@payloadcms/plugin-mcp 4.0.0-internal.cea8867 → 4.0.0-internal.d927017

package/dist/mcp/builtin/collections/fileInput.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/fileInput.spec.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { fileInputSchema, resolveFileInput } from './fileInput.js'\n\ndescribe('MCP file input', () => {\n  it('should reject malformed MIME types', () => {\n    const result = fileInputSchema.safeParse({\n      data: 'aGVsbG8=',\n      mimeType: 'text/plain\\r\\nx-test: value',\n      name: 'hello.txt',\n      source: 'base64',\n    })\n\n    expect(result.success).toBe(false)\n  })\n\n  it('should reject oversized base64 files', async () => {\n    const req = createRequest({ maxFileSize: 4 })\n\n    await expect(\n      resolveFileInput({\n        collectionSlug: 'media',\n        input: {\n          data: Buffer.from('hello').toString('base64'),\n          mimeType: 'text/plain',\n          name: 'hello.txt',\n          source: 'base64',\n        },\n        req,\n      }),\n    ).rejects.toThrow('File exceeds the 4 byte upload limit.')\n  })\n\n  it('should reject URLs outside the collection allowlist', async () => {\n    const req = createRequest({\n      allowList: [{ hostname: 'assets.example.com', protocol: 'https' }],\n    })\n\n    await expect(\n      resolveFileInput({\n        collectionSlug: 'media',\n        input: {\n          source: 'url',\n          url: 'https://example.com/image.png',\n        },\n        req,\n      }),\n    ).rejects.toThrow('The provided file URL is not allowed.')\n  })\n})\n\nfunction createRequest({\n  allowList,\n  maxFileSize,\n}: {\n  allowList?: Array<{ hostname: string; protocol: 'http' | 'https' }>\n  maxFileSize?: number\n}): PayloadRequest {\n  return {\n    payload: {\n      collections: {\n        media: {\n          config: {\n            upload: allowList ? { pasteURL: { allowList } } : {},\n          },\n        },\n      },\n      config: {\n        upload: {\n          limits: {\n            fileSize: maxFileSize,\n          },\n        },\n      },\n    },\n  } as unknown as PayloadRequest\n}\n"],"names":["describe","expect","it","fileInputSchema","resolveFileInput","result","safeParse","data","mimeType","name","source","success","toBe","req","createRequest","maxFileSize","collectionSlug","input","Buffer","from","toString","rejects","toThrow","allowList","hostname","protocol","url","payload","collections","media","config","upload","pasteURL","limits","fileSize"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,eAAe,EAAEC,gBAAgB,QAAQ,iBAAgB;AAElEJ,SAAS,kBAAkB;IACzBE,GAAG,sCAAsC;QACvC,MAAMG,SAASF,gBAAgBG,SAAS,CAAC;YACvCC,MAAM;YACNC,UAAU;YACVC,MAAM;YACNC,QAAQ;QACV;QAEAT,OAAOI,OAAOM,OAAO,EAAEC,IAAI,CAAC;IAC9B;IAEAV,GAAG,wCAAwC;QACzC,MAAMW,MAAMC,cAAc;YAAEC,aAAa;QAAE;QAE3C,MAAMd,OACJG,iBAAiB;YACfY,gBAAgB;YAChBC,OAAO;gBACLV,MAAMW,OAAOC,IAAI,CAAC,SAASC,QAAQ,CAAC;gBACpCZ,UAAU;gBACVC,MAAM;gBACNC,QAAQ;YACV;YACAG;QACF,IACAQ,OAAO,CAACC,OAAO,CAAC;IACpB;IAEApB,GAAG,uDAAuD;QACxD,MAAMW,MAAMC,cAAc;YACxBS,WAAW;gBAAC;oBAAEC,UAAU;oBAAsBC,UAAU;gBAAQ;aAAE;QACpE;QAEA,MAAMxB,OACJG,iBAAiB;YACfY,gBAAgB;YAChBC,OAAO;gBACLP,QAAQ;gBACRgB,KAAK;YACP;YACAb;QACF,IACAQ,OAAO,CAACC,OAAO,CAAC;IACpB;AACF;AAEA,SAASR,cAAc,EACrBS,SAAS,EACTR,WAAW,EAIZ;IACC,OAAO;QACLY,SAAS;YACPC,aAAa;gBACXC,OAAO;oBACLC,QAAQ;wBACNC,QAAQR,YAAY;4BAAES,UAAU;gCAAET;4BAAU;wBAAE,IAAI,CAAC;oBACrD;gBACF;YACF;YACAO,QAAQ;gBACNC,QAAQ;oBACNE,QAAQ;wBACNC,UAAUnB;oBACZ;gBACF;YACF;QACF;IACF;AACF"}

