@payloadcms/plugin-mcp 4.0.0-internal.e16cf59 → 4.0.0-internal.e38d3ac

package/dist/mcp/builtin/collections/fileInput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileInput.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/fileInput.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,IAAI,EAAY,cAAc,EAAE,MAAM,SAAS,CAAA;AAK7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAavB,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;6BAoBzB,CAAA;AAEH,KAAK,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEhD,wBAAsB,WAAW,CAAC,EAChC,cAAc,EACd,KAAK,EACL,GAAG,GACJ,EAAE;IACD,cAAc,EAAE,cAAc,CAAA;IAC9B,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,GAAG,EAAE,cAAc,CAAA;CACpB,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CA8E5B"}

package/dist/mcp/builtin/collections/fileInput.js

@@ -0,0 +1,124 @@
+import { APIError } from 'payload';
+import { getExternalFile, getFileFromUploadInstructions, isURLAllowed } from 'payload/internal';
+import { sanitizeFilename } from 'payload/shared';
+import { z } from 'zod';
+const mimeTypeSchema = z.string().regex(/^[!#$%&'*+.^`|~\w-]+\/[!#$%&'*+.^`|~\w-]+$/, 'MIME type must use the type/subtype format');
+const uploadFileSchema = z.object({
+    filename: z.string(),
+    mimeType: z.string(),
+    size: z.number().int().nonnegative(),
+    uploadReference: z.record(z.string(), z.unknown())
+});
+export const fileInputSchema = z.discriminatedUnion('source', [
+    z.object({
+        name: z.string().min(1).describe('The file name, including its extension'),
+        data: z.string().describe('The base64-encoded file bytes, without a data URL prefix'),
+        mimeType: mimeTypeSchema.describe('The file MIME type, for example image/png'),
+        source: z.literal('base64')
+    }),
+    z.object({
+        name: z.string().min(1).describe('Optional file name override').optional(),
+        source: z.literal('externalURL'),
+        url: z.url().describe('The http or https URL to download')
+    }),
+    z.object({
+        file: uploadFileSchema.describe('getUploadInstructions file field post-upload'),
+        source: z.literal('uploadReference')
+    })
+]).describe('A file for an upload collection. Prefer uploadReference after its upload succeeds; use base64 only for small local files or externalURL for an online file.');
+export async function resolveFile({ collectionSlug, input, req }) {
+    if (!input) {
+        return undefined;
+    }
+    if (input.source === 'uploadReference') {
+        try {
+            return await getFileFromUploadInstructions({
+                collectionSlug,
+                file: input.file,
+                req
+            });
+        } catch (error) {
+            if (error instanceof Error && error.message === 'Staged upload was not found.') {
+                throw new APIError('Staged upload not found. Complete the upload action first, or use base64 for small local files.', 400);
+            }
+            throw error;
+        }
+    }
+    const uploadConfig = req.payload.collections[collectionSlug]?.config.upload;
+    if (!uploadConfig) {
+        throw new APIError(`Collection "${collectionSlug}" does not support file uploads.`, 400);
+    }
+    const maxFileSize = req.payload.config.upload.limits?.fileSize;
+    let file;
+    if (input.source === 'base64') {
+        const data = decodeBase64({
+            maxFileSize,
+            value: input.data
+        });
+        file = {
+            name: sanitizeFilename(input.name),
+            data,
+            mimetype: input.mimeType,
+            size: data.length
+        };
+    } else {
+        if (uploadConfig.pasteURL === false) {
+            throw new APIError(`Uploading files from URLs is disabled for collection "${collectionSlug}".`, 400);
+        }
+        const url = new URL(input.url);
+        if (![
+            'http:',
+            'https:'
+        ].includes(url.protocol)) {
+            throw new APIError('File URLs must use http or https.', 400);
+        }
+        if (typeof uploadConfig.pasteURL === 'object' && !isURLAllowed(input.url, uploadConfig.pasteURL.allowList)) {
+            throw new APIError('The provided file URL is not allowed.', 400);
+        }
+        file = await getExternalFile({
+            data: {
+                filename: sanitizeFilename(input.name || getURLFilename(url)),
+                url: input.url
+            },
+            req,
+            uploadConfig: {
+                ...uploadConfig,
+                externalFileHeaderFilter: uploadConfig.externalFileHeaderFilter ?? (()=>({}))
+            }
+        });
+        file.mimetype = file.mimetype?.split(';')[0] || 'application/octet-stream';
+        file.size = file.data.length;
+    }
+    if (maxFileSize !== undefined && Number.isFinite(maxFileSize) && file.size > maxFileSize) {
+        throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400);
+    }
+    return file;
+}
+function decodeBase64({ maxFileSize, value }) {
+    const normalized = value.replace(/\s/g, '');
+    if (!/^[a-z0-9+/]*={0,2}$/i.test(normalized) || normalized.length % 4 === 1) {
+        throw new APIError('File data must be valid base64.', 400);
+    }
+    if (maxFileSize !== undefined && Number.isFinite(maxFileSize)) {
+        const paddingLength = normalized.endsWith('==') ? 2 : normalized.endsWith('=') ? 1 : 0;
+        const decodedSize = Math.floor(normalized.length * 3 / 4) - paddingLength;
+        if (decodedSize > maxFileSize) {
+            throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400);
+        }
+    }
+    const data = Buffer.from(normalized, 'base64');
+    if (data.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {
+        throw new APIError('File data must be valid base64.', 400);
+    }
+    return data;
+}
+function getURLFilename(url) {
+    const pathSegment = url.pathname.split('/').pop() || 'upload';
+    try {
+        return decodeURIComponent(pathSegment);
+    } catch  {
+        return pathSegment;
+    }
+}
+
+//# sourceMappingURL=fileInput.js.map

