@payloadcms/plugin-mcp 4.0.0-internal.5b1e7cd → 4.0.0-internal.688c4d0

package/dist/components/AccessField/index.client.js

@@ -0,0 +1,247 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { CheckboxInput, Collapsible, Tabs, useField, useTranslation } from '@payloadcms/ui';
+import React, { useState } from 'react';
+import './index.css';
+const baseClass = 'mcp-access-field';
+const LEAF_GROUP_KEYS = [
+    'operations',
+    'auth',
+    'custom'
+];
+/** Drop a key from an object and return a new object — or `undefined` if it'd be empty. */ const without = (obj, key)=>{
+    if (!obj || !(key in obj)) {
+        return obj;
+    }
+    const { [key]: _omitted, ...rest } = obj;
+    return Object.keys(rest).length === 0 ? undefined : rest;
+};
+const setKey = (obj, key, value)=>({
+        ...obj ?? {},
+        [key]: value
+    });
+export const AccessField = ({ path, pluginConfig })=>{
+    const { setValue, value } = useField({
+        path
+    });
+    const { t } = useTranslation();
+    const [activeTab, setActiveTab] = useState(null);
+    const access = value ?? {};
+    const leafGroupLabels = {
+        auth: t('plugin-mcp:authentication'),
+        custom: t('general:custom'),
+        operations: t('plugin-mcp:operations')
+    };
+    const collectionsBySlug = {};
+    const globalsBySlug = {};
+    const prompts = [];
+    const resources = [];
+    const tools = [];
+    for (const item of pluginConfig.items){
+        switch(item.type){
+            case 'collectionTool':
+                ;
+                (collectionsBySlug[item.collectionSlug] ??= []).push(item);
+                break;
+            case 'globalTool':
+                ;
+                (globalsBySlug[item.globalSlug] ??= []).push(item);
+                break;
+            case 'prompt':
+                prompts.push(item);
+                break;
+            case 'resource':
+                resources.push(item);
+                break;
+            case 'tool':
+                tools.push(item);
+                break;
+        }
+    }
+    const isScopedAllowed = (scope, slug, configKey)=>access[scope]?.[slug]?.[configKey] !== false;
+    const isFlatAllowed = (scope, configKey)=>access[scope]?.[configKey] !== false;
+    const toggleScoped = (scope, slug, configKey, allow)=>{
+        if (allow) {
+            const slugBucket = without(access[scope]?.[slug], configKey);
+            const scopeBucket = slugBucket ? setKey(access[scope], slug, slugBucket) : without(access[scope], slug);
+            setValue(scopeBucket ? setKey(access, scope, scopeBucket) : without(access, scope) ?? {});
+        } else {
+            setValue(setKey(access, scope, setKey(access[scope], slug, setKey(access[scope]?.[slug], configKey, false))));
+        }
+    };
+    const toggleFlat = (scope, configKey, allow)=>{
+        if (allow) {
+            const bucket = without(access[scope], configKey);
+            setValue(bucket ? setKey(access, scope, bucket) : without(access, scope) ?? {});
+        } else {
+            setValue(setKey(access, scope, setKey(access[scope], configKey, false)));
+        }
+    };
+    const setAllScoped = (scope, slug, leaves, allow)=>{
+        if (allow) {
+            const scopeBucket = without(access[scope], slug);
+            setValue(scopeBucket ? setKey(access, scope, scopeBucket) : without(access, scope) ?? {});
+        } else {
+            const slugBucket = leaves.reduce((acc, leaf)=>({
+                    ...acc,
+                    [leaf.configKey]: false
+                }), {});
+            setValue(setKey(access, scope, setKey(access[scope], slug, slugBucket)));
+        }
+    };
+    const setAllFlat = (scope, leaves, allow)=>{
+        if (allow) {
+            setValue(without(access, scope) ?? {});
+        } else {
+            const bucket = leaves.reduce((acc, leaf)=>({
+                    ...acc,
+                    [leaf.configKey]: false
+                }), {});
+            setValue(setKey(access, scope, bucket));
+        }
+    };
+    const renderLeaf = (leaf, id, checked, onToggle)=>/*#__PURE__*/ _jsxs("li", {
+            className: `${baseClass}__leaf`,
+            children: [
+                /*#__PURE__*/ _jsx(CheckboxInput, {
+                    checked: checked,
+                    id: id,
+                    label: leaf.label,
+                    onToggle: (e)=>onToggle(e.target.checked)
+                }),
+                leaf.description && /*#__PURE__*/ _jsx("p", {
+                    className: `${baseClass}__leaf-description`,
+                    children: leaf.description
+                })
+            ]
+        }, leaf.configKey);
+    const renderCard = ({ id, isLeafAllowed, label, leaves, onSetAll, onToggleLeaf })=>{
+        const allowedCount = leaves.filter(isLeafAllowed).length;
+        const groups = LEAF_GROUP_KEYS.map((key)=>({
+                key,
+                label: leafGroupLabels[key],
+                leaves: leaves.filter((leaf)=>(leaf.group ?? 'custom') === key)
+            })).filter((group)=>group.leaves.length > 0);
+        const hasGroupLabels = groups.length > 1;
+        return /*#__PURE__*/ _jsx(Collapsible, {
+            className: `${baseClass}__card`,
+            header: // Keep header clicks on the checkbox from also toggling the collapsible.
+            /*#__PURE__*/ _jsx("span", {
+                className: `${baseClass}__card-checkbox`,
+                onClick: (e)=>e.stopPropagation(),
+                role: "presentation",
+                children: /*#__PURE__*/ _jsx(CheckboxInput, {
+                    checked: allowedCount === leaves.length,
+                    id: `${id}._all`,
+                    label: label,
+                    onToggle: ()=>onSetAll(allowedCount < leaves.length),
+                    partialChecked: allowedCount > 0 && allowedCount < leaves.length
+                })
+            }),
+            initCollapsed: true,
+            children: /*#__PURE__*/ _jsx("div", {
+                className: `${baseClass}__card-groups`,
+                children: groups.map((group)=>/*#__PURE__*/ _jsxs("div", {
+                        className: `${baseClass}__leaf-group`,
+                        children: [
+                            hasGroupLabels && /*#__PURE__*/ _jsx("p", {
+                                className: `${baseClass}__leaf-group-label`,
+                                children: group.label
+                            }),
+                            /*#__PURE__*/ _jsx("ul", {
+                                className: `${baseClass}__list`,
+                                children: group.leaves.map((leaf)=>renderLeaf(leaf, `${id}.${leaf.configKey}`, isLeafAllowed(leaf), (allow)=>onToggleLeaf(leaf, allow)))
+                            })
+                        ]
+                    }, group.key))
+            })
+        }, id);
+    };
+    const renderScope = (scope, bySlug)=>Object.entries(bySlug).map(([slug, leaves])=>renderCard({
+                id: `${path}.${scope}.${slug}`,
+                isLeafAllowed: (leaf)=>isScopedAllowed(scope, slug, leaf.configKey),
+                label: titleCase(slug),
+                leaves,
+                onSetAll: (allow)=>setAllScoped(scope, slug, leaves, allow),
+                onToggleLeaf: (leaf, allow)=>toggleScoped(scope, slug, leaf.configKey, allow)
+            }));
+    const renderFlat = (scope, label, leaves)=>leaves.length > 0 && renderCard({
+            id: `${path}.${scope}`,
+            isLeafAllowed: (leaf)=>isFlatAllowed(scope, leaf.configKey),
+            label,
+            leaves,
+            onSetAll: (allow)=>setAllFlat(scope, leaves, allow),
+            onToggleLeaf: (leaf, allow)=>toggleFlat(scope, leaf.configKey, allow)
+        });
+    const tabs = [
+        ...Object.keys(collectionsBySlug).length > 0 ? [
+            {
+                key: 'collections',
+                label: t('general:collections')
+            }
+        ] : [],
+        ...Object.keys(globalsBySlug).length > 0 ? [
+            {
+                key: 'globals',
+                label: t('general:globals')
+            }
+        ] : [],
+        ...prompts.length > 0 || resources.length > 0 || tools.length > 0 ? [
+            {
+                key: 'server',
+                label: t('plugin-mcp:server')
+            }
+        ] : []
+    ];
+    if (tabs.length === 0) {
+        return null;
+    }
+    const currentTab = activeTab ?? tabs[0].key;
+    return /*#__PURE__*/ _jsxs("div", {
+        className: baseClass,
+        children: [
+            /*#__PURE__*/ _jsxs("header", {
+                className: `${baseClass}__header`,
+                children: [
+                    /*#__PURE__*/ _jsx("h4", {
+                        children: t('plugin-mcp:permissions')
+                    }),
+                    /*#__PURE__*/ _jsx("p", {
+                        children: t('plugin-mcp:permissionsDescription')
+                    })
+                ]
+            }),
+            /*#__PURE__*/ _jsxs("div", {
+                className: `${baseClass}__tabbed-content`,
+                children: [
+                    /*#__PURE__*/ _jsx(Tabs, {
+                        className: `${baseClass}__tabs`,
+                        onChange: setActiveTab,
+                        tabs: tabs.map((tab)=>({
+                                label: tab.label,
+                                value: tab.key
+                            })),
+                        value: currentTab
+                    }),
+                    /*#__PURE__*/ _jsxs("div", {
+                        className: `${baseClass}__cards`,
+                        children: [
+                            currentTab === 'collections' && renderScope('collections', collectionsBySlug),
+                            currentTab === 'globals' && renderScope('globals', globalsBySlug),
+                            currentTab === 'server' && /*#__PURE__*/ _jsxs(_Fragment, {
+                                children: [
+                                    renderFlat('prompts', t('plugin-mcp:prompts'), prompts),
+                                    renderFlat('resources', t('plugin-mcp:resources'), resources),
+                                    renderFlat('tools', t('plugin-mcp:tools'), tools)
+                                ]
+                            })
+                        ]
+                    })
+                ]
+            })
+        ]
+    });
+};
+const titleCase = (slug)=>slug.replace(/(^|[-_])(.)/g, (_, sep, ch)=>sep ? ` ${ch.toUpperCase()}` : ch.toUpperCase());
+
+//# sourceMappingURL=index.client.js.map

