@hammadj/better-auth 1.5.0-beta.9

package/dist/plugins/api-key/routes/delete-api-key.mjs

@@ -0,0 +1,74 @@
+import { sessionMiddleware } from "../../../api/routes/session.mjs";
+import "../../../api/index.mjs";
+import { API_KEY_ERROR_CODES } from "../error-codes.mjs";
+import { deleteApiKey as deleteApiKey$1, getApiKeyById } from "../adapter.mjs";
+import { API_KEY_TABLE_NAME } from "../index.mjs";
+import { APIError } from "@better-auth/core/error";
+import { createAuthEndpoint } from "@better-auth/core/api";
+import * as z from "zod";
+
+//#region src/plugins/api-key/routes/delete-api-key.ts
+const deleteApiKeyBodySchema = z.object({ keyId: z.string().meta({ description: "The id of the Api Key" }) });
+function deleteApiKey({ opts, schema, deleteAllExpiredApiKeys }) {
+	return createAuthEndpoint("/api-key/delete", {
+		method: "POST",
+		body: deleteApiKeyBodySchema,
+		use: [sessionMiddleware],
+		metadata: { openapi: {
+			description: "Delete an existing API key",
+			requestBody: { content: { "application/json": { schema: {
+				type: "object",
+				properties: { keyId: {
+					type: "string",
+					description: "The id of the API key to delete"
+				} },
+				required: ["keyId"]
+			} } } },
+			responses: { "200": {
+				description: "API key deleted successfully",
+				content: { "application/json": { schema: {
+					type: "object",
+					properties: { success: {
+						type: "boolean",
+						description: "Indicates if the API key was successfully deleted"
+					} },
+					required: ["success"]
+				} } }
+			} }
+		} }
+	}, async (ctx) => {
+		const { keyId } = ctx.body;
+		const session = ctx.context.session;
+		if (session.user.banned === true) throw APIError.from("UNAUTHORIZED", API_KEY_ERROR_CODES.USER_BANNED);
+		let apiKey = null;
+		apiKey = await getApiKeyById(ctx, keyId, opts);
+		if (!apiKey || apiKey.userId !== session.user.id) throw APIError.from("NOT_FOUND", API_KEY_ERROR_CODES.KEY_NOT_FOUND);
+		try {
+			if (opts.storage === "secondary-storage" && opts.fallbackToDatabase) {
+				await deleteApiKey$1(ctx, apiKey, opts);
+				await ctx.context.adapter.delete({
+					model: API_KEY_TABLE_NAME,
+					where: [{
+						field: "id",
+						value: apiKey.id
+					}]
+				});
+			} else if (opts.storage === "database") await ctx.context.adapter.delete({
+				model: API_KEY_TABLE_NAME,
+				where: [{
+					field: "id",
+					value: apiKey.id
+				}]
+			});
+			else await deleteApiKey$1(ctx, apiKey, opts);
+		} catch (error) {
+			throw APIError.fromStatus("INTERNAL_SERVER_ERROR", { message: error?.message });
+		}
+		deleteAllExpiredApiKeys(ctx.context);
+		return ctx.json({ success: true });
+	});
+}
+
+//#endregion
+export { deleteApiKey };
+//# sourceMappingURL=delete-api-key.mjs.map

package/dist/plugins/api-key/routes/delete-api-key.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-api-key.mjs","names":["ERROR_CODES","deleteApiKeyFromStorage"],"sources":["../../../../src/plugins/api-key/routes/delete-api-key.ts"],"sourcesContent":["import type { AuthContext } from \"@better-auth/core\";\nimport { createAuthEndpoint } from \"@better-auth/core/api\";\nimport { APIError } from \"@better-auth/core/error\";\nimport * as z from \"zod\";\nimport { sessionMiddleware } from \"../../../api\";\nimport { API_KEY_TABLE_NAME, API_KEY_ERROR_CODES as ERROR_CODES } from \"..\";\nimport {\n\tdeleteApiKey as deleteApiKeyFromStorage,\n\tgetApiKeyById,\n} from \"../adapter\";\nimport type { apiKeySchema } from \"../schema\";\nimport type { ApiKey } from \"../types\";\nimport type { PredefinedApiKeyOptions } from \".\";\n\nconst deleteApiKeyBodySchema = z.object({\n\tkeyId: z.string().meta({\n\t\tdescription: \"The id of the Api Key\",\n\t}),\n});\n\nexport function deleteApiKey({\n\topts,\n\tschema,\n\tdeleteAllExpiredApiKeys,\n}: {\n\topts: PredefinedApiKeyOptions;\n\tschema: ReturnType<typeof apiKeySchema>;\n\tdeleteAllExpiredApiKeys(\n\t\tctx: AuthContext,\n\t\tbyPassLastCheckTime?: boolean | undefined,\n\t): void;\n}) {\n\treturn createAuthEndpoint(\n\t\t\"/api-key/delete\",\n\t\t{\n\t\t\tmethod: \"POST\",\n\t\t\tbody: deleteApiKeyBodySchema,\n\t\t\tuse: [sessionMiddleware],\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tdescription: \"Delete an existing API key\",\n\t\t\t\t\trequestBody: {\n\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\tkeyId: {\n\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\tdescription: \"The id of the API key to delete\",\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\trequired: [\"keyId\"],\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t\"200\": {\n\t\t\t\t\t\t\tdescription: \"API key deleted successfully\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tsuccess: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Indicates if the API key was successfully deleted\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\trequired: [\"success\"],\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tconst { keyId } = ctx.body;\n\t\t\tconst session = ctx.context.session;\n\t\t\tif (session.user.banned === true) {\n\t\t\t\tthrow APIError.from(\"UNAUTHORIZED\", ERROR_CODES.USER_BANNED);\n\t\t\t}\n\n\t\t\tlet apiKey: ApiKey | null = null;\n\n\t\t\tapiKey = await getApiKeyById(ctx, keyId, opts);\n\n\t\t\tif (!apiKey || apiKey.userId !