@frogbotai/plugin-api-keys 0.33.0 → 0.35.0

package/README.md

@@ -21,7 +21,7 @@ Authorization: Bearer fb_...
 X-API-Key: fb_...
 ```
 
-Plaintext keys are returned only when created. The collection stores SHA-256 hashes and supports multiple independently revoked keys per user.
+Plaintext keys are returned only when created. The collection stores SHA-256 hashes and supports multiple independently revoked keys per user. Minting and rotating need a signed-in session: a request authenticated by an API key gets `403`, so a leaked key can't leave new keys behind. A key can still list, rename, and revoke keys.
 
 A key has no budget or model limits of its own; requests use the owner's AI policy. With AI configured, usage rows include an optional `apiKey` relationship to the authenticating key. Cookie-authenticated requests omit it, and the relationship follows `collectionSlug`.
 

package/dist/client/ApiKeysManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ApiKeysManager.d.ts","sourceRoot":"","sources":["../../src/client/ApiKeysManager.tsx"],"names":[],"mappings":"AAEA,OAAO,cAAc,CAAC;AAiBtB,wBAAgB,cAAc,4CA4I7B;AAED,wBAAgB,YAAY,CAAC,EAC3B,OAAO,GACR,EAAE;IACD,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC5E,2CAsEA"}
+{"version":3,"file":"ApiKeysManager.d.ts","sourceRoot":"","sources":["../../src/client/ApiKeysManager.tsx"],"names":[],"mappings":"AAEA,OAAO,cAAc,CAAC;AAkBtB,wBAAgB,cAAc,4CAyJ7B;AAED,wBAAgB,YAAY,CAAC,EAC3B,OAAO,GACR,EAAE;IACD,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAC5E,2CAkEA"}

package/dist/client/ApiKeysManager.js

@@ -1,30 +1,33 @@
 'use client';
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import './styles.css';
-import { Button, CopyIcon, Modal, TextInput, Tooltip, useConfig, useListQuery, useModal, useRouteCache } from '@payloadcms/ui';
-import { useState } from 'react';
-const modalSlug = 'create-api-key-modal';
+import { Button, Dialog, DialogContent, DialogDescription, DialogFooter, DialogTitle, DialogTrigger, Input, Label, Tooltip } from '@frogbotai/ui';
+import { useConfig, useListQuery, useRouteCache } from '@frogbotai/ui/admin';
+import { CopyIcon } from '@frogbotai/ui/icons';
+import { useId, useState } from 'react';
 export function ApiKeysManager() {
     const { config } = useConfig();
     const { collectionSlug } = useListQuery();
-    const { closeModal, openModal } = useModal();
     const { clearRouteCache } = useRouteCache();
+    const nameId = useId();
+    const [open, setOpen] = useState(false);
     const [name, setName] = useState('');
     const [token, setToken] = useState();
     const [error, setError] = useState();
     const [loading, setLoading] = useState(false);
     const [copied, setCopied] = useState(false);
     const [hoveredControl, setHoveredControl] = useState();
-    function open() {
-        setName('');
-        setToken(undefined);
-        setError(undefined);
-        setCopied(false);
-        openModal(modalSlug);
-    }
-    function close() {
-        closeModal(modalSlug);
-        if (token) clearRouteCache();
+    function changeOpen(next) {
+        if (next) {
+            setName('');
+            setToken(undefined);
+            setError(undefined);
+            setCopied(false);
+            setHoveredControl(undefined);
+        } else if (token) {
+            clearRouteCache();
+        }
+        setOpen(next);
     }
     async function createKey() {
         if (loading || !name.trim()) return;
@@ -65,111 +68,114 @@ export function ApiKeysManager() {
             }
         };
     }
-    return /*#__PURE__*/ _jsxs(_Fragment, {
+    return /*#__PURE__*/ _jsxs(Dialog, {
+        open: open,
+        onOpenChange: changeOpen,
         children: [
-            /*#__PURE__*/ _jsx(Button, {
-                buttonStyle: "secondary",
-                margin: false,
-                onClick: open,
-                type: "button",
-                children: "Create API key"
+            /*#__PURE__*/ _jsx(DialogTrigger, {
+                asChild: true,
+                children: /*#__PURE__*/ _jsx(Button, {
+                    variant: "secondary",
+                    type: "button",
+                    children: "Create API key"
+                })
             }),
-            /*#__PURE__*/ _jsx(Modal, {
-                className: "api-keys-modal",
-                closeOnBlur: true,
-                onClose: close,
-                slug: modalSlug,
-                children: /*#__PURE__*/ _jsxs("div", {
-                    className: "api-keys-modal__wrapper",
-                    children: [
-                        /*#__PURE__*/ _jsxs("div", {
-                            className: "api-keys-modal__content",
-                            children: [
-                                /*#__PURE__*/ _jsx("h1", {
-                                    children: "Create API Key"
-                                }),
-                                token ? /*#__PURE__*/ _jsxs(_Fragment, {
-                                    children: [
-                                        /*#__PURE__*/ _jsx("p", {
-                                            className: "api-keys-modal__warning",
-                                            role: "alert",
-                                            children: "Key generated! Copy it now — you won't see it again."
-                                        }),
-                                        /*#__PURE__*/ _jsxs("div", {
-                                            className: "api-keys-modal__token-row",
-                                            children: [
-                                                /*#__PURE__*/ _jsxs("button", {
-                                                    "aria-label": "Click to copy API key",
-                                                    className: "api-keys-clear-button api-keys-modal__token",
-                                                    type: "button",
-                                                    ...copyHandlers('token'),
-                                                    children: [
-                                                        /*#__PURE__*/ _jsx("code", {
-                                                            children: token
-                                                        }),
-                                                        /*#__PURE__*/ _jsx(Tooltip, {
-                                                            delay: copied ? 0 : undefined,
-                                                            show: hoveredControl === 'token',
-                                                            children: copied ? 'Copied' : 'Click to copy'
-                                                        })
-                                                    ]
-                                                }),
-                                                /*#__PURE__*/ _jsxs("button", {
-                                                    "aria-label": "Copy API key",
-                                                    className: "api-keys-clear-button api-keys-slide-up-1 api-keys-modal__copy",
-                                                    type: "button",
-                                                    ...copyHandlers('icon'),
-                                                    children: [
-                                                        /*#__PURE__*/ _jsx(CopyIcon, {}),
-                                                        /*#__PURE__*/ _jsx(Tooltip, {
-                                                            delay: copied ? 0 : undefined,
-                                                            show: hoveredControl === 'icon',
-                                                            children: copied ? 'Copied' : 'Copy'
-                                                        })
-                                                    ]
-                                                })
-                                            ]
+            /*#__PURE__*/ _jsxs(DialogContent, {
+                className: "api-keys-dialog",
+                withCloseButton: false,
+                children: [
+                    /*#__PURE__*/ _jsx(DialogTitle, {
+                        children: "Create API Key"
+                    }),
+                    token ? /*#__PURE__*/ _jsxs(_Fragment, {
+                        children: [
+                            /*#__PURE__*/ _jsx(DialogDescription, {
+                                className: "api-keys-dialog__warning",
+                                role: "alert",
+                                children: "Key generated! Copy it now — you won't see it again."
+                            }),
+                            /*#__PURE__*/ _jsxs("div", {
+                                className: "api-keys-dialog__token-row",
+                                children: [
+                                    /*#__PURE__*/ _jsx(Tooltip, {
+                                        label: copied ? 'Copied' : 'Click to copy',
+                                        open: hoveredControl === 'token',
+                                        children: /*#__PURE__*/ _jsx("button", {
+                                            "aria-label": "Click to copy API key",
+                                            className: "api-keys-dialog__token",
+                                            type: "button",
+                                            ...copyHandlers('token'),
+                                            children: /*#__PURE__*/ _jsx("code", {
+                                                children: token
+                                            })
+                                        })
+                                    }),
+                                    /*#__PURE__*/ _jsx(Tooltip, {
+                                        label: copied ? 'Copied' : 'Copy',
+                                        open: hoveredControl === 'icon',
+                                        children: /*#__PURE__*/ _jsx(Button, {
+                                            "aria-label": "Copy API key",
+                                            size: "icon",
+                                            type: "button",
+                                            variant: "ghost",
+                                            ...copyHandlers('icon'),
+                                            children: /*#__PURE__*/ _jsx(CopyIcon, {})
                                         })
-                                    ]
-                                }) : /*#__PURE__*/ _jsx(TextInput, {
-                                    label: "Key name",
-                                    path: "api-key-name",
-                                    placeholder: "Key name (e.g. My MacBook CLI)",
-                                    readOnly: loading,
-                                    value: name,
-                                    onChange: (event)=>setName(event.target.value),
-                                    onKeyDown: (event)=>{
-                                        if (event.key === 'Enter') {
-                                            event.preventDefault();
-                                            void createKey();
+                                    })
+                                ]
+                            })
+                        ]
+                    }) : /*#__PURE__*/ _jsxs(_Fragment, {
+                        children: [
+                            /*#__PURE__*/ _jsx(DialogDescription, {
+                                children: "Name the key after the script or tool that uses it."
