@frogbotai/plugin-api-keys 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 FrogBot
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,39 @@
+# @frogbotai/plugin-api-keys
+
+Add multiple named, independently revocable API keys to a FrogBot application.
+
+```ts
+import { apiKeysPlugin } from '@frogbotai/plugin-api-keys';
+import { buildConfig } from 'frogbot';
+
+export default buildConfig({
+  secret: process.env.FROGBOT_SECRET!,
+  db: databaseAdapter,
+  collections: [{ slug: 'users', auth: true, fields: [] }],
+  plugins: [apiKeysPlugin()],
+});
+```
+
+The plugin adds an `api-keys` collection, owner-scoped management endpoints, API-key authentication, and Payload-default admin controls. Create a key in the API Keys admin collection, then authenticate requests with either header:
+
+```http
+Authorization: Bearer fbt_...
+X-API-Key: fbt_...
+```
+
+Plaintext keys are returned only when created. The collection stores SHA-256 hashes and supports multiple independently revoked keys per user.
+
+```ts
+apiKeysPlugin({
+  authCollection: 'accounts',
+  collectionSlug: 'credentials',
+  tokenPrefix: 'acme',
+  headerNames: ['x-service-key'],
+  collection: {
+    admin: { group: 'Security' },
+    fields: [{ name: 'environment', type: 'text' }],
+  },
+});
+```
+
+Collection overrides merge with the generated fields, access, endpoints, hooks, admin components, and transforms applied by other plugins. The manager uses Payload controls without plugin CSS, so global admin styles continue to apply.

package/dist/client/ApiKeysManager.d.ts

@@ -0,0 +1,2 @@
+export declare function ApiKeysManager(): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ApiKeysManager.d.ts.map

package/dist/client/ApiKeysManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeysManager.d.ts","sourceRoot":"","sources":["../../src/client/ApiKeysManager.tsx"],"names":[],"mappings":"AAYA,wBAAgB,cAAc,4CAmF7B"}

package/dist/client/ApiKeysManager.js

@@ -0,0 +1,55 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Button, TextInput, useConfig, useListQuery } from '@payloadcms/ui';
+import { useState } from 'react';
+export function ApiKeysManager() {
+    const { config } = useConfig();
+    const { collectionSlug, data, query, refineListData } = useListQuery();
+    const [name, setName] = useState('');
+    const [token, setToken] = useState();
+    const [error, setError] = useState();
+    const [loading, setLoading] = useState(false);
+    const api = config.routes.api;
+    async function refresh() {
+        await refineListData(query);
+    }
+    async function createKey() {
+        setLoading(true);
+        setError(undefined);
+        const response = await fetch(`${api}/${collectionSlug}/mint`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ name }),
+        });
+        const result = (await response.json());
+        setLoading(false);
+        if (!response.ok || !result.token) {
+            setError(result.error ?? 'Unable to create API key');
+            return;
+        }
+        setName('');
+        setToken(result.token);
+        await refresh();
+    }
+    async function revokeKey(id) {
+        setLoading(true);
+        setError(undefined);
+        const response = await fetch(`${api}/${collectionSlug}/${id}/revoke`, { method: 'POST' });
+        setLoading(false);
+        if (!response.ok) {
+            const result = (await response.json());
+            setError(result.error ?? 'Unable to revoke API key');
+            return;
+        }
+        await refresh();
+    }
+    async function copyToken() {
+        if (token)
+            await navigator.clipboard.writeText(token);
+    }
+    const docs = (data?.docs ?? []);
+    return (_jsxs("div", { children: [_jsx(TextInput, { label: "Key name", path: "api-key-name", value: name, onChange: (event) => setName(event.target.value) }), _jsx(Button, { disabled: loading || !name.trim(), onClick: createKey, type: "button", children: "Create API key" }), token ? (_jsxs("div", { children: [_jsx("p", { children: "This key is shown once. Copy it now." }), _jsx(TextInput, { label: "API key", path: "new-api-key", readOnly: true, value: token }), _jsx(Button, { onClick: copyToken, type: "button", children: "Copy API key" }), _jsx(Button, { onClick: () => setToken(undefined), type: "button", children: "Dismiss" })] })) : null, error ? _jsx("p", { role: "alert", children: error }) : null, docs
+                .filter((doc) => !doc.revokedAt)
+                .map((doc) => (_jsxs(Button, { disabled: loading, onClick: () => revokeKey(doc.id), type: "button", children: ["Revoke ", doc.name ?? doc.prefix ?? String(doc.id)] }, doc.id)))] }));
+}
+//# sourceMappingURL=ApiKeysManager.js.map

