payload 4.0.0-internal.e7d4ebc → 4.0.0-internal.ea6e8f8

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/types/index.ts"],"sourcesContent":["import type { I18n, TFunction } from '@payloadcms/translations'\nimport type DataLoader from 'dataloader'\nimport type { OptionalKeys, RequiredKeys } from 'ts-essentials'\nimport type { URL } from 'url'\n\nimport type { ServerAdapter } from '../admin/adapters/server.js'\nimport type {\n  DataFromCollectionSlug,\n  QueryDraftDataFromCollectionSlug,\n  TypeWithID,\n  TypeWithTimestamps,\n} from '../collections/config/types.js'\nimport type payload from '../index.js'\nimport type {\n  AuthenticatedUser,\n  CollectionSlug,\n  DataFromGlobalSlug,\n  GlobalSlug,\n  Payload,\n  RequestContext,\n  TypedCollectionJoins,\n  TypedCollectionSelect,\n  TypedFallbackLocale,\n  TypedLocale,\n} from '../index.js'\nimport type { File } from '../uploads/types.js'\nimport type { Operator } from './constants.js'\nexport type { TypeWithID } from '../collections/config/types.js'\nexport type { Payload } from '../index.js'\n\nexport interface PayloadRequestAPI {\n  GraphQL: true\n  local: true\n  REST: true\n}\n\nexport type CustomPayloadRequestProperties = {\n  context: RequestContext\n  /** The locale that should be used for a field when it is not translated to the requested locale */\n  fallbackLocale?: TypedFallbackLocale\n  i18n: I18n\n  /**\n   * The requested locale if specified\n   * Only available for localized collections\n   *\n   * Suppressing warning below as it is a valid use case - won't be an issue if generated types exist\n   */\n  // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents\n  locale?: 'all' | TypedLocale\n  /**\n   * The payload object\n   */\n  payload: typeof payload\n  /**\n   * The context in which the request is being made\n   */\n  payloadAPI: keyof PayloadRequestAPI\n  /** Optimized document loader */\n  payloadDataLoader: {\n    /**\n     * Wraps `payload.find` with a cache to deduplicate requests\n     * @experimental This is may be replaced by a more robust cache strategy in future versions\n     * By calling this method with the same arguments many times in one request, it will only be handled one time\n     * const result = await req.payloadDataLoader.find({\n     *  collection,\n     *  req,\n     *  where: findWhere,\n     * })\n     */\n    find: Payload['find']\n  } & DataLoader<string, TypeWithID>\n  /** Resized versions of the image that was uploaded during this request */\n  payloadUploadSizes?: Record<string, Buffer>\n  /** Query params on the request */\n  query: Record<string, unknown>\n  /** Any response headers that are required to be set when a response is sent */\n  responseHeaders?: Headers\n  /** The route parameters\n   * @example\n   * /:collection/:id -> /posts/123\n   * { collection: 'posts', id: '123' }\n   */\n  routeParams?: Record<string, unknown>\n  /**\n   * Framework abstraction for server-only navigation, cookies, and headers APIs.\n   * Populated by the framework adapter (e.g. `@payloadcms/next`). Plugins that\n   * have access to `req` should call methods here (`req.server.unauthorized()`,\n   * `req.server.redirect(...)`) instead of importing from `next/navigation` or\n   * `next/headers` directly. Optional because non-framework contexts (jobs,\n   * scripts, tests) construct requests without a server adapter.\n   */\n  server?: ServerAdapter\n  /** Translate function - duplicate of i18n.t */\n  t: TFunction\n  /**\n   * Identifier for the database transaction for interactions in a single, all-or-nothing operation.\n   * Can also be used to ensure consistency when multiple operations try to create a transaction concurrently on the same request.\n   */\n  transactionID?: number | Promise<number | string> | string\n  /** The signed-in user */\n  user: AuthenticatedUser | null\n} & Pick<\n  URL,\n  'hash' | 'host' | 'href' | 'origin' | 'pathname' | 'port' | 'protocol' | 'search' | 'searchParams'\n>\ntype PayloadRequestData = {\n  /**\n   * Data from the request body\n   *\n   * Within Payload operations, i.e. hooks, data will be there\n   * BUT in custom endpoints it will not be, you will need to\n   * use either:\n   *  1. `const data = await req.json()`\n   *\n   *  2. import { addDataAndFileToRequest } from 'payload'\n   *    `await addDataAndFileToRequest(req)`\n   *\n   * You should not expect this object to be the document data. It is the request data.\n   * */\n  data?: JsonObject\n  /** The file on the request, same rules apply as the `data` property */\n  file?: {\n    uploadReference?: unknown\n  } & File\n  /** All files from multipart form data, keyed by field name */\n  files?: Record<string, File | File[]>\n}\nexport interface PayloadRequest\n  extends CustomPayloadRequestProperties,\n    Partial<Request>,\n    PayloadRequestData {\n  headers: Request['headers']\n}\n\nexport type { Operator }\n\n// Makes it so things like passing new Date() will error\nexport type JsonValue = JsonArray | JsonObject | unknown //Date | JsonArray | JsonObject | boolean | null | number | string // TODO: Evaluate proper, strong type for this\n\nexport type JsonArray = Array<JsonValue>\n\nexport interface JsonObject {\n  [key: string]: any\n}\n\nexport type WhereField = {\n  // any json-serializable value\n  [key in Operator]?: JsonValue\n}\n\nexport type Where = {\n  [key: string]: Where[] | WhereField\n  // @ts-expect-error - vestiges of when tsconfig was not strict. Feel free to improve\n  and?: Where[]\n  // @ts-expect-error - vestiges of when tsconfig was not strict. Feel free to improve\n  or?: Where[]\n}\n\nexport type Sort = Array<string> | string\n\ntype SerializableValue = boolean | number | object | string\nexport type DefaultValue =\n  | ((args: {\n      locale?: TypedLocale\n      req: PayloadRequest\n      user: PayloadRequest['user']\n    }) => SerializableValue)\n  | SerializableValue\n\n/**\n * Applies pagination for join fields for including collection relationships\n */\nexport type JoinQuery<TSlug extends CollectionSlug = string> =\n  TypedCollectionJoins[TSlug] extends Record<string, string>\n    ?\n        | false\n        | Partial<{\n            [K in keyof TypedCollectionJoins[TSlug]]:\n              | {\n                  count?: boolean\n                  limit?: number\n                  page?: number\n                  sort?: string\n                  where?: Where\n                }\n              | false\n          }>\n    : never\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type Document = any\n\nexport type Operation = 'create' | 'delete' | 'read' | 'update'\nexport type VersionOperations = 'readVersions'\nexport type AuthOperations = 'unlock'\nexport type AllOperations = AuthOperations | Operation | VersionOperations\n\nexport function docHasTimestamps(doc: any): doc is TypeWithTimestamps {\n  return doc?.createdAt && doc?.updatedAt\n}\n\nexport type IfAny<T, Y, N> = 0 extends 1 & T ? Y : N // This is a commonly used trick to detect 'any'\nexport type IsAny<T> = IfAny<T, true, false>\nexport type ReplaceAny<T, DefaultType> = IsAny<T> extends true ? DefaultType : T\n\nexport type SelectIncludeType = {\n  [k: string]: SelectIncludeType | true\n}\n\nexport type SelectExcludeType = {\n  [k: string]: false | SelectExcludeType\n}\n\nexport type SelectMode = 'exclude' | 'include'\n\nexport type SelectType = SelectExcludeType | SelectIncludeType\n\n/**\n * Operations that invoke an entity-level `select` function.\n *\n * Narrower than `HookOperationType`: `select` runs only for read- and\n * write-path operations that materialize a document (`create`, `delete`,\n * `read`, `restoreVersion`, `update`). Operations like `autosave`, `count`,\n * `countVersions`, `forgotPassword`, `login`, `readDistinct`, `refresh`, and\n * `resetPassword` do not invoke `select` and are intentionally excluded.\n */\nexport type SelectFnOperation = 'create' | 'delete' | 'read' | 'restoreVersion' | 'update'\n\nexport type SelectFnArgs = {\n  operation: SelectFnOperation\n  req: PayloadRequest\n  /** The caller's `select` arg, or `undefined` if not provided. */\n  select?: SelectType\n}\n\nexport type SelectFn<TSelect extends SelectType = SelectType> = (\n  args: SelectFnArgs,\n) => TSelect | undefined\n\n/**\n * Shared shape for the entity-level `select` config used by Collections and Globals.\n * The JSDoc on the `select` property is the single source of truth — pick from this\n * type when defining the config:\n *\n *   & Pick<WithSelectFn<...