payload 4.0.0-internal.e7d4ebc → 4.0.0-internal.ea6e8f8

package/dist/branching/branchSelect.js

@@ -0,0 +1,97 @@
+import { getSelectMode } from '../utilities/getSelectMode.js';
+import { branchGlobalNeedsBothRows } from './globals.js';
+import { resolveBranch } from './resolveBranch.js';
+import { branchDocIDField, branchField, branchParentField, MAIN_BRANCH } from './types.js';
+/**
+ * Whether canonical-ID projection applies to a read.
+ *
+ * Shared by the projection itself and by the `select` guards below, so the two
+ * can never disagree about when a row's ID needs translating — a mismatch there
+ * would either leak shadow-row primary keys or strip IDs on main.
+ */ export const isBranchProjectionActive = ({ branch, collectionSlug, req })=>{
+    if (branch === false || !req?.payload) {
+        return false;
+    }
+    if (req.context?._branchBypass) {
+        return false;
+    }
+    const branching = req.payload.config?.branching;
+    if (!branching?.enabled || !branching.branchableCollections.has(collectionSlug)) {
+        return false;
+    }
+    return (branch ?? resolveBranch(req)) !== MAIN_BRANCH;
+};
+const withRequiredSelectField = ({ field, select })=>{
+    if (!select) {
+        return select;
+    }
+    // Exclude mode returns every column the caller did not name, so the field is
+    // already there unless they named it — in which case it has to be un-named.
+    if (getSelectMode(select) === 'exclude') {
+        if (!(field in select)) {
+            return select;
+        }
+        const next = {
+            ...select
+        };
+        delete next[field];
+        return next;
+    }
+    if (select[field]) {
+        return select;
+    }
+    // Cast because spreading the `SelectType` union widens to "include or exclude"
+    // and loses the discrimination; the exclude case already returned above.
+    return {
+        ...select,
+        [field]: true
+    };
+};
+const withBranchField = ({ branch, collectionSlug, field, req, select })=>{
+    if (!isBranchProjectionActive({
+        branch,
+        collectionSlug,
+        req
+    })) {
+        return select;
+    }
+    return withRequiredSelectField({
+        field,
+        select
+    });
+};
+/**
+ * Keeps `_branchDocID` in a collection read's `select`.
+ *
+ * An include-mode `select` narrows the row to exactly the fields named, which
+ * drops `_branchDocID` — and without it there is nothing for the canonical-ID
+ * projection to map from, so the read silently returns shadow-row primary keys
+ * instead of document IDs. The admin list view selects only its visible columns,
+ * which is how this surfaces: correct IDs over the plain REST API, wrong ones in
+ * the list, and an unopenable edit view behind every row.
+ */ export const withBranchIDSelect = (args)=>withBranchField({
+        ...args,
+        field: branchDocIDField
+    });
+/**
+ * Keeps `_branchParent` in a version read's `select`, for the same reason
+ * {@link withBranchIDSelect} keeps `_branchDocID` in a collection read's.
+ */ export const withBranchVersionSelect = (args)=>withBranchField({
+        ...args,
+        field: branchParentField
+    });
+/** Keeps `_branch` available while choosing between a branch global and main. */ export const withBranchGlobalSelect = ({ branch, globalSlug, req, select })=>{
+    if (!branchGlobalNeedsBothRows({
+        branch,
+        globalSlug,
+        req
+    })) {
+        return select;
+    }
+    return withRequiredSelectField({
+        field: branchField,
+        select
+    });
+};
+
+//# sourceMappingURL=branchSelect.js.map

