@payloadcms/plugin-mcp 4.0.0-internal.e16cf59 → 4.0.0-internal.e38d3ac

package/dist/mcp/builtin/validateEntityData.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/mcp/builtin/validateEntityData.ts"],"sourcesContent":["import type { CollectionSlug, GlobalSlug, PayloadRequest, SanitizedConfig } from 'payload'\n\nimport { CfWorkerJsonSchemaValidator } from '@modelcontextprotocol/server/validators/cf-worker'\n\nimport type { JsonSchemaType, MCPToolResponse } from '../../types.js'\n\nimport {\n  getCollectionInputSchema,\n  getGlobalInputSchema,\n} from '../../utils/schemaConversion/getEntityInputSchema.js'\n\n/**\n * Keep the default `shortcircuit: true` - `false` makes validating nested rich text exponentially slow.\n */\nconst validator = new CfWorkerJsonSchemaValidator({ shortcircuit: true })\n\ntype EntityValidator = {\n  schema: JsonSchemaType\n  validate: ReturnType<(typeof validator)['getValidator']>\n}\n\n/**\n * - Caches each entity's schema and validator, so both are only built on the first request.\n * - Keyed by payload config, then by entity type, slug, partial and language.\n */\nconst validatorCache = new WeakMap<SanitizedConfig, Map<string, EntityValidator>>()\n\nexport const validateCollectionData = ({\n  collectionSlug,\n  data,\n  partial,\n  req,\n}: {\n  collectionSlug: CollectionSlug\n  data: Record<string, unknown>\n  partial?: boolean\n  req: PayloadRequest\n}): MCPToolResponse | null =>\n  validateData({\n    slug: collectionSlug,\n    buildSchema: () => getCollectionInputSchema({ collectionSlug, req }),\n    data,\n    entity: 'collection',\n    partial,\n    req,\n  })\n\nexport const validateGlobalData = ({\n  data,\n  globalSlug,\n  req,\n}: {\n  data: Record<string, unknown>\n  globalSlug: GlobalSlug\n  req: PayloadRequest\n}): MCPToolResponse | null =>\n  validateData({\n    slug: globalSlug,\n    buildSchema: () => getGlobalInputSchema({ globalSlug, req }),\n    data,\n    entity: 'global',\n    partial: true,\n    req,\n  })\n\nconst validateData = ({\n  slug,\n  buildSchema,\n  data,\n  entity,\n  partial,\n  req,\n}: {\n  buildSchema: () => JsonSchemaType | null\n  data: Record<string, unknown>\n  entity: 'collection' | 'global'\n  partial?: boolean\n  req: PayloadRequest\n  slug: string\n}): MCPToolResponse | null => {\n  let cache = validatorCache.get(req.payload.config)\n  if (!cache) {\n    cache = new Map()\n    validatorCache.set(req.payload.config, cache)\n  }\n\n  const cacheKey = `${entity}:${slug}:${partial ? 'partial' : 'full'}:${req.i18n.language}`\n  let entityValidator = cache.get(cacheKey)\n\n  if (!entityValidator) {\n    const schema = buildSchema()\n\n    if (!schema) {\n      return null\n    }\n\n    entityValidator = {\n      schema,\n      validate: validator.getValidator(partial ? withoutRequired(schema) : schema),\n    }\n    cache.set(cacheKey, entityValidator)\n  }\n\n  const result = entityValidator.validate(data)\n\n  if (result.valid) {\n    return null\n  }\n\n  const { schema } = entityValidator\n\n  return {\n    content: [\n      {\n        type: 'text',\n        text: `Invalid data for ${entity} \"${slug}\": ${result.errorMessage}\\n\\nUse this schema for data:\\n\\`\\`\\`json\\n${JSON.stringify(schema)}\\n\\`\\`\\``,\n      },\n    ],\n    isError: true,\n    structuredContent: {\n      [`${entity}Slug`]: slug,\n      errors: [{ message: result.errorMessage }],\n      schema,\n    },\n  }\n}\n\n/** Updates are partial — drop the schema's top-level `required` before validating. */\nconst withoutRequired = (schema: JsonSchemaType): JsonSchemaType => {\n  const { required: _required, ...rest } = schema\n  return rest\n}\n"],"names":["CfWorkerJsonSchemaValidator","getCollectionInputSchema","getGlobalInputSchema","validator","shortcircuit","validatorCache","WeakMap","validateCollectionData","collectionSlug","data","partial","req","validateData","slug","buildSchema","entity","validateGlobalData","globalSlug","cache","get","payload","config","Map","set","cacheKey","i18n","language","entityValidator","schema","validate","getValidator","withoutRequired","result","valid","content","type","text","errorMessage","JSON","stringify","isError","structuredContent","errors","message","required","_required","rest"],"mappings":"AAEA,SAASA,2BAA2B,QAAQ,oDAAmD;AAI/F,SACEC,wBAAwB,EACxBC,oBAAoB,QACf,uDAAsD;AAE7D;;CAEC,GACD,MAAMC,YAAY,IAAIH,4BAA4B;IAAEI,cAAc;AAAK;AAOvE;;;CAGC,GACD,MAAMC,iBAAiB,IAAIC;AAE3B,OAAO,MAAMC,yBAAyB,CAAC,EACrCC,cAAc,EACdC,IAAI,EACJC,OAAO,EACPC,GAAG,EAMJ,GACCC,aAAa;QACXC,MAAML;QACNM,aAAa,IAAMb,yBAAyB;gBAAEO;gBAAgBG;YAAI;QAClEF;QACAM,QAAQ;QACRL;QACAC;IACF,GAAE;AAEJ,OAAO,MAAMK,qBAAqB,CAAC,EACjCP,IAAI,EACJQ,UAAU,EACVN,GAAG,EAKJ,GACCC,aAAa;QACXC,MAAMI;QACNH,aAAa,IAAMZ,qBAAqB;gBAAEe;gBAAYN;YAAI;QAC1DF;QACAM,QAAQ;QACRL,SAAS;QACTC;IACF,GAAE;AAEJ,MAAMC,eAAe,CAAC,EACpBC,IAAI,EACJC,WAAW,EACXL,IAAI,EACJM,MAAM,EACNL,OAAO,EACPC,GAAG,EAQJ;IACC,IAAIO,QAAQb,eAAec,GAAG,CAACR,IAAIS,OAAO,CAACC,MAAM;IACjD,IAAI,CAACH,OAAO;QACVA,QAAQ,IAAII;QACZjB,eAAekB,GAAG,CAACZ,IAAIS,OAAO,CAACC,MAAM,EAAEH;IACzC;IAEA,MAAMM,WAAW,GAAGT,OAAO,CAAC,EAAEF,KAAK,CAAC,EAAEH,UAAU,YAAY,OAAO,CAAC,EAAEC,IAAIc,IAAI,CAACC,QAAQ,EAAE;IACzF,IAAIC,kBAAkBT,MAAMC,GAAG,CAACK;IAEhC,IAAI,CAACG,iBAAiB;QACpB,MAAMC,SAASd;QAEf,IAAI,CAACc,QAAQ;YACX,OAAO;QACT;QAEAD,kBAAkB;YAChBC;YACAC,UAAU1B,UAAU2B,YAAY,CAACpB,UAAUqB,gBAAgBH,UAAUA;QACvE;QACAV,MAAMK,GAAG,CAACC,UAAUG;IACtB;IAEA,MAAMK,SAASL,gBAAgBE,QAAQ,CAACpB;IAExC,IAAIuB,OAAOC,KAAK,EAAE;QAChB,OAAO;IACT;IAEA,MAAM,EAAEL,MAAM,EAAE,GAAGD;IAEnB,OAAO;QACLO,SAAS;YACP;gBACEC,MAAM;gBACNC,MAAM,CAAC,iBAAiB,EAAErB,OAAO,EAAE,EAAEF,KAAK,GAAG,EAAEmB,OAAOK,YAAY,CAAC,2CAA2C,EAAEC,KAAKC,SAAS,CAACX,QAAQ,QAAQ,CAAC;YAClJ;SACD;QACDY,SAAS;QACTC,mBAAmB;YACjB,CAAC,GAAG1B,OAAO,IAAI,CAAC,CAAC,EAAEF;YACnB6B,QAAQ;gBAAC;oBAAEC,SAASX,OAAOK,YAAY;gBAAC;aAAE;YAC1CT;QACF;IACF;AACF;AAEA,oFAAoF,GACpF,MAAMG,kBAAkB,CAACH;IACvB,MAAM,EAAEgB,UAAUC,SAAS,EAAE,GAAGC,MAAM,GAAGlB;IACzC,OAAOkB;AACT"}

package/dist/mcp/builtinTools.d.ts

@@ -0,0 +1,168 @@
+import type { CollectionTool, GlobalTool, Tool } from '../types.js';
+type CollectionBuiltin = {
+    mcpName: string;
+    requiresDuplicateEnabled?: boolean;
+    requiresUpload?: boolean;
+    requiresVersions?: boolean;
+    tool: CollectionTool;
+};
+type GlobalBuiltin = {
+    mcpName: string;
+    requiresVersions?: boolean;
+    tool: GlobalTool;
+};
+export declare const TOOL_BUILTINS: {
+    getConfigInfo: {
+        mcpName: string;
+        tool: Tool;
+    };
+};
+/**
+ * The static built-in collection CRUD tools. Keys here are the source of truth
+ * for `MCPCollectionBuiltinName` — adding/removing an entry updates the type
+ * automatically.
