gate locale behind functional consent

dist/modules/access/access.d.js

@@ -1,3 +0,0 @@
-/** Requires at least the given role, for field-level access. */ export { };
-
-//# sourceMappingURL=access.d.js.map

dist/modules/access/access.d.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["access.d.ts"],"sourcesContent":["import type { Access, FieldAccess } from 'payload';\nimport type { Role } from './types.js';\n/**\n * Collection-level access (returns boolean | Where).\n * Use in collection `access.read/create/update/delete`.\n */\nexport declare const adminOnly: Access;\nexport declare const adminOrEditor: Access;\nexport declare const authenticated: Access;\n/** Requires at least the given role. */\nexport declare const requireRole: (minimum: Role) => Access;\n/** Admins see all; others are constrained to their own document. */\nexport declare const adminOrSelf: Access;\n/**\n * Field-level access (returns boolean only — no Where support).\n * Use in field `access.read/update`.\n */\nexport declare const adminOnlyField: FieldAccess;\nexport declare const adminOrEditorField: FieldAccess;\n/** Requires at least the given role, for field-level access. */\nexport declare const requireRoleField: (minimum: Role) => FieldAccess;\n"],"names":[],"mappings":"AAmBA,8DAA8D,GAC9D,WAAsE"}

dist/modules/access/index.d.js

@@ -1,7 +0,0 @@
-export { adminOnly, adminOnlyField, adminOrEditor, adminOrEditorField, adminOrSelf, authenticated, requireRole, requireRoleField } from './access.js';
-export { injectRoles } from './injectRoles.js';
-export { hasMinimumRole, isAdmin, isEditor } from './predicates.js';
-export { buildRolesField } from './rolesField.js';
-export { ROLE_HIERARCHY } from './types.js';
-
-//# sourceMappingURL=index.d.js.map

dist/modules/access/index.d.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["index.d.ts"],"sourcesContent":["export { adminOnly, adminOnlyField, adminOrEditor, adminOrEditorField, adminOrSelf, authenticated, requireRole, requireRoleField, } from './access.js';\nexport { injectRoles } from './injectRoles.js';\nexport { hasMinimumRole, isAdmin, isEditor } from './predicates.js';\nexport { buildRolesField } from './rolesField.js';\nexport type { AccessOption, Role } from './types.js';\nexport { ROLE_HIERARCHY } from './types.js';\n"],"names":["adminOnly","adminOnlyField","adminOrEditor","adminOrEditorField","adminOrSelf","authenticated","requireRole","requireRoleField","injectRoles","hasMinimumRole","isAdmin","isEditor","buildRolesField","ROLE_HIERARCHY"],"mappings":"AAAA,SAASA,SAAS,EAAEC,cAAc,EAAEC,aAAa,EAAEC,kBAAkB,EAAEC,WAAW,EAAEC,aAAa,EAAEC,WAAW,EAAEC,gBAAgB,QAAS,cAAc;AACvJ,SAASC,WAAW,QAAQ,mBAAmB;AAC/C,SAASC,cAAc,EAAEC,OAAO,EAAEC,QAAQ,QAAQ,kBAAkB;AACpE,SAASC,eAAe,QAAQ,kBAAkB;AAElD,SAASC,cAAc,QAAQ,aAAa"}

dist/modules/access/injectRoles.d.js

@@ -1,9 +0,0 @@
-/**
- * Injects the fixed `roles` field into the client's auth collection.
- *
- * The plugin owns the role definition; the client owns the collection. This
- * finds the collection by slug and appends the field. We control the whole
- * stack, so no conflict handling is needed — the field is simply added.
- */ export { };
-
-//# sourceMappingURL=injectRoles.d.js.map