== session.user.id) {\n\t\t\t\tthrow APIError.from(\"NOT_FOUND\", ERROR_CODES.KEY_NOT_FOUND);\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tif (opts.storage === \"secondary-storage\" && opts.fallbackToDatabase) {\n\t\t\t\t\tawait deleteApiKeyFromStorage(ctx, apiKey, opts);\n\t\t\t\t\tawait ctx.context.adapter.delete<ApiKey>({\n\t\t\t\t\t\tmodel: API_KEY_TABLE_NAME,\n\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tfield: \"id\",\n\t\t\t\t\t\t\t\tvalue: apiKey.id,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t});\n\t\t\t\t} else if (opts.storage === \"database\") {\n\t\t\t\t\tawait ctx.context.adapter.delete<ApiKey>({\n\t\t\t\t\t\tmodel: API_KEY_TABLE_NAME,\n\t\t\t\t\t\twhere: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\tfield: \"id\",\n\t\t\t\t\t\t\t\tvalue: apiKey.id,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t});\n\t\t\t\t} else {\n\t\t\t\t\tawait deleteApiKeyFromStorage(ctx, apiKey, opts);\n\t\t\t\t}\n\t\t\t} catch (error: any) {\n\t\t\t\tthrow APIError.fromStatus(\"INTERNAL_SERVER_ERROR\", {\n\t\t\t\t\tmessage: error?.message,\n\t\t\t\t});\n\t\t\t}\n\t\t\tdeleteAllExpiredApiKeys(ctx.context);\n\t\t\treturn ctx.json({\n\t\t\t\tsuccess: true,\n\t\t\t});\n\t\t},\n\t);\n}\n"],"mappings":";;;;;;;;;;AAcA,MAAM,yBAAyB,EAAE,OAAO,EACvC,OAAO,EAAE,QAAQ,CAAC,KAAK,EACtB,aAAa,yBACb,CAAC,EACF,CAAC;AAEF,SAAgB,aAAa,EAC5B,MACA,QACA,2BAQE;AACF,QAAO,mBACN,mBACA;EACC,QAAQ;EACR,MAAM;EACN,KAAK,CAAC,kBAAkB;EACxB,UAAU,EACT,SAAS;GACR,aAAa;GACb,aAAa,EACZ,SAAS,EACR,oBAAoB,EACnB,QAAQ;IACP,MAAM;IACN,YAAY,EACX,OAAO;KACN,MAAM;KACN,aAAa;KACb,EACD;IACD,UAAU,CAAC,QAAQ;IACnB,EACD,EACD,EACD;GACD,WAAW,EACV,OAAO;IACN,aAAa;IACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;KACP,MAAM;KACN,YAAY,EACX,SAAS;MACR,MAAM;MACN,aACC;MACD,EACD;KACD,UAAU,CAAC,UAAU;KACrB,EACD,EACD;IACD,EACD;GACD,EACD;EACD,EACD,OAAO,QAAQ;EACd,MAAM,EAAE,UAAU,IAAI;EACtB,MAAM,UAAU,IAAI,QAAQ;AAC5B,MAAI,QAAQ,KAAK,WAAW,KAC3B,OAAM,SAAS,KAAK,gBAAgBA,oBAAY,YAAY;EAG7D,IAAI,SAAwB;AAE5B,WAAS,MAAM,cAAc,KAAK,OAAO,KAAK;AAE9C,MAAI,CAAC,UAAU,OAAO,WAAW,QAAQ,KAAK,GAC7C,OAAM,SAAS,KAAK,aAAaA,oBAAY,cAAc;AAG5D,MAAI;AACH,OAAI,KAAK,YAAY,uBAAuB,KAAK,oBAAoB;AACpE,UAAMC,eAAwB,KAAK,QAAQ,KAAK;AAChD,UAAM,IAAI,QAAQ,QAAQ,OAAe;KACxC,OAAO;KACP,OAAO,CACN;MACC,OAAO;MACP,OAAO,OAAO;MACd,CACD;KACD,CAAC;cACQ,KAAK,YAAY,WAC3B,OAAM,IAAI,QAAQ,QAAQ,OAAe;IACxC,OAAO;IACP,OAAO,CACN;KACC,OAAO;KACP,OAAO,OAAO;KACd,CACD;IACD,CAAC;OAEF,OAAMA,eAAwB,KAAK,QAAQ,KAAK;WAEzC,OAAY;AACpB,SAAM,SAAS,WAAW,yBAAyB,EAClD,SAAS,OAAO,SAChB,CAAC;;AAEH,0BAAwB,IAAI,QAAQ;AACpC,SAAO,IAAI,KAAK,EACf,SAAS,MACT,CAAC;GAEH"}

package/dist/plugins/api-key/routes/get-api-key.mjs

@@ -0,0 +1,158 @@
+import { sessionMiddleware } from "../../../api/routes/session.mjs";
+import "../../../api/index.mjs";
+import { API_KEY_ERROR_CODES } from "../error-codes.mjs";
+import { getApiKeyById, migrateDoubleStringifiedMetadata } from "../adapter.mjs";
+import "../index.mjs";
+import { APIError } from "@better-auth/core/error";
+import { safeJSONParse } from "@better-auth/core/utils/json";
+import { createAuthEndpoint } from "@better-auth/core/api";
+import * as z from "zod";
+
+//#region src/plugins/api-key/routes/get-api-key.ts
+const getApiKeyQuerySchema = z.object({ id: z.string().meta({ description: "The id of the Api Key" }) });
+function getApiKey({ opts, schema, deleteAllExpiredApiKeys }) {
+	return createAuthEndpoint("/api-key/get", {
+		method: "GET",
+		query: getApiKeyQuerySchema,
+		use: [sessionMiddleware],
+		metadata: { openapi: {
+			description: "Retrieve an existing API key by ID",
+			responses: { "200": {
+				description: "API key retrieved successfully",
+				content: { "application/json": { schema: {
+					type: "object",
+					properties: {
+						id: {
+							type: "string",
+							description: "ID"
+						},
+						name: {
+							type: "string",
+							nullable: true,
+							description: "The name of the key"
+						},
+						start: {
+							type: "string",
+							nullable: true,
+							description: "Shows the first few characters of the API key, including the prefix. This allows you to show those few characters in the UI to make it easier for users to identify the API key."
+						},
+						prefix: {
+							type: "string",
+							nullable: true,
+							description: "The API Key prefix. Stored as plain text."
