@payloadcms/plugin-mcp 4.0.0-internal.40de3ec → 4.0.0-internal.41055b1

package/dist/mcp/builtin/collections/authTools.js

@@ -22,9 +22,16 @@ const wrapError = (name)=>({ collectionSlug, message })=>{
         };
     };
 export const authCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Check Auth Status'
+    },
     description: 'Checks authentication status for the current user.',
     input: z.object({
-        headers: z.string().describe('Optional JSON string containing custom headers to send with the authentication request').optional()
+        headers: z.record(z.string(), z.string()).describe('Optional custom headers to send with the authentication request').optional()
     })
 }).handler(async ({ collectionSlug, input, req })=>{
     const logger = getLogger({
@@ -33,11 +40,7 @@ export const authCollectionTool = defineCollectionTool({
     try {
         let authHeaders = new Headers();
         if (input.headers) {
-            try {
-                authHeaders = new Headers(JSON.parse(input.headers));
-            } catch  {
-                logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`);
-            }
+            authHeaders = new Headers(input.headers);
         }
         const result = await req.payload.auth({
             headers: authHeaders
@@ -61,6 +64,13 @@ export const authCollectionTool = defineCollectionTool({
     }
 });
 export const forgotPasswordCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true,
+        readOnlyHint: false,
+        title: 'Forgot Password'
+    },
     description: 'Sends a password reset email to a user.',
     input: z.object({
         disableEmail: z.boolean().describe('Whether to disable sending the email (for testing)').optional().default(false),
@@ -99,6 +109,13 @@ export const forgotPasswordCollectionTool = defineCollectionTool({
     }
 });
 export const loginCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'User Login'
+    },
     description: 'Authenticates a user with email and password.',
     input: z.object({
         depth: z.number().int().min(0).max(10).describe('Depth of population for relationships').optional().default(0),
@@ -139,6 +156,13 @@ export const loginCollectionTool = defineCollectionTool({
     }
 });
 export const resetPasswordCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Reset Password'
+    },
     description: 'Resets a user password with a reset token.',
     input: z.object({
         password: z.string().describe('The new password for the user'),
@@ -176,6 +200,13 @@ export const resetPasswordCollectionTool = defineCollectionTool({
     }
 });
 export const unlockCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Unlock Account'
+    },
     description: 'Unlocks a user account that has been locked due to failed login attempts.',
     input: z.object({
         email: emailSchema
@@ -213,6 +244,13 @@ export const unlockCollectionTool = defineCollectionTool({
     }
 });
 export const verifyCollectionTool = defineCollectionTool({
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Email Verification'
+    },
     description: 'Verifies a user email with a verification token.',
     input: z.object({
         token: z.string().describe('The verification token sent to the user email')

