payload-mcp-toolkit 0.7.0 → 0.7.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "payload-mcp-toolkit",
-  "version": "0.7.0",
+  "version": "0.7.5",
   "description": "Standalone schema-aware MCP plugin for Payload CMS v3 — owns the /api/mcp endpoint, scoped API keys, draft workflow, and AI-friendly tools so non-technical editors can manage content via AI chat.",
   "license": "MIT",
   "author": "jon8800",
@@ -38,9 +38,29 @@
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
-    "dist"
+    "dist",
+    "!dist/__tests__",
+    "!dist/**/*.test.js",
+    "!dist/**/*.test.js.map",
+    "!dist/**/*.test.d.ts"
   ],
   "sideEffects": false,
+  "scripts": {
+    "build": "pnpm copyfiles && pnpm build:types && pnpm build:swc",
+    "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
+    "build:types": "tsc -p tsconfig.build.json",
+    "clean": "rimraf dist",
+    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,svg,json}\" dist/",
+    "dev": "next dev dev --turbo",
+    "dev:generate-importmap": "cd dev && cross-env PAYLOAD_CONFIG_PATH=./payload.config.ts payload generate:importmap",
+    "dev:generate-types": "cd dev && cross-env PAYLOAD_CONFIG_PATH=./payload.config.ts payload generate:types",
+    "dev:payload": "cd dev && cross-env PAYLOAD_CONFIG_PATH=./payload.config.ts payload",
+    "prepack": "node scripts/prepack.mjs",
+    "postpack": "node scripts/postpack.mjs",
+    "prepublishOnly": "pnpm clean && pnpm build && pnpm test",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.18.0",
     "mcp-handler": "^1.1.0"
@@ -76,17 +96,11 @@
     "node": "^18.20.2 || >=20.9.0",
     "pnpm": "^9 || ^10"
   },
-  "scripts": {
-    "build": "pnpm copyfiles && pnpm build:types && pnpm build:swc",
-    "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
-    "build:types": "tsc -p tsconfig.build.json",
-    "clean": "rimraf dist",
-    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,svg,json}\" dist/",
-    "dev": "next dev dev --turbo",
-    "dev:generate-importmap": "cd dev && cross-env PAYLOAD_CONFIG_PATH=./payload.config.ts payload generate:importmap",
-    "dev:generate-types": "cd dev && cross-env PAYLOAD_CONFIG_PATH=./payload.config.ts payload generate:types",
-    "dev:payload": "cd dev && cross-env PAYLOAD_CONFIG_PATH=./payload.config.ts payload",
-    "test": "vitest run",
-    "test:watch": "vitest"
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "sharp",
+      "esbuild",
+      "better-sqlite3"
+    ]
   }
-}
+}

package/dist/__tests__/api-keys.test.js

@@ -1,292 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { createApiKeysCollection, API_KEYS_DEFAULT_SLUG } from '../api-keys';
-const baseOptions = {
-    userCollection: 'users',
-    availableCollections: [
-        'posts',
-        'pages'
-    ],
-    availableTools: [
-        'findDocument',
-        'createDocument',
-        'safeDelete'
-    ]
-};
-function findNamed(fields, name) {
-    for (const f of fields){
-        if ('name' in f && f.name === name) return f;
-        if (f.type === 'collapsible' || f.type === 'row') {
-            const nested = findNamed(f.fields, name);
-            if (nested) return nested;
-        }
-    }
-    return undefined;
-}
-describe('createApiKeysCollection', ()=>{
-    it('defaults the slug to payload-mcp-api-keys', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        expect(collection.slug).toBe(API_KEYS_DEFAULT_SLUG);
-        expect(collection.slug).toBe('payload-mcp-api-keys');
-    });
-    it('honours an explicit slug override', ()=>{
-        const collection = createApiKeysCollection({
-            ...baseOptions,
-            slug: 'my-custom-keys'
-        });
-        expect(collection.slug).toBe('my-custom-keys');
-    });
-    it('binds the user relationship to the configured user collection', ()=>{
-        const collection = createApiKeysCollection({
-            ...baseOptions,
-            userCollection: 'admins'
-        });
-        const userField = findNamed(collection.fields, 'user');
-        expect(userField).toBeDefined();
-        expect(userField.relationTo).toBe('admins');
-    });
-    it('throws a useful error when userCollection is missing', ()=>{
-        expect(()=>createApiKeysCollection({})).toThrow(/userCollection/);
-    });
-    it('throws a useful error when availableCollections is missing', ()=>{
-        expect(()=>createApiKeysCollection({
-                userCollection: 'users',
-                availableTools: []
-            })).toThrow(/availableCollections/);
-    });
-    it('throws a useful error when availableTools is missing', ()=>{
-        expect(()=>createApiKeysCollection({
-                userCollection: 'users',
-                availableCollections: []
-            })).toThrow(/availableTools/);
-    });
-    it('reuses Payload built-in API key auth so legacy rows stay authenticatable', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        expect(collection.auth).toMatchObject({
-            useAPIKey: true,
-            disableLocalStrategy: true
-        });
-    });
-    it('declares the typed scope surface and lifecycle fields', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        for (const expected of [
-            'name',
-            'description',
-            'user',
-            'preset',
-            'collectionScopes',
-            'toolAllow',
-            'toolDeny',
-            'keyPrefix',
-            'expiresAt',
-            'revokedAt',
-            'lastUsedAt'
-        ]){
-            expect(findNamed(collection.fields, expected), `missing field: ${expected}`).toBeDefined();
-        }
-        // Legacy column must be gone.
