@forumone/throughline 0.0.0 → 1.0.0-next.1

package/dist/audit/query/tools/get-recent-failures.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '../../../plugin-contract/mcp.js';
+export interface GetRecentFailuresDeps {
+    payload: Payload;
+    collectionSlug: string;
+}
+declare const inputSchema: z.ZodObject<{
+    hours: z.ZodOptional<z.ZodNumber>;
+    mcpServer: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    mcpServer?: string | undefined;
+    limit?: number | undefined;
+    hours?: number | undefined;
+}, {
+    mcpServer?: string | undefined;
+    limit?: number | undefined;
+    hours?: number | undefined;
+}>;
+export declare function createGetRecentFailuresTool(deps: GetRecentFailuresDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=get-recent-failures.d.ts.map

package/dist/audit/query/tools/get-recent-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-recent-failures.d.ts","sourceRoot":"","sources":["../../../../src/audit/query/tools/get-recent-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAS,MAAM,SAAS,CAAA;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAKxE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,QAAA,MAAM,WAAW;;;;;;;;;;;;EAmBf,CAAA;AAEF,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,qBAAqB,GAC1B,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAgCvC"}

package/dist/audit/query/tools/get-recent-failures.js

@@ -0,0 +1,56 @@
+import { z } from 'zod';
+import { formatAuditEvent } from '../formatting/index.js';
+import { deniedEnvelope, isAuditReader } from './access.js';
+import { AUDIT_TOOLS } from './descriptors.js';
+const inputSchema = z.object({
+    hours: z
+        .number()
+        .int()
+        .positive()
+        .max(24 * 30)
+        .optional()
+        .describe('How far back to scan, in hours. Default: 24.'),
+    mcpServer: z
+        .string()
+        .optional()
+        .describe('Filter to a specific server (e.g. "publishing", "integrations").'),
+    limit: z
+        .number()
+        .int()
+        .positive()
+        .max(100)
+        .optional()
+        .describe('Max results. Default: 25.'),
+});
+export function createGetRecentFailuresTool(deps) {
+    return {
+        ...AUDIT_TOOLS.getRecentFailures,
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!isAuditReader(ctx)) {
+                return deniedEnvelope('Only admins and editors can review recent failures.');
+            }
+            const hours = input.hours ?? 24;
+            const since = new Date(Date.now() - hours * 60 * 60 * 1000).toISOString();
+            const conditions = [
+                { success: { equals: false } },
+                { createdAt: { greater_than_equal: since } },
+            ];
+            if (input.mcpServer)
+                conditions.push({ mcpServer: { equals: input.mcpServer } });
+            const result = await deps.payload.find({
+                collection: deps.collectionSlug,
+                where: { and: conditions },
+                sort: '-createdAt',
+                limit: input.limit ?? 25,
+            });
+            return {
+                hoursScanned: hours,
+                since,
+                failureCount: result.totalDocs,
+                failures: result.docs.map((doc) => formatAuditEvent(doc)),
+            };
+        },
+    };
+}
+//# sourceMappingURL=get-recent-failures.js.map

package/dist/audit/query/tools/get-recent-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-recent-failures.js","sourceRoot":"","sources":["../../../../src/audit/query/tools/get-recent-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAO9C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;SACZ,QAAQ,EAAE;SACV,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;CACzC,CAAC,CAAA;AAEF,MAAM,UAAU,2BAA2B,CACzC,IAA2B;IAE3B,OAAO;QACL,GAAG,WAAW,CAAC,iBAAiB;QAChC,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,cAAc,CAAC,qDAAqD,CAAC,CAAA;YAC9E,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAA;YAC/B,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;YACzE,MAAM,UAAU,GAAY;gBAC1B,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;gBAC9B,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE;aAC7C,CAAA;YACD,IAAI,KAAK,CAAC,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAEhF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,IAAI,CAAC,cAAc;gBAC/B,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;gBAC1B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;aACzB,CAAC,CAAA;YAEF,OAAO;gBACL,YAAY,EAAE,KAAK;gBACnB,KAAK;gBACL,YAAY,EAAE,MAAM,CAAC,SAAS;gBAC9B,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAA8B,CAAC,CAAC;aACrF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/audit/query/tools/index.d.ts

