@payloadcms/plugin-mcp 4.0.0-internal.ea6e8f8 → 4.0.0-internal.ee5d8bd

package/dist/endpoint/oauthServer.js

@@ -0,0 +1,386 @@
+import { OAuthErrorCode } from '@modelcontextprotocol/server';
+import { createHash } from 'crypto';
+import { formatAdminURL } from 'payload/shared';
+import { getPluginConfig } from '../utils/getPluginConfig.js';
+import { getMCPURL } from './oauth.js';
+import { issueLoginToken, refreshLoginToken } from './oauthLoginToken.js';
+/**
+ * Turns Payload into the OAuth authorization server for MCP clients when `oauth.type` is
+ * `'builtin'`. Clients register, the user allows them after logging in to the admin panel, and
+ * the client receives the tokens `issueToken` creates.
+ *
+ * Clients, consent forms, authorization codes, and refresh tokens are encrypted and handed to the
+ * client instead of being stored. Only the default tokens write to the database, to the user's
+ * login sessions.
+ */ export const oauthServerEndpoints = [
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, (issuer)=>metadataResponse(issuer)),
+        method: 'get',
+        // OpenID discovery is the only metadata location MCP clients check below the issuer's path,
+        // which lets this work under /api without a route at the site root
+        path: '/mcp/oauth/.well-known/openid-configuration'
+    },
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, ()=>Response.json({
+                    keys: []
+                })),
+        method: 'get',
+        path: '/mcp/oauth/jwks'
+    },
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, ()=>register(req)),
+        method: 'post',
+        path: '/mcp/oauth/register'
+    },
+    {
+        handler: (req)=>withIssuer(req, ()=>authorize(req)),
+        method: 'get',
+        path: '/mcp/oauth/authorize'
+    },
+    {
+        handler: (req)=>withIssuer(req, ()=>approve(req)),
+        method: 'post',
+        path: '/mcp/oauth/authorize'
+    },
+    {
+        disableAuth: true,
+        handler: (req)=>withIssuer(req, ()=>token(req)),
+        method: 'post',
+        path: '/mcp/oauth/token'
+    }
+];
+/** The authorization server URL, or `undefined` when Payload isn't the authorization server. */ const getIssuer = (req)=>getPluginConfig({
+        config: req.payload.config
+    }).oauth?.type === 'builtin' ? `${getMCPURL({
+        config: req.payload.config,
+        url: req.url
+    })}/oauth` : undefined;
+const withIssuer = (req, handler)=>{
+    const issuer = getIssuer(req);
+    return issuer ? handler(issuer) : new Response(null, {
+        status: 404
+    });
+};
+/**
+ * The user logged in to this browser, who can allow MCP clients. Tokens and API keys in the
+ * `Authorization` header can't, or an MCP client could use its access token to approve itself a
+ * new, separate login.
+ */ const getBrowserUser = (req)=>req.headers.has('Authorization') ? null : req.user;
+const metadataResponse = (issuer)=>Response.json({
+        authorization_endpoint: `${issuer}/authorize`,
+        code_challenge_methods_supported: [
+            'S256'
+        ],
+        grant_types_supported: [
+            'authorization_code',
+            'refresh_token'
+        ],
+        // Required by OpenID discovery. No ID tokens are issued.
+        id_token_signing_alg_values_supported: [
+            'RS256'
+        ],
+        issuer,
+        jwks_uri: `${issuer}/jwks`,
+        registration_endpoint: `${issuer}/register`,
+        response_types_supported: [
+            'code'
+        ],
+        subject_types_supported: [
+            'public'
+        ],
+        token_endpoint: `${issuer}/token`,
+        token_endpoint_auth_methods_supported: [
+            'none'
+        ]
+    }, // Not cached, since without `serverURL` its URLs come from the request
+    {
+        headers: {
+            'Access-Control-Allow-Origin': '*',
+            'Cache-Control': 'no-store'
+        }
+    });
+const register = async (req)=>{
+    const { client_name, redirect_uris } = await req.json().catch(()=>({}));
+    if (!Array.isArray(redirect_uris) || !redirect_uris.length || !redirect_uris.every((uri)=>typeof uri === 'string' && URL.canParse(uri) && !uri.includes('#'))) {
+        return Response.json({
+            error: OAuthErrorCode.InvalidRedirectUri
+        }, {
+            status: 400
+        });
+    }
+    const client = {
+        name: typeof client_name === 'string' ? client_name : 'An MCP client',
+        redirectURIs: redirect_uris
+    };
+    return Response.json({
+        client_id: seal({
+            type: 'client',
+            data: client,
+            req
+        }),
+        client_name: client.name,
+        grant_types: [
+            'authorization_code',
+            'refresh_token'
+        ],
+        redirect_uris: client.redirectURIs,
+        response_types: [
+            'code'
+        ],
+        token_endpoint_auth_method: 'none'
+    }, {
+        status: 201
+    });
+};
+const authorize = (req)=>{
+    const url = new URL(req.url);
+    const params = url.searchParams;
+    const clientID = params.get('client_id');
+    const client = unseal({
+        type: 'client',
+        req,
+        value: clientID
+    });
+    const redirectURI = params.get('redirect_uri');
+    // Never redirect to an address the client didn't register
+    if (!client || !redirectURI || !client.redirectURIs.includes(redirectURI)) {
+        return page({
+            content: '<p>Start the sign-in again from your MCP client.</p>',
+            status: 400,
+            title: 'This sign-in link is invalid'
+        });
+    }
+    const state = params.get('state');
+    const codeChallenge = params.get('code_challenge');
+    if (params.get('response_type') !== 'code' || params.get('code_challenge_method') !== 'S256' || !codeChallenge) {
+        return redirect({
+            params: {
+                error: OAuthErrorCode.InvalidRequest,
+                state
+            },
+            redirectURI
+        });
+    }
+    const user = getBrowserUser(req);
+    if (!user) {
+        const loginURL = formatAdminURL({
+            adminRoute: req.payload.config.routes.admin,
+            path: '/login'
+        });
+        return new Response(null, {
+            headers: {
+                Location: `${loginURL}?redirect=${encodeURIComponent(url.pathname + url.search)}`
+            },
+            status: 302
+        });
+    }
+    const consent = {
+        clientID: clientID,
+        codeChallenge,
+        collection: user.collection,
+        redirectURI,
+        state,
+        userID: user.id
+    };
+    return page({
+        content: `<p>It will be able to use this app's MCP tools as ${escapeHTML(String(user.email ?? user.id))}, and you will return to ${escapeHTML(new URL(redirectURI).host || redirectURI)}.</p>
+<form method="post">
+<input name="consent" type="hidden" value="${seal({
+            type: 'consent',
+            data: consent,
+            expiresIn: 20 * 60 * 60,
+            req
+        })}">
+<button name="decision" type="submit" value="allow">Allow</button>
+<button name="decision" type="submit" value="deny">Deny</button>
+</form>`,
+        status: 200,
+        title: `Allow ${client.name} to use your account?`
+    });
+};
+const approve = async (req)=>{
+    const form = new URLSearchParams(await req.text());
+    const consent = unseal({
+        type: 'consent',
+        req,
+        value: form.get('consent')
+    });
+    const user = getBrowserUser(req);
+    // The form is only valid for the user it was shown to
+    if (!consent || user?.id !== consent.userID || user.collection !== consent.collection) {
+        return page({
+            content: '<p>Start the sign-in again from your MCP client.</p>',
+            status: 400,
+            title: 'This sign-in request expired'
+        });
+    }
+    const { clientID, codeChallenge, redirectURI, state } = consent;
+    if (form.get('decision') !== 'allow') {
+        return redirect({
+            params: {
+                error: OAuthErrorCode.AccessDenied,
+                state
+            },
+            redirectURI
+        });
+    }
+    const code = {
+        clientID,
+        codeChallenge,
+        redirectURI,
+        tokens: await getTokenHooks(req).issueToken({
+            req
+        })
+    };
+    return redirect({
+        params: {
+            code: seal({
+                type: 'code',
+                data: code,
+                expiresIn: 60,
+                req
+            }),
+            state
+        },
+        redirectURI
+    });
+};
+const token = async (req)=>{
+    const form = new URLSearchParams(await req.text());
+    const clientID = form.get('client_id');
+    const tokens = clientID && (form.get('grant_type') === 'refresh_token' ? await refresh({
+        clientID,
+        form,
+        req
+    }) : redeemCode({
+        clientID,
+        form,
+        req
+    }));
+    if (!clientID || !tokens) {
+        return Response.json({
+            error: OAuthErrorCode.InvalidGrant
+        }, {
+            status: 400
+        });
+    }
+    return Response.json({
+        access_token: tokens.accessToken,
+        expires_in: tokens.expiresIn,
+        refresh_token: tokens.refreshToken && seal({
+            type: 'refresh',
+            data: {
+                clientID,
+                refreshToken: tokens.refreshToken
+            },
+            req
+        }),
+        token_type: 'Bearer'
+    }, {
+        headers: {
+            'Cache-Control': 'no-store'
+        }
+    });
+};
+const redeemCode = ({ clientID, form, req })=>{
+    const code = unseal({
+        type: 'code',
+        req,
+        value: form.get('code')
+    });
+    if (form.get('grant_type') === 'authorization_code' && code?.clientID === clientID && code.redirectURI === form.get('redirect_uri') && // PKCE: only the client that started the sign-in knows the verifier
+    createHash('sha256').update(form.get('code_verifier') ?? '').digest('base64url') === code.codeChallenge) {
+        return code.tokens;
+    }
+};
+const refresh = async ({ clientID, form, req })=>{
+    const refreshToken = unseal({
+        type: 'refresh',
+        req,
+        value: form.get('refresh_token')
+    });
+    // Only the client a refresh token was issued to can use it
+    if (refreshToken?.clientID === clientID) {
+        return await getTokenHooks(req).refreshToken?.({
+            refreshToken: refreshToken.refreshToken,
+            req
+        });
+    }
+};
+/** `issueToken` and `refreshToken`, or the defaults for Payload login tokens. */ const getTokenHooks = (req)=>{
+    const oauth = getPluginConfig({
+        config: req.payload.config
+    }).oauth;
+    return oauth.issueToken ? {
+        issueToken: oauth.issueToken,
+        refreshToken: oauth.refreshToken
+    } : {
+        issueToken: issueLoginToken,
+        refreshToken: refreshLoginToken
+    };
+};
+/**
+ * Encrypts data for the client to hold, so it doesn't need to be stored. `type` keeps one kind
+ * from being used as another, e.g. a client ID as an authorization code.
+ */ const seal = ({ type, data, expiresIn, req })=>req.payload.encrypt(JSON.stringify({
+        ...data,
+        type,
+        exp: expiresIn && Date.now() + expiresIn * 1000
+    }));
+const unseal = ({ type, req, value })=>{
+    // Only the v1 format is authenticated. Older formats decrypt anything without an error.
+    if (!value?.startsWith('v1:')) {
+        return undefined;
+    }
+    try {
+        // Previous secrets can be public, like a default secret from source code, so only client IDs
+        // accept them. Client IDs grant nothing, and this keeps clients registered when the secret changes.
