@payloadcms/plugin-mcp 4.0.0-internal.8867dba → 4.0.0-internal.8ba6b5b

package/dist/mcp/builtin/collections/fileInput.js

@@ -1,117 +0,0 @@
-import { APIError } from 'payload';
-import { getExternalFile, getFileFromUploadInstructions, isURLAllowed } from 'payload/internal';
-import { sanitizeFilename } from 'payload/shared';
-import { z } from 'zod';
-const mimeTypeSchema = z.string().regex(/^[!#$%&'*+.^`|~\w-]+\/[!#$%&'*+.^`|~\w-]+$/, 'MIME type must use the type/subtype format');
-const uploadFileSchema = z.object({
-    filename: z.string(),
-    mimeType: z.string(),
-    size: z.number().int().nonnegative(),
-    uploadReference: z.record(z.string(), z.unknown())
-});
-export const fileInputSchema = z.discriminatedUnion('source', [
-    z.object({
-        name: z.string().min(1).describe('The file name, including its extension'),
-        data: z.string().describe('The base64-encoded file bytes, without a data URL prefix'),
-        mimeType: mimeTypeSchema.describe('The file MIME type, for example image/png'),
-        source: z.literal('base64')
-    }),
-    z.object({
-        name: z.string().min(1).describe('Optional file name override').optional(),
-        source: z.literal('externalURL'),
-        url: z.url().describe('The http or https URL to download')
-    }),
-    z.object({
-        file: uploadFileSchema.describe('The file value returned by getUploadInstructions'),
-        source: z.literal('uploadReference')
-    })
-]).describe('A file for an upload collection. Use externalURL for an online file, base64 for local file bytes, or uploadReference after following getUploadInstructions. Usage of getUploadInstructions and uploadReference is recommended.');
-export async function resolveFile({ collectionSlug, input, req }) {
-    if (!input) {
-        return undefined;
-    }
-    if (input.source === 'uploadReference') {
-        return getFileFromUploadInstructions({
-            collectionSlug,
-            file: input.file,
-            req
-        });
-    }
-    const uploadConfig = req.payload.collections[collectionSlug]?.config.upload;
-    if (!uploadConfig) {
-        throw new APIError(`Collection "${collectionSlug}" does not support file uploads.`, 400);
-    }
-    const maxFileSize = req.payload.config.upload.limits?.fileSize;
-    let file;
-    if (input.source === 'base64') {
-        const data = decodeBase64({
-            maxFileSize,
-            value: input.data
-        });
-        file = {
-            name: sanitizeFilename(input.name),
-            data,
-            mimetype: input.mimeType,
-            size: data.length
-        };
-    } else {
-        if (uploadConfig.pasteURL === false) {
-            throw new APIError(`Uploading files from URLs is disabled for collection "${collectionSlug}".`, 400);
-        }
-        const url = new URL(input.url);
-        if (![
-            'http:',
-            'https:'
-        ].includes(url.protocol)) {
-            throw new APIError('File URLs must use http or https.', 400);
-        }
-        if (typeof uploadConfig.pasteURL === 'object' && !isURLAllowed(input.url, uploadConfig.pasteURL.allowList)) {
-            throw new APIError('The provided file URL is not allowed.', 400);
-        }
-        file = await getExternalFile({
-            data: {
-                filename: sanitizeFilename(input.name || getURLFilename(url)),
-                url: input.url
-            },
-            req,
-            uploadConfig: {
-                ...uploadConfig,
-                externalFileHeaderFilter: uploadConfig.externalFileHeaderFilter ?? (()=>({}))
-            }
-        });
-        file.mimetype = file.mimetype?.split(';')[0] || 'application/octet-stream';
-        file.size = file.data.length;
-    }
-    if (maxFileSize !== undefined && Number.isFinite(maxFileSize) && file.size > maxFileSize) {
-        throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400);
-    }
-    return file;
-}
-function decodeBase64({ maxFileSize, value }) {
-    const normalized = value.replace(/\s/g, '');
-    if (!/^[a-z0-9+/]*={0,2}$/i.test(normalized) || normalized.length % 4 === 1) {
-        throw new APIError('File data must be valid base64.', 400);
-    }
-    if (maxFileSize !== undefined && Number.isFinite(maxFileSize)) {
-        const paddingLength = normalized.endsWith('==') ? 2 : normalized.endsWith('=') ? 1 : 0;
-        const decodedSize = Math.floor(normalized.length * 3 / 4) - paddingLength;
-        if (decodedSize > maxFileSize) {
-            throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400);
-        }
-    }
-    const data = Buffer.from(normalized, 'base64');
-    if (data.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {
-        throw new APIError('File data must be valid base64.', 400);
-    }
-    return data;
-}
-function getURLFilename(url) {
-    const pathSegment = url.pathname.split('/').pop() || 'upload';
-    try {
-        return decodeURIComponent(pathSegment);
-    } catch  {
-        return pathSegment;
-    }
-}
-
-//# sourceMappingURL=fileInput.js.map

