@payloadcms/plugin-mcp 3.89.0 → 3.90.0

package/dist/mcp/tools/auth/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,QAAQ,WAAY,SAAS,OAAO,cAAc,eAAe,OAAO,SAiEpF,CAAA"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/auth/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAM7C,eAAO,MAAM,QAAQ,WAAY,SAAS,OAAO,cAAc,eAAe,OAAO,SAiFpF,CAAA"}

package/dist/mcp/tools/auth/auth.js

@@ -1,3 +1,4 @@
+import { createLocalReq } from 'payload';
 import { toolSchemas } from '../schemas.js';
 export const authTool = (server, req, verboseLogs)=>{
     const tool = async (headers)=>{
@@ -19,9 +20,30 @@ export const authTool = (server, req, verboseLogs)=>{
                     payload.logger.warn(`[payload-mcp] Invalid headers JSON: ${headers}, using empty headers`);
                 }
             }
+            const authReq = await createLocalReq({
+                req: {
+                    headers: authHeaders
+                }
+            }, payload);
             const result = await payload.auth({
-                headers: authHeaders
+                headers: authHeaders,
+                req: authReq
             });
+            if (result.user) {
+                const authenticatedUser = result.user;
+                const user = await payload.findByID({
+                    id: authenticatedUser.id,
+                    collection: authenticatedUser.collection,
+                    overrideAccess: false,
+                    req: authReq
+                });
+                result.user = {
+                    ...user,
+                    _sid: authenticatedUser._sid,
+                    _strategy: authenticatedUser._strategy,
+                    collection: authenticatedUser.collection
+                };
+            }
             if (verboseLogs) {
                 payload.logger.info('[payload-mcp] Authentication check completed successfully');
             }

package/dist/mcp/tools/auth/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/tools/auth/auth.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const authTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {\n  const tool = async (headers?: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info('[payload-mcp] Checking authentication status')\n    }\n\n    try {\n      // Parse custom headers if provided, otherwise use empty headers\n      let authHeaders = new Headers()\n\n      if (headers) {\n        try {\n          const parsedHeaders = JSON.parse(headers)\n          authHeaders = new Headers(parsedHeaders)\n          if (verboseLogs) {\n            payload.logger.info(`[payload-mcp] Using custom headers: ${headers}`)\n          }\n        } catch (_ignore) {\n          payload.logger.warn(`[payload-mcp] Invalid headers JSON: ${headers}, using empty headers`)\n        }\n      }\n\n      const result = await payload.auth({\n        headers: authHeaders,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info('[payload-mcp] Authentication check completed successfully')\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(`[payload-mcp] Error checking authentication: ${errorMessage}`)\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error checking authentication**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'auth',\n    {\n      description: toolSchemas.auth.description,\n      inputSchema: toolSchemas.auth.parameters.shape,\n    },\n    async ({ headers }) => {\n      return await tool(headers)\n    },\n  )\n}\n"],"names":["toolSchemas","authTool","server","req","verboseLogs","tool","headers","payload","logger","info","authHeaders","Headers","parsedHeaders","JSON","parse","_ignore","warn","result","auth","content","type","text","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,WAAW,CAACC,QAAmBC,KAAqBC;IAC/D,MAAMC,OAAO,OAAOC;QAClB,MAAMC,UAAUJ,IAAII,OAAO;QAE3B,IAAIH,aAAa;YACfG,QAAQC,MAAM,CAACC,IAAI,CAAC;QACtB;QAEA,IAAI;YACF,gEAAgE;YAChE,IAAIC,cAAc,IAAIC;YAEtB,IAAIL,SAAS;gBACX,IAAI;oBACF,MAAMM,gBAAgBC,KAAKC,KAAK,CAACR;oBACjCI,cAAc,IAAIC,QAAQC;oBAC1B,IAAIR,aAAa;wBACfG,QAAQC,MAAM,CAACC,IAAI,CAAC,CAAC,oCAAoC,EAAEH,SAAS;oBACtE;gBACF,EAAE,OAAOS,SAAS;oBAChBR,QAAQC,MAAM,CAACQ,IAAI,CAAC,CAAC,oCAAoC,EAAEV,QAAQ,qBAAqB,CAAC;gBAC3F;YACF;YAEA,MAAMW,SAAS,MAAMV,QAAQW,IAAI,CAAC;gBAChCZ,SAASI;YACX;YAEA,IAAIN,aAAa;gBACfG,QAAQC,MAAM,CAACC,IAAI,CAAC;YACtB;YAEA,OAAO;gBACLU,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,uCAAuC,EAAER,KAAKS,SAAS,CAACL,QAAQ,QAAQ,CAAC;oBAClF;iBACD;YACH;QACF,EAAE,OAAOM,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9DnB,QAAQC,MAAM,CAACe,KAAK,CAAC,CAAC,6CAA6C,EAAEC,cAAc;YAEnF,OAAO;gBACLL,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,qCAAqC,EAAEG,cAAc;oBAC9D;iBACD;YACH;QACF;IACF;IAEAtB,OAAOyB,YAAY,CACjB,QACA;QACEC,aAAa5B,YAAYkB,IAAI,CAACU,WAAW;QACzCC,aAAa7B,YAAYkB,IAAI,CAACY,UAAU,CAACC,KAAK;IAChD,GACA,OAAO,EAAEzB,OAAO,EAAE;QAChB,OAAO,MAAMD,KAAKC;IACpB;AAEJ,EAAC"}
+{"version":3,"sources":["../../../../src/mcp/tools/auth/auth.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { createLocalReq } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const authTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {\n  const tool = async (headers?: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info('[payload-mcp] Checking authentication status')\n    }\n\n    try {\n      // Parse custom headers if provided, otherwise use empty headers\n      let authHeaders = new Headers()\n\n      if (headers) {\n        try {\n          const parsedHeaders = JSON.parse(headers)\n          authHeaders = new Headers(parsedHeaders)\n          if (verboseLogs) {\n            payload.logger.info(`[payload-mcp] Using custom headers: ${headers}`)\n          }\n        } catch (_ignore) {\n          payload.logger.warn(`[payload-mcp] Invalid headers JSON: ${headers}, using empty headers`)\n        }\n      }\n\n      const authReq = await createLocalReq({ req: { headers: authHeaders } }, payload)\n      const result = await payload.auth({ headers: authHeaders, req: authReq })\n\n      if (result.user) {\n        const authenticatedUser = result.user\n        const user = await payload.findByID({\n          id: authenticatedUser.id,\n          collection: authenticatedUser.collection,\n          overrideAccess: false,\n          req: authReq,\n        })\n\n        result.user = {\n          ...user,\n          _sid: authenticatedUser._sid,\n          _strategy: authenticatedUser._strategy,\n          collection: authenticatedUser.collection,\n        }\n      }\n\n      if (verboseLogs) {\n        payload.logger.info('[payload-mcp] Authentication check completed successfully')\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(`[payload-mcp] Error checking authentication: ${errorMessage}`)\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error checking authentication**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'auth',\n    {\n      description: toolSchemas.auth.description,\n      inputSchema: toolSchemas.auth.parameters.shape,\n    },\n    async ({ headers }) => {\n      return await tool(headers)\n    },\n  )\n}\n"],"names":["createLocalReq","toolSchemas","authTool","server","req","verboseLogs","tool","headers","payload","logger","info","authHeaders","Headers","parsedHeaders","JSON","parse","_ignore","warn","authReq","result","auth","user","authenticatedUser","findByID","id","collection","overrideAccess","_sid","_strategy","content","type","text","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,cAAc,QAAQ,UAAS;AAExC,SAASC,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,WAAW,CAACC,QAAmBC,KAAqBC;IAC/D,MAAMC,OAAO,OAAOC;QAClB,MAAMC,UAAUJ,IAAII,OAAO;QAE3B,IAAIH,aAAa;YACfG,QAAQC,MAAM,CAACC,IAAI,CAAC;QACtB;QAEA,IAAI;YACF,gEAAgE;YAChE,IAAIC,cAAc,IAAIC;YAEtB,IAAIL,SAAS;gBACX,IAAI;oBACF,MAAMM,gBAAgBC,KAAKC,KAAK,CAACR;oBACjCI,cAAc,IAAIC,QAAQC;oBAC1B,IAAIR,aAAa;wBACfG,QAAQC,MAAM,CAACC,IAAI,CAAC,CAAC,oCAAoC,EAAEH,SAAS;oBACtE;gBACF,EAAE,OAAOS,SAAS;oBAChBR,QAAQC,MAAM,CAACQ,IAAI,CAAC,CAAC,oCAAoC,EAAEV,QAAQ,qBAAqB,CAAC;gBAC3F;YACF;YAEA,MAAMW,UAAU,MAAMlB,eAAe;gBAAEI,KAAK;oBAAEG,SAASI;gBAAY;YAAE,GAAGH;YACxE,MAAMW,SAAS,MAAMX,QAAQY,IAAI,CAAC;gBAAEb,SAASI;gBAAaP,KAAKc;YAAQ;YAEvE,IAAIC,OAAOE,IAAI,EAAE;gBACf,MAAMC,oBAAoBH,OAAOE,IAAI;gBACrC,MAAMA,OAAO,MAAMb,QAAQe,QAAQ,CAAC;oBAClCC,IAAIF,kBAAkBE,EAAE;oBACxBC,YAAYH,kBAAkBG,UAAU;oBACxCC,gBAAgB;oBAChBtB,KAAKc;gBACP;gBAEAC,OAAOE,IAAI,GAAG;oBACZ,GAAGA,IAAI;oBACPM,MAAML,kBAAkBK,IAAI;oBAC5BC,WAAWN,kBAAkBM,SAAS;oBACtCH,YAAYH,kBAAkBG,UAAU;gBAC1C;YACF;YAEA,IAAIpB,aAAa;gBACfG,QAAQC,MAAM,CAACC,IAAI,CAAC;YACtB;YAEA,OAAO;gBACLmB,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,uCAAuC,EAAEjB,KAAKkB,SAAS,CAACb,QAAQ,QAAQ,CAAC;oBAClF;iBACD;YACH;QACF,EAAE,OAAOc,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9D5B,QAAQC,MAAM,CAACwB,KAAK,CAAC,CAAC,6CAA6C,EAAEC,cAAc;YAEnF,OAAO;gBACLL,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,qCAAqC,EAAEG,cAAc;oBAC9D;iBACD;YACH;QACF;IACF;IAEA/B,OAAOkC,YAAY,CACjB,QACA;QACEC,aAAarC,YAAYmB,IAAI,CAACkB,WAAW;QACzCC,aAAatC,YAAYmB,IAAI,CAACoB,UAAU,CAACC,KAAK;IAChD,GACA,OAAO,EAAElC,OAAO,EAAE;QAChB,OAAO,MAAMD,KAAKC;IACpB;AAEJ,EAAC"}