+ */
+export declare const COLLECTION_BUILTINS: {
+    count: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    countVersions: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: CollectionTool;
+    };
+    create: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    delete: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    duplicate: {
+        mcpName: string;
+        requiresDuplicateEnabled: true;
+        tool: CollectionTool;
+    };
+    find: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    findDistinct: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    findVersionByID: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: CollectionTool;
+    };
+    findVersions: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: CollectionTool;
+    };
+    getCollectionSchema: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    getUploadInstructions: {
+        mcpName: string;
+        requiresUpload: true;
+        tool: CollectionTool;
+    };
+    restoreVersion: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: CollectionTool;
+    };
+    update: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+};
+/**
+ * The static auth tools surfaced under auth-enabled collections. Keys are the
+ * source of truth for `MCPCollectionAuthToolName`.
+ */
+export declare const COLLECTION_AUTH_BUILTINS: {
+    auth: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    forgotPassword: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    login: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    resetPassword: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    unlock: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+    verify: {
+        mcpName: string;
+        tool: CollectionTool;
+    };
+};
+/**
+ * The static built-in global tools. Keys are the source of truth for
+ * `MCPGlobalBuiltinName`.
+ */
+export declare const GLOBAL_BUILTINS: {
+    countGlobalVersions: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: GlobalTool;
+    };
+    find: {
+        mcpName: string;
+        tool: GlobalTool;
+    };
+    findGlobalVersionByID: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: GlobalTool;
+    };
+    findGlobalVersions: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: GlobalTool;
+    };
+    getGlobalSchema: {
+        mcpName: string;
+        tool: GlobalTool;
+    };
+    restoreGlobalVersion: {
+        mcpName: string;
+        requiresVersions: true;
+        tool: GlobalTool;
+    };
+    update: {
+        mcpName: string;
+        tool: GlobalTool;
+    };
+};
+export type MCPCollectionBuiltinName = keyof typeof COLLECTION_BUILTINS;
+export type MCPCollectionAuthToolName = keyof typeof COLLECTION_AUTH_BUILTINS;
+export type MCPGlobalBuiltinName = keyof typeof GLOBAL_BUILTINS;
+export type MCPTopLevelBuiltinName = keyof typeof TOOL_BUILTINS;
+/**
+ * Pre-typed `Object.entries` for each registry. The cast from `string` to the
+ * literal key union lives here once so consumers can iterate without their own
+ * cast — TypeScript's `Object.entries` always widens keys to `string`, which
+ * defeats the narrow type lookups on `MCPCollectionToolsMap`.
+ */
+export declare const TOOL_BUILTIN_ENTRIES: Array<[MCPTopLevelBuiltinName, (typeof TOOL_BUILTINS)[MCPTopLevelBuiltinName]]>;
+export declare const COLLECTION_BUILTIN_ENTRIES: Array<[MCPCollectionBuiltinName, CollectionBuiltin]>;
+export declare const COLLECTION_AUTH_BUILTIN_ENTRIES: Array<[MCPCollectionAuthToolName, (typeof COLLECTION_AUTH_BUILTINS)[MCPCollectionAuthToolName]]>;
+export declare const GLOBAL_BUILTIN_ENTRIES: Array<[MCPGlobalBuiltinName, GlobalBuiltin]>;
+export {};
+//# sourceMappingURL=builtinTools.d.ts.map

package/dist/mcp/builtinTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtinTools.d.ts","sourceRoot":"","sources":["../../src/mcp/builtinTools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAgCnE,KAAK,iBAAiB,GAAG;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,wBAAwB,CAAC,EAAE,OAAO,CAAA;IAClC,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,IAAI,EAAE,cAAc,CAAA;CACrB,CAAA;AAED,KAAK,aAAa,GAAG;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,IAAI,EAAE,UAAU,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,aAAa;;QACP,OAAO;QAAmB,IAAI;;CACU,CAAA;AAE3D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;QACrB,OAAO;QAAoB,IAAI;;;;;;;;QAE9B,OAAO;QAAqB,IAAI;;;QAChC,OAAO;QAAqB,IAAI;;;;;;;;QAMlC,OAAO;QAAmB,IAAI;;;QACtB,OAAO;QAAkB,IAAI;;;;;;;;;;;;;QAOtB,OAAO;QAAyB,IAAI;;;;;;;;;;;;;QAOjD,OAAO;QAAoB,IAAI;;CACE,CAAA;AAE7C;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;QAC3B,OAAO;QAAU,IAAI;;;QAE3B,OAAO;QACP,IAAI;;;QAEG,OAAO;QAAW,IAAI;;;QAE7B,OAAO;QACP,IAAI;;;QAEI,OAAO;QAAY,IAAI;;;QACvB,OAAO;QAAY,IAAI;;CACkC,CAAA;AAErE;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;QAMlB,OAAO;QAAgB,IAAI;;;;;;;;;;;;;QAWhB,OAAO;QAAqB,IAAI;;;;;;;;QAMzC,OAAO;QAAkB,IAAI;;CACA,CAAA;AAEzC,MAAM,MAAM,wBAAwB,GAAG,MAAM,OAAO,mBAAmB,CAAA;AAEvE,MAAM,MAAM,yBAAyB,GAAG,MAAM,OAAO,wBAAwB,CAAA;AAE7E,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,eAAe,CAAA;AAE/D,MAAM,MAAM,sBAAsB,GAAG,MAAM,OAAO,aAAa,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAoC,KAAK,CACxE,CAAC,sBAAsB,EAAE,CAAC,OAAO,aAAa,CAAC,CAAC,sBAAsB,CAAC,CAAC,CACzE,CAAA;AAED,eAAO,MAAM,0BAA0B,EAA0C,KAAK,CACpF,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAC9C,CAAA;AAED,eAAO,MAAM,+BAA+B,EAA+C,KAAK,CAC9F,CAAC,yBAAyB,EAAE,CAAC,OAAO,wBAAwB,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAC1F,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAsC,KAAK,CAC5E,CAAC,oBAAoB,EAAE,aAAa,CAAC,CACtC,CAAA"}

package/dist/mcp/builtinTools.js

@@ -0,0 +1,169 @@
+import { authCollectionTool, forgotPasswordCollectionTool, loginCollectionTool, resetPasswordCollectionTool, unlockCollectionTool, verifyCollectionTool } from './builtin/collections/authTools.js';
+import { countDocumentsTool } from './builtin/collections/countTool.js';
+import { countVersionsTool } from './builtin/collections/countVersionsTool.js';
+import { createDocumentsTool } from './builtin/collections/createTool.js';
+import { deleteDocumentsTool } from './builtin/collections/deleteTool.js';
+import { duplicateDocumentTool } from './builtin/collections/duplicateTool.js';
+import { findDistinctTool } from './builtin/collections/findDistinctTool.js';
+import { findDocumentsTool } from './builtin/collections/findTool.js';
+import { findVersionByIDTool } from './builtin/collections/findVersionByIDTool.js';
+import { findVersionsTool } from './builtin/collections/findVersionsTool.js';
+import { getCollectionSchemaTool } from './builtin/collections/getCollectionSchemaTool.js';
+import { restoreVersionTool } from './builtin/collections/restoreVersionTool.js';
+import { updateDocumentTool } from './builtin/collections/updateTool.js';
+import { getUploadInstructionsTool } from './builtin/collections/uploadInstructionsTool.js';
+import { getConfigInfoTool } from './builtin/getConfigInfoTool.js';
+import { countGlobalVersionsTool } from './builtin/globals/countVersionsTool.js';
+import { findGlobalTool } from './builtin/globals/findTool.js';
+import { findGlobalVersionByIDTool } from './builtin/globals/findVersionByIDTool.js';
+import { findGlobalVersionsTool } from './builtin/globals/findVersionsTool.js';
+import { getGlobalSchemaTool } from './builtin/globals/getGlobalSchemaTool.js';
+import { restoreGlobalVersionTool } from './builtin/globals/restoreVersionTool.js';
+import { updateGlobalTool } from './builtin/globals/updateTool.js';
+export const TOOL_BUILTINS = {
+    getConfigInfo: {
+        mcpName: 'getConfigInfo',
+        tool: getConfigInfoTool
+    }
+};
+/**
+ * The static built-in collection CRUD tools. Keys here are the source of truth
+ * for `MCPCollectionBuiltinName` — adding/removing an entry updates the type
+ * automatically.
