@payloadcms/plugin-mcp 4.0.0-internal.011fd46 → 4.0.0-internal.0b9bec1

package/dist/utils/camelCase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"camelCase.d.ts","sourceRoot":"","sources":["../../src/utils/camelCase.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GAAI,KAAK,MAAM,KAAG,MAIzC,CAAA"}
+{"version":3,"file":"camelCase.d.ts","sourceRoot":"","sources":["../../src/utils/camelCase.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,QAAS,MAAM,KAAG,MAIzC,CAAA"}

package/dist/utils/getPluginConfig.d.ts

@@ -3,7 +3,7 @@ import type { SanitizedMCPPluginConfig } from '../types.js';
 /**
  * Returns the sanitized plugin config — the form produced by
  * `sanitizeMCPConfig` and stashed back on the plugin's `options` during init.
- * Callers downstream of plugin init can rely on `items`, `userCollection`, etc.
+ * Callers downstream of plugin init can rely on `items` and other defaults
  * being fully resolved.
  */
 export declare const getPluginConfig: (args: {

package/dist/utils/getPluginConfig.js

@@ -1,7 +1,7 @@
 /**
  * Returns the sanitized plugin config — the form produced by
  * `sanitizeMCPConfig` and stashed back on the plugin's `options` during init.
- * Callers downstream of plugin init can rely on `items`, `userCollection`, etc.
+ * Callers downstream of plugin init can rely on `items` and other defaults
  * being fully resolved.
  */ export const getPluginConfig = ({ config })=>{
     const plugin = config.plugins?.find((plugin)=>plugin.slug === '@payloadcms/plugin-mcp');

package/dist/utils/getPluginConfig.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/utils/getPluginConfig.ts"],"sourcesContent":["import type { PluginsMap, SanitizedConfig } from 'payload'\n\nimport type { SanitizedMCPPluginConfig } from '../types.js'\n\n/**\n * Returns the sanitized plugin config — the form produced by\n * `sanitizeMCPConfig` and stashed back on the plugin's `options` during init.\n * Callers downstream of plugin init can rely on `items`, `userCollection`, etc.\n * being fully resolved.\n */\nexport const getPluginConfig: (args: { config: SanitizedConfig }) => SanitizedMCPPluginConfig = ({\n  config,\n}) => {\n  const plugin = config.plugins?.find(\n    (plugin) => plugin.slug === '@payloadcms/plugin-mcp',\n  ) as PluginsMap['@payloadcms/plugin-mcp']\n\n  if (!plugin) {\n    throw new Error('MCP Plugin not found in config.plugins.')\n  }\n\n  // @ts-expect-error\n  return plugin.sanitizedOptions\n}\n"],"names":["getPluginConfig","config","plugin","plugins","find","slug","Error","sanitizedOptions"],"mappings":"AAIA;;;;;CAKC,GACD,OAAO,MAAMA,kBAAmF,CAAC,EAC/FC,MAAM,EACP;IACC,MAAMC,SAASD,OAAOE,OAAO,EAAEC,KAC7B,CAACF,SAAWA,OAAOG,IAAI,KAAK;IAG9B,IAAI,CAACH,QAAQ;QACX,MAAM,IAAII,MAAM;IAClB;IAEA,mBAAmB;IACnB,OAAOJ,OAAOK,gBAAgB;AAChC,EAAC"}
+{"version":3,"sources":["../../src/utils/getPluginConfig.ts"],"sourcesContent":["import type { PluginsMap, SanitizedConfig } from 'payload'\n\nimport type { SanitizedMCPPluginConfig } from '../types.js'\n\n/**\n * Returns the sanitized plugin config — the form produced by\n * `sanitizeMCPConfig` and stashed back on the plugin's `options` during init.\n * Callers downstream of plugin init can rely on `items` and other defaults\n * being fully resolved.\n */\nexport const getPluginConfig: (args: { config: SanitizedConfig }) => SanitizedMCPPluginConfig = ({\n  config,\n}) => {\n  const plugin = config.plugins?.find(\n    (plugin) => plugin.slug === '@payloadcms/plugin-mcp',\n  ) as PluginsMap['@payloadcms/plugin-mcp']\n\n  if (!plugin) {\n    throw new Error('MCP Plugin not found in config.plugins.')\n  }\n\n  // @ts-expect-error\n  return plugin.sanitizedOptions\n}\n"],"names":["getPluginConfig","config","plugin","plugins","find","slug","Error","sanitizedOptions"],"mappings":"AAIA;;;;;CAKC,GACD,OAAO,MAAMA,kBAAmF,CAAC,EAC/FC,MAAM,EACP;IACC,MAAMC,SAASD,OAAOE,OAAO,EAAEC,KAC7B,CAACF,SAAWA,OAAOG,IAAI,KAAK;IAG9B,IAAI,CAACH,QAAQ;QACX,MAAM,IAAII,MAAM;IAClB;IAEA,mBAAmB;IACnB,OAAOJ,OAAOK,gBAAgB;AAChC,EAAC"}

package/dist/utils/resolveProjectRoot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveProjectRoot.d.ts","sourceRoot":"","sources":["../../src/utils/resolveProjectRoot.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,UAAU,MAAM,KAAG,IAAI,GAAG,MAS5D,CAAA"}
+{"version":3,"file":"resolveProjectRoot.d.ts","sourceRoot":"","sources":["../../src/utils/resolveProjectRoot.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,aAAc,MAAM,KAAG,IAAI,GAAG,MAS5D,CAAA"}