package/dist/mcp/tools/auth/auth.spec.js

@@ -0,0 +1,83 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+const mocks = vi.hoisted(()=>({
+        createLocalReq: vi.fn()
+    }));
+vi.mock('payload', ()=>({
+        createLocalReq: mocks.createLocalReq
+    }));
+import { authTool } from './auth.js';
+describe('authTool', ()=>{
+    beforeEach(()=>{
+        vi.clearAllMocks();
+    });
+    it('should omit user fields without read access from authentication status', async ()=>{
+        const internalNotes = 'private authentication notes';
+        const authenticatedUser = {
+            _sid: 'session-id',
+            _strategy: 'local-jwt',
+            collection: 'users',
+            id: 'user-id',
+            internalNotes
+        };
+        const payload = {
+            auth: vi.fn(async ({ req })=>{
+                req.user = authenticatedUser;
+                return {
+                    user: authenticatedUser
+                };
+            }),
+            findByID: vi.fn(async ({ overrideAccess })=>overrideAccess ? authenticatedUser : {
+                    email: 'user@example.com',
+                    id: authenticatedUser.id
+                }),
+            logger: {
+                error: vi.fn(),
+                info: vi.fn(),
+                warn: vi.fn()
+            }
+        };
+        const authReq = {
+            payload
+        };
+        const req = {
+            payload
+        };
+        let handler;
+        const server = {
+            registerTool: (_name, _definition, registeredHandler)=>{
+                handler = registeredHandler;
+            }
+        };
+        mocks.createLocalReq.mockResolvedValue(authReq);
+        authTool(server, req, false);
+        if (!handler) {
+            throw new Error('Auth tool was not registered');
+        }
+        const result = await handler({
+            headers: JSON.stringify({
+                Authorization: 'JWT token'
+            })
+        });
+        const json = result.content[0].text.match(/```json\n([\s\S]*?)\n```/)?.[1];
+        expect(json).toBeDefined();
+        const authenticationStatus = JSON.parse(json);
+        expect(authReq.user).toBe(authenticatedUser);
+        expect(payload.findByID).toHaveBeenCalledWith({
+            id: authenticatedUser.id,
+            collection: authenticatedUser.collection,
+            overrideAccess: false,
+            req: authReq
+        });
+        expect(authenticationStatus.user).toMatchObject({
+            _sid: authenticatedUser._sid,
+            _strategy: authenticatedUser._strategy,
+            collection: authenticatedUser.collection,
+            email: 'user@example.com',
+            id: authenticatedUser.id
+        });
+        expect(authenticationStatus.user).not.toHaveProperty('internalNotes');
+        expect(JSON.stringify(authenticationStatus)).not.toContain(internalNotes);
+    });
+});
+
+//# sourceMappingURL=auth.spec.js.map

package/dist/mcp/tools/auth/auth.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/tools/auth/auth.spec.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { Payload, PayloadRequest } from 'payload'\n\nimport { beforeEach, describe, expect, it, vi } from 'vitest'\n\nconst mocks = vi.hoisted(() => ({\n  createLocalReq: vi.fn(),\n}))\n\nvi.mock('payload', () => ({\n  createLocalReq: mocks.createLocalReq,\n}))\n\nimport { authTool } from './auth.js'\n\ntype AuthToolResult = {\n  content: Array<{\n    text: string\n    type: 'text'\n  }>\n}\n\ntype AuthToolHandler = (args: { headers?: string }) => Promise<AuthToolResult>\n\ndescribe('authTool', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n  })\n\n  it('should omit user fields without read access from authentication status', async () => {\n    const internalNotes = 'private authentication notes'\n    const authenticatedUser = {\n      _sid: 'session-id',\n      _strategy: 'local-jwt',\n      collection: 'users',\n      id: 'user-id',\n      internalNotes,\n    }\n    const payload = {\n      auth: vi.fn(async ({ req }: { req: PayloadRequest }) => {\n        req.user = authenticatedUser\n\n        return { user: authenticatedUser }\n      }),\n      findByID: vi.fn(async ({ overrideAccess }: { overrideAccess: boolean }) =>\n        overrideAccess\n          ? authenticatedUser\n          : { email: 'user@example.com', id: authenticatedUser.id },\n      ),\n      logger: {\n        error: vi.fn(),\n        info: vi.fn(),\n        warn: vi.fn(),\n      },\n    } as unknown as Payload\n    const authReq = { payload } as PayloadRequest\n    const req = { payload } as PayloadRequest\n    let handler: AuthToolHandler | undefined\n    const server = {\n      registerTool: (_name: string, _definition: unknown, registeredHandler: AuthToolHandler) => {\n        handler = registeredHandler\n      },\n    } as unknown as McpServer\n\n    mocks.createLocalReq.mockResolvedValue(authReq)\n    authTool(server, req, false)\n\n    if (!handler) {\n      throw new Error('Auth tool was not registered')\n    }\n\n    const result = await handler({\n      headers: JSON.stringify({ Authorization: 'JWT token' }),\n    })\n    const json = result.content[0]!.text.match(/```json\\n([\\s\\S]*?)\\n```/)?.[1]\n\n    expect(json).toBeDefined()\n\n    const authenticationStatus = JSON.parse(json!)\n\n    expect(authReq.user).toBe(authenticatedUser)\n    expect(payload.findByID).toHaveBeenCalledWith({\n      id: authenticatedUser.id,\n      collection: authenticatedUser.collection,\n      overrideAccess: false,\n      req: authReq,\n    })\n    expect(authenticationStatus.user).toMatchObject({\n      _sid: authenticatedUser._sid,\n      _strategy: authenticatedUser._strategy,\n      collection: authenticatedUser.collection,\n      email: 'user@example.com',\n      id: authenticatedUser.id,\n    })\n    expect(authenticationStatus.user).not.toHaveProperty('internalNotes')\n    expect(JSON.stringify(authenticationStatus)).not.toContain(internalNotes)\n  })\n})\n"],"names":["beforeEach","describe","expect","it","vi","mocks","hoisted","createLocalReq","fn","mock","authTool","clearAllMocks","internalNotes","authenticatedUser","_sid","_strategy","collection","id","payload","auth","req","user","findByID","overrideAccess","email","logger","error","info","warn","authReq","handler","server","registerTool","_name","_definition","registeredHandler","mockResolvedValue","Error","result","headers","JSON","stringify","Authorization","json","content","text","match","toBeDefined","authenticationStatus","parse","toBe","toHaveBeenCalledWith","toMatchObject","not","toHaveProperty","toContain"],"mappings":"AAGA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAE7D,MAAMC,QAAQD,GAAGE,OAAO,CAAC,IAAO,CAAA;QAC9BC,gBAAgBH,GAAGI,EAAE;IACvB,CAAA;AAEAJ,GAAGK,IAAI,CAAC,WAAW,IAAO,CAAA;QACxBF,gBAAgBF,MAAME,cAAc;IACtC,CAAA;AAEA,SAASG,QAAQ,QAAQ,YAAW;AAWpCT,SAAS,YAAY;IACnBD,WAAW;QACTI,GAAGO,aAAa;IAClB;IAEAR,GAAG,0EAA0E;QAC3E,MAAMS,gBAAgB;QACtB,MAAMC,oBAAoB;YACxBC,MAAM;YACNC,WAAW;YACXC,YAAY;YACZC,IAAI;YACJL;QACF;QACA,MAAMM,UAAU;YACdC,MAAMf,GAAGI,EAAE,CAAC,OAAO,EAAEY,GAAG,EAA2B;gBACjDA,IAAIC,IAAI,GAAGR;gBAEX,OAAO;oBAAEQ,MAAMR;gBAAkB;YACnC;YACAS,UAAUlB,GAAGI,EAAE,CAAC,OAAO,EAAEe,cAAc,EAA+B,GACpEA,iBACIV,oBACA;oBAAEW,OAAO;oBAAoBP,IAAIJ,kBAAkBI,EAAE;gBAAC;YAE5DQ,QAAQ;gBACNC,OAAOtB,GAAGI,EAAE;gBACZmB,MAAMvB,GAAGI,EAAE;gBACXoB,MAAMxB,GAAGI,EAAE;YACb;QACF;QACA,MAAMqB,UAAU;YAAEX;QAAQ;QAC1B,MAAME,MAAM;YAAEF;QAAQ;QACtB,IAAIY;QACJ,MAAMC,SAAS;YACbC,cAAc,CAACC,OAAeC,aAAsBC;gBAClDL,UAAUK;YACZ;QACF;QAEA9B,MAAME,cAAc,CAAC6B,iBAAiB,CAACP;QACvCnB,SAASqB,QAAQX,KAAK;QAEtB,IAAI,CAACU,SAAS;YACZ,MAAM,IAAIO,MAAM;QAClB;QAEA,MAAMC,SAAS,MAAMR,QAAQ;YAC3BS,SAASC,KAAKC,SAAS,CAAC;gBAAEC,eAAe;YAAY;QACvD;QACA,MAAMC,OAAOL,OAAOM,OAAO,CAAC,EAAE,CAAEC,IAAI,CAACC,KAAK,CAAC,6BAA6B,CAAC,EAAE;QAE3E5C,OAAOyC,MAAMI,WAAW;QAExB,MAAMC,uBAAuBR,KAAKS,KAAK,CAACN;QAExCzC,OAAO2B,QAAQR,IAAI,EAAE6B,IAAI,CAACrC;QAC1BX,OAAOgB,QAAQI,QAAQ,EAAE6B,oBAAoB,CAAC;YAC5ClC,IAAIJ,kBAAkBI,EAAE;YACxBD,YAAYH,kBAAkBG,UAAU;YACxCO,gBAAgB;YAChBH,KAAKS;QACP;QACA3B,OAAO8C,qBAAqB3B,IAAI,EAAE+B,aAAa,CAAC;YAC9CtC,MAAMD,kBAAkBC,IAAI;YAC5BC,WAAWF,kBAAkBE,SAAS;YACtCC,YAAYH,kBAAkBG,UAAU;YACxCQ,OAAO;YACPP,IAAIJ,kBAAkBI,EAAE;QAC1B;QACAf,OAAO8C,qBAAqB3B,IAAI,EAAEgC,GAAG,CAACC,cAAc,CAAC;QACrDpD,OAAOsC,KAAKC,SAAS,CAACO,uBAAuBK,GAAG,CAACE,SAAS,CAAC3C;IAC7D;AACF"}

package/dist/mcp/tools/auth/forgotPassword.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forgotPassword.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/auth/forgotPassword.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,kBAAkB,WACrB,SAAS,OACZ,cAAc,eACN,OAAO,SA6DrB,CAAA"}
+{"version":3,"file":"forgotPassword.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/auth/forgotPassword.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,kBAAkB,WACrB,SAAS,OACZ,cAAc,eACN,OAAO,SA+DrB,CAAA"}

package/dist/mcp/tools/auth/forgotPassword.js

@@ -1,17 +1,19 @@
 import { toolSchemas } from '../schemas.js';
 export const forgotPasswordTool = (server, req, verboseLogs)=>{
-    const tool = async (collection, email, disableEmail = false)=>{
+    const tool = async (collection, email)=>{
         const payload = req.payload;
         if (verboseLogs) {
             payload.logger.info(`[payload-mcp] Sending password reset email for user: ${email} in collection: ${collection}`);
         }
         try {
-            const result = await payload.forgotPassword({
+            await payload.forgotPassword({
                 collection,
                 data: {
                     email
                 },
-                disableEmail
+                disableEmail: false,
+                overrideAccess: false,
+                req
             });
             if (verboseLogs) {
                 payload.logger.info(`[payload-mcp] Password reset email sent successfully for user: ${email}`);
@@ -20,7 +22,7 @@ export const forgotPasswordTool = (server, req, verboseLogs)=>{
                 content: [
                     {
                         type: 'text',
-                        text: `# Password Reset Email Sent\n\n**User:** ${email}\n**Collection:** ${collection}\n**Email Disabled:** ${disableEmail}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                        text: 'If an account matches that email, password reset instructions have been sent.'
                     }
                 ]
             };
@@ -40,8 +42,8 @@ export const forgotPasswordTool = (server, req, verboseLogs)=>{
     server.registerTool('forgotPassword', {
         description: toolSchemas.forgotPassword.description,
         inputSchema: toolSchemas.forgotPassword.parameters.shape
-    }, async ({ collection, disableEmail, email })=>{
-        return await tool(collection, email, disableEmail);
+    }, async ({ collection, email })=>{
+        return await tool(collection, email);
     });
 };
 