+        const secret = type === 'client' ? undefined : req.payload.config.secret;
+        const data = JSON.parse(req.payload.decrypt(value, {
+            secret
+        }));
+        return data.type === type && (!data.exp || data.exp > Date.now()) ? data : undefined;
+    } catch  {
+        return undefined;
+    }
+};
+const redirect = ({ params, redirectURI })=>{
+    const location = new URL(redirectURI);
+    for (const [key, value] of Object.entries(params)){
+        if (value) {
+            location.searchParams.set(key, value);
+        }
+    }
+    return new Response(null, {
+        headers: {
+            Location: location.href
+        },
+        status: 302
+    });
+};
+const page = ({ content, status, title })=>new Response(`<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHTML(title)}</title>
+<style>
+body { font-family: system-ui, sans-serif; margin: 4rem auto; max-width: 32rem; overflow-wrap: anywhere; padding: 0 1rem }
+button { font: inherit; margin-inline-end: 0.5rem; padding: 0.5rem 1rem }
+</style>
+</head>
+<body><h1>${escapeHTML(title)}</h1>${content}</body>
+</html>`, {
+        headers: {
+            // Stop other sites from framing the page to trick users into clicking Allow
+            'Content-Security-Policy': "frame-ancestors 'none'",
+            'Content-Type': 'text/html; charset=utf-8'
+        },
+        status
+    });
+const escapeHTML = (value)=>value.replace(/[&<>"']/g, (character)=>`&#${character.charCodeAt(0)};`);
+
+//# sourceMappingURL=oauthServer.js.map

package/dist/endpoint/oauthServer.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/endpoint/oauthServer.ts"],"sourcesContent":["import type {\n  OAuthClientInformationFull,\n  OAuthTokens,\n  OpenIdProviderDiscoveryMetadata,\n} from '@modelcontextprotocol/server'\nimport type { Endpoint, PayloadHandler, PayloadRequest } from 'payload'\n\nimport { OAuthErrorCode } from '@modelcontextprotocol/server'\nimport { createHash } from 'crypto'\nimport { formatAdminURL } from 'payload/shared'\n\nimport type { MCPBuiltinOAuthConfig, MCPOAuthTokens } from '../types.js'\n\nimport { getPluginConfig } from '../utils/getPluginConfig.js'\nimport { getMCPURL } from './oauth.js'\nimport { issueLoginToken, refreshLoginToken } from './oauthLoginToken.js'\n\ntype Client = { name: string; redirectURIs: string[] }\n\ntype Consent = {\n  clientID: string\n  codeChallenge: string\n  collection: string\n  redirectURI: string\n  state: null | string\n  userID: number | string\n}\n\ntype Code = {\n  clientID: string\n  codeChallenge: string\n  redirectURI: string\n  tokens: MCPOAuthTokens\n}\n\ntype RefreshToken = {\n  clientID: string\n  refreshToken: string\n}\n\n/**\n * Turns Payload into the OAuth authorization server for MCP clients when `oauth.type` is\n * `'builtin'`. Clients register, the user allows them after logging in to the admin panel, and\n * the client receives the tokens `issueToken` creates.\n *\n * Clients, consent forms, authorization codes, and refresh tokens are encrypted and handed to the\n * client instead of being stored. Only the default tokens write to the database, to the user's\n * login sessions.\n */\nexport const oauthServerEndpoints: Endpoint[] = [\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, (issuer) => metadataResponse(issuer)),\n    method: 'get',\n    // OpenID discovery is the only metadata location MCP clients check below the issuer's path,\n    // which lets this work under /api without a route at the site root\n    path: '/mcp/oauth/.well-known/openid-configuration',\n  },\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, () => Response.json({ keys: [] })),\n    method: 'get',\n    path: '/mcp/oauth/jwks',\n  },\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, () => register(req)),\n    method: 'post',\n    path: '/mcp/oauth/register',\n  },\n  {\n    handler: (req) => withIssuer(req, () => authorize(req)),\n    method: 'get',\n    path: '/mcp/oauth/authorize',\n  },\n  {\n    handler: (req) => withIssuer(req, () => approve(req)),\n    method: 'post',\n    path: '/mcp/oauth/authorize',\n  },\n  {\n    disableAuth: true,\n    handler: (req) => withIssuer(req, () => token(req)),\n    method: 'post',\n    path: '/mcp/oauth/token',\n  },\n]\n\n/** The authorization server URL, or `undefined` when Payload isn't the authorization server. */\nconst getIssuer = (req: PayloadRequest): string | undefined =>\n  getPluginConfig({ config: req.payload.config }).oauth?.type === 'builtin'\n    ? `${getMCPURL({ config: req.payload.config, url: req.url! })}/oauth`\n    : undefined\n\nconst withIssuer = (\n  req: PayloadRequest,\n  handler: (issuer: string) => Promise<Response> | Response,\n): Promise<Response> | Response => {\n  const issuer = getIssuer(req)\n  return issuer ? handler(issuer) : new Response(null, { status: 404 })\n}\n\n/**\n * The user logged in to this browser, who can allow MCP clients. Tokens and API keys in the\n * `Authorization` header can't, or an MCP client could use its access token to approve itself a\n * new, separate login.\n */\nconst getBrowserUser = (req: PayloadRequest): PayloadRequest['user'] =>\n  req.headers.has('Authorization') ? null : req.user\n\nconst metadataResponse = (issuer: string): Response =>\n  Response.json(\n    {\n      authorization_endpoint: `${issuer}/authorize`,\n      code_challenge_methods_supported: ['S256'],\n      grant_types_supported: ['authorization_code', 'refresh_token'],\n      // Required by OpenID discovery. No ID tokens are issued.\n      id_token_signing_alg_values_supported: ['RS256'],\n      issuer,\n      jwks_uri: `${issuer}/jwks`,\n      registration_endpoint: `${issuer}/register`,\n      response_types_supported: ['code'],\n      subject_types_supported: ['public'],\n      token_endpoint: `${issuer}/token`,\n      token_endpoint_auth_methods_supported: ['none'],\n    } satisfies OpenIdProviderDiscoveryMetadata,\n    // Not cached, since without `serverURL` its URLs come from the request\n    { headers: { 'Access-Control-Allow-Origin': '*', 'Cache-Control': 'no-store' } },\n  )\n\nconst register: PayloadHandler = async (req) => {\n  const { client_name, redirect_uris } = await req.json!().catch(() => ({}))\n\n  if (\n    !Array.isArray(redirect_uris) ||\n    !redirect_uris.length ||\n    !redirect_uris.every(\n      (uri) => typeof uri === 'string' && URL.canParse(uri) && !uri.includes('#'),\n    )\n  ) {\n    return Response.json({ error: OAuthErrorCode.InvalidRedirectUri }, { status: 400 })\n  }\n\n  const client: Client = {\n    name: typeof client_name === 'string' ? client_name : 'An MCP client',\n    redirectURIs: redirect_uris,\n  }\n\n  return Response.json(\n    {\n      client_id: seal({ type: 'client', data: client, req }),\n      client_name: client.name,\n      grant_types: ['authorization_code', 'refresh_token'],\n      redirect_uris: client.redirectURIs,\n      response_types: ['code'],\n      token_endpoint_auth_method: 'none',\n    } satisfies OAuthClientInformationFull,\n    { status: 201 },\n  )\n}\n\nconst authorize: PayloadHandler = (req) => {\n  const url = new URL(req.url!)\n  const params = url.searchParams\n  const clientID = params.get('client_id')\n  const client = unseal<Client>({ type: 'client', req, value: clientID })\n  const redirectURI = params.get('redirect_uri')\n\n  // Never redirect to an address the client didn't register\n  if (!client || !redirectURI || !client.redirectURIs.includes(redirectURI)) {\n    return page({\n      content: '<p>Start the sign-in again from your MCP client.</p>',\n      status: 400,\n      title: 'This sign-in link is invalid',\n    })\n  }\n\n  const state = params.get('state')\n  const codeChallenge = params.get('code_challenge')\n\n  if (\n    params.get('response_type') !== 'code' ||\n    params.get('code_challenge_method') !== 'S256' ||\n    !codeChallenge\n  ) {\n    return redirect({ params: { error: OAuthErrorCode.InvalidRequest, state }, redirectURI })\n  }\n\n  const user = getBrowserUser(req)\n\n  if (!user) {\n    const loginURL = formatAdminURL({ adminRoute: req.payload.config.routes.admin, path: '/login' })\n\n    return new Response(null, {\n      headers: {\n        Location: `${loginURL}?redirect=${encodeURIComponent(url.pathname + url.search)}`,\n      },\n      status: 302,\n    })\n  }\n\n  const consent: Consent = {\n    clientID: clientID!,\n    codeChallenge,\n    collection: user.collection,\n    redirectURI,\n    state,\n    userID: user.id,\n  }\n\n  return page({\n    content: `<p>It will be able to use this app's MCP tools as ${escapeHTML(String(user.email ?? user.id))}, and you will return to ${escapeHTML(new URL(redirectURI).host || redirectURI)}.</p>\n<form method=\"post\">\n<input name=\"consent\" type=\"hidden\" value=\"${seal({ type: 'consent', data: consent, expiresIn: 20 * 60 * 60, req })}\">\n<button name=\"decision\" type=\"submit\" value=\"allow\">Allow</button>\n<button name=\"decision\" type=\"submit\" value=\"deny\">Deny</button>\n</form>`,\n    status: 200,\n    title: `Allow ${client.name} to use your account?