+ */ export const COLLECTION_BUILTINS = {
+    count: {
+        mcpName: 'countDocuments',
+        tool: countDocumentsTool
+    },
+    countVersions: {
+        mcpName: 'countVersions',
+        requiresVersions: true,
+        tool: countVersionsTool
+    },
+    create: {
+        mcpName: 'createDocuments',
+        tool: createDocumentsTool
+    },
+    delete: {
+        mcpName: 'deleteDocuments',
+        tool: deleteDocumentsTool
+    },
+    duplicate: {
+        mcpName: 'duplicateDocument',
+        requiresDuplicateEnabled: true,
+        tool: duplicateDocumentTool
+    },
+    find: {
+        mcpName: 'findDocuments',
+        tool: findDocumentsTool
+    },
+    findDistinct: {
+        mcpName: 'findDistinct',
+        tool: findDistinctTool
+    },
+    findVersionByID: {
+        mcpName: 'findVersionByID',
+        requiresVersions: true,
+        tool: findVersionByIDTool
+    },
+    findVersions: {
+        mcpName: 'findVersions',
+        requiresVersions: true,
+        tool: findVersionsTool
+    },
+    getCollectionSchema: {
+        mcpName: 'getCollectionSchema',
+        tool: getCollectionSchemaTool
+    },
+    getUploadInstructions: {
+        mcpName: 'getUploadInstructions',
+        requiresUpload: true,
+        tool: getUploadInstructionsTool
+    },
+    restoreVersion: {
+        mcpName: 'restoreVersion',
+        requiresVersions: true,
+        tool: restoreVersionTool
+    },
+    update: {
+        mcpName: 'updateDocument',
+        tool: updateDocumentTool
+    }
+};
+/**
+ * The static auth tools surfaced under auth-enabled collections. Keys are the
+ * source of truth for `MCPCollectionAuthToolName`.
+ */ export const COLLECTION_AUTH_BUILTINS = {
+    auth: {
+        mcpName: 'auth',
+        tool: authCollectionTool
+    },
+    forgotPassword: {
+        mcpName: 'forgotPassword',
+        tool: forgotPasswordCollectionTool
+    },
+    login: {
+        mcpName: 'login',
+        tool: loginCollectionTool
+    },
+    resetPassword: {
+        mcpName: 'resetPassword',
+        tool: resetPasswordCollectionTool
+    },
+    unlock: {
+        mcpName: 'unlock',
+        tool: unlockCollectionTool
+    },
+    verify: {
+        mcpName: 'verify',
+        tool: verifyCollectionTool
+    }
+};
+/**
+ * The static built-in global tools. Keys are the source of truth for
+ * `MCPGlobalBuiltinName`.
+ */ export const GLOBAL_BUILTINS = {
+    countGlobalVersions: {
+        mcpName: 'countGlobalVersions',
+        requiresVersions: true,
+        tool: countGlobalVersionsTool
+    },
+    find: {
+        mcpName: 'findGlobal',
+        tool: findGlobalTool
+    },
+    findGlobalVersionByID: {
+        mcpName: 'findGlobalVersionByID',
+        requiresVersions: true,
+        tool: findGlobalVersionByIDTool
+    },
+    findGlobalVersions: {
+        mcpName: 'findGlobalVersions',
+        requiresVersions: true,
+        tool: findGlobalVersionsTool
+    },
+    getGlobalSchema: {
+        mcpName: 'getGlobalSchema',
+        tool: getGlobalSchemaTool
+    },
+    restoreGlobalVersion: {
+        mcpName: 'restoreGlobalVersion',
+        requiresVersions: true,
+        tool: restoreGlobalVersionTool
+    },
+    update: {
+        mcpName: 'updateGlobal',
+        tool: updateGlobalTool
+    }
+};
+/**
+ * Pre-typed `Object.entries` for each registry. The cast from `string` to the
+ * literal key union lives here once so consumers can iterate without their own
+ * cast — TypeScript's `Object.entries` always widens keys to `string`, which
+ * defeats the narrow type lookups on `MCPCollectionToolsMap`.
+ */ export const TOOL_BUILTIN_ENTRIES = Object.entries(TOOL_BUILTINS);
+export const COLLECTION_BUILTIN_ENTRIES = Object.entries(COLLECTION_BUILTINS);
+export const COLLECTION_AUTH_BUILTIN_ENTRIES = Object.entries(COLLECTION_AUTH_BUILTINS);
+export const GLOBAL_BUILTIN_ENTRIES = Object.entries(GLOBAL_BUILTINS);
+
+//# sourceMappingURL=builtinTools.js.map

package/dist/mcp/builtinTools.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/builtinTools.ts"],"sourcesContent":["import type { CollectionTool, GlobalTool, Tool } from '../types.js'\n\nimport {\n  authCollectionTool,\n  forgotPasswordCollectionTool,\n  loginCollectionTool,\n  resetPasswordCollectionTool,\n  unlockCollectionTool,\n  verifyCollectionTool,\n} from './builtin/collections/authTools.js'\nimport { countDocumentsTool } from './builtin/collections/countTool.js'\nimport { countVersionsTool } from './builtin/collections/countVersionsTool.js'\nimport { createDocumentsTool } from './builtin/collections/createTool.js'\nimport { deleteDocumentsTool } from './builtin/collections/deleteTool.js'\nimport { duplicateDocumentTool } from './builtin/collections/duplicateTool.js'\nimport { findDistinctTool } from './builtin/collections/findDistinctTool.js'\nimport { findDocumentsTool } from './builtin/collections/findTool.js'\nimport { findVersionByIDTool } from './builtin/collections/findVersionByIDTool.js'\nimport { findVersionsTool } from './builtin/collections/findVersionsTool.js'\nimport { getCollectionSchemaTool } from './builtin/collections/getCollectionSchemaTool.js'\nimport { restoreVersionTool } from './builtin/collections/restoreVersionTool.js'\nimport { updateDocumentTool } from './builtin/collections/updateTool.js'\nimport { getUploadInstructionsTool } from './builtin/collections/uploadInstructionsTool.js'\nimport { getConfigInfoTool } from './builtin/getConfigInfoTool.js'\nimport { countGlobalVersionsTool } from './builtin/globals/countVersionsTool.js'\nimport { findGlobalTool } from './builtin/globals/findTool.js'\nimport { findGlobalVersionByIDTool } from './builtin/globals/findVersionByIDTool.js'\nimport { findGlobalVersionsTool } from './builtin/globals/findVersionsTool.js'\nimport { getGlobalSchemaTool } from './builtin/globals/getGlobalSchemaTool.js'\nimport { restoreGlobalVersionTool } from './builtin/globals/restoreVersionTool.js'\nimport { updateGlobalTool } from './builtin/globals/updateTool.js'\n\ntype CollectionBuiltin = {\n  mcpName: string\n  requiresDuplicateEnabled?: boolean\n  requiresUpload?: boolean\n  requiresVersions?: boolean\n  tool: CollectionTool\n}\n\ntype GlobalBuiltin = {\n  mcpName: string\n  requiresVersions?: boolean\n  tool: GlobalTool\n}\n\nexport const TOOL_BUILTINS = {\n  getConfigInfo: { mcpName: 'getConfigInfo', tool: getConfigInfoTool },\n} satisfies Record<string, { mcpName: string; tool: Tool }>\n\n/**\n * The static built-in collection CRUD tools. Keys here are the source of truth\n * for `MCPCollectionBuiltinName` — adding/removing an entry updates the type\n * automatically.