+                            }),
+                            /*#__PURE__*/ _jsxs("div", {
+                                className: "api-keys-dialog__field",
+                                children: [
+                                    /*#__PURE__*/ _jsx(Label, {
+                                        htmlFor: nameId,
+                                        children: "Key name"
+                                    }),
+                                    /*#__PURE__*/ _jsx(Input, {
+                                        id: nameId,
+                                        placeholder: "Key name (e.g. My MacBook CLI)",
+                                        readOnly: loading,
+                                        value: name,
+                                        onChange: (event)=>setName(event.target.value),
+                                        onKeyDown: (event)=>{
+                                            if (event.key === 'Enter') {
+                                                event.preventDefault();
+                                                void createKey();
+                                            }
                                         }
-                                    }
-                                }),
-                                error ? /*#__PURE__*/ _jsx("p", {
-                                    role: "alert",
-                                    children: error
-                                }) : null
-                            ]
-                        }),
-                        /*#__PURE__*/ _jsxs("div", {
-                            className: "api-keys-modal__controls",
-                            children: [
-                                /*#__PURE__*/ _jsx(Button, {
-                                    buttonStyle: "secondary",
-                                    onClick: close,
-                                    type: "button",
-                                    children: token ? 'Close' : 'Dismiss'
-                                }),
-                                token ? null : /*#__PURE__*/ _jsx(Button, {
-                                    disabled: loading || !name.trim(),
-                                    onClick: createKey,
-                                    type: "button",
-                                    children: loading ? 'Generating…' : 'Generate'
-                                })
-                            ]
-                        })
-                    ]
-                })
+                                    })
+                                ]
+                            })
+                        ]
+                    }),
+                    error ? /*#__PURE__*/ _jsx("p", {
+                        className: "api-keys-dialog__error",
+                        role: "alert",
+                        children: error
+                    }) : null,
+                    /*#__PURE__*/ _jsxs(DialogFooter, {
+                        children: [
+                            /*#__PURE__*/ _jsx(Button, {
+                                variant: "secondary",
+                                onClick: ()=>changeOpen(false),
+                                type: "button",
+                                children: token ? 'Close' : 'Dismiss'
+                            }),
+                            token ? null : /*#__PURE__*/ _jsx(Button, {
+                                disabled: loading || !name.trim(),
+                                onClick: createKey,
+                                type: "button",
+                                children: loading ? 'Generating…' : 'Generate'
+                            })
+                        ]
+                    })
+                ]
             })
         ]
     });
@@ -177,12 +183,15 @@ export function ApiKeysManager() {
 export function RevokeApiKey({ rowData }) {
     const { config } = useConfig();
     const { collectionSlug } = useListQuery();
-    const { closeModal, openModal } = useModal();
     const { clearRouteCache } = useRouteCache();
+    const [open, setOpen] = useState(false);
     const [loading, setLoading] = useState(false);
     const [revoked, setRevoked] = useState(false);
     const [error, setError] = useState();
-    const confirmSlug = `revoke-api-key-modal-${rowData.id}`;
+    function changeOpen(next) {
+        if (next) setError(undefined);
+        setOpen(next);
+    }
     async function revoke() {
         setLoading(true);
         setError(undefined);
@@ -195,69 +204,62 @@ export function RevokeApiKey({ rowData }) {
             setError(result.error ?? 'Unable to revoke API key');
             return;
         }
-        closeModal(confirmSlug);
+        setOpen(false);
         setRevoked(true);
         clearRouteCache();
     }
     if (revoked || rowData.revokedAt) return /*#__PURE__*/ _jsx("span", {
         children: "Revoked"
     });
-    return /*#__PURE__*/ _jsxs(_Fragment, {
+    return /*#__PURE__*/ _jsxs(Dialog, {
+        open: open,
+        onOpenChange: changeOpen,
         children: [
-            /*#__PURE__*/ _jsx(Button, {
-                margin: false,
-                buttonStyle: "secondary",
-                onClick: ()=>openModal(confirmSlug),
-                size: "small",
-                type: "button",
-                children: "Revoke"
-            }),
-            /*#__PURE__*/ _jsx(Modal, {
-                className: "api-keys-modal",
-                closeOnBlur: true,
-                onClose: ()=>closeModal(confirmSlug),
-                slug: confirmSlug,
-                children: /*#__PURE__*/ _jsxs("div", {
-                    className: "api-keys-modal__wrapper",
-                    children: [
-                        /*#__PURE__*/ _jsxs("div", {
-                            className: "api-keys-modal__content",
-                            children: [
-                                /*#__PURE__*/ _jsx("h1", {
-                                    children: "Revoke API Key"
-                                }),
-                                /*#__PURE__*/ _jsxs("p", {
-                                    children: [
-                                        "This will immediately disable ",
-                                        rowData.name ?? 'this key',
-                                        ". Any scripts or tools using this key will stop working. This cannot be undone."
-                                    ]
-                                }),
-                                error ? /*#__PURE__*/ _jsx("p", {
-                                    role: "alert",
-                                    children: error
-                                }) : null
-                            ]
-                        }),
-                        /*#__PURE__*/ _jsxs("div", {
-                            className: "api-keys-modal__controls",
-                            children: [
-                                /*#__PURE__*/ _jsx(Button, {
-                                    buttonStyle: "secondary",
-                                    onClick: ()=>closeModal(confirmSlug),
-                                    type: "button",
-                                    children: "Cancel"
-                                }),
-                                /*#__PURE__*/ _jsx(Button, {
-                                    disabled: loading,
-                                    onClick: revoke,
-                                    type: "button",
-                                    children: loading ? 'Revoking…' : 'Revoke key'
-                                })
-                            ]
-                        })
-                    ]
+            /*#__PURE__*/ _jsx(DialogTrigger, {
+                asChild: true,
+                children: /*#__PURE__*/ _jsx(Button, {
+                    size: "sm",
+                    type: "button",