package/dist/mcp/builtin/collections/fileInput.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/fileInput.ts"],"sourcesContent":["import type { CollectionSlug, File, FileData, PayloadRequest } from 'payload'\n\nimport { APIError } from 'payload'\nimport { getExternalFile, getFileFromUploadInstructions, isURLAllowed } from 'payload/internal'\nimport { sanitizeFilename } from 'payload/shared'\nimport { z } from 'zod'\n\nconst mimeTypeSchema = z\n  .string()\n  .regex(/^[!#$%&'*+.^`|~\\w-]+\\/[!#$%&'*+.^`|~\\w-]+$/, 'MIME type must use the type/subtype format')\n\nconst uploadFileSchema = z.object({\n  filename: z.string(),\n  mimeType: z.string(),\n  size: z.number().int().nonnegative(),\n  uploadReference: z.record(z.string(), z.unknown()),\n})\n\nexport const fileInputSchema = z\n  .discriminatedUnion('source', [\n    z.object({\n      name: z.string().min(1).describe('The file name, including its extension'),\n      data: z.string().describe('The base64-encoded file bytes, without a data URL prefix'),\n      mimeType: mimeTypeSchema.describe('The file MIME type, for example image/png'),\n      source: z.literal('base64'),\n    }),\n    z.object({\n      name: z.string().min(1).describe('Optional file name override').optional(),\n      source: z.literal('externalURL'),\n      url: z.url().describe('The http or https URL to download'),\n    }),\n    z.object({\n      file: uploadFileSchema.describe('getUploadInstructions file field post-upload'),\n      source: z.literal('uploadReference'),\n    }),\n  ])\n  .describe(\n    'A file for an upload collection. Prefer uploadReference after its upload succeeds; use base64 only for small local files or externalURL for an online file.',\n  )\n\ntype FileInput = z.infer<typeof fileInputSchema>\n\nexport async function resolveFile({\n  collectionSlug,\n  input,\n  req,\n}: {\n  collectionSlug: CollectionSlug\n  input?: FileInput\n  req: PayloadRequest\n}): Promise<File | undefined> {\n  if (!input) {\n    return undefined\n  }\n\n  if (input.source === 'uploadReference') {\n    try {\n      return await getFileFromUploadInstructions({ collectionSlug, file: input.file, req })\n    } catch (error) {\n      if (error instanceof Error && error.message === 'Staged upload was not found.') {\n        throw new APIError(\n          'Staged upload not found. Complete the upload action first, or use base64 for small local files.',\n          400,\n        )\n      }\n      throw error\n    }\n  }\n\n  const uploadConfig = req.payload.collections[collectionSlug]?.config.upload\n\n  if (!uploadConfig) {\n    throw new APIError(`Collection \"${collectionSlug}\" does not support file uploads.`, 400)\n  }\n\n  const maxFileSize = req.payload.config.upload.limits?.fileSize\n  let file: File\n\n  if (input.source === 'base64') {\n    const data = decodeBase64({ maxFileSize, value: input.data })\n\n    file = {\n      name: sanitizeFilename(input.name),\n      data,\n      mimetype: input.mimeType,\n      size: data.length,\n    }\n  } else {\n    if (uploadConfig.pasteURL === false) {\n      throw new APIError(\n        `Uploading files from URLs is disabled for collection \"${collectionSlug}\".`,\n        400,\n      )\n    }\n\n    const url = new URL(input.url)\n\n    if (!['http:', 'https:'].includes(url.protocol)) {\n      throw new APIError('File URLs must use http or https.', 400)\n    }\n\n    if (\n      typeof uploadConfig.pasteURL === 'object' &&\n      !isURLAllowed(input.url, uploadConfig.pasteURL.allowList)\n    ) {\n      throw new APIError('The provided file URL is not allowed.', 400)\n    }\n\n    file = await getExternalFile({\n      data: {\n        filename: sanitizeFilename(input.name || getURLFilename(url)),\n        url: input.url,\n      } as FileData,\n      req,\n      uploadConfig: {\n        ...uploadConfig,\n        externalFileHeaderFilter: uploadConfig.externalFileHeaderFilter ?? (() => ({})),\n      },\n    })\n    file.mimetype = file.mimetype?.split(';')[0] || 'application/octet-stream'\n    file.size = file.data.length\n  }\n\n  if (maxFileSize !== undefined && Number.isFinite(maxFileSize) && file.size > maxFileSize) {\n    throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)\n  }\n\n  return file\n}\n\nfunction decodeBase64({ maxFileSize, value }: { maxFileSize?: number; value: string }): Buffer {\n  const normalized = value.replace(/\\s/g, '')\n\n  if (!/^[a-z0-9+/]*={0,2}$/i.test(normalized) || normalized.length % 4 === 1) {\n    throw new APIError('File data must be valid base64.', 400)\n  }\n\n  if (maxFileSize !== undefined && Number.isFinite(maxFileSize)) {\n    const paddingLength = normalized.endsWith('==') ? 2 : normalized.endsWith('=') ? 1 : 0\n    const decodedSize = Math.floor((normalized.length * 3) / 4) - paddingLength\n\n    if (decodedSize > maxFileSize) {\n      throw new APIError(`File exceeds the ${maxFileSize} byte upload limit.