>, 'select'>\n */\nexport type WithSelectFn<TSelect extends SelectType = SelectType> = {\n  /**\n   * Entity-level Select API configuration.\n   *\n   * A function that receives the current request context (`operation`, `req`,\n   * the caller's `select`) and returns the final `select` to apply, replacing\n   * the caller's. Return `undefined` to leave the caller's `select` unchanged.\n   *\n   * Useful to dynamically modify the caller's selection based on the request context:\n   *  - Forcing a field to be populated for reference within hooks / access control.\n   *  - Differentiating between API requests and admin panel requests, to optimize\n   *    the amount of data being queried in each case.\n   *\n   * Note: per-document data is not available — this runs before the read.\n   *\n   * @see https://payloadcms.com/docs/queries/select\n   */\n  select?: SelectFn<TSelect>\n}\n\nexport type ApplyDisableErrors<T, DisableErrors = false> = false extends DisableErrors\n  ? T\n  : null | T\n\nexport type TransformDataWithSelect<\n  Data extends Record<string, any>,\n  Select extends SelectType,\n> = Select extends never\n  ? Data\n  : string extends keyof Select\n    ? Data\n    : // START Handle types when they aren't generated\n      // For example in any package in this repository outside of tests / plugins\n      // This stil gives us autocomplete when using include select mode, i.e select: {title :true} returns type {title: any, id: string | number}\n      string extends keyof Omit<Data, 'id'>\n      ? Select extends SelectIncludeType\n        ? {\n            [K in Data extends TypeWithID ? 'id' | keyof Select : keyof Select]: K extends 'id'\n              ? number | string\n              : unknown\n          }\n        : Data\n      : // END Handle types when they aren't generated\n        // Handle include mode\n        Select extends SelectIncludeType\n        ? {\n            [K in keyof Data as K extends keyof Select\n              ? Select[K] extends object | true\n                ? K\n                : never\n              : // select 'id' always\n                K extends 'id'\n                ? K\n                : never]: Data[K]\n          }\n        : // Handle exclude mode\n          {\n            [K in keyof Data as K extends keyof Select\n              ? Select[K] extends object | undefined\n                ? K\n                : never\n              : K]: Data[K]\n          }\n\nexport type TransformCollectionWithSelect<\n  TSlug extends CollectionSlug,\n  TSelect extends SelectType,\n> = TSelect extends SelectType\n  ? TransformDataWithSelect<DataFromCollectionSlug<TSlug>, TSelect>\n  : DataFromCollectionSlug<TSlug>\n\nexport type DraftTransformCollectionWithSelect<\n  TSlug extends CollectionSlug,\n  TSelect extends SelectType,\n> = TSelect extends SelectType\n  ? TransformDataWithSelect<QueryDraftDataFromCollectionSlug<TSlug>, TSelect>\n  : QueryDraftDataFromCollectionSlug<TSlug>\n\nexport type TransformGlobalWithSelect<\n  TSlug extends GlobalSlug,\n  TSelect extends SelectType,\n> = TSelect extends SelectType\n  ? TransformDataWithSelect<DataFromGlobalSlug<TSlug>, TSelect>\n  : DataFromGlobalSlug<TSlug>\n\nexport type PopulateType = Partial<TypedCollectionSelect>\n\nexport type ResolvedFilterOptions = { [collection: string]: Where }\n\nexport type PickPreserveOptional<T, K extends keyof T> = Partial<\n  Pick<T, Extract<K, OptionalKeys<T>>>\n> &\n  Pick<T, Extract<K, RequiredKeys<T>>>\n\nexport type MaybePromise<T> = Promise<T> | T\n"],"names":["docHasTimestamps","doc","createdAt","updatedAt"],"mappings":"AAqMA,OAAO,SAASA,iBAAiBC,GAAQ;IACvC,OAAOA,KAAKC,aAAaD,KAAKE;AAChC"}
+{"version":3,"sources":["../../src/types/index.ts"],"sourcesContent":["import type { I18n, TFunction } from '@payloadcms/translations'\nimport type DataLoader from 'dataloader'\nimport type { OptionalKeys, RequiredKeys } from 'ts-essentials'\nimport type { URL } from 'url'\n\nimport type { ServerAdapter } from '../admin/adapters/server.js'\nimport type {\n  DataFromCollectionSlug,\n  QueryDraftDataFromCollectionSlug,\n  TypeWithID,\n  TypeWithTimestamps,\n} from '../collections/config/types.js'\nimport type payload from '../index.js'\nimport type {\n  AuthenticatedUser,\n  CollectionSlug,\n  DataFromGlobalSlug,\n  GlobalSlug,\n  Payload,\n  RequestContext,\n  TypedCollectionJoins,\n  TypedCollectionSelect,\n  TypedFallbackLocale,\n  TypedLocale,\n} from '../index.js'\nimport type { File } from '../uploads/types.js'\nimport type { HasManyRelationshipOperator, Operator } from './constants.js'\nexport type { TypeWithID } from '../collections/config/types.js'\nexport type { Payload } from '../index.js'\n\nexport interface PayloadRequestAPI {\n  GraphQL: true\n  local: true\n  REST: true\n}\n\nexport type CustomPayloadRequestProperties = {\n  /**\n   * The active content branch, or `'main'`.\n   *\n   * Resolved once per request from, in order: an explicit Local API argument,\n   * the `branch` query param, the user's stored `branch` preference, then\n   * `'main'` — the same shape as `locale`.\n   *\n   * Available inside access control functions, so a collection can allow on a\n   * branch what it denies on main.\n   */\n  branch?: string\n  context: RequestContext\n  /** The locale that should be used for a field when it is not translated to the requested locale */\n  fallbackLocale?: TypedFallbackLocale\n  /**\n   * Set by Payload only while running a collection's `read` access function for a\n   * dynamic file transformation request. Restored to its prior value immediately\n   * after that access check completes; never set for ordinary reads.\n   */\n  fileTransform?: true\n  i18n: I18n\n  /**\n   * The requested locale if specified\n   * Only available for localized collections\n   *\n   * Suppressing warning below as it is a valid use case - won't be an issue if generated types exist\n   */\n  // eslint-disable-next-line @typescript-eslint/no-redundant-type-constituents\n  locale?: 'all' | TypedLocale\n  /** The internal operation scope for this request. */\n  operation?: 'validate' | Operation\n  /**\n   * The payload object\n   */\n  payload: typeof payload\n  /**\n   * The context in which the request is being made\n   */\n  payloadAPI: keyof PayloadRequestAPI\n  /** Optimized document loader */\n  payloadDataLoader: {\n    /**\n     * Wraps `payload.find` with a cache to deduplicate requests\n     * @experimental This is may be replaced by a more robust cache strategy in future versions\n     * By calling this method with the same arguments many times in one request, it will only be handled one time\n     * const result = await req.payloadDataLoader.find({\n     *  collection,\n     *  req,\n     *  where: findWhere,\n     * })\n     */\n    find: Payload['find']\n  } & DataLoader<string, TypeWithID>\n  /** Resized versions of the image that was uploaded during this request */\n  payloadUploadSizes?: Record<string, Buffer>\n  /** Query params on the request */\n  query: Record<string, unknown>\n  /** Any response headers that are required to be set when a response is sent */\n  responseHeaders?: Headers\n  /** The route parameters\n   * @example\n   * /:collection/:id -> /posts/123\n   * { collection: 'posts', id: '123' }\n   */\n  routeParams?: Record<string, unknown>\n  /**\n   * Framework abstraction for server-only navigation, cookies, and headers APIs.\n   * Populated by the framework adapter (e.g. `@payloadcms/next`). Plugins that\n   * have access to `req` should call methods here (`req.server.unauthorized()`,\n   * `req.server.redirect(...)`) instead of importing from `next/navigation` or\n   * `next/headers` directly. Optional because non-framework contexts (jobs,\n   * scripts, tests) construct requests without a server adapter.\n   */\n  server?: ServerAdapter\n  /** Translate function - duplicate of i18n.t */\n  t: TFunction\n  /**\n   * Identifier for the database transaction for interactions in a single, all-or-nothing operation.\n   * Can also be used to ensure consistency when multiple operations try to create a transaction concurrently on the same request.\n   */\n  transactionID?: number | Promise<number | string> | string\n  /** The signed-in user */\n  user: AuthenticatedUser | null\n} & Pick<\n  URL,\n  'hash' | 'host' | 'href' | 'origin' | 'pathname' | 'port' | 'protocol' | 'search' | 'searchParams'\n>\ntype PayloadRequestData = {\n  /**\n   * Data from the request body\n   *\n   * Within Payload operations, i.e. hooks, data will be there\n   * BUT in custom endpoints it will not be, you will need to\n   * use either:\n   *  1. `const data = await req.json()`\n   *\n   *  2. import { addDataAndFileToRequest } from 'payload'\n   *    `await addDataAndFileToRequest(req)`\n   *\n   * You should not expect this object to be the document data. It is the request data.