@abinnovision/payloadcms-mcpx 2.0.0-beta.12 → 2.0.0-beta.13

package/dist/upload/file.mjs

@@ -1,4 +1,7 @@
 import { errorResult, jsonResult } from "../result.mjs";
+import { SchemaError } from "../schema/errors.mjs";
+import { resolveDataPointer } from "../schema/pointer.mjs";
+import "../schema/index.mjs";
 import { issueGrant, uploadKvSlug } from "./grant.mjs";
 import { collectPublishBlockers } from "../write/publish-blockers.mjs";
 import { APIError } from "payload";
@@ -77,22 +80,38 @@ const sharesPublishedFile = async (req, entity, id) => {
 	})]);
 	return latest?.["_status"] === "draft" && published?.["_status"] === "published" && latest["filename"] === published["filename"];
 };
+const isClientWritable = (scope, target, path) => {
+	try {
+		const resolution = resolveDataPointer(scope.req.payload.config, {
+			ref: target.entity,
+			doc: target.data,
+			pointer: path
+		});
+		return resolution.readOnly !== true && resolution.descriptor?.readOnly !== true;
+	} catch (error) {
+		if (error instanceof SchemaError) return false;
+		throw error;
+	}
+};
 /**
 * Refuses a file write Payload would turn into data loss: a replace that
 * deletes the published file, or a write that fails validation after the old
 * file is gone. Payload validates only after it moves files, so the merged
-* data is validated here first wherever Payload will validate it.
+* data is validated here first wherever Payload will validate it, keeping only
+* failures the client can fix. Once the bytes are attached, Payload validates
+* with every hook and the file.
 */ const fileWriteRefusal = async (scope, target) => {
 	const { entity, id } = target;
 	if (id !== void 0 && await sharesPublishedFile(scope.req, entity, id)) return errorResult("The file was not replaced: the latest draft still uses the published file, which the replace would delete. Publish or discard the draft first.");
-	if (hasDraftsEnabled(entity.config) && !hasDraftValidationEnabled(entity.config)) return;
-	const { blockers } = await collectPublishBlockers(scope.req, {
+	if (uploadedFile(scope.req) !== void 0 || hasDraftsEnabled(entity.config) && !hasDraftValidationEnabled(entity.config)) return;
+	const { blockers: found } = await collectPublishBlockers(scope.req, {
 		doc: {
 			...target.data,
 			...id === void 0 ? {} : { id }
 		},
 		entity
 	});
+	const blockers = found.filter((blocker) => isClientWritable(scope, target, blocker.path));
 	return blockers.length === 0 ? void 0 : errorResult("Nothing was written: the document fails validation.", { validationErrors: blockers });
 };
 const handoffUrl = (req, path) => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@abinnovision/payloadcms-mcpx",
-  "version": "2.0.0-beta.12",
+  "version": "2.0.0-beta.13",
   "description": "Payload CMS plugin exposing a fixed, schema-aware MCP tool surface with draft-only writes and per-API-key capabilities.",
   "keywords": [
     "payload",