`, 400)\n    }\n  }\n\n  const data = Buffer.from(normalized, 'base64')\n\n  if (data.toString('base64').replace(/=+$/, '') !== normalized.replace(/=+$/, '')) {\n    throw new APIError('File data must be valid base64.', 400)\n  }\n\n  return data\n}\n\nfunction getURLFilename(url: URL): string {\n  const pathSegment = url.pathname.split('/').pop() || 'upload'\n\n  try {\n    return decodeURIComponent(pathSegment)\n  } catch {\n    return pathSegment\n  }\n}\n"],"names":["APIError","getExternalFile","getFileFromUploadInstructions","isURLAllowed","sanitizeFilename","z","mimeTypeSchema","string","regex","uploadFileSchema","object","filename","mimeType","size","number","int","nonnegative","uploadReference","record","unknown","fileInputSchema","discriminatedUnion","name","min","describe","data","source","literal","optional","url","file","resolveFile","collectionSlug","input","req","undefined","error","Error","message","uploadConfig","payload","collections","config","upload","maxFileSize","limits","fileSize","decodeBase64","value","mimetype","length","pasteURL","URL","includes","protocol","allowList","getURLFilename","externalFileHeaderFilter","split","Number","isFinite","normalized","replace","test","paddingLength","endsWith","decodedSize","Math","floor","Buffer","from","toString","pathSegment","pathname","pop","decodeURIComponent"],"mappings":"AAEA,SAASA,QAAQ,QAAQ,UAAS;AAClC,SAASC,eAAe,EAAEC,6BAA6B,EAAEC,YAAY,QAAQ,mBAAkB;AAC/F,SAASC,gBAAgB,QAAQ,iBAAgB;AACjD,SAASC,CAAC,QAAQ,MAAK;AAEvB,MAAMC,iBAAiBD,EACpBE,MAAM,GACNC,KAAK,CAAC,8CAA8C;AAEvD,MAAMC,mBAAmBJ,EAAEK,MAAM,CAAC;IAChCC,UAAUN,EAAEE,MAAM;IAClBK,UAAUP,EAAEE,MAAM;IAClBM,MAAMR,EAAES,MAAM,GAAGC,GAAG,GAAGC,WAAW;IAClCC,iBAAiBZ,EAAEa,MAAM,CAACb,EAAEE,MAAM,IAAIF,EAAEc,OAAO;AACjD;AAEA,OAAO,MAAMC,kBAAkBf,EAC5BgB,kBAAkB,CAAC,UAAU;IAC5BhB,EAAEK,MAAM,CAAC;QACPY,MAAMjB,EAAEE,MAAM,GAAGgB,GAAG,CAAC,GAAGC,QAAQ,CAAC;QACjCC,MAAMpB,EAAEE,MAAM,GAAGiB,QAAQ,CAAC;QAC1BZ,UAAUN,eAAekB,QAAQ,CAAC;QAClCE,QAAQrB,EAAEsB,OAAO,CAAC;IACpB;IACAtB,EAAEK,MAAM,CAAC;QACPY,MAAMjB,EAAEE,MAAM,GAAGgB,GAAG,CAAC,GAAGC,QAAQ,CAAC,+BAA+BI,QAAQ;QACxEF,QAAQrB,EAAEsB,OAAO,CAAC;QAClBE,KAAKxB,EAAEwB,GAAG,GAAGL,QAAQ,CAAC;IACxB;IACAnB,EAAEK,MAAM,CAAC;QACPoB,MAAMrB,iBAAiBe,QAAQ,CAAC;QAChCE,QAAQrB,EAAEsB,OAAO,CAAC;IACpB;CACD,EACAH,QAAQ,CACP,+JACD;AAIH,OAAO,eAAeO,YAAY,EAChCC,cAAc,EACdC,KAAK,EACLC,GAAG,EAKJ;IACC,IAAI,CAACD,OAAO;QACV,OAAOE;IACT;IAEA,IAAIF,MAAMP,MAAM,KAAK,mBAAmB;QACtC,IAAI;YACF,OAAO,MAAMxB,8BAA8B;gBAAE8B;gBAAgBF,MAAMG,MAAMH,IAAI;gBAAEI;YAAI;QACrF,EAAE,OAAOE,OAAO;YACd,IAAIA,iBAAiBC,SAASD,MAAME,OAAO,KAAK,gCAAgC;gBAC9E,MAAM,IAAItC,SACR,mGACA;YAEJ;YACA,MAAMoC;QACR;IACF;IAEA,MAAMG,eAAeL,IAAIM,OAAO,CAACC,WAAW,CAACT,eAAe,EAAEU,OAAOC;IAErE,IAAI,CAACJ,cAAc;QACjB,MAAM,IAAIvC,SAAS,CAAC,YAAY,EAAEgC,eAAe,gCAAgC,CAAC,EAAE;IACtF;IAEA,MAAMY,cAAcV,IAAIM,OAAO,CAACE,MAAM,CAACC,MAAM,CAACE,MAAM,EAAEC;IACtD,IAAIhB;IAEJ,IAAIG,MAAMP,MAAM,KAAK,UAAU;QAC7B,MAAMD,OAAOsB,aAAa;YAAEH;YAAaI,OAAOf,MAAMR,IAAI;QAAC;QAE3DK,OAAO;YACLR,MAAMlB,iBAAiB6B,MAAMX,IAAI;YACjCG;YACAwB,UAAUhB,MAAMrB,QAAQ;YACxBC,MAAMY,KAAKyB,MAAM;QACnB;IACF,OAAO;QACL,IAAIX,aAAaY,QAAQ,KAAK,OAAO;YACnC,MAAM,IAAInD,SACR,CAAC,sDAAsD,EAAEgC,eAAe,EAAE,CAAC,EAC3E;QAEJ;QAEA,MAAMH,MAAM,IAAIuB,IAAInB,MAAMJ,GAAG;QAE7B,IAAI,CAAC;YAAC;YAAS;SAAS,CAACwB,QAAQ,CAACxB,IAAIyB,QAAQ,GAAG;YAC/C,MAAM,IAAItD,SAAS,qCAAqC;QAC1D;QAEA,IACE,OAAOuC,aAAaY,QAAQ,KAAK,YACjC,CAAChD,aAAa8B,MAAMJ,GAAG,EAAEU,aAAaY,QAAQ,CAACI,SAAS,GACxD;YACA,MAAM,IAAIvD,SAAS,yCAAyC;QAC9D;QAEA8B,OAAO,MAAM7B,gBAAgB;YAC3BwB,MAAM;gBACJd,UAAUP,iBAAiB6B,MAAMX,IAAI,IAAIkC,eAAe3B;gBACxDA,KAAKI,MAAMJ,GAAG;YAChB;YACAK;YACAK,cAAc;gBACZ,GAAGA,YAAY;gBACfkB,0BAA0BlB,aAAakB,wBAAwB,IAAK,CAAA,IAAO,CAAA,CAAC,CAAA,CAAC;YAC/E;QACF;QACA3B,KAAKmB,QAAQ,GAAGnB,KAAKmB,QAAQ,EAAES,MAAM,IAAI,CAAC,EAAE,IAAI;QAChD5B,KAAKjB,IAAI,GAAGiB,KAAKL,IAAI,CAACyB,MAAM;IAC9B;IAEA,IAAIN,gBAAgBT,aAAawB,OAAOC,QAAQ,CAAChB,gBAAgBd,KAAKjB,IAAI,GAAG+B,aAAa;QACxF,MAAM,IAAI5C,SAAS,CAAC,iBAAiB,EAAE4C,YAAY,mBAAmB,CAAC,EAAE;IAC3E;IAEA,OAAOd;AACT;AAEA,SAASiB,aAAa,EAAEH,WAAW,EAAEI,KAAK,EAA2C;IACnF,MAAMa,aAAab,MAAMc,OAAO,CAAC,OAAO;IAExC,IAAI,CAAC,uBAAuBC,IAAI,CAACF,eAAeA,WAAWX,MAAM,GAAG,MAAM,GAAG;QAC3E,MAAM,IAAIlD,SAAS,mCAAmC;IACxD;IAEA,IAAI4C,gBAAgBT,aAAawB,OAAOC,QAAQ,CAAChB,cAAc;QAC7D,MAAMoB,gBAAgBH,WAAWI,QAAQ,CAAC,QAAQ,IAAIJ,WAAWI,QAAQ,CAAC,OAAO,IAAI;QACrF,MAAMC,cAAcC,KAAKC,KAAK,CAAC,AAACP,WAAWX,MAAM,GAAG,IAAK,KAAKc;QAE9D,IAAIE,cAActB,aAAa;YAC7B,MAAM,IAAI5C,SAAS,CAAC,iBAAiB,EAAE4C,YAAY,mBAAmB,CAAC,EAAE;QAC3E;IACF;IAEA,MAAMnB,OAAO4C,OAAOC,IAAI,CAACT,YAAY;IAErC,IAAIpC,KAAK8C,QAAQ,CAAC,UAAUT,OAAO,CAAC,OAAO,QAAQD,WAAWC,OAAO,CAAC,OAAO,KAAK;QAChF,MAAM,IAAI9D,SAAS,mCAAmC;IACxD;IAEA,OAAOyB;AACT;AAEA,SAAS+B,eAAe3B,GAAQ;IAC9B,MAAM2C,cAAc3C,IAAI4C,QAAQ,CAACf,KAAK,CAAC,KAAKgB,GAAG,MAAM;IAErD,IAAI;QACF,OAAOC,mBAAmBH;IAC5B,EAAE,OAAM;QACN,OAAOA;IACT;AACF"}