package/dist/mcp/builtin/collections/fileInput.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/fileInput.ts"],"sourcesContent":["import type { CollectionSlug, File, FileData, PayloadRequest } from 'payload'\n\nimport { APIError } from 'payload'\nimport { getExternalFile, getFileFromUploadInstructions, isURLAllowed } from 'payload/internal'\nimport { sanitizeFilename } from 'payload/shared'\nimport { z } from 'zod'\n\nconst mimeTypeSchema = z\n  .string()\n  .regex(/^[!#$%&'*+.^`|~\\w-]+\\/[!#$%&'*+.^`|~\\w-]+$/, 'MIME type must use the type/subtype format')\n\nconst uploadFileSchema = z.object({\n  filename: z.string(),\n  mimeType: z.string(),\n  size: z.number().int().nonnegative(),\n  uploadReference: z.record(z.string(), z.unknown()),\n})\n\nexport const fileInputSchema = z\n  .discriminatedUnion('source', [\n    z.object({\n      name: z.string().min(1).describe('The file name, including its extension'),\n      data: z.string().describe('The base64-encoded file bytes, without a data URL prefix'),\n      mimeType: mimeTypeSchema.describe('The file MIME type, for example image/png'),\n      source: z.literal('base64'),\n    }),\n    z.object({\n      name: z.string().min(1).describe('Optional file name override').optional(),\n      source: z.literal('externalURL'),\n      url: z.url().describe('The http or https URL to download'),\n    }),\n    z.object({\n      file: uploadFileSchema.describe('The file value returned by getUploadInstructions'),\n      source: z.literal('uploadReference'),\n    }),\n  ])\n  .describe(\n    'A file for an upload collection. Use externalURL for an online file, base64 for local file bytes, or uploadReference after following getUploadInstructions. Usage of getUploadInstructions and uploadReference is recommended.',\n  )\n\ntype FileInput = z.infer<typeof fileInputSchema>\n\nexport async function resolveFile({\n  collectionSlug,\n  input,\n  req,\n}: {\n  collectionSlug: CollectionSlug\n  input?: FileInput\n  req: PayloadRequest\n}): Promise<File | undefined> {\n  if (!input) {\n    return undefined\n  }\n\n  if (input.source === 'uploadReference') {\n    return getFileFromUploadInstructions({ collectionSlug, file: input.file, req })\n  }\n\n  const uploadConfig = req.payload.collections[collectionSlug]?.config.upload\n\n  if (!uploadConfig) {\n    throw new APIError(`Collection \"${collectionSlug}\" does not support file uploads.`, 400)\n  }\n\n  const maxFileSize = req.payload.config.upload.limits?.fileSize\n  let file: File\n\n  if (input.source === 'base64') {\n    const data = decodeBase64({ maxFileSize, value: input.data })\n\n    file = {\n      name: sanitizeFilename(input.name),\n      data,\n      mimetype: input.mimeType,\n      size: data.length,\n    }\n  } else {\n    if (uploadConfig.pasteURL === false) {\n      throw new APIError(\n        `Uploading files from URLs is disabled for collection \"${collectionSlug}\".`,\n        400,\n      )\n    }\n\n    const url = new URL(input.url)\n\n    if (!['http:', 'https:'].includes(url.protocol)) {\n      throw new APIError('File URLs must use http or https.', 400)\n    }\n\n    if (\n      typeof uploadConfig.pasteURL === 'object' &&\n      !isURLAllowed(input.url, uploadConfig.pasteURL.allowList)\n    ) {\n      throw new APIError('The provided file URL is not allowed.', 400)\n    }\n\n    file = await getExternalFile({\n      data: {\n        filename: sanitizeFilename(input.name || getURLFilename(url)),\n        url: input.url,\n      } as FileData,\n      req,\n      uploadConfig: {\n        ...uploadConfig,\n        externalFileHeaderFilter: uploadConfig.externalFileHeaderFilter ?? (() => ({})),\n      },\n    })\n    file.mimetype = file.mimetype?.split(';')[0] || 'application/octet-stream'\n    file.size = file.data.length\n  }\n\n  if (maxFileSize !== undefined && Number.isFinite(maxFileSize) && file.size > maxFileSize) {\n    throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)\n  }\n\n  return file\n}\n\nfunction decodeBase64({ maxFileSize, value }: { maxFileSize?: number; value: string }): Buffer {\n  const normalized = value.replace(/\\s/g, '')\n\n  if (!/^[a-z0-9+/]*={0,2}$/i.test(normalized) || normalized.length % 4 === 1) {\n    throw new APIError('File data must be valid base64.', 400)\n  }\n\n  if (maxFileSize !== undefined && Number.isFinite(maxFileSize)) {\n    const paddingLength = normalized.endsWith('==') ? 2 : normalized.endsWith('=') ? 1 : 0\n    const decodedSize = Math.floor((normalized.length * 3) / 4) - paddingLength\n\n    if (decodedSize > maxFileSize) {\n      throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)\n    }\n  }\n\n  const data = Buffer.from(normalized, 'base64')\n\n  if (data.