dist/utilities/getEntityPermissions/getEntityPermissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getEntityPermissions.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EAEpB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAS,MAAM,sBAAsB,CAAA;AAO5F,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAC7C,SAAS,EACT,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAC7C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAE/C,KAAK,UAAU,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI,WAAW,SAAS,QAAQ,GACvF,gBAAgB,GAChB,oBAAoB,CAAA;AAExB,KAAK,IAAI,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,WAAW,SAAS,YAAY,GAAG,yBAAyB,GAAG,qBAAqB,CAAA;IAC5F,UAAU,EAAE,WAAW,CAAA;IACvB;;OAEG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,GAAG,EAAE,cAAc,CAAA;CACpB,GAAG,CACA;IACE,SAAS,EAAE,KAAK,CAAA;IAChB,EAAE,CAAC,EAAE,KAAK,CAAA;CACX,GACD;IACE,SAAS,EAAE,IAAI,CAAA;IACf,EAAE,EAAE,WAAW,SAAS,YAAY,GAAG,qBAAqB,GAAG,SAAS,CAAA;CACzE,CACJ,CAAA;AAYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,EACpF,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,GACtB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CA0JlC"}
+{"version":3,"file":"getEntityPermissions.d.ts","sourceRoot":"","sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EAEpB,gBAAgB,EAEjB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAA;AAC9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAS,MAAM,sBAAsB,CAAA;AAO5F,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAC7C,SAAS,EACT,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAC7C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAE/C,KAAK,UAAU,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI,WAAW,SAAS,QAAQ,GACvF,gBAAgB,GAChB,oBAAoB,CAAA;AAExB,KAAK,IAAI,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,IAAI;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD;;OAEG;IACH,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,WAAW,SAAS,YAAY,GAAG,yBAAyB,GAAG,qBAAqB,CAAA;IAC5F,UAAU,EAAE,WAAW,CAAA;IACvB;;OAEG;IACH,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,GAAG,EAAE,cAAc,CAAA;CACpB,GAAG,CACA;IACE,SAAS,EAAE,KAAK,CAAA;IAChB,EAAE,CAAC,EAAE,KAAK,CAAA;CACX,GACD;IACE,SAAS,EAAE,IAAI,CAAA;IACf,EAAE,EAAE,WAAW,SAAS,YAAY,GAAG,qBAAqB,GAAG,SAAS,CAAA;CACzE,CACJ,CAAA;AAYD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,WAAW,SAAS,YAAY,GAAG,QAAQ,EACpF,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,GACtB,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CA4JlC"}

package/dist/utilities/getEntityPermissions/getEntityPermissions.js

@@ -83,6 +83,7 @@ const topLevelGlobalPermissions = [
                     operation,
                     result: Promise.resolve(accessFunction({
                         id,
+                        slug: entity.slug,
                         data,
                         req
                     }))