`,\n  })\n}\n\nconst approve: PayloadHandler = async (req) => {\n  const form = new URLSearchParams(await req.text!())\n  const consent = unseal<Consent>({ type: 'consent', req, value: form.get('consent') })\n  const user = getBrowserUser(req)\n\n  // The form is only valid for the user it was shown to\n  if (!consent || user?.id !== consent.userID || user.collection !== consent.collection) {\n    return page({\n      content: '<p>Start the sign-in again from your MCP client.</p>',\n      status: 400,\n      title: 'This sign-in request expired',\n    })\n  }\n\n  const { clientID, codeChallenge, redirectURI, state } = consent\n\n  if (form.get('decision') !== 'allow') {\n    return redirect({ params: { error: OAuthErrorCode.AccessDenied, state }, redirectURI })\n  }\n\n  const code: Code = {\n    clientID,\n    codeChallenge,\n    redirectURI,\n    tokens: await getTokenHooks(req).issueToken({ req }),\n  }\n\n  return redirect({\n    params: { code: seal({ type: 'code', data: code, expiresIn: 60, req }), state },\n    redirectURI,\n  })\n}\n\nconst token: PayloadHandler = async (req) => {\n  const form = new URLSearchParams(await req.text!())\n  const clientID = form.get('client_id')\n  const tokens =\n    clientID &&\n    (form.get('grant_type') === 'refresh_token'\n      ? await refresh({ clientID, form, req })\n      : redeemCode({ clientID, form, req }))\n\n  if (!clientID || !tokens) {\n    return Response.json({ error: OAuthErrorCode.InvalidGrant }, { status: 400 })\n  }\n\n  return Response.json(\n    {\n      access_token: tokens.accessToken,\n      expires_in: tokens.expiresIn,\n      refresh_token:\n        tokens.refreshToken &&\n        seal({\n          type: 'refresh',\n          data: { clientID, refreshToken: tokens.refreshToken } satisfies RefreshToken,\n          req,\n        }),\n      token_type: 'Bearer',\n    } satisfies OAuthTokens,\n    { headers: { 'Cache-Control': 'no-store' } },\n  )\n}\n\nconst redeemCode = ({\n  clientID,\n  form,\n  req,\n}: {\n  clientID: string\n  form: URLSearchParams\n  req: PayloadRequest\n}): MCPOAuthTokens | undefined => {\n  const code = unseal<Code>({ type: 'code', req, value: form.get('code') })\n\n  if (\n    form.get('grant_type') === 'authorization_code' &&\n    code?.clientID === clientID &&\n    code.redirectURI === form.get('redirect_uri') &&\n    // PKCE: only the client that started the sign-in knows the verifier\n    createHash('sha256')\n      .update(form.get('code_verifier') ?? '')\n      .digest('base64url') === code.codeChallenge\n  ) {\n    return code.tokens\n  }\n}\n\nconst refresh = async ({\n  clientID,\n  form,\n  req,\n}: {\n  clientID: string\n  form: URLSearchParams\n  req: PayloadRequest\n}): Promise<MCPOAuthTokens | null | undefined> => {\n  const refreshToken = unseal<RefreshToken>({\n    type: 'refresh',\n    req,\n    value: form.get('refresh_token'),\n  })\n\n  // Only the client a refresh token was issued to can use it\n  if (refreshToken?.clientID === clientID) {\n    return await getTokenHooks(req).refreshToken?.({\n      refreshToken: refreshToken.refreshToken,\n      req,\n    })\n  }\n}\n\n/** `issueToken` and `refreshToken`, or the defaults for Payload login tokens. */\nconst getTokenHooks = (req: PayloadRequest) => {\n  const oauth = getPluginConfig({ config: req.payload.config }).oauth as MCPBuiltinOAuthConfig\n\n  return oauth.issueToken\n    ? { issueToken: oauth.issueToken, refreshToken: oauth.refreshToken }\n    : { issueToken: issueLoginToken, refreshToken: refreshLoginToken }\n}\n\n/**\n * Encrypts data for the client to hold, so it doesn't need to be stored. `type` keeps one kind\n * from being used as another, e.g. a client ID as an authorization code.\n */\nconst seal = ({\n  type,\n  data,\n  expiresIn,\n  req,\n}: {\n  data: object\n  /** Seconds */\n  expiresIn?: number\n  req: PayloadRequest\n  type: string\n}): string =>\n  req.payload.encrypt(\n    JSON.stringify({ ...data, type, exp: expiresIn && Date.now() + expiresIn * 1000 }),\n  )\n\nconst unseal = <T>({\n  type,\n  req,\n  value,\n}: {\n  req: PayloadRequest\n  type: string\n  value: null | string\n}): T | undefined => {\n  // Only the v1 format is authenticated. Older formats decrypt anything without an error.\n  if (!value?.startsWith('v1:')) {\n    return undefined\n  }\n\n  try {\n    // Previous secrets can be public, like a default secret from source code, so only client IDs\n    // accept them. Client IDs grant nothing, and this keeps clients registered when the secret changes.\n    const secret = type === 'client' ? undefined : req.payload.config.secret\n    const data = JSON.parse(req.payload.decrypt(value, { secret }))\n    return data.type === type && (!data.exp || data.exp > Date.now()) ? data : undefined\n  } catch {\n    return undefined\n  }\n}\n\nconst redirect = ({\n  params,\n  redirectURI,\n}: {\n  params: Record<string, null | string>\n  redirectURI: string\n}): Response => {\n  const location = new URL(redirectURI)\n\n  for (const [key, value] of Object.entries(params)) {\n    if (value) {\n      location.searchParams.set(key, value)\n    }\n  }\n\n  return new Response(null, { headers: { Location: location.href }, status: 302 })\n}\n\nconst page = ({\n  content,\n  status,\n  title,\n}: {\n  content: string\n  status: number\n  title: string\n}): Response =>\n  new Response(\n    `<!doctype html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>${escapeHTML(title)}</title>\n<style>\nbody { font-family: system-ui, sans-serif; margin: 4rem auto; max-width: 32rem; overflow-wrap: anywhere; padding: 0 1rem }\nbutton { font: inherit; margin-inline-end: 0.5rem; padding: 0.5rem 1rem }\n</style>\n</head>\n<body><h1>${escapeHTML(title)}</h1>${content}</body>\n</html>`,\n    {\n      headers: {\n        // Stop other sites from framing the page to trick users into clicking Allow\n        'Content-Security-Policy': \"frame-ancestors 'none'\",\n        'Content-Type': 'text/html; charset=utf-8',\n      },\n      status,\n    },\n  )\n\nconst escapeHTML = (value: string): string =>\n  value.replace(/[&<>\"']/g, (character) => `&#${character.charCodeAt(0)};`)\n"],"names":["OAuthErrorCode","createHash","formatAdminURL","getPluginConfig","getMCPURL","issueLoginToken","refreshLoginToken","oauthServerEndpoints","disableAuth","handler","req","withIssuer","issuer","metadataResponse","method","path","Response","json","keys","register","authorize","approve","token","getIssuer","config","payload","oauth","type","url","undefined","status","getBrowserUser","headers","has","user","authorization_endpoint","code_challenge_methods_supported","grant_types_supported","id_token_signing_alg_values_supported","jwks_uri","registration_endpoint","response_types_supported","subject_types_supported","token_endpoint","token_endpoint_auth_methods_supported","client_name","redirect_uris","catch","Array","isArray","length","every","uri","URL","canParse","includes","error","InvalidRedirectUri","client","name","redirectURIs","client_id","seal","data","grant_types","response_types","token_endpoint_auth_method","params","searchParams","clientID","get","unseal","value","redirectURI","page","content","title","state","codeChallenge","redirect","InvalidRequest","loginURL","adminRoute","routes","admin","Location","encodeURIComponent","pathname","search","consent","collection","userID","id","escapeHTML","String","email","host","expiresIn","form","URLSearchParams","text","AccessDenied","code","tokens","getTokenHooks","issueToken","refresh","redeemCode","InvalidGrant","access_token","accessToken","expires_in","refresh_token","refreshToken","token_type","update","digest","encrypt","JSON","stringify","exp","Date","now","startsWith","secret","parse","decrypt","location","key","Object","entries","set","href","replace","character","charCodeAt"],"mappings":"AAOA,SAASA,cAAc,QAAQ,+BAA8B;AAC7D,SAASC,UAAU,QAAQ,SAAQ;AACnC,SAASC,cAAc,QAAQ,iBAAgB;AAI/C,SAASC,eAAe,QAAQ,8BAA6B;AAC7D,SAASC,SAAS,QAAQ,aAAY;AACtC,SAASC,eAAe,EAAEC,iBAAiB,QAAQ,uBAAsB;AAyBzE;;;;;;;;CAQC,GACD,OAAO,MAAMC,uBAAmC;IAC9C;QACEC,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,CAACE,SAAWC,iBAAiBD;QAC/DE,QAAQ;QACR,4FAA4F;QAC5F,mEAAmE;QACnEC,MAAM;IACR;IACA;QACEP,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMM,SAASC,IAAI,CAAC;oBAAEC,MAAM,EAAE;gBAAC;QACjEJ,QAAQ;QACRC,MAAM;IACR;IACA;QACEP,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMS,SAAST;QACjDI,QAAQ;QACRC,MAAM;IACR;IACA;QACEN,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMU,UAAUV;QAClDI,QAAQ;QACRC,MAAM;IACR;IACA;QACEN,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMW,QAAQX;QAChDI,QAAQ;QACRC,MAAM;IACR;IACA;QACEP,aAAa;QACbC,SAAS,CAACC,MAAQC,WAAWD,KAAK,IAAMY,MAAMZ;QAC9CI,QAAQ;QACRC,MAAM;IACR;CACD,CAAA;AAED,8FAA8F,GAC9F,MAAMQ,YAAY,CAACb,MACjBP,gBAAgB;QAAEqB,QAAQd,IAAIe,OAAO,CAACD,MAAM;IAAC,GAAGE,KAAK,EAAEC,SAAS,YAC5D,GAAGvB,UAAU;QAAEoB,QAAQd,IAAIe,OAAO,CAACD,MAAM;QAAEI,KAAKlB,IAAIkB,GAAG;IAAE,GAAG,MAAM,CAAC,GACnEC;AAEN,MAAMlB,aAAa,CACjBD,KACAD;IAEA,MAAMG,SAASW,UAAUb;IACzB,OAAOE,SAASH,QAAQG,UAAU,IAAII,SAAS,MAAM;QAAEc,QAAQ;IAAI;AACrE;AAEA;;;;CAIC,GACD,MAAMC,iBAAiB,CAACrB,MACtBA,IAAIsB,OAAO,CAACC,GAAG,CAAC,mBAAmB,OAAOvB,IAAIwB,IAAI;AAEpD,MAAMrB,mBAAmB,CAACD,SACxBI,SAASC,IAAI,CACX;QACEkB,wBAAwB,GAAGvB,OAAO,UAAU,CAAC;QAC7CwB,kCAAkC;YAAC;SAAO;QAC1CC,uBAAuB;YAAC;YAAsB;SAAgB;QAC9D,yDAAyD;QACzDC,uCAAuC;YAAC;SAAQ;QAChD1B;QACA2B,UAAU,GAAG3B,OAAO,KAAK,CAAC;QAC1B4B,uBAAuB,GAAG5B,OAAO,SAAS,CAAC;QAC3C6B,0BAA0B;YAAC;SAAO;QAClCC,yBAAyB;YAAC;SAAS;QACnCC,gBAAgB,GAAG/B,OAAO,MAAM,CAAC;QACjCgC,uCAAuC;YAAC;SAAO;IACjD,GACA,uEAAuE;IACvE;QAAEZ,SAAS;YAAE,+BAA+B;YAAK,iBAAiB;QAAW;IAAE;AAGnF,MAAMb,WAA2B,OAAOT;IACtC,MAAM,EAAEmC,WAAW,EAAEC,aAAa,EAAE,GAAG,MAAMpC,IAAIO,IAAI,GAAI8B,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAEvE,IACE,CAACC,MAAMC,OAAO,CAACH,kBACf,CAACA,cAAcI,MAAM,IACrB,CAACJ,cAAcK,KAAK,CAClB,CAACC,MAAQ,OAAOA,QAAQ,YAAYC,IAAIC,QAAQ,CAACF,QAAQ,CAACA,IAAIG,QAAQ,CAAC,OAEzE;QACA,OAAOvC,SAASC,IAAI,CAAC;YAAEuC,OAAOxD,eAAeyD,kBAAkB;QAAC,GAAG;YAAE3B,QAAQ;QAAI;IACnF;IAEA,MAAM4B,SAAiB;QACrBC,MAAM,OAAOd,gBAAgB,WAAWA,cAAc;QACtDe,cAAcd;IAChB;IAEA,OAAO9B,SAASC,IAAI,CAClB;QACE4C,WAAWC,KAAK;YAAEnC,MAAM;YAAUoC,MAAML;YAAQhD;QAAI;QACpDmC,aAAaa,OAAOC,IAAI;QACxBK,aAAa;YAAC;YAAsB;SAAgB;QACpDlB,eAAeY,OAAOE,YAAY;QAClCK,gBAAgB;YAAC;SAAO;QACxBC,4BAA4B;IAC9B,GACA;QAAEpC,QAAQ;IAAI;AAElB;AAEA,MAAMV,YAA4B,CAACV;IACjC,MAAMkB,MAAM,IAAIyB,IAAI3C,IAAIkB,GAAG;IAC3B,MAAMuC,SAASvC,IAAIwC,YAAY;IAC/B,MAAMC,WAAWF,OAAOG,GAAG,CAAC;IAC5B,MAAMZ,SAASa,OAAe;QAAE5C,MAAM;QAAUjB;QAAK8D,OAAOH;IAAS;IACrE,MAAMI,cAAcN,OAAOG,GAAG,CAAC;IAE/B,0DAA0D;IAC1D,IAAI,CAACZ,UAAU,CAACe,eAAe,CAACf,OAAOE,YAAY,CAACL,QAAQ,CAACkB,cAAc;QACzE,OAAOC,KAAK;YACVC,SAAS;YACT7C,QAAQ;YACR8C,OAAO;QACT;IACF;IAEA,MAAMC,QAAQV,OAAOG,GAAG,CAAC;IACzB,MAAMQ,gBAAgBX,OAAOG,GAAG,CAAC;IAEjC,IACEH,OAAOG,GAAG,CAAC,qBAAqB,UAChCH,OAAOG,GAAG,CAAC,6BAA6B,UACxC,CAACQ,eACD;QACA,OAAOC,SAAS;YAAEZ,QAAQ;gBAAEX,OAAOxD,eAAegF,cAAc;gBAAEH;YAAM;YAAGJ;QAAY;IACzF;IAEA,MAAMvC,OAAOH,eAAerB;IAE5B,IAAI,CAACwB,MAAM;QACT,MAAM+C,WAAW/E,eAAe;YAAEgF,YAAYxE,IAAIe,OAAO,CAACD,MAAM,CAAC2D,MAAM,CAACC,KAAK;YAAErE,MAAM;QAAS;QAE9F,OAAO,IAAIC,SAAS,MAAM;YACxBgB,SAAS;gBACPqD,UAAU,GAAGJ,SAAS,UAAU,EAAEK,mBAAmB1D,IAAI2D,QAAQ,GAAG3D,IAAI4D,MAAM,GAAG;YACnF;YACA1D,QAAQ;QACV;IACF;IAEA,MAAM2D,UAAmB;QACvBpB,UAAUA;QACVS;QACAY,YAAYxD,KAAKwD,UAAU;QAC3BjB;QACAI;QACAc,QAAQzD,KAAK0D,EAAE;IACjB;IAEA,OAAOlB,KAAK;QACVC,SAAS,CAAC,kDAAkD,EAAEkB,WAAWC,OAAO5D,KAAK6D,KAAK,IAAI7D,KAAK0D,EAAE,GAAG,yBAAyB,EAAEC,WAAW,IAAIxC,IAAIoB,aAAauB,IAAI,IAAIvB,aAAa;;2CAEjJ,EAAEX,KAAK;YAAEnC,MAAM;YAAWoC,MAAM0B;YAASQ,WAAW,KAAK,KAAK;YAAIvF;QAAI,GAAG;;;OAG7G,CAAC;QACJoB,QAAQ;QACR8C,OAAO,CAAC,MAAM,EAAElB,OAAOC,IAAI,CAAC,qBAAqB,CAAC;IACpD;AACF;AAEA,MAAMtC,UAA0B,OAAOX;IACrC,MAAMwF,OAAO,IAAIC,gBAAgB,MAAMzF,IAAI0F,IAAI;IAC/C,MAAMX,UAAUlB,OAAgB;QAAE5C,MAAM;QAAWjB;QAAK8D,OAAO0B,KAAK5B,GAAG,CAAC;IAAW;IACnF,MAAMpC,OAAOH,eAAerB;IAE5B,sDAAsD;IACtD,IAAI,CAAC+E,WAAWvD,MAAM0D,OAAOH,QAAQE,MAAM,IAAIzD,KAAKwD,UAAU,KAAKD,QAAQC,UAAU,EAAE;QACrF,OAAOhB,KAAK;YACVC,SAAS;YACT7C,QAAQ;YACR8C,OAAO;QACT;IACF;IAEA,MAAM,EAAEP,QAAQ,EAAES,aAAa,EAAEL,WAAW,EAAEI,KAAK,EAAE,GAAGY;IAExD,IAAIS,KAAK5B,GAAG,CAAC,gBAAgB,SAAS;QACpC,OAAOS,SAAS;YAAEZ,QAAQ;gBAAEX,OAAOxD,eAAeqG,YAAY;gBAAExB;YAAM;YAAGJ;QAAY;IACvF;IAEA,MAAM6B,OAAa;QACjBjC;QACAS;QACAL;QACA8B,QAAQ,MAAMC,cAAc9F,KAAK+F,UAAU,CAAC;YAAE/F;QAAI;IACpD;IAEA,OAAOqE,SAAS;QACdZ,QAAQ;YAAEmC,MAAMxC,KAAK;gBAAEnC,MAAM;gBAAQoC,MAAMuC;gBAAML,WAAW;gBAAIvF;YAAI;YAAImE;QAAM;QAC9EJ;IACF;AACF;AAEA,MAAMnD,QAAwB,OAAOZ;IACnC,MAAMwF,OAAO,IAAIC,gBAAgB,MAAMzF,IAAI0F,IAAI;IAC/C,MAAM/B,WAAW6B,KAAK5B,GAAG,CAAC;IAC1B,MAAMiC,SACJlC,YACC6B,CAAAA,KAAK5B,GAAG,CAAC,kBAAkB,kBACxB,MAAMoC,QAAQ;QAAErC;QAAU6B;QAAMxF;IAAI,KACpCiG,WAAW;QAAEtC;QAAU6B;QAAMxF;IAAI,EAAC;IAExC,IAAI,CAAC2D,YAAY,CAACkC,QAAQ;QACxB,OAAOvF,SAASC,IAAI,CAAC;YAAEuC,OAAOxD,eAAe4G,YAAY;QAAC,GAAG;YAAE9E,QAAQ;QAAI;IAC7E;IAEA,OAAOd,SAASC,IAAI,CAClB;QACE4F,cAAcN,OAAOO,WAAW;QAChCC,YAAYR,OAAON,SAAS;QAC5Be,eACET,OAAOU,YAAY,IACnBnD,KAAK;YACHnC,MAAM;YACNoC,MAAM;gBAAEM;gBAAU4C,cAAcV,OAAOU,YAAY;YAAC;YACpDvG;QACF;QACFwG,YAAY;IACd,GACA;QAAElF,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAE/C;AAEA,MAAM2E,aAAa,CAAC,EAClBtC,QAAQ,EACR6B,IAAI,EACJxF,GAAG,EAKJ;IACC,MAAM4F,OAAO/B,OAAa;QAAE5C,MAAM;QAAQjB;QAAK8D,OAAO0B,KAAK5B,GAAG,CAAC;IAAQ;IAEvE,IACE4B,KAAK5B,GAAG,CAAC,kBAAkB,wBAC3BgC,MAAMjC,aAAaA,YACnBiC,KAAK7B,WAAW,KAAKyB,KAAK5B,GAAG,CAAC,mBAC9B,oEAAoE;IACpErE,WAAW,UACRkH,MAAM,CAACjB,KAAK5B,GAAG,CAAC,oBAAoB,IACpC8C,MAAM,CAAC,iBAAiBd,KAAKxB,aAAa,EAC7C;QACA,OAAOwB,KAAKC,MAAM;IACpB;AACF;AAEA,MAAMG,UAAU,OAAO,EACrBrC,QAAQ,EACR6B,IAAI,EACJxF,GAAG,EAKJ;IACC,MAAMuG,eAAe1C,OAAqB;QACxC5C,MAAM;QACNjB;QACA8D,OAAO0B,KAAK5B,GAAG,CAAC;IAClB;IAEA,2DAA2D;IAC3D,IAAI2C,cAAc5C,aAAaA,UAAU;QACvC,OAAO,MAAMmC,cAAc9F,KAAKuG,YAAY,GAAG;YAC7CA,cAAcA,aAAaA,YAAY;YACvCvG;QACF;IACF;AACF;AAEA,+EAA+E,GAC/E,MAAM8F,gBAAgB,CAAC9F;IACrB,MAAMgB,QAAQvB,gBAAgB;QAAEqB,QAAQd,IAAIe,OAAO,CAACD,MAAM;IAAC,GAAGE,KAAK;IAEnE,OAAOA,MAAM+E,UAAU,GACnB;QAAEA,YAAY/E,MAAM+E,UAAU;QAAEQ,cAAcvF,MAAMuF,YAAY;IAAC,IACjE;QAAER,YAAYpG;QAAiB4G,cAAc3G;IAAkB;AACrE;AAEA;;;CAGC,GACD,MAAMwD,OAAO,CAAC,EACZnC,IAAI,EACJoC,IAAI,EACJkC,SAAS,EACTvF,GAAG,EAOJ,GACCA,IAAIe,OAAO,CAAC4F,OAAO,CACjBC,KAAKC,SAAS,CAAC;QAAE,GAAGxD,IAAI;QAAEpC;QAAM6F,KAAKvB,aAAawB,KAAKC,GAAG,KAAKzB,YAAY;IAAK;AAGpF,MAAM1B,SAAS,CAAI,EACjB5C,IAAI,EACJjB,GAAG,EACH8D,KAAK,EAKN;IACC,wFAAwF;IACxF,IAAI,CAACA,OAAOmD,WAAW,QAAQ;QAC7B,OAAO9F;IACT;IAEA,IAAI;QACF,6FAA6F;QAC7F,oGAAoG;QACpG,MAAM+F,SAASjG,SAAS,WAAWE,YAAYnB,IAAIe,OAAO,CAACD,MAAM,CAACoG,MAAM;QACxE,MAAM7D,OAAOuD,KAAKO,KAAK,CAACnH,IAAIe,OAAO,CAACqG,OAAO,CAACtD,OAAO;YAAEoD;QAAO;QAC5D,OAAO7D,KAAKpC,IAAI,KAAKA,QAAS,CAAA,CAACoC,KAAKyD,GAAG,IAAIzD,KAAKyD,GAAG,GAAGC,KAAKC,GAAG,EAAC,IAAK3D,OAAOlC;IAC7E,EAAE,OAAM;QACN,OAAOA;IACT;AACF;AAEA,MAAMkD,WAAW,CAAC,EAChBZ,MAAM,EACNM,WAAW,EAIZ;IACC,MAAMsD,WAAW,IAAI1E,IAAIoB;IAEzB,KAAK,MAAM,CAACuD,KAAKxD,MAAM,IAAIyD,OAAOC,OAAO,CAAC/D,QAAS;QACjD,IAAIK,OAAO;YACTuD,SAAS3D,YAAY,CAAC+D,GAAG,CAACH,KAAKxD;QACjC;IACF;IAEA,OAAO,IAAIxD,SAAS,MAAM;QAAEgB,SAAS;YAAEqD,UAAU0C,SAASK,IAAI;QAAC;QAAGtG,QAAQ;IAAI;AAChF;AAEA,MAAM4C,OAAO,CAAC,EACZC,OAAO,EACP7C,MAAM,EACN8C,KAAK,EAKN,GACC,IAAI5D,SACF,CAAC;;;;;OAKE,EAAE6E,WAAWjB,OAAO;;;;;;UAMjB,EAAEiB,WAAWjB,OAAO,KAAK,EAAED,QAAQ;OACtC,CAAC,EACJ;QACE3C,SAAS;YACP,4EAA4E;YAC5E,2BAA2B;YAC3B,gBAAgB;QAClB;QACAF;IACF;AAGJ,MAAM+D,aAAa,CAACrB,QAClBA,MAAM6D,OAAO,CAAC,YAAY,CAACC,YAAc,CAAC,EAAE,EAAEA,UAAUC,UAAU,CAAC,GAAG,CAAC,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js';
+import type { AuthorizedMCP, MCPBuiltinOAuthConfig, MCPExternalOAuthConfig, MCPOAuthConfig, MCPOAuthTokens, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js';
 declare module 'payload' {
     interface PayloadRequestAPI {
         MCP: true;
@@ -7,8 +7,16 @@ declare module 'payload' {
         /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */
         '@payloadcms/plugin-mcp': MCPPluginConfig;
     }
+    interface RequestContext {
+        /** Set on MCP requests before they're authenticated. */
+        mcp?: {
+            /** The MCP endpoint's address, which OAuth access tokens for MCP are issued for. */
+            resource: string;
+        };
+    }
 }
-export type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig };
+export type { AuthorizedMCP, MCPBuiltinOAuthConfig, MCPExternalOAuthConfig, MCPOAuthConfig, MCPOAuthTokens, MCPPluginConfig, SanitizedMCPPluginConfig, };
 export { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js';
+export { oauthProtectedResourceHandler } from './endpoint/oauth.js';
 export declare const mcpPlugin: (options: MCPPluginConfig) => import("payload").Plugin;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAK1F,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAiB,iBAAiB;QAChC,GAAG,EAAE,IAAI,CAAA;KACV;IACD,UAAU,iBAAiB;QACzB,uFAAuF;QACvF,wBAAwB,EAAE,eAAe,CAAA;KAC1C;CACF;AAED,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,wBAAwB,EAAE,CAAA;AAExE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAElG,eAAO,MAAM,SAAS,wDAiCpB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,eAAe,EACf,wBAAwB,EACzB,MAAM,YAAY,CAAA;AAOnB,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAiB,iBAAiB;QAChC,GAAG,EAAE,IAAI,CAAA;KACV;IACD,UAAU,iBAAiB;QACzB,uFAAuF;QACvF,wBAAwB,EAAE,eAAe,CAAA;KAC1C;IACD,UAAiB,cAAc;QAC7B,wDAAwD;QACxD,GAAG,CAAC,EAAE;YACJ,oFAAoF;YACpF,QAAQ,EAAE,MAAM,CAAA;SACjB,CAAA;KACF;CACF;AAED,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,eAAe,EACf,wBAAwB,GACzB,CAAA;AAED,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAEnE,eAAO,MAAM,SAAS,wDA0CpB,CAAA"}

package/dist/index.js

@@ -1,7 +1,10 @@
 import { definePlugin } from 'payload';
 import { mcpEndpoint } from './endpoint/index.js';
+import { oauthProtectedResourceEndpoint } from './endpoint/oauth.js';
+import { oauthServerEndpoints } from './endpoint/oauthServer.js';
 import { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js';
 export { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js';
+export { oauthProtectedResourceHandler } from './endpoint/oauth.js';
 export const mcpPlugin = definePlugin({
     slug: '@payloadcms/plugin-mcp',
     order: 10,
@@ -23,8 +26,10 @@ export const mcpPlugin = definePlugin({
             ...config,
             endpoints: [
                 ...config.endpoints ?? [],
-                // Payload prefixes /api, so the full path is /api/mcp.