@@ -0,0 +1,13 @@
+export { AUDIT_TOOLS, AUDIT_TOOL_DESCRIPTORS } from './descriptors.js';
+export { createQueryAuditTool } from './query-audit.js';
+export type { QueryAuditDeps } from './query-audit.js';
+export { createGetChangeHistoryTool } from './get-change-history.js';
+export type { GetChangeHistoryDeps } from './get-change-history.js';
+export { createWhoChangedWhatTool } from './who-changed-what.js';
+export type { WhoChangedWhatDeps } from './who-changed-what.js';
+export { createWhatChangedInRangeTool } from './what-changed-in-range.js';
+export type { WhatChangedInRangeDeps } from './what-changed-in-range.js';
+export { createGetRecentFailuresTool } from './get-recent-failures.js';
+export type { GetRecentFailuresDeps } from './get-recent-failures.js';
+export { isAuditReader } from './access.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/query/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/audit/query/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AACpE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC/D,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AACzE,YAAY,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AACtE,YAAY,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA"}

package/dist/audit/query/tools/index.js

@@ -0,0 +1,8 @@
+export { AUDIT_TOOLS, AUDIT_TOOL_DESCRIPTORS } from './descriptors.js';
+export { createQueryAuditTool } from './query-audit.js';
+export { createGetChangeHistoryTool } from './get-change-history.js';
+export { createWhoChangedWhatTool } from './who-changed-what.js';
+export { createWhatChangedInRangeTool } from './what-changed-in-range.js';
+export { createGetRecentFailuresTool } from './get-recent-failures.js';
+export { isAuditReader } from './access.js';
+//# sourceMappingURL=index.js.map

package/dist/audit/query/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/audit/query/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAA;AAEpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAEhE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAA;AAEzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAA;AAEtE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA"}

package/dist/audit/query/tools/query-audit.d.ts

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '../../../plugin-contract/mcp.js';
+export interface QueryAuditDeps {
+    payload: Payload;
+    collectionSlug: string;
+}
+declare const inputSchema: z.ZodObject<{
+    targetCollection: z.ZodOptional<z.ZodString>;
+    targetId: z.ZodOptional<z.ZodString>;
+    actorId: z.ZodOptional<z.ZodString>;
+    action: z.ZodOptional<z.ZodString>;
+    mcpServer: z.ZodOptional<z.ZodString>;
+    dateRange: z.ZodOptional<z.ZodObject<{
+        from: z.ZodOptional<z.ZodString>;
+        to: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        from?: string | undefined;
+        to?: string | undefined;
+    }, {
+        from?: string | undefined;
+        to?: string | undefined;
+    }>>;
+    onlyFailures: z.ZodOptional<z.ZodBoolean>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    action?: string | undefined;
+    mcpServer?: string | undefined;
+    targetCollection?: string | undefined;
+    targetId?: string | undefined;
+    actorId?: string | undefined;
+    limit?: number | undefined;
+    dateRange?: {
+        from?: string | undefined;
+        to?: string | undefined;
+    } | undefined;
+    onlyFailures?: boolean | undefined;
+}, {
+    action?: string | undefined;
+    mcpServer?: string | undefined;
+    targetCollection?: string | undefined;
+    targetId?: string | undefined;
+    actorId?: string | undefined;
+    limit?: number | undefined;
+    dateRange?: {
+        from?: string | undefined;
+        to?: string | undefined;
+    } | undefined;
+    onlyFailures?: boolean | undefined;
+}>;
+export declare function createQueryAuditTool(deps: QueryAuditDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=query-audit.d.ts.map

