@qwickapps/server 1.6.0 → 1.7.0

package/dist/src/plugins/api-keys/ApiKeysManagementPage.js

@@ -0,0 +1,66 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+/**
+ * ApiKeysManagementPage - Full management interface for API keys
+ */
+import { useState, useEffect } from 'react';
+import { PluginManagementPage } from '@qwickapps/server/ui';
+import { DataTable } from '@qwickapps/react-framework';
+export function ApiKeysManagementPage({ apiPrefix = '/api/api-keys' }) {
+    const [activeTab, setActiveTab] = useState('all');
+    const [keys, setKeys] = useState([]);
+    const [loading, setLoading] = useState(true);
+    useEffect(() => {
+        const status = activeTab === 'all' ? undefined : activeTab;
+        const url = status ? `${apiPrefix}?status=${status}` : `${apiPrefix}`;
+        fetch(url)
+            .then((res) => res.json())
+            .then((data) => {
+            setKeys(data.keys || []);
+            setLoading(false);
+        })
+            .catch(() => setLoading(false));
+    }, [activeTab, apiPrefix]);
+    const columns = [
+        { key: 'name', label: 'Name', sortable: true },
+        {
+            key: 'key',
+            label: 'API Key',
+            render: (val) => (_jsxs("code", { className: "text-xs bg-gray-100 dark:bg-gray-800 px-2 py-1 rounded", children: [String(val).substring(0, 20), "..."] })),
+        },
+        {
+            key: 'status',
+            label: 'Status',
+            sortable: true,
+            render: (val) => (_jsx("span", { className: `px-2 py-1 rounded text-xs font-medium ${val === 'active'
+                    ? 'bg-green-100 dark:bg-green-900 text-green-800 dark:text-green-100'
+                    : val === 'expired'
+                        ? 'bg-yellow-100 dark:bg-yellow-900 text-yellow-800 dark:text-yellow-100'
+                        : 'bg-red-100 dark:bg-red-900 text-red-800 dark:text-red-100'}`, children: String(val) })),
+        },
+        {
+            key: 'permissions',
+            label: 'Permissions',
+            render: (val) => (_jsx("span", { className: "text-xs text-gray-600 dark:text-gray-400", children: Array.isArray(val) ? val.join(', ') : '' })),
+        },
+        { key: 'usageCount', label: 'Usage', sortable: true },
+        { key: 'lastUsedAt', label: 'Last Used', sortable: true },
+        { key: 'expiresAt', label: 'Expires', sortable: true },
+    ];
+    const handleRevoke = (selectedKeys) => {
+        console.log('Revoke keys:', selectedKeys);
+    };
+    const tabs = [
+        { id: 'all', label: 'All Keys' },
+        { id: 'active', label: 'Active' },
+        { id: 'expired', label: 'Expired' },
+        { id: 'config', label: 'Configuration' },
+    ];
+    return (_jsx(PluginManagementPage, { title: "API Keys Management", tabs: tabs, activeTab: activeTab, onTabChange: (tab) => setActiveTab(tab), children: activeTab === 'config' ? (_jsx("div", { className: "space-y-4", children: _jsx("div", { className: "p-4 bg-blue-50 dark:bg-blue-900/20 rounded-lg", children: _jsx("p", { className: "text-sm text-blue-900 dark:text-blue-100", children: "API key configuration settings and security policies." }) }) })) : (_jsx(DataTable, { columns: columns, data: keys, loading: loading, emptyMessage: "No API keys found", bulkActions: [
+                {
+                    label: 'Revoke Selected',
+                    onClick: handleRevoke,
+                    variant: 'danger',
+                },
+            ] })) }));
+}
+//# sourceMappingURL=ApiKeysManagementPage.js.map

package/dist/src/plugins/api-keys/ApiKeysManagementPage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeysManagementPage.js","sourceRoot":"","sources":["../../../../src/plugins/api-keys/ApiKeysManagementPage.tsx"],"names":[],"mappings":";AAAA;;GAEG;AAEH,OAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAU,MAAM,4BAA4B,CAAC;AAoB/D,MAAM,UAAU,qBAAqB,CAAC,EAAE,SAAS,GAAG,eAAe,EAA8B;IAC/F,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAA0C,KAAK,CAAC,CAAC;IAC3F,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAW,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7C,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,MAAM,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,SAAS,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC;QAEtE,KAAK,CAAC,GAAG,CAAC;aACP,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACzB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACzB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IAE3B,MAAM,OAAO,GAAqB;QAChC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9C;YACE,GAAG,EAAE,KAAK;YACV,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CACf,gBAAM,SAAS,EAAC,wDAAwD,aACrE,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,WACxB,CACR;SACF;QACD;YACE,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CACf,eACE,SAAS,EAAE,yCACT,GAAG,KAAK,QAAQ;oBACd,CAAC,CAAC,mEAAmE;oBACrE,CAAC,CAAC,GAAG,KAAK,SAAS;wBACnB,CAAC,CAAC,uEAAuE;wBACzE,CAAC,CAAC,2DACN,EAAE,YAED,MAAM,CAAC,GAAG,CAAC,GACP,CACR;SACF;QACD;YACE,GAAG,EAAE,aAAa;YAClB,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CACf,eAAM,SAAS,EAAC,0CAA0C,YACvD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GACpC,CACR;SACF;QACD,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrD,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzD,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE;KACvD,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,YAAsB,EAAE,EAAE;QAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE;QAChC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;QACjC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;QACnC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;KACzC,CAAC;IAEF,OAAO,CACL,KAAC,oBAAoB,IACnB,KAAK,EAAC,qBAAqB,EAC3B,IAAI,EAAE,IAAI,EACV,SAAS,EAAE,SAAS,EACpB,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAuB,CAAC,YAE1D,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CACxB,cAAK,SAAS,EAAC,WAAW,YACxB,cAAK,SAAS,EAAC,+CAA+C,YAC5D,YAAG,SAAS,EAAC,0CAA0C,sEAEnD,GACA,GACF,CACP,CAAC,CAAC,CAAC,CACF,KAAC,SAAS,IACR,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,YAAY,EAAC,mBAAmB,EAChC,WAAW,EAAE;gBACX;oBACE,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE,QAAQ;iBAClB;aACF,GACD,CACH,GACoB,CACxB,CAAC;AACJ,CAAC"}

package/dist/src/plugins/api-keys/ApiKeysStatusWidget.d.ts

@@ -0,0 +1,9 @@
+/**
+ * ApiKeysStatusWidget - Dashboard widget for API keys overview
+ */
+export interface ApiKeysStatusWidgetProps {
+    /** API endpoint prefix (default: '/api/api-keys') */
+    apiPrefix?: string;
+}
+export declare function ApiKeysStatusWidget({ apiPrefix }: ApiKeysStatusWidgetProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=ApiKeysStatusWidget.d.ts.map

package/dist/src/plugins/api-keys/ApiKeysStatusWidget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeysStatusWidget.d.ts","sourceRoot":"","sources":["../../../../src/plugins/api-keys/ApiKeysStatusWidget.tsx"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CAAC,EAAE,SAA2B,EAAE,EAAE,wBAAwB,2CAwC5F"}

package/dist/src/plugins/api-keys/ApiKeysStatusWidget.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+/**
+ * ApiKeysStatusWidget - Dashboard widget for API keys overview
+ */
+import { useEffect, useState } from 'react';
+import { PluginStatusWidget } from '@qwickapps/server/ui';
+export function ApiKeysStatusWidget({ apiPrefix = '/api/api-keys' }) {
+    const [stats, setStats] = useState(null);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState(null);
+    useEffect(() => {
+        fetch(`${apiPrefix}/stats`)
+            .then((res) => res.json())
+            .then((data) => {
+            setStats(data);
+            setLoading(false);
+        })
+            .catch((err) => {
+            setError(err.message);
+            setLoading(false);
+        });
+    }, [apiPrefix]);
+    return (_jsx(PluginStatusWidget, { title: "API Keys", stats: [
+            { label: 'Total Keys', value: stats?.totalKeys ?? 0 },
+            { label: 'Active', value: stats?.activeKeys ?? 0 },
+            { label: 'Expired', value: stats?.expiredKeys ?? 0 },
+            { label: 'Recently Used', value: stats?.recentlyUsed ?? 0, suffix: '/7d' },
+        ], health: stats?.health ?? 'error', loading: loading, error: error, detailsPath: "/cpanel/plugins/api-keys" }));
+}
+//# sourceMappingURL=ApiKeysStatusWidget.js.map

package/dist/src/plugins/api-keys/ApiKeysStatusWidget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKeysStatusWidget.js","sourceRoot":"","sources":["../../../../src/plugins/api-keys/ApiKeysStatusWidget.tsx"],"names":[],"mappings":";AAAA;;GAEG;AAEH,OAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,UAAU,mBAAmB,CAAC,EAAE,SAAS,GAAG,eAAe,EAA4B;IAC3F,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAOxB,IAAI,CAAC,CAAC;IAChB,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAExD,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,CAAC,GAAG,SAAS,QAAQ,CAAC;aACxB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACzB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,OAAO,CACL,KAAC,kBAAkB,IACjB,KAAK,EAAC,UAAU,EAChB,KAAK,EAAE;YACL,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,IAAI,CAAC,EAAE;YACrD,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,IAAI,CAAC,EAAE;YAClD,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,EAAE;YACpD,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;SAC3E,EACD,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,OAAO,EAChC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,KAAK,EACZ,WAAW,EAAC,0BAA0B,GACtC,CACH,CAAC;AACJ,CAAC"}

package/dist/src/plugins/api-keys/api-keys-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys-plugin.d.ts","sourceRoot":"","sources":["../../../../src/plugins/api-keys/api-keys-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAgC,MAAM,+BAA+B,CAAC;AAC1F,OAAO,KAAK,EACV,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,EACP,MAAM,YAAY,CAAC;AAUpB;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAyZvE;AAMD;;GAEG;AACH,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAEpD;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAe/E;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9E;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMrF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMlF"}

package/dist/src/plugins/api-keys/api-keys-plugin.js

@@ -0,0 +1,452 @@
+/**
+ * API Keys Plugin
+ *
+ * API key authentication and management plugin for @qwickapps/server.
+ * Provides API key generation, storage, and verification with PostgreSQL RLS.
+ *