package/dist/mcp/builtin/collections/fileInput.spec.js

@@ -0,0 +1,86 @@
+import { describe, expect, it } from 'vitest';
+import { fileInputSchema, resolveFile } from './fileInput.js';
+describe('MCP file input', ()=>{
+    it('should reject malformed MIME types', ()=>{
+        const result = fileInputSchema.safeParse({
+            data: 'aGVsbG8=',
+            mimeType: 'text/plain\r\nx-test: value',
+            name: 'hello.txt',
+            source: 'base64'
+        });
+        expect(result.success).toBe(false);
+    });
+    it('should accept a prepared upload', ()=>{
+        const result = fileInputSchema.safeParse({
+            file: {
+                filename: 'image.png',
+                mimeType: 'image/png',
+                size: 123,
+                uploadReference: {
+                    uploadId: 'upload-id'
+                }
+            },
+            source: 'uploadReference'
+        });
+        expect(result.success).toBe(true);
+    });
+    it('should reject oversized base64 files', async ()=>{
+        const req = createRequest({
+            maxFileSize: 4
+        });
+        await expect(resolveFile({
+            collectionSlug: 'media',
+            input: {
+                data: Buffer.from('hello').toString('base64'),
+                mimeType: 'text/plain',
+                name: 'hello.txt',
+                source: 'base64'
+            },
+            req
+        })).rejects.toThrow('File exceeds the 4 byte upload limit.');
+    });
+    it('should reject URLs outside the collection allowlist', async ()=>{
+        const req = createRequest({
+            allowList: [
+                {
+                    hostname: 'assets.example.com',
+                    protocol: 'https'
+                }
+            ]
+        });
+        await expect(resolveFile({
+            collectionSlug: 'media',
+            input: {
+                source: 'externalURL',
+                url: 'https://example.com/image.png'
+            },
+            req
+        })).rejects.toThrow('The provided file URL is not allowed.');
+    });
+});
+function createRequest({ allowList, maxFileSize }) {
+    return {
+        payload: {
+            collections: {
+                media: {
+                    config: {
+                        upload: allowList ? {
+                            pasteURL: {
+                                allowList
+                            }
+                        } : {}
+                    }
+                }
+            },
+            config: {
+                upload: {
+                    limits: {
+                        fileSize: maxFileSize
+                    }
+                }
+            }
+        }
+    };
+}
+
+//# sourceMappingURL=fileInput.spec.js.map

package/dist/mcp/builtin/collections/fileInput.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/fileInput.spec.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport { fileInputSchema, resolveFile } from './fileInput.js'\n\ndescribe('MCP file input', () => {\n  it('should reject malformed MIME types', () => {\n    const result = fileInputSchema.safeParse({\n      data: 'aGVsbG8=',\n      mimeType: 'text/plain\\r\\nx-test: value',\n      name: 'hello.txt',\n      source: 'base64',\n    })\n\n    expect(result.success).toBe(false)\n  })\n\n  it('should accept a prepared upload', () => {\n    const result = fileInputSchema.safeParse({\n      file: {\n        filename: 'image.png',\n        mimeType: 'image/png',\n        size: 123,\n        uploadReference: { uploadId: 'upload-id' },\n      },\n      source: 'uploadReference',\n    })\n\n    expect(result.success).toBe(true)\n  })\n\n  it('should reject oversized base64 files', async () => {\n    const req = createRequest({ maxFileSize: 4 })\n\n    await expect(\n      resolveFile({\n        collectionSlug: 'media',\n        input: {\n          data: Buffer.from('hello').toString('base64'),\n          mimeType: 'text/plain',\n          name: 'hello.txt',\n          source: 'base64',\n        },\n        req,\n      }),\n    ).rejects.toThrow('File exceeds the 4 byte upload limit.')\n  })\n\n  it('should reject URLs outside the collection allowlist', async () => {\n    const req = createRequest({\n      allowList: [{ hostname: 'assets.example.com', protocol: 'https' }],\n    })\n\n    await expect(\n      resolveFile({\n        collectionSlug: 'media',\n        input: {\n          source: 'externalURL',\n          url: 'https://example.com/image.png',\n        },\n        req,\n      }),\n    ).rejects.toThrow('The provided file URL is not allowed.')\n  })\n})\n\nfunction createRequest({\n  allowList,\n  maxFileSize,\n}: {\n  allowList?: Array<{ hostname: string; protocol: 'http' | 'https' }>\n  maxFileSize?: number\n}): PayloadRequest {\n  return {\n    payload: {\n      collections: {\n        media: {\n          config: {\n            upload: allowList ? { pasteURL: { allowList } } : {},\n          },\n        },\n      },\n      config: {\n        upload: {\n          limits: {\n            fileSize: maxFileSize,\n          },\n        },\n      },\n    },\n  } as unknown as PayloadRequest\n}\n"],"names":["describe","expect","it","fileInputSchema","resolveFile","result","safeParse","data","mimeType","name","source","success","toBe","file","filename","size","uploadReference","uploadId","req","createRequest","maxFileSize","collectionSlug","input","Buffer","from","toString","rejects","toThrow","allowList","hostname","protocol","url","payload","collections","media","config","upload","pasteURL","limits","fileSize"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,eAAe,EAAEC,WAAW,QAAQ,iBAAgB;AAE7DJ,SAAS,kBAAkB;IACzBE,GAAG,sCAAsC;QACvC,MAAMG,SAASF,gBAAgBG,SAAS,CAAC;YACvCC,MAAM;YACNC,UAAU;YACVC,MAAM;YACNC,QAAQ;QACV;QAEAT,OAAOI,OAAOM,OAAO,EAAEC,IAAI,CAAC;IAC9B;IAEAV,GAAG,mCAAmC;QACpC,MAAMG,SAASF,gBAAgBG,SAAS,CAAC;YACvCO,MAAM;gBACJC,UAAU;gBACVN,UAAU;gBACVO,MAAM;gBACNC,iBAAiB;oBAAEC,UAAU;gBAAY;YAC3C;YACAP,QAAQ;QACV;QAEAT,OAAOI,OAAOM,OAAO,EAAEC,IAAI,CAAC;IAC9B;IAEAV,GAAG,wCAAwC;QACzC,MAAMgB,MAAMC,cAAc;YAAEC,aAAa;QAAE;QAE3C,MAAMnB,OACJG,YAAY;YACViB,gBAAgB;YAChBC,OAAO;gBACLf,MAAMgB,OAAOC,IAAI,CAAC,SAASC,QAAQ,CAAC;gBACpCjB,UAAU;gBACVC,MAAM;gBACNC,QAAQ;YACV;YACAQ;QACF,IACAQ,OAAO,CAACC,OAAO,CAAC;IACpB;IAEAzB,GAAG,uDAAuD;QACxD,MAAMgB,MAAMC,cAAc;YACxBS,WAAW;gBAAC;oBAAEC,UAAU;oBAAsBC,UAAU;gBAAQ;aAAE;QACpE;QAEA,MAAM7B,OACJG,YAAY;YACViB,gBAAgB;YAChBC,OAAO;gBACLZ,QAAQ;gBACRqB,KAAK;YACP;YACAb;QACF,IACAQ,OAAO,CAACC,OAAO,CAAC;IACpB;AACF;AAEA,SAASR,cAAc,EACrBS,SAAS,EACTR,WAAW,EAIZ;IACC,OAAO;QACLY,SAAS;YACPC,aAAa;gBACXC,OAAO;oBACLC,QAAQ;wBACNC,QAAQR,YAAY;4BAAES,UAAU;gCAAET;4BAAU;wBAAE,IAAI,CAAC;oBACrD;gBACF;YACF;YACAO,QAAQ;gBACNC,QAAQ;oBACNE,QAAQ;wBACNC,UAAUnB;oBACZ;gBACF;YACF;QACF;IACF;AACF"}

package/dist/mcp/builtin/collections/findDistinctTool.d.ts

@@ -0,0 +1,2 @@
+export declare const findDistinctTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=findDistinctTool.d.ts.map

package/dist/mcp/builtin/collections/findDistinctTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findDistinctTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/findDistinctTool.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,gBAAgB,4CA0G3B,CAAA"}

