payload 4.0.0-internal.2fddfc0 → 4.0.0-internal.31ba7ee

package/dist/admin/views/dashboard.d.ts

@@ -1,4 +1,4 @@
-import type { InitReqResult, TypedWidget, WidgetSlug } from '../../index.js';
+import type { AdminContext, TypedWidget, WidgetSlug } from '../../index.js';
 import type { ComponentRenderer } from '../adapters/render.js';
 export declare enum EntityType {
     collection = "collections",
@@ -27,6 +27,6 @@ export type WidgetServerProps<TWidget extends {
     } & Exclude<TWidget, never>>] extends [never] ? string : WidgetSlugFromWidget<{
         data?: unknown;
     } & Exclude<TWidget, never>>;
-} & Pick<InitReqResult, 'cookies' | 'locale' | 'permissions' | 'req'>;
+} & Pick<AdminContext, 'cookies' | 'locale' | 'permissions' | 'req' | 'user'>;
 export {};
 //# sourceMappingURL=dashboard.d.ts.map

package/dist/admin/views/dashboard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../src/admin/views/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAE9D,oBAAY,UAAU;IACpB,UAAU,gBAAgB;IAC1B,MAAM,YAAY;CACnB;AAED,KAAK,oBAAoB,CAAC,OAAO,IAAI,OAAO,SAAS;IACnD,IAAI,CAAC,EAAE,MAAM,KAAK,CAAA;CACnB,GACG,KAAK,GACL,KAAK,CAAA;AAET,KAAK,oBAAoB,CAAC,OAAO,SAAS;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,IAAI;KAC7D,KAAK,IAAI,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,OAAO,GAAG,KAAK,GAAG,KAAK;CAC1E,CAAC,UAAU,CAAC,CAAA;AAEb,MAAM,MAAM,iBAAiB,CAAC,OAAO,SAAS;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,KAAK,GAAG,KAAK,IAAI;IAClF;;;;OAIG;IACH,eAAe,CAAC,EAAE,iBAAiB,CAAA;IACnC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvB,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3E,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GACjC,MAAM,GACN,CAAC,oBAAoB,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAClF,MAAM,GACN,oBAAoB,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;CACzE,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAC,CAAA"}
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../src/admin/views/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAE9D,oBAAY,UAAU;IACpB,UAAU,gBAAgB;IAC1B,MAAM,YAAY;CACnB;AAED,KAAK,oBAAoB,CAAC,OAAO,IAAI,OAAO,SAAS;IACnD,IAAI,CAAC,EAAE,MAAM,KAAK,CAAA;CACnB,GACG,KAAK,GACL,KAAK,CAAA;AAET,KAAK,oBAAoB,CAAC,OAAO,SAAS;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,IAAI;KAC7D,KAAK,IAAI,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,OAAO,GAAG,KAAK,GAAG,KAAK;CAC1E,CAAC,UAAU,CAAC,CAAA;AAEb,MAAM,MAAM,iBAAiB,CAAC,OAAO,SAAS;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,KAAK,GAAG,KAAK,IAAI;IAClF;;;;OAIG;IACH,eAAe,CAAC,EAAE,iBAAiB,CAAA;IACnC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvB,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3E,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,GAC7C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GACjC,MAAM,GACN,CAAC,oBAAoB,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAClF,MAAM,GACN,oBAAoB,CAAC;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;CACzE,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,KAAK,GAAG,MAAM,CAAC,CAAA"}

package/dist/admin/views/dashboard.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/admin/views/dashboard.ts"],"sourcesContent":["import type { InitReqResult, TypedWidget, WidgetSlug } from '../../index.js'\nimport type { ComponentRenderer } from '../adapters/render.js'\n\nexport enum EntityType {\n  collection = 'collections',\n  global = 'globals',\n}\n\ntype WidgetDataFromWidget<TWidget> = TWidget extends {\n  data?: infer TData\n}\n  ? TData\n  : never\n\ntype WidgetSlugFromWidget<TWidget extends { data?: unknown }> = {\n  [TSlug in WidgetSlug]: TypedWidget[TSlug] extends TWidget ? TSlug : never\n}[WidgetSlug]\n\nexport type WidgetServerProps<TWidget extends { data?: unknown } | never = never> = {\n  /**\n   * Adapter-injected component renderer. Widget server components can use\n   * this to render other import map components without importing a\n   * framework-specific renderer directly.\n   */\n  renderComponent?: ComponentRenderer\n  widgetData?: [TWidget] extends [never]\n    ? Record<string, unknown>\n    : WidgetDataFromWidget<Exclude<TWidget, never>> extends Record<string, unknown>\n      ? WidgetDataFromWidget<Exclude<TWidget, never>>\n      : Record<string, unknown>\n  widgetSlug: [TWidget] extends [never]\n    ? string\n    : [WidgetSlugFromWidget<{ data?: unknown } & Exclude<TWidget, never>>] extends [never]\n      ? string\n      : WidgetSlugFromWidget<{ data?: unknown } & Exclude<TWidget, never>>\n} & Pick<InitReqResult, 'cookies' | 'locale' | 'permissions' | 'req'>\n"],"names":["EntityType"],"mappings":"AAGA,OAAO,IAAA,AAAKA,oCAAAA;;;WAAAA;MAGX"}
+{"version":3,"sources":["../../../src/admin/views/dashboard.ts"],"sourcesContent":["import type { AdminContext, TypedWidget, WidgetSlug } from '../../index.js'\nimport type { ComponentRenderer } from '../adapters/render.js'\n\nexport enum EntityType {\n  collection = 'collections',\n  global = 'globals',\n}\n\ntype WidgetDataFromWidget<TWidget> = TWidget extends {\n  data?: infer TData\n}\n  ? TData\n  : never\n\ntype WidgetSlugFromWidget<TWidget extends { data?: unknown }> = {\n  [TSlug in WidgetSlug]: TypedWidget[TSlug] extends TWidget ? TSlug : never\n}[WidgetSlug]\n\nexport type WidgetServerProps<TWidget extends { data?: unknown } | never = never> = {\n  /**\n   * Adapter-injected component renderer. Widget server components can use\n   * this to render other import map components without importing a\n   * framework-specific renderer directly.\n   */\n  renderComponent?: ComponentRenderer\n  widgetData?: [TWidget] extends [never]\n    ? Record<string, unknown>\n    : WidgetDataFromWidget<Exclude<TWidget, never>> extends Record<string, unknown>\n      ? WidgetDataFromWidget<Exclude<TWidget, never>>\n      : Record<string, unknown>\n  widgetSlug: [TWidget] extends [never]\n    ? string\n    : [WidgetSlugFromWidget<{ data?: unknown } & Exclude<TWidget, never>>] extends [never]\n      ? string\n      : WidgetSlugFromWidget<{ data?: unknown } & Exclude<TWidget, never>>\n} & Pick<AdminContext, 'cookies' | 'locale' | 'permissions' | 'req' | 'user'>\n"],"names":["EntityType"],"mappings":"AAGA,OAAO,IAAA,AAAKA,oCAAAA;;;WAAAA;MAGX"}

