payload 4.0.0-internal.cd69eef → 4.0.0-internal.ce66a41

package/dist/admin/views/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/admin/views/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,UAAU,EACX,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,gFAAgF;IAChF,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,6CAA6C;IAC7C,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,uDAAuD;IACvD,YAAY,EAAE,aAAa,CAAA;IAC3B,yFAAyF;IACzF,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAA;IACrD,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAA;IACvB,iCAAiC;IACjC,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAA;IAChC,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC1C,8CAA8C;IAC9C,4BAA4B,EAAE,uBAAuB,CAAA;CACtD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,cAAc,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAChC,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC5B,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACjC,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC7B,aAAa,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;IACjC,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;CAC3C,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,IAAI,EAAE,IAAI,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,EAAE,qBAAqB,CAAA;IACtC,oBAAoB,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAA;CACrE,GAAG,WAAW,CAAA;AAEf,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,uBAAuB,CAAA;AAE/E,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,aAAa,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;IACjC,cAAc,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACjD,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,iBAAiB,CAAA;IACjC;;OAEG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC/B;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACpC;;OAEG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAA;IACvC,cAAc,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,sBAAsB,CAAC,EAAE,6BAA6B,CAAA;IACtD,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAC9C,qBAAqB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC1D,QAAQ,EAAE,SAAS,CAAA;CACpB,GAAG,aAAa,CAAA;AAEjB,MAAM,MAAM,6BAA6B,GAAG;IAC1C,cAAc,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACjD,mBAAmB,EAAE,OAAO,CAAA;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,SAAS,CAAA;CACpB,CAAA;AAGD,MAAM,MAAM,qBAAqB,GAAG,6BAA6B,CAAA;AACjE,MAAM,MAAM,yBAAyB,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACpE,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,GAAG,yBAAyB,CAAA;AAGrF,MAAM,MAAM,0BAA0B,GAAG,6BAA6B,CAAA;AACtE,MAAM,MAAM,8BAA8B,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACzE,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,GAAG,8BAA8B,CAAA;AAGpG,MAAM,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AAChE,MAAM,MAAM,wBAAwB,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACnE,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAGlF,MAAM,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AAChE,MAAM,MAAM,wBAAwB,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACnE,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAGlF,MAAM,MAAM,yBAAyB,GAAG,6BAA6B,CAAA;AACrE,MAAM,MAAM,6BAA6B,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACxE,MAAM,MAAM,yBAAyB,GAAG,yBAAyB,GAAG,6BAA6B,CAAA"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/admin/views/list.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EACzB,UAAU,EACX,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,gFAAgF;IAChF,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,6CAA6C;IAC7C,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,uDAAuD;IACvD,YAAY,EAAE,aAAa,CAAA;IAC3B,yFAAyF;IACzF,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAA;IACrD,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAA;IACvB,iCAAiC;IACjC,QAAQ,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAA;IAChC,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC1C,8CAA8C;IAC9C,4BAA4B,EAAE,uBAAuB,CAAA;CACtD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,cAAc,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAChC,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC5B,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACjC,WAAW,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC7B,aAAa,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;IACjC,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC3B,KAAK,EAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;CAC3C,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,gBAAgB,EAAE,yBAAyB,CAAA;IAC3C,IAAI,EAAE,IAAI,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,eAAe,EAAE,qBAAqB,CAAA;IACtC,oBAAoB,EAAE,sBAAsB,CAAC,sBAAsB,CAAC,CAAA;CACrE,GAAG,WAAW,CAAA;AAEf,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,uBAAuB,CAAA;AAE/E,MAAM,MAAM,mBAAmB,GAAG;IAChC,UAAU,CAAC,EAAE,KAAK,CAAA;IAClB,aAAa,CAAC,EAAE,KAAK,CAAC,SAAS,EAAE,CAAA;IACjC,cAAc,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACjD,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,cAAc,CAAC,EAAE,qBAAqB,CAAC,gBAAgB,CAAC,CAAA;IACxD,oFAAoF;IACpF,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAA;IAC5C,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,WAAW,CAAC,EAAE,aAAa,EAAE,CAAA;IAC7B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,iBAAiB,CAAA;IACjC;;OAEG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC/B;;OAEG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IACpC;;OAEG;IACH,eAAe,CAAC,EAAE,qBAAqB,CAAA;IACvC,cAAc,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,sBAAsB,CAAC,EAAE,6BAA6B,CAAA;IACtD,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IAC9C,qBAAqB,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC1D,QAAQ,EAAE,SAAS,CAAA;CACpB,GAAG,aAAa,CAAA;AAEjB,MAAM,MAAM,6BAA6B,GAAG;IAC1C,cAAc,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACjD,mBAAmB,EAAE,OAAO,CAAA;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,cAAc,EAAE,MAAM,CAAA;IACtB,QAAQ,EAAE,SAAS,CAAA;CACpB,CAAA;AAGD,MAAM,MAAM,qBAAqB,GAAG,6BAA6B,CAAA;AACjE,MAAM,MAAM,yBAAyB,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACpE,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,GAAG,yBAAyB,CAAA;AAGrF,MAAM,MAAM,0BAA0B,GAAG,6BAA6B,CAAA;AACtE,MAAM,MAAM,8BAA8B,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACzE,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,GAAG,8BAA8B,CAAA;AAGpG,MAAM,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AAChE,MAAM,MAAM,wBAAwB,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACnE,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAGlF,MAAM,MAAM,oBAAoB,GAAG,6BAA6B,CAAA;AAChE,MAAM,MAAM,wBAAwB,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACnE,MAAM,MAAM,oBAAoB,GAAG,oBAAoB,GAAG,wBAAwB,CAAA;AAGlF,MAAM,MAAM,yBAAyB,GAAG,6BAA6B,CAAA;AACrE,MAAM,MAAM,6BAA6B,GAAG,EAAE,GAAG,uBAAuB,CAAA;AACxE,MAAM,MAAM,yBAAyB,GAAG,yBAAyB,GAAG,6BAA6B,CAAA"}