+                    variant: "secondary",
+                    children: "Revoke"
                 })
+            }),
+            /*#__PURE__*/ _jsxs(DialogContent, {
+                className: "api-keys-dialog",
+                withCloseButton: false,
+                children: [
+                    /*#__PURE__*/ _jsx(DialogTitle, {
+                        children: "Revoke API Key"
+                    }),
+                    /*#__PURE__*/ _jsxs(DialogDescription, {
+                        children: [
+                            "This will immediately disable ",
+                            rowData.name ?? 'this key',
+                            ". Any scripts or tools using this key will stop working. This cannot be undone."
+                        ]
+                    }),
+                    error ? /*#__PURE__*/ _jsx("p", {
+                        className: "api-keys-dialog__error",
+                        role: "alert",
+                        children: error
+                    }) : null,
+                    /*#__PURE__*/ _jsxs(DialogFooter, {
+                        children: [
+                            /*#__PURE__*/ _jsx(Button, {
+                                variant: "secondary",
+                                onClick: ()=>changeOpen(false),
+                                type: "button",
+                                children: "Cancel"
+                            }),
+                            /*#__PURE__*/ _jsx(Button, {
+                                disabled: loading,
+                                onClick: revoke,
+                                type: "button",
+                                children: loading ? 'Revoking…' : 'Revoke key'
+                            })
+                        ]
+                    })
+                ]
             })
         ]
     });

package/dist/client/ApiKeysManager.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/client/ApiKeysManager.tsx"],"names":["Button","CopyIcon","Modal","TextInput","Tooltip","useConfig","useListQuery","useModal","useRouteCache","useState","modalSlug","ApiKeysManager","config","collectionSlug","closeModal","openModal","clearRouteCache","name","setName","token","setToken","error","setError","loading","setLoading","copied","setCopied","hoveredControl","setHoveredControl","open","undefined","close","createKey","trim","response","fetch","routes","api","method","headers","body","JSON","stringify","result","json","ok","copyToken","navigator","clipboard","writeText","copyHandlers","control","onClick","onMouseEnter","onMouseLeave","buttonStyle","margin","type","className","closeOnBlur","onClose","slug","div","h1","p","role","button","aria-label","code","delay","show","label","path","placeholder","readOnly","value","onChange","event","target","onKeyDown","key","preventDefault","disabled","RevokeApiKey","rowData","revoked","setRevoked","confirmSlug","id","revoke","revokedAt","span","size"],"mappings":"AAAA;;AAEA,OAAO,eAAe;AAEtB,SACEA,MAAM,EACNC,QAAQ,EACRC,KAAK,EACLC,SAAS,EACTC,OAAO,EACPC,SAAS,EACTC,YAAY,EACZC,QAAQ,EACRC,aAAa,QACR,iBAAiB;AACxB,SAA+CC,QAAQ,QAAQ,QAAQ;AAEvE,MAAMC,YAAY;AAElB,OAAO,SAASC;IACd,MAAM,EAAEC,MAAM,EAAE,GAAGP;IACnB,MAAM,EAAEQ,cAAc,EAAE,GAAGP;IAC3B,MAAM,EAAEQ,UAAU,EAAEC,SAAS,EAAE,GAAGR;IAClC,MAAM,EAAES,eAAe,EAAE,GAAGR;IAC5B,MAAM,CAACS,MAAMC,QAAQ,GAAGT,SAAS;IACjC,MAAM,CAACU,OAAOC,SAAS,GAAGX;IAC1B,MAAM,CAACY,OAAOC,SAAS,GAAGb;IAC1B,MAAM,CAACc,SAASC,WAAW,GAAGf,SAAS;IACvC,MAAM,CAACgB,QAAQC,UAAU,GAAGjB,SAAS;IACrC,MAAM,CAACkB,gBAAgBC,kBAAkB,GAAGnB;IAE5C,SAASoB;QACPX,QAAQ;QACRE,SAASU;QACTR,SAASQ;QACTJ,UAAU;QACVX,UAAUL;IACZ;IAEA,SAASqB;QACPjB,WAAWJ;QACX,IAAIS,OAAOH;IACb;IAEA,eAAegB;QACb,IAAIT,WAAW,CAACN,KAAKgB,IAAI,IAAI;QAE7BT,WAAW;QACXF,SAASQ;QAET,MAAMI,WAAW,MAAMC,MAAM,GAAGvB,OAAOwB,MAAM,CAACC,GAAG,CAAC,CAAC,EAAExB,eAAe,KAAK,CAAC,EAAE;YAC1EyB,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,MAAMC,KAAKC,SAAS,CAAC;gBAAEzB;YAAK;QAC9B;QAEA,MAAM0B,SAAU,MAAMT,SAASU,IAAI;QAEnCpB,WAAW;QACX,IAAI,CAACU,SAASW,EAAE,IAAI,CAACF,OAAOxB,KAAK,EAAE;YACjCG,SAASqB,OAAOtB,KAAK,IAAI;YAEzB;QACF;QAEAD,SAASuB,OAAOxB,KAAK;IACvB;IAEA,eAAe2B;QACb,IAAI,CAAC3B,OAAO;QACZ,MAAM4B,UAAUC,SAAS,CAACC,SAAS,CAAC9B;QACpCO,UAAU;IACZ;IAEA,SAASwB,aAAaC,OAAyB;QAC7C,OAAO;YACLC,SAASN;YACTO,cAAc;gBACZzB,kBAAkBuB;gBAClBzB,UAAU;YACZ;YACA4B,cAAc;gBACZ1B,kBAAkBE;gBAClBJ,UAAU;YACZ;QACF;IACF;IAEA,qBACE;;0BACE,KAAC1B;gBAAOuD,aAAY;gBAAYC,QAAQ;gBAAOJ,SAASvB;gBAAM4B,MAAK;0BAAS;;0BAG5E,KAACvD;gBAAMwD,WAAU;gBAAiBC,WAAW;gBAACC,SAAS7B;gBAAO8B,MAAMnD;0BAClE,cAAA,MAACoD;oBAAIJ,WAAU;;sCACb,MAACI;4BAAIJ,WAAU;;8CACb,KAACK;8CAAG;;gCACH5C,sBACC;;sDACE,KAAC6C;4CAAEN,WAAU;4CAA0BO,MAAK;sDAAQ;;sDAGpD,MAACH;4CAAIJ,WAAU;;8DACb,MAACQ;oDACCC,cAAW;oDACXT,WAAU;oDACVD,MAAK;oDACJ,GAAGP,aAAa,QAAQ;;sEAEzB,KAACkB;sEAAMjD;;sEACP,KAACf;4DAAQiE,OAAO5C,SAAS,IAAIK;4DAAWwC,MAAM3C,mBAAmB;sEAC9DF,SAAS,WAAW;;;;8DAGzB,MAACyC;oDACCC,cAAW;oDACXT,WAAU;oDACVD,MAAK;oDACJ,GAAGP,aAAa,OAAO;;sEAExB,KAACjD;sEACD,KAACG;4DAAQiE,OAAO5C,SAAS,IAAIK;4DAAWwC,MAAM3C,mBAAmB;sEAC9DF,SAAS,WAAW;;;;;;;mDAM7B,KAACtB;oCACCoE,OAAM;oCACNC,MAAK;oCACLC,aAAY;oCACZC,UAAUnD;oCACVoD,OAAO1D;oCACP2D,UAAU,CAACC,QAAyC3D,QAAQ2D,MAAMC,MAAM,CAACH,KAAK;oCAC9EI,WAAW,CAACF;wCACV,IAAIA,MAAMG,GAAG,KAAK,SAAS;4CACzBH,MAAMI,cAAc;4CACpB,KAAKjD;wCACP;oCACF;;gCAGHX,sBAAQ,KAAC2C;oCAAEC,MAAK;8CAAS5C;qCAAa;;;sCAEzC,MAACyC;4BAAIJ,WAAU;;8CACb,KAAC1D;oCAAOuD,aAAY;oCAAYH,SAASrB;oCAAO0B,MAAK;8CAClDtC,QAAQ,UAAU;;gCAEpBA,QAAQ,qBACP,KAACnB;oCAAOkF,UAAU3D,WAAW,CAACN,KAAKgB,IAAI;oCAAImB,SAASpB;oCAAWyB,MAAK;8CACjElC,UAAU,gBAAgB;;;;;;;;;AAQ3C;AAEA,OAAO,SAAS4D,aAAa,EAC3BC,OAAO,EAGR;IACC,MAAM,EAAExE,MAAM,EAAE,GAAGP;IACnB,MAAM,EAAEQ,cAAc,EAAE,GAAGP;IAC3B,MAAM,EAAEQ,UAAU,EAAEC,SAAS,EAAE,GAAGR;IAClC,MAAM,EAAES,eAAe,EAAE,GAAGR;IAC5B,MAAM,CAACe,SAASC,WAAW,GAAGf,SAAS;IACvC,MAAM,CAAC4E,SAASC,WAAW,GAAG7E,SAAS;IACvC,MAAM,CAACY,OAAOC,SAAS,GAAGb;IAC1B,MAAM8E,cAAc,CAAC,qBAAqB,EAAEH,QAAQI,EAAE,EAAE;IAExD,eAAeC;QACbjE,WAAW;QACXF,SAASQ;QACT,MAAMI,WAAW,MAAMC,MAAM,GAAGvB,OAAOwB,MAAM,CAACC,GAAG,CAAC,CAAC,EAAExB,eAAe,CAAC,EAAEuE,QAAQI,EAAE,CAAC,OAAO,CAAC,EAAE;YAC1FlD,QAAQ;QACV;QAEAd,WAAW;QACX,IAAI,CAACU,SAASW,EAAE,EAAE;YAChB,MAAMF,SAAU,MAAMT,SAASU,IAAI;YACnCtB,SAASqB,OAAOtB,KAAK,IAAI;YAEzB;QACF;QAEAP,WAAWyE;QACXD,WAAW;QACXtE;IACF;IAEA,IAAIqE,WAAWD,QAAQM,SAAS,EAAE,qBAAO,KAACC;kBAAK;;IAE/C,qBACE;;0BACE,KAAC3F;gBACCwD,QAAQ;gBACRD,aAAY;gBACZH,SAAS,IAAMrC,UAAUwE;gBACzBK,MAAK;gBACLnC,MAAK;0BACN;;0BAGD,KAACvD;gBACCwD,WAAU;gBACVC,WAAW;gBACXC,SAAS,IAAM9C,WAAWyE;gBAC1B1B,MAAM0B;0BAEN,cAAA,MAACzB;oBAAIJ,WAAU;;sCACb,MAACI;4BAAIJ,WAAU;;8CACb,KAACK;8CAAG;;8CACJ,MAACC;;wCAAE;wCAC8BoB,QAAQnE,IAAI,IAAI;wCAAW;;;gCAG3DI,sBAAQ,KAAC2C;oCAAEC,MAAK;8CAAS5C;qCAAa;;;sCAEzC,MAACyC;4BAAIJ,WAAU;;8CACb,KAAC1D;oCAAOuD,aAAY;oCAAYH,SAAS,IAAMtC,WAAWyE;oCAAc9B,MAAK;8CAAS;;8CAGtF,KAACzD;oCAAOkF,UAAU3D;oCAAS6B,SAASqC;oCAAQhC,MAAK;8CAC9ClC,UAAU,cAAc;;;;;;;;;AAOvC","file":"ApiKeysManager.js"}