package/dist/utilities/getEntityPermissions/getEntityPermissions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'util'\n\nimport type {\n  BlockPermissions,\n  CollectionPermission,\n  FieldsPermissions,\n  GlobalPermission,\n  Permission,\n} from '../../auth/types.js'\nimport type { SanitizedCollectionConfig, TypeWithID } from '../../collections/config/types.js'\nimport type { SanitizedGlobalConfig } from '../../globals/config/types.js'\nimport type { BlockSlug, DefaultDocumentIDType } from '../../index.js'\nimport type { AllOperations, JsonObject, PayloadRequest, Where } from '../../types/index.js'\n\nimport { entityDocExists } from './entityDocExists.js'\nimport { populateFieldPermissions } from './populateFieldPermissions.js'\n\ntype WhereQueryCache = { result: Promise<boolean>; where: Where }[]\n\nexport type BlockReferencesPermissions = Record<\n  BlockSlug,\n  BlockPermissions | Promise<BlockPermissions>\n>\n\nexport type EntityDoc = JsonObject | TypeWithID\n\ntype ReturnType<TEntityType extends 'collection' | 'global'> = TEntityType extends 'global'\n  ? GlobalPermission\n  : CollectionPermission\n\ntype Args<TEntityType extends 'collection' | 'global'> = {\n  blockReferencesPermissions: BlockReferencesPermissions\n  /**\n   * If the document data is passed, it will be used to check access instead of fetching the document from the database.\n   */\n  data?: JsonObject\n  entity: TEntityType extends 'collection' ? SanitizedCollectionConfig : SanitizedGlobalConfig\n  entityType: TEntityType\n  /**\n   * Operations to check access for\n   */\n  operations: AllOperations[]\n  req: PayloadRequest\n} & (\n  | {\n      fetchData: false\n      id?: never\n    }\n  | {\n      fetchData: true\n      id: TEntityType extends 'collection' ? DefaultDocumentIDType : undefined\n    }\n)\n\nconst topLevelCollectionPermissions = [\n  'create',\n  'delete',\n  'read',\n  'readVersions',\n  'update',\n  'unlock',\n]\nconst topLevelGlobalPermissions = ['read', 'readVersions', 'update']\n\n/**\n * Build up permissions object for an entity (collection or global).\n * This is not run during any update and reflects the current state of the entity data => doc and data is the same.\n *\n * When `fetchData` is false:\n * - returned `Where` are not run and evaluated as \"does not have permission\".\n * - If req.data is passed: `data` and `doc` is passed to access functions.\n * - If req.data is not passed: `data` and `doc` is not passed to access functions.\n *\n * When `fetchData` is true:\n * - `Where` are run and evaluated as \"has permission\" or \"does not have permission\".\n * - `data` and `doc` are always passed to access functions.\n * - Error is thrown if `entityType` is 'collection' and `id` is not passed.\n *\n * In both cases:\n * We cannot include siblingData or blockData here, as we do not have siblingData available once we reach block or array\n * rows, as we're calculating schema permissions, which do not include individual rows.\n * For consistency, it's thus better to never include the siblingData and blockData\n *\n * @internal\n */\nexport async function getEntityPermissions<TEntityType extends 'collection' | 'global'>(\n  args: Args<TEntityType>,\n): Promise<ReturnType<TEntityType>> {\n  const {\n    id,\n    blockReferencesPermissions,\n    data: _data,\n    entity,\n    entityType,\n    fetchData,\n    operations,\n    req,\n  } = args\n  const { locale: _locale, user } = req\n\n  const locale = _locale ? _locale : undefined\n\n  if (fetchData && entityType === 'collection' && !id) {\n    throw new Error('ID is required when fetching data for a collection')\n  }\n\n  const hasData = _data && Object.keys(_data).length > 0\n  const data: JsonObject | undefined = hasData\n    ? _data\n    : fetchData\n      ? await (async () => {\n          if (entityType === 'global') {\n            return req.payload.findGlobal({\n              slug: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n            })\n          }\n\n          if (entityType === 'collection') {\n            return req.payload.findByID({\n              id: id!,\n              collection: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n              trash: true,\n            })\n          }\n        })()\n      : undefined\n\n  const isLoggedIn = !!user\n\n  const fieldsPermissions: FieldsPermissions = {}\n\n  const entityPermissions: ReturnType<TEntityType> = {\n    fields: fieldsPermissions,\n  } as ReturnType<TEntityType>\n\n  const promises: Promise<void>[] = []\n\n  // Phase 1: Resolve all access functions to get where queries\n  const accessResults: {\n    operation: keyof typeof entity.access\n    result: Promise<boolean | Where>\n  }[] = []\n\n  for (const _operation of operations) {\n    const operation = _operation as keyof typeof entity.access\n    const accessFunction = entity.access[operation]\n\n    if (\n      (entityType === 'collection' && topLevelCollectionPermissions.includes(operation)) ||\n      (entityType === 'global' && topLevelGlobalPermissions.includes(operation))\n    ) {\n      if (typeof accessFunction === 'function') {\n        accessResults.push({\n          operation,\n          result: Promise.resolve(accessFunction({ id, data, req })) as Promise<boolean | Where>,\n        })\n      } else {\n        entityPermissions[operation] = {\n          permission: isLoggedIn,\n        }\n      }\n    }\n  }\n\n  // Await all access functions in parallel\n  const resolvedAccessResults = await Promise.all(\n    accessResults.map(async (item) => ({\n      operation: item.operation,\n      result: await item.result,\n    })),\n  )\n\n  // Phase 2: Process where queries with cache and resolve in parallel\n  const whereQueryCache: WhereQueryCache = []\n  const wherePromises: Promise<void>[] = []\n\n  for (const { operation, result: accessResult } of resolvedAccessResults) {\n    if (typeof accessResult === 'object') {\n      processWhereQuery({\n        id,\n        slug: entity.slug,\n        accessResult,\n        entityPermissions,\n        entityType,\n        fetchData,\n        locale,\n        operation,\n        req,\n        wherePromises,\n        whereQueryCache,\n      })\n    } else if (entityPermissions[operation]?.permission !== false) {\n      entityPermissions[operation] = { permission: !!accessResult }\n    }\n  }\n\n  // Await all where query DB calls in parallel\n  await Promise.all(wherePromises)\n\n  populateFieldPermissions({\n    blockReferencesPermissions,\n    collection: entityType === 'collection' ? (entity as SanitizedCollectionConfig) : null,\n    data,\n    fields: entity.fields,\n    global: entityType === 'global' ? (entity as SanitizedGlobalConfig) : null,\n    operations,\n    parentPermissionsObject: entityPermissions,\n    permissionsObject: fieldsPermissions,\n    promises,\n    req,\n  })\n\n  /**\n   * Await all promises in parallel.