package/dist/mcp/tools/auth/forgotPassword.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/tools/auth/forgotPassword.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const forgotPasswordTool = (\n  server: McpServer,\n  req: PayloadRequest,\n  verboseLogs: boolean,\n) => {\n  const tool = async (collection: string, email: string, disableEmail: boolean = false) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info(\n        `[payload-mcp] Sending password reset email for user: ${email} in collection: ${collection}`,\n      )\n    }\n\n    try {\n      const result = await payload.forgotPassword({\n        collection,\n        data: {\n          email,\n        },\n        disableEmail,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info(\n          `[payload-mcp] Password reset email sent successfully for user: ${email}`,\n        )\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# Password Reset Email Sent\\n\\n**User:** ${email}\\n**Collection:** ${collection}\\n**Email Disabled:** ${disableEmail}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(\n        `[payload-mcp] Error sending password reset email for user ${email}: ${errorMessage}`,\n      )\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error sending password reset email for user \"${email}\"**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'forgotPassword',\n    {\n      description: toolSchemas.forgotPassword.description,\n      inputSchema: toolSchemas.forgotPassword.parameters.shape,\n    },\n    async ({ collection, disableEmail, email }) => {\n      return await tool(collection, email, disableEmail)\n    },\n  )\n}\n"],"names":["toolSchemas","forgotPasswordTool","server","req","verboseLogs","tool","collection","email","disableEmail","payload","logger","info","result","forgotPassword","data","content","type","text","JSON","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,qBAAqB,CAChCC,QACAC,KACAC;IAEA,MAAMC,OAAO,OAAOC,YAAoBC,OAAeC,eAAwB,KAAK;QAClF,MAAMC,UAAUN,IAAIM,OAAO;QAE3B,IAAIL,aAAa;YACfK,QAAQC,MAAM,CAACC,IAAI,CACjB,CAAC,qDAAqD,EAAEJ,MAAM,gBAAgB,EAAED,YAAY;QAEhG;QAEA,IAAI;YACF,MAAMM,SAAS,MAAMH,QAAQI,cAAc,CAAC;gBAC1CP;gBACAQ,MAAM;oBACJP;gBACF;gBACAC;YACF;YAEA,IAAIJ,aAAa;gBACfK,QAAQC,MAAM,CAACC,IAAI,CACjB,CAAC,+DAA+D,EAAEJ,OAAO;YAE7E;YAEA,OAAO;gBACLQ,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,yCAAyC,EAAEV,MAAM,kBAAkB,EAAED,WAAW,sBAAsB,EAAEE,aAAa,gBAAgB,EAAEU,KAAKC,SAAS,CAACP,QAAQ,QAAQ,CAAC;oBAChL;iBACD;YACH;QACF,EAAE,OAAOQ,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9Dd,QAAQC,MAAM,CAACU,KAAK,CAClB,CAAC,0DAA0D,EAAEb,MAAM,EAAE,EAAEc,cAAc;YAGvF,OAAO;gBACLN,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,iDAAiD,EAAEV,MAAM,KAAK,EAAEc,cAAc;oBACvF;iBACD;YACH;QACF;IACF;IAEAnB,OAAOsB,YAAY,CACjB,kBACA;QACEC,aAAazB,YAAYa,cAAc,CAACY,WAAW;QACnDC,aAAa1B,YAAYa,cAAc,CAACc,UAAU,CAACC,KAAK;IAC1D,GACA,OAAO,EAAEtB,UAAU,EAAEE,YAAY,EAAED,KAAK,EAAE;QACxC,OAAO,MAAMF,KAAKC,YAAYC,OAAOC;IACvC;AAEJ,EAAC"}
+{"version":3,"sources":["../../../../src/mcp/tools/auth/forgotPassword.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const forgotPasswordTool = (\n  server: McpServer,\n  req: PayloadRequest,\n  verboseLogs: boolean,\n) => {\n  const tool = async (collection: string, email: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info(\n        `[payload-mcp] Sending password reset email for user: ${email} in collection: ${collection}`,\n      )\n    }\n\n    try {\n      await payload.forgotPassword({\n        collection,\n        data: {\n          email,\n        },\n        disableEmail: false,\n        overrideAccess: false,\n        req,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info(\n          `[payload-mcp] Password reset email sent successfully for user: ${email}`,\n        )\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: 'If an account matches that email, password reset instructions have been sent.',\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(\n        `[payload-mcp] Error sending password reset email for user ${email}: ${errorMessage}`,\n      )\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error sending password reset email for user \"${email}\"**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'forgotPassword',\n    {\n      description: toolSchemas.forgotPassword.description,\n      inputSchema: toolSchemas.forgotPassword.parameters.shape,\n    },\n    async ({ collection, email }) => {\n      return await tool(collection, email)\n    },\n  )\n}\n"],"names":["toolSchemas","forgotPasswordTool","server","req","verboseLogs","tool","collection","email","payload","logger","info","forgotPassword","data","disableEmail","overrideAccess","content","type","text","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,qBAAqB,CAChCC,QACAC,KACAC;IAEA,MAAMC,OAAO,OAAOC,YAAoBC;QACtC,MAAMC,UAAUL,IAAIK,OAAO;QAE3B,IAAIJ,aAAa;YACfI,QAAQC,MAAM,CAACC,IAAI,CACjB,CAAC,qDAAqD,EAAEH,MAAM,gBAAgB,EAAED,YAAY;QAEhG;QAEA,IAAI;YACF,MAAME,QAAQG,cAAc,CAAC;gBAC3BL;gBACAM,MAAM;oBACJL;gBACF;gBACAM,cAAc;gBACdC,gBAAgB;gBAChBX;YACF;YAEA,IAAIC,aAAa;gBACfI,QAAQC,MAAM,CAACC,IAAI,CACjB,CAAC,+DAA+D,EAAEH,OAAO;YAE7E;YAEA,OAAO;gBACLQ,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM;oBACR;iBACD;YACH;QACF,EAAE,OAAOC,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9Db,QAAQC,MAAM,CAACS,KAAK,CAClB,CAAC,0DAA0D,EAAEX,MAAM,EAAE,EAAEY,cAAc;YAGvF,OAAO;gBACLJ,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,iDAAiD,EAAEV,MAAM,KAAK,EAAEY,cAAc;oBACvF;iBACD;YACH;QACF;IACF;IAEAjB,OAAOoB,YAAY,CACjB,kBACA;QACEC,aAAavB,YAAYW,cAAc,CAACY,WAAW;QACnDC,aAAaxB,YAAYW,cAAc,CAACc,UAAU,CAACC,KAAK;IAC1D,GACA,OAAO,EAAEpB,UAAU,EAAEC,KAAK,EAAE;QAC1B,OAAO,MAAMF,KAAKC,YAAYC;IAChC;AAEJ,EAAC"}

package/dist/mcp/tools/auth/resetPassword.js

@@ -12,7 +12,7 @@ export const resetPasswordTool = (server, req, verboseLogs)=>{
                     password,
                     token
                 },
-                overrideAccess: true
+                overrideAccess: false
             });
             if (verboseLogs) {
                 payload.logger.info('[payload-mcp] Password reset completed successfully');

package/dist/mcp/tools/auth/resetPassword.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/tools/auth/resetPassword.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const resetPasswordTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {\n  const tool = async (collection: string, token: string, password: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info(`[payload-mcp] Resetting password for user in collection: ${collection}`)\n    }\n\n    try {\n      const result = await payload.resetPassword({\n        collection,\n        data: {\n          password,\n          token,\n        },\n        overrideAccess: true,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info('[payload-mcp] Password reset completed successfully')\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# Password Reset Successful\\n\\n**Collection:** ${collection}\\n**Token:** ${token}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(`[payload-mcp] Error resetting password: ${errorMessage}`)\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error resetting password**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'resetPassword',\n    {\n      description: toolSchemas.resetPassword.description,\n      inputSchema: toolSchemas.resetPassword.parameters.shape,\n    },\n    async ({ collection, password, token }) => {\n      return await tool(collection, token, password)\n    },\n  )\n}\n"],"names":["toolSchemas","resetPasswordTool","server","req","verboseLogs","tool","collection","token","password","payload","logger","info","result","resetPassword","data","overrideAccess","content","type","text","JSON","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,oBAAoB,CAACC,QAAmBC,KAAqBC;IACxE,MAAMC,OAAO,OAAOC,YAAoBC,OAAeC;QACrD,MAAMC,UAAUN,IAAIM,OAAO;QAE3B,IAAIL,aAAa;YACfK,QAAQC,MAAM,CAACC,IAAI,CAAC,CAAC,yDAAyD,EAAEL,YAAY;QAC9F;QAEA,IAAI;YACF,MAAMM,SAAS,MAAMH,QAAQI,aAAa,CAAC;gBACzCP;gBACAQ,MAAM;oBACJN;oBACAD;gBACF;gBACAQ,gBAAgB;YAClB;YAEA,IAAIX,aAAa;gBACfK,QAAQC,MAAM,CAACC,IAAI,CAAC;YACtB;YAEA,OAAO;gBACLK,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,+CAA+C,EAAEZ,WAAW,aAAa,EAAEC,MAAM,gBAAgB,EAAEY,KAAKC,SAAS,CAACR,QAAQ,QAAQ,CAAC;oBAC5I;iBACD;YACH;QACF,EAAE,OAAOS,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9Df,QAAQC,MAAM,CAACW,KAAK,CAAC,CAAC,wCAAwC,EAAEC,cAAc;YAE9E,OAAO;gBACLN,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,gCAAgC,EAAEI,cAAc;oBACzD;iBACD;YACH;QACF;IACF;IAEApB,OAAOuB,YAAY,CACjB,iBACA;QACEC,aAAa1B,YAAYa,aAAa,CAACa,WAAW;QAClDC,aAAa3B,YAAYa,aAAa,CAACe,UAAU,CAACC,KAAK;IACzD,GACA,OAAO,EAAEvB,UAAU,EAAEE,QAAQ,EAAED,KAAK,EAAE;QACpC,OAAO,MAAMF,KAAKC,YAAYC,OAAOC;IACvC;AAEJ,EAAC"}
+{"version":3,"sources":["../../../../src/mcp/tools/auth/resetPassword.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const resetPasswordTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {\n  const tool = async (collection: string, token: string, password: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info(`[payload-mcp] Resetting password for user in collection: ${collection}`)\n    }\n\n    try {\n      const result = await payload.resetPassword({\n        collection,\n        data: {\n          password,\n          token,\n        },\n        overrideAccess: false,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info('[payload-mcp] Password reset completed successfully')\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# Password Reset Successful\\n\\n**Collection:** ${collection}\\n**Token:** ${token}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(`[payload-mcp] Error resetting password: ${errorMessage}`)\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error resetting password**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'resetPassword',\n    {\n      description: toolSchemas.resetPassword.description,\n      inputSchema: toolSchemas.resetPassword.parameters.shape,\n    },\n    async ({ collection, password, token }) => {\n      return await tool(collection, token, password)\n    },\n  )\n}\n"],"names":["toolSchemas","resetPasswordTool","server","req","verboseLogs","tool","collection","token","password","payload","logger","info","result","resetPassword","data","overrideAccess","content","type","text","JSON","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,oBAAoB,CAACC,QAAmBC,KAAqBC;IACxE,MAAMC,OAAO,OAAOC,YAAoBC,OAAeC;QACrD,MAAMC,UAAUN,IAAIM,OAAO;QAE3B,IAAIL,aAAa;YACfK,QAAQC,MAAM,CAACC,IAAI,CAAC,CAAC,yDAAyD,EAAEL,YAAY;QAC9F;QAEA,IAAI;YACF,MAAMM,SAAS,MAAMH,QAAQI,aAAa,CAAC;gBACzCP;gBACAQ,MAAM;oBACJN;oBACAD;gBACF;gBACAQ,gBAAgB;YAClB;YAEA,IAAIX,aAAa;gBACfK,QAAQC,MAAM,CAACC,IAAI,CAAC;YACtB;YAEA,OAAO;gBACLK,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,+CAA+C,EAAEZ,WAAW,aAAa,EAAEC,MAAM,gBAAgB,EAAEY,KAAKC,SAAS,CAACR,QAAQ,QAAQ,CAAC;oBAC5I;iBACD;YACH;QACF,EAAE,OAAOS,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9Df,QAAQC,MAAM,CAACW,KAAK,CAAC,CAAC,wCAAwC,EAAEC,cAAc;YAE9E,OAAO;gBACLN,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,gCAAgC,EAAEI,cAAc;oBACzD;iBACD;YACH;QACF;IACF;IAEApB,OAAOuB,YAAY,CACjB,iBACA;QACEC,aAAa1B,YAAYa,aAAa,CAACa,WAAW;QAClDC,aAAa3B,YAAYa,aAAa,CAACe,UAAU,CAACC,KAAK;IACzD,GACA,OAAO,EAAEvB,UAAU,EAAEE,QAAQ,EAAED,KAAK,EAAE;QACpC,OAAO,MAAMF,KAAKC,YAAYC,OAAOC;IACvC;AAEJ,EAAC"}