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {\n    throw new APIError('File data must be valid base64.', 400)\n  }\n\n  return data\n}\n\nfunction getURLFilename(url: URL): string {\n  const pathSegment = url.pathname.split('/').pop() || 'upload'\n\n  try {\n    return decodeURIComponent(pathSegment)\n  } catch {\n    return pathSegment\n  }\n}\n"],"names":["APIError","getExternalFile","getFileFromUploadInstructions","isURLAllowed","sanitizeFilename","z","mimeTypeSchema","string","regex","uploadFileSchema","object","filename","mimeType","size","number","int","nonnegative","uploadReference","record","unknown","fileInputSchema","discriminatedUnion","name","min","describe","data","source","literal","optional","url","file","resolveFile","collectionSlug","input","req","undefined","uploadConfig","payload","collections","config","upload","maxFileSize","limits","fileSize","decodeBase64","value","mimetype","length","pasteURL","URL","includes","protocol","allowList","getURLFilename","externalFileHeaderFilter","split","Number","isFinite","normalized","replace","test","paddingLength","endsWith","decodedSize","Math","floor","Buffer","from","toString","pathSegment","pathname","pop","decodeURIComponent"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,SAASC,eAAe,EAAEC,6BAA6B,EAAEC,YAAY,QAAQ,mBAAkB;AAC/F,SAASC,gBAAgB,QAAQ,iBAAgB;AACjD,SAASC,CAAC,QAAQ,MAAK;AAEvB,MAAMC,iBAAiBD,EACpBE,MAAM,GACNC,KAAK,CAAC,8CAA8C;AAEvD,MAAMC,mBAAmBJ,EAAEK,MAAM,CAAC;IAChCC,UAAUN,EAAEE,MAAM;IAClBK,UAAUP,EAAEE,MAAM;IAClBM,MAAMR,EAAES,MAAM,GAAGC,GAAG,GAAGC,WAAW;IAClCC,iBAAiBZ,EAAEa,MAAM,CAACb,EAAEE,MAAM,IAAIF,EAAEc,OAAO;AACjD;AAEA,OAAO,MAAMC,kBAAkBf,EAC5BgB,kBAAkB,CAAC,UAAU;IAC5BhB,EAAEK,MAAM,CAAC;QACPY,MAAMjB,EAAEE,MAAM,GAAGgB,GAAG,CAAC,GAAGC,QAAQ,CAAC;QACjCC,MAAMpB,EAAEE,MAAM,GAAGiB,QAAQ,CAAC;QAC1BZ,UAAUN,eAAekB,QAAQ,CAAC;QAClCE,QAAQrB,EAAEsB,OAAO,CAAC;IACpB;IACAtB,EAAEK,MAAM,CAAC;QACPY,MAAMjB,EAAEE,MAAM,GAAGgB,GAAG,CAAC,GAAGC,QAAQ,CAAC,+BAA+BI,QAAQ;QACxEF,QAAQrB,EAAEsB,OAAO,CAAC;QAClBE,KAAKxB,EAAEwB,GAAG,GAAGL,QAAQ,CAAC;IACxB;IACAnB,EAAEK,MAAM,CAAC;QACPoB,MAAMrB,iBAAiBe,QAAQ,CAAC;QAChCE,QAAQrB,EAAEsB,OAAO,CAAC;IACpB;CACD,EACAH,QAAQ,CACP,kOACD;AAIH,OAAO,eAAeO,YAAY,EAChCC,cAAc,EACdC,KAAK,EACLC,GAAG,EAKJ;IACC,IAAI,CAACD,OAAO;QACV,OAAOE;IACT;IAEA,IAAIF,MAAMP,MAAM,KAAK,mBAAmB;QACtC,OAAOxB,8BAA8B;YAAE8B;YAAgBF,MAAMG,MAAMH,IAAI;YAAEI;QAAI;IAC/E;IAEA,MAAME,eAAeF,IAAIG,OAAO,CAACC,WAAW,CAACN,eAAe,EAAEO,OAAOC;IAErE,IAAI,CAACJ,cAAc;QACjB,MAAM,IAAIpC,SAAS,CAAC,YAAY,EAAEgC,eAAe,gCAAgC,CAAC,EAAE;IACtF;IAEA,MAAMS,cAAcP,IAAIG,OAAO,CAACE,MAAM,CAACC,MAAM,CAACE,MAAM,EAAEC;IACtD,IAAIb;IAEJ,IAAIG,MAAMP,MAAM,KAAK,UAAU;QAC7B,MAAMD,OAAOmB,aAAa;YAAEH;YAAaI,OAAOZ,MAAMR,IAAI;QAAC;QAE3DK,OAAO;YACLR,MAAMlB,iBAAiB6B,MAAMX,IAAI;YACjCG;YACAqB,UAAUb,MAAMrB,QAAQ;YACxBC,MAAMY,KAAKsB,MAAM;QACnB;IACF,OAAO;QACL,IAAIX,aAAaY,QAAQ,KAAK,OAAO;YACnC,MAAM,IAAIhD,SACR,CAAC,sDAAsD,EAAEgC,eAAe,EAAE,CAAC,EAC3E;QAEJ;QAEA,MAAMH,MAAM,IAAIoB,IAAIhB,MAAMJ,GAAG;QAE7B,IAAI,CAAC;YAAC;YAAS;SAAS,CAACqB,QAAQ,CAACrB,IAAIsB,QAAQ,GAAG;YAC/C,MAAM,IAAInD,SAAS,qCAAqC;QAC1D;QAEA,IACE,OAAOoC,aAAaY,QAAQ,KAAK,YACjC,CAAC7C,aAAa8B,MAAMJ,GAAG,EAAEO,aAAaY,QAAQ,CAACI,SAAS,GACxD;YACA,MAAM,IAAIpD,SAAS,yCAAyC;QAC9D;QAEA8B,OAAO,MAAM7B,gBAAgB;YAC3BwB,MAAM;gBACJd,UAAUP,iBAAiB6B,MAAMX,IAAI,IAAI+B,eAAexB;gBACxDA,KAAKI,MAAMJ,GAAG;YAChB;YACAK;YACAE,cAAc;gBACZ,GAAGA,YAAY;gBACfkB,0BAA0BlB,aAAakB,wBAAwB,IAAK,CAAA,IAAO,CAAA,CAAC,CAAA,CAAC;YAC/E;QACF;QACAxB,KAAKgB,QAAQ,GAAGhB,KAAKgB,QAAQ,EAAES,MAAM,IAAI,CAAC,EAAE,IAAI;QAChDzB,KAAKjB,IAAI,GAAGiB,KAAKL,IAAI,CAACsB,MAAM;IAC9B;IAEA,IAAIN,gBAAgBN,aAAaqB,OAAOC,QAAQ,CAAChB,gBAAgBX,KAAKjB,IAAI,GAAG4B,aAAa;QACxF,MAAM,IAAIzC,SAAS,CAAC,iBAAiB,EAAEyC,YAAY,mBAAmB,CAAC,EAAE;IAC3E;IAEA,OAAOX;AACT;AAEA,SAASc,aAAa,EAAEH,WAAW,EAAEI,KAAK,EAA2C;IACnF,MAAMa,aAAab,MAAMc,OAAO,CAAC,OAAO;IAExC,IAAI,CAAC,uBAAuBC,IAAI,CAACF,eAAeA,WAAWX,MAAM,GAAG,MAAM,GAAG;QAC3E,MAAM,IAAI/C,SAAS,mCAAmC;IACxD;IAEA,IAAIyC,gBAAgBN,aAAaqB,OAAOC,QAAQ,CAAChB,cAAc;QAC7D,MAAMoB,gBAAgBH,WAAWI,QAAQ,CAAC,QAAQ,IAAIJ,WAAWI,QAAQ,CAAC,OAAO,IAAI;QACrF,MAAMC,cAAcC,KAAKC,KAAK,CAAC,AAACP,WAAWX,MAAM,GAAG,IAAK,KAAKc;QAE9D,IAAIE,cAActB,aAAa;YAC7B,MAAM,IAAIzC,SAAS,CAAC,iBAAiB,EAAEyC,YAAY,mBAAmB,CAAC,EAAE;QAC3E;IACF;IAEA,MAAMhB,OAAOyC,OAAOC,IAAI,CAACT,YAAY;IAErC,IAAIjC,KAAK2C,QAAQ,CAAC,UAAUT,OAAO,CAAC,OAAO,QAAQD,WAAWC,OAAO,CAAC,OAAO,KAAK;QAChF,MAAM,IAAI3D,SAAS,mCAAmC;IACxD;IAEA,OAAOyB;AACT;AAEA,SAAS4B,eAAexB,GAAQ;IAC9B,MAAMwC,cAAcxC,IAAIyC,QAAQ,CAACf,KAAK,CAAC,KAAKgB,GAAG,MAAM;IAErD,IAAI;QACF,OAAOC,mBAAmBH;IAC5B,EAAE,OAAM;QACN,OAAOA;IACT;AACF"}