package/dist/mcp/builtin/collections/authTools.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .string()\n      .describe(\n        'Optional JSON string containing custom headers to send with the authentication request',\n      )\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      try {\n        authHeaders = new Headers(JSON.parse(input.headers) as Record<string, string>)\n      } catch {\n        logger.warn(`Invalid headers JSON for auth: ${input.headers}, using empty headers`)\n      }\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","description","input","object","headers","optional","handler","req","logger","payload","authHeaders","Headers","JSON","parse","warn","result","auth","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdC,SAASlB,EACNI,MAAM,GACNE,QAAQ,CACP,0FAEDa,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIT,MAAME,OAAO,EAAE;YACjB,IAAI;gBACFM,cAAc,IAAIC,QAAQC,KAAKC,KAAK,CAACX,MAAME,OAAO;YACpD,EAAE,OAAM;gBACNI,OAAOM,IAAI,CAAC,CAAC,+BAA+B,EAAEZ,MAAME,OAAO,CAAC,qBAAqB,CAAC;YACpF;QACF;QACA,MAAMW,SAAS,MAAMR,IAAIE,OAAO,CAACO,IAAI,CAAC;YAAEZ,SAASM;QAAY;QAC7D,OAAO;YACLb,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEa,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,sBAAsB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACvE,OAAO3B,UAAU,QAAQ;YAAEE;YAAgBC,SAASwB;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BnC,qBAAqB;IAC/Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoB,cAAcrC,EACXsC,OAAO,GACPhC,QAAQ,CAAC,sDACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;IACT;AACF,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACiB,cAAc,CAAC;YAC9CC,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BgC,cAAcrB,MAAMqB,YAAY;QAClC;QACA,OAAO;YACL1B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,gBAAgB,EAAEqB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,gCAAgC,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACjF,OAAO3B,UAAU,kBAAkB;YAAEE;YAAgBC,SAASwB;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB1C,qBAAqB;IACtDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACd2B,OAAO5C,EACJ6C,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ1C,QAAQ,CAAC,yCACTa,QAAQ,GACRoB,OAAO,CAAC;QACXlC,OAAOF;QACP8C,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B4C,kBAAkBlD,EACfsC,OAAO,GACPhC,QAAQ,CAAC,iDACTa,QAAQ,GACRoB,OAAO,CAAC;IACb;AACF,GAAGnB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC4B,KAAK,CAAC;YACrCV,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;gBAAE4C,UAAUjC,MAAMiC,QAAQ;YAAC;YACrDL,OAAO5B,MAAM4B,KAAK;YAClBM,kBAAkBlC,MAAMkC,gBAAgB;QAC1C;QACA,OAAO;YACLvC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAEG,MAAMX,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,uBAAuB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACxE,OAAO3B,UAAU,SAAS;YAAEE;YAAgBC,SAASwB;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BnD,qBAAqB;IAC9Dc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdgC,UAAUjD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9B+C,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAAC+B,aAAa,CAAC;YAC7Cb,YAAYhC;YACZiC,MAAM;gBAAEO,UAAUjC,MAAMiC,QAAQ;gBAAEI,OAAOrC,MAAMqC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAEiB,KAAKK,SAAS,CAACF,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDG,KAAKH;QACP;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,+BAA+B,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QAChF,OAAO3B,UAAU,iBAAiB;YAAEE;YAAgBC,SAASwB;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuBvD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QAAEZ,OAAOF;IAAY;AACvC,GAAGiB,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACkC,MAAM,CAAC;YACtChB,YAAYhC;YACZiC,MAAM;gBAAErC,OAAOW,MAAMX,KAAK;YAAC;YAC3BkD,gBAAgB;QAClB;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEO,MAAMX,KAAK,CAAC,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuBzD,qBAAqB;IACvDc,aAAa;IACbC,OAAOhB,EAAEiB,MAAM,CAAC;QACdoC,OAAOrD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGc,OAAO,CAAC,OAAO,EAAEX,cAAc,EAAEO,KAAK,EAAEK,GAAG,EAAE;IAC9C,MAAMC,SAASpB,UAAU;QAAEqB,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMM,SAAS,MAAMR,IAAIE,OAAO,CAACoC,WAAW,CAAC;YAC3ClB,YAAYhC;YACZ4C,OAAOrC,MAAMqC,KAAK;QACpB;QACA,OAAO;YACL1C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEoB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDG,KAAK;gBAAEH;YAAO;QAChB;IACF,EAAE,OAAOI,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMvB,OAAO,GAAG;QAC9DY,OAAOW,KAAK,CAAC,CAAC,wBAAwB,EAAExB,eAAe,EAAE,EAAEyB,cAAc;QACzE,OAAO3B,UAAU,UAAU;YAAEE;YAAgBC,SAASwB;QAAa;IACrE;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Check Auth Status',\n  },\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .record(z.string(), z.string())\n      .describe('Optional custom headers to send with the authentication request')\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      authHeaders = new Headers(input.headers)\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n    readOnlyHint: false,\n    title: 'Forgot Password',\n  },\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'User Login',\n  },\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Reset Password',\n  },\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Unlock Account',\n  },\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Email Verification',\n  },\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","headers","record","optional","handler","req","logger","payload","authHeaders","Headers","result","auth","JSON","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,SAASxB,EACNyB,MAAM,CAACzB,EAAEI,MAAM,IAAIJ,EAAEI,MAAM,IAC3BE,QAAQ,CAAC,mEACToB,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIV,MAAME,OAAO,EAAE;YACjBO,cAAc,IAAIC,QAAQV,MAAME,OAAO;QACzC;QACA,MAAMS,SAAS,MAAML,IAAIE,OAAO,CAACI,IAAI,CAAC;YAAEV,SAASO;QAAY;QAC7D,OAAO;YACLpB,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEsB,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,sBAAsB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACvE,OAAOhC,UAAU,QAAQ;YAAEE;YAAgBC,SAAS6B;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BxC,qBAAqB;IAC/Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmB,cAAc1C,EACX2C,OAAO,GACPrC,QAAQ,CAAC,sDACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;IACT;AACF,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACe,cAAc,CAAC;YAC9CC,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BqC,cAAcpB,MAAMoB,YAAY;QAClC;QACA,OAAO;YACL/B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,gBAAgB,EAAE8B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,gCAAgC,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACjF,OAAOhC,UAAU,kBAAkB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB/C,qBAAqB;IACtDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd0B,OAAOjD,EACJkD,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ/C,QAAQ,CAAC,yCACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;QACPmD,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BiD,kBAAkBvD,EACf2C,OAAO,GACPrC,QAAQ,CAAC,iDACToB,QAAQ,GACRkB,OAAO,CAAC;IACb;AACF,GAAGjB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC0B,KAAK,CAAC;YACrCV,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;gBAAEiD,UAAUhC,MAAMgC,QAAQ;YAAC;YACrDL,OAAO3B,MAAM2B,KAAK;YAClBM,kBAAkBjC,MAAMiC,gBAAgB;QAC1C;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAES,MAAMjB,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,uBAAuB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACxE,OAAOhC,UAAU,SAAS;YAAEE;YAAgBC,SAAS6B;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BxD,qBAAqB;IAC9Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd+B,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BoD,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC6B,aAAa,CAAC;YAC7Cb,YAAYrC;YACZsC,MAAM;gBAAEO,UAAUhC,MAAMgC,QAAQ;gBAAEI,OAAOpC,MAAMoC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,+BAA+B,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QAChF,OAAOhC,UAAU,iBAAiB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuB5D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QAAElB,OAAOF;IAAY;AACvC,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACgC,MAAM,CAAC;YACtChB,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BuD,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,cAAc,EAAE4B,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuB9D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmC,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACkC,WAAW,CAAC;YAC3ClB,YAAYrC;YACZiD,OAAOpC,MAAMoC,KAAK;QACpB;QACA,OAAO;YACL/C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE"}

package/dist/mcp/builtin/collections/countTool.d.ts

@@ -0,0 +1,2 @@
+export declare const countDocumentsTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=countTool.d.ts.map