+                // Payload prefixes /api, so the full path is /api/mcp. getAuthorizedMCP authenticates the
+                // request with dev auto-login turned off, so Payload doesn't authenticate it first.
                 {
+                    disableAuth: true,
                     handler: mcpEndpoint,
                     method: 'post',
                     path: '/mcp'
@@ -32,6 +37,7 @@ export const mcpPlugin = definePlugin({
                 // Streamable HTTP's optional server=>client GET stream. We don't offer
                 // one, so answer 405 per spec-— clients then skip it cleanly
                 {
+                    disableAuth: true,
                     handler: ()=>new Response(null, {
                             headers: {
                                 Allow: 'POST'
@@ -40,7 +46,14 @@ export const mcpPlugin = definePlugin({
                         }),
                     method: 'get',
                     path: '/mcp'
-                }
+                },
+                {
+                    disableAuth: true,
+                    handler: oauthProtectedResourceEndpoint,
+                    method: 'get',
+                    path: '/mcp/oauth-protected-resource'
+                },
+                ...oauthServerEndpoints
             ]
         };
     }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { definePlugin } from 'payload'\n\nimport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig } from './types.js'\n\nimport { mcpEndpoint } from './endpoint/index.js'\nimport { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js'\n\ndeclare module 'payload' {\n  export interface PayloadRequestAPI {\n    MCP: true\n  }\n  interface RegisteredPlugins {\n    /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */\n    '@payloadcms/plugin-mcp': MCPPluginConfig\n  }\n}\n\nexport type { AuthorizedMCP, MCPPluginConfig, SanitizedMCPPluginConfig }\n\nexport { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js'\n\nexport const mcpPlugin = definePlugin<MCPPluginConfig>({\n  slug: '@payloadcms/plugin-mcp',\n  order: 10,\n  plugin: ({ config, options, plugins }) => {\n    const pluginConfig = sanitizeMCPConfig({ config, pluginConfig: options })\n\n    // Stash the sanitized config on plugin options so `getPluginConfig()` reads it.\n    const registered = plugins['@payloadcms/plugin-mcp']\n    if (registered) {\n      // @ts-expect-error\n      registered.sanitizedOptions = pluginConfig as unknown as typeof registered.options\n    }\n\n    if (pluginConfig.disabled) {\n      return config\n    }\n\n    return {\n      ...config,\n      endpoints: [\n        ...(config.endpoints ?? []),\n        // Payload prefixes /api, so the full path is /api/mcp.\n        { handler: mcpEndpoint, method: 'post', path: '/mcp' },\n        // Streamable HTTP's optional server=>client GET stream. We don't offer\n        // one, so answer 405 per spec-— clients then skip it cleanly\n        {\n          handler: () => new Response(null, { headers: { Allow: 'POST' }, status: 405 }),\n          method: 'get',\n          path: '/mcp',\n        },\n      ],\n    }\n  },\n})\n"],"names":["definePlugin","mcpEndpoint","sanitizeMCPConfig","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","mcpPlugin","slug","order","plugin","config","options","plugins","pluginConfig","registered","sanitizedOptions","disabled","endpoints","handler","method","path","Response","headers","Allow","status"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAS;AAItC,SAASC,WAAW,QAAQ,sBAAqB;AACjD,SAASC,iBAAiB,QAAQ,6BAA4B;AAc9D,SAASC,oBAAoB,EAAEC,gBAAgB,EAAEC,YAAY,EAAEC,UAAU,QAAQ,kBAAiB;AAElG,OAAO,MAAMC,YAAYP,aAA8B;IACrDQ,MAAM;IACNC,OAAO;IACPC,QAAQ,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAEC,OAAO,EAAE;QACnC,MAAMC,eAAeZ,kBAAkB;YAAES;YAAQG,cAAcF;QAAQ;QAEvE,gFAAgF;QAChF,MAAMG,aAAaF,OAAO,CAAC,yBAAyB;QACpD,IAAIE,YAAY;YACd,mBAAmB;YACnBA,WAAWC,gBAAgB,GAAGF;QAChC;QAEA,IAAIA,aAAaG,QAAQ,EAAE;YACzB,OAAON;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTO,WAAW;mBACLP,OAAOO,SAAS,IAAI,EAAE;gBAC1B,uDAAuD;gBACvD;oBAAEC,SAASlB;oBAAamB,QAAQ;oBAAQC,MAAM;gBAAO;gBACrD,uEAAuE;gBACvE,6DAA6D;gBAC7D;oBACEF,SAAS,IAAM,IAAIG,SAAS,MAAM;4BAAEC,SAAS;gCAAEC,OAAO;4BAAO;4BAAGC,QAAQ;wBAAI;oBAC5EL,QAAQ;oBACRC,MAAM;gBACR;aACD;QACH;IACF;AACF,GAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { definePlugin } from 'payload'\n\nimport type {\n  AuthorizedMCP,\n  MCPBuiltinOAuthConfig,\n  MCPExternalOAuthConfig,\n  MCPOAuthConfig,\n  MCPOAuthTokens,\n  MCPPluginConfig,\n  SanitizedMCPPluginConfig,\n} from './types.js'\n\nimport { mcpEndpoint } from './endpoint/index.js'\nimport { oauthProtectedResourceEndpoint } from './endpoint/oauth.js'\nimport { oauthServerEndpoints } from './endpoint/oauthServer.js'\nimport { sanitizeMCPConfig } from './mcp/sanitizeMCPConfig.js'\n\ndeclare module 'payload' {\n  export interface PayloadRequestAPI {\n    MCP: true\n  }\n  interface RegisteredPlugins {\n    /** After the plugin's `plugin` callback runs, `options` holds the sanitized config. */\n    '@payloadcms/plugin-mcp': MCPPluginConfig\n  }\n  export interface RequestContext {\n    /** Set on MCP requests before they're authenticated. */\n    mcp?: {\n      /** The MCP endpoint's address, which OAuth access tokens for MCP are issued for. */\n      resource: string\n    }\n  }\n}\n\nexport type {\n  AuthorizedMCP,\n  MCPBuiltinOAuthConfig,\n  MCPExternalOAuthConfig,\n  MCPOAuthConfig,\n  MCPOAuthTokens,\n  MCPPluginConfig,\n  SanitizedMCPPluginConfig,\n}\n\nexport { defineCollectionTool, defineGlobalTool, definePrompt, defineTool } from './defineTool.js'\nexport { oauthProtectedResourceHandler } from './endpoint/oauth.js'\n\nexport const mcpPlugin = definePlugin<MCPPluginConfig>({\n  slug: '@payloadcms/plugin-mcp',\n  order: 10,\n  plugin: ({ config, options, plugins }) => {\n    const pluginConfig = sanitizeMCPConfig({ config, pluginConfig: options })\n\n    // Stash the sanitized config on plugin options so `getPluginConfig()` reads it.\n    const registered = plugins['@payloadcms/plugin-mcp']\n    if (registered) {\n      // @ts-expect-error\n      registered.sanitizedOptions = pluginConfig\n    }\n\n    if (pluginConfig.disabled) {\n      return config\n    }\n\n    return {\n      ...config,\n      endpoints: [\n        ...(config.endpoints ?? []),\n        // Payload prefixes /api, so the full path is /api/mcp. getAuthorizedMCP authenticates the\n        // request with dev auto-login turned off, so Payload doesn't authenticate it first.\n        { disableAuth: true, handler: mcpEndpoint, method: 'post', path: '/mcp' },\n        // Streamable HTTP's optional server=>client GET stream. We don't offer\n        // one, so answer 405 per spec-— clients then skip it cleanly\n        {\n          disableAuth: true,\n          handler: () => new Response(null, { headers: { Allow: 'POST' }, status: 405 }),\n          method: 'get',\n          path: '/mcp',\n        },\n        {\n          disableAuth: true,\n          handler: oauthProtectedResourceEndpoint,\n          method: 'get',\n          path: '/mcp/oauth-protected-resource',\n        },\n        ...oauthServerEndpoints,\n      ],\n    }\n  },\n})\n"],"names":["definePlugin","mcpEndpoint","oauthProtectedResourceEndpoint","oauthServerEndpoints","sanitizeMCPConfig","defineCollectionTool","defineGlobalTool","definePrompt","defineTool","oauthProtectedResourceHandler","mcpPlugin","slug","order","plugin","config","options","plugins","pluginConfig","registered","sanitizedOptions","disabled","endpoints","disableAuth","handler","method","path","Response","headers","Allow","status"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAS;AAYtC,SAASC,WAAW,QAAQ,sBAAqB;AACjD,SAASC,8BAA8B,QAAQ,sBAAqB;AACpE,SAASC,oBAAoB,QAAQ,4BAA2B;AAChE,SAASC,iBAAiB,QAAQ,6BAA4B;AA6B9D,SAASC,oBAAoB,EAAEC,gBAAgB,EAAEC,YAAY,EAAEC,UAAU,QAAQ,kBAAiB;AAClG,SAASC,6BAA6B,QAAQ,sBAAqB;AAEnE,OAAO,MAAMC,YAAYV,aAA8B;IACrDW,MAAM;IACNC,OAAO;IACPC,QAAQ,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAEC,OAAO,EAAE;QACnC,MAAMC,eAAeb,kBAAkB;YAAEU;YAAQG,cAAcF;QAAQ;QAEvE,gFAAgF;QAChF,MAAMG,aAAaF,OAAO,CAAC,yBAAyB;QACpD,IAAIE,YAAY;YACd,mBAAmB;YACnBA,WAAWC,gBAAgB,GAAGF;QAChC;QAEA,IAAIA,aAAaG,QAAQ,EAAE;YACzB,OAAON;QACT;QAEA,OAAO;YACL,GAAGA,MAAM;YACTO,WAAW;mBACLP,OAAOO,SAAS,IAAI,EAAE;gBAC1B,0FAA0F;gBAC1F,oFAAoF;gBACpF;oBAAEC,aAAa;oBAAMC,SAAStB;oBAAauB,QAAQ;oBAAQC,MAAM;gBAAO;gBACxE,uEAAuE;gBACvE,6DAA6D;gBAC7D;oBACEH,aAAa;oBACbC,SAAS,IAAM,IAAIG,SAAS,MAAM;4BAAEC,SAAS;gCAAEC,OAAO;4BAAO;4BAAGC,QAAQ;wBAAI;oBAC5EL,QAAQ;oBACRC,MAAM;gBACR;gBACA;oBACEH,aAAa;oBACbC,SAASrB;oBACTsB,QAAQ;oBACRC,MAAM;gBACR;mBACGtB;aACJ;QACH;IACF;AACF,GAAE"}