package/dist/admin/views/index.d.ts

@@ -1,6 +1,6 @@
 import type { ClientTranslationsObject } from '@payloadcms/translations';
 import type { SanitizedPermissions } from '../../auth/index.js';
-import type { ImportMap } from '../../bin/generateImportMap/index.js';
+import type { ImportMap } from '../../cli/commands/generateImportMap/generateImportMap.js';
 import type { SanitizedCollectionConfig } from '../../collections/config/types.js';
 import type { ClientConfig } from '../../config/client.js';
 import type { CustomComponent, Locale, MetaConfig, PayloadComponent, SanitizedConfig, ServerProps } from '../../config/types.js';
@@ -10,7 +10,7 @@ import type { LanguageOptions } from '../LanguageOptions.js';
 import type { Data, StaticDescription } from '../types.js';
 import type { DocumentSubViewTypes } from './document.js';
 export type AdminViewConfig = {
-    Component: PayloadComponent;
+    Component: PayloadComponent<AdminViewServerProps>;
     /** Whether the path should be matched exactly or as a prefix */
     exact?: boolean;
     meta?: MetaConfig;

package/dist/admin/views/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/admin/views/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sCAAsC,CAAA;AACrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EACV,eAAe,EACf,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEzD,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,gBAAgB,CAAA;IAC3B,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;OAEG;IACH,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAA;IACnB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,cAAc,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAClD,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,oBAAoB,CAAA;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,EAAE,SAAS,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC;;OAEG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAA;IAC3B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,CAAA;IAClE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAA;CACzC,GAAG,WAAW,CAAA;AAEf,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAElF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;AAEvE,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAA;IAChD,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;IAC5C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,eAAe,EAAE,eAAe,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,oBAAoB,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,cAAc,CAAA;IACnB,YAAY,EAAE,wBAAwB,CAAA;IACtC,eAAe,EAAE,eAAe,CAAA;CACjC,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,iBAAiB,GACjB,WAAW,GACX,UAAU,GACV,WAAW,GACX,MAAM,GACN,OAAO,GACP,OAAO,GACP,QAAQ,GACR,SAAS,GACT,CAAC,EAAE,GAAG,MAAM,CAAC,CAAA;AAEjB,MAAM,MAAM,mBAAmB,GAAG;IAChC,gBAAgB,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;IACzD,YAAY,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;IACjD,WAAW,EAAE,eAAe,EAAE,CAAA;CAC/B,CAAA;AAGD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAClD,WAAW,EAAE,iBAAiB,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,8BAA8B,GAAG,EAAE,GAAG,WAAW,CAAA;AAE7D,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,GAAG,8BAA8B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/admin/views/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAA;AAExE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2DAA2D,CAAA;AAC1F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EACV,eAAe,EACf,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEzD,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;IACjD,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;OAEG;IACH,IAAI,CAAC,EAAE,IAAI,MAAM,EAAE,CAAA;IACnB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,YAAY,EAAE,YAAY,CAAA;IAC1B,cAAc,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAClD,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,mBAAmB,CAAC,EAAE,oBAAoB,CAAA;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,EAAE,SAAS,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;IACjC;;OAEG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAA;IAC3B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,CAAA;IAClE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;IACzC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAA;CACzC,GAAG,WAAW,CAAA;AAEf,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAElF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,CAAA;AAEvE,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAA;IAChD,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;IAC5C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,eAAe,EAAE,eAAe,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,oBAAoB,CAAA;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,cAAc,CAAA;IACnB,YAAY,EAAE,wBAAwB,CAAA;IACtC,eAAe,EAAE,eAAe,CAAA;CACjC,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,iBAAiB,GACjB,WAAW,GACX,UAAU,GACV,WAAW,GACX,MAAM,GACN,OAAO,GACP,OAAO,GACP,QAAQ,GACR,SAAS,GACT,CAAC,EAAE,GAAG,MAAM,CAAC,CAAA;AAEjB,MAAM,MAAM,mBAAmB,GAAG;IAChC,gBAAgB,CAAC,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;IACzD,YAAY,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;IACjD,WAAW,EAAE,eAAe,EAAE,CAAA;CAC/B,CAAA;AAGD,MAAM,MAAM,0BAA0B,GAAG;IACvC,cAAc,CAAC,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IAClD,WAAW,EAAE,iBAAiB,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,8BAA8B,GAAG,EAAE,GAAG,WAAW,CAAA;AAE7D,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,GAAG,8BAA8B,CAAA"}