package/dist/components/AccessField/index.client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/components/AccessField/index.client.tsx"],"sourcesContent":["'use client'\n\nimport type { JSONFieldClientProps } from 'payload'\n\nimport { CheckboxInput, Collapsible, Tabs, useField, useTranslation } from '@payloadcms/ui'\nimport React, { useState } from 'react'\n\nimport type {\n  PluginMCPTranslationKeys,\n  PluginMCPTranslations,\n} from '../../translations/index.js'\nimport type { ClientMCPPluginConfig, MCPAPIKeysDocAccessTree } from '../../types.js'\n\nimport './index.css'\n\nconst baseClass = 'mcp-access-field'\n\ntype ClientItem = ClientMCPPluginConfig['items'][number]\ntype ScopeKey = 'collections' | 'globals'\ntype FlatKey = 'prompts' | 'resources' | 'tools'\ntype TabKey = 'collections' | 'globals' | 'server'\n\nconst LEAF_GROUP_KEYS = ['operations', 'auth', 'custom'] as const\n\ntype LeafGroupKey = (typeof LEAF_GROUP_KEYS)[number]\n\ntype Props = {\n  pluginConfig: ClientMCPPluginConfig\n} & JSONFieldClientProps\n\n/** Drop a key from an object and return a new object — or `undefined` if it'd be empty. */\nconst without = <T extends Record<string, unknown>>(\n  obj: T | undefined,\n  key: string,\n): T | undefined => {\n  if (!obj || !(key in obj)) {\n    return obj\n  }\n  const { [key]: _omitted, ...rest } = obj\n  return Object.keys(rest).length === 0 ? undefined : (rest as T)\n}\n\nconst setKey = <T extends Record<string, unknown>>(\n  obj: T | undefined,\n  key: string,\n  value: unknown,\n): T => ({ ...(obj ?? {}), [key]: value }) as T\n\nexport const AccessField: React.FC<Props> = ({ path, pluginConfig }) => {\n  const { setValue, value } = useField<MCPAPIKeysDocAccessTree>({ path })\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n  const [activeTab, setActiveTab] = useState<null | TabKey>(null)\n  const access = value ?? {}\n  const leafGroupLabels: Record<LeafGroupKey, string> = {\n    auth: t('plugin-mcp:authentication'),\n    custom: t('general:custom'),\n    operations: t('plugin-mcp:operations'),\n  }\n\n  const collectionsBySlug: Record<string, ClientItem[]> = {}\n  const globalsBySlug: Record<string, ClientItem[]> = {}\n  const prompts: ClientItem[] = []\n  const resources: ClientItem[] = []\n  const tools: ClientItem[] = []\n\n  for (const item of pluginConfig.items) {\n    switch (item.type) {\n      case 'collectionTool':\n        ;(collectionsBySlug[item.collectionSlug!] ??= []).push(item)\n        break\n      case 'globalTool':\n        ;(globalsBySlug[item.globalSlug!] ??= []).push(item)\n        break\n      case 'prompt':\n        prompts.push(item)\n        break\n      case 'resource':\n        resources.push(item)\n        break\n      case 'tool':\n        tools.push(item)\n        break\n    }\n  }\n\n  const isScopedAllowed = (scope: ScopeKey, slug: string, configKey: string): boolean =>\n    access[scope]?.[slug]?.[configKey] !== false\n\n  const isFlatAllowed = (scope: FlatKey, configKey: string): boolean =>\n    access[scope]?.[configKey] !== false\n\n  const toggleScoped = (scope: ScopeKey, slug: string, configKey: string, allow: boolean) => {\n    if (allow) {\n      const slugBucket = without(access[scope]?.[slug], configKey)\n      const scopeBucket = slugBucket\n        ? setKey(access[scope], slug, slugBucket)\n        : without(access[scope], slug)\n      setValue(scopeBucket ? setKey(access, scope, scopeBucket) : (without(access, scope) ?? {}))\n    } else {\n      setValue(\n        setKey(\n          access,\n          scope,\n          setKey(access[scope], slug, setKey(access[scope]?.[slug], configKey, false)),\n        ),\n      )\n    }\n  }\n\n  const toggleFlat = (scope: FlatKey, configKey: string, allow: boolean) => {\n    if (allow) {\n      const bucket = without(access[scope], configKey)\n      setValue(bucket ? setKey(access, scope, bucket) : (without(access, scope) ?? {}))\n    } else {\n      setValue(setKey(access, scope, setKey(access[scope], configKey, false)))\n    }\n  }\n\n  const setAllScoped = (scope: ScopeKey, slug: string, leaves: ClientItem[], allow: boolean) => {\n    if (allow) {\n      const scopeBucket = without(access[scope], slug)\n      setValue(scopeBucket ? setKey(access, scope, scopeBucket) : (without(access, scope) ?? {}))\n    } else {\n      const slugBucket = leaves.reduce<Record<string, boolean>>(\n        (acc, leaf) => ({ ...acc, [leaf.configKey]: false }),\n        {},\n      )\n      setValue(setKey(access, scope, setKey(access[scope], slug, slugBucket)))\n    }\n  }\n\n  const setAllFlat = (scope: FlatKey, leaves: ClientItem[], allow: boolean) => {\n    if (allow) {\n      setValue(without(access, scope) ?? {})\n    } else {\n      const bucket = leaves.reduce<Record<string, boolean>>(\n        (acc, leaf) => ({ ...acc, [leaf.configKey]: false }),\n        {},\n      )\n      setValue(setKey(access, scope, bucket))\n    }\n  }\n\n  const renderLeaf = (\n    leaf: ClientItem,\n    id: string,\n    checked: boolean,\n    onToggle: (allow: boolean) => void,\n  ) => (\n    <li className={`${baseClass}__leaf`} key={leaf.configKey}>\n      <CheckboxInput\n        checked={checked}\n        id={id}\n        label={leaf.label}\n        onToggle={(e) => onToggle(e.target.checked)}\n      />\n      {leaf.description && <p className={`${baseClass}__leaf-description`}>{leaf.description}</p>}\n    </li>\n  )\n\n  const renderCard = ({\n    id,\n    isLeafAllowed,\n    label,\n    leaves,\n    onSetAll,\n    onToggleLeaf,\n  }: {\n    id: string\n    isLeafAllowed: (leaf: ClientItem) => boolean\n    label: string\n    leaves: ClientItem[]\n    onSetAll: (allow: boolean) => void\n    onToggleLeaf: (leaf: ClientItem, allow: boolean) => void\n  }) => {\n    const allowedCount = leaves.filter(isLeafAllowed).length\n    const groups = LEAF_GROUP_KEYS.map((key) => ({\n      key,\n      label: leafGroupLabels[key],\n      leaves: leaves.filter((leaf) => (leaf.group ?? 'custom') === key),\n    })).filter((group) => group.leaves.length > 0)\n    const hasGroupLabels = groups.length > 1\n\n    return (\n      <Collapsible\n        className={`${baseClass}__card`}\n        header={\n          // Keep header clicks on the checkbox from also toggling the collapsible.\n          <span\n            className={`${baseClass}__card-checkbox`}\n            onClick={(e) => e.stopPropagation()}\n            role=\"presentation\"\n          >\n            <CheckboxInput\n              checked={allowedCount === leaves.length}\n              id={`${id}._all`}\n              label={label}\n              onToggle={() => onSetAll(allowedCount < leaves.length)}\n              partialChecked={allowedCount > 0 && allowedCount < leaves.length}\n            />\n          </span>\n        }\n        initCollapsed\n        key={id}\n      >\n        <div className={`${baseClass}__card-groups`}>\n          {groups.map((group) => (\n            <div className={`${baseClass}__leaf-group`} key={group.key}>\n              {hasGroupLabels && <p className={`${baseClass}__leaf-group-label`}>{group.label}</p>}\n              <ul className={`${baseClass}__list`}>\n                {group.leaves.map((leaf) =>\n                  renderLeaf(leaf, `${id}.${leaf.configKey}`, isLeafAllowed(leaf), (allow) =>\n                    onToggleLeaf(leaf, allow),\n                  ),\n                )}\n              </ul>\n            </div>\n          ))}\n        </div>\n      </Collapsible>\n    )\n  }\n\n  const renderScope = (scope: ScopeKey, bySlug: Record<string, ClientItem[]>) =>\n    Object.entries(bySlug).map(([slug, leaves]) =>\n      renderCard({\n        id: `${path}.${scope}.${slug}`,\n        isLeafAllowed: (leaf) => isScopedAllowed(scope, slug, leaf.configKey),\n        label: titleCase(slug),\n        leaves,\n        onSetAll: (allow) => setAllScoped(scope, slug, leaves, allow),\n        onToggleLeaf: (leaf, allow) => toggleScoped(scope, slug, leaf.configKey, allow),\n      }),\n    )\n\n  const renderFlat = (scope: FlatKey, label: string, leaves: ClientItem[]) =>\n    leaves.length > 0 &&\n    renderCard({\n      id: `${path}.${scope}`,\n      isLeafAllowed: (leaf) => isFlatAllowed(scope, leaf.configKey),\n      label,\n      leaves,\n      onSetAll: (allow) => setAllFlat(scope, leaves, allow),\n      onToggleLeaf: (leaf, allow) => toggleFlat(scope, leaf.configKey, allow),\n    })\n\n  const tabs: Array<{ key: TabKey; label: string }> = [\n    ...(Object.keys(collectionsBySlug).length > 0\n      ? [{ key: 'collections' as const, label: t('general:collections') }]\n      : []),\n    ...(Object.keys(globalsBySlug).length > 0\n      ? [{ key: 'globals' as const, label: t('general:globals') }]\n      : []),\n    ...