package/dist/admin/views/list.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/admin/views/list.ts"],"sourcesContent":["import type { SanitizedCollectionPermission } from '../../auth/types.js'\nimport type {\n  CollectionAdminOptions,\n  SanitizedCollectionConfig,\n  TypeWithID,\n} from '../../collections/config/types.js'\nimport type { ServerProps } from '../../config/types.js'\nimport type { PaginatedDocs } from '../../database/types.js'\nimport type { CollectionPreferences } from '../../preferences/types.js'\nimport type { QueryPreset } from '../../query-presets/types.js'\nimport type { ResolvedFilterOptions, Where } from '../../types/index.js'\nimport type { Column } from '../elements/Table.js'\nimport type { Data, ViewTypes } from '../types.js'\nimport type { RelatedDocumentsGrouped } from './hierarchyList.js'\n\nexport type HierarchyViewData = {\n  /**\n   * Collections allowed for creation based on parent's collectionSpecific field.\n   * Undefined means all related collections are allowed.\n   * Always includes the hierarchy collection itself.\n   */\n  allowedCollections?: Array<{ label: string; slug: string }>\n  /** Base filter applied to hierarchy collection queries (e.g., tenant filter) */\n  baseFilter?: Where\n  /** Breadcrumb trail to the current parent */\n  breadcrumbs: Array<{ id: number | string; title: string }>\n  /** Children of the current parent (same collection) */\n  childrenData: PaginatedDocs\n  /** The current parent document data (for display and collectionSpecific field access) */\n  parent: null | (Record<string, unknown> & TypeWithID)\n  /** The parent field name for building queries */\n  parentFieldName: string\n  /** The parent ID being viewed */\n  parentId: null | number | string\n  /** Base filters for related collections (keyed by collection slug) */\n  relatedBaseFilters?: Record<string, Where>\n  /** Related documents grouped by collection */\n  relatedDocumentsByCollection: RelatedDocumentsGrouped\n}\n\nexport type ListViewSlots = {\n  AfterList?: React.ReactNode\n  AfterListTable?: React.ReactNode\n  BeforeList?: React.ReactNode\n  BeforeListTable?: React.ReactNode\n  Description?: React.ReactNode\n  listMenuItems?: React.ReactNode[]\n  NoResults?: React.ReactNode\n  Table: React.ReactNode | React.ReactNode[]\n}\n\n/**\n * The `ListViewServerPropsOnly` approach is needed to ensure type strictness when injecting component props\n * There is no way to do something like `Omit<ListViewServerProps, keyof ListViewClientProps>`\n * This is because `ListViewClientProps` is a union which is impossible to exclude from\n * Exporting explicitly defined `ListViewServerPropsOnly`, etc. allows for the strictest typing\n */\nexport type ListViewServerPropsOnly = {\n  collectionConfig: SanitizedCollectionConfig\n  data: Data\n  limit: number\n  listPreferences: CollectionPreferences\n  listSearchableFields: CollectionAdminOptions['listSearchableFields']\n} & ServerProps\n\nexport type ListViewServerProps = ListViewClientProps & ListViewServerPropsOnly\n\nexport type ListViewClientProps = {\n  baseFilter?: Where\n  beforeActions?: React.ReactNode[]\n  collectionSlug: SanitizedCollectionConfig['slug']\n  columnState: Column[]\n  disableBulkDelete?: boolean\n  disableBulkEdit?: boolean\n  disableQueryPresets?: boolean\n  enableRowSelections?: boolean\n  hasCreatePermission: boolean\n  hasDeletePermission?: boolean\n  hasTrashPermission?: boolean\n  /**\n   * Hierarchy view data - present when viewing a hierarchy collection with a parent selected\n   */\n  hierarchyData?: HierarchyViewData\n  /**\n   * Resolved full-size icon component for hierarchy collections (used in drawer subheader)\n   */\n  HierarchyIcon?: React.ReactNode\n  /**\n   * Resolved small icon component for hierarchy collections (used in table rows)\n   */\n  HierarchySmallIcon?: React.ReactNode\n  /**\n   * @deprecated\n   */\n  listPreferences?: CollectionPreferences\n  newDocumentURL: string\n  /**\n   * @deprecated\n   */\n  preferenceKey?: string\n  queryPreset?: QueryPreset\n  queryPresetPermissions?: SanitizedCollectionPermission\n  renderedFilters?: Map<string, React.ReactNode>\n  resolvedFilterOptions?: Map<string, ResolvedFilterOptions>\n  viewType: ViewTypes\n} & ListViewSlots\n\nexport type ListViewSlotSharedClientProps = {\n  collectionSlug: SanitizedCollectionConfig['slug']\n  hasCreatePermission: boolean\n  hasDeletePermission?: boolean\n  hasTrashPermission?: boolean\n  newDocumentURL: string\n  viewType: ViewTypes\n}\n\n// BeforeList\nexport type BeforeListClientProps = ListViewSlotSharedClientProps\nexport type BeforeListServerPropsOnly = {} & ListViewServerPropsOnly\nexport type BeforeListServerProps = BeforeListClientProps & BeforeListServerPropsOnly\n\n// BeforeListTable\nexport type BeforeListTableClientProps = ListViewSlotSharedClientProps\nexport type BeforeListTableServerPropsOnly = {} & ListViewServerPropsOnly\nexport type BeforeListTableServerProps = BeforeListTableClientProps & BeforeListTableServerPropsOnly\n\n// NoResults\nexport type NoResultsClientProps = ListViewSlotSharedClientProps\nexport type NoResultsServerPropsOnly = {} & ListViewServerPropsOnly\nexport type NoResultsServerProps = NoResultsClientProps & NoResultsServerPropsOnly\n\n// AfterList\nexport type AfterListClientProps = ListViewSlotSharedClientProps\nexport type AfterListServerPropsOnly = {} & ListViewServerPropsOnly\nexport type AfterListServerProps = AfterListClientProps & AfterListServerPropsOnly\n\n// AfterListTable\nexport type AfterListTableClientProps = ListViewSlotSharedClientProps\nexport type AfterListTableServerPropsOnly = {} & ListViewServerPropsOnly\nexport type AfterListTableServerProps = AfterListTableClientProps & AfterListTableServerPropsOnly\n"],"names":[],"mappings":"AA2IA,WAAiG"}
+{"version":3,"sources":["../../../src/admin/views/list.ts"],"sourcesContent":["import type { SanitizedCollectionPermission } from '../../auth/types.js'\nimport type {\n  CollectionAdminOptions,\n  SanitizedCollectionConfig,\n  TypeWithID,\n} from '../../collections/config/types.js'\nimport type { ServerProps } from '../../config/types.js'\nimport type { PaginatedDocs } from '../../database/types.js'\nimport type { CollectionPreferences } from '../../preferences/types.js'\nimport type { QueryPreset } from '../../query-presets/types.js'\nimport type { ResolvedFilterOptions, Where } from '../../types/index.js'\nimport type { Column } from '../elements/Table.js'\nimport type { Data, ViewTypes } from '../types.js'\nimport type { RelatedDocumentsGrouped } from './hierarchyList.js'\n\nexport type HierarchyViewData = {\n  /**\n   * Collections allowed for creation based on parent's collectionSpecific field.\n   * Undefined means all related collections are allowed.\n   * Always includes the hierarchy collection itself.\n   */\n  allowedCollections?: Array<{ label: string; slug: string }>\n  /** Base filter applied to hierarchy collection queries (e.g., tenant filter) */\n  baseFilter?: Where\n  /** Breadcrumb trail to the current parent */\n  breadcrumbs: Array<{ id: number | string; title: string }>\n  /** Children of the current parent (same collection) */\n  childrenData: PaginatedDocs\n  /** The current parent document data (for display and collectionSpecific field access) */\n  parent: null | (Record<string, unknown> & TypeWithID)\n  /** The parent field name for building queries */\n  parentFieldName: string\n  /** The parent ID being viewed */\n  parentId: null | number | string\n  /** Base filters for related collections (keyed by collection slug) */\n  relatedBaseFilters?: Record<string, Where>\n  /** Related documents grouped by collection */\n  relatedDocumentsByCollection: RelatedDocumentsGrouped\n}\n\nexport type ListViewSlots = {\n  AfterList?: React.ReactNode\n  AfterListTable?: React.ReactNode\n  BeforeList?: React.ReactNode\n  BeforeListTable?: React.ReactNode\n  Description?: React.ReactNode\n  listMenuItems?: React.ReactNode[]\n  NoResults?: React.ReactNode\n  Table: React.ReactNode | React.ReactNode[]\n}\n\nexport type ListViewGroup = {\n  data: PaginatedDocs\n  heading: string\n  value: string\n}\n\n/**\n * The `ListViewServerPropsOnly` approach is needed to ensure type strictness when injecting component props\n * There is no way to do something like `Omit<ListViewServerProps, keyof ListViewClientProps>`\n * This is because `ListViewClientProps` is a union which is impossible to exclude from\n * Exporting explicitly defined `ListViewServerPropsOnly`, etc. allows for the strictest typing\n */\nexport type ListViewServerPropsOnly = {\n  collectionConfig: SanitizedCollectionConfig\n  data: Data\n  limit: number\n  listPreferences: CollectionPreferences\n  listSearchableFields: CollectionAdminOptions['listSearchableFields']\n} & ServerProps\n\nexport type ListViewServerProps = ListViewClientProps & ListViewServerPropsOnly\n\nexport type ListViewClientProps = {\n  baseFilter?: Where\n  beforeActions?: React.ReactNode[]\n  collectionSlug: SanitizedCollectionConfig['slug']\n  columnState: Column[]\n  disableBulkDelete?: boolean\n  disableBulkEdit?: boolean\n  disableQueryPresets?: boolean\n  documentLayout?: CollectionPreferences['documentLayout']\n  /** Server-resolved grid destinations. A null value disables document navigation. */\n  documentURLs?: Record<string, null | string>\n  enableRowSelections?: boolean\n  groupedData?: ListViewGroup[]\n  hasCreatePermission: boolean\n  hasDeletePermission?: boolean\n  hasTrashPermission?: boolean\n  /**\n   * Hierarchy view data - present when viewing a hierarchy collection with a parent selected\n   */\n  hierarchyData?: HierarchyViewData\n  /**\n   * Resolved full-size icon component for hierarchy collections (used in drawer subheader)\n   */\n  HierarchyIcon?: React.ReactNode\n  /**\n   * Resolved small icon component for hierarchy collections (used in table rows)\n   */\n  HierarchySmallIcon?: React.ReactNode\n  /**\n   * @deprecated\n   */\n  listPreferences?: CollectionPreferences\n  newDocumentURL: string\n  /**\n   * @deprecated\n   */\n  preferenceKey?: string\n  queryPreset?: QueryPreset\n  queryPresetPermissions?: SanitizedCollectionPermission\n  renderedFilters?: Map<string, React.ReactNode>\n  resolvedFilterOptions?: Map<string, ResolvedFilterOptions>\n  viewType: ViewTypes\n} & ListViewSlots\n\nexport type ListViewSlotSharedClientProps = {\n  collectionSlug: SanitizedCollectionConfig['slug']\n  hasCreatePermission: boolean\n  hasDeletePermission?: boolean\n  hasTrashPermission?: boolean\n  newDocumentURL: string\n  viewType: ViewTypes\n}\n\n// BeforeList\nexport type BeforeListClientProps = ListViewSlotSharedClientProps\nexport type BeforeListServerPropsOnly = {} & ListViewServerPropsOnly\nexport type BeforeListServerProps = BeforeListClientProps & BeforeListServerPropsOnly\n\n// BeforeListTable\nexport type BeforeListTableClientProps = ListViewSlotSharedClientProps\nexport type BeforeListTableServerPropsOnly = {} & ListViewServerPropsOnly\nexport type BeforeListTableServerProps = BeforeListTableClientProps & BeforeListTableServerPropsOnly\n\n// NoResults\nexport type NoResultsClientProps = ListViewSlotSharedClientProps\nexport type NoResultsServerPropsOnly = {} & ListViewServerPropsOnly\nexport type NoResultsServerProps = NoResultsClientProps & NoResultsServerPropsOnly\n\n// AfterList\nexport type AfterListClientProps = ListViewSlotSharedClientProps\nexport type AfterListServerPropsOnly = {} & ListViewServerPropsOnly\nexport type AfterListServerProps = AfterListClientProps & AfterListServerPropsOnly\n\n// AfterListTable\nexport type AfterListTableClientProps = ListViewSlotSharedClientProps\nexport type AfterListTableServerPropsOnly = {} & ListViewServerPropsOnly\nexport type AfterListTableServerProps = AfterListTableClientProps & AfterListTableServerPropsOnly\n"],"names":[],"mappings":"AAqJA,WAAiG"}

