@forumone/throughline-forms 0.0.1 → 0.2.1

package/dist/templates/index.js

@@ -0,0 +1,4 @@
+export { FormsLayout } from './_layout.js';
+export { FormSubmissionEmail } from './FormSubmission.js';
+export { SubmitterConfirmationEmail } from './SubmitterConfirmation.js';
+//# sourceMappingURL=index.js.map

package/dist/templates/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/templates/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAG1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAGzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAA"}

package/dist/tools/_field-schema.d.ts

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+declare const FIELD_BLOCK_TYPES: readonly ["text", "textarea", "email", "select", "checkbox", "number"];
+export type FormFieldBlockType = (typeof FIELD_BLOCK_TYPES)[number];
+export declare const FieldSchema: z.ZodObject<{
+    blockType: z.ZodEnum<["text", "textarea", "email", "select", "checkbox", "number"]>;
+    /**
+     * Snake-case identifier. Form Builder's submission rows key on this, so
+     * dashes / spaces / unicode would break downstream queries.
+     */
+    name: z.ZodString;
+    /** Visible label. Required — accessibility. */
+    label: z.ZodString;
+    required: z.ZodDefault<z.ZodBoolean>;
+    defaultValue: z.ZodOptional<z.ZodString>;
+    options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        value: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        label: string;
+        value: string;
+    }, {
+        label: string;
+        value: string;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    label: string;
+    name: string;
+    required: boolean;
+    blockType: "number" | "email" | "checkbox" | "select" | "textarea" | "text";
+    defaultValue?: string | undefined;
+    options?: {
+        label: string;
+        value: string;
+    }[] | undefined;
+}, {
+    label: string;
+    name: string;
+    blockType: "number" | "email" | "checkbox" | "select" | "textarea" | "text";
+    defaultValue?: string | undefined;
+    required?: boolean | undefined;
+    options?: {
+        label: string;
+        value: string;
+    }[] | undefined;
+}>;
+export type FieldDefinition = z.infer<typeof FieldSchema>;
+/**
+ * Hard validation that runs after Zod has parsed the input. Catches the
+ * cross-field rules that don't fit cleanly in a per-field schema:
+ *  - select fields must carry options
+ *  - submitterConfirmation must reference an actual email-typed field
+ */
+export declare function validateFieldSet(fields: FieldDefinition[]): {
+    ok: boolean;
+    reason?: string;
+};
+export interface SubmitterConfirmationConfig {
+    enabled: boolean;
+    emailFieldName?: string | undefined;
+    subject?: string | undefined;
+    body?: string | undefined;
+}
+export declare function validateSubmitterConfirmation(config: SubmitterConfirmationConfig | undefined, fields: FieldDefinition[]): {
+    ok: boolean;
+    reason?: string;
+};
+export {};
+//# sourceMappingURL=_field-schema.d.ts.map

package/dist/tools/_field-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_field-schema.d.ts","sourceRoot":"","sources":["../../src/tools/_field-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,QAAA,MAAM,iBAAiB,wEAAyE,CAAA;AAEhG,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEnE,eAAO,MAAM,WAAW;;IAEtB;;;OAGG;;IAEH,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ/C,CAAA;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AAEzD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAY5F;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1B;AAED,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,2BAA2B,GAAG,SAAS,EAC/C,MAAM,EAAE,eAAe,EAAE,GACxB;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAsBlC"}