(prompts.length > 0 || resources.length > 0 || tools.length > 0\n      ? [{ key: 'server' as const, label: t('plugin-mcp:server') }]\n      : []),\n  ]\n  if (tabs.length === 0) {\n    return null\n  }\n\n  const currentTab = activeTab ?? tabs[0]!.key\n\n  return (\n    <div className={baseClass}>\n      <header className={`${baseClass}__header`}>\n        <h4>{t('plugin-mcp:permissions')}</h4>\n        <p>{t('plugin-mcp:permissionsDescription')}</p>\n      </header>\n      <div className={`${baseClass}__tabbed-content`}>\n        <Tabs\n          className={`${baseClass}__tabs`}\n          onChange={setActiveTab}\n          tabs={tabs.map((tab) => ({\n            label: tab.label,\n            value: tab.key,\n          }))}\n          value={currentTab}\n        />\n        <div className={`${baseClass}__cards`}>\n          {currentTab === 'collections' && renderScope('collections', collectionsBySlug)}\n          {currentTab === 'globals' && renderScope('globals', globalsBySlug)}\n          {currentTab === 'server' && (\n            <>\n              {renderFlat('prompts', t('plugin-mcp:prompts'), prompts)}\n              {renderFlat('resources', t('plugin-mcp:resources'), resources)}\n              {renderFlat('tools', t('plugin-mcp:tools'), tools)}\n            </>\n          )}\n        </div>\n      </div>\n    </div>\n  )\n}\n\nconst titleCase = (slug: string): string =>\n  slug.replace(/(^|[-_])(.)/g, (_, sep: string, ch: string) =>\n    sep ? ` ${ch.toUpperCase()}` : ch.toUpperCase(),\n  )\n"],"names":["CheckboxInput","Collapsible","Tabs","useField","useTranslation","React","useState","baseClass","LEAF_GROUP_KEYS","without","obj","key","_omitted","rest","Object","keys","length","undefined","setKey","value","AccessField","path","pluginConfig","setValue","t","activeTab","setActiveTab","access","leafGroupLabels","auth","custom","operations","collectionsBySlug","globalsBySlug","prompts","resources","tools","item","items","type","collectionSlug","push","globalSlug","isScopedAllowed","scope","slug","configKey","isFlatAllowed","toggleScoped","allow","slugBucket","scopeBucket","toggleFlat","bucket","setAllScoped","leaves","reduce","acc","leaf","setAllFlat","renderLeaf","id","checked","onToggle","li","className","label","e","target","description","p","renderCard","isLeafAllowed","onSetAll","onToggleLeaf","allowedCount","filter","groups","map","group","hasGroupLabels","header","span","onClick","stopPropagation","role","partialChecked","initCollapsed","div","ul","renderScope","bySlug","entries","titleCase","renderFlat","tabs","currentTab","h4","onChange","tab","replace","_","sep","ch","toUpperCase"],"mappings":"AAAA;;AAIA,SAASA,aAAa,EAAEC,WAAW,EAAEC,IAAI,EAAEC,QAAQ,EAAEC,cAAc,QAAQ,iBAAgB;AAC3F,OAAOC,SAASC,QAAQ,QAAQ,QAAO;AAQvC,OAAO,cAAa;AAEpB,MAAMC,YAAY;AAOlB,MAAMC,kBAAkB;IAAC;IAAc;IAAQ;CAAS;AAQxD,yFAAyF,GACzF,MAAMC,UAAU,CACdC,KACAC;IAEA,IAAI,CAACD,OAAO,CAAEC,CAAAA,OAAOD,GAAE,GAAI;QACzB,OAAOA;IACT;IACA,MAAM,EAAE,CAACC,IAAI,EAAEC,QAAQ,EAAE,GAAGC,MAAM,GAAGH;IACrC,OAAOI,OAAOC,IAAI,CAACF,MAAMG,MAAM,KAAK,IAAIC,YAAaJ;AACvD;AAEA,MAAMK,SAAS,CACbR,KACAC,KACAQ,QACO,CAAA;QAAE,GAAIT,OAAO,CAAC,CAAC;QAAG,CAACC,IAAI,EAAEQ;IAAM,CAAA;AAExC,OAAO,MAAMC,cAA+B,CAAC,EAAEC,IAAI,EAAEC,YAAY,EAAE;IACjE,MAAM,EAAEC,QAAQ,EAAEJ,KAAK,EAAE,GAAGhB,SAAkC;QAAEkB;IAAK;IACrE,MAAM,EAAEG,CAAC,EAAE,GAAGpB;IACd,MAAM,CAACqB,WAAWC,aAAa,GAAGpB,SAAwB;IAC1D,MAAMqB,SAASR,SAAS,CAAC;IACzB,MAAMS,kBAAgD;QACpDC,MAAML,EAAE;QACRM,QAAQN,EAAE;QACVO,YAAYP,EAAE;IAChB;IAEA,MAAMQ,oBAAkD,CAAC;IACzD,MAAMC,gBAA8C,CAAC;IACrD,MAAMC,UAAwB,EAAE;IAChC,MAAMC,YAA0B,EAAE;IAClC,MAAMC,QAAsB,EAAE;IAE9B,KAAK,MAAMC,QAAQf,aAAagB,KAAK,CAAE;QACrC,OAAQD,KAAKE,IAAI;YACf,KAAK;;gBACDP,CAAAA,iBAAiB,CAACK,KAAKG,cAAc,CAAE,KAAK,EAAE,AAAD,EAAGC,IAAI,CAACJ;gBACvD;YACF,KAAK;;gBACDJ,CAAAA,aAAa,CAACI,KAAKK,UAAU,CAAE,KAAK,EAAE,AAAD,EAAGD,IAAI,CAACJ;gBAC/C;YACF,KAAK;gBACHH,QAAQO,IAAI,CAACJ;gBACb;YACF,KAAK;gBACHF,UAAUM,IAAI,CAACJ;gBACf;YACF,KAAK;gBACHD,MAAMK,IAAI,CAACJ;gBACX;QACJ;IACF;IAEA,MAAMM,kBAAkB,CAACC,OAAiBC,MAAcC,YACtDnB,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAE,CAACC,UAAU,KAAK;IAEzC,MAAMC,gBAAgB,CAACH,OAAgBE,YACrCnB,MAAM,CAACiB,MAAM,EAAE,CAACE,UAAU,KAAK;IAEjC,MAAME,eAAe,CAACJ,OAAiBC,MAAcC,WAAmBG;QACtE,IAAIA,OAAO;YACT,MAAMC,aAAazC,QAAQkB,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAEC;YAClD,MAAMK,cAAcD,aAChBhC,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAMK,cAC5BzC,QAAQkB,MAAM,CAACiB,MAAM,EAAEC;YAC3BtB,SAAS4B,cAAcjC,OAAOS,QAAQiB,OAAOO,eAAgB1C,QAAQkB,QAAQiB,UAAU,CAAC;QAC1F,OAAO;YACLrB,SACEL,OACES,QACAiB,OACA1B,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAM3B,OAAOS,MAAM,CAACiB,MAAM,EAAE,CAACC,KAAK,EAAEC,WAAW;QAG3E;IACF;IAEA,MAAMM,aAAa,CAACR,OAAgBE,WAAmBG;QACrD,IAAIA,OAAO;YACT,MAAMI,SAAS5C,QAAQkB,MAAM,CAACiB,MAAM,EAAEE;YACtCvB,SAAS8B,SAASnC,OAAOS,QAAQiB,OAAOS,UAAW5C,QAAQkB,QAAQiB,UAAU,CAAC;QAChF,OAAO;YACLrB,SAASL,OAAOS,QAAQiB,OAAO1B,OAAOS,MAAM,CAACiB,MAAM,EAAEE,WAAW;QAClE;IACF;IAEA,MAAMQ,eAAe,CAACV,OAAiBC,MAAcU,QAAsBN;QACzE,IAAIA,OAAO;YACT,MAAME,cAAc1C,QAAQkB,MAAM,CAACiB,MAAM,EAAEC;YAC3CtB,SAAS4B,cAAcjC,OAAOS,QAAQiB,OAAOO,eAAgB1C,QAAQkB,QAAQiB,UAAU,CAAC;QAC1F,OAAO;YACL,MAAMM,aAAaK,OAAOC,MAAM,CAC9B,CAACC,KAAKC,OAAU,CAAA;oBAAE,GAAGD,GAAG;oBAAE,CAACC,KAAKZ,SAAS,CAAC,EAAE;gBAAM,CAAA,GAClD,CAAC;YAEHvB,SAASL,OAAOS,QAAQiB,OAAO1B,OAAOS,MAAM,CAACiB,MAAM,EAAEC,MAAMK;QAC7D;IACF;IAEA,MAAMS,aAAa,CAACf,OAAgBW,QAAsBN;QACxD,IAAIA,OAAO;YACT1B,SAASd,QAAQkB,QAAQiB,UAAU,CAAC;QACtC,OAAO;YACL,MAAMS,SAASE,OAAOC,MAAM,CAC1B,CAACC,KAAKC,OAAU,CAAA;oBAAE,GAAGD,GAAG;oBAAE,CAACC,KAAKZ,SAAS,CAAC,EAAE;gBAAM,CAAA,GAClD,CAAC;YAEHvB,SAASL,OAAOS,QAAQiB,OAAOS;QACjC;IACF;IAEA,MAAMO,aAAa,CACjBF,MACAG,IACAC,SACAC,yBAEA,MAACC;YAAGC,WAAW,GAAG1D,UAAU,MAAM,CAAC;;8BACjC,KAACP;oBACC8D,SAASA;oBACTD,IAAIA;oBACJK,OAAOR,KAAKQ,KAAK;oBACjBH,UAAU,CAACI,IAAMJ,SAASI,EAAEC,MAAM,CAACN,OAAO;;gBAE3CJ,KAAKW,WAAW,kBAAI,KAACC;oBAAEL,WAAW,GAAG1D,UAAU,kBAAkB,CAAC;8BAAGmD,KAAKW,WAAW;;;WAP9CX,KAAKZ,SAAS;IAW1D,MAAMyB,aAAa,CAAC,EAClBV,EAAE,EACFW,aAAa,EACbN,KAAK,EACLX,MAAM,EACNkB,QAAQ,EACRC,YAAY,EAQb;QACC,MAAMC,eAAepB,OAAOqB,MAAM,CAACJ,eAAexD,MAAM;QACxD,MAAM6D,SAASrE,gBAAgBsE,GAAG,CAAC,CAACnE,MAAS,CAAA;gBAC3CA;gBACAuD,OAAOtC,eAAe,CAACjB,IAAI;gBAC3B4C,QAAQA,OAAOqB,MAAM,CAAC,CAAClB,OAAS,AAACA,CAAAA,KAAKqB,KAAK,IAAI,QAAO,MAAOpE;YAC/D,CAAA,GAAIiE,MAAM,CAAC,CAACG,QAAUA,MAAMxB,MAAM,CAACvC,MAAM,GAAG;QAC5C,MAAMgE,iBAAiBH,OAAO7D,MAAM,GAAG;QAEvC,qBACE,KAACf;YACCgE,WAAW,GAAG1D,UAAU,MAAM,CAAC;YAC/B0E,QACE,yEAAyE;0BACzE,KAACC;gBACCjB,WAAW,GAAG1D,UAAU,eAAe,CAAC;gBACxC4E,SAAS,CAAChB,IAAMA,EAAEiB,eAAe;gBACjCC,MAAK;0BAEL,cAAA,KAACrF;oBACC8D,SAASa,iBAAiBpB,OAAOvC,MAAM;oBACvC6C,IAAI,GAAGA,GAAG,KAAK,CAAC;oBAChBK,OAAOA;oBACPH,UAAU,IAAMU,SAASE,eAAepB,OAAOvC,MAAM;oBACrDsE,gBAAgBX,eAAe,KAAKA,eAAepB,OAAOvC,MAAM;;;YAItEuE,aAAa;sBAGb,cAAA,KAACC;gBAAIvB,WAAW,GAAG1D,UAAU,aAAa,CAAC;0BACxCsE,OAAOC,GAAG,CAAC,CAACC,sBACX,MAACS;wBAAIvB,WAAW,GAAG1D,UAAU,YAAY,CAAC;;4BACvCyE,gCAAkB,KAACV;gCAAEL,WAAW,GAAG1D,UAAU,kBAAkB,CAAC;0CAAGwE,MAAMb,KAAK;;0CAC/E,KAACuB;gCAAGxB,WAAW,GAAG1D,UAAU,MAAM,CAAC;0CAChCwE,MAAMxB,MAAM,CAACuB,GAAG,CAAC,CAACpB,OACjBE,WAAWF,MAAM,GAAGG,GAAG,CAAC,EAAEH,KAAKZ,SAAS,EAAE,EAAE0B,cAAcd,OAAO,CAACT,QAChEyB,aAAahB,MAAMT;;;uBALsB8B,MAAMpE,GAAG;;WAJzDkD;IAkBX;IAEA,MAAM6B,cAAc,CAAC9C,OAAiB+C,SACpC7E,OAAO8E,OAAO,CAACD,QAAQb,GAAG,CAAC,CAAC,CAACjC,MAAMU,OAAO,GACxCgB,WAAW;gBACTV,IAAI,GAAGxC,KAAK,CAAC,EAAEuB,MAAM,CAAC,EAAEC,MAAM;gBAC9B2B,eAAe,CAACd,OAASf,gBAAgBC,OAAOC,MAAMa,KAAKZ,SAAS;gBACpEoB,OAAO2B,UAAUhD;gBACjBU;gBACAkB,UAAU,CAACxB,QAAUK,aAAaV,OAAOC,MAAMU,QAAQN;gBACvDyB,cAAc,CAAChB,MAAMT,QAAUD,aAAaJ,OAAOC,MAAMa,KAAKZ,SAAS,EAAEG;YAC3E;IAGJ,MAAM6C,aAAa,CAAClD,OAAgBsB,OAAeX,SACjDA,OAAOvC,MAAM,GAAG,KAChBuD,WAAW;YACTV,IAAI,GAAGxC,KAAK,CAAC,EAAEuB,OAAO;YACtB4B,eAAe,CAACd,OAASX,cAAcH,OAAOc,KAAKZ,SAAS;YAC5DoB;YACAX;YACAkB,UAAU,CAACxB,QAAUU,WAAWf,OAAOW,QAAQN;YAC/CyB,cAAc,CAAChB,MAAMT,QAAUG,WAAWR,OAAOc,KAAKZ,SAAS,EAAEG;QACnE;IAEF,MAAM8C,OAA8C;WAC9CjF,OAAOC,IAAI,CAACiB,mBAAmBhB,MAAM,GAAG,IACxC;YAAC;gBAAEL,KAAK;gBAAwBuD,OAAO1C,EAAE;YAAuB;SAAE,GAClE,EAAE;WACFV,OAAOC,IAAI,CAACkB,eAAejB,MAAM,GAAG,IACpC;YAAC;gBAAEL,KAAK;gBAAoBuD,OAAO1C,EAAE;YAAmB;SAAE,GAC1D,EAAE;WACFU,QAAQlB,MAAM,GAAG,KAAKmB,UAAUnB,MAAM,GAAG,KAAKoB,MAAMpB,MAAM,GAAG,IAC7D;YAAC;gBAAEL,KAAK;gBAAmBuD,OAAO1C,EAAE;YAAqB;SAAE,GAC3D,EAAE;KACP;IACD,IAAIuE,KAAK/E,MAAM,KAAK,GAAG;QACrB,OAAO;IACT;IAEA,MAAMgF,aAAavE,aAAasE,IAAI,CAAC,EAAE,CAAEpF,GAAG;IAE5C,qBACE,MAAC6E;QAAIvB,WAAW1D;;0BACd,MAAC0E;gBAAOhB,WAAW,GAAG1D,UAAU,QAAQ,CAAC;;kCACvC,KAAC0F;kCAAIzE,EAAE;;kCACP,KAAC8C;kCAAG9C,EAAE;;;;0BAER,MAACgE;gBAAIvB,WAAW,GAAG1D,UAAU,gBAAgB,CAAC;;kCAC5C,KAACL;wBACC+D,WAAW,GAAG1D,UAAU,MAAM,CAAC;wBAC/B2F,UAAUxE;wBACVqE,MAAMA,KAAKjB,GAAG,CAAC,CAACqB,MAAS,CAAA;gCACvBjC,OAAOiC,IAAIjC,KAAK;gCAChB/C,OAAOgF,IAAIxF,GAAG;4BAChB,CAAA;wBACAQ,OAAO6E;;kCAET,MAACR;wBAAIvB,WAAW,GAAG1D,UAAU,OAAO,CAAC;;4BAClCyF,eAAe,iBAAiBN,YAAY,eAAe1D;4BAC3DgE,eAAe,aAAaN,YAAY,WAAWzD;4BACnD+D,eAAe,0BACd;;oCACGF,WAAW,WAAWtE,EAAE,uBAAuBU;oCAC/C4D,WAAW,aAAatE,EAAE,yBAAyBW;oCACnD2D,WAAW,SAAStE,EAAE,qBAAqBY;;;;;;;;;AAO1D,EAAC;AAED,MAAMyD,YAAY,CAAChD,OACjBA,KAAKuD,OAAO,CAAC,gBAAgB,CAACC,GAAGC,KAAaC,KAC5CD,MAAM,CAAC,CAAC,EAAEC,GAAGC,WAAW,IAAI,GAAGD,GAAGC,WAAW"}