package/dist/client/ApiKeysManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeysManager.js","sourceRoot":"","sources":["../../src/client/ApiKeysManager.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAoB,QAAQ,EAAE,MAAM,OAAO,CAAC;AASnD,MAAM,UAAU,cAAc;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC;IAC/B,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,YAAY,EAAE,CAAC;IACvE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,EAAU,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,EAAU,CAAC;IAC7C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IAE9B,KAAK,UAAU,OAAO;QACpB,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,UAAU,SAAS;QACtB,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,IAAI,cAAc,OAAO,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuC,CAAC;QAC7E,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,0BAA0B,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,EAAmB;QAC1C,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,IAAI,cAAc,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1F,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;YAC7D,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,0BAA0B,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,SAAS;QACtB,IAAI,KAAK;YAAE,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAgB,CAAC;IAC/C,OAAO,CACL,0BACE,KAAC,SAAS,IACR,KAAK,EAAC,UAAU,EAChB,IAAI,EAAC,cAAc,EACnB,KAAK,EAAE,IAAI,EACX,QAAQ,EAAE,CAAC,KAAoC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAC/E,EACF,KAAC,MAAM,IAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAC,QAAQ,+BAEnE,EACR,KAAK,CAAC,CAAC,CAAC,CACP,0BACE,+DAA2C,EAC3C,KAAC,SAAS,IAAC,KAAK,EAAC,SAAS,EAAC,IAAI,EAAC,aAAa,EAAC,QAAQ,QAAC,KAAK,EAAE,KAAK,GAAI,EACvE,KAAC,MAAM,IAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAC,QAAQ,6BAEhC,EACT,KAAC,MAAM,IAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAC,QAAQ,wBAEhD,IACL,CACP,CAAC,CAAC,CAAC,IAAI,EACP,KAAK,CAAC,CAAC,CAAC,YAAG,IAAI,EAAC,OAAO,YAAE,KAAK,GAAK,CAAC,CAAC,CAAC,IAAI,EAC1C,IAAI;iBACF,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;iBAC/B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CACZ,MAAC,MAAM,IAAC,QAAQ,EAAE,OAAO,EAAe,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAC,QAAQ,wBAC7E,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,KADlB,GAAG,CAAC,EAAE,CAE7B,CACV,CAAC,IACA,CACP,CAAC;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,2 @@
+export { ApiKeysManager } from './client/ApiKeysManager.js';
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/client.js

@@ -0,0 +1,2 @@
+export { ApiKeysManager } from './client/ApiKeysManager.js';
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/collection.d.ts

@@ -0,0 +1,11 @@
+import type { CollectionConfig } from 'frogbot';
+type CollectionOptions = {
+    authCollection: string;
+    collectionSlug: string;
+    tokenPrefix: string;
+    collection?: Partial<CollectionConfig>;
+    existing?: CollectionConfig;
+};
+export declare function createApiKeysCollection(options: CollectionOptions): CollectionConfig;
+export {};
+//# sourceMappingURL=collection.d.ts.map

package/dist/collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAmC,MAAM,SAAS,CAAC;AAIjF,KAAK,iBAAiB,GAAG;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B,CAAC;AAgFF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,gBAAgB,CAmDpF"}