+						},
+						userId: {
+							type: "string",
+							description: "The owner of the user id"
+						},
+						refillInterval: {
+							type: "number",
+							nullable: true,
+							description: "The interval in milliseconds between refills of the `remaining` count. Example: 3600000 // refill every hour (3600000ms = 1h)"
+						},
+						refillAmount: {
+							type: "number",
+							nullable: true,
+							description: "The amount to refill"
+						},
+						lastRefillAt: {
+							type: "string",
+							format: "date-time",
+							nullable: true,
+							description: "The last refill date"
+						},
+						enabled: {
+							type: "boolean",
+							description: "Sets if key is enabled or disabled",
+							default: true
+						},
+						rateLimitEnabled: {
+							type: "boolean",
+							description: "Whether the key has rate limiting enabled"
+						},
+						rateLimitTimeWindow: {
+							type: "number",
+							nullable: true,
+							description: "The duration in milliseconds"
+						},
+						rateLimitMax: {
+							type: "number",
+							nullable: true,
+							description: "Maximum amount of requests allowed within a window"
+						},
+						requestCount: {
+							type: "number",
+							description: "The number of requests made within the rate limit time window"
+						},
+						remaining: {
+							type: "number",
+							nullable: true,
+							description: "Remaining requests (every time api key is used this should updated and should be updated on refill as well)"
+						},
+						lastRequest: {
+							type: "string",
+							format: "date-time",
+							nullable: true,
+							description: "When last request occurred"
+						},
+						expiresAt: {
+							type: "string",
+							format: "date-time",
+							nullable: true,
+							description: "Expiry date of a key"
+						},
+						createdAt: {
+							type: "string",
+							format: "date-time",
+							description: "created at"
+						},
+						updatedAt: {
+							type: "string",
+							format: "date-time",
+							description: "updated at"
+						},
+						metadata: {
+							type: "object",
+							nullable: true,
+							additionalProperties: true,
+							description: "Extra metadata about the apiKey"
+						},
+						permissions: {
+							type: "string",
+							nullable: true,
+							description: "Permissions for the api key (stored as JSON string)"
+						}
+					},
+					required: [
+						"id",
+						"userId",
+						"enabled",
+						"rateLimitEnabled",
+						"requestCount",
+						"createdAt",
+						"updatedAt"
+					]
+				} } }
+			} }
+		} }
+	}, async (ctx) => {
+		const { id } = ctx.query;
+		const session = ctx.context.session;
+		let apiKey = null;
+		apiKey = await getApiKeyById(ctx, id, opts);
+		if (apiKey && apiKey.userId !== session.user.id) apiKey = null;
+		if (!apiKey) throw APIError.from("NOT_FOUND", API_KEY_ERROR_CODES.KEY_NOT_FOUND);
+		deleteAllExpiredApiKeys(ctx.context);
+		const metadata = await migrateDoubleStringifiedMetadata(ctx, apiKey, opts);
+		const { key: _key, ...returningApiKey } = apiKey;
+		return ctx.json({
+			...returningApiKey,
+			metadata,
+			permissions: returningApiKey.permissions ? safeJSONParse(returningApiKey.permissions) : null
+		});
+	});
+}
+
+//#endregion
+export { getApiKey };
+//# sourceMappingURL=get-api-key.mjs.map

package/dist/plugins/api-key/routes/get-api-key.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-api-key.mjs","names":["ERROR_CODES"],"sources":["../../../../src/plugins/api-key/routes/get-api-key.ts"],"sourcesContent":["import type { AuthContext } from \"@better-auth/core\";\nimport { createAuthEndpoint } from \"@better-auth/core/api\";\nimport { APIError } from \"@better-auth/core/error\";\nimport { safeJSONParse } from \"@better-auth/core/utils/json\";\nimport * as z from \"zod\";\nimport { sessionMiddleware } from \"../../../api\";\nimport { API_KEY_ERROR_CODES as ERROR_CODES } from \"..\";\nimport { getApiKeyById, migrateDoubleStringifiedMetadata } from \"../adapter\";\nimport type { apiKeySchema } from \"../schema\";\nimport type { ApiKey } from \"../types\";\nimport type { PredefinedApiKeyOptions } from \".\";\n\nconst getApiKeyQuerySchema = z.object({\n\tid: z.string().meta({\n\t\tdescription: \"The id of the Api Key\",\n\t}),\n});\n\nexport function getApiKey({\n\topts,\n\tschema,\n\tdeleteAllExpiredApiKeys,\n}: {\n\topts: PredefinedApiKeyOptions;\n\tschema: ReturnType<typeof apiKeySchema>;\n\tdeleteAllExpiredApiKeys(\n\t\tctx: AuthContext,\n\t\tbyPassLastCheckTime?: boolean | undefined,\n\t): void;\n}) {\n\treturn createAuthEndpoint(\n\t\t\"/api-key/get\",\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tquery: getApiKeyQuerySchema,\n\t\t\tuse: [sessionMiddleware],\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tdescription: \"Retrieve an existing API key by ID\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t\"200\": {\n\t\t\t\t\t\t\tdescription: \"API key retrieved successfully\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tid: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"ID\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tname: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The name of the key\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tstart: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Shows the first few characters of the API key, including the prefix. This allows you to show those few characters in the UI to make it easier for users to identify the API key.\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tprefix: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"The API Key prefix. Stored as plain text.