package/dist/mcp/buildMcpServer.js

@@ -205,7 +205,7 @@ const withSlugInput = ({ input })=>{
         }
         return addSlugToJSONSchema({
             description,
-            schema: schema
+            schema
         });
     }
     return addSlugToJSONSchema({

package/dist/mcp/buildMcpServer.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, strictObject, z } from 'payload'\n\nimport type {\n  AuthorizedMCP,\n  CollectionMCPItem,\n  GlobalMCPItem,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n  ToolInputSchema,\n} from '../types.js'\n\nimport { getLogger } from '../utils/getLogger.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/**\n * Serving-entry-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The HTTP and stdio entry point callers provide fresh\n * instances from this builder while they own the transport and protocol-era\n * decision.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createPayloadRequest`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  z.config(z.locales.en())\n\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = async ({\n    input,\n    overrideResponse,\n    response,\n    toolName,\n  }: {\n    input: unknown\n    overrideResponse?: MCPResponseOverride\n    response: MCPToolResponse\n    toolName: string\n  }): Promise<MCPToolResponse> => {\n    let overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    for (const hook of pluginConfig.hooks?.afterToolCall ?? []) {\n      overridden = await hook({ input, req, response: overridden, toolName })\n    }\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  /**\n   * Runs a collection/global tool call:\n   * - reads `slug` from the input\n   * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug\n   * - runs the tool handler and finalizes its response\n   */\n  const callEntityTool = async ({\n    input,\n    item,\n    serverContext,\n  }: {\n    input: unknown\n    item: CollectionMCPItem | GlobalMCPItem\n    serverContext: ServerContext\n  }): Promise<MCPToolResponse> => {\n    const entity = item.type === 'collectionTool' ? 'collection' : 'global'\n    const toolInput = (input ?? {}) as Record<string, unknown>\n    const slug = toolInput.slug as string | undefined\n\n    if (!slug) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: \"${item.mcpName}\" requires slug. Use getConfigInfo to inspect ${entity} slugs.`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const match = authorizedMCP.items.find(\n      (candidate): candidate is CollectionMCPItem | GlobalMCPItem =>\n        candidate.type === item.type &&\n        candidate.mcpName === item.mcpName &&\n        (candidate.type === 'collectionTool'\n          ? candidate.collectionSlug === slug\n          : candidate.type === 'globalTool' && candidate.globalSlug === slug),\n    )\n\n    if (!match) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: MCP access to \"${item.mcpName}\" is not enabled for ${entity} \"${slug}\"`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const handlerArgs = {\n      authorizedMCP,\n      input: toolInput,\n      req,\n      serverContext,\n    }\n    const response = await (match.type === 'collectionTool'\n      ? match.tool.handler({ ...handlerArgs, slug })\n      : match.tool.handler({ ...handlerArgs, slug }))\n\n    return finalizeToolResponse({\n      input: toolInput,\n      overrideResponse: match.tool.overrideResponse,\n      response,\n      toolName: match.mcpName,\n    })\n  }\n\n  try {\n    const registeredEntityTools = new Set<string>()\n\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool':\n        case 'globalTool': {\n          if (registeredEntityTools.has(item.mcpName)) {\n            break\n          }\n          registeredEntityTools.add(item.mcpName)\n\n          const inputSchema = withSlugInput({ input: item.tool.input })\n\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: item.tool.annotations,\n              description: item.tool.description,\n              inputSchema: toStandardSchema(inputSchema),\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              callEntityTool({ input, item, serverContext: ctx }),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.mcpName,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.mcpName,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: tool.annotations,\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) => {\n              const toolInput = (input ?? {}) as Record<string, unknown>\n              const response = await tool.handler({\n                authorizedMCP,\n                input: toolInput,\n                req,\n                serverContext: ctx,\n              })\n              return finalizeToolResponse({\n                input: toolInput,\n                overrideResponse: tool.overrideResponse,\n                response,\n                toolName: item.mcpName,\n              })\n            },\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n\nconst withSlugInput = ({ input }: { input?: ToolInputSchema }): ToolInputSchema => {\n  const description = 'The target slug.'\n  const slugSchema = z.string().check(z.describe(description))\n\n  if (!input) {\n    return strictObject({ slug: slugSchema }) as unknown as ToolInputSchema\n  }\n\n  if (typeof input === 'object' && input !== null && '~standard' in input) {\n    const schema = input['~standard'].jsonSchema.input({ target: 'draft-2020-12' })\n    const properties = schema.properties as Record<string, unknown> | undefined\n\n    if (properties?.slug) {\n      return input\n    }\n\n    return addSlugToJSONSchema({ description, schema: schema as JsonSchemaType })\n  }\n\n  return addSlugToJSONSchema({ description, schema: input })\n}\n\nconst addSlugToJSONSchema = ({\n  description,\n  schema,\n}: {\n  description: string\n  schema: JsonSchemaType\n}): JsonSchemaType => {\n  const objectSchema = schema as {\n    properties?: Record<string, JsonSchemaType>\n    required?: string[]\n  } & JsonSchemaType\n\n  return {\n    ...objectSchema,\n    type: 'object',\n    properties: {\n      ...objectSchema.properties,\n      slug: {\n        type: 'string',\n        description,\n      },\n    },\n    required: Array.from(new Set(['slug', ...(objectSchema.required ?? [])])),\n  }\n}\n"],"names":["McpServer","APIError","strictObject","z","getLogger","toStandardSchema","buildMcpServer","authorizedMCP","pluginConfig","req","config","locales","en","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","input","overrideResponse","response","toolName","overridden","doc","hook","hooks","afterToolCall","_doc","rest","callEntityTool","item","serverContext","entity","type","toolInput","slug","content","text","mcpName","isError","match","items","find","candidate","collectionSlug","globalSlug","handlerArgs","tool","handler","registeredEntityTools","Set","has","add","inputSchema","withSlugInput","registerTool","annotations","description","ctx","info","prompt","registerPrompt","argsSchema","undefined","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String","slugSchema","string","check","describe","schema","jsonSchema","target","properties","addSlugToJSONSchema","objectSchema","required","Array","from"],"mappings":"AAEA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,EAAEC,YAAY,EAAEC,CAAC,QAAQ,UAAS;AAanD,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACCN,EAAEO,MAAM,CAACP,EAAEQ,OAAO,CAACC,EAAE;IAErB,MAAMC,gBAAgBL,aAAaM,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAIf,UACjB;QAAEgB,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAAShB,UAAU;QAAEiB,SAASZ,IAAIY,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,OAAO,EAClCC,KAAK,EACLC,gBAAgB,EAChBC,QAAQ,EACRC,QAAQ,EAMT;QACC,IAAIC,aAAaH,mBAAmBC,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGnB,QAAQgB;QAC1E,KAAK,MAAMI,QAAQrB,aAAasB,KAAK,EAAEC,iBAAiB,EAAE,CAAE;YAC1DJ,aAAa,MAAME,KAAK;gBAAEN;gBAAOd;gBAAKgB,UAAUE;gBAAYD;YAAS;QACvE;QACA,MAAM,EAAEE,KAAKI,IAAI,EAAE,GAAGC,MAAM,GAAGN;QAC/B,OAAOM;IACT;IAEA;;;;;GAKC,GACD,MAAMC,iBAAiB,OAAO,EAC5BX,KAAK,EACLY,IAAI,EACJC,aAAa,EAKd;QACC,MAAMC,SAASF,KAAKG,IAAI,KAAK,mBAAmB,eAAe;QAC/D,MAAMC,YAAahB,SAAS,CAAC;QAC7B,MAAMiB,OAAOD,UAAUC,IAAI;QAE3B,IAAI,CAACA,MAAM;YACT,OAAO;gBACLC,SAAS;oBACP;wBACEH,MAAM;wBACNI,MAAM,CAAC,QAAQ,EAAEP,KAAKQ,OAAO,CAAC,8CAA8C,EAAEN,OAAO,OAAO,CAAC;oBAC/F;iBACD;gBACDO,SAAS;YACX;QACF;QAEA,MAAMC,QAAQtC,cAAcuC,KAAK,CAACC,IAAI,CACpC,CAACC,YACCA,UAAUV,IAAI,KAAKH,KAAKG,IAAI,IAC5BU,UAAUL,OAAO,KAAKR,KAAKQ,OAAO,IACjCK,CAAAA,UAAUV,IAAI,KAAK,mBAChBU,UAAUC,cAAc,KAAKT,OAC7BQ,UAAUV,IAAI,KAAK,gBAAgBU,UAAUE,UAAU,KAAKV,IAAG;QAGvE,IAAI,CAACK,OAAO;YACV,OAAO;gBACLJ,SAAS;oBACP;wBACEH,MAAM;wBACNI,MAAM,CAAC,sBAAsB,EAAEP,KAAKQ,OAAO,CAAC,qBAAqB,EAAEN,OAAO,EAAE,EAAEG,KAAK,CAAC,CAAC;oBACvF;iBACD;gBACDI,SAAS;YACX;QACF;QAEA,MAAMO,cAAc;YAClB5C;YACAgB,OAAOgB;YACP9B;YACA2B;QACF;QACA,MAAMX,WAAW,MAAOoB,CAAAA,MAAMP,IAAI,KAAK,mBACnCO,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEX;QAAK,KAC1CK,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEX;QAAK,EAAC;QAE/C,OAAOlB,qBAAqB;YAC1BC,OAAOgB;YACPf,kBAAkBqB,MAAMO,IAAI,CAAC5B,gBAAgB;YAC7CC;YACAC,UAAUmB,MAAMF,OAAO;QACzB;IACF;IAEA,IAAI;QACF,MAAMW,wBAAwB,IAAIC;QAElC,KAAK,MAAMpB,QAAQ5B,cAAcuC,KAAK,CAAE;YACtC,OAAQX,KAAKG,IAAI;gBACf,KAAK;gBACL,KAAK;oBAAc;wBACjB,IAAIgB,sBAAsBE,GAAG,CAACrB,KAAKQ,OAAO,GAAG;4BAC3C;wBACF;wBACAW,sBAAsBG,GAAG,CAACtB,KAAKQ,OAAO;wBAEtC,MAAMe,cAAcC,cAAc;4BAAEpC,OAAOY,KAAKiB,IAAI,CAAC7B,KAAK;wBAAC;wBAE3DR,OAAO6C,YAAY,CACjBzB,KAAKQ,OAAO,EACZ;4BACEkB,aAAa1B,KAAKiB,IAAI,CAACS,WAAW;4BAClCC,aAAa3B,KAAKiB,IAAI,CAACU,WAAW;4BAClCJ,aAAarD,iBAAiBqD;wBAChC,GACA,OAAOnC,OAAgBwC,MACrB7B,eAAe;gCAAEX;gCAAOY;gCAAMC,eAAe2B;4BAAI;wBAErD3C,OAAO4C,IAAI,CAAC,CAAC,QAAQ,EAAE7B,KAAKQ,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMsB,SAAS9B,KAAK8B,MAAM;wBAC1BlD,OAAOmD,cAAc,CACnB/B,KAAKQ,OAAO,EACZ;4BACEwB,YAAYF,OAAOE,UAAU,GAAG9D,iBAAiB4D,OAAOE,UAAU,IAAIC;4BACtEN,aAAaG,OAAOH,WAAW;4BAC/BO,OAAOJ,OAAOI,KAAK;wBACrB,GACA,OAAO9C,OAAgBwC,MACrBE,OAAOZ,OAAO,CAAC;gCACb9B,OAAQA,SAAS,CAAC;gCAClBd;gCACA2B,eAAe2B;4BACjB;wBAEJ3C,OAAO4C,IAAI,CAAC,CAAC,UAAU,EAAEC,OAAOI,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAWnC,KAAKmC,QAAQ;wBAC9BvD,OAAOwD,gBAAgB,CACrBpC,KAAKQ,OAAO,EACZ,mFAAmF;wBACnF2B,SAASE,GAAG,EACZ;4BACEV,aAAaQ,SAASR,WAAW;4BACjCW,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMX,MAAMW,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAASjB,OAAO,CAAC;gCAAEuB;gCAAQnE;gCAAK2B,eAAe2B;gCAAKS;4BAAI;wBACjE;wBAEFpD,OAAO4C,IAAI,CAAC,CAAC,YAAY,EAAEM,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAMjB,OAAOjB,KAAKiB,IAAI;wBACtBrC,OAAO6C,YAAY,CACjBzB,KAAKQ,OAAO,EACZ;4BACEkB,aAAaT,KAAKS,WAAW;4BAC7BC,aAAaV,KAAKU,WAAW;4BAC7BJ,aAAaN,KAAK7B,KAAK,GAAGlB,iBAAiB+C,KAAK7B,KAAK,IAAI6C;wBAC3D,GACA,OAAO7C,OAAgBwC;4BACrB,MAAMxB,YAAahB,SAAS,CAAC;4BAC7B,MAAME,WAAW,MAAM2B,KAAKC,OAAO,CAAC;gCAClC9C;gCACAgB,OAAOgB;gCACP9B;gCACA2B,eAAe2B;4BACjB;4BACA,OAAOzC,qBAAqB;gCAC1BC,OAAOgB;gCACPf,kBAAkB4B,KAAK5B,gBAAgB;gCACvCC;gCACAC,UAAUS,KAAKQ,OAAO;4BACxB;wBACF;wBAEFvB,OAAO4C,IAAI,CAAC,CAAC,QAAQ,EAAE7B,KAAKQ,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;YACF;QACF;IACF,EAAE,OAAOkC,OAAO;QACd,MAAM,IAAI5E,SAAS,CAAC,gCAAgC,EAAE6E,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAO9D;AACT,EAAC;AAED,MAAM4C,gBAAgB,CAAC,EAAEpC,KAAK,EAA+B;IAC3D,MAAMuC,cAAc;IACpB,MAAMiB,aAAa5E,EAAE6E,MAAM,GAAGC,KAAK,CAAC9E,EAAE+E,QAAQ,CAACpB;IAE/C,IAAI,CAACvC,OAAO;QACV,OAAOrB,aAAa;YAAEsC,MAAMuC;QAAW;IACzC;IAEA,IAAI,OAAOxD,UAAU,YAAYA,UAAU,QAAQ,eAAeA,OAAO;QACvE,MAAM4D,SAAS5D,KAAK,CAAC,YAAY,CAAC6D,UAAU,CAAC7D,KAAK,CAAC;YAAE8D,QAAQ;QAAgB;QAC7E,MAAMC,aAAaH,OAAOG,UAAU;QAEpC,IAAIA,YAAY9C,MAAM;YACpB,OAAOjB;QACT;QAEA,OAAOgE,oBAAoB;YAAEzB;YAAaqB,QAAQA;QAAyB;IAC7E;IAEA,OAAOI,oBAAoB;QAAEzB;QAAaqB,QAAQ5D;IAAM;AAC1D;AAEA,MAAMgE,sBAAsB,CAAC,EAC3BzB,WAAW,EACXqB,MAAM,EAIP;IACC,MAAMK,eAAeL;IAKrB,OAAO;QACL,GAAGK,YAAY;QACflD,MAAM;QACNgD,YAAY;YACV,GAAGE,aAAaF,UAAU;YAC1B9C,MAAM;gBACJF,MAAM;gBACNwB;YACF;QACF;QACA2B,UAAUC,MAAMC,IAAI,CAAC,IAAIpC,IAAI;YAAC;eAAYiC,aAAaC,QAAQ,IAAI,EAAE;SAAE;IACzE;AACF"}
+{"version":3,"sources":["../../src/mcp/buildMcpServer.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { McpServer, type ServerContext } from '@modelcontextprotocol/server'\nimport { APIError, strictObject, z } from 'payload'\n\nimport type {\n  AuthorizedMCP,\n  CollectionMCPItem,\n  GlobalMCPItem,\n  JsonSchemaType,\n  MCPResponseOverride,\n  MCPToolResponse,\n  SanitizedMCPPluginConfig,\n  ToolInputSchema,\n} from '../types.js'\n\nimport { getLogger } from '../utils/getLogger.js'\nimport { toStandardSchema } from '../utils/toStandardSchema.js'\n\n/**\n * Serving-entry-agnostic core: registers every authorized MCP item onto a fresh\n * `McpServer` and returns it. The HTTP and stdio entry point callers provide fresh\n * instances from this builder while they own the transport and protocol-era\n * decision.\n *\n * `req` is the request context handlers see. For HTTP it's the live\n * `PayloadRequest` derived from the incoming HTTP request; for stdio it's a\n * synthesized one built via `createPayloadRequest`.\n */\nexport const buildMcpServer = ({\n  authorizedMCP,\n  pluginConfig,\n  req,\n}: {\n  authorizedMCP: AuthorizedMCP\n  pluginConfig: SanitizedMCPPluginConfig\n  req: PayloadRequest\n}): McpServer => {\n  z.config(z.locales.en())\n\n  const serverOptions = pluginConfig.mcp?.serverOptions || {}\n  const server = new McpServer(\n    { name: 'Payload MCP Server', version: '1.0.0', ...serverOptions.serverInfo },\n    serverOptions.options,\n  )\n\n  const logger = getLogger({ payload: req.payload })\n\n  /**\n   * Wrap a tool handler's response with the tool's `overrideResponse`, then\n   * strip the internal `doc` field so it doesn't leak onto the wire.\n   */\n  const finalizeToolResponse = async ({\n    input,\n    overrideResponse,\n    response,\n    toolName,\n  }: {\n    input: unknown\n    overrideResponse?: MCPResponseOverride\n    response: MCPToolResponse\n    toolName: string\n  }): Promise<MCPToolResponse> => {\n    let overridden = overrideResponse?.(response, response.doc ?? {}, req) ?? response\n    for (const hook of pluginConfig.hooks?.afterToolCall ?? []) {\n      overridden = await hook({ input, req, response: overridden, toolName })\n    }\n    const { doc: _doc, ...rest } = overridden\n    return rest\n  }\n\n  /**\n   * Runs a collection/global tool call:\n   * - reads `slug` from the input\n   * - runs access control: errors if `authorizedMCP.items` has no entry for this tool + slug\n   * - runs the tool handler and finalizes its response\n   */\n  const callEntityTool = async ({\n    input,\n    item,\n    serverContext,\n  }: {\n    input: unknown\n    item: CollectionMCPItem | GlobalMCPItem\n    serverContext: ServerContext\n  }): Promise<MCPToolResponse> => {\n    const entity = item.type === 'collectionTool' ? 'collection' : 'global'\n    const toolInput = (input ?? {}) as Record<string, unknown>\n    const slug = toolInput.slug as string | undefined\n\n    if (!slug) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: \"${item.mcpName}\" requires slug. Use getConfigInfo to inspect ${entity} slugs.`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const match = authorizedMCP.items.find(\n      (candidate): candidate is CollectionMCPItem | GlobalMCPItem =>\n        candidate.type === item.type &&\n        candidate.mcpName === item.mcpName &&\n        (candidate.type === 'collectionTool'\n          ? candidate.collectionSlug === slug\n          : candidate.type === 'globalTool' && candidate.globalSlug === slug),\n    )\n\n    if (!match) {\n      return {\n        content: [\n          {\n            type: 'text',\n            text: `Error: MCP access to \"${item.mcpName}\" is not enabled for ${entity} \"${slug}\"`,\n          },\n        ],\n        isError: true,\n      }\n    }\n\n    const handlerArgs = {\n      authorizedMCP,\n      input: toolInput,\n      req,\n      serverContext,\n    }\n    const response = await (match.type === 'collectionTool'\n      ? match.tool.handler({ ...handlerArgs, slug })\n      : match.tool.handler({ ...handlerArgs, slug }))\n\n    return finalizeToolResponse({\n      input: toolInput,\n      overrideResponse: match.tool.overrideResponse,\n      response,\n      toolName: match.mcpName,\n    })\n  }\n\n  try {\n    const registeredEntityTools = new Set<string>()\n\n    for (const item of authorizedMCP.items) {\n      switch (item.type) {\n        case 'collectionTool':\n        case 'globalTool': {\n          if (registeredEntityTools.has(item.mcpName)) {\n            break\n          }\n          registeredEntityTools.add(item.mcpName)\n\n          const inputSchema = withSlugInput({ input: item.tool.input })\n\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: item.tool.annotations,\n              description: item.tool.description,\n              inputSchema: toStandardSchema(inputSchema),\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              callEntityTool({ input, item, serverContext: ctx }),\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n        case 'prompt': {\n          const prompt = item.prompt\n          server.registerPrompt(\n            item.mcpName,\n            {\n              argsSchema: prompt.argsSchema ? toStandardSchema(prompt.argsSchema) : undefined,\n              description: prompt.description,\n              title: prompt.title,\n            },\n            async (input: unknown, ctx: ServerContext) =>\n              prompt.handler({\n                input: (input ?? {}) as Record<string, unknown>,\n                req,\n                serverContext: ctx,\n              }),\n          )\n          logger.info(`✅ Prompt: ${prompt.title} Registered.