package/dist/collection.js

@@ -0,0 +1,128 @@
+import { createApiKeyToken, getApiKeyPrefix, hashApiKeyToken } from './server/token.js';
+function mergeFields(...groups) {
+    const fields = new Map();
+    for (const group of groups) {
+        for (const field of group ?? []) {
+            const key = 'name' in field && field.name ? field.name : JSON.stringify(field);
+            fields.set(key, field);
+        }
+    }
+    return [...fields.values()];
+}
+function getOwnerID(req) {
+    return req.user?.id ?? null;
+}
+function createEndpoints({ collectionSlug, tokenPrefix }) {
+    return [
+        {
+            method: 'post',
+            path: '/mint',
+            handler: async (req) => {
+                const owner = getOwnerID(req);
+                if (owner === null)
+                    return Response.json({ error: 'Authentication required' }, { status: 401 });
+                const body = (await req.json?.().catch(() => null) ?? null);
+                const name = typeof body?.name === 'string' ? body.name.trim() : '';
+                if (!name)
+                    return Response.json({ error: 'Name is required' }, { status: 400 });
+                const token = createApiKeyToken({ tokenPrefix });
+                const prefix = getApiKeyPrefix(token);
+                const doc = (await req.frogbot.create({
+                    collection: collectionSlug,
+                    data: {
+                        name,
+                        owner,
+                        prefix,
+                        tokenHash: hashApiKeyToken(token),
+                    },
+                    overrideAccess: true,
+                    req,
+                }));
+                return Response.json({ id: doc.id, name, prefix, token, createdAt: doc.createdAt }, { status: 201 });
+            },
+        },
+        {
+            method: 'post',
+            path: '/:id/revoke',
+            handler: async (req) => {
+                const owner = getOwnerID(req);
+                if (owner === null)
+                    return Response.json({ error: 'Authentication required' }, { status: 401 });
+                const id = req.routeParams?.id;
+                if (typeof id !== 'string' || !id)
+                    return Response.json({ error: 'API key not found' }, { status: 404 });
+                const result = await req.frogbot.find({
+                    collection: collectionSlug,
+                    limit: 1,
+                    overrideAccess: true,
+                    req,
+                    where: { and: [{ id: { equals: id } }, { owner: { equals: owner } }] },
+                });
+                const key = result.docs[0];
+                if (!key)
+                    return Response.json({ error: 'API key not found' }, { status: 404 });
+                const revokedAt = typeof key.revokedAt === 'string' ? key.revokedAt : new Date().toISOString();
+                await req.frogbot.update({
+                    collection: collectionSlug,
+                    id: key.id,
+                    data: { revokedAt },
+                    overrideAccess: true,
+                    req,
+                });
+                return Response.json({ id: key.id, revokedAt });
+            },
+        },
+    ];
+}
+export function createApiKeysCollection(options) {
+    const { authCollection, collectionSlug, collection, existing } = options;
+    const ownerAccess = ({ req }) => {
+        const owner = getOwnerID(req);
+        return owner === null ? false : { owner: { equals: owner } };
+    };
+    const fields = [
+        { name: 'name', type: 'text', required: true },
+        { name: 'owner', type: 'relationship', relationTo: authCollection, required: true, index: true },
+        { name: 'prefix', type: 'text', required: true, index: true, admin: { readOnly: true } },
+        { name: 'tokenHash', type: 'text', required: true, unique: true, index: true, access: { read: () => false }, admin: { hidden: true } },
+        { name: 'lastUsedAt', type: 'date', admin: { readOnly: true } },
+        { name: 'revokedAt', type: 'date', index: true, admin: { readOnly: true } },
+    ];
+    const endpoints = createEndpoints(options);
+    return {
+        slug: collectionSlug,
+        labels: { singular: 'API Key', plural: 'API Keys' },
+        timestamps: true,
+        ...existing,
+        ...collection,
+        access: {
+            create: () => false,
+            delete: () => false,
+            read: ownerAccess,
+            update: () => false,
+            ...existing?.access,
+            ...collection?.access,
+        },
+        admin: {
+            useAsTitle: 'name',
+            ...existing?.admin,
+            ...collection?.admin,
+            components: {
+                ...existing?.admin?.components,
+                ...collection?.admin?.components,
+                beforeListTable: [
+                    '@frogbotai/plugin-api-keys/client#ApiKeysManager',
+                    ...(existing?.admin?.components?.beforeListTable ?? []),
+                    ...(collection?.admin?.components?.beforeListTable ?? []),
+                ],
+            },
+        },
+        endpoints: [...endpoints, ...(existing?.endpoints ?? []), ...(collection?.endpoints ?? [])],
+        fields: mergeFields(fields, existing?.fields, collection?.fields),
+        hooks: {
+            ...existing?.hooks,
+            ...collection?.hooks,
+        },
+    };
+}
+//# sourceMappingURL=collection.js.map