package/dist/auth/applyUserReadAccess.d.ts

@@ -0,0 +1,13 @@
+import type { SanitizedCollectionConfig } from '../collections/config/types.js';
+import type { AuthenticatedUser } from '../index.js';
+import type { PayloadRequest } from '../types/index.js';
+/** Runs an authenticated user through the collection's read pipeline. */
+export declare const applyUserReadAccess: ({ collection, depth, overrideAccess, req, showHiddenFields, user, }: {
+    collection: SanitizedCollectionConfig;
+    depth?: number;
+    overrideAccess: boolean;
+    req: PayloadRequest;
+    showHiddenFields: boolean;
+    user: AuthenticatedUser;
+}) => Promise<AuthenticatedUser>;
+//# sourceMappingURL=applyUserReadAccess.d.ts.map

package/dist/auth/applyUserReadAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applyUserReadAccess.d.ts","sourceRoot":"","sources":["../../src/auth/applyUserReadAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,wEAO7B;IACD,UAAU,EAAE,yBAAyB,CAAA;IACrC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,OAAO,CAAA;IACvB,GAAG,EAAE,cAAc,CAAA;IACnB,gBAAgB,EAAE,OAAO,CAAA;IACzB,IAAI,EAAE,iBAAiB,CAAA;CACxB,KAAG,OAAO,CAAC,iBAAiB,CAsC5B,CAAA"}

package/dist/auth/applyUserReadAccess.js

@@ -0,0 +1,41 @@
+import { afterRead } from '../fields/hooks/afterRead/index.js';
+import { deepCopyObjectSimple } from '../utilities/deepCopyObject.js';
+/** Runs an authenticated user through the collection's read pipeline. */ export const applyUserReadAccess = async ({ collection, depth, overrideAccess, req, showHiddenFields, user })=>{
+    const authenticationMetadata = {
+        ...user._sid !== undefined ? {
+            _sid: user._sid
+        } : {},
+        _strategy: user._strategy,
+        collection: user.collection
+    };
+    let userWithReadAccess = await afterRead({
+        collection,
+        context: req.context,
+        depth: depth,
+        doc: deepCopyObjectSimple(user),
+        draft: false,
+        fallbackLocale: req.fallbackLocale,
+        global: null,
+        locale: req.locale,
+        overrideAccess,
+        req,
+        showHiddenFields
+    });
+    if (collection.hooks?.afterRead?.length) {
+        for (const hook of collection.hooks.afterRead){
+            userWithReadAccess = await hook({
+                collection,
+                context: req.context,
+                doc: userWithReadAccess,
+                overrideAccess,
+                req
+            }) || userWithReadAccess;
+        }
+    }
+    return {
+        ...userWithReadAccess,
+        ...authenticationMetadata
+    };
+};
+
+//# sourceMappingURL=applyUserReadAccess.js.map

package/dist/auth/applyUserReadAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/auth/applyUserReadAccess.ts"],"sourcesContent":["import type { SanitizedCollectionConfig } from '../collections/config/types.js'\nimport type { AuthenticatedUser } from '../index.js'\nimport type { PayloadRequest } from '../types/index.js'\n\nimport { afterRead } from '../fields/hooks/afterRead/index.js'\nimport { deepCopyObjectSimple } from '../utilities/deepCopyObject.js'\n\n/** Runs an authenticated user through the collection's read pipeline. */\nexport const applyUserReadAccess = async ({\n  collection,\n  depth,\n  overrideAccess,\n  req,\n  showHiddenFields,\n  user,\n}: {\n  collection: SanitizedCollectionConfig\n  depth?: number\n  overrideAccess: boolean\n  req: PayloadRequest\n  showHiddenFields: boolean\n  user: AuthenticatedUser\n}): Promise<AuthenticatedUser> => {\n  const authenticationMetadata = {\n    ...(user._sid !== undefined ? { _sid: user._sid } : {}),\n    _strategy: user._strategy,\n    collection: user.collection,\n  }\n\n  let userWithReadAccess = await afterRead({\n    collection,\n    context: req.context,\n    depth: depth!,\n    doc: deepCopyObjectSimple(user),\n    draft: false,\n    fallbackLocale: req.fallbackLocale!,\n    global: null,\n    locale: req.locale!,\n    overrideAccess,\n    req,\n    showHiddenFields,\n  })\n\n  if (collection.hooks?.afterRead?.length) {\n    for (const hook of collection.hooks.afterRead) {\n      userWithReadAccess =\n        (await hook({\n          collection,\n          context: req.context,\n          doc: userWithReadAccess,\n          overrideAccess,\n          req,\n        })) || userWithReadAccess\n    }\n  }\n\n  return {\n    ...userWithReadAccess,\n    ...authenticationMetadata,\n  }\n}\n"],"names":["afterRead","deepCopyObjectSimple","applyUserReadAccess","collection","depth","overrideAccess","req","showHiddenFields","user","authenticationMetadata","_sid","undefined","_strategy","userWithReadAccess","context","doc","draft","fallbackLocale","global","locale","hooks","length","hook"],"mappings":"AAIA,SAASA,SAAS,QAAQ,qCAAoC;AAC9D,SAASC,oBAAoB,QAAQ,iCAAgC;AAErE,uEAAuE,GACvE,OAAO,MAAMC,sBAAsB,OAAO,EACxCC,UAAU,EACVC,KAAK,EACLC,cAAc,EACdC,GAAG,EACHC,gBAAgB,EAChBC,IAAI,EAQL;IACC,MAAMC,yBAAyB;QAC7B,GAAID,KAAKE,IAAI,KAAKC,YAAY;YAAED,MAAMF,KAAKE,IAAI;QAAC,IAAI,CAAC,CAAC;QACtDE,WAAWJ,KAAKI,SAAS;QACzBT,YAAYK,KAAKL,UAAU;IAC7B;IAEA,IAAIU,qBAAqB,MAAMb,UAAU;QACvCG;QACAW,SAASR,IAAIQ,OAAO;QACpBV,OAAOA;QACPW,KAAKd,qBAAqBO;QAC1BQ,OAAO;QACPC,gBAAgBX,IAAIW,cAAc;QAClCC,QAAQ;QACRC,QAAQb,IAAIa,MAAM;QAClBd;QACAC;QACAC;IACF;IAEA,IAAIJ,WAAWiB,KAAK,EAAEpB,WAAWqB,QAAQ;QACvC,KAAK,MAAMC,QAAQnB,WAAWiB,KAAK,CAACpB,SAAS,CAAE;YAC7Ca,qBACE,AAAC,MAAMS,KAAK;gBACVnB;gBACAW,SAASR,IAAIQ,OAAO;gBACpBC,KAAKF;gBACLR;gBACAC;YACF,MAAOO;QACX;IACF;IAEA,OAAO;QACL,GAAGA,kBAAkB;QACrB,GAAGJ,sBAAsB;IAC3B;AACF,EAAC"}