\n   * */\n  data?: JsonObject\n  /** The file on the request, same rules apply as the `data` property */\n  file?: {\n    uploadReference?: unknown\n  } & File\n  /** All files from multipart form data, keyed by field name */\n  files?: Record<string, File | File[]>\n}\nexport interface PayloadRequest\n  extends CustomPayloadRequestProperties,\n    Partial<Request>,\n    PayloadRequestData {\n  headers: Request['headers']\n  /** The active Payload operation. */\n  operation?: Operation\n}\n\nexport type { HasManyRelationshipOperator, Operator }\n\n// Makes it so things like passing new Date() will error\nexport type JsonValue = JsonArray | JsonObject | unknown //Date | JsonArray | JsonObject | boolean | null | number | string // TODO: Evaluate proper, strong type for this\n\nexport type JsonArray = Array<JsonValue>\n\nexport interface JsonObject {\n  [key: string]: any\n}\n\nexport type WhereField = {\n  // any json-serializable value, including a nested query for supported relationship operators\n  [key in Operator]?: JsonValue\n}\n\nexport type Where = {\n  [key: string]: Where[] | WhereField\n  // @ts-expect-error - vestiges of when tsconfig was not strict. Feel free to improve\n  and?: Where[]\n  // @ts-expect-error - vestiges of when tsconfig was not strict. Feel free to improve\n  or?: Where[]\n}\n\nexport type Sort = Array<string> | string\n\ntype SerializableValue = boolean | number | object | string\nexport type DefaultValue =\n  | ((args: {\n      locale?: TypedLocale\n      req: PayloadRequest\n      user: PayloadRequest['user']\n    }) => Promise<SerializableValue> | SerializableValue)\n  | SerializableValue\n\n/**\n * Applies pagination for join fields for including collection relationships\n */\nexport type JoinQuery<TSlug extends CollectionSlug = string> =\n  TypedCollectionJoins[TSlug] extends Record<string, string>\n    ?\n        | false\n        | Partial<{\n            [K in keyof TypedCollectionJoins[TSlug]]:\n              | {\n                  count?: boolean\n                  limit?: number\n                  page?: number\n                  sort?: string\n                  where?: Where\n                }\n              | false\n          }>\n    : never\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type Document = any\n\n/**\n * Operations exposed to access control and request lifecycle functions.\n *\n * On-demand validation uses the first-class `validate` value rather than substituting `create`\n * or `update`.\n */\nexport type Operation = 'create' | 'delete' | 'read' | 'update' | 'validate'\nexport type FieldOperation = Exclude<Operation, 'delete'>\nexport type BeforeValidateOperation = Extract<FieldOperation, 'create' | 'update' | 'validate'>\nexport type VersionOperations = 'readVersions'\nexport type AuthOperations = 'unlock'\nexport type AllOperations = AuthOperations | Operation | VersionOperations\n\nexport function docHasTimestamps(doc: any): doc is TypeWithTimestamps {\n  return doc?.createdAt && doc?.updatedAt\n}\n\nexport type IfAny<T, Y, N> = 0 extends 1 & T ? Y : N // This is a commonly used trick to detect 'any'\nexport type IsAny<T> = IfAny<T, true, false>\nexport type ReplaceAny<T, DefaultType> = IsAny<T> extends true ? DefaultType : T\n\nexport type SelectIncludeType = {\n  [k: string]: SelectIncludeType | true\n}\n\nexport type SelectExcludeType = {\n  [k: string]: false | SelectExcludeType\n}\n\nexport type SelectMode = 'exclude' | 'include'\n\nexport type SelectType = SelectExcludeType | SelectIncludeType\n\n/**\n * Operations that invoke an entity-level `select` function.\n *\n * Narrower than `HookOperationType`: `select` runs only for read- and\n * write-path operations that materialize a document (`create`, `delete`,\n * `read`, `restoreVersion`, `update`). Operations like `autosave`, `count`,\n * `countVersions`, `forgotPassword`, `login`, `readDistinct`, `refresh`, and\n * `resetPassword` do not invoke `select` and are intentionally excluded.\n */\nexport type SelectFnOperation = 'create' | 'delete' | 'read' | 'restoreVersion' | 'update'\n\nexport type SelectFnArgs = {\n  operation: SelectFnOperation\n  req: PayloadRequest\n  /** The caller's `select` arg, or `undefined` if not provided. */\n  select?: SelectType\n}\n\nexport type SelectFn<TSelect extends SelectType = SelectType> = (\n  args: SelectFnArgs,\n) => TSelect | undefined\n\n/**\n * Shared shape for the entity-level `select` config used by Collections and Globals.\n * The JSDoc on the `select` property is the single source of truth — pick from this\n * type when defining the config:\n *\n *   & Pick<WithSelectFn<...>, 'select'>\n */\nexport type WithSelectFn<TSelect extends SelectType = SelectType> = {\n  /**\n   * Entity-level Select API configuration.\n   *\n   * A function that receives the current request context (`operation`, `req`,\n   * the caller's `select`) and returns the final `select` to apply, replacing\n   * the caller's. Return `undefined` to leave the caller's `select` unchanged.\n   *\n   * Useful to dynamically modify the caller's selection based on the request context:\n   *  - Forcing a field to be populated for reference within hooks / access control.\n   *  - Differentiating between API requests and admin panel requests, to optimize\n   *    the amount of data being queried in each case.\n   *\n   * Note: per-document data is not available — this runs before the read.\n   *\n   * @see https://payloadcms.com/docs/queries/select\n   */\n  select?: SelectFn<TSelect>\n}\n\nexport type ApplyDisableErrors<T, DisableErrors = false> = false extends DisableErrors\n  ? T\n  : null | T\n\nexport type TransformDataWithSelect<\n  Data extends Record<string, any>,\n  Select extends SelectType,\n> = Select extends never\n  ? Data\n  : string extends keyof Select\n    ? Data\n    : // START Handle types when they aren't generated\n      // For example in any package in this repository outside of tests / plugins\n      // This stil gives us autocomplete when using include select mode, i.e select: {title :true} returns type {title: any, id: string | number}\n      string extends keyof Omit<Data, 'id'>\n      ? Select extends SelectIncludeType\n        ? {\n            [K in Data extends TypeWithID ? 'id' | keyof Select : keyof Select]: K extends 'id'\n              ? number | string\n              : unknown\n          }\n        : Data\n      : // END Handle types when they aren't generated\n        // Handle include mode\n        Select extends SelectIncludeType\n        ? {\n            [K in keyof Data as K extends keyof Select\n              ? Select[K] extends object | true\n                ? K\n                : never\n              : // select 'id' always\n                K extends 'id'\n                ? K\n                : never]: Data[K]\n          }\n        : // Handle exclude mode\n          {\n            [K in keyof Data as K extends keyof Select\n              ? Select[K] extends object | undefined\n                ? K\n                : never\n              : K]: Data[K]\n          }\n\nexport type TransformCollectionWithSelect<\n  TSlug extends CollectionSlug,\n  TSelect extends SelectType,\n> = TSelect extends SelectType\n  ? TransformDataWithSelect<DataFromCollectionSlug<TSlug>, TSelect>\n  : DataFromCollectionSlug<TSlug>\n\nexport type DraftTransformCollectionWithSelect<\n  TSlug extends CollectionSlug,\n  TSelect extends SelectType,\n> = TSelect extends SelectType\n  ? TransformDataWithSelect<QueryDraftDataFromCollectionSlug<TSlug>, TSelect>\n  : QueryDraftDataFromCollectionSlug<TSlug>\n\nexport type TransformGlobalWithSelect<\n  TSlug extends GlobalSlug,\n  TSelect extends SelectType,\n> = TSelect extends SelectType\n  ? TransformDataWithSelect<DataFromGlobalSlug<TSlug>, TSelect>\n  : DataFromGlobalSlug<TSlug>\n\nexport type PopulateType = Partial<TypedCollectionSelect>\n\nexport type { SharedLocalAPIOptions } from './operations.js'\n\nexport type ResolvedFilterOptions = { [collection: string]: Where }\n\nexport type PickPreserveOptional<T, K extends keyof T> = Partial<\n  Pick<T, Extract<K, OptionalKeys<T>>>\n> &\n  Pick<T, Extract<K, RequiredKeys<T>>>\n\nexport type MaybePromise<T> = Promise<T> | T\n"],"names":["docHasTimestamps","doc","createdAt","updatedAt"],"mappings":"AAkOA,OAAO,SAASA,iBAAiBC,GAAQ;IACvC,OAAOA,KAAKC,aAAaD,KAAKE;AAChC"}