package/dist/utils/schemaConversion/filterFieldsByAccess.d.ts

@@ -0,0 +1,28 @@
+import type { FlattenedBlock, FlattenedField, Operation, SanitizedDocumentPermissions } from 'payload';
+type FieldOperation = Exclude<Operation, 'delete'>;
+type AllowedFieldOperations = Record<FieldOperation, boolean>;
+/**
+ * Filters fields using the access results in `permissions`. `shouldExcludeField` receives the
+ * operations allowed by the entity, field, and its parents and decides whether to remove the
+ * field.
+ *
+ * Arrays, groups, named tabs, and blocks are filtered recursively. Rows and unnamed tabs are
+ * flattened by Payload, so their children are filtered at the containing level.
+ *
+ * @example Include fields writable through any collection operation the user can perform.
+ * ```ts
+ * filterFieldsByAccess({
+ *   fields,
+ *   permissions: collectionPermissions,
+ *   shouldExcludeField: ({ create, update }) => !create && !update,
+ * })
+ * ```
+ */
+export declare const filterFieldsByAccess: ({ blocks, fields, permissions, shouldExcludeField, }: {
+    blocks?: FlattenedBlock[];
+    fields: FlattenedField[];
+    permissions: SanitizedDocumentPermissions;
+    shouldExcludeField: (allowedOperations: AllowedFieldOperations) => boolean;
+}) => FlattenedField[];
+export {};
+//# sourceMappingURL=filterFieldsByAccess.d.ts.map

package/dist/utils/schemaConversion/filterFieldsByAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filterFieldsByAccess.d.ts","sourceRoot":"","sources":["../../../src/utils/schemaConversion/filterFieldsByAccess.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,SAAS,EACT,4BAA4B,EAE7B,MAAM,SAAS,CAAA;AAEhB,KAAK,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AAClD,KAAK,sBAAsB,GAAG,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;AAE7D;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,oBAAoB,yDAK9B;IACD,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;IACzB,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,WAAW,EAAE,4BAA4B,CAAA;IACzC,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,sBAAsB,KAAK,OAAO,CAAA;CAC3E,KAAG,cAAc,EAoFjB,CAAA"}

package/dist/utils/schemaConversion/filterFieldsByAccess.js

@@ -0,0 +1,71 @@
+/**
+ * Filters fields using the access results in `permissions`. `shouldExcludeField` receives the
+ * operations allowed by the entity, field, and its parents and decides whether to remove the
+ * field.
+ *
+ * Arrays, groups, named tabs, and blocks are filtered recursively. Rows and unnamed tabs are
+ * flattened by Payload, so their children are filtered at the containing level.
+ *
+ * @example Include fields writable through any collection operation the user can perform.
+ * ```ts
+ * filterFieldsByAccess({
+ *   fields,
+ *   permissions: collectionPermissions,
+ *   shouldExcludeField: ({ create, update }) => !create && !update,
+ * })
+ * ```
+ */ export const filterFieldsByAccess = ({ blocks, fields, permissions, shouldExcludeField })=>{
+    const filterFields = (nestedFields, nestedPermissions, parentAllowedOperations)=>{
+        const accessibleFields = [];
+        for (const field of nestedFields){
+            const fieldPermissions = nestedPermissions === true ? true : nestedPermissions?.[field.name];
+            const isOperationAllowed = (operation)=>parentAllowedOperations[operation] && (fieldPermissions === true || fieldPermissions?.[operation] === true);
+            const allowedOperations = {
+                create: isOperationAllowed('create'),
+                read: isOperationAllowed('read'),
+                update: isOperationAllowed('update')
+            };
+            if (shouldExcludeField(allowedOperations)) {
+                continue;
+            }
+            if (field.type === 'blocks') {
+                const accessibleBlocks = [];
+                for (const blockOrReference of field.blocks){
+                    const block = typeof blockOrReference === 'string' ? blocks?.find(({ slug })=>slug === blockOrReference) : blockOrReference;
+                    if (!block) {
+                        continue;
+                    }
+                    const blockPermissions = fieldPermissions === true ? true : fieldPermissions?.blocks === true ? true : fieldPermissions?.blocks?.[block.slug];
+                    accessibleBlocks.push({
+                        ...block,
+                        flattenedFields: filterFields(block.flattenedFields, blockPermissions === true ? true : blockPermissions?.fields, allowedOperations)
+                    });
+                }
+                if (accessibleBlocks.length === 0) {
+                    continue;
+                }
+                accessibleFields.push({
+                    ...field,
+                    blocks: accessibleBlocks
+                });
+                continue;
+            }
+            if (field.type === 'array' || field.type === 'group' || field.type === 'tab') {
+                accessibleFields.push({
+                    ...field,
+                    flattenedFields: filterFields(field.flattenedFields, fieldPermissions === true ? true : fieldPermissions?.fields, allowedOperations)
+                });
+                continue;
+            }
+            accessibleFields.push(field);
+        }
+        return accessibleFields;
+    };
+    return filterFields(fields, permissions.fields, {
+        create: 'create' in permissions && permissions.create === true,
+        read: permissions.read === true,
+        update: permissions.update === true
+    });
+};
+
+//# sourceMappingURL=filterFieldsByAccess.js.map