-        expect(findNamed(collection.fields, 'scopes')).toBeUndefined();
-    });
-    it('exposes the four preset values with custom as the default', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const preset = findNamed(collection.fields, 'preset');
-        expect(preset.required).toBe(true);
-        expect(preset.defaultValue).toBe('custom');
-        expect(preset.options?.map((o)=>o.value)).toEqual([
-            'read-only',
-            'editor',
-            'admin',
-            'custom'
-        ]);
-    });
-    it('renders collectionScopes as a JSON field with the matrix component and runtime options', ()=>{
-        const collection = createApiKeysCollection({
-            ...baseOptions,
-            availableCollections: [
-                'a',
-                'b',
-                'c'
-            ]
-        });
-        const scopes = findNamed(collection.fields, 'collectionScopes');
-        expect(scopes.type).toBe('json');
-        expect(scopes.admin?.components?.Field?.path).toBe('payload-mcp-toolkit/client');
-        expect(scopes.admin?.components?.Field?.exportName).toBe('CollectionScopesMatrix');
-        expect(scopes.admin?.components?.Field?.clientProps?.availableCollections).toEqual([
-            'a',
-            'b',
-            'c'
-        ]);
-        expect(scopes.admin?.condition?.({
-            preset: 'custom'
-        })).toBe(true);
-        expect(scopes.admin?.condition?.({
-            preset: 'editor'
-        })).toBe(false);
-    });
-    it('renders globalScopes as a JSON field mirroring collectionScopes', ()=>{
-        const collection = createApiKeysCollection({
-            ...baseOptions,
-            availableGlobals: [
-                'siteSettings',
-                'footer'
-            ]
-        });
-        const scopes = findNamed(collection.fields, 'globalScopes');
-        expect(scopes.type).toBe('json');
-        expect(scopes.admin?.components?.Field?.exportName).toBe('GlobalScopesMatrix');
-        expect(scopes.admin?.components?.Field?.clientProps?.availableGlobals).toEqual([
-            'siteSettings',
-            'footer'
-        ]);
-        // Conditional render mirrors collectionScopes: Custom preset only. The
-        // empty-config case is handled inside ScopesTable's empty-state render,
-        // not by gating the field's admin.condition.
-        expect(scopes.admin?.condition?.({
-            preset: 'custom'
-        })).toBe(true);
-        expect(scopes.admin?.condition?.({
-            preset: 'editor'
-        })).toBe(false);
-    });
-    it('renders the globalScopes field under Custom even when no globals are available', ()=>{
-        // No `availableGlobals.length > 0` gate — the matrix component renders
-        // its own empty-state copy ("No globals are available…") so operators
-        // see why the table is blank instead of seeing nothing at all.
-        const collection = createApiKeysCollection({
-            ...baseOptions
-        });
-        const scopes = findNamed(collection.fields, 'globalScopes');
-        expect(scopes).toBeDefined();
-        expect(scopes.admin?.condition?.({
-            preset: 'custom'
-        })).toBe(true);
-        expect(scopes.admin?.condition?.({
-            preset: 'editor'
-        })).toBe(false);
-        expect(scopes.admin?.components?.Field?.clientProps?.availableGlobals).toEqual([]);
-    });
-    it('createApiKeysCollection accepts options without availableGlobals (back-compat)', ()=>{
-        // Direct callers from before globals support continue to work.