\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tuserId: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The owner of the user id\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\trefillInterval: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"The interval in milliseconds between refills of the `remaining` count. Example: 3600000 // refill every hour (3600000ms = 1h)\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\trefillAmount: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The amount to refill\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tlastRefillAt: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The last refill date\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tenabled: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Sets if key is enabled or disabled\",\n\t\t\t\t\t\t\t\t\t\t\t\tdefault: true,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\trateLimitEnabled: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Whether the key has rate limiting enabled\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\trateLimitTimeWindow: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The duration in milliseconds\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\trateLimitMax: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Maximum amount of requests allowed within a window\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\trequestCount: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"The number of requests made within the rate limit time window\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tremaining: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Remaining requests (every time api key is used this should updated and should be updated on refill as well)\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tlastRequest: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"When last request occurred\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\texpiresAt: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Expiry date of a key\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tcreatedAt: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"created at\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tupdatedAt: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"updated at\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tmetadata: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tadditionalProperties: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Extra metadata about the apiKey\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tpermissions: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\"Permissions for the api key (stored as JSON string)\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\trequired: [\n\t\t\t\t\t\t\t\t\t\t\t\"id\",\n\t\t\t\t\t\t\t\t\t\t\t\"userId\",\n\t\t\t\t\t\t\t\t\t\t\t\"enabled\",\n\t\t\t\t\t\t\t\t\t\t\t\"rateLimitEnabled\",\n\t\t\t\t\t\t\t\t\t\t\t\"requestCount\",\n\t\t\t\t\t\t\t\t\t\t\t\"createdAt\",\n\t\t\t\t\t\t\t\t\t\t\t\"updatedAt\",\n\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tconst { id } = ctx.query;\n\n\t\t\tconst session = ctx.context.session;\n\n\t\t\tlet apiKey: ApiKey | null = null;\n\n\t\t\tapiKey = await getApiKeyById(ctx, id, opts);\n\n\t\t\t// Verify ownership\n\t\t\tif (apiKey && apiKey.userId !== session.user.id) {\n\t\t\t\tapiKey = null;\n\t\t\t}\n\n\t\t\tif (!apiKey) {\n\t\t\t\tthrow APIError.from(\"NOT_FOUND\", ERROR_CODES.KEY_NOT_FOUND);\n\t\t\t}\n\n\t\t\tdeleteAllExpiredApiKeys(ctx.context);\n\n\t\t\t// Migrate legacy double-stringified metadata if needed\n\t\t\tconst metadata = await migrateDoubleStringifiedMetadata(\n\t\t\t\tctx,\n\t\t\t\tapiKey,\n\t\t\t\topts,\n\t\t\t);\n\n\t\t\tconst { key: _key, ...returningApiKey } = apiKey;\n\n\t\t\treturn ctx.json({\n\t\t\t\t...returningApiKey,\n\t\t\t\tmetadata,\n\t\t\t\tpermissions: returningApiKey.permissions\n\t\t\t\t\t? safeJSONParse<{\n\t\t\t\t\t\t\t[key: string]: string[];\n\t\t\t\t\t\t}>(returningApiKey.permissions)\n\t\t\t\t\t: null,\n\t\t\t});\n\t\t},\n\t);\n}\n"],"mappings":";;;;;;;;;;;AAYA,MAAM,uBAAuB,EAAE,OAAO,EACrC,IAAI,EAAE,QAAQ,CAAC,KAAK,EACnB,aAAa,yBACb,CAAC,EACF,CAAC;AAEF,SAAgB,UAAU,EACzB,MACA,QACA,2BAQE;AACF,QAAO,mBACN,gBACA;EACC,QAAQ;EACR,OAAO;EACP,KAAK,CAAC,kBAAkB;EACxB,UAAU,EACT,SAAS;GACR,aAAa;GACb,WAAW,EACV,OAAO;IACN,aAAa;IACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;KACP,MAAM;KACN,YAAY;MACX,IAAI;OACH,MAAM;OACN,aAAa;OACb;MACD,MAAM;OACL,MAAM;OACN,UAAU;OACV,aAAa;OACb;MACD,OAAO;OACN,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD,QAAQ;OACP,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD,QAAQ;OACP,MAAM;OACN,aAAa;OACb;MACD,gBAAgB;OACf,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD,cAAc;OACb,MAAM;OACN,UAAU;OACV,aAAa;OACb;MACD,cAAc;OACb,MAAM;OACN,QAAQ;OACR,UAAU;OACV,aAAa;OACb;MACD,SAAS;OACR,MAAM;OACN,aAAa;OACb,SAAS;OACT;MACD,kBAAkB;OACjB,MAAM;OACN,aACC;OACD;MACD,qBAAqB;OACpB,MAAM;OACN,UAAU;OACV,aAAa;OACb;MACD,cAAc;OACb,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD,cAAc;OACb,MAAM;OACN,aACC;OACD;MACD,WAAW;OACV,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD,aAAa;OACZ,MAAM;OACN,QAAQ;OACR,UAAU;OACV,aAAa;OACb;MACD,WAAW;OACV,MAAM;OACN,QAAQ;OACR,UAAU;OACV,aAAa;OACb;MACD,WAAW;OACV,MAAM;OACN,QAAQ;OACR,aAAa;OACb;MACD,WAAW;OACV,MAAM;OACN,QAAQ;OACR,aAAa;OACb;MACD,UAAU;OACT,MAAM;OACN,UAAU;OACV,sBAAsB;OACtB,aAAa;OACb;MACD,aAAa;OACZ,MAAM;OACN,UAAU;OACV,aACC;OACD;MACD;KACD,UAAU;MACT;MACA;MACA;MACA;MACA;MACA;MACA;MACA;KACD,EACD,EACD;IACD,EACD;GACD,EACD;EACD,EACD,OAAO,QAAQ;EACd,MAAM,EAAE,OAAO,IAAI;EAEnB,MAAM,UAAU,IAAI,QAAQ;EAE5B,IAAI,SAAwB;AAE5B,WAAS,MAAM,cAAc,KAAK,IAAI,KAAK;AAG3C,MAAI,UAAU,OAAO,WAAW,QAAQ,KAAK,GAC5C,UAAS;AAGV,MAAI,CAAC,OACJ,OAAM,SAAS,KAAK,aAAaA,oBAAY,cAAc;AAG5D,0BAAwB,IAAI,QAAQ;EAGpC,MAAM,WAAW,MAAM,iCACtB,KACA,QACA,KACA;EAED,MAAM,EAAE,KAAK,MAAM,GAAG,oBAAoB;AAE1C,SAAO,IAAI,KAAK;GACf,GAAG;GACH;GACA,aAAa,gBAAgB,cAC1B,cAEE,gBAAgB,YAAY,GAC9B;GACH,CAAC;GAEH"}

package/dist/plugins/api-key/routes/index.mjs

@@ -0,0 +1,71 @@
+import { createApiKey } from "./create-api-key.mjs";
+import { deleteAllExpiredApiKeysEndpoint } from "./delete-all-expired-api-keys.mjs";