package/dist/collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collection.js","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAUxF,SAAS,WAAW,CAAC,GAAG,MAA+B;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,GAAmB;IACrC,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CAAC,EAAE,cAAc,EAAE,WAAW,EAA6D;IACjH,OAAO;QACL;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAEhG,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAA8B,CAAC;gBACzF,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,IAAI,CAAC,IAAI;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAEhF,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;oBACpC,UAAU,EAAE,cAAuB;oBACnC,IAAI,EAAE;wBACJ,IAAI;wBACJ,KAAK;wBACL,MAAM;wBACN,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC;qBAClC;oBACD,cAAc,EAAE,IAAI;oBACpB,GAAG;iBACJ,CAAC,CAA4B,CAAC;gBAE/B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACvG,CAAC;SACF;QACD;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAEhG,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzG,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpC,UAAU,EAAE,cAAuB;oBACnC,KAAK,EAAE,CAAC;oBACR,cAAc,EAAE,IAAI;oBACpB,GAAG;oBACH,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE;iBACvE,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAwC,CAAC;gBAClE,IAAI,CAAC,GAAG;oBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBAEhF,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/F,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;oBACvB,UAAU,EAAE,cAAuB;oBACnC,EAAE,EAAE,GAAG,CAAC,EAAW;oBACnB,IAAI,EAAE,EAAE,SAAS,EAAE;oBACnB,cAAc,EAAE,IAAI;oBACpB,GAAG;iBACJ,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACzE,MAAM,WAAW,GAAG,CAAC,EAAE,GAAG,EAA2B,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;IAC/D,CAAC,CAAC;IACF,MAAM,MAAM,GAAY;QACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;QAChG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACxF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACtI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QAC/D,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;KAC5E,CAAC;IACF,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE;QACnD,UAAU,EAAE,IAAI;QAChB,GAAG,QAAQ;QACX,GAAG,UAAU;QACb,MAAM,EAAE;YACN,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;YACnB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;YACnB,GAAG,QAAQ,EAAE,MAAM;YACnB,GAAG,UAAU,EAAE,MAAM;SACtB;QACD,KAAK,EAAE;YACL,UAAU,EAAE,MAAM;YAClB,GAAG,QAAQ,EAAE,KAAK;YAClB,GAAG,UAAU,EAAE,KAAK;YACpB,UAAU,EAAE;gBACV,GAAG,QAAQ,EAAE,KAAK,EAAE,UAAU;gBAC9B,GAAG,UAAU,EAAE,KAAK,EAAE,UAAU;gBAChC,eAAe,EAAE;oBACf,kDAAkD;oBAClD,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,IAAI,EAAE,CAAC;oBACvD,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,IAAI,EAAE,CAAC;iBAC1D;aACF;SACF;QACD,SAAS,EAAE,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;QACjE,KAAK,EAAE;YACL,GAAG,QAAQ,EAAE,KAAK;YAClB,GAAG,UAAU,EAAE,KAAK;SACrB;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+import type { CollectionConfig, Plugin } from 'frogbot';
+export { createApiKeyToken, extractApiKeyToken, getApiKeyPrefix, hashApiKeyToken, } from './server/token.js';
+export type { ApiKeyHeaderOptions, ApiKeyTokenOptions } from './server/token.js';
+export type ApiKeysPluginOptions = {
+    authCollection?: string;
+    collectionSlug?: string;
+    tokenPrefix?: string;
+    headerNames?: string[];
+    collection?: Partial<CollectionConfig>;
+};
+export declare function apiKeysPlugin(options?: ApiKeysPluginOptions): Plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAIxD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEjF,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACxC,CAAC;AAEF,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,MAAM,CAyCxE"}