\n   * A promise can add more promises to the promises array (group of fields calls populateFieldPermissions again in their own promise), which will not be\n   * awaited in the first run.\n   * This is why we need to loop again to process the new promises, until there are no more promises left.\n   */\n  let iterations = 0\n  while (promises.length > 0) {\n    const currentPromises = promises.splice(0, promises.length)\n\n    await Promise.all(currentPromises)\n\n    iterations++\n    if (iterations >= 100) {\n      throw new Error('Infinite getEntityPermissions promise loop detected.')\n    }\n  }\n\n  return entityPermissions\n}\n\nconst processWhereQuery = ({\n  id,\n  slug,\n  accessResult,\n  entityPermissions,\n  entityType,\n  fetchData,\n  locale,\n  operation,\n  req,\n  wherePromises,\n  whereQueryCache,\n}: {\n  accessResult: Where\n  entityPermissions: CollectionPermission | GlobalPermission\n  entityType: 'collection' | 'global'\n  fetchData: boolean\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation: Extract<keyof (CollectionPermission | GlobalPermission), AllOperations>\n  req: PayloadRequest\n  slug: string\n  wherePromises: Promise<void>[]\n  whereQueryCache: WhereQueryCache\n}): void => {\n  if (fetchData) {\n    // Check cache for identical where query using deep comparison\n    let cached = whereQueryCache.find((entry) => isDeepStrictEqual(entry.where, accessResult))\n\n    if (!cached) {\n      // Cache miss - start DB query (don't await)\n      cached = {\n        result: entityDocExists({\n          id,\n          slug,\n          entityType,\n          locale,\n          operation,\n          req,\n          where: accessResult,\n        }),\n        where: accessResult,\n      }\n      whereQueryCache.push(cached)\n    }\n\n    // Defer resolution to Promise.all (cache hits reuse same promise)\n    wherePromises.push(\n      cached.result.then((hasPermission) => {\n        entityPermissions[operation] = {\n          permission: hasPermission,\n          where: accessResult,\n        } as Permission\n      }),\n    )\n  } else {\n    // TODO: 4.0: Investigate defaulting to `false` here, if where query is returned but ignored as we don't\n    // have the document data available. This seems more secure.\n    // Alternatively, we could set permission to a third state, like 'unknown'.\n    // Even after calling sanitizePermissions, the permissions will still be true if the where query is returned but ignored as we don't have the document data available.\n    entityPermissions[operation] = { permission: true, where: accessResult } as Permission\n  }\n}\n"],"names":["isDeepStrictEqual","entityDocExists","populateFieldPermissions","topLevelCollectionPermissions","topLevelGlobalPermissions","getEntityPermissions","args","id","blockReferencesPermissions","data","_data","entity","entityType","fetchData","operations","req","locale","_locale","user","undefined","Error","hasData","Object","keys","length","payload","findGlobal","slug","depth","fallbackLocale","overrideAccess","findByID","collection","trash","isLoggedIn","fieldsPermissions","entityPermissions","fields","promises","accessResults","_operation","operation","accessFunction","access","includes","push","result","Promise","resolve","permission","resolvedAccessResults","all","map","item","whereQueryCache","wherePromises","accessResult","processWhereQuery","global","parentPermissionsObject","permissionsObject","iterations","currentPromises","splice","cached","find","entry","where","then","hasPermission"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,OAAM;AAcxC,SAASC,eAAe,QAAQ,uBAAsB;AACtD,SAASC,wBAAwB,QAAQ,gCAA+B;AAuCxE,MAAMC,gCAAgC;IACpC;IACA;IACA;IACA;IACA;IACA;CACD;AACD,MAAMC,4BAA4B;IAAC;IAAQ;IAAgB;CAAS;AAEpE;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,eAAeC,qBACpBC,IAAuB;IAEvB,MAAM,EACJC,EAAE,EACFC,0BAA0B,EAC1BC,MAAMC,KAAK,EACXC,MAAM,EACNC,UAAU,EACVC,SAAS,EACTC,UAAU,EACVC,GAAG,EACJ,GAAGT;IACJ,MAAM,EAAEU,QAAQC,OAAO,EAAEC,IAAI,EAAE,GAAGH;IAElC,MAAMC,SAASC,UAAUA,UAAUE;IAEnC,IAAIN,aAAaD,eAAe,gBAAgB,CAACL,IAAI;QACnD,MAAM,IAAIa,MAAM;IAClB;IAEA,MAAMC,UAAUX,SAASY,OAAOC,IAAI,CAACb,OAAOc,MAAM,GAAG;IACrD,MAAMf,OAA+BY,UACjCX,QACAG,YACE,MAAM,AAAC,CAAA;QACL,IAAID,eAAe,UAAU;YAC3B,OAAOG,IAAIU,OAAO,CAACC,UAAU,CAAC;gBAC5BC,MAAMhB,OAAOgB,IAAI;gBACjBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;YACF;QACF;QAEA,IAAIH,eAAe,cAAc;YAC/B,OAAOG,IAAIU,OAAO,CAACM,QAAQ,CAAC;gBAC1BxB,IAAIA;gBACJyB,YAAYrB,OAAOgB,IAAI;gBACvBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;gBACAkB,OAAO;YACT;QACF;IACF,CAAA,MACAd;IAEN,MAAMe,aAAa,CAAC,CAAChB;IAErB,MAAMiB,oBAAuC,CAAC;IAE9C,MAAMC,oBAA6C;QACjDC,QAAQF;IACV;IAEA,MAAMG,WAA4B,EAAE;IAEpC,6DAA6D;IAC7D,MAAMC,gBAGA,EAAE;IAER,KAAK,MAAMC,cAAc1B,WAAY;QACnC,MAAM2B,YAAYD;QAClB,MAAME,iBAAiB/B,OAAOgC,MAAM,CAACF,UAAU;QAE/C,IACE,AAAC7B,eAAe,gBAAgBT,8BAA8ByC,QAAQ,CAACH,cACtE7B,eAAe,YAAYR,0BAA0BwC,QAAQ,CAACH,YAC/D;YACA,IAAI,OAAOC,mBAAmB,YAAY;gBACxCH,cAAcM,IAAI,CAAC;oBACjBJ;oBACAK,QAAQC,QAAQC,OAAO,CAACN,eAAe;wBAAEnC;wBAAIE;wBAAMM;oBAAI;gBACzD;YACF,OAAO;gBACLqB,iBAAiB,CAACK,UAAU,GAAG;oBAC7BQ,YAAYf;gBACd;YACF;QACF;IACF;IAEA,yCAAyC;IACzC,MAAMgB,wBAAwB,MAAMH,QAAQI,GAAG,CAC7CZ,cAAca,GAAG,CAAC,OAAOC,OAAU,CAAA;YACjCZ,WAAWY,KAAKZ,SAAS;YACzBK,QAAQ,MAAMO,KAAKP,MAAM;QAC3B,CAAA;IAGF,oEAAoE;IACpE,MAAMQ,kBAAmC,EAAE;IAC3C,MAAMC,gBAAiC,EAAE;IAEzC,KAAK,MAAM,EAAEd,SAAS,EAAEK,QAAQU,YAAY,EAAE,IAAIN,sBAAuB;QACvE,IAAI,OAAOM,iBAAiB,UAAU;YACpCC,kBAAkB;gBAChBlD;gBACAoB,MAAMhB,OAAOgB,IAAI;gBACjB6B;gBACApB;gBACAxB;gBACAC;gBACAG;gBACAyB;gBACA1B;gBACAwC;gBACAD;YACF;QACF,OAAO,IAAIlB,iBAAiB,CAACK,UAAU,EAAEQ,eAAe,OAAO;YAC7Db,iBAAiB,CAACK,UAAU,GAAG;gBAAEQ,YAAY,CAAC,CAACO;YAAa;QAC9D;IACF;IAEA,6CAA6C;IAC7C,MAAMT,QAAQI,GAAG,CAACI;IAElBrD,yBAAyB;QACvBM;QACAwB,YAAYpB,eAAe,eAAgBD,SAAuC;QAClFF;QACA4B,QAAQ1B,OAAO0B,MAAM;QACrBqB,QAAQ9C,eAAe,WAAYD,SAAmC;QACtEG;QACA6C,yBAAyBvB;QACzBwB,mBAAmBzB;QACnBG;QACAvB;IACF;IAEA;;;;;GAKC,GACD,IAAI8C,aAAa;IACjB,MAAOvB,SAASd,MAAM,GAAG,EAAG;QAC1B,MAAMsC,kBAAkBxB,SAASyB,MAAM,CAAC,GAAGzB,SAASd,MAAM;QAE1D,MAAMuB,QAAQI,GAAG,CAACW;QAElBD;QACA,IAAIA,cAAc,KAAK;YACrB,MAAM,IAAIzC,MAAM;QAClB;IACF;IAEA,OAAOgB;AACT;AAEA,MAAMqB,oBAAoB,CAAC,EACzBlD,EAAE,EACFoB,IAAI,EACJ6B,YAAY,EACZpB,iBAAiB,EACjBxB,UAAU,EACVC,SAAS,EACTG,MAAM,EACNyB,SAAS,EACT1B,GAAG,EACHwC,aAAa,EACbD,eAAe,EAahB;IACC,IAAIzC,WAAW;QACb,8DAA8D;QAC9D,IAAImD,SAASV,gBAAgBW,IAAI,CAAC,CAACC,QAAUlE,kBAAkBkE,MAAMC,KAAK,EAAEX;QAE5E,IAAI,CAACQ,QAAQ;YACX,4CAA4C;YAC5CA,SAAS;gBACPlB,QAAQ7C,gBAAgB;oBACtBM;oBACAoB;oBACAf;oBACAI;oBACAyB;oBACA1B;oBACAoD,OAAOX;gBACT;gBACAW,OAAOX;YACT;YACAF,gBAAgBT,IAAI,CAACmB;QACvB;QAEA,kEAAkE;QAClET,cAAcV,IAAI,CAChBmB,OAAOlB,MAAM,CAACsB,IAAI,CAAC,CAACC;YAClBjC,iBAAiB,CAACK,UAAU,GAAG;gBAC7BQ,YAAYoB;gBACZF,OAAOX;YACT;QACF;IAEJ,OAAO;QACL,wGAAwG;QACxG,4DAA4D;QAC5D,2EAA2E;QAC3E,sKAAsK;QACtKpB,iBAAiB,CAACK,UAAU,GAAG;YAAEQ,YAAY;YAAMkB,OAAOX;QAAa;IACzE;AACF"}
