@payloadcms/plugin-mcp 4.0.0-canary.2 → 4.0.0-internal.011fd46

package/dist/components/APIKeyField/index.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/APIKeyField/index.client.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAmB,MAAM,OAAO,CAAA;AAOvC,OAAO,aAAa,CAAA;AAIpB;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,EAqD/B,CAAA"}
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/APIKeyField/index.client.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAmB,MAAM,OAAO,CAAA;AAIvC,OAAO,aAAa,CAAA;AAIpB;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,EAmD/B,CAAA"}

package/dist/components/APIKeyField/index.client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/APIKeyField/index.client.tsx"],"sourcesContent":["'use client'\n\nimport { APIKeyInput, Button, useField, useTranslation, WarningTriangleIcon } from '@payloadcms/ui'\nimport React, { useState } from 'react'\n\nimport type {\n  PluginMCPTranslationKeys,\n  PluginMCPTranslations,\n} from '../../translations/index.js'\n\nimport './index.css'\n\nconst baseClass = 'mcp-api-key-field'\n\n/**\n * Custom component for the MCP API-keys collection's `apiKey` field:\n * - no key yet: a \"Generate new key\" button\n * - key set: a dismissible privacy warning + the shared masked-key input\n */\nexport const APIKeyField: React.FC = () => {\n  const { setValue: setApiKey, value: apiKey } = useField<string>({ path: 'apiKey' })\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n  const [isWarningDismissed, setIsWarningDismissed] = useState(false)\n\n  const generateKey = () => {\n    setApiKey(crypto.randomUUID())\n    setIsWarningDismissed(false)\n  }\n\n  return (\n    <div className={baseClass}>\n      <p className={`${baseClass}__description`}>\n        {t('plugin-mcp:apiKeyDescription')}\n      </p>\n      <div className={`${baseClass}__panel`}>\n        <div className={`${baseClass}__header`}>\n          <span className={`${baseClass}__title`}>{t('authentication:apiKey')}</span>\n          {!apiKey && (\n            <Button\n              buttonStyle=\"primary\"\n              className={`${baseClass}__generate`}\n              onClick={generateKey}\n            >\n              {t('authentication:generateNewAPIKey')}\n            </Button>\n          )}\n        </div>\n        {Boolean(apiKey) && (\n          <div className={`${baseClass}__body`}>\n            {!isWarningDismissed && (\n              <div className={`${baseClass}__warning`}>\n                <WarningTriangleIcon className={`${baseClass}__warning-icon`} />\n                <p className={`${baseClass}__warning-text`}>\n                  <strong>{t('plugin-mcp:keepKeyPrivate')}</strong>\n                  {` ${t('plugin-mcp:keyPrivateDescription')}`}\n                </p>\n                <button\n                  aria-label={t('plugin-mcp:dismiss')}\n                  className={`${baseClass}__warning-dismiss`}\n                  onClick={() => setIsWarningDismissed(true)}\n                  type=\"button\"\n                >\n                  &times;\n                </button>\n              </div>\n            )}\n            <APIKeyInput aria-label={t('authentication:apiKey')} value={apiKey} />\n          </div>\n        )}\n      </div>\n    </div>\n  )\n}\n"],"names":["APIKeyInput","Button","useField","useTranslation","WarningTriangleIcon","React","useState","baseClass","APIKeyField","setValue","setApiKey","value","apiKey","path","t","isWarningDismissed","setIsWarningDismissed","generateKey","crypto","randomUUID","div","className","p","span","buttonStyle","onClick","Boolean","strong","button","aria-label","type"],"mappings":"AAAA;;AAEA,SAASA,WAAW,EAAEC,MAAM,EAAEC,QAAQ,EAAEC,cAAc,EAAEC,mBAAmB,QAAQ,iBAAgB;AACnG,OAAOC,SAASC,QAAQ,QAAQ,QAAO;AAOvC,OAAO,cAAa;AAEpB,MAAMC,YAAY;AAElB;;;;CAIC,GACD,OAAO,MAAMC,cAAwB;IACnC,MAAM,EAAEC,UAAUC,SAAS,EAAEC,OAAOC,MAAM,EAAE,GAAGV,SAAiB;QAAEW,MAAM;IAAS;IACjF,MAAM,EAAEC,CAAC,EAAE,GAAGX;IACd,MAAM,CAACY,oBAAoBC,sBAAsB,GAAGV,SAAS;IAE7D,MAAMW,cAAc;QAClBP,UAAUQ,OAAOC,UAAU;QAC3BH,sBAAsB;IACxB;IAEA,qBACE,MAACI;QAAIC,WAAWd;;0BACd,KAACe;gBAAED,WAAW,GAAGd,UAAU,aAAa,CAAC;0BACtCO,EAAE;;0BAEL,MAACM;gBAAIC,WAAW,GAAGd,UAAU,OAAO,CAAC;;kCACnC,MAACa;wBAAIC,WAAW,GAAGd,UAAU,QAAQ,CAAC;;0CACpC,KAACgB;gCAAKF,WAAW,GAAGd,UAAU,OAAO,CAAC;0CAAGO,EAAE;;4BAC1C,CAACF,wBACA,KAACX;gCACCuB,aAAY;gCACZH,WAAW,GAAGd,UAAU,UAAU,CAAC;gCACnCkB,SAASR;0CAERH,EAAE;;;;oBAIRY,QAAQd,yBACP,MAACQ;wBAAIC,WAAW,GAAGd,UAAU,MAAM,CAAC;;4BACjC,CAACQ,oCACA,MAACK;gCAAIC,WAAW,GAAGd,UAAU,SAAS,CAAC;;kDACrC,KAACH;wCAAoBiB,WAAW,GAAGd,UAAU,cAAc,CAAC;;kDAC5D,MAACe;wCAAED,WAAW,GAAGd,UAAU,cAAc,CAAC;;0DACxC,KAACoB;0DAAQb,EAAE;;4CACV,CAAC,CAAC,EAAEA,EAAE,qCAAqC;;;kDAE9C,KAACc;wCACCC,cAAYf,EAAE;wCACdO,WAAW,GAAGd,UAAU,iBAAiB,CAAC;wCAC1CkB,SAAS,IAAMT,sBAAsB;wCACrCc,MAAK;kDACN;;;;0CAKL,KAAC9B;gCAAY6B,cAAYf,EAAE;gCAA0BH,OAAOC;;;;;;;;AAMxE,EAAC"}
+{"version":3,"sources":["../../../src/components/APIKeyField/index.client.tsx"],"sourcesContent":["'use client'\n\nimport { APIKeyInput, Button, useField, useTranslation, WarningTriangleIcon } from '@payloadcms/ui'\nimport React, { useState } from 'react'\n\nimport type { PluginMCPTranslationKeys, PluginMCPTranslations } from '../../translations/index.js'\n\nimport './index.css'\n\nconst baseClass = 'mcp-api-key-field'\n\n/**\n * Custom component for the MCP API-keys collection's `apiKey` field:\n * - no key yet: a \"Generate new key\" button\n * - key set: a dismissible privacy warning + the shared masked-key input\n */\nexport const APIKeyField: React.FC = () => {\n  const { setValue: setApiKey, value: apiKey } = useField<string>({ path: 'apiKey' })\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n  const [isWarningDismissed, setIsWarningDismissed] = useState(false)\n\n  const generateKey = () => {\n    setApiKey(crypto.randomUUID())\n    setIsWarningDismissed(false)\n  }\n\n  return (\n    <div className={baseClass}>\n      <p className={`${baseClass}__description`}>{t('plugin-mcp:apiKeyDescription')}</p>\n      <div className={`${baseClass}__panel`}>\n        <div className={`${baseClass}__header`}>\n          <span className={`${baseClass}__title`}>{t('authentication:apiKey')}</span>\n          {!apiKey && (\n            <Button\n              buttonStyle=\"primary\"\n              className={`${baseClass}__generate`}\n              onClick={generateKey}\n            >\n              {t('authentication:generateNewAPIKey')}\n            </Button>\n          )}\n        </div>\n        {Boolean(apiKey) && (\n          <div className={`${baseClass}__body`}>\n            {!isWarningDismissed && (\n              <div className={`${baseClass}__warning`}>\n                <WarningTriangleIcon className={`${baseClass}__warning-icon`} />\n                <p className={`${baseClass}__warning-text`}>\n                  <strong>{t('plugin-mcp:keepKeyPrivate')}</strong>\n                  {` ${t('plugin-mcp:keyPrivateDescription')}`}\n                </p>\n                <button\n                  aria-label={t('plugin-mcp:dismiss')}\n                  className={`${baseClass}__warning-dismiss`}\n                  onClick={() => setIsWarningDismissed(true)}\n                  type=\"button\"\n                >\n                  &times;\n                </button>\n              </div>\n            )}\n            <APIKeyInput aria-label={t('authentication:apiKey')} value={apiKey} />\n          </div>\n        )}\n      </div>\n    </div>\n  )\n}\n"],"names":["APIKeyInput","Button","useField","useTranslation","WarningTriangleIcon","React","useState","baseClass","APIKeyField","setValue","setApiKey","value","apiKey","path","t","isWarningDismissed","setIsWarningDismissed","generateKey","crypto","randomUUID","div","className","p","span","buttonStyle","onClick","Boolean","strong","button","aria-label","type"],"mappings":"AAAA;;AAEA,SAASA,WAAW,EAAEC,MAAM,EAAEC,QAAQ,EAAEC,cAAc,EAAEC,mBAAmB,QAAQ,iBAAgB;AACnG,OAAOC,SAASC,QAAQ,QAAQ,QAAO;AAIvC,OAAO,cAAa;AAEpB,MAAMC,YAAY;AAElB;;;;CAIC,GACD,OAAO,MAAMC,cAAwB;IACnC,MAAM,EAAEC,UAAUC,SAAS,EAAEC,OAAOC,MAAM,EAAE,GAAGV,SAAiB;QAAEW,MAAM;IAAS;IACjF,MAAM,EAAEC,CAAC,EAAE,GAAGX;IACd,MAAM,CAACY,oBAAoBC,sBAAsB,GAAGV,SAAS;IAE7D,MAAMW,cAAc;QAClBP,UAAUQ,OAAOC,UAAU;QAC3BH,sBAAsB;IACxB;IAEA,qBACE,MAACI;QAAIC,WAAWd;;0BACd,KAACe;gBAAED,WAAW,GAAGd,UAAU,aAAa,CAAC;0BAAGO,EAAE;;0BAC9C,MAACM;gBAAIC,WAAW,GAAGd,UAAU,OAAO,CAAC;;kCACnC,MAACa;wBAAIC,WAAW,GAAGd,UAAU,QAAQ,CAAC;;0CACpC,KAACgB;gCAAKF,WAAW,GAAGd,UAAU,OAAO,CAAC;0CAAGO,EAAE;;4BAC1C,CAACF,wBACA,KAACX;gCACCuB,aAAY;gCACZH,WAAW,GAAGd,UAAU,UAAU,CAAC;gCACnCkB,SAASR;0CAERH,EAAE;;;;oBAIRY,QAAQd,yBACP,MAACQ;wBAAIC,WAAW,GAAGd,UAAU,MAAM,CAAC;;4BACjC,CAACQ,oCACA,MAACK;gCAAIC,WAAW,GAAGd,UAAU,SAAS,CAAC;;kDACrC,KAACH;wCAAoBiB,WAAW,GAAGd,UAAU,cAAc,CAAC;;kDAC5D,MAACe;wCAAED,WAAW,GAAGd,UAAU,cAAc,CAAC;;0DACxC,KAACoB;0DAAQb,EAAE;;4CACV,CAAC,CAAC,EAAEA,EAAE,qCAAqC;;;kDAE9C,KAACc;wCACCC,cAAYf,EAAE;wCACdO,WAAW,GAAGd,UAAU,iBAAiB,CAAC;wCAC1CkB,SAAS,IAAMT,sBAAsB;wCACrCc,MAAK;kDACN;;;;0CAKL,KAAC9B;gCAAY6B,cAAYf,EAAE;gCAA0BH,OAAOC;;;;;;;;AAMxE,EAAC"}

package/dist/components/APIKeysEmptyState/index.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/APIKeysEmptyState/index.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAGnD,OAAO,KAAK,MAAM,OAAO,CAAA;AAOzB,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAuB5D,CAAA"}
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/APIKeysEmptyState/index.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAGnD,OAAO,KAAK,MAAM,OAAO,CAAA;AAIzB,eAAO,MAAM,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAuB5D,CAAA"}

package/dist/components/APIKeysEmptyState/index.client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/APIKeysEmptyState/index.client.tsx"],"sourcesContent":["'use client'\n\nimport type { NoResultsClientProps } from 'payload'\n\nimport { Button, NoListResults, useTranslation } from '@payloadcms/ui'\nimport React from 'react'\n\nimport type {\n  PluginMCPTranslationKeys,\n  PluginMCPTranslations,\n} from '../../translations/index.js'\n\nexport const APIKeysEmptyState: React.FC<NoResultsClientProps> = ({\n  hasCreatePermission,\n  newDocumentURL,\n  viewType,\n}) => {\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n\n  return (\n    <NoListResults\n      Actions={\n        hasCreatePermission && newDocumentURL && viewType !== 'trash'\n          ? [\n              <Button el=\"link\" key=\"create\" to={newDocumentURL}>\n                {t('authentication:generateNewAPIKey')}\n              </Button>,\n            ]\n          : []\n      }\n      description={t('plugin-mcp:apiKeyDescription')}\n      title={t('plugin-mcp:noAPIKeys')}\n      withMargin\n    />\n  )\n}\n"],"names":["Button","NoListResults","useTranslation","React","APIKeysEmptyState","hasCreatePermission","newDocumentURL","viewType","t","Actions","el","to","description","title","withMargin"],"mappings":"AAAA;;AAIA,SAASA,MAAM,EAAEC,aAAa,EAAEC,cAAc,QAAQ,iBAAgB;AACtE,OAAOC,WAAW,QAAO;AAOzB,OAAO,MAAMC,oBAAoD,CAAC,EAChEC,mBAAmB,EACnBC,cAAc,EACdC,QAAQ,EACT;IACC,MAAM,EAAEC,CAAC,EAAE,GAAGN;IAEd,qBACE,KAACD;QACCQ,SACEJ,uBAAuBC,kBAAkBC,aAAa,UAClD;0BACE,KAACP;gBAAOU,IAAG;gBAAoBC,IAAIL;0BAChCE,EAAE;eADiB;SAGvB,GACD,EAAE;QAERI,aAAaJ,EAAE;QACfK,OAAOL,EAAE;QACTM,UAAU;;AAGhB,EAAC"}
+{"version":3,"sources":["../../../src/components/APIKeysEmptyState/index.client.tsx"],"sourcesContent":["'use client'\n\nimport type { NoResultsClientProps } from 'payload'\n\nimport { Button, NoListResults, useTranslation } from '@payloadcms/ui'\nimport React from 'react'\n\nimport type { PluginMCPTranslationKeys, PluginMCPTranslations } from '../../translations/index.js'\n\nexport const APIKeysEmptyState: React.FC<NoResultsClientProps> = ({\n  hasCreatePermission,\n  newDocumentURL,\n  viewType,\n}) => {\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n\n  return (\n    <NoListResults\n      Actions={\n        hasCreatePermission && newDocumentURL && viewType !== 'trash'\n          ? [\n              <Button el=\"link\" key=\"create\" to={newDocumentURL}>\n                {t('authentication:generateNewAPIKey')}\n              </Button>,\n            ]\n          : []\n      }\n      description={t('plugin-mcp:apiKeyDescription')}\n      title={t('plugin-mcp:noAPIKeys')}\n      withMargin\n    />\n  )\n}\n"],"names":["Button","NoListResults","useTranslation","React","APIKeysEmptyState","hasCreatePermission","newDocumentURL","viewType","t","Actions","el","to","description","title","withMargin"],"mappings":"AAAA;;AAIA,SAASA,MAAM,EAAEC,aAAa,EAAEC,cAAc,QAAQ,iBAAgB;AACtE,OAAOC,WAAW,QAAO;AAIzB,OAAO,MAAMC,oBAAoD,CAAC,EAChEC,mBAAmB,EACnBC,cAAc,EACdC,QAAQ,EACT;IACC,MAAM,EAAEC,CAAC,EAAE,GAAGN;IAEd,qBACE,KAACD;QACCQ,SACEJ,uBAAuBC,kBAAkBC,aAAa,UAClD;0BACE,KAACP;gBAAOU,IAAG;gBAAoBC,IAAIL;0BAChCE,EAAE;eADiB;SAGvB,GACD,EAAE;QAERI,aAAaJ,EAAE;QACfK,OAAOL,EAAE;QACTM,UAAU;;AAGhB,EAAC"}