package/dist/mcp/builtin/collections/findDistinctTool.js

@@ -0,0 +1,92 @@
+import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Find distinct values for a field in any collection by passing the collection slug and field path.';
+export const findDistinctTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Find Distinct'
+    },
+    description: DEFAULT_DESCRIPTION,
+    input: z.object({
+        depth: z.number().int().min(0).max(10).describe('How many levels deep to populate relationships in distinct values').optional().default(0),
+        field: z.string().describe('The field path to get distinct values for'),
+        limit: z.number().int().min(1).max(100).describe('Maximum number of distinct values to return (max: 100)').optional(),
+        locale: z.string().describe('Optional: locale code to retrieve data in (e.g., "en", "es"). Use "all" to retrieve all locales for localized fields').optional(),
+        page: z.number().int().min(1).describe('Page number for pagination').optional(),
+        populate: z.record(z.string(), z.unknown()).describe('Optional: control which fields to include from populated relationship or upload documents.').optional(),
+        showHiddenFields: z.boolean().describe('Optional: include hidden fields in the distinct query').optional(),
+        sort: z.string().describe('Field to sort by (e.g., "createdAt", "-updatedAt" for descending)').optional(),
+        trash: z.boolean().describe('Optional: include soft-deleted documents when trash is enabled on the collection').optional(),
+        where: whereSchema.describe('Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {"title":{"contains":"test"}}').optional()
+    })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { depth, field, limit, locale, page, populate, showHiddenFields, sort, trash, where } = input;
+    logger.info(`Finding distinct values in collection: ${collectionSlug}, field: ${field}`);
+    try {
+        const result = await payload.findDistinct({
+            collection: collectionSlug,
+            depth,
+            field,
+            overrideAccess: authorizedMCP.overrideAccess,
+            req,
+            ...limit ? {
+                limit
+            } : {},
+            ...locale ? {
+                locale
+            } : {},
+            ...page ? {
+                page
+            } : {},
+            ...populate ? {
+                populate: populate
+            } : {},
+            ...showHiddenFields !== undefined ? {
+                showHiddenFields
+            } : {},
+            ...sort ? {
+                sort
+            } : {},
+            ...trash !== undefined ? {
+                trash
+            } : {},
+            ...where ? {
+                where
+            } : {}
+        });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `Distinct values for "${field}" in collection "${collectionSlug}":\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error finding distinct values in ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error finding distinct values in collection "${collectionSlug}":** ${errorMessage}`
+                }
+            ],
+            isError: true
+        };
+    }
+});
+
+//# sourceMappingURL=findDistinctTool.js.map

package/dist/mcp/builtin/collections/findDistinctTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/findDistinctTool.ts"],"sourcesContent":["import type { PopulateType } from 'payload'\n\nimport { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Find distinct values for a field in any collection by passing the collection slug and field path.'\n\nexport const findDistinctTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Find Distinct',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('How many levels deep to populate relationships in distinct values')\n      .optional()\n      .default(0),\n    field: z.string().describe('The field path to get distinct values for'),\n    limit: z\n      .number()\n      .int()\n      .min(1)\n      .max(100)\n      .describe('Maximum number of distinct values to return (max: 100)')\n      .optional(),\n    locale: z\n      .string()\n      .describe(\n        'Optional: locale code to retrieve data in (e.g., \"en\", \"es\"). Use \"all\" to retrieve all locales for localized fields',\n      )\n      .optional(),\n    page: z.number().int().min(1).describe('Page number for pagination').optional(),\n    populate: z\n      .record(z.string(), z.unknown())\n      .describe(\n        'Optional: control which fields to include from populated relationship or upload documents.',\n      )\n      .optional(),\n    showHiddenFields: z\n      .boolean()\n      .describe('Optional: include hidden fields in the distinct query')\n      .optional(),\n    sort: z\n      .string()\n      .describe('Field to sort by (e.g., \"createdAt\", \"-updatedAt\" for descending)')\n      .optional(),\n    trash: z\n      .boolean()\n      .describe('Optional: include soft-deleted documents when trash is enabled on the collection')\n      .optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {\"title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { depth, field, limit, locale, page, populate, showHiddenFields, sort, trash, where } =\n    input\n\n  logger.info(`Finding distinct values in collection: ${collectionSlug}, field: ${field}`)\n\n  try {\n    const result = await payload.findDistinct({\n      collection: collectionSlug,\n      depth,\n      field,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n      ...(limit ? { limit } : {}),\n      ...(locale ? { locale } : {}),\n      ...(page ? { page } : {}),\n      ...(populate ? { populate: populate as PopulateType } : {}),\n      ...(showHiddenFields !== undefined ? { showHiddenFields } : {}),\n      ...(sort ? { sort } : {}),\n      ...(trash !== undefined ? { trash } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Distinct values for \"${field}\" in collection \"${collectionSlug}\":\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error finding distinct values in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error finding distinct values in collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","whereSchema","DEFAULT_DESCRIPTION","findDistinctTool","access","args","Boolean","permissions","collections","collectionSlug","read","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","depth","number","int","min","max","describe","optional","default","field","string","limit","locale","page","populate","record","unknown","showHiddenFields","boolean","sort","trash","where","handler","authorizedMCP","req","payload","logger","info","result","findDistinct","collection","overrideAccess","undefined","content","type","text","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAEA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,mBAAmBJ,qBAAqB;IACnDK,QAAQ,CAACC,OACPP,cAAcO,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IACvFC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOrB,EAAEsB,MAAM,CAAC;QACdC,OAAOvB,EACJwB,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJC,QAAQ,CAAC,qEACTC,QAAQ,GACRC,OAAO,CAAC;QACXC,OAAO/B,EAAEgC,MAAM,GAAGJ,QAAQ,CAAC;QAC3BK,OAAOjC,EACJwB,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,KACJC,QAAQ,CAAC,0DACTC,QAAQ;QACXK,QAAQlC,EACLgC,MAAM,GACNJ,QAAQ,CACP,wHAEDC,QAAQ;QACXM,MAAMnC,EAAEwB,MAAM,GAAGC,GAAG,GAAGC,GAAG,CAAC,GAAGE,QAAQ,CAAC,8BAA8BC,QAAQ;QAC7EO,UAAUpC,EACPqC,MAAM,CAACrC,EAAEgC,MAAM,IAAIhC,EAAEsC,OAAO,IAC5BV,QAAQ,CACP,8FAEDC,QAAQ;QACXU,kBAAkBvC,EACfwC,OAAO,GACPZ,QAAQ,CAAC,yDACTC,QAAQ;QACXY,MAAMzC,EACHgC,MAAM,GACNJ,QAAQ,CAAC,qEACTC,QAAQ;QACXa,OAAO1C,EACJwC,OAAO,GACPZ,QAAQ,CAAC,oFACTC,QAAQ;QACXc,OAAOvC,YACJwB,QAAQ,CACP,oJAEDC,QAAQ;IACb;AACF,GAAGe,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEjC,cAAc,EAAES,KAAK,EAAEyB,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAS7C,UAAU;QAAE4C;IAAQ;IACnC,MAAM,EAAExB,KAAK,EAAEQ,KAAK,EAAEE,KAAK,EAAEC,MAAM,EAAEC,IAAI,EAAEC,QAAQ,EAAEG,gBAAgB,EAAEE,IAAI,EAAEC,KAAK,EAAEC,KAAK,EAAE,GACzFtB;IAEF2B,OAAOC,IAAI,CAAC,CAAC,uCAAuC,EAAErC,eAAe,SAAS,EAAEmB,OAAO;IAEvF,IAAI;QACF,MAAMmB,SAAS,MAAMH,QAAQI,YAAY,CAAC;YACxCC,YAAYxC;YACZW;YACAQ;YACAsB,gBAAgBR,cAAcQ,cAAc;YAC5CP;YACA,GAAIb,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;YAC1B,GAAIC,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAIC,OAAO;gBAAEA;YAAK,IAAI,CAAC,CAAC;YACxB,GAAIC,WAAW;gBAAEA,UAAUA;YAAyB,IAAI,CAAC,CAAC;YAC1D,GAAIG,qBAAqBe,YAAY;gBAAEf;YAAiB,IAAI,CAAC,CAAC;YAC9D,GAAIE,OAAO;gBAAEA;YAAK,IAAI,CAAC,CAAC;YACxB,GAAIC,UAAUY,YAAY;gBAAEZ;YAAM,IAAI,CAAC,CAAC;YACxC,GAAIC,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLY,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,qBAAqB,EAAE1B,MAAM,iBAAiB,EAAEnB,eAAe,gBAAgB,EAAE8C,KAAKC,SAAS,CAACT,QAAQ,QAAQ,CAAC;gBAC1H;aACD;YACDU,KAAKV;QACP;IACF,EAAE,OAAOW,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DhB,OAAOa,KAAK,CAAC,CAAC,iCAAiC,EAAEjD,eAAe,EAAE,EAAEkD,cAAc;QAClF,OAAO;YACLP,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,iDAAiD,EAAE7C,eAAe,KAAK,EAAEkD,cAAc;gBAChG;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/findTool.d.ts