package/dist/audit/query/tools/query-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-audit.d.ts","sourceRoot":"","sources":["../../../../src/audit/query/tools/query-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAS,MAAM,SAAS,CAAA;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAKxE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiCf,CAAA;AAEF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,cAAc,GAAG,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAmChG"}

package/dist/audit/query/tools/query-audit.js

@@ -0,0 +1,78 @@
+import { z } from 'zod';
+import { formatAuditEvent } from '../formatting/index.js';
+import { deniedEnvelope, isAuditReader } from './access.js';
+import { AUDIT_TOOLS } from './descriptors.js';
+const inputSchema = z.object({
+    targetCollection: z
+        .string()
+        .optional()
+        .describe('Filter to a specific collection (e.g. "pages").'),
+    targetId: z.string().optional().describe('Filter to a specific document ID.'),
+    actorId: z.string().optional().describe('Filter to a specific user ID.'),
+    action: z
+        .string()
+        .optional()
+        .describe('Filter to a specific action (e.g. "publishing.publish").'),
+    mcpServer: z
+        .string()
+        .optional()
+        .describe('Filter to a specific server (e.g. "publishing", "approvals").'),
+    dateRange: z
+        .object({
+        from: z.string().datetime().optional(),
+        to: z.string().datetime().optional(),
+    })
+        .optional()
+        .describe('ISO-8601 timestamps. Inclusive on both ends.'),
+    onlyFailures: z
+        .boolean()
+        .optional()
+        .describe('If true, only return actions where success=false.'),
+    limit: z
+        .number()
+        .int()
+        .positive()
+        .max(100)
+        .optional()
+        .describe('Max results. Default: 20.'),
+});
+export function createQueryAuditTool(deps) {
+    return {
+        ...AUDIT_TOOLS.queryAudit,
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!isAuditReader(ctx)) {
+                return deniedEnvelope('Only admins and editors can run general audit queries. Try `who_changed_what` for your own activity.');
+            }
+            const conditions = [];
+            if (input.targetCollection)
+                conditions.push({ targetCollection: { equals: input.targetCollection } });
+            if (input.targetId)
+                conditions.push({ targetId: { equals: input.targetId } });
+            if (input.actorId)
+                conditions.push({ 'actor.userId': { equals: input.actorId } });
+            if (input.action)
+                conditions.push({ action: { equals: input.action } });
+            if (input.mcpServer)
+                conditions.push({ mcpServer: { equals: input.mcpServer } });
+            if (input.onlyFailures)
+                conditions.push({ success: { equals: false } });
+            if (input.dateRange?.from)
+                conditions.push({ createdAt: { greater_than_equal: input.dateRange.from } });
+            if (input.dateRange?.to)
+                conditions.push({ createdAt: { less_than_equal: input.dateRange.to } });
+            const result = await deps.payload.find({
+                collection: deps.collectionSlug,
+                ...(conditions.length > 0 ? { where: { and: conditions } } : {}),
+                sort: '-createdAt',
+                limit: input.limit ?? 20,
+            });
+            return {
+                total: result.totalDocs,
+                returned: result.docs.length,
+                events: result.docs.map((doc) => formatAuditEvent(doc)),
+            };
+        },
+    };
+}
+//# sourceMappingURL=query-audit.js.map

