@abinnovision/payloadcms-mcpx 2.0.0-beta.13 → 2.0.0-beta.15

package/dist/upload/file.mjs

@@ -1,12 +1,12 @@
+import { grantKvSlug, issueGrant } from "../grants/grant.mjs";
 import { errorResult, jsonResult } from "../result.mjs";
 import { SchemaError } from "../schema/errors.mjs";
 import { resolveDataPointer } from "../schema/pointer.mjs";
 import "../schema/index.mjs";
-import { issueGrant, uploadKvSlug } from "./grant.mjs";
 import { collectPublishBlockers } from "../write/publish-blockers.mjs";
+import { z } from "zod";
 import { APIError } from "payload";
 import { hasDraftValidationEnabled, hasDraftsEnabled, validateMimeType } from "payload/shared";
-import { z } from "zod";
 //#region src/upload/file.ts
 const MAX_BYTES = 26214400;
 const FILENAME = /^[^/\\\p{Cc}]+$/u;
@@ -121,7 +121,7 @@ const handoffUrl = (req, path) => {
 	return url.toString();
 };
 const grantContext = (req) => {
-	const slug = uploadKvSlug(req.payload.config);
+	const slug = grantKvSlug(req.payload.config);
 	const apiKeyId = req.context.mcpx?.apiKeyId;
 	if (slug === void 0 || apiKeyId === void 0) throw new Error("A handoff was offered without a database KV or key.");
 	return {

package/dist/write/draft-guard.mjs

@@ -1,4 +1,4 @@
-import { hasPublishIntent, takePublishIntent } from "./publish-intent.mjs";
+import { hasPublishIntent, hasTrashIntent, takePublishIntent, takeTrashIntent, withTrashIntent } from "./publish-intent.mjs";
 import { isMcpxRequest } from "../request.mjs";
 import { APIError } from "payload";
 import { hasDraftsEnabled } from "payload/shared";
@@ -11,16 +11,17 @@ const STRIPPED_ARGS = /* @__PURE__ */ new Set([
 	"selectedLocales",
 	"overwriteExistingFiles"
 ]);
-const scrubWriteArgs = (args, publishing) => {
+const scrubWriteArgs = (args, intent) => {
+	const publishing = intent === "publish";
 	const next = Object.fromEntries(Object.entries(args).filter(([key]) => !STRIPPED_ARGS.has(key) && (publishing || key !== "publishSpecificLocale")));
 	if (next["data"] && typeof next["data"] === "object") {
-		const { _status: _ignoredStatus, deletedAt: _ignoredDeletedAt, ...data } = next["data"];
+		const { _status: _ignoredStatus, deletedAt, ...data } = next["data"];
 		next["data"] = publishing ? {
 			...data,
 			_status: "published"
-		} : data;
+		} : intent === "trash" ? withTrashIntent({ deletedAt }) : data;
 	}
-	next["draft"] = !publishing;
+	next["draft"] = intent === void 0;
 	next["autosave"] = false;
 	next["overrideLock"] = false;
 	next["trash"] = false;
@@ -29,8 +30,8 @@ const scrubWriteArgs = (args, publishing) => {
 const forceDraftWrite = (hookArgs) => {
 	const { args, operation, req } = hookArgs;
 	if (!isMcpxRequest(req) || operation !== "create" && operation !== "update") return args;
-	const publishing = operation === "update" && hasPublishIntent(args.data);
-	return scrubWriteArgs(args, publishing);
+	const intent = operation !== "update" ? void 0 : hasPublishIntent(args.data) ? "publish" : hasTrashIntent(args.data) ? "trash" : void 0;
+	return scrubWriteArgs(args, intent);
 };
 /**
 * The global counterpart of {@link forceDraftWrite}. `updateGlobal` reads
@@ -46,11 +47,12 @@ const forceDraftWrite = (hookArgs) => {
 		req.payload.logger.warn(`[payloadcms-mcpx] Refused a write to ${global.slug} that did not ask for a draft save.`);
 		throw new APIError("MCP clients may only write drafts. This write was refused because it would not have been saved as one. Use publishDocument to publish.", 403);
 	}
-	return scrubWriteArgs(args, publishing);
+	return scrubWriteArgs(args, publishing ? "publish" : void 0);
 };
 const refuseUnlessExpected = (req, slug, data) => {
 	const publishing = takePublishIntent(data);
-	if (!isMcpxRequest(req)) return;
+	const trashing = takeTrashIntent(data);
+	if (!isMcpxRequest(req) || trashing) return;
 	const status = data._status;
 	const expected = publishing ? "published" : "draft";
 	if (status === expected) return;

package/dist/write/publish-intent.mjs

@@ -2,7 +2,13 @@ import { isPlainObject } from "../guards.mjs";
 import { randomUUID } from "node:crypto";
 //#region src/write/publish-intent.ts
 const PUBLISH_INTENT = "__mcpxPublishIntent";
+const TRASH_INTENT = "__mcpxTrashIntent";
 const TOKEN = randomUUID();
+const take = (data, key) => {
+	if (!isPlainObject(data) || data[key] !== TOKEN) return false;
+	delete data[key];
+	return true;
+};
 const withPublishIntent = (data) => ({
 	...data,
 	[PUBLISH_INTENT]: TOKEN
@@ -10,10 +16,14 @@ const withPublishIntent = (data) => ({
 const hasPublishIntent = (data) => isPlainObject(data) && data[PUBLISH_INTENT] === TOKEN;
 /**
 * Called by the last hook that needs the marker, which removes it.
-*/ const takePublishIntent = (data) => {
-	if (!hasPublishIntent(data)) return false;
-	delete data[PUBLISH_INTENT];
-	return true;
-};
+*/ const takePublishIntent = (data) => take(data, PUBLISH_INTENT);
+const withTrashIntent = (data) => ({
+	...data,
+	[TRASH_INTENT]: TOKEN
+});
+const hasTrashIntent = (data) => isPlainObject(data) && data[TRASH_INTENT] === TOKEN;
+/**
+* The counterpart of {@link takePublishIntent}.
+*/ const takeTrashIntent = (data) => take(data, TRASH_INTENT);
 //#endregion
-export { hasPublishIntent, takePublishIntent, withPublishIntent };
+export { hasPublishIntent, hasTrashIntent, takePublishIntent, takeTrashIntent, withPublishIntent, withTrashIntent };

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@abinnovision/payloadcms-mcpx",
-  "version": "2.0.0-beta.13",
+  "version": "2.0.0-beta.15",
   "description": "Payload CMS plugin exposing a fixed, schema-aware MCP tool surface with draft-only writes and per-API-key capabilities.",
   "keywords": [
     "payload",