package/dist/utils/schemaConversion/filterFieldsByAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/utils/schemaConversion/filterFieldsByAccess.ts"],"sourcesContent":["import type {\n  FlattenedBlock,\n  FlattenedField,\n  Operation,\n  SanitizedDocumentPermissions,\n  SanitizedFieldsPermissions,\n} from 'payload'\n\ntype FieldOperation = Exclude<Operation, 'delete'>\ntype AllowedFieldOperations = Record<FieldOperation, boolean>\n\n/**\n * Filters fields using the access results in `permissions`. `shouldExcludeField` receives the\n * operations allowed by the entity, field, and its parents and decides whether to remove the\n * field.\n *\n * Arrays, groups, named tabs, and blocks are filtered recursively. Rows and unnamed tabs are\n * flattened by Payload, so their children are filtered at the containing level.\n *\n * @example Include fields writable through any collection operation the user can perform.\n * ```ts\n * filterFieldsByAccess({\n *   fields,\n *   permissions: collectionPermissions,\n *   shouldExcludeField: ({ create, update }) => !create && !update,\n * })\n * ```\n */\nexport const filterFieldsByAccess = ({\n  blocks,\n  fields,\n  permissions,\n  shouldExcludeField,\n}: {\n  blocks?: FlattenedBlock[]\n  fields: FlattenedField[]\n  permissions: SanitizedDocumentPermissions\n  shouldExcludeField: (allowedOperations: AllowedFieldOperations) => boolean\n}): FlattenedField[] => {\n  const filterFields = (\n    nestedFields: FlattenedField[],\n    nestedPermissions: SanitizedFieldsPermissions | undefined,\n    parentAllowedOperations: AllowedFieldOperations,\n  ): FlattenedField[] => {\n    const accessibleFields: FlattenedField[] = []\n\n    for (const field of nestedFields) {\n      const fieldPermissions = nestedPermissions === true ? true : nestedPermissions?.[field.name]\n      const isOperationAllowed = (operation: FieldOperation): boolean =>\n        parentAllowedOperations[operation] &&\n        (fieldPermissions === true || fieldPermissions?.[operation] === true)\n      const allowedOperations: AllowedFieldOperations = {\n        create: isOperationAllowed('create'),\n        read: isOperationAllowed('read'),\n        update: isOperationAllowed('update'),\n      }\n\n      if (shouldExcludeField(allowedOperations)) {\n        continue\n      }\n\n      if (field.type === 'blocks') {\n        const accessibleBlocks: (FlattenedBlock | string)[] = []\n\n        for (const blockOrReference of field.blocks) {\n          const block =\n            typeof blockOrReference === 'string'\n              ? blocks?.find(({ slug }) => slug === blockOrReference)\n              : blockOrReference\n\n          if (!block) {\n            continue\n          }\n\n          const blockPermissions =\n            fieldPermissions === true\n              ? true\n              : fieldPermissions?.blocks === true\n                ? true\n                : fieldPermissions?.blocks?.[block.slug]\n\n          accessibleBlocks.push({\n            ...block,\n            flattenedFields: filterFields(\n              block.flattenedFields,\n              blockPermissions === true ? true : blockPermissions?.fields,\n              allowedOperations,\n            ),\n          })\n        }\n\n        if (accessibleBlocks.length === 0) {\n          continue\n        }\n\n        accessibleFields.push({ ...field, blocks: accessibleBlocks })\n        continue\n      }\n\n      if (field.type === 'array' || field.type === 'group' || field.type === 'tab') {\n        accessibleFields.push({\n          ...field,\n          flattenedFields: filterFields(\n            field.flattenedFields,\n            fieldPermissions === true ? true : fieldPermissions?.fields,\n            allowedOperations,\n          ),\n        })\n        continue\n      }\n\n      accessibleFields.push(field)\n    }\n\n    return accessibleFields\n  }\n\n  return filterFields(fields, permissions.fields, {\n    create: 'create' in permissions && permissions.create === true,\n    read: permissions.read === true,\n    update: permissions.update === true,\n  })\n}\n"],"names":["filterFieldsByAccess","blocks","fields","permissions","shouldExcludeField","filterFields","nestedFields","nestedPermissions","parentAllowedOperations","accessibleFields","field","fieldPermissions","name","isOperationAllowed","operation","allowedOperations","create","read","update","type","accessibleBlocks","blockOrReference","block","find","slug","blockPermissions","push","flattenedFields","length"],"mappings":"AAWA;;;;;;;;;;;;;;;;CAgBC,GACD,OAAO,MAAMA,uBAAuB,CAAC,EACnCC,MAAM,EACNC,MAAM,EACNC,WAAW,EACXC,kBAAkB,EAMnB;IACC,MAAMC,eAAe,CACnBC,cACAC,mBACAC;QAEA,MAAMC,mBAAqC,EAAE;QAE7C,KAAK,MAAMC,SAASJ,aAAc;YAChC,MAAMK,mBAAmBJ,sBAAsB,OAAO,OAAOA,mBAAmB,CAACG,MAAME,IAAI,CAAC;YAC5F,MAAMC,qBAAqB,CAACC,YAC1BN,uBAAuB,CAACM,UAAU,IACjCH,CAAAA,qBAAqB,QAAQA,kBAAkB,CAACG,UAAU,KAAK,IAAG;YACrE,MAAMC,oBAA4C;gBAChDC,QAAQH,mBAAmB;gBAC3BI,MAAMJ,mBAAmB;gBACzBK,QAAQL,mBAAmB;YAC7B;YAEA,IAAIT,mBAAmBW,oBAAoB;gBACzC;YACF;YAEA,IAAIL,MAAMS,IAAI,KAAK,UAAU;gBAC3B,MAAMC,mBAAgD,EAAE;gBAExD,KAAK,MAAMC,oBAAoBX,MAAMT,MAAM,CAAE;oBAC3C,MAAMqB,QACJ,OAAOD,qBAAqB,WACxBpB,QAAQsB,KAAK,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAASH,oBACpCA;oBAEN,IAAI,CAACC,OAAO;wBACV;oBACF;oBAEA,MAAMG,mBACJd,qBAAqB,OACjB,OACAA,kBAAkBV,WAAW,OAC3B,OACAU,kBAAkBV,QAAQ,CAACqB,MAAME,IAAI,CAAC;oBAE9CJ,iBAAiBM,IAAI,CAAC;wBACpB,GAAGJ,KAAK;wBACRK,iBAAiBtB,aACfiB,MAAMK,eAAe,EACrBF,qBAAqB,OAAO,OAAOA,kBAAkBvB,QACrDa;oBAEJ;gBACF;gBAEA,IAAIK,iBAAiBQ,MAAM,KAAK,GAAG;oBACjC;gBACF;gBAEAnB,iBAAiBiB,IAAI,CAAC;oBAAE,GAAGhB,KAAK;oBAAET,QAAQmB;gBAAiB;gBAC3D;YACF;YAEA,IAAIV,MAAMS,IAAI,KAAK,WAAWT,MAAMS,IAAI,KAAK,WAAWT,MAAMS,IAAI,KAAK,OAAO;gBAC5EV,iBAAiBiB,IAAI,CAAC;oBACpB,GAAGhB,KAAK;oBACRiB,iBAAiBtB,aACfK,MAAMiB,eAAe,EACrBhB,qBAAqB,OAAO,OAAOA,kBAAkBT,QACrDa;gBAEJ;gBACA;YACF;YAEAN,iBAAiBiB,IAAI,CAAChB;QACxB;QAEA,OAAOD;IACT;IAEA,OAAOJ,aAAaH,QAAQC,YAAYD,MAAM,EAAE;QAC9Cc,QAAQ,YAAYb,eAAeA,YAAYa,MAAM,KAAK;QAC1DC,MAAMd,YAAYc,IAAI,KAAK;QAC3BC,QAAQf,YAAYe,MAAM,KAAK;IACjC;AACF,EAAC"}

