@payloadcms/plugin-mcp 4.0.0-internal.38b7f1d → 4.0.0-internal.40de3ec

package/dist/mcp/buildMcpServer.js

@@ -0,0 +1,170 @@
+import { McpServer } from '@modelcontextprotocol/server';
+import { APIError, entityToStandaloneJSONSchema } from 'payload';
+import { toCamelCase } from '../utils/camelCase.js';
+import { getLogger } from '../utils/getLogger.js';
+import { getCollectionVirtualFieldNames, getGlobalVirtualFieldNames } from '../utils/getVirtualFieldNames.js';
+import { removeVirtualFieldsFromSchema } from '../utils/schemaConversion/removeVirtualFieldsFromSchema.js';
+import { toStandardSchema } from '../utils/toStandardSchema.js';
+/** `findPosts`, `updateSiteSettings` — auto-prefixed wire name for collection/global tools. */ const wireName = (key, slug)=>{
+    const camel = toCamelCase(slug);
+    return `${key}${camel.charAt(0).toUpperCase()}${camel.slice(1)}`;
+};
+/**
+ * Transport-agnostic core: registers every authorized MCP item onto a fresh
+ * `McpServer` and returns it. The caller is responsible for picking a transport
+ * (`WebStandardStreamableHTTPServerTransport`, `StdioServerTransport`, …) and
+ * calling `server.connect(transport)`.
+ *
+ * `req` is the request context handlers see. For HTTP it's the live
+ * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a
+ * synthesized one built via `createLocalReq`.
+ */ export const buildMcpServer = ({ authorizedMCP, pluginConfig, req })=>{
+    const serverOptions = pluginConfig.mcp?.serverOptions || {};
+    const server = new McpServer({
+        name: 'Payload MCP Server',
+        version: '1.0.0',
+        ...serverOptions.serverInfo
+    }, serverOptions.options);
+    const logger = getLogger({
+        payload: req.payload
+    });
+    /**
+   * Wrap a tool handler's response with the tool's `overrideResponse`, then
+   * strip the internal `doc` field so it doesn't leak onto the wire.
+   */ const finalizeToolResponse = (response, overrideResponse)=>{
+        const overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response;
+        const { doc: _doc, ...rest } = overridden;
+        return rest;
+    };
+    try {
+        for (const item of authorizedMCP.items){
+            switch(item.type){
+                case 'collectionTool':
+                    {
+                        const tool = item.tool;
+                        const name = wireName(item.key, item.collectionSlug);
+                        let inputSchema = tool.input;
+                        if (typeof inputSchema === 'function') {
+                            const collection = req.payload.collections[item.collectionSlug]?.config;
+                            if (!collection) {
+                                throw new APIError(`Collection schema not found for slug: ${item.collectionSlug}`, 500);
+                            }
+                            const collectionSchema = removeVirtualFieldsFromSchema(entityToStandaloneJSONSchema({
+                                config: req.payload.config,
+                                defaultIDType: req.payload.db.defaultIDType,
+                                entity: collection,
+                                i18n: req.i18n
+                            }), getCollectionVirtualFieldNames(req.payload.config, item.collectionSlug));
+                            inputSchema = inputSchema({
+                                collectionSchema
+                            });
+                        }
+                        server.registerTool(name, {
+                            description: tool.description,
+                            inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined
+                        }, async (input, ctx)=>finalizeToolResponse(await tool.handler({
+                                authorizedMCP,
+                                collectionSlug: item.collectionSlug,
+                                input: input ?? {},
+                                req,
+                                serverContext: ctx
+                            }), tool.overrideResponse));
+                        logger.info(`✅ Tool: ${name} Registered.`);
+                        break;
+                    }
+                case 'globalTool':
+                    {
+                        const tool = item.tool;
+                        const name = wireName(item.key, item.globalSlug);
+                        let inputSchema = tool.input;
+                        if (typeof inputSchema === 'function') {
+                            const globalEntity = req.payload.config.globals.find((globalConfig)=>globalConfig.slug === item.globalSlug);
+                            if (!globalEntity) {
+                                throw new APIError(`Global schema not found for slug: ${item.globalSlug}`, 500);
+                            }
+                            const globalSchema = removeVirtualFieldsFromSchema(entityToStandaloneJSONSchema({
+                                config: req.payload.config,
+                                defaultIDType: req.payload.db.defaultIDType,
+                                entity: globalEntity,
+                                i18n: req.i18n
+                            }), getGlobalVirtualFieldNames(req.payload.config, item.globalSlug));
+                            inputSchema = inputSchema({
+                                globalSchema
+                            });
+                        }
+                        server.registerTool(name, {
+                            description: tool.description,
+                            inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined
+                        }, async (input, ctx)=>finalizeToolResponse(await tool.handler({
+                                authorizedMCP,
+                                globalSlug: item.globalSlug,
+                                input: input ?? {},
+                                req,
+                                serverContext: ctx
+                            }), tool.overrideResponse));
+                        logger.info(`✅ Tool: ${name} Registered.`);
+                        break;
+                    }
+                case 'prompt':
+                    {
+                        const prompt = item.prompt;
+                        server.registerPrompt(item.key, {
+                            argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,
+                            description: prompt.description,
+                            title: prompt.title
+                        }, async (input, ctx)=>prompt.handler({
+                                input: input ?? {},
+                                req,
+                                serverContext: ctx
+                            }));
+                        logger.info(`✅ Prompt: ${prompt.title} Registered.`);
+                        break;
+                    }
+                case 'resource':
+                    {
+                        const resource = item.resource;
+                        server.registerResource(item.key, // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)
+                        resource.uri, {
+                            description: resource.description,
+                            mimeType: resource.mimeType,
+                            title: resource.title
+                        }, // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).
+                        // The rest-params shape lets us collect either signature uniformly.
+                        async (...sdkArgs)=>{
+                            const ctx = sdkArgs[sdkArgs.length - 1];
+                            const uri = sdkArgs[0];
+                            const params = sdkArgs.length > 2 ? sdkArgs[1] : {};
+                            return resource.handler({
+                                params,
+                                req,
+                                serverContext: ctx,
+                                uri
+                            });
+                        });
+                        logger.info(`✅ Resource: ${resource.title} Registered.`);
+                        break;
+                    }
+                case 'tool':
+                    {
+                        const tool = item.tool;
+                        server.registerTool(item.key, {
+                            description: tool.description,
+                            inputSchema: tool.input ? toStandardSchema(tool.input) : undefined
+                        }, async (input, ctx)=>finalizeToolResponse(await tool.handler({
+                                authorizedMCP,
+                                input: input ?? {},
+                                req,
+                                serverContext: ctx
+                            }), tool.overrideResponse));
+                        logger.info(`✅ Tool: ${item.key} Registered.`);
+                        break;
+                    }
+            }
+        }
+    } catch (error) {
+        throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500);
+    }
+    return server;
+};
+
+//# sourceMappingURL=buildMcpServer.js.map