@@ -0,0 +1,2 @@
+export declare const findDocumentsTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=findTool.d.ts.map

package/dist/mcp/builtin/collections/findTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/findTool.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,iBAAiB,4CA2M5B,CAAA"}

package/dist/mcp/builtin/collections/findTool.js

@@ -0,0 +1,164 @@
+import { z } from 'zod';
+import { defaultAccess } from '../../../defaultAccess.js';
+import { defineCollectionTool } from '../../../defineTool.js';
+import { getLogger } from '../../../utils/getLogger.js';
+import { whereSchema } from '../../../utils/whereSchema.js';
+const DEFAULT_DESCRIPTION = 'Find documents in any collection by passing the collection slug and optional ID or where clause.';
+export const findDocumentsTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),
+    annotations: {
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false,
+        readOnlyHint: true,
+        title: 'Find Documents'
+    },
+    description: DEFAULT_DESCRIPTION,
+    input: z.object({
+        id: z.union([
+            z.string(),
+            z.number()
+        ]).describe('Optional: specific document ID to retrieve. If not provided, returns all documents').optional(),
+        depth: z.number().int().min(0).max(10).describe('How many levels deep to populate relationships (default: 0)').optional().default(0),
+        draft: z.boolean().describe('For versioned collections, true returns the latest draft version when available. False reads the main document.').optional(),
+        fallbackLocale: z.string().describe('Optional: fallback locale code to use when requested locale is not available').optional(),
+        joins: z.union([
+            z.record(z.string(), z.unknown()),
+            z.literal(false)
+        ]).describe('Optional: configure join field queries, or pass false to disable all join fields.').optional(),
+        limit: z.number().int().min(1).max(100).describe('Maximum number of documents to return (default: 10, max: 100)').optional().default(10),
+        locale: z.string().describe('Optional: locale code to retrieve data in (e.g., "en", "es"). Use "all" to retrieve all locales for localized fields').optional(),
+        page: z.number().int().min(1).describe('Page number for pagination (default: 1)').optional().default(1),
+        pagination: z.boolean().describe('Optional: set to false to skip the count query overhead').optional(),
+        populate: z.record(z.string(), z.unknown()).describe('Optional: control which fields to include from populated relationship or upload documents.').optional(),
+        select: z.record(z.string(), z.unknown()).describe('Optional: define exactly which fields you\'d like to return in the response, e.g., {"title": true}').optional(),
+        sort: z.string().describe('Field to sort by (e.g., "createdAt", "-updatedAt" for descending)').optional(),
+        trash: z.boolean().describe('Optional: include soft-deleted documents when trash is enabled on the collection').optional(),
+        where: whereSchema.describe('Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {"title":{"contains":"test"}}').optional()
+    })
+}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    const payload = req.payload;
+    const logger = getLogger({
+        payload
+    });
+    const { id, depth, draft, fallbackLocale, joins, limit, locale, page, pagination, populate, select, sort, trash, where } = input;
+    logger.info(`Reading document from collection: ${collectionSlug}${id ? ` with ID: ${id}` : ''}, limit: ${limit}, page: ${page}${locale ? `, locale: ${locale}` : ''}`);
+    try {
+        if (id) {
+            try {
+                const doc = await payload.findByID({
+                    id,
+                    collection: collectionSlug,
+                    depth,
+                    overrideAccess: authorizedMCP.overrideAccess,
+                    req,
+                    ...select && {
+                        select: select
+                    },
+                    ...populate && {
+                        populate: populate
+                    },
+                    ...joins !== undefined && {
+                        joins: joins
+                    },
+                    ...locale && {
+                        locale
+                    },
+                    ...fallbackLocale && {
+                        fallbackLocale
+                    },
+                    ...draft !== undefined && {
+                        draft
+                    },
+                    ...trash !== undefined && {
+                        trash
+                    }
+                });
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Document from collection "${collectionSlug}":\n${JSON.stringify(doc)}`
+                        }
+                    ],
+                    doc: doc
+                };
+            } catch  {
+                logger.warn(`Document not found with ID: ${id} in collection: ${collectionSlug}`);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Error: Document with ID "${id}" not found in collection "${collectionSlug}"`
+                        }
+                    ]
+                };
+            }
+        }
+        const findOptions = {
+            collection: collectionSlug,
+            depth,
+            limit,
+            overrideAccess: authorizedMCP.overrideAccess,
+            page,
+            req,
+            ...select && {
+                select: select
+            },
+            ...populate && {
+                populate: populate
+            },
+            ...joins !== undefined && {
+                joins: joins
+            },
+            ...locale && {
+                locale
+            },
+            ...fallbackLocale && {
+                fallbackLocale
+            },
+            ...draft !== undefined && {
+                draft
+            },
+            ...pagination !== undefined && {
+                pagination
+            },
+            ...trash !== undefined && {
+                trash
+            }
+        };
+        if (sort) {
+            findOptions.sort = sort;
+        }
+        if (where) {
+            findOptions.where = where;
+        }
+        const result = await payload.find(findOptions);
+        let responseText = `Collection: "${collectionSlug}"\nTotal: ${result.totalDocs} documents\nPage: ${result.page} of ${result.totalPages}\n`;
+        for (const doc of result.docs){
+            responseText += `\n\`\`\`json\n${JSON.stringify(doc)}\n\`\`\``;
+        }
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: responseText
+                }
+            ],
+            doc: result
+        };
+    } catch (error) {
+        const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Error reading documents from collection ${collectionSlug}: ${errorMessage}`);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `❌ **Error reading documents from collection "${collectionSlug}":** ${errorMessage}`
+                }
+            ]
+        };
+    }
+});
+
+//# sourceMappingURL=findTool.js.map