-        expect(()=>createApiKeysCollection({
-                ...baseOptions
-            })).not.toThrow();
-    });
-    it('groups tool overrides into a custom-only collapsible', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const collapsible = collection.fields.find((f)=>f.type === 'collapsible' && f.label === 'Tool overrides');
-        expect(collapsible).toBeDefined();
-        expect(collapsible?.admin?.condition?.({
-            preset: 'custom'
-        })).toBe(true);
-        expect(collapsible?.admin?.condition?.({
-            preset: 'admin'
-        })).toBe(false);
-        const toolAllow = (collapsible?.fields ?? []).find((f)=>'name' in f && f.name === 'toolAllow');
-        const toolDeny = (collapsible?.fields ?? []).find((f)=>'name' in f && f.name === 'toolDeny');
-        expect(toolAllow?.options?.map((o)=>o.value)).toEqual(baseOptions.availableTools);
-        expect(toolDeny?.options?.map((o)=>o.value)).toEqual(baseOptions.availableTools);
-    });
-    it('places identity and lifecycle fields in the sidebar', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        for (const expected of [
-            'user',
-            'keyPrefix',
-            'expiresAt',
-            'revokedAt',
-            'lastUsedAt'
-        ]){
-            const f = findNamed(collection.fields, expected);
-            expect(f.admin?.position, `${expected} should be in the sidebar`).toBe('sidebar');
-        }
-    });
-    it('keyPrefix beforeChange captures first 8 chars of a freshly generated apiKey', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const prefixField = findNamed(collection.fields, 'keyPrefix');
-        const hook = prefixField.hooks?.beforeChange?.[0];
-        expect(hook).toBeDefined();
-        const result = hook({
-            data: {
-                apiKey: 'abc12345-extra-stuff'
-            },
-            originalDoc: undefined,
-            value: undefined
-        });
-        expect(result).toBe('abc12345');
-    });
-    it('keyPrefix beforeChange preserves an existing prefix when the apiKey is not present (e.g. updates)', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const prefixField = findNamed(collection.fields, 'keyPrefix');
-        const hook = prefixField.hooks.beforeChange[0];
-        const result = hook({
-            data: {},
-            originalDoc: {
-                keyPrefix: 'cafebabe'
-            },
-            value: undefined
-        });
-        expect(result).toBe('cafebabe');
-    });
-    it('keyPrefix beforeChange respects a value already provided', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const prefixField = findNamed(collection.fields, 'keyPrefix');
-        const hook = prefixField.hooks.beforeChange[0];
-        const result = hook({
-            data: {
-                apiKey: 'newvalue-ignored'
-            },
-            originalDoc: undefined,
-            value: 'preset-prefix'
-        });
-        expect(result).toBe('preset-prefix');
-    });
-    it('beforeValidate coerces empty toolAllow/toolDeny to null under preset modes (REST trap fix)', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const hook = (collection.hooks?.beforeValidate ?? [])[0];
-        expect(hook).toBeDefined();
-        const out = hook({
-            data: {
-                preset: 'admin',
-                toolAllow: [],
-                toolDeny: []
-            }
-        });
-        expect(out.toolAllow).toBeNull();
-        expect(out.toolDeny).toBeNull();
-    });
-    it('beforeValidate preserves explicit-empty toolAllow under the Custom preset (deny-all semantic)', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const hook = (collection.hooks?.beforeValidate ?? [])[0];
-        const out = hook({
-            data: {
-                preset: 'custom',
-                toolAllow: [],
-                toolDeny: []
-            }
-        });
-        expect(out.toolAllow).toEqual([]);
-        expect(out.toolDeny).toEqual([]);
-    });
-    it('beforeValidate leaves populated tool arrays untouched', ()=>{