package/dist/admin/views/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/admin/views/index.ts"],"sourcesContent":["import type { ClientTranslationsObject } from '@payloadcms/translations'\n\nimport type { SanitizedPermissions } from '../../auth/index.js'\nimport type { ImportMap } from '../../bin/generateImportMap/index.js'\nimport type { SanitizedCollectionConfig } from '../../collections/config/types.js'\nimport type { ClientConfig } from '../../config/client.js'\nimport type {\n  CustomComponent,\n  Locale,\n  MetaConfig,\n  PayloadComponent,\n  SanitizedConfig,\n  ServerProps,\n} from '../../config/types.js'\nimport type { SanitizedGlobalConfig } from '../../globals/config/types.js'\nimport type { PayloadRequest } from '../../types/index.js'\nimport type { LanguageOptions } from '../LanguageOptions.js'\nimport type { Data, StaticDescription } from '../types.js'\nimport type { DocumentSubViewTypes } from './document.js'\n\nexport type AdminViewConfig = {\n  Component: PayloadComponent\n  /** Whether the path should be matched exactly or as a prefix */\n  exact?: boolean\n  meta?: MetaConfig\n  /**\n   * Any valid URL path or array of paths that [`path-to-regexp`](https://www.npmjs.com/package/path-to-regex) understands. Must begin with a forward slash (`/`).\n   */\n  path?: `/${string}`\n  sensitive?: boolean\n  strict?: boolean\n}\n\nexport type AdminViewClientProps = {\n  clientConfig: ClientConfig\n  collectionSlug?: SanitizedCollectionConfig['slug']\n  docID?: number | string\n  documentSubViewType?: DocumentSubViewTypes\n  folderID?: number | string\n  globalSlug?: SanitizedGlobalConfig['slug']\n  viewType: ViewTypes\n}\n\nexport type AdminViewServerPropsOnly = {\n  readonly clientConfig: ClientConfig\n  readonly collectionConfig?: SanitizedCollectionConfig\n  readonly disableActions?: boolean\n  /**\n   * @todo remove `docID` here as it is already contained in `initPageResult`\n   */\n  readonly docID?: number | string\n  readonly globalConfig?: SanitizedGlobalConfig\n  readonly importMap: ImportMap\n  readonly initialData?: Data\n  readonly initPageResult: InitPageResult\n  readonly params?: { [key: string]: string | string[] | undefined }\n  readonly redirectAfterCreate?: boolean\n  readonly redirectAfterDelete?: boolean\n  readonly redirectAfterDuplicate?: boolean\n  readonly redirectAfterRestore?: boolean\n  readonly viewActions?: CustomComponent[]\n} & ServerProps\n\nexport type AdminViewServerProps = AdminViewClientProps & AdminViewServerPropsOnly\n\n/**\n * @deprecated This should be removed in favor of direct props\n */\nexport type AdminViewComponent = PayloadComponent<AdminViewServerProps>\n\nexport type VisibleEntities = {\n  collections: SanitizedCollectionConfig['slug'][]\n  globals: SanitizedGlobalConfig['slug'][]\n}\n\nexport type InitPageResult = {\n  collectionConfig?: SanitizedCollectionConfig\n  cookies: Map<string, string>\n  docID?: number | string\n  globalConfig?: SanitizedGlobalConfig\n  languageOptions: LanguageOptions\n  locale?: Locale\n  permissions: SanitizedPermissions\n  redirectTo?: string\n  req: PayloadRequest\n  translations: ClientTranslationsObject\n  visibleEntities: VisibleEntities\n}\n\n/**\n * @todo This should be renamed to `ViewType` (singular)\n */\nexport type ViewTypes =\n  | 'account'\n  | 'createFirstUser'\n  | 'dashboard'\n  | 'document'\n  | 'hierarchy'\n  | 'list'\n  | 'reset'\n  | 'trash'\n  | 'verify'\n  | 'version'\n  | ({} & string)\n\nexport type ServerPropsFromView = {\n  collectionConfig?: SanitizedConfig['collections'][number]\n  globalConfig?: SanitizedConfig['globals'][number]\n  viewActions: CustomComponent[]\n}\n\n// Description\nexport type ViewDescriptionClientProps = {\n  collectionSlug?: SanitizedCollectionConfig['slug']\n  description: StaticDescription\n}\n\nexport type ViewDescriptionServerPropsOnly = {} & ServerProps\n\nexport type ViewDescriptionServerProps = ViewDescriptionClientProps & ViewDescriptionServerPropsOnly\n"],"names":[],"mappings":"AAuHA,WAAoG"}
+{"version":3,"sources":["../../../src/admin/views/index.ts"],"sourcesContent":["import type { ClientTranslationsObject } from '@payloadcms/translations'\n\nimport type { SanitizedPermissions } from '../../auth/index.js'\nimport type { ImportMap } from '../../cli/commands/generateImportMap/generateImportMap.js'\nimport type { SanitizedCollectionConfig } from '../../collections/config/types.js'\nimport type { ClientConfig } from '../../config/client.js'\nimport type {\n  CustomComponent,\n  Locale,\n  MetaConfig,\n  PayloadComponent,\n  SanitizedConfig,\n  ServerProps,\n} from '../../config/types.js'\nimport type { SanitizedGlobalConfig } from '../../globals/config/types.js'\nimport type { PayloadRequest } from '../../types/index.js'\nimport type { LanguageOptions } from '../LanguageOptions.js'\nimport type { Data, StaticDescription } from '../types.js'\nimport type { DocumentSubViewTypes } from './document.js'\n\nexport type AdminViewConfig = {\n  Component: PayloadComponent<AdminViewServerProps>\n  /** Whether the path should be matched exactly or as a prefix */\n  exact?: boolean\n  meta?: MetaConfig\n  /**\n   * Any valid URL path or array of paths that [`path-to-regexp`](https://www.npmjs.com/package/path-to-regex) understands. Must begin with a forward slash (`/`).\n   */\n  path?: `/${string}`\n  sensitive?: boolean\n  strict?: boolean\n}\n\nexport type AdminViewClientProps = {\n  clientConfig: ClientConfig\n  collectionSlug?: SanitizedCollectionConfig['slug']\n  docID?: number | string\n  documentSubViewType?: DocumentSubViewTypes\n  folderID?: number | string\n  globalSlug?: SanitizedGlobalConfig['slug']\n  viewType: ViewTypes\n}\n\nexport type AdminViewServerPropsOnly = {\n  readonly clientConfig: ClientConfig\n  readonly collectionConfig?: SanitizedCollectionConfig\n  readonly disableActions?: boolean\n  /**\n   * @todo remove `docID` here as it is already contained in `initPageResult`\n   */\n  readonly docID?: number | string\n  readonly globalConfig?: SanitizedGlobalConfig\n  readonly importMap: ImportMap\n  readonly initialData?: Data\n  readonly initPageResult: InitPageResult\n  readonly params?: { [key: string]: string | string[] | undefined }\n  readonly redirectAfterCreate?: boolean\n  readonly redirectAfterDelete?: boolean\n  readonly redirectAfterDuplicate?: boolean\n  readonly redirectAfterRestore?: boolean\n  readonly viewActions?: CustomComponent[]\n} & ServerProps\n\nexport type AdminViewServerProps = AdminViewClientProps & AdminViewServerPropsOnly\n\n/**\n * @deprecated This should be removed in favor of direct props\n */\nexport type AdminViewComponent = PayloadComponent<AdminViewServerProps>\n\nexport type VisibleEntities = {\n  collections: SanitizedCollectionConfig['slug'][]\n  globals: SanitizedGlobalConfig['slug'][]\n}\n\nexport type InitPageResult = {\n  collectionConfig?: SanitizedCollectionConfig\n  cookies: Map<string, string>\n  docID?: number | string\n  globalConfig?: SanitizedGlobalConfig\n  languageOptions: LanguageOptions\n  locale?: Locale\n  permissions: SanitizedPermissions\n  redirectTo?: string\n  req: PayloadRequest\n  translations: ClientTranslationsObject\n  visibleEntities: VisibleEntities\n}\n\n/**\n * @todo This should be renamed to `ViewType` (singular)\n */\nexport type ViewTypes =\n  | 'account'\n  | 'createFirstUser'\n  | 'dashboard'\n  | 'document'\n  | 'hierarchy'\n  | 'list'\n  | 'reset'\n  | 'trash'\n  | 'verify'\n  | 'version'\n  | ({} & string)\n\nexport type ServerPropsFromView = {\n  collectionConfig?: SanitizedConfig['collections'][number]\n  globalConfig?: SanitizedConfig['globals'][number]\n  viewActions: CustomComponent[]\n}\n\n// Description\nexport type ViewDescriptionClientProps = {\n  collectionSlug?: SanitizedCollectionConfig['slug']\n  description: StaticDescription\n}\n\nexport type ViewDescriptionServerPropsOnly = {} & ServerProps\n\nexport type ViewDescriptionServerProps = ViewDescriptionClientProps & ViewDescriptionServerPropsOnly\n"],"names":[],"mappings":"AAuHA,WAAoG"}