package/dist/mcp/builtin/collections/countTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,kBAAkB,4CA8D7B,CAAA"}

package/dist/mcp/builtin/collections/countTool.js

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Count documents in any collection by passing the collection slug and optional where clause.';
+export const countDocumentsTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Count Documents'
+    },
+    description: DEFAULT_DESCRIPTION,
+    input: z.object({
+        locale: z.string().describe('Optional: locale code to count documents in').optional(),
+        trash: z.boolean().describe('Optional: include soft-deleted documents when trash is enabled on the collection').optional(),
+        where: whereSchema.describe('Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {"title":{"contains":"test"}}').optional()
+    })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { locale, trash, where } = input;
+    logger.info(`Counting documents in collection: ${collectionSlug}`);
+    try {
+        const result = await payload.count({
+            collection: collectionSlug,
+            overrideAccess: authorizedMCP.overrideAccess,
+            req,
+            ...locale ? {
+                locale
+            } : {},
+            ...trash !== undefined ? {
+                trash
+            } : {},
+            ...where ? {
+                where
+            } : {}
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Collection "${collectionSlug}" contains ${result.totalDocs} matching documents.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error counting documents in ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error counting documents in collection "${collectionSlug}":** ${errorMessage}`
+                }
+            ],
+            isError: true
+        };
+    }
+});
+
+//# sourceMappingURL=countTool.js.map

package/dist/mcp/builtin/collections/countTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count documents in any collection by passing the collection slug and optional where clause.'\n\nexport const countDocumentsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Documents',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    locale: z.string().describe('Optional: locale code to count documents in').optional(),\n    trash: z\n      .boolean()\n      .describe('Optional: include soft-deleted documents when trash is enabled on the collection')\n      .optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {\"title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, trash, where } = input\n\n  logger.info(`Counting documents in collection: ${collectionSlug}`)\n\n  try {\n    const result = await payload.count({\n      collection: collectionSlug,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n      ...(locale ? { locale } : {}),\n      ...(trash !== undefined ? { trash } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${collectionSlug}\" contains ${result.totalDocs} matching documents.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting documents in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting documents in collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","whereSchema","DEFAULT_DESCRIPTION","countDocumentsTool","access","args","Boolean","permissions","collections","collectionSlug","read","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","locale","string","describe","optional","trash","boolean","where","handler","authorizedMCP","req","payload","logger","info","result","count","collection","overrideAccess","undefined","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,qBAAqBJ,qBAAqB;IACrDK,QAAQ,CAACC,OACPP,cAAcO,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IACvFC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOrB,EAAEsB,MAAM,CAAC;QACdC,QAAQvB,EAAEwB,MAAM,GAAGC,QAAQ,CAAC,+CAA+CC,QAAQ;QACnFC,OAAO3B,EACJ4B,OAAO,GACPH,QAAQ,CAAC,oFACTC,QAAQ;QACXG,OAAOzB,YACJqB,QAAQ,CACP,oJAEDC,QAAQ;IACb;AACF,GAAGI,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEnB,cAAc,EAAES,KAAK,EAAEW,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAS/B,UAAU;QAAE8B;IAAQ;IACnC,MAAM,EAAEV,MAAM,EAAEI,KAAK,EAAEE,KAAK,EAAE,GAAGR;IAEjCa,OAAOC,IAAI,CAAC,CAAC,kCAAkC,EAAEvB,gBAAgB;IAEjE,IAAI;QACF,MAAMwB,SAAS,MAAMH,QAAQI,KAAK,CAAC;YACjCC,YAAY1B;YACZ2B,gBAAgBR,cAAcQ,cAAc;YAC5CP;YACA,GAAIT,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAII,UAAUa,YAAY;gBAAEb;YAAM,IAAI,CAAC,CAAC;YACxC,GAAIE,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLY,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAE/B,eAAe,WAAW,EAAEwB,OAAOQ,SAAS,CAAC,kCAAkC,EAAEC,KAAKC,SAAS,CAACV,QAAQ,QAAQ,CAAC;gBACxI;aACD;YACDW,KAAKX;QACP;IACF,EAAE,OAAOY,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DjB,OAAOc,KAAK,CAAC,CAAC,4BAA4B,EAAEpC,eAAe,EAAE,EAAEqC,cAAc;QAC7E,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,4CAA4C,EAAE/B,eAAe,KAAK,EAAEqC,cAAc;gBAC3F;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/countVersionsTool.d.ts

@@ -0,0 +1,2 @@
+export declare const countVersionsTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=countVersionsTool.d.ts.map

package/dist/mcp/builtin/collections/countVersionsTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"countVersionsTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,iBAAiB,4CA0D5B,CAAA"}

package/dist/mcp/builtin/collections/countVersionsTool.js

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Count document versions in any version-enabled collection by passing the collection slug and optional where clause.';
+export const countVersionsTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.readVersions),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Count Versions'
+    },
+    description: DEFAULT_DESCRIPTION,
+    input: z.object({
+        locale: z.string().describe('Optional: locale code to count versions in').optional(),
+        where: whereSchema.describe('Optional: where clause for filtering versions. Version document fields are usually under "version". Example: {"version.title":{"contains":"test"}}').optional()
+    })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { locale, where } = input;
+    logger.info(`Counting versions in collection: ${collectionSlug}`);
+    try {
+        const result = await payload.countVersions({
+            collection: collectionSlug,
+            overrideAccess: authorizedMCP.overrideAccess,
+            req,
+            ...locale ? {
+                locale
+            } : {},
+            ...where ? {
+                where
+            } : {}
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Collection "${collectionSlug}" contains ${result.totalDocs} matching versions.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error counting versions in ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error counting versions in collection "${collectionSlug}":** ${errorMessage}`
+                }
+            ],
+            isError: true
+        };
+    }
+});
+
+//# sourceMappingURL=countVersionsTool.js.map