-        const collection = createApiKeysCollection(baseOptions);
-        const hook = (collection.hooks?.beforeValidate ?? [])[0];
-        const out = hook({
-            data: {
-                preset: 'admin',
-                toolAllow: [
-                    'findDocument'
-                ],
-                toolDeny: [
-                    'safeDelete'
-                ]
-            }
-        });
-        expect(out.toolAllow).toEqual([
-            'findDocument'
-        ]);
-        expect(out.toolDeny).toEqual([
-            'safeDelete'
-        ]);
-    });
-});
-
-//# sourceMappingURL=api-keys.test.js.map

package/dist/__tests__/api-keys.test.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/__tests__/api-keys.test.ts"],"sourcesContent":["import { describe, it, expect } from 'vitest'\r\nimport type { Field } from 'payload'\r\nimport { createApiKeysCollection, API_KEYS_DEFAULT_SLUG } from '../api-keys'\r\n\r\nconst baseOptions = {\r\n  userCollection: 'users',\r\n  availableCollections: ['posts', 'pages'],\r\n  availableTools: ['findDocument', 'createDocument', 'safeDelete'],\r\n}\r\n\r\nfunction findNamed(fields: Field[], name: string): Field | undefined {\r\n  for (const f of fields) {\r\n    if ('name' in f && f.name === name) return f\r\n    if (f.type === 'collapsible' || f.type === 'row') {\r\n      const nested = findNamed(f.fields as Field[], name)\r\n      if (nested) return nested\r\n    }\r\n  }\r\n  return undefined\r\n}\r\n\r\ndescribe('createApiKeysCollection', () => {\r\n  it('defaults the slug to payload-mcp-api-keys', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    expect(collection.slug).toBe(API_KEYS_DEFAULT_SLUG)\r\n    expect(collection.slug).toBe('payload-mcp-api-keys')\r\n  })\r\n\r\n  it('honours an explicit slug override', () => {\r\n    const collection = createApiKeysCollection({ ...baseOptions, slug: 'my-custom-keys' })\r\n    expect(collection.slug).toBe('my-custom-keys')\r\n  })\r\n\r\n  it('binds the user relationship to the configured user collection', () => {\r\n    const collection = createApiKeysCollection({ ...baseOptions, userCollection: 'admins' })\r\n    const userField = findNamed(collection.fields as Field[], 'user') as { relationTo?: string }\r\n    expect(userField).toBeDefined()\r\n    expect(userField.relationTo).toBe('admins')\r\n  })\r\n\r\n  it('throws a useful error when userCollection is missing', () => {\r\n    expect(() =>\r\n      createApiKeysCollection({} as unknown as Parameters<typeof createApiKeysCollection>[0]),\r\n    ).toThrow(/userCollection/)\r\n  })\r\n\r\n  it('throws a useful error when availableCollections is missing', () => {\r\n    expect(() =>\r\n      createApiKeysCollection({\r\n        userCollection: 'users',\r\n        availableTools: [],\r\n      } as unknown as Parameters<typeof createApiKeysCollection>[0]),\r\n    ).toThrow(/availableCollections/)\r\n  })\r\n\r\n  it('throws a useful error when availableTools is missing', () => {\r\n    expect(() =>\r\n      createApiKeysCollection({\r\n        userCollection: 'users',\r\n        availableCollections: [],\r\n      } as unknown as Parameters<typeof createApiKeysCollection>[0]),\r\n    ).toThrow(/availableTools/)\r\n  })\r\n\r\n  it('reuses Payload built-in API key auth so legacy rows stay authenticatable', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    expect(collection.auth).toMatchObject({\r\n      useAPIKey: true,\r\n      disableLocalStrategy: true,\r\n    })\r\n  })\r\n\r\n  it('declares the typed scope surface and lifecycle fields', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    for (const expected of [\r\n      'name',\r\n      'description',\r\n      'user',\r\n      'preset',\r\n      'collectionScopes',\r\n      'toolAllow',\r\n      'toolDeny',\r\n      'keyPrefix',\r\n      'expiresAt',\r\n      'revokedAt',\r\n      'lastUsedAt',\r\n    ]) {\r\n      expect(findNamed(collection.fields as Field[], expected), `missing field: ${expected}`).toBeDefined()\r\n    }\r\n    // Legacy column must be gone.