package/dist/types/operations.d.ts

@@ -0,0 +1,9 @@
+export type SharedLocalAPIOptions = {
+    /**
+     * Set to `true` to skip access control for this operation.
+     *
+     * @default false
+     */
+    overrideAccess?: boolean;
+};
+//# sourceMappingURL=operations.d.ts.map

package/dist/types/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/types/operations.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAAG;IAClC;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB,CAAA"}

package/dist/types/operations.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=operations.js.map

package/dist/types/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/operations.ts"],"sourcesContent":["export type SharedLocalAPIOptions = {\n  /**\n   * Set to `true` to skip access control for this operation.\n   *\n   * @default false\n   */\n  overrideAccess?: boolean\n}\n"],"names":[],"mappings":"AAAA,WAOC"}

package/dist/types/validation.d.ts

@@ -0,0 +1,18 @@
+import type { ValidationFieldError } from '../errors/ValidationError.js';
+/**
+ * The result of validating a collection or global document candidate without persisting it.
+ *
+ * Field validation failures are returned in this result. Access denials, invalid arguments,
+ * missing documents, and other lifecycle errors throw instead.
+ */
+export type ValidationResult = {
+    /**
+     * Field validation errors. Errors from localized passes are tagged with the locale that failed;
+     * non-localized validation may omit the locale.
+     * Empty when {@link valid} is `true`.
+     */
+    errors: ValidationFieldError[];
+    /** Whether the candidate passed field validation in every selected locale. */
+    valid: boolean;
+};
+//# sourceMappingURL=validation.d.ts.map

package/dist/types/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/types/validation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AAExE;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;OAIG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAA;IAC9B,8EAA8E;IAC9E,KAAK,EAAE,OAAO,CAAA;CACf,CAAA"}

package/dist/types/validation.js

@@ -0,0 +1,8 @@
+/**
+ * The result of validating a collection or global document candidate without persisting it.
+ *
+ * Field validation failures are returned in this result. Access denials, invalid arguments,
+ * missing documents, and other lifecycle errors throw instead.
+ */ export { };
+
+//# sourceMappingURL=validation.js.map

package/dist/types/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/types/validation.ts"],"sourcesContent":["import type { ValidationFieldError } from '../errors/ValidationError.js'\n\n/**\n * The result of validating a collection or global document candidate without persisting it.\n *\n * Field validation failures are returned in this result. Access denials, invalid arguments,\n * missing documents, and other lifecycle errors throw instead.\n */\nexport type ValidationResult = {\n  /**\n   * Field validation errors. Errors from localized passes are tagged with the locale that failed;\n   * non-localized validation may omit the locale.\n   * Empty when {@link valid} is `true`.\n   */\n  errors: ValidationFieldError[]\n  /** Whether the candidate passed field validation in every selected locale. */\n  valid: boolean\n}\n"],"names":[],"mappings":"AAEA;;;;;CAKC,GACD,WASC"}

package/dist/uploads/appendBranchToFileURL.d.ts

@@ -0,0 +1,6 @@
+import type { PayloadRequest } from '../types/index.js';
+export declare const appendBranchToFileURL: ({ req, url, }: {
+    req: PayloadRequest;
+    url: null | string;
+}) => null | string;
+//# sourceMappingURL=appendBranchToFileURL.d.ts.map

package/dist/uploads/appendBranchToFileURL.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appendBranchToFileURL.d.ts","sourceRoot":"","sources":["../../src/uploads/appendBranchToFileURL.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,eAAO,MAAM,qBAAqB,kBAG/B;IACD,GAAG,EAAE,cAAc,CAAA;IACnB,GAAG,EAAE,IAAI,GAAG,MAAM,CAAA;CACnB,KAAG,IAAI,GAAG,MA2BV,CAAA"}

package/dist/uploads/appendBranchToFileURL.js

@@ -0,0 +1,24 @@
+import { resolveBranch } from '../branching/resolveBranch.js';
+import { MAIN_BRANCH } from '../branching/types.js';
+export const appendBranchToFileURL = ({ req, url })=>{
+    const branch = resolveBranch(req);
+    if (!url || branch === MAIN_BRANCH) {
+        return url;
+    }
+    const serverURL = req.payload.config.serverURL;
+    const isRelativeURL = url.startsWith('/') && !url.startsWith('//');
+    try {
+        const parsedURL = new URL(url, serverURL || 'http://payload.local');
+        if (!isRelativeURL) {
+            if (!serverURL || parsedURL.origin !== new URL(serverURL).origin) {
+                return url;
+            }
+        }
+        parsedURL.searchParams.set('branch', branch);
+        return isRelativeURL ? `${parsedURL.pathname}${parsedURL.search}${parsedURL.hash}` : parsedURL.toString();
+    } catch  {
+        return url;
+    }
+};
+
+//# sourceMappingURL=appendBranchToFileURL.js.map

package/dist/uploads/appendBranchToFileURL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/appendBranchToFileURL.ts"],"sourcesContent":["import type { PayloadRequest } from '../types/index.js'\n\nimport { resolveBranch } from '../branching/resolveBranch.js'\nimport { MAIN_BRANCH } from '../branching/types.js'\n\nexport const appendBranchToFileURL = ({\n  req,\n  url,\n}: {\n  req: PayloadRequest\n  url: null | string\n}): null | string => {\n  const branch = resolveBranch(req)\n\n  if (!url || branch === MAIN_BRANCH) {\n    return url\n  }\n\n  const serverURL = req.payload.config.serverURL\n  const isRelativeURL = url.startsWith('/') && !url.startsWith('//')\n\n  try {\n    const parsedURL = new URL(url, serverURL || 'http://payload.local')\n\n    if (!isRelativeURL) {\n      if (!serverURL || parsedURL.origin !== new URL(serverURL).origin) {\n        return url\n      }\n    }\n\n    parsedURL.searchParams.set('branch', branch)\n\n    return isRelativeURL\n      ? `${parsedURL.pathname}${parsedURL.search}${parsedURL.hash}`\n      : parsedURL.toString()\n  } catch {\n    return url\n  }\n}\n"],"names":["resolveBranch","MAIN_BRANCH","appendBranchToFileURL","req","url","branch","serverURL","payload","config","isRelativeURL","startsWith","parsedURL","URL","origin","searchParams","set","pathname","search","hash","toString"],"mappings":"AAEA,SAASA,aAAa,QAAQ,gCAA+B;AAC7D,SAASC,WAAW,QAAQ,wBAAuB;AAEnD,OAAO,MAAMC,wBAAwB,CAAC,EACpCC,GAAG,EACHC,GAAG,EAIJ;IACC,MAAMC,SAASL,cAAcG;IAE7B,IAAI,CAACC,OAAOC,WAAWJ,aAAa;QAClC,OAAOG;IACT;IAEA,MAAME,YAAYH,IAAII,OAAO,CAACC,MAAM,CAACF,SAAS;IAC9C,MAAMG,gBAAgBL,IAAIM,UAAU,CAAC,QAAQ,CAACN,IAAIM,UAAU,CAAC;IAE7D,IAAI;QACF,MAAMC,YAAY,IAAIC,IAAIR,KAAKE,aAAa;QAE5C,IAAI,CAACG,eAAe;YAClB,IAAI,CAACH,aAAaK,UAAUE,MAAM,KAAK,IAAID,IAAIN,WAAWO,MAAM,EAAE;gBAChE,OAAOT;YACT;QACF;QAEAO,UAAUG,YAAY,CAACC,GAAG,CAAC,UAAUV;QAErC,OAAOI,gBACH,GAAGE,UAAUK,QAAQ,GAAGL,UAAUM,MAAM,GAAGN,UAAUO,IAAI,EAAE,GAC3DP,UAAUQ,QAAQ;IACxB,EAAE,OAAM;QACN,OAAOf;IACT;AACF,EAAC"}

package/dist/uploads/assertClientUploadAccess.d.ts

@@ -0,0 +1,7 @@
+import type { PayloadRequest } from '../types/index.js';
+/** Checks collection write permissions before an adapter grants access to upload file bytes. */
+export declare const assertClientUploadAccess: ({ collectionSlug, req, }: {
+    collectionSlug: string;
+    req: PayloadRequest;
+}) => Promise<void>;
+//# sourceMappingURL=assertClientUploadAccess.d.ts.map

package/dist/uploads/assertClientUploadAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertClientUploadAccess.d.ts","sourceRoot":"","sources":["../../src/uploads/assertClientUploadAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,gGAAgG;AAChG,eAAO,MAAM,wBAAwB,6BAGlC;IACD,cAAc,EAAE,MAAM,CAAA;IACtB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,IAAI,CA4Bf,CAAA"}