+ * This plugin depends on the Users Plugin for user identity.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import { CreateApiKeySchema, UpdateApiKeySchema, } from './types.js';
+// Store instance for helper access
+let currentStore = null;
+/**
+ * Create the API Keys plugin
+ */
+export function createApiKeysPlugin(config) {
+    const debug = config.debug || false;
+    // Framework automatically prefixes routes with plugin slug, so use root path
+    const apiPrefix = config.api?.prefix || '/';
+    const apiEnabled = config.api?.enabled !== false;
+    function log(message, data) {
+        if (debug) {
+            console.log(`[ApiKeysPlugin] ${message}`, data || '');
+        }
+    }
+    return {
+        id: 'api-keys',
+        name: 'API Keys',
+        version: '1.0.0',
+        async onStart(_pluginConfig, registry) {
+            log('Starting API keys plugin');
+            // Check for users plugin dependency
+            if (!registry.hasPlugin('users')) {
+                throw new Error('API Keys plugin requires Users plugin to be loaded first');
+            }
+            // Initialize the store (creates tables and RLS policies if needed)
+            await config.store.initialize();
+            log('API keys store initialized');
+            // Initialize optional Phase 2 stores
+            if (config.scopeStore) {
+                await config.scopeStore.initialize();
+                log('Plugin scope store initialized');
+            }
+            if (config.usageStore) {
+                await config.usageStore.initialize();
+                log('Usage log store initialized');
+            }
+            // Store reference for helper access
+            currentStore = config.store;
+            // Register health check
+            registry.registerHealthCheck({
+                name: 'api-keys-store',
+                type: 'custom',
+                check: async () => {
+                    try {
+                        // Simple health check - store is accessible
+                        return { healthy: currentStore !== null };
+                    }
+                    catch {
+                        return { healthy: false };
+                    }
+                },
+            });
+            // Add API routes if enabled
+            if (apiEnabled) {
+                // POST /api-keys - Create a new API key
+                registry.addRoute({
+                    method: 'post',
+                    path: apiPrefix,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            // Validate request body
+                            const validation = CreateApiKeySchema.safeParse(req.body);
+                            if (!validation.success) {
+                                return res.status(400).json({
+                                    error: 'Invalid request',
+                                });
+                            }
+                            const params = {
+                                user_id: userId,
+                                ...validation.data,
+                            };
+                            // Create the API key
+                            const apiKey = await config.store.create(params);
+                            // Return the key with plaintext (ONLY time plaintext is accessible)
+                            res.status(201).json({
+                                id: apiKey.id,
+                                name: apiKey.name,
+                                key: apiKey.plaintext_key, // Client must save this - won't be shown again
+                                key_prefix: apiKey.key_prefix,
+                                key_type: apiKey.key_type,
+                                scopes: apiKey.scopes,
+                                expires_at: apiKey.expires_at,
+                                is_active: apiKey.is_active,
+                                created_at: apiKey.created_at,
+                            });
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Create API key error:', error);
+                            res.status(500).json({ error: 'Failed to create API key' });
+                        }
+                    },
+                });
+                // GET /api-keys - List current user's API keys
+                registry.addRoute({
+                    method: 'get',
+                    path: apiPrefix,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            const keys = await config.store.list(userId);
+                            // Remove sensitive fields from response
+                            const sanitized = keys.map(key => ({
+                                id: key.id,
+                                name: key.name,
+                                key_prefix: key.key_prefix,
+                                key_type: key.key_type,
+                                scopes: key.scopes,
+                                last_used_at: key.last_used_at,
+                                expires_at: key.expires_at,
+                                is_active: key.is_active,
+                                created_at: key.created_at,
+                                updated_at: key.updated_at,
+                            }));
+                            res.json({ keys: sanitized });