package/dist/utils/schemaConversion/getEntityInputSchema.d.ts

@@ -1,11 +1,13 @@
-import { type CollectionSlug, type GlobalSlug, type PayloadRequest } from 'payload';
+import { type CollectionSlug, type GlobalSlug, type PayloadRequest, type SanitizedCollectionPermission, type SanitizedGlobalPermission } from 'payload';
 import type { JsonSchemaType } from '../../types.js';
-export declare const getCollectionInputSchema: ({ collectionSlug, req, }: {
+export declare const getCollectionInputSchema: ({ collectionSlug, permissions, req, }: {
     collectionSlug: CollectionSlug;
+    permissions?: SanitizedCollectionPermission;
     req: PayloadRequest;
 }) => JsonSchemaType | null;
-export declare const getGlobalInputSchema: ({ globalSlug, req, }: {
+export declare const getGlobalInputSchema: ({ globalSlug, permissions, req, }: {
     globalSlug: GlobalSlug;
+    permissions?: SanitizedGlobalPermission;
     req: PayloadRequest;
 }) => JsonSchemaType | null;
 //# sourceMappingURL=getEntityInputSchema.d.ts.map

package/dist/utils/schemaConversion/getEntityInputSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getEntityInputSchema.d.ts","sourceRoot":"","sources":["../../../src/utils/schemaConversion/getEntityInputSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEnB,KAAK,UAAU,EACf,KAAK,cAAc,EAGpB,MAAM,SAAS,CAAA;AAEhB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AASpD,eAAO,MAAM,wBAAwB,GAAI,0BAGtC;IACD,cAAc,EAAE,cAAc,CAAA;IAC9B,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,cAAc,GAAG,IAYpB,CAAA;AAED,eAAO,MAAM,oBAAoB,GAAI,sBAGlC;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,cAAc,GAAG,IAYpB,CAAA"}
+{"version":3,"file":"getEntityInputSchema.d.ts","sourceRoot":"","sources":["../../../src/utils/schemaConversion/getEntityInputSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAGnB,KAAK,UAAU,EACf,KAAK,cAAc,EAEnB,KAAK,6BAA6B,EAElC,KAAK,yBAAyB,EAC/B,MAAM,SAAS,CAAA;AAEhB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAKpD,eAAO,MAAM,wBAAwB,0CAIlC;IACD,cAAc,EAAE,cAAc,CAAA;IAC9B,WAAW,CAAC,EAAE,6BAA6B,CAAA;IAC3C,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,cAAc,GAAG,IAmBpB,CAAA;AAED,eAAO,MAAM,oBAAoB,sCAI9B;IACD,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,CAAC,EAAE,yBAAyB,CAAA;IACvC,GAAG,EAAE,cAAc,CAAA;CACpB,KAAG,cAAc,GAAG,IAmBpB,CAAA"}

package/dist/utils/schemaConversion/getEntityInputSchema.js

@@ -1,34 +1,66 @@
 import { entityToStandaloneJSONSchema } from 'payload';
-import { getCollectionVirtualFieldNames, getGlobalVirtualFieldNames } from '../getVirtualFieldNames.js';
-import { removeVirtualFieldsFromSchema } from './removeVirtualFieldsFromSchema.js';
+import { filterFieldsByAccess } from './filterFieldsByAccess.js';
 import { sanitizeEntitySchema } from './sanitizeEntitySchema.js';
-export const getCollectionInputSchema = ({ collectionSlug, req })=>{
+export const getCollectionInputSchema = ({ collectionSlug, permissions, req })=>{
     const collection = req.payload.collections[collectionSlug]?.config;
     if (!collection) {
         return null;
     }
+    if (!permissions) {
+        return buildEntityInputSchema({
+            entity: collection,
+            req
+        });
+    }
+    const fieldsAllowedByAccess = filterFieldsByAccess({
+        blocks: req.payload.config.blocks,
+        fields: collection.flattenedFields,
+        permissions,
+        shouldExcludeField: ({ create, update })=>!create && !update
+    });
     return buildEntityInputSchema({
         entity: collection,
-        req,
-        virtualFieldNames: getCollectionVirtualFieldNames(req.payload.config, collectionSlug)
+        fields: fieldsAllowedByAccess,
+        req
     });
 };
-export const getGlobalInputSchema = ({ globalSlug, req })=>{
+export const getGlobalInputSchema = ({ globalSlug, permissions, req })=>{
     const global = req.payload.config.globals.find((globalConfig)=>globalConfig.slug === globalSlug);
     if (!global) {
         return null;
     }
+    if (!permissions) {
+        return buildEntityInputSchema({
+            entity: global,
+            req
+        });
+    }
+    const fieldsAllowedByAccess = filterFieldsByAccess({
+        blocks: req.payload.config.blocks,
+        fields: global.flattenedFields,
+        permissions,
+        shouldExcludeField: ({ create, update })=>!create && !update
+    });
     return buildEntityInputSchema({
         entity: global,
-        req,
-        virtualFieldNames: getGlobalVirtualFieldNames(req.payload.config, globalSlug)
+        fields: fieldsAllowedByAccess,
+        req
     });
 };
-const buildEntityInputSchema = ({ entity, req, virtualFieldNames })=>sanitizeEntitySchema(removeVirtualFieldsFromSchema(entityToStandaloneJSONSchema({
+const buildEntityInputSchema = ({ entity, fields = entity.flattenedFields, req })=>{
+    // The core schema generator reads flattenedFields from the entity and has no fields argument.
+    const entityForSchema = {
+        ...entity,
+        flattenedFields: fields
+    };
+    const schema = entityToStandaloneJSONSchema({
         config: req.payload.config,
         defaultIDType: req.payload.db.defaultIDType,
-        entity,
-        i18n: req.i18n
-    }), virtualFieldNames));
+        entity: entityForSchema,
+        i18n: req.i18n,
+        variant: 'input'
+    });
+    return sanitizeEntitySchema(schema);
+};
 