package/dist/auth/applyUserReadAccess.d.ts

@@ -0,0 +1,13 @@
+import type { SanitizedCollectionConfig } from '../collections/config/types.js';
+import type { AuthenticatedUser } from '../index.js';
+import type { PayloadRequest } from '../types/index.js';
+/** Runs an authenticated user through the collection's read pipeline. */
+export declare const applyUserReadAccess: ({ collection, depth, overrideAccess, req, showHiddenFields, user, }: {
+    collection: SanitizedCollectionConfig;
+    depth?: number;
+    overrideAccess: boolean;
+    req: PayloadRequest;
+    showHiddenFields: boolean;
+    user: AuthenticatedUser;
+}) => Promise<AuthenticatedUser>;
+//# sourceMappingURL=applyUserReadAccess.d.ts.map

package/dist/auth/applyUserReadAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyUserReadAccess.d.ts","sourceRoot":"","sources":["../../src/auth/applyUserReadAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,wEAO7B;IACD,UAAU,EAAE,yBAAyB,CAAA;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;IACnB,gBAAgB,EAAE,OAAO,CAAA;IACzB,IAAI,EAAE,iBAAiB,CAAA;CACxB,KAAG,OAAO,CAAC,iBAAiB,CAsC5B,CAAA"}

package/dist/auth/applyUserReadAccess.js

@@ -0,0 +1,41 @@
+import { afterRead } from '../fields/hooks/afterRead/index.js';
+import { deepCopyObjectSimple } from '../utilities/deepCopyObject.js';
+/** Runs an authenticated user through the collection's read pipeline. */ export const applyUserReadAccess = async ({ collection, depth, overrideAccess, req, showHiddenFields, user })=>{
+    const authenticationMetadata = {
+        ...user._sid !== undefined ? {
+            _sid: user._sid
+        } : {},
+        _strategy: user._strategy,
+        collection: user.collection
+    };
+    let userWithReadAccess = await afterRead({
+        collection,
+        context: req.context,
+        depth: depth,
+        doc: deepCopyObjectSimple(user),
+        draft: false,
+        fallbackLocale: req.fallbackLocale,
+        global: null,
+        locale: req.locale,
+        overrideAccess,
+        req,
+        showHiddenFields
+    });
+    if (collection.hooks?.afterRead?.length) {
+        for (const hook of collection.hooks.afterRead){
+            userWithReadAccess = await hook({
+                collection,
+                context: req.context,
+                doc: userWithReadAccess,
+                overrideAccess,
+                req
+            }) || userWithReadAccess;
+        }
+    }
+    return {
+        ...userWithReadAccess,
+        ...authenticationMetadata
+    };
+};
+
+//# sourceMappingURL=applyUserReadAccess.js.map