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] List API keys error:', error);
+                            res.status(500).json({ error: 'Failed to list API keys' });
+                        }
+                    },
+                });
+                // GET /api-keys/:id - Get a specific API key
+                registry.addRoute({
+                    method: 'get',
+                    path: `${apiPrefix}/:id`,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            const { id } = req.params;
+                            const key = await config.store.get(userId, id);
+                            if (!key) {
+                                return res.status(404).json({ error: 'API key not found' });
+                            }
+                            // Remove sensitive fields from response
+                            const sanitized = {
+                                id: key.id,
+                                name: key.name,
+                                key_prefix: key.key_prefix,
+                                key_type: key.key_type,
+                                scopes: key.scopes,
+                                last_used_at: key.last_used_at,
+                                expires_at: key.expires_at,
+                                is_active: key.is_active,
+                                created_at: key.created_at,
+                                updated_at: key.updated_at,
+                            };
+                            res.json(sanitized);
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Get API key error:', error);
+                            res.status(500).json({ error: 'Failed to get API key' });
+                        }
+                    },
+                });
+                // PUT /api-keys/:id - Update an API key
+                registry.addRoute({
+                    method: 'put',
+                    path: `${apiPrefix}/:id`,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            // Validate request body
+                            const validation = UpdateApiKeySchema.safeParse(req.body);
+                            if (!validation.success) {
+                                return res.status(400).json({
+                                    error: 'Invalid request',
+                                });
+                            }
+                            const { id } = req.params;
+                            const params = validation.data;
+                            const updated = await config.store.update(userId, id, params);
+                            if (!updated) {
+                                return res.status(404).json({ error: 'API key not found' });
+                            }
+                            // Remove sensitive fields from response
+                            const sanitized = {
+                                id: updated.id,
+                                name: updated.name,
+                                key_prefix: updated.key_prefix,
+                                key_type: updated.key_type,
+                                scopes: updated.scopes,
+                                last_used_at: updated.last_used_at,
+                                expires_at: updated.expires_at,
+                                is_active: updated.is_active,
+                                created_at: updated.created_at,
+                                updated_at: updated.updated_at,
+                            };
+                            res.json(sanitized);
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Update API key error:', error);
+                            res.status(500).json({ error: 'Failed to update API key' });
+                        }
+                    },
+                });
+                // DELETE /api-keys/:id - Delete an API key
+                registry.addRoute({
+                    method: 'delete',
+                    path: `${apiPrefix}/:id`,
+                    pluginId: 'api-keys',
+                    handler: async (req, res) => {
+                        try {
+                            const authReq = req;
+                            const userId = authReq.auth?.user?.id;
+                            if (!userId) {
+                                return res.status(401).json({ error: 'Authentication required' });
+                            }
+                            const { id } = req.params;
+                            const deleted = await config.store.delete(userId, id);
+                            if (!deleted) {
+                                return res.status(404).json({ error: 'API key not found' });
+                            }
+                            res.status(204).send();
+                        }
+                        catch (error) {
+                            console.error('[ApiKeysPlugin] Delete API key error:', error);
+                            res.status(500).json({ error: 'Failed to delete API key' });
+                        }
+                    },
+                });
+                // Phase 2: GET /scopes - List all available scopes
+                if (config.scopeStore) {
+                    registry.addRoute({
+                        method: 'get',