package/dist/mcp/builtin/collections/countVersionsTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count document versions in any version-enabled collection by passing the collection slug and optional where clause.'\n\nexport const countVersionsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) &&\n    Boolean(args.permissions?.collections?.[args.collectionSlug]?.readVersions),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Versions',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    locale: z.string().describe('Optional: locale code to count versions in').optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering versions. Version document fields are usually under \"version\". Example: {\"version.title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, where } = input\n\n  logger.info(`Counting versions in collection: ${collectionSlug}`)\n\n  try {\n    const result = await payload.countVersions({\n      collection: collectionSlug,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n      ...(locale ? { locale } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${collectionSlug}\" contains ${result.totalDocs} matching versions.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting versions in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting versions in collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","whereSchema","DEFAULT_DESCRIPTION","countVersionsTool","access","args","Boolean","permissions","collections","collectionSlug","readVersions","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","locale","string","describe","optional","where","handler","authorizedMCP","req","payload","logger","info","result","countVersions","collection","overrideAccess","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,oBAAoBJ,qBAAqB;IACpDK,QAAQ,CAACC,OACPP,cAAcO,SACdC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IAChEC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOrB,EAAEsB,MAAM,CAAC;QACdC,QAAQvB,EAAEwB,MAAM,GAAGC,QAAQ,CAAC,8CAA8CC,QAAQ;QAClFC,OAAOvB,YACJqB,QAAQ,CACP,sJAEDC,QAAQ;IACb;AACF,GAAGE,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEjB,cAAc,EAAES,KAAK,EAAES,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAS7B,UAAU;QAAE4B;IAAQ;IACnC,MAAM,EAAER,MAAM,EAAEI,KAAK,EAAE,GAAGN;IAE1BW,OAAOC,IAAI,CAAC,CAAC,iCAAiC,EAAErB,gBAAgB;IAEhE,IAAI;QACF,MAAMsB,SAAS,MAAMH,QAAQI,aAAa,CAAC;YACzCC,YAAYxB;YACZyB,gBAAgBR,cAAcQ,cAAc;YAC5CP;YACA,GAAIP,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAII,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLW,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAE5B,eAAe,WAAW,EAAEsB,OAAOO,SAAS,CAAC,iCAAiC,EAAEC,KAAKC,SAAS,CAACT,QAAQ,QAAQ,CAAC;gBACvI;aACD;YACDU,KAAKV;QACP;IACF,EAAE,OAAOW,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DhB,OAAOa,KAAK,CAAC,CAAC,2BAA2B,EAAEjC,eAAe,EAAE,EAAEkC,cAAc;QAC5E,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,2CAA2C,EAAE5B,eAAe,KAAK,EAAEkC,cAAc;gBAC1F;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/createTool.d.ts

@@ -1,2 +1,2 @@
-export declare const createCollectionTool: import("../../../types.js").CollectionTool;
+export declare const createDocumentTool: import("../../../types.js").CollectionTool;
 //# sourceMappingURL=createTool.d.ts.map

package/dist/mcp/builtin/collections/createTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,oBAAoB,4CAkG/B,CAAA"}
+{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,kBAAkB,4CAkG7B,CAAA"}