package/dist/components/AccessField/index.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/AccessField/index.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAGnD,OAAO,KAAmB,MAAM,OAAO,CAAA;AAMvC,OAAO,KAAK,EAAE,qBAAqB,EAA2B,MAAM,gBAAgB,CAAA;AAEpF,OAAO,aAAa,CAAA;AAapB,KAAK,KAAK,GAAG;IACX,YAAY,EAAE,qBAAqB,CAAA;CACpC,GAAG,oBAAoB,CAAA;AAoBxB,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAqPvC,CAAA"}
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/AccessField/index.client.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAA;AAGnD,OAAO,KAAmB,MAAM,OAAO,CAAA;AAGvC,OAAO,KAAK,EAAE,qBAAqB,EAA2B,MAAM,gBAAgB,CAAA;AAEpF,OAAO,aAAa,CAAA;AAapB,KAAK,KAAK,GAAG;IACX,YAAY,EAAE,qBAAqB,CAAA;CACpC,GAAG,oBAAoB,CAAA;AAoBxB,eAAO,MAAM,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAqPvC,CAAA"}

package/dist/components/AccessField/index.client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/AccessField/index.client.tsx"],"sourcesContent":["'use client'\n\nimport type { JSONFieldClientProps } from 'payload'\n\nimport { CheckboxInput, Collapsible, Tabs, useField, useTranslation } from '@payloadcms/ui'\nimport React, { useState } from 'react'\n\nimport type {\n  PluginMCPTranslationKeys,\n  PluginMCPTranslations,\n} from '../../translations/index.js'\nimport type { ClientMCPPluginConfig, MCPAPIKeysDocAccessTree } from '../../types.js'\n\nimport './index.css'\n\nconst baseClass = 'mcp-access-field'\n\ntype ClientItem = ClientMCPPluginConfig['items'][number]\ntype ScopeKey = 'collections' | 'globals'\ntype FlatKey = 'prompts' | 'resources' | 'tools'\ntype TabKey = 'collections' | 'globals' | 'server'\n\nconst LEAF_GROUP_KEYS = ['operations', 'auth', 'custom'] as const\n\ntype LeafGroupKey = (typeof LEAF_GROUP_KEYS)[number]\n\ntype Props = {\n  pluginConfig: ClientMCPPluginConfig\n} & JSONFieldClientProps\n\n/** Drop a key from an object and return a new object — or `undefined` if it'd be empty. */\nconst without = <T extends Record<string, unknown>>(\n  obj: T | undefined,\n  key: string,\n): T | undefined => {\n  if (!obj || !(key in obj)) {\n    return obj\n  }\n  const { [key]: _omitted, ...rest } = obj\n  return Object.keys(rest).length === 0 ? undefined : (rest as T)\n}\n\nconst setKey = <T extends Record<string, unknown>>(\n  obj: T | undefined,\n  key: string,\n  value: unknown,\n): T => ({ ...(obj ?? {}), [key]: value }) as T\n\nexport const AccessField: React.FC<Props> = ({ path, pluginConfig }) => {\n  const { setValue, value } = useField<MCPAPIKeysDocAccessTree>({ path })\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n  const [activeTab, setActiveTab] = useState<null | TabKey>(null)\n  const access = value ?? {}\n  const leafGroupLabels: Record<LeafGroupKey, string> = {\n    auth: t('plugin-mcp:authentication'),\n    custom: t('general:custom'),\n    operations: t('plugin-mcp:operations'),\n  }\n\n  const collectionsBySlug: Record<string, ClientItem[]> = {}\n  const globalsBySlug: Record<string, ClientItem[]> = {}\n  const prompts: ClientItem[] = []\n  const resources: ClientItem[] = []\n  const tools: ClientItem[] = []\n\n  for (const item of pluginConfig.items) {\n    switch (item.type) {\n      case 'collectionTool':\n        ;(collectionsBySlug[item.collectionSlug!] ??= []).push(item)\n        break\n      case 'globalTool':\n        ;(globalsBySlug[item.globalSlug!] ??= []).push(item)\n        break\n      case 'prompt':\n        prompts.push(item)\n        break\n      case 'resource':\n        resources.push(item)\n        break\n      case 'tool':\n        tools.push(item)\n        break\n    }\n  }\n\n  const isScopedAllowed = (scope: ScopeKey, slug: string, configKey: string): boolean =>\n    access[scope]?.[slug]?.[configKey] !== false\n\n  const isFlatAllowed = (scope: FlatKey, configKey: string): boolean =>\n    access[scope]?.[configKey] !== false\n\n  const toggleScoped = (scope: ScopeKey, slug: string, configKey: string, allow: boolean) => {\n    if (allow) {\n      const slugBucket = without(access[scope]?.[slug], configKey)\n      const scopeBucket = slugBucket\n        ? setKey(access[scope], slug, slugBucket)\n        : without(access[scope], slug)\n      setValue(scopeBucket ? setKey(access, scope, scopeBucket) : (without(access, scope) ?? {}))\n    } else {\n      setValue(\n        setKey(\n          access,\n          scope,\n          setKey(access[scope], slug, setKey(access[scope]?.[slug], configKey, false)),\n        ),\n      )\n    }\n  }\n\n  const toggleFlat = (scope: FlatKey, configKey: string, allow: boolean) => {\n    if (allow) {\n      const bucket = without(access[scope], configKey)\n      setValue(bucket ? setKey(access, scope, bucket) : (without(access, scope) ?? {}))\n    } else {\n      setValue(setKey(access, scope, setKey(access[scope], configKey, false)))\n    }\n  }\n\n  const setAllScoped = (scope: ScopeKey, slug: string, leaves: ClientItem[], allow: boolean) => {\n    if (allow) {\n      const scopeBucket = without(access[scope], slug)\n      setValue(scopeBucket ? setKey(access, scope, scopeBucket) : (without(access, scope) ?? {}))\n    } else {\n      const slugBucket = leaves.reduce<Record<string, boolean>>(\n        (acc, leaf) => ({ ...acc, [leaf.configKey]: false }),\n        {},\n      )\n      setValue(setKey(access, scope, setKey(access[scope], slug, slugBucket)))\n    }\n  }\n\n  const setAllFlat = (scope: FlatKey, leaves: ClientItem[], allow: boolean) => {\n    if (allow) {\n      setValue(without(access, scope) ?? {})\n    } else {\n      const bucket = leaves.reduce<Record<string, boolean>>(\n        (acc, leaf) => ({ ...acc, [leaf.configKey]: false }),\n        {},\n      )\n      setValue(setKey(access, scope, bucket))\n    }\n  }\n\n  const renderLeaf = (\n    leaf: ClientItem,\n    id: string,\n    checked: boolean,\n    onToggle: (allow: boolean) => void,\n  ) => (\n    <li className={`${baseClass}__leaf`} key={leaf.configKey}>\n      <CheckboxInput\n        checked={checked}\n        id={id}\n        label={leaf.label}\n        onToggle={(e) => onToggle(e.target.checked)}\n      />\n      {leaf.description && <p className={`${baseClass}__leaf-description`}>{leaf.description}</p>}\n    </li>\n  )\n\n  const renderCard = ({\n    id,\n    isLeafAllowed,\n    label,\n    leaves,\n    onSetAll,\n    onToggleLeaf,\n  }: {\n    id: string\n    isLeafAllowed: (leaf: ClientItem) => boolean\n    label: string\n    leaves: ClientItem[]\n    onSetAll: (allow: boolean) => void\n    onToggleLeaf: (leaf: ClientItem, allow: boolean) => void\n  }) => {\n    const allowedCount = leaves.filter(isLeafAllowed).length\n    const groups = LEAF_GROUP_KEYS.map((key) => ({\n      key,\n      label: leafGroupLabels[key],\n      leaves: leaves.filter((leaf) => (leaf.group ?? 'custom') === key),\n    })).filter((group) => group.leaves.length > 0)\n    const hasGroupLabels = groups.length > 1\n\n    return (\n      <Collapsible\n        className={`${baseClass}__card`}\n        header={\n          // Keep header clicks on the checkbox from also toggling the collapsible.\n          <span\n            className={`${baseClass}__card-checkbox`}\n            onClick={(e) => e.stopPropagation()}\n            role=\"presentation\"\n          >\n            <CheckboxInput\n              checked={allowedCount === leaves.length}\n              id={`${id}._all`}\n              label={label}\n              onToggle={() => onSetAll(allowedCount < leaves.length)}\n              partialChecked={allowedCount > 0 && allowedCount < leaves.length}\n            />\n          </span>\n        }\n        initCollapsed\n        key={id}\n      >\n        <div className={`${baseClass}__card-groups`}>\n          {groups.map((group) => (\n            <div className={`${baseClass}__leaf-group`} key={group.key}>\n              {hasGroupLabels && <p className={`${baseClass}__leaf-group-label`}>{group.label}</p>}\n              <ul className={`${baseClass}__list`}>\n                {group.leaves.map((leaf) =>\n                  renderLeaf(leaf, `${id}.${leaf.configKey}`, isLeafAllowed(leaf), (allow) =>\n                    onToggleLeaf(leaf, allow),\n                  ),\n                )}\n              </ul>\n            </div>\n          ))}\n        </div>\n      </Collapsible>\n    )\n  }\n\n  const renderScope = (scope: ScopeKey, bySlug: Record<string, ClientItem[]>) =>\n    Object.entries(bySlug).map(([slug, leaves]) =>\n      renderCard({\n        id: `${path}.${scope}.${slug}`,\n        isLeafAllowed: (leaf) => isScopedAllowed(scope, slug, leaf.configKey),\n        label: titleCase(slug),\n        leaves,\n        onSetAll: (allow) => setAllScoped(scope, slug, leaves, allow),\n        onToggleLeaf: (leaf, allow) => toggleScoped(scope, slug, leaf.configKey, allow),\n      }),\n    )\n\n  const renderFlat = (scope: FlatKey, label: string, leaves: ClientItem[]) =>\n    leaves.length > 0 &&\n    renderCard({\n      id: `${path}.${scope}`,\n      isLeafAllowed: (leaf) => isFlatAllowed(scope, leaf.configKey),\n      label,\n      leaves,\n      onSetAll: (allow) => setAllFlat(scope, leaves, allow),\n      onToggleLeaf: (leaf, allow) => toggleFlat(scope, leaf.configKey, allow),\n    })\n\n  const tabs: Array<{ key: TabKey; label: string }> = [\n    ...(Object.keys(collectionsBySlug).length > 0\n      ? [{ key: 'collections' as const, label: t('general:collections') }]\n      : []),\n    ...(Object.keys(globalsBySlug).length > 0\n      ? [{ key: 'globals' as const, label: t('general:globals') }]\n      : []),\n    ...(prompts.length > 0 || resources.length > 0 || tools.length > 0\n      ? [{ key: 'server' as const, label: t('plugin-mcp:server') }]\n      : []),\n  ]\n  if (tabs.length === 0) {\n    return null\n  }\n\n  const currentTab = activeTab ?? tabs[0]!.key\n\n  return (\n    <div className={baseClass}>\n      <header className={`${baseClass}__header`}>\n        <h4>{t('plugin-mcp:permissions')}</h4>\n        <p>{t('plugin-mcp:permissionsDescription')}</p>\n      </header>\n      <div className={`${baseClass}__tabbed-content`}>\n        <Tabs\n          className={`${baseClass}__tabs`}\n          onChange={setActiveTab}\n          tabs={tabs.map((tab) => ({\n            label: tab.label,\n            value: tab.key,\n          }))}\n          value={currentTab}\n        />\n        <div className={`${baseClass}__cards`}>\n          {currentTab === 'collections' && renderScope('collections', collectionsBySlug)}\n          {currentTab === 'globals' && renderScope('globals', globalsBySlug)}\n          {currentTab === 'server' && (\n            <>\n              {renderFlat('prompts', t('plugin-mcp:prompts'), prompts)}\n              {renderFlat('resources', t('plugin-mcp:resources'), resources)}\n              {renderFlat('tools', t('plugin-mcp:tools'), tools)}\n            </>\n          )}\n        </div>\n      </div>\n    </div>\n  )\n}\n\nconst titleCase = (slug: string): string =>\n  slug.replace(/(^|[-_])(.)