+{"version":3,"sources":["../../../src/utilities/getEntityPermissions/getEntityPermissions.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'util'\n\nimport type {\n  BlockPermissions,\n  CollectionPermission,\n  FieldsPermissions,\n  GlobalPermission,\n  Permission,\n} from '../../auth/types.js'\nimport type { SanitizedCollectionConfig, TypeWithID } from '../../collections/config/types.js'\nimport type { SanitizedGlobalConfig } from '../../globals/config/types.js'\nimport type { BlockSlug, DefaultDocumentIDType } from '../../index.js'\nimport type { AllOperations, JsonObject, PayloadRequest, Where } from '../../types/index.js'\n\nimport { entityDocExists } from './entityDocExists.js'\nimport { populateFieldPermissions } from './populateFieldPermissions.js'\n\ntype WhereQueryCache = { result: Promise<boolean>; where: Where }[]\n\nexport type BlockReferencesPermissions = Record<\n  BlockSlug,\n  BlockPermissions | Promise<BlockPermissions>\n>\n\nexport type EntityDoc = JsonObject | TypeWithID\n\ntype ReturnType<TEntityType extends 'collection' | 'global'> = TEntityType extends 'global'\n  ? GlobalPermission\n  : CollectionPermission\n\ntype Args<TEntityType extends 'collection' | 'global'> = {\n  blockReferencesPermissions: BlockReferencesPermissions\n  /**\n   * If the document data is passed, it will be used to check access instead of fetching the document from the database.\n   */\n  data?: JsonObject\n  entity: TEntityType extends 'collection' ? SanitizedCollectionConfig : SanitizedGlobalConfig\n  entityType: TEntityType\n  /**\n   * Operations to check access for\n   */\n  operations: AllOperations[]\n  req: PayloadRequest\n} & (\n  | {\n      fetchData: false\n      id?: never\n    }\n  | {\n      fetchData: true\n      id: TEntityType extends 'collection' ? DefaultDocumentIDType : undefined\n    }\n)\n\nconst topLevelCollectionPermissions = [\n  'create',\n  'delete',\n  'read',\n  'readVersions',\n  'update',\n  'unlock',\n]\nconst topLevelGlobalPermissions = ['read', 'readVersions', 'update']\n\n/**\n * Build up permissions object for an entity (collection or global).\n * This is not run during any update and reflects the current state of the entity data => doc and data is the same.\n *\n * When `fetchData` is false:\n * - returned `Where` are not run and evaluated as \"does not have permission\".\n * - If req.data is passed: `data` and `doc` is passed to access functions.\n * - If req.data is not passed: `data` and `doc` is not passed to access functions.\n *\n * When `fetchData` is true:\n * - `Where` are run and evaluated as \"has permission\" or \"does not have permission\".\n * - `data` and `doc` are always passed to access functions.\n * - Error is thrown if `entityType` is 'collection' and `id` is not passed.\n *\n * In both cases:\n * We cannot include siblingData or blockData here, as we do not have siblingData available once we reach block or array\n * rows, as we're calculating schema permissions, which do not include individual rows.\n * For consistency, it's thus better to never include the siblingData and blockData\n *\n * @internal\n */\nexport async function getEntityPermissions<TEntityType extends 'collection' | 'global'>(\n  args: Args<TEntityType>,\n): Promise<ReturnType<TEntityType>> {\n  const {\n    id,\n    blockReferencesPermissions,\n    data: _data,\n    entity,\n    entityType,\n    fetchData,\n    operations,\n    req,\n  } = args\n  const { locale: _locale, user } = req\n\n  const locale = _locale ? _locale : undefined\n\n  if (fetchData && entityType === 'collection' && !id) {\n    throw new Error('ID is required when fetching data for a collection')\n  }\n\n  const hasData = _data && Object.keys(_data).length > 0\n  const data: JsonObject | undefined = hasData\n    ? _data\n    : fetchData\n      ? await (async () => {\n          if (entityType === 'global') {\n            return req.payload.findGlobal({\n              slug: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n            })\n          }\n\n          if (entityType === 'collection') {\n            return req.payload.findByID({\n              id: id!,\n              collection: entity.slug,\n              depth: 0,\n              fallbackLocale: null,\n              locale,\n              overrideAccess: true,\n              req,\n              trash: true,\n            })\n          }\n        })()\n      : undefined\n\n  const isLoggedIn = !!user\n\n  const fieldsPermissions: FieldsPermissions = {}\n\n  const entityPermissions: ReturnType<TEntityType> = {\n    fields: fieldsPermissions,\n  } as ReturnType<TEntityType>\n\n  const promises: Promise<void>[] = []\n\n  // Phase 1: Resolve all access functions to get where queries\n  const accessResults: {\n    operation: keyof typeof entity.access\n    result: Promise<boolean | Where>\n  }[] = []\n\n  for (const _operation of operations) {\n    const operation = _operation as keyof typeof entity.access\n    const accessFunction = entity.access[operation]\n\n    if (\n      (entityType === 'collection' && topLevelCollectionPermissions.includes(operation)) ||\n      (entityType === 'global' && topLevelGlobalPermissions.includes(operation))\n    ) {\n      if (typeof accessFunction === 'function') {\n        accessResults.push({\n          operation,\n          result: Promise.resolve(accessFunction({ id, slug: entity.slug, data, req })) as Promise<\n            boolean | Where\n          >,\n        })\n      } else {\n        entityPermissions[operation] = {\n          permission: isLoggedIn,\n        }\n      }\n    }\n  }\n\n  // Await all access functions in parallel\n  const resolvedAccessResults = await Promise.all(\n    accessResults.map(async (item) => ({\n      operation: item.operation,\n      result: await item.result,\n    })),\n  )\n\n  // Phase 2: Process where queries with cache and resolve in parallel\n  const whereQueryCache: WhereQueryCache = []\n  const wherePromises: Promise<void>[] = []\n\n  for (const { operation, result: accessResult } of resolvedAccessResults) {\n    if (typeof accessResult === 'object') {\n      processWhereQuery({\n        id,\n        slug: entity.slug,\n        accessResult,\n        entityPermissions,\n        entityType,\n        fetchData,\n        locale,\n        operation,\n        req,\n        wherePromises,\n        whereQueryCache,\n      })\n    } else if (entityPermissions[operation]?.permission !== false) {\n      entityPermissions[operation] = { permission: !!accessResult }\n    }\n  }\n\n  // Await all where query DB calls in parallel\n  await Promise.all(wherePromises)\n\n  populateFieldPermissions({\n    blockReferencesPermissions,\n    collection: entityType === 'collection' ? (entity as SanitizedCollectionConfig) : null,\n    data,\n    fields: entity.fields,\n    global: entityType === 'global' ? (entity as SanitizedGlobalConfig) : null,\n    operations,\n    parentPermissionsObject: entityPermissions,\n    permissionsObject: fieldsPermissions,\n    promises,\n    req,\n  })\n\n  /**\n   * Await all promises in parallel.