package/dist/mcp/builtin/collections/createTool.js

@@ -1,25 +1,30 @@
 import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
 import { defineCollectionTool } from '../../../defineTool.js';
 import { getLogger } from '../../../utils/getLogger.js';
 import { getCollectionVirtualFieldNames, stripVirtualFields } from '../../../utils/getVirtualFieldNames.js';
-import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
-import { buildToolInput } from '../../../utils/schemaConversion/buildToolInput.js';
-import { sanitizeEntitySchema } from '../../../utils/schemaConversion/sanitizeEntitySchema.js';
 import { transformPointDataToPayload } from '../../../utils/transformPointDataToPayload.js';
-const DEFAULT_DESCRIPTION = 'Create a document in a collection.';
-export const createCollectionTool = defineCollectionTool({
+import { validateCollectionData } from '../validateEntityData.js';
+import { formatCollectionError } from './formatCollectionError.js';
+const DEFAULT_DESCRIPTION = 'Create a document in any collection by passing the collection slug and data.';
+export const createDocumentTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.create),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Create Document'
+    },
     description: DEFAULT_DESCRIPTION,
-    input: ({ collectionSchema })=>buildToolInput({
-            controls: {
-                depth: z.number().int().min(0).max(10).describe('How many levels deep to populate relationships in response').optional().default(0),
-                draft: z.boolean().describe('Whether to create the document as a draft').optional().default(false),
-                fallbackLocale: z.string().describe('Optional: fallback locale code to use when requested locale is not available').optional(),
-                locale: z.string().describe('Optional: locale code to create the document in (e.g., "en", "es"). Defaults to the default locale').optional(),
-                select: z.string().describe('Optional: define exactly which fields you\'d like to create (JSON), e.g., \'{"title": "My Post"}\'').optional()
-            },
-            dataDescription: 'The document fields to create',
-            dataSchema: sanitizeEntitySchema(collectionSchema)
-        })
+    input: z.object({
+        data: z.record(z.string(), z.unknown()).describe('The document fields to create. Only include fields permitted by the schema returned by getCollectionSchema.'),
+        depth: z.number().int().min(0).max(10).describe('How many levels deep to populate relationships in response').optional().default(0),
+        draft: z.boolean().describe('Only if getCollectionSchema includes _status; otherwise _status does not exist. true forces data._status to "draft"; with false, data._status controls draft or published.').optional().default(false),
+        fallbackLocale: z.string().describe('Optional: fallback locale code to use when requested locale is not available').optional(),
+        locale: z.string().describe('Optional: locale code to create the document in (e.g., "en", "es"). Defaults to the default locale').optional(),
+        select: z.record(z.string(), z.unknown()).describe('Optional: define exactly which fields you\'d like to return, e.g., {"title": true}').optional()
+    })
 }).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
     const payload = req.payload;
     const logger = getLogger({
@@ -28,40 +33,32 @@ export const createCollectionTool = defineCollectionTool({
     const { data, depth, draft, fallbackLocale, locale, select } = input;
     logger.info(`Creating document in collection: ${collectionSlug}${locale ? ` with locale: ${locale}` : ''}`);
     try {
-        let parsedData = transformPointDataToPayload(data);
         const virtualFieldNames = getCollectionVirtualFieldNames(payload.config, collectionSlug);
-        parsedData = stripVirtualFields(parsedData, virtualFieldNames);
-        let selectClause;
-        if (select) {
-            try {
-                selectClause = JSON.parse(select);
-            } catch  {
-                logger.warn(`Invalid select clause JSON: ${select}`);
-                return {
-                    content: [
-                        {
-                            type: 'text',
-                            text: 'Error: Invalid JSON in select clause'
-                        }
-                    ]
-                };
-            }
+        const inputData = stripVirtualFields(data, virtualFieldNames);
+        const validationError = validateCollectionData({
+            collectionSlug,
+            data: inputData,
+            req
+        });
+        if (validationError) {
+            return validationError;
         }
+        const parsedData = transformPointDataToPayload(inputData);
         const result = await payload.create({
             collection: collectionSlug,
             data: parsedData,
             depth,
             draft,
+            overrideAccess: authorizedMCP.overrideAccess,
             req,
-            ...localAPIDefaults(authorizedMCP),
             ...locale ? {
                 locale
             } : {},
             ...fallbackLocale ? {
                 fallbackLocale
             } : {},
-            ...selectClause ? {
-                select: selectClause
+            ...select ? {
+                select: select
             } : {}
         });
         logger.info(`Successfully created document in ${collectionSlug} with ID: ${result.id}`);
@@ -77,14 +74,12 @@ export const createCollectionTool = defineCollectionTool({
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
         logger.error(`Error creating document in ${collectionSlug}: ${errorMessage}`);
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: `Error creating document in collection "${collectionSlug}": ${errorMessage}`
-                }
-            ]
-        };
+        return formatCollectionError({
+            action: 'creating',
+            collectionSlug,
+            error,
+            req
+        });
     }
 });
 