package/dist/mcp/tools/auth/unlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unlock.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/auth/unlock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,UAAU,WAAY,SAAS,OAAO,cAAc,eAAe,OAAO,SA0DtF,CAAA"}
+{"version":3,"file":"unlock.d.ts","sourceRoot":"","sources":["../../../../src/mcp/tools/auth/unlock.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAI7C,eAAO,MAAM,UAAU,WAAY,SAAS,OAAO,cAAc,eAAe,OAAO,SA2DtF,CAAA"}

package/dist/mcp/tools/auth/unlock.js

@@ -11,7 +11,8 @@ export const unlockTool = (server, req, verboseLogs)=>{
                 data: {
                     email
                 },
-                overrideAccess: true
+                overrideAccess: false,
+                req
             });
             if (verboseLogs) {
                 payload.logger.info(`[payload-mcp] User account unlocked successfully for user: ${email}`);

package/dist/mcp/tools/auth/unlock.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/tools/auth/unlock.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const unlockTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {\n  const tool = async (collection: string, email: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info(\n        `[payload-mcp] Unlocking user account for user: ${email} in collection: ${collection}`,\n      )\n    }\n\n    try {\n      const result = await payload.unlock({\n        collection,\n        data: {\n          email,\n        },\n        overrideAccess: true,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info(`[payload-mcp] User account unlocked successfully for user: ${email}`)\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# User Account Unlocked\\n\\n**User:** ${email}\\n**Collection:** ${collection}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(\n        `[payload-mcp] Error unlocking user account for user ${email}: ${errorMessage}`,\n      )\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error unlocking user account for user \"${email}\"**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'unlock',\n    {\n      description: toolSchemas.unlock.description,\n      inputSchema: toolSchemas.unlock.parameters.shape,\n    },\n    async ({ collection, email }) => {\n      return await tool(collection, email)\n    },\n  )\n}\n"],"names":["toolSchemas","unlockTool","server","req","verboseLogs","tool","collection","email","payload","logger","info","result","unlock","data","overrideAccess","content","type","text","JSON","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,aAAa,CAACC,QAAmBC,KAAqBC;IACjE,MAAMC,OAAO,OAAOC,YAAoBC;QACtC,MAAMC,UAAUL,IAAIK,OAAO;QAE3B,IAAIJ,aAAa;YACfI,QAAQC,MAAM,CAACC,IAAI,CACjB,CAAC,+CAA+C,EAAEH,MAAM,gBAAgB,EAAED,YAAY;QAE1F;QAEA,IAAI;YACF,MAAMK,SAAS,MAAMH,QAAQI,MAAM,CAAC;gBAClCN;gBACAO,MAAM;oBACJN;gBACF;gBACAO,gBAAgB;YAClB;YAEA,IAAIV,aAAa;gBACfI,QAAQC,MAAM,CAACC,IAAI,CAAC,CAAC,2DAA2D,EAAEH,OAAO;YAC3F;YAEA,OAAO;gBACLQ,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,qCAAqC,EAAEV,MAAM,kBAAkB,EAAED,WAAW,gBAAgB,EAAEY,KAAKC,SAAS,CAACR,QAAQ,QAAQ,CAAC;oBACvI;iBACD;YACH;QACF,EAAE,OAAOS,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9Df,QAAQC,MAAM,CAACW,KAAK,CAClB,CAAC,oDAAoD,EAAEb,MAAM,EAAE,EAAEc,cAAc;YAGjF,OAAO;gBACLN,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,2CAA2C,EAAEV,MAAM,KAAK,EAAEc,cAAc;oBACjF;iBACD;YACH;QACF;IACF;IAEAnB,OAAOsB,YAAY,CACjB,UACA;QACEC,aAAazB,YAAYY,MAAM,CAACa,WAAW;QAC3CC,aAAa1B,YAAYY,MAAM,CAACe,UAAU,CAACC,KAAK;IAClD,GACA,OAAO,EAAEtB,UAAU,EAAEC,KAAK,EAAE;QAC1B,OAAO,MAAMF,KAAKC,YAAYC;IAChC;AAEJ,EAAC"}
+{"version":3,"sources":["../../../../src/mcp/tools/auth/unlock.ts"],"sourcesContent":["import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport type { PayloadRequest } from 'payload'\n\nimport { toolSchemas } from '../schemas.js'\n\nexport const unlockTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {\n  const tool = async (collection: string, email: string) => {\n    const payload = req.payload\n\n    if (verboseLogs) {\n      payload.logger.info(\n        `[payload-mcp] Unlocking user account for user: ${email} in collection: ${collection}`,\n      )\n    }\n\n    try {\n      const result = await payload.unlock({\n        collection,\n        data: {\n          email,\n        },\n        overrideAccess: false,\n        req,\n      })\n\n      if (verboseLogs) {\n        payload.logger.info(`[payload-mcp] User account unlocked successfully for user: ${email}`)\n      }\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `# User Account Unlocked\\n\\n**User:** ${email}\\n**Collection:** ${collection}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n          },\n        ],\n      }\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n      payload.logger.error(\n        `[payload-mcp] Error unlocking user account for user ${email}: ${errorMessage}`,\n      )\n\n      return {\n        content: [\n          {\n            type: 'text' as const,\n            text: `❌ **Error unlocking user account for user \"${email}\"**: ${errorMessage}`,\n          },\n        ],\n      }\n    }\n  }\n\n  server.registerTool(\n    'unlock',\n    {\n      description: toolSchemas.unlock.description,\n      inputSchema: toolSchemas.unlock.parameters.shape,\n    },\n    async ({ collection, email }) => {\n      return await tool(collection, email)\n    },\n  )\n}\n"],"names":["toolSchemas","unlockTool","server","req","verboseLogs","tool","collection","email","payload","logger","info","result","unlock","data","overrideAccess","content","type","text","JSON","stringify","error","errorMessage","Error","message","registerTool","description","inputSchema","parameters","shape"],"mappings":"AAGA,SAASA,WAAW,QAAQ,gBAAe;AAE3C,OAAO,MAAMC,aAAa,CAACC,QAAmBC,KAAqBC;IACjE,MAAMC,OAAO,OAAOC,YAAoBC;QACtC,MAAMC,UAAUL,IAAIK,OAAO;QAE3B,IAAIJ,aAAa;YACfI,QAAQC,MAAM,CAACC,IAAI,CACjB,CAAC,+CAA+C,EAAEH,MAAM,gBAAgB,EAAED,YAAY;QAE1F;QAEA,IAAI;YACF,MAAMK,SAAS,MAAMH,QAAQI,MAAM,CAAC;gBAClCN;gBACAO,MAAM;oBACJN;gBACF;gBACAO,gBAAgB;gBAChBX;YACF;YAEA,IAAIC,aAAa;gBACfI,QAAQC,MAAM,CAACC,IAAI,CAAC,CAAC,2DAA2D,EAAEH,OAAO;YAC3F;YAEA,OAAO;gBACLQ,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,qCAAqC,EAAEV,MAAM,kBAAkB,EAAED,WAAW,gBAAgB,EAAEY,KAAKC,SAAS,CAACR,QAAQ,QAAQ,CAAC;oBACvI;iBACD;YACH;QACF,EAAE,OAAOS,OAAO;YACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;YAC9Df,QAAQC,MAAM,CAACW,KAAK,CAClB,CAAC,oDAAoD,EAAEb,MAAM,EAAE,EAAEc,cAAc;YAGjF,OAAO;gBACLN,SAAS;oBACP;wBACEC,MAAM;wBACNC,MAAM,CAAC,2CAA2C,EAAEV,MAAM,KAAK,EAAEc,cAAc;oBACjF;iBACD;YACH;QACF;IACF;IAEAnB,OAAOsB,YAAY,CACjB,UACA;QACEC,aAAazB,YAAYY,MAAM,CAACa,WAAW;QAC3CC,aAAa1B,YAAYY,MAAM,CAACe,UAAU,CAACC,KAAK;IAClD,GACA,OAAO,EAAEtB,UAAU,EAAEC,KAAK,EAAE;QAC1B,OAAO,MAAMF,KAAKC,YAAYC;IAChC;AAEJ,EAAC"}

package/dist/mcp/tools/schemas.d.ts

@@ -338,16 +338,13 @@ export declare const toolSchemas: {
         description: string;
         parameters: z.ZodObject<{
             collection: z.ZodString;
-            disableEmail: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
             email: z.ZodString;
         }, "strip", z.ZodTypeAny, {
             collection: string;
             email: string;
-            disableEmail: boolean;
         }, {
             collection: string;
             email: string;
-            disableEmail?: boolean | undefined;
         }>;
     };
     unlock: {

package/dist/mcp/tools/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqfvB,CAAA"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgfvB,CAAA"}

package/dist/mcp/tools/schemas.js

@@ -181,7 +181,6 @@ export const toolSchemas = {
         description: 'Sends a password reset email to a user.',
         parameters: z.object({
             collection: z.string().describe('The collection containing the user (e.g., "users")'),
-            disableEmail: z.boolean().optional().default(false).describe('Whether to disable sending the email (for testing)'),
             email: z.string().email().describe('The user email address')
         })
     },