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldAccess } from '../../../fields/config/types.js';
+/** Allows API key creation and updates only for users with admin access. */
+export declare const canCreateOrUpdateAPIKey: FieldAccess;
+//# sourceMappingURL=canCreateOrUpdateAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canCreateOrUpdateAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAKlE,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,EAAE,WAgBrC,CAAA"}

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.js

@@ -0,0 +1,20 @@
+import { UnauthorizedError } from '../../../errors/UnauthorizedError.js';
+import { canAccessAdmin } from '../../../utilities/canAccessAdmin.js';
+/** Allows API key creation and updates only for users with admin access. */ export const canCreateOrUpdateAPIKey = async ({ req })=>{
+    if (!req.user) {
+        return false;
+    }
+    try {
+        await canAccessAdmin({
+            req
+        });
+    } catch (error) {
+        if (error instanceof UnauthorizedError) {
+            return false;
+        }
+        throw error;
+    }
+    return true;
+};
+
+//# sourceMappingURL=canCreateOrUpdateAPIKey.js.map

package/dist/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/canCreateOrUpdateAPIKey.ts"],"sourcesContent":["import type { FieldAccess } from '../../../fields/config/types.js'\n\nimport { UnauthorizedError } from '../../../errors/UnauthorizedError.js'\nimport { canAccessAdmin } from '../../../utilities/canAccessAdmin.js'\n\n/** Allows API key creation and updates only for users with admin access. */\nexport const canCreateOrUpdateAPIKey: FieldAccess = async ({ req }) => {\n  if (!req.user) {\n    return false\n  }\n\n  try {\n    await canAccessAdmin({ req })\n  } catch (error) {\n    if (error instanceof UnauthorizedError) {\n      return false\n    }\n\n    throw error\n  }\n\n  return true\n}\n"],"names":["UnauthorizedError","canAccessAdmin","canCreateOrUpdateAPIKey","req","user","error"],"mappings":"AAEA,SAASA,iBAAiB,QAAQ,uCAAsC;AACxE,SAASC,cAAc,QAAQ,uCAAsC;AAErE,0EAA0E,GAC1E,OAAO,MAAMC,0BAAuC,OAAO,EAAEC,GAAG,EAAE;IAChE,IAAI,CAACA,IAAIC,IAAI,EAAE;QACb,OAAO;IACT;IAEA,IAAI;QACF,MAAMH,eAAe;YAAEE;QAAI;IAC7B,EAAE,OAAOE,OAAO;QACd,IAAIA,iBAAiBL,mBAAmB;YACtC,OAAO;QACT;QAEA,MAAMK;IACR;IAEA,OAAO;AACT,EAAC"}

package/dist/auth/baseFields/apiKey/encryptAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Encrypts API keys before storage. */
+export declare const encryptAPIKey: FieldHook;
+//# sourceMappingURL=encryptAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/encryptAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryptAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/encryptAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,wCAAwC;AACxC,eAAO,MAAM,aAAa,EAAE,SAe3B,CAAA"}

package/dist/auth/baseFields/apiKey/encryptAPIKey.js

@@ -0,0 +1,11 @@
+/** Encrypts API keys before storage. */ export const encryptAPIKey = ({ data, req, value })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof value === 'undefined') {
+        return undefined;
+    }
+    return value ? req.payload.encrypt(value) : null;
+};
+
+//# sourceMappingURL=encryptAPIKey.js.map

package/dist/auth/baseFields/apiKey/encryptAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/encryptAPIKey.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Encrypts API keys before storage. */\nexport const encryptAPIKey: FieldHook = ({ data, req, value }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof value === 'undefined') {\n    return undefined\n  }\n\n  return value ? req.payload.encrypt(value as string) : null\n}\n"],"names":["encryptAPIKey","data","req","value","apiKey","undefined","payload","encrypt"],"mappings":"AAEA,sCAAsC,GACtC,OAAO,MAAMA,gBAA2B,CAAC,EAAEC,IAAI,EAAEC,GAAG,EAAEC,KAAK,EAAE;IAC3D,IACEF,QACA,YAAYA,QACZ,OAAOA,KAAKG,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOH,KAAKG,MAAM,KAAK,YAAYH,KAAKG,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOD,UAAU,aAAa;QAChC,OAAOE;IACT;IAEA,OAAOF,QAAQD,IAAII,OAAO,CAACC,OAAO,CAACJ,SAAmB;AACxD,EAAC"}

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.d.ts

@@ -0,0 +1,3 @@
+/** Returns the minimal recognizable portion of an API key for storage. */
+export declare const getAPIKeyLast4: (value: string) => string;
+//# sourceMappingURL=getAPIKeyLast4.d.ts.map

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAPIKeyLast4.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/getAPIKeyLast4.ts"],"names":[],"mappings":"AAGA,0EAA0E;AAC1E,eAAO,MAAM,cAAc,UAAW,MAAM,KAAG,MACsB,CAAA"}

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.js

@@ -0,0 +1,5 @@
+const minimumSafeKeyLength = 24;
+const maskedLast4 = '••••';
+/** Returns the minimal recognizable portion of an API key for storage. */ export const getAPIKeyLast4 = (value)=>value.length < minimumSafeKeyLength ? maskedLast4 : value.slice(-4);
+
+//# sourceMappingURL=getAPIKeyLast4.js.map

package/dist/auth/baseFields/apiKey/getAPIKeyLast4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/getAPIKeyLast4.ts"],"sourcesContent":["const minimumSafeKeyLength = 24\nconst maskedLast4 = '••••'\n\n/** Returns the minimal recognizable portion of an API key for storage. */\nexport const getAPIKeyLast4 = (value: string): string =>\n  value.length < minimumSafeKeyLength ? maskedLast4 : value.slice(-4)\n"],"names":["minimumSafeKeyLength","maskedLast4","getAPIKeyLast4","value","length","slice"],"mappings":"AAAA,MAAMA,uBAAuB;AAC7B,MAAMC,cAAc;AAEpB,wEAAwE,GACxE,OAAO,MAAMC,iBAAiB,CAACC,QAC7BA,MAAMC,MAAM,GAAGJ,uBAAuBC,cAAcE,MAAME,KAAK,CAAC,CAAC,GAAE"}

package/dist/auth/baseFields/apiKey/omitAPIKey.d.ts

@@ -0,0 +1,5 @@
+import type { BeforeReadHook } from '../../../collections/config/types.js';
+export declare const legacyAPIKeyLast4: string;
+/** Removes API key secrets before any collection read hooks can observe them. */
+export declare const omitAPIKey: BeforeReadHook;
+//# sourceMappingURL=omitAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/omitAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAE1E,eAAO,MAAM,iBAAiB,QAAgB,CAAA;AAE9C,iFAAiF;AACjF,eAAO,MAAM,UAAU,EAAE,cASxB,CAAA"}

package/dist/auth/baseFields/apiKey/omitAPIKey.js

@@ -0,0 +1,11 @@
+export const legacyAPIKeyLast4 = '•'.repeat(4);
+/** Removes API key secrets before any collection read hooks can observe them. */ export const omitAPIKey = ({ doc })=>{
+    if (doc.apiKeyIndex && !doc.apiKeyLast4) {
+        doc.apiKeyLast4 = legacyAPIKeyLast4;
+    }
+    delete doc.apiKey;
+    delete doc.apiKeyIndex;
+    return doc;
+};
+
+//# sourceMappingURL=omitAPIKey.js.map

package/dist/auth/baseFields/apiKey/omitAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitAPIKey.ts"],"sourcesContent":["import type { BeforeReadHook } from '../../../collections/config/types.js'\n\nexport const legacyAPIKeyLast4 = '•'.repeat(4)\n\n/** Removes API key secrets before any collection read hooks can observe them. */\nexport const omitAPIKey: BeforeReadHook = ({ doc }) => {\n  if (doc.apiKeyIndex && !doc.apiKeyLast4) {\n    doc.apiKeyLast4 = legacyAPIKeyLast4\n  }\n\n  delete doc.apiKey\n  delete doc.apiKeyIndex\n\n  return doc\n}\n"],"names":["legacyAPIKeyLast4","repeat","omitAPIKey","doc","apiKeyIndex","apiKeyLast4","apiKey"],"mappings":"AAEA,OAAO,MAAMA,oBAAoB,IAAIC,MAAM,CAAC,GAAE;AAE9C,+EAA+E,GAC/E,OAAO,MAAMC,aAA6B,CAAC,EAAEC,GAAG,EAAE;IAChD,IAAIA,IAAIC,WAAW,IAAI,CAACD,IAAIE,WAAW,EAAE;QACvCF,IAAIE,WAAW,GAAGL;IACpB;IAEA,OAAOG,IAAIG,MAAM;IACjB,OAAOH,IAAIC,WAAW;IAEtB,OAAOD;AACT,EAAC"}