package/dist/tools/_field-schema.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+const FIELD_BLOCK_TYPES = ['text', 'textarea', 'email', 'select', 'checkbox', 'number'];
+export const FieldSchema = z.object({
+    blockType: z.enum(FIELD_BLOCK_TYPES),
+    /**
+     * Snake-case identifier. Form Builder's submission rows key on this, so
+     * dashes / spaces / unicode would break downstream queries.
+     */
+    name: z.string().regex(/^[a-z][a-z0-9_]*$/, 'Field names must be snake_case (a-z, 0-9, _)'),
+    /** Visible label. Required — accessibility. */
+    label: z.string().min(1, 'Field labels are required for accessibility'),
+    required: z.boolean().default(false),
+    defaultValue: z.string().optional(),
+    options: z
+        .array(z.object({ label: z.string(), value: z.string() }))
+        .optional()
+        .describe('Required for select fields; ignored otherwise'),
+});
+/**
+ * Hard validation that runs after Zod has parsed the input. Catches the
+ * cross-field rules that don't fit cleanly in a per-field schema:
+ *  - select fields must carry options
+ *  - submitterConfirmation must reference an actual email-typed field
+ */
+export function validateFieldSet(fields) {
+    const seen = new Set();
+    for (const field of fields) {
+        if (seen.has(field.name)) {
+            return { ok: false, reason: `Duplicate field name "${field.name}".` };
+        }
+        seen.add(field.name);
+        if (field.blockType === 'select' && (!field.options || field.options.length === 0)) {
+            return { ok: false, reason: `Select field "${field.name}" requires at least one option.` };
+        }
+    }
+    return { ok: true };
+}
+export function validateSubmitterConfirmation(config, fields) {
+    if (!config?.enabled)
+        return { ok: true };
+    if (!config.emailFieldName) {
+        return {
+            ok: false,
+            reason: 'submitterConfirmation.emailFieldName is required when confirmation is enabled.',
+        };
+    }
+    const field = fields.find((f) => f.name === config.emailFieldName);
+    if (!field) {
+        return {
+            ok: false,
+            reason: `submitterConfirmation.emailFieldName references "${config.emailFieldName}", which is not in the form's fields.`,
+        };
+    }
+    if (field.blockType !== 'email') {
+        return {
+            ok: false,
+            reason: `submitterConfirmation.emailFieldName must point to a field with blockType="email"; "${field.name}" is "${field.blockType}".`,
+        };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=_field-schema.js.map

package/dist/tools/_field-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_field-schema.js","sourceRoot":"","sources":["../../src/tools/_field-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAA;AAIhG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IACpC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,EAAE,8CAA8C,CAAC;IAC3F,+CAA+C;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6CAA6C,CAAC;IACvE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACzD,QAAQ,EAAE;SACV,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,CAAC,CAAA;AAIF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,KAAK,CAAC,IAAI,IAAI,EAAE,CAAA;QACvE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACpB,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,IAAI,iCAAiC,EAAE,CAAA;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC;AASD,MAAM,UAAU,6BAA6B,CAC3C,MAA+C,EAC/C,MAAyB;IAEzB,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gFAAgF;SACzF,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,cAAc,CAAC,CAAA;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oDAAoD,MAAM,CAAC,cAAc,uCAAuC;SACzH,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,uFAAuF,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,SAAS,IAAI;SACtI,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC"}

package/dist/tools/access.d.ts

@@ -0,0 +1,7 @@
+import type { McpToolContext } from '@forumone/throughline-plugin-contract';
+export declare function isFormsAuthor(ctx: McpToolContext): boolean;
+export declare function isPiiReader(ctx: McpToolContext): boolean;
+export declare function deniedEnvelope(reason: string): {
+    error: string;
+};
+//# sourceMappingURL=access.d.ts.map

package/dist/tools/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/tools/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAE3E,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAI1D;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAIxD;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAEhE"}

package/dist/tools/access.js

@@ -0,0 +1,16 @@
+export function isFormsAuthor(ctx) {
+    if (!ctx.user)
+        return false;
+    const roles = ctx.user.roles;
+    return roles.includes('admin') || roles.includes('editor');
+}
+export function isPiiReader(ctx) {
+    if (!ctx.user)
+        return false;
+    const roles = ctx.user.roles;
+    return roles.includes('admin') || roles.includes('form-admin');
+}
+export function deniedEnvelope(reason) {
+    return { error: reason };
+}
+//# sourceMappingURL=access.js.map

package/dist/tools/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/tools/access.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,GAAmB;IAC/C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAA;IAC5B,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAmB;IAC7C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAA;IAC5B,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;AAChE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AAC1B,CAAC"}