package/dist/mcp/tools/schemas.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/mcp/tools/schemas.ts"],"sourcesContent":["import { z } from 'zod'\n\nexport const toolSchemas = {\n  findGlobal: {\n    description: 'Find a Payload global singleton configuration.',\n    parameters: z.object({\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to retrieve data in (e.g., \"en\", \"es\"). Use \"all\" to retrieve all locales for localized fields',\n        ),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n    }),\n  },\n\n  findResources: {\n    description: 'Find documents in a collection by ID or where clause using Find or FindByID.',\n    parameters: z.object({\n      id: z\n        .union([z.string(), z.number()])\n        .optional()\n        .describe(\n          'Optional: specific document ID to retrieve. If not provided, returns all documents',\n        ),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('How many levels deep to populate relationships (default: 0)'),\n      draft: z\n        .boolean()\n        .optional()\n        .describe(\n          'Optional: Whether the document should be queried from the versions table/collection or not.',\n        ),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      limit: z\n        .number()\n        .int()\n        .min(1, 'Limit must be at least 1')\n        .max(100, 'Limit cannot exceed 100')\n        .optional()\n        .default(10)\n        .describe('Maximum number of documents to return (default: 10, max: 100)'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to retrieve data in (e.g., \"en\", \"es\"). Use \"all\" to retrieve all locales for localized fields',\n        ),\n      page: z\n        .number()\n        .int()\n        .min(1, 'Page must be at least 1')\n        .optional()\n        .default(1)\n        .describe('Page number for pagination (default: 1)'),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n      sort: z\n        .string()\n        .optional()\n        .describe('Field to sort by (e.g., \"createdAt\", \"-updatedAt\" for descending)'),\n      where: z\n        .string()\n        .optional()\n        .describe(\n          'Optional JSON string for where clause filtering (e.g., \\'{\"title\": {\"contains\": \"test\"}}\\')',\n        ),\n    }),\n  },\n\n  createResource: {\n    description: 'Create a document in a collection.',\n    parameters: z.object({\n      data: z.string().describe('JSON string containing the data for the new document'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('How many levels deep to populate relationships in response (default: 0)'),\n      draft: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to create the document as a draft'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to create the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n        ),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n    }),\n  },\n\n  updateResource: {\n    description: 'Update documents in a collection by ID or where clause.',\n    parameters: z.object({\n      id: z\n        .union([z.string(), z.number()])\n        .optional()\n        .describe('Optional: specific document ID to update'),\n      data: z.string().describe('JSON string containing the data to update'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      draft: z.boolean().optional().default(false).describe('Whether to update as a draft'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to update the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n        ),\n      overrideLock: z\n        .boolean()\n        .optional()\n        .default(true)\n        .describe('Whether to override document locks'),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n      where: z\n        .string()\n        .optional()\n        .describe('Optional: JSON string for where clause to update multiple documents'),\n    }),\n  },\n\n  deleteResource: {\n    description: 'Delete documents in a collection by ID or where clause.',\n    parameters: z.object({\n      id: z\n        .union([z.string(), z.number()])\n        .optional()\n        .describe('Optional: specific document ID to delete'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships in response'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code for the operation (e.g., \"en\", \"es\"). Defaults to the default locale',\n        ),\n      where: z\n        .string()\n        .optional()\n        .describe('Optional: JSON string for where clause to delete multiple documents'),\n    }),\n  },\n\n  updateGlobal: {\n    description: 'Update a Payload global singleton configuration.',\n    parameters: z.object({\n      data: z.string().describe('JSON string containing the data to update'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      draft: z.boolean().optional().default(false).describe('Whether to update as a draft'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to update data in (e.g., \"en\", \"es\"). Use \"all\" to update all locales for localized fields',\n        ),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"siteName\\\": true}'\",\n        ),\n    }),\n  },\n\n  // Experimental Below This Line\n  createCollection: {\n    description: 'Creates a new collection with specified fields and configuration.',\n    parameters: z.object({\n      collectionDescription: z\n        .string()\n        .optional()\n        .describe('Optional description for the collection'),\n      collectionName: z.string().describe('The name of the collection to create'),\n      fields: z.array(z.any()).describe('Array of field definitions for the collection'),\n      hasUpload: z\n        .boolean()\n        .optional()\n        .describe('Whether the collection should have upload capabilities'),\n    }),\n  },\n\n  findCollections: {\n    description: 'Finds and lists collections with optional content and document counts.',\n    parameters: z.object({\n      collectionName: z\n        .string()\n        .optional()\n        .describe('Optional: specific collection name to retrieve'),\n      includeContent: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to include collection file content'),\n      includeCount: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to include document counts for each collection'),\n    }),\n  },\n\n  updateCollection: {\n    description:\n      'Updates an existing collection with new fields, modifications, or configuration changes.',\n    parameters: z.object({\n      collectionName: z.string().describe('The name of the collection to update'),\n      configUpdates: z.any().optional().describe('Configuration updates (for update_config type)'),\n      fieldModifications: z\n        .array(z.any())\n        .optional()\n        .describe('Field modifications (for modify_field type)'),\n      fieldNamesToRemove: z\n        .array(z.string())\n        .optional()\n        .describe('Field names to remove (for remove_field type)'),\n      newContent: z\n        .string()\n        .optional()\n        .describe('New content to replace entire collection (for replace_content type)'),\n      newFields: z.array(z.any()).optional().describe('New fields to add (for add_field type)'),\n      updateType: z\n        .enum(['add_field', 'remove_field', 'modify_field', 'update_config', 'replace_content'])\n        .describe('Type of update to perform'),\n    }),\n  },\n\n  deleteCollection: {\n    description: 'Deletes a collection and optionally updates the configuration.',\n    parameters: z.object({\n      collectionName: z.string().describe('The name of the collection to delete'),\n      confirmDeletion: z.boolean().describe('Confirmation flag to prevent accidental deletion'),\n      updateConfig: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to update payload.config.ts to remove collection reference'),\n    }),\n  },\n\n  findConfig: {\n    description: 'Reads and displays the current configuration file.',\n    parameters: z.object({\n      includeMetadata: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to include file metadata (size, modified date, etc.)'),\n    }),\n  },\n\n  updateConfig: {\n    description: 'Updates the configuration file with various modifications.',\n    parameters: z.object({\n      adminConfig: z\n        .any()\n        .optional()\n        .describe('Admin configuration updates (for update_admin type)'),\n      collectionName: z\n        .string()\n        .optional()\n        .describe('Collection name (required for add_collection and remove_collection)'),\n      databaseConfig: z\n        .any()\n        .optional()\n        .describe('Database configuration updates (for update_database type)'),\n      newContent: z\n        .string()\n        .optional()\n        .describe('New configuration content (for replace_content type)'),\n      pluginUpdates: z\n        .any()\n        .optional()\n        .describe('Plugin configuration updates (for update_plugins type)'),\n      updateType: z\n        .enum([\n          'add_collection',\n          'remove_collection',\n          'update_admin',\n          'update_database',\n          'update_plugins',\n          'replace_content',\n        ])\n        .describe('Type of configuration update to perform'),\n    }),\n  },\n\n  auth: {\n    description: 'Checks authentication status for the current user.',\n    parameters: z.object({\n      headers: z\n        .string()\n        .optional()\n        .describe(\n          'Optional JSON string containing custom headers to send with the authentication request',\n        ),\n    }),\n  },\n\n  login: {\n    description: 'Authenticates a user with email and password.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      email: z.string().email().describe('The user email address'),\n      password: z.string().describe('The user password'),\n    }),\n  },\n\n  verify: {\n    description: 'Verifies a user email with a verification token.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      token: z.string().describe('The verification token sent to the user email'),\n    }),\n  },\n\n  resetPassword: {\n    description: 'Resets a user password with a reset token.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      password: z.string().describe('The new password for the user'),\n      token: z.string().describe('The password reset token sent to the user email'),\n    }),\n  },\n\n  forgotPassword: {\n    description: 'Sends a password reset email to a user.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      disableEmail: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to disable sending the email (for testing)'),\n      email: z.string().email().describe('The user email address'),\n    }),\n  },\n\n  unlock: {\n    description: 'Unlocks a user account that has been locked due to failed login attempts.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      email: z.string().email().describe('The user email address'),\n    }),\n  },\n\n  createJob: {\n    description: 'Creates a new job (task or workflow) with specified configuration.',\n    parameters: z.object({\n      description: z.string().describe('Description of what the job does'),\n      inputSchema: z.record(z.any()).optional().default({}).describe('Input schema for the job'),\n      jobData: z\n        .record(z.any())\n        .optional()\n        .default({})\n        .describe('Additional job configuration data'),\n      jobName: z\n        .string()\n        .min(1, 'Job name cannot be empty')\n        .regex(/^[a-z][\\w-]*$/i, 'Job name must be alphanumeric and can contain underscores/dashes')\n        .describe('The name of the job to create'),\n      jobSlug: z\n        .string()\n        .min(1, 'Job slug cannot be empty')\n        .regex(/^[a-z][a-z0-9-]*$/, 'Job slug must be kebab-case')\n        .describe('The slug for the job (kebab-case format)'),\n      jobType: z\n        .enum(['task', 'workflow'])\n        .describe('Whether to create a task (individual unit) or workflow (orchestrates tasks)'),\n      outputSchema: z.record(z.any()).optional().default({}).describe('Output schema for the job'),\n    }),\n  },\n\n  updateJob: {\n    description: 'Updates an existing job with new configuration, schema, or handler code.',\n    parameters: z.object({\n      configUpdate: z.record(z.any()).optional().describe('New configuration for the job'),\n      handlerCode: z\n        .string()\n        .optional()\n        .describe('New handler code to replace the existing handler'),\n      inputSchema: z.record(z.any()).optional().describe('New input schema for the job'),\n      jobSlug: z.string().describe('The slug of the job to update'),\n      outputSchema: z.record(z.any()).optional().describe('New output schema for the job'),\n      taskSequence: z.array(z.any()).optional().describe('New task sequence for workflows'),\n      updateType: z\n        .enum(['modify_schema', 'update_tasks', 'change_config', 'replace_handler'])\n        .describe('Type of update to perform on the job'),\n    }),\n  },\n\n  runJob: {\n    description: 'Runs a job with specified input data and queue options.',\n    parameters: z.object({\n      delay: z\n        .number()\n        .int()\n        .min(0)\n        .optional()\n        .describe('Delay in milliseconds before job execution'),\n      input: z.record(z.any()).describe('Input data for the job execution'),\n      jobSlug: z.string().describe('The slug of the job to run'),\n      priority: z\n        .number()\n        .int()\n        .min(1)\n        .max(10)\n        .optional()\n        .describe('Job priority (1-10, higher is more important)'),\n      queue: z\n        .string()\n        .optional()\n        .describe('Queue name to use for job execution (default: \"default\")'),\n    }),\n  },\n}\n"],"names":["z","toolSchemas","findGlobal","description","parameters","object","depth","number","int","min","max","optional","default","describe","fallbackLocale","string","locale","select","findResources","id","union","draft","boolean","limit","page","sort","where","createResource","data","updateResource","overrideLock","deleteResource","updateGlobal","createCollection","collectionDescription","collectionName","fields","array","any","hasUpload","findCollections","includeContent","includeCount","updateCollection","configUpdates","fieldModifications","fieldNamesToRemove","newContent","newFields","updateType","enum","deleteCollection","confirmDeletion","updateConfig","findConfig","includeMetadata","adminConfig","databaseConfig","pluginUpdates","auth","headers","login","collection","email","password","verify","token","resetPassword","forgotPassword","disableEmail","unlock","createJob","inputSchema","record","jobData","jobName","regex","jobSlug","jobType","outputSchema","updateJob","configUpdate","handlerCode","taskSequence","runJob","delay","input","priority","queue"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,OAAO,MAAMC,cAAc;IACzBC,YAAY;QACVC,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBC,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAK,eAAe;QACbf,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBc,IAAInB,EACDoB,KAAK,CAAC;gBAACpB,EAAEe,MAAM;gBAAIf,EAAEO,MAAM;aAAG,EAC9BI,QAAQ,GACRE,QAAQ,CACP;YAEJP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EACJsB,OAAO,GACPX,QAAQ,GACRE,QAAQ,CACP;YAEJC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZU,OAAOvB,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GAAG,4BACPC,GAAG,CAAC,KAAK,2BACTC,QAAQ,GACRC,OAAO,CAAC,IACRC,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJW,MAAMxB,EACHO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GAAG,2BACPE,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJY,MAAMzB,EACHe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZa,OAAO1B,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAc,gBAAgB;QACdxB,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBuB,MAAM5B,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC1BP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EACJsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;YACZC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAgB,gBAAgB;QACd1B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBc,IAAInB,EACDoB,KAAK,CAAC;gBAACpB,EAAEe,MAAM;gBAAIf,EAAEO,MAAM;aAAG,EAC9BI,QAAQ,GACRE,QAAQ,CAAC;YACZe,MAAM5B,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC1BP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EAAEsB,OAAO,GAAGX,QAAQ,GAAGC,OAAO,CAAC,OAAOC,QAAQ,CAAC;YACtDC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJiB,cAAc9B,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,MACRC,QAAQ,CAAC;YACZI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJa,OAAO1B,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;IAEAkB,gBAAgB;QACd5B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBc,IAAInB,EACDoB,KAAK,CAAC;gBAACpB,EAAEe,MAAM;gBAAIf,EAAEO,MAAM;aAAG,EAC9BI,QAAQ,GACRE,QAAQ,CAAC;YACZP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJa,OAAO1B,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;IAEAmB,cAAc;QACZ7B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBuB,MAAM5B,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC1BP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EAAEsB,OAAO,GAAGX,QAAQ,GAAGC,OAAO,CAAC,OAAOC,QAAQ,CAAC;YACtDC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEA,+BAA+B;IAC/BoB,kBAAkB;QAChB9B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB6B,uBAAuBlC,EACpBe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZsB,gBAAgBnC,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACpCuB,QAAQpC,EAAEqC,KAAK,CAACrC,EAAEsC,GAAG,IAAIzB,QAAQ,CAAC;YAClC0B,WAAWvC,EACRsB,OAAO,GACPX,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;IAEA2B,iBAAiB;QACfrC,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB8B,gBAAgBnC,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ4B,gBAAgBzC,EACbsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;YACZ6B,cAAc1C,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;QACd;IACF;IAEA8B,kBAAkB;QAChBxC,aACE;QACFC,YAAYJ,EAAEK,MAAM,CAAC;YACnB8B,gBAAgBnC,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACpC+B,eAAe5C,EAAEsC,GAAG,GAAG3B,QAAQ,GAAGE,QAAQ,CAAC;YAC3CgC,oBAAoB7C,EACjBqC,KAAK,CAACrC,EAAEsC,GAAG,IACX3B,QAAQ,GACRE,QAAQ,CAAC;YACZiC,oBAAoB9C,EACjBqC,KAAK,CAACrC,EAAEe,MAAM,IACdJ,QAAQ,GACRE,QAAQ,CAAC;YACZkC,YAAY/C,EACTe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZmC,WAAWhD,EAAEqC,KAAK,CAACrC,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YAChDoC,YAAYjD,EACTkD,IAAI,CAAC;gBAAC;gBAAa;gBAAgB;gBAAgB;gBAAiB;aAAkB,EACtFrC,QAAQ,CAAC;QACd;IACF;IAEAsC,kBAAkB;QAChBhD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB8B,gBAAgBnC,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACpCuC,iBAAiBpD,EAAEsB,OAAO,GAAGT,QAAQ,CAAC;YACtCwC,cAAcrD,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;QACd;IACF;IAEAyC,YAAY;QACVnD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBkD,iBAAiBvD,EACdsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;QACd;IACF;IAEAwC,cAAc;QACZlD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBmD,aAAaxD,EACVsC,GAAG,GACH3B,QAAQ,GACRE,QAAQ,CAAC;YACZsB,gBAAgBnC,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ4C,gBAAgBzD,EACbsC,GAAG,GACH3B,QAAQ,GACRE,QAAQ,CAAC;YACZkC,YAAY/C,EACTe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ6C,eAAe1D,EACZsC,GAAG,GACH3B,QAAQ,GACRE,QAAQ,CAAC;YACZoC,YAAYjD,EACTkD,IAAI,CAAC;gBACJ;gBACA;gBACA;gBACA;gBACA;gBACA;aACD,EACArC,QAAQ,CAAC;QACd;IACF;IAEA8C,MAAM;QACJxD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBuD,SAAS5D,EACNe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAgD,OAAO;QACL1D,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZkD,OAAO/D,EAAEe,MAAM,GAAGgD,KAAK,GAAGlD,QAAQ,CAAC;YACnCmD,UAAUhE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;QAChC;IACF;IAEAoD,QAAQ;QACN9D,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCqD,OAAOlE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;QAC7B;IACF;IAEAsD,eAAe;QACbhE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCmD,UAAUhE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC9BqD,OAAOlE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;QAC7B;IACF;IAEAuD,gBAAgB;QACdjE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCwD,cAAcrE,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;YACZkD,OAAO/D,EAAEe,MAAM,GAAGgD,KAAK,GAAGlD,QAAQ,CAAC;QACrC;IACF;IAEAyD,QAAQ;QACNnE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCkD,OAAO/D,EAAEe,MAAM,GAAGgD,KAAK,GAAGlD,QAAQ,CAAC;QACrC;IACF;IAEA0D,WAAW;QACTpE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBF,aAAaH,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACjC2D,aAAaxE,EAAEyE,MAAM,CAACzE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGC,OAAO,CAAC,CAAC,GAAGC,QAAQ,CAAC;YAC/D6D,SAAS1E,EACNyE,MAAM,CAACzE,EAAEsC,GAAG,IACZ3B,QAAQ,GACRC,OAAO,CAAC,CAAC,GACTC,QAAQ,CAAC;YACZ8D,SAAS3E,EACNe,MAAM,GACNN,GAAG,CAAC,GAAG,4BACPmE,KAAK,CAAC,kBAAkB,oEACxB/D,QAAQ,CAAC;YACZgE,SAAS7E,EACNe,MAAM,GACNN,GAAG,CAAC,GAAG,4BACPmE,KAAK,CAAC,qBAAqB,+BAC3B/D,QAAQ,CAAC;YACZiE,SAAS9E,EACNkD,IAAI,CAAC;gBAAC;gBAAQ;aAAW,EACzBrC,QAAQ,CAAC;YACZkE,cAAc/E,EAAEyE,MAAM,CAACzE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGC,OAAO,CAAC,CAAC,GAAGC,QAAQ,CAAC;QAClE;IACF;IAEAmE,WAAW;QACT7E,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB4E,cAAcjF,EAAEyE,MAAM,CAACzE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACpDqE,aAAalF,EACVe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ2D,aAAaxE,EAAEyE,MAAM,CAACzE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACnDgE,SAAS7E,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC7BkE,cAAc/E,EAAEyE,MAAM,CAACzE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACpDsE,cAAcnF,EAAEqC,KAAK,CAACrC,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACnDoC,YAAYjD,EACTkD,IAAI,CAAC;gBAAC;gBAAiB;gBAAgB;gBAAiB;aAAkB,EAC1ErC,QAAQ,CAAC;QACd;IACF;IAEAuE,QAAQ;QACNjF,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBgF,OAAOrF,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJE,QAAQ,GACRE,QAAQ,CAAC;YACZyE,OAAOtF,EAAEyE,MAAM,CAACzE,EAAEsC,GAAG,IAAIzB,QAAQ,CAAC;YAClCgE,SAAS7E,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC7B0E,UAAUvF,EACPO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRE,QAAQ,CAAC;YACZ2E,OAAOxF,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../../src/mcp/tools/schemas.ts"],"sourcesContent":["import { z } from 'zod'\n\nexport const toolSchemas = {\n  findGlobal: {\n    description: 'Find a Payload global singleton configuration.',\n    parameters: z.object({\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to retrieve data in (e.g., \"en\", \"es\"). Use \"all\" to retrieve all locales for localized fields',\n        ),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n    }),\n  },\n\n  findResources: {\n    description: 'Find documents in a collection by ID or where clause using Find or FindByID.',\n    parameters: z.object({\n      id: z\n        .union([z.string(), z.number()])\n        .optional()\n        .describe(\n          'Optional: specific document ID to retrieve. If not provided, returns all documents',\n        ),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('How many levels deep to populate relationships (default: 0)'),\n      draft: z\n        .boolean()\n        .optional()\n        .describe(\n          'Optional: Whether the document should be queried from the versions table/collection or not.',\n        ),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      limit: z\n        .number()\n        .int()\n        .min(1, 'Limit must be at least 1')\n        .max(100, 'Limit cannot exceed 100')\n        .optional()\n        .default(10)\n        .describe('Maximum number of documents to return (default: 10, max: 100)'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to retrieve data in (e.g., \"en\", \"es\"). Use \"all\" to retrieve all locales for localized fields',\n        ),\n      page: z\n        .number()\n        .int()\n        .min(1, 'Page must be at least 1')\n        .optional()\n        .default(1)\n        .describe('Page number for pagination (default: 1)'),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n      sort: z\n        .string()\n        .optional()\n        .describe('Field to sort by (e.g., \"createdAt\", \"-updatedAt\" for descending)'),\n      where: z\n        .string()\n        .optional()\n        .describe(\n          'Optional JSON string for where clause filtering (e.g., \\'{\"title\": {\"contains\": \"test\"}}\\')',\n        ),\n    }),\n  },\n\n  createResource: {\n    description: 'Create a document in a collection.',\n    parameters: z.object({\n      data: z.string().describe('JSON string containing the data for the new document'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('How many levels deep to populate relationships in response (default: 0)'),\n      draft: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to create the document as a draft'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to create the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n        ),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n    }),\n  },\n\n  updateResource: {\n    description: 'Update documents in a collection by ID or where clause.',\n    parameters: z.object({\n      id: z\n        .union([z.string(), z.number()])\n        .optional()\n        .describe('Optional: specific document ID to update'),\n      data: z.string().describe('JSON string containing the data to update'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      draft: z.boolean().optional().default(false).describe('Whether to update as a draft'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to update the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n        ),\n      overrideLock: z\n        .boolean()\n        .optional()\n        .default(true)\n        .describe('Whether to override document locks'),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"title\\\": true}'\",\n        ),\n      where: z\n        .string()\n        .optional()\n        .describe('Optional: JSON string for where clause to update multiple documents'),\n    }),\n  },\n\n  deleteResource: {\n    description: 'Delete documents in a collection by ID or where clause.',\n    parameters: z.object({\n      id: z\n        .union([z.string(), z.number()])\n        .optional()\n        .describe('Optional: specific document ID to delete'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships in response'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code for the operation (e.g., \"en\", \"es\"). Defaults to the default locale',\n        ),\n      where: z\n        .string()\n        .optional()\n        .describe('Optional: JSON string for where clause to delete multiple documents'),\n    }),\n  },\n\n  updateGlobal: {\n    description: 'Update a Payload global singleton configuration.',\n    parameters: z.object({\n      data: z.string().describe('JSON string containing the data to update'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      draft: z.boolean().optional().default(false).describe('Whether to update as a draft'),\n      fallbackLocale: z\n        .string()\n        .optional()\n        .describe('Optional: fallback locale code to use when requested locale is not available'),\n      locale: z\n        .string()\n        .optional()\n        .describe(\n          'Optional: locale code to update data in (e.g., \"en\", \"es\"). Use \"all\" to update all locales for localized fields',\n        ),\n      select: z\n        .string()\n        .optional()\n        .describe(\n          \"Optional: define exactly which fields you'd like to return in the response (JSON), e.g., '{\\\"siteName\\\": true}'\",\n        ),\n    }),\n  },\n\n  // Experimental Below This Line\n  createCollection: {\n    description: 'Creates a new collection with specified fields and configuration.',\n    parameters: z.object({\n      collectionDescription: z\n        .string()\n        .optional()\n        .describe('Optional description for the collection'),\n      collectionName: z.string().describe('The name of the collection to create'),\n      fields: z.array(z.any()).describe('Array of field definitions for the collection'),\n      hasUpload: z\n        .boolean()\n        .optional()\n        .describe('Whether the collection should have upload capabilities'),\n    }),\n  },\n\n  findCollections: {\n    description: 'Finds and lists collections with optional content and document counts.',\n    parameters: z.object({\n      collectionName: z\n        .string()\n        .optional()\n        .describe('Optional: specific collection name to retrieve'),\n      includeContent: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to include collection file content'),\n      includeCount: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to include document counts for each collection'),\n    }),\n  },\n\n  updateCollection: {\n    description:\n      'Updates an existing collection with new fields, modifications, or configuration changes.',\n    parameters: z.object({\n      collectionName: z.string().describe('The name of the collection to update'),\n      configUpdates: z.any().optional().describe('Configuration updates (for update_config type)'),\n      fieldModifications: z\n        .array(z.any())\n        .optional()\n        .describe('Field modifications (for modify_field type)'),\n      fieldNamesToRemove: z\n        .array(z.string())\n        .optional()\n        .describe('Field names to remove (for remove_field type)'),\n      newContent: z\n        .string()\n        .optional()\n        .describe('New content to replace entire collection (for replace_content type)'),\n      newFields: z.array(z.any()).optional().describe('New fields to add (for add_field type)'),\n      updateType: z\n        .enum(['add_field', 'remove_field', 'modify_field', 'update_config', 'replace_content'])\n        .describe('Type of update to perform'),\n    }),\n  },\n\n  deleteCollection: {\n    description: 'Deletes a collection and optionally updates the configuration.',\n    parameters: z.object({\n      collectionName: z.string().describe('The name of the collection to delete'),\n      confirmDeletion: z.boolean().describe('Confirmation flag to prevent accidental deletion'),\n      updateConfig: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to update payload.config.ts to remove collection reference'),\n    }),\n  },\n\n  findConfig: {\n    description: 'Reads and displays the current configuration file.',\n    parameters: z.object({\n      includeMetadata: z\n        .boolean()\n        .optional()\n        .default(false)\n        .describe('Whether to include file metadata (size, modified date, etc.)'),\n    }),\n  },\n\n  updateConfig: {\n    description: 'Updates the configuration file with various modifications.',\n    parameters: z.object({\n      adminConfig: z\n        .any()\n        .optional()\n        .describe('Admin configuration updates (for update_admin type)'),\n      collectionName: z\n        .string()\n        .optional()\n        .describe('Collection name (required for add_collection and remove_collection)'),\n      databaseConfig: z\n        .any()\n        .optional()\n        .describe('Database configuration updates (for update_database type)'),\n      newContent: z\n        .string()\n        .optional()\n        .describe('New configuration content (for replace_content type)'),\n      pluginUpdates: z\n        .any()\n        .optional()\n        .describe('Plugin configuration updates (for update_plugins type)'),\n      updateType: z\n        .enum([\n          'add_collection',\n          'remove_collection',\n          'update_admin',\n          'update_database',\n          'update_plugins',\n          'replace_content',\n        ])\n        .describe('Type of configuration update to perform'),\n    }),\n  },\n\n  auth: {\n    description: 'Checks authentication status for the current user.',\n    parameters: z.object({\n      headers: z\n        .string()\n        .optional()\n        .describe(\n          'Optional JSON string containing custom headers to send with the authentication request',\n        ),\n    }),\n  },\n\n  login: {\n    description: 'Authenticates a user with email and password.