 //# sourceMappingURL=getEntityInputSchema.js.map

package/dist/utils/schemaConversion/getEntityInputSchema.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/utils/schemaConversion/getEntityInputSchema.ts"],"sourcesContent":["import {\n  type CollectionSlug,\n  entityToStandaloneJSONSchema,\n  type GlobalSlug,\n  type PayloadRequest,\n  type SanitizedCollectionConfig,\n  type SanitizedGlobalConfig,\n} from 'payload'\n\nimport type { JsonSchemaType } from '../../types.js'\n\nimport {\n  getCollectionVirtualFieldNames,\n  getGlobalVirtualFieldNames,\n} from '../getVirtualFieldNames.js'\nimport { removeVirtualFieldsFromSchema } from './removeVirtualFieldsFromSchema.js'\nimport { sanitizeEntitySchema } from './sanitizeEntitySchema.js'\n\nexport const getCollectionInputSchema = ({\n  collectionSlug,\n  req,\n}: {\n  collectionSlug: CollectionSlug\n  req: PayloadRequest\n}): JsonSchemaType | null => {\n  const collection = req.payload.collections[collectionSlug]?.config\n\n  if (!collection) {\n    return null\n  }\n\n  return buildEntityInputSchema({\n    entity: collection,\n    req,\n    virtualFieldNames: getCollectionVirtualFieldNames(req.payload.config, collectionSlug),\n  })\n}\n\nexport const getGlobalInputSchema = ({\n  globalSlug,\n  req,\n}: {\n  globalSlug: GlobalSlug\n  req: PayloadRequest\n}): JsonSchemaType | null => {\n  const global = req.payload.config.globals.find((globalConfig) => globalConfig.slug === globalSlug)\n\n  if (!global) {\n    return null\n  }\n\n  return buildEntityInputSchema({\n    entity: global,\n    req,\n    virtualFieldNames: getGlobalVirtualFieldNames(req.payload.config, globalSlug),\n  })\n}\n\nconst buildEntityInputSchema = ({\n  entity,\n  req,\n  virtualFieldNames,\n}: {\n  entity: SanitizedCollectionConfig | SanitizedGlobalConfig\n  req: PayloadRequest\n  virtualFieldNames: string[]\n}): JsonSchemaType =>\n  sanitizeEntitySchema(\n    removeVirtualFieldsFromSchema(\n      entityToStandaloneJSONSchema({\n        config: req.payload.config,\n        defaultIDType: req.payload.db.defaultIDType,\n        entity,\n        i18n: req.i18n,\n      }) as unknown as JsonSchemaType,\n      virtualFieldNames,\n    ),\n  )\n"],"names":["entityToStandaloneJSONSchema","getCollectionVirtualFieldNames","getGlobalVirtualFieldNames","removeVirtualFieldsFromSchema","sanitizeEntitySchema","getCollectionInputSchema","collectionSlug","req","collection","payload","collections","config","buildEntityInputSchema","entity","virtualFieldNames","getGlobalInputSchema","globalSlug","global","globals","find","globalConfig","slug","defaultIDType","db","i18n"],"mappings":"AAAA,SAEEA,4BAA4B,QAKvB,UAAS;AAIhB,SACEC,8BAA8B,EAC9BC,0BAA0B,QACrB,6BAA4B;AACnC,SAASC,6BAA6B,QAAQ,qCAAoC;AAClF,SAASC,oBAAoB,QAAQ,4BAA2B;AAEhE,OAAO,MAAMC,2BAA2B,CAAC,EACvCC,cAAc,EACdC,GAAG,EAIJ;IACC,MAAMC,aAAaD,IAAIE,OAAO,CAACC,WAAW,CAACJ,eAAe,EAAEK;IAE5D,IAAI,CAACH,YAAY;QACf,OAAO;IACT;IAEA,OAAOI,uBAAuB;QAC5BC,QAAQL;QACRD;QACAO,mBAAmBb,+BAA+BM,IAAIE,OAAO,CAACE,MAAM,EAAEL;IACxE;AACF,EAAC;AAED,OAAO,MAAMS,uBAAuB,CAAC,EACnCC,UAAU,EACVT,GAAG,EAIJ;IACC,MAAMU,SAASV,IAAIE,OAAO,CAACE,MAAM,CAACO,OAAO,CAACC,IAAI,CAAC,CAACC,eAAiBA,aAAaC,IAAI,KAAKL;IAEvF,IAAI,CAACC,QAAQ;QACX,OAAO;IACT;IAEA,OAAOL,uBAAuB;QAC5BC,QAAQI;QACRV;QACAO,mBAAmBZ,2BAA2BK,IAAIE,OAAO,CAACE,MAAM,EAAEK;IACpE;AACF,EAAC;AAED,MAAMJ,yBAAyB,CAAC,EAC9BC,MAAM,EACNN,GAAG,EACHO,iBAAiB,EAKlB,GACCV,qBACED,8BACEH,6BAA6B;QAC3BW,QAAQJ,IAAIE,OAAO,CAACE,MAAM;QAC1BW,eAAef,IAAIE,OAAO,CAACc,EAAE,CAACD,aAAa;QAC3CT;QACAW,MAAMjB,IAAIiB,IAAI;IAChB,IACAV"}