package/dist/auth/applyUserReadAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/applyUserReadAccess.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { AuthenticatedUser } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { afterRead } from '../fields/hooks/afterRead/index.js'\nimport { deepCopyObjectSimple } from '../utilities/deepCopyObject.js'\n\n/** Runs an authenticated user through the collection's read pipeline. */\nexport const applyUserReadAccess = async ({\n  collection,\n  depth,\n  overrideAccess,\n  req,\n  showHiddenFields,\n  user,\n}: {\n  collection: SanitizedCollectionConfig\n  depth?: number\n  overrideAccess: boolean\n  req: PayloadRequest\n  showHiddenFields: boolean\n  user: AuthenticatedUser\n}): Promise<AuthenticatedUser> => {\n  const authenticationMetadata = {\n    ...(user._sid !== undefined ? { _sid: user._sid } : {}),\n    _strategy: user._strategy,\n    collection: user.collection,\n  }\n\n  let userWithReadAccess = await afterRead({\n    collection,\n    context: req.context,\n    depth: depth!,\n    doc: deepCopyObjectSimple(user),\n    draft: false,\n    fallbackLocale: req.fallbackLocale!,\n    global: null,\n    locale: req.locale!,\n    overrideAccess,\n    req,\n    showHiddenFields,\n  })\n\n  if (collection.hooks?.afterRead?.length) {\n    for (const hook of collection.hooks.afterRead) {\n      userWithReadAccess =\n        (await hook({\n          collection,\n          context: req.context,\n          doc: userWithReadAccess,\n          overrideAccess,\n          req,\n        })) || userWithReadAccess\n    }\n  }\n\n  return {\n    ...userWithReadAccess,\n    ...authenticationMetadata,\n  }\n}\n"],"names":["afterRead","deepCopyObjectSimple","applyUserReadAccess","collection","depth","overrideAccess","req","showHiddenFields","user","authenticationMetadata","_sid","undefined","_strategy","userWithReadAccess","context","doc","draft","fallbackLocale","global","locale","hooks","length","hook"],"mappings":"AAIA,SAASA,SAAS,QAAQ,qCAAoC;AAC9D,SAASC,oBAAoB,QAAQ,iCAAgC;AAErE,uEAAuE,GACvE,OAAO,MAAMC,sBAAsB,OAAO,EACxCC,UAAU,EACVC,KAAK,EACLC,cAAc,EACdC,GAAG,EACHC,gBAAgB,EAChBC,IAAI,EAQL;IACC,MAAMC,yBAAyB;QAC7B,GAAID,KAAKE,IAAI,KAAKC,YAAY;YAAED,MAAMF,KAAKE,IAAI;QAAC,IAAI,CAAC,CAAC;QACtDE,WAAWJ,KAAKI,SAAS;QACzBT,YAAYK,KAAKL,UAAU;IAC7B;IAEA,IAAIU,qBAAqB,MAAMb,UAAU;QACvCG;QACAW,SAASR,IAAIQ,OAAO;QACpBV,OAAOA;QACPW,KAAKd,qBAAqBO;QAC1BQ,OAAO;QACPC,gBAAgBX,IAAIW,cAAc;QAClCC,QAAQ;QACRC,QAAQb,IAAIa,MAAM;QAClBd;QACAC;QACAC;IACF;IAEA,IAAIJ,WAAWiB,KAAK,EAAEpB,WAAWqB,QAAQ;QACvC,KAAK,MAAMC,QAAQnB,WAAWiB,KAAK,CAACpB,SAAS,CAAE;YAC7Ca,qBACE,AAAC,MAAMS,KAAK;gBACVnB;gBACAW,SAASR,IAAIQ,OAAO;gBACpBC,KAAKF;gBACLR;gBACAC;YACF,MAAOO;QACX;IACF;IAEA,OAAO;QACL,GAAGA,kBAAkB;QACrB,GAAGJ,sBAAsB;IAC3B;AACF,EAAC"}

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldAccess } from '../../../fields/config/types.js';
+/** Allows API key creation and updates only for users with admin access. */
+export declare const canCreateOrUpdateAPIKey: FieldAccess;
+//# sourceMappingURL=canCreateOrUpdateAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateOrUpdateAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAKlE,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,EAAE,WAgBrC,CAAA"}

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.js

@@ -0,0 +1,20 @@
+import { UnauthorizedError } from '../../../errors/UnauthorizedError.js';
+import { canAccessAdmin } from '../../../utilities/canAccessAdmin.js';
+/** Allows API key creation and updates only for users with admin access. */ export const canCreateOrUpdateAPIKey = async ({ req })=>{
+    if (!req.user) {
+        return false;
+    }
+    try {
+        await canAccessAdmin({
+            req
+        });
+    } catch (error) {
+        if (error instanceof UnauthorizedError) {
+            return false;
+        }
+        throw error;
+    }
+    return true;
+};
+
+//# sourceMappingURL=canCreateOrUpdateAPIKey.js.map

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.ts"],"sourcesContent":["import type { FieldAccess } from '../../../fields/config/types.js'\n\nimport { UnauthorizedError } from '../../../errors/UnauthorizedError.js'\nimport { canAccessAdmin } from '../../../utilities/canAccessAdmin.js'\n\n/** Allows API key creation and updates only for users with admin access. */\nexport const canCreateOrUpdateAPIKey: FieldAccess = async ({ req }) => {\n  if (!req.user) {\n    return false\n  }\n\n  try {\n    await canAccessAdmin({ req })\n  } catch (error) {\n    if (error instanceof UnauthorizedError) {\n      return false\n    }\n\n    throw error\n  }\n\n  return true\n}\n"],"names":["UnauthorizedError","canAccessAdmin","canCreateOrUpdateAPIKey","req","user","error"],"mappings":"AAEA,SAASA,iBAAiB,QAAQ,uCAAsC;AACxE,SAASC,cAAc,QAAQ,uCAAsC;AAErE,0EAA0E,GAC1E,OAAO,MAAMC,0BAAuC,OAAO,EAAEC,GAAG,EAAE;IAChE,IAAI,CAACA,IAAIC,IAAI,EAAE;QACb,OAAO;IACT;IAEA,IAAI;QACF,MAAMH,eAAe;YAAEE;QAAI;IAC7B,EAAE,OAAOE,OAAO;QACd,IAAIA,iBAAiBL,mBAAmB;YACtC,OAAO;QACT;QAEA,MAAMK;IACR;IAEA,OAAO;AACT,EAAC"}

package/dist/auth/baseFields/apiKey/encryptAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Encrypts API keys before storage. */
+export declare const encryptAPIKey: FieldHook;
+//# sourceMappingURL=encryptAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/encryptAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/encryptAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,wCAAwC;AACxC,eAAO,MAAM,aAAa,EAAE,SAe3B,CAAA"}

package/dist/auth/baseFields/apiKey/encryptAPIKey.js

@@ -0,0 +1,11 @@
+/** Encrypts API keys before storage. */ export const encryptAPIKey = ({ data, req, value })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof value === 'undefined') {
+        return undefined;
+    }
+    return value ? req.payload.encrypt(value) : null;
+};
+
+//# sourceMappingURL=encryptAPIKey.js.map

package/dist/auth/baseFields/apiKey/encryptAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/encryptAPIKey.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Encrypts API keys before storage. */\nexport const encryptAPIKey: FieldHook = ({ data, req, value }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof value === 'undefined') {\n    return undefined\n  }\n\n  return value ? req.payload.encrypt(value as string) : null\n}\n"],"names":["encryptAPIKey","data","req","value","apiKey","undefined","payload","encrypt"],"mappings":"AAEA,sCAAsC,GACtC,OAAO,MAAMA,gBAA2B,CAAC,EAAEC,IAAI,EAAEC,GAAG,EAAEC,KAAK,EAAE;IAC3D,IACEF,QACA,YAAYA,QACZ,OAAOA,KAAKG,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOH,KAAKG,MAAM,KAAK,YAAYH,KAAKG,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOD,UAAU,aAAa;QAChC,OAAOE;IACT;IAEA,OAAOF,QAAQD,IAAII,OAAO,CAACC,OAAO,CAACJ,SAAmB;AACxD,EAAC"}