package/dist/mcp/buildMcpServer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, entityToStandaloneJSONSchema, type PayloadRequest } from 'payload'\n\nimport type {\n  AuthorizedMCP,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n} from '../types.js'\n\nimport { toCamelCase } from '../utils/camelCase.js'\nimport { getLogger } from '../utils/getLogger.js'\nimport {\n  getCollectionVirtualFieldNames,\n  getGlobalVirtualFieldNames,\n} from '../utils/getVirtualFieldNames.js'\nimport { removeVirtualFieldsFromSchema } from '../utils/schemaConversion/removeVirtualFieldsFromSchema.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/** `findPosts`, `updateSiteSettings` — auto-prefixed wire name for collection/global tools. */\nconst wireName = (key: string, slug: string): string => {\n  const camel = toCamelCase(slug)\n  return `${key}${camel.charAt(0).toUpperCase()}${camel.slice(1)}`\n}\n\n/**\n * Transport-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The caller is responsible for picking a transport\n * (`WebStandardStreamableHTTPServerTransport`, `StdioServerTransport`, …) and\n * calling `server.connect(transport)`.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createLocalReq`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = (\n    response: MCPToolResponse,\n    overrideResponse?: MCPResponseOverride,\n  ): MCPToolResponse => {\n    const overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  try {\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool': {\n          const tool = item.tool\n          const name = wireName(item.key, item.collectionSlug)\n          let inputSchema = tool.input\n          if (typeof inputSchema === 'function') {\n            const collection = req.payload.collections[item.collectionSlug]?.config\n            if (!collection) {\n              throw new APIError(\n                `Collection schema not found for slug: ${item.collectionSlug}`,\n                500,\n              )\n            }\n            const collectionSchema = removeVirtualFieldsFromSchema(\n              entityToStandaloneJSONSchema({\n                config: req.payload.config,\n                defaultIDType: req.payload.db.defaultIDType,\n                entity: collection,\n                i18n: req.i18n,\n              }) as unknown as JsonSchemaType,\n              getCollectionVirtualFieldNames(req.payload.config, item.collectionSlug),\n            )\n            inputSchema = inputSchema({ collectionSchema })\n          }\n          server.registerTool(\n            name,\n            {\n              description: tool.description,\n              inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  collectionSlug: item.collectionSlug,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${name} Registered.`)\n          break\n        }\n        case 'globalTool': {\n          const tool = item.tool\n          const name = wireName(item.key, item.globalSlug)\n          let inputSchema = tool.input\n          if (typeof inputSchema === 'function') {\n            const globalEntity = req.payload.config.globals.find(\n              (globalConfig) => globalConfig.slug === item.globalSlug,\n            )\n            if (!globalEntity) {\n              throw new APIError(`Global schema not found for slug: ${item.globalSlug}`, 500)\n            }\n            const globalSchema = removeVirtualFieldsFromSchema(\n              entityToStandaloneJSONSchema({\n                config: req.payload.config,\n                defaultIDType: req.payload.db.defaultIDType,\n                entity: globalEntity,\n                i18n: req.i18n,\n              }) as unknown as JsonSchemaType,\n              getGlobalVirtualFieldNames(req.payload.config, item.globalSlug),\n            )\n\n            inputSchema = inputSchema({ globalSchema })\n          }\n          server.registerTool(\n            name,\n            {\n              description: tool.description,\n              inputSchema: inputSchema ? toStandardSchema(inputSchema) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  globalSlug: item.globalSlug,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${name} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.key,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.key,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.key,\n            {\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              finalizeToolResponse(\n                await tool.handler({\n                  authorizedMCP,\n                  input: (input ?? {}) as Record<string, unknown>,\n                  req,\n                  serverContext: ctx,\n                }),\n                tool.overrideResponse,\n              ),\n          )\n          logger.info(`✅ Tool: ${item.key} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n"],"names":["McpServer","APIError","entityToStandaloneJSONSchema","toCamelCase","getLogger","getCollectionVirtualFieldNames","getGlobalVirtualFieldNames","removeVirtualFieldsFromSchema","toStandardSchema","wireName","key","slug","camel","charAt","toUpperCase","slice","buildMcpServer","authorizedMCP","pluginConfig","req","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","response","overrideResponse","overridden","doc","_doc","rest","item","items","type","tool","collectionSlug","inputSchema","input","collection","collections","config","collectionSchema","defaultIDType","db","entity","i18n","registerTool","description","undefined","ctx","handler","serverContext","info","globalSlug","globalEntity","globals","find","globalConfig","globalSchema","prompt","registerPrompt","argsSchema","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String"],"mappings":"AAAA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,EAAEC,4BAA4B,QAA6B,UAAS;AAUrF,SAASC,WAAW,QAAQ,wBAAuB;AACnD,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SACEC,8BAA8B,EAC9BC,0BAA0B,QACrB,mCAAkC;AACzC,SAASC,6BAA6B,QAAQ,6DAA4D;AAC1G,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D,6FAA6F,GAC7F,MAAMC,WAAW,CAACC,KAAaC;IAC7B,MAAMC,QAAQT,YAAYQ;IAC1B,OAAO,GAAGD,MAAME,MAAMC,MAAM,CAAC,GAAGC,WAAW,KAAKF,MAAMG,KAAK,CAAC,IAAI;AAClE;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACC,MAAMC,gBAAgBF,aAAaG,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAItB,UACjB;QAAEuB,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAASvB,UAAU;QAAEwB,SAAST,IAAIS,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,CAC3BC,UACAC;QAEA,MAAMC,aAAaD,mBAAmBD,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGd,QAAQW;QAC5E,MAAM,EAAEG,KAAKC,IAAI,EAAE,GAAGC,MAAM,GAAGH;QAC/B,OAAOG;IACT;IAEA,IAAI;QACF,KAAK,MAAMC,QAAQnB,cAAcoB,KAAK,CAAE;YACtC,OAAQD,KAAKE,IAAI;gBACf,KAAK;oBAAkB;wBACrB,MAAMC,OAAOH,KAAKG,IAAI;wBACtB,MAAMhB,OAAOd,SAAS2B,KAAK1B,GAAG,EAAE0B,KAAKI,cAAc;wBACnD,IAAIC,cAAcF,KAAKG,KAAK;wBAC5B,IAAI,OAAOD,gBAAgB,YAAY;4BACrC,MAAME,aAAaxB,IAAIS,OAAO,CAACgB,WAAW,CAACR,KAAKI,cAAc,CAAC,EAAEK;4BACjE,IAAI,CAACF,YAAY;gCACf,MAAM,IAAI1C,SACR,CAAC,sCAAsC,EAAEmC,KAAKI,cAAc,EAAE,EAC9D;4BAEJ;4BACA,MAAMM,mBAAmBvC,8BACvBL,6BAA6B;gCAC3B2C,QAAQ1B,IAAIS,OAAO,CAACiB,MAAM;gCAC1BE,eAAe5B,IAAIS,OAAO,CAACoB,EAAE,CAACD,aAAa;gCAC3CE,QAAQN;gCACRO,MAAM/B,IAAI+B,IAAI;4BAChB,IACA7C,+BAA+Bc,IAAIS,OAAO,CAACiB,MAAM,EAAET,KAAKI,cAAc;4BAExEC,cAAcA,YAAY;gCAAEK;4BAAiB;wBAC/C;wBACAxB,OAAO6B,YAAY,CACjB5B,MACA;4BACE6B,aAAab,KAAKa,WAAW;4BAC7BX,aAAaA,cAAcjC,iBAAiBiC,eAAeY;wBAC7D,GACA,OAAOX,OAAgBY,MACrBzB,qBACE,MAAMU,KAAKgB,OAAO,CAAC;gCACjBtC;gCACAuB,gBAAgBJ,KAAKI,cAAc;gCACnCE,OAAQA,SAAS,CAAC;gCAClBvB;gCACAqC,eAAeF;4BACjB,IACAf,KAAKR,gBAAgB;wBAG3BJ,OAAO8B,IAAI,CAAC,CAAC,QAAQ,EAAElC,KAAK,YAAY,CAAC;wBACzC;oBACF;gBACA,KAAK;oBAAc;wBACjB,MAAMgB,OAAOH,KAAKG,IAAI;wBACtB,MAAMhB,OAAOd,SAAS2B,KAAK1B,GAAG,EAAE0B,KAAKsB,UAAU;wBAC/C,IAAIjB,cAAcF,KAAKG,KAAK;wBAC5B,IAAI,OAAOD,gBAAgB,YAAY;4BACrC,MAAMkB,eAAexC,IAAIS,OAAO,CAACiB,MAAM,CAACe,OAAO,CAACC,IAAI,CAClD,CAACC,eAAiBA,aAAanD,IAAI,KAAKyB,KAAKsB,UAAU;4BAEzD,IAAI,CAACC,cAAc;gCACjB,MAAM,IAAI1D,SAAS,CAAC,kCAAkC,EAAEmC,KAAKsB,UAAU,EAAE,EAAE;4BAC7E;4BACA,MAAMK,eAAexD,8BACnBL,6BAA6B;gCAC3B2C,QAAQ1B,IAAIS,OAAO,CAACiB,MAAM;gCAC1BE,eAAe5B,IAAIS,OAAO,CAACoB,EAAE,CAACD,aAAa;gCAC3CE,QAAQU;gCACRT,MAAM/B,IAAI+B,IAAI;4BAChB,IACA5C,2BAA2Ba,IAAIS,OAAO,CAACiB,MAAM,EAAET,KAAKsB,UAAU;4BAGhEjB,cAAcA,YAAY;gCAAEsB;4BAAa;wBAC3C;wBACAzC,OAAO6B,YAAY,CACjB5B,MACA;4BACE6B,aAAab,KAAKa,WAAW;4BAC7BX,aAAaA,cAAcjC,iBAAiBiC,eAAeY;wBAC7D,GACA,OAAOX,OAAgBY,MACrBzB,qBACE,MAAMU,KAAKgB,OAAO,CAAC;gCACjBtC;gCACAyC,YAAYtB,KAAKsB,UAAU;gCAC3BhB,OAAQA,SAAS,CAAC;gCAClBvB;gCACAqC,eAAeF;4BACjB,IACAf,KAAKR,gBAAgB;wBAG3BJ,OAAO8B,IAAI,CAAC,CAAC,QAAQ,EAAElC,KAAK,YAAY,CAAC;wBACzC;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMyC,SAAS5B,KAAK4B,MAAM;wBAC1B1C,OAAO2C,cAAc,CACnB7B,KAAK1B,GAAG,EACR;4BACEwD,YAAYF,OAAOE,UAAU,GAAG1D,iBAAiBwD,OAAOE,UAAU,IAAIb;4BACtED,aAAaY,OAAOZ,WAAW;4BAC/Be,OAAOH,OAAOG,KAAK;wBACrB,GACA,OAAOzB,OAAgBY,MACrBU,OAAOT,OAAO,CAAC;gCACbb,OAAQA,SAAS,CAAC;gCAClBvB;gCACAqC,eAAeF;4BACjB;wBAEJ3B,OAAO8B,IAAI,CAAC,CAAC,UAAU,EAAEO,OAAOG,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAWhC,KAAKgC,QAAQ;wBAC9B9C,OAAO+C,gBAAgB,CACrBjC,KAAK1B,GAAG,EACR,mFAAmF;wBACnF0D,SAASE,GAAG,EACZ;4BACElB,aAAagB,SAAShB,WAAW;4BACjCmB,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMlB,MAAMkB,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAASb,OAAO,CAAC;gCAAEmB;gCAAQvD;gCAAKqC,eAAeF;gCAAKgB;4BAAI;wBACjE;wBAEF3C,OAAO8B,IAAI,CAAC,CAAC,YAAY,EAAEW,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAM5B,OAAOH,KAAKG,IAAI;wBACtBjB,OAAO6B,YAAY,CACjBf,KAAK1B,GAAG,EACR;4BACE0C,aAAab,KAAKa,WAAW;4BAC7BX,aAAaF,KAAKG,KAAK,GAAGlC,iBAAiB+B,KAAKG,KAAK,IAAIW;wBAC3D,GACA,OAAOX,OAAgBY,MACrBzB,qBACE,MAAMU,KAAKgB,OAAO,CAAC;gCACjBtC;gCACAyB,OAAQA,SAAS,CAAC;gCAClBvB;gCACAqC,eAAeF;4BACjB,IACAf,KAAKR,gBAAgB;wBAG3BJ,OAAO8B,IAAI,CAAC,CAAC,QAAQ,EAAErB,KAAK1B,GAAG,CAAC,YAAY,CAAC;wBAC7C;oBACF;YACF;QACF;IACF,EAAE,OAAOiE,OAAO;QACd,MAAM,IAAI1E,SAAS,CAAC,gCAAgC,EAAE2E,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAOrD;AACT,EAAC"}