package/src/mcp/builtin/collections/fileInput.spec.ts

@@ -1,79 +0,0 @@
-import type { PayloadRequest } from 'payload'
-
-import { describe, expect, it } from 'vitest'
-
-import { fileInputSchema, resolveFileInput } from './fileInput.js'
-
-describe('MCP file input', () => {
-  it('should reject malformed MIME types', () => {
-    const result = fileInputSchema.safeParse({
-      data: 'aGVsbG8=',
-      mimeType: 'text/plain\r\nx-test: value',
-      name: 'hello.txt',
-      source: 'base64',
-    })
-
-    expect(result.success).toBe(false)
-  })
-
-  it('should reject oversized base64 files', async () => {
-    const req = createRequest({ maxFileSize: 4 })
-
-    await expect(
-      resolveFileInput({
-        collectionSlug: 'media',
-        input: {
-          data: Buffer.from('hello').toString('base64'),
-          mimeType: 'text/plain',
-          name: 'hello.txt',
-          source: 'base64',
-        },
-        req,
-      }),
-    ).rejects.toThrow('File exceeds the 4 byte upload limit.')
-  })
-
-  it('should reject URLs outside the collection allowlist', async () => {
-    const req = createRequest({
-      allowList: [{ hostname: 'assets.example.com', protocol: 'https' }],
-    })
-
-    await expect(
-      resolveFileInput({
-        collectionSlug: 'media',
-        input: {
-          source: 'url',
-          url: 'https://example.com/image.png',
-        },
-        req,
-      }),
-    ).rejects.toThrow('The provided file URL is not allowed.')
-  })
-})
-
-function createRequest({
-  allowList,
-  maxFileSize,
-}: {
-  allowList?: Array<{ hostname: string; protocol: 'http' | 'https' }>
-  maxFileSize?: number
-}): PayloadRequest {
-  return {
-    payload: {
-      collections: {
-        media: {
-          config: {
-            upload: allowList ? { pasteURL: { allowList } } : {},
-          },
-        },
-      },
-      config: {
-        upload: {
-          limits: {
-            fileSize: maxFileSize,
-          },
-        },
-      },
-    },
-  } as unknown as PayloadRequest
-}