package/dist/tools/create-form.d.ts

@@ -0,0 +1,138 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '@forumone/throughline-plugin-contract';
+import type { ResolvedFormsConfig } from '../options.js';
+declare const inputSchema: z.ZodObject<{
+    title: z.ZodString;
+    intent: z.ZodString;
+    fields: z.ZodArray<z.ZodObject<{
+        blockType: z.ZodEnum<["text", "textarea", "email", "select", "checkbox", "number"]>;
+        name: z.ZodString;
+        label: z.ZodString;
+        required: z.ZodDefault<z.ZodBoolean>;
+        defaultValue: z.ZodOptional<z.ZodString>;
+        options: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            label: z.ZodString;
+            value: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            label: string;
+            value: string;
+        }, {
+            label: string;
+            value: string;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        label: string;
+        name: string;
+        required: boolean;
+        blockType: "number" | "email" | "checkbox" | "select" | "textarea" | "text";
+        defaultValue?: string | undefined;
+        options?: {
+            label: string;
+            value: string;
+        }[] | undefined;
+    }, {
+        label: string;
+        name: string;
+        blockType: "number" | "email" | "checkbox" | "select" | "textarea" | "text";
+        defaultValue?: string | undefined;
+        required?: boolean | undefined;
+        options?: {
+            label: string;
+            value: string;
+        }[] | undefined;
+    }>, "many">;
+    destinationLabels: z.ZodArray<z.ZodString, "many">;
+    submitterConfirmation: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodBoolean;
+        emailFieldName: z.ZodOptional<z.ZodString>;
+        subject: z.ZodOptional<z.ZodString>;
+        body: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        emailFieldName?: string | undefined;
+        subject?: string | undefined;
+        body?: string | undefined;
+    }, {
+        enabled: boolean;
+        emailFieldName?: string | undefined;
+        subject?: string | undefined;
+        body?: string | undefined;
+    }>>;
+    privacyNoticeOverride: z.ZodOptional<z.ZodString>;
+} & {
+    _meta: z.ZodOptional<z.ZodObject<{
+        userPrompt: z.ZodOptional<z.ZodString>;
+        reasoning: z.ZodOptional<z.ZodString>;
+        changesSummary: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    fields: {
+        label: string;
+        name: string;
+        required: boolean;
+        blockType: "number" | "email" | "checkbox" | "select" | "textarea" | "text";
+        defaultValue?: string | undefined;
+        options?: {
+            label: string;
+            value: string;
+        }[] | undefined;
+    }[];
+    title: string;
+    intent: string;
+    destinationLabels: string[];
+    submitterConfirmation?: {
+        enabled: boolean;
+        emailFieldName?: string | undefined;
+        subject?: string | undefined;
+        body?: string | undefined;
+    } | undefined;
+    privacyNoticeOverride?: string | undefined;
+    _meta?: {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    } | undefined;
+}, {
+    fields: {
+        label: string;
+        name: string;
+        blockType: "number" | "email" | "checkbox" | "select" | "textarea" | "text";
+        defaultValue?: string | undefined;
+        required?: boolean | undefined;
+        options?: {
+            label: string;
+            value: string;
+        }[] | undefined;
+    }[];
+    title: string;
+    intent: string;
+    destinationLabels: string[];
+    submitterConfirmation?: {
+        enabled: boolean;
+        emailFieldName?: string | undefined;
+        subject?: string | undefined;
+        body?: string | undefined;
+    } | undefined;
+    privacyNoticeOverride?: string | undefined;
+    _meta?: {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    } | undefined;
+}>;
+export interface CreateFormDeps {
+    payload: Payload;
+    resolved: ResolvedFormsConfig;
+}
+export declare function createCreateFormTool(deps: CreateFormDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=create-form.d.ts.map

package/dist/tools/create-form.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-form.d.ts","sourceRoot":"","sources":["../../src/tools/create-form.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAE9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AASxD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgCe,CAAC;sBAEV,CAAC;kBAEF,CAAC;;iBAAgD,CAAC;sBAA4C,CAAC;kBAAwC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAb5J,CAAA;AAEF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,mBAAmB,CAAA;CAC9B;AAED,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,cAAc,GACnB,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAyEvC"}