package/dist/uploads/assertClientUploadAccess.js

@@ -0,0 +1,29 @@
+import { executeAccess } from '../auth/executeAccess.js';
+import { Forbidden } from '../errors/Forbidden.js';
+/** Checks collection write permissions before an adapter grants access to upload file bytes. */ export const assertClientUploadAccess = async ({ collectionSlug, req })=>{
+    if (!req.user) {
+        throw new Forbidden(req.t);
+    }
+    const collectionConfig = req.payload.collections[collectionSlug]?.config;
+    if (!collectionConfig) {
+        throw new Forbidden(req.t);
+    }
+    const canCreate = await executeAccess({
+        slug: collectionSlug,
+        disableErrors: true,
+        req
+    }, collectionConfig.access.create);
+    if (canCreate) {
+        return;
+    }
+    const canUpdate = await executeAccess({
+        slug: collectionSlug,
+        disableErrors: true,
+        req
+    }, collectionConfig.access.update);
+    if (!canUpdate) {
+        throw new Forbidden(req.t);
+    }
+};
+
+//# sourceMappingURL=assertClientUploadAccess.js.map

package/dist/uploads/assertClientUploadAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/assertClientUploadAccess.ts"],"sourcesContent":["import type { PayloadRequest } from '../types/index.js'\n\nimport { executeAccess } from '../auth/executeAccess.js'\nimport { Forbidden } from '../errors/Forbidden.js'\n\n/** Checks collection write permissions before an adapter grants access to upload file bytes. */\nexport const assertClientUploadAccess = async ({\n  collectionSlug,\n  req,\n}: {\n  collectionSlug: string\n  req: PayloadRequest\n}): Promise<void> => {\n  if (!req.user) {\n    throw new Forbidden(req.t)\n  }\n\n  const collectionConfig = req.payload.collections[collectionSlug]?.config\n\n  if (!collectionConfig) {\n    throw new Forbidden(req.t)\n  }\n\n  const canCreate = await executeAccess(\n    { slug: collectionSlug, disableErrors: true, req },\n    collectionConfig.access.create,\n  )\n\n  if (canCreate) {\n    return\n  }\n\n  const canUpdate = await executeAccess(\n    { slug: collectionSlug, disableErrors: true, req },\n    collectionConfig.access.update,\n  )\n\n  if (!canUpdate) {\n    throw new Forbidden(req.t)\n  }\n}\n"],"names":["executeAccess","Forbidden","assertClientUploadAccess","collectionSlug","req","user","t","collectionConfig","payload","collections","config","canCreate","slug","disableErrors","access","create","canUpdate","update"],"mappings":"AAEA,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,yBAAwB;AAElD,8FAA8F,GAC9F,OAAO,MAAMC,2BAA2B,OAAO,EAC7CC,cAAc,EACdC,GAAG,EAIJ;IACC,IAAI,CAACA,IAAIC,IAAI,EAAE;QACb,MAAM,IAAIJ,UAAUG,IAAIE,CAAC;IAC3B;IAEA,MAAMC,mBAAmBH,IAAII,OAAO,CAACC,WAAW,CAACN,eAAe,EAAEO;IAElE,IAAI,CAACH,kBAAkB;QACrB,MAAM,IAAIN,UAAUG,IAAIE,CAAC;IAC3B;IAEA,MAAMK,YAAY,MAAMX,cACtB;QAAEY,MAAMT;QAAgBU,eAAe;QAAMT;IAAI,GACjDG,iBAAiBO,MAAM,CAACC,MAAM;IAGhC,IAAIJ,WAAW;QACb;IACF;IAEA,MAAMK,YAAY,MAAMhB,cACtB;QAAEY,MAAMT;QAAgBU,eAAe;QAAMT;IAAI,GACjDG,iBAAiBO,MAAM,CAACG,MAAM;IAGhC,IAAI,CAACD,WAAW;QACd,MAAM,IAAIf,UAAUG,IAAIE,CAAC;IAC3B;AACF,EAAC"}

package/dist/uploads/assertClientUploadAllowed.d.ts

@@ -0,0 +1,10 @@
+export declare const assertClientUploadAllowed: ({ collection, filename, mimeType, }: {
+    collection?: {
+        upload?: {
+            allowRestrictedFileTypes?: boolean;
+        } | boolean;
+    };
+    filename: unknown;
+    mimeType?: unknown;
+}) => void;
+//# sourceMappingURL=assertClientUploadAllowed.d.ts.map

package/dist/uploads/assertClientUploadAllowed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertClientUploadAllowed.d.ts","sourceRoot":"","sources":["../../src/uploads/assertClientUploadAllowed.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,yBAAyB,wCAInC;IACD,UAAU,CAAC,EAAE;QACX,MAAM,CAAC,EAAE;YAAE,wBAAwB,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAA;KAC1D,CAAA;IACD,QAAQ,EAAE,OAAO,CAAA;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAA;CACnB,KAAG,IA+BH,CAAA"}

package/dist/uploads/assertClientUploadAllowed.js

@@ -0,0 +1,41 @@
+import { APIError } from '../errors/APIError.js';
+import { getSanitizedUploadFilename, uploadRequiresServerValidation } from './getFileTypeIdentity.js';
+const MIME_TYPE_PATTERN = /^[!#$%&'*+.^`|~\w-]+\/[!#$%&'*+.^`|~\w-]+$/;
+const isValidMimeType = (mimeType)=>{
+    if (typeof mimeType !== 'string' || mimeType.length === 0 || mimeType !== mimeType.trim() || [
+        ...mimeType
+    ].some((character)=>{
+        const codePoint = character.codePointAt(0);
+        return codePoint !== undefined && (codePoint <= 0x1f || codePoint === 0x7f);
+    })) {
+        return false;
+    }
+    const [essence, ...parameters] = mimeType.split(';');
+    return MIME_TYPE_PATTERN.test(essence ?? '') && parameters.every((parameter)=>parameter.trim().length > 0);
+};
+export const assertClientUploadAllowed = ({ collection, filename, mimeType })=>{
+    if (typeof filename !== 'string' || filename.length === 0 || filename.trim().length === 0 || !getSanitizedUploadFilename(filename)) {
+        throw new APIError('A valid filename is required for client uploads.', 400);
+    }
+    const allowRestrictedFileTypes = collection && typeof collection.upload === 'object' ? collection.upload.allowRestrictedFileTypes : false;
+    // The explicit restricted-file opt-out also preserves legacy provider clients that did not
+    // send MIME metadata. Secure-default collections always require a bindable MIME identity.
+    if (mimeType === undefined || mimeType === null || mimeType === '') {
+        if (allowRestrictedFileTypes) {
+            return;
+        }
+        throw new APIError('A valid MIME type is required for client uploads.', 400);
+    }
+    if (!isValidMimeType(mimeType)) {
+        throw new APIError('A valid MIME type is required for client uploads.', 400);
+    }
+    if (uploadRequiresServerValidation({
+        allowRestrictedFileTypes,
+        filename,
+        mimeType
+    })) {
+        throw new APIError('SVG and XML files must be uploaded through Payload.', 400);
+    }
+};
+
+//# sourceMappingURL=assertClientUploadAllowed.js.map