package/dist/mcp/builtin/collections/fileInput.spec.js

@@ -1,86 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { fileInputSchema, resolveFile } from './fileInput.js';
-describe('MCP file input', ()=>{
-    it('should reject malformed MIME types', ()=>{
-        const result = fileInputSchema.safeParse({
-            data: 'aGVsbG8=',
-            mimeType: 'text/plain\r\nx-test: value',
-            name: 'hello.txt',
-            source: 'base64'
-        });
-        expect(result.success).toBe(false);
-    });
-    it('should accept a prepared upload', ()=>{
-        const result = fileInputSchema.safeParse({
-            file: {
-                filename: 'image.png',
-                mimeType: 'image/png',
-                size: 123,
-                uploadReference: {
-                    uploadId: 'upload-id'
-                }
-            },
-            source: 'uploadReference'
-        });
-        expect(result.success).toBe(true);
-    });
-    it('should reject oversized base64 files', async ()=>{
-        const req = createRequest({
-            maxFileSize: 4
-        });
-        await expect(resolveFile({
-            collectionSlug: 'media',
-            input: {
-                data: Buffer.from('hello').toString('base64'),
-                mimeType: 'text/plain',
-                name: 'hello.txt',
-                source: 'base64'
-            },
-            req
-        })).rejects.toThrow('File exceeds the 4 byte upload limit.');
-    });
-    it('should reject URLs outside the collection allowlist', async ()=>{
-        const req = createRequest({
-            allowList: [
-                {
-                    hostname: 'assets.example.com',
-                    protocol: 'https'
-                }
-            ]
-        });
-        await expect(resolveFile({
-            collectionSlug: 'media',
-            input: {
-                source: 'externalURL',
-                url: 'https://example.com/image.png'
-            },
-            req
-        })).rejects.toThrow('The provided file URL is not allowed.');
-    });
-});
-function createRequest({ allowList, maxFileSize }) {
-    return {
-        payload: {
-            collections: {
-                media: {
-                    config: {
-                        upload: allowList ? {
-                            pasteURL: {
-                                allowList
-                            }
-                        } : {}
-                    }
-                }
-            },
-            config: {
-                upload: {
-                    limits: {
-                        fileSize: maxFileSize
-                    }
-                }
-            }
-        }
-    };
-}
-
-//# sourceMappingURL=fileInput.spec.js.map