\n */\nexport const COLLECTION_BUILTINS = {\n  count: { mcpName: 'countDocuments', tool: countDocumentsTool },\n  countVersions: { mcpName: 'countVersions', requiresVersions: true, tool: countVersionsTool },\n  create: { mcpName: 'createDocuments', tool: createDocumentsTool },\n  delete: { mcpName: 'deleteDocuments', tool: deleteDocumentsTool },\n  duplicate: {\n    mcpName: 'duplicateDocument',\n    requiresDuplicateEnabled: true,\n    tool: duplicateDocumentTool,\n  },\n  find: { mcpName: 'findDocuments', tool: findDocumentsTool },\n  findDistinct: { mcpName: 'findDistinct', tool: findDistinctTool },\n  findVersionByID: {\n    mcpName: 'findVersionByID',\n    requiresVersions: true,\n    tool: findVersionByIDTool,\n  },\n  findVersions: { mcpName: 'findVersions', requiresVersions: true, tool: findVersionsTool },\n  getCollectionSchema: { mcpName: 'getCollectionSchema', tool: getCollectionSchemaTool },\n  getUploadInstructions: {\n    mcpName: 'getUploadInstructions',\n    requiresUpload: true,\n    tool: getUploadInstructionsTool,\n  },\n  restoreVersion: { mcpName: 'restoreVersion', requiresVersions: true, tool: restoreVersionTool },\n  update: { mcpName: 'updateDocument', tool: updateDocumentTool },\n} satisfies Record<string, CollectionBuiltin>\n\n/**\n * The static auth tools surfaced under auth-enabled collections. Keys are the\n * source of truth for `MCPCollectionAuthToolName`.\n */\nexport const COLLECTION_AUTH_BUILTINS = {\n  auth: { mcpName: 'auth', tool: authCollectionTool },\n  forgotPassword: {\n    mcpName: 'forgotPassword',\n    tool: forgotPasswordCollectionTool,\n  },\n  login: { mcpName: 'login', tool: loginCollectionTool },\n  resetPassword: {\n    mcpName: 'resetPassword',\n    tool: resetPasswordCollectionTool,\n  },\n  unlock: { mcpName: 'unlock', tool: unlockCollectionTool },\n  verify: { mcpName: 'verify', tool: verifyCollectionTool },\n} satisfies Record<string, { mcpName: string; tool: CollectionTool }>\n\n/**\n * The static built-in global tools. Keys are the source of truth for\n * `MCPGlobalBuiltinName`.\n */\nexport const GLOBAL_BUILTINS = {\n  countGlobalVersions: {\n    mcpName: 'countGlobalVersions',\n    requiresVersions: true,\n    tool: countGlobalVersionsTool,\n  },\n  find: { mcpName: 'findGlobal', tool: findGlobalTool },\n  findGlobalVersionByID: {\n    mcpName: 'findGlobalVersionByID',\n    requiresVersions: true,\n    tool: findGlobalVersionByIDTool,\n  },\n  findGlobalVersions: {\n    mcpName: 'findGlobalVersions',\n    requiresVersions: true,\n    tool: findGlobalVersionsTool,\n  },\n  getGlobalSchema: { mcpName: 'getGlobalSchema', tool: getGlobalSchemaTool },\n  restoreGlobalVersion: {\n    mcpName: 'restoreGlobalVersion',\n    requiresVersions: true,\n    tool: restoreGlobalVersionTool,\n  },\n  update: { mcpName: 'updateGlobal', tool: updateGlobalTool },\n} satisfies Record<string, GlobalBuiltin>\n\nexport type MCPCollectionBuiltinName = keyof typeof COLLECTION_BUILTINS\n\nexport type MCPCollectionAuthToolName = keyof typeof COLLECTION_AUTH_BUILTINS\n\nexport type MCPGlobalBuiltinName = keyof typeof GLOBAL_BUILTINS\n\nexport type MCPTopLevelBuiltinName = keyof typeof TOOL_BUILTINS\n\n/**\n * Pre-typed `Object.entries` for each registry. The cast from `string` to the\n * literal key union lives here once so consumers can iterate without their own\n * cast — TypeScript's `Object.entries` always widens keys to `string`, which\n * defeats the narrow type lookups on `MCPCollectionToolsMap`.\n */\nexport const TOOL_BUILTIN_ENTRIES = Object.entries(TOOL_BUILTINS) as Array<\n  [MCPTopLevelBuiltinName, (typeof TOOL_BUILTINS)[MCPTopLevelBuiltinName]]\n>\n\nexport const COLLECTION_BUILTIN_ENTRIES = Object.entries(COLLECTION_BUILTINS) as Array<\n  [MCPCollectionBuiltinName, CollectionBuiltin]\n>\n\nexport const COLLECTION_AUTH_BUILTIN_ENTRIES = Object.entries(COLLECTION_AUTH_BUILTINS) as Array<\n  [MCPCollectionAuthToolName, (typeof COLLECTION_AUTH_BUILTINS)[MCPCollectionAuthToolName]]\n>\n\nexport const GLOBAL_BUILTIN_ENTRIES = Object.entries(GLOBAL_BUILTINS) as Array<\n  [MCPGlobalBuiltinName, GlobalBuiltin]\n>\n"],"names":["authCollectionTool","forgotPasswordCollectionTool","loginCollectionTool","resetPasswordCollectionTool","unlockCollectionTool","verifyCollectionTool","countDocumentsTool","countVersionsTool","createDocumentsTool","deleteDocumentsTool","duplicateDocumentTool","findDistinctTool","findDocumentsTool","findVersionByIDTool","findVersionsTool","getCollectionSchemaTool","restoreVersionTool","updateDocumentTool","getUploadInstructionsTool","getConfigInfoTool","countGlobalVersionsTool","findGlobalTool","findGlobalVersionByIDTool","findGlobalVersionsTool","getGlobalSchemaTool","restoreGlobalVersionTool","updateGlobalTool","TOOL_BUILTINS","getConfigInfo","mcpName","tool","COLLECTION_BUILTINS","count","countVersions","requiresVersions","create","delete","duplicate","requiresDuplicateEnabled","find","findDistinct","findVersionByID","findVersions","getCollectionSchema","getUploadInstructions","requiresUpload","restoreVersion","update","COLLECTION_AUTH_BUILTINS","auth","forgotPassword","login","resetPassword","unlock","verify","GLOBAL_BUILTINS","countGlobalVersions","findGlobalVersionByID","findGlobalVersions","getGlobalSchema","restoreGlobalVersion","TOOL_BUILTIN_ENTRIES","Object","entries","COLLECTION_BUILTIN_ENTRIES","COLLECTION_AUTH_BUILTIN_ENTRIES","GLOBAL_BUILTIN_ENTRIES"],"mappings":"AAEA,SACEA,kBAAkB,EAClBC,4BAA4B,EAC5BC,mBAAmB,EACnBC,2BAA2B,EAC3BC,oBAAoB,EACpBC,oBAAoB,QACf,qCAAoC;AAC3C,SAASC,kBAAkB,QAAQ,qCAAoC;AACvE,SAASC,iBAAiB,QAAQ,6CAA4C;AAC9E,SAASC,mBAAmB,QAAQ,sCAAqC;AACzE,SAASC,mBAAmB,QAAQ,sCAAqC;AACzE,SAASC,qBAAqB,QAAQ,yCAAwC;AAC9E,SAASC,gBAAgB,QAAQ,4CAA2C;AAC5E,SAASC,iBAAiB,QAAQ,oCAAmC;AACrE,SAASC,mBAAmB,QAAQ,+CAA8C;AAClF,SAASC,gBAAgB,QAAQ,4CAA2C;AAC5E,SAASC,uBAAuB,QAAQ,mDAAkD;AAC1F,SAASC,kBAAkB,QAAQ,8CAA6C;AAChF,SAASC,kBAAkB,QAAQ,sCAAqC;AACxE,SAASC,yBAAyB,QAAQ,kDAAiD;AAC3F,SAASC,iBAAiB,QAAQ,iCAAgC;AAClE,SAASC,uBAAuB,QAAQ,yCAAwC;AAChF,SAASC,cAAc,QAAQ,gCAA+B;AAC9D,SAASC,yBAAyB,QAAQ,2CAA0C;AACpF,SAASC,sBAAsB,QAAQ,wCAAuC;AAC9E,SAASC,mBAAmB,QAAQ,2CAA0C;AAC9E,SAASC,wBAAwB,QAAQ,0CAAyC;AAClF,SAASC,gBAAgB,QAAQ,kCAAiC;AAgBlE,OAAO,MAAMC,gBAAgB;IAC3BC,eAAe;QAAEC,SAAS;QAAiBC,MAAMX;IAAkB;AACrE,EAA2D;AAE3D;;;;CAIC,GACD,OAAO,MAAMY,sBAAsB;IACjCC,OAAO;QAAEH,SAAS;QAAkBC,MAAMxB;IAAmB;IAC7D2B,eAAe;QAAEJ,SAAS;QAAiBK,kBAAkB;QAAMJ,MAAMvB;IAAkB;IAC3F4B,QAAQ;QAAEN,SAAS;QAAmBC,MAAMtB;IAAoB;IAChE4B,QAAQ;QAAEP,SAAS;QAAmBC,MAAMrB;IAAoB;IAChE4B,WAAW;QACTR,SAAS;QACTS,0BAA0B;QAC1BR,MAAMpB;IACR;IACA6B,MAAM;QAAEV,SAAS;QAAiBC,MAAMlB;IAAkB;IAC1D4B,cAAc;QAAEX,SAAS;QAAgBC,MAAMnB;IAAiB;IAChE8B,iBAAiB;QACfZ,SAAS;QACTK,kBAAkB;QAClBJ,MAAMjB;IACR;IACA6B,cAAc;QAAEb,SAAS;QAAgBK,kBAAkB;QAAMJ,MAAMhB;IAAiB;IACxF6B,qBAAqB;QAAEd,SAAS;QAAuBC,MAAMf;IAAwB;IACrF6B,uBAAuB;QACrBf,SAAS;QACTgB,gBAAgB;QAChBf,MAAMZ;IACR;IACA4B,gBAAgB;QAAEjB,SAAS;QAAkBK,kBAAkB;QAAMJ,MAAMd;IAAmB;IAC9F+B,QAAQ;QAAElB,SAAS;QAAkBC,MAAMb;IAAmB;AAChE,EAA6C;AAE7C;;;CAGC,GACD,OAAO,MAAM+B,2BAA2B;IACtCC,MAAM;QAAEpB,SAAS;QAAQC,MAAM9B;IAAmB;IAClDkD,gBAAgB;QACdrB,SAAS;QACTC,MAAM7B;IACR;IACAkD,OAAO;QAAEtB,SAAS;QAASC,MAAM5B;IAAoB;IACrDkD,eAAe;QACbvB,SAAS;QACTC,MAAM3B;IACR;IACAkD,QAAQ;QAAExB,SAAS;QAAUC,MAAM1B;IAAqB;IACxDkD,QAAQ;QAAEzB,SAAS;QAAUC,MAAMzB;IAAqB;AAC1D,EAAqE;AAErE;;;CAGC,GACD,OAAO,MAAMkD,kBAAkB;IAC7BC,qBAAqB;QACnB3B,SAAS;QACTK,kBAAkB;QAClBJ,MAAMV;IACR;IACAmB,MAAM;QAAEV,SAAS;QAAcC,MAAMT;IAAe;IACpDoC,uBAAuB;QACrB5B,SAAS;QACTK,kBAAkB;QAClBJ,MAAMR;IACR;IACAoC,oBAAoB;QAClB7B,SAAS;QACTK,kBAAkB;QAClBJ,MAAMP;IACR;IACAoC,iBAAiB;QAAE9B,SAAS;QAAmBC,MAAMN;IAAoB;IACzEoC,sBAAsB;QACpB/B,SAAS;QACTK,kBAAkB;QAClBJ,MAAML;IACR;IACAsB,QAAQ;QAAElB,SAAS;QAAgBC,MAAMJ;IAAiB;AAC5D,EAAyC;AAUzC;;;;;CAKC,GACD,OAAO,MAAMmC,uBAAuBC,OAAOC,OAAO,CAACpC,eAElD;AAED,OAAO,MAAMqC,6BAA6BF,OAAOC,OAAO,CAAChC,qBAExD;AAED,OAAO,MAAMkC,kCAAkCH,OAAOC,OAAO,CAACf,0BAE7D;AAED,OAAO,MAAMkB,yBAAyBJ,OAAOC,OAAO,CAACR,iBAEpD"}

package/dist/mcp/sanitizeMCPConfig.d.ts

@@ -0,0 +1,16 @@
+import type { Config, SanitizedConfig } from 'payload';
+import type { MCPPluginConfig, SanitizedMCPPluginConfig } from '../types.js';
+/**
+ * Converts the user-configured `MCPPluginConfig` into a `SanitizedMCPPluginConfig`:
+ *  - Flattens `tools` / `prompts` / `resources` / per-collection / per-global
+ *    tool maps into a single `items` array.
+ *  - Applies built-in tools for collections and globals, respecting opt-out user overrides.
+ *
+ * Called once during plugin init. After that, `plugins['@payloadcms/plugin-mcp']
+ * ?.options` holds the sanitized result
+ */
+export declare const sanitizeMCPConfig: ({ config, pluginConfig, }: {
+    config: Config | SanitizedConfig;
+    pluginConfig: MCPPluginConfig;
+}) => SanitizedMCPPluginConfig;
+//# sourceMappingURL=sanitizeMCPConfig.d.ts.map

package/dist/mcp/sanitizeMCPConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeMCPConfig.d.ts","sourceRoot":"","sources":["../../src/mcp/sanitizeMCPConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,MAAM,EAGN,eAAe,EAEhB,MAAM,SAAS,CAAA;AAEhB,OAAO,KAAK,EAMV,eAAe,EACf,wBAAwB,EACzB,MAAM,aAAa,CAAA;AAcpB;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,8BAG3B;IACD,MAAM,EAAE,MAAM,GAAG,eAAe,CAAA;IAChC,YAAY,EAAE,eAAe,CAAA;CAC9B,KAAG,wBA6DH,CAAA"}

package/dist/mcp/sanitizeMCPConfig.js

@@ -0,0 +1,233 @@
+import { defaultAccess } from '../defaultAccess.js';
+import { COLLECTION_AUTH_BUILTIN_ENTRIES, COLLECTION_AUTH_BUILTINS, COLLECTION_BUILTIN_ENTRIES, COLLECTION_BUILTINS, GLOBAL_BUILTIN_ENTRIES, GLOBAL_BUILTINS, TOOL_BUILTIN_ENTRIES, TOOL_BUILTINS } from './builtinTools.js';
+/**
+ * Converts the user-configured `MCPPluginConfig` into a `SanitizedMCPPluginConfig`:
+ *  - Flattens `tools` / `prompts` / `resources` / per-collection / per-global
+ *    tool maps into a single `items` array.
+ *  - Applies built-in tools for collections and globals, respecting opt-out user overrides.
+ *
+ * Called once during plugin init. After that, `plugins['@payloadcms/plugin-mcp']
+ * ?.options` holds the sanitized result
+ */ export const sanitizeMCPConfig = ({ config, pluginConfig })=>{
+    const items = [];
+    for (const collection of config.collections ?? []){
+        items.push(...sanitizeCollectionConfig({
+            collection,
+            pluginConfig
+        }));
+    }
+    for (const global of config.globals ?? []){
+        items.push(...sanitizeGlobalConfig({
+            global,
+            pluginConfig
+        }));
+    }
+    for (const [configKey, { mcpName, tool }] of TOOL_BUILTIN_ENTRIES){
+        items.push({
+            type: 'tool',
+            configKey,
+            label: tool.annotations?.title ?? configKey,
+            mcpName,
+            tool: {
+                ...tool,
+                access: tool.access ?? defaultAccess
+            }
+        });
+    }
+    for (const [configKey, tool] of Object.entries(pluginConfig.tools ?? {})){
+        if (configKey in TOOL_BUILTINS) {
+            continue;
+        }
+        items.push({
+            type: 'tool',
+            configKey,
+            label: tool.annotations?.title ?? configKey,
+            mcpName: configKey,
+            tool: {
+                ...tool,
+                access: tool.access ?? defaultAccess
+            }
+        });
+    }
+    for (const [configKey, prompt] of Object.entries(pluginConfig.prompts ?? {})){
+        items.push({
+            type: 'prompt',
+            configKey,
+            label: prompt.title ?? configKey,
+            mcpName: configKey,
+            prompt: {
+                ...prompt,
+                access: prompt.access ?? defaultAccess
+            }
+        });
+    }
+    for (const [configKey, resource] of Object.entries(pluginConfig.resources ?? {})){
+        items.push({
+            type: 'resource',
+            configKey,
+            label: resource.title ?? configKey,
+            mcpName: configKey,
+            resource: {
+                ...resource,
+                access: resource.access ?? defaultAccess
+            }
+        });
+    }
+    return {
+        disabled: pluginConfig.disabled,
+        hooks: pluginConfig.hooks,
+        items,
+        mcp: pluginConfig.mcp,
+        overrideGetAuthorizedMCP: pluginConfig.overrideGetAuthorizedMCP
+    };
+};
+const sanitizeCollectionConfig = ({ collection, pluginConfig })=>{
+    const slug = collection.slug;
+    const collectionPluginConfig = pluginConfig.collections?.[slug];
+    const items = [];
+    /**
+   * Payload disables duplicate for auth collections by default unless the
+   * collection explicitly opts back in with `disableDuplicate: false`.