package/dist/index.js

@@ -0,0 +1,48 @@
+import { createApiKeysCollection } from './collection.js';
+import { createApiKeyStrategy } from './strategy.js';
+export { createApiKeyToken, extractApiKeyToken, getApiKeyPrefix, hashApiKeyToken, } from './server/token.js';
+export function apiKeysPlugin(options = {}) {
+    return (config) => {
+        const authCollection = options.authCollection ?? 'users';
+        const collectionSlug = options.collectionSlug ?? 'api-keys';
+        const auth = config.collections.find((collection) => collection.slug === authCollection);
+        if (!auth || auth.auth === undefined || auth.auth === false) {
+            throw new Error(`[plugin-api-keys] Auth collection '${authCollection}' must exist and have auth enabled.`);
+        }
+        const existing = config.collections.find((collection) => collection.slug === collectionSlug);
+        const collection = createApiKeysCollection({
+            authCollection,
+            collectionSlug,
+            tokenPrefix: options.tokenPrefix ?? 'fbt',
+            collection: options.collection,
+            existing,
+        });
+        const strategy = createApiKeyStrategy({
+            authCollection,
+            collectionSlug,
+            headerNames: options.headerNames,
+            tokenPrefix: options.tokenPrefix ?? 'fbt',
+        });
+        return {
+            ...config,
+            collections: [
+                ...config.collections.map((item) => {
+                    if (item.slug === collectionSlug)
+                        return collection;
+                    if (item.slug !== authCollection)
+                        return item;
+                    const authConfig = typeof item.auth === 'object' ? item.auth : {};
+                    return {
+                        ...item,
+                        auth: {
+                            ...authConfig,
+                            strategies: [...(authConfig.strategies ?? []), strategy],
+                        },
+                    };
+                }),
+                ...(existing ? [] : [collection]),
+            ],
+        };
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAW3B,MAAM,UAAU,aAAa,CAAC,UAAgC,EAAE;IAC9D,OAAO,CAAC,MAAM,EAAE,EAAE;QAChB,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC;QACzD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,UAAU,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,qCAAqC,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAG,uBAAuB,CAAC;YACzC,cAAc;YACd,cAAc;YACd,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;YACzC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,cAAc;YACd,cAAc;YACd,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;SAC1C,CAAC,CAAC;QACH,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAE;gBACX,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBACjC,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;wBAAE,OAAO,UAAU,CAAC;oBACpD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;wBAAE,OAAO,IAAI,CAAC;oBAC9C,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClE,OAAO;wBACL,GAAG,IAAI;wBACP,IAAI,EAAE;4BACJ,GAAG,UAAU;4BACb,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC;yBACzD;qBACF,CAAC;gBACJ,CAAC,CAAC;gBACF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;aAClC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/token.d.ts

@@ -0,0 +1,11 @@
+export type ApiKeyTokenOptions = {
+    tokenPrefix?: string;
+};
+export type ApiKeyHeaderOptions = {
+    headerNames?: string[];
+};
+export declare function createApiKeyToken({ tokenPrefix }?: ApiKeyTokenOptions): string;
+export declare function hashApiKeyToken(token: string): string;
+export declare function getApiKeyPrefix(token: string): string;
+export declare function extractApiKeyToken(headers: Headers, { headerNames }?: ApiKeyHeaderOptions): string | null;
+//# sourceMappingURL=token.d.ts.map

package/dist/server/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/server/token.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,EAAE,WAAmB,EAAE,GAAE,kBAAuB,GAAG,MAAM,CAE1F;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,EAAE,WAA2B,EAAE,GAAE,mBAAwB,GACxD,MAAM,GAAG,IAAI,CAWf"}

package/dist/server/token.js

@@ -0,0 +1,23 @@
+import { createHash, randomBytes } from 'node:crypto';
+export function createApiKeyToken({ tokenPrefix = 'fbt' } = {}) {
+    return `${tokenPrefix}_${randomBytes(32).toString('base64url')}`;
+}
+export function hashApiKeyToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+export function getApiKeyPrefix(token) {
+    return token.slice(0, 12);
+}
+export function extractApiKeyToken(headers, { headerNames = ['x-api-key'] } = {}) {
+    const authorization = headers.get('authorization');
+    const bearer = authorization?.match(/^Bearer ([^\s]+)$/i)?.[1];
+    if (bearer)
+        return bearer;
+    for (const headerName of headerNames) {
+        const value = headers.get(headerName)?.trim();
+        if (value && !/\s/.test(value))
+            return value;
+    }
+    return null;
+}
+//# sourceMappingURL=token.js.map

package/dist/server/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/server/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAUtD,MAAM,UAAU,iBAAiB,CAAC,EAAE,WAAW,GAAG,KAAK,KAAyB,EAAE;IAChF,OAAO,GAAG,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAgB,EAChB,EAAE,WAAW,GAAG,CAAC,WAAW,CAAC,KAA0B,EAAE;IAEzD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,aAAa,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/strategy.d.ts