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      depth: z\n        .number()\n        .int()\n        .min(0)\n        .max(10)\n        .optional()\n        .default(0)\n        .describe('Depth of population for relationships'),\n      email: z.string().email().describe('The user email address'),\n      password: z.string().describe('The user password'),\n    }),\n  },\n\n  verify: {\n    description: 'Verifies a user email with a verification token.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      token: z.string().describe('The verification token sent to the user email'),\n    }),\n  },\n\n  resetPassword: {\n    description: 'Resets a user password with a reset token.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      password: z.string().describe('The new password for the user'),\n      token: z.string().describe('The password reset token sent to the user email'),\n    }),\n  },\n\n  forgotPassword: {\n    description: 'Sends a password reset email to a user.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      email: z.string().email().describe('The user email address'),\n    }),\n  },\n\n  unlock: {\n    description: 'Unlocks a user account that has been locked due to failed login attempts.',\n    parameters: z.object({\n      collection: z.string().describe('The collection containing the user (e.g., \"users\")'),\n      email: z.string().email().describe('The user email address'),\n    }),\n  },\n\n  createJob: {\n    description: 'Creates a new job (task or workflow) with specified configuration.',\n    parameters: z.object({\n      description: z.string().describe('Description of what the job does'),\n      inputSchema: z.record(z.any()).optional().default({}).describe('Input schema for the job'),\n      jobData: z\n        .record(z.any())\n        .optional()\n        .default({})\n        .describe('Additional job configuration data'),\n      jobName: z\n        .string()\n        .min(1, 'Job name cannot be empty')\n        .regex(/^[a-z][\\w-]*$/i, 'Job name must be alphanumeric and can contain underscores/dashes')\n        .describe('The name of the job to create'),\n      jobSlug: z\n        .string()\n        .min(1, 'Job slug cannot be empty')\n        .regex(/^[a-z][a-z0-9-]*$/, 'Job slug must be kebab-case')\n        .describe('The slug for the job (kebab-case format)'),\n      jobType: z\n        .enum(['task', 'workflow'])\n        .describe('Whether to create a task (individual unit) or workflow (orchestrates tasks)'),\n      outputSchema: z.record(z.any()).optional().default({}).describe('Output schema for the job'),\n    }),\n  },\n\n  updateJob: {\n    description: 'Updates an existing job with new configuration, schema, or handler code.',\n    parameters: z.object({\n      configUpdate: z.record(z.any()).optional().describe('New configuration for the job'),\n      handlerCode: z\n        .string()\n        .optional()\n        .describe('New handler code to replace the existing handler'),\n      inputSchema: z.record(z.any()).optional().describe('New input schema for the job'),\n      jobSlug: z.string().describe('The slug of the job to update'),\n      outputSchema: z.record(z.any()).optional().describe('New output schema for the job'),\n      taskSequence: z.array(z.any()).optional().describe('New task sequence for workflows'),\n      updateType: z\n        .enum(['modify_schema', 'update_tasks', 'change_config', 'replace_handler'])\n        .describe('Type of update to perform on the job'),\n    }),\n  },\n\n  runJob: {\n    description: 'Runs a job with specified input data and queue options.',\n    parameters: z.object({\n      delay: z\n        .number()\n        .int()\n        .min(0)\n        .optional()\n        .describe('Delay in milliseconds before job execution'),\n      input: z.record(z.any()).describe('Input data for the job execution'),\n      jobSlug: z.string().describe('The slug of the job to run'),\n      priority: z\n        .number()\n        .int()\n        .min(1)\n        .max(10)\n        .optional()\n        .describe('Job priority (1-10, higher is more important)'),\n      queue: z\n        .string()\n        .optional()\n        .describe('Queue name to use for job execution (default: \"default\")'),\n    }),\n  },\n}\n"],"names":["z","toolSchemas","findGlobal","description","parameters","object","depth","number","int","min","max","optional","default","describe","fallbackLocale","string","locale","select","findResources","id","union","draft","boolean","limit","page","sort","where","createResource","data","updateResource","overrideLock","deleteResource","updateGlobal","createCollection","collectionDescription","collectionName","fields","array","any","hasUpload","findCollections","includeContent","includeCount","updateCollection","configUpdates","fieldModifications","fieldNamesToRemove","newContent","newFields","updateType","enum","deleteCollection","confirmDeletion","updateConfig","findConfig","includeMetadata","adminConfig","databaseConfig","pluginUpdates","auth","headers","login","collection","email","password","verify","token","resetPassword","forgotPassword","unlock","createJob","inputSchema","record","jobData","jobName","regex","jobSlug","jobType","outputSchema","updateJob","configUpdate","handlerCode","taskSequence","runJob","delay","input","priority","queue"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,OAAO,MAAMC,cAAc;IACzBC,YAAY;QACVC,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBC,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAK,eAAe;QACbf,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBc,IAAInB,EACDoB,KAAK,CAAC;gBAACpB,EAAEe,MAAM;gBAAIf,EAAEO,MAAM;aAAG,EAC9BI,QAAQ,GACRE,QAAQ,CACP;YAEJP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EACJsB,OAAO,GACPX,QAAQ,GACRE,QAAQ,CACP;YAEJC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZU,OAAOvB,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GAAG,4BACPC,GAAG,CAAC,KAAK,2BACTC,QAAQ,GACRC,OAAO,CAAC,IACRC,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJW,MAAMxB,EACHO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GAAG,2BACPE,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJY,MAAMzB,EACHe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZa,OAAO1B,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAc,gBAAgB;QACdxB,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBuB,MAAM5B,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC1BP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EACJsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;YACZC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAgB,gBAAgB;QACd1B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBc,IAAInB,EACDoB,KAAK,CAAC;gBAACpB,EAAEe,MAAM;gBAAIf,EAAEO,MAAM;aAAG,EAC9BI,QAAQ,GACRE,QAAQ,CAAC;YACZe,MAAM5B,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC1BP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EAAEsB,OAAO,GAAGX,QAAQ,GAAGC,OAAO,CAAC,OAAOC,QAAQ,CAAC;YACtDC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJiB,cAAc9B,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,MACRC,QAAQ,CAAC;YACZI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJa,OAAO1B,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;IAEAkB,gBAAgB;QACd5B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBc,IAAInB,EACDoB,KAAK,CAAC;gBAACpB,EAAEe,MAAM;gBAAIf,EAAEO,MAAM;aAAG,EAC9BI,QAAQ,GACRE,QAAQ,CAAC;YACZP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJa,OAAO1B,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;IAEAmB,cAAc;QACZ7B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBuB,MAAM5B,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC1BP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZQ,OAAOrB,EAAEsB,OAAO,GAAGX,QAAQ,GAAGC,OAAO,CAAC,OAAOC,QAAQ,CAAC;YACtDC,gBAAgBd,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZG,QAAQhB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;YAEJI,QAAQjB,EACLe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEA,+BAA+B;IAC/BoB,kBAAkB;QAChB9B,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB6B,uBAAuBlC,EACpBe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZsB,gBAAgBnC,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACpCuB,QAAQpC,EAAEqC,KAAK,CAACrC,EAAEsC,GAAG,IAAIzB,QAAQ,CAAC;YAClC0B,WAAWvC,EACRsB,OAAO,GACPX,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;IAEA2B,iBAAiB;QACfrC,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB8B,gBAAgBnC,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ4B,gBAAgBzC,EACbsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;YACZ6B,cAAc1C,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;QACd;IACF;IAEA8B,kBAAkB;QAChBxC,aACE;QACFC,YAAYJ,EAAEK,MAAM,CAAC;YACnB8B,gBAAgBnC,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACpC+B,eAAe5C,EAAEsC,GAAG,GAAG3B,QAAQ,GAAGE,QAAQ,CAAC;YAC3CgC,oBAAoB7C,EACjBqC,KAAK,CAACrC,EAAEsC,GAAG,IACX3B,QAAQ,GACRE,QAAQ,CAAC;YACZiC,oBAAoB9C,EACjBqC,KAAK,CAACrC,EAAEe,MAAM,IACdJ,QAAQ,GACRE,QAAQ,CAAC;YACZkC,YAAY/C,EACTe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZmC,WAAWhD,EAAEqC,KAAK,CAACrC,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YAChDoC,YAAYjD,EACTkD,IAAI,CAAC;gBAAC;gBAAa;gBAAgB;gBAAgB;gBAAiB;aAAkB,EACtFrC,QAAQ,CAAC;QACd;IACF;IAEAsC,kBAAkB;QAChBhD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB8B,gBAAgBnC,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACpCuC,iBAAiBpD,EAAEsB,OAAO,GAAGT,QAAQ,CAAC;YACtCwC,cAAcrD,EACXsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;QACd;IACF;IAEAyC,YAAY;QACVnD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBkD,iBAAiBvD,EACdsB,OAAO,GACPX,QAAQ,GACRC,OAAO,CAAC,OACRC,QAAQ,CAAC;QACd;IACF;IAEAwC,cAAc;QACZlD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBmD,aAAaxD,EACVsC,GAAG,GACH3B,QAAQ,GACRE,QAAQ,CAAC;YACZsB,gBAAgBnC,EACbe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ4C,gBAAgBzD,EACbsC,GAAG,GACH3B,QAAQ,GACRE,QAAQ,CAAC;YACZkC,YAAY/C,EACTe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ6C,eAAe1D,EACZsC,GAAG,GACH3B,QAAQ,GACRE,QAAQ,CAAC;YACZoC,YAAYjD,EACTkD,IAAI,CAAC;gBACJ;gBACA;gBACA;gBACA;gBACA;gBACA;aACD,EACArC,QAAQ,CAAC;QACd;IACF;IAEA8C,MAAM;QACJxD,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBuD,SAAS5D,EACNe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CACP;QAEN;IACF;IAEAgD,OAAO;QACL1D,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCP,OAAON,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRC,OAAO,CAAC,GACRC,QAAQ,CAAC;YACZkD,OAAO/D,EAAEe,MAAM,GAAGgD,KAAK,GAAGlD,QAAQ,CAAC;YACnCmD,UAAUhE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;QAChC;IACF;IAEAoD,QAAQ;QACN9D,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCqD,OAAOlE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;QAC7B;IACF;IAEAsD,eAAe;QACbhE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCmD,UAAUhE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC9BqD,OAAOlE,EAAEe,MAAM,GAAGF,QAAQ,CAAC;QAC7B;IACF;IAEAuD,gBAAgB;QACdjE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCkD,OAAO/D,EAAEe,MAAM,GAAGgD,KAAK,GAAGlD,QAAQ,CAAC;QACrC;IACF;IAEAwD,QAAQ;QACNlE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnByD,YAAY9D,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAChCkD,OAAO/D,EAAEe,MAAM,GAAGgD,KAAK,GAAGlD,QAAQ,CAAC;QACrC;IACF;IAEAyD,WAAW;QACTnE,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnBF,aAAaH,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YACjC0D,aAAavE,EAAEwE,MAAM,CAACxE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGC,OAAO,CAAC,CAAC,GAAGC,QAAQ,CAAC;YAC/D4D,SAASzE,EACNwE,MAAM,CAACxE,EAAEsC,GAAG,IACZ3B,QAAQ,GACRC,OAAO,CAAC,CAAC,GACTC,QAAQ,CAAC;YACZ6D,SAAS1E,EACNe,MAAM,GACNN,GAAG,CAAC,GAAG,4BACPkE,KAAK,CAAC,kBAAkB,oEACxB9D,QAAQ,CAAC;YACZ+D,SAAS5E,EACNe,MAAM,GACNN,GAAG,CAAC,GAAG,4BACPkE,KAAK,CAAC,qBAAqB,+BAC3B9D,QAAQ,CAAC;YACZgE,SAAS7E,EACNkD,IAAI,CAAC;gBAAC;gBAAQ;aAAW,EACzBrC,QAAQ,CAAC;YACZiE,cAAc9E,EAAEwE,MAAM,CAACxE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGC,OAAO,CAAC,CAAC,GAAGC,QAAQ,CAAC;QAClE;IACF;IAEAkE,WAAW;QACT5E,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB2E,cAAchF,EAAEwE,MAAM,CAACxE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACpDoE,aAAajF,EACVe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;YACZ0D,aAAavE,EAAEwE,MAAM,CAACxE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACnD+D,SAAS5E,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC7BiE,cAAc9E,EAAEwE,MAAM,CAACxE,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACpDqE,cAAclF,EAAEqC,KAAK,CAACrC,EAAEsC,GAAG,IAAI3B,QAAQ,GAAGE,QAAQ,CAAC;YACnDoC,YAAYjD,EACTkD,IAAI,CAAC;gBAAC;gBAAiB;gBAAgB;gBAAiB;aAAkB,EAC1ErC,QAAQ,CAAC;QACd;IACF;IAEAsE,QAAQ;QACNhF,aAAa;QACbC,YAAYJ,EAAEK,MAAM,CAAC;YACnB+E,OAAOpF,EACJO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJE,QAAQ,GACRE,QAAQ,CAAC;YACZwE,OAAOrF,EAAEwE,MAAM,CAACxE,EAAEsC,GAAG,IAAIzB,QAAQ,CAAC;YAClC+D,SAAS5E,EAAEe,MAAM,GAAGF,QAAQ,CAAC;YAC7ByE,UAAUtF,EACPO,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,GACRE,QAAQ,CAAC;YACZ0E,OAAOvF,EACJe,MAAM,GACNJ,QAAQ,GACRE,QAAQ,CAAC;QACd;IACF;AACF,EAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/plugin-mcp",
-  "version": "3.89.0",
+  "version": "3.90.0",
   "description": "MCP (Model Context Protocol) capabilities with Payload",
   "keywords": [
     "plugin",
@@ -45,10 +45,10 @@
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "3.28.0",
-    "payload": "3.89.0"
+    "payload": "3.90.0"
   },
   "peerDependencies": {
-    "payload": "3.89.0"
+    "payload": "3.90.0"
   },
   "homepage:": "https://payloadcms.com",
   "scripts": {