+   */ const isDuplicateDisabled = collection.disableDuplicate === true || Boolean(collection.auth) && collection.disableDuplicate !== false;
+    for (const [toolKey, { mcpName, requiresDuplicateEnabled, requiresUpload, requiresVersions, tool }] of COLLECTION_BUILTIN_ENTRIES){
+        if (requiresVersions && !collection.versions) {
+            continue;
+        }
+        if (requiresDuplicateEnabled && isDuplicateDisabled) {
+            continue;
+        }
+        if (requiresUpload && !collection.upload) {
+            continue;
+        }
+        const matchedConfigEntry = collectionPluginConfig?.tools?.[toolKey];
+        if (matchedConfigEntry === false) {
+            continue;
+        }
+        const override = typeof matchedConfigEntry === 'object' ? matchedConfigEntry : undefined;
+        const annotations = {
+            ...tool.annotations,
+            ...override?.annotations
+        };
+        items.push({
+            type: 'collectionTool',
+            collectionSlug: slug,
+            configKey: toolKey,
+            label: annotations.title ?? toolKey,
+            mcpName,
+            tool: {
+                ...tool,
+                access: override?.access ?? tool.access ?? defaultAccess,
+                annotations,
+                description: override?.description ?? tool.description,
+                overrideResponse: override?.overrideResponse ?? collectionPluginConfig?.overrideResponse ?? tool.overrideResponse
+            }
+        });
+    }
+    if (collection.auth) {
+        for (const [authToolKey, { mcpName, tool }] of COLLECTION_AUTH_BUILTIN_ENTRIES){
+            const matchedConfigEntry = collectionPluginConfig?.tools?.[authToolKey];
+            if (!matchedConfigEntry) {
+                continue;
+            }
+            // `true` means "enable, no override"; only the object form carries fields.
+            const override = typeof matchedConfigEntry === 'object' ? matchedConfigEntry : undefined;
+            const annotations = {
+                ...tool.annotations,
+                ...override?.annotations
+            };
+            items.push({
+                type: 'collectionTool',
+                collectionSlug: slug,
+                configKey: authToolKey,
+                label: annotations.title ?? authToolKey,
+                mcpName,
+                tool: {
+                    ...tool,
+                    access: override?.access ?? tool.access ?? defaultAccess,
+                    annotations,
+                    description: override?.description ?? tool.description,
+                    overrideResponse: override?.overrideResponse ?? collectionPluginConfig?.overrideResponse ?? tool.overrideResponse
+                }
+            });
+        }
+    }
+    // Cast: builtin keys are filtered out below, so the remaining values are
+    // always custom tools (`CollectionTool`) or undefined
+    const customEntries = Object.entries(collectionPluginConfig?.tools ?? {});
+    for (const [configKey, customTool] of customEntries){
+        if (configKey in COLLECTION_BUILTINS || configKey in COLLECTION_AUTH_BUILTINS) {
+            continue;
+        }
+        if (!customTool) {
+            continue;
+        }
+        items.push({
+            type: 'collectionTool',
+            collectionSlug: slug,
+            configKey,
+            label: customTool.annotations?.title ?? configKey,
+            mcpName: configKey,
+            tool: {
+                ...customTool,
+                access: customTool.access ?? defaultAccess
+            }
+        });
+    }
+    return items;
+};
+const sanitizeGlobalConfig = ({ global, pluginConfig })=>{
+    const slug = global.slug;
+    const globalPluginConfig = pluginConfig.globals?.[slug];
+    const items = [];
+    for (const [toolKey, { mcpName, requiresVersions, tool }] of GLOBAL_BUILTIN_ENTRIES){
+        if (requiresVersions && !global.versions) {
+            continue;
+        }
+        const matchedConfigEntry = globalPluginConfig?.tools?.[toolKey];
+        if (matchedConfigEntry === false) {
+            continue;
+        }
+        const override = typeof matchedConfigEntry === 'object' ? matchedConfigEntry : undefined;
+        const annotations = {
+            ...tool.annotations,
+            ...override?.annotations
+        };
+        items.push({
+            type: 'globalTool',
+            configKey: toolKey,
+            globalSlug: slug,
+            label: annotations.title ?? toolKey,
+            mcpName,
+            tool: {
+                ...tool,
+                access: override?.access ?? tool.access ?? defaultAccess,
+                annotations,
+                description: override?.description ?? tool.description,
+                overrideResponse: override?.overrideResponse ?? globalPluginConfig?.overrideResponse ?? tool.overrideResponse
+            }
+        });
+    }
+    const customEntries = Object.entries(globalPluginConfig?.tools ?? {});
+    for (const [configKey, customTool] of customEntries){
+        if (configKey in GLOBAL_BUILTINS) {
+            continue;
+        }
+        if (!customTool) {
+            continue;
+        }
+        items.push({
+            type: 'globalTool',
+            configKey,
+            globalSlug: slug,
+            label: customTool.annotations?.title ?? configKey,
+            mcpName: configKey,
+            tool: {
+                ...customTool,
+                access: customTool.access ?? defaultAccess
+            }
+        });
+    }
+    return items;
+};
+
+//# sourceMappingURL=sanitizeMCPConfig.js.map

package/dist/mcp/sanitizeMCPConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/mcp/sanitizeMCPConfig.ts"],"sourcesContent":["import type {\n  CollectionConfig,\n  Config,\n  GlobalConfig,\n  SanitizedCollectionConfig,\n  SanitizedConfig,\n  SanitizedGlobalConfig,\n} from 'payload'\n\nimport type {\n  CollectionMCPItem,\n  CollectionTool,\n  GlobalMCPItem,\n  GlobalTool,\n  MCPItem,\n  MCPPluginConfig,\n  SanitizedMCPPluginConfig,\n} from '../types.js'\n\nimport { defaultAccess } from '../defaultAccess.js'\nimport {\n  COLLECTION_AUTH_BUILTIN_ENTRIES,\n  COLLECTION_AUTH_BUILTINS,\n  COLLECTION_BUILTIN_ENTRIES,\n  COLLECTION_BUILTINS,\n  GLOBAL_BUILTIN_ENTRIES,\n  GLOBAL_BUILTINS,\n  TOOL_BUILTIN_ENTRIES,\n  TOOL_BUILTINS,\n} from './builtinTools.js'\n\n/**\n * Converts the user-configured `MCPPluginConfig` into a `SanitizedMCPPluginConfig`:\n *  - Flattens `tools` / `prompts` / `resources` / per-collection / per-global\n *    tool maps into a single `items` array.\n *  - Applies built-in tools for collections and globals, respecting opt-out user overrides.