package/src/mcp/builtin/collections/fileInput.ts

@@ -1,139 +0,0 @@
-import type { CollectionSlug, File, FileData, PayloadRequest } from 'payload'
-
-import { APIError } from 'payload'
-import { getExternalFile, isURLAllowed } from 'payload/internal'
-import { sanitizeFilename } from 'payload/shared'
-import { z } from 'zod'
-
-const mimeTypeSchema = z
-  .string()
-  .regex(/^[!#$%&'*+.^`|~\w-]+\/[!#$%&'*+.^`|~\w-]+$/, 'MIME type must use the type/subtype format')
-
-export const fileInputSchema = z
-  .discriminatedUnion('source', [
-    z.object({
-      name: z.string().min(1).describe('The file name, including its extension'),
-      data: z.string().describe('The base64-encoded file bytes, without a data URL prefix'),
-      mimeType: mimeTypeSchema.describe('The file MIME type, for example image/png'),
-      source: z.literal('base64'),
-    }),
-    z.object({
-      name: z.string().min(1).describe('Optional file name override').optional(),
-      source: z.literal('url'),
-      url: z.url().describe('The http or https URL to download'),
-    }),
-  ])
-  .describe(
-    'A file for an upload collection. Use only a source listed by getCollectionSchema: url for an online file or base64 for a local file.',
-  )
-
-type FileInput = z.infer<typeof fileInputSchema>
-
-export async function resolveFileInput({
-  collectionSlug,
-  input,
-  req,
-}: {
-  collectionSlug: CollectionSlug
-  input?: FileInput
-  req: PayloadRequest
-}): Promise<File | undefined> {
-  if (!input) {
-    return undefined
-  }
-
-  const uploadConfig = req.payload.collections[collectionSlug]?.config.upload
-
-  if (!uploadConfig) {
-    throw new APIError(`Collection "${collectionSlug}" does not support file uploads.`, 400)
-  }
-
-  const maxFileSize = req.payload.config.upload.limits?.fileSize
-  let file: File
-
-  if (input.source === 'base64') {
-    const data = decodeBase64({ maxFileSize, value: input.data })
-
-    file = {
-      name: sanitizeFilename(input.name),
-      data,
-      mimetype: input.mimeType,
-      size: data.length,
-    }
-  } else {
-    if (uploadConfig.pasteURL === false) {
-      throw new APIError(
-        `Uploading files from URLs is disabled for collection "${collectionSlug}".`,
-        400,
-      )
-    }
-
-    const url = new URL(input.url)
-
-    if (!['http:', 'https:'].includes(url.protocol)) {
-      throw new APIError('File URLs must use http or https.', 400)
-    }
-
-    if (
-      typeof uploadConfig.pasteURL === 'object' &&
-      !isURLAllowed(input.url, uploadConfig.pasteURL.allowList)
-    ) {
-      throw new APIError('The provided file URL is not allowed.', 400)
-    }
-
-    file = await getExternalFile({
-      data: {
-        filename: sanitizeFilename(input.name || getURLFilename(url)),
-        url: input.url,
-      } as FileData,
-      req,
-      uploadConfig: {
-        ...uploadConfig,
-        externalFileHeaderFilter: uploadConfig.externalFileHeaderFilter ?? (() => ({})),
-      },
-    })
-    file.mimetype = file.mimetype?.split(';')[0] || 'application/octet-stream'
-    file.size = file.data.length
-  }
-
-  if (maxFileSize !== undefined && Number.isFinite(maxFileSize) && file.size > maxFileSize) {
-    throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)
-  }
-
-  return file
-}
-
-function decodeBase64({ maxFileSize, value }: { maxFileSize?: number; value: string }): Buffer {
-  const normalized = value.replace(/\s/g, '')
-
-  if (!/^[a-z0-9+/]*={0,2}$/i.test(normalized) || normalized.length % 4 === 1) {
-    throw new APIError('File data must be valid base64.', 400)
-  }
-
-  if (maxFileSize !== undefined && Number.isFinite(maxFileSize)) {
-    const paddingLength = normalized.endsWith('==') ? 2 : normalized.endsWith('=') ? 1 : 0
-    const decodedSize = Math.floor((normalized.length * 3) / 4) - paddingLength
-
-    if (decodedSize > maxFileSize) {
-      throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)
-    }
-  }
-
-  const data = Buffer.from(normalized, 'base64')
-
-  if (data.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {
-    throw new APIError('File data must be valid base64.', 400)
-  }
-
-  return data
-}
-
-function getURLFilename(url: URL): string {
-  const pathSegment = url.pathname.split('/').pop() || 'upload'
-
-  try {
-    return decodeURIComponent(pathSegment)
-  } catch {
-    return pathSegment
-  }
-}