package/dist/mcp/builtin/collections/fileInput.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/fileInput.spec.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { fileInputSchema, resolveFile } from './fileInput.js'\n\ndescribe('MCP file input', () => {\n  it('should reject malformed MIME types', () => {\n    const result = fileInputSchema.safeParse({\n      data: 'aGVsbG8=',\n      mimeType: 'text/plain\\r\\nx-test: value',\n      name: 'hello.txt',\n      source: 'base64',\n    })\n\n    expect(result.success).toBe(false)\n  })\n\n  it('should accept a prepared upload', () => {\n    const result = fileInputSchema.safeParse({\n      file: {\n        filename: 'image.png',\n        mimeType: 'image/png',\n        size: 123,\n        uploadReference: { uploadId: 'upload-id' },\n      },\n      source: 'uploadReference',\n    })\n\n    expect(result.success).toBe(true)\n  })\n\n  it('should reject oversized base64 files', async () => {\n    const req = createRequest({ maxFileSize: 4 })\n\n    await expect(\n      resolveFile({\n        collectionSlug: 'media',\n        input: {\n          data: Buffer.from('hello').toString('base64'),\n          mimeType: 'text/plain',\n          name: 'hello.txt',\n          source: 'base64',\n        },\n        req,\n      }),\n    ).rejects.toThrow('File exceeds the 4 byte upload limit.')\n  })\n\n  it('should reject URLs outside the collection allowlist', async () => {\n    const req = createRequest({\n      allowList: [{ hostname: 'assets.example.com', protocol: 'https' }],\n    })\n\n    await expect(\n      resolveFile({\n        collectionSlug: 'media',\n        input: {\n          source: 'externalURL',\n          url: 'https://example.com/image.png',\n        },\n        req,\n      }),\n    ).rejects.toThrow('The provided file URL is not allowed.')\n  })\n})\n\nfunction createRequest({\n  allowList,\n  maxFileSize,\n}: {\n  allowList?: Array<{ hostname: string; protocol: 'http' | 'https' }>\n  maxFileSize?: number\n}): PayloadRequest {\n  return {\n    payload: {\n      collections: {\n        media: {\n          config: {\n            upload: allowList ? { pasteURL: { allowList } } : {},\n          },\n        },\n      },\n      config: {\n        upload: {\n          limits: {\n            fileSize: maxFileSize,\n          },\n        },\n      },\n    },\n  } as unknown as PayloadRequest\n}\n"],"names":["describe","expect","it","fileInputSchema","resolveFile","result","safeParse","data","mimeType","name","source","success","toBe","file","filename","size","uploadReference","uploadId","req","createRequest","maxFileSize","collectionSlug","input","Buffer","from","toString","rejects","toThrow","allowList","hostname","protocol","url","payload","collections","media","config","upload","pasteURL","limits","fileSize"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,eAAe,EAAEC,WAAW,QAAQ,iBAAgB;AAE7DJ,SAAS,kBAAkB;IACzBE,GAAG,sCAAsC;QACvC,MAAMG,SAASF,gBAAgBG,SAAS,CAAC;YACvCC,MAAM;YACNC,UAAU;YACVC,MAAM;YACNC,QAAQ;QACV;QAEAT,OAAOI,OAAOM,OAAO,EAAEC,IAAI,CAAC;IAC9B;IAEAV,GAAG,mCAAmC;QACpC,MAAMG,SAASF,gBAAgBG,SAAS,CAAC;YACvCO,MAAM;gBACJC,UAAU;gBACVN,UAAU;gBACVO,MAAM;gBACNC,iBAAiB;oBAAEC,UAAU;gBAAY;YAC3C;YACAP,QAAQ;QACV;QAEAT,OAAOI,OAAOM,OAAO,EAAEC,IAAI,CAAC;IAC9B;IAEAV,GAAG,wCAAwC;QACzC,MAAMgB,MAAMC,cAAc;YAAEC,aAAa;QAAE;QAE3C,MAAMnB,OACJG,YAAY;YACViB,gBAAgB;YAChBC,OAAO;gBACLf,MAAMgB,OAAOC,IAAI,CAAC,SAASC,QAAQ,CAAC;gBACpCjB,UAAU;gBACVC,MAAM;gBACNC,QAAQ;YACV;YACAQ;QACF,IACAQ,OAAO,CAACC,OAAO,CAAC;IACpB;IAEAzB,GAAG,uDAAuD;QACxD,MAAMgB,MAAMC,cAAc;YACxBS,WAAW;gBAAC;oBAAEC,UAAU;oBAAsBC,UAAU;gBAAQ;aAAE;QACpE;QAEA,MAAM7B,OACJG,YAAY;YACViB,gBAAgB;YAChBC,OAAO;gBACLZ,QAAQ;gBACRqB,KAAK;YACP;YACAb;QACF,IACAQ,OAAO,CAACC,OAAO,CAAC;IACpB;AACF;AAEA,SAASR,cAAc,EACrBS,SAAS,EACTR,WAAW,EAIZ;IACC,OAAO;QACLY,SAAS;YACPC,aAAa;gBACXC,OAAO;oBACLC,QAAQ;wBACNC,QAAQR,YAAY;4BAAES,UAAU;gCAAET;4BAAU;wBAAE,IAAI,CAAC;oBACrD;gBACF;YACF;YACAO,QAAQ;gBACNC,QAAQ;oBACNE,QAAQ;wBACNC,UAAUnB;oBACZ;gBACF;YACF;QACF;IACF;AACF"}

package/dist/mcp/builtin/collections/uploadInstructionsTool.d.ts

@@ -1,2 +0,0 @@
-export declare const getUploadInstructionsTool: import("../../../types.js").CollectionTool;
-//# sourceMappingURL=uploadInstructionsTool.d.ts.map

package/dist/mcp/builtin/collections/uploadInstructionsTool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"uploadInstructionsTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/uploadInstructionsTool.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,yBAAyB,4CAyDpC,CAAA"}