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Keeps the authentication index out of returned documents. */
+export declare const omitAPIKeyIndex: FieldHook;
+//# sourceMappingURL=omitAPIKeyIndex.d.ts.map

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitAPIKeyIndex.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitAPIKeyIndex.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,gEAAgE;AAChE,eAAO,MAAM,eAAe,EAAE,SAE7B,CAAA"}

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.js

@@ -0,0 +1,5 @@
+/** Keeps the authentication index out of returned documents. */ export const omitAPIKeyIndex = ({ siblingData })=>{
+    delete siblingData.apiKeyIndex;
+};
+
+//# sourceMappingURL=omitAPIKeyIndex.js.map

package/dist/auth/baseFields/apiKey/omitAPIKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitAPIKeyIndex.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Keeps the authentication index out of returned documents. */\nexport const omitAPIKeyIndex: FieldHook = ({ siblingData }) => {\n  delete siblingData.apiKeyIndex\n}\n"],"names":["omitAPIKeyIndex","siblingData","apiKeyIndex"],"mappings":"AAEA,8DAA8D,GAC9D,OAAO,MAAMA,kBAA6B,CAAC,EAAEC,WAAW,EAAE;IACxD,OAAOA,YAAYC,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Prevents the encrypted key from surviving field-level reads. */
+export declare const omitEncryptedAPIKey: FieldHook;
+//# sourceMappingURL=omitEncryptedAPIKey.d.ts.map

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitEncryptedAPIKey.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/omitEncryptedAPIKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,mEAAmE;AACnE,eAAO,MAAM,mBAAmB,EAAE,SAEjC,CAAA"}

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.js

@@ -0,0 +1,5 @@
+/** Prevents the encrypted key from surviving field-level reads. */ export const omitEncryptedAPIKey = ({ siblingData })=>{
+    delete siblingData.apiKey;
+};
+
+//# sourceMappingURL=omitEncryptedAPIKey.js.map

package/dist/auth/baseFields/apiKey/omitEncryptedAPIKey.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/omitEncryptedAPIKey.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\n/** Prevents the encrypted key from surviving field-level reads. */\nexport const omitEncryptedAPIKey: FieldHook = ({ siblingData }) => {\n  delete siblingData.apiKey\n}\n"],"names":["omitEncryptedAPIKey","siblingData","apiKey"],"mappings":"AAEA,iEAAiE,GACjE,OAAO,MAAMA,sBAAiC,CAAC,EAAEC,WAAW,EAAE;IAC5D,OAAOA,YAAYC,MAAM;AAC3B,EAAC"}

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Maintains the API key authentication index. */
+export declare const setAPIKeyIndex: FieldHook;
+//# sourceMappingURL=setAPIKeyIndex.d.ts.map

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setAPIKeyIndex.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/setAPIKeyIndex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAEhE,kDAAkD;AAClD,eAAO,MAAM,cAAc,EAAE,SAe5B,CAAA"}

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.js

@@ -0,0 +1,12 @@
+import crypto from 'crypto';
+/** Maintains the API key authentication index. */ export const setAPIKeyIndex = ({ data, req, siblingData })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof data?.apiKey === 'string') {
+        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
+    }
+    delete siblingData.apiKeyIndex;
+};
+
+//# sourceMappingURL=setAPIKeyIndex.js.map

package/dist/auth/baseFields/apiKey/setAPIKeyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/setAPIKeyIndex.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { FieldHook } from '../../../fields/config/types.js'\n\n/** Maintains the API key authentication index. */\nexport const setAPIKeyIndex: FieldHook = ({ data, req, siblingData }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof data?.apiKey === 'string') {\n    return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex')\n  }\n\n  delete siblingData.apiKeyIndex\n}\n"],"names":["crypto","setAPIKeyIndex","data","req","siblingData","apiKey","createHmac","payload","secret","update","digest","apiKeyIndex"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAI3B,gDAAgD,GAChD,OAAO,MAAMC,iBAA4B,CAAC,EAAEC,IAAI,EAAEC,GAAG,EAAEC,WAAW,EAAE;IAClE,IACEF,QACA,YAAYA,QACZ,OAAOA,KAAKG,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOH,KAAKG,MAAM,KAAK,YAAYH,KAAKG,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOH,MAAMG,WAAW,UAAU;QACpC,OAAOL,OAAOM,UAAU,CAAC,UAAUH,IAAII,OAAO,CAACC,MAAM,EAAEC,MAAM,CAACP,KAAKG,MAAM,EAAEK,MAAM,CAAC;IACpF;IAEA,OAAON,YAAYO,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey/setKeyLast4.d.ts

@@ -0,0 +1,4 @@
+import type { FieldHook } from '../../../fields/config/types.js';
+/** Maintains the non-secret API key preview. */
+export declare const setKeyLast4: FieldHook;
+//# sourceMappingURL=setKeyLast4.d.ts.map

package/dist/auth/baseFields/apiKey/setKeyLast4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setKeyLast4.d.ts","sourceRoot":"","sources":["../../../../src/auth/baseFields/apiKey/setKeyLast4.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAA;AAIhE,gDAAgD;AAChD,eAAO,MAAM,WAAW,EAAE,SAezB,CAAA"}

package/dist/auth/baseFields/apiKey/setKeyLast4.js

@@ -0,0 +1,12 @@
+import { getAPIKeyLast4 } from './getAPIKeyLast4.js';
+/** Maintains the non-secret API key preview. */ export const setKeyLast4 = ({ data, siblingData })=>{
+    if (data && 'apiKey' in data && typeof data.apiKey !== 'undefined' && !(typeof data.apiKey === 'string' && data.apiKey)) {
+        return null;
+    }
+    if (typeof data?.apiKey === 'string') {
+        return getAPIKeyLast4(data.apiKey);
+    }
+    delete siblingData.apiKeyLast4;
+};
+
+//# sourceMappingURL=setKeyLast4.js.map

package/dist/auth/baseFields/apiKey/setKeyLast4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/auth/baseFields/apiKey/setKeyLast4.ts"],"sourcesContent":["import type { FieldHook } from '../../../fields/config/types.js'\n\nimport { getAPIKeyLast4 } from './getAPIKeyLast4.js'\n\n/** Maintains the non-secret API key preview. */\nexport const setKeyLast4: FieldHook = ({ data, siblingData }) => {\n  if (\n    data &&\n    'apiKey' in data &&\n    typeof data.apiKey !== 'undefined' &&\n    !(typeof data.apiKey === 'string' && data.apiKey)\n  ) {\n    return null\n  }\n\n  if (typeof data?.apiKey === 'string') {\n    return getAPIKeyLast4(data.apiKey)\n  }\n\n  delete siblingData.apiKeyLast4\n}\n"],"names":["getAPIKeyLast4","setKeyLast4","data","siblingData","apiKey","apiKeyLast4"],"mappings":"AAEA,SAASA,cAAc,QAAQ,sBAAqB;AAEpD,8CAA8C,GAC9C,OAAO,MAAMC,cAAyB,CAAC,EAAEC,IAAI,EAAEC,WAAW,EAAE;IAC1D,IACED,QACA,YAAYA,QACZ,OAAOA,KAAKE,MAAM,KAAK,eACvB,CAAE,CAAA,OAAOF,KAAKE,MAAM,KAAK,YAAYF,KAAKE,MAAM,AAAD,GAC/C;QACA,OAAO;IACT;IAEA,IAAI,OAAOF,MAAME,WAAW,UAAU;QACpC,OAAOJ,eAAeE,KAAKE,MAAM;IACnC;IAEA,OAAOD,YAAYE,WAAW;AAChC,EAAC"}