+import { deleteApiKey } from "./delete-api-key.mjs";
+import { getApiKey } from "./get-api-key.mjs";
+import { listApiKeys } from "./list-api-keys.mjs";
+import { updateApiKey } from "./update-api-key.mjs";
+import { verifyApiKey } from "./verify-api-key.mjs";
+import { API_KEY_TABLE_NAME } from "../index.mjs";
+
+//#region src/plugins/api-key/routes/index.ts
+let lastChecked = null;
+async function deleteAllExpiredApiKeys(ctx, byPassLastCheckTime = false) {
+	if (lastChecked && !byPassLastCheckTime) {
+		if ((/* @__PURE__ */ new Date()).getTime() - lastChecked.getTime() < 1e4) return;
+	}
+	lastChecked = /* @__PURE__ */ new Date();
+	await ctx.adapter.deleteMany({
+		model: API_KEY_TABLE_NAME,
+		where: [{
+			field: "expiresAt",
+			operator: "lt",
+			value: /* @__PURE__ */ new Date()
+		}, {
+			field: "expiresAt",
+			operator: "ne",
+			value: null
+		}]
+	}).catch((error) => {
+		ctx.logger.error(`Failed to delete expired API keys:`, error);
+	});
+}
+function createApiKeyRoutes({ keyGenerator, opts, schema }) {
+	return {
+		createApiKey: createApiKey({
+			keyGenerator,
+			opts,
+			schema,
+			deleteAllExpiredApiKeys
+		}),
+		verifyApiKey: verifyApiKey({
+			opts,
+			schema,
+			deleteAllExpiredApiKeys
+		}),
+		getApiKey: getApiKey({
+			opts,
+			schema,
+			deleteAllExpiredApiKeys
+		}),
+		updateApiKey: updateApiKey({
+			opts,
+			schema,
+			deleteAllExpiredApiKeys
+		}),
+		deleteApiKey: deleteApiKey({
+			opts,
+			schema,
+			deleteAllExpiredApiKeys
+		}),
+		listApiKeys: listApiKeys({
+			opts,
+			schema,
+			deleteAllExpiredApiKeys
+		}),
+		deleteAllExpiredApiKeys: deleteAllExpiredApiKeysEndpoint({ deleteAllExpiredApiKeys })
+	};
+}
+
+//#endregion
+export { createApiKeyRoutes, deleteAllExpiredApiKeys };
+//# sourceMappingURL=index.mjs.map

package/dist/plugins/api-key/routes/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/plugins/api-key/routes/index.ts"],"sourcesContent":["import type { AuthContext, Awaitable } from \"@better-auth/core\";\nimport { API_KEY_TABLE_NAME } from \"..\";\nimport type { apiKeySchema } from \"../schema\";\nimport type { ApiKey, ApiKeyOptions } from \"../types\";\nimport { createApiKey } from \"./create-api-key\";\nimport { deleteAllExpiredApiKeysEndpoint } from \"./delete-all-expired-api-keys\";\nimport { deleteApiKey } from \"./delete-api-key\";\nimport { getApiKey } from \"./get-api-key\";\nimport { listApiKeys } from \"./list-api-keys\";\nimport { updateApiKey } from \"./update-api-key\";\nimport { verifyApiKey } from \"./verify-api-key\";\n\nexport type PredefinedApiKeyOptions = ApiKeyOptions &\n\tRequired<\n\t\tPick<\n\t\t\tApiKeyOptions,\n\t\t\t| \"apiKeyHeaders\"\n\t\t\t| \"defaultKeyLength\"\n\t\t\t| \"keyExpiration\"\n\t\t\t| \"rateLimit\"\n\t\t\t| \"maximumPrefixLength\"\n\t\t\t| \"minimumPrefixLength\"\n\t\t\t| \"maximumNameLength\"\n\t\t\t| \"disableKeyHashing\"\n\t\t\t| \"minimumNameLength\"\n\t\t\t| \"requireName\"\n\t\t\t| \"enableMetadata\"\n\t\t\t| \"enableSessionForAPIKeys\"\n\t\t\t| \"startingCharactersConfig\"\n\t\t\t| \"storage\"\n\t\t\t| \"fallbackToDatabase\"\n\t\t\t| \"deferUpdates\"\n\t\t>\n\t> & {\n\t\tkeyExpiration: Required<ApiKeyOptions[\"keyExpiration\"]>;\n\t\tstartingCharactersConfig: Required<\n\t\t\tApiKeyOptions[\"startingCharactersConfig\"]\n\t\t>;\n\t};\n\nlet lastChecked: Date | null = null;\n\nexport async function deleteAllExpiredApiKeys(\n\tctx: AuthContext,\n\tbyPassLastCheckTime = false,\n): Promise<void> {\n\tif (lastChecked && !byPassLastCheckTime) {\n\t\tconst now = new Date();\n\t\tconst diff = now.getTime() - lastChecked.getTime();\n\t\tif (diff < 10000) {\n\t\t\treturn;\n\t\t}\n\t}\n\tlastChecked = new Date();\n\tawait ctx.adapter\n\t\t.deleteMany({\n\t\t\tmodel: API_KEY_TABLE_NAME,\n\t\t\twhere: [\n\t\t\t\t{\n\t\t\t\t\tfield: \"expiresAt\" satisfies keyof ApiKey,\n\t\t\t\t\toperator: \"lt\",\n\t\t\t\t\tvalue: new Date(),\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tfield: \"expiresAt\",\n\t\t\t\t\toperator: \"ne\",\n\t\t\t\t\tvalue: null,\n\t\t\t\t},\n\t\t\t],\n\t\t})\n\t\t.catch((error) => {\n\t\t\tctx.logger.error(`Failed to delete expired API keys:`, error);\n\t\t});\n}\n\nexport function createApiKeyRoutes({\n\tkeyGenerator,\n\topts,\n\tschema,\n}: {\n\tkeyGenerator: (options: {\n\t\tlength: number;\n\t\tprefix: string | undefined;\n\t}) => Awaitable<string>;\n\topts: PredefinedApiKeyOptions;\n\tschema: ReturnType<typeof apiKeySchema>;\n}) {\n\treturn {\n\t\tcreateApiKey: createApiKey({\n\t\t\tkeyGenerator,\n\t\t\topts,\n\t\t\tschema,\n\t\t\tdeleteAllExpiredApiKeys,\n\t\t}),\n\t\tverifyApiKey: verifyApiKey({ opts, schema, deleteAllExpiredApiKeys }),\n\t\tgetApiKey: getApiKey({ opts, schema, deleteAllExpiredApiKeys }),\n\t\tupdateApiKey: updateApiKey({ opts, schema, deleteAllExpiredApiKeys }),\n\t\tdeleteApiKey: deleteApiKey({ opts, schema, deleteAllExpiredApiKeys }),\n\t\tlistApiKeys: listApiKeys({ opts, schema, deleteAllExpiredApiKeys }),\n\t\tdeleteAllExpiredApiKeys: deleteAllExpiredApiKeysEndpoint({\n\t\t\tdeleteAllExpiredApiKeys,\n\t\t}),\n\t};\n}\n"],"mappings":";;;;;;;;;;AAwCA,IAAI,cAA2B;AAE/B,eAAsB,wBACrB,KACA,sBAAsB,OACN;AAChB,KAAI,eAAe,CAAC,qBAGnB;uBAFY,IAAI,MAAM,EACL,SAAS,GAAG,YAAY,SAAS,GACvC,IACV;;AAGF,+BAAc,IAAI,MAAM;AACxB,OAAM,IAAI,QACR,WAAW;EACX,OAAO;EACP,OAAO,CACN;GACC,OAAO;GACP,UAAU;GACV,uBAAO,IAAI,MAAM;GACjB,EACD;GACC,OAAO;GACP,UAAU;GACV,OAAO;GACP,CACD;EACD,CAAC,CACD,OAAO,UAAU;AACjB,MAAI,OAAO,MAAM,sCAAsC,MAAM;GAC5D;;AAGJ,SAAgB,mBAAmB,EAClC,cACA,MACA,UAQE;AACF,QAAO;EACN,cAAc,aAAa;GAC1B;GACA;GACA;GACA;GACA,CAAC;EACF,cAAc,aAAa;GAAE;GAAM;GAAQ;GAAyB,CAAC;EACrE,WAAW,UAAU;GAAE;GAAM;GAAQ;GAAyB,CAAC;EAC/D,cAAc,aAAa;GAAE;GAAM;GAAQ;GAAyB,CAAC;EACrE,cAAc,aAAa;GAAE;GAAM;GAAQ;GAAyB,CAAC;EACrE,aAAa,YAAY;GAAE;GAAM;GAAQ;GAAyB,CAAC;EACnE,yBAAyB,gCAAgC,EACxD,yBACA,CAAC;EACF"}

package/dist/plugins/api-key/routes/list-api-keys.mjs

@@ -0,0 +1,194 @@