package/dist/mcp/builtin/collections/uploadInstructionsTool.js

@@ -1,55 +0,0 @@
-import { getUploadInstructions as getPayloadUploadInstructions } from 'payload/internal';
-import { z } from 'zod';
-import { defaultAccess } from '../../../defaultAccess.js';
-import { defineCollectionTool } from '../../../defineTool.js';
-export const getUploadInstructionsTool = defineCollectionTool({
-    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.create || args.permissions?.collections?.[args.collectionSlug]?.update),
-    annotations: {
-        destructiveHint: false,
-        idempotentHint: false,
-        openWorldHint: true,
-        readOnlyHint: false,
-        title: 'Get Upload Instructions'
-    },
-    description: 'Prepare a file upload before createDocument or updateDocument. Pass file metadata only, without base64 or file contents.',
-    input: z.object({
-        docPrefix: z.string().describe('Optional document folder or prefix').optional(),
-        filename: z.string().describe('The original file name'),
-        filesize: z.number().int().nonnegative().describe('The file size in bytes'),
-        mimeType: z.string().describe('The file MIME type')
-    })
-}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
-    try {
-        const instructions = await getPayloadUploadInstructions({
-            ...input,
-            collectionSlug,
-            overrideAccess: authorizedMCP.overrideAccess,
-            req
-        });
-        const nextStep = instructions.type === 'http' ? 'Send the exact file bytes using request, then pass { source: "uploadReference", file } to createDocument or updateDocument.' : `Call the local MCP tool named "${instructions.name}" with the file and data, then pass { source: "uploadReference", file } to createDocument or updateDocument.`;
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: `Upload instructions for collection "${collectionSlug}":\n\`\`\`json\n${JSON.stringify(instructions)}\n\`\`\`\n${nextStep}`
-                }
-            ],
-            structuredContent: {
-                instructions
-            }
-        };
-    } catch (error) {
-        const message = error instanceof Error ? error.message : 'Unknown error';
-        return {
-            content: [
-                {
-                    type: 'text',
-                    text: `Error getting upload instructions for collection "${collectionSlug}": ${message}`
-                }
-            ],
-            isError: true
-        };
-    }
-});
-
-//# sourceMappingURL=uploadInstructionsTool.js.map

package/dist/mcp/builtin/collections/uploadInstructionsTool.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/uploadInstructionsTool.ts"],"sourcesContent":["import { getUploadInstructions as getPayloadUploadInstructions } from 'payload/internal'\nimport { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\n\nexport const getUploadInstructionsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) &&\n    Boolean(\n      args.permissions?.collections?.[args.collectionSlug]?.create ||\n        args.permissions?.collections?.[args.collectionSlug]?.update,\n    ),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n    readOnlyHint: false,\n    title: 'Get Upload Instructions',\n  },\n  description:\n    'Prepare a file upload before createDocument or updateDocument. Pass file metadata only, without base64 or file contents.',\n  input: z.object({\n    docPrefix: z.string().describe('Optional document folder or prefix').optional(),\n    filename: z.string().describe('The original file name'),\n    filesize: z.number().int().nonnegative().describe('The file size in bytes'),\n    mimeType: z.string().describe('The file MIME type'),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  try {\n    const instructions = await getPayloadUploadInstructions({\n      ...input,\n      collectionSlug,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n    })\n\n    const nextStep =\n      instructions.type === 'http'\n        ? 'Send the exact file bytes using request, then pass { source: \"uploadReference\", file } to createDocument or updateDocument.'\n        : `Call the local MCP tool named \"${instructions.name}\" with the file and data, then pass { source: \"uploadReference\", file } to createDocument or updateDocument.`\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Upload instructions for collection \"${collectionSlug}\":\\n\\`\\`\\`json\\n${JSON.stringify(instructions)}\\n\\`\\`\\`\\n${nextStep}`,\n        },\n      ],\n      structuredContent: { instructions },\n    }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Error getting upload instructions for collection \"${collectionSlug}\": ${message}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["getUploadInstructions","getPayloadUploadInstructions","z","defaultAccess","defineCollectionTool","getUploadInstructionsTool","access","args","Boolean","permissions","collections","collectionSlug","create","update","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","docPrefix","string","describe","optional","filename","filesize","number","int","nonnegative","mimeType","handler","authorizedMCP","req","instructions","overrideAccess","nextStep","type","name","content","text","JSON","stringify","structuredContent","error","message","Error","isError"],"mappings":"AAAA,SAASA,yBAAyBC,4BAA4B,QAAQ,mBAAkB;AACxF,SAASC,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAE7D,OAAO,MAAMC,4BAA4BD,qBAAqB;IAC5DE,QAAQ,CAACC,OACPJ,cAAcI,SACdC,QACED,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC,UACpDL,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEE;IAE5DC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aACE;IACFC,OAAOnB,EAAEoB,MAAM,CAAC;QACdC,WAAWrB,EAAEsB,MAAM,GAAGC,QAAQ,CAAC,sCAAsCC,QAAQ;QAC7EC,UAAUzB,EAAEsB,MAAM,GAAGC,QAAQ,CAAC;QAC9BG,UAAU1B,EAAE2B,MAAM,GAAGC,GAAG,GAAGC,WAAW,GAAGN,QAAQ,CAAC;QAClDO,UAAU9B,EAAEsB,MAAM,GAAGC,QAAQ,CAAC;IAChC;AACF,GAAGQ,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEvB,cAAc,EAAEU,KAAK,EAAEc,GAAG,EAAE;IAC7D,IAAI;QACF,MAAMC,eAAe,MAAMnC,6BAA6B;YACtD,GAAGoB,KAAK;YACRV;YACA0B,gBAAgBH,cAAcG,cAAc;YAC5CF;QACF;QAEA,MAAMG,WACJF,aAAaG,IAAI,KAAK,SAClB,gIACA,CAAC,+BAA+B,EAAEH,aAAaI,IAAI,CAAC,4GAA4G,CAAC;QAEvK,OAAO;YACLC,SAAS;gBACP;oBACEF,MAAM;oBACNG,MAAM,CAAC,oCAAoC,EAAE/B,eAAe,gBAAgB,EAAEgC,KAAKC,SAAS,CAACR,cAAc,UAAU,EAAEE,UAAU;gBACnI;aACD;YACDO,mBAAmB;gBAAET;YAAa;QACpC;IACF,EAAE,OAAOU,OAAO;QACd,MAAMC,UAAUD,iBAAiBE,QAAQF,MAAMC,OAAO,GAAG;QACzD,OAAO;YACLN,SAAS;gBACP;oBACEF,MAAM;oBACNG,MAAM,CAAC,kDAAkD,EAAE/B,eAAe,GAAG,EAAEoC,SAAS;gBAC1F;aACD;YACDE,SAAS;QACX;IACF;AACF,GAAE"}