+{"version":3,"sources":["../../src/client/ApiKeysManager.tsx"],"names":["Button","Dialog","DialogContent","DialogDescription","DialogFooter","DialogTitle","DialogTrigger","Input","Label","Tooltip","useConfig","useListQuery","useRouteCache","CopyIcon","useId","useState","ApiKeysManager","config","collectionSlug","clearRouteCache","nameId","open","setOpen","name","setName","token","setToken","error","setError","loading","setLoading","copied","setCopied","hoveredControl","setHoveredControl","changeOpen","next","undefined","createKey","trim","response","fetch","routes","api","method","headers","body","JSON","stringify","result","json","ok","copyToken","navigator","clipboard","writeText","copyHandlers","control","onClick","onMouseEnter","onMouseLeave","onOpenChange","asChild","variant","type","className","withCloseButton","role","div","label","button","aria-label","code","size","htmlFor","id","placeholder","readOnly","value","onChange","event","target","onKeyDown","key","preventDefault","p","disabled","RevokeApiKey","rowData","revoked","setRevoked","revoke","revokedAt","span"],"mappings":"AAAA;;AAEA,OAAO,eAAe;AAEtB,SACEA,MAAM,EACNC,MAAM,EACNC,aAAa,EACbC,iBAAiB,EACjBC,YAAY,EACZC,WAAW,EACXC,aAAa,EACbC,KAAK,EACLC,KAAK,EACLC,OAAO,QACF,gBAAgB;AACvB,SAASC,SAAS,EAAEC,YAAY,EAAEC,aAAa,QAAQ,sBAAsB;AAC7E,SAASC,QAAQ,QAAQ,sBAAsB;AAC/C,SAASC,KAAK,EAAEC,QAAQ,QAAQ,QAAQ;AAExC,OAAO,SAASC;IACd,MAAM,EAAEC,MAAM,EAAE,GAAGP;IACnB,MAAM,EAAEQ,cAAc,EAAE,GAAGP;IAC3B,MAAM,EAAEQ,eAAe,EAAE,GAAGP;IAC5B,MAAMQ,SAASN;IACf,MAAM,CAACO,MAAMC,QAAQ,GAAGP,SAAS;IACjC,MAAM,CAACQ,MAAMC,QAAQ,GAAGT,SAAS;IACjC,MAAM,CAACU,OAAOC,SAAS,GAAGX;IAC1B,MAAM,CAACY,OAAOC,SAAS,GAAGb;IAC1B,MAAM,CAACc,SAASC,WAAW,GAAGf,SAAS;IACvC,MAAM,CAACgB,QAAQC,UAAU,GAAGjB,SAAS;IACrC,MAAM,CAACkB,gBAAgBC,kBAAkB,GAAGnB;IAE5C,SAASoB,WAAWC,IAAa;QAC/B,IAAIA,MAAM;YACRZ,QAAQ;YACRE,SAASW;YACTT,SAASS;YACTL,UAAU;YACVE,kBAAkBG;QACpB,OAAO,IAAIZ,OAAO;YAChBN;QACF;QAEAG,QAAQc;IACV;IAEA,eAAeE;QACb,IAAIT,WAAW,CAACN,KAAKgB,IAAI,IAAI;QAE7BT,WAAW;QACXF,SAASS;QAET,MAAMG,WAAW,MAAMC,MAAM,GAAGxB,OAAOyB,MAAM,CAACC,GAAG,CAAC,CAAC,EAAEzB,eAAe,KAAK,CAAC,EAAE;YAC1E0B,QAAQ;YACRC,SAAS;gBAAE,gBAAgB;YAAmB;YAC9CC,MAAMC,KAAKC,SAAS,CAAC;gBAAEzB;YAAK;QAC9B;QAEA,MAAM0B,SAAU,MAAMT,SAASU,IAAI;QAEnCpB,WAAW;QACX,IAAI,CAACU,SAASW,EAAE,IAAI,CAACF,OAAOxB,KAAK,EAAE;YACjCG,SAASqB,OAAOtB,KAAK,IAAI;YAEzB;QACF;QAEAD,SAASuB,OAAOxB,KAAK;IACvB;IAEA,eAAe2B;QACb,IAAI,CAAC3B,OAAO;QACZ,MAAM4B,UAAUC,SAAS,CAACC,SAAS,CAAC9B;QACpCO,UAAU;IACZ;IAEA,SAASwB,aAAaC,OAAyB;QAC7C,OAAO;YACLC,SAASN;YACTO,cAAc;gBACZzB,kBAAkBuB;gBAClBzB,UAAU;YACZ;YACA4B,cAAc;gBACZ1B,kBAAkBG;gBAClBL,UAAU;YACZ;QACF;IACF;IAEA,qBACE,MAAC/B;QAAOoB,MAAMA;QAAMwC,cAAc1B;;0BAChC,KAAC7B;gBAAcwD,OAAO;0BACpB,cAAA,KAAC9D;oBAAO+D,SAAQ;oBAAYC,MAAK;8BAAS;;;0BAI5C,MAAC9D;gBAAc+D,WAAU;gBAAkBC,iBAAiB;;kCAC1D,KAAC7D;kCAAY;;oBACZoB,sBACC;;0CACE,KAACtB;gCAAkB8D,WAAU;gCAA2BE,MAAK;0CAAQ;;0CAGrE,MAACC;gCAAIH,WAAU;;kDACb,KAACxD;wCACC4D,OAAOtC,SAAS,WAAW;wCAC3BV,MAAMY,mBAAmB;kDAEzB,cAAA,KAACqC;4CACCC,cAAW;4CACXN,WAAU;4CACVD,MAAK;4CACJ,GAAGR,aAAa,QAAQ;sDAEzB,cAAA,KAACgB;0DAAM/C;;;;kDAGX,KAAChB;wCAAQ4D,OAAOtC,SAAS,WAAW;wCAAQV,MAAMY,mBAAmB;kDACnE,cAAA,KAACjC;4CACCuE,cAAW;4CACXE,MAAK;4CACLT,MAAK;4CACLD,SAAQ;4CACP,GAAGP,aAAa,OAAO;sDAExB,cAAA,KAAC3C;;;;;;uCAMT;;0CACE,KAACV;0CAAkB;;0CAGnB,MAACiE;gCAAIH,WAAU;;kDACb,KAACzD;wCAAMkE,SAAStD;kDAAQ;;kDACxB,KAACb;wCACCoE,IAAIvD;wCACJwD,aAAY;wCACZC,UAAUhD;wCACViD,OAAOvD;wCACPwD,UAAU,CAACC,QAAUxD,QAAQwD,MAAMC,MAAM,CAACH,KAAK;wCAC/CI,WAAW,CAACF;4CACV,IAAIA,MAAMG,GAAG,KAAK,SAAS;gDACzBH,MAAMI,cAAc;gDACpB,KAAK9C;4CACP;wCACF;;;;;;oBAKPX,sBACC,KAAC0D;wBAAEpB,WAAU;wBAAyBE,MAAK;kCACxCxC;yBAED;kCACJ,MAACvB;;0CACC,KAACJ;gCAAO+D,SAAQ;gCAAYL,SAAS,IAAMvB,WAAW;gCAAQ6B,MAAK;0CAChEvC,QAAQ,UAAU;;4BAEpBA,QAAQ,qBACP,KAACzB;gCAAOsF,UAAUzD,WAAW,CAACN,KAAKgB,IAAI;gCAAImB,SAASpB;gCAAW0B,MAAK;0CACjEnC,UAAU,gBAAgB;;;;;;;;AAOzC;AAEA,OAAO,SAAS0D,aAAa,EAC3BC,OAAO,EAGR;IACC,MAAM,EAAEvE,MAAM,EAAE,GAAGP;IACnB,MAAM,EAAEQ,cAAc,EAAE,GAAGP;IAC3B,MAAM,EAAEQ,eAAe,EAAE,GAAGP;IAC5B,MAAM,CAACS,MAAMC,QAAQ,GAAGP,SAAS;IACjC,MAAM,CAACc,SAASC,WAAW,GAAGf,SAAS;IACvC,MAAM,CAAC0E,SAASC,WAAW,GAAG3E,SAAS;IACvC,MAAM,CAACY,OAAOC,SAAS,GAAGb;IAE1B,SAASoB,WAAWC,IAAa;QAC/B,IAAIA,MAAMR,SAASS;QAEnBf,QAAQc;IACV;IAEA,eAAeuD;QACb7D,WAAW;QACXF,SAASS;QACT,MAAMG,WAAW,MAAMC,MAAM,GAAGxB,OAAOyB,MAAM,CAACC,GAAG,CAAC,CAAC,EAAEzB,eAAe,CAAC,EAAEsE,QAAQb,EAAE,CAAC,OAAO,CAAC,EAAE;YAC1F/B,QAAQ;QACV;QAEAd,WAAW;QACX,IAAI,CAACU,SAASW,EAAE,EAAE;YAChB,MAAMF,SAAU,MAAMT,SAASU,IAAI;YACnCtB,SAASqB,OAAOtB,KAAK,IAAI;YAEzB;QACF;QAEAL,QAAQ;QACRoE,WAAW;QACXvE;IACF;IAEA,IAAIsE,WAAWD,QAAQI,SAAS,EAAE,qBAAO,KAACC;kBAAK;;IAE/C,qBACE,MAAC5F;QAAOoB,MAAMA;QAAMwC,cAAc1B;;0BAChC,KAAC7B;gBAAcwD,OAAO;0BACpB,cAAA,KAAC9D;oBAAOyE,MAAK;oBAAKT,MAAK;oBAASD,SAAQ;8BAAY;;;0BAItD,MAAC7D;gBAAc+D,WAAU;gBAAkBC,iBAAiB;;kCAC1D,KAAC7D;kCAAY;;kCACb,MAACF;;4BAAkB;4BACcqF,QAAQjE,IAAI,IAAI;4BAAW;;;oBAG3DI,sBACC,KAAC0D;wBAAEpB,WAAU;wBAAyBE,MAAK;kCACxCxC;yBAED;kCACJ,MAACvB;;0CACC,KAACJ;gCAAO+D,SAAQ;gCAAYL,SAAS,IAAMvB,WAAW;gCAAQ6B,MAAK;0CAAS;;0CAG5E,KAAChE;gCAAOsF,UAAUzD;gCAAS6B,SAASiC;gCAAQ3B,MAAK;0CAC9CnC,UAAU,cAAc;;;;;;;;AAMrC","file":"ApiKeysManager.js"}

package/dist/client/styles.css

@@ -1,91 +1,59 @@
 @layer frogbot {
-  .api-keys-modal {
-    align-items: center;
-    backdrop-filter: blur(8px);
-    background: color-mix(in srgb, var(--theme-elevation-0) 80%, transparent);
-    display: flex;
-    height: 100%;
-    justify-content: center;
+  .fb-dialog__content.api-keys-dialog {
+    gap: 1rem;
+    max-width: 45rem;
   }
 
-  .api-keys-modal__wrapper {
-    background: var(--theme-elevation-50);
-    border: 1px solid var(--theme-elevation-150);
-    border-radius: var(--style-radius-m);
+  .api-keys-dialog__field {
     display: flex;
     flex-direction: column;
-    gap: 24px;
-    max-width: 720px;
-    padding: 32px;
-    position: relative;
-    width: min(90vw, 720px);
-    z-index: 1;
+    gap: 0.5rem;
   }
 
-  .api-keys-modal__content {
-    display: flex;
-    flex-direction: column;
-    gap: 12px;
+  .fb-dialog__description.api-keys-dialog__warning {
+    color: var(--color-text);
+    font-weight: 600;
   }
 
-  .api-keys-modal__content > * {
+  .api-keys-dialog__error {
     margin: 0;
+    color: var(--color-text-danger);
+    font-size: var(--fb-text-sm);
+    line-height: var(--fb-text-sm--line-height);
   }
 
-  .api-keys-modal__warning {
-    color: var(--theme-success-500);
-    font-weight: 600;
-  }
-
-  .api-keys-modal__token-row {
-    align-items: center;
-    background: var(--theme-elevation-0);
-    border: 1px solid var(--theme-elevation-150);
-    border-radius: var(--style-radius-m);
+  .api-keys-dialog__token-row {
     display: flex;
-    gap: 8px;
-    padding: 4px 4px 4px 16px;
+    align-items: center;
+    gap: 0.5rem;
+    min-width: 0;
+    padding: 0.25rem 0.25rem 0.25rem 1rem;
+    background: var(--color-bg-secondary);
+    border: 1px solid var(--color-border);
+    border-radius: var(--fb-radius-lg);
     transition: border-color 200ms ease-out;
   }
 
-  .api-keys-modal__token-row:hover {
-    border-color: var(--theme-elevation-400);
+  .api-keys-dialog__token-row:hover {
+    border-color: var(--special-border-translucent-strong);
   }
 
-  .api-keys-modal__token {
+  .api-keys-dialog__token {
     flex: 1;
-    overflow-wrap: anywhere;
-    padding: 8px 0;
-    position: relative;
+    min-width: 0;
+    padding: 0.5rem 0;
+    color: inherit;
+    font: inherit;
+    line-height: 1.4;
     text-align: left;
-  }
-
-  .api-keys-modal__copy {
-    padding: 9px;
-    position: relative;
-  }
-
-  .api-keys-modal__controls {
-    display: flex;
-    gap: 12px;
-  }
-
-  .api-keys-clear-button {
+    overflow-wrap: anywhere;
+    cursor: pointer;
     background: none;
     border: none;
-    box-shadow: none;
-    box-sizing: border-box;
-    cursor: pointer;
-    line-height: 1;
-    margin: 0;
-    outline: none;
-  }
-
-  .api-keys-slide-up-1 {
-    transition: transform 200ms ease-out;
   }
 
-  .api-keys-slide-up-1:hover {
-    transform: translateY(-4px);
+  .api-keys-dialog__token:focus-visible {
+    outline: 2px solid var(--accessibility-focus-color);
+    outline-offset: 2px;
   }
 }

package/dist/collection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAIrB,KAAK,cAAc,EAEpB,MAAM,SAAS,CAAC;AAMjB,KAAK,iBAAiB,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,CAAC;AAiJF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAkHpF"}
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EAIrB,KAAK,cAAc,EAEpB,MAAM,SAAS,CAAC;AAYjB,KAAK,iBAAiB,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,CAAC;AAyJF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAqHpF"}

package/dist/collection.js

@@ -1,6 +1,11 @@
 import { moneyField } from 'frogbot';
-import { ApiKeyServiceError, mintApiKey, revokeApiKey, rotateApiKey } from './server/services.js';
+import { ApiKeyServiceError, isApiKeyRequest, mintApiKey, revokeApiKey, rotateApiKey } from './server/services.js';
 const MANAGER_COMPONENT = '@frogbotai/plugin-api-keys/client#ApiKeysManager';
+const sessionRequired = ()=>Response.json({
+        error: 'An API key cannot mint or rotate API keys. Sign in to manage keys.'