package/dist/mcp/builtin/collections/authTools.d.ts

@@ -0,0 +1,7 @@
+export declare const authCollectionTool: import("../../../types.js").CollectionTool;
+export declare const forgotPasswordCollectionTool: import("../../../types.js").CollectionTool;
+export declare const loginCollectionTool: import("../../../types.js").CollectionTool;
+export declare const resetPasswordCollectionTool: import("../../../types.js").CollectionTool;
+export declare const unlockCollectionTool: import("../../../types.js").CollectionTool;
+export declare const verifyCollectionTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=authTools.d.ts.map

package/dist/mcp/builtin/collections/authTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authTools.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,kBAAkB,4CAoC7B,CAAA;AAEF,eAAO,MAAM,4BAA4B,4CAgCvC,CAAA;AAEF,eAAO,MAAM,mBAAmB,4CA0C9B,CAAA;AAEF,eAAO,MAAM,2BAA2B,4CA4BtC,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CAyB/B,CAAA;AAEF,eAAO,MAAM,oBAAoB,4CA0B/B,CAAA"}

package/dist/mcp/builtin/collections/authTools.js

@@ -0,0 +1,250 @@
+import { z } from 'zod';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+/**
+ * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they
+ * default off (an LLM with `login` access can probe passwords; not something
+ * to expose by default). Enable in plugin config via `tools: { login: true }`
+ * (or `{ description: '...' }`).
+ *
+ * `auth` (check current token) doesn't actually depend on the collection at
+ * runtime — `payload.auth({ headers })` is global — but it's grouped under the
+ * users collection so all auth-shaped tools live in one place.
+ */ const emailSchema = z.string().email().describe('The user email address');
+const wrapError = (name)=>({ collectionSlug, message })=>{
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`
+                }
+            ]
+        };
+    };
+export const authCollectionTool = defineCollectionTool({
+    description: 'Checks authentication status for the current user.',
+    input: z.object({
+        headers: z.string().describe('Optional JSON string containing custom headers to send with the authentication request').optional()
+    })
+}).handler(async ({ collectionSlug, input, req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    try {
+        let authHeaders = new Headers();
+        if (input.headers) {
+            try {
+                authHeaders = new Headers(JSON.parse(input.headers));
+            } catch  {
+                logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`);
+            }
+        }
+        const result = await req.payload.auth({
+            headers: authHeaders
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# Authentication Status\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`);
+        return wrapError('auth')({
+            collectionSlug,
+            message: errorMessage
+        });
+    }
+});
+export const forgotPasswordCollectionTool = defineCollectionTool({
+    description: 'Sends a password reset email to a user.',
+    input: z.object({
+        disableEmail: z.boolean().describe('Whether to disable sending the email (for testing)').optional().default(false),
+        email: emailSchema
+    })
+}).handler(async ({ collectionSlug, input, req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    try {
+        const result = await req.payload.forgotPassword({
+            collection: collectionSlug,
+            data: {
+                email: input.email
+            },
+            disableEmail: input.disableEmail
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# Forgot Password Email Sent\n\n**Collection:** ${collectionSlug}\n**Email:** ${input.email}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: {
+                result
+            }
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`);
+        return wrapError('forgotPassword')({
+            collectionSlug,
+            message: errorMessage
+        });
+    }
+});
+export const loginCollectionTool = defineCollectionTool({
+    description: 'Authenticates a user with email and password.',
+    input: z.object({
+        depth: z.number().int().min(0).max(10).describe('Depth of population for relationships').optional().default(0),
+        email: emailSchema,
+        password: z.string().describe('The user password'),
+        showHiddenFields: z.boolean().describe('Whether to show hidden fields in the response').optional().default(false)
+    })
+}).handler(async ({ collectionSlug, input, req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    try {
+        const result = await req.payload.login({
+            collection: collectionSlug,
+            data: {
+                email: input.email,
+                password: input.password
+            },
+            depth: input.depth,
+            showHiddenFields: input.showHiddenFields
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# Login Successful\n\n**User:** ${input.email}\n**Collection:** ${collectionSlug}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`);
+        return wrapError('login')({
+            collectionSlug,
+            message: errorMessage
+        });
+    }
+});
+export const resetPasswordCollectionTool = defineCollectionTool({
+    description: 'Resets a user password with a reset token.',
+    input: z.object({
+        password: z.string().describe('The new password for the user'),
+        token: z.string().describe('The password reset token sent to the user email')
+    })
+}).handler(async ({ collectionSlug, input, req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    try {
+        const result = await req.payload.resetPassword({
+            collection: collectionSlug,
+            data: {
+                password: input.password,
+                token: input.token
+            },
+            overrideAccess: true
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# Password Reset Successful\n\n**Collection:** ${collectionSlug}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`);
+        return wrapError('resetPassword')({
+            collectionSlug,
+            message: errorMessage
+        });
+    }
+});
+export const unlockCollectionTool = defineCollectionTool({
+    description: 'Unlocks a user account that has been locked due to failed login attempts.',
+    input: z.object({
+        email: emailSchema
+    })
+}).handler(async ({ collectionSlug, input, req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    try {
+        const result = await req.payload.unlock({
+            collection: collectionSlug,
+            data: {
+                email: input.email
+            },
+            overrideAccess: true
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# Account Unlocked\n\n**Collection:** ${collectionSlug}\n**Email:** ${input.email}\n**Result:** ${result ? 'Success' : 'Failed'}`
+                }
+            ],
+            doc: {
+                result
+            }
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`);
+        return wrapError('unlock')({
+            collectionSlug,
+            message: errorMessage
+        });
+    }
+});
+export const verifyCollectionTool = defineCollectionTool({
+    description: 'Verifies a user email with a verification token.',
+    input: z.object({
+        token: z.string().describe('The verification token sent to the user email')
+    })
+}).handler(async ({ collectionSlug, input, req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    try {
+        const result = await req.payload.verifyEmail({
+            collection: collectionSlug,
+            token: input.token
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `# Email Verification Successful\n\n**Collection:** ${collectionSlug}\n**Result:** ${result ? 'Success' : 'Failed'}`
+                }
+            ],
+            doc: {
+                result
+            }
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`);
+        return wrapError('verify')({
+            collectionSlug,
+            message: errorMessage
+        });
+    }
+});
+
+//# sourceMappingURL=authTools.js.map