@@ -0,0 +1,10 @@
+import type { AuthConfig } from 'frogbot';
+type StrategyOptions = {
+    authCollection: string;
+    collectionSlug: string;
+    headerNames?: string[];
+    tokenPrefix: string;
+};
+export declare function createApiKeyStrategy(options: StrategyOptions): NonNullable<AuthConfig['strategies']>[number];
+export {};
+//# sourceMappingURL=strategy.d.ts.map

package/dist/strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../src/strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAI1C,KAAK,eAAe,GAAG;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CA2C5G"}

package/dist/strategy.js

@@ -0,0 +1,44 @@
+import { extractApiKeyToken, hashApiKeyToken } from './server/token.js';
+export function createApiKeyStrategy(options) {
+    const { authCollection, collectionSlug, headerNames, tokenPrefix } = options;
+    return {
+        name: 'api-key',
+        authenticate: async ({ headers, payload }) => {
+            const token = extractApiKeyToken(headers, { headerNames });
+            if (!token || !new RegExp(`^${tokenPrefix.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}_[A-Za-z0-9_-]{43}$`).test(token)) {
+                return { user: null };
+            }
+            const keys = await payload.find({
+                collection: collectionSlug,
+                depth: 0,
+                limit: 1,
+                overrideAccess: true,
+                where: {
+                    and: [{ tokenHash: { equals: hashApiKeyToken(token) } }, { revokedAt: { exists: false } }],
+                },
+            });
+            const key = keys.docs[0];
+            if (!key?.owner)
+                return { user: null };
+            const user = await payload
+                .findByID({ collection: authCollection, id: key.owner, depth: 0, overrideAccess: true })
+                .catch(() => null);
+            if (!user)
+                return { user: null };
+            await payload.update({
+                collection: collectionSlug,
+                id: key.id,
+                data: { lastUsedAt: new Date().toISOString() },
+                overrideAccess: true,
+            });
+            return {
+                user: {
+                    ...user,
+                    collection: authCollection,
+                    _strategy: 'api-key',
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=strategy.js.map

package/dist/strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.js","sourceRoot":"","sources":["../src/strategy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AASxE,MAAM,UAAU,oBAAoB,CAAC,OAAwB;IAC3D,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC7E,OAAO;QACL,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACxB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC9B,UAAU,EAAE,cAAc;gBAC1B,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,CAAC;gBACR,cAAc,EAAE,IAAI;gBACpB,KAAK,EAAE;oBACL,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;iBAC3F;aACF,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAiE,CAAC;YACzF,IAAI,CAAC,GAAG,EAAE,KAAK;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAEvC,MAAM,IAAI,GAAG,MAAM,OAAO;iBACvB,QAAQ,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;iBACvF,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAEjC,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,cAAc;gBAC1B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBAC9C,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI,EAAE;oBACJ,GAAG,IAAI;oBACP,UAAU,EAAE,cAAc;oBAC1B,SAAS,EAAE,SAAS;iBACrB;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@frogbotai/plugin-api-keys",
+  "version": "0.4.0",
+  "description": "Multiple named API keys for FrogBot.",
+  "license": "MIT",
+  "author": "Colby Gilbert",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/frogbotai/frogbot.git",
+    "directory": "packages/plugin-api-keys"
+  },
+  "homepage": "https://github.com/frogbotai/frogbot#readme",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./client": {
+      "import": "./dist/client.js",
+      "types": "./dist/client.d.ts",
+      "default": "./dist/client.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "peerDependencies": {
+    "@payloadcms/ui": "3.85.1",
+    "react": "^19.0.1 || ^19.1.2 || ^19.2.1",
+    "react-dom": "^19.0.1 || ^19.1.2 || ^19.2.1",
+    "frogbot": "0.4.0"
+  },
+  "devDependencies": {
+    "@payloadcms/ui": "3.85.1",
+    "@types/react": "19.2.14",
+    "react": "19.2.6",
+    "react-dom": "19.2.6",
+    "typescript": "5.6.2",
+    "frogbot": "0.4.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit"
+  }
+}