+                        path: '/scopes',
+                        pluginId: 'api-keys',
+                        handler: async (_req, res) => {
+                            try {
+                                const scopes = await config.scopeStore.getAllScopes();
+                                // Group by plugin
+                                const grouped = scopes.reduce((acc, scope) => {
+                                    if (!acc[scope.plugin_id]) {
+                                        acc[scope.plugin_id] = [];
+                                    }
+                                    acc[scope.plugin_id].push({
+                                        name: scope.name,
+                                        description: scope.description,
+                                        category: scope.category,
+                                    });
+                                    return acc;
+                                }, {});
+                                // Convert to array format
+                                const result = Object.entries(grouped).map(([pluginId, pluginScopes]) => ({
+                                    pluginId,
+                                    scopes: pluginScopes,
+                                }));
+                                res.json({ scopes: result });
+                            }
+                            catch (error) {
+                                console.error('[ApiKeysPlugin] Get scopes error:', error);
+                                res.status(500).json({ error: 'Failed to retrieve scopes' });
+                            }
+                        },
+                    });
+                }
+                // Phase 2: GET /api-keys/:id/usage - Get usage logs for a specific key
+                if (config.usageStore) {
+                    registry.addRoute({
+                        method: 'get',
+                        path: `${apiPrefix}/:id/usage`,
+                        pluginId: 'api-keys',
+                        handler: async (req, res) => {
+                            try {
+                                const authReq = req;
+                                const userId = authReq.auth?.user?.id;
+                                if (!userId) {
+                                    return res.status(401).json({ error: 'Authentication required' });
+                                }
+                                const { id: keyId } = req.params;
+                                // Verify key belongs to user
+                                const key = await config.store.get(userId, keyId);
+                                if (!key) {
+                                    return res.status(404).json({ error: 'API key not found' });
+                                }
+                                // Parse query parameters
+                                const limit = parseInt(req.query.limit) || 100;
+                                const offset = parseInt(req.query.offset) || 0;
+                                const since = req.query.since ? new Date(req.query.since) : undefined;
+                                const until = req.query.until ? new Date(req.query.until) : undefined;
+                                const endpoint = req.query.endpoint;
+                                const method = req.query.method;
+                                const statusCode = req.query.statusCode ? parseInt(req.query.statusCode) : undefined;
+                                // Get usage logs
+                                const logs = await config.usageStore.getKeyUsage(keyId, {
+                                    limit,
+                                    offset,
+                                    since,
+                                    until,
+                                    endpoint,
+                                    method,
+                                    statusCode,
+                                });
+                                // Get stats
+                                const stats = await config.usageStore.getKeyStats(keyId, { since, until });
+                                res.json({
+                                    keyId,
+                                    keyName: key.name,
+                                    totalCalls: stats.totalCalls,
+                                    lastUsed: stats.lastUsed,
+                                    callsByStatus: stats.callsByStatus,
+                                    callsByEndpoint: stats.callsByEndpoint,
+                                    logs,
+                                });
+                            }
+                            catch (error) {
+                                console.error('[ApiKeysPlugin] Get usage error:', error);
+                                res.status(500).json({ error: 'Failed to retrieve usage logs' });
+                            }
+                        },
+                    });
+                }
+            }
+            log('API keys plugin started');
+        },
+        async onStop() {
+            log('Stopping API keys plugin');
+            if (currentStore) {
+                await currentStore.shutdown();
+            }
+            if (config.scopeStore) {