package/dist/mcp/builtin/collections/authTools.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .string()\n      .describe(\n        'Optional JSON string containing custom headers to send with the authentication request',\n      )\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      try {\n        authHeaders = new Headers(JSON.parse(input.headers) as Record<string, string>)\n      } catch {\n        logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`)\n      }\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","description","input","object","headers","optional","handler","req","logger","payload","authHeaders","Headers","JSON","parse","warn","result","auth","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdC,SAASlB,EACNI,MAAM,GACNE,QAAQ,CACP,0FAEDa,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIT,MAAME,OAAO,EAAE;YACjB,IAAI;gBACFM,cAAc,IAAIC,QAAQC,KAAKC,KAAK,CAACX,MAAME,OAAO;YACpD,EAAE,OAAM;gBACNI,OAAOM,IAAI,CAAC,CAAC,+BAA+B,EAAEZ,MAAME,OAAO,CAAC,qBAAqB,CAAC;YACpF;QACF;QACA,MAAMW,SAAS,MAAMR,IAAIE,OAAO,CAACO,IAAI,CAAC;YAAEZ,SAASM;QAAY;QAC7D,OAAO;YACLb,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEa,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,sBAAsB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACvE,OAAO3B,UAAU,QAAQ;YAAEE;YAAgBC,SAASwB;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BnC,qBAAqB;IAC/Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoB,cAAcrC,EACXsC,OAAO,GACPhC,QAAQ,CAAC,sDACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;IACT;AACF,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACiB,cAAc,CAAC;YAC9CC,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BgC,cAAcrB,MAAMqB,YAAY;QAClC;QACA,OAAO;YACL1B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,gBAAgB,EAAEqB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,gCAAgC,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACjF,OAAO3B,UAAU,kBAAkB;YAAEE;YAAgBC,SAASwB;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB1C,qBAAqB;IACtDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACd2B,OAAO5C,EACJ6C,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ1C,QAAQ,CAAC,yCACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;QACP8C,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B4C,kBAAkBlD,EACfsC,OAAO,GACPhC,QAAQ,CAAC,iDACTa,QAAQ,GACRoB,OAAO,CAAC;IACb;AACF,GAAGnB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC4B,KAAK,CAAC;YACrCV,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;gBAAE4C,UAAUjC,MAAMiC,QAAQ;YAAC;YACrDL,OAAO5B,MAAM4B,KAAK;YAClBM,kBAAkBlC,MAAMkC,gBAAgB;QAC1C;QACA,OAAO;YACLvC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAEG,MAAMX,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,uBAAuB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACxE,OAAO3B,UAAU,SAAS;YAAEE;YAAgBC,SAASwB;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BnD,qBAAqB;IAC9Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdgC,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B+C,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC+B,aAAa,CAAC;YAC7Cb,YAAYhC;YACZiC,MAAM;gBAAEO,UAAUjC,MAAMiC,QAAQ;gBAAEI,OAAOrC,MAAMqC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,+BAA+B,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QAChF,OAAO3B,UAAU,iBAAiB;YAAEE;YAAgBC,SAASwB;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuBvD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QAAEZ,OAAOF;IAAY;AACvC,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACkC,MAAM,CAAC;YACtChB,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BkD,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuBzD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoC,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACoC,WAAW,CAAC;YAC3ClB,YAAYhC;YACZ4C,OAAOrC,MAAMqC,KAAK;QACpB;QACA,OAAO;YACL1C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEoB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE"}

package/dist/mcp/builtin/collections/createTool.d.ts

@@ -0,0 +1,2 @@
+export declare const createCollectionTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=createTool.d.ts.map

package/dist/mcp/builtin/collections/createTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,oBAAoB,4CAkG/B,CAAA"}