package/dist/mcp/builtin/collections/findTool.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/findTool.ts"],"sourcesContent":["import type { JoinQuery, PopulateType, SelectType } from 'payload'\n\nimport { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Find documents in any collection by passing the collection slug and optional ID or where clause.'\n\nexport const findDocumentsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Find Documents',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    id: z\n      .union([z.string(), z.number()])\n      .describe(\n        'Optional: specific document ID to retrieve. If not provided, returns all documents',\n      )\n      .optional(),\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('How many levels deep to populate relationships (default: 0)')\n      .optional()\n      .default(0),\n    draft: z\n      .boolean()\n      .describe(\n        'For versioned collections, true returns the latest draft version when available. False reads the main document.',\n      )\n      .optional(),\n    fallbackLocale: z\n      .string()\n      .describe('Optional: fallback locale code to use when requested locale is not available')\n      .optional(),\n    joins: z\n      .union([z.record(z.string(), z.unknown()), z.literal(false)])\n      .describe('Optional: configure join field queries, or pass false to disable all join fields.')\n      .optional(),\n    limit: z\n      .number()\n      .int()\n      .min(1)\n      .max(100)\n      .describe('Maximum number of documents to return (default: 10, max: 100)')\n      .optional()\n      .default(10),\n    locale: z\n      .string()\n      .describe(\n        'Optional: locale code to retrieve data in (e.g., \"en\", \"es\"). Use \"all\" to retrieve all locales for localized fields',\n      )\n      .optional(),\n    page: z\n      .number()\n      .int()\n      .min(1)\n      .describe('Page number for pagination (default: 1)')\n      .optional()\n      .default(1),\n    pagination: z\n      .boolean()\n      .describe('Optional: set to false to skip the count query overhead')\n      .optional(),\n    populate: z\n      .record(z.string(), z.unknown())\n      .describe(\n        'Optional: control which fields to include from populated relationship or upload documents.',\n      )\n      .optional(),\n    select: z\n      .record(z.string(), z.unknown())\n      .describe(\n        'Optional: define exactly which fields you\\'d like to return in the response, e.g., {\"title\": true}',\n      )\n      .optional(),\n    sort: z\n      .string()\n      .describe('Field to sort by (e.g., \"createdAt\", \"-updatedAt\" for descending)')\n      .optional(),\n    trash: z\n      .boolean()\n      .describe('Optional: include soft-deleted documents when trash is enabled on the collection')\n      .optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {\"title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n\n  const {\n    id,\n    depth,\n    draft,\n    fallbackLocale,\n    joins,\n    limit,\n    locale,\n    page,\n    pagination,\n    populate,\n    select,\n    sort,\n    trash,\n    where,\n  } = input\n\n  logger.info(\n    `Reading document from collection: ${collectionSlug}${id ? ` with ID: ${id}` : ''}, limit: ${limit}, page: ${page}${locale ? `, locale: ${locale}` : ''}`,\n  )\n\n  try {\n    if (id) {\n      try {\n        const doc = await payload.findByID({\n          id,\n          collection: collectionSlug,\n          depth,\n          overrideAccess: authorizedMCP.overrideAccess,\n          req,\n          ...(select && { select: select as SelectType }),\n          ...(populate && { populate: populate as PopulateType }),\n          ...(joins !== undefined && { joins: joins as JoinQuery }),\n          ...(locale && { locale }),\n          ...(fallbackLocale && { fallbackLocale }),\n          ...(draft !== undefined && { draft }),\n          ...(trash !== undefined && { trash }),\n        })\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Document from collection \"${collectionSlug}\":\\n${JSON.stringify(doc)}`,\n            },\n          ],\n          doc: doc as Record<string, unknown>,\n        }\n      } catch {\n        logger.warn(`Document not found with ID: ${id} in collection: ${collectionSlug}`)\n        return {\n          content: [\n            {\n              type: 'text',\n              text: `Error: Document with ID \"${id}\" not found in collection \"${collectionSlug}\"`,\n            },\n          ],\n        }\n      }\n    }\n\n    const findOptions: Parameters<typeof payload.find>[0] = {\n      collection: collectionSlug,\n      depth,\n      limit,\n      overrideAccess: authorizedMCP.overrideAccess,\n      page,\n      req,\n      ...(select && { select: select as SelectType }),\n      ...(populate && { populate: populate as PopulateType }),\n      ...(joins !== undefined && { joins: joins as JoinQuery }),\n      ...(locale && { locale }),\n      ...(fallbackLocale && { fallbackLocale }),\n      ...(draft !== undefined && { draft }),\n      ...(pagination !== undefined && { pagination }),\n      ...(trash !