\n   * A promise can add more promises to the promises array (group of fields calls populateFieldPermissions again in their own promise), which will not be\n   * awaited in the first run.\n   * This is why we need to loop again to process the new promises, until there are no more promises left.\n   */\n  let iterations = 0\n  while (promises.length > 0) {\n    const currentPromises = promises.splice(0, promises.length)\n\n    await Promise.all(currentPromises)\n\n    iterations++\n    if (iterations >= 100) {\n      throw new Error('Infinite getEntityPermissions promise loop detected.')\n    }\n  }\n\n  return entityPermissions\n}\n\nconst processWhereQuery = ({\n  id,\n  slug,\n  accessResult,\n  entityPermissions,\n  entityType,\n  fetchData,\n  locale,\n  operation,\n  req,\n  wherePromises,\n  whereQueryCache,\n}: {\n  accessResult: Where\n  entityPermissions: CollectionPermission | GlobalPermission\n  entityType: 'collection' | 'global'\n  fetchData: boolean\n  id?: DefaultDocumentIDType\n  locale?: string\n  operation: Extract<keyof (CollectionPermission | GlobalPermission), AllOperations>\n  req: PayloadRequest\n  slug: string\n  wherePromises: Promise<void>[]\n  whereQueryCache: WhereQueryCache\n}): void => {\n  if (fetchData) {\n    // Check cache for identical where query using deep comparison\n    let cached = whereQueryCache.find((entry) => isDeepStrictEqual(entry.where, accessResult))\n\n    if (!cached) {\n      // Cache miss - start DB query (don't await)\n      cached = {\n        result: entityDocExists({\n          id,\n          slug,\n          entityType,\n          locale,\n          operation,\n          req,\n          where: accessResult,\n        }),\n        where: accessResult,\n      }\n      whereQueryCache.push(cached)\n    }\n\n    // Defer resolution to Promise.all (cache hits reuse same promise)\n    wherePromises.push(\n      cached.result.then((hasPermission) => {\n        entityPermissions[operation] = {\n          permission: hasPermission,\n          where: accessResult,\n        } as Permission\n      }),\n    )\n  } else {\n    // TODO: 4.0: Investigate defaulting to `false` here, if where query is returned but ignored as we don't\n    // have the document data available. This seems more secure.\n    // Alternatively, we could set permission to a third state, like 'unknown'.\n    // Even after calling sanitizePermissions, the permissions will still be true if the where query is returned but ignored as we don't have the document data available.\n    entityPermissions[operation] = { permission: true, where: accessResult } as Permission\n  }\n}\n"],"names":["isDeepStrictEqual","entityDocExists","populateFieldPermissions","topLevelCollectionPermissions","topLevelGlobalPermissions","getEntityPermissions","args","id","blockReferencesPermissions","data","_data","entity","entityType","fetchData","operations","req","locale","_locale","user","undefined","Error","hasData","Object","keys","length","payload","findGlobal","slug","depth","fallbackLocale","overrideAccess","findByID","collection","trash","isLoggedIn","fieldsPermissions","entityPermissions","fields","promises","accessResults","_operation","operation","accessFunction","access","includes","push","result","Promise","resolve","permission","resolvedAccessResults","all","map","item","whereQueryCache","wherePromises","accessResult","processWhereQuery","global","parentPermissionsObject","permissionsObject","iterations","currentPromises","splice","cached","find","entry","where","then","hasPermission"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,OAAM;AAcxC,SAASC,eAAe,QAAQ,uBAAsB;AACtD,SAASC,wBAAwB,QAAQ,gCAA+B;AAuCxE,MAAMC,gCAAgC;IACpC;IACA;IACA;IACA;IACA;IACA;CACD;AACD,MAAMC,4BAA4B;IAAC;IAAQ;IAAgB;CAAS;AAEpE;;;;;;;;;;;;;;;;;;;;CAoBC,GACD,OAAO,eAAeC,qBACpBC,IAAuB;IAEvB,MAAM,EACJC,EAAE,EACFC,0BAA0B,EAC1BC,MAAMC,KAAK,EACXC,MAAM,EACNC,UAAU,EACVC,SAAS,EACTC,UAAU,EACVC,GAAG,EACJ,GAAGT;IACJ,MAAM,EAAEU,QAAQC,OAAO,EAAEC,IAAI,EAAE,GAAGH;IAElC,MAAMC,SAASC,UAAUA,UAAUE;IAEnC,IAAIN,aAAaD,eAAe,gBAAgB,CAACL,IAAI;QACnD,MAAM,IAAIa,MAAM;IAClB;IAEA,MAAMC,UAAUX,SAASY,OAAOC,IAAI,CAACb,OAAOc,MAAM,GAAG;IACrD,MAAMf,OAA+BY,UACjCX,QACAG,YACE,MAAM,AAAC,CAAA;QACL,IAAID,eAAe,UAAU;YAC3B,OAAOG,IAAIU,OAAO,CAACC,UAAU,CAAC;gBAC5BC,MAAMhB,OAAOgB,IAAI;gBACjBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;YACF;QACF;QAEA,IAAIH,eAAe,cAAc;YAC/B,OAAOG,IAAIU,OAAO,CAACM,QAAQ,CAAC;gBAC1BxB,IAAIA;gBACJyB,YAAYrB,OAAOgB,IAAI;gBACvBC,OAAO;gBACPC,gBAAgB;gBAChBb;gBACAc,gBAAgB;gBAChBf;gBACAkB,OAAO;YACT;QACF;IACF,CAAA,MACAd;IAEN,MAAMe,aAAa,CAAC,CAAChB;IAErB,MAAMiB,oBAAuC,CAAC;IAE9C,MAAMC,oBAA6C;QACjDC,QAAQF;IACV;IAEA,MAAMG,WAA4B,EAAE;IAEpC,6DAA6D;IAC7D,MAAMC,gBAGA,EAAE;IAER,KAAK,MAAMC,cAAc1B,WAAY;QACnC,MAAM2B,YAAYD;QAClB,MAAME,iBAAiB/B,OAAOgC,MAAM,CAACF,UAAU;QAE/C,IACE,AAAC7B,eAAe,gBAAgBT,8BAA8ByC,QAAQ,CAACH,cACtE7B,eAAe,YAAYR,0BAA0BwC,QAAQ,CAACH,YAC/D;YACA,IAAI,OAAOC,mBAAmB,YAAY;gBACxCH,cAAcM,IAAI,CAAC;oBACjBJ;oBACAK,QAAQC,QAAQC,OAAO,CAACN,eAAe;wBAAEnC;wBAAIoB,MAAMhB,OAAOgB,IAAI;wBAAElB;wBAAMM;oBAAI;gBAG5E;YACF,OAAO;gBACLqB,iBAAiB,CAACK,UAAU,GAAG;oBAC7BQ,YAAYf;gBACd;YACF;QACF;IACF;IAEA,yCAAyC;IACzC,MAAMgB,wBAAwB,MAAMH,QAAQI,GAAG,CAC7CZ,cAAca,GAAG,CAAC,OAAOC,OAAU,CAAA;YACjCZ,WAAWY,KAAKZ,SAAS;YACzBK,QAAQ,MAAMO,KAAKP,MAAM;QAC3B,CAAA;IAGF,oEAAoE;IACpE,MAAMQ,kBAAmC,EAAE;IAC3C,MAAMC,gBAAiC,EAAE;IAEzC,KAAK,MAAM,EAAEd,SAAS,EAAEK,QAAQU,YAAY,EAAE,IAAIN,sBAAuB;QACvE,IAAI,OAAOM,iBAAiB,UAAU;YACpCC,kBAAkB;gBAChBlD;gBACAoB,MAAMhB,OAAOgB,IAAI;gBACjB6B;gBACApB;gBACAxB;gBACAC;gBACAG;gBACAyB;gBACA1B;gBACAwC;gBACAD;YACF;QACF,OAAO,IAAIlB,iBAAiB,CAACK,UAAU,EAAEQ,eAAe,OAAO;YAC7Db,iBAAiB,CAACK,UAAU,GAAG;gBAAEQ,YAAY,CAAC,CAACO;YAAa;QAC9D;IACF;IAEA,6CAA6C;IAC7C,MAAMT,QAAQI,GAAG,CAACI;IAElBrD,yBAAyB;QACvBM;QACAwB,YAAYpB,eAAe,eAAgBD,SAAuC;QAClFF;QACA4B,QAAQ1B,OAAO0B,MAAM;QACrBqB,QAAQ9C,eAAe,WAAYD,SAAmC;QACtEG;QACA6C,yBAAyBvB;QACzBwB,mBAAmBzB;QACnBG;QACAvB;IACF;IAEA;;;;;GAKC,GACD,IAAI8C,aAAa;IACjB,MAAOvB,SAASd,MAAM,GAAG,EAAG;QAC1B,MAAMsC,kBAAkBxB,SAASyB,MAAM,CAAC,GAAGzB,SAASd,MAAM;QAE1D,MAAMuB,QAAQI,GAAG,CAACW;QAElBD;QACA,IAAIA,cAAc,KAAK;YACrB,MAAM,IAAIzC,MAAM;QAClB;IACF;IAEA,OAAOgB;AACT;AAEA,MAAMqB,oBAAoB,CAAC,EACzBlD,EAAE,EACFoB,IAAI,EACJ6B,YAAY,EACZpB,iBAAiB,EACjBxB,UAAU,EACVC,SAAS,EACTG,MAAM,EACNyB,SAAS,EACT1B,GAAG,EACHwC,aAAa,EACbD,eAAe,EAahB;IACC,IAAIzC,WAAW;QACb,8DAA8D;QAC9D,IAAImD,SAASV,gBAAgBW,IAAI,CAAC,CAACC,QAAUlE,kBAAkBkE,MAAMC,KAAK,EAAEX;QAE5E,IAAI,CAACQ,QAAQ;YACX,4CAA4C;YAC5CA,SAAS;gBACPlB,QAAQ7C,gBAAgB;oBACtBM;oBACAoB;oBACAf;oBACAI;oBACAyB;oBACA1B;oBACAoD,OAAOX;gBACT;gBACAW,OAAOX;YACT;YACAF,gBAAgBT,IAAI,CAACmB;QACvB;QAEA,kEAAkE;QAClET,cAAcV,IAAI,CAChBmB,OAAOlB,MAAM,CAACsB,IAAI,CAAC,CAACC;YAClBjC,iBAAiB,CAACK,UAAU,GAAG;gBAC7BQ,YAAYoB;gBACZF,OAAOX;YACT;QACF;IAEJ,OAAO;QACL,wGAAwG;QACxG,4DAA4D;QAC5D,2EAA2E;QAC3E,sKAAsK;QACtKpB,iBAAiB,CAACK,UAAU,GAAG;YAAEQ,YAAY;YAAMkB,OAAOX;QAAa;IACzE;AACF"}