package/dist/uploads/assertClientUploadAllowed.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/uploads/assertClientUploadAllowed.ts"],"sourcesContent":["import { APIError } from '../errors/APIError.js'\nimport {\n  getSanitizedUploadFilename,\n  uploadRequiresServerValidation,\n} from './getFileTypeIdentity.js'\n\nconst MIME_TYPE_PATTERN = /^[!#$%&'*+.^`|~\\w-]+\\/[!#$%&'*+.^`|~\\w-]+$/\n\nconst isValidMimeType = (mimeType: unknown): mimeType is string => {\n  if (\n    typeof mimeType !== 'string' ||\n    mimeType.length === 0 ||\n    mimeType !== mimeType.trim() ||\n    [...mimeType].some((character) => {\n      const codePoint = character.codePointAt(0)\n      return codePoint !== undefined && (codePoint <= 0x1f || codePoint === 0x7f)\n    })\n  ) {\n    return false\n  }\n\n  const [essence, ...parameters] = mimeType.split(';')\n  return (\n    MIME_TYPE_PATTERN.test(essence ?? '') &&\n    parameters.every((parameter) => parameter.trim().length > 0)\n  )\n}\n\nexport const assertClientUploadAllowed = ({\n  collection,\n  filename,\n  mimeType,\n}: {\n  collection?: {\n    upload?: { allowRestrictedFileTypes?: boolean } | boolean\n  }\n  filename: unknown\n  mimeType?: unknown\n}): void => {\n  if (\n    typeof filename !== 'string' ||\n    filename.length === 0 ||\n    filename.trim().length === 0 ||\n    !getSanitizedUploadFilename(filename)\n  ) {\n    throw new APIError('A valid filename is required for client uploads.', 400)\n  }\n\n  const allowRestrictedFileTypes =\n    collection && typeof collection.upload === 'object'\n      ? collection.upload.allowRestrictedFileTypes\n      : false\n\n  // The explicit restricted-file opt-out also preserves legacy provider clients that did not\n  // send MIME metadata. Secure-default collections always require a bindable MIME identity.\n  if (mimeType === undefined || mimeType === null || mimeType === '') {\n    if (allowRestrictedFileTypes) {\n      return\n    }\n    throw new APIError('A valid MIME type is required for client uploads.', 400)\n  }\n\n  if (!isValidMimeType(mimeType)) {\n    throw new APIError('A valid MIME type is required for client uploads.', 400)\n  }\n\n  if (uploadRequiresServerValidation({ allowRestrictedFileTypes, filename, mimeType })) {\n    throw new APIError('SVG and XML files must be uploaded through Payload.', 400)\n  }\n}\n"],"names":["APIError","getSanitizedUploadFilename","uploadRequiresServerValidation","MIME_TYPE_PATTERN","isValidMimeType","mimeType","length","trim","some","character","codePoint","codePointAt","undefined","essence","parameters","split","test","every","parameter","assertClientUploadAllowed","collection","filename","allowRestrictedFileTypes","upload"],"mappings":"AAAA,SAASA,QAAQ,QAAQ,wBAAuB;AAChD,SACEC,0BAA0B,EAC1BC,8BAA8B,QACzB,2BAA0B;AAEjC,MAAMC,oBAAoB;AAE1B,MAAMC,kBAAkB,CAACC;IACvB,IACE,OAAOA,aAAa,YACpBA,SAASC,MAAM,KAAK,KACpBD,aAAaA,SAASE,IAAI,MAC1B;WAAIF;KAAS,CAACG,IAAI,CAAC,CAACC;QAClB,MAAMC,YAAYD,UAAUE,WAAW,CAAC;QACxC,OAAOD,cAAcE,aAAcF,CAAAA,aAAa,QAAQA,cAAc,IAAG;IAC3E,IACA;QACA,OAAO;IACT;IAEA,MAAM,CAACG,SAAS,GAAGC,WAAW,GAAGT,SAASU,KAAK,CAAC;IAChD,OACEZ,kBAAkBa,IAAI,CAACH,WAAW,OAClCC,WAAWG,KAAK,CAAC,CAACC,YAAcA,UAAUX,IAAI,GAAGD,MAAM,GAAG;AAE9D;AAEA,OAAO,MAAMa,4BAA4B,CAAC,EACxCC,UAAU,EACVC,QAAQ,EACRhB,QAAQ,EAOT;IACC,IACE,OAAOgB,aAAa,YACpBA,SAASf,MAAM,KAAK,KACpBe,SAASd,IAAI,GAAGD,MAAM,KAAK,KAC3B,CAACL,2BAA2BoB,WAC5B;QACA,MAAM,IAAIrB,SAAS,oDAAoD;IACzE;IAEA,MAAMsB,2BACJF,cAAc,OAAOA,WAAWG,MAAM,KAAK,WACvCH,WAAWG,MAAM,CAACD,wBAAwB,GAC1C;IAEN,2FAA2F;IAC3F,0FAA0F;IAC1F,IAAIjB,aAAaO,aAAaP,aAAa,QAAQA,aAAa,IAAI;QAClE,IAAIiB,0BAA0B;YAC5B;QACF;QACA,MAAM,IAAItB,SAAS,qDAAqD;IAC1E;IAEA,IAAI,CAACI,gBAAgBC,WAAW;QAC9B,MAAM,IAAIL,SAAS,qDAAqD;IAC1E;IAEA,IAAIE,+BAA+B;QAAEoB;QAA0BD;QAAUhB;IAAS,IAAI;QACpF,MAAM,IAAIL,SAAS,uDAAuD;IAC5E;AACF,EAAC"}

package/dist/uploads/checkFileAccess.d.ts

@@ -1,7 +1,8 @@
 import type { Collection, TypeWithID } from '../collections/config/types.js';
 import type { PayloadRequest } from '../types/index.js';
-export declare const checkFileAccess: ({ collection, filename, prefix, req, }: {
+export declare const checkFileAccess: ({ collection, documentID, filename, prefix, req, }: {
     collection: Collection;
+    documentID?: number | string;
     filename: string;
     prefix?: string;
     req: PayloadRequest;

package/dist/uploads/checkFileAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkFileAccess.d.ts","sourceRoot":"","sources":["../../src/uploads/checkFileAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAS,MAAM,mBAAmB,CAAA;AAK9D,eAAO,MAAM,eAAe,2CAKzB;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CA8CjC,CAAA"}
+{"version":3,"file":"checkFileAccess.d.ts","sourceRoot":"","sources":["../../src/uploads/checkFileAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAS,MAAM,mBAAmB,CAAA;AAM9D,eAAO,MAAM,eAAe,uDAMzB;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CA2CjC,CAAA"}

package/dist/uploads/checkFileAccess.js

@@ -1,11 +1,14 @@
 import { executeAccess } from '../auth/executeAccess.js';
 import { Forbidden } from '../errors/Forbidden.js';
-export const checkFileAccess = async ({ collection, filename, prefix, req })=>{
+import { resolveUploadDocument } from './transformers/resolveUploadDocument.js';
+export const checkFileAccess = async ({ collection, documentID, filename, prefix, req })=>{
     if (filename.includes('../') || filename.includes('..\\')) {
         throw new Forbidden(req.t);
     }
     const { config } = collection;
     const accessResult = await executeAccess({
+        id: documentID,
+        slug: config.slug,
         data: {
             filename
         },
@@ -23,31 +26,23 @@ export const checkFileAccess = async ({ collection, filename, prefix, req })=>{
             }
         });
     }
-    if (constraints.length > 0) {
-        const filenameCondition = {
-            or: [
-                {
-                    filename: {
-                        equals: filename
-                    }
-                }
-            ]
-        };
-        if (config.upload.imageSizes) {
-            config.upload.imageSizes.forEach(({ name })=>{
-                filenameCondition.or.push({
-                    [`sizes.${name}.filename`]: {
-                        equals: filename
-                    }
-                });
-            });
-        }
-        const doc = await req.payload.db.findOne({
+    if (constraints.length > 0 || documentID !== undefined) {
+        const doc = documentID === undefined ? await resolveUploadDocument({
+            collection,
+            filename,
+            prefix,
+            req,
+            where: typeof accessResult === 'object' ? accessResult : undefined
+        }) : await req.payload.db.findOne({
             collection: config.slug,
             req,
             where: {
                 and: [
-                    filenameCondition,
+                    {
+                        id: {
+                            equals: documentID
+                        }
+                    },
                     ...constraints
                 ]
             }