package/dist/tools/create-form.js

@@ -0,0 +1,96 @@
+import { z } from 'zod';
+import { withMeta, getAuditWriter } from '@forumone/throughline-core';
+import { validateDestinationLabel } from '../destinations.js';
+import { FieldSchema, validateFieldSet, validateSubmitterConfirmation, } from './_field-schema.js';
+import { deniedEnvelope, isFormsAuthor } from './access.js';
+const inputSchema = withMeta({
+    title: z.string().min(1),
+    intent: z
+        .string()
+        .min(10)
+        .describe('Plain-language description of what this form is for. Surfaces in audit + admin.'),
+    fields: z.array(FieldSchema).min(1),
+    destinationLabels: z
+        .array(z.string())
+        .min(1)
+        .describe('Pre-authorized destination labels. Use list_allowed_destinations first.'),
+    submitterConfirmation: z
+        .object({
+        enabled: z.boolean(),
+        emailFieldName: z.string().optional(),
+        subject: z.string().optional(),
+        body: z.string().optional(),
+    })
+        .optional(),
+    privacyNoticeOverride: z
+        .string()
+        .optional()
+        .describe('Override the plugin-default privacy notice for this form only.'),
+});
+export function createCreateFormTool(deps) {
+    return {
+        name: 'create_form',
+        description: "Creates a form with privacy notice, consent checkbox, and honeypot enabled by default. Destinations must be selected from the allowlist (call list_allowed_destinations first). Field names must be snake_case; every field needs a label (accessibility); submitterConfirmation, if enabled, must point to an existing email-typed field on the form.",
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!isFormsAuthor(ctx)) {
+                return deniedEnvelope('Only admins and editors can create forms.');
+            }
+            for (const label of input.destinationLabels) {
+                const check = validateDestinationLabel(deps.resolved.options, label);
+                if (!check.ok)
+                    return deniedEnvelope(check.reason ?? 'Destination not on the allowlist.');
+            }
+            const fieldCheck = validateFieldSet(input.fields);
+            if (!fieldCheck.ok)
+                return deniedEnvelope(fieldCheck.reason);
+            const confirmationCheck = validateSubmitterConfirmation(input.submitterConfirmation, input.fields);
+            if (!confirmationCheck.ok)
+                return deniedEnvelope(confirmationCheck.reason);
+            const policy = {
+                privacyNoticeText: input.privacyNoticeOverride ?? deps.resolved.defaultPrivacyNotice,
+                requiresExplicitConsent: deps.resolved.requireConsentByDefault,
+                consentLabel: 'I agree to the processing of my data as described above.',
+                spamProtection: { honeypot: true, rateLimit: deps.resolved.rateLimit },
+                destinations: input.destinationLabels.map((label) => ({ label, enabled: true })),
+                submitterConfirmation: input.submitterConfirmation ?? { enabled: false },
+            };
+            const created = (await deps.payload.create({
+                collection: deps.resolved.formsCollectionSlug,
+                data: {
+                    title: input.title,
+                    fields: input.fields,
+                    policy,
+                },
+            }));
+            const auditWriter = getAuditWriter(deps.payload);
+            await auditWriter({
+                actor: {
+                    type: 'user',
+                    ...(ctx.user?.id ? { userId: ctx.user.id } : {}),
+                    ...(ctx.user?.name ? { userName: ctx.user.name } : {}),
+                    ...(ctx.apiKeyName ? { apiKeyName: ctx.apiKeyName } : {}),
+                },
+                action: 'form.created',
+                mcpServer: 'forms',
+                mcpTool: 'create_form',
+                targetCollection: deps.resolved.formsCollectionSlug,
+                targetId: String(created['id']),
+                targetTitle: input.title,
+                ...(input._meta?.userPrompt ? { prompt: input._meta.userPrompt } : {}),
+                ...(input._meta?.reasoning ? { reasoning: input._meta.reasoning } : {}),
+                changesSummary: `Created form "${input.title}" with ${input.fields.length} fields, destinations: ${input.destinationLabels.join(', ')}.`,
+            });
+            return {
+                formId: String(created['id']),
+                title: input.title,
+                destinations: input.destinationLabels,
+                privacyNotice: 'enabled',
+                consent: deps.resolved.requireConsentByDefault,
+                honeypot: true,
+                submitterConfirmation: input.submitterConfirmation?.enabled ?? false,
+            };
+        },
+    };
+}
+//# sourceMappingURL=create-form.js.map