package/dist/branching/branchSelect.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/branching/branchSelect.ts"],"sourcesContent":["import type { PayloadRequest, SelectType } from '../types/index.js'\n\nimport { getSelectMode } from '../utilities/getSelectMode.js'\nimport { branchGlobalNeedsBothRows } from './globals.js'\nimport { resolveBranch } from './resolveBranch.js'\nimport { branchDocIDField, branchField, branchParentField, MAIN_BRANCH } from './types.js'\n\ntype ActiveArgs = {\n  branch?: false | string\n  collectionSlug: string\n  req?: Partial<PayloadRequest>\n}\n\n/**\n * Whether canonical-ID projection applies to a read.\n *\n * Shared by the projection itself and by the `select` guards below, so the two\n * can never disagree about when a row's ID needs translating — a mismatch there\n * would either leak shadow-row primary keys or strip IDs on main.\n */\nexport const isBranchProjectionActive = ({ branch, collectionSlug, req }: ActiveArgs): boolean => {\n  if (branch === false || !req?.payload) {\n    return false\n  }\n\n  if ((req.context as Record<string, unknown> | undefined)?._branchBypass) {\n    return false\n  }\n\n  const branching = req.payload.config?.branching\n\n  if (!branching?.enabled || !branching.branchableCollections.has(collectionSlug)) {\n    return false\n  }\n\n  return (branch ?? resolveBranch(req as PayloadRequest)) !== MAIN_BRANCH\n}\n\ntype SelectArgs = {\n  select?: SelectType\n} & ActiveArgs\n\nconst withRequiredSelectField = ({\n  field,\n  select,\n}: {\n  field: string\n  select?: SelectType\n}): SelectType | undefined => {\n  if (!select) {\n    return select\n  }\n\n  // Exclude mode returns every column the caller did not name, so the field is\n  // already there unless they named it — in which case it has to be un-named.\n  if (getSelectMode(select) === 'exclude') {\n    if (!(field in select)) {\n      return select\n    }\n\n    const next = { ...select }\n    delete next[field]\n\n    return next\n  }\n\n  if (select[field]) {\n    return select\n  }\n\n  // Cast because spreading the `SelectType` union widens to \"include or exclude\"\n  // and loses the discrimination; the exclude case already returned above.\n  return { ...select, [field]: true } as SelectType\n}\n\nconst withBranchField = ({\n  branch,\n  collectionSlug,\n  field,\n  req,\n  select,\n}: { field: string } & SelectArgs): SelectType | undefined => {\n  if (!isBranchProjectionActive({ branch, collectionSlug, req })) {\n    return select\n  }\n\n  return withRequiredSelectField({ field, select })\n}\n\n/**\n * Keeps `_branchDocID` in a collection read's `select`.\n *\n * An include-mode `select` narrows the row to exactly the fields named, which\n * drops `_branchDocID` — and without it there is nothing for the canonical-ID\n * projection to map from, so the read silently returns shadow-row primary keys\n * instead of document IDs. The admin list view selects only its visible columns,\n * which is how this surfaces: correct IDs over the plain REST API, wrong ones in\n * the list, and an unopenable edit view behind every row.\n */\nexport const withBranchIDSelect = (args: SelectArgs): SelectType | undefined =>\n  withBranchField({ ...args, field: branchDocIDField })\n\n/**\n * Keeps `_branchParent` in a version read's `select`, for the same reason\n * {@link withBranchIDSelect} keeps `_branchDocID` in a collection read's.\n */\nexport const withBranchVersionSelect = (args: SelectArgs): SelectType | undefined =>\n  withBranchField({ ...args, field: branchParentField })\n\n/** Keeps `_branch` available while choosing between a branch global and main. */\nexport const withBranchGlobalSelect = ({\n  branch,\n  globalSlug,\n  req,\n  select,\n}: {\n  branch?: false | string\n  globalSlug: string\n  req?: Partial<PayloadRequest>\n  select?: SelectType\n}): SelectType | undefined => {\n  if (!branchGlobalNeedsBothRows({ branch, globalSlug, req })) {\n    return select\n  }\n\n  return withRequiredSelectField({ field: branchField, select })\n}\n"],"names":["getSelectMode","branchGlobalNeedsBothRows","resolveBranch","branchDocIDField","branchField","branchParentField","MAIN_BRANCH","isBranchProjectionActive","branch","collectionSlug","req","payload","context","_branchBypass","branching","config","enabled","branchableCollections","has","withRequiredSelectField","field","select","next","withBranchField","withBranchIDSelect","args","withBranchVersionSelect","withBranchGlobalSelect","globalSlug"],"mappings":"AAEA,SAASA,aAAa,QAAQ,gCAA+B;AAC7D,SAASC,yBAAyB,QAAQ,eAAc;AACxD,SAASC,aAAa,QAAQ,qBAAoB;AAClD,SAASC,gBAAgB,EAAEC,WAAW,EAAEC,iBAAiB,EAAEC,WAAW,QAAQ,aAAY;AAQ1F;;;;;;CAMC,GACD,OAAO,MAAMC,2BAA2B,CAAC,EAAEC,MAAM,EAAEC,cAAc,EAAEC,GAAG,EAAc;IAClF,IAAIF,WAAW,SAAS,CAACE,KAAKC,SAAS;QACrC,OAAO;IACT;IAEA,IAAKD,IAAIE,OAAO,EAA0CC,eAAe;QACvE,OAAO;IACT;IAEA,MAAMC,YAAYJ,IAAIC,OAAO,CAACI,MAAM,EAAED;IAEtC,IAAI,CAACA,WAAWE,WAAW,CAACF,UAAUG,qBAAqB,CAACC,GAAG,CAACT,iBAAiB;QAC/E,OAAO;IACT;IAEA,OAAO,AAACD,CAAAA,UAAUN,cAAcQ,IAAqB,MAAOJ;AAC9D,EAAC;AAMD,MAAMa,0BAA0B,CAAC,EAC/BC,KAAK,EACLC,MAAM,EAIP;IACC,IAAI,CAACA,QAAQ;QACX,OAAOA;IACT;IAEA,6EAA6E;IAC7E,4EAA4E;IAC5E,IAAIrB,cAAcqB,YAAY,WAAW;QACvC,IAAI,CAAED,CAAAA,SAASC,MAAK,GAAI;YACtB,OAAOA;QACT;QAEA,MAAMC,OAAO;YAAE,GAAGD,MAAM;QAAC;QACzB,OAAOC,IAAI,CAACF,MAAM;QAElB,OAAOE;IACT;IAEA,IAAID,MAAM,CAACD,MAAM,EAAE;QACjB,OAAOC;IACT;IAEA,+EAA+E;IAC/E,yEAAyE;IACzE,OAAO;QAAE,GAAGA,MAAM;QAAE,CAACD,MAAM,EAAE;IAAK;AACpC;AAEA,MAAMG,kBAAkB,CAAC,EACvBf,MAAM,EACNC,cAAc,EACdW,KAAK,EACLV,GAAG,EACHW,MAAM,EACyB;IAC/B,IAAI,CAACd,yBAAyB;QAAEC;QAAQC;QAAgBC;IAAI,IAAI;QAC9D,OAAOW;IACT;IAEA,OAAOF,wBAAwB;QAAEC;QAAOC;IAAO;AACjD;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMG,qBAAqB,CAACC,OACjCF,gBAAgB;QAAE,GAAGE,IAAI;QAAEL,OAAOjB;IAAiB,GAAE;AAEvD;;;CAGC,GACD,OAAO,MAAMuB,0BAA0B,CAACD,OACtCF,gBAAgB;QAAE,GAAGE,IAAI;QAAEL,OAAOf;IAAkB,GAAE;AAExD,+EAA+E,GAC/E,OAAO,MAAMsB,yBAAyB,CAAC,EACrCnB,MAAM,EACNoB,UAAU,EACVlB,GAAG,EACHW,MAAM,EAMP;IACC,IAAI,CAACpB,0BAA0B;QAAEO;QAAQoB;QAAYlB;IAAI,IAAI;QAC3D,OAAOW;IACT;IAEA,OAAOF,wBAAwB;QAAEC,OAAOhB;QAAaiB;IAAO;AAC9D,EAAC"}

package/dist/branching/checkFieldAccess.d.ts

@@ -0,0 +1,21 @@
+import type { SanitizedCollectionConfig } from '../collections/config/types.js';
+import type { SanitizedGlobalConfig } from '../globals/config/types.js';
+import type { JsonObject, PayloadRequest } from '../types/index.js';
+type Args = {
+    collection: null | SanitizedCollectionConfig;
+    data: JsonObject;
+    doc: JsonObject;
+    global: null | SanitizedGlobalConfig;
+    id?: number | string;
+    operation: 'create' | 'update';
+    req: PayloadRequest;
+};
+/**
+ * Checks whether a proposed merge changes any field the merging user cannot write.
+ *
+ * This deliberately evaluates only field access functions. Running the normal field
+ * pipeline would also run mutation hooks, defaults and validation during a dry run.
+ */
+export declare const checkFieldAccess: ({ id, collection, data, doc, global, operation, req, }: Args) => Promise<boolean>;
+export {};
+//# sourceMappingURL=checkFieldAccess.d.ts.map

package/dist/branching/checkFieldAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkFieldAccess.d.ts","sourceRoot":"","sources":["../../src/branching/checkFieldAccess.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAE/E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAInE,KAAK,IAAI,GAAG;IACV,UAAU,EAAE,IAAI,GAAG,yBAAyB,CAAA;IAC5C,IAAI,EAAE,UAAU,CAAA;IAChB,GAAG,EAAE,UAAU,CAAA;IACf,MAAM,EAAE,IAAI,GAAG,qBAAqB,CAAA;IACpC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACpB,SAAS,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAC9B,GAAG,EAAE,cAAc,CAAA;CACpB,CAAA;AASD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,2DAQ1B,IAAI,KAAG,OAAO,CAAC,OAAO,CAYrB,CAAA"}

package/dist/branching/checkFieldAccess.js

@@ -0,0 +1,238 @@
+import { isDeepStrictEqual } from 'node:util';
+import { fieldAffectsData, tabHasName } from '../fields/config/types.js';
+/**
+ * Checks whether a proposed merge changes any field the merging user cannot write.
+ *
+ * This deliberately evaluates only field access functions. Running the normal field
+ * pipeline would also run mutation hooks, defaults and validation during a dry run.