+                await config.scopeStore.shutdown();
+            }
+            if (config.usageStore) {
+                await config.usageStore.shutdown();
+            }
+            currentStore = null;
+            log('API keys plugin stopped');
+        },
+        async onPluginEvent(event) {
+            // Automatically register plugin scopes when plugins start
+            if (event.type === 'plugin:started' && config.scopeStore) {
+                const { plugin } = event;
+                if (plugin.scopes && plugin.scopes.length > 0) {
+                    try {
+                        await config.scopeStore.registerScopes(plugin.id, plugin.scopes);
+                        log(`Registered ${plugin.scopes.length} scopes for plugin: ${plugin.id}`, {
+                            scopes: plugin.scopes.map(s => s.name),
+                        });
+                    }
+                    catch (error) {
+                        console.error(`[ApiKeysPlugin] Failed to register scopes for ${plugin.id}:`, error);
+                    }
+                }
+            }
+        },
+    };
+}
+// ========================================
+// Helper Functions
+// ========================================
+/**
+ * Get the current API keys store instance
+ */
+export function getApiKeysStore() {
+    return currentStore;
+}
+/**
+ * Verify an API key and return the associated key record
+ * Returns null if key is invalid, expired, or inactive
+ */
+export async function verifyApiKey(plaintextKey) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    const key = await currentStore.verify(plaintextKey);
+    // Update last_used_at timestamp if key is valid
+    if (key) {
+        await currentStore.recordUsage(key.id).catch(err => {
+            console.error('[ApiKeysPlugin] Failed to record key usage:', err);
+        });
+    }
+    return key;
+}
+/**
+ * Create an API key for a user
+ */
+export async function createApiKey(params) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.create(params);
+}
+/**
+ * List all API keys for a user
+ */
+export async function listApiKeys(userId) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.list(userId);
+}
+/**
+ * Get a specific API key
+ */
+export async function getApiKey(userId, keyId) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.get(userId, keyId);
+}
+/**
+ * Update an API key
+ */
+export async function updateApiKey(userId, keyId, params) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.update(userId, keyId, params);
+}
+/**
+ * Delete an API key
+ */
+export async function deleteApiKey(userId, keyId) {
+    if (!currentStore) {
+        throw new Error('API Keys plugin not initialized');
+    }
+    return currentStore.delete(userId, keyId);
+}
+//# sourceMappingURL=api-keys-plugin.js.map

package/dist/src/plugins/api-keys/api-keys-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys-plugin.js","sourceRoot":"","sources":["../../../../src/plugins/api-keys/api-keys-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,mCAAmC;AACnC,IAAI,YAAY,GAAuB,IAAI,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,6EAA6E;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,KAAK,KAAK,CAAC;IAEjD,SAAS,GAAG,CAAC,OAAe,EAAE,IAA8B;QAC1D,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAEhB,KAAK,CAAC,OAAO,CAAC,aAA2B,EAAE,QAAwB;YACjE,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAEhC,oCAAoC;YACpC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAC9E,CAAC;YAED,mEAAmE;YACnE,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAElC,qCAAqC;YACrC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBACrC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YACxC,CAAC;YAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBACrC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YACrC,CAAC;YAED,oCAAoC;YACpC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;YAE5B,wBAAwB;YACxB,QAAQ,CAAC,mBAAmB,CAAC;gBAC3B,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,KAAK,IAAI,EAAE;oBAChB,IAAI,CAAC;wBACH,4CAA4C;wBAC5C,OAAO,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC5C,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;oBAC5B,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YAEH,4BAA4B;YAC5B,IAAI,UAAU,EAAE,CAAC;gBACf,wCAAwC;gBACxC,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,wBAAwB;4BACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gCACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oCAC1B,KAAK,EAAE,iBAAiB;iCACzB,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,MAAM,GAAuB;gCACjC,OAAO,EAAE,MAAM;gCACf,GAAG,UAAU,CAAC,IAAI;6BACnB,CAAC;4BAEF,qBAAqB;4BACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;4BAEjD,oEAAoE;4BACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gCACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gCACb,IAAI,EAAE,MAAM,CAAC,IAAI;gCACjB,GAAG,EAAE,MAAM,CAAC,aAAa,EAAE,+CAA+C;gCAC1E,UAAU,EAAE,MAAM,CAAC,UAAU;gCAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gCACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gCACrB,UAAU,EAAE,MAAM,CAAC,UAAU;gCAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gCAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;6BAC9B,CAAC,CAAC;wBACL,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;4BAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