package/dist/tools/create-form.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-form.js","sourceRoot":"","sources":["../../src/tools/create-form.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAErE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3D,MAAM,WAAW,GAAG,QAAQ,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,CAAC,iFAAiF,CAAC;IAC9F,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,yEAAyE,CAAC;IACtF,qBAAqB,EAAE,CAAC;SACrB,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;QACpB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC;SACD,QAAQ,EAAE;IACb,qBAAqB,EAAE,CAAC;SACrB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,gEAAgE,CAAC;CAC9E,CAAC,CAAA;AAOF,MAAM,UAAU,oBAAoB,CAClC,IAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,wVAAwV;QAC1V,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,cAAc,CAAC,2CAA2C,CAAC,CAAA;YACpE,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBACpE,IAAI,CAAC,KAAK,CAAC,EAAE;oBAAE,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,IAAI,mCAAmC,CAAC,CAAA;YAC3F,CAAC;YAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACjD,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,OAAO,cAAc,CAAC,UAAU,CAAC,MAAO,CAAC,CAAA;YAE7D,MAAM,iBAAiB,GAAG,6BAA6B,CACrD,KAAK,CAAC,qBAAqB,EAC3B,KAAK,CAAC,MAAM,CACb,CAAA;YACD,IAAI,CAAC,iBAAiB,CAAC,EAAE;gBAAE,OAAO,cAAc,CAAC,iBAAiB,CAAC,MAAO,CAAC,CAAA;YAE3E,MAAM,MAAM,GAA4B;gBACtC,iBAAiB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB;gBACpF,uBAAuB,EAAE,IAAI,CAAC,QAAQ,CAAC,uBAAuB;gBAC9D,YAAY,EAAE,0DAA0D;gBACxE,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE;gBACtE,YAAY,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChF,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;aACzE,CAAA;YAED,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;gBAC7C,IAAI,EAAE;oBACJ,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM;iBACP;aACF,CAAC,CAA4B,CAAA;YAE9B,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAChD,MAAM,WAAW,CAAC;gBAChB,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1D;gBACD,MAAM,EAAE,cAAc;gBACtB,SAAS,EAAE,OAAO;gBAClB,OAAO,EAAE,aAAa;gBACtB,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;gBACnD,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/B,WAAW,EAAE,KAAK,CAAC,KAAK;gBACxB,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,cAAc,EAAE,iBAAiB,KAAK,CAAC,KAAK,UAAU,KAAK,CAAC,MAAM,CAAC,MAAM,0BAA0B,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACzI,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC7B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,iBAAiB;gBACrC,aAAa,EAAE,SAAS;gBACxB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,uBAAuB;gBAC9C,QAAQ,EAAE,IAAI;gBACd,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,OAAO,IAAI,KAAK;aACrE,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tools/get-form-submissions.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '@forumone/throughline-plugin-contract';
+import type { ResolvedFormsConfig } from '../options.js';
+declare const inputSchema: z.ZodObject<{
+    formId: z.ZodString;
+    limit: z.ZodOptional<z.ZodNumber>;
+    since: z.ZodOptional<z.ZodString>;
+    includePii: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    formId: string;
+    limit?: number | undefined;
+    since?: string | undefined;
+    includePii?: boolean | undefined;
+}, {
+    formId: string;
+    limit?: number | undefined;
+    since?: string | undefined;
+    includePii?: boolean | undefined;
+}>;
+export interface GetFormSubmissionsDeps {
+    payload: Payload;
+    resolved: ResolvedFormsConfig;
+}
+export declare function createGetFormSubmissionsTool(deps: GetFormSubmissionsDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=get-form-submissions.d.ts.map

package/dist/tools/get-form-submissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-form-submissions.d.ts","sourceRoot":"","sources":["../../src/tools/get-form-submissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAS,MAAM,SAAS,CAAA;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAGxD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;EAQf,CAAA;AAEF,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,mBAAmB,CAAA;CAC9B;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,sBAAsB,GAC3B,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAuCvC"}