package/dist/audit/query/tools/query-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-audit.js","sourceRoot":"","sources":["../../../../src/audit/query/tools/query-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAO9C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,iDAAiD,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC7E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACxE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,0DAA0D,CAAC;IACvE,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,+DAA+D,CAAC;IAC5E,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,QAAQ,EAAE;SACV,QAAQ,CAAC,8CAA8C,CAAC;IAC3D,YAAY,EAAE,CAAC;SACZ,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,mDAAmD,CAAC;IAChE,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;CACzC,CAAC,CAAA;AAEF,MAAM,UAAU,oBAAoB,CAAC,IAAoB;IACvD,OAAO;QACL,GAAG,WAAW,CAAC,UAAU;QACzB,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,cAAc,CACnB,sGAAsG,CACvG,CAAA;YACH,CAAC;YAED,MAAM,UAAU,GAAY,EAAE,CAAA;YAC9B,IAAI,KAAK,CAAC,gBAAgB;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAA;YACrG,IAAI,KAAK,CAAC,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YAC7E,IAAI,KAAK,CAAC,OAAO;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YACjF,IAAI,KAAK,CAAC,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YACvE,IAAI,KAAK,CAAC,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAChF,IAAI,KAAK,CAAC,YAAY;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YACvE,IAAI,KAAK,CAAC,SAAS,EAAE,IAAI;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACvG,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YAEhG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,IAAI,CAAC,cAAc;gBAC/B,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;aACzB,CAAC,CAAA;YAEF,OAAO;gBACL,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBAC5B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAA8B,CAAC,CAAC;aACnF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/audit/query/tools/what-changed-in-range.d.ts

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '../../../plugin-contract/mcp.js';
+export interface WhatChangedInRangeDeps {
+    payload: Payload;
+    collectionSlug: string;
+}
+declare const inputSchema: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    scanLimit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    from: string;
+    to: string;
+    scanLimit?: number | undefined;
+}, {
+    from: string;
+    to: string;
+    scanLimit?: number | undefined;
+}>;
+export declare function createWhatChangedInRangeTool(deps: WhatChangedInRangeDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=what-changed-in-range.d.ts.map

package/dist/audit/query/tools/what-changed-in-range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"what-changed-in-range.d.ts","sourceRoot":"","sources":["../../../../src/audit/query/tools/what-changed-in-range.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAIxE,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,QAAA,MAAM,WAAW;;;;;;;;;;;;EAUf,CAAA;AAEF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,sBAAsB,GAC3B,iBAAiB,CAAC,OAAO,WAAW,CAAC,CAoFvC"}