package/dist/components/AccessField/index.css

@@ -0,0 +1,99 @@
+@layer payload-default {
+  .mcp-access-field {
+    display: flex;
+    flex-direction: column;
+    gap: var(--base);
+    /* Breathing room below the API-key section's divider - the fields
+       container itself adds no gap between these two fields. */
+    padding-block-start: var(--spacer-4);
+    /* This custom field renders straight into `render-fields` (no `.field-type`
+       wrapper), so it must carry the standard inter-field margin itself -
+       otherwise the next field (e.g. an overrideApiKeyCollection field) butts
+       against the last card. */
+    margin-block-end: var(--spacer-3);
+  }
+
+  .mcp-access-field__header {
+    display: flex;
+    flex-direction: column;
+  }
+
+  .mcp-access-field__header h4 {
+    margin: 0;
+    color: var(--color-text);
+    font-family: var(--text-heading-small-font-family);
+    font-size: var(--text-heading-small-font-size);
+    font-weight: var(--text-heading-small-font-weight);
+    line-height: var(--text-heading-small-line-height);
+    letter-spacing: var(--text-heading-small-letter-spacing);
+  }
+
+  .mcp-access-field__header p {
+    margin: 0;
+    color: var(--color-text-secondary);
+    font-family: var(--text-body-medium-font-family);
+    font-size: var(--text-body-medium-font-size);
+    font-weight: var(--text-body-medium-font-weight);
+    line-height: var(--text-body-medium-line-height);
+    letter-spacing: var(--text-body-medium-letter-spacing);
+  }
+
+  .mcp-access-field__tabbed-content {
+    display: flex;
+    flex-direction: column;
+  }
+
+  .mcp-access-field__cards {
+    display: flex;
+    flex-direction: column;
+    gap: calc(var(--base) / 2);
+  }
+
+  /* The collapsible header is pointer-events: none so clicks reach the toggle
+     overlay; re-enable events on the checkbox and lift it above the toggle. */
+  .mcp-access-field__card-checkbox {
+    position: relative;
+    z-index: 1;
+    display: inline-flex;
+    pointer-events: auto;
+  }
+
+  .mcp-access-field__leaf-group {
+    padding-block: calc(var(--base) / 2);
+    border-block-end: 1px solid var(--theme-elevation-100);
+  }
+
+  .mcp-access-field__leaf-group:first-child {
+    padding-block-start: 0;
+  }
+
+  .mcp-access-field__leaf-group:last-child {
+    border-block-end: none;
+    padding-block-end: 0;
+  }
+
+  .mcp-access-field__leaf-group-label {
+    margin: 0 0 calc(var(--base) / 2);
+    color: var(--color-text-secondary);
+    font-family: var(--text-body-medium-font-family);
+    font-size: var(--text-body-medium-font-size);
+    line-height: var(--text-body-medium-line-height);
+  }
+
+  .mcp-access-field__list {
+    list-style: none;
+    margin: 0;
+    padding: 0;
+    display: flex;
+    flex-direction: column;
+    gap: calc(var(--base) / 2);
+  }
+
+  .mcp-access-field__leaf-description {
+    margin: calc(var(--base) / 6) 0 0;
+    color: var(--color-text-secondary);
+    font-family: var(--text-body-medium-font-family);
+    font-size: var(--text-body-medium-font-size);
+    line-height: var(--text-body-medium-line-height);
+  }
+}

package/dist/components/SettingsMenu/index.client.d.ts

@@ -0,0 +1,8 @@
+import React from 'react';
+/**
+ * Entry in the user menu's Settings sub-popup linking to the API keys
+ * collection. The collection is excluded from the main nav
+ * (`admin.group: false`) and managed from here instead.
+ */
+export declare const MCPSettingsMenu: React.FC;
+//# sourceMappingURL=index.client.d.ts.map

package/dist/components/SettingsMenu/index.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../../../src/components/SettingsMenu/index.client.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,MAAM,OAAO,CAAA;AAOzB;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,KAAK,CAAC,EAiBnC,CAAA"}

package/dist/components/SettingsMenu/index.client.js

@@ -0,0 +1,29 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { PopupList, useConfig, useTranslation } from '@payloadcms/ui';
+import { formatAdminURL } from 'payload/shared';
+import React from 'react';
+/**
+ * Entry in the user menu's Settings sub-popup linking to the API keys
+ * collection. The collection is excluded from the main nav
+ * (`admin.group: false`) and managed from here instead.
+ */ export const MCPSettingsMenu = ()=>{
+    const { config } = useConfig();
+    const { t } = useTranslation();
+    return /*#__PURE__*/ _jsxs(PopupList.MenuItem, {
+        children: [
+            /*#__PURE__*/ _jsx(PopupList.GroupLabel, {
+                label: t('plugin-mcp:mcp')
+            }),
+            /*#__PURE__*/ _jsx(PopupList.Button, {
+                href: formatAdminURL({
+                    adminRoute: config.routes.admin,
+                    path: '/collections/payload-mcp-api-keys'
+                }),
+                children: t('plugin-mcp:manageAPIKeys')
+            })
+        ]
+    });
+};
+
+//# sourceMappingURL=index.client.js.map