/g, (_, sep: string, ch: string) =>\n    sep ? ` ${ch.toUpperCase()}` : ch.toUpperCase(),\n  )\n"],"names":["CheckboxInput","Collapsible","Tabs","useField","useTranslation","React","useState","baseClass","LEAF_GROUP_KEYS","without","obj","key","_omitted","rest","Object","keys","length","undefined","setKey","value","AccessField","path","pluginConfig","setValue","t","activeTab","setActiveTab","access","leafGroupLabels","auth","custom","operations","collectionsBySlug","globalsBySlug","prompts","resources","tools","item","items","type","collectionSlug","push","globalSlug","isScopedAllowed","scope","slug","configKey","isFlatAllowed","toggleScoped","allow","slugBucket","scopeBucket","toggleFlat","bucket","setAllScoped","leaves","reduce","acc","leaf","setAllFlat","renderLeaf","id","checked","onToggle","li","className","label","e","target","description","p","renderCard","isLeafAllowed","onSetAll","onToggleLeaf","allowedCount","filter","groups","map","group","hasGroupLabels","header","span","onClick","stopPropagation","role","partialChecked","initCollapsed","div","ul","renderScope","bySlug","entries","titleCase","renderFlat","tabs","currentTab","h4","onChange","tab","replace","_","sep","ch","toUpperCase"],"mappings":"AAAA;;AAIA,SAASA,aAAa,EAAEC,WAAW,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,cAAc,QAAQ,iBAAgB;AAC3F,OAAOC,SAASC,QAAQ,QAAQ,QAAO;AAQvC,OAAO,cAAa;AAEpB,MAAMC,YAAY;AAOlB,MAAMC,kBAAkB;IAAC;IAAc;IAAQ;CAAS;AAQxD,yFAAyF,GACzF,MAAMC,UAAU,CACdC,KACAC;IAEA,IAAI,CAACD,OAAO,CAAEC,CAAAA,OAAOD,GAAE,GAAI;QACzB,OAAOA;IACT;IACA,MAAM,EAAE,CAACC,IAAI,EAAEC,QAAQ,EAAE,GAAGC,MAAM,GAAGH;IACrC,OAAOI,OAAOC,IAAI,CAACF,MAAMG,MAAM,KAAK,IAAIC,YAAaJ;AACvD;AAEA,MAAMK,SAAS,CACbR,KACAC,KACAQ,QACO,CAAA;QAAE,GAAIT,OAAO,CAAC,CAAC;QAAG,CAACC,IAAI,EAAEQ;IAAM,CAAA;AAExC,OAAO,MAAMC,cAA+B,CAAC,EAAEC,IAAI,EAAEC,YAAY,EAAE;IACjE,MAAM,EAAEC,QAAQ,EAAEJ,KAAK,EAAE,GAAGhB,SAAkC;QAAEkB;IAAK;IACrE,MAAM,EAAEG,CAAC,EAAE,GAAGpB;IACd,MAAM,CAACqB,WAAWC,aAAa,GAAGpB,SAAwB;IAC1D,MAAMqB,SAASR,SAAS,CAAC;IACzB,MAAMS,kBAAgD;QACpDC,MAAML,EAAE;QACRM,QAAQN,EAAE;QACVO,YAAYP,EAAE;IAChB;IAEA,MAAMQ,oBAAkD,CAAC;IACzD,MAAMC,gBAA8C,CAAC;IACrD,MAAMC,UAAwB,EAAE;IAChC,MAAMC,YAA0B,EAAE;IAClC,MAAMC,QAAsB,EAAE;IAE9B,KAAK,MAAMC,QAAQf,aAAagB,KAAK,CAAE;QACrC,OAAQD,KAAKE,IAAI;YACf,KAAK;;gBACDP,CAAAA,iBAAiB,CAACK,KAAKG,cAAc,CAAE,KAAK,EAAE,AAAD,EAAGC,IAAI,CAACJ;gBACvD;YACF,KAAK;;gBACDJ,CAAAA,aAAa,CAACI,KAAKK,UAAU,CAAE,KAAK,EAAE,AAAD,EAAGD,IAAI,CAACJ;gBAC/C;YACF,KAAK;gBACHH,QAAQO,IAAI,CAACJ;gBACb;YACF,KAAK;gBACHF,UAAUM,IAAI,CAACJ;gBACf;YACF,KAAK;gBACHD,MAAMK,IAAI,CAACJ;gBACX;QACJ;IACF;IAEA,MAAMM,kBAAkB,CAACC,OAAiBC,MAAcC,YACtDnB,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAE,CAACC,UAAU,KAAK;IAEzC,MAAMC,gBAAgB,CAACH,OAAgBE,YACrCnB,MAAM,CAACiB,MAAM,EAAE,CAACE,UAAU,KAAK;IAEjC,MAAME,eAAe,CAACJ,OAAiBC,MAAcC,WAAmBG;QACtE,IAAIA,OAAO;YACT,MAAMC,aAAazC,QAAQkB,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAEC;YAClD,MAAMK,cAAcD,aAChBhC,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAMK,cAC5BzC,QAAQkB,MAAM,CAACiB,MAAM,EAAEC;YAC3BtB,SAAS4B,cAAcjC,OAAOS,QAAQiB,OAAOO,eAAgB1C,QAAQkB,QAAQiB,UAAU,CAAC;QAC1F,OAAO;YACLrB,SACEL,OACES,QACAiB,OACA1B,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAM3B,OAAOS,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAEC,WAAW;QAG3E;IACF;IAEA,MAAMM,aAAa,CAACR,OAAgBE,WAAmBG;QACrD,IAAIA,OAAO;YACT,MAAMI,SAAS5C,QAAQkB,MAAM,CAACiB,MAAM,EAAEE;YACtCvB,SAAS8B,SAASnC,OAAOS,QAAQiB,OAAOS,UAAW5C,QAAQkB,QAAQiB,UAAU,CAAC;QAChF,OAAO;YACLrB,SAASL,OAAOS,QAAQiB,OAAO1B,OAAOS,MAAM,CAACiB,MAAM,EAAEE,WAAW;QAClE;IACF;IAEA,MAAMQ,eAAe,CAACV,OAAiBC,MAAcU,QAAsBN;QACzE,IAAIA,OAAO;YACT,MAAME,cAAc1C,QAAQkB,MAAM,CAACiB,MAAM,EAAEC;YAC3CtB,SAAS4B,cAAcjC,OAAOS,QAAQiB,OAAOO,eAAgB1C,QAAQkB,QAAQiB,UAAU,CAAC;QAC1F,OAAO;YACL,MAAMM,aAAaK,OAAOC,MAAM,CAC9B,CAACC,KAAKC,OAAU,CAAA;oBAAE,GAAGD,GAAG;oBAAE,CAACC,KAAKZ,SAAS,CAAC,EAAE;gBAAM,CAAA,GAClD,CAAC;YAEHvB,SAASL,OAAOS,QAAQiB,OAAO1B,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAMK;QAC7D;IACF;IAEA,MAAMS,aAAa,CAACf,OAAgBW,QAAsBN;QACxD,IAAIA,OAAO;YACT1B,SAASd,QAAQkB,QAAQiB,UAAU,CAAC;QACtC,OAAO;YACL,MAAMS,SAASE,OAAOC,MAAM,CAC1B,CAACC,KAAKC,OAAU,CAAA;oBAAE,GAAGD,GAAG;oBAAE,CAACC,KAAKZ,SAAS,CAAC,EAAE;gBAAM,CAAA,GAClD,CAAC;YAEHvB,SAASL,OAAOS,QAAQiB,OAAOS;QACjC;IACF;IAEA,MAAMO,aAAa,CACjBF,MACAG,IACAC,SACAC,yBAEA,MAACC;YAAGC,WAAW,GAAG1D,UAAU,MAAM,CAAC;;8BACjC,KAACP;oBACC8D,SAASA;oBACTD,IAAIA;oBACJK,OAAOR,KAAKQ,KAAK;oBACjBH,UAAU,CAACI,IAAMJ,SAASI,EAAEC,MAAM,CAACN,OAAO;;gBAE3CJ,KAAKW,WAAW,kBAAI,KAACC;oBAAEL,WAAW,GAAG1D,UAAU,kBAAkB,CAAC;8BAAGmD,KAAKW,WAAW;;;WAP9CX,KAAKZ,SAAS;IAW1D,MAAMyB,aAAa,CAAC,EAClBV,EAAE,EACFW,aAAa,EACbN,KAAK,EACLX,MAAM,EACNkB,QAAQ,EACRC,YAAY,EAQb;QACC,MAAMC,eAAepB,OAAOqB,MAAM,CAACJ,eAAexD,MAAM;QACxD,MAAM6D,SAASrE,gBAAgBsE,GAAG,CAAC,CAACnE,MAAS,CAAA;gBAC3CA;gBACAuD,OAAOtC,eAAe,CAACjB,IAAI;gBAC3B4C,QAAQA,OAAOqB,MAAM,CAAC,CAAClB,OAAS,AAACA,CAAAA,KAAKqB,KAAK,IAAI,QAAO,MAAOpE;YAC/D,CAAA,GAAIiE,MAAM,CAAC,CAACG,QAAUA,MAAMxB,MAAM,CAACvC,MAAM,GAAG;QAC5C,MAAMgE,iBAAiBH,OAAO7D,MAAM,GAAG;QAEvC,qBACE,KAACf;YACCgE,WAAW,GAAG1D,UAAU,MAAM,CAAC;YAC/B0E,QACE,yEAAyE;0BACzE,KAACC;gBACCjB,WAAW,GAAG1D,UAAU,eAAe,CAAC;gBACxC4E,SAAS,CAAChB,IAAMA,EAAEiB,eAAe;gBACjCC,MAAK;0BAEL,cAAA,KAACrF;oBACC8D,SAASa,iBAAiBpB,OAAOvC,MAAM;oBACvC6C,IAAI,GAAGA,GAAG,KAAK,CAAC;oBAChBK,OAAOA;oBACPH,UAAU,IAAMU,SAASE,eAAepB,OAAOvC,MAAM;oBACrDsE,gBAAgBX,eAAe,KAAKA,eAAepB,OAAOvC,MAAM;;;YAItEuE,aAAa;sBAGb,cAAA,KAACC;gBAAIvB,WAAW,GAAG1D,UAAU,aAAa,CAAC;0BACxCsE,OAAOC,GAAG,CAAC,CAACC,sBACX,MAACS;wBAAIvB,WAAW,GAAG1D,UAAU,YAAY,CAAC;;4BACvCyE,gCAAkB,KAACV;gCAAEL,WAAW,GAAG1D,UAAU,kBAAkB,CAAC;0CAAGwE,MAAMb,KAAK;;0CAC/E,KAACuB;gCAAGxB,WAAW,GAAG1D,UAAU,MAAM,CAAC;0CAChCwE,MAAMxB,MAAM,CAACuB,GAAG,CAAC,CAACpB,OACjBE,WAAWF,MAAM,GAAGG,GAAG,CAAC,EAAEH,KAAKZ,SAAS,EAAE,EAAE0B,cAAcd,OAAO,CAACT,QAChEyB,aAAahB,MAAMT;;;uBALsB8B,MAAMpE,GAAG;;WAJzDkD;IAkBX;IAEA,MAAM6B,cAAc,CAAC9C,OAAiB+C,SACpC7E,OAAO8E,OAAO,CAACD,QAAQb,GAAG,CAAC,CAAC,CAACjC,MAAMU,OAAO,GACxCgB,WAAW;gBACTV,IAAI,GAAGxC,KAAK,CAAC,EAAEuB,MAAM,CAAC,EAAEC,MAAM;gBAC9B2B,eAAe,CAACd,OAASf,gBAAgBC,OAAOC,MAAMa,KAAKZ,SAAS;gBACpEoB,OAAO2B,UAAUhD;gBACjBU;gBACAkB,UAAU,CAACxB,QAAUK,aAAaV,OAAOC,MAAMU,QAAQN;gBACvDyB,cAAc,CAAChB,MAAMT,QAAUD,aAAaJ,OAAOC,MAAMa,KAAKZ,SAAS,EAAEG;YAC3E;IAGJ,MAAM6C,aAAa,CAAClD,OAAgBsB,OAAeX,SACjDA,OAAOvC,MAAM,GAAG,KAChBuD,WAAW;YACTV,IAAI,GAAGxC,KAAK,CAAC,EAAEuB,OAAO;YACtB4B,eAAe,CAACd,OAASX,cAAcH,OAAOc,KAAKZ,SAAS;YAC5DoB;YACAX;YACAkB,UAAU,CAACxB,QAAUU,WAAWf,OAAOW,QAAQN;YAC/CyB,cAAc,CAAChB,MAAMT,QAAUG,WAAWR,OAAOc,KAAKZ,SAAS,EAAEG;QACnE;IAEF,MAAM8C,OAA8C;WAC9CjF,OAAOC,IAAI,CAACiB,mBAAmBhB,MAAM,GAAG,IACxC;YAAC;gBAAEL,KAAK;gBAAwBuD,OAAO1C,EAAE;YAAuB;SAAE,GAClE,EAAE;WACFV,OAAOC,IAAI,CAACkB,eAAejB,MAAM,GAAG,IACpC;YAAC;gBAAEL,KAAK;gBAAoBuD,OAAO1C,EAAE;YAAmB;SAAE,GAC1D,EAAE;WACFU,QAAQlB,MAAM,GAAG,KAAKmB,UAAUnB,MAAM,GAAG,KAAKoB,MAAMpB,MAAM,GAAG,IAC7D;YAAC;gBAAEL,KAAK;gBAAmBuD,OAAO1C,EAAE;YAAqB;SAAE,GAC3D,EAAE;KACP;IACD,IAAIuE,KAAK/E,MAAM,KAAK,GAAG;QACrB,OAAO;IACT;IAEA,MAAMgF,aAAavE,aAAasE,IAAI,CAAC,EAAE,CAAEpF,GAAG;IAE5C,qBACE,MAAC6E;QAAIvB,WAAW1D;;0BACd,MAAC0E;gBAAOhB,WAAW,GAAG1D,UAAU,QAAQ,CAAC;;kCACvC,KAAC0F;kCAAIzE,EAAE;;kCACP,KAAC8C;kCAAG9C,EAAE;;;;0BAER,MAACgE;gBAAIvB,WAAW,GAAG1D,UAAU,gBAAgB,CAAC;;kCAC5C,KAACL;wBACC+D,WAAW,GAAG1D,UAAU,MAAM,CAAC;wBAC/B2F,UAAUxE;wBACVqE,MAAMA,KAAKjB,GAAG,CAAC,CAACqB,MAAS,CAAA;gCACvBjC,OAAOiC,IAAIjC,KAAK;gCAChB/C,OAAOgF,IAAIxF,GAAG;4BAChB,CAAA;wBACAQ,OAAO6E;;kCAET,MAACR;wBAAIvB,WAAW,GAAG1D,UAAU,OAAO,CAAC;;4BAClCyF,eAAe,iBAAiBN,YAAY,eAAe1D;4BAC3DgE,eAAe,aAAaN,YAAY,WAAWzD;4BACnD+D,eAAe,0BACd;;oCACGF,WAAW,WAAWtE,EAAE,uBAAuBU;oCAC/C4D,WAAW,aAAatE,EAAE,yBAAyBW;oCACnD2D,WAAW,SAAStE,EAAE,qBAAqBY;;;;;;;;;AAO1D,EAAC;AAED,MAAMyD,YAAY,CAAChD,OACjBA,KAAKuD,OAAO,CAAC,gBAAgB,CAACC,GAAGC,KAAaC,KAC5CD,MAAM,CAAC,CAAC,EAAEC,GAAGC,WAAW,IAAI,GAAGD,GAAGC,WAAW"}
+{"version":3,"sources":["../../../src/components/AccessField/index.client.tsx"],"sourcesContent":["'use client'\n\nimport type { JSONFieldClientProps } from 'payload'\n\nimport { CheckboxInput, Collapsible, Tabs, useField, useTranslation } from '@payloadcms/ui'\nimport React, { useState } from 'react'\n\nimport type { PluginMCPTranslationKeys, PluginMCPTranslations } from '../../translations/index.js'\nimport type { ClientMCPPluginConfig, MCPAPIKeysDocAccessTree } from '../../types.js'\n\nimport './index.css'\n\nconst baseClass = 'mcp-access-field'\n\ntype ClientItem = ClientMCPPluginConfig['items'][number]\ntype ScopeKey = 'collections' | 'globals'\ntype FlatKey = 'prompts' | 'resources' | 'tools'\ntype TabKey = 'collections' | 'globals' | 'server'\n\nconst LEAF_GROUP_KEYS = ['operations', 'auth', 'custom'] as const\n\ntype LeafGroupKey = (typeof LEAF_GROUP_KEYS)[number]\n\ntype Props = {\n  pluginConfig: ClientMCPPluginConfig\n} & JSONFieldClientProps\n\n/** Drop a key from an object and return a new object — or `undefined` if it'd be empty. */\nconst without = <T extends Record<string, unknown>>(\n  obj: T | undefined,\n  key: string,\n): T | undefined => {\n  if (!obj || !(key in obj)) {\n    return obj\n  }\n  const { [key]: _omitted, ...rest } = obj\n  return Object.keys(rest).length === 0 ? undefined : (rest as T)\n}\n\nconst setKey = <T extends Record<string, unknown>>(\n  obj: T | undefined,\n  key: string,\n  value: unknown,\n): T => ({ ...(obj ?? {}), [key]: value }) as T\n\nexport const AccessField: React.FC<Props> = ({ path, pluginConfig }) => {\n  const { setValue, value } = useField<MCPAPIKeysDocAccessTree>({ path })\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n  const [activeTab, setActiveTab] = useState<null | TabKey>(null)\n  const access = value ?? {}\n  const leafGroupLabels: Record<LeafGroupKey, string> = {\n    auth: t('plugin-mcp:authentication'),\n    custom: t('general:custom'),\n    operations: t('plugin-mcp:operations'),\n  }\n\n  const collectionsBySlug: Record<string, ClientItem[]> = {}\n  const globalsBySlug: Record<string, ClientItem[]> = {}\n  const prompts: ClientItem[] = []\n  const resources: ClientItem[] = []\n  const tools: ClientItem[] = []\n\n  for (const item of pluginConfig.items) {\n    switch (item.type) {\n      case 'collectionTool':\n        ;(collectionsBySlug[item.collectionSlug!] ??= []).push(item)\n        break\n      case 'globalTool':\n        ;(globalsBySlug[item.globalSlug!] ??= []).push(item)\n        break\n      case 'prompt':\n        prompts.push(item)\n        break\n      case 'resource':\n        resources.push(item)\n        break\n      case 'tool':\n        tools.push(item)\n        break\n    }\n  }\n\n  const isScopedAllowed = (scope: ScopeKey, slug: string, configKey: string): boolean =>\n    access[scope]?.[slug]?.[configKey] !== false\n\n  const isFlatAllowed = (scope: FlatKey, configKey: string): boolean =>\n    access[scope]?.[configKey] !== false\n\n  const toggleScoped = (scope: ScopeKey, slug: string, configKey: string, allow: boolean) => {\n    if (allow) {\n      const slugBucket = without(access[scope]?.[slug], configKey)\n      const scopeBucket = slugBucket\n        ? setKey(access[scope], slug, slugBucket)\n        : without(access[scope], slug)\n      setValue(scopeBucket ? setKey(access, scope, scopeBucket) : (without(access, scope) ?? {}))\n    } else {\n      setValue(\n        setKey(\n          access,\n          scope,\n          setKey(access[scope], slug, setKey(access[scope]?.[slug], configKey, false)),\n        ),\n      )\n    }\n  }\n\n  const toggleFlat = (scope: FlatKey, configKey: string, allow: boolean) => {\n    if (allow) {\n      const bucket = without(access[scope], configKey)\n      setValue(bucket ? setKey(access, scope, bucket) : (without(access, scope) ?? {}))\n    } else {\n      setValue(setKey(access, scope, setKey(access[scope], configKey, false)))\n    }\n  }\n\n  const setAllScoped = (scope: ScopeKey, slug: string, leaves: ClientItem[], allow: boolean) => {\n    if (allow) {\n      const scopeBucket = without(access[scope], slug)\n      setValue(scopeBucket ? setKey(access, scope, scopeBucket) : (without(access, scope) ?? {}))\n    } else {\n      const slugBucket = leaves.reduce<Record<string, boolean>>(\n        (acc, leaf) => ({ ...acc, [leaf.configKey]: false }),\n        {},\n      )\n      setValue(setKey(access, scope, setKey(access[scope], slug, slugBucket)))\n    }\n  }\n\n  const setAllFlat = (scope: FlatKey, leaves: ClientItem[], allow: boolean) => {\n    if (allow) {\n      setValue(without(access, scope) ?? {})\n    } else {\n      const bucket = leaves.reduce<Record<string, boolean>>(\n        (acc, leaf) => ({ ...acc, [leaf.configKey]: false }),\n        {},\n      )\n      setValue(setKey(access, scope, bucket))\n    }\n  }\n\n  const renderLeaf = (\n    leaf: ClientItem,\n    id: string,\n    checked: boolean,\n    onToggle: (allow: boolean) => void,\n  ) => (\n    <li className={`${baseClass}__leaf`} key={leaf.configKey}>\n      <CheckboxInput\n        checked={checked}\n        id={id}\n        label={leaf.label}\n        onToggle={(e) => onToggle(e.target.checked)}\n      />\n      {leaf.description && <p className={`${baseClass}__leaf-description`}>{leaf.description}</p>}\n    </li>\n  )\n\n  const renderCard = ({\n    id,\n    isLeafAllowed,\n    label,\n    leaves,\n    onSetAll,\n    onToggleLeaf,\n  }: {\n    id: string\n    isLeafAllowed: (leaf: ClientItem) => boolean\n    label: string\n    leaves: ClientItem[]\n    onSetAll: (allow: boolean) => void\n    onToggleLeaf: (leaf: ClientItem, allow: boolean) => void\n  }) => {\n    const allowedCount = leaves.filter(isLeafAllowed).length\n    const groups = LEAF_GROUP_KEYS.map((key) => ({\n      key,\n      label: leafGroupLabels[key],\n      leaves: leaves.filter((leaf) => (leaf.group ?? 