package/dist/audit/query/tools/what-changed-in-range.js

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import { deniedEnvelope, isAuditReader } from './access.js';
+import { AUDIT_TOOLS } from './descriptors.js';
+const inputSchema = z.object({
+    from: z.string().datetime().describe('ISO-8601 start of range (inclusive).'),
+    to: z.string().datetime().describe('ISO-8601 end of range (inclusive).'),
+    scanLimit: z
+        .number()
+        .int()
+        .positive()
+        .max(5000)
+        .optional()
+        .describe('Max events to scan when computing the summary. Default: 1000.'),
+});
+export function createWhatChangedInRangeTool(deps) {
+    return {
+        ...AUDIT_TOOLS.whatChangedInRange,
+        inputSchema,
+        handler: async (input, ctx) => {
+            if (!isAuditReader(ctx)) {
+                return deniedEnvelope('Only admins and editors can summarize activity ranges.');
+            }
+            const scanLimit = input.scanLimit ?? 1000;
+            const result = await deps.payload.find({
+                collection: deps.collectionSlug,
+                where: {
+                    and: [
+                        { createdAt: { greater_than_equal: input.from } },
+                        { createdAt: { less_than_equal: input.to } },
+                    ],
+                },
+                sort: '-createdAt',
+                limit: scanLimit,
+            });
+            const byAction = new Map();
+            const byActor = new Map();
+            const byCollection = new Map();
+            const byServer = new Map();
+            let failureCount = 0;
+            for (const doc of result.docs) {
+                const action = typeof doc['action'] === 'string' ? doc['action'] : 'unknown';
+                byAction.set(action, (byAction.get(action) ?? 0) + 1);
+                const actor = (doc['actor'] ?? {});
+                const actorId = typeof actor['userId'] === 'string'
+                    ? actor['userId']
+                    : typeof actor['type'] === 'string'
+                        ? actor['type']
+                        : 'unknown';
+                const actorName = typeof actor['userName'] === 'string' ? actor['userName'] : actorId;
+                const existing = byActor.get(actorId);
+                byActor.set(actorId, { name: actorName, count: (existing?.count ?? 0) + 1 });
+                const targetCollection = doc['targetCollection'];
+                if (typeof targetCollection === 'string') {
+                    byCollection.set(targetCollection, (byCollection.get(targetCollection) ?? 0) + 1);
+                }
+                const server = typeof doc['mcpServer'] === 'string' ? doc['mcpServer'] : 'unknown';
+                byServer.set(server, (byServer.get(server) ?? 0) + 1);
+                if (doc['success'] === false)
+                    failureCount += 1;
+            }
+            const totalDocs = result.totalDocs;
+            const truncated = totalDocs > result.docs.length;
+            return {
+                from: input.from,
+                to: input.to,
+                totalActions: totalDocs,
+                scanned: result.docs.length,
+                truncated,
+                ...(truncated
+                    ? {
+                        note: `Range contains ${totalDocs} events but only ${result.docs.length} were scanned for summary; raise scanLimit to widen the sweep.`,
+                    }
+                    : {}),
+                failureCount,
+                byAction: Object.fromEntries(Array.from(byAction.entries()).sort((a, b) => b[1] - a[1])),
+                topActors: Array.from(byActor.entries())
+                    .map(([id, { name, count }]) => ({ id, name, count }))
+                    .sort((a, b) => b.count - a.count)
+                    .slice(0, 10),
+                byCollection: Object.fromEntries(Array.from(byCollection.entries()).sort((a, b) => b[1] - a[1])),
+                byServer: Object.fromEntries(Array.from(byServer.entries()).sort((a, b) => b[1] - a[1])),
+            };
+        },
+    };
+}
+//# sourceMappingURL=what-changed-in-range.js.map

package/dist/audit/query/tools/what-changed-in-range.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"what-changed-in-range.js","sourceRoot":"","sources":["../../../../src/audit/query/tools/what-changed-in-range.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAO9C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC5E,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IACxE,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,IAAI,CAAC;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,+DAA+D,CAAC;CAC7E,CAAC,CAAA;AAEF,MAAM,UAAU,4BAA4B,CAC1C,IAA4B;IAE5B,OAAO;QACL,GAAG,WAAW,CAAC,kBAAkB;QACjC,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,cAAc,CAAC,wDAAwD,CAAC,CAAA;YACjF,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAA;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,IAAI,CAAC,cAAc;gBAC/B,KAAK,EAAE;oBACL,GAAG,EAAE;wBACH,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE;wBACjD,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE;qBAC7C;iBACF;gBACD,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,SAAS;aACjB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAA;YAClE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;YAC1C,IAAI,YAAY,GAAG,CAAC,CAAA;YAEpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAsC,EAAE,CAAC;gBAChE,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC5E,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;gBAErD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAA;gBAC7D,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;oBACjD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;oBACjB,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;wBACjC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;wBACf,CAAC,CAAC,SAAS,CAAA;gBACf,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;gBACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;gBACrC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBAE5E,MAAM,gBAAgB,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAA;gBAChD,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;oBACzC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;gBACnF,CAAC;gBAED,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAClF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;gBAErD,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK;oBAAE,YAAY,IAAI,CAAC,CAAA;YACjD,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;YAClC,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAA;YAEhD,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,YAAY,EAAE,SAAS;gBACvB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBAC3B,SAAS;gBACT,GAAG,CAAC,SAAS;oBACX,CAAC,CAAC;wBACE,IAAI,EAAE,kBAAkB,SAAS,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,gEAAgE;qBACxI;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,YAAY;gBACZ,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3D;gBACD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;qBACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;qBACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;qBACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACf,YAAY,EAAE,MAAM,CAAC,WAAW,CAC9B,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D;gBACD,QAAQ,EAAE,MAAM,CAAC,WAAW,CAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3D;aACF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/audit/query/tools/who-changed-what.d.ts