package/dist/mcp/builtin/collections/createTool.js

@@ -0,0 +1,91 @@
+import { z } from 'zod';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { getCollectionVirtualFieldNames, stripVirtualFields } from '../../../utils/getVirtualFieldNames.js';
+import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
+import { buildToolInput } from '../../../utils/schemaConversion/buildToolInput.js';
+import { sanitizeEntitySchema } from '../../../utils/schemaConversion/sanitizeEntitySchema.js';
+import { transformPointDataToPayload } from '../../../utils/transformPointDataToPayload.js';
+const DEFAULT_DESCRIPTION = 'Create a document in a collection.';
+export const createCollectionTool = defineCollectionTool({
+    description: DEFAULT_DESCRIPTION,
+    input: ({ collectionSchema })=>buildToolInput({
+            controls: {
+                depth: z.number().int().min(0).max(10).describe('How many levels deep to populate relationships in response').optional().default(0),
+                draft: z.boolean().describe('Whether to create the document as a draft').optional().default(false),
+                fallbackLocale: z.string().describe('Optional: fallback locale code to use when requested locale is not available').optional(),
+                locale: z.string().describe('Optional: locale code to create the document in (e.g., "en", "es"). Defaults to the default locale').optional(),
+                select: z.string().describe('Optional: define exactly which fields you\'d like to create (JSON), e.g., \'{"title": "My Post"}\'').optional()
+            },
+            dataDescription: 'The document fields to create',
+            dataSchema: sanitizeEntitySchema(collectionSchema)
+        })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { data, depth, draft, fallbackLocale, locale, select } = input;
+    logger.info(`Creating document in collection: ${collectionSlug}${locale ? ` with locale: ${locale}` : ''}`);
+    try {
+        let parsedData = transformPointDataToPayload(data);
+        const virtualFieldNames = getCollectionVirtualFieldNames(payload.config, collectionSlug);
+        parsedData = stripVirtualFields(parsedData, virtualFieldNames);
+        let selectClause;
+        if (select) {
+            try {
+                selectClause = JSON.parse(select);
+            } catch  {
+                logger.warn(`Invalid select clause JSON: ${select}`);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: 'Error: Invalid JSON in select clause'
+                        }
+                    ]
+                };
+            }
+        }
+        const result = await payload.create({
+            collection: collectionSlug,
+            data: parsedData,
+            depth,
+            draft,
+            req,
+            ...localAPIDefaults(authorizedMCP),
+            ...locale ? {
+                locale
+            } : {},
+            ...fallbackLocale ? {
+                fallbackLocale
+            } : {},
+            ...selectClause ? {
+                select: selectClause
+            } : {}
+        });
+        logger.info(`Successfully created document in ${collectionSlug} with ID: ${result.id}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Document created successfully in collection "${collectionSlug}"!\nCreated document:\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error creating document in ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Error creating document in collection "${collectionSlug}": ${errorMessage}`
+                }
+            ]
+        };
+    }
+});
+
+//# sourceMappingURL=createTool.js.map