'custom') === key),\n    })).filter((group) => group.leaves.length > 0)\n    const hasGroupLabels = groups.length > 1\n\n    return (\n      <Collapsible\n        className={`${baseClass}__card`}\n        header={\n          // Keep header clicks on the checkbox from also toggling the collapsible.\n          <span\n            className={`${baseClass}__card-checkbox`}\n            onClick={(e) => e.stopPropagation()}\n            role=\"presentation\"\n          >\n            <CheckboxInput\n              checked={allowedCount === leaves.length}\n              id={`${id}._all`}\n              label={label}\n              onToggle={() => onSetAll(allowedCount < leaves.length)}\n              partialChecked={allowedCount > 0 && allowedCount < leaves.length}\n            />\n          </span>\n        }\n        initCollapsed\n        key={id}\n      >\n        <div className={`${baseClass}__card-groups`}>\n          {groups.map((group) => (\n            <div className={`${baseClass}__leaf-group`} key={group.key}>\n              {hasGroupLabels && <p className={`${baseClass}__leaf-group-label`}>{group.label}</p>}\n              <ul className={`${baseClass}__list`}>\n                {group.leaves.map((leaf) =>\n                  renderLeaf(leaf, `${id}.${leaf.configKey}`, isLeafAllowed(leaf), (allow) =>\n                    onToggleLeaf(leaf, allow),\n                  ),\n                )}\n              </ul>\n            </div>\n          ))}\n        </div>\n      </Collapsible>\n    )\n  }\n\n  const renderScope = (scope: ScopeKey, bySlug: Record<string, ClientItem[]>) =>\n    Object.entries(bySlug).map(([slug, leaves]) =>\n      renderCard({\n        id: `${path}.${scope}.${slug}`,\n        isLeafAllowed: (leaf) => isScopedAllowed(scope, slug, leaf.configKey),\n        label: titleCase(slug),\n        leaves,\n        onSetAll: (allow) => setAllScoped(scope, slug, leaves, allow),\n        onToggleLeaf: (leaf, allow) => toggleScoped(scope, slug, leaf.configKey, allow),\n      }),\n    )\n\n  const renderFlat = (scope: FlatKey, label: string, leaves: ClientItem[]) =>\n    leaves.length > 0 &&\n    renderCard({\n      id: `${path}.${scope}`,\n      isLeafAllowed: (leaf) => isFlatAllowed(scope, leaf.configKey),\n      label,\n      leaves,\n      onSetAll: (allow) => setAllFlat(scope, leaves, allow),\n      onToggleLeaf: (leaf, allow) => toggleFlat(scope, leaf.configKey, allow),\n    })\n\n  const tabs: Array<{ key: TabKey; label: string }> = [\n    ...(Object.keys(collectionsBySlug).length > 0\n      ? [{ key: 'collections' as const, label: t('general:collections') }]\n      : []),\n    ...(Object.keys(globalsBySlug).length > 0\n      ? [{ key: 'globals' as const, label: t('general:globals') }]\n      : []),\n    ...(prompts.length > 0 || resources.length > 0 || tools.length > 0\n      ? [{ key: 'server' as const, label: t('plugin-mcp:server') }]\n      : []),\n  ]\n  if (tabs.length === 0) {\n    return null\n  }\n\n  const currentTab = activeTab ?? tabs[0]!.key\n\n  return (\n    <div className={baseClass}>\n      <header className={`${baseClass}__header`}>\n        <h4>{t('plugin-mcp:permissions')}</h4>\n        <p>{t('plugin-mcp:permissionsDescription')}</p>\n      </header>\n      <div className={`${baseClass}__tabbed-content`}>\n        <Tabs\n          className={`${baseClass}__tabs`}\n          onChange={setActiveTab}\n          tabs={tabs.map((tab) => ({\n            label: tab.label,\n            value: tab.key,\n          }))}\n          value={currentTab}\n        />\n        <div className={`${baseClass}__cards`}>\n          {currentTab === 'collections' && renderScope('collections', collectionsBySlug)}\n          {currentTab === 'globals' && renderScope('globals', globalsBySlug)}\n          {currentTab === 'server' && (\n            <>\n              {renderFlat('prompts', t('plugin-mcp:prompts'), prompts)}\n              {renderFlat('resources', t('plugin-mcp:resources'), resources)}\n              {renderFlat('tools', t('plugin-mcp:tools'), tools)}\n            </>\n          )}\n        </div>\n      </div>\n    </div>\n  )\n}\n\nconst titleCase = (slug: string): string =>\n  slug.replace(/(^|[-_])(.)/g, (_, sep: string, ch: string) =>\n    sep ? ` ${ch.toUpperCase()}` : ch.toUpperCase(),\n  )\n"],"names":["CheckboxInput","Collapsible","Tabs","useField","useTranslation","React","useState","baseClass","LEAF_GROUP_KEYS","without","obj","key","_omitted","rest","Object","keys","length","undefined","setKey","value","AccessField","path","pluginConfig","setValue","t","activeTab","setActiveTab","access","leafGroupLabels","auth","custom","operations","collectionsBySlug","globalsBySlug","prompts","resources","tools","item","items","type","collectionSlug","push","globalSlug","isScopedAllowed","scope","slug","configKey","isFlatAllowed","toggleScoped","allow","slugBucket","scopeBucket","toggleFlat","bucket","setAllScoped","leaves","reduce","acc","leaf","setAllFlat","renderLeaf","id","checked","onToggle","li","className","label","e","target","description","p","renderCard","isLeafAllowed","onSetAll","onToggleLeaf","allowedCount","filter","groups","map","group","hasGroupLabels","header","span","onClick","stopPropagation","role","partialChecked","initCollapsed","div","ul","renderScope","bySlug","entries","titleCase","renderFlat","tabs","currentTab","h4","onChange","tab","replace","_","sep","ch","toUpperCase"],"mappings":"AAAA;;AAIA,SAASA,aAAa,EAAEC,WAAW,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,cAAc,QAAQ,iBAAgB;AAC3F,OAAOC,SAASC,QAAQ,QAAQ,QAAO;AAKvC,OAAO,cAAa;AAEpB,MAAMC,YAAY;AAOlB,MAAMC,kBAAkB;IAAC;IAAc;IAAQ;CAAS;AAQxD,yFAAyF,GACzF,MAAMC,UAAU,CACdC,KACAC;IAEA,IAAI,CAACD,OAAO,CAAEC,CAAAA,OAAOD,GAAE,GAAI;QACzB,OAAOA;IACT;IACA,MAAM,EAAE,CAACC,IAAI,EAAEC,QAAQ,EAAE,GAAGC,MAAM,GAAGH;IACrC,OAAOI,OAAOC,IAAI,CAACF,MAAMG,MAAM,KAAK,IAAIC,YAAaJ;AACvD;AAEA,MAAMK,SAAS,CACbR,KACAC,KACAQ,QACO,CAAA;QAAE,GAAIT,OAAO,CAAC,CAAC;QAAG,CAACC,IAAI,EAAEQ;IAAM,CAAA;AAExC,OAAO,MAAMC,cAA+B,CAAC,EAAEC,IAAI,EAAEC,YAAY,EAAE;IACjE,MAAM,EAAEC,QAAQ,EAAEJ,KAAK,EAAE,GAAGhB,SAAkC;QAAEkB;IAAK;IACrE,MAAM,EAAEG,CAAC,EAAE,GAAGpB;IACd,MAAM,CAACqB,WAAWC,aAAa,GAAGpB,SAAwB;IAC1D,MAAMqB,SAASR,SAAS,CAAC;IACzB,MAAMS,kBAAgD;QACpDC,MAAML,EAAE;QACRM,QAAQN,EAAE;QACVO,YAAYP,EAAE;IAChB;IAEA,MAAMQ,oBAAkD,CAAC;IACzD,MAAMC,gBAA8C,CAAC;IACrD,MAAMC,UAAwB,EAAE;IAChC,MAAMC,YAA0B,EAAE;IAClC,MAAMC,QAAsB,EAAE;IAE9B,KAAK,MAAMC,QAAQf,aAAagB,KAAK,CAAE;QACrC,OAAQD,KAAKE,IAAI;YACf,KAAK;;gBACDP,CAAAA,iBAAiB,CAACK,KAAKG,cAAc,CAAE,KAAK,EAAE,AAAD,EAAGC,IAAI,CAACJ;gBACvD;YACF,KAAK;;gBACDJ,CAAAA,aAAa,CAACI,KAAKK,UAAU,CAAE,KAAK,EAAE,AAAD,EAAGD,IAAI,CAACJ;gBAC/C;YACF,KAAK;gBACHH,QAAQO,IAAI,CAACJ;gBACb;YACF,KAAK;gBACHF,UAAUM,IAAI,CAACJ;gBACf;YACF,KAAK;gBACHD,MAAMK,IAAI,CAACJ;gBACX;QACJ;IACF;IAEA,MAAMM,kBAAkB,CAACC,OAAiBC,MAAcC,YACtDnB,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAE,CAACC,UAAU,KAAK;IAEzC,MAAMC,gBAAgB,CAACH,OAAgBE,YACrCnB,MAAM,CAACiB,MAAM,EAAE,CAACE,UAAU,KAAK;IAEjC,MAAME,eAAe,CAACJ,OAAiBC,MAAcC,WAAmBG;QACtE,IAAIA,OAAO;YACT,MAAMC,aAAazC,QAAQkB,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAEC;YAClD,MAAMK,cAAcD,aAChBhC,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAMK,cAC5BzC,QAAQkB,MAAM,CAACiB,MAAM,EAAEC;YAC3BtB,SAAS4B,cAAcjC,OAAOS,QAAQiB,OAAOO,eAAgB1C,QAAQkB,QAAQiB,UAAU,CAAC;QAC1F,OAAO;YACLrB,SACEL,OACES,QACAiB,OACA1B,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAM3B,OAAOS,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAEC,WAAW;QAG3E;IACF;IAEA,MAAMM,aAAa,CAACR,OAAgBE,WAAmBG;QACrD,IAAIA,OAAO;YACT,MAAMI,SAAS5C,QAAQkB,MAAM,CAACiB,MAAM,EAAEE;YACtCvB,SAAS8B,SAASnC,OAAOS,QAAQiB,OAAOS,UAAW5C,QAAQkB,QAAQiB,UAAU,CAAC;QAChF,OAAO;YACLrB,SAASL,OAAOS,QAAQiB,OAAO1B,OAAOS,MAAM,CAACiB,MAAM,EAAEE,WAAW;QAClE;IACF;IAEA,MAAMQ,eAAe,CAACV,OAAiBC,MAAcU,QAAsBN;QACzE,IAAIA,OAAO;YACT,MAAME,cAAc1C,QAAQkB,MAAM,CAACiB,MAAM,EAAEC;YAC3CtB,SAAS4B,cAAcjC,OAAOS,QAAQiB,OAAOO,eAAgB1C,QAAQkB,QAAQiB,UAAU,CAAC;QAC1F,OAAO;YACL,MAAMM,aAAaK,OAAOC,MAAM,CAC9B,CAACC,KAAKC,OAAU,CAAA;oBAAE,GAAGD,GAAG;oBAAE,CAACC,KAAKZ,SAAS,CAAC,EAAE;gBAAM,CAAA,GAClD,CAAC;YAEHvB,SAASL,OAAOS,QAAQiB,OAAO1B,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAMK;QAC7D;IACF;IAEA,MAAMS,aAAa,CAACf,OAAgBW,QAAsBN;QACxD,IAAIA,OAAO;YACT1B,SAASd,QAAQkB,QAAQiB,UAAU,CAAC;QACtC,OAAO;YACL,MAAMS,SAASE,OAAOC,MAAM,CAC1B,CAACC,KAAKC,OAAU,CAAA;oBAAE,GAAGD,GAAG;oBAAE,CAACC,KAAKZ,SAAS,CAAC,EAAE;gBAAM,CAAA,GAClD,CAAC;YAEHvB,SAASL,OAAOS,QAAQiB,OAAOS;QACjC;IACF;IAEA,MAAMO,aAAa,CACjBF,MACAG,IACAC,SACAC,yBAEA,MAACC;YAAGC,WAAW,GAAG1D,UAAU,MAAM,CAAC;;8BACjC,KAACP;oBACC8D,SAASA;oBACTD,IAAIA;oBACJK,OAAOR,KAAKQ,KAAK;oBACjBH,UAAU,CAACI,IAAMJ,SAASI,EAAEC,MAAM,CAACN,OAAO;;gBAE3CJ,KAAKW,WAAW,kBAAI,KAACC;oBAAEL,WAAW,GAAG1D,UAAU,kBAAkB,CAAC;8BAAGmD,KAAKW,WAAW;;;WAP9CX,KAAKZ,SAAS;IAW1D,MAAMyB,aAAa,CAAC,EAClBV,EAAE,EACFW,aAAa,EACbN,KAAK,EACLX,MAAM,EACNkB,QAAQ,EACRC,YAAY,EAQb;QACC,MAAMC,eAAepB,OAAOqB,MAAM,CAACJ,eAAexD,MAAM;QACxD,MAAM6D,SAASrE,gBAAgBsE,GAAG,CAAC,CAACnE,MAAS,CAAA;gBAC3CA;gBACAuD,OAAOtC,eAAe,CAACjB,IAAI;gBAC3B4C,QAAQA,OAAOqB,MAAM,CAAC,CAAClB,OAAS,AAACA,CAAAA,KAAKqB,KAAK,IAAI,QAAO,MAAOpE;YAC/D,CAAA,GAAIiE,MAAM,CAAC,CAACG,QAAUA,MAAMxB,MAAM,CAACvC,MAAM,GAAG;QAC5C,MAAMgE,iBAAiBH,OAAO7D,MAAM,GAAG;QAEvC,qBACE,KAACf;YACCgE,WAAW,GAAG1D,UAAU,MAAM,CAAC;YAC/B0E,QACE,yEAAyE;0BACzE,KAACC;gBACCjB,WAAW,GAAG1D,UAAU,eAAe,CAAC;gBACxC4E,SAAS,CAAChB,IAAMA,EAAEiB,eAAe;gBACjCC,MAAK;0BAEL,cAAA,KAACrF;oBACC8D,SAASa,iBAAiBpB,OAAOvC,MAAM;oBACvC6C,IAAI,GAAGA,GAAG,KAAK,CAAC;oBAChBK,OAAOA;oBACPH,UAAU,IAAMU,SAASE,eAAepB,OAAOvC,MAAM;oBACrDsE,gBAAgBX,eAAe,KAAKA,eAAepB,OAAOvC,MAAM;;;YAItEuE,aAAa;sBAGb,cAAA,KAACC;gBAAIvB,WAAW,GAAG1D,UAAU,aAAa,CAAC;0BACxCsE,OAAOC,GAAG,CAAC,CAACC,sBACX,MAACS;wBAAIvB,WAAW,GAAG1D,UAAU,YAAY,CAAC;;4BACvCyE,gCAAkB,KAACV;gCAAEL,WAAW,GAAG1D,UAAU,kBAAkB,CAAC;0CAAGwE,MAAMb,KAAK;;0CAC/E,KAACuB;gCAAGxB,WAAW,GAAG1D,UAAU,MAAM,CAAC;0CAChCwE,MAAMxB,MAAM,CAACuB,GAAG,CAAC,CAACpB,OACjBE,WAAWF,MAAM,GAAGG,GAAG,CAAC,EAAEH,KAAKZ,SAAS,EAAE,EAAE0B,cAAcd,OAAO,CAACT,QAChEyB,aAAahB,MAAMT;;;uBALsB8B,MAAMpE,GAAG;;WAJzDkD;IAkBX;IAEA,MAAM6B,cAAc,CAAC9C,OAAiB+C,SACpC7E,OAAO8E,OAAO,CAACD,QAAQb,GAAG,CAAC,CAAC,CAACjC,MAAMU,OAAO,GACxCgB,WAAW;gBACTV,IAAI,GAAGxC,KAAK,CAAC,EAAEuB,MAAM,CAAC,EAAEC,MAAM;gBAC9B2B,eAAe,CAACd,OAASf,gBAAgBC,OAAOC,MAAMa,KAAKZ,SAAS;gBACpEoB,OAAO2B,UAAUhD;gBACjBU;gBACAkB,UAAU,CAACxB,QAAUK,aAAaV,OAAOC,MAAMU,QAAQN;gBACvDyB,cAAc,CAAChB,MAAMT,QAAUD,aAAaJ,OAAOC,MAAMa,KAAKZ,SAAS,EAAEG;YAC3E;IAGJ,MAAM6C,aAAa,CAAClD,OAAgBsB,OAAeX,SACjDA,OAAOvC,MAAM,GAAG,KAChBuD,WAAW;YACTV,IAAI,GAAGxC,KAAK,CAAC,EAAEuB,OAAO;YACtB4B,eAAe,CAACd,OAASX,cAAcH,OAAOc,KAAKZ,SAAS;YAC5DoB;YACAX;YACAkB,UAAU,CAACxB,QAAUU,WAAWf,OAAOW,QAAQN;YAC/CyB,cAAc,CAAChB,MAAMT,QAAUG,WAAWR,OAAOc,KAAKZ,SAAS,EAAEG;QACnE;IAEF,MAAM8C,OAA8C;WAC9CjF,OAAOC,IAAI,CAACiB,mBAAmBhB,MAAM,GAAG,IACxC;YAAC;gBAAEL,KAAK;gBAAwBuD,OAAO1C,EAAE;YAAuB;SAAE,GAClE,EAAE;WACFV,OAAOC,IAAI,CAACkB,eAAejB,MAAM,GAAG,IACpC;YAAC;gBAAEL,KAAK;gBAAoBuD,OAAO1C,EAAE;YAAmB;SAAE,GAC1D,EAAE;WACFU,QAAQlB,MAAM,GAAG,KAAKmB,UAAUnB,MAAM,GAAG,KAAKoB,MAAMpB,MAAM,GAAG,IAC7D;YAAC;gBAAEL,KAAK;gBAAmBuD,OAAO1C,EAAE;YAAqB;SAAE,GAC3D,EAAE;KACP;IACD,IAAIuE,KAAK/E,MAAM,KAAK,GAAG;QACrB,OAAO;IACT;IAEA,MAAMgF,aAAavE,aAAasE,IAAI,CAAC,EAAE,CAAEpF,GAAG;IAE5C,qBACE,MAAC6E;QAAIvB,WAAW1D;;0BACd,MAAC0E;gBAAOhB,WAAW,GAAG1D,UAAU,QAAQ,CAAC;;kCACvC,KAAC0F;kCAAIzE,EAAE;;kCACP,KAAC8C;kCAAG9C,EAAE;;;;0BAER,MAACgE;gBAAIvB,WAAW,GAAG1D,UAAU,gBAAgB,CAAC;;kCAC5C,KAACL;wBACC+D,WAAW,GAAG1D,UAAU,MAAM,CAAC;wBAC/B2F,UAAUxE;wBACVqE,MAAMA,KAAKjB,GAAG,CAAC,CAACqB,MAAS,CAAA;gCACvBjC,OAAOiC,IAAIjC,KAAK;gCAChB/C,OAAOgF,IAAIxF,GAAG;4BAChB,CAAA;wBACAQ,OAAO6E;;kCAET,MAACR;wBAAIvB,WAAW,GAAG1D,UAAU,OAAO,CAAC;;4BAClCyF,eAAe,iBAAiBN,YAAY,eAAe1D;4BAC3DgE,eAAe,aAAaN,YAAY,WAAWzD;4BACnD+D,eAAe,0BACd;;oCACGF,WAAW,WAAWtE,EAAE,uBAAuBU;oCAC/C4D,WAAW,aAAatE,EAAE,yBAAyBW;oCACnD2D,WAAW,SAAStE,EAAE,qBAAqBY;;;;;;;;;AAO1D,EAAC;AAED,MAAMyD,YAAY,CAAChD,OACjBA,KAAKuD,OAAO,CAAC,gBAAgB,CAACC,GAAGC,KAAaC,KAC5CD,MAAM,CAAC,CAAC,EAAEC,GAAGC,WAAW,IAAI,GAAGD,GAAGC,WAAW"}