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+import type { Payload } from 'payload';
+import type { McpToolDefinition } from '../../../plugin-contract/mcp.js';
+export interface WhoChangedWhatDeps {
+    payload: Payload;
+    collectionSlug: string;
+}
+declare const inputSchema: z.ZodObject<{
+    actorId: z.ZodOptional<z.ZodString>;
+    dateRange: z.ZodOptional<z.ZodObject<{
+        from: z.ZodOptional<z.ZodString>;
+        to: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        from?: string | undefined;
+        to?: string | undefined;
+    }, {
+        from?: string | undefined;
+        to?: string | undefined;
+    }>>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    actorId?: string | undefined;
+    limit?: number | undefined;
+    dateRange?: {
+        from?: string | undefined;
+        to?: string | undefined;
+    } | undefined;
+}, {
+    actorId?: string | undefined;
+    limit?: number | undefined;
+    dateRange?: {
+        from?: string | undefined;
+        to?: string | undefined;
+    } | undefined;
+}>;
+export declare function createWhoChangedWhatTool(deps: WhoChangedWhatDeps): McpToolDefinition<typeof inputSchema>;
+export {};
+//# sourceMappingURL=who-changed-what.d.ts.map

package/dist/audit/query/tools/who-changed-what.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"who-changed-what.d.ts","sourceRoot":"","sources":["../../../../src/audit/query/tools/who-changed-what.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,OAAO,EAAS,MAAM,SAAS,CAAA;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAKxE,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBf,CAAA;AAEF,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,kBAAkB,GACvB,iBAAiB,CAAC,OAAO,WAAW,CAAC,CA8CvC"}

package/dist/audit/query/tools/who-changed-what.js

@@ -0,0 +1,66 @@
+import { z } from 'zod';
+import { formatAuditEvent } from '../formatting/index.js';
+import { deniedEnvelope, isAuditReader } from './access.js';
+import { AUDIT_TOOLS } from './descriptors.js';
+const inputSchema = z.object({
+    actorId: z
+        .string()
+        .optional()
+        .describe('User ID to look up. Defaults to the authenticated caller.'),
+    dateRange: z
+        .object({
+        from: z.string().datetime().optional(),
+        to: z.string().datetime().optional(),
+    })
+        .optional(),
+    limit: z
+        .number()
+        .int()
+        .positive()
+        .max(100)
+        .optional()
+        .describe('Max results. Default: 25.'),
+});
+export function createWhoChangedWhatTool(deps) {
+    return {
+        ...AUDIT_TOOLS.whoChangedWhat,
+        inputSchema,
+        handler: async (input, ctx) => {
+            const callerId = ctx.user?.id;
+            const actorId = input.actorId ?? callerId;
+            if (!actorId)
+                return deniedEnvelope('No actorId provided and no authenticated caller.');
+            const queryingSelf = !!callerId && actorId === callerId;
+            if (!queryingSelf && !isAuditReader(ctx)) {
+                return deniedEnvelope("Only admins and editors can look up other users' activity.");
+            }
+            const conditions = [{ 'actor.userId': { equals: actorId } }];
+            if (input.dateRange?.from) {
+                conditions.push({ createdAt: { greater_than_equal: input.dateRange.from } });
+            }
+            if (input.dateRange?.to) {
+                conditions.push({ createdAt: { less_than_equal: input.dateRange.to } });
+            }
+            const result = await deps.payload.find({
+                collection: deps.collectionSlug,
+                where: { and: conditions },
+                sort: '-createdAt',
+                limit: input.limit ?? 25,
+            });
+            const firstDoc = result.docs[0];
+            const firstActor = (firstDoc?.['actor'] ?? {});
+            const actorName = typeof firstActor['userName'] === 'string'
+                ? firstActor['userName']
+                : queryingSelf
+                    ? (ctx.user?.name ?? actorId)
+                    : actorId;
+            return {
+                actorId,
+                actor: actorName,
+                actionCount: result.totalDocs,
+                actions: result.docs.map((doc) => formatAuditEvent(doc)),
+            };
+        },
+    };
+}
+//# sourceMappingURL=who-changed-what.js.map