package/dist/tools/get-form-submissions.js

@@ -0,0 +1,47 @@
+import { z } from 'zod';
+import { deniedEnvelope, isFormsAuthor, isPiiReader } from './access.js';
+const inputSchema = z.object({
+    formId: z.string(),
+    limit: z.number().int().positive().max(100).optional(),
+    since: z.string().datetime().optional().describe('ISO-8601 lower bound on createdAt.'),
+    includePii: z
+        .boolean()
+        .optional()
+        .describe('When true, returns the raw submission data. Requires admin or form-admin role.'),
+});
+export function createGetFormSubmissionsTool(deps) {
+    return {
+        name: 'get_form_submissions',
+        description: "Lists submissions for a form. Defaults to redacted output (counts + timestamps). Set includePii=true to read submission data; that requires admin or form-admin role.",
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!isFormsAuthor(ctx)) {
+                return deniedEnvelope('Only admins and editors can view submission counts.');
+            }
+            if (input.includePii === true && !isPiiReader(ctx)) {
+                return deniedEnvelope('Reading raw submission data requires admin or form-admin role; you have neither.');
+            }
+            const conditions = [{ form: { equals: input.formId } }];
+            if (input.since)
+                conditions.push({ createdAt: { greater_than_equal: input.since } });
+            const result = await deps.payload.find({
+                collection: deps.resolved.submissionsCollectionSlug,
+                where: { and: conditions },
+                sort: '-createdAt',
+                limit: input.limit ?? 20,
+            });
+            return {
+                formId: input.formId,
+                total: result.totalDocs,
+                returned: result.docs.length,
+                submissions: result.docs.map((doc) => ({
+                    id: String(doc['id']),
+                    receivedAt: typeof doc['createdAt'] === 'string' ? doc['createdAt'] : null,
+                    consentGivenAt: typeof doc['consentGivenAt'] === 'string' ? doc['consentGivenAt'] : null,
+                    data: input.includePii ? (doc['submissionData'] ?? null) : '[redacted — set includePii=true]',
+                })),
+            };
+        },
+    };
+}
+//# sourceMappingURL=get-form-submissions.js.map

package/dist/tools/get-form-submissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-form-submissions.js","sourceRoot":"","sources":["../../src/tools/get-form-submissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAIvB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAExE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACtF,UAAU,EAAE,CAAC;SACV,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,gFAAgF,CAAC;CAC9F,CAAC,CAAA;AAOF,MAAM,UAAU,4BAA4B,CAC1C,IAA4B;IAE5B,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,uKAAuK;QACzK,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,cAAc,CAAC,qDAAqD,CAAC,CAAA;YAC9E,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,cAAc,CACnB,kFAAkF,CACnF,CAAA;YACH,CAAC;YAED,MAAM,UAAU,GAAY,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YAChE,IAAI,KAAK,CAAC,KAAK;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;YAEpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,yBAAyB;gBACnD,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;gBAC1B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;aACzB,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBAC5B,WAAW,EAAG,MAAM,CAAC,IAAuC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACzE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACrB,UAAU,EAAE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC1E,cAAc,EAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;oBACxF,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,kCAAkC;iBAC9F,CAAC,CAAC;aACJ,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,14 @@
+export { createCreateFormTool } from './create-form.js';
+export type { CreateFormDeps } from './create-form.js';
+export { createUpdateFormFieldsTool } from './update-form-fields.js';
+export type { UpdateFormFieldsDeps } from './update-form-fields.js';
+export { createUpdateFormDestinationsTool } from './update-form-destinations.js';
+export type { UpdateFormDestinationsDeps } from './update-form-destinations.js';
+export { createGetFormSubmissionsTool } from './get-form-submissions.js';
+export type { GetFormSubmissionsDeps } from './get-form-submissions.js';
+export { createValidateFormTool } from './validate-form.js';
+export type { ValidateFormDeps } from './validate-form.js';
+export { createListAllowedDestinationsTool } from './list-allowed-destinations.js';
+export type { ListAllowedDestinationsDeps } from './list-allowed-destinations.js';
+export { isFormsAuthor, isPiiReader } from './access.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAA;AAChF,YAAY,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAA;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAA;AACxE,YAAY,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAA;AAClF,YAAY,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAA;AACjF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA"}