package/dist/auth/baseFields/apiKey.d.ts

@@ -1,11 +1,11 @@
-import type { CheckboxField, Field, TextField } from '../../fields/config/types.js';
-type APIKeyCheckboxFieldOverride = Omit<Partial<CheckboxField>, 'name' | 'type'>;
+import type { Field, TextField } from '../../fields/config/types.js';
+export { omitAPIKey } from './apiKey/omitAPIKey.js';
 type APIKeyTextFieldOverride = Omit<Partial<TextField>, 'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'>;
-export declare const createAPIKeyFields: ({ apiKeyField, apiKeyIndexField, enableAPIKeyField, includeEnableAPIKey, }?: {
+export declare const createAPIKeyFields: ({ apiKeyField, apiKeyIndexField, apiKeyLast4Field, }?: {
     apiKeyField?: APIKeyTextFieldOverride;
     apiKeyIndexField?: APIKeyTextFieldOverride;
-    enableAPIKeyField?: APIKeyCheckboxFieldOverride;
-    includeEnableAPIKey?: boolean;
+    apiKeyLast4Field?: APIKeyTextFieldOverride;
 }) => Field[];
-export {};
+/** Builds API key fields and safely merges custom overrides. */
+export declare const getAPIKeyFields: (fields: Field[]) => Field[];
 //# sourceMappingURL=apiKey.d.ts.map

package/dist/auth/baseFields/apiKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,KAAK,EAAa,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAO9F,KAAK,2BAA2B,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,CAAA;AAChF,KAAK,uBAAuB,GAAG,IAAI,CACjC,OAAO,CAAC,SAAS,CAAC,EAClB,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CACjE,CAAA;AAED,eAAO,MAAM,kBAAkB,gFAK5B;IACD,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAC1C,iBAAiB,CAAC,EAAE,2BAA2B,CAAA;IAC/C,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B,KAAQ,KAAK,EAwEb,CAAA"}
+{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/apiKey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAUpE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD,KAAK,uBAAuB,GAAG,IAAI,CACjC,OAAO,CAAC,SAAS,CAAC,EAClB,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CACjE,CAAA;AAED,eAAO,MAAM,kBAAkB,0DAI5B;IACD,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;IAC1C,gBAAgB,CAAC,EAAE,uBAAuB,CAAA;CAC3C,KAAQ,KAAK,EAsEb,CAAA;AAED,gEAAgE;AAChE,eAAO,MAAM,eAAe,WAAY,KAAK,EAAE,KAAG,KAAK,EAMtD,CAAA"}

package/dist/auth/baseFields/apiKey.js

@@ -1,70 +1,101 @@
-import crypto from 'crypto';
-const encryptKey = ({ req, value })=>value ? req.payload.encrypt(value) : null;
-const decryptKey = ({ req, value })=>value ? req.payload.decrypt(value) : undefined;
-export const createAPIKeyFields = ({ apiKeyField, apiKeyIndexField, enableAPIKeyField, includeEnableAPIKey = true } = {})=>{
-    const fields = [];
-    if (includeEnableAPIKey) {
-        fields.push({
-            name: 'enableAPIKey',
-            type: 'checkbox',
-            ...enableAPIKeyField,
+import { fieldAffectsData } from '../../fields/config/types.js';
+import { canCreateOrUpdateAPIKey } from './apiKey/canCreateOrUpdateAPIKey.js';
+import { encryptAPIKey } from './apiKey/encryptAPIKey.js';
+import { omitAPIKeyIndex } from './apiKey/omitAPIKeyIndex.js';
+import { omitEncryptedAPIKey } from './apiKey/omitEncryptedAPIKey.js';
+import { setAPIKeyIndex } from './apiKey/setAPIKeyIndex.js';
+import { setKeyLast4 } from './apiKey/setKeyLast4.js';
+export { omitAPIKey } from './apiKey/omitAPIKey.js';
+export const createAPIKeyFields = ({ apiKeyField, apiKeyIndexField, apiKeyLast4Field } = {})=>{
+    const customAccess = apiKeyField?.access;
+    return [
+        {
+            name: 'apiKey',
+            type: 'text',
+            ...apiKeyField,
+            access: {
+                create: canCreateOrUpdateAPIKey,
+                ...apiKeyField?.access,
+                read: ()=>false,
+                update: apiKeyField?.access?.update ?? canCreateOrUpdateAPIKey
+            },
             admin: {
                 components: {
                     Field: false
                 },
-                ...enableAPIKeyField?.admin
+                ...apiKeyField?.admin
             },
-            label: enableAPIKeyField?.label ?? (({ t })=>t('authentication:enableAPIKey'))
-        });
-    }
-    fields.push({
-        name: 'apiKey',
-        type: 'text',
-        ...apiKeyField,
-        admin: {
-            components: {
-                Field: false
+            hooks: {
+                ...apiKeyField?.hooks,
+                afterRead: [
+                    omitEncryptedAPIKey,
+                    ...apiKeyField?.hooks?.afterRead ?? []
+                ],
+                beforeChange: [
+                    encryptAPIKey,
+                    ...apiKeyField?.hooks?.beforeChange ?? []
+                ]
             },
-            ...apiKeyField?.admin
-        },
-        hooks: {
-            afterRead: [
-                decryptKey
-            ],
-            beforeChange: [
-                encryptKey
-            ],
-            ...apiKeyField?.hooks
+            label: apiKeyField?.label ?? (({ t })=>t('authentication:apiKey'))
         },
-        label: apiKeyField?.label ?? (({ t })=>t('authentication:apiKey'))
-    }, {
-        name: 'apiKeyIndex',
-        type: 'text',
-        ...apiKeyIndexField,
-        admin: {
-            disabled: true,
-            ...apiKeyIndexField?.admin
+        {
+            name: 'apiKeyLast4',
+            type: 'text',
+            ...apiKeyLast4Field,
+            access: {
+                ...apiKeyLast4Field?.access,
+                create: customAccess?.create ?? canCreateOrUpdateAPIKey,
+                read: customAccess?.update ?? canCreateOrUpdateAPIKey,
+                update: customAccess?.update ?? canCreateOrUpdateAPIKey
+            },
+            admin: {
+                components: {
+                    Field: false
+                },
+                ...apiKeyLast4Field?.admin
+            },
+            hooks: {
+                ...apiKeyLast4Field?.hooks,
+                beforeValidate: [
+                    setKeyLast4,
+                    ...apiKeyLast4Field?.hooks?.beforeValidate ?? []
+                ]
+            }
         },
-        hidden: apiKeyIndexField?.hidden ?? true,
-        hooks: {
-            beforeValidate: [
-                ({ data, req, value })=>{
-                    if (data?.apiKey === false || data?.apiKey === null || data?.apiKey === '') {
-                        return null;
-                    }
-                    if (includeEnableAPIKey && (data?.enableAPIKey === false || data?.enableAPIKey === null)) {
-                        return null;
-                    }
-                    if (data?.apiKey) {
-                        return crypto.createHmac('sha256', req.payload.secret).update(data.apiKey).digest('hex');
-                    }
-                    return value;
-                }
-            ],
-            ...apiKeyIndexField?.hooks
+        {
+            name: 'apiKeyIndex',
+            type: 'text',
+            ...apiKeyIndexField,
+            access: {
+                ...apiKeyIndexField?.access,
+                create: customAccess?.create ?? canCreateOrUpdateAPIKey,
+                read: ()=>false,
+                update: customAccess?.update ?? canCreateOrUpdateAPIKey
+            },
+            admin: {
+                disabled: true,
+                ...apiKeyIndexField?.admin
+            },
+            hidden: apiKeyIndexField?.hidden ?? true,
+            hooks: {
+                ...apiKeyIndexField?.hooks,
+                afterRead: [
+                    omitAPIKeyIndex,
+                    ...apiKeyIndexField?.hooks?.afterRead ?? []
+                ],
+                beforeValidate: [
+                    setAPIKeyIndex,
+                    ...apiKeyIndexField?.hooks?.beforeValidate ?? []
+                ]
+            }
         }
+    ];
+};
+/** Builds API key fields and safely merges custom overrides. */ export const getAPIKeyFields = (fields)=>{
+    const customAPIKeyField = fields.find((field)=>fieldAffectsData(field) && field.name === 'apiKey' && field.type === 'text');
+    return createAPIKeyFields({
+        apiKeyField: customAPIKeyField
     });
-    return fields;
 };
 