+ */ export const checkFieldAccess = async ({ id, collection, data, doc, global, operation, req })=>traverseFields({
+        id,
+        collection,
+        currentSiblingData: doc,
+        data,
+        doc,
+        fields: collection?.fields ?? global?.fields,
+        global,
+        operation,
+        proposedSiblingData: data,
+        req
+    });
+const traverseFields = async ({ id, blockData, collection, currentSiblingData, data, doc, fields, global, operation, proposedSiblingData, req })=>{
+    for (const field of fields){
+        if (fieldAffectsData(field) && field.name) {
+            const fieldName = field.name;
+            const hasProposedValue = Object.prototype.hasOwnProperty.call(proposedSiblingData, fieldName);
+            const proposedValue = proposedSiblingData[fieldName];
+            const currentValue = currentSiblingData[fieldName];
+            const access = field.access?.[operation];
+            if (hasProposedValue && access && !isDeepStrictEqual(proposedValue, currentValue)) {
+                const hasAccess = await access(collection ? {
+                    id,
+                    blockData,
+                    collection,
+                    data,
+                    doc,
+                    req,
+                    siblingData: proposedSiblingData
+                } : {
+                    id,
+                    blockData,
+                    data,
+                    doc,
+                    global: global,
+                    req,
+                    siblingData: proposedSiblingData
+                });
+                if (!hasAccess) {
+                    return false;
+                }
+            }
+        }
+        switch(field.type){
+            case 'array':
+                {
+                    const proposedRows = proposedSiblingData[field.name];
+                    const currentRows = currentSiblingData[field.name];
+                    if (!Array.isArray(proposedRows)) {
+                        break;
+                    }
+                    for (const proposedRow of proposedRows){
+                        if (!isJsonObject(proposedRow)) {
+                            continue;
+                        }
+                        const currentRow = findCurrentRow({
+                            currentRows,
+                            proposedRow
+                        });
+                        const hasAccess = await traverseFields({
+                            id,
+                            collection,
+                            currentSiblingData: currentRow,
+                            data,
+                            doc,
+                            fields: field.fields,
+                            global,
+                            operation,
+                            proposedSiblingData: proposedRow,
+                            req
+                        });
+                        if (!hasAccess) {
+                            return false;
+                        }
+                    }
+                    break;
+                }
+            case 'blocks':
+                {
+                    const proposedRows = proposedSiblingData[field.name];
+                    const currentRows = currentSiblingData[field.name];
+                    if (!Array.isArray(proposedRows)) {
+                        break;
+                    }
+                    for (const proposedRow of proposedRows){
+                        if (!isJsonObject(proposedRow)) {
+                            continue;
+                        }
+                        const currentRow = findCurrentRow({
+                            currentRows,
+                            proposedRow
+                        });
+                        const blockType = proposedRow.blockType ?? currentRow.blockType;
+                        const block = field.blocks.map((each)=>typeof each === 'string' ? req.payload.blocks[each] : each).find((each)=>each?.slug === blockType);
+                        if (!block) {
+                            continue;
+                        }
+                        const hasAccess = await traverseFields({
+                            id,
+                            blockData: proposedRow,
+                            collection,
+                            currentSiblingData: currentRow,
+                            data,
+                            doc,
+                            fields: block.fields,
+                            global,
+                            operation,
+                            proposedSiblingData: proposedRow,
+                            req
+                        });