\r\n    expect(findNamed(collection.fields as Field[], 'scopes')).toBeUndefined()\r\n  })\r\n\r\n  it('exposes the four preset values with custom as the default', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const preset = findNamed(collection.fields as Field[], 'preset') as {\r\n      required?: boolean\r\n      defaultValue?: string\r\n      options?: Array<{ value: string }>\r\n    }\r\n    expect(preset.required).toBe(true)\r\n    expect(preset.defaultValue).toBe('custom')\r\n    expect(preset.options?.map((o) => o.value)).toEqual([\r\n      'read-only',\r\n      'editor',\r\n      'admin',\r\n      'custom',\r\n    ])\r\n  })\r\n\r\n  it('renders collectionScopes as a JSON field with the matrix component and runtime options', () => {\r\n    const collection = createApiKeysCollection({\r\n      ...baseOptions,\r\n      availableCollections: ['a', 'b', 'c'],\r\n    })\r\n    const scopes = findNamed(collection.fields as Field[], 'collectionScopes') as {\r\n      type?: string\r\n      admin?: {\r\n        components?: {\r\n          Field?: {\r\n            path?: string\r\n            exportName?: string\r\n            clientProps?: { availableCollections?: string[] }\r\n          }\r\n        }\r\n        condition?: (data: unknown) => boolean\r\n      }\r\n    }\r\n    expect(scopes.type).toBe('json')\r\n    expect(scopes.admin?.components?.Field?.path).toBe('payload-mcp-toolkit/client')\r\n    expect(scopes.admin?.components?.Field?.exportName).toBe('CollectionScopesMatrix')\r\n    expect(scopes.admin?.components?.Field?.clientProps?.availableCollections).toEqual([\r\n      'a',\r\n      'b',\r\n      'c',\r\n    ])\r\n    expect(scopes.admin?.condition?.({ preset: 'custom' })).toBe(true)\r\n    expect(scopes.admin?.condition?.({ preset: 'editor' })).toBe(false)\r\n  })\r\n\r\n  it('renders globalScopes as a JSON field mirroring collectionScopes', () => {\r\n    const collection = createApiKeysCollection({\r\n      ...baseOptions,\r\n      availableGlobals: ['siteSettings', 'footer'],\r\n    })\r\n    const scopes = findNamed(collection.fields as Field[], 'globalScopes') as {\r\n      type?: string\r\n      admin?: {\r\n        components?: {\r\n          Field?: {\r\n            path?: string\r\n            exportName?: string\r\n            clientProps?: { availableGlobals?: string[] }\r\n          }\r\n        }\r\n        condition?: (data: unknown) => boolean\r\n      }\r\n    }\r\n    expect(scopes.type).toBe('json')\r\n    expect(scopes.admin?.components?.Field?.exportName).toBe('GlobalScopesMatrix')\r\n    expect(scopes.admin?.components?.Field?.clientProps?.availableGlobals).toEqual([\r\n      'siteSettings',\r\n      'footer',\r\n    ])\r\n    // Conditional render mirrors collectionScopes: Custom preset only. The\r\n    // empty-config case is handled inside ScopesTable's empty-state render,\r\n    // not by gating the field's admin.condition.\r\n    expect(scopes.admin?.condition?.({ preset: 'custom' })).toBe(true)\r\n    expect(scopes.admin?.condition?.({ preset: 'editor' })).toBe(false)\r\n  })\r\n\r\n  it('renders the globalScopes field under Custom even when no globals are available', () => {\r\n    // No `availableGlobals.length > 0` gate — the matrix component renders\r\n    // its own empty-state copy (\"No globals are available…\") so operators\r\n    // see why the table is blank instead of seeing nothing at all.\r\n    const collection = createApiKeysCollection({ ...baseOptions })\r\n    const scopes = findNamed(collection.fields as Field[], 'globalScopes') as {\r\n      admin?: {\r\n        condition?: (data: unknown) => boolean\r\n        components?: { Field?: { clientProps?: { availableGlobals?: string[] } } }\r\n      }\r\n    }\r\n    expect(scopes).toBeDefined()\r\n    expect(scopes.admin?.condition?.({ preset: 'custom' })).toBe(true)\r\n    expect(scopes.admin?.condition?.({ preset: 'editor' })).toBe(false)\r\n    expect(scopes.admin?.components?.Field?.clientProps?.availableGlobals).toEqual([])\r\n  })\r\n\r\n  it('createApiKeysCollection accepts options without availableGlobals (back-compat)', () => {\r\n    // Direct callers from before globals support continue to work.