package/dist/audit/query/tools/who-changed-what.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"who-changed-what.js","sourceRoot":"","sources":["../../../../src/audit/query/tools/who-changed-what.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAO9C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2DAA2D,CAAC;IACxE,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,GAAG,CAAC;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2BAA2B,CAAC;CACzC,CAAC,CAAA;AAEF,MAAM,UAAU,wBAAwB,CACtC,IAAwB;IAExB,OAAO;QACL,GAAG,WAAW,CAAC,cAAc;QAC7B,WAAW;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAA;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAA;YACzC,IAAI,CAAC,OAAO;gBAAE,OAAO,cAAc,CAAC,kDAAkD,CAAC,CAAA;YAEvF,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,IAAI,OAAO,KAAK,QAAQ,CAAA;YACvD,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,OAAO,cAAc,CAAC,4DAA4D,CAAC,CAAA;YACrF,CAAC;YAED,MAAM,UAAU,GAAY,CAAC,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;YACrE,IAAI,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YAC9E,CAAC;YACD,IAAI,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACzE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBACrC,UAAU,EAAE,IAAI,CAAC,cAAc;gBAC/B,KAAK,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;gBAC1B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;aACzB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAwC,CAAA;YACtE,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAA4B,CAAA;YACzE,MAAM,SAAS,GACb,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,QAAQ;gBACxC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;gBACxB,CAAC,CAAC,YAAY;oBACZ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,CAAC;oBAC7B,CAAC,CAAC,OAAO,CAAA;YAEf,OAAO;gBACL,OAAO;gBACP,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,MAAM,CAAC,SAAS;gBAC7B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAA8B,CAAC,CAAC;aACpF,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/audit/types.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Canonical action names for the audit log. Every server package picks
+ * actions from this list rather than introducing free-form strings, so
+ * audit queries (C8) can build on a known taxonomy.
+ */
+export declare const AUDIT_ACTIONS: readonly ["content.find", "content.create", "content.update", "content.delete", "design.list", "design.suggest", "design.validate", "design.get_contract", "design.find_anti_pattern", "publishing.draft", "publishing.publish", "publishing.unpublish", "publishing.schedule", "publishing.rollback", "approval.requested", "approval.granted", "approval.declined", "approval.changes_requested", "approval.expired", "approval.discussed", "form.created", "form.updated", "form.submission_received", "integration.synced", "integration.failed", "system.error", "system.healthcheck"];
+export type AuditAction = (typeof AUDIT_ACTIONS)[number];
+/** MCP server identifiers. Keep in sync with the planned server packages. */
+export declare const AUDIT_MCP_SERVERS: readonly ["payload", "component", "publishing", "approvals", "audit", "forms", "integrations"];
+export type AuditMcpServer = (typeof AUDIT_MCP_SERVERS)[number];
+//# sourceMappingURL=types.d.ts.map

package/dist/audit/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,aAAa,6jBA4BhB,CAAA;AAEV,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAA;AAExD,6EAA6E;AAC7E,eAAO,MAAM,iBAAiB,gGAQpB,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA"}