+                        if (!hasAccess) {
+                            return false;
+                        }
+                    }
+                    break;
+                }
+            case 'collapsible':
+            case 'row':
+                {
+                    const hasAccess = await traverseFields({
+                        id,
+                        blockData,
+                        collection,
+                        currentSiblingData,
+                        data,
+                        doc,
+                        fields: field.fields,
+                        global,
+                        operation,
+                        proposedSiblingData,
+                        req
+                    });
+                    if (!hasAccess) {
+                        return false;
+                    }
+                    break;
+                }
+            case 'group':
+                {
+                    const proposedGroup = fieldAffectsData(field) ? proposedSiblingData[field.name] : proposedSiblingData;
+                    const currentGroup = fieldAffectsData(field) ? currentSiblingData[field.name] : currentSiblingData;
+                    if (!isJsonObject(proposedGroup)) {
+                        break;
+                    }
+                    const hasAccess = await traverseFields({
+                        id,
+                        blockData,
+                        collection,
+                        currentSiblingData: isJsonObject(currentGroup) ? currentGroup : {},
+                        data,
+                        doc,
+                        fields: field.fields,
+                        global,
+                        operation,
+                        proposedSiblingData: proposedGroup,
+                        req
+                    });
+                    if (!hasAccess) {
+                        return false;
+                    }
+                    break;
+                }
+            case 'tab':
+                {
+                    const proposedTab = tabHasName(field) ? proposedSiblingData[field.name] : proposedSiblingData;
+                    const currentTab = tabHasName(field) ? currentSiblingData[field.name] : currentSiblingData;
+                    if (!isJsonObject(proposedTab)) {
+                        break;
+                    }
+                    const hasAccess = await traverseFields({
+                        id,
+                        blockData,
+                        collection,
+                        currentSiblingData: isJsonObject(currentTab) ? currentTab : {},
+                        data,
+                        doc,
+                        fields: field.fields,
+                        global,
+                        operation,
+                        proposedSiblingData: proposedTab,
+                        req
+                    });
+                    if (!hasAccess) {
+                        return false;
+                    }
+                    break;
+                }
+            case 'tabs':
+                {
+                    const hasAccess = await traverseFields({
+                        id,
+                        blockData,
+                        collection,
+                        currentSiblingData,
+                        data,
+                        doc,
+                        fields: field.tabs.map((tab)=>({
+                                ...tab,
+                                type: 'tab'
+                            })),
+                        global,
+                        operation,
+                        proposedSiblingData,
+                        req
+                    });
+                    if (!hasAccess) {
+                        return false;
+                    }
+                    break;
+                }
+            default:
+                break;
+        }
+    }
+    return true;
+};
+const findCurrentRow = ({ currentRows, proposedRow })=>{
+    if (!Array.isArray(currentRows)) {
+        return {};
+    }
+    if (proposedRow.id !== undefined) {
+        const matchingRow = currentRows.find((row)=>isJsonObject(row) && String(row.id) === String(proposedRow.id));
+        if (isJsonObject(matchingRow)) {
+            return matchingRow;
+        }
+    }
+    return {};
+};
+const isJsonObject = (value)=>Boolean(value && typeof value === 'object' && !Array.isArray(value));
+
+//# sourceMappingURL=checkFieldAccess.js.map