\r\n    expect(() => createApiKeysCollection({ ...baseOptions })).not.toThrow()\r\n  })\r\n\r\n  it('groups tool overrides into a custom-only collapsible', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const collapsible = (collection.fields as Field[]).find(\r\n      (f) => f.type === 'collapsible' && f.label === 'Tool overrides',\r\n    ) as { admin?: { condition?: (data: unknown) => boolean }; fields?: Field[] } | undefined\r\n    expect(collapsible).toBeDefined()\r\n    expect(collapsible?.admin?.condition?.({ preset: 'custom' })).toBe(true)\r\n    expect(collapsible?.admin?.condition?.({ preset: 'admin' })).toBe(false)\r\n\r\n    const toolAllow = (collapsible?.fields ?? []).find(\r\n      (f) => 'name' in f && f.name === 'toolAllow',\r\n    ) as { options?: Array<{ value: string }> } | undefined\r\n    const toolDeny = (collapsible?.fields ?? []).find(\r\n      (f) => 'name' in f && f.name === 'toolDeny',\r\n    ) as { options?: Array<{ value: string }> } | undefined\r\n    expect(toolAllow?.options?.map((o) => o.value)).toEqual(baseOptions.availableTools)\r\n    expect(toolDeny?.options?.map((o) => o.value)).toEqual(baseOptions.availableTools)\r\n  })\r\n\r\n  it('places identity and lifecycle fields in the sidebar', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    for (const expected of ['user', 'keyPrefix', 'expiresAt', 'revokedAt', 'lastUsedAt']) {\r\n      const f = findNamed(collection.fields as Field[], expected) as {\r\n        admin?: { position?: string }\r\n      }\r\n      expect(f.admin?.position, `${expected} should be in the sidebar`).toBe('sidebar')\r\n    }\r\n  })\r\n\r\n  it('keyPrefix beforeChange captures first 8 chars of a freshly generated apiKey', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const prefixField = findNamed(collection.fields as Field[], 'keyPrefix') as {\r\n      hooks?: { beforeChange?: Array<(args: unknown) => unknown> }\r\n    }\r\n\r\n    const hook = prefixField.hooks?.beforeChange?.[0]\r\n    expect(hook).toBeDefined()\r\n\r\n    const result = hook!({\r\n      data: { apiKey: 'abc12345-extra-stuff' },\r\n      originalDoc: undefined,\r\n      value: undefined,\r\n    })\r\n    expect(result).toBe('abc12345')\r\n  })\r\n\r\n  it('keyPrefix beforeChange preserves an existing prefix when the apiKey is not present (e.g. updates)', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const prefixField = findNamed(collection.fields as Field[], 'keyPrefix') as {\r\n      hooks?: { beforeChange?: Array<(args: unknown) => unknown> }\r\n    }\r\n    const hook = prefixField.hooks!.beforeChange![0]\r\n\r\n    const result = hook({\r\n      data: {},\r\n      originalDoc: { keyPrefix: 'cafebabe' },\r\n      value: undefined,\r\n    })\r\n    expect(result).toBe('cafebabe')\r\n  })\r\n\r\n  it('keyPrefix beforeChange respects a value already provided', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const prefixField = findNamed(collection.fields as Field[], 'keyPrefix') as {\r\n      hooks?: { beforeChange?: Array<(args: unknown) => unknown> }\r\n    }\r\n    const hook = prefixField.hooks!.beforeChange![0]\r\n\r\n    const result = hook({\r\n      data: { apiKey: 'newvalue-ignored' },\r\n      originalDoc: undefined,\r\n      value: 'preset-prefix',\r\n    })\r\n    expect(result).toBe('preset-prefix')\r\n  })\r\n\r\n  it('beforeValidate coerces empty toolAllow/toolDeny to null under preset modes (REST trap fix)', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const hook = (collection.hooks?.beforeValidate ?? [])[0] as\r\n      | undefined\r\n      | ((args: { data: unknown }) => Record<string, unknown> | undefined)\r\n    expect(hook).toBeDefined()\r\n\r\n    const out = hook!({\r\n      data: { preset: 'admin', toolAllow: [], toolDeny: [] },\r\n    }) as Record<string, unknown>\r\n    expect(out.toolAllow).toBeNull()\r\n    expect(out.toolDeny).toBeNull()\r\n  })\r\n\r\n  it('beforeValidate preserves explicit-empty toolAllow under the Custom preset (deny-all semantic)', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const hook = (collection.hooks?.beforeValidate ?? [])[0] as\r\n      | undefined\r\n      | ((args: { data: unknown }) => Record<string, unknown> | undefined)\r\n\r\n    const out = hook!