dist/modules/access/injectRoles.d.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["injectRoles.d.ts"],"sourcesContent":["import type { Config } from 'payload';\nimport type { AccessOption } from './types.js';\n/**\n * Injects the fixed `roles` field into the client's auth collection.\n *\n * The plugin owns the role definition; the client owns the collection. This\n * finds the collection by slug and appends the field. We control the whole\n * stack, so no conflict handling is needed — the field is simply added.\n */\nexport declare function injectRoles(config: Config, access: AccessOption): Config;\n"],"names":[],"mappings":"AAEA;;;;;;CAMC,GACD,WAAkF"}

dist/modules/access/predicates.d.js

@@ -1,3 +0,0 @@
-export { };
-
-//# sourceMappingURL=predicates.d.js.map

dist/modules/access/predicates.d.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["predicates.d.ts"],"sourcesContent":["import type { Role } from './types.js';\n/**\n * The plugin can't know the client's generated User type, and Payload types\n * `req.user` loosely (UntypedUser | null). Predicates therefore accept an\n * unknown-ish user and read `roles` defensively — no assumptions about shape\n * beyond an optional roles array.\n */\ntype MaybeUser = {\n    roles?: null | Role[];\n} | null | Record<string, unknown> | undefined;\n/**\n * True if the user holds at least the given role in the hierarchy.\n * admin satisfies 'editor' and 'user'; editor satisfies 'user'.\n */\nexport declare function hasMinimumRole(user: MaybeUser, minimum: Role): boolean;\n/** True if the user is an admin. */\nexport declare function isAdmin(user: MaybeUser): boolean;\n/** True if the user is an editor or higher (editor, admin). */\nexport declare function isEditor(user: MaybeUser): boolean;\nexport {};\n"],"names":[],"mappings":"AAmBA,WAAU"}

dist/modules/access/rolesField.d.js

@@ -1,8 +0,0 @@
-/**
- * Builds the fixed `roles` field the plugin injects into the auth collection.
- *
- * Saved to the JWT so role checks avoid a database lookup. Only admins can
- * change roles, preventing privilege escalation by lower-privilege users.
- */ export { };
-
-//# sourceMappingURL=rolesField.d.js.map

dist/modules/access/rolesField.d.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["rolesField.d.ts"],"sourcesContent":["import type { Field } from 'payload';\nimport type { Role } from './types.js';\n/**\n * Builds the fixed `roles` field the plugin injects into the auth collection.\n *\n * Saved to the JWT so role checks avoid a database lookup. Only admins can\n * change roles, preventing privilege escalation by lower-privilege users.\n */\nexport declare function buildRolesField(defaultRole?: Role): Field;\n"],"names":[],"mappings":"AAEA;;;;;CAKC,GACD,WAAmE"}

dist/modules/access/types.d.js

@@ -1,12 +0,0 @@
-/**
- * Role hierarchy, lowest to highest privilege.
- * A higher role satisfies any requirement met by a lower one.
- */ /**
- * Access-control options.
- *
- * The plugin injects a fixed `roles` field into the client's auth collection
- * — the collection itself belongs to the client (create-payload-app), the
- * role definition belongs to the plugin.
- */ export { };
-
-//# sourceMappingURL=types.d.js.map

dist/modules/access/types.d.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["types.d.ts"],"sourcesContent":["/**\n * Role hierarchy, lowest to highest privilege.\n * A higher role satisfies any requirement met by a lower one.\n */\nexport declare const ROLE_HIERARCHY: readonly [\"user\", \"editor\", \"admin\"];\nexport type Role = (typeof ROLE_HIERARCHY)[number];\n/**\n * Access-control options.\n *\n * The plugin injects a fixed `roles` field into the client's auth collection\n * — the collection itself belongs to the client (create-payload-app), the\n * role definition belongs to the plugin.\n */\nexport type AccessOption = {\n    /** Slug of the client's auth collection, e.g. 'users'. */\n    authCollection: string;\n    /** Role assigned to new users. Defaults to 'user'. */\n    defaultRole?: Role;\n};\n"],"names":[],"mappings":"AAAA;;;CAGC,GAGD;;;;;;CAMC,GACD,WAKE"}