package/dist/mcp/builtin/collections/createTool.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"sourcesContent":["import type { SelectType } from 'payload'\n\nimport { z } from 'zod'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport {\n  getCollectionVirtualFieldNames,\n  stripVirtualFields,\n} from '../../../utils/getVirtualFieldNames.js'\nimport { localAPIDefaults } from '../../../utils/localAPIDefaults.js'\nimport { buildToolInput } from '../../../utils/schemaConversion/buildToolInput.js'\nimport { sanitizeEntitySchema } from '../../../utils/schemaConversion/sanitizeEntitySchema.js'\nimport { transformPointDataToPayload } from '../../../utils/transformPointDataToPayload.js'\n\nconst DEFAULT_DESCRIPTION = 'Create a document in a collection.'\n\nexport const createCollectionTool = defineCollectionTool({\n  description: DEFAULT_DESCRIPTION,\n  input: ({ collectionSchema }) =>\n    buildToolInput({\n      controls: {\n        depth: z\n          .number()\n          .int()\n          .min(0)\n          .max(10)\n          .describe('How many levels deep to populate relationships in response')\n          .optional()\n          .default(0),\n        draft: z\n          .boolean()\n          .describe('Whether to create the document as a draft')\n          .optional()\n          .default(false),\n        fallbackLocale: z\n          .string()\n          .describe('Optional: fallback locale code to use when requested locale is not available')\n          .optional(),\n        locale: z\n          .string()\n          .describe(\n            'Optional: locale code to create the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n          )\n          .optional(),\n        select: z\n          .string()\n          .describe(\n            'Optional: define exactly which fields you\\'d like to create (JSON), e.g., \\'{\"title\": \"My Post\"}\\'',\n          )\n          .optional(),\n      },\n      dataDescription: 'The document fields to create',\n      dataSchema: sanitizeEntitySchema(collectionSchema),\n    }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n\n  const { data, depth, draft, fallbackLocale, locale, select } = input\n\n  logger.info(\n    `Creating document in collection: ${collectionSlug}${locale ? ` with locale: ${locale}` : ''}`,\n  )\n\n  try {\n    let parsedData = transformPointDataToPayload(data)\n    const virtualFieldNames = getCollectionVirtualFieldNames(payload.config, collectionSlug)\n    parsedData = stripVirtualFields(parsedData, virtualFieldNames)\n\n    let selectClause: SelectType | undefined\n    if (select) {\n      try {\n        selectClause = JSON.parse(select) as SelectType\n      } catch {\n        logger.warn(`Invalid select clause JSON: ${select}`)\n        return { content: [{ type: 'text', text: 'Error: Invalid JSON in select clause' }] }\n      }\n    }\n\n    const result = await payload.create({\n      collection: collectionSlug,\n      data: parsedData,\n      depth,\n      draft,\n      req,\n      ...localAPIDefaults(authorizedMCP),\n      ...(locale ? { locale } : {}),\n      ...(fallbackLocale ? { fallbackLocale } : {}),\n      ...(selectClause ? { select: selectClause } : {}),\n    })\n\n    logger.info(`Successfully created document in ${collectionSlug} with ID: ${result.id}`)\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Document created successfully in collection \"${collectionSlug}\"!\\nCreated document:\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error creating document in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Error creating document in collection \"${collectionSlug}\": ${errorMessage}`,\n        },\n      ],\n    }\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","getCollectionVirtualFieldNames","stripVirtualFields","localAPIDefaults","buildToolInput","sanitizeEntitySchema","transformPointDataToPayload","DEFAULT_DESCRIPTION","createCollectionTool","description","input","collectionSchema","controls","depth","number","int","min","max","describe","optional","default","draft","boolean","fallbackLocale","string","locale","select","dataDescription","dataSchema","handler","authorizedMCP","collectionSlug","req","payload","logger","data","info","parsedData","virtualFieldNames","config","selectClause","JSON","parse","warn","content","type","text","result","create","collection","id","stringify","doc","error","errorMessage","Error","message"],"mappings":"AAEA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SACEC,8BAA8B,EAC9BC,kBAAkB,QACb,yCAAwC;AAC/C,SAASC,gBAAgB,QAAQ,qCAAoC;AACrE,SAASC,cAAc,QAAQ,oDAAmD;AAClF,SAASC,oBAAoB,QAAQ,0DAAyD;AAC9F,SAASC,2BAA2B,QAAQ,gDAA+C;AAE3F,MAAMC,sBAAsB;AAE5B,OAAO,MAAMC,uBAAuBT,qBAAqB;IACvDU,aAAaF;IACbG,OAAO,CAAC,EAAEC,gBAAgB,EAAE,GAC1BP,eAAe;YACbQ,UAAU;gBACRC,OAAOf,EACJgB,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,CAAC,8DACTC,QAAQ,GACRC,OAAO,CAAC;gBACXC,OAAOvB,EACJwB,OAAO,GACPJ,QAAQ,CAAC,6CACTC,QAAQ,GACRC,OAAO,CAAC;gBACXG,gBAAgBzB,EACb0B,MAAM,GACNN,QAAQ,CAAC,gFACTC,QAAQ;gBACXM,QAAQ3B,EACL0B,MAAM,GACNN,QAAQ,CACP,sGAEDC,QAAQ;gBACXO,QAAQ5B,EACL0B,MAAM,GACNN,QAAQ,CACP,sGAEDC,QAAQ;YACb;YACAQ,iBAAiB;YACjBC,YAAYvB,qBAAqBM;QACnC;AACJ,GAAGkB,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEC,cAAc,EAAErB,KAAK,EAAEsB,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAASlC,UAAU;QAAEiC;IAAQ;IAEnC,MAAM,EAAEE,IAAI,EAAEtB,KAAK,EAAEQ,KAAK,EAAEE,cAAc,EAAEE,MAAM,EAAEC,MAAM,EAAE,GAAGhB;IAE/DwB,OAAOE,IAAI,CACT,CAAC,iCAAiC,EAAEL,iBAAiBN,SAAS,CAAC,cAAc,EAAEA,QAAQ,GAAG,IAAI;IAGhG,IAAI;QACF,IAAIY,aAAa/B,4BAA4B6B;QAC7C,MAAMG,oBAAoBrC,+BAA+BgC,QAAQM,MAAM,EAAER;QACzEM,aAAanC,mBAAmBmC,YAAYC;QAE5C,IAAIE;QACJ,IAAId,QAAQ;YACV,IAAI;gBACFc,eAAeC,KAAKC,KAAK,CAAChB;YAC5B,EAAE,OAAM;gBACNQ,OAAOS,IAAI,CAAC,CAAC,4BAA4B,EAAEjB,QAAQ;gBACnD,OAAO;oBAAEkB,SAAS;wBAAC;4BAAEC,MAAM;4BAAQC,MAAM;wBAAuC;qBAAE;gBAAC;YACrF;QACF;QAEA,MAAMC,SAAS,MAAMd,QAAQe,MAAM,CAAC;YAClCC,YAAYlB;YACZI,MAAME;YACNxB;YACAQ;YACAW;YACA,GAAG7B,iBAAiB2B,cAAc;YAClC,GAAIL,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAIF,iBAAiB;gBAAEA;YAAe,IAAI,CAAC,CAAC;YAC5C,GAAIiB,eAAe;gBAAEd,QAAQc;YAAa,IAAI,CAAC,CAAC;QAClD;QAEAN,OAAOE,IAAI,CAAC,CAAC,iCAAiC,EAAEL,eAAe,UAAU,EAAEgB,OAAOG,EAAE,EAAE;QAEtF,OAAO;YACLN,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,6CAA6C,EAAEf,eAAe,mCAAmC,EAAEU,KAAKU,SAAS,CAACJ,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDK,KAAKL;QACP;IACF,EAAE,OAAOM,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DtB,OAAOmB,KAAK,CAAC,CAAC,2BAA2B,EAAEtB,eAAe,EAAE,EAAEuB,cAAc;QAC5E,OAAO;YACLV,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEf,eAAe,GAAG,EAAEuB,cAAc;gBACpF;aACD;QACH;IACF;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"sourcesContent":["import type { SelectType } from 'payload'\n\nimport { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport {\n  getCollectionVirtualFieldNames,\n  stripVirtualFields,\n} from '../../../utils/getVirtualFieldNames.js'\nimport { transformPointDataToPayload } from '../../../utils/transformPointDataToPayload.js'\nimport { validateCollectionData } from '../validateEntityData.js'\nimport { formatCollectionError } from './formatCollectionError.