+{"version":3,"sources":["../../../src/utils/schemaConversion/getEntityInputSchema.ts"],"sourcesContent":["import {\n  type CollectionSlug,\n  entityToStandaloneJSONSchema,\n  type FlattenedField,\n  type GlobalSlug,\n  type PayloadRequest,\n  type SanitizedCollectionConfig,\n  type SanitizedCollectionPermission,\n  type SanitizedGlobalConfig,\n  type SanitizedGlobalPermission,\n} from 'payload'\n\nimport type { JsonSchemaType } from '../../types.js'\n\nimport { filterFieldsByAccess } from './filterFieldsByAccess.js'\nimport { sanitizeEntitySchema } from './sanitizeEntitySchema.js'\n\nexport const getCollectionInputSchema = ({\n  collectionSlug,\n  permissions,\n  req,\n}: {\n  collectionSlug: CollectionSlug\n  permissions?: SanitizedCollectionPermission\n  req: PayloadRequest\n}): JsonSchemaType | null => {\n  const collection = req.payload.collections[collectionSlug]?.config\n\n  if (!collection) {\n    return null\n  }\n\n  if (!permissions) {\n    return buildEntityInputSchema({ entity: collection, req })\n  }\n\n  const fieldsAllowedByAccess = filterFieldsByAccess({\n    blocks: req.payload.config.blocks,\n    fields: collection.flattenedFields,\n    permissions,\n    shouldExcludeField: ({ create, update }) => !create && !update,\n  })\n\n  return buildEntityInputSchema({ entity: collection, fields: fieldsAllowedByAccess, req })\n}\n\nexport const getGlobalInputSchema = ({\n  globalSlug,\n  permissions,\n  req,\n}: {\n  globalSlug: GlobalSlug\n  permissions?: SanitizedGlobalPermission\n  req: PayloadRequest\n}): JsonSchemaType | null => {\n  const global = req.payload.config.globals.find((globalConfig) => globalConfig.slug === globalSlug)\n\n  if (!global) {\n    return null\n  }\n\n  if (!permissions) {\n    return buildEntityInputSchema({ entity: global, req })\n  }\n\n  const fieldsAllowedByAccess = filterFieldsByAccess({\n    blocks: req.payload.config.blocks,\n    fields: global.flattenedFields,\n    permissions,\n    shouldExcludeField: ({ create, update }) => !create && !update,\n  })\n\n  return buildEntityInputSchema({ entity: global, fields: fieldsAllowedByAccess, req })\n}\n\nconst buildEntityInputSchema = ({\n  entity,\n  fields = entity.flattenedFields,\n  req,\n}: {\n  entity: SanitizedCollectionConfig | SanitizedGlobalConfig\n  fields?: FlattenedField[]\n  req: PayloadRequest\n}): JsonSchemaType => {\n  // The core schema generator reads flattenedFields from the entity and has no fields argument.\n  const entityForSchema = { ...entity, flattenedFields: fields }\n  const schema = entityToStandaloneJSONSchema({\n    config: req.payload.config,\n    defaultIDType: req.payload.db.defaultIDType,\n    entity: entityForSchema,\n    i18n: req.i18n,\n    variant: 'input',\n  }) as unknown as JsonSchemaType\n\n  return sanitizeEntitySchema(schema)\n}\n"],"names":["entityToStandaloneJSONSchema","filterFieldsByAccess","sanitizeEntitySchema","getCollectionInputSchema","collectionSlug","permissions","req","collection","payload","collections","config","buildEntityInputSchema","entity","fieldsAllowedByAccess","blocks","fields","flattenedFields","shouldExcludeField","create","update","getGlobalInputSchema","globalSlug","global","globals","find","globalConfig","slug","entityForSchema","schema","defaultIDType","db","i18n","variant"],"mappings":"AAAA,SAEEA,4BAA4B,QAQvB,UAAS;AAIhB,SAASC,oBAAoB,QAAQ,4BAA2B;AAChE,SAASC,oBAAoB,QAAQ,4BAA2B;AAEhE,OAAO,MAAMC,2BAA2B,CAAC,EACvCC,cAAc,EACdC,WAAW,EACXC,GAAG,EAKJ;IACC,MAAMC,aAAaD,IAAIE,OAAO,CAACC,WAAW,CAACL,eAAe,EAAEM;IAE5D,IAAI,CAACH,YAAY;QACf,OAAO;IACT;IAEA,IAAI,CAACF,aAAa;QAChB,OAAOM,uBAAuB;YAAEC,QAAQL;YAAYD;QAAI;IAC1D;IAEA,MAAMO,wBAAwBZ,qBAAqB;QACjDa,QAAQR,IAAIE,OAAO,CAACE,MAAM,CAACI,MAAM;QACjCC,QAAQR,WAAWS,eAAe;QAClCX;QACAY,oBAAoB,CAAC,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAK,CAACD,UAAU,CAACC;IAC1D;IAEA,OAAOR,uBAAuB;QAAEC,QAAQL;QAAYQ,QAAQF;QAAuBP;IAAI;AACzF,EAAC;AAED,OAAO,MAAMc,uBAAuB,CAAC,EACnCC,UAAU,EACVhB,WAAW,EACXC,GAAG,EAKJ;IACC,MAAMgB,SAAShB,IAAIE,OAAO,CAACE,MAAM,CAACa,OAAO,CAACC,IAAI,CAAC,CAACC,eAAiBA,aAAaC,IAAI,KAAKL;IAEvF,IAAI,CAACC,QAAQ;QACX,OAAO;IACT;IAEA,IAAI,CAACjB,aAAa;QAChB,OAAOM,uBAAuB;YAAEC,QAAQU;YAAQhB;QAAI;IACtD;IAEA,MAAMO,wBAAwBZ,qBAAqB;QACjDa,QAAQR,IAAIE,OAAO,CAACE,MAAM,CAACI,MAAM;QACjCC,QAAQO,OAAON,eAAe;QAC9BX;QACAY,oBAAoB,CAAC,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAK,CAACD,UAAU,CAACC;IAC1D;IAEA,OAAOR,uBAAuB;QAAEC,QAAQU;QAAQP,QAAQF;QAAuBP;IAAI;AACrF,EAAC;AAED,MAAMK,yBAAyB,CAAC,EAC9BC,MAAM,EACNG,SAASH,OAAOI,eAAe,EAC/BV,GAAG,EAKJ;IACC,8FAA8F;IAC9F,MAAMqB,kBAAkB;QAAE,GAAGf,MAAM;QAAEI,iBAAiBD;IAAO;IAC7D,MAAMa,SAAS5B,6BAA6B;QAC1CU,QAAQJ,IAAIE,OAAO,CAACE,MAAM;QAC1BmB,eAAevB,IAAIE,OAAO,CAACsB,EAAE,CAACD,aAAa;QAC3CjB,QAAQe;QACRI,MAAMzB,IAAIyB,IAAI;QACdC,SAAS;IACX;IAEA,OAAO9B,qBAAqB0B;AAC9B"}