 //# sourceMappingURL=apiKey.js.map

package/dist/auth/baseFields/apiKey.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/auth/baseFields/apiKey.ts"],"sourcesContent":["import crypto from 'crypto'\n\nimport type { CheckboxField, Field, FieldHook, TextField } from '../../fields/config/types.js'\n\nconst encryptKey: FieldHook = ({ req, value }) =>\n  value ? req.payload.encrypt(value as string) : null\nconst decryptKey: FieldHook = ({ req, value }) =>\n  value ? req.payload.decrypt(value as string) : undefined\n\ntype APIKeyCheckboxFieldOverride = Omit<Partial<CheckboxField>, 'name' | 'type'>\ntype APIKeyTextFieldOverride = Omit<\n  Partial<TextField>,\n  'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'\n>\n\nexport const createAPIKeyFields = ({\n  apiKeyField,\n  apiKeyIndexField,\n  enableAPIKeyField,\n  includeEnableAPIKey = true,\n}: {\n  apiKeyField?: APIKeyTextFieldOverride\n  apiKeyIndexField?: APIKeyTextFieldOverride\n  enableAPIKeyField?: APIKeyCheckboxFieldOverride\n  includeEnableAPIKey?: boolean\n} = {}): Field[] => {\n  const fields: Field[] = []\n\n  if (includeEnableAPIKey) {\n    fields.push({\n      name: 'enableAPIKey',\n      type: 'checkbox',\n      ...enableAPIKeyField,\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...enableAPIKeyField?.admin,\n      },\n      label: enableAPIKeyField?.label ?? (({ t }) => t('authentication:enableAPIKey')),\n    })\n  }\n\n  fields.push(\n    {\n      name: 'apiKey',\n      type: 'text',\n      ...apiKeyField,\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...apiKeyField?.admin,\n      },\n      hooks: {\n        afterRead: [decryptKey],\n        beforeChange: [encryptKey],\n        ...apiKeyField?.hooks,\n      },\n      label: apiKeyField?.label ?? (({ t }) => t('authentication:apiKey')),\n    },\n    {\n      name: 'apiKeyIndex',\n      type: 'text',\n      ...apiKeyIndexField,\n      admin: {\n        disabled: true,\n        ...apiKeyIndexField?.admin,\n      },\n      hidden: apiKeyIndexField?.hidden ?? true,\n      hooks: {\n        beforeValidate: [\n          ({ data, req, value }) => {\n            if (data?.apiKey === false || data?.apiKey === null || data?.apiKey === '') {\n              return null\n            }\n            if (\n              includeEnableAPIKey &&\n              (data?.enableAPIKey === false || data?.enableAPIKey === null)\n            ) {\n              return null\n            }\n            if (data?.apiKey) {\n              return crypto\n                .createHmac('sha256', req.payload.secret)\n                .update(data.apiKey as string)\n                .digest('hex')\n            }\n            return value\n          },\n        ],\n        ...apiKeyIndexField?.hooks,\n      },\n    },\n  )\n\n  return fields\n}\n"],"names":["crypto","encryptKey","req","value","payload","encrypt","decryptKey","decrypt","undefined","createAPIKeyFields","apiKeyField","apiKeyIndexField","enableAPIKeyField","includeEnableAPIKey","fields","push","name","type","admin","components","Field","label","t","hooks","afterRead","beforeChange","disabled","hidden","beforeValidate","data","apiKey","enableAPIKey","createHmac","secret","update","digest"],"mappings":"AAAA,OAAOA,YAAY,SAAQ;AAI3B,MAAMC,aAAwB,CAAC,EAAEC,GAAG,EAAEC,KAAK,EAAE,GAC3CA,QAAQD,IAAIE,OAAO,CAACC,OAAO,CAACF,SAAmB;AACjD,MAAMG,aAAwB,CAAC,EAAEJ,GAAG,EAAEC,KAAK,EAAE,GAC3CA,QAAQD,IAAIE,OAAO,CAACG,OAAO,CAACJ,SAAmBK;AAQjD,OAAO,MAAMC,qBAAqB,CAAC,EACjCC,WAAW,EACXC,gBAAgB,EAChBC,iBAAiB,EACjBC,sBAAsB,IAAI,EAM3B,GAAG,CAAC,CAAC;IACJ,MAAMC,SAAkB,EAAE;IAE1B,IAAID,qBAAqB;QACvBC,OAAOC,IAAI,CAAC;YACVC,MAAM;YACNC,MAAM;YACN,GAAGL,iBAAiB;YACpBM,OAAO;gBACLC,YAAY;oBACVC,OAAO;gBACT;gBACA,GAAGR,mBAAmBM,KAAK;YAC7B;YACAG,OAAOT,mBAAmBS,SAAU,CAAA,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE,8BAA6B;QAChF;IACF;IAEAR,OAAOC,IAAI,CACT;QACEC,MAAM;QACNC,MAAM;QACN,GAAGP,WAAW;QACdQ,OAAO;YACLC,YAAY;gBACVC,OAAO;YACT;YACA,GAAGV,aAAaQ,KAAK;QACvB;QACAK,OAAO;YACLC,WAAW;gBAAClB;aAAW;YACvBmB,cAAc;gBAACxB;aAAW;YAC1B,GAAGS,aAAaa,KAAK;QACvB;QACAF,OAAOX,aAAaW,SAAU,CAAA,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE,wBAAuB;IACpE,GACA;QACEN,MAAM;QACNC,MAAM;QACN,GAAGN,gBAAgB;QACnBO,OAAO;YACLQ,UAAU;YACV,GAAGf,kBAAkBO,KAAK;QAC5B;QACAS,QAAQhB,kBAAkBgB,UAAU;QACpCJ,OAAO;YACLK,gBAAgB;gBACd,CAAC,EAAEC,IAAI,EAAE3B,GAAG,EAAEC,KAAK,EAAE;oBACnB,IAAI0B,MAAMC,WAAW,SAASD,MAAMC,WAAW,QAAQD,MAAMC,WAAW,IAAI;wBAC1E,OAAO;oBACT;oBACA,IACEjB,uBACCgB,CAAAA,MAAME,iBAAiB,SAASF,MAAME,iBAAiB,IAAG,GAC3D;wBACA,OAAO;oBACT;oBACA,IAAIF,MAAMC,QAAQ;wBAChB,OAAO9B,OACJgC,UAAU,CAAC,UAAU9B,IAAIE,OAAO,CAAC6B,MAAM,EACvCC,MAAM,CAACL,KAAKC,MAAM,EAClBK,MAAM,CAAC;oBACZ;oBACA,OAAOhC;gBACT;aACD;YACD,GAAGQ,kBAAkBY,KAAK;QAC5B;IACF;IAGF,OAAOT;AACT,EAAC"}
+{"version":3,"sources":["../../../src/auth/baseFields/apiKey.ts"],"sourcesContent":["import type { Field, TextField } from '../../fields/config/types.js'\n\nimport { fieldAffectsData } from '../../fields/config/types.js'\nimport { canCreateOrUpdateAPIKey } from './apiKey/canCreateOrUpdateAPIKey.js'\nimport { encryptAPIKey } from './apiKey/encryptAPIKey.js'\nimport { omitAPIKeyIndex } from './apiKey/omitAPIKeyIndex.js'\nimport { omitEncryptedAPIKey } from './apiKey/omitEncryptedAPIKey.js'\nimport { setAPIKeyIndex } from './apiKey/setAPIKeyIndex.js'\nimport { setKeyLast4 } from './apiKey/setKeyLast4.js'\n\nexport { omitAPIKey } from './apiKey/omitAPIKey.js'\n\ntype APIKeyTextFieldOverride = Omit<\n  Partial<TextField>,\n  'hasMany' | 'maxRows' | 'minRows' | 'name' | 'type' | 'validate'\n>\n\nexport const createAPIKeyFields = ({\n  apiKeyField,\n  apiKeyIndexField,\n  apiKeyLast4Field,\n}: {\n  apiKeyField?: APIKeyTextFieldOverride\n  apiKeyIndexField?: APIKeyTextFieldOverride\n  apiKeyLast4Field?: APIKeyTextFieldOverride\n} = {}): Field[] => {\n  const customAccess = apiKeyField?.access\n\n  return [\n    {\n      name: 'apiKey',\n      type: 'text',\n      ...apiKeyField,\n      access: {\n        create: canCreateOrUpdateAPIKey,\n        ...apiKeyField?.access,\n        read: () => false,\n        update: apiKeyField?.access?.update ?? canCreateOrUpdateAPIKey,\n      },\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...apiKeyField?.admin,\n      },\n      hooks: {\n        ...apiKeyField?.hooks,\n        afterRead: [omitEncryptedAPIKey, ...