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.d.ts

@@ -0,0 +1,3 @@
+/** Returns the minimal recognizable portion of an API key for storage. */
+export declare const getAPIKeyLast4: (value: string) => string;
+//# sourceMappingURL=getAPIKeyLast4.d.ts.map

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAPIKeyLast4.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/getAPIKeyLast4.ts"],"names":[],"mappings":"AAGA,0EAA0E;AAC1E,eAAO,MAAM,cAAc,UAAW,MAAM,KAAG,MACsB,CAAA"}

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.js

@@ -0,0 +1,5 @@
+const minimumSafeKeyLength = 24;
+const maskedLast4 = '••••';
+/** Returns the minimal recognizable portion of an API key for storage. */ export const getAPIKeyLast4 = (value)=>value.length < minimumSafeKeyLength ? maskedLast4 : value.slice(-4);
+
+//# sourceMappingURL=getAPIKeyLast4.js.map

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/getAPIKeyLast4.ts"],"sourcesContent":["const minimumSafeKeyLength = 24\nconst maskedLast4 = '••••'\n\n/** Returns the minimal recognizable portion of an API key for storage. */\nexport const getAPIKeyLast4 = (value: string): string =>\n  value.length < minimumSafeKeyLength ? maskedLast4 : value.slice(-4)\n"],"names":["minimumSafeKeyLength","maskedLast4","getAPIKeyLast4","value","length","slice"],"mappings":"AAAA,MAAMA,uBAAuB;AAC7B,MAAMC,cAAc;AAEpB,wEAAwE,GACxE,OAAO,MAAMC,iBAAiB,CAACC,QAC7BA,MAAMC,MAAM,GAAGJ,uBAAuBC,cAAcE,MAAME,KAAK,CAAC,CAAC,GAAE"}

package/dist/auth/baseFields/apiKey/omitAPIKey.d.ts

@@ -0,0 +1,5 @@
+import type { BeforeReadHook } from '../../../collections/config/types.js';
+export declare const legacyAPIKeyLast4: string;
+/** Removes API key secrets before any collection read hooks can observe them. */
+export declare const omitAPIKey: BeforeReadHook;
+//# sourceMappingURL=omitAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/omitAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAE1E,eAAO,MAAM,iBAAiB,QAAgB,CAAA;AAE9C,iFAAiF;AACjF,eAAO,MAAM,UAAU,EAAE,cASxB,CAAA"}

package/dist/auth/baseFields/apiKey/omitAPIKey.js

@@ -0,0 +1,11 @@
+export const legacyAPIKeyLast4 = '•'.repeat(4);
+/** Removes API key secrets before any collection read hooks can observe them. */ export const omitAPIKey = ({ doc })=>{
+    if (doc.apiKeyIndex && !doc.apiKeyLast4) {
+        doc.apiKeyLast4 = legacyAPIKeyLast4;
+    }
+    delete doc.apiKey;
+    delete doc.apiKeyIndex;
+    return doc;
+};
+
+//# sourceMappingURL=omitAPIKey.js.map

package/dist/auth/baseFields/apiKey/omitAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitAPIKey.ts"],"sourcesContent":["import type { BeforeReadHook } from '../../../collections/config/types.js'\n\nexport const legacyAPIKeyLast4 = '•'.repeat(4)\n\n/** Removes API key secrets before any collection read hooks can observe them. */\nexport const omitAPIKey: BeforeReadHook = ({ doc }) => {\n  if (doc.apiKeyIndex && !doc.apiKeyLast4) {\n    doc.apiKeyLast4 = legacyAPIKeyLast4\n  }\n\n  delete doc.apiKey\n  delete doc.apiKeyIndex\n\n  return doc\n}\n"],"names":["legacyAPIKeyLast4","repeat","omitAPIKey","doc","apiKeyIndex","apiKeyLast4","apiKey"],"mappings":"AAEA,OAAO,MAAMA,oBAAoB,IAAIC,MAAM,CAAC,GAAE;AAE9C,+EAA+E,GAC/E,OAAO,MAAMC,aAA6B,CAAC,EAAEC,GAAG,EAAE;IAChD,IAAIA,IAAIC,WAAW,IAAI,CAACD,IAAIE,WAAW,EAAE;QACvCF,IAAIE,WAAW,GAAGL;IACpB;IAEA,OAAOG,IAAIG,MAAM;IACjB,OAAOH,IAAIC,WAAW;IAEtB,OAAOD;AACT,EAAC"}

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Keeps the authentication index out of returned documents. */
+export declare const omitAPIKeyIndex: FieldHook;
+//# sourceMappingURL=omitAPIKeyIndex.d.ts.map

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitAPIKeyIndex.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitAPIKeyIndex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,gEAAgE;AAChE,eAAO,MAAM,eAAe,EAAE,SAE7B,CAAA"}

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.js

@@ -0,0 +1,5 @@
+/** Keeps the authentication index out of returned documents. */ export const omitAPIKeyIndex = ({ siblingData })=>{
+    delete siblingData.apiKeyIndex;
+};
+
+//# sourceMappingURL=omitAPIKeyIndex.js.map

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitAPIKeyIndex.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Keeps the authentication index out of returned documents. */\nexport const omitAPIKeyIndex: FieldHook = ({ siblingData }) => {\n  delete siblingData.apiKeyIndex\n}\n"],"names":["omitAPIKeyIndex","siblingData","apiKeyIndex"],"mappings":"AAEA,8DAA8D,GAC9D,OAAO,MAAMA,kBAA6B,CAAC,EAAEC,WAAW,EAAE;IACxD,OAAOA,YAAYC,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Prevents the encrypted key from surviving field-level reads. */
+export declare const omitEncryptedAPIKey: FieldHook;
+//# sourceMappingURL=omitEncryptedAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitEncryptedAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitEncryptedAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,EAAE,SAEjC,CAAA"}

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.js

@@ -0,0 +1,5 @@
+/** Prevents the encrypted key from surviving field-level reads. */ export const omitEncryptedAPIKey = ({ siblingData })=>{
+    delete siblingData.apiKey;
+};
+
+//# sourceMappingURL=omitEncryptedAPIKey.js.map