package/dist/utilities/getNextVersion.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Reads the version of the Next.js installed alongside the running app.
+ * Returns undefined if Next.js cannot be resolved, e.g. because Payload runs
+ * outside of Next.js or from a directory the app's dependencies are not visible from.
+ */
+export declare const getNextVersion: () => string | undefined;
+//# sourceMappingURL=getNextVersion.d.ts.map

package/dist/utilities/getNextVersion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getNextVersion.d.ts","sourceRoot":"","sources":["../../src/utilities/getNextVersion.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,cAAc,QAAO,MAAM,GAAG,SAc1C,CAAA"}

package/dist/utilities/getNextVersion.js

@@ -0,0 +1,20 @@
+import { readFileSync } from 'fs';
+import { resolveFrom } from './dependencies/resolveFrom.js';
+/**
+ * Reads the version of the Next.js installed alongside the running app.
+ * Returns undefined if Next.js cannot be resolved, e.g. because Payload runs
+ * outside of Next.js or from a directory the app's dependencies are not visible from.
+ */ export const getNextVersion = ()=>{
+    try {
+        const packageJSONPath = resolveFrom(process.cwd(), 'next/package.json', true);
+        if (!packageJSONPath) {
+            return undefined;
+        }
+        const { version } = JSON.parse(readFileSync(packageJSONPath, 'utf-8'));
+        return typeof version === 'string' ? version : undefined;
+    } catch (_) {
+        return undefined;
+    }
+};
+
+//# sourceMappingURL=getNextVersion.js.map

package/dist/utilities/getNextVersion.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/utilities/getNextVersion.ts"],"sourcesContent":["import { readFileSync } from 'fs'\n\nimport { resolveFrom } from './dependencies/resolveFrom.js'\n\n/**\n * Reads the version of the Next.js installed alongside the running app.\n * Returns undefined if Next.js cannot be resolved, e.g. because Payload runs\n * outside of Next.js or from a directory the app's dependencies are not visible from.\n */\nexport const getNextVersion = (): string | undefined => {\n  try {\n    const packageJSONPath = resolveFrom(process.cwd(), 'next/package.json', true)\n\n    if (!packageJSONPath) {\n      return undefined\n    }\n\n    const { version } = JSON.parse(readFileSync(packageJSONPath, 'utf-8'))\n\n    return typeof version === 'string' ? version : undefined\n  } catch (_) {\n    return undefined\n  }\n}\n"],"names":["readFileSync","resolveFrom","getNextVersion","packageJSONPath","process","cwd","undefined","version","JSON","parse","_"],"mappings":"AAAA,SAASA,YAAY,QAAQ,KAAI;AAEjC,SAASC,WAAW,QAAQ,gCAA+B;AAE3D;;;;CAIC,GACD,OAAO,MAAMC,iBAAiB;IAC5B,IAAI;QACF,MAAMC,kBAAkBF,YAAYG,QAAQC,GAAG,IAAI,qBAAqB;QAExE,IAAI,CAACF,iBAAiB;YACpB,OAAOG;QACT;QAEA,MAAM,EAAEC,OAAO,EAAE,GAAGC,KAAKC,KAAK,CAACT,aAAaG,iBAAiB;QAE7D,OAAO,OAAOI,YAAY,WAAWA,UAAUD;IACjD,EAAE,OAAOI,GAAG;QACV,OAAOJ;IACT;AACF,EAAC"}

package/dist/utilities/getObjectDotNotation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getObjectDotNotation.d.ts","sourceRoot":"","sources":["../../src/utilities/getObjectDotNotation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,OAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QACtB,MAAM,iBACG,CAAC,KACf,CAMF,CAAA"}
+{"version":3,"file":"getObjectDotNotation.d.ts","sourceRoot":"","sources":["../../src/utilities/getObjectDotNotation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,oBAAoB,GAAI,CAAC,OAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QACtB,MAAM,iBACG,CAAC,KACf,CAgBF,CAAA"}

package/dist/utilities/getObjectDotNotation.js

@@ -15,7 +15,13 @@
     if (!path || !obj) {
         return defaultValue;
     }
-    const result = path.split('.').reduce((o, i)=>o?.[i], obj);
+    let result = obj;
+    for (const segment of path.split('.')){
+        if (result === null || typeof result !== 'object' || !Object.hasOwn(result, segment)) {
+            return defaultValue;
+        }
+        result = result[segment];
+    }
     return result === undefined ? defaultValue : result;
 };
 