package/src/mcp/builtin/collections/fileInput.spec.ts

@@ -1,93 +0,0 @@
-import type { PayloadRequest } from 'payload'
-
-import { describe, expect, it } from 'vitest'
-
-import { fileInputSchema, resolveFile } from './fileInput.js'
-
-describe('MCP file input', () => {
-  it('should reject malformed MIME types', () => {
-    const result = fileInputSchema.safeParse({
-      data: 'aGVsbG8=',
-      mimeType: 'text/plain\r\nx-test: value',
-      name: 'hello.txt',
-      source: 'base64',
-    })
-
-    expect(result.success).toBe(false)
-  })
-
-  it('should accept a prepared upload', () => {
-    const result = fileInputSchema.safeParse({
-      file: {
-        filename: 'image.png',
-        mimeType: 'image/png',
-        size: 123,
-        uploadReference: { uploadId: 'upload-id' },
-      },
-      source: 'uploadReference',
-    })
-
-    expect(result.success).toBe(true)
-  })
-
-  it('should reject oversized base64 files', async () => {
-    const req = createRequest({ maxFileSize: 4 })
-
-    await expect(
-      resolveFile({
-        collectionSlug: 'media',
-        input: {
-          data: Buffer.from('hello').toString('base64'),
-          mimeType: 'text/plain',
-          name: 'hello.txt',
-          source: 'base64',
-        },
-        req,
-      }),
-    ).rejects.toThrow('File exceeds the 4 byte upload limit.')
-  })
-
-  it('should reject URLs outside the collection allowlist', async () => {
-    const req = createRequest({
-      allowList: [{ hostname: 'assets.example.com', protocol: 'https' }],
-    })
-
-    await expect(
-      resolveFile({
-        collectionSlug: 'media',
-        input: {
-          source: 'externalURL',
-          url: 'https://example.com/image.png',
-        },
-        req,
-      }),
-    ).rejects.toThrow('The provided file URL is not allowed.')
-  })
-})
-
-function createRequest({
-  allowList,
-  maxFileSize,
-}: {
-  allowList?: Array<{ hostname: string; protocol: 'http' | 'https' }>
-  maxFileSize?: number
-}): PayloadRequest {
-  return {
-    payload: {
-      collections: {
-        media: {
-          config: {
-            upload: allowList ? { pasteURL: { allowList } } : {},
-          },
-        },
-      },
-      config: {
-        upload: {
-          limits: {
-            fileSize: maxFileSize,
-          },
-        },
-      },
-    },
-  } as unknown as PayloadRequest
-}