== undefined && { trash }),\n    }\n\n    if (sort) {\n      findOptions.sort = sort\n    }\n    if (where) {\n      findOptions.where = where\n    }\n\n    const result = await payload.find(findOptions)\n\n    let responseText = `Collection: \"${collectionSlug}\"\\nTotal: ${result.totalDocs} documents\\nPage: ${result.page} of ${result.totalPages}\\n`\n    for (const doc of result.docs) {\n      responseText += `\\n\\`\\`\\`json\\n${JSON.stringify(doc)}\\n\\`\\`\\``\n    }\n\n    return {\n      content: [{ type: 'text', text: responseText }],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error reading documents from collection ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error reading documents from collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","whereSchema","DEFAULT_DESCRIPTION","findDocumentsTool","access","args","Boolean","permissions","collections","collectionSlug","read","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","id","union","string","number","describe","optional","depth","int","min","max","default","draft","boolean","fallbackLocale","joins","record","unknown","literal","limit","locale","page","pagination","populate","select","sort","trash","where","handler","authorizedMCP","req","payload","logger","info","doc","findByID","collection","overrideAccess","undefined","content","type","text","JSON","stringify","warn","findOptions","result","find","responseText","totalDocs","totalPages","docs","error","errorMessage","Error","message"],"mappings":"AAEA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,oBAAoBJ,qBAAqB;IACpDK,QAAQ,CAACC,OACPP,cAAcO,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IACvFC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOrB,EAAEsB,MAAM,CAAC;QACdC,IAAIvB,EACDwB,KAAK,CAAC;YAACxB,EAAEyB,MAAM;YAAIzB,EAAE0B,MAAM;SAAG,EAC9BC,QAAQ,CACP,sFAEDC,QAAQ;QACXC,OAAO7B,EACJ0B,MAAM,GACNI,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJL,QAAQ,CAAC,+DACTC,QAAQ,GACRK,OAAO,CAAC;QACXC,OAAOlC,EACJmC,OAAO,GACPR,QAAQ,CACP,mHAEDC,QAAQ;QACXQ,gBAAgBpC,EACbyB,MAAM,GACNE,QAAQ,CAAC,gFACTC,QAAQ;QACXS,OAAOrC,EACJwB,KAAK,CAAC;YAACxB,EAAEsC,MAAM,CAACtC,EAAEyB,MAAM,IAAIzB,EAAEuC,OAAO;YAAKvC,EAAEwC,OAAO,CAAC;SAAO,EAC3Db,QAAQ,CAAC,qFACTC,QAAQ;QACXa,OAAOzC,EACJ0B,MAAM,GACNI,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,KACJL,QAAQ,CAAC,iEACTC,QAAQ,GACRK,OAAO,CAAC;QACXS,QAAQ1C,EACLyB,MAAM,GACNE,QAAQ,CACP,wHAEDC,QAAQ;QACXe,MAAM3C,EACH0B,MAAM,GACNI,GAAG,GACHC,GAAG,CAAC,GACJJ,QAAQ,CAAC,2CACTC,QAAQ,GACRK,OAAO,CAAC;QACXW,YAAY5C,EACTmC,OAAO,GACPR,QAAQ,CAAC,2DACTC,QAAQ;QACXiB,UAAU7C,EACPsC,MAAM,CAACtC,EAAEyB,MAAM,IAAIzB,EAAEuC,OAAO,IAC5BZ,QAAQ,CACP,8FAEDC,QAAQ;QACXkB,QAAQ9C,EACLsC,MAAM,CAACtC,EAAEyB,MAAM,IAAIzB,EAAEuC,OAAO,IAC5BZ,QAAQ,CACP,sGAEDC,QAAQ;QACXmB,MAAM/C,EACHyB,MAAM,GACNE,QAAQ,CAAC,qEACTC,QAAQ;QACXoB,OAAOhD,EACJmC,OAAO,GACPR,QAAQ,CAAC,oFACTC,QAAQ;QACXqB,OAAO7C,YACJuB,QAAQ,CACP,oJAEDC,QAAQ;IACb;AACF,GAAGsB,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEvC,cAAc,EAAES,KAAK,EAAE+B,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAASnD,UAAU;QAAEkD;IAAQ;IAEnC,MAAM,EACJ9B,EAAE,EACFM,KAAK,EACLK,KAAK,EACLE,cAAc,EACdC,KAAK,EACLI,KAAK,EACLC,MAAM,EACNC,IAAI,EACJC,UAAU,EACVC,QAAQ,EACRC,MAAM,EACNC,IAAI,EACJC,KAAK,EACLC,KAAK,EACN,GAAG5B;IAEJiC,OAAOC,IAAI,CACT,CAAC,kCAAkC,EAAE3C,iBAAiBW,KAAK,CAAC,UAAU,EAAEA,IAAI,GAAG,GAAG,SAAS,EAAEkB,MAAM,QAAQ,EAAEE,OAAOD,SAAS,CAAC,UAAU,EAAEA,QAAQ,GAAG,IAAI;IAG3J,IAAI;QACF,IAAInB,IAAI;YACN,IAAI;gBACF,MAAMiC,MAAM,MAAMH,QAAQI,QAAQ,CAAC;oBACjClC;oBACAmC,YAAY9C;oBACZiB;oBACA8B,gBAAgBR,cAAcQ,cAAc;oBAC5CP;oBACA,GAAIN,UAAU;wBAAEA,QAAQA;oBAAqB,CAAC;oBAC9C,GAAID,YAAY;wBAAEA,UAAUA;oBAAyB,CAAC;oBACtD,GAAIR,UAAUuB,aAAa;wBAAEvB,OAAOA;oBAAmB,CAAC;oBACxD,GAAIK,UAAU;wBAAEA;oBAAO,CAAC;oBACxB,GAAIN,kBAAkB;wBAAEA;oBAAe,CAAC;oBACxC,GAAIF,UAAU0B,aAAa;wBAAE1B;oBAAM,CAAC;oBACpC,GAAIc,UAAUY,aAAa;wBAAEZ;oBAAM,CAAC;gBACtC;gBAEA,OAAO;oBACLa,SAAS;wBACP;4BACEC,MAAM;4BACNC,MAAM,CAAC,0BAA0B,EAAEnD,eAAe,IAAI,EAAEoD,KAAKC,SAAS,CAACT,MAAM;wBAC/E;qBACD;oBACDA,KAAKA;gBACP;YACF,EAAE,OAAM;gBACNF,OAAOY,IAAI,CAAC,CAAC,4BAA4B,EAAE3C,GAAG,gBAAgB,EAAEX,gBAAgB;gBAChF,OAAO;oBACLiD,SAAS;wBACP;4BACEC,MAAM;4BACNC,MAAM,CAAC,yBAAyB,EAAExC,GAAG,2BAA2B,EAAEX,eAAe,CAAC,CAAC;wBACrF;qBACD;gBACH;YACF;QACF;QAEA,MAAMuD,cAAkD;YACtDT,YAAY9C;YACZiB;YACAY;YACAkB,gBAAgBR,cAAcQ,cAAc;YAC5ChB;YACAS;YACA,GAAIN,UAAU;gBAAEA,QAAQA;YAAqB,CAAC;YAC9C,GAAID,YAAY;gBAAEA,UAAUA;YAAyB,CAAC;YACtD,GAAIR,UAAUuB,aAAa;gBAAEvB,OAAOA;YAAmB,CAAC;YACxD,GAAIK,UAAU;gBAAEA;YAAO,CAAC;YACxB,GAAIN,kBAAkB;gBAAEA;YAAe,CAAC;YACxC,GAAIF,UAAU0B,aAAa;gBAAE1B;YAAM,CAAC;YACpC,GAAIU,eAAegB,aAAa;gBAAEhB;YAAW,CAAC;YAC9C,GAAII,UAAUY,aAAa;gBAAEZ;YAAM,CAAC;QACtC;QAEA,IAAID,MAAM;YACRoB,YAAYpB,IAAI,GAAGA;QACrB;QACA,IAAIE,OAAO;YACTkB,YAAYlB,KAAK,GAAGA;QACtB;QAEA,MAAMmB,SAAS,MAAMf,QAAQgB,IAAI,CAACF;QAElC,IAAIG,eAAe,CAAC,aAAa,EAAE1D,eAAe,UAAU,EAAEwD,OAAOG,SAAS,CAAC,kBAAkB,EAAEH,OAAOzB,IAAI,CAAC,IAAI,EAAEyB,OAAOI,UAAU,CAAC,EAAE,CAAC;QAC1I,KAAK,MAAMhB,OAAOY,OAAOK,IAAI,CAAE;YAC7BH,gBAAgB,CAAC,cAAc,EAAEN,KAAKC,SAAS,CAACT,KAAK,QAAQ,CAAC;QAChE;QAEA,OAAO;YACLK,SAAS;gBAAC;oBAAEC,MAAM;oBAAQC,MAAMO;gBAAa;aAAE;YAC/Cd,KAAKY;QACP;IACF,EAAE,OAAOM,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DvB,OAAOoB,KAAK,CAAC,CAAC,wCAAwC,EAAE9D,eAAe,EAAE,EAAE+D,cAAc;QACzF,OAAO;YACLd,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,6CAA6C,EAAEnD,eAAe,KAAK,EAAE+D,cAAc;gBAC5F;aACD;QACH;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/findVersionByIDTool.d.ts

@@ -0,0 +1,2 @@
+export declare const findVersionByIDTool: import("../../../types.js").CollectionTool;
+//# sourceMappingURL=findVersionByIDTool.d.ts.map

package/dist/mcp/builtin/collections/findVersionByIDTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findVersionByIDTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/findVersionByIDTool.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,mBAAmB,4CAiG9B,CAAA"}