package/dist/branching/checkFieldAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/branching/checkFieldAccess.ts"],"sourcesContent":["import { isDeepStrictEqual } from 'node:util'\n\nimport type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { Field, TabAsField } from '../fields/config/types.js'\nimport type { SanitizedGlobalConfig } from '../globals/config/types.js'\nimport type { JsonObject, PayloadRequest } from '../types/index.js'\n\nimport { fieldAffectsData, tabHasName } from '../fields/config/types.js'\n\ntype Args = {\n  collection: null | SanitizedCollectionConfig\n  data: JsonObject\n  doc: JsonObject\n  global: null | SanitizedGlobalConfig\n  id?: number | string\n  operation: 'create' | 'update'\n  req: PayloadRequest\n}\n\ntype TraverseArgs = {\n  blockData?: JsonObject\n  currentSiblingData: JsonObject\n  fields: (Field | TabAsField)[]\n  proposedSiblingData: JsonObject\n} & Args\n\n/**\n * Checks whether a proposed merge changes any field the merging user cannot write.\n *\n * This deliberately evaluates only field access functions. Running the normal field\n * pipeline would also run mutation hooks, defaults and validation during a dry run.\n */\nexport const checkFieldAccess = async ({\n  id,\n  collection,\n  data,\n  doc,\n  global,\n  operation,\n  req,\n}: Args): Promise<boolean> =>\n  traverseFields({\n    id,\n    collection,\n    currentSiblingData: doc,\n    data,\n    doc,\n    fields: (collection?.fields ?? global?.fields) as (Field | TabAsField)[],\n    global,\n    operation,\n    proposedSiblingData: data,\n    req,\n  })\n\nconst traverseFields = async ({\n  id,\n  blockData,\n  collection,\n  currentSiblingData,\n  data,\n  doc,\n  fields,\n  global,\n  operation,\n  proposedSiblingData,\n  req,\n}: TraverseArgs): Promise<boolean> => {\n  for (const field of fields) {\n    if (fieldAffectsData(field) && field.name) {\n      const fieldName = field.name\n      const hasProposedValue = Object.prototype.hasOwnProperty.call(proposedSiblingData, fieldName)\n      const proposedValue = proposedSiblingData[fieldName]\n      const currentValue = currentSiblingData[fieldName]\n      const access = field.access?.[operation]\n\n      if (hasProposedValue && access && !isDeepStrictEqual(proposedValue, currentValue)) {\n        const hasAccess = await access(\n          collection\n            ? {\n                id,\n                blockData,\n                collection,\n                data,\n                doc,\n                req,\n                siblingData: proposedSiblingData,\n              }\n            : {\n                id,\n                blockData,\n                data,\n                doc,\n                global: global!,\n                req,\n                siblingData: proposedSiblingData,\n              },\n        )\n\n        if (!hasAccess) {\n          return false\n        }\n      }\n    }\n\n    switch (field.type) {\n      case 'array': {\n        const proposedRows = proposedSiblingData[field.name]\n        const currentRows = currentSiblingData[field.name]\n\n        if (!Array.isArray(proposedRows)) {\n          break\n        }\n\n        for (const proposedRow of proposedRows) {\n          if (!isJsonObject(proposedRow)) {\n            continue\n          }\n\n          const currentRow = findCurrentRow({ currentRows, proposedRow })\n          const hasAccess = await traverseFields({\n            id,\n            collection,\n            currentSiblingData: currentRow,\n            data,\n            doc,\n            fields: field.fields,\n            global,\n            operation,\n            proposedSiblingData: proposedRow,\n            req,\n          })\n\n          if (!hasAccess) {\n            return false\n          }\n        }\n\n        break\n      }\n\n      case 'blocks': {\n        const proposedRows = proposedSiblingData[field.name]\n        const currentRows = currentSiblingData[field.name]\n\n        if (!Array.isArray(proposedRows)) {\n          break\n        }\n\n        for (const proposedRow of proposedRows) {\n          if (!isJsonObject(proposedRow)) {\n            continue\n          }\n\n          const currentRow = findCurrentRow({ currentRows, proposedRow })\n          const blockType = proposedRow.blockType ?? currentRow.blockType\n          const block = field.blocks\n            .map((each) => (typeof each === 'string' ? req.payload.blocks[each] : each))\n            .find((each) => each?.slug === blockType)\n\n          if (!block) {\n            continue\n          }\n\n          const hasAccess = await traverseFields({\n            id,\n            blockData: proposedRow,\n            collection,\n            currentSiblingData: currentRow,\n            data,\n            doc,\n            fields: block.fields,\n            global,\n            operation,\n            proposedSiblingData: proposedRow,\n            req,\n          })\n\n          if (!hasAccess) {\n            return false\n          }\n        }\n\n        break\n      }\n\n      case 'collapsible':\n      case 'row': {\n        const hasAccess = await traverseFields({\n          id,\n          blockData,\n          collection,\n          currentSiblingData,\n          data,\n          doc,\n          fields: field.fields,\n          global,\n          operation,\n          proposedSiblingData,\n          req,\n        })\n\n        if (!hasAccess) {\n          return false\n        }\n\n        break\n      }\n\n      case 'group': {\n        const proposedGroup = fieldAffectsData(field)\n          ? proposedSiblingData[field.name]\n          : proposedSiblingData\n        const currentGroup = fieldAffectsData(field)\n          ? currentSiblingData[field.name]\n          : currentSiblingData\n\n        if (!isJsonObject(proposedGroup)) {\n          break\n        }\n\n        const hasAccess = await traverseFields({\n          id,\n          blockData,\n          collection,\n          currentSiblingData: isJsonObject(currentGroup) ? currentGroup : {},\n          data,\n          doc,\n          fields: field.fields,\n          global,\n          operation,\n          proposedSiblingData: proposedGroup,\n          req,\n        })\n\n        if (!hasAccess) {\n          return false\n        }\n\n        break\n      }\n\n      case 'tab': {\n        const proposedTab = tabHasName(field)\n          ? proposedSiblingData[field.name]\n          : proposedSiblingData\n        const currentTab = tabHasName(field) ? currentSiblingData[field.name] : currentSiblingData\n\n        if (!isJsonObject(proposedTab)) {\n          break\n        }\n\n        const hasAccess = await traverseFields({\n          id,\n          blockData,\n          collection,\n          currentSiblingData: isJsonObject(currentTab) ? currentTab : {},\n          data,\n          doc,\n          fields: field.fields,\n          global,\n          operation,\n          proposedSiblingData: proposedTab,\n          req,\n        })\n\n        if (!hasAccess) {\n          return false\n        }\n\n        break\n      }\n\n      case 'tabs': {\n        const hasAccess = await traverseFields({\n          id,\n          blockData,\n          collection,\n          currentSiblingData,\n          data,\n          doc,\n          fields: field.tabs.map((tab) => ({ ...tab, type: 'tab' })),\n          global,\n          operation,\n          proposedSiblingData,\n          req,\n        })\n\n        if (!hasAccess) {\n          return false\n        }\n\n        break\n      }\n\n      default:\n        break\n    }\n  }\n\n  return true\n}\n\nconst findCurrentRow = ({\n  currentRows,\n  proposedRow,\n}: {\n  currentRows: unknown\n  proposedRow: JsonObject\n}): JsonObject => {\n  if (!Array.isArray(currentRows)) {\n    return {}\n  }\n\n  if (proposedRow.id !== undefined) {\n    const matchingRow = currentRows.find(\n      (row) => isJsonObject(row) && String(row.id) === String(proposedRow.id),\n    )\n\n    if (isJsonObject(matchingRow)) {\n      return matchingRow\n    }\n  }\n\n  return {}\n}\n\nconst isJsonObject = (value: unknown): value is JsonObject =>\n  Boolean(value && typeof value === 'object' && !Array.isArray(value))\n"],"names":["isDeepStrictEqual","fieldAffectsData","tabHasName","checkFieldAccess","id","collection","data","doc","global","operation","req","traverseFields","currentSiblingData","fields","proposedSiblingData","blockData","field","name","fieldName","hasProposedValue","Object","prototype","hasOwnProperty","call","proposedValue","currentValue","access","hasAccess","siblingData","type","proposedRows","currentRows","Array","isArray","proposedRow","isJsonObject","currentRow","findCurrentRow","blockType","block","blocks","map","each","payload","find","slug","proposedGroup","currentGroup","proposedTab","currentTab","tabs","tab","undefined","matchingRow","row","String","value","Boolean"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,YAAW;AAO7C,SAASC,gBAAgB,EAAEC,UAAU,QAAQ,4BAA2B;AAmBxE;;;;;CAKC,GACD,OAAO,MAAMC,mBAAmB,OAAO,EACrCC,EAAE,EACFC,UAAU,EACVC,IAAI,EACJC,GAAG,EACHC,MAAM,EACNC,SAAS,EACTC,GAAG,EACE,GACLC,eAAe;QACbP;QACAC;QACAO,oBAAoBL;QACpBD;QACAC;QACAM,QAASR,YAAYQ,UAAUL,QAAQK;QACvCL;QACAC;QACAK,qBAAqBR;QACrBI;IACF,GAAE;AAEJ,MAAMC,iBAAiB,OAAO,EAC5BP,EAAE,EACFW,SAAS,EACTV,UAAU,EACVO,kBAAkB,EAClBN,IAAI,EACJC,GAAG,EACHM,MAAM,EACNL,MAAM,EACNC,SAAS,EACTK,mBAAmB,EACnBJ,GAAG,EACU;IACb,KAAK,MAAMM,SAASH,OAAQ;QAC1B,IAAIZ,iBAAiBe,UAAUA,MAAMC,IAAI,EAAE;YACzC,MAAMC,YAAYF,MAAMC,IAAI;YAC5B,MAAME,mBAAmBC,OAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACT,qBAAqBI;YACnF,MAAMM,gBAAgBV,mBAAmB,CAACI,UAAU;YACpD,MAAMO,eAAeb,kBAAkB,CAACM,UAAU;YAClD,MAAMQ,SAASV,MAAMU,MAAM,EAAE,CAACjB,UAAU;YAExC,IAAIU,oBAAoBO,UAAU,CAAC1B,kBAAkBwB,eAAeC,eAAe;gBACjF,MAAME,YAAY,MAAMD,OACtBrB,aACI;oBACED;oBACAW;oBACAV;oBACAC;oBACAC;oBACAG;oBACAkB,aAAad;gBACf,IACA;oBACEV;oBACAW;oBACAT;oBACAC;oBACAC,QAAQA;oBACRE;oBACAkB,aAAad;gBACf;gBAGN,IAAI,CAACa,WAAW;oBACd,OAAO;gBACT;YACF;QACF;QAEA,OAAQX,MAAMa,IAAI;YAChB,KAAK;gBAAS;oBACZ,MAAMC,eAAehB,mBAAmB,CAACE,MAAMC,IAAI,CAAC;oBACpD,MAAMc,cAAcnB,kBAAkB,CAACI,MAAMC,IAAI,CAAC;oBAElD,IAAI,CAACe,MAAMC,OAAO,CAACH,eAAe;wBAChC;oBACF;oBAEA,KAAK,MAAMI,eAAeJ,aAAc;wBACtC,IAAI,CAACK,aAAaD,cAAc;4BAC9B;wBACF;wBAEA,MAAME,aAAaC,eAAe;4BAAEN;4BAAaG;wBAAY;wBAC7D,MAAMP,YAAY,MAAMhB,eAAe;4BACrCP;4BACAC;4BACAO,oBAAoBwB;4BACpB9B;4BACAC;4BACAM,QAAQG,MAAMH,MAAM;4BACpBL;4BACAC;4BACAK,qBAAqBoB;4BACrBxB;wBACF;wBAEA,IAAI,CAACiB,WAAW;4BACd,OAAO;wBACT;oBACF;oBAEA;gBACF;YAEA,KAAK;gBAAU;oBACb,MAAMG,eAAehB,mBAAmB,CAACE,MAAMC,IAAI,CAAC;oBACpD,MAAMc,cAAcnB,kBAAkB,CAACI,MAAMC,IAAI,CAAC;oBAElD,IAAI,CAACe,MAAMC,OAAO,CAACH,eAAe;wBAChC;oBACF;oBAEA,KAAK,MAAMI,eAAeJ,aAAc;wBACtC,IAAI,CAACK,aAAaD,cAAc;4BAC9B;wBACF;wBAEA,MAAME,aAAaC,eAAe;4BAAEN;4BAAaG;wBAAY;wBAC7D,MAAMI,YAAYJ,YAAYI,SAAS,IAAIF,WAAWE,SAAS;wBAC/D,MAAMC,QAAQvB,MAAMwB,MAAM,CACvBC,GAAG,CAAC,CAACC,OAAU,OAAOA,SAAS,WAAWhC,IAAIiC,OAAO,CAACH,MAAM,CAACE,KAAK,GAAGA,MACrEE,IAAI,CAAC,CAACF,OAASA,MAAMG,SAASP;wBAEjC,IAAI,CAACC,OAAO;4BACV;wBACF;wBAEA,MAAMZ,YAAY,MAAMhB,eAAe;4BACrCP;4BACAW,WAAWmB;4BACX7B;4BACAO,oBAAoBwB;4BACpB9B;4BACAC;4BACAM,QAAQ0B,MAAM1B,MAAM;4BACpBL;4BACAC;4BACAK,qBAAqBoB;4BACrBxB;wBACF;wBAEA,IAAI,CAACiB,WAAW;4BACd,OAAO;wBACT;oBACF;oBAEA;gBACF;YAEA,KAAK;YACL,KAAK;gBAAO;oBACV,MAAMA,YAAY,MAAMhB,eAAe;wBACrCP;wBACAW;wBACAV;wBACAO;wBACAN;wBACAC;wBACAM,QAAQG,MAAMH,MAAM;wBACpBL;wBACAC;wBACAK;wBACAJ;oBACF;oBAEA,IAAI,CAACiB,WAAW;wBACd,OAAO;oBACT;oBAEA;gBACF;YAEA,KAAK;gBAAS;oBACZ,MAAMmB,gBAAgB7C,iBAAiBe,SACnCF,mBAAmB,CAACE,MAAMC,IAAI,CAAC,GAC/BH;oBACJ,MAAMiC,eAAe9C,iBAAiBe,SAClCJ,kBAAkB,CAACI,MAAMC,IAAI,CAAC,GAC9BL;oBAEJ,IAAI,CAACuB,aAAaW,gBAAgB;wBAChC;oBACF;oBAEA,MAAMnB,YAAY,MAAMhB,eAAe;wBACrCP;wBACAW;wBACAV;wBACAO,oBAAoBuB,aAAaY,gBAAgBA,eAAe,CAAC;wBACjEzC;wBACAC;wBACAM,QAAQG,MAAMH,MAAM;wBACpBL;wBACAC;wBACAK,qBAAqBgC;wBACrBpC;oBACF;oBAEA,IAAI,CAACiB,WAAW;wBACd,OAAO;oBACT;oBAEA;gBACF;YAEA,KAAK;gBAAO;oBACV,MAAMqB,cAAc9C,WAAWc,SAC3BF,mBAAmB,CAACE,MAAMC,IAAI,CAAC,GAC/BH;oBACJ,MAAMmC,aAAa/C,WAAWc,SAASJ,kBAAkB,CAACI,MAAMC,IAAI,CAAC,GAAGL;oBAExE,IAAI,CAACuB,aAAaa,cAAc;wBAC9B;oBACF;oBAEA,MAAMrB,YAAY,MAAMhB,eAAe;wBACrCP;wBACAW;wBACAV;wBACAO,oBAAoBuB,aAAac,cAAcA,aAAa,CAAC;wBAC7D3C;wBACAC;wBACAM,QAAQG,MAAMH,MAAM;wBACpBL;wBACAC;wBACAK,qBAAqBkC;wBACrBtC;oBACF;oBAEA,IAAI,CAACiB,WAAW;wBACd,OAAO;oBACT;oBAEA;gBACF;YAEA,KAAK;gBAAQ;oBACX,MAAMA,YAAY,MAAMhB,eAAe;wBACrCP;wBACAW;wBACAV;wBACAO;wBACAN;wBACAC;wBACAM,QAAQG,MAAMkC,IAAI,CAACT,GAAG,CAAC,CAACU,MAAS,CAAA;gCAAE,GAAGA,GAAG;gCAAEtB,MAAM;4BAAM,CAAA;wBACvDrB;wBACAC;wBACAK;wBACAJ;oBACF;oBAEA,IAAI,CAACiB,WAAW;wBACd,OAAO;oBACT;oBAEA;gBACF;YAEA;gBACE;QACJ;IACF;IAEA,OAAO;AACT;AAEA,MAAMU,iBAAiB,CAAC,EACtBN,WAAW,EACXG,WAAW,EAIZ;IACC,IAAI,CAACF,MAAMC,OAAO,CAACF,cAAc;QAC/B,OAAO,CAAC;IACV;IAEA,IAAIG,YAAY9B,EAAE,KAAKgD,WAAW;QAChC,MAAMC,cAActB,YAAYa,IAAI,CAClC,CAACU,MAAQnB,aAAamB,QAAQC,OAAOD,IAAIlD,EAAE,MAAMmD,OAAOrB,YAAY9B,EAAE;QAGxE,IAAI+B,aAAakB,cAAc;YAC7B,OAAOA;QACT;IACF;IAEA,OAAO,CAAC;AACV;AAEA,MAAMlB,eAAe,CAACqB,QACpBC,QAAQD,SAAS,OAAOA,UAAU,YAAY,CAACxB,MAAMC,OAAO,CAACuB"}

package/dist/branching/collections.d.ts

@@ -0,0 +1,14 @@
+import type { CollectionConfig } from '../collections/config/types.js';
+import type { Config } from '../config/types.js';
+import type { SanitizedBranchingConfig } from './types.js';
+export declare const getBranchesCollection: (branching: SanitizedBranchingConfig) => CollectionConfig;
+export declare const getBranchChangesCollection: (config: Config) => CollectionConfig;
+/**
+ * The merge ledger: what each merge event applied, and when.
+ *
+ * Append-only and read by nobody in the write path, which is the point — it costs
+ * the read predicate nothing, unlike retaining consumed change rows and filtering
+ * them out of the manifest query on every request.
+ */
+export declare const getBranchMergesCollection: () => CollectionConfig;
+//# sourceMappingURL=collections.d.ts.map

package/dist/branching/collections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collections.d.ts","sourceRoot":"","sources":["../../src/branching/collections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAEhD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAsB1D,eAAO,MAAM,qBAAqB,cAAe,wBAAwB,KAAG,gBAiI1E,CAAA;AAEF,eAAO,MAAM,0BAA0B,WAAY,MAAM,KAAG,gBAsG3D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,QAAO,gBAsI3C,CAAA"}