+import { sessionMiddleware } from "../../../api/routes/session.mjs";
+import "../../../api/index.mjs";
+import { batchMigrateLegacyMetadata, listApiKeys as listApiKeys$1, parseDoubleStringifiedMetadata } from "../adapter.mjs";
+import { safeJSONParse } from "@better-auth/core/utils/json";
+import { createAuthEndpoint } from "@better-auth/core/api";
+import * as z from "zod/v4";
+
+//#region src/plugins/api-key/routes/list-api-keys.ts
+const listApiKeysQuerySchema = z.object({
+	limit: z.coerce.number().int().nonnegative().meta({ description: "The number of API keys to return" }).optional(),
+	offset: z.coerce.number().int().nonnegative().meta({ description: "The offset to start from" }).optional(),
+	sortBy: z.string().meta({ description: "The field to sort by (e.g., createdAt, name, expiresAt)" }).optional(),
+	sortDirection: z.enum(["asc", "desc"]).meta({ description: "The direction to sort by" }).optional()
+}).optional();
+function listApiKeys({ opts, schema, deleteAllExpiredApiKeys }) {
+	return createAuthEndpoint("/api-key/list", {
+		method: "GET",
+		use: [sessionMiddleware],
+		query: listApiKeysQuerySchema,
+		metadata: { openapi: {
+			description: "List all API keys for the authenticated user",
+			responses: { "200": {
+				description: "API keys retrieved successfully",
+				content: { "application/json": { schema: {
+					type: "object",
+					properties: {
+						apiKeys: {
+							type: "array",
+							items: {
+								type: "object",
+								properties: {
+									id: {
+										type: "string",
+										description: "ID"
+									},
+									name: {
+										type: "string",
+										nullable: true,
+										description: "The name of the key"
+									},
+									start: {
+										type: "string",
+										nullable: true,
+										description: "Shows the first few characters of the API key, including the prefix. This allows you to show those few characters in the UI to make it easier for users to identify the API key."
+									},
+									prefix: {
+										type: "string",
+										nullable: true,
+										description: "The API Key prefix. Stored as plain text."
+									},
+									userId: {
+										type: "string",
+										description: "The owner of the user id"
+									},
+									refillInterval: {
+										type: "number",
+										nullable: true,
+										description: "The interval in milliseconds between refills of the `remaining` count. Example: 3600000 // refill every hour (3600000ms = 1h)"
+									},
+									refillAmount: {
+										type: "number",
+										nullable: true,
+										description: "The amount to refill"
+									},
+									lastRefillAt: {
+										type: "string",
+										format: "date-time",
+										nullable: true,
+										description: "The last refill date"
+									},
+									enabled: {
+										type: "boolean",
+										description: "Sets if key is enabled or disabled",
+										default: true
+									},
+									rateLimitEnabled: {
+										type: "boolean",
+										description: "Whether the key has rate limiting enabled"
+									},
+									rateLimitTimeWindow: {
+										type: "number",
+										nullable: true,
+										description: "The duration in milliseconds"
+									},
+									rateLimitMax: {
+										type: "number",
+										nullable: true,
+										description: "Maximum amount of requests allowed within a window"
+									},
+									requestCount: {
+										type: "number",
+										description: "The number of requests made within the rate limit time window"
+									},
+									remaining: {
+										type: "number",
+										nullable: true,
+										description: "Remaining requests (every time api key is used this should updated and should be updated on refill as well)"
+									},
+									lastRequest: {
+										type: "string",
+										format: "date-time",
+										nullable: true,
+										description: "When last request occurred"
+									},
+									expiresAt: {
+										type: "string",
+										format: "date-time",
+										nullable: true,
+										description: "Expiry date of a key"
+									},
+									createdAt: {
+										type: "string",
+										format: "date-time",
+										description: "created at"
+									},
+									updatedAt: {
+										type: "string",
+										format: "date-time",
+										description: "updated at"
+									},
+									metadata: {
+										type: "object",
+										nullable: true,
+										additionalProperties: true,
+										description: "Extra metadata about the apiKey"
+									},
+									permissions: {
+										type: "string",
+										nullable: true,
+										description: "Permissions for the api key (stored as JSON string)"
+									}
+								},
+								required: [
+									"id",
+									"userId",
+									"enabled",
+									"rateLimitEnabled",
+									"requestCount",
+									"createdAt",
+									"updatedAt"
+								]
+							}
+						},
+						total: {
+							type: "number",
+							description: "Total number of API keys"
+						},
+						limit: {
+							type: "number",
+							nullable: true,
+							description: "The limit used for pagination"
+						},
+						offset: {
+							type: "number",
+							nullable: true,
+							description: "The offset used for pagination"
+						}
+					},
+					required: ["apiKeys", "total"]
+				} } }
+			} }
+		} }
+	}, async (ctx) => {
+		const session = ctx.context.session;
+		const limit = ctx.query?.limit != null ? Number(ctx.query.limit) : void 0;
+		const offset = ctx.query?.offset != null ? Number(ctx.query.offset) : void 0;
+		const { apiKeys, total } = await listApiKeys$1(ctx, session.user.id, opts, {
+			limit,
+			offset,
+			sortBy: ctx.query?.sortBy,
+			sortDirection: ctx.query?.sortDirection
+		});
+		deleteAllExpiredApiKeys(ctx.context);
+		const returningApiKeys = apiKeys.map((apiKey) => {