`)\n          break\n        }\n        case 'resource': {\n          const resource = item.resource\n          server.registerResource(\n            item.mcpName,\n            // @ts-expect-error - Overload type ambiguity (string OR ResourceTemplate is valid)\n            resource.uri,\n            {\n              description: resource.description,\n              mimeType: resource.mimeType,\n              title: resource.title,\n            },\n            // Static URIs call (uri, ctx); ResourceTemplates call (uri, params, ctx).\n            // The rest-params shape lets us collect either signature uniformly.\n            async (...sdkArgs: unknown[]) => {\n              const ctx = sdkArgs[sdkArgs.length - 1] as ServerContext\n              const uri = sdkArgs[0] as URL\n              const params = (sdkArgs.length > 2 ? sdkArgs[1] : {}) as Record<string, string>\n              return resource.handler({ params, req, serverContext: ctx, uri })\n            },\n          )\n          logger.info(`✅ Resource: ${resource.title} Registered.`)\n          break\n        }\n        case 'tool': {\n          const tool = item.tool\n          server.registerTool(\n            item.mcpName,\n            {\n              annotations: tool.annotations,\n              description: tool.description,\n              inputSchema: tool.input ? toStandardSchema(tool.input) : undefined,\n            },\n            async (input: unknown, ctx: ServerContext) => {\n              const toolInput = (input ?? {}) as Record<string, unknown>\n              const response = await tool.handler({\n                authorizedMCP,\n                input: toolInput,\n                req,\n                serverContext: ctx,\n              })\n              return finalizeToolResponse({\n                input: toolInput,\n                overrideResponse: tool.overrideResponse,\n                response,\n                toolName: item.mcpName,\n              })\n            },\n          )\n          logger.info(`✅ Tool: ${item.mcpName} Registered.`)\n          break\n        }\n      }\n    }\n  } catch (error) {\n    throw new APIError(`Error initializing MCP handler: ${String(error)}`, 500)\n  }\n\n  return server\n}\n\nconst withSlugInput = ({ input }: { input?: ToolInputSchema }): ToolInputSchema => {\n  const description = 'The target slug.'\n  const slugSchema = z.string().check(z.describe(description))\n\n  if (!input) {\n    return strictObject({ slug: slugSchema })\n  }\n\n  if (typeof input === 'object' && input !== null && '~standard' in input) {\n    const schema = input['~standard'].jsonSchema.input({ target: 'draft-2020-12' })\n    const properties = schema.properties as Record<string, unknown> | undefined\n\n    if (properties?.slug) {\n      return input\n    }\n\n    return addSlugToJSONSchema({ description, schema })\n  }\n\n  return addSlugToJSONSchema({ description, schema: input })\n}\n\nconst addSlugToJSONSchema = ({\n  description,\n  schema,\n}: {\n  description: string\n  schema: JsonSchemaType\n}): JsonSchemaType => {\n  const objectSchema = schema as {\n    properties?: Record<string, JsonSchemaType>\n    required?: string[]\n  } & JsonSchemaType\n\n  return {\n    ...objectSchema,\n    type: 'object',\n    properties: {\n      ...objectSchema.properties,\n      slug: {\n        type: 'string',\n        description,\n      },\n    },\n    required: Array.from(new Set(['slug', ...(objectSchema.required ?? [])])),\n  }\n}\n"],"names":["McpServer","APIError","strictObject","z","getLogger","toStandardSchema","buildMcpServer","authorizedMCP","pluginConfig","req","config","locales","en","serverOptions","mcp","server","name","version","serverInfo","options","logger","payload","finalizeToolResponse","input","overrideResponse","response","toolName","overridden","doc","hook","hooks","afterToolCall","_doc","rest","callEntityTool","item","serverContext","entity","type","toolInput","slug","content","text","mcpName","isError","match","items","find","candidate","collectionSlug","globalSlug","handlerArgs","tool","handler","registeredEntityTools","Set","has","add","inputSchema","withSlugInput","registerTool","annotations","description","ctx","info","prompt","registerPrompt","argsSchema","undefined","title","resource","registerResource","uri","mimeType","sdkArgs","length","params","error","String","slugSchema","string","check","describe","schema","jsonSchema","target","properties","addSlugToJSONSchema","objectSchema","required","Array","from"],"mappings":"AAEA,SAASA,SAAS,QAA4B,+BAA8B;AAC5E,SAASC,QAAQ,EAAEC,YAAY,EAAEC,CAAC,QAAQ,UAAS;AAanD,SAASC,SAAS,QAAQ,wBAAuB;AACjD,SAASC,gBAAgB,QAAQ,+BAA8B;AAE/D;;;;;;;;;CASC,GACD,OAAO,MAAMC,iBAAiB,CAAC,EAC7BC,aAAa,EACbC,YAAY,EACZC,GAAG,EAKJ;IACCN,EAAEO,MAAM,CAACP,EAAEQ,OAAO,CAACC,EAAE;IAErB,MAAMC,gBAAgBL,aAAaM,GAAG,EAAED,iBAAiB,CAAC;IAC1D,MAAME,SAAS,IAAIf,UACjB;QAAEgB,MAAM;QAAsBC,SAAS;QAAS,GAAGJ,cAAcK,UAAU;IAAC,GAC5EL,cAAcM,OAAO;IAGvB,MAAMC,SAAShB,UAAU;QAAEiB,SAASZ,IAAIY,OAAO;IAAC;IAEhD;;;GAGC,GACD,MAAMC,uBAAuB,OAAO,EAClCC,KAAK,EACLC,gBAAgB,EAChBC,QAAQ,EACRC,QAAQ,EAMT;QACC,IAAIC,aAAaH,mBAAmBC,UAAUA,SAASG,GAAG,IAAI,CAAC,GAAGnB,QAAQgB;QAC1E,KAAK,MAAMI,QAAQrB,aAAasB,KAAK,EAAEC,iBAAiB,EAAE,CAAE;YAC1DJ,aAAa,MAAME,KAAK;gBAAEN;gBAAOd;gBAAKgB,UAAUE;gBAAYD;YAAS;QACvE;QACA,MAAM,EAAEE,KAAKI,IAAI,EAAE,GAAGC,MAAM,GAAGN;QAC/B,OAAOM;IACT;IAEA;;;;;GAKC,GACD,MAAMC,iBAAiB,OAAO,EAC5BX,KAAK,EACLY,IAAI,EACJC,aAAa,EAKd;QACC,MAAMC,SAASF,KAAKG,IAAI,KAAK,mBAAmB,eAAe;QAC/D,MAAMC,YAAahB,SAAS,CAAC;QAC7B,MAAMiB,OAAOD,UAAUC,IAAI;QAE3B,IAAI,CAACA,MAAM;YACT,OAAO;gBACLC,SAAS;oBACP;wBACEH,MAAM;wBACNI,MAAM,CAAC,QAAQ,EAAEP,KAAKQ,OAAO,CAAC,8CAA8C,EAAEN,OAAO,OAAO,CAAC;oBAC/F;iBACD;gBACDO,SAAS;YACX;QACF;QAEA,MAAMC,QAAQtC,cAAcuC,KAAK,CAACC,IAAI,CACpC,CAACC,YACCA,UAAUV,IAAI,KAAKH,KAAKG,IAAI,IAC5BU,UAAUL,OAAO,KAAKR,KAAKQ,OAAO,IACjCK,CAAAA,UAAUV,IAAI,KAAK,mBAChBU,UAAUC,cAAc,KAAKT,OAC7BQ,UAAUV,IAAI,KAAK,gBAAgBU,UAAUE,UAAU,KAAKV,IAAG;QAGvE,IAAI,CAACK,OAAO;YACV,OAAO;gBACLJ,SAAS;oBACP;wBACEH,MAAM;wBACNI,MAAM,CAAC,sBAAsB,EAAEP,KAAKQ,OAAO,CAAC,qBAAqB,EAAEN,OAAO,EAAE,EAAEG,KAAK,CAAC,CAAC;oBACvF;iBACD;gBACDI,SAAS;YACX;QACF;QAEA,MAAMO,cAAc;YAClB5C;YACAgB,OAAOgB;YACP9B;YACA2B;QACF;QACA,MAAMX,WAAW,MAAOoB,CAAAA,MAAMP,IAAI,KAAK,mBACnCO,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEX;QAAK,KAC1CK,MAAMO,IAAI,CAACC,OAAO,CAAC;YAAE,GAAGF,WAAW;YAAEX;QAAK,EAAC;QAE/C,OAAOlB,qBAAqB;YAC1BC,OAAOgB;YACPf,kBAAkBqB,MAAMO,IAAI,CAAC5B,gBAAgB;YAC7CC;YACAC,UAAUmB,MAAMF,OAAO;QACzB;IACF;IAEA,IAAI;QACF,MAAMW,wBAAwB,IAAIC;QAElC,KAAK,MAAMpB,QAAQ5B,cAAcuC,KAAK,CAAE;YACtC,OAAQX,KAAKG,IAAI;gBACf,KAAK;gBACL,KAAK;oBAAc;wBACjB,IAAIgB,sBAAsBE,GAAG,CAACrB,KAAKQ,OAAO,GAAG;4BAC3C;wBACF;wBACAW,sBAAsBG,GAAG,CAACtB,KAAKQ,OAAO;wBAEtC,MAAMe,cAAcC,cAAc;4BAAEpC,OAAOY,KAAKiB,IAAI,CAAC7B,KAAK;wBAAC;wBAE3DR,OAAO6C,YAAY,CACjBzB,KAAKQ,OAAO,EACZ;4BACEkB,aAAa1B,KAAKiB,IAAI,CAACS,WAAW;4BAClCC,aAAa3B,KAAKiB,IAAI,CAACU,WAAW;4BAClCJ,aAAarD,iBAAiBqD;wBAChC,GACA,OAAOnC,OAAgBwC,MACrB7B,eAAe;gCAAEX;gCAAOY;gCAAMC,eAAe2B;4BAAI;wBAErD3C,OAAO4C,IAAI,CAAC,CAAC,QAAQ,EAAE7B,KAAKQ,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;gBACA,KAAK;oBAAU;wBACb,MAAMsB,SAAS9B,KAAK8B,MAAM;wBAC1BlD,OAAOmD,cAAc,CACnB/B,KAAKQ,OAAO,EACZ;4BACEwB,YAAYF,OAAOE,UAAU,GAAG9D,iBAAiB4D,OAAOE,UAAU,IAAIC;4BACtEN,aAAaG,OAAOH,WAAW;4BAC/BO,OAAOJ,OAAOI,KAAK;wBACrB,GACA,OAAO9C,OAAgBwC,MACrBE,OAAOZ,OAAO,CAAC;gCACb9B,OAAQA,SAAS,CAAC;gCAClBd;gCACA2B,eAAe2B;4BACjB;wBAEJ3C,OAAO4C,IAAI,CAAC,CAAC,UAAU,EAAEC,OAAOI,KAAK,CAAC,YAAY,CAAC;wBACnD;oBACF;gBACA,KAAK;oBAAY;wBACf,MAAMC,WAAWnC,KAAKmC,QAAQ;wBAC9BvD,OAAOwD,gBAAgB,CACrBpC,KAAKQ,OAAO,EACZ,mFAAmF;wBACnF2B,SAASE,GAAG,EACZ;4BACEV,aAAaQ,SAASR,WAAW;4BACjCW,UAAUH,SAASG,QAAQ;4BAC3BJ,OAAOC,SAASD,KAAK;wBACvB,GACA,0EAA0E;wBAC1E,oEAAoE;wBACpE,OAAO,GAAGK;4BACR,MAAMX,MAAMW,OAAO,CAACA,QAAQC,MAAM,GAAG,EAAE;4BACvC,MAAMH,MAAME,OAAO,CAAC,EAAE;4BACtB,MAAME,SAAUF,QAAQC,MAAM,GAAG,IAAID,OAAO,CAAC,EAAE,GAAG,CAAC;4BACnD,OAAOJ,SAASjB,OAAO,CAAC;gCAAEuB;gCAAQnE;gCAAK2B,eAAe2B;gCAAKS;4BAAI;wBACjE;wBAEFpD,OAAO4C,IAAI,CAAC,CAAC,YAAY,EAAEM,SAASD,KAAK,CAAC,YAAY,CAAC;wBACvD;oBACF;gBACA,KAAK;oBAAQ;wBACX,MAAMjB,OAAOjB,KAAKiB,IAAI;wBACtBrC,OAAO6C,YAAY,CACjBzB,KAAKQ,OAAO,