package/src/mcp/tools/auth/auth.spec.ts

@@ -0,0 +1,98 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'
+import type { Payload, PayloadRequest } from 'payload'
+
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => ({
+  createLocalReq: vi.fn(),
+}))
+
+vi.mock('payload', () => ({
+  createLocalReq: mocks.createLocalReq,
+}))
+
+import { authTool } from './auth.js'
+
+type AuthToolResult = {
+  content: Array<{
+    text: string
+    type: 'text'
+  }>
+}
+
+type AuthToolHandler = (args: { headers?: string }) => Promise<AuthToolResult>
+
+describe('authTool', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('should omit user fields without read access from authentication status', async () => {
+    const internalNotes = 'private authentication notes'
+    const authenticatedUser = {
+      _sid: 'session-id',
+      _strategy: 'local-jwt',
+      collection: 'users',
+      id: 'user-id',
+      internalNotes,
+    }
+    const payload = {
+      auth: vi.fn(async ({ req }: { req: PayloadRequest }) => {
+        req.user = authenticatedUser
+
+        return { user: authenticatedUser }
+      }),
+      findByID: vi.fn(async ({ overrideAccess }: { overrideAccess: boolean }) =>
+        overrideAccess
+          ? authenticatedUser
+          : { email: 'user@example.com', id: authenticatedUser.id },
+      ),
+      logger: {
+        error: vi.fn(),
+        info: vi.fn(),
+        warn: vi.fn(),
+      },
+    } as unknown as Payload
+    const authReq = { payload } as PayloadRequest
+    const req = { payload } as PayloadRequest
+    let handler: AuthToolHandler | undefined
+    const server = {
+      registerTool: (_name: string, _definition: unknown, registeredHandler: AuthToolHandler) => {
+        handler = registeredHandler
+      },
+    } as unknown as McpServer
+
+    mocks.createLocalReq.mockResolvedValue(authReq)
+    authTool(server, req, false)
+
+    if (!handler) {
+      throw new Error('Auth tool was not registered')
+    }
+
+    const result = await handler({
+      headers: JSON.stringify({ Authorization: 'JWT token' }),
+    })
+    const json = result.content[0]!.text.match(/```json\n([\s\S]*?)\n```/)?.[1]
+
+    expect(json).toBeDefined()
+
+    const authenticationStatus = JSON.parse(json!)
+
+    expect(authReq.user).toBe(authenticatedUser)
+    expect(payload.findByID).toHaveBeenCalledWith({
+      id: authenticatedUser.id,
+      collection: authenticatedUser.collection,
+      overrideAccess: false,
+      req: authReq,
+    })
+    expect(authenticationStatus.user).toMatchObject({
+      _sid: authenticatedUser._sid,
+      _strategy: authenticatedUser._strategy,
+      collection: authenticatedUser.collection,
+      email: 'user@example.com',
+      id: authenticatedUser.id,
+    })
+    expect(authenticationStatus.user).not.toHaveProperty('internalNotes')
+    expect(JSON.stringify(authenticationStatus)).not.toContain(internalNotes)
+  })
+})

package/src/mcp/tools/auth/auth.ts

@@ -1,6 +1,8 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'
 import type { PayloadRequest } from 'payload'
 
+import { createLocalReq } from 'payload'
+
 import { toolSchemas } from '../schemas.js'
 
 export const authTool = (server: McpServer, req: PayloadRequest, verboseLogs: boolean) => {
@@ -27,9 +29,25 @@ export const authTool = (server: McpServer, req: PayloadRequest, verboseLogs: bo
         }
       }
 
-      const result = await payload.auth({
-        headers: authHeaders,
-      })
+      const authReq = await createLocalReq({ req: { headers: authHeaders } }, payload)
+      const result = await payload.auth({ headers: authHeaders, req: authReq })
+
+      if (result.user) {
+        const authenticatedUser = result.user
+        const user = await payload.findByID({
+          id: authenticatedUser.id,
+          collection: authenticatedUser.collection,
+          overrideAccess: false,
+          req: authReq,
+        })
+
+        result.user = {
+          ...user,
+          _sid: authenticatedUser._sid,
+          _strategy: authenticatedUser._strategy,
+          collection: authenticatedUser.collection,
+        }
+      }
 
       if (verboseLogs) {
         payload.logger.info('[payload-mcp] Authentication check completed successfully')

package/src/mcp/tools/auth/forgotPassword.ts

@@ -8,7 +8,7 @@ export const forgotPasswordTool = (
   req: PayloadRequest,
   verboseLogs: boolean,
 ) => {
-  const tool = async (collection: string, email: string, disableEmail: boolean = false) => {
+  const tool = async (collection: string, email: string) => {
     const payload = req.payload
 
     if (verboseLogs) {
@@ -18,12 +18,14 @@ export const forgotPasswordTool = (
     }
 
     try {
-      const result = await payload.forgotPassword({
+      await payload.forgotPassword({
         collection,
         data: {
           email,
         },
-        disableEmail,
+        disableEmail: false,
+        overrideAccess: false,
+        req,
       })
 
       if (verboseLogs) {
@@ -36,7 +38,7 @@ export const forgotPasswordTool = (
         content: [
           {
             type: 'text' as const,
-            text: `# Password Reset Email Sent\n\n**User:** ${email}\n**Collection:** ${collection}\n**Email Disabled:** ${disableEmail}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``,
+            text: 'If an account matches that email, password reset instructions have been sent.',
           },
         ],
       }
@@ -63,8 +65,8 @@ export const forgotPasswordTool = (
       description: toolSchemas.forgotPassword.description,
       inputSchema: toolSchemas.forgotPassword.parameters.shape,
     },
-    async ({ collection, disableEmail, email }) => {
-      return await tool(collection, email, disableEmail)
+    async ({ collection, email }) => {
+      return await tool(collection, email)
     },
   )
 }

package/src/mcp/tools/auth/resetPassword.ts

@@ -18,7 +18,7 @@ export const resetPasswordTool = (server: McpServer, req: PayloadRequest, verbos
           password,
           token,
         },
-        overrideAccess: true,
+        overrideAccess: false,
       })
 
       if (verboseLogs) {

package/src/mcp/tools/auth/unlock.ts

@@ -19,7 +19,8 @@ export const unlockTool = (server: McpServer, req: PayloadRequest, verboseLogs:
         data: {
           email,
         },
-        overrideAccess: true,
+        overrideAccess: false,
+        req,
       })
 
       if (verboseLogs) {

package/src/mcp/tools/schemas.ts

@@ -415,11 +415,6 @@ export const toolSchemas = {
     description: 'Sends a password reset email to a user.',
     parameters: z.object({
       collection: z.string().describe('The collection containing the user (e.g., "users")'),
-      disableEmail: z
-        .boolean()
-        .optional()
-        .default(false)
-        .describe('Whether to disable sending the email (for testing)'),
       email: z.string().email().describe('The user email address'),
     }),
   },