package/dist/mcp/builtin/collections/createTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"sourcesContent":["import type { SelectType } from 'payload'\n\nimport { z } from 'zod'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport {\n  getCollectionVirtualFieldNames,\n  stripVirtualFields,\n} from '../../../utils/getVirtualFieldNames.js'\nimport { localAPIDefaults } from '../../../utils/localAPIDefaults.js'\nimport { buildToolInput } from '../../../utils/schemaConversion/buildToolInput.js'\nimport { sanitizeEntitySchema } from '../../../utils/schemaConversion/sanitizeEntitySchema.js'\nimport { transformPointDataToPayload } from '../../../utils/transformPointDataToPayload.js'\n\nconst DEFAULT_DESCRIPTION = 'Create a document in a collection.'\n\nexport const createCollectionTool = defineCollectionTool({\n  description: DEFAULT_DESCRIPTION,\n  input: ({ collectionSchema }) =>\n    buildToolInput({\n      controls: {\n        depth: z\n          .number()\n          .int()\n          .min(0)\n          .max(10)\n          .describe('How many levels deep to populate relationships in response')\n          .optional()\n          .default(0),\n        draft: z\n          .boolean()\n          .describe('Whether to create the document as a draft')\n          .optional()\n          .default(false),\n        fallbackLocale: z\n          .string()\n          .describe('Optional: fallback locale code to use when requested locale is not available')\n          .optional(),\n        locale: z\n          .string()\n          .describe(\n            'Optional: locale code to create the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n          )\n          .optional(),\n        select: z\n          .string()\n          .describe(\n            'Optional: define exactly which fields you\\'d like to create (JSON), e.g., \\'{\"title\": \"My Post\"}\\'',\n          )\n          .optional(),\n      },\n      dataDescription: 'The document fields to create',\n      dataSchema: sanitizeEntitySchema(collectionSchema),\n    }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n\n  const { data, depth, draft, fallbackLocale, locale, select } = input\n\n  logger.info(\n    `Creating document in collection: ${collectionSlug}${locale ? ` with locale: ${locale}` : ''}`,\n  )\n\n  try {\n    let parsedData = transformPointDataToPayload(data)\n    const virtualFieldNames = getCollectionVirtualFieldNames(payload.config, collectionSlug)\n    parsedData = stripVirtualFields(parsedData, virtualFieldNames)\n\n    let selectClause: SelectType | undefined\n    if (select) {\n      try {\n        selectClause = JSON.parse(select) as SelectType\n      } catch {\n        logger.warn(`Invalid select clause JSON: ${select}`)\n        return { content: [{ type: 'text', text: 'Error: Invalid JSON in select clause' }] }\n      }\n    }\n\n    const result = await payload.create({\n      collection: collectionSlug,\n      data: parsedData,\n      depth,\n      draft,\n      req,\n      ...localAPIDefaults(authorizedMCP),\n      ...(locale ? { locale } : {}),\n      ...(fallbackLocale ? { fallbackLocale } : {}),\n      ...(selectClause ? { select: selectClause } : {}),\n    })\n\n    logger.info(`Successfully created document in ${collectionSlug} with ID: ${result.id}`)\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Document created successfully in collection \"${collectionSlug}\"!