package/dist/components/SettingsMenu/index.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/SettingsMenu/index.client.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,OAAO,CAAA;AAOzB;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAiBnC,CAAA"}
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/SettingsMenu/index.client.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,OAAO,CAAA;AAIzB;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAgBnC,CAAA"}

package/dist/components/SettingsMenu/index.client.js

@@ -1,5 +1,5 @@
 'use client';
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx } from "react/jsx-runtime";
 import { PopupList, useConfig, useTranslation } from '@payloadcms/ui';
 import { formatAdminURL } from 'payload/shared';
 import React from 'react';
@@ -10,19 +10,14 @@ import React from 'react';
  */ export const MCPSettingsMenu = ()=>{
     const { config } = useConfig();
     const { t } = useTranslation();
-    return /*#__PURE__*/ _jsxs(PopupList.MenuItem, {
-        children: [
-            /*#__PURE__*/ _jsx(PopupList.GroupLabel, {
-                label: t('plugin-mcp:mcp')
+    return /*#__PURE__*/ _jsx(PopupList.MenuItem, {
+        children: /*#__PURE__*/ _jsx(PopupList.Button, {
+            href: formatAdminURL({
+                adminRoute: config.routes.admin,
+                path: '/collections/payload-mcp-api-keys'
             }),
-            /*#__PURE__*/ _jsx(PopupList.Button, {
-                href: formatAdminURL({
-                    adminRoute: config.routes.admin,
-                    path: '/collections/payload-mcp-api-keys'
-                }),
-                children: t('plugin-mcp:manageAPIKeys')
-            })
-        ]
+            children: t('plugin-mcp:manageAPIKeys')
+        })
     });
 };
 

package/dist/components/SettingsMenu/index.client.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/components/SettingsMenu/index.client.tsx"],"sourcesContent":["'use client'\n\nimport { PopupList, useConfig, useTranslation } from '@payloadcms/ui'\nimport { formatAdminURL } from 'payload/shared'\nimport React from 'react'\n\nimport type {\n  PluginMCPTranslationKeys,\n  PluginMCPTranslations,\n} from '../../translations/index.js'\n\n/**\n * Entry in the user menu's Settings sub-popup linking to the API keys\n * collection. The collection is excluded from the main nav\n * (`admin.group: false`) and managed from here instead.\n */\nexport const MCPSettingsMenu: React.FC = () => {\n  const { config } = useConfig()\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n\n  return (\n    <PopupList.MenuItem>\n      <PopupList.GroupLabel label={t('plugin-mcp:mcp')} />\n      <PopupList.Button\n        href={formatAdminURL({\n          adminRoute: config.routes.admin,\n          path: '/collections/payload-mcp-api-keys',\n        })}\n      >\n        {t('plugin-mcp:manageAPIKeys')}\n      </PopupList.Button>\n    </PopupList.MenuItem>\n  )\n}\n"],"names":["PopupList","useConfig","useTranslation","formatAdminURL","React","MCPSettingsMenu","config","t","MenuItem","GroupLabel","label","Button","href","adminRoute","routes","admin","path"],"mappings":"AAAA;;AAEA,SAASA,SAAS,EAAEC,SAAS,EAAEC,cAAc,QAAQ,iBAAgB;AACrE,SAASC,cAAc,QAAQ,iBAAgB;AAC/C,OAAOC,WAAW,QAAO;AAOzB;;;;CAIC,GACD,OAAO,MAAMC,kBAA4B;IACvC,MAAM,EAAEC,MAAM,EAAE,GAAGL;IACnB,MAAM,EAAEM,CAAC,EAAE,GAAGL;IAEd,qBACE,MAACF,UAAUQ,QAAQ;;0BACjB,KAACR,UAAUS,UAAU;gBAACC,OAAOH,EAAE;;0BAC/B,KAACP,UAAUW,MAAM;gBACfC,MAAMT,eAAe;oBACnBU,YAAYP,OAAOQ,MAAM,CAACC,KAAK;oBAC/BC,MAAM;gBACR;0BAECT,EAAE;;;;AAIX,EAAC"}
+{"version":3,"sources":["../../../src/components/SettingsMenu/index.client.tsx"],"sourcesContent":["'use client'\n\nimport { PopupList, useConfig, useTranslation } from '@payloadcms/ui'\nimport { formatAdminURL } from 'payload/shared'\nimport React from 'react'\n\nimport type { PluginMCPTranslationKeys, PluginMCPTranslations } from '../../translations/index.js'\n\n/**\n * Entry in the user menu's Settings sub-popup linking to the API keys\n * collection. The collection is excluded from the main nav\n * (`admin.group: false`) and managed from here instead.\n */\nexport const MCPSettingsMenu: React.FC = () => {\n  const { config } = useConfig()\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n\n  return (\n    <PopupList.MenuItem>\n      <PopupList.Button\n        href={formatAdminURL({\n          adminRoute: config.routes.admin,\n          path: '/collections/payload-mcp-api-keys',\n        })}\n      >\n        {t('plugin-mcp:manageAPIKeys')}\n      </PopupList.Button>\n    </PopupList.MenuItem>\n  )\n}\n"],"names":["PopupList","useConfig","useTranslation","formatAdminURL","React","MCPSettingsMenu","config","t","MenuItem","Button","href","adminRoute","routes","admin","path"],"mappings":"AAAA;;AAEA,SAASA,SAAS,EAAEC,SAAS,EAAEC,cAAc,QAAQ,iBAAgB;AACrE,SAASC,cAAc,QAAQ,iBAAgB;AAC/C,OAAOC,WAAW,QAAO;AAIzB;;;;CAIC,GACD,OAAO,MAAMC,kBAA4B;IACvC,MAAM,EAAEC,MAAM,EAAE,GAAGL;IACnB,MAAM,EAAEM,CAAC,EAAE,GAAGL;IAEd,qBACE,KAACF,UAAUQ,QAAQ;kBACjB,cAAA,KAACR,UAAUS,MAAM;YACfC,MAAMP,eAAe;gBACnBQ,YAAYL,OAAOM,MAAM,CAACC,KAAK;gBAC/BC,MAAM;YACR;sBAECP,EAAE;;;AAIX,EAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAO1F,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAiB,cAAc;QAC7B,UAAU,EAAE,SAAS,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;KACjD;IACD,UAAU,iBAAiB;QACzB,uFAAuF;QACvF,wBAAwB,EAAE,eAAe,CAAA;KAC1C;CACF;AAED,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAAA;AAExE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAElG,eAAO,MAAM,SAAS,wDAkFpB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAO1F,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAiB,cAAc;QAC7B,UAAU,EAAE,SAAS,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAA;KACjD;IACD,UAAU,iBAAiB;QACzB,uFAAuF;QACvF,wBAAwB,EAAE,eAAe,CAAA;KAC1C;CACF;AAED,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAAA;AAExE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAElG,eAAO,MAAM,SAAS,wDAqFpB,CAAA"}

package/dist/index.js

@@ -65,7 +65,12 @@ export const mcpPlugin = definePlugin({
                     ...config.admin?.components,
                     userMenuSettingsItems: [
                         ...config.admin?.components?.userMenuSettingsItems ?? [],
-                        '@payloadcms/plugin-mcp/client#MCPSettingsMenu'
+                        {
+                            group: 'MCP',
+                            items: [
+                                '@payloadcms/plugin-mcp/client#MCPSettingsMenu'
+                            ]
+                        }
                     ]
                 }
             },