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitEncryptedAPIKey.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Prevents the encrypted key from surviving field-level reads. */\nexport const omitEncryptedAPIKey: FieldHook = ({ siblingData }) => {\n  delete siblingData.apiKey\n}\n"],"names":["omitEncryptedAPIKey","siblingData","apiKey"],"mappings":"AAEA,iEAAiE,GACjE,OAAO,MAAMA,sBAAiC,CAAC,EAAEC,WAAW,EAAE;IAC5D,OAAOA,YAAYC,MAAM;AAC3B,EAAC"}

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Maintains the API key authentication index. */
+export declare const setAPIKeyIndex: FieldHook;
+//# sourceMappingURL=setAPIKeyIndex.d.ts.map

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setAPIKeyIndex.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/setAPIKeyIndex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,kDAAkD;AAClD,eAAO,MAAM,cAAc,EAAE,SAe5B,CAAA"}

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.js

@@ -0,0 +1,12 @@
+import crypto from 'crypto';
+/** Maintains the API key authentication index. */ export const setAPIKeyIndex = ({ data, req, siblingData })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof data?.apiKey === 'string') {
+        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
+    }
+    delete siblingData.apiKeyIndex;
+};
+
+//# sourceMappingURL=setAPIKeyIndex.js.map

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/setAPIKeyIndex.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { FieldHook } from '../../../fields/config/types.js'\n\n/** Maintains the API key authentication index. */\nexport const setAPIKeyIndex: FieldHook = ({ data, req, siblingData }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof data?.apiKey === 'string') {\n    return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex')\n  }\n\n  delete siblingData.apiKeyIndex\n}\n"],"names":["crypto","setAPIKeyIndex","data","req","siblingData","apiKey","createHmac","payload","secret","update","digest","apiKeyIndex"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAI3B,gDAAgD,GAChD,OAAO,MAAMC,iBAA4B,CAAC,EAAEC,IAAI,EAAEC,GAAG,EAAEC,WAAW,EAAE;IAClE,IACEF,QACA,YAAYA,QACZ,OAAOA,KAAKG,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOH,KAAKG,MAAM,KAAK,YAAYH,KAAKG,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOH,MAAMG,WAAW,UAAU;QACpC,OAAOL,OAAOM,UAAU,CAAC,UAAUH,IAAII,OAAO,CAACC,MAAM,EAAEC,MAAM,CAACP,KAAKG,MAAM,EAAEK,MAAM,CAAC;IACpF;IAEA,OAAON,YAAYO,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey/setKeyLast4.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Maintains the non-secret API key preview. */
+export declare const setKeyLast4: FieldHook;
+//# sourceMappingURL=setKeyLast4.d.ts.map

package/dist/auth/baseFields/apiKey/setKeyLast4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setKeyLast4.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/setKeyLast4.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAIhE,gDAAgD;AAChD,eAAO,MAAM,WAAW,EAAE,SAezB,CAAA"}

package/dist/auth/baseFields/apiKey/setKeyLast4.js

@@ -0,0 +1,12 @@
+import { getAPIKeyLast4 } from './getAPIKeyLast4.js';
+/** Maintains the non-secret API key preview. */ export const setKeyLast4 = ({ data, siblingData })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof data?.apiKey === 'string') {
+        return getAPIKeyLast4(data.apiKey);
+    }
+    delete siblingData.apiKeyLast4;
+};
+
+//# sourceMappingURL=setKeyLast4.js.map

package/dist/auth/baseFields/apiKey/setKeyLast4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/setKeyLast4.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\nimport { getAPIKeyLast4 } from './getAPIKeyLast4.js'\n\n/** Maintains the non-secret API key preview. */\nexport const setKeyLast4: FieldHook = ({ data, siblingData }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof data?.apiKey === 'string') {\n    return getAPIKeyLast4(data.apiKey)\n  }\n\n  delete siblingData.apiKeyLast4\n}\n"],"names":["getAPIKeyLast4","setKeyLast4","data","siblingData","apiKey","apiKeyLast4"],"mappings":"AAEA,SAASA,cAAc,QAAQ,sBAAqB;AAEpD,8CAA8C,GAC9C,OAAO,MAAMC,cAAyB,CAAC,EAAEC,IAAI,EAAEC,WAAW,EAAE;IAC1D,IACED,QACA,YAAYA,QACZ,OAAOA,KAAKE,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOF,KAAKE,MAAM,KAAK,YAAYF,KAAKE,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOF,MAAME,WAAW,UAAU;QACpC,OAAOJ,eAAeE,KAAKE,MAAM;IACnC;IAEA,OAAOD,YAAYE,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey.d.ts

@@ -1,11 +1,11 @@
-import type { CheckboxField, Field, TextField } from '../../fields/config/types.js';
-type APIKeyCheckboxFieldOverride = Omit<Partial<CheckboxField>, 'name' | 'type'>;
+import type { Field, TextField } from '../../fields/config/types.js';
+export { omitAPIKey } from './apiKey/omitAPIKey.js';
 type APIKeyTextFieldOverride = Omit<Partial<TextField>, 'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'>;
-export declare const createAPIKeyFields: ({ apiKeyField, apiKeyIndexField, enableAPIKeyField, includeEnableAPIKey, }?: {
+export declare const createAPIKeyFields: ({ apiKeyField, apiKeyIndexField, apiKeyLast4Field, }?: {
     apiKeyField?: APIKeyTextFieldOverride;
     apiKeyIndexField?: APIKeyTextFieldOverride;
-    enableAPIKeyField?: APIKeyCheckboxFieldOverride;
-    includeEnableAPIKey?: boolean;
+    apiKeyLast4Field?: APIKeyTextFieldOverride;
 }) => Field[];
-export {};
+/** Builds API key fields and safely merges custom overrides. */
+export declare const getAPIKeyFields: (fields: Field[]) => Field[];
 //# sourceMappingURL=apiKey.d.ts.map

package/dist/auth/baseFields/apiKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAa,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAO9F,KAAK,2BAA2B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;AAChF,KAAK,uBAAuB,GAAG,IAAI,CACjC,OAAO,CAAC,SAAS,CAAC,EAClB,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CACjE,CAAA;AAED,eAAO,MAAM,kBAAkB,GAAI,6EAKhC;IACD,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAC1C,iBAAiB,CAAC,EAAE,2BAA2B,CAAA;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAA;CACzB,KAAG,KAAK,EAwEb,CAAA"}
+{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAUpE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD,KAAK,uBAAuB,GAAG,IAAI,CACjC,OAAO,CAAC,SAAS,CAAC,EAClB,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CACjE,CAAA;AAED,eAAO,MAAM,kBAAkB,0DAI5B;IACD,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAC1C,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;CAC3C,KAAQ,KAAK,EAsEb,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,eAAe,WAAY,KAAK,EAAE,KAAG,KAAK,EAMtD,CAAA"}