package/dist/utils/schemaConversion/sanitizeEntitySchema.d.ts

@@ -1,15 +1,10 @@
 import type { JsonSchemaType } from '../../types.js';
 /**
- * Turns the JSON Schema that Payload generates for a collection or global into the input schema for
- * an MCP create/update tool. In short, it:
- *
- * - drops fields a client can't set (`id`, `createdAt`, the draft `_status`, …),
- * - rewrites Payload-specific field shapes (points, relationships) into plain JSON the model can fill,
- * - and shrinks the result so it's cheaper for the model to read,
- *
- * while keeping every node valid JSON Schema draft 2020-12. Each step below is tagged with why it runs -
- * **Correctness** (valid input the API accepts), **Size** (equivalence-preserving shrink), or **LLM
- * ergonomics** (easier for the model to read/fill) - and carries a before/after example on its definition.
+ * Refines Payload's `input`-variant JSON Schema into an MCP create/update tool's input schema. The
+ * variant already covers correctness (ID-only relationships, no managed/virtual/join fields); the
+ * passes here are MCP-specific - reshaping fields for the model and shrinking the result - and keep
+ * every node valid JSON Schema draft 2020-12. Each is tagged **Correctness**, **Size**, or **LLM
+ * ergonomics**, with a before/after example on its definition.
  */
 export declare const sanitizeEntitySchema: (schema: JsonSchemaType) => JsonSchemaType;
 //# sourceMappingURL=sanitizeEntitySchema.d.ts.map

package/dist/utils/schemaConversion/sanitizeEntitySchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitizeEntitySchema.d.ts","sourceRoot":"","sources":["../../../src/utils/schemaConversion/sanitizeEntitySchema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,oBAAoB,GAAI,QAAQ,cAAc,KAAG,cA6B7D,CAAA"}
+{"version":3,"file":"sanitizeEntitySchema.d.ts","sourceRoot":"","sources":["../../../src/utils/schemaConversion/sanitizeEntitySchema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,WAAY,cAAc,KAAG,cA0B7D,CAAA"}