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { AcceptedLanguages } from '@payloadcms/translations'\n\nimport { defaultUserCollection, definePlugin } from 'payload'\n\nimport type { PluginDefaultTranslationsObject } from './translations/types.js'\nimport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js'\n\nimport { getAPIKeysCollection } from './collection/index.js'\nimport { mcpEndpoint } from './endpoint/index.js'\nimport { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js'\nimport { translations } from './translations/index.js'\n\ndeclare module 'payload' {\n  export interface PayloadRequest {\n    payloadAPI: 'GraphQL' | 'local' | 'MCP' | 'REST'\n  }\n  interface RegisteredPlugins {\n    /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */\n    '@payloadcms/plugin-mcp': MCPPluginConfig\n  }\n}\n\nexport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig }\n\nexport { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js'\n\nexport const mcpPlugin = definePlugin<MCPPluginConfig>({\n  slug: '@payloadcms/plugin-mcp',\n  order: 10,\n  plugin: ({ config, plugins, ...rawConfig }) => {\n    // If a project has no auth collection yet, add the default users collection\n    // so the relationship target and default `userCollection` exist.\n    if (!config.admin?.user) {\n      const firstCollectionWithAuth = (config.collections ?? []).find(({ auth }) => Boolean(auth))\n      if (!firstCollectionWithAuth) {\n        ;(config.collections ??= []).push(defaultUserCollection)\n      }\n    }\n\n    const pluginConfig = sanitizeMCPConfig({ config, pluginConfig: rawConfig })\n\n    // Stash the sanitized config on plugin options so `getPluginConfig()` reads it.\n    const registered = plugins['@payloadcms/plugin-mcp']\n    if (registered) {\n      // @ts-expect-error\n      registered.sanitizedOptions = pluginConfig as unknown as typeof registered.options\n    }\n\n    ;(config.collections ??= []).push(getAPIKeysCollection({ pluginConfig }))\n\n    if (!config.i18n) {\n      config.i18n = {}\n    }\n\n    if (!config.i18n.translations) {\n      config.i18n.translations = {}\n    }\n\n    const supportedLanguageKeys = config.i18n.supportedLanguages\n      ? Object.keys(config.i18n.supportedLanguages)\n      : ['en']\n\n    for (const lang of supportedLanguageKeys) {\n      const pluginEntry = translations[lang as keyof typeof translations]\n      if (!pluginEntry) {\n        continue\n      }\n\n      const typedLocale = lang as AcceptedLanguages\n      const existing = (config.i18n.translations[typedLocale] ?? {}) as Record<string, unknown>\n      config.i18n.translations[typedLocale] = {\n        ...existing,\n        'plugin-mcp': pluginEntry.translations['plugin-mcp'],\n      } as PluginDefaultTranslationsObject\n    }\n\n    // Keep the API-keys collection registered even when disabled, so DB schema\n    // and generated types don't drift between enabled/disabled environments.\n    if (pluginConfig.disabled) {\n      return config\n    }\n\n    return {\n      ...config,\n      admin: {\n        ...config.admin,\n        components: {\n          ...config.admin?.components,\n          userMenuSettingsItems: [\n            ...(config.admin?.components?.userMenuSettingsItems ?? []),\n            '@payloadcms/plugin-mcp/client#MCPSettingsMenu',\n          ],\n        },\n      },\n      endpoints: [\n        ...(config.endpoints ?? []),\n        // Payload prefixes /api, so the full path is /api/mcp.\n        { handler: mcpEndpoint, method: 'post', path: '/mcp' },\n        // Streamable HTTP's optional server=>client GET stream. We don't offer\n        // one, so answer 405 per spec-— clients then skip it cleanly\n        {\n          handler: () => new Response(null, { headers: { Allow: 'POST' }, status: 405 }),\n          method: 'get',\n          path: '/mcp',\n        },\n      ],\n    }\n  },\n})\n"],"names":["defaultUserCollection","definePlugin","getAPIKeysCollection","mcpEndpoint","sanitizeMCPConfig","translations","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","mcpPlugin","slug","order","plugin","config","plugins","rawConfig","admin","user","firstCollectionWithAuth","collections","find","auth","Boolean","push","pluginConfig","registered","sanitizedOptions","i18n","supportedLanguageKeys","supportedLanguages","Object","keys","lang","pluginEntry","typedLocale","existing","disabled","components","userMenuSettingsItems","endpoints","handler","method","path","Response","headers","Allow","status"],"mappings":"AAEA,SAASA,qBAAqB,EAAEC,YAAY,QAAQ,UAAS;AAK7D,SAASC,oBAAoB,QAAQ,wBAAuB;AAC5D,SAASC,WAAW,QAAQ,sBAAqB;AACjD,SAASC,iBAAiB,QAAQ,6BAA4B;AAC9D,SAASC,YAAY,QAAQ,0BAAyB;AActD,SAASC,oBAAoB,EAAEC,gBAAgB,EAAEC,YAAY,EAAEC,UAAU,QAAQ,kBAAiB;AAElG,OAAO,MAAMC,YAAYT,aAA8B;IACrDU,MAAM;IACNC,OAAO;IACPC,QAAQ,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAE,GAAGC,WAAW;QACxC,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,CAACF,OAAOG,KAAK,EAAEC,MAAM;YACvB,MAAMC,0BAA0B,AAACL,CAAAA,OAAOM,WAAW,IAAI,EAAE,AAAD,EAAGC,IAAI,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKC,QAAQD;YACtF,IAAI,CAACH,yBAAyB;;gBAC1BL,CAAAA,OAAOM,WAAW,KAAK,EAAE,AAAD,EAAGI,IAAI,CAACxB;YACpC;QACF;QAEA,MAAMyB,eAAerB,kBAAkB;YAAEU;YAAQW,cAAcT;QAAU;QAEzE,gFAAgF;QAChF,MAAMU,aAAaX,OAAO,CAAC,yBAAyB;QACpD,IAAIW,YAAY;YACd,mBAAmB;YACnBA,WAAWC,gBAAgB,GAAGF;QAChC;;QAEEX,CAAAA,OAAOM,WAAW,KAAK,EAAE,AAAD,EAAGI,IAAI,CAACtB,qBAAqB;YAAEuB;QAAa;QAEtE,IAAI,CAACX,OAAOc,IAAI,EAAE;YAChBd,OAAOc,IAAI,GAAG,CAAC;QACjB;QAEA,IAAI,CAACd,OAAOc,IAAI,CAACvB,YAAY,EAAE;YAC7BS,OAAOc,IAAI,CAACvB,YAAY,GAAG,CAAC;QAC9B;QAEA,MAAMwB,wBAAwBf,OAAOc,IAAI,CAACE,kBAAkB,GACxDC,OAAOC,IAAI,CAAClB,OAAOc,IAAI,CAACE,kBAAkB,IAC1C;YAAC;SAAK;QAEV,KAAK,MAAMG,QAAQJ,sBAAuB;YACxC,MAAMK,cAAc7B,YAAY,CAAC4B,KAAkC;YACnE,IAAI,CAACC,aAAa;gBAChB;YACF;YAEA,MAAMC,cAAcF;YACpB,MAAMG,WAAYtB,OAAOc,IAAI,CAACvB,YAAY,CAAC8B,YAAY,IAAI,CAAC;YAC5DrB,OAAOc,IAAI,CAACvB,YAAY,CAAC8B,YAAY,GAAG;gBACtC,GAAGC,QAAQ;gBACX,cAAcF,YAAY7B,YAAY,CAAC,aAAa;YACtD;QACF;QAEA,2EAA2E;QAC3E,yEAAyE;QACzE,IAAIoB,aAAaY,QAAQ,EAAE;YACzB,OAAOvB;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTG,OAAO;gBACL,GAAGH,OAAOG,KAAK;gBACfqB,YAAY;oBACV,GAAGxB,OAAOG,KAAK,EAAEqB,UAAU;oBAC3BC,uBAAuB;2BACjBzB,OAAOG,KAAK,EAAEqB,YAAYC,yBAAyB,EAAE;wBACzD;qBACD;gBACH;YACF;YACAC,WAAW;mBACL1B,OAAO0B,SAAS,IAAI,EAAE;gBAC1B,uDAAuD;gBACvD;oBAAEC,SAAStC;oBAAauC,QAAQ;oBAAQC,MAAM;gBAAO;gBACrD,uEAAuE;gBACvE,6DAA6D;gBAC7D;oBACEF,SAAS,IAAM,IAAIG,SAAS,MAAM;4BAAEC,SAAS;gCAAEC,OAAO;4BAAO;4BAAGC,QAAQ;wBAAI;oBAC5EL,QAAQ;oBACRC,MAAM;gBACR;aACD;QACH;IACF;AACF,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type { AcceptedLanguages } from '@payloadcms/translations'\n\nimport { defaultUserCollection, definePlugin } from 'payload'\n\nimport type { PluginDefaultTranslationsObject } from './translations/types.js'\nimport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js'\n\nimport { getAPIKeysCollection } from './collection/index.js'\nimport { mcpEndpoint } from './endpoint/index.js'\nimport { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js'\nimport { translations } from './translations/index.js'\n\ndeclare module 'payload' {\n  export interface PayloadRequest {\n    payloadAPI: 'GraphQL' | 'local' | 'MCP' | 'REST'\n  }\n  interface RegisteredPlugins {\n    /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */\n    '@payloadcms/plugin-mcp': MCPPluginConfig\n  }\n}\n\nexport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig }\n\nexport { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js'\n\nexport const mcpPlugin = definePlugin<MCPPluginConfig>({\n  slug: '@payloadcms/plugin-mcp',\n  order: 10,\n  plugin: ({ config, plugins, ...rawConfig }) => {\n    // If a project has no auth collection yet, add the default users collection\n    // so the relationship target and default `userCollection` exist.\n    if (!config.admin?.user) {\n      const firstCollectionWithAuth = (config.collections ?? []).find(({ auth }) => Boolean(auth))\n      if (!firstCollectionWithAuth) {\n        ;(config.collections ??= []).push(defaultUserCollection)\n      }\n    }\n\n    const pluginConfig = sanitizeMCPConfig({ config, pluginConfig: rawConfig })\n\n    // Stash the sanitized config on plugin options so `getPluginConfig()` reads it.\n    const registered = plugins['@payloadcms/plugin-mcp']\n    if (registered) {\n      // @ts-expect-error\n      registered.sanitizedOptions = pluginConfig as unknown as typeof registered.options\n    }\n\n    ;(config.collections ??= []).push(getAPIKeysCollection({ pluginConfig }))\n\n    if (!config.i18n) {\n      config.i18n = {}\n    }\n\n    if (!config.i18n.translations) {\n      config.i18n.translations = {}\n    }\n\n    const supportedLanguageKeys = config.i18n.supportedLanguages\n      ? Object.keys(config.i18n.supportedLanguages)\n      : ['en']\n\n    for (const lang of supportedLanguageKeys) {\n      const pluginEntry = translations[lang as keyof typeof translations]\n      if (!pluginEntry) {\n        continue\n      }\n\n      const typedLocale = lang as AcceptedLanguages\n      const existing = (config.i18n.translations[typedLocale] ?? {}) as Record<string, unknown>\n      config.i18n.translations[typedLocale] = {\n        ...existing,\n        'plugin-mcp': pluginEntry.translations['plugin-mcp'],\n      } as PluginDefaultTranslationsObject\n    }\n\n    // Keep the API-keys collection registered even when disabled, so DB schema\n    // and generated types don't drift between enabled/disabled environments.\n    if (pluginConfig.disabled) {\n      return config\n    }\n\n    return {\n      ...config,\n      admin: {\n        ...config.admin,\n        components: {\n          ...config.admin?.components,\n          userMenuSettingsItems: [\n            ...(config.admin?.components?.userMenuSettingsItems ?? []),\n            {\n              group: 'MCP',\n              items: ['@payloadcms/plugin-mcp/client#MCPSettingsMenu'],\n            },\n          ],\n        },\n      },\n      endpoints: [\n        ...(config.endpoints ?? []),\n        // Payload prefixes /api, so the full path is /api/mcp.\n        { handler: mcpEndpoint, method: 'post', path: '/mcp' },\n        // Streamable HTTP's optional server=>client GET stream. We don't offer\n        // one, so answer 405 per spec-— clients then skip it cleanly\n        {\n          handler: () => new Response(null, { headers: { Allow: 'POST' }, status: 405 }),\n          method: 'get',\n          path: '/mcp',\n        },\n      ],\n    }\n  },\n})\n"],"names":["defaultUserCollection","definePlugin","getAPIKeysCollection","mcpEndpoint","sanitizeMCPConfig","translations","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","mcpPlugin","slug","order","plugin","config","plugins","rawConfig","admin","user","firstCollectionWithAuth","collections","find","auth","Boolean","push","pluginConfig","registered","sanitizedOptions","i18n","supportedLanguageKeys","supportedLanguages","Object","keys","lang","pluginEntry","typedLocale","existing","disabled","components","userMenuSettingsItems","group","items","endpoints","handler","method","path","Response","headers","Allow","status"],"mappings":"AAEA,SAASA,qBAAqB,EAAEC,YAAY,QAAQ,UAAS;AAK7D,SAASC,oBAAoB,QAAQ,wBAAuB;AAC5D,SAASC,WAAW,QAAQ,sBAAqB;AACjD,SAASC,iBAAiB,QAAQ,6BAA4B;AAC9D,SAASC,YAAY,QAAQ,0BAAyB;AActD,SAASC,oBAAoB,EAAEC,gBAAgB,EAAEC,YAAY,EAAEC,UAAU,QAAQ,kBAAiB;AAElG,OAAO,MAAMC,YAAYT,aAA8B;IACrDU,MAAM;IACNC,OAAO;IACPC,QAAQ,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAE,GAAGC,WAAW;QACxC,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,CAACF,OAAOG,KAAK,EAAEC,MAAM;YACvB,MAAMC,0BAA0B,AAACL,CAAAA,OAAOM,WAAW,IAAI,EAAE,AAAD,EAAGC,IAAI,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKC,QAAQD;YACtF,IAAI,CAACH,yBAAyB;;gBAC1BL,CAAAA,OAAOM,WAAW,KAAK,EAAE,AAAD,EAAGI,IAAI,CAACxB;YACpC;QACF;QAEA,MAAMyB,eAAerB,kBAAkB;YAAEU;YAAQW,cAAcT;QAAU;QAEzE,gFAAgF;QAChF,MAAMU,aAAaX,OAAO,CAAC,yBAAyB;QACpD,IAAIW,YAAY;YACd,mBAAmB;YACnBA,WAAWC,gBAAgB,GAAGF;QAChC;;QAEEX,CAAAA,OAAOM,WAAW,KAAK,EAAE,AAAD,EAAGI,IAAI,CAACtB,qBAAqB;YAAEuB;QAAa;QAEtE,IAAI,CAACX,OAAOc,IAAI,EAAE;YAChBd,OAAOc,IAAI,GAAG,CAAC;QACjB;QAEA,IAAI,CAACd,OAAOc,IAAI,CAACvB,YAAY,EAAE;YAC7BS,OAAOc,IAAI,CAACvB,YAAY,GAAG,CAAC;QAC9B;QAEA,MAAMwB,wBAAwBf,OAAOc,IAAI,CAACE,kBAAkB,GACxDC,OAAOC,IAAI,CAAClB,OAAOc,IAAI,CAACE,kBAAkB,IAC1C;YAAC;SAAK;QAEV,KAAK,MAAMG,QAAQJ,sBAAuB;YACxC,MAAMK,cAAc7B,YAAY,CAAC4B,KAAkC;YACnE,IAAI,CAACC,aAAa;gBAChB;YACF;YAEA,MAAMC,cAAcF;YACpB,MAAMG,WAAYtB,OAAOc,IAAI,CAACvB,YAAY,CAAC8B,YAAY,IAAI,CAAC;YAC5DrB,OAAOc,IAAI,CAACvB,YAAY,CAAC8B,YAAY,GAAG;gBACtC,GAAGC,QAAQ;gBACX,cAAcF,YAAY7B,YAAY,CAAC,aAAa;YACtD;QACF;QAEA,2EAA2E;QAC3E,yEAAyE;QACzE,IAAIoB,aAAaY,QAAQ,EAAE;YACzB,OAAOvB;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTG,OAAO;gBACL,GAAGH,OAAOG,KAAK;gBACfqB,YAAY;oBACV,GAAGxB,OAAOG,KAAK,EAAEqB,UAAU;oBAC3BC,uBAAuB;2BACjBzB,OAAOG,KAAK,EAAEqB,YAAYC,yBAAyB,EAAE;wBACzD;4BACEC,OAAO;4BACPC,OAAO;gCAAC;6BAAgD;wBAC1D;qBACD;gBACH;YACF;YACAC,WAAW;mBACL5B,OAAO4B,SAAS,IAAI,EAAE;gBAC1B,uDAAuD;gBACvD;oBAAEC,SAASxC;oBAAayC,QAAQ;oBAAQC,MAAM;gBAAO;gBACrD,uEAAuE;gBACvE,6DAA6D;gBAC7D;oBACEF,SAAS,IAAM,IAAIG,SAAS,MAAM;4BAAEC,SAAS;gCAAEC,OAAO;4BAAO;4BAAGC,QAAQ;wBAAI;oBAC5EL,QAAQ;oBACRC,MAAM;gBACR;aACD;QACH;IACF;AACF,GAAE"}

package/dist/mcp/buildMcpServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buildMcpServer.d.ts","sourceRoot":"","sources":["../../src/mcp/buildMcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAsB,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,SAAS,CAAA;AAGvD,OAAO,KAAK,EACV,aAAa,EAMb,wBAAwB,EAEzB,MAAM,aAAa,CAAA;AAKpB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GAAI,uCAI5B;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,SAuLH,CAAA"}
+{"version":3,"file":"buildMcpServer.d.ts","sourceRoot":"","sources":["../../src/mcp/buildMcpServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAsB,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,SAAS,CAAA;AAGvD,OAAO,KAAK,EACV,aAAa,EAMb,wBAAwB,EAEzB,MAAM,aAAa,CAAA;AAKpB;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,GAAI,uCAI5B;IACD,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,SAyLH,CAAA"}

package/dist/mcp/buildMcpServer.js

@@ -94,6 +94,7 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
                             input: item.tool.input
                         });
                         server.registerTool(item.mcpName, {
+                            annotations: item.tool.annotations,
                             description: item.tool.description,
                             inputSchema: toStandardSchema(inputSchema)
                         }, async (input, ctx)=>callEntityTool({
@@ -147,6 +148,7 @@ import { toStandardSchema } from '../utils/toStandardSchema.js';
                     {
                         const tool = item.tool;
                         server.registerTool(item.mcpName, {
+                            annotations: tool.annotations,
                             description: tool.description,
                             inputSchema: tool.input ? toStandardSchema(tool.input) : undefined
                         }, async (input, ctx)=>finalizeToolResponse(await tool.handler({