package/dist/audit/types.js

@@ -0,0 +1,45 @@
+/**
+ * Canonical action names for the audit log. Every server package picks
+ * actions from this list rather than introducing free-form strings, so
+ * audit queries (C8) can build on a known taxonomy.
+ */
+export const AUDIT_ACTIONS = [
+    'content.find',
+    'content.create',
+    'content.update',
+    'content.delete',
+    'design.list',
+    'design.suggest',
+    'design.validate',
+    'design.get_contract',
+    'design.find_anti_pattern',
+    'publishing.draft',
+    'publishing.publish',
+    'publishing.unpublish',
+    'publishing.schedule',
+    'publishing.rollback',
+    'approval.requested',
+    'approval.granted',
+    'approval.declined',
+    'approval.changes_requested',
+    'approval.expired',
+    'approval.discussed',
+    'form.created',
+    'form.updated',
+    'form.submission_received',
+    'integration.synced',
+    'integration.failed',
+    'system.error',
+    'system.healthcheck',
+];
+/** MCP server identifiers. Keep in sync with the planned server packages. */
+export const AUDIT_MCP_SERVERS = [
+    'payload',
+    'component',
+    'publishing',
+    'approvals',
+    'audit',
+    'forms',
+    'integrations',
+];
+//# sourceMappingURL=types.js.map

package/dist/audit/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/audit/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,qBAAqB;IACrB,0BAA0B;IAC1B,kBAAkB;IAClB,oBAAoB;IACpB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,mBAAmB;IACnB,4BAA4B;IAC5B,kBAAkB;IAClB,oBAAoB;IACpB,cAAc;IACd,cAAc;IACd,0BAA0B;IAC1B,oBAAoB;IACpB,oBAAoB;IACpB,cAAc;IACd,oBAAoB;CACZ,CAAA;AAIV,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS;IACT,WAAW;IACX,YAAY;IACZ,WAAW;IACX,OAAO;IACP,OAAO;IACP,cAAc;CACN,CAAA"}

package/dist/audit/writer.d.ts

@@ -0,0 +1,50 @@
+import type { Inngest } from 'inngest';
+import type { Payload } from 'payload';
+import type { Logger } from '../plugin-contract/index.js';
+import type { AuditAction, AuditMcpServer } from './types.js';
+export interface AuditActor {
+    type: 'user' | 'system' | 'integration';
+    userId?: string | undefined;
+    userName?: string | undefined;
+    apiKeyName?: string | undefined;
+    apiKeyId?: string | undefined;
+    sessionId?: string | undefined;
+}
+export interface AuditEventInput {
+    actor: AuditActor;
+    action: AuditAction;
+    mcpServer: AuditMcpServer;
+    mcpTool: string;
+    targetCollection?: string | undefined;
+    targetId?: string | undefined;
+    targetTitle?: string | undefined;
+    prompt?: string | undefined;
+    reasoning?: string | undefined;
+    changesSummary?: string | undefined;
+    summary?: string | undefined;
+    diff?: Record<string, {
+        before: unknown;
+        after: unknown;
+    }> | null | undefined;
+    success?: boolean | undefined;
+    errorMessage?: string | undefined;
+    approvalRequestId?: string | undefined;
+    integrationId?: string | undefined;
+}
+export interface AuditWriterOptions {
+    payload: Payload;
+    inngest?: Inngest | undefined;
+    collectionSlug?: string | undefined;
+    logger?: Logger | undefined;
+}
+export type AuditWriter = (event: AuditEventInput) => Promise<void>;
+/**
+ * Returns a fire-and-forget audit writer. The writer never throws — failures
+ * log via `options.logger` (or `console`). Audit failures must not break
+ * the originating action.
+ *
+ * If `inngest` is provided the writer also fires an `audit/event.recorded`
+ * event so subscribers (email, integrations, healthchecks) can react.
+ */
+export declare function createAuditWriter(options: AuditWriterOptions): AuditWriter;
+//# sourceMappingURL=writer.d.ts.map

package/dist/audit/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../src/audit/writer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE7D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,aAAa,CAAA;IACvC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,cAAc,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,GAAG,IAAI,GAAG,SAAS,CAAA;IAC7E,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC5B;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEnE;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CA0D1E"}