+    }, {
+        status: 403
+    });
 const ownKeys = ({ req })=>req.user ? {
         owner: {
             equals: req.user.id
@@ -64,6 +69,7 @@ function createEndpoints({ collectionSlug, tokenPrefix, canRevokeAnyKey }) {
                 }, {
                     status: 401
                 });
+                if (isApiKeyRequest(req)) return sessionRequired();
                 const body = await req.json?.().catch(()=>null) ?? null;
                 const name = typeof body?.name === 'string' ? body.name.trim() : '';
                 if (!name) return Response.json({
@@ -146,6 +152,7 @@ function createEndpoints({ collectionSlug, tokenPrefix, canRevokeAnyKey }) {
                 }, {
                     status: 401
                 });
+                if (isApiKeyRequest(req)) return sessionRequired();
                 const id = req.routeParams?.id;
                 if (typeof id !== 'string' || !id) {
                     return Response.json({
@@ -303,6 +310,13 @@ export function createApiKeysCollection(options) {
             plural: 'API Keys'
         },
         timestamps: true,
+        versions: false,
+        authorship: false,
+        custom: {
+            frogbot: {
+                internal: true
+            }
+        },
         ...existing,
         ...collection,
         access: {

package/dist/collection.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/collection.ts"],"names":["moneyField","ApiKeyServiceError","mintApiKey","revokeApiKey","rotateApiKey","MANAGER_COMPONENT","ownKeys","req","user","owner","equals","id","mergeFields","groups","fields","Map","group","field","key","name","JSON","stringify","set","values","createViews","usageCollection","views","length","type","defaultFields","components","beforeTable","index","findIndex","view","map","position","createEndpoints","collectionSlug","tokenPrefix","canRevokeAnyKey","method","path","handler","Response","json","error","status","body","catch","trim","code","routeParams","anyOwner","_name","_owner","result","createApiKeysCollection","options","authCollection","collection","existing","required","relationTo","access","update","admin","readOnly","unique","read","hidden","condition","_","siblingData","Boolean","revokedAt","label","virtual","hooks","afterRead","data","undefined","frogbot","find","depth","overrideAccess","pagination","where","apiKey","docs","reduce","total","doc","cost","costUSD","Cell","endpoints","slug","labels","singular","plural","timestamps","create","delete","icon","useAsTitle"],"mappings":"AAAA,SAOEA,UAAU,QACL,UAAU;AAEjB,SAASC,kBAAkB,EAAEC,UAAU,EAAEC,YAAY,EAAEC,YAAY,QAAQ,uBAAuB;AAElG,MAAMC,oBAAoB;AAY1B,MAAMC,UAAkB,CAAC,EAAEC,GAAG,EAAE,GAAMA,IAAIC,IAAI,GAAG;QAAEC,OAAO;YAAEC,QAAQH,IAAIC,IAAI,CAACG,EAAE;QAAC;IAAE,IAAI;AAEtF,SAASC,YAAY,GAAGC,MAA+B;IACrD,MAAMC,SAAS,IAAIC;IAEnB,KAAK,MAAMC,SAASH,OAAQ;QAC1B,KAAK,MAAMI,SAASD,SAAS,EAAE,CAAE;YAC/B,MAAME,MAAM,UAAUD,SAASA,MAAME,IAAI,GAAGF,MAAME,IAAI,GAAGC,KAAKC,SAAS,CAACJ;YACxEH,OAAOQ,GAAG,CAACJ,KAAKD;QAClB;IACF;IAEA,OAAO;WAAIH,OAAOS,MAAM;KAAG;AAC7B;AAEA,SAASC,YAAY,EACnBC,eAAe,EACfC,KAAK,EACqE;IAC1E,IAAI,CAACA,OAAOC,QAAQ;QAClB,OAAO;YACL;gBACEC,MAAM;gBACNC,eAAe;oBACb;oBACA;uBACIJ,kBAAkB;wBAAC;qBAAe,GAAG,EAAE;oBAC3C;oBACA;oBACA;iBACD;gBACDK,YAAY;oBAAEC,aAAa;wBAAC1B;qBAAkB;gBAAC;YACjD;SACD;IACH;IAEA,MAAM2B,QAAQN,MAAMO,SAAS,CAAC,CAACC,OAASA,KAAKN,IAAI,KAAK;IAEtD,OAAOF,MAAMS,GAAG,CAAC,CAACD,MAAME,WACtBA,aAAaJ,SAASE,KAAKN,IAAI,KAAK,SAChC;YACE,GAAGM,IAAI;YACPJ,YAAY;gBACV,GAAGI,KAAKJ,UAAU;gBAClBC,aAAa;oBAAC1B;uBAAuB6B,KAAKJ,UAAU,EAAEC,eAAe,EAAE;iBAAE;YAC3E;QACF,IACAG;AAER;AAEA,SAASG,gBAAgB,EACvBC,cAAc,EACdC,WAAW,EACXC,eAAe,EAC+D;IAC9E,OAAO;QACL;YACEC,QAAQ;YACRC,MAAM;YACNC,SAAS,OAAOpC;gBACd,IAAI,CAACA,IAAIC,IAAI,EAAE,OAAOoC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;gBACxF,MAAMC,OAAQ,AAAC,MAAMzC,IAAIsC,IAAI,KAAKI,MAAM,IAAM,SAAU;gBACxD,MAAM9B,OAAO,OAAO6B,MAAM7B,SAAS,WAAW6B,KAAK7B,IAAI,CAAC+B,IAAI,KAAK;gBACjE,IAAI,CAAC/B,MAAM,OAAOyB,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAmB,GAAG;oBAAEC,QAAQ;gBAAI;gBAC7E,IAAI;oBACF,OAAOH,SAASC,IAAI,CAAC,MAAM3C,WAAW;wBAAEK;wBAAK+B;wBAAgBC;wBAAapB;oBAAK,IAAI;wBACjF4B,QAAQ;oBACV;gBACF,EAAE,OAAOD,OAAO;oBACd,IAAIA,iBAAiB7C,sBAAsB6C,MAAMK,IAAI,KAAK,2BAA2B;wBACnF,OAAOP,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAA0B,GAAG;4BAAEC,QAAQ;wBAAI;oBAC3E;oBAEA,MAAMD;gBACR;YACF;QACF;QACA;YACEL,QAAQ;YACRC,MAAM;YACNC,SAAS,OAAOpC;gBACd,IAAI,CAACA,IAAIC,IAAI,EAAE,OAAOoC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;gBACxF,MAAMpC,KAAKJ,IAAI6C,WAAW,EAAEzC;gBAC5B,IAAI,OAAOA,OAAO,YAAY,CAACA,IAAI;oBACjC,OAAOiC,SAASC,IAAI,CAAC;wBAAEC,OAAO;oBAAoB,GAAG;wBAAEC,QAAQ;oBAAI;gBACrE;gBAEA,IAAI;oBACF,MAAMM,WAAW,AAAC,MAAMb,kBAAkBjC,SAAU;oBACpD,MAAM,EACJY,MAAMmC,KAAK,EACX7C,OAAO8C,MAAM,EACb,GAAGC,QACJ,GAAG,MAAMrD,aAAa;wBAAEI;wBAAK+B;wBAAgB3B;wBAAI0C;oBAAS;oBAE3D,OAAOT,SAASC,IAAI,CAACW;gBACvB,EAAE,OAAOV,OAAO;oBACd,IAAIA,iBAAiB7C,sBAAsB6C,MAAMK,IAAI,KAAK,2BAA2B;wBACnF,OAAOP,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAA0B,GAAG;4BAAEC,QAAQ;wBAAI;oBAC3E;oBAEA,IAAID,iBAAiB7C,sBAAsB6C,MAAMK,IAAI,KAAK,aAAa;wBACrE,OAAOP,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAAoB,GAAG;4BAAEC,QAAQ;wBAAI;oBACrE;oBAEA,MAAMD;gBACR;YACF;QACF;QACA;YACEL,QAAQ;YACRC,MAAM;YACNC,SAAS,OAAOpC;gBACd,IAAI,CAACA,IAAIC,IAAI,EAAE,OAAOoC,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;gBACxF,MAAMpC,KAAKJ,IAAI6C,WAAW,EAAEzC;gBAC5B,IAAI,OAAOA,OAAO,YAAY,CAACA,IAAI;oBACjC,OAAOiC,SAASC,IAAI,CAAC;wBAAEC,OAAO;oBAAoB,GAAG;wBAAEC,QAAQ;oBAAI;gBACrE;gBAEA,IAAI;oBACF,MAAMM,WAAW,AAAC,MAAMb,kBAAkBjC,SAAU;oBAEpD,OAAOqC,SAASC,IAAI,CAClB,MAAMzC,aAAa;wBAAEG;wBAAK+B;wBAAgB3B;wBAAI4B;wBAAac;oBAAS,IACpE;wBAAEN,QAAQ;oBAAI;gBAElB,EAAE,OAAOD,OAAO;oBACd,IAAIA,iBAAiB7C,sBAAsB6C,MAAMK,IAAI,KAAK,2BAA2B;wBACnF,OAAOP,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAA0B,GAAG;4BAAEC,QAAQ;wBAAI;oBAC3E;oBAEA,IAAID,iBAAiB7C,sBAAsB6C,MAAMK,IAAI,KAAK,aAAa;wBACrE,OAAOP,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAAoB,GAAG;4BAAEC,QAAQ;wBAAI;oBACrE;oBAEA,MAAMD;gBACR;YACF;QACF;KACD;AACH;AAEA,OAAO,SAASW,wBAAwBC,OAA0B;IAChE,MAAM,EAAEC,cAAc,EAAErB,cAAc,EAAEsB,UAAU,EAAEC,QAAQ,EAAEpC,eAAe,EAAE,GAAGiC;IAClF,MAAM5C,SAAkB;QACtB;YAAEK,MAAM;YAAQS,MAAM;YAAQkC,UAAU;QAAK;QAC7C;YACE3C,MAAM;YACNS,MAAM;YACNmC,YAAYJ;YACZG,UAAU;YACV9B,OAAO;YACPgC,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;QAChC;QACA;YACE9C,MAAM;YACNS,MAAM;YACNkC,UAAU;YACV9B,OAAO;YACPgC,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;YAC9BC,OAAO;gBAAEC,UAAU;YAAK;QAC1B;QACA;YACEhD,MAAM;YACNS,MAAM;YACNkC,UAAU;YACVM,QAAQ;YACRpC,OAAO;YACPgC,QAAQ;gBAAEK,MAAM,IAAM;gBAAOJ,QAAQ,IAAM;YAAM;YACjDC,OAAO;gBAAEI,QAAQ;YAAK;QACxB;QACA;YACEnD,MAAM;YACNS,MAAM;YACNoC,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;YAC9BC,OAAO;gBAAEC,UAAU;YAAK;QAC1B;QACA;YACEhD,MAAM;YACNS,MAAM;YACNI,OAAO;YACPgC,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;YAC9BC,OAAO;gBAAEC,UAAU;gBAAMI,WAAW,CAACC,GAAGC,cAAgBC,QAAQD,YAAYE,SAAS;YAAE;QACzF;WACIlD,kBACA;YACEzB,WAAW;gBACTmB,MAAM;gBACNyD,OAAO;gBACPC,SAAS;gBACTX,OAAO;oBAAEC,UAAU;gBAAK;gBACxBW,OAAO;oBACLC,WAAW;wBACT,OAAO,EAAEC,IAAI,EAAEzE,GAAG,EAA2D;4BAC3E,IAAIyE,MAAMrE,OAAOsE,WAAW,OAAO;4BACnC,MAAMzB,SAAS,MAAMjD,IAAI2E,OAAO,CAACC,IAAI,CAAC;gCACpCvB,YAAYnC;gCACZ2D,OAAO;gCACPC,gBAAgB;gCAChBC,YAAY;gCACZ/E;gCACAgF,OAAO;oCAAEC,QAAQ;wCAAE9E,QAAQsE,KAAKrE,EAAE;oCAAC;gCAAE;4BACvC;4BAEA,OAAO6C,OAAOiC,IAAI,CAACC,MAAM,CAAC,CAACC,OAAOC;gCAChC,MAAMC,OAAO,AAACD,IAAgCE,OAAO;gCAErD,OAAOH,QAAS,CAAA,OAAOE,SAAS,WAAWA,OAAO,CAAA;4BACpD,GAAG;wBACL;qBACD;gBACH;YACF;SACD,GACD,EAAE;QACN;YACE1E,MAAM;YACNS,MAAM;YACNsC,OAAO;gBAAEpC,YAAY;oBAAEiE,MAAM;gBAAiD;YAAE;QAClF;KACD;IAED,MAAMC,YAAY3D,gBAAgBqB;IAElC,OAAO;QACLuC,MAAM3D;QACN4D,QAAQ;YAAEC,UAAU;YAAWC,QAAQ;QAAW;QAClDC,YAAY;QACZ,GAAGxC,QAAQ;QACX,GAAGD,UAAU;QACbI,QAAQ;YACNsC,QAAQ,IAAM;YACdC,QAAQ,IAAM;YACdlC,MAAM/D;YACN2D,QAAQ3D;YACR,GAAGuD,UAAUG,MAAM;YACnB,GAAGJ,YAAYI,MAAM;QACvB;QACAE,OAAO;YACLsC,MAAM;YACNC,YAAY;YACZ,GAAG5C,UAAUK,KAAK;YAClB,GAAGN,YAAYM,KAAK;YACpBpC,YAAY;gBAAE,GAAG+B,UAAUK,OAAOpC,UAAU;gBAAE,GAAG8B,YAAYM,OAAOpC,UAAU;YAAC;YAC/EJ,OAAOF,YAAY;gBACjBC;gBACAC,OAAOkC,YAAYM,OAAOxC,SAASmC,UAAUK,OAAOxC;YACtD;QACF;QACAsE,WAAW;eAAIA;eAAenC,UAAUmC,aAAa,EAAE;eAAOpC,YAAYoC,aAAa,EAAE;SAAE;QAC3FlF,QAAQF,YAAYE,QAAQ+C,UAAU/C,QAAQ8C,YAAY9C;QAC1DgE,OAAO;YACL,GAAGjB,UAAUiB,KAAK;YAClB,GAAGlB,YAAYkB,KAAK;QACtB;IACF;AACF","file":"collection.js"}
+{"version":3,"sources":["../src/collection.ts"],"names":["moneyField","ApiKeyServiceError","isApiKeyRequest","mintApiKey","revokeApiKey","rotateApiKey","MANAGER_COMPONENT","sessionRequired","Response","json","error","status","ownKeys","req","user","owner","equals","id","mergeFields","groups","fields","Map","group","field","key","name","JSON","stringify","set","values","createViews","usageCollection","views","length","type","defaultFields","components","beforeTable","index","findIndex","view","map","position","createEndpoints","collectionSlug","tokenPrefix","canRevokeAnyKey","method","path","handler","body","catch","trim","code","routeParams","anyOwner","_name","_owner","result","createApiKeysCollection","options","authCollection","collection","existing","required","relationTo","access","update","admin","readOnly","unique","read","hidden","condition","_","siblingData","Boolean","revokedAt","label","virtual","hooks","afterRead","data","undefined","frogbot","find","depth","overrideAccess","pagination","where","apiKey","docs","reduce","total","doc","cost","costUSD","Cell","endpoints","slug","labels","singular","plural","timestamps","versions","authorship","custom","internal","create","delete","icon","useAsTitle"],"mappings":"AAAA,SAOEA,UAAU,QACL,UAAU;AAEjB,SACEC,kBAAkB,EAClBC,eAAe,EACfC,UAAU,EACVC,YAAY,EACZC,YAAY,QACP,uBAAuB;AAE9B,MAAMC,oBAAoB;AAY1B,MAAMC,kBAAkB,IACtBC,SAASC,IAAI,CACX;QAAEC,OAAO;IAAqE,GAC9E;QAAEC,QAAQ;IAAI;AAGlB,MAAMC,UAAkB,CAAC,EAAEC,GAAG,EAAE,GAAMA,IAAIC,IAAI,GAAG;QAAEC,OAAO;YAAEC,QAAQH,IAAIC,IAAI,CAACG,EAAE;QAAC;IAAE,IAAI;AAEtF,SAASC,YAAY,GAAGC,MAA+B;IACrD,MAAMC,SAAS,IAAIC;IAEnB,KAAK,MAAMC,SAASH,OAAQ;QAC1B,KAAK,MAAMI,SAASD,SAAS,EAAE,CAAE;YAC/B,MAAME,MAAM,UAAUD,SAASA,MAAME,IAAI,GAAGF,MAAME,IAAI,GAAGC,KAAKC,SAAS,CAACJ;YACxEH,OAAOQ,GAAG,CAACJ,KAAKD;QAClB;IACF;IAEA,OAAO;WAAIH,OAAOS,MAAM;KAAG;AAC7B;AAEA,SAASC,YAAY,EACnBC,eAAe,EACfC,KAAK,EACqE;IAC1E,IAAI,CAACA,OAAOC,QAAQ;QAClB,OAAO;YACL;gBACEC,MAAM;gBACNC,eAAe;oBACb;oBACA;uBACIJ,kBAAkB;wBAAC;qBAAe,GAAG,EAAE;oBAC3C;oBACA;oBACA;iBACD;gBACDK,YAAY;oBAAEC,aAAa;wBAAC/B;qBAAkB;gBAAC;YACjD;SACD;IACH;IAEA,MAAMgC,QAAQN,MAAMO,SAAS,CAAC,CAACC,OAASA,KAAKN,IAAI,KAAK;IAEtD,OAAOF,MAAMS,GAAG,CAAC,CAACD,MAAME,WACtBA,aAAaJ,SAASE,KAAKN,IAAI,KAAK,SAChC;YACE,GAAGM,IAAI;YACPJ,YAAY;gBACV,GAAGI,KAAKJ,UAAU;gBAClBC,aAAa;oBAAC/B;uBAAuBkC,KAAKJ,UAAU,EAAEC,eAAe,EAAE;iBAAE;YAC3E;QACF,IACAG;AAER;AAEA,SAASG,gBAAgB,EACvBC,cAAc,EACdC,WAAW,EACXC,eAAe,EAC+D;IAC9E,OAAO;QACL;YACEC,QAAQ;YACRC,MAAM;YACNC,SAAS,OAAOpC;gBACd,IAAI,CAACA,IAAIC,IAAI,EAAE,OAAON,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;gBACxF,IAAIT,gBAAgBW,MAAM,OAAON;gBACjC,MAAM2C,OAAQ,AAAC,MAAMrC,IAAIJ,IAAI,KAAK0C,MAAM,IAAM,SAAU;gBACxD,MAAM1B,OAAO,OAAOyB,MAAMzB,SAAS,WAAWyB,KAAKzB,IAAI,CAAC2B,IAAI,KAAK;gBACjE,IAAI,CAAC3B,MAAM,OAAOjB,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAAmB,GAAG;oBAAEC,QAAQ;gBAAI;gBAC7E,IAAI;oBACF,OAAOH,SAASC,IAAI,CAAC,MAAMN,WAAW;wBAAEU;wBAAK+B;wBAAgBC;wBAAapB;oBAAK,IAAI;wBACjFd,QAAQ;oBACV;gBACF,EAAE,OAAOD,OAAO;oBACd,IAAIA,iBAAiBT,sBAAsBS,MAAM2C,IAAI,KAAK,2BAA2B;wBACnF,OAAO7C,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAA0B,GAAG;4BAAEC,QAAQ;wBAAI;oBAC3E;oBAEA,MAAMD;gBACR;YACF;QACF;QACA;YACEqC,QAAQ;YACRC,MAAM;YACNC,SAAS,OAAOpC;gBACd,IAAI,CAACA,IAAIC,IAAI,EAAE,OAAON,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;gBACxF,MAAMM,KAAKJ,IAAIyC,WAAW,EAAErC;gBAC5B,IAAI,OAAOA,OAAO,YAAY,CAACA,IAAI;oBACjC,OAAOT,SAASC,IAAI,CAAC;wBAAEC,OAAO;oBAAoB,GAAG;wBAAEC,QAAQ;oBAAI;gBACrE;gBAEA,IAAI;oBACF,MAAM4C,WAAW,AAAC,MAAMT,kBAAkBjC,SAAU;oBACpD,MAAM,EACJY,MAAM+B,KAAK,EACXzC,OAAO0C,MAAM,EACb,GAAGC,QACJ,GAAG,MAAMtD,aAAa;wBAAES;wBAAK+B;wBAAgB3B;wBAAIsC;oBAAS;oBAE3D,OAAO/C,SAASC,IAAI,CAACiD;gBACvB,EAAE,OAAOhD,OAAO;oBACd,IAAIA,iBAAiBT,sBAAsBS,MAAM2C,IAAI,KAAK,2BAA2B;wBACnF,OAAO7C,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAA0B,GAAG;4BAAEC,QAAQ;wBAAI;oBAC3E;oBAEA,IAAID,iBAAiBT,sBAAsBS,MAAM2C,IAAI,KAAK,aAAa;wBACrE,OAAO7C,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAAoB,GAAG;4BAAEC,QAAQ;wBAAI;oBACrE;oBAEA,MAAMD;gBACR;YACF;QACF;QACA;YACEqC,QAAQ;YACRC,MAAM;YACNC,SAAS,OAAOpC;gBACd,IAAI,CAACA,IAAIC,IAAI,EAAE,OAAON,SAASC,IAAI,CAAC;oBAAEC,OAAO;gBAA0B,GAAG;oBAAEC,QAAQ;gBAAI;gBACxF,IAAIT,gBAAgBW,MAAM,OAAON;gBACjC,MAAMU,KAAKJ,IAAIyC,WAAW,EAAErC;gBAC5B,IAAI,OAAOA,OAAO,YAAY,CAACA,IAAI;oBACjC,OAAOT,SAASC,IAAI,CAAC;wBAAEC,OAAO;oBAAoB,GAAG;wBAAEC,QAAQ;oBAAI;gBACrE;gBAEA,IAAI;oBACF,MAAM4C,WAAW,AAAC,MAAMT,kBAAkBjC,SAAU;oBAEpD,OAAOL,SAASC,IAAI,CAClB,MAAMJ,aAAa;wBAAEQ;wBAAK+B;wBAAgB3B;wBAAI4B;wBAAaU;oBAAS,IACpE;wBAAE5C,QAAQ;oBAAI;gBAElB,EAAE,OAAOD,OAAO;oBACd,IAAIA,iBAAiBT,sBAAsBS,MAAM2C,IAAI,KAAK,2BAA2B;wBACnF,OAAO7C,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAA0B,GAAG;4BAAEC,QAAQ;wBAAI;oBAC3E;oBAEA,IAAID,iBAAiBT,sBAAsBS,MAAM2C,IAAI,KAAK,aAAa;wBACrE,OAAO7C,SAASC,IAAI,CAAC;4BAAEC,OAAO;wBAAoB,GAAG;4BAAEC,QAAQ;wBAAI;oBACrE;oBAEA,MAAMD;gBACR;YACF;QACF;KACD;AACH;AAEA,OAAO,SAASiD,wBAAwBC,OAA0B;IAChE,MAAM,EAAEC,cAAc,EAAEjB,cAAc,EAAEkB,UAAU,EAAEC,QAAQ,EAAEhC,eAAe,EAAE,GAAG6B;IAClF,MAAMxC,SAAkB;QACtB;YAAEK,MAAM;YAAQS,MAAM;YAAQ8B,UAAU;QAAK;QAC7C;YACEvC,MAAM;YACNS,MAAM;YACN+B,YAAYJ;YACZG,UAAU;YACV1B,OAAO;YACP4B,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;QAChC;QACA;YACE1C,MAAM;YACNS,MAAM;YACN8B,UAAU;YACV1B,OAAO;YACP4B,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;YAC9BC,OAAO;gBAAEC,UAAU;YAAK;QAC1B;QACA;YACE5C,MAAM;YACNS,MAAM;YACN8B,UAAU;YACVM,QAAQ;YACRhC,OAAO;YACP4B,QAAQ;gBAAEK,MAAM,IAAM;gBAAOJ,QAAQ,IAAM;YAAM;YACjDC,OAAO;gBAAEI,QAAQ;YAAK;QACxB;QACA;YACE/C,MAAM;YACNS,MAAM;YACNgC,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;YAC9BC,OAAO;gBAAEC,UAAU;YAAK;QAC1B;QACA;YACE5C,MAAM;YACNS,MAAM;YACNI,OAAO;YACP4B,QAAQ;gBAAEC,QAAQ,IAAM;YAAM;YAC9BC,OAAO;gBAAEC,UAAU;gBAAMI,WAAW,CAACC,GAAGC,cAAgBC,QAAQD,YAAYE,SAAS;YAAE;QACzF;WACI9C,kBACA;YACE/B,WAAW;gBACTyB,MAAM;gBACNqD,OAAO;gBACPC,SAAS;gBACTX,OAAO;oBAAEC,UAAU;gBAAK;gBACxBW,OAAO;oBACLC,WAAW;wBACT,OAAO,EAAEC,IAAI,EAAErE,GAAG,EAA2D;4BAC3E,IAAIqE,MAAMjE,OAAOkE,WAAW,OAAO;4BACnC,MAAMzB,SAAS,MAAM7C,IAAIuE,OAAO,CAACC,IAAI,CAAC;gCACpCvB,YAAY/B;gCACZuD,OAAO;gCACPC,gBAAgB;gCAChBC,YAAY;gCACZ3E;gCACA4E,OAAO;oCAAEC,QAAQ;wCAAE1E,QAAQkE,KAAKjE,EAAE;oCAAC;gCAAE;4BACvC;4BAEA,OAAOyC,OAAOiC,IAAI,CAACC,MAAM,CAAC,CAACC,OAAOC;gCAChC,MAAMC,OAAO,AAACD,IAAgCE,OAAO;gCAErD,OAAOH,QAAS,CAAA,OAAOE,SAAS,WAAWA,OAAO,CAAA;4BACpD,GAAG;wBACL;qBACD;gBACH;YACF;SACD,GACD,EAAE;QACN;YACEtE,MAAM;YACNS,MAAM;YACNkC,OAAO;gBAAEhC,YAAY;oBAAE6D,MAAM;gBAAiD;YAAE;QAClF;KACD;IAED,MAAMC,YAAYvD,gBAAgBiB;IAElC,OAAO;QACLuC,MAAMvD;QACNwD,QAAQ;YAAEC,UAAU;YAAWC,QAAQ;QAAW;QAClDC,YAAY;QACZC,UAAU;QACVC,YAAY;QACZC,QAAQ;YAAEtB,SAAS;gBAAEuB,UAAU;YAAK;QAAE;QACtC,GAAG5C,QAAQ;QACX,GAAGD,UAAU;QACbI,QAAQ;YACN0C,QAAQ,IAAM;YACdC,QAAQ,IAAM;YACdtC,MAAM3D;YACNuD,QAAQvD;YACR,GAAGmD,UAAUG,MAAM;YACnB,GAAGJ,YAAYI,MAAM;QACvB;QACAE,OAAO;YACL0C,MAAM;YACNC,YAAY;YACZ,GAAGhD,UAAUK,KAAK;YAClB,GAAGN,YAAYM,KAAK;YACpBhC,YAAY;gBAAE,GAAG2B,UAAUK,OAAOhC,UAAU;gBAAE,GAAG0B,YAAYM,OAAOhC,UAAU;YAAC;YAC/EJ,OAAOF,YAAY;gBACjBC;gBACAC,OAAO8B,YAAYM,OAAOpC,SAAS+B,UAAUK,OAAOpC;YACtD;QACF;QACAkE,WAAW;eAAIA;eAAenC,UAAUmC,aAAa,EAAE;eAAOpC,YAAYoC,aAAa,EAAE;SAAE;QAC3F9E,QAAQF,YAAYE,QAAQ2C,UAAU3C,QAAQ0C,YAAY1C;QAC1D4D,OAAO;YACL,GAAGjB,UAAUiB,KAAK;YAClB,GAAGlB,YAAYkB,KAAK;QACtB;IACF;AACF","file":"collection.js"}

package/dist/server/services.d.ts

@@ -12,9 +12,10 @@ export type RevokeApiKeyOptions = {
     anyOwner?: boolean;
 };
 export declare class ApiKeyServiceError extends Error {
-    readonly code: 'authentication_required' | 'not_found';
-    constructor(code: 'authentication_required' | 'not_found');
+    readonly code: 'authentication_required' | 'not_found' | 'session_required';
+    constructor(code: 'authentication_required' | 'not_found' | 'session_required');
 }
+export declare function isApiKeyRequest(req: FrogBotRequest): boolean;
 export declare function mintApiKey(options: MintApiKeyOptions): Promise<{
     id: unknown;
     name: string;

package/dist/server/services.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/server/services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAI9C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,cAAc,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,qBAAa,kBAAmB,SAAQ,KAAK;aACf,IAAI,EAAE,yBAAyB,GAAG,WAAW;gBAA7C,IAAI,EAAE,yBAAyB,GAAG,WAAW;CAG1E;AAuBD,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB;;;;;;GAW1D;AAED,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,wBAAsB,YAAY,CAAC,EACjC,GAAG,EACH,cAAc,EACd,EAAE,EACF,WAAW,EACX,QAAQ,GACT,EAAE,mBAAmB;;;;;;GAUrB;AAED,wBAAsB,YAAY,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,mBAAmB;;;;;GAmC5F"}
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../src/server/services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAK9C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,cAAc,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE,cAAc,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,qBAAa,kBAAmB,SAAQ,KAAK;aACf,IAAI,EAAE,yBAAyB,GAAG,WAAW,GAAG,kBAAkB;gBAAlE,IAAI,EAAE,yBAAyB,GAAG,WAAW,GAAG,kBAAkB;CAG/F;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAE5D;AA+BD,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB;;;;;;GAU1D;AAED,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhF,wBAAsB,YAAY,CAAC,EACjC,GAAG,EACH,cAAc,EACd,EAAE,EACF,WAAW,EACX,QAAQ,GACT,EAAE,mBAAmB;;;;;;GAWrB;AAED,wBAAsB,YAAY,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,mBAAmB;;;;;GAmC5F"}

package/dist/server/services.js

@@ -1,3 +1,4 @@
+import { apiKeyStrategyName } from '../strategy.js';
 import { createApiKeyToken, getApiKeyPrefix, hashApiKeyToken } from './token.js';
 export class ApiKeyServiceError extends Error {
     code;
@@ -5,6 +6,15 @@ export class ApiKeyServiceError extends Error {
         super(code), this.code = code;
     }
 }
+export function isApiKeyRequest(req) {
+    return req.user?._strategy === apiKeyStrategyName;
+}
+function requireSessionOwner(req) {
+    const owner = req.user?.id;
+    if (owner === undefined) throw new ApiKeyServiceError('authentication_required');
+    if (isApiKeyRequest(req)) throw new ApiKeyServiceError('session_required');
+    return owner;
+}
 async function mintForOwner({ req, collectionSlug, tokenPrefix, name, owner }) {
     const token = createApiKeyToken({
         tokenPrefix
@@ -30,8 +40,7 @@ async function mintForOwner({ req, collectionSlug, tokenPrefix, name, owner }) {
     };
 }
 export async function mintApiKey(options) {
-    const owner = options.req.user?.id;
-    if (owner === undefined) throw new ApiKeyServiceError('authentication_required');
+    const owner = requireSessionOwner(options.req);
     return mintForOwner({
         req: options.req,
         collectionSlug: options.collectionSlug,
@@ -41,6 +50,7 @@ export async function mintApiKey(options) {
     });
 }
 export async function rotateApiKey({ req, collectionSlug, id, tokenPrefix, anyOwner }) {
+    requireSessionOwner(req);
     const revoked = await revokeApiKey({
         req,
         collectionSlug,