,+CAA+C;gBAC/C,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BAE7C,wCAAwC;4BACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gCACjC,EAAE,EAAE,GAAG,CAAC,EAAE;gCACV,IAAI,EAAE,GAAG,CAAC,IAAI;gCACd,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gCACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gCAClB,YAAY,EAAE,GAAG,CAAC,YAAY;gCAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gCACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;6BAC3B,CAAC,CAAC,CAAC;4BAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;wBAChC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;4BAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;wBAC7D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,6CAA6C;gBAC7C,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,GAAG,SAAS,MAAM;oBACxB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;4BAC1B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BAE/C,IAAI,CAAC,GAAG,EAAE,CAAC;gCACT,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;4BAC9D,CAAC;4BAED,wCAAwC;4BACxC,MAAM,SAAS,GAAG;gCAChB,EAAE,EAAE,GAAG,CAAC,EAAE;gCACV,IAAI,EAAE,GAAG,CAAC,IAAI;gCACd,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gCACtB,MAAM,EAAE,GAAG,CAAC,MAAM;gCAClB,YAAY,EAAE,GAAG,CAAC,YAAY;gCAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gCACxB,UAAU,EAAE,GAAG,CAAC,UAAU;gCAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;6BAC3B,CAAC;4BAEF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACtB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;4BAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;wBAC3D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,wCAAwC;gBACxC,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,GAAG,SAAS,MAAM;oBACxB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,wBAAwB;4BACxB,MAAM,UAAU,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BAC1D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gCACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oCAC1B,KAAK,EAAE,iBAAiB;iCACzB,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;4BAC1B,MAAM,MAAM,GAAuB,UAAU,CAAC,IAAI,CAAC;4BAEnD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;4BAE9D,IAAI,CAAC,OAAO,EAAE,CAAC;gCACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;4BAC9D,CAAC;4BAED,wCAAwC;4BACxC,MAAM,SAAS,GAAG;gCAChB,EAAE,EAAE,OAAO,CAAC,EAAE;gCACd,IAAI,EAAE,OAAO,CAAC,IAAI;gCAClB,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gCAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,YAAY,EAAE,OAAO,CAAC,YAAY;gCAClC,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;gCAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;gCAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;6BAC/B,CAAC;4BAEF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACtB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;4BAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,2CAA2C;gBAC3C,QAAQ,CAAC,QAAQ,CAAC;oBAChB,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,GAAG,SAAS,MAAM;oBACxB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;wBAC7C,IAAI,CAAC;4BACH,MAAM,OAAO,GAAG,GAA2B,CAAC;4BAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;4BAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;4BACpE,CAAC;4BAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;4BAC1B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;4BAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;gCACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;4BAC9D,CAAC;4BAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBACzB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;4BAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,CAAC;oBACH,CAAC;iBACF,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,QAAQ,CAAC,QAAQ,CAAC;wBAChB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,UAAU;wBACpB,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;4BAC9C,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAW,CAAC,YAAY,EAAE,CAAC;gCAEvD,kBAAkB;gCAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;oCAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;wCAC1B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;oCAC5B,CAAC;oCACD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;wCACxB,IAAI,EAAE,KAAK,CAAC,IAAI;wCAChB,WAAW,EAAE,KAAK,CAAC,WAAW;wCAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;qCACzB,CAAC,CAAC;oCACH,OAAO,GAAG,CAAC;gCACb,CAAC,EAAE,EAAqF,CAAC,CAAC;gCAE1F,0BAA0B;gCAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;oCACxE,QAAQ;oCACR,MAAM,EAAE,YAAY;iCACrB,CAAC,CAAC,CAAC;gCAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;4BAC/B,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;gCAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;4BAC/D,CAAC;wBACH,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;gBAED,uEAAuE;gBACvE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBACtB,QAAQ,CAAC,QAAQ,CAAC;wBAChB,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,GAAG,SAAS,YAAY;wBAC9B,QAAQ,EAAE,UAAU;wBACpB,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;4BAC7C,IAAI,CAAC;gCACH,MAAM,OAAO,GAAG,GAA2B,CAAC;gCAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;gCAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;oCACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;gCACpE,CAAC;gCAED,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