({\r\n      data: { preset: 'custom', toolAllow: [], toolDeny: [] },\r\n    }) as Record<string, unknown>\r\n    expect(out.toolAllow).toEqual([])\r\n    expect(out.toolDeny).toEqual([])\r\n  })\r\n\r\n  it('beforeValidate leaves populated tool arrays untouched', () => {\r\n    const collection = createApiKeysCollection(baseOptions)\r\n    const hook = (collection.hooks?.beforeValidate ?? [])[0] as\r\n      | undefined\r\n      | ((args: { data: unknown }) => Record<string, unknown> | undefined)\r\n\r\n    const out = hook!({\r\n      data: { preset: 'admin', toolAllow: ['findDocument'], toolDeny: ['safeDelete'] },\r\n    }) as Record<string, unknown>\r\n    expect(out.toolAllow).toEqual(['findDocument'])\r\n    expect(out.toolDeny).toEqual(['safeDelete'])\r\n  })\r\n})\r\n"],"names":["describe","it","expect","createApiKeysCollection","API_KEYS_DEFAULT_SLUG","baseOptions","userCollection","availableCollections","availableTools","findNamed","fields","name","f","type","nested","undefined","collection","slug","toBe","userField","toBeDefined","relationTo","toThrow","auth","toMatchObject","useAPIKey","disableLocalStrategy","expected","toBeUndefined","preset","required","defaultValue","options","map","o","value","toEqual","scopes","admin","components","Field","path","exportName","clientProps","condition","availableGlobals","not","collapsible","find","label","toolAllow","toolDeny","position","prefixField","hook","hooks","beforeChange","result","data","apiKey","originalDoc","keyPrefix","beforeValidate","out","toBeNull"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,EAAE,EAAEC,MAAM,QAAQ,SAAQ;AAE7C,SAASC,uBAAuB,EAAEC,qBAAqB,QAAQ,cAAa;AAE5E,MAAMC,cAAc;IAClBC,gBAAgB;IAChBC,sBAAsB;QAAC;QAAS;KAAQ;IACxCC,gBAAgB;QAAC;QAAgB;QAAkB;KAAa;AAClE;AAEA,SAASC,UAAUC,MAAe,EAAEC,IAAY;IAC9C,KAAK,MAAMC,KAAKF,OAAQ;QACtB,IAAI,UAAUE,KAAKA,EAAED,IAAI,KAAKA,MAAM,OAAOC;QAC3C,IAAIA,EAAEC,IAAI,KAAK,iBAAiBD,EAAEC,IAAI,KAAK,OAAO;YAChD,MAAMC,SAASL,UAAUG,EAAEF,MAAM,EAAaC;YAC9C,IAAIG,QAAQ,OAAOA;QACrB;IACF;IACA,OAAOC;AACT;AAEAf,SAAS,2BAA2B;IAClCC,GAAG,6CAA6C;QAC9C,MAAMe,aAAab,wBAAwBE;QAC3CH,OAAOc,WAAWC,IAAI,EAAEC,IAAI,CAACd;QAC7BF,OAAOc,WAAWC,IAAI,EAAEC,IAAI,CAAC;IAC/B;IAEAjB,GAAG,qCAAqC;QACtC,MAAMe,aAAab,wBAAwB;YAAE,GAAGE,WAAW;YAAEY,MAAM;QAAiB;QACpFf,OAAOc,WAAWC,IAAI,EAAEC,IAAI,CAAC;IAC/B;IAEAjB,GAAG,iEAAiE;QAClE,MAAMe,aAAab,wBAAwB;YAAE,GAAGE,WAAW;YAAEC,gBAAgB;QAAS;QACtF,MAAMa,YAAYV,UAAUO,WAAWN,MAAM,EAAa;QAC1DR,OAAOiB,WAAWC,WAAW;QAC7BlB,OAAOiB,UAAUE,UAAU,EAAEH,IAAI,CAAC;IACpC;IAEAjB,GAAG,wDAAwD;QACzDC,OAAO,IACLC,wBAAwB,CAAC,IACzBmB,OAAO,CAAC;IACZ;IAEArB,GAAG,8DAA8D;QAC/DC,OAAO,IACLC,wBAAwB;gBACtBG,gBAAgB;gBAChBE,gBAAgB,EAAE;YACpB,IACAc,OAAO,CAAC;IACZ;IAEArB,GAAG,wDAAwD;QACzDC,OAAO,IACLC,wBAAwB;gBACtBG,gBAAgB;gBAChBC,sBAAsB,EAAE;YAC1B,IACAe,OAAO,CAAC;IACZ;IAEArB,GAAG,4EAA4E;QAC7E,MAAMe,aAAab,wBAAwBE;QAC3CH,OAAOc,WAAWO,IAAI,EAAEC,aAAa,CAAC;YACpCC,WAAW;YACXC,sBAAsB;QACxB;IACF;IAEAzB,GAAG,yDAAyD;QAC1D,MAAMe,aAAab,wBAAwBE;QAC3C,KAAK,MAAMsB,YAAY;YACrB;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;YACA;SACD,CAAE;YACDzB,OAAOO,UAAUO,WAAWN,MAAM,EAAaiB,WAAW,CAAC,eAAe,EAAEA,UAAU,EAAEP,WAAW;QACrG;QACA,8BAA8B;QAC9BlB,OAAOO,UAAUO,WAAWN,MAAM,EAAa,WAAWkB,aAAa;IACzE;IAEA3B,GAAG,6DAA6D;QAC9D,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMwB,SAASpB,UAAUO,WAAWN,MAAM,EAAa;QAKvDR,OAAO2B,OAAOC,QAAQ,EAAEZ,IAAI,CAAC;QAC7BhB,OAAO2B,OAAOE,YAAY,EAAEb,IAAI,CAAC;QACjChB,OAAO2B,OAAOG,OAAO,EAAEC,IAAI,CAACC,IAAMA,EAAEC,KAAK,GAAGC,OAAO,CAAC;YAClD;YACA;YACA;YACA;SACD;IACH;IAEAnC,GAAG,0FAA0F;QAC3F,MAAMe,aAAab,wBAAwB;YACzC,GAAGE,WAAW;YACdE,sBAAsB;gBAAC;gBAAK;gBAAK;aAAI;QACvC;QACA,MAAM8B,SAAS5B,UAAUO,WAAWN,MAAM,EAAa;QAavDR,OAAOmC,OAAOxB,IAAI,EAAEK,IAAI,CAAC;QACzBhB,OAAOmC,OAAOC,KAAK,EAAEC,YAAYC,OAAOC,MAAMvB,IAAI,CAAC;QACnDhB,OAAOmC,OAAOC,KAAK,EAAEC,YAAYC,OAAOE,YAAYxB,IAAI,CAAC;QACzDhB,OAAOmC,OAAOC,KAAK,EAAEC,YAAYC,OAAOG,aAAapC,sBAAsB6B,OAAO,CAAC;YACjF;YACA;YACA;SACD;QACDlC,OAAOmC,OAAOC,KAAK,EAAEM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;QAC7DhB,OAAOmC,OAAOC,KAAK,EAAEM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;IAC/D;IAEAjB,GAAG,mEAAmE;QACpE,MAAMe,aAAab,wBAAwB;YACzC,GAAGE,WAAW;YACdwC,kBAAkB;gBAAC;gBAAgB;aAAS;QAC9C;QACA,MAAMR,SAAS5B,UAAUO,WAAWN,MAAM,EAAa;QAavDR,OAAOmC,OAAOxB,IAAI,EAAEK,IAAI,CAAC;QACzBhB,OAAOmC,OAAOC,KAAK,EAAEC,YAAYC,OAAOE,YAAYxB,IAAI,CAAC;QACzDhB,OAAOmC,OAAOC,KAAK,EAAEC,YAAYC,OAAOG,aAAaE,kBAAkBT,OAAO,CAAC;YAC7E;YACA;SACD;QACD,uEAAuE;QACvE,wEAAwE;QACxE,6CAA6C;QAC7ClC,OAAOmC,OAAOC,KAAK,EAAEM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;QAC7DhB,OAAOmC,OAAOC,KAAK,EAAEM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;IAC/D;IAEAjB,GAAG,kFAAkF;QACnF,uEAAuE;QACvE,sEAAsE;QACtE,+DAA+D;QAC/D,MAAMe,aAAab,wBAAwB;YAAE,GAAGE,WAAW;QAAC;QAC5D,MAAMgC,SAAS5B,UAAUO,WAAWN,MAAM,EAAa;QAMvDR,OAAOmC,QAAQjB,WAAW;QAC1BlB,OAAOmC,OAAOC,KAAK,EAAEM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;QAC7DhB,OAAOmC,OAAOC,KAAK,EAAEM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;QAC7DhB,OAAOmC,OAAOC,KAAK,EAAEC,YAAYC,OAAOG,aAAaE,kBAAkBT,OAAO,CAAC,EAAE;IACnF;IAEAnC,GAAG,kFAAkF;QACnF,+DAA+D;QAC/DC,OAAO,IAAMC,wBAAwB;gBAAE,GAAGE,WAAW;YAAC,IAAIyC,GAAG,CAACxB,OAAO;IACvE;IAEArB,GAAG,wDAAwD;QACzD,MAAMe,aAAab,wBAAwBE;QAC3C,MAAM0C,cAAc,AAAC/B,WAAWN,MAAM,CAAasC,IAAI,CACrD,CAACpC,IAAMA,EAAEC,IAAI,KAAK,iBAAiBD,EAAEqC,KAAK,KAAK;QAEjD/C,OAAO6C,aAAa3B,WAAW;QAC/BlB,OAAO6C,aAAaT,OAAOM,YAAY;YAAEf,QAAQ;QAAS,IAAIX,IAAI,CAAC;QACnEhB,OAAO6C,aAAaT,OAAOM,YAAY;YAAEf,QAAQ;QAAQ,IAAIX,IAAI,CAAC;QAElE,MAAMgC,YAAY,AAACH,CAAAA,aAAarC,UAAU,EAAE,AAAD,EAAGsC,IAAI,CAChD,CAACpC,IAAM,UAAUA,KAAKA,EAAED,IAAI,KAAK;QAEnC,MAAMwC,WAAW,AAACJ,CAAAA,aAAarC,UAAU,EAAE,AAAD,EAAGsC,IAAI,CAC/C,CAACpC,IAAM,UAAUA,KAAKA,EAAED,IAAI,KAAK;QAEnCT,OAAOgD,WAAWlB,SAASC,IAAI,CAACC,IAAMA,EAAEC,KAAK,GAAGC,OAAO,CAAC/B,YAAYG,cAAc;QAClFN,OAAOiD,UAAUnB,SAASC,IAAI,CAACC,IAAMA,EAAEC,KAAK,GAAGC,OAAO,CAAC/B,YAAYG,cAAc;IACnF;IAEAP,GAAG,uDAAuD;QACxD,MAAMe,aAAab,wBAAwBE;QAC3C,KAAK,MAAMsB,YAAY;YAAC;YAAQ;YAAa;YAAa;YAAa;SAAa,CAAE;YACpF,MAAMf,IAAIH,UAAUO,WAAWN,MAAM,EAAaiB;YAGlDzB,OAAOU,EAAE0B,KAAK,EAAEc,UAAU,GAAGzB,SAAS,yBAAyB,CAAC,EAAET,IAAI,CAAC;QACzE;IACF;IAEAjB,GAAG,+EAA+E;QAChF,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMgD,cAAc5C,UAAUO,WAAWN,MAAM,EAAa;QAI5D,MAAM4C,OAAOD,YAAYE,KAAK,EAAEC,cAAc,CAAC,EAAE;QACjDtD,OAAOoD,MAAMlC,WAAW;QAExB,MAAMqC,SAASH,KAAM;YACnBI,MAAM;gBAAEC,QAAQ;YAAuB;YACvCC,aAAa7C;YACboB,OAAOpB;QACT;QACAb,OAAOuD,QAAQvC,IAAI,CAAC;IACtB;IAEAjB,GAAG,qGAAqG;QACtG,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMgD,cAAc5C,UAAUO,WAAWN,MAAM,EAAa;QAG5D,MAAM4C,OAAOD,YAAYE,KAAK,CAAEC,YAAY,AAAC,CAAC,EAAE;QAEhD,MAAMC,SAASH,KAAK;YAClBI,MAAM,CAAC;YACPE,aAAa;gBAAEC,WAAW;YAAW;YACrC1B,OAAOpB;QACT;QACAb,OAAOuD,QAAQvC,IAAI,CAAC;IACtB;IAEAjB,GAAG,4DAA4D;QAC7D,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMgD,cAAc5C,UAAUO,WAAWN,MAAM,EAAa;QAG5D,MAAM4C,OAAOD,YAAYE,KAAK,CAAEC,YAAY,AAAC,CAAC,EAAE;QAEhD,MAAMC,SAASH,KAAK;YAClBI,MAAM;gBAAEC,QAAQ;YAAmB;YACnCC,aAAa7C;YACboB,OAAO;QACT;QACAjC,OAAOuD,QAAQvC,IAAI,CAAC;IACtB;IAEAjB,GAAG,8FAA8F;QAC/F,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMiD,OAAO,AAACtC,CAAAA,WAAWuC,KAAK,EAAEO,kBAAkB,EAAE,AAAD,CAAE,CAAC,EAAE;QAGxD5D,OAAOoD,MAAMlC,WAAW;QAExB,MAAM2C,MAAMT,KAAM;YAChBI,MAAM;gBAAE7B,QAAQ;gBAASqB,WAAW,EAAE;gBAAEC,UAAU,EAAE;YAAC;QACvD;QACAjD,OAAO6D,IAAIb,SAAS,EAAEc,QAAQ;QAC9B9D,OAAO6D,IAAIZ,QAAQ,EAAEa,QAAQ;IAC/B;IAEA/D,GAAG,iGAAiG;QAClG,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMiD,OAAO,AAACtC,CAAAA,WAAWuC,KAAK,EAAEO,kBAAkB,EAAE,AAAD,CAAE,CAAC,EAAE;QAIxD,MAAMC,MAAMT,KAAM;YAChBI,MAAM;gBAAE7B,QAAQ;gBAAUqB,WAAW,EAAE;gBAAEC,UAAU,EAAE;YAAC;QACxD;QACAjD,OAAO6D,IAAIb,SAAS,EAAEd,OAAO,CAAC,EAAE;QAChClC,OAAO6D,IAAIZ,QAAQ,EAAEf,OAAO,CAAC,EAAE;IACjC;IAEAnC,GAAG,yDAAyD;QAC1D,MAAMe,aAAab,wBAAwBE;QAC3C,MAAMiD,OAAO,AAACtC,CAAAA,WAAWuC,KAAK,EAAEO,kBAAkB,EAAE,AAAD,CAAE,CAAC,EAAE;QAIxD,MAAMC,MAAMT,KAAM;YAChBI,MAAM;gBAAE7B,QAAQ;gBAASqB,WAAW;oBAAC;iBAAe;gBAAEC,UAAU;oBAAC;iBAAa;YAAC;QACjF;QACAjD,OAAO6D,IAAIb,SAAS,EAAEd,OAAO,CAAC;YAAC;SAAe;QAC9ClC,OAAO6D,IAAIZ,QAAQ,EAAEf,OAAO,CAAC;YAAC;SAAa;IAC7C;AACF"}