package/dist/server/services.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/services.ts"],"names":["createApiKeyToken","getApiKeyPrefix","hashApiKeyToken","ApiKeyServiceError","Error","code","mintForOwner","req","collectionSlug","tokenPrefix","name","owner","token","prefix","doc","frogbot","create","collection","data","tokenHash","overrideAccess","id","createdAt","mintApiKey","options","user","undefined","rotateApiKey","anyOwner","revoked","revokeApiKey","result","find","depth","limit","where","equals","and","key","docs","revokedAt","Date","toISOString","update"],"mappings":"AAEA,SAASA,iBAAiB,EAAEC,eAAe,EAAEC,eAAe,QAAQ,aAAa;AAgBjF,OAAO,MAAMC,2BAA2BC;;IACtC,YAAY,AAAgBC,IAA6C,CAAE;QACzE,KAAK,CAACA,YADoBA,OAAAA;IAE5B;AACF;AAIA,eAAeC,aAAa,EAC1BC,GAAG,EACHC,cAAc,EACdC,WAAW,EACXC,IAAI,EACJC,KAAK,EACe;IACpB,MAAMC,QAAQZ,kBAAkB;QAAES;IAAY;IAC9C,MAAMI,SAASZ,gBAAgBW;IAC/B,MAAME,MAAO,MAAMP,IAAIQ,OAAO,CAACC,MAAM,CAAC;QACpCC,YAAYT;QACZU,MAAM;YAAER;YAAMC;YAAOE;YAAQM,WAAWjB,gBAAgBU;QAAO;QAC/DQ,gBAAgB;QAChBb;IACF;IAEA,OAAO;QAAEc,IAAIP,IAAIO,EAAE;QAAEX;QAAMG;QAAQD;QAAOU,WAAWR,IAAIQ,SAAS;IAAC;AACrE;AAEA,OAAO,eAAeC,WAAWC,OAA0B;IACzD,MAAMb,QAAQa,QAAQjB,GAAG,CAACkB,IAAI,EAAEJ;IAChC,IAAIV,UAAUe,WAAW,MAAM,IAAIvB,mBAAmB;IAEtD,OAAOG,aAAa;QAClBC,KAAKiB,QAAQjB,GAAG;QAChBC,gBAAgBgB,QAAQhB,cAAc;QACtCC,aAAae,QAAQf,WAAW;QAChCC,MAAMc,QAAQd,IAAI;QAClBC;IACF;AACF;AAIA,OAAO,eAAegB,aAAa,EACjCpB,GAAG,EACHC,cAAc,EACda,EAAE,EACFZ,WAAW,EACXmB,QAAQ,EACY;IACpB,MAAMC,UAAU,MAAMC,aAAa;QAAEvB;QAAKC;QAAgBa;QAAIO;IAAS;IAEvE,OAAOtB,aAAa;QAClBC;QACAC;QACAC;QACAC,MAAMmB,QAAQnB,IAAI;QAClBC,OAAOkB,QAAQlB,KAAK;IACtB;AACF;AAEA,OAAO,eAAemB,aAAa,EAAEvB,GAAG,EAAEC,cAAc,EAAEa,EAAE,EAAEO,QAAQ,EAAuB;IAC3F,MAAMjB,QAAQJ,IAAIkB,IAAI,EAAEJ;IACxB,IAAIV,UAAUe,WAAW,MAAM,IAAIvB,mBAAmB;IACtD,MAAM4B,SAAS,MAAMxB,IAAIQ,OAAO,CAACiB,IAAI,CAAC;QACpCf,YAAYT;QACZyB,OAAO;QACPC,OAAO;QACPd,gBAAgB;QAChBb;QACA4B,OAAOP,WACH;YAAEP,IAAI;gBAAEe,QAAQf;YAAG;QAAE,IACrB;YAAEgB,KAAK;gBAAC;oBAAEhB,IAAI;wBAAEe,QAAQf;oBAAG;gBAAE;gBAAG;oBAAEV,OAAO;wBAAEyB,QAAQzB;oBAAM;gBAAE;aAAE;QAAC;IACpE;IAEA,MAAM2B,MAAMP,OAAOQ,IAAI,CAAC,EAAE;IAC1B,IACE,CAACD,OACA,OAAOA,IAAIjB,EAAE,KAAK,YAAY,OAAOiB,IAAIjB,EAAE,KAAK,YACjD,OAAOiB,IAAI5B,IAAI,KAAK,YACnB,OAAO4B,IAAI3B,KAAK,KAAK,YAAY,OAAO2B,IAAI3B,KAAK,KAAK,UACvD;QACA,MAAM,IAAIR,mBAAmB;IAC/B;IAEA,MAAMqC,YAAY,OAAOF,IAAIE,SAAS,KAAK,WAAWF,IAAIE,SAAS,GAAG,IAAIC,OAAOC,WAAW;IAE5F,MAAMnC,IAAIQ,OAAO,CAAC4B,MAAM,CAAC;QACvB1B,YAAYT;QACZa,IAAIiB,IAAIjB,EAAE;QACVH,MAAM;YAAEsB;QAAU;QAClBpB,gBAAgB;QAChBb;IACF;IAEA,OAAO;QAAEc,IAAIiB,IAAIjB,EAAE;QAAEX,MAAM4B,IAAI5B,IAAI;QAAEC,OAAO2B,IAAI3B,KAAK;QAAE6B;IAAU;AACnE","file":"services.js"}
+{"version":3,"sources":["../../src/server/services.ts"],"names":["apiKeyStrategyName","createApiKeyToken","getApiKeyPrefix","hashApiKeyToken","ApiKeyServiceError","Error","code","isApiKeyRequest","req","user","_strategy","requireSessionOwner","owner","id","undefined","mintForOwner","collectionSlug","tokenPrefix","name","token","prefix","doc","frogbot","create","collection","data","tokenHash","overrideAccess","createdAt","mintApiKey","options","rotateApiKey","anyOwner","revoked","revokeApiKey","result","find","depth","limit","where","equals","and","key","docs","revokedAt","Date","toISOString","update"],"mappings":"AAEA,SAASA,kBAAkB,QAAQ,iBAAiB;AACpD,SAASC,iBAAiB,EAAEC,eAAe,EAAEC,eAAe,QAAQ,aAAa;AAgBjF,OAAO,MAAMC,2BAA2BC;;IACtC,YAAY,AAAgBC,IAAkE,CAAE;QAC9F,KAAK,CAACA,YADoBA,OAAAA;IAE5B;AACF;AAEA,OAAO,SAASC,gBAAgBC,GAAmB;IACjD,OAAO,AAACA,IAAIC,IAAI,EAAiDC,cAAcV;AACjF;AAEA,SAASW,oBAAoBH,GAAmB;IAC9C,MAAMI,QAAQJ,IAAIC,IAAI,EAAEI;IACxB,IAAID,UAAUE,WAAW,MAAM,IAAIV,mBAAmB;IACtD,IAAIG,gBAAgBC,MAAM,MAAM,IAAIJ,mBAAmB;IAEvD,OAAOQ;AACT;AAIA,eAAeG,aAAa,EAC1BP,GAAG,EACHQ,cAAc,EACdC,WAAW,EACXC,IAAI,EACJN,KAAK,EACe;IACpB,MAAMO,QAAQlB,kBAAkB;QAAEgB;IAAY;IAC9C,MAAMG,SAASlB,gBAAgBiB;IAC/B,MAAME,MAAO,MAAMb,IAAIc,OAAO,CAACC,MAAM,CAAC;QACpCC,YAAYR;QACZS,MAAM;YAAEP;YAAMN;YAAOQ;YAAQM,WAAWvB,gBAAgBgB;QAAO;QAC/DQ,gBAAgB;QAChBnB;IACF;IAEA,OAAO;QAAEK,IAAIQ,IAAIR,EAAE;QAAEK;QAAME;QAAQD;QAAOS,WAAWP,IAAIO,SAAS;IAAC;AACrE;AAEA,OAAO,eAAeC,WAAWC,OAA0B;IACzD,MAAMlB,QAAQD,oBAAoBmB,QAAQtB,GAAG;IAE7C,OAAOO,aAAa;QAClBP,KAAKsB,QAAQtB,GAAG;QAChBQ,gBAAgBc,QAAQd,cAAc;QACtCC,aAAaa,QAAQb,WAAW;QAChCC,MAAMY,QAAQZ,IAAI;QAClBN;IACF;AACF;AAIA,OAAO,eAAemB,aAAa,EACjCvB,GAAG,EACHQ,cAAc,EACdH,EAAE,EACFI,WAAW,EACXe,QAAQ,EACY;IACpBrB,oBAAoBH;IACpB,MAAMyB,UAAU,MAAMC,aAAa;QAAE1B;QAAKQ;QAAgBH;QAAImB;IAAS;IAEvE,OAAOjB,aAAa;QAClBP;QACAQ;QACAC;QACAC,MAAMe,QAAQf,IAAI;QAClBN,OAAOqB,QAAQrB,KAAK;IACtB;AACF;AAEA,OAAO,eAAesB,aAAa,EAAE1B,GAAG,EAAEQ,cAAc,EAAEH,EAAE,EAAEmB,QAAQ,EAAuB;IAC3F,MAAMpB,QAAQJ,IAAIC,IAAI,EAAEI;IACxB,IAAID,UAAUE,WAAW,MAAM,IAAIV,mBAAmB;IACtD,MAAM+B,SAAS,MAAM3B,IAAIc,OAAO,CAACc,IAAI,CAAC;QACpCZ,YAAYR;QACZqB,OAAO;QACPC,OAAO;QACPX,gBAAgB;QAChBnB;QACA+B,OAAOP,WACH;YAAEnB,IAAI;gBAAE2B,QAAQ3B;YAAG;QAAE,IACrB;YAAE4B,KAAK;gBAAC;oBAAE5B,IAAI;wBAAE2B,QAAQ3B;oBAAG;gBAAE;gBAAG;oBAAED,OAAO;wBAAE4B,QAAQ5B;oBAAM;gBAAE;aAAE;QAAC;IACpE;IAEA,MAAM8B,MAAMP,OAAOQ,IAAI,CAAC,EAAE;IAC1B,IACE,CAACD,OACA,OAAOA,IAAI7B,EAAE,KAAK,YAAY,OAAO6B,IAAI7B,EAAE,KAAK,YACjD,OAAO6B,IAAIxB,IAAI,KAAK,YACnB,OAAOwB,IAAI9B,KAAK,KAAK,YAAY,OAAO8B,IAAI9B,KAAK,KAAK,UACvD;QACA,MAAM,IAAIR,mBAAmB;IAC/B;IAEA,MAAMwC,YAAY,OAAOF,IAAIE,SAAS,KAAK,WAAWF,IAAIE,SAAS,GAAG,IAAIC,OAAOC,WAAW;IAE5F,MAAMtC,IAAIc,OAAO,CAACyB,MAAM,CAAC;QACvBvB,YAAYR;QACZH,IAAI6B,IAAI7B,EAAE;QACVY,MAAM;YAAEmB;QAAU;QAClBjB,gBAAgB;QAChBnB;IACF;IAEA,OAAO;QAAEK,IAAI6B,IAAI7B,EAAE;QAAEK,MAAMwB,IAAIxB,IAAI;QAAEN,OAAO8B,IAAI9B,KAAK;QAAEgC;IAAU;AACnE","file":"services.js"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frogbotai/plugin-api-keys",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "Multiple named API keys for FrogBot.",
   "license": "MIT",
   "author": "Colby Gilbert",
@@ -32,25 +32,25 @@
     "*.css"
   ],
   "engines": {
-    "node": ">=22"
+    "node": ">=24.21.0"
   },
   "peerDependencies": {
-    "@payloadcms/ui": "3.90.1",
     "react": "^19.0.1 || ^19.1.2 || ^19.2.1",
     "react-dom": "^19.0.1 || ^19.1.2 || ^19.2.1",
-    "@frogbotai/gateway": "0.33.0",
-    "frogbot": "0.33.0"
+    "@frogbotai/gateway": "0.35.0",
+    "frogbot": "0.35.0",
+    "@frogbotai/ui": "0.35.0"
   },
   "devDependencies": {
-    "@payloadcms/ui": "3.90.1",
     "@testing-library/react": "^16.3.0",
     "@types/react": "19.2.14",
-    "react": "19.2.6",
-    "react-dom": "19.2.6",
-    "typescript": "5.6.2",
-    "@frogbotai/gateway": "0.33.0",
-    "@frogbotai/plugin-roles": "0.33.0",
-    "frogbot": "0.33.0"
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
+    "typescript": "6.0.3",
+    "@frogbotai/plugin-roles": "0.35.0",
+    "@frogbotai/gateway": "0.35.0",
+    "@frogbotai/ui": "0.35.0",
+    "frogbot": "0.35.0"
   },
   "publishConfig": {
     "access": "public"