;gCAEjC,6BAA6B;gCAC7B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gCAClD,IAAI,CAAC,GAAG,EAAE,CAAC;oCACT,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gCAC9D,CAAC;gCAED,yBAAyB;gCACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,GAAG,CAAC;gCACzD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAgB,CAAC,IAAI,CAAC,CAAC;gCACzD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gCAChF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gCAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,QAA8B,CAAC;gCAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAA4B,CAAC;gCACtD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAoB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gCAE/F,iBAAiB;gCACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,UAAW,CAAC,WAAW,CAAC,KAAK,EAAE;oCACvD,KAAK;oCACL,MAAM;oCACN,KAAK;oCACL,KAAK;oCACL,QAAQ;oCACR,MAAM;oCACN,UAAU;iCACX,CAAC,CAAC;gCAEH,YAAY;gCACZ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,UAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gCAE5E,GAAG,CAAC,IAAI,CAAC;oCACP,KAAK;oCACL,OAAO,EAAE,GAAG,CAAC,IAAI;oCACjB,UAAU,EAAE,KAAK,CAAC,UAAU;oCAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;oCACxB,aAAa,EAAE,KAAK,CAAC,aAAa;oCAClC,eAAe,EAAE,KAAK,CAAC,eAAe;oCACtC,IAAI;iCACL,CAAC,CAAC;4BACL,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;gCACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;4BACnE,CAAC;wBACH,CAAC;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,MAAM;YACV,GAAG,CAAC,0BAA0B,CAAC,CAAC;YAChC,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,YAAY,CAAC,QAAQ,EAAE,CAAC;YAChC,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACrC,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACrC,CAAC;YACD,YAAY,GAAG,IAAI,CAAC;YACpB,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,0DAA0D;YAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACzD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;gBAEzB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;wBACjE,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,MAAM,uBAAuB,MAAM,CAAC,EAAE,EAAE,EAAE;4BACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;yBACvC,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,iDAAiD,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;oBACtF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,mBAAmB;AACnB,2CAA2C;AAE3C;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB;IACrD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAEpD,gDAAgD;IAChD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACjD,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA0B;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa;IAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,KAAa,EACb,MAA0B;IAE1B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IAC9D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC"}

package/dist/src/plugins/api-keys/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * API Keys Plugin Index
+ *
+ * API key authentication and management plugin with PostgreSQL RLS.
+ * Depends on the Users Plugin for user identity.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+export { createApiKeysPlugin, getApiKeysStore, verifyApiKey, createApiKey, listApiKeys, getApiKey, updateApiKey, deleteApiKey, } from './api-keys-plugin.js';
+export type { ApiKeysPluginConfig, ApiKeyStore, ApiKey, ApiKeyWithPlaintext, ApiKeyScope, ApiKeyType, CreateApiKeyParams, UpdateApiKeyParams, PostgresApiKeyStoreConfig, ApiKeysApiConfig, } from './types.js';
+export { ApiKeyScopeSchema, ApiKeyTypeSchema, CreateApiKeySchema, UpdateApiKeySchema, ApiKeySchema, } from './types.js';
+export { postgresApiKeyStore } from './stores/index.js';
+export { bearerTokenAuth } from './middleware/index.js';
+export { ApiKeysStatusWidget } from './ApiKeysStatusWidget.js';
+export type { ApiKeysStatusWidgetProps } from './ApiKeysStatusWidget.js';
+export { ApiKeysManagementPage } from './ApiKeysManagementPage.js';
+export type { ApiKeysManagementPageProps } from './ApiKeysManagementPage.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/plugins/api-keys/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugins/api-keys/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,mBAAmB,EACnB,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,YAAY,GACb,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,YAAY,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/src/plugins/api-keys/index.js

@@ -0,0 +1,20 @@
+/**
+ * API Keys Plugin Index
+ *
+ * API key authentication and management plugin with PostgreSQL RLS.
+ * Depends on the Users Plugin for user identity.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+// Main plugin
+export { createApiKeysPlugin, getApiKeysStore, verifyApiKey, createApiKey, listApiKeys, getApiKey, updateApiKey, deleteApiKey, } from './api-keys-plugin.js';
+// Zod schemas
+export { ApiKeyScopeSchema, ApiKeyTypeSchema, CreateApiKeySchema, UpdateApiKeySchema, ApiKeySchema, } from './types.js';
+// Stores
+export { postgresApiKeyStore } from './stores/index.js';
+// Middleware
+export { bearerTokenAuth } from './middleware/index.js';
+// UI Components
+export { ApiKeysStatusWidget } from './ApiKeysStatusWidget.js';
+export { ApiKeysManagementPage } from './ApiKeysManagementPage.js';
+//# sourceMappingURL=index.js.map