\n *\n * Called once during plugin init. After that, `plugins['@payloadcms/plugin-mcp']\n * ?.options` holds the sanitized result\n */\nexport const sanitizeMCPConfig = ({\n  config,\n  pluginConfig,\n}: {\n  config: Config | SanitizedConfig\n  pluginConfig: MCPPluginConfig\n}): SanitizedMCPPluginConfig => {\n  const items: MCPItem[] = []\n\n  for (const collection of config.collections ?? []) {\n    items.push(...sanitizeCollectionConfig({ collection, pluginConfig }))\n  }\n\n  for (const global of config.globals ?? []) {\n    items.push(...sanitizeGlobalConfig({ global, pluginConfig }))\n  }\n\n  for (const [configKey, { mcpName, tool }] of TOOL_BUILTIN_ENTRIES) {\n    items.push({\n      type: 'tool',\n      configKey,\n      label: tool.annotations?.title ?? configKey,\n      mcpName,\n      tool: { ...tool, access: tool.access ?? defaultAccess },\n    })\n  }\n\n  for (const [configKey, tool] of Object.entries(pluginConfig.tools ?? {})) {\n    if (configKey in TOOL_BUILTINS) {\n      continue\n    }\n    items.push({\n      type: 'tool',\n      configKey,\n      label: tool.annotations?.title ?? configKey,\n      mcpName: configKey,\n      tool: { ...tool, access: tool.access ?? defaultAccess },\n    })\n  }\n\n  for (const [configKey, prompt] of Object.entries(pluginConfig.prompts ?? {})) {\n    items.push({\n      type: 'prompt',\n      configKey,\n      label: prompt.title ?? configKey,\n      mcpName: configKey,\n      prompt: { ...prompt, access: prompt.access ?? defaultAccess },\n    })\n  }\n\n  for (const [configKey, resource] of Object.entries(pluginConfig.resources ?? {})) {\n    items.push({\n      type: 'resource',\n      configKey,\n      label: resource.title ?? configKey,\n      mcpName: configKey,\n      resource: { ...resource, access: resource.access ?? defaultAccess },\n    })\n  }\n\n  return {\n    disabled: pluginConfig.disabled,\n    hooks: pluginConfig.hooks,\n    items,\n    mcp: pluginConfig.mcp,\n    overrideGetAuthorizedMCP: pluginConfig.overrideGetAuthorizedMCP,\n  }\n}\n\nconst sanitizeCollectionConfig = ({\n  collection,\n  pluginConfig,\n}: {\n  collection: CollectionConfig | SanitizedCollectionConfig\n  pluginConfig: MCPPluginConfig\n}): CollectionMCPItem[] => {\n  const slug = collection.slug\n  const collectionPluginConfig = pluginConfig.collections?.[slug]\n  const items: CollectionMCPItem[] = []\n  /**\n   * Payload disables duplicate for auth collections by default unless the\n   * collection explicitly opts back in with `disableDuplicate: false`.\n   */\n  const isDuplicateDisabled =\n    collection.disableDuplicate === true ||\n    (Boolean(collection.auth) && collection.disableDuplicate !== false)\n\n  for (const [\n    toolKey,\n    { mcpName, requiresDuplicateEnabled, requiresUpload, requiresVersions, tool },\n  ] of COLLECTION_BUILTIN_ENTRIES) {\n    if (requiresVersions && !collection.versions) {\n      continue\n    }\n    if (requiresDuplicateEnabled && isDuplicateDisabled) {\n      continue\n    }\n    if (requiresUpload && !collection.upload) {\n      continue\n    }\n    const matchedConfigEntry = collectionPluginConfig?.tools?.[toolKey]\n    if (matchedConfigEntry === false) {\n      continue\n    }\n    const override = typeof matchedConfigEntry === 'object' ? matchedConfigEntry : undefined\n    const annotations = { ...tool.annotations, ...override?.annotations }\n    items.push({\n      type: 'collectionTool',\n      collectionSlug: slug,\n      configKey: toolKey,\n      label: annotations.title ?? toolKey,\n      mcpName,\n      tool: {\n        ...tool,\n        access: override?.access ?? tool.access ?? defaultAccess,\n        annotations,\n        description: override?.description ?? tool.description,\n        overrideResponse:\n          override?.overrideResponse ??\n          collectionPluginConfig?.overrideResponse ??\n          tool.overrideResponse,\n      },\n    })\n  }\n\n  if (collection.auth) {\n    for (const [authToolKey, { mcpName, tool }] of COLLECTION_AUTH_BUILTIN_ENTRIES) {\n      const matchedConfigEntry = collectionPluginConfig?.tools?.[authToolKey]\n      if (!matchedConfigEntry) {\n        continue\n      }\n      // `true` means \"enable, no override\"; only the object form carries fields.\n      const override = typeof matchedConfigEntry === 'object' ? matchedConfigEntry : undefined\n      const annotations = { ...tool.annotations, ...override?.annotations }\n      items.push({\n        type: 'collectionTool',\n        collectionSlug: slug,\n        configKey: authToolKey,\n        label: annotations.title ?? authToolKey,\n        mcpName,\n        tool: {\n          ...tool,\n          access: override?.access ?? tool.access ?? defaultAccess,\n          annotations,\n          description: override?.description ?? tool.description,\n          overrideResponse:\n            override?.overrideResponse ??\n            collectionPluginConfig?.overrideResponse ??\n            tool.overrideResponse,\n        },\n      })\n    }\n  }\n\n  // Cast: builtin keys are filtered out below, so the remaining values are\n  // always custom tools (`CollectionTool`) or undefined\n  const customEntries = Object.entries(collectionPluginConfig?.tools ?? {}) as Array<\n    [string, CollectionTool | undefined]\n  >\n  for (const [configKey, customTool] of customEntries) {\n    if (configKey in COLLECTION_BUILTINS || configKey in COLLECTION_AUTH_BUILTINS) {\n      continue\n    }\n    if (!customTool) {\n      continue\n    }\n    items.push({\n      type: 'collectionTool',\n      collectionSlug: slug,\n      configKey,\n      label: customTool.annotations?.title ?? configKey,\n      mcpName: configKey,\n      tool: { ...customTool, access: customTool.access ?? defaultAccess },\n    })\n  }\n\n  return items\n}\n\nconst sanitizeGlobalConfig = ({\n  global,\n  pluginConfig,\n}: {\n  global: GlobalConfig | SanitizedGlobalConfig\n  pluginConfig: MCPPluginConfig\n}): GlobalMCPItem[] => {\n  const slug = global.slug\n  const globalPluginConfig = pluginConfig.globals?.[slug]\n  const items: GlobalMCPItem[] = []\n\n  for (const [toolKey, { mcpName, requiresVersions, tool }] of GLOBAL_BUILTIN_ENTRIES) {\n    if (requiresVersions && !global.versions) {\n      continue\n    }\n    const matchedConfigEntry = globalPluginConfig?.tools?.[toolKey]\n    if (matchedConfigEntry === false) {\n      continue\n    }\n    const override = typeof matchedConfigEntry === 'object' ? matchedConfigEntry : undefined\n    const annotations = { ...tool.annotations, ...override?.annotations }\n    items.push({\n      type: 'globalTool',\n      configKey: toolKey,\n      globalSlug: slug,\n      label: annotations.title ?? toolKey,\n      mcpName,\n      tool: {\n        ...tool,\n        access: override?.access ?? tool.access ?? defaultAccess,\n        annotations,\n        description: override?.description ?? tool.description,\n        overrideResponse:\n          override?.overrideResponse ??