package/dist/uploads/checkFileAccess.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/uploads/checkFileAccess.ts"],"sourcesContent":["import type { Collection, TypeWithID } from '../collections/config/types.js'\nimport type { PayloadRequest, Where } from '../types/index.js'\n\nimport { executeAccess } from '../auth/executeAccess.js'\nimport { Forbidden } from '../errors/Forbidden.js'\n\nexport const checkFileAccess = async ({\n  collection,\n  filename,\n  prefix,\n  req,\n}: {\n  collection: Collection\n  filename: string\n  prefix?: string\n  req: PayloadRequest\n}): Promise<TypeWithID | undefined> => {\n  if (filename.includes('../') || filename.includes('..\\\\')) {\n    throw new Forbidden(req.t)\n  }\n  const { config } = collection\n\n  const accessResult = await executeAccess(\n    { data: { filename }, isReadingStaticFile: true, req },\n    config.access.read,\n  )\n\n  const constraints: Where[] = []\n\n  if (typeof accessResult === 'object') {\n    constraints.push(accessResult)\n  }\n\n  if (typeof prefix === 'string') {\n    constraints.push({ prefix: { equals: prefix } })\n  }\n\n  if (constraints.length > 0) {\n    const filenameCondition: Where = {\n      or: [{ filename: { equals: filename } }],\n    }\n\n    if (config.upload.imageSizes) {\n      config.upload.imageSizes.forEach(({ name }) => {\n        filenameCondition.or!.push({\n          [`sizes.${name}.filename`]: { equals: filename },\n        })\n      })\n    }\n\n    const doc = await req.payload.db.findOne({\n      collection: config.slug,\n      req,\n      where: { and: [filenameCondition, ...constraints] },\n    })\n\n    if (!doc) {\n      throw new Forbidden(req.t)\n    }\n\n    return doc\n  }\n}\n"],"names":["executeAccess","Forbidden","checkFileAccess","collection","filename","prefix","req","includes","t","config","accessResult","data","isReadingStaticFile","access","read","constraints","push","equals","length","filenameCondition","or","upload","imageSizes","forEach","name","doc","payload","db","findOne","slug","where","and"],"mappings":"AAGA,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,yBAAwB;AAElD,OAAO,MAAMC,kBAAkB,OAAO,EACpCC,UAAU,EACVC,QAAQ,EACRC,MAAM,EACNC,GAAG,EAMJ;IACC,IAAIF,SAASG,QAAQ,CAAC,UAAUH,SAASG,QAAQ,CAAC,SAAS;QACzD,MAAM,IAAIN,UAAUK,IAAIE,CAAC;IAC3B;IACA,MAAM,EAAEC,MAAM,EAAE,GAAGN;IAEnB,MAAMO,eAAe,MAAMV,cACzB;QAAEW,MAAM;YAAEP;QAAS;QAAGQ,qBAAqB;QAAMN;IAAI,GACrDG,OAAOI,MAAM,CAACC,IAAI;IAGpB,MAAMC,cAAuB,EAAE;IAE/B,IAAI,OAAOL,iBAAiB,UAAU;QACpCK,YAAYC,IAAI,CAACN;IACnB;IAEA,IAAI,OAAOL,WAAW,UAAU;QAC9BU,YAAYC,IAAI,CAAC;YAAEX,QAAQ;gBAAEY,QAAQZ;YAAO;QAAE;IAChD;IAEA,IAAIU,YAAYG,MAAM,GAAG,GAAG;QAC1B,MAAMC,oBAA2B;YAC/BC,IAAI;gBAAC;oBAAEhB,UAAU;wBAAEa,QAAQb;oBAAS;gBAAE;aAAE;QAC1C;QAEA,IAAIK,OAAOY,MAAM,CAACC,UAAU,EAAE;YAC5Bb,OAAOY,MAAM,CAACC,UAAU,CAACC,OAAO,CAAC,CAAC,EAAEC,IAAI,EAAE;gBACxCL,kBAAkBC,EAAE,CAAEJ,IAAI,CAAC;oBACzB,CAAC,CAAC,MAAM,EAAEQ,KAAK,SAAS,CAAC,CAAC,EAAE;wBAAEP,QAAQb;oBAAS;gBACjD;YACF;QACF;QAEA,MAAMqB,MAAM,MAAMnB,IAAIoB,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;YACvCzB,YAAYM,OAAOoB,IAAI;YACvBvB;YACAwB,OAAO;gBAAEC,KAAK;oBAACZ;uBAAsBJ;iBAAY;YAAC;QACpD;QAEA,IAAI,CAACU,KAAK;YACR,MAAM,IAAIxB,UAAUK,IAAIE,CAAC;QAC3B;QAEA,OAAOiB;IACT;AACF,EAAC"}
+{"version":3,"sources":["../../src/uploads/checkFileAccess.ts"],"sourcesContent":["import type { Collection, TypeWithID } from '../collections/config/types.js'\nimport type { PayloadRequest, Where } from '../types/index.js'\n\nimport { executeAccess } from '../auth/executeAccess.js'\nimport { Forbidden } from '../errors/Forbidden.js'\nimport { resolveUploadDocument } from './transformers/resolveUploadDocument.js'\n\nexport const checkFileAccess = async ({\n  collection,\n  documentID,\n  filename,\n  prefix,\n  req,\n}: {\n  collection: Collection\n  documentID?: number | string\n  filename: string\n  prefix?: string\n  req: PayloadRequest\n}): Promise<TypeWithID | undefined> => {\n  if (filename.includes('../') || filename.includes('..\\\\')) {\n    throw new Forbidden(req.t)\n  }\n  const { config } = collection\n\n  const accessResult = await executeAccess(\n    { id: documentID, slug: config.slug, data: { filename }, isReadingStaticFile: true, req },\n    config.access.read,\n  )\n\n  const constraints: Where[] = []\n\n  if (typeof accessResult === 'object') {\n    constraints.push(accessResult)\n  }\n\n  if (typeof prefix === 'string') {\n    constraints.push({ prefix: { equals: prefix } })\n  }\n\n  if (constraints.length > 0 || documentID !== undefined) {\n    const doc =\n      documentID === undefined\n        ? await resolveUploadDocument({\n            collection,\n            filename,\n            prefix,\n            req,\n            where: typeof accessResult === 'object' ? accessResult : undefined,\n          })\n        : await req.payload.db.findOne({\n            collection: config.slug,\n            req,\n            where: { and: [{ id: { equals: documentID } }, ...constraints] },\n          })\n\n    if (!doc) {\n      throw new Forbidden(req.t)\n    }\n\n    return doc\n  }\n}\n"],"names":["executeAccess","Forbidden","resolveUploadDocument","checkFileAccess","collection","documentID","filename","prefix","req","includes","t","config","accessResult","id","slug","data","isReadingStaticFile","access","read","constraints","push","equals","length","undefined","doc","where","payload","db","findOne","and"],"mappings":"AAGA,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,yBAAwB;AAClD,SAASC,qBAAqB,QAAQ,0CAAyC;AAE/E,OAAO,MAAMC,kBAAkB,OAAO,EACpCC,UAAU,EACVC,UAAU,EACVC,QAAQ,EACRC,MAAM,EACNC,GAAG,EAOJ;IACC,IAAIF,SAASG,QAAQ,CAAC,UAAUH,SAASG,QAAQ,CAAC,SAAS;QACzD,MAAM,IAAIR,UAAUO,IAAIE,CAAC;IAC3B;IACA,MAAM,EAAEC,MAAM,EAAE,GAAGP;IAEnB,MAAMQ,eAAe,MAAMZ,cACzB;QAAEa,IAAIR;QAAYS,MAAMH,OAAOG,IAAI;QAAEC,MAAM;YAAET;QAAS;QAAGU,qBAAqB;QAAMR;IAAI,GACxFG,OAAOM,MAAM,CAACC,IAAI;IAGpB,MAAMC,cAAuB,EAAE;IAE/B,IAAI,OAAOP,iBAAiB,UAAU;QACpCO,YAAYC,IAAI,CAACR;IACnB;IAEA,IAAI,OAAOL,WAAW,UAAU;QAC9BY,YAAYC,IAAI,CAAC;YAAEb,QAAQ;gBAAEc,QAAQd;YAAO;QAAE;IAChD;IAEA,IAAIY,YAAYG,MAAM,GAAG,KAAKjB,eAAekB,WAAW;QACtD,MAAMC,MACJnB,eAAekB,YACX,MAAMrB,sBAAsB;YAC1BE;YACAE;YACAC;YACAC;YACAiB,OAAO,OAAOb,iBAAiB,WAAWA,eAAeW;QAC3D,KACA,MAAMf,IAAIkB,OAAO,CAACC,EAAE,CAACC,OAAO,CAAC;YAC3BxB,YAAYO,OAAOG,IAAI;YACvBN;YACAiB,OAAO;gBAAEI,KAAK;oBAAC;wBAAEhB,IAAI;4BAAEQ,QAAQhB;wBAAW;oBAAE;uBAAMc;iBAAY;YAAC;QACjE;QAEN,IAAI,CAACK,KAAK;YACR,MAAM,IAAIvB,UAAUO,IAAIE,CAAC;QAC3B;QAEA,OAAOc;IACT;AACF,EAAC"}

package/dist/uploads/checkFileRestrictions.d.ts

@@ -3,5 +3,15 @@ import type { checkFileRestrictionsParams, FileAllowList } from './types.js';
  * Restricted file types and their extensions.
  */
 export declare const RESTRICTED_FILE_EXT_AND_TYPES: FileAllowList;
-export declare const checkFileRestrictions: ({ checkFileContents, collection, file, req, }: checkFileRestrictionsParams) => Promise<void>;
+export declare const checkFileRestrictions: ({ checkFileContents, collection, file, req, }: checkFileRestrictionsParams) => Promise<{
+    ext: string;
+    mime: string;
+} | undefined>;
+export declare const checkFileMetadataRestrictions: ({ collection, filename, filesize, mimeType, req, }: {
+    collection: checkFileRestrictionsParams['collection'];
+    filename: string;
+    filesize?: number;
+    mimeType: string;
+    req: checkFileRestrictionsParams['req'];
+}) => Promise<void>;
 //# sourceMappingURL=checkFileRestrictions.d.ts.map

package/dist/uploads/checkFileRestrictions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkFileRestrictions.d.ts","sourceRoot":"","sources":["../../src/uploads/checkFileRestrictions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAS5E;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,aAgC3C,CAAA;AAED,eAAO,MAAM,qBAAqB,kDAK/B,2BAA2B,KAAG,OAAO,CAAC,IAAI,CA2K5C,CAAA"}
+{"version":3,"file":"checkFileRestrictions.d.ts","sourceRoot":"","sources":["../../src/uploads/checkFileRestrictions.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,2BAA2B,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAsB5E;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,aAiC3C,CAAA;AAED,eAAO,MAAM,qBAAqB,kDAK/B,2BAA2B,KAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAgNjF,CAAA;AAED,eAAO,MAAM,6BAA6B,uDAMvC;IACD,UAAU,EAAE,2BAA2B,CAAC,YAAY,CAAC,CAAA;IACrD,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,GAAG,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAA;CACxC,KAAG,OAAO,CAAC,IAAI,CAYf,CAAA"}