package/dist/utilities/getObjectDotNotation.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/getObjectDotNotation.ts"],"sourcesContent":["/**\n *\n * @deprecated use getObjectDotNotation from `'payload/shared'` instead of `'payload'`\n *\n * @example\n *\n * ```ts\n * import { getObjectDotNotation } from 'payload/shared'\n *\n * const obj = { a: { b: { c: 42 } } }\n * const value = getObjectDotNotation<number>(obj, 'a.b.c', 0) // value is 42\n * const defaultValue = getObjectDotNotation<number>(obj, 'a.b.x', 0) // defaultValue is 0\n * ```\n */\nexport const getObjectDotNotation = <T>(\n  obj: Record<string, unknown>,\n  path: string,\n  defaultValue?: T,\n): T => {\n  if (!path || !obj) {\n    return defaultValue!\n  }\n  const result = path.split('.').reduce((o, i) => o?.[i] as Record<string, unknown>, obj)\n  return result === undefined ? defaultValue! : (result as T)\n}\n"],"names":["getObjectDotNotation","obj","path","defaultValue","result","split","reduce","o","i","undefined"],"mappings":"AAAA;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMA,uBAAuB,CAClCC,KACAC,MACAC;IAEA,IAAI,CAACD,QAAQ,CAACD,KAAK;QACjB,OAAOE;IACT;IACA,MAAMC,SAASF,KAAKG,KAAK,CAAC,KAAKC,MAAM,CAAC,CAACC,GAAGC,IAAMD,GAAG,CAACC,EAAE,EAA6BP;IACnF,OAAOG,WAAWK,YAAYN,eAAiBC;AACjD,EAAC"}
+{"version":3,"sources":["../../src/utilities/getObjectDotNotation.ts"],"sourcesContent":["/**\n *\n * @deprecated use getObjectDotNotation from `'payload/shared'` instead of `'payload'`\n *\n * @example\n *\n * ```ts\n * import { getObjectDotNotation } from 'payload/shared'\n *\n * const obj = { a: { b: { c: 42 } } }\n * const value = getObjectDotNotation<number>(obj, 'a.b.c', 0) // value is 42\n * const defaultValue = getObjectDotNotation<number>(obj, 'a.b.x', 0) // defaultValue is 0\n * ```\n */\nexport const getObjectDotNotation = <T>(\n  obj: Record<string, unknown>,\n  path: string,\n  defaultValue?: T,\n): T => {\n  if (!path || !obj) {\n    return defaultValue!\n  }\n\n  let result: unknown = obj\n\n  for (const segment of path.split('.')) {\n    if (result === null || typeof result !== 'object' || !Object.hasOwn(result, segment)) {\n      return defaultValue!\n    }\n\n    result = (result as Record<string, unknown>)[segment]\n  }\n\n  return result === undefined ? defaultValue! : (result as T)\n}\n"],"names":["getObjectDotNotation","obj","path","defaultValue","result","segment","split","Object","hasOwn","undefined"],"mappings":"AAAA;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMA,uBAAuB,CAClCC,KACAC,MACAC;IAEA,IAAI,CAACD,QAAQ,CAACD,KAAK;QACjB,OAAOE;IACT;IAEA,IAAIC,SAAkBH;IAEtB,KAAK,MAAMI,WAAWH,KAAKI,KAAK,CAAC,KAAM;QACrC,IAAIF,WAAW,QAAQ,OAAOA,WAAW,YAAY,CAACG,OAAOC,MAAM,CAACJ,QAAQC,UAAU;YACpF,OAAOF;QACT;QAEAC,SAAS,AAACA,MAAkC,CAACC,QAAQ;IACvD;IAEA,OAAOD,WAAWK,YAAYN,eAAiBC;AACjD,EAAC"}

package/dist/utilities/getRequestOrigin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getRequestOrigin.d.ts","sourceRoot":"","sources":["../../src/utilities/getRequestOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AA8BvD;;GAEG;AACH,eAAO,MAAM,gBAAgB,qBAG1B;IACD,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC,CAAA;IAC5D,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,CAAA;CACzD,KAAG,MA4BH,CAAA"}
+{"version":3,"file":"getRequestOrigin.d.ts","sourceRoot":"","sources":["../../src/utilities/getRequestOrigin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AA8BvD;;GAEG;AACH,eAAO,MAAM,gBAAgB,qBAG1B;IACD,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,GAAG,WAAW,CAAC,CAAA;IAC5D,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,SAAS,GAAG,KAAK,CAAC,CAAA;CACzD,KAAG,MA4BH,CAAA"}