package/dist/mcp/buildMcpServer.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, type PayloadRequest } from 'payload'\nimport { z } from 'zod'\n\nimport type {\n  AuthorizedMCP,\n  CollectionMCPItem,\n  GlobalMCPItem,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n  ToolInputSchema,\n} from '../types.js'\n\nimport { getLogger } from '../utils/getLogger.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/**\n * Transport-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The caller is responsible for picking a transport\n * (`WebStandardStreamableHTTPServerTransport`, `StdioServerTransport`, …) and\n * calling `server.connect(transport)`.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createLocalReq`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = (\n    response: MCPToolResponse,\n    overrideResponse?: MCPResponseOverride,\n  ): MCPToolResponse => {\n    const overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  /**\n   * Runs a collection/global tool call:\n   * - reads `collectionSlug` / `globalSlug` from the input\n   * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug\n   * - runs the tool handler and finalizes its response\n   */\n  const callEntityTool = async ({\n    input,\n    item,\n    serverContext,\n  }: {\n    input: unknown\n    item: CollectionMCPItem | GlobalMCPItem\n    serverContext: ServerContext\n  }): Promise<MCPToolResponse> => {\n    const entity = item.type === 'collectionTool' ? 'collection' : 'global'\n    const slugKey = item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug'\n    const toolInput = (input ?? {}) as Record<string, unknown>\n    const slug = toolInput[slugKey] as string | undefined\n\n    if (!slug) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: \"${item.mcpName}\" requires ${slugKey}. Use getConfigInfo to inspect ${entity} slugs.`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const match = authorizedMCP.items.find(\n      (candidate): candidate is CollectionMCPItem | GlobalMCPItem =>\n        candidate.type === item.type &&\n        candidate.mcpName === item.mcpName &&\n        (candidate.type === 'collectionTool'\n          ? candidate.collectionSlug === slug\n          : candidate.type === 'globalTool' && candidate.globalSlug === slug),\n    )\n\n    if (!match) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: MCP access to \"${item.mcpName}\" is not enabled for ${entity} \"${slug}\"`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const handlerArgs = { authorizedMCP, input: toolInput, req, serverContext }\n    const response = await (match.type === 'collectionTool'\n      ? match.tool.handler({ ...handlerArgs, collectionSlug: slug })\n      : match.tool.handler({ ...handlerArgs, globalSlug: slug }))\n\n    return finalizeToolResponse(response, match.tool.overrideResponse)\n  }\n\n  try {\n    const registeredEntityTools = new Set<string>()\n\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool':\n        case 'globalTool': {\n          if (registeredEntityTools.has(item.mcpName)) {\n            break\n          }\n          registeredEntityTools.add(item.mcpName)\n\n          const inputSchema = withSlugInput({\n            name: item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug',\n            input: item.tool.input,\n          })\n\n          server.registerTool(\n            item.mcpName,\n            {\n              description: item.tool.description,\n              inputSchema: toStandardSchema(inputSchema),\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              callEntityTool({ input, item, serverContext: ctx }),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.mcpName,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.mcpName,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.mcpName,\n            {\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n\nconst withSlugInput = ({\n  name,\n  input,\n}: {\n  input?: ToolInputSchema\n  name: 'collectionSlug' | 'globalSlug'\n}): ToolInputSchema => {\n  const description = name === 'collectionSlug' ? 'The collection slug' : 'The global slug'\n  const slugSchema = z.string().describe(description)\n\n  if (!input) {\n    return z.object({ [name]: slugSchema })\n  }\n\n  if (input instanceof z.ZodObject) {\n    return input.extend({ [name]: slugSchema })\n  }\n\n  const schema = input as {\n    properties?: Record<string, JsonSchemaType>\n    required?: string[]\n  } & JsonSchemaType\n\n  return {\n    ...schema,\n    type: 'object',\n    properties: {\n      ...schema.properties,\n      [name]: {\n        type: 'string',\n        description,\n      },\n    },\n    required: Array.from(new Set([name, ...(schema.required ?? [])])),\n  }\n}\n"],"names":["McpServer","APIError","z","getLogger","toStandardSchema","buildMcpServer","authorizedMCP","pluginConfig","req","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","response","overrideResponse","overridden","doc","_doc","rest","callEntityTool","input","item","serverContext","entity","type","slugKey","toolInput","slug","content","text","mcpName","isError","match","items","find","candidate","collectionSlug","globalSlug","handlerArgs","tool","handler","registeredEntityTools","Set","has","add","inputSchema","withSlugInput","registerTool","description","ctx","info","prompt","registerPrompt","argsSchema","undefined","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String","slugSchema","string","describe","object","ZodObject","extend","schema","properties","required","Array","from"],"mappings":"AAAA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,QAA6B,UAAS;AACvD,SAASC,CAAC,QAAQ,MAAK;AAavB,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACC,MAAMC,gBAAgBF,aAAaG,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAIX,UACjB;QAAEY,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAASb,UAAU;QAAEc,SAAST,IAAIS,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,CAC3BC,UACAC;QAEA,MAAMC,aAAaD,mBAAmBD,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGd,QAAQW;QAC5E,MAAM,EAAEG,KAAKC,IAAI,EAAE,GAAGC,MAAM,GAAGH;QAC/B,OAAOG;IACT;IAEA;;;;;GAKC,GACD,MAAMC,iBAAiB,OAAO,EAC5BC,KAAK,EACLC,IAAI,EACJC,aAAa,EAKd;QACC,MAAMC,SAASF,KAAKG,IAAI,KAAK,mBAAmB,eAAe;QAC/D,MAAMC,UAAUJ,KAAKG,IAAI,KAAK,mBAAmB,mBAAmB;QACpE,MAAME,YAAaN,SAAS,CAAC;QAC7B,MAAMO,OAAOD,SAAS,CAACD,QAAQ;QAE/B,IAAI,CAACE,MAAM;YACT,OAAO;gBACLC,SAAS;oBACP;wBACEJ,MAAM;wBACNK,MAAM,CAAC,QAAQ,EAAER,KAAKS,OAAO,CAAC,WAAW,EAAEL,QAAQ,+BAA+B,EAAEF,OAAO,OAAO,CAAC;oBACrG;iBACD;gBACDQ,SAAS;YACX;QACF;QAEA,MAAMC,QAAQhC,cAAciC,KAAK,CAACC,IAAI,CACpC,CAACC,YACCA,UAAUX,IAAI,KAAKH,KAAKG,IAAI,IAC5BW,UAAUL,OAAO,KAAKT,KAAKS,OAAO,IACjCK,CAAAA,UAAUX,IAAI,KAAK,mBAChBW,UAAUC,cAAc,KAAKT,OAC7BQ,UAAUX,IAAI,KAAK,gBAAgBW,UAAUE,UAAU,KAAKV,IAAG;QAGvE,IAAI,CAACK,OAAO;YACV,OAAO;gBACLJ,SAAS;oBACP;wBACEJ,MAAM;wBACNK,MAAM,CAAC,sBAAsB,EAAER,KAAKS,OAAO,CAAC,qBAAqB,EAAEP,OAAO,EAAE,EAAEI,KAAK,CAAC,CAAC;oBACvF;iBACD;gBACDI,SAAS;YACX;QACF;QAEA,MAAMO,cAAc;YAAEtC;YAAeoB,OAAOM;YAAWxB;YAAKoB;QAAc;QAC1E,MAAMT,WAAW,MAAOmB,CAAAA,MAAMR,IAAI,KAAK,mBACnCQ,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEF,gBAAgBT;QAAK,KAC1DK,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAED,YAAYV;QAAK,EAAC;QAE3D,OAAOf,qBAAqBC,UAAUmB,MAAMO,IAAI,CAACzB,gBAAgB;IACnE;IAEA,IAAI;QACF,MAAM2B,wBAAwB,IAAIC;QAElC,KAAK,MAAMrB,QAAQrB,cAAciC,KAAK,CAAE;YACtC,OAAQZ,KAAKG,IAAI;gBACf,KAAK;gBACL,KAAK;oBAAc;wBACjB,IAAIiB,sBAAsBE,GAAG,CAACtB,KAAKS,OAAO,GAAG;4BAC3C;wBACF;wBACAW,sBAAsBG,GAAG,CAACvB,KAAKS,OAAO;wBAEtC,MAAMe,cAAcC,cAAc;4BAChCxC,MAAMe,KAAKG,IAAI,KAAK,mBAAmB,mBAAmB;4BAC1DJ,OAAOC,KAAKkB,IAAI,CAACnB,KAAK;wBACxB;wBAEAf,OAAO0C,YAAY,CACjB1B,KAAKS,OAAO,EACZ;4BACEkB,aAAa3B,KAAKkB,IAAI,CAACS,WAAW;4BAClCH,aAAa/C,iBAAiB+C;wBAChC,GACA,OAAOzB,OAAgB6B,MACrB9B,eAAe;gCAAEC;gCAAOC;gCAAMC,eAAe2B;4BAAI;wBAErDvC,OAAOwC,IAAI,CAAC,CAAC,QAAQ,EAAE7B,KAAKS,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMqB,SAAS9B,KAAK8B,MAAM;wBAC1B9C,OAAO+C,cAAc,CACnB/B,KAAKS,OAAO,EACZ;4BACEuB,YAAYF,OAAOE,UAAU,GAAGvD,iBAAiBqD,OAAOE,UAAU,IAAIC;4BACtEN,aAAaG,OAAOH,WAAW;4BAC/BO,OAAOJ,OAAOI,KAAK;wBACrB,GACA,OAAOnC,OAAgB6B,MACrBE,OAAOX,OAAO,CAAC;gCACbpB,OAAQA,SAAS,CAAC;gCAClBlB;gCACAoB,eAAe2B;4BACjB;wBAEJvC,OAAOwC,IAAI,CAAC,CAAC,UAAU,EAAEC,OAAOI,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAWnC,KAAKmC,QAAQ;wBAC9BnD,OAAOoD,gBAAgB,CACrBpC,KAAKS,OAAO,EACZ,mFAAmF;wBACnF0B,SAASE,GAAG,EACZ;4BACEV,aAAaQ,SAASR,WAAW;4BACjCW,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMX,MAAMW,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAAShB,OAAO,CAAC;gCAAEsB;gCAAQ5D;gCAAKoB,eAAe2B;gCAAKS;4BAAI;wBACjE;wBAEFhD,OAAOwC,IAAI,CAAC,CAAC,YAAY,EAAEM,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAMhB,OAAOlB,KAAKkB,IAAI;wBACtBlC,OAAO0C,YAAY,CACjB1B,KAAKS,OAAO,EACZ;4BACEkB,aAAaT,KAAKS,WAAW;4BAC7BH,aAAaN,KAAKnB,KAAK,GAAGtB,iBAAiByC,KAAKnB,KAAK,IAAIkC;wBAC3D,GACA,OAAOlC,OAAgB6B,MACrBrC,qBACE,MAAM2B,KAAKC,OAAO,CAAC;gCACjBxC;gCACAoB,OAAQA,SAAS,CAAC;gCAClBlB;gCACAoB,eAAe2B;4BACjB,IACAV,KAAKzB,gBAAgB;wBAG3BJ,OAAOwC,IAAI,CAAC,CAAC,QAAQ,EAAE7B,KAAKS,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;YACF;QACF;IACF,EAAE,OAAOiC,OAAO;QACd,MAAM,IAAIpE,SAAS,CAAC,gCAAgC,EAAEqE,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAO1D;AACT,EAAC;AAED,MAAMyC,gBAAgB,CAAC,EACrBxC,IAAI,EACJc,KAAK,EAIN;IACC,MAAM4B,cAAc1C,SAAS,mBAAmB,wBAAwB;IACxE,MAAM2D,aAAarE,EAAEsE,MAAM,GAAGC,QAAQ,CAACnB;IAEvC,IAAI,CAAC5B,OAAO;QACV,OAAOxB,EAAEwE,MAAM,CAAC;YAAE,CAAC9D,KAAK,EAAE2D;QAAW;IACvC;IAEA,IAAI7C,iBAAiBxB,EAAEyE,SAAS,EAAE;QAChC,OAAOjD,MAAMkD,MAAM,CAAC;YAAE,CAAChE,KAAK,EAAE2D;QAAW;IAC3C;IAEA,MAAMM,SAASnD;IAKf,OAAO;QACL,GAAGmD,MAAM;QACT/C,MAAM;QACNgD,YAAY;YACV,GAAGD,OAAOC,UAAU;YACpB,CAAClE,KAAK,EAAE;gBACNkB,MAAM;gBACNwB;YACF;QACF;QACAyB,UAAUC,MAAMC,IAAI,CAAC,IAAIjC,IAAI;YAACpC;eAAUiE,OAAOE,QAAQ,IAAI,EAAE;SAAE;IACjE;AACF"}
+{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, type PayloadRequest } from 'payload'\nimport { z } from 'zod'\n\nimport type {\n  AuthorizedMCP,\n  CollectionMCPItem,\n  GlobalMCPItem,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n  ToolInputSchema,\n} from '../types.js'\n\nimport { getLogger } from '../utils/getLogger.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/**\n * Transport-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The caller is responsible for picking a transport\n * (`WebStandardStreamableHTTPServerTransport`, `StdioServerTransport`, …) and\n * calling `server.connect(transport)`.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createLocalReq`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = (\n    response: MCPToolResponse,\n    overrideResponse?: MCPResponseOverride,\n  ): MCPToolResponse => {\n    const overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  /**\n   * Runs a collection/global tool call:\n   * - reads `collectionSlug` / `globalSlug` from the input\n   * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug\n   * - runs the tool handler and finalizes its response\n   */\n  const callEntityTool = async ({\n    input,\n    item,\n    serverContext,\n  }: {\n    input: unknown\n    item: CollectionMCPItem | GlobalMCPItem\n    serverContext: ServerContext\n  }): Promise<MCPToolResponse> => {\n    const entity = item.type === 'collectionTool' ? 'collection' : 'global'\n    const slugKey = item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug'\n    const toolInput = (input ?? {}) as Record<string, unknown>\n    const slug = toolInput[slugKey] as string | undefined\n\n    if (!slug) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: \"${item.mcpName}\" requires ${slugKey}. Use getConfigInfo to inspect ${entity} slugs.`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const match = authorizedMCP.items.find(\n      (candidate): candidate is CollectionMCPItem | GlobalMCPItem =>\n        candidate.type === item.type &&\n        candidate.mcpName === item.mcpName &&\n        (candidate.type === 'collectionTool'\n          ? candidate.collectionSlug === slug\n          : candidate.type === 'globalTool' && candidate.globalSlug === slug),\n    )\n\n    if (!match) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: MCP access to \"${item.mcpName}\" is not enabled for ${entity} \"${slug}\"`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const handlerArgs = { authorizedMCP, input: toolInput, req, serverContext }\n    const response = await (match.type === 'collectionTool'\n      ? match.tool.handler({ ...handlerArgs, collectionSlug: slug })\n      : match.tool.handler({ ...handlerArgs, globalSlug: slug }))\n\n    return finalizeToolResponse(response, match.tool.overrideResponse)\n  }\n\n  try {\n    const registeredEntityTools = new Set<string>()\n\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool':\n        case 'globalTool': {\n          if (registeredEntityTools.has(item.mcpName)) {\n            break\n          }\n          registeredEntityTools.add(item.mcpName)\n\n          const inputSchema = withSlugInput({\n            name: item.type === 'collectionTool' ? 'collectionSlug' : 'globalSlug',\n            input: item.tool.input,\n          })\n\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: item.tool.annotations,\n              description: item.tool.description,\n              inputSchema: toStandardSchema(inputSchema),\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              callEntityTool({ input, item, serverContext: ctx }),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.mcpName,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.mcpName,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: tool.annotations,\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n\nconst withSlugInput = ({\n  name,\n  input,\n}: {\n  input?: ToolInputSchema\n  name: 'collectionSlug' | 'globalSlug'\n}): ToolInputSchema => {\n  const description = name === 'collectionSlug' ? 'The collection slug' : 'The global slug'\n  const slugSchema = z.string().describe(description)\n\n  if (!input) {\n    return z.object({ [name]: slugSchema })\n  }\n\n  if (input instanceof z.ZodObject) {\n    return input.extend({ [name]: slugSchema })\n  }\n\n  const schema = input as {\n    properties?: Record<string, JsonSchemaType>\n    required?: string[]\n  } & JsonSchemaType\n\n  return {\n    ...schema,\n    type: 'object',\n    properties: {\n      ...schema.properties,\n      [name]: {\n        type: 'string',\n        description,\n      },\n    },\n    required: Array.from(new Set([name, ...(schema.required ?? [])])),\n  }\n}\n"],"names":["McpServer","APIError","z","getLogger","toStandardSchema","buildMcpServer","authorizedMCP","pluginConfig","req","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","response","overrideResponse","overridden","doc","_doc","rest","callEntityTool","input","item","serverContext","entity","type","slugKey","toolInput","slug","content","text","mcpName","isError","match","items","find","candidate","collectionSlug","globalSlug","handlerArgs","tool","handler","registeredEntityTools","Set","has","add","inputSchema","withSlugInput","registerTool","annotations","description","ctx","info","prompt","registerPrompt","argsSchema","undefined","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String","slugSchema","string","describe","object","ZodObject","extend","schema","properties","required","Array","from"],"mappings":"AAAA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,QAA6B,UAAS;AACvD,SAASC,CAAC,QAAQ,MAAK;AAavB,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACC,MAAMC,gBAAgBF,aAAaG,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAIX,UACjB;QAAEY,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAASb,UAAU;QAAEc,SAAST,IAAIS,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,CAC3BC,UACAC;QAEA,MAAMC,aAAaD,mBAAmBD,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGd,QAAQW;QAC5E,MAAM,EAAEG,KAAKC,IAAI,EAAE,GAAGC,MAAM,GAAGH;QAC/B,OAAOG;IACT;IAEA;;;;;GAKC,GACD,MAAMC,iBAAiB,OAAO,EAC5BC,KAAK,EACLC,IAAI,EACJC,aAAa,EAKd;QACC,MAAMC,SAASF,KAAKG,IAAI,KAAK,mBAAmB,eAAe;QAC/D,MAAMC,UAAUJ,KAAKG,IAAI,KAAK,mBAAmB,mBAAmB;QACpE,MAAME,YAAaN,SAAS,CAAC;QAC7B,MAAMO,OAAOD,SAAS,CAACD,QAAQ;QAE/B,IAAI,CAACE,MAAM;YACT,OAAO;gBACLC,SAAS;oBACP;wBACEJ,MAAM;wBACNK,MAAM,CAAC,QAAQ,EAAER,KAAKS,OAAO,CAAC,WAAW,EAAEL,QAAQ,+BAA+B,EAAEF,OAAO,OAAO,CAAC;oBACrG;iBACD;gBACDQ,SAAS;YACX;QACF;QAEA,MAAMC,QAAQhC,cAAciC,KAAK,CAACC,IAAI,CACpC,CAACC,YACCA,UAAUX,IAAI,KAAKH,KAAKG,IAAI,IAC5BW,UAAUL,OAAO,KAAKT,KAAKS,OAAO,IACjCK,CAAAA,UAAUX,IAAI,KAAK,mBAChBW,UAAUC,cAAc,KAAKT,OAC7BQ,UAAUX,IAAI,KAAK,gBAAgBW,UAAUE,UAAU,KAAKV,IAAG;QAGvE,IAAI,CAACK,OAAO;YACV,OAAO;gBACLJ,SAAS;oBACP;wBACEJ,MAAM;wBACNK,MAAM,CAAC,sBAAsB,EAAER,KAAKS,OAAO,CAAC,qBAAqB,EAAEP,OAAO,EAAE,EAAEI,KAAK,CAAC,CAAC;oBACvF;iBACD;gBACDI,SAAS;YACX;QACF;QAEA,MAAMO,cAAc;YAAEtC;YAAeoB,OAAOM;YAAWxB;YAAKoB;QAAc;QAC1E,MAAMT,WAAW,MAAOmB,CAAAA,MAAMR,IAAI,KAAK,mBACnCQ,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEF,gBAAgBT;QAAK,KAC1DK,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAED,YAAYV;QAAK,EAAC;QAE3D,OAAOf,qBAAqBC,UAAUmB,MAAMO,IAAI,CAACzB,gBAAgB;IACnE;IAEA,IAAI;QACF,MAAM2B,wBAAwB,IAAIC;QAElC,KAAK,MAAMrB,QAAQrB,cAAciC,KAAK,CAAE;YACtC,OAAQZ,KAAKG,IAAI;gBACf,KAAK;gBACL,KAAK;oBAAc;wBACjB,IAAIiB,sBAAsBE,GAAG,CAACtB,KAAKS,OAAO,GAAG;4BAC3C;wBACF;wBACAW,sBAAsBG,GAAG,CAACvB,KAAKS,OAAO;wBAEtC,MAAMe,cAAcC,cAAc;4BAChCxC,MAAMe,KAAKG,IAAI,KAAK,mBAAmB,mBAAmB;4BAC1DJ,OAAOC,KAAKkB,IAAI,CAACnB,KAAK;wBACxB;wBAEAf,OAAO0C,YAAY,CACjB1B,KAAKS,OAAO,EACZ;4BACEkB,aAAa3B,KAAKkB,IAAI,CAACS,WAAW;4BAClCC,aAAa5B,KAAKkB,IAAI,CAACU,WAAW;4BAClCJ,aAAa/C,iBAAiB+C;wBAChC,GACA,OAAOzB,OAAgB8B,MACrB/B,eAAe;gCAAEC;gCAAOC;gCAAMC,eAAe4B;4BAAI;wBAErDxC,OAAOyC,IAAI,CAAC,CAAC,QAAQ,EAAE9B,KAAKS,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMsB,SAAS/B,KAAK+B,MAAM;wBAC1B/C,OAAOgD,cAAc,CACnBhC,KAAKS,OAAO,EACZ;4BACEwB,YAAYF,OAAOE,UAAU,GAAGxD,iBAAiBsD,OAAOE,UAAU,IAAIC;4BACtEN,aAAaG,OAAOH,WAAW;4BAC/BO,OAAOJ,OAAOI,KAAK;wBACrB,GACA,OAAOpC,OAAgB8B,MACrBE,OAAOZ,OAAO,CAAC;gCACbpB,OAAQA,SAAS,CAAC;gCAClBlB;gCACAoB,eAAe4B;4BACjB;wBAEJxC,OAAOyC,IAAI,CAAC,CAAC,UAAU,EAAEC,OAAOI,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAWpC,KAAKoC,QAAQ;wBAC9BpD,OAAOqD,gBAAgB,CACrBrC,KAAKS,OAAO,EACZ,mFAAmF;wBACnF2B,SAASE,GAAG,EACZ;4BACEV,aAAaQ,SAASR,WAAW;4BACjCW,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMX,MAAMW,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAASjB,OAAO,CAAC;gCAAEuB;gCAAQ7D;gCAAKoB,eAAe4B;gCAAKS;4BAAI;wBACjE;wBAEFjD,OAAOyC,IAAI,CAAC,CAAC,YAAY,EAAEM,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAMjB,OAAOlB,KAAKkB,IAAI;wBACtBlC,OAAO0C,YAAY,CACjB1B,KAAKS,OAAO,EACZ;4BACEkB,aAAaT,KAAKS,WAAW;4BAC7BC,aAAaV,KAAKU,WAAW;4BAC7BJ,aAAaN,KAAKnB,KAAK,GAAGtB,iBAAiByC,KAAKnB,KAAK,IAAImC;wBAC3D,GACA,OAAOnC,OAAgB8B,MACrBtC,qBACE,MAAM2B,KAAKC,OAAO,CAAC;gCACjBxC;gCACAoB,OAAQA,SAAS,CAAC;gCAClBlB;gCACAoB,eAAe4B;4BACjB,IACAX,KAAKzB,gBAAgB;wBAG3BJ,OAAOyC,IAAI,CAAC,CAAC,QAAQ,EAAE9B,KAAKS,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;YACF;QACF;IACF,EAAE,OAAOkC,OAAO;QACd,MAAM,IAAIrE,SAAS,CAAC,gCAAgC,EAAEsE,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAO3D;AACT,EAAC;AAED,MAAMyC,gBAAgB,CAAC,EACrBxC,IAAI,EACJc,KAAK,EAIN;IACC,MAAM6B,cAAc3C,SAAS,mBAAmB,wBAAwB;IACxE,MAAM4D,aAAatE,EAAEuE,MAAM,GAAGC,QAAQ,CAACnB;IAEvC,IAAI,CAAC7B,OAAO;QACV,OAAOxB,EAAEyE,MAAM,CAAC;YAAE,CAAC/D,KAAK,EAAE4D;QAAW;IACvC;IAEA,IAAI9C,iBAAiBxB,EAAE0E,SAAS,EAAE;QAChC,OAAOlD,MAAMmD,MAAM,CAAC;YAAE,CAACjE,KAAK,EAAE4D;QAAW;IAC3C;IAEA,MAAMM,SAASpD;IAKf,OAAO;QACL,GAAGoD,MAAM;QACThD,MAAM;QACNiD,YAAY;YACV,GAAGD,OAAOC,UAAU;YACpB,CAACnE,KAAK,EAAE;gBACNkB,MAAM;gBACNyB;YACF;QACF;QACAyB,UAAUC,MAAMC,IAAI,CAAC,IAAIlC,IAAI;YAACpC;eAAUkE,OAAOE,QAAQ,IAAI,EAAE;SAAE;IACjE;AACF"}