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Create a document in any collection by passing the collection slug and data.'\n\nexport const createDocumentTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.create),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Create Document',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    data: z\n      .record(z.string(), z.unknown())\n      .describe(\n        'The document fields to create. Only include fields permitted by the schema returned by getCollectionSchema.',\n      ),\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('How many levels deep to populate relationships in response')\n      .optional()\n      .default(0),\n    draft: z\n      .boolean()\n      .describe(\n        'Only if getCollectionSchema includes _status; otherwise _status does not exist. true forces data._status to \"draft\"; with false, data._status controls draft or published.',\n      )\n      .optional()\n      .default(false),\n    fallbackLocale: z\n      .string()\n      .describe('Optional: fallback locale code to use when requested locale is not available')\n      .optional(),\n    locale: z\n      .string()\n      .describe(\n        'Optional: locale code to create the document in (e.g., \"en\", \"es\"). Defaults to the default locale',\n      )\n      .optional(),\n    select: z\n      .record(z.string(), z.unknown())\n      .describe(\n        'Optional: define exactly which fields you\\'d like to return, e.g., {\"title\": true}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n\n  const { data, depth, draft, fallbackLocale, locale, select } = input\n\n  logger.info(\n    `Creating document in collection: ${collectionSlug}${locale ? ` with locale: ${locale}` : ''}`,\n  )\n\n  try {\n    const virtualFieldNames = getCollectionVirtualFieldNames(payload.config, collectionSlug)\n    const inputData = stripVirtualFields(data, virtualFieldNames)\n    const validationError = validateCollectionData({ collectionSlug, data: inputData, req })\n\n    if (validationError) {\n      return validationError\n    }\n\n    const parsedData = transformPointDataToPayload(inputData)\n\n    const result = await payload.create({\n      collection: collectionSlug,\n      data: parsedData,\n      depth,\n      draft,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n      ...(locale ? { locale } : {}),\n      ...(fallbackLocale ? { fallbackLocale } : {}),\n      ...(select ? { select: select as SelectType } : {}),\n    })\n\n    logger.info(`Successfully created document in ${collectionSlug} with ID: ${result.id}`)\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Document created successfully in collection \"${collectionSlug}\"!\\nCreated document:\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error creating document in ${collectionSlug}: ${errorMessage}`)\n    return formatCollectionError({ action: 'creating', collectionSlug, error, req })\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","getCollectionVirtualFieldNames","stripVirtualFields","transformPointDataToPayload","validateCollectionData","formatCollectionError","DEFAULT_DESCRIPTION","createDocumentTool","access","args","Boolean","permissions","collections","collectionSlug","create","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","data","record","string","unknown","describe","depth","number","int","min","max","optional","default","draft","boolean","fallbackLocale","locale","select","handler","authorizedMCP","req","payload","logger","info","virtualFieldNames","config","inputData","validationError","parsedData","result","collection","overrideAccess","id","content","type","text","JSON","stringify","doc","error","errorMessage","Error","message","action"],"mappings":"AAEA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SACEC,8BAA8B,EAC9BC,kBAAkB,QACb,yCAAwC;AAC/C,SAASC,2BAA2B,QAAQ,gDAA+C;AAC3F,SAASC,sBAAsB,QAAQ,2BAA0B;AACjE,SAASC,qBAAqB,QAAQ,6BAA4B;AAElE,MAAMC,sBACJ;AAEF,OAAO,MAAMC,qBAAqBR,qBAAqB;IACrDS,QAAQ,CAACC,OACPX,cAAcW,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IACvFC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOzB,EAAE0B,MAAM,CAAC;QACdC,MAAM3B,EACH4B,MAAM,CAAC5B,EAAE6B,MAAM,IAAI7B,EAAE8B,OAAO,IAC5BC,QAAQ,CACP;QAEJC,OAAOhC,EACJiC,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJL,QAAQ,CAAC,8DACTM,QAAQ,GACRC,OAAO,CAAC;QACXC,OAAOvC,EACJwC,OAAO,GACPT,QAAQ,CACP,8KAEDM,QAAQ,GACRC,OAAO,CAAC;QACXG,gBAAgBzC,EACb6B,MAAM,GACNE,QAAQ,CAAC,gFACTM,QAAQ;QACXK,QAAQ1C,EACL6B,MAAM,GACNE,QAAQ,CACP,sGAEDM,QAAQ;QACXM,QAAQ3C,EACL4B,MAAM,CAAC5B,EAAE6B,MAAM,IAAI7B,EAAE8B,OAAO,IAC5BC,QAAQ,CACP,sFAEDM,QAAQ;IACb;AACF,GAAGO,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAE7B,cAAc,EAAES,KAAK,EAAEqB,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAS7C,UAAU;QAAE4C;IAAQ;IAEnC,MAAM,EAAEpB,IAAI,EAAEK,KAAK,EAAEO,KAAK,EAAEE,cAAc,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAGlB;IAE/DuB,OAAOC,IAAI,CACT,CAAC,iCAAiC,EAAEjC,iBAAiB0B,SAAS,CAAC,cAAc,EAAEA,QAAQ,GAAG,IAAI;IAGhG,IAAI;QACF,MAAMQ,oBAAoB9C,+BAA+B2C,QAAQI,MAAM,EAAEnC;QACzE,MAAMoC,YAAY/C,mBAAmBsB,MAAMuB;QAC3C,MAAMG,kBAAkB9C,uBAAuB;YAAES;YAAgBW,MAAMyB;YAAWN;QAAI;QAEtF,IAAIO,iBAAiB;YACnB,OAAOA;QACT;QAEA,MAAMC,aAAahD,4BAA4B8C;QAE/C,MAAMG,SAAS,MAAMR,QAAQ9B,MAAM,CAAC;YAClCuC,YAAYxC;YACZW,MAAM2B;YACNtB;YACAO;YACAkB,gBAAgBZ,cAAcY,cAAc;YAC5CX;YACA,GAAIJ,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAID,iBAAiB;gBAAEA;YAAe,IAAI,CAAC,CAAC;YAC5C,GAAIE,SAAS;gBAAEA,QAAQA;YAAqB,IAAI,CAAC,CAAC;QACpD;QAEAK,OAAOC,IAAI,CAAC,CAAC,iCAAiC,EAAEjC,eAAe,UAAU,EAAEuC,OAAOG,EAAE,EAAE;QAEtF,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,6CAA6C,EAAE7C,eAAe,mCAAmC,EAAE8C,KAAKC,SAAS,CAACR,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDS,KAAKT;QACP;IACF,EAAE,OAAOU,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DpB,OAAOiB,KAAK,CAAC,CAAC,2BAA2B,EAAEjD,eAAe,EAAE,EAAEkD,cAAc;QAC5E,OAAO1D,sBAAsB;YAAE6D,QAAQ;YAAYrD;YAAgBiD;YAAOnB;QAAI;IAChF;AACF,GAAE"}

package/dist/mcp/builtin/collections/deleteTool.d.ts

@@ -1,2 +1,2 @@
-export declare const deleteCollectionTool: import("../../../types.js").CollectionTool;
+export declare const deleteDocumentsTool: import("../../../types.js").CollectionTool;
 //# sourceMappingURL=deleteTool.d.ts.map

package/dist/mcp/builtin/collections/deleteTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deleteTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/deleteTool.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,oBAAoB,4CAkH/B,CAAA"}
+{"version":3,"file":"deleteTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/deleteTool.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,mBAAmB,4CAkH9B,CAAA"}

package/dist/mcp/builtin/collections/deleteTool.js

@@ -1,9 +1,18 @@
 import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
 import { defineCollectionTool } from '../../../defineTool.js';
 import { getLogger } from '../../../utils/getLogger.js';
-import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
-const DEFAULT_DESCRIPTION = 'Delete documents in a collection by ID or where clause.';
-export const deleteCollectionTool = defineCollectionTool({
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Delete documents in any collection by passing the collection slug and ID or where clause.';
+export const deleteDocumentsTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.delete),
+    annotations: {
+        destructiveHint: true,
+        idempotentHint: false,
+        openWorldHint: false,
+        readOnlyHint: false,
+        title: 'Delete Documents'
+    },
     description: DEFAULT_DESCRIPTION,
     input: z.object({
         id: z.union([
@@ -13,7 +22,7 @@ export const deleteCollectionTool = defineCollectionTool({
         depth: z.number().int().min(0).max(10).describe('Depth of population for relationships in response').optional().default(0),
         fallbackLocale: z.string().describe('Optional: fallback locale code to use when requested locale is not available').optional(),
         locale: z.string().describe('Optional: locale code for the operation (e.g., "en", "es"). Defaults to the default locale').optional(),
-        where: z.string().describe('Optional: JSON string for where clause to delete multiple documents').optional()
+        where: whereSchema.describe('Optional: where clause to delete multiple documents. Use field names with Payload operators, and/or arrays for grouping. Example: {"title":{"contains":"test"}}').optional()
     })
 }).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
     const payload = req.payload;
@@ -33,27 +42,11 @@ export const deleteCollectionTool = defineCollectionTool({
                 ]
             };
         }
-        let whereClause = {};
-        if (where) {
-            try {
-                whereClause = JSON.parse(where);
-            } catch  {
-                logger.warn(`Invalid where clause JSON: ${where}`);
-                return {
-                    content: [
-                        {
-                            type: 'text',
-                            text: 'Error: Invalid JSON in where clause'
-                        }
-                    ]
-                };
-            }
-        }
         const deleteOptions = {
             collection: collectionSlug,
             depth,
+            overrideAccess: authorizedMCP.overrideAccess,
             req,
-            ...localAPIDefaults(authorizedMCP),
             ...locale && {
                 locale
             },
@@ -64,7 +57,7 @@ export const deleteCollectionTool = defineCollectionTool({
         if (id) {
             deleteOptions.id = id;
         } else {
-            deleteOptions.where = whereClause;
+            deleteOptions.where = where;
         }
         const result = await payload.delete(deleteOptions);
         if (id) {