package/dist/utilities/getRequestOrigin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utilities/getRequestOrigin.ts"],"sourcesContent":["import type { CORSConfig, SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nconst getTrustedOrigins = (config: Pick<SanitizedConfig, 'cors' | 'csrf'>): null | string[] => {\n  const origins = new Set<string>()\n\n  const { cors, csrf } = config\n\n  if (cors === '*') {\n    return null\n  }\n\n  if (Array.isArray(cors)) {\n    cors.forEach((o) => origins.add(o))\n  } else if (cors && typeof cors === 'object') {\n    const corsOrigins = (cors as CORSConfig).origins\n    if (corsOrigins === '*') {\n      return null\n    }\n    if (Array.isArray(corsOrigins)) {\n      corsOrigins.forEach((o) => origins.add(o))\n    }\n  }\n\n  if (Array.isArray(csrf)) {\n    csrf.forEach((o) => origins.add(o))\n  }\n\n  return [...origins]\n}\n\n/**\n * Returns a trusted request origin\n */\nexport const getRequestOrigin = ({\n  config,\n  req,\n}: {\n  config: Pick<SanitizedConfig, 'cors' | 'csrf' | 'serverURL'>\n  req: Pick<PayloadRequest, 'headers' | 'payload' | 'url'>\n}): string => {\n  if (config.serverURL !== null && config.serverURL !== '') {\n    return config.serverURL\n  }\n\n  let origin = ''\n  try {\n    const protocol = new URL(req.url!).protocol\n    const host = req.headers?.get('host')\n    if (host) {\n      origin = `${protocol}//${host}`\n    }\n  } catch {\n    // req.url is malformed; origin stays empty\n  }\n\n  const trustedOrigins = getTrustedOrigins(config)\n\n  if (trustedOrigins !== null && origin && trustedOrigins.includes(origin)) {\n    // Host header value is explicitly listed in the CORS/CSRF allowlist — safe to use.\n    return origin\n  }\n\n  req.payload.logger.warn(\n    `Request origin \"${origin}\" is not in the CORS/CSRF allowlist. Falling back to empty string as request origin. It is recommended to explicitly set the serverURL in the config to avoid this warning and ensure correct request origin is used.`,\n  )\n\n  return ''\n}\n"],"names":["getTrustedOrigins","config","origins","Set","cors","csrf","Array","isArray","forEach","o","add","corsOrigins","getRequestOrigin","req","serverURL","origin","protocol","URL","url","host","headers","get","trustedOrigins","includes","payload","logger","warn"],"mappings":"AAGA,MAAMA,oBAAoB,CAACC;IACzB,MAAMC,UAAU,IAAIC;IAEpB,MAAM,EAAEC,IAAI,EAAEC,IAAI,EAAE,GAAGJ;IAEvB,IAAIG,SAAS,KAAK;QAChB,OAAO;IACT;IAEA,IAAIE,MAAMC,OAAO,CAACH,OAAO;QACvBA,KAAKI,OAAO,CAAC,CAACC,IAAMP,QAAQQ,GAAG,CAACD;IAClC,OAAO,IAAIL,QAAQ,OAAOA,SAAS,UAAU;QAC3C,MAAMO,cAAc,AAACP,KAAoBF,OAAO;QAChD,IAAIS,gBAAgB,KAAK;YACvB,OAAO;QACT;QACA,IAAIL,MAAMC,OAAO,CAACI,cAAc;YAC9BA,YAAYH,OAAO,CAAC,CAACC,IAAMP,QAAQQ,GAAG,CAACD;QACzC;IACF;IAEA,IAAIH,MAAMC,OAAO,CAACF,OAAO;QACvBA,KAAKG,OAAO,CAAC,CAACC,IAAMP,QAAQQ,GAAG,CAACD;IAClC;IAEA,OAAO;WAAIP;KAAQ;AACrB;AAEA;;CAEC,GACD,OAAO,MAAMU,mBAAmB,CAAC,EAC/BX,MAAM,EACNY,GAAG,EAIJ;IACC,IAAIZ,OAAOa,SAAS,KAAK,QAAQb,OAAOa,SAAS,KAAK,IAAI;QACxD,OAAOb,OAAOa,SAAS;IACzB;IAEA,IAAIC,SAAS;IACb,IAAI;QACF,MAAMC,WAAW,IAAIC,IAAIJ,IAAIK,GAAG,EAAGF,QAAQ;QAC3C,MAAMG,OAAON,IAAIO,OAAO,EAAEC,IAAI;QAC9B,IAAIF,MAAM;YACRJ,SAAS,GAAGC,SAAS,EAAE,EAAEG,MAAM;QACjC;IACF,EAAE,OAAM;IACN,2CAA2C;IAC7C;IAEA,MAAMG,iBAAiBtB,kBAAkBC;IAEzC,IAAIqB,mBAAmB,QAAQP,UAAUO,eAAeC,QAAQ,CAACR,SAAS;QACxE,mFAAmF;QACnF,OAAOA;IACT;IAEAF,IAAIW,OAAO,CAACC,MAAM,CAACC,IAAI,CACrB,CAAC,gBAAgB,EAAEX,OAAO,qNAAqN,CAAC;IAGlP,OAAO;AACT,EAAC"}
+{"version":3,"sources":["../../src/utilities/getRequestOrigin.ts"],"sourcesContent":["import type { SanitizedConfig } from '../config/types.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nconst getTrustedOrigins = (config: Pick<SanitizedConfig, 'cors' | 'csrf'>): null | string[] => {\n  const origins = new Set<string>()\n\n  const { cors, csrf } = config\n\n  if (cors === '*') {\n    return null\n  }\n\n  if (Array.isArray(cors)) {\n    cors.forEach((o) => origins.add(o))\n  } else if (cors && typeof cors === 'object') {\n    const corsOrigins = cors.origins\n    if (corsOrigins === '*') {\n      return null\n    }\n    if (Array.isArray(corsOrigins)) {\n      corsOrigins.forEach((o) => origins.add(o))\n    }\n  }\n\n  if (Array.isArray(csrf)) {\n    csrf.forEach((o) => origins.add(o))\n  }\n\n  return [...origins]\n}\n\n/**\n * Returns a trusted request origin\n */\nexport const getRequestOrigin = ({\n  config,\n  req,\n}: {\n  config: Pick<SanitizedConfig, 'cors' | 'csrf' | 'serverURL'>\n  req: Pick<PayloadRequest, 'headers' | 'payload' | 'url'>\n}): string => {\n  if (config.serverURL !== null && config.serverURL !== '') {\n    return config.serverURL\n  }\n\n  let origin = ''\n  try {\n    const protocol = new URL(req.url!).protocol\n    const host = req.headers?.get('host')\n    if (host) {\n      origin = `${protocol}//${host}`\n    }\n  } catch {\n    // req.url is malformed; origin stays empty\n  }\n\n  const trustedOrigins = getTrustedOrigins(config)\n\n  if (trustedOrigins !== null && origin && trustedOrigins.includes(origin)) {\n    // Host header value is explicitly listed in the CORS/CSRF allowlist — safe to use.\n    return origin\n  }\n\n  req.payload.logger.warn(\n    `Request origin \"${origin}\" is not in the CORS/CSRF allowlist. Falling back to empty string as request origin. It is recommended to explicitly set the serverURL in the config to avoid this warning and ensure correct request origin is used.`,\n  )\n\n  return ''\n}\n"],"names":["getTrustedOrigins","config","origins","Set","cors","csrf","Array","isArray","forEach","o","add","corsOrigins","getRequestOrigin","req","serverURL","origin","protocol","URL","url","host","headers","get","trustedOrigins","includes","payload","logger","warn"],"mappings":"AAGA,MAAMA,oBAAoB,CAACC;IACzB,MAAMC,UAAU,IAAIC;IAEpB,MAAM,EAAEC,IAAI,EAAEC,IAAI,EAAE,GAAGJ;IAEvB,IAAIG,SAAS,KAAK;QAChB,OAAO;IACT;IAEA,IAAIE,MAAMC,OAAO,CAACH,OAAO;QACvBA,KAAKI,OAAO,CAAC,CAACC,IAAMP,QAAQQ,GAAG,CAACD;IAClC,OAAO,IAAIL,QAAQ,OAAOA,SAAS,UAAU;QAC3C,MAAMO,cAAcP,KAAKF,OAAO;QAChC,IAAIS,gBAAgB,KAAK;YACvB,OAAO;QACT;QACA,IAAIL,MAAMC,OAAO,CAACI,cAAc;YAC9BA,YAAYH,OAAO,CAAC,CAACC,IAAMP,QAAQQ,GAAG,CAACD;QACzC;IACF;IAEA,IAAIH,MAAMC,OAAO,CAACF,OAAO;QACvBA,KAAKG,OAAO,CAAC,CAACC,IAAMP,QAAQQ,GAAG,CAACD;IAClC;IAEA,OAAO;WAAIP;KAAQ;AACrB;AAEA;;CAEC,GACD,OAAO,MAAMU,mBAAmB,CAAC,EAC/BX,MAAM,EACNY,GAAG,EAIJ;IACC,IAAIZ,OAAOa,SAAS,KAAK,QAAQb,OAAOa,SAAS,KAAK,IAAI;QACxD,OAAOb,OAAOa,SAAS;IACzB;IAEA,IAAIC,SAAS;IACb,IAAI;QACF,MAAMC,WAAW,IAAIC,IAAIJ,IAAIK,GAAG,EAAGF,QAAQ;QAC3C,MAAMG,OAAON,IAAIO,OAAO,EAAEC,IAAI;QAC9B,IAAIF,MAAM;YACRJ,SAAS,GAAGC,SAAS,EAAE,EAAEG,MAAM;QACjC;IACF,EAAE,OAAM;IACN,2CAA2C;IAC7C;IAEA,MAAMG,iBAAiBtB,kBAAkBC;IAEzC,IAAIqB,mBAAmB,QAAQP,UAAUO,eAAeC,QAAQ,CAACR,SAAS;QACxE,mFAAmF;QACnF,OAAOA;IACT;IAEAF,IAAIW,OAAO,CAACC,MAAM,CAACC,IAAI,CACrB,CAAC,gBAAgB,EAAEX,OAAO,qNAAqN,CAAC;IAGlP,OAAO;AACT,EAAC"}

package/dist/utilities/getSafeRedirect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getSafeRedirect.d.ts","sourceRoot":"","sources":["../../src/utilities/getSafeRedirect.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,mDAIzB;IACD,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC9B,KAAG,MAmCH,CAAA"}
+{"version":3,"file":"getSafeRedirect.d.ts","sourceRoot":"","sources":["../../src/utilities/getSafeRedirect.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,mDAIzB;IACD,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC9B,KAAG,MAgDH,CAAA"}