package/dist/components/SettingsMenu/index.client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/components/SettingsMenu/index.client.tsx"],"sourcesContent":["'use client'\n\nimport { PopupList, useConfig, useTranslation } from '@payloadcms/ui'\nimport { formatAdminURL } from 'payload/shared'\nimport React from 'react'\n\nimport type {\n  PluginMCPTranslationKeys,\n  PluginMCPTranslations,\n} from '../../translations/index.js'\n\n/**\n * Entry in the user menu's Settings sub-popup linking to the API keys\n * collection. The collection is excluded from the main nav\n * (`admin.group: false`) and managed from here instead.\n */\nexport const MCPSettingsMenu: React.FC = () => {\n  const { config } = useConfig()\n  const { t } = useTranslation<PluginMCPTranslations, PluginMCPTranslationKeys>()\n\n  return (\n    <PopupList.MenuItem>\n      <PopupList.GroupLabel label={t('plugin-mcp:mcp')} />\n      <PopupList.Button\n        href={formatAdminURL({\n          adminRoute: config.routes.admin,\n          path: '/collections/payload-mcp-api-keys',\n        })}\n      >\n        {t('plugin-mcp:manageAPIKeys')}\n      </PopupList.Button>\n    </PopupList.MenuItem>\n  )\n}\n"],"names":["PopupList","useConfig","useTranslation","formatAdminURL","React","MCPSettingsMenu","config","t","MenuItem","GroupLabel","label","Button","href","adminRoute","routes","admin","path"],"mappings":"AAAA;;AAEA,SAASA,SAAS,EAAEC,SAAS,EAAEC,cAAc,QAAQ,iBAAgB;AACrE,SAASC,cAAc,QAAQ,iBAAgB;AAC/C,OAAOC,WAAW,QAAO;AAOzB;;;;CAIC,GACD,OAAO,MAAMC,kBAA4B;IACvC,MAAM,EAAEC,MAAM,EAAE,GAAGL;IACnB,MAAM,EAAEM,CAAC,EAAE,GAAGL;IAEd,qBACE,MAACF,UAAUQ,QAAQ;;0BACjB,KAACR,UAAUS,UAAU;gBAACC,OAAOH,EAAE;;0BAC/B,KAACP,UAAUW,MAAM;gBACfC,MAAMT,eAAe;oBACnBU,YAAYP,OAAOQ,MAAM,CAACC,KAAK;oBAC/BC,MAAM;gBACR;0BAECT,EAAE;;;;AAIX,EAAC"}

package/dist/defineTool.d.ts

@@ -0,0 +1,26 @@
+import type { CollectionTool, GlobalTool, Prompt, Tool, ToolInputSchema } from './types.js';
+/**
+ * Two-stage builder: pass the schema/metadata first, then chain `.handler(fn)`. Splitting the
+ * call lets TypeScript resolve `TSchema` from `input` (call 1) before contextually typing the
+ * handler (call 2). A single-call API hit a TS limitation where property order in the literal
+ * decided whether `TSchema` was inferred or pinned to its default.
+ *
+ *     defineCollectionTool({ description, input })
+ *       .handler(({ input }) => …)   // ← input is fully typed here regardless of order
+ *
+ * Config and handler signatures are derived from `Tool` / `CollectionTool` / `GlobalTool` /
+ * `Prompt` via `Omit` + indexed access so there's no duplication with `types.ts`.
+ */
+export declare const defineTool: <TSchema extends ToolInputSchema | undefined = ToolInputSchema | undefined>(args: Omit<Tool<TSchema>, "handler">) => {
+    handler: (fn: Tool<TSchema>["handler"]) => Tool;
+};
+export declare const defineCollectionTool: <TSchema extends ToolInputSchema | undefined = ToolInputSchema | undefined>(args: Omit<CollectionTool<TSchema>, "handler">) => {
+    handler: (fn: CollectionTool<TSchema>["handler"]) => CollectionTool;
+};
+export declare const defineGlobalTool: <TSchema extends ToolInputSchema | undefined = ToolInputSchema | undefined>(args: Omit<GlobalTool<TSchema>, "handler">) => {
+    handler: (fn: GlobalTool<TSchema>["handler"]) => GlobalTool;
+};
+export declare const definePrompt: <TSchema extends ToolInputSchema = ToolInputSchema>(args: Omit<Prompt<TSchema>, "handler">) => {
+    handler: (fn: Prompt<TSchema>["handler"]) => Prompt;
+};
+//# sourceMappingURL=defineTool.d.ts.map

package/dist/defineTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defineTool.d.ts","sourceRoot":"","sources":["../src/defineTool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE3F;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,UAAU,GACrB,OAAO,SAAS,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,EAEzE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,KACnC;IAAE,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAA;CAElD,CAAA;AAEF,eAAO,MAAM,oBAAoB,GAC/B,OAAO,SAAS,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,EAEzE,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,KAC7C;IAAE,OAAO,EAAE,CAAC,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,cAAc,CAAA;CAEtE,CAAA;AAEF,eAAO,MAAM,gBAAgB,GAC3B,OAAO,SAAS,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,EAEzE,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,KACzC;IAAE,OAAO,EAAE,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,UAAU,CAAA;CAE9D,CAAA;AAEF,eAAO,MAAM,YAAY,GAAI,OAAO,SAAS,eAAe,GAAG,eAAe,EAC5E,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,KACrC;IAAE,OAAO,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM,CAAA;CAEtD,CAAA"}

package/dist/defineTool.js

@@ -0,0 +1,37 @@
+/**
+ * Two-stage builder: pass the schema/metadata first, then chain `.handler(fn)`. Splitting the
+ * call lets TypeScript resolve `TSchema` from `input` (call 1) before contextually typing the
+ * handler (call 2). A single-call API hit a TS limitation where property order in the literal
+ * decided whether `TSchema` was inferred or pinned to its default.
+ *
+ *     defineCollectionTool({ description, input })
+ *       .handler(({ input }) => …)   // ← input is fully typed here regardless of order
+ *
+ * Config and handler signatures are derived from `Tool` / `CollectionTool` / `GlobalTool` /
+ * `Prompt` via `Omit` + indexed access so there's no duplication with `types.ts`.
+ */ export const defineTool = (args)=>({
+        handler: (fn)=>({
+                ...args,
+                handler: fn
+            })
+    });
+export const defineCollectionTool = (args)=>({
+        handler: (fn)=>({
+                ...args,
+                handler: fn
+            })
+    });
+export const defineGlobalTool = (args)=>({
+        handler: (fn)=>({
+                ...args,
+                handler: fn
+            })
+    });
+export const definePrompt = (args)=>({
+        handler: (fn)=>({
+                ...args,
+                handler: fn
+            })
+    });
+
+//# sourceMappingURL=defineTool.js.map