+			const { key: _key, ...rest } = apiKey;
+			return {
+				...rest,
+				metadata: parseDoubleStringifiedMetadata(apiKey.metadata),
+				permissions: rest.permissions ? safeJSONParse(rest.permissions) : null
+			};
+		});
+		await ctx.context.runInBackgroundOrAwait(batchMigrateLegacyMetadata(ctx, apiKeys, opts));
+		return ctx.json({
+			apiKeys: returningApiKeys,
+			total,
+			limit,
+			offset
+		});
+	});
+}
+
+//#endregion
+export { listApiKeys };
+//# sourceMappingURL=list-api-keys.mjs.map

package/dist/plugins/api-key/routes/list-api-keys.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-api-keys.mjs","names":["listApiKeysFromStorage"],"sources":["../../../../src/plugins/api-key/routes/list-api-keys.ts"],"sourcesContent":["import type { AuthContext } from \"@better-auth/core\";\nimport { createAuthEndpoint } from \"@better-auth/core/api\";\nimport { safeJSONParse } from \"@better-auth/core/utils/json\";\nimport * as z from \"zod/v4\";\nimport { sessionMiddleware } from \"../../../api\";\nimport {\n\tbatchMigrateLegacyMetadata,\n\tlistApiKeys as listApiKeysFromStorage,\n\tparseDoubleStringifiedMetadata,\n} from \"../adapter\";\nimport type { apiKeySchema } from \"../schema\";\nimport type { PredefinedApiKeyOptions } from \".\";\n\nconst listApiKeysQuerySchema = z\n\t.object({\n\t\tlimit: z.coerce\n\t\t\t.number()\n\t\t\t.int()\n\t\t\t.nonnegative()\n\t\t\t.meta({\n\t\t\t\tdescription: \"The number of API keys to return\",\n\t\t\t})\n\t\t\t.optional(),\n\t\toffset: z.coerce\n\t\t\t.number()\n\t\t\t.int()\n\t\t\t.nonnegative()\n\t\t\t.meta({\n\t\t\t\tdescription: \"The offset to start from\",\n\t\t\t})\n\t\t\t.optional(),\n\t\tsortBy: z\n\t\t\t.string()\n\t\t\t.meta({\n\t\t\t\tdescription: \"The field to sort by (e.g., createdAt, name, expiresAt)\",\n\t\t\t})\n\t\t\t.optional(),\n\t\tsortDirection: z\n\t\t\t.enum([\"asc\", \"desc\"])\n\t\t\t.meta({\n\t\t\t\tdescription: \"The direction to sort by\",\n\t\t\t})\n\t\t\t.optional(),\n\t})\n\t.optional();\n\nexport function listApiKeys({\n\topts,\n\tschema,\n\tdeleteAllExpiredApiKeys,\n}: {\n\topts: PredefinedApiKeyOptions;\n\tschema: ReturnType<typeof apiKeySchema>;\n\tdeleteAllExpiredApiKeys(\n\t\tctx: AuthContext,\n\t\tbyPassLastCheckTime?: boolean | undefined,\n\t): void;\n}) {\n\treturn createAuthEndpoint(\n\t\t\"/api-key/list\",\n\t\t{\n\t\t\tmethod: \"GET\",\n\t\t\tuse: [sessionMiddleware],\n\t\t\tquery: listApiKeysQuerySchema,\n\t\t\tmetadata: {\n\t\t\t\topenapi: {\n\t\t\t\t\tdescription: \"List all API keys for the authenticated user\",\n\t\t\t\t\tresponses: {\n\t\t\t\t\t\t\"200\": {\n\t\t\t\t\t\t\tdescription: \"API keys retrieved successfully\",\n\t\t\t\t\t\t\tcontent: {\n\t\t\t\t\t\t\t\t\"application/json\": {\n\t\t\t\t\t\t\t\t\tschema: {\n\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\tapiKeys: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"array\",\n\t\t\t\t\t\t\t\t\t\t\t\titems: {\n\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\tproperties: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tid: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"ID\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tname: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The name of the key\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tstart: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Shows the first few characters of the API key, including the prefix. This allows you to show those few characters in the UI to make it easier for users to identify the API key.\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tprefix: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"The API Key prefix. Stored as plain text.\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tuserId: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The owner of the user id\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\trefillInterval: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"The interval in milliseconds between refills of the `remaining` count. Example: 3600000 // refill every hour (3600000ms = 1h)\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\trefillAmount: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The amount to refill\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tlastRefillAt: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The last refill date\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tenabled: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Sets if key is enabled or disabled\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdefault: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\trateLimitEnabled: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"boolean\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Whether the key has rate limiting enabled\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\trateLimitTimeWindow: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The duration in milliseconds\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\trateLimitMax: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Maximum amount of requests allowed within a window\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\trequestCount: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"The number of requests made within the rate limit time window\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tremaining: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Remaining requests (every time api key is used this should updated and should be updated on refill as well)\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tlastRequest: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"When last request occurred\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\texpiresAt: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Expiry date of a key\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tcreatedAt: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"created