package/dist/mcp/builtin/collections/authTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authTools.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,kBAAkB,4CAoC7B,CAAA;AAEF,eAAO,MAAM,4BAA4B,4CAgCvC,CAAA;AAEF,eAAO,MAAM,mBAAmB,4CA0C9B,CAAA;AAEF,eAAO,MAAM,2BAA2B,4CA4BtC,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAyB/B,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CA0B/B,CAAA"}
+{"version":3,"file":"authTools.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,kBAAkB,4CAqC7B,CAAA;AAEF,eAAO,MAAM,4BAA4B,4CAuCvC,CAAA;AAEF,eAAO,MAAM,mBAAmB,4CAiD9B,CAAA;AAEF,eAAO,MAAM,2BAA2B,4CAmCtC,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAgC/B,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAiC/B,CAAA"}

package/dist/mcp/builtin/collections/authTools.js

@@ -22,9 +22,16 @@ const wrapError = (name)=>({ collectionSlug, message })=>{
         };
     };
 export const authCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Check Auth Status'
+    },
     description: 'Checks authentication status for the current user.',
     input: z.object({
-        headers: z.string().describe('Optional JSON string containing custom headers to send with the authentication request').optional()
+        headers: z.record(z.string(), z.string()).describe('Optional custom headers to send with the authentication request').optional()
     })
 }).handler(async ({ collectionSlug, input, req })=>{
     const logger = getLogger({
@@ -33,11 +40,7 @@ export const authCollectionTool = defineCollectionTool({
     try {
         let authHeaders = new Headers();
         if (input.headers) {
-            try {
-                authHeaders = new Headers(JSON.parse(input.headers));
-            } catch  {
-                logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`);
-            }
+            authHeaders = new Headers(input.headers);
         }
         const result = await req.payload.auth({
             headers: authHeaders
@@ -61,6 +64,13 @@ export const authCollectionTool = defineCollectionTool({
     }
 });
 export const forgotPasswordCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true,
+        readOnlyHint: false,
+        title: 'Forgot Password'
+    },
     description: 'Sends a password reset email to a user.',
     input: z.object({
         disableEmail: z.boolean().describe('Whether to disable sending the email (for testing)').optional().default(false),
@@ -99,6 +109,13 @@ export const forgotPasswordCollectionTool = defineCollectionTool({
     }
 });
 export const loginCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'User Login'
+    },
     description: 'Authenticates a user with email and password.',
     input: z.object({
         depth: z.number().int().min(0).max(10).describe('Depth of population for relationships').optional().default(0),
@@ -139,6 +156,13 @@ export const loginCollectionTool = defineCollectionTool({
     }
 });
 export const resetPasswordCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Reset Password'
+    },
     description: 'Resets a user password with a reset token.',
     input: z.object({
         password: z.string().describe('The new password for the user'),
@@ -176,6 +200,13 @@ export const resetPasswordCollectionTool = defineCollectionTool({
     }
 });
 export const unlockCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Unlock Account'
+    },
     description: 'Unlocks a user account that has been locked due to failed login attempts.',
     input: z.object({
         email: emailSchema
@@ -213,6 +244,13 @@ export const unlockCollectionTool = defineCollectionTool({
     }
 });
 export const verifyCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Email Verification'
+    },
     description: 'Verifies a user email with a verification token.',
     input: z.object({
         token: z.string().describe('The verification token sent to the user email')

package/dist/mcp/builtin/collections/authTools.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .string()\n      .describe(\n        'Optional JSON string containing custom headers to send with the authentication request',\n      )\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      try {\n        authHeaders = new Headers(JSON.parse(input.headers) as Record<string, string>)\n      } catch {\n        logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`)\n      }\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","description","input","object","headers","optional","handler","req","logger","payload","authHeaders","Headers","JSON","parse","warn","result","auth","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdC,SAASlB,EACNI,MAAM,GACNE,QAAQ,CACP,0FAEDa,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIT,MAAME,OAAO,EAAE;YACjB,IAAI;gBACFM,cAAc,IAAIC,QAAQC,KAAKC,KAAK,CAACX,MAAME,OAAO;YACpD,EAAE,OAAM;gBACNI,OAAOM,IAAI,CAAC,CAAC,+BAA+B,EAAEZ,MAAME,OAAO,CAAC,qBAAqB,CAAC;YACpF;QACF;QACA,MAAMW,SAAS,MAAMR,IAAIE,OAAO,CAACO,IAAI,CAAC;YAAEZ,SAASM;QAAY;QAC7D,OAAO;YACLb,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEa,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,sBAAsB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACvE,OAAO3B,UAAU,QAAQ;YAAEE;YAAgBC,SAASwB;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BnC,qBAAqB;IAC/Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoB,cAAcrC,EACXsC,OAAO,GACPhC,QAAQ,CAAC,sDACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;IACT;AACF,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACiB,cAAc,CAAC;YAC9CC,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BgC,cAAcrB,MAAMqB,YAAY;QAClC;QACA,OAAO;YACL1B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,gBAAgB,EAAEqB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,gCAAgC,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACjF,OAAO3B,UAAU,kBAAkB;YAAEE;YAAgBC,SAASwB;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB1C,qBAAqB;IACtDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACd2B,OAAO5C,EACJ6C,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ1C,QAAQ,CAAC,yCACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;QACP8C,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B4C,kBAAkBlD,EACfsC,OAAO,GACPhC,QAAQ,CAAC,iDACTa,QAAQ,GACRoB,OAAO,CAAC;IACb;AACF,GAAGnB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC4B,KAAK,CAAC;YACrCV,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;gBAAE4C,UAAUjC,MAAMiC,QAAQ;YAAC;YACrDL,OAAO5B,MAAM4B,KAAK;YAClBM,kBAAkBlC,MAAMkC,gBAAgB;QAC1C;QACA,OAAO;YACLvC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAEG,MAAMX,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,uBAAuB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACxE,OAAO3B,UAAU,SAAS;YAAEE;YAAgBC,SAASwB;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BnD,qBAAqB;IAC9Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdgC,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B+C,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC+B,aAAa,CAAC;YAC7Cb,YAAYhC;YACZiC,MAAM;gBAAEO,UAAUjC,MAAMiC,QAAQ;gBAAEI,OAAOrC,MAAMqC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,+BAA+B,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QAChF,OAAO3B,UAAU,iBAAiB;YAAEE;YAAgBC,SAASwB;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuBvD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QAAEZ,OAAOF;IAAY;AACvC,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACkC,MAAM,CAAC;YACtChB,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BkD,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuBzD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoC,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACoC,WAAW,CAAC;YAC3ClB,YAAYhC;YACZ4C,OAAOrC,MAAMqC,KAAK;QACpB;QACA,OAAO;YACL1C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEoB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Check Auth Status',\n  },\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .record(z.string(), z.string())\n      .describe('Optional custom headers to send with the authentication request')\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      authHeaders = new Headers(input.headers)\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n    readOnlyHint: false,\n    title: 'Forgot Password',\n  },\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'User Login',\n  },\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Reset Password',\n  },\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Unlock Account',\n  },\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Email Verification',\n  },\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","headers","record","optional","handler","req","logger","payload","authHeaders","Headers","result","auth","JSON","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,SAASxB,EACNyB,MAAM,CAACzB,EAAEI,MAAM,IAAIJ,EAAEI,MAAM,IAC3BE,QAAQ,CAAC,mEACToB,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIV,MAAME,OAAO,EAAE;YACjBO,cAAc,IAAIC,QAAQV,MAAME,OAAO;QACzC;QACA,MAAMS,SAAS,MAAML,IAAIE,OAAO,CAACI,IAAI,CAAC;YAAEV,SAASO;QAAY;QAC7D,OAAO;YACLpB,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEsB,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,sBAAsB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACvE,OAAOhC,UAAU,QAAQ;YAAEE;YAAgBC,SAAS6B;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BxC,qBAAqB;IAC/Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmB,cAAc1C,EACX2C,OAAO,GACPrC,QAAQ,CAAC,sDACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;IACT;AACF,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACe,cAAc,CAAC;YAC9CC,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BqC,cAAcpB,MAAMoB,YAAY;QAClC;QACA,OAAO;YACL/B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,gBAAgB,EAAE8B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,gCAAgC,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACjF,OAAOhC,UAAU,kBAAkB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB/C,qBAAqB;IACtDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd0B,OAAOjD,EACJkD,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ/C,QAAQ,CAAC,yCACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;QACPmD,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BiD,kBAAkBvD,EACf2C,OAAO,GACPrC,QAAQ,CAAC,iDACToB,QAAQ,GACRkB,OAAO,CAAC;IACb;AACF,GAAGjB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC0B,KAAK,CAAC;YACrCV,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;gBAAEiD,UAAUhC,MAAMgC,QAAQ;YAAC;YACrDL,OAAO3B,MAAM2B,KAAK;YAClBM,kBAAkBjC,MAAMiC,gBAAgB;QAC1C;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAES,MAAMjB,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,uBAAuB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACxE,OAAOhC,UAAU,SAAS;YAAEE;YAAgBC,SAAS6B;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BxD,qBAAqB;IAC9Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd+B,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BoD,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC6B,aAAa,CAAC;YAC7Cb,YAAYrC;YACZsC,MAAM;gBAAEO,UAAUhC,MAAMgC,QAAQ;gBAAEI,OAAOpC,MAAMoC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,+BAA+B,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QAChF,OAAOhC,UAAU,iBAAiB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuB5D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QAAElB,OAAOF;IAAY;AACvC,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACgC,MAAM,CAAC;YACtChB,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BuD,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,cAAc,EAAE4B,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuB9D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmC,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACkC,WAAW,CAAC;YAC3ClB,YAAYrC;YACZiD,OAAOpC,MAAMoC,KAAK;QACpB;QACA,OAAO;YACL/C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE"}

package/dist/mcp/builtin/collections/createTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,kBAAkB,4CA6F7B,CAAA"}
+{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,kBAAkB,4CA0F7B,CAAA"}

package/dist/mcp/builtin/collections/createTool.js

@@ -8,6 +8,13 @@ import { validateCollectionData } from '../validateEntityData.js';
 import { formatCollectionError } from './formatCollectionError.js';
 const DEFAULT_DESCRIPTION = 'Create a document in any collection by passing the collection slug and data.';
 export const createDocumentTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Create Document'
+    },
     description: DEFAULT_DESCRIPTION,
     input: z.object({
         data: z.record(z.string(), z.unknown()).describe('The document fields to create'),
@@ -15,7 +22,7 @@ export const createDocumentTool = defineCollectionTool({
         draft: z.boolean().describe('Whether to create the document as a draft').optional().default(false),
         fallbackLocale: z.string().describe('Optional: fallback locale code to use when requested locale is not available').optional(),
         locale: z.string().describe('Optional: locale code to create the document in (e.g., "en", "es"). Defaults to the default locale').optional(),
-        select: z.string().describe("Optional: define exactly which fields you'd like to return (JSON), e.g., '{\"title\": true}'").optional()
+        select: z.record(z.string(), z.unknown()).describe('Optional: define exactly which fields you\'d like to return, e.g., {"title": true}').optional()
     })
 }).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
     const payload = req.payload;
@@ -36,22 +43,6 @@ export const createDocumentTool = defineCollectionTool({
             return validationError;
         }
         const parsedData = transformPointDataToPayload(inputData);
-        let selectClause;
-        if (select) {
-            try {
-                selectClause = JSON.parse(select);
-            } catch  {
-                logger.warn(`Invalid select clause JSON: ${select}`);
-                return {
-                    content: [
-                        {
-                            type: 'text',
-                            text: 'Error: Invalid JSON in select clause'
-                        }
-                    ]
-                };
-            }
-        }
         const result = await payload.create({
             collection: collectionSlug,
             data: parsedData,
@@ -65,8 +56,8 @@ export const createDocumentTool = defineCollectionTool({
             ...fallbackLocale ? {
                 fallbackLocale
             } : {},
-            ...selectClause ? {
-                select: selectClause
+            ...select ? {
+                select: select
             } : {}
         });
         logger.info(`Successfully created document in ${collectionSlug} with ID: ${result.id}`);