(apiKeyField?.hooks?.afterRead ?? [])],\n        beforeChange: [encryptAPIKey, ...(apiKeyField?.hooks?.beforeChange ?? [])],\n      },\n      label: apiKeyField?.label ?? (({ t }) => t('authentication:apiKey')),\n    },\n    {\n      name: 'apiKeyLast4',\n      type: 'text',\n      ...apiKeyLast4Field,\n      access: {\n        ...apiKeyLast4Field?.access,\n        create: customAccess?.create ?? canCreateOrUpdateAPIKey,\n        read: customAccess?.update ?? canCreateOrUpdateAPIKey,\n        update: customAccess?.update ?? canCreateOrUpdateAPIKey,\n      },\n      admin: {\n        components: {\n          Field: false,\n        },\n        ...apiKeyLast4Field?.admin,\n      },\n      hooks: {\n        ...apiKeyLast4Field?.hooks,\n        beforeValidate: [setKeyLast4, ...(apiKeyLast4Field?.hooks?.beforeValidate ?? [])],\n      },\n    },\n    {\n      name: 'apiKeyIndex',\n      type: 'text',\n      ...apiKeyIndexField,\n      access: {\n        ...apiKeyIndexField?.access,\n        create: customAccess?.create ?? canCreateOrUpdateAPIKey,\n        read: () => false,\n        update: customAccess?.update ?? canCreateOrUpdateAPIKey,\n      },\n      admin: {\n        disabled: true,\n        ...apiKeyIndexField?.admin,\n      },\n      hidden: apiKeyIndexField?.hidden ?? true,\n      hooks: {\n        ...apiKeyIndexField?.hooks,\n        afterRead: [omitAPIKeyIndex, ...(apiKeyIndexField?.hooks?.afterRead ?? [])],\n        beforeValidate: [setAPIKeyIndex, ...(apiKeyIndexField?.hooks?.beforeValidate ?? [])],\n      },\n    },\n  ]\n}\n\n/** Builds API key fields and safely merges custom overrides. */\nexport const getAPIKeyFields = (fields: Field[]): Field[] => {\n  const customAPIKeyField = fields.find(\n    (field) => fieldAffectsData(field) && field.name === 'apiKey' && field.type === 'text',\n  )\n\n  return createAPIKeyFields({ apiKeyField: customAPIKeyField as TextField | undefined })\n}\n"],"names":["fieldAffectsData","canCreateOrUpdateAPIKey","encryptAPIKey","omitAPIKeyIndex","omitEncryptedAPIKey","setAPIKeyIndex","setKeyLast4","omitAPIKey","createAPIKeyFields","apiKeyField","apiKeyIndexField","apiKeyLast4Field","customAccess","access","name","type","create","read","update","admin","components","Field","hooks","afterRead","beforeChange","label","t","beforeValidate","disabled","hidden","getAPIKeyFields","fields","customAPIKeyField","find","field"],"mappings":"AAEA,SAASA,gBAAgB,QAAQ,+BAA8B;AAC/D,SAASC,uBAAuB,QAAQ,sCAAqC;AAC7E,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,mBAAmB,QAAQ,kCAAiC;AACrE,SAASC,cAAc,QAAQ,6BAA4B;AAC3D,SAASC,WAAW,QAAQ,0BAAyB;AAErD,SAASC,UAAU,QAAQ,yBAAwB;AAOnD,OAAO,MAAMC,qBAAqB,CAAC,EACjCC,WAAW,EACXC,gBAAgB,EAChBC,gBAAgB,EAKjB,GAAG,CAAC,CAAC;IACJ,MAAMC,eAAeH,aAAaI;IAElC,OAAO;QACL;YACEC,MAAM;YACNC,MAAM;YACN,GAAGN,WAAW;YACdI,QAAQ;gBACNG,QAAQf;gBACR,GAAGQ,aAAaI,MAAM;gBACtBI,MAAM,IAAM;gBACZC,QAAQT,aAAaI,QAAQK,UAAUjB;YACzC;YACAkB,OAAO;gBACLC,YAAY;oBACVC,OAAO;gBACT;gBACA,GAAGZ,aAAaU,KAAK;YACvB;YACAG,OAAO;gBACL,GAAGb,aAAaa,KAAK;gBACrBC,WAAW;oBAACnB;uBAAyBK,aAAaa,OAAOC,aAAa,EAAE;iBAAE;gBAC1EC,cAAc;oBAACtB;uBAAmBO,aAAaa,OAAOE,gBAAgB,EAAE;iBAAE;YAC5E;YACAC,OAAOhB,aAAagB,SAAU,CAAA,CAAC,EAAEC,CAAC,EAAE,GAAKA,EAAE,wBAAuB;QACpE;QACA;YACEZ,MAAM;YACNC,MAAM;YACN,GAAGJ,gBAAgB;YACnBE,QAAQ;gBACN,GAAGF,kBAAkBE,MAAM;gBAC3BG,QAAQJ,cAAcI,UAAUf;gBAChCgB,MAAML,cAAcM,UAAUjB;gBAC9BiB,QAAQN,cAAcM,UAAUjB;YAClC;YACAkB,OAAO;gBACLC,YAAY;oBACVC,OAAO;gBACT;gBACA,GAAGV,kBAAkBQ,KAAK;YAC5B;YACAG,OAAO;gBACL,GAAGX,kBAAkBW,KAAK;gBAC1BK,gBAAgB;oBAACrB;uBAAiBK,kBAAkBW,OAAOK,kBAAkB,EAAE;iBAAE;YACnF;QACF;QACA;YACEb,MAAM;YACNC,MAAM;YACN,GAAGL,gBAAgB;YACnBG,QAAQ;gBACN,GAAGH,kBAAkBG,MAAM;gBAC3BG,QAAQJ,cAAcI,UAAUf;gBAChCgB,MAAM,IAAM;gBACZC,QAAQN,cAAcM,UAAUjB;YAClC;YACAkB,OAAO;gBACLS,UAAU;gBACV,GAAGlB,kBAAkBS,KAAK;YAC5B;YACAU,QAAQnB,kBAAkBmB,UAAU;YACpCP,OAAO;gBACL,GAAGZ,kBAAkBY,KAAK;gBAC1BC,WAAW;oBAACpB;uBAAqBO,kBAAkBY,OAAOC,aAAa,EAAE;iBAAE;gBAC3EI,gBAAgB;oBAACtB;uBAAoBK,kBAAkBY,OAAOK,kBAAkB,EAAE;iBAAE;YACtF;QACF;KACD;AACH,EAAC;AAED,8DAA8D,GAC9D,OAAO,MAAMG,kBAAkB,CAACC;IAC9B,MAAMC,oBAAoBD,OAAOE,IAAI,CACnC,CAACC,QAAUlC,iBAAiBkC,UAAUA,MAAMpB,IAAI,KAAK,YAAYoB,MAAMnB,IAAI,KAAK;IAGlF,OAAOP,mBAAmB;QAAEC,aAAauB;IAA2C;AACtF,EAAC"}

package/dist/auth/baseFields/auth.d.ts

@@ -1,3 +1,4 @@
 import type { Field } from '../../fields/config/types.js';
 export declare const baseAuthFields: Field[];
+export declare const resetPasswordRequestedAtField: Field;
 //# sourceMappingURL=auth.d.ts.map

package/dist/auth/baseFields/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzD,eAAO,MAAM,cAAc,EAAE,KAAK,EAqCjC,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/auth/baseFields/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AAEzD,eAAO,MAAM,cAAc,EAAE,KAAK,EAqCjC,CAAA;AAED,eAAO,MAAM,6BAA6B,EAAE,KAQ3C,CAAA"}

package/dist/auth/baseFields/auth.js

@@ -36,5 +36,14 @@ export const baseAuthFields = [
         hidden: true
     }
 ];
+export const resetPasswordRequestedAtField = {
+    name: 'resetPasswordRequestedAt',
+    type: 'date',
+    access: {
+        create: ()=>false,
+        update: ()=>false
+    },
+    hidden: true
+};
 
 //# sourceMappingURL=auth.js.map