package/src/mcp/builtin/collections/fileInput.ts

@@ -1,154 +0,0 @@
-import type { CollectionSlug, File, FileData, PayloadRequest } from 'payload'
-
-import { APIError } from 'payload'
-import { getExternalFile, getFileFromUploadInstructions, isURLAllowed } from 'payload/internal'
-import { sanitizeFilename } from 'payload/shared'
-import { z } from 'zod'
-
-const mimeTypeSchema = z
-  .string()
-  .regex(/^[!#$%&'*+.^`|~\w-]+\/[!#$%&'*+.^`|~\w-]+$/, 'MIME type must use the type/subtype format')
-
-const uploadFileSchema = z.object({
-  filename: z.string(),
-  mimeType: z.string(),
-  size: z.number().int().nonnegative(),
-  uploadReference: z.record(z.string(), z.unknown()),
-})
-
-export const fileInputSchema = z
-  .discriminatedUnion('source', [
-    z.object({
-      name: z.string().min(1).describe('The file name, including its extension'),
-      data: z.string().describe('The base64-encoded file bytes, without a data URL prefix'),
-      mimeType: mimeTypeSchema.describe('The file MIME type, for example image/png'),
-      source: z.literal('base64'),
-    }),
-    z.object({
-      name: z.string().min(1).describe('Optional file name override').optional(),
-      source: z.literal('externalURL'),
-      url: z.url().describe('The http or https URL to download'),
-    }),
-    z.object({
-      file: uploadFileSchema.describe('The file value returned by getUploadInstructions'),
-      source: z.literal('uploadReference'),
-    }),
-  ])
-  .describe(
-    'A file for an upload collection. Use externalURL for an online file, base64 for local file bytes, or uploadReference after following getUploadInstructions. Usage of getUploadInstructions and uploadReference is recommended.',
-  )
-
-type FileInput = z.infer<typeof fileInputSchema>
-
-export async function resolveFile({
-  collectionSlug,
-  input,
-  req,
-}: {
-  collectionSlug: CollectionSlug
-  input?: FileInput
-  req: PayloadRequest
-}): Promise<File | undefined> {
-  if (!input) {
-    return undefined
-  }
-
-  if (input.source === 'uploadReference') {
-    return getFileFromUploadInstructions({ collectionSlug, file: input.file, req })
-  }
-
-  const uploadConfig = req.payload.collections[collectionSlug]?.config.upload
-
-  if (!uploadConfig) {
-    throw new APIError(`Collection "${collectionSlug}" does not support file uploads.`, 400)
-  }
-
-  const maxFileSize = req.payload.config.upload.limits?.fileSize
-  let file: File
-
-  if (input.source === 'base64') {
-    const data = decodeBase64({ maxFileSize, value: input.data })
-
-    file = {
-      name: sanitizeFilename(input.name),
-      data,
-      mimetype: input.mimeType,
-      size: data.length,
-    }
-  } else {
-    if (uploadConfig.pasteURL === false) {
-      throw new APIError(
-        `Uploading files from URLs is disabled for collection "${collectionSlug}".`,
-        400,
-      )
-    }
-
-    const url = new URL(input.url)
-
-    if (!['http:', 'https:'].includes(url.protocol)) {
-      throw new APIError('File URLs must use http or https.', 400)
-    }
-
-    if (
-      typeof uploadConfig.pasteURL === 'object' &&
-      !isURLAllowed(input.url, uploadConfig.pasteURL.allowList)
-    ) {
-      throw new APIError('The provided file URL is not allowed.', 400)
-    }
-
-    file = await getExternalFile({
-      data: {
-        filename: sanitizeFilename(input.name || getURLFilename(url)),
-        url: input.url,
-      } as FileData,
-      req,
-      uploadConfig: {
-        ...uploadConfig,
-        externalFileHeaderFilter: uploadConfig.externalFileHeaderFilter ?? (() => ({})),
-      },
-    })
-    file.mimetype = file.mimetype?.split(';')[0] || 'application/octet-stream'
-    file.size = file.data.length
-  }
-
-  if (maxFileSize !== undefined && Number.isFinite(maxFileSize) && file.size > maxFileSize) {
-    throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)
-  }
-
-  return file
-}
-
-function decodeBase64({ maxFileSize, value }: { maxFileSize?: number; value: string }): Buffer {
-  const normalized = value.replace(/\s/g, '')
-
-  if (!/^[a-z0-9+/]*={0,2}$/i.test(normalized) || normalized.length % 4 === 1) {
-    throw new APIError('File data must be valid base64.', 400)
-  }
-
-  if (maxFileSize !== undefined && Number.isFinite(maxFileSize)) {
-    const paddingLength = normalized.endsWith('==') ? 2 : normalized.endsWith('=') ? 1 : 0
-    const decodedSize = Math.floor((normalized.length * 3) / 4) - paddingLength
-
-    if (decodedSize > maxFileSize) {
-      throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)
-    }
-  }
-
-  const data = Buffer.from(normalized, 'base64')
-
-  if (data.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {
-    throw new APIError('File data must be valid base64.', 400)
-  }
-
-  return data
-}
-
-function getURLFilename(url: URL): string {
-  const pathSegment = url.pathname.split('/').pop() || 'upload'
-
-  try {
-    return decodeURIComponent(pathSegment)
-  } catch {
-    return pathSegment
-  }
-}

package/src/mcp/builtin/collections/uploadInstructionsTool.ts

@@ -1,64 +0,0 @@
-import { getUploadInstructions as getPayloadUploadInstructions } from 'payload/internal'
-import { z } from 'zod'
-
-import { defaultAccess } from '../../../defaultAccess.js'
-import { defineCollectionTool } from '../../../defineTool.js'
-
-export const getUploadInstructionsTool = defineCollectionTool({
-  access: (args) =>
-    defaultAccess(args) &&
-    Boolean(
-      args.permissions?.collections?.[args.collectionSlug]?.create ||
-        args.permissions?.collections?.[args.collectionSlug]?.update,
-    ),
-  annotations: {
-    destructiveHint: false,
-    idempotentHint: false,
-    openWorldHint: true,
-    readOnlyHint: false,
-    title: 'Get Upload Instructions',
-  },
-  description:
-    'Prepare a file upload before createDocument or updateDocument. Pass file metadata only, without base64 or file contents.',
-  input: z.object({
-    docPrefix: z.string().describe('Optional document folder or prefix').optional(),
-    filename: z.string().describe('The original file name'),
-    filesize: z.number().int().nonnegative().describe('The file size in bytes'),
-    mimeType: z.string().describe('The file MIME type'),
-  }),
-}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {
-  try {
-    const instructions = await getPayloadUploadInstructions({
-      ...input,
-      collectionSlug,
-      overrideAccess: authorizedMCP.overrideAccess,
-      req,
-    })
-
-    const nextStep =
-      instructions.type === 'http'
-        ? 'Send the exact file bytes using request, then pass { source: "uploadReference", file } to createDocument or updateDocument.'
-        : `Call the local MCP tool named "${instructions.name}" with the file and data, then pass { source: "uploadReference", file } to createDocument or updateDocument.`
-
-    return {
-      content: [
-        {
-          type: 'text',
-          text: `Upload instructions for collection "${collectionSlug}":\n\`\`\`json\n${JSON.stringify(instructions)}\n\`\`\`\n${nextStep}`,
-        },
-      ],
-      structuredContent: { instructions },
-    }
-  } catch (error) {
-    const message = error instanceof Error ? error.message : 'Unknown error'
-    return {
-      content: [
-        {
-          type: 'text',
-          text: `Error getting upload instructions for collection "${collectionSlug}": ${message}`,
-        },
-      ],
-      isError: true,
-    }
-  }
-})