package/dist/tools/index.js

@@ -0,0 +1,8 @@
+export { createCreateFormTool } from './create-form.js';
+export { createUpdateFormFieldsTool } from './update-form-fields.js';
+export { createUpdateFormDestinationsTool } from './update-form-destinations.js';
+export { createGetFormSubmissionsTool } from './get-form-submissions.js';
+export { createValidateFormTool } from './validate-form.js';
+export { createListAllowedDestinationsTool } from './list-allowed-destinations.js';
+export { isFormsAuthor, isPiiReader } from './access.js';
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAEpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,+BAA+B,CAAA;AAEhF,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAA;AAExE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,OAAO,EAAE,iCAAiC,EAAE,MAAM,gCAAgC,CAAA;AAElF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA"}

package/dist/tools/list-allowed-destinations.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import type { McpToolDefinition } from '@forumone/throughline-plugin-contract';
+import type { FormsPluginOptions } from '../options.js';
+declare const inputSchema: z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>;
+export interface ListAllowedDestinationsDeps {
+    options: FormsPluginOptions;
+}
+export declare function createListAllowedDestinationsTool(deps: ListAllowedDestinationsDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=list-allowed-destinations.d.ts.map

package/dist/tools/list-allowed-destinations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-allowed-destinations.d.ts","sourceRoot":"","sources":["../../src/tools/list-allowed-destinations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAEvD,QAAA,MAAM,WAAW,iDAAwB,CAAA;AAEzC,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,kBAAkB,CAAA;CAC5B;AAED,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,2BAA2B,GAChC,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAUvC"}

package/dist/tools/list-allowed-destinations.js

@@ -0,0 +1,14 @@
+import { z } from 'zod';
+import { listDestinations } from '../destinations.js';
+const inputSchema = z.object({}).strict();
+export function createListAllowedDestinationsTool(deps) {
+    return {
+        name: 'list_allowed_destinations',
+        description: 'Returns the labels of destinations forms can route submissions to in this deployment. Use this before create_form / update_form_destinations to discover what is allowed. Adding a new destination requires editing the plugin config and redeploying — that friction is the security model.',
+        inputSchema,
+        handler: async () => {
+            return { destinations: listDestinations(deps.options) };
+        },
+    };
+}
+//# sourceMappingURL=list-allowed-destinations.js.map

package/dist/tools/list-allowed-destinations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-allowed-destinations.js","sourceRoot":"","sources":["../../src/tools/list-allowed-destinations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAGrD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AAMzC,MAAM,UAAU,iCAAiC,CAC/C,IAAiC;IAEjC,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,WAAW,EACT,8RAA8R;QAChS,WAAW;QACX,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;QACzD,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tools/update-form-destinations.d.ts

@@ -0,0 +1,45 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '@forumone/throughline-plugin-contract';
+import type { ResolvedFormsConfig } from '../options.js';
+declare const inputSchema: z.ZodObject<{
+    formId: z.ZodString;
+    destinationLabels: z.ZodArray<z.ZodString, "many">;
+} & {
+    _meta: z.ZodOptional<z.ZodObject<{
+        userPrompt: z.ZodOptional<z.ZodString>;
+        reasoning: z.ZodOptional<z.ZodString>;
+        changesSummary: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }, {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    formId: string;
+    destinationLabels: string[];
+    _meta?: {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    } | undefined;
+}, {
+    formId: string;
+    destinationLabels: string[];
+    _meta?: {
+        reasoning?: string | undefined;
+        changesSummary?: string | undefined;
+        userPrompt?: string | undefined;
+    } | undefined;
+}>;
+export interface UpdateFormDestinationsDeps {
+    payload: Payload;
+    resolved: ResolvedFormsConfig;
+}
+export declare function createUpdateFormDestinationsTool(deps: UpdateFormDestinationsDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=update-form-destinations.d.ts.map

package/dist/tools/update-form-destinations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-form-destinations.d.ts","sourceRoot":"","sources":["../../src/tools/update-form-destinations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AAE9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAIxD,QAAA,MAAM,WAAW;;;;;;;;;iBAyBqE,CAAC;sBAEzE,CAAA;kBAAwC,CAAC;;iBAC7B,CAAC;sBAA4C,CAAC;kBAGlE,CAAA;;;;;;;;;;;;;;;;;;EA5BJ,CAAA;AAEF,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB,QAAQ,EAAE,mBAAmB,CAAA;CAC9B;AAED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,0BAA0B,GAC/B,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAoEvC"}