package/dist/utils/schemaConversion/sanitizeEntitySchema.js

@@ -1,23 +1,16 @@
 /**
- * Turns the JSON Schema that Payload generates for a collection or global into the input schema for
- * an MCP create/update tool. In short, it:
- *
- * - drops fields a client can't set (`id`, `createdAt`, the draft `_status`, …),
- * - rewrites Payload-specific field shapes (points, relationships) into plain JSON the model can fill,
- * - and shrinks the result so it's cheaper for the model to read,
- *
- * while keeping every node valid JSON Schema draft 2020-12. Each step below is tagged with why it runs -
- * **Correctness** (valid input the API accepts), **Size** (equivalence-preserving shrink), or **LLM
- * ergonomics** (easier for the model to read/fill) - and carries a before/after example on its definition.
+ * Refines Payload's `input`-variant JSON Schema into an MCP create/update tool's input schema. The
+ * variant already covers correctness (ID-only relationships, no managed/virtual/join fields); the
+ * passes here are MCP-specific - reshaping fields for the model and shrinking the result - and keep
+ * every node valid JSON Schema draft 2020-12. Each is tagged **Correctness**, **Size**, or **LLM
+ * ergonomics**, with a before/after example on its definition.
  */ export const sanitizeEntitySchema = (schema)=>{
     // Work on a copy — the caller reuses the original schema elsewhere (e.g. when listing tools).
     let result = structuredClone(schema);
-    // Correctness — drop the fields a client can't set (id, createdAt, updatedAt, draft _status) + collapse nullable types.
-    result = removeManagedFields(result);
+    // LLM ergonomics — drop the redundant `'null'` from optional arrays/objects (`['array','null']` → `'array'`).
+    result = collapseOptionalContainerTypes(result);
     // LLM ergonomics — rewrite point fields from a `[number, number]` tuple into a `{ longitude, latitude }` object.
     result = pointFieldsToObjects(result);
-    // Correctness — a relationship value can be an ID or a populated doc; on input only the ID is valid, so keep that.
-    result = relationshipsToIds(result);
     // Size — strip inert type-gen leftovers that only bloat the schema (`tsType`, block-collision notes).
     result = removeTypeGenArtifacts(result);
     // Size — where a `const` already pins a value, the sibling `type` is redundant; remove it.
@@ -46,26 +39,16 @@
     }
     return visit(out);
 };
-// Payload sets these on every document, so an MCP client never provides them when creating/updating.
-const PAYLOAD_MANAGED_FIELDS = new Set([
-    '_status',
-    'createdAt',
-    'id',
-    'updatedAt'
-]);
 /**
- * **Correctness.** Removes the fields a client can't set on create/update - `id`, `createdAt`, `updatedAt`, and the draft
- * `_status` - from every field object's `properties` and `required` (recursing into nested objects and
- * array items). Along the way it also collapses optional array/object types via {@link collapseNullableType}.
+ * **LLM ergonomics.** Collapses optional array/object types (`['array', 'null']` → `'array'`) via
+ * {@link collapseNullableType}, recursing through `properties` and array items. The `required` list
+ * already conveys optionality, so the `'null'` is redundant noise for the model.
  *
  * @example
- * { properties: { id: { type: 'string' }, tags: { type: ['array', 'null'], items: {} } }, required: ['id', 'tags'] }
- * → { properties: { tags: { type: 'array', items: {} } }, required: ['tags'] }
- */ const removeManagedFields = (schema)=>{
+ * { properties: { tags: { type: ['array', 'null'], items: {} } }, required: [] }
+ * → { properties: { tags: { type: 'array', items: {} } }, required: [] }
+ */ const collapseOptionalContainerTypes = (schema)=>{
     if (schema.properties && typeof schema.properties === 'object') {
-        for (const field of PAYLOAD_MANAGED_FIELDS){
-            delete schema.properties[field];
-        }
         for (const key of Object.keys(schema.properties)){
             const prop = schema.properties[key];
             if (!prop || typeof prop !== 'object') {
@@ -74,19 +57,13 @@ const PAYLOAD_MANAGED_FIELDS = new Set([
             const isRequired = Array.isArray(schema.required) && schema.required.includes(key);
             collapseNullableType(prop, isRequired);
             if (prop.properties) {
-                removeManagedFields(prop);
+                collapseOptionalContainerTypes(prop);
             }
             if (prop.items && typeof prop.items === 'object' && !Array.isArray(prop.items)) {
-                removeManagedFields(prop.items);
+                collapseOptionalContainerTypes(prop.items);
             }
         }
     }
-    if (Array.isArray(schema.required)) {
-        schema.required = schema.required.filter((name)=>!PAYLOAD_MANAGED_FIELDS.has(name));
-        if (schema.required.length === 0) {
-            delete schema.required;
-        }
-    }
     return schema;
 };
 /**
@@ -177,63 +154,6 @@ const PAYLOAD_MANAGED_FIELDS = new Set([
     }
     return transformed;
 };
-/**
- * **Correctness.** Reduces relationship/upload fields to the IDs a client actually sends. Payload types the value as
- * "an ID or the full related document" - but the populated-document form only appears in read responses;
- * on create/update you always reference a relationship by its ID. So we drop that `$ref` option, leaving
- * the bare ID. A single remaining target collapses inline (with a description naming the target
- * collection); several targets become an `anyOf` of IDs.
- *
- * @example
- * { oneOf: [{ type: 'string' }, { $ref: '#/$defs/posts' }] }
- * → { type: 'string', description: 'The ID of the related "posts" document.' }
- */ const relationshipsToIds = (schema)=>{
-    if (!schema || typeof schema !== 'object') {
-        return schema;
-    }
-    const processed = {
-        ...schema
-    };
-    if (Array.isArray(processed.oneOf)) {
-        const isRelatedDocRef = (option)=>!!option && typeof option === 'object' && '$ref' in option;
-        if (processed.oneOf.some(isRelatedDocRef)) {
-            // A relationship value is "an ID, or the populated related document". Keep the ID option(s) and
-            // drop the `$ref`s to the related collections, since a client only ever sends the ID.
-            const idOptions = processed.oneOf.filter((option)=>!isRelatedDocRef(option)).map((option)=>typeof option === 'object' ? relationshipsToIds(option) : option);
-            const targetCollections = processed.oneOf.filter(isRelatedDocRef).map((option)=>option.$ref.replace('#/$defs/', ''));
-            if (idOptions.length === 1) {
-                delete processed.oneOf;
-                Object.assign(processed, idOptions[0]);
-                if (targetCollections.length > 0 && !processed.description) {
-                    processed.description = `The ID of the related "${targetCollections.join('" or "')}" document.`;
-                }
-            } else if (idOptions.length > 1) {
-                delete processed.oneOf;
-                processed.anyOf = idOptions;
-            }
-        } else {
-            processed.oneOf = processed.oneOf.map((option)=>typeof option === 'object' ? relationshipsToIds(option) : option);
-        }
-    }
-    if (processed.properties && typeof processed.properties === 'object') {
-        processed.properties = Object.fromEntries(Object.entries(processed.properties).map(([key, value])=>[
-                key,
-                typeof value === 'object' ? relationshipsToIds(value) : value
-            ]));
-    }
-    if (processed.items && typeof processed.items === 'object' && !Array.isArray(processed.items)) {
-        processed.items = relationshipsToIds(processed.items);
-    }
-    // Lexical node unions and blocks live under `$defs` and have their own relationship fields, so walk
-    // those too — otherwise their `$ref`s would dangle once we don't bundle the related collections.
-    if (processed.$defs && typeof processed.$defs === 'object') {
-        processed.$defs = Object.fromEntries(Object.entries(processed.$defs).map(([key, value])=>[
-                key,
-                typeof value === 'object' ? relationshipsToIds(value) : value
-            ]));
-    }
-    return processed;
-};
 /**
  * **Size.** Strips type-generation leftovers that bloat the schema without helping the model: the `tsType`
  * hint (a `json-schema-to-typescript` extension; JSON Schema validators just ignore it, they don't reject it)