package/dist/auth/baseFields/apiKey.js

@@ -1,70 +1,101 @@
-import crypto from 'crypto';
-const encryptKey = ({ req, value })=>value ? req.payload.encrypt(value) : null;
-const decryptKey = ({ req, value })=>value ? req.payload.decrypt(value) : undefined;
-export const createAPIKeyFields = ({ apiKeyField, apiKeyIndexField, enableAPIKeyField, includeEnableAPIKey = true } = {})=>{
-    const fields = [];
-    if (includeEnableAPIKey) {
-        fields.push({
-            name: 'enableAPIKey',
-            type: 'checkbox',
-            ...enableAPIKeyField,
+import { fieldAffectsData } from '../../fields/config/types.js';
+import { canCreateOrUpdateAPIKey } from './apiKey/canCreateOrUpdateAPIKey.js';
+import { encryptAPIKey } from './apiKey/encryptAPIKey.js';
+import { omitAPIKeyIndex } from './apiKey/omitAPIKeyIndex.js';
+import { omitEncryptedAPIKey } from './apiKey/omitEncryptedAPIKey.js';
+import { setAPIKeyIndex } from './apiKey/setAPIKeyIndex.js';
+import { setKeyLast4 } from './apiKey/setKeyLast4.js';
+export { omitAPIKey } from './apiKey/omitAPIKey.js';
+export const createAPIKeyFields = ({ apiKeyField, apiKeyIndexField, apiKeyLast4Field } = {})=>{
+    const customAccess = apiKeyField?.access;
+    return [
+        {
+            name: 'apiKey',
+            type: 'text',
+            ...apiKeyField,
+            access: {
+                create: canCreateOrUpdateAPIKey,
+                ...apiKeyField?.access,
+                read: ()=>false,
+                update: apiKeyField?.access?.update ?? canCreateOrUpdateAPIKey
+            },
             admin: {
                 components: {
                     Field: false
                 },
-                ...enableAPIKeyField?.admin
+                ...apiKeyField?.admin
             },
-            label: enableAPIKeyField?.label ?? (({ t })=>t('authentication:enableAPIKey'))
-        });
-    }
-    fields.push({
-        name: 'apiKey',
-        type: 'text',
-        ...apiKeyField,
-        admin: {
-            components: {
-                Field: false
+            hooks: {
+                ...apiKeyField?.hooks,
+                afterRead: [
+                    omitEncryptedAPIKey,
+                    ...apiKeyField?.hooks?.afterRead ?? []
+                ],
+                beforeChange: [
+                    encryptAPIKey,
+                    ...apiKeyField?.hooks?.beforeChange ?? []
+                ]
             },
-            ...apiKeyField?.admin
-        },
-        hooks: {
-            afterRead: [
-                decryptKey
-            ],
-            beforeChange: [
-                encryptKey
-            ],
-            ...apiKeyField?.hooks
+            label: apiKeyField?.label ?? (({ t })=>t('authentication:apiKey'))
         },
-        label: apiKeyField?.label ?? (({ t })=>t('authentication:apiKey'))
-    }, {
-        name: 'apiKeyIndex',
-        type: 'text',
-        ...apiKeyIndexField,
-        admin: {
-            disabled: true,
-            ...apiKeyIndexField?.admin
+        {
+            name: 'apiKeyLast4',
+            type: 'text',
+            ...apiKeyLast4Field,
+            access: {
+                ...apiKeyLast4Field?.access,
+                create: customAccess?.create ?? canCreateOrUpdateAPIKey,
+                read: customAccess?.update ?? canCreateOrUpdateAPIKey,
+                update: customAccess?.update ?? canCreateOrUpdateAPIKey
+            },
+            admin: {
+                components: {
+                    Field: false
+                },
+                ...apiKeyLast4Field?.admin
+            },
+            hooks: {
+                ...apiKeyLast4Field?.hooks,
+                beforeValidate: [
+                    setKeyLast4,
+                    ...apiKeyLast4Field?.hooks?.beforeValidate ?? []
+                ]
+            }
         },
-        hidden: apiKeyIndexField?.hidden ?? true,
-        hooks: {
-            beforeValidate: [
-                ({ data, req, value })=>{
-                    if (data?.apiKey === false || data?.apiKey === null || data?.apiKey === '') {
-                        return null;
-                    }
-                    if (includeEnableAPIKey && (data?.enableAPIKey === false || data?.enableAPIKey === null)) {
-                        return null;
-                    }
-                    if (data?.apiKey) {
-                        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
-                    }
-                    return value;
-                }
-            ],
-            ...apiKeyIndexField?.hooks
+        {
+            name: 'apiKeyIndex',
+            type: 'text',
+            ...apiKeyIndexField,
+            access: {
+                ...apiKeyIndexField?.access,
+                create: customAccess?.create ?? canCreateOrUpdateAPIKey,
+                read: ()=>false,
+                update: customAccess?.update ?? canCreateOrUpdateAPIKey
+            },
+            admin: {
+                disabled: true,
+                ...apiKeyIndexField?.admin
+            },
+            hidden: apiKeyIndexField?.hidden ?? true,
+            hooks: {
+                ...apiKeyIndexField?.hooks,
+                afterRead: [
+                    omitAPIKeyIndex,
+                    ...apiKeyIndexField?.hooks?.afterRead ?? []
+                ],
+                beforeValidate: [
+                    setAPIKeyIndex,
+                    ...apiKeyIndexField?.hooks?.beforeValidate ?? []
+                ]
+            }
         }
+    ];
+};
+/** Builds API key fields and safely merges custom overrides. */ export const getAPIKeyFields = (fields)=>{
+    const customAPIKeyField = fields.find((field)=>fieldAffectsData(field) && field.name === 'apiKey' && field.type === 'text');
+    return createAPIKeyFields({
+        apiKeyField: customAPIKeyField
     });
-    return fields;
 };
 
 //# sourceMappingURL=apiKey.js.map