\n          globalPluginConfig?.overrideResponse ??\n          tool.overrideResponse,\n      },\n    })\n  }\n\n  const customEntries = Object.entries(globalPluginConfig?.tools ?? {}) as Array<\n    [string, GlobalTool | undefined]\n  >\n  for (const [configKey, customTool] of customEntries) {\n    if (configKey in GLOBAL_BUILTINS) {\n      continue\n    }\n    if (!customTool) {\n      continue\n    }\n    items.push({\n      type: 'globalTool',\n      configKey,\n      globalSlug: slug,\n      label: customTool.annotations?.title ?? configKey,\n      mcpName: configKey,\n      tool: { ...customTool, access: customTool.access ?? defaultAccess },\n    })\n  }\n\n  return items\n}\n"],"names":["defaultAccess","COLLECTION_AUTH_BUILTIN_ENTRIES","COLLECTION_AUTH_BUILTINS","COLLECTION_BUILTIN_ENTRIES","COLLECTION_BUILTINS","GLOBAL_BUILTIN_ENTRIES","GLOBAL_BUILTINS","TOOL_BUILTIN_ENTRIES","TOOL_BUILTINS","sanitizeMCPConfig","config","pluginConfig","items","collection","collections","push","sanitizeCollectionConfig","global","globals","sanitizeGlobalConfig","configKey","mcpName","tool","type","label","annotations","title","access","Object","entries","tools","prompt","prompts","resource","resources","disabled","hooks","mcp","overrideGetAuthorizedMCP","slug","collectionPluginConfig","isDuplicateDisabled","disableDuplicate","Boolean","auth","toolKey","requiresDuplicateEnabled","requiresUpload","requiresVersions","versions","upload","matchedConfigEntry","override","undefined","collectionSlug","description","overrideResponse","authToolKey","customEntries","customTool","globalPluginConfig","globalSlug"],"mappings":"AAmBA,SAASA,aAAa,QAAQ,sBAAqB;AACnD,SACEC,+BAA+B,EAC/BC,wBAAwB,EACxBC,0BAA0B,EAC1BC,mBAAmB,EACnBC,sBAAsB,EACtBC,eAAe,EACfC,oBAAoB,EACpBC,aAAa,QACR,oBAAmB;AAE1B;;;;;;;;CAQC,GACD,OAAO,MAAMC,oBAAoB,CAAC,EAChCC,MAAM,EACNC,YAAY,EAIb;IACC,MAAMC,QAAmB,EAAE;IAE3B,KAAK,MAAMC,cAAcH,OAAOI,WAAW,IAAI,EAAE,CAAE;QACjDF,MAAMG,IAAI,IAAIC,yBAAyB;YAAEH;YAAYF;QAAa;IACpE;IAEA,KAAK,MAAMM,UAAUP,OAAOQ,OAAO,IAAI,EAAE,CAAE;QACzCN,MAAMG,IAAI,IAAII,qBAAqB;YAAEF;YAAQN;QAAa;IAC5D;IAEA,KAAK,MAAM,CAACS,WAAW,EAAEC,OAAO,EAAEC,IAAI,EAAE,CAAC,IAAIf,qBAAsB;QACjEK,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACNH;YACAI,OAAOF,KAAKG,WAAW,EAAEC,SAASN;YAClCC;YACAC,MAAM;gBAAE,GAAGA,IAAI;gBAAEK,QAAQL,KAAKK,MAAM,IAAI3B;YAAc;QACxD;IACF;IAEA,KAAK,MAAM,CAACoB,WAAWE,KAAK,IAAIM,OAAOC,OAAO,CAAClB,aAAamB,KAAK,IAAI,CAAC,GAAI;QACxE,IAAIV,aAAaZ,eAAe;YAC9B;QACF;QACAI,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACNH;YACAI,OAAOF,KAAKG,WAAW,EAAEC,SAASN;YAClCC,SAASD;YACTE,MAAM;gBAAE,GAAGA,IAAI;gBAAEK,QAAQL,KAAKK,MAAM,IAAI3B;YAAc;QACxD;IACF;IAEA,KAAK,MAAM,CAACoB,WAAWW,OAAO,IAAIH,OAAOC,OAAO,CAAClB,aAAaqB,OAAO,IAAI,CAAC,GAAI;QAC5EpB,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACNH;YACAI,OAAOO,OAAOL,KAAK,IAAIN;YACvBC,SAASD;YACTW,QAAQ;gBAAE,GAAGA,MAAM;gBAAEJ,QAAQI,OAAOJ,MAAM,IAAI3B;YAAc;QAC9D;IACF;IAEA,KAAK,MAAM,CAACoB,WAAWa,SAAS,IAAIL,OAAOC,OAAO,CAAClB,aAAauB,SAAS,IAAI,CAAC,GAAI;QAChFtB,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACNH;YACAI,OAAOS,SAASP,KAAK,IAAIN;YACzBC,SAASD;YACTa,UAAU;gBAAE,GAAGA,QAAQ;gBAAEN,QAAQM,SAASN,MAAM,IAAI3B;YAAc;QACpE;IACF;IAEA,OAAO;QACLmC,UAAUxB,aAAawB,QAAQ;QAC/BC,OAAOzB,aAAayB,KAAK;QACzBxB;QACAyB,KAAK1B,aAAa0B,GAAG;QACrBC,0BAA0B3B,aAAa2B,wBAAwB;IACjE;AACF,EAAC;AAED,MAAMtB,2BAA2B,CAAC,EAChCH,UAAU,EACVF,YAAY,EAIb;IACC,MAAM4B,OAAO1B,WAAW0B,IAAI;IAC5B,MAAMC,yBAAyB7B,aAAaG,WAAW,EAAE,CAACyB,KAAK;IAC/D,MAAM3B,QAA6B,EAAE;IACrC;;;GAGC,GACD,MAAM6B,sBACJ5B,WAAW6B,gBAAgB,KAAK,QAC/BC,QAAQ9B,WAAW+B,IAAI,KAAK/B,WAAW6B,gBAAgB,KAAK;IAE/D,KAAK,MAAM,CACTG,SACA,EAAExB,OAAO,EAAEyB,wBAAwB,EAAEC,cAAc,EAAEC,gBAAgB,EAAE1B,IAAI,EAAE,CAC9E,IAAInB,2BAA4B;QAC/B,IAAI6C,oBAAoB,CAACnC,WAAWoC,QAAQ,EAAE;YAC5C;QACF;QACA,IAAIH,4BAA4BL,qBAAqB;YACnD;QACF;QACA,IAAIM,kBAAkB,CAAClC,WAAWqC,MAAM,EAAE;YACxC;QACF;QACA,MAAMC,qBAAqBX,wBAAwBV,OAAO,CAACe,QAAQ;QACnE,IAAIM,uBAAuB,OAAO;YAChC;QACF;QACA,MAAMC,WAAW,OAAOD,uBAAuB,WAAWA,qBAAqBE;QAC/E,MAAM5B,cAAc;YAAE,GAAGH,KAAKG,WAAW;YAAE,GAAG2B,UAAU3B,WAAW;QAAC;QACpEb,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACN+B,gBAAgBf;YAChBnB,WAAWyB;YACXrB,OAAOC,YAAYC,KAAK,IAAImB;YAC5BxB;YACAC,MAAM;gBACJ,GAAGA,IAAI;gBACPK,QAAQyB,UAAUzB,UAAUL,KAAKK,MAAM,IAAI3B;gBAC3CyB;gBACA8B,aAAaH,UAAUG,eAAejC,KAAKiC,WAAW;gBACtDC,kBACEJ,UAAUI,oBACVhB,wBAAwBgB,oBACxBlC,KAAKkC,gBAAgB;YACzB;QACF;IACF;IAEA,IAAI3C,WAAW+B,IAAI,EAAE;QACnB,KAAK,MAAM,CAACa,aAAa,EAAEpC,OAAO,EAAEC,IAAI,EAAE,CAAC,IAAIrB,gCAAiC;YAC9E,MAAMkD,qBAAqBX,wBAAwBV,OAAO,CAAC2B,YAAY;YACvE,IAAI,CAACN,oBAAoB;gBACvB;YACF;YACA,2EAA2E;YAC3E,MAAMC,WAAW,OAAOD,uBAAuB,WAAWA,qBAAqBE;YAC/E,MAAM5B,cAAc;gBAAE,GAAGH,KAAKG,WAAW;gBAAE,GAAG2B,UAAU3B,WAAW;YAAC;YACpEb,MAAMG,IAAI,CAAC;gBACTQ,MAAM;gBACN+B,gBAAgBf;gBAChBnB,WAAWqC;gBACXjC,OAAOC,YAAYC,KAAK,IAAI+B;gBAC5BpC;gBACAC,MAAM;oBACJ,GAAGA,IAAI;oBACPK,QAAQyB,UAAUzB,UAAUL,KAAKK,MAAM,IAAI3B;oBAC3CyB;oBACA8B,aAAaH,UAAUG,eAAejC,KAAKiC,WAAW;oBACtDC,kBACEJ,UAAUI,oBACVhB,wBAAwBgB,oBACxBlC,KAAKkC,gBAAgB;gBACzB;YACF;QACF;IACF;IAEA,yEAAyE;IACzE,sDAAsD;IACtD,MAAME,gBAAgB9B,OAAOC,OAAO,CAACW,wBAAwBV,SAAS,CAAC;IAGvE,KAAK,MAAM,CAACV,WAAWuC,WAAW,IAAID,cAAe;QACnD,IAAItC,aAAahB,uBAAuBgB,aAAalB,0BAA0B;YAC7E;QACF;QACA,IAAI,CAACyD,YAAY;YACf;QACF;QACA/C,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACN+B,gBAAgBf;YAChBnB;YACAI,OAAOmC,WAAWlC,WAAW,EAAEC,SAASN;YACxCC,SAASD;YACTE,MAAM;gBAAE,GAAGqC,UAAU;gBAAEhC,QAAQgC,WAAWhC,MAAM,IAAI3B;YAAc;QACpE;IACF;IAEA,OAAOY;AACT;AAEA,MAAMO,uBAAuB,CAAC,EAC5BF,MAAM,EACNN,YAAY,EAIb;IACC,MAAM4B,OAAOtB,OAAOsB,IAAI;IACxB,MAAMqB,qBAAqBjD,aAAaO,OAAO,EAAE,CAACqB,KAAK;IACvD,MAAM3B,QAAyB,EAAE;IAEjC,KAAK,MAAM,CAACiC,SAAS,EAAExB,OAAO,EAAE2B,gBAAgB,EAAE1B,IAAI,EAAE,CAAC,IAAIjB,uBAAwB;QACnF,IAAI2C,oBAAoB,CAAC/B,OAAOgC,QAAQ,EAAE;YACxC;QACF;QACA,MAAME,qBAAqBS,oBAAoB9B,OAAO,CAACe,QAAQ;QAC/D,IAAIM,uBAAuB,OAAO;YAChC;QACF;QACA,MAAMC,WAAW,OAAOD,uBAAuB,WAAWA,qBAAqBE;QAC/E,MAAM5B,cAAc;YAAE,GAAGH,KAAKG,WAAW;YAAE,GAAG2B,UAAU3B,WAAW;QAAC;QACpEb,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACNH,WAAWyB;YACXgB,YAAYtB;YACZf,OAAOC,YAAYC,KAAK,IAAImB;YAC5BxB;YACAC,MAAM;gBACJ,GAAGA,IAAI;gBACPK,QAAQyB,UAAUzB,UAAUL,KAAKK,MAAM,IAAI3B;gBAC3CyB;gBACA8B,aAAaH,UAAUG,eAAejC,KAAKiC,WAAW;gBACtDC,kBACEJ,UAAUI,oBACVI,oBAAoBJ,oBACpBlC,KAAKkC,gBAAgB;YACzB;QACF;IACF;IAEA,MAAME,gBAAgB9B,OAAOC,OAAO,CAAC+B,oBAAoB9B,SAAS,CAAC;IAGnE,KAAK,MAAM,CAACV,WAAWuC,WAAW,IAAID,cAAe;QACnD,IAAItC,aAAad,iBAAiB;YAChC;QACF;QACA,IAAI,CAACqD,YAAY;YACf;QACF;QACA/C,MAAMG,IAAI,CAAC;YACTQ,MAAM;YACNH;YACAyC,YAAYtB;YACZf,OAAOmC,WAAWlC,WAAW,EAAEC,SAASN;YACxCC,SAASD;YACTE,MAAM;gBAAE,GAAGqC,UAAU;gBAAEhC,QAAQgC,WAAWhC,MAAM,IAAI3B;YAAc;QACpE;IACF;IAEA,OAAOY;AACT"}