at\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tupdatedAt: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tformat: \"date-time\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"updated at\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tmetadata: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"object\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tadditionalProperties: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Extra metadata about the apiKey\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t\tpermissions: {\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\ttype: \"string\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tdescription:\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Permissions for the api key (stored as JSON string)\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t\t\trequired: [\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"id\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"userId\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"enabled\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"rateLimitEnabled\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"requestCount\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"createdAt\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"updatedAt\",\n\t\t\t\t\t\t\t\t\t\t\t\t\t],\n\t\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\ttotal: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"Total number of API keys\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\tlimit: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The limit used for pagination\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t\toffset: {\n\t\t\t\t\t\t\t\t\t\t\t\ttype: \"number\",\n\t\t\t\t\t\t\t\t\t\t\t\tnullable: true,\n\t\t\t\t\t\t\t\t\t\t\t\tdescription: \"The offset used for pagination\",\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\trequired: [\"apiKeys\", \"total\"],\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t},\n\t\t},\n\t\tasync (ctx) => {\n\t\t\tconst session = ctx.context.session;\n\t\t\tconst limit =\n\t\t\t\tctx.query?.limit != null ? Number(ctx.query.limit) : undefined;\n\t\t\tconst offset =\n\t\t\t\tctx.query?.offset != null ? Number(ctx.query.offset) : undefined;\n\n\t\t\tconst { apiKeys, total } = await listApiKeysFromStorage(\n\t\t\t\tctx,\n\t\t\t\tsession.user.id,\n\t\t\t\topts,\n\t\t\t\t{\n\t\t\t\t\tlimit,\n\t\t\t\t\toffset,\n\t\t\t\t\tsortBy: ctx.query?.sortBy,\n\t\t\t\t\tsortDirection: ctx.query?.sortDirection,\n\t\t\t\t},\n\t\t\t);\n\n\t\t\tdeleteAllExpiredApiKeys(ctx.context);\n\n\t\t\t// Build response with parsed metadata (synchronous, no DB calls)\n\t\t\tconst returningApiKeys = apiKeys.map((apiKey) => {\n\t\t\t\tconst { key: _key, ...rest } = apiKey;\n\t\t\t\treturn {\n\t\t\t\t\t...rest,\n\t\t\t\t\tmetadata: parseDoubleStringifiedMetadata(apiKey.metadata),\n\t\t\t\t\tpermissions: rest.permissions\n\t\t\t\t\t\t? safeJSONParse<{\n\t\t\t\t\t\t\t\t[key: string]: string[];\n\t\t\t\t\t\t\t}>(rest.permissions)\n\t\t\t\t\t\t: null,\n\t\t\t\t};\n\t\t\t});\n\n\t\t\t// Batch migrate legacy metadata (parallel DB updates)\n\t\t\tawait ctx.context.runInBackgroundOrAwait(\n\t\t\t\tbatchMigrateLegacyMetadata(ctx, apiKeys, opts),\n\t\t\t);\n\n\t\t\treturn ctx.json({\n\t\t\t\tapiKeys: returningApiKeys,\n\t\t\t\ttotal,\n\t\t\t\tlimit,\n\t\t\t\toffset,\n\t\t\t});\n\t\t},\n\t);\n}\n"],"mappings":";;;;;;;;AAaA,MAAM,yBAAyB,EAC7B,OAAO;CACP,OAAO,EAAE,OACP,QAAQ,CACR,KAAK,CACL,aAAa,CACb,KAAK,EACL,aAAa,oCACb,CAAC,CACD,UAAU;CACZ,QAAQ,EAAE,OACR,QAAQ,CACR,KAAK,CACL,aAAa,CACb,KAAK,EACL,aAAa,4BACb,CAAC,CACD,UAAU;CACZ,QAAQ,EACN,QAAQ,CACR,KAAK,EACL,aAAa,2DACb,CAAC,CACD,UAAU;CACZ,eAAe,EACb,KAAK,CAAC,OAAO,OAAO,CAAC,CACrB,KAAK,EACL,aAAa,4BACb,CAAC,CACD,UAAU;CACZ,CAAC,CACD,UAAU;AAEZ,SAAgB,YAAY,EAC3B,MACA,QACA,2BAQE;AACF,QAAO,mBACN,iBACA;EACC,QAAQ;EACR,KAAK,CAAC,kBAAkB;EACxB,OAAO;EACP,UAAU,EACT,SAAS;GACR,aAAa;GACb,WAAW,EACV,OAAO;IACN,aAAa;IACb,SAAS,EACR,oBAAoB,EACnB,QAAQ;KACP,MAAM;KACN,YAAY;MACX,SAAS;OACR,MAAM;OACN,OAAO;QACN,MAAM;QACN,YAAY;SACX,IAAI;UACH,MAAM;UACN,aAAa;UACb;SACD,MAAM;UACL,MAAM;UACN,UAAU;UACV,aAAa;UACb;SACD,OAAO;UACN,MAAM;UACN,UAAU;UACV,aACC;UACD;SACD,QAAQ;UACP,MAAM;UACN,UAAU;UACV,aACC;UACD;SACD,QAAQ;UACP,MAAM;UACN,aAAa;UACb;SACD,gBAAgB;UACf,MAAM;UACN,UAAU;UACV,aACC;UACD;SACD,cAAc;UACb,MAAM;UACN,UAAU;UACV,aAAa;UACb;SACD,cAAc;UACb,MAAM;UACN,QAAQ;UACR,UAAU;UACV,aAAa;UACb;SACD,SAAS;UACR,MAAM;UACN,aAAa;UACb,SAAS;UACT;SACD,kBAAkB;UACjB,MAAM;UACN,aACC;UACD;SACD,qBAAqB;UACpB,MAAM;UACN,UAAU;UACV,aAAa;UACb;SACD,cAAc;UACb,MAAM;UACN,UAAU;UACV,aACC;UACD;SACD,cAAc;UACb,MAAM;UACN,aACC;UACD;SACD,WAAW;UACV,MAAM;UACN,UAAU;UACV,aACC;UACD;SACD,aAAa;UACZ,MAAM;UACN,QAAQ;UACR,UAAU;UACV,aAAa;UACb;SACD,WAAW;UACV,MAAM;UACN,QAAQ;UACR,UAAU;UACV,aAAa;UACb;SACD,WAAW;UACV,MAAM;UACN,QAAQ;UACR,aAAa;UACb;SACD,WAAW;UACV,MAAM;UACN,QAAQ;UACR,aAAa;UACb;SACD,UAAU;UACT,MAAM;UACN,UAAU;UACV,sBAAsB;UACtB,aAAa;UACb;SACD,aAAa;UACZ,MAAM;UACN,UAAU;UACV,aACC;UACD;SACD;QACD,UAAU;SACT;SACA;SACA;SACA;SACA;SACA;SACA;SACA;QACD;OACD;MACD,OAAO;OACN,MAAM;OACN,aAAa;OACb;MACD,OAAO;OACN,MAAM;OACN,UAAU;OACV,aAAa;OACb;MACD,QAAQ;OACP,MAAM;OACN,UAAU;OACV,aAAa;OACb;MACD;KACD,UAAU,CAAC,WAAW,QAAQ;KAC9B,EACD,EACD;IACD,EACD;GACD,EACD;EACD,EACD,OAAO,QAAQ;EACd,MAAM,UAAU,IAAI,QAAQ;EAC5B,MAAM,QACL,IAAI,OAAO,SAAS,OAAO,OAAO,IAAI,MAAM,MAAM,GAAG;EACtD,MAAM,SACL,IAAI,OAAO,UAAU,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG;EAExD,MAAM,EAAE,SAAS,UAAU,MAAMA,cAChC,KACA,QAAQ,KAAK,IACb,MACA;GACC;GACA;GACA,QAAQ,IAAI,OAAO;GACnB,eAAe,IAAI,OAAO;GAC1B,CACD;AAED,0BAAwB,IAAI,QAAQ;EAGpC,MAAM,mBAAmB,QAAQ,KAAK,WAAW;GAChD,MAAM,EAAE,KAAK,MAAM,GAAG,SAAS;AAC/B,UAAO;IACN,GAAG;IACH,UAAU,+BAA+B,OAAO,SAAS;IACzD,aAAa,KAAK,cACf,cAEE,KAAK,YAAY,GACnB;IACH;IACA;AAGF,QAAM,IAAI,QAAQ,uBACjB,2BAA2B,KAAK,SAAS,KAAK,CAC9C;AAED,SAAO,IAAI,KAAK;GACf,SAAS;GACT;GACA;GACA;GACA,CAAC;GAEH"}