package/dist/uploads/checkFileRestrictions.js

@@ -3,9 +3,12 @@ import fs from 'fs/promises';
 import { ValidationError } from '../errors/index.js';
 import { validateMimeType } from '../utilities/validateMimeType.js';
 import { validatePDF } from '../utilities/validatePDF.js';
-import { detectSvgFromXml } from './detectSvgFromXml.js';
 import { getFileTypeFallback } from './getFileTypeFallback.js';
-import { validateSvg } from './validateSvg.js';
+import { getFileExtension, getMimeTypeEssence, getSanitizedUploadFilename, isSvgUpload, isXmlUpload } from './getFileTypeIdentity.js';
+import { hasFullFileContents } from './hasFullFileContents.js';
+import { isProcessableImage } from './isProcessableImage.js';
+import { isISOBaseMediaMimeType, validateISOBaseMediaBuffer, validateISOBaseMediaFile } from './validateISOBaseMediaFile.js';
+import { inspectSvg, inspectSvgFile } from './validateSvg.js';
 /**
  * Restricted file types and their extensions.
  */ export const RESTRICTED_FILE_EXT_AND_TYPES = [
@@ -111,6 +114,10 @@ import { validateSvg } from './validateSvg.js';
         ],
         mimeType: 'text/html'
     },
+    {
+        extensions: [],
+        mimeType: 'application/xhtml+xml'
+    },
     {
         extensions: [
             'php',
@@ -236,12 +243,10 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
         }
         return mimeType.startsWith('image/') || mimeType.startsWith('video/') || mimeType.startsWith('audio/') || mimeType === 'application/pdf';
     };
-    // Skip validation if `allowRestrictedFileTypes` is true
-    if (allowRestrictedFileTypes) {
-        return;
-    }
+    const typeFromExtension = getFileExtension(getSanitizedUploadFilename(file.name));
+    const mimeTypeEssence = getMimeTypeEssence(file.mimetype);
     if (!checkFileContents) {
-        const isAllowed = configMimeTypes.length ? validateMimeType(file.mimetype, configMimeTypes) : !RESTRICTED_FILE_EXT_AND_TYPES.some(({ extensions, mimeType })=>mimeType === file.mimetype || extensions.some((extension)=>file.name.toLowerCase().endsWith(extension)));
+        const isAllowed = configMimeTypes.length ? validateMimeType(file.mimetype, configMimeTypes) : !RESTRICTED_FILE_EXT_AND_TYPES.some(({ extensions, mimeType })=>mimeType === mimeTypeEssence || extensions.includes(typeFromExtension.toLowerCase()));
         if (!isAllowed) {
             throw new ValidationError({
                 errors: [
@@ -255,11 +260,11 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
         return;
     }
     // For temp files, use fileTypeFromFile so large files (e.g. video) are never loaded into memory
-    // just for detection. For content validation (SVG safety, PDF integrity), the full buffer is
-    // loaded lazily and only when the file type actually requires it.
+    // just for detection. Content validation streams SVG/XML temp files and only loads a full
+    // temp-file buffer for PDF integrity checks.
     const { tempFilePath } = file;
     const isTempFile = !!tempFilePath && (!file.data || file.data.length === 0);
-    // Lazily reads the full file — only reached for small text-based types (SVG, PDF).
+    // Lazily reads the full file — only reached for PDF validation.
     let _fileBuffer;
     const getFileBuffer = async ()=>{
         if (_fileBuffer) {
@@ -282,12 +287,20 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
             });
         }
     };
-    // Secondary mimetype check to assess file type from buffer
-    if (configMimeTypes.length > 0) {
-        let detected;
-        try {
-            detected = isTempFile && tempFilePath ? await fileTypeFromFile(tempFilePath) : await fileTypeFromBuffer(file.data);
-        } catch  {
+    let isSvg = isSvgUpload({
+        filename: file.name,
+        mimeType: file.mimetype
+    });
+    let svgInspection;
+    const getSvgInspection = async ()=>{
+        svgInspection ??= isTempFile && tempFilePath ? await inspectSvgFile(tempFilePath) : inspectSvg(file.data);
+        return svgInspection;
+    };
+    let detected;
+    try {
+        detected = isTempFile && tempFilePath ? await fileTypeFromFile(tempFilePath) : await fileTypeFromBuffer(file.data);
+    } catch  {
+        if (configMimeTypes.length > 0) {
             throw new ValidationError({
                 errors: [
                     {
@@ -297,10 +310,35 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
                 ]
             });
         }
-        const typeFromExtension = file.name.split('.').pop() || '';
+    }
+    if (isSvg || isXmlUpload({
+        filename: file.name,
+        mimeType: file.mimetype
+    }) || detected?.mime === 'application/xml' || !detected && isProcessableImage(file.mimetype)) {
+        const inspection = await getSvgInspection();
+        isSvg = inspection.isSvg;
+        if (inspection.isSvg) {
+            detected = {
+                ext: 'svg',
+                mime: 'image/svg+xml'
+            };
+        } else if (inspection.isValid && !detected) {
+            detected = {
+                ext: 'xml',
+                mime: 'application/xml'
+            };
+        }
+    }
+    if (detected && isISOBaseMediaMimeType(detected.mime) && (hasFullFileContents(file) || configMimeTypes.length > 0)) {
+        const isValidISOBaseMedia = isTempFile && tempFilePath ? await validateISOBaseMediaFile(tempFilePath) : await validateISOBaseMediaBuffer(file.data);
+        if (!isValidISOBaseMedia) {
+            errors.push('Invalid or corrupted ISO base media file.');
+        }
+    }
+    // Secondary mimetype check to assess file type from buffer
+    if (configMimeTypes.length > 0) {
         // Handle SVG files that are detected as XML due to <?xml declarations
         if (detected?.mime === 'application/xml' && configMimeTypes.some((type)=>type.includes('image/') && (type.includes('svg') || type === 'image/*'))) {
-            const isSvg = detectSvgFromXml(await getFileBuffer());
             if (isSvg) {
                 detected = {
                     ext: 'svg',
@@ -314,13 +352,6 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
             if (!extIsValid) {
                 errors.push(`File type ${mimeTypeFromExtension} (from extension ${typeFromExtension}) is not allowed.`);
             } else {
-                // SVG security check (text-based files not detectable by buffer)
-                if (typeFromExtension.toLowerCase() === 'svg') {
-                    const isSafeSvg = validateSvg(await getFileBuffer());
-                    if (!isSafeSvg) {
-                        errors.push('SVG file contains potentially harmful content.');
-                    }
-                }
                 // PDF validation
                 if (mimeTypeFromExtension === 'application/pdf') {
                     const isValidPDF = validatePDF(await getFileBuffer());
@@ -343,16 +374,22 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
         if (detected && !passesMimeTypeCheck) {
             errors.push(`Invalid MIME type: ${detected.mime}.`);
         }
-    } else {
+    } else if (!allowRestrictedFileTypes) {
         const isRestricted = RESTRICTED_FILE_EXT_AND_TYPES.some((type)=>{
-            const hasRestrictedExt = type.extensions.some((ext)=>file.name.toLowerCase().endsWith(ext));
-            const hasRestrictedMime = type.mimeType === file.mimetype;
+            const hasRestrictedExt = type.extensions.includes(typeFromExtension.toLowerCase());
+            const hasRestrictedMime = type.mimeType === mimeTypeEssence;
             return hasRestrictedExt || hasRestrictedMime;
         });
         if (isRestricted) {
             errors.push(`File type '${file.mimetype}' not allowed ${file.name}: Restricted file type detected -- set 'allowRestrictedFileTypes' to true to skip this check for this Collection.`);
         }
     }
+    if (isSvg) {
+        const isSafeSvg = (await getSvgInspection()).isSafe;
+        if (!isSafeSvg) {
+            errors.push('SVG file contains potentially harmful content.');
+        }
+    }
     if (errors.length > 0) {
         req.payload.logger.error(errors.join(', '));
         throw new ValidationError({
@@ -364,6 +401,20 @@ export const checkFileRestrictions = async ({ checkFileContents = true, collecti
             ]
         });
     }
+    return detected;
+};
+export const checkFileMetadataRestrictions = async ({ collection, filename, filesize = 0, mimeType, req })=>{
+    await checkFileRestrictions({
+        checkFileContents: false,
+        collection,
+        file: {
+            name: filename,
+            data: Buffer.alloc(0),
+            mimetype: mimeType,
+            size: filesize
+        },
+        req
+    });
 };
 
 //# sourceMappingURL=checkFileRestrictions.js.map