\\nCreated document:\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error creating document in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Error creating document in collection \"${collectionSlug}\": ${errorMessage}`,\n        },\n      ],\n    }\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","getCollectionVirtualFieldNames","stripVirtualFields","localAPIDefaults","buildToolInput","sanitizeEntitySchema","transformPointDataToPayload","DEFAULT_DESCRIPTION","createCollectionTool","description","input","collectionSchema","controls","depth","number","int","min","max","describe","optional","default","draft","boolean","fallbackLocale","string","locale","select","dataDescription","dataSchema","handler","authorizedMCP","collectionSlug","req","payload","logger","data","info","parsedData","virtualFieldNames","config","selectClause","JSON","parse","warn","content","type","text","result","create","collection","id","stringify","doc","error","errorMessage","Error","message"],"mappings":"AAEA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SACEC,8BAA8B,EAC9BC,kBAAkB,QACb,yCAAwC;AAC/C,SAASC,gBAAgB,QAAQ,qCAAoC;AACrE,SAASC,cAAc,QAAQ,oDAAmD;AAClF,SAASC,oBAAoB,QAAQ,0DAAyD;AAC9F,SAASC,2BAA2B,QAAQ,gDAA+C;AAE3F,MAAMC,sBAAsB;AAE5B,OAAO,MAAMC,uBAAuBT,qBAAqB;IACvDU,aAAaF;IACbG,OAAO,CAAC,EAAEC,gBAAgB,EAAE,GAC1BP,eAAe;YACbQ,UAAU;gBACRC,OAAOf,EACJgB,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,CAAC,8DACTC,QAAQ,GACRC,OAAO,CAAC;gBACXC,OAAOvB,EACJwB,OAAO,GACPJ,QAAQ,CAAC,6CACTC,QAAQ,GACRC,OAAO,CAAC;gBACXG,gBAAgBzB,EACb0B,MAAM,GACNN,QAAQ,CAAC,gFACTC,QAAQ;gBACXM,QAAQ3B,EACL0B,MAAM,GACNN,QAAQ,CACP,sGAEDC,QAAQ;gBACXO,QAAQ5B,EACL0B,MAAM,GACNN,QAAQ,CACP,sGAEDC,QAAQ;YACb;YACAQ,iBAAiB;YACjBC,YAAYvB,qBAAqBM;QACnC;AACJ,GAAGkB,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEC,cAAc,EAAErB,KAAK,EAAEsB,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAASlC,UAAU;QAAEiC;IAAQ;IAEnC,MAAM,EAAEE,IAAI,EAAEtB,KAAK,EAAEQ,KAAK,EAAEE,cAAc,EAAEE,MAAM,EAAEC,MAAM,EAAE,GAAGhB;IAE/DwB,OAAOE,IAAI,CACT,CAAC,iCAAiC,EAAEL,iBAAiBN,SAAS,CAAC,cAAc,EAAEA,QAAQ,GAAG,IAAI;IAGhG,IAAI;QACF,IAAIY,aAAa/B,4BAA4B6B;QAC7C,MAAMG,oBAAoBrC,+BAA+BgC,QAAQM,MAAM,EAAER;QACzEM,aAAanC,mBAAmBmC,YAAYC;QAE5C,IAAIE;QACJ,IAAId,QAAQ;YACV,IAAI;gBACFc,eAAeC,KAAKC,KAAK,CAAChB;YAC5B,EAAE,OAAM;gBACNQ,OAAOS,IAAI,CAAC,CAAC,4BAA4B,EAAEjB,QAAQ;gBACnD,OAAO;oBAAEkB,SAAS;wBAAC;4BAAEC,MAAM;4BAAQC,MAAM;wBAAuC;qBAAE;gBAAC;YACrF;QACF;QAEA,MAAMC,SAAS,MAAMd,QAAQe,MAAM,CAAC;YAClCC,YAAYlB;YACZI,MAAME;YACNxB;YACAQ;YACAW;YACA,GAAG7B,iBAAiB2B,cAAc;YAClC,GAAIL,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAIF,iBAAiB;gBAAEA;YAAe,IAAI,CAAC,CAAC;YAC5C,GAAIiB,eAAe;gBAAEd,QAAQc;YAAa,IAAI,CAAC,CAAC;QAClD;QAEAN,OAAOE,IAAI,CAAC,CAAC,iCAAiC,EAAEL,eAAe,UAAU,EAAEgB,OAAOG,EAAE,EAAE;QAEtF,OAAO;YACLN,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,6CAA6C,EAAEf,eAAe,mCAAmC,EAAEU,KAAKU,SAAS,CAACJ,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDK,KAAKL;QACP;IACF,EAAE,OAAOM,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DtB,OAAOmB,KAAK,CAAC,CAAC,2BAA2B,EAAEtB,eAAe,EAAE,EAAEuB,cAAc;QAC5E,OAAO;YACLV,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEf,eAAe,GAAG,EAAEuB,cAAc;gBACpF;aACD;QACH;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/deleteTool.d.ts

@@ -0,0 +1,2 @@
+export declare const deleteCollectionTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=deleteTool.d.ts.map

package/dist/mcp/builtin/collections/deleteTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deleteTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/deleteTool.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,oBAAoB,4CAkH/B,CAAA"}