package/dist/defineTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/defineTool.ts"],"sourcesContent":["import type { CollectionTool, GlobalTool, Prompt, Tool, ToolInputSchema } from './types.js'\n\n/**\n * Two-stage builder: pass the schema/metadata first, then chain `.handler(fn)`. Splitting the\n * call lets TypeScript resolve `TSchema` from `input` (call 1) before contextually typing the\n * handler (call 2). A single-call API hit a TS limitation where property order in the literal\n * decided whether `TSchema` was inferred or pinned to its default.\n *\n *     defineCollectionTool({ description, input })\n *       .handler(({ input }) => …)   // ← input is fully typed here regardless of order\n *\n * Config and handler signatures are derived from `Tool` / `CollectionTool` / `GlobalTool` /\n * `Prompt` via `Omit` + indexed access so there's no duplication with `types.ts`.\n */\n\nexport const defineTool = <\n  TSchema extends ToolInputSchema | undefined = ToolInputSchema | undefined,\n>(\n  args: Omit<Tool<TSchema>, 'handler'>,\n): { handler: (fn: Tool<TSchema>['handler']) => Tool } => ({\n  handler: (fn) => ({ ...args, handler: fn }) as unknown as Tool,\n})\n\nexport const defineCollectionTool = <\n  TSchema extends ToolInputSchema | undefined = ToolInputSchema | undefined,\n>(\n  args: Omit<CollectionTool<TSchema>, 'handler'>,\n): { handler: (fn: CollectionTool<TSchema>['handler']) => CollectionTool } => ({\n  handler: (fn) => ({ ...args, handler: fn }) as unknown as CollectionTool,\n})\n\nexport const defineGlobalTool = <\n  TSchema extends ToolInputSchema | undefined = ToolInputSchema | undefined,\n>(\n  args: Omit<GlobalTool<TSchema>, 'handler'>,\n): { handler: (fn: GlobalTool<TSchema>['handler']) => GlobalTool } => ({\n  handler: (fn) => ({ ...args, handler: fn }) as unknown as GlobalTool,\n})\n\nexport const definePrompt = <TSchema extends ToolInputSchema = ToolInputSchema>(\n  args: Omit<Prompt<TSchema>, 'handler'>,\n): { handler: (fn: Prompt<TSchema>['handler']) => Prompt } => ({\n  handler: (fn) => ({ ...args, handler: fn }) as unknown as Prompt,\n})\n"],"names":["defineTool","args","handler","fn","defineCollectionTool","defineGlobalTool","definePrompt"],"mappings":"AAEA;;;;;;;;;;;CAWC,GAED,OAAO,MAAMA,aAAa,CAGxBC,OACyD,CAAA;QACzDC,SAAS,CAACC,KAAQ,CAAA;gBAAE,GAAGF,IAAI;gBAAEC,SAASC;YAAG,CAAA;IAC3C,CAAA,EAAE;AAEF,OAAO,MAAMC,uBAAuB,CAGlCH,OAC6E,CAAA;QAC7EC,SAAS,CAACC,KAAQ,CAAA;gBAAE,GAAGF,IAAI;gBAAEC,SAASC;YAAG,CAAA;IAC3C,CAAA,EAAE;AAEF,OAAO,MAAME,mBAAmB,CAG9BJ,OACqE,CAAA;QACrEC,SAAS,CAACC,KAAQ,CAAA;gBAAE,GAAGF,IAAI;gBAAEC,SAASC;YAAG,CAAA;IAC3C,CAAA,EAAE;AAEF,OAAO,MAAMG,eAAe,CAC1BL,OAC6D,CAAA;QAC7DC,SAAS,CAACC,KAAQ,CAAA;gBAAE,GAAGF,IAAI;gBAAEC,SAASC;YAAG,CAAA;IAC3C,CAAA,EAAE"}

package/dist/endpoint/access.d.ts

@@ -0,0 +1,10 @@
+import type { PayloadRequest } from 'payload';
+import type { AuthorizedMCP } from '../types.js';
+/**
+ * Resolves the API key (or dev-mode session) and returns the items the caller
+ * may use. Denied items are dropped from the array.
+ */
+export declare const getAuthorizedMCP: (args: {
+    req: PayloadRequest;
+}) => Promise<AuthorizedMCP>;
+//# sourceMappingURL=access.d.ts.map

package/dist/endpoint/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../src/endpoint/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAyB,cAAc,EAAa,MAAM,SAAS,CAAA;AAK/E,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAA;AAK/D;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,cAAc,CAAA;CAAE,KAAK,OAAO,CAAC,aAAa,CAiDtF,CAAA"}

package/dist/endpoint/access.js

@@ -0,0 +1,122 @@
+import crypto from 'crypto';
+import { UnauthorizedError } from 'payload';
+import { getLogger } from '../utils/getLogger.js';
+import { getPluginConfig } from '../utils/getPluginConfig.js';
+/**
+ * Resolves the API key (or dev-mode session) and returns the items the caller
+ * may use. Denied items are dropped from the array.
+ */ export const getAuthorizedMCP = async ({ req })=>{
+    const logger = getLogger({
+        payload: req.payload
+    });
+    const pluginConfig = getPluginConfig({
+        config: req.payload.config
+    });
+    const authHeader = req.headers.get('Authorization');
+    const hasBearerToken = authHeader?.startsWith('Bearer ');
+    const buildAuthorized = (apiKeyDoc)=>({
+            items: pluginConfig.items.filter((item)=>{
+                switch(item.type){
+                    case 'collectionTool':
+                        return apiKeyDoc.access.collections?.[item.collectionSlug]?.[item.configKey] !== false;
+                    case 'globalTool':
+                        return apiKeyDoc.access.globals?.[item.globalSlug]?.[item.configKey] !== false;
+                    case 'prompt':
+                        return apiKeyDoc.access.prompts?.[item.configKey] !== false;
+                    case 'resource':
+                        return apiKeyDoc.access.resources?.[item.configKey] !== false;
+                    case 'tool':
+                        return apiKeyDoc.access.tools?.[item.configKey] !== false;
+                }
+            }),
+            overrideAccess: typeof apiKeyDoc.overrideAccess === 'boolean' ? apiKeyDoc.overrideAccess : false,
+            user: apiKeyDoc.user
+        });
+    if (pluginConfig.overrideAuth) {
+        return await pluginConfig.overrideAuth({
+            getAPIKeyDoc: (overrideApiKey)=>getAPIKeyDoc({
+                    logger,
+                    overrideApiKey,
+                    pluginConfig,
+                    req
+                }),
+            getAuthorizedMCP: ({ apiKeyDoc })=>buildAuthorized(apiKeyDoc),
+            pluginConfig,
+            req
+        });
+    }
+    if (process.env.NODE_ENV === 'development' && !hasBearerToken) {
+        logger.info('Dev mode: skipping API key check, using session user');
+        return buildAuthorized({
+            id: -1,
+            access: {},
+            overrideAccess: true,
+            user: req.user ?? null
+        });
+    }
+    return buildAuthorized(await getAPIKeyDoc({
+        logger,
+        pluginConfig,
+        req
+    }));
+};
+const getAPIKeyDoc = async ({ logger, overrideApiKey, pluginConfig, req })=>{
+    const authHeader = req.headers.get('Authorization');
+    const hasBearerToken = authHeader?.startsWith('Bearer ');
+    const apiKey = overrideApiKey ?? (hasBearerToken ? authHeader?.replace('Bearer ', '').trim() || null : null);
+    if (!apiKey) {
+        throw new UnauthorizedError();
+    }
+    const sha256APIKeyIndex = crypto.createHmac('sha256', req.payload.secret).update(apiKey).digest('hex');
+    const doc = await req.payload.db.findOne({
+        collection: 'payload-mcp-api-keys',
+        req,
+        where: {
+            apiKeyIndex: {
+                equals: sha256APIKeyIndex
+            }
+        }
+    });
+    if (!doc || !doc.user) {
+        throw new UnauthorizedError();
+    }
+    logger.info('API Key is valid');
+    const userRef = doc.user;
+    const userID = typeof userRef === 'object' && userRef !== null && 'id' in userRef ? userRef.id : userRef;
+    const user = await req.payload.findByID({
+        id: userID,
+        collection: pluginConfig.userCollection,
+        depth: 0,
+        disableErrors: true,
+        req
+    });
+    if (!user) {
+        throw new UnauthorizedError();
+    }
+    try {
+        await req.payload.db.updateOne({
+            id: doc.id,
+            collection: 'payload-mcp-api-keys',
+            data: {
+                lastUsed: new Date().toISOString()
+            },
+            req,
+            returning: false
+        });
+    } catch (err) {
+        logger.warn({
+            err,
+            msg: 'Failed to update MCP API key last-used timestamp'
+        });
+    }
+    return {
+        ...doc,
+        user: {
+            ...user,
+            _strategy: 'mcp-api-key',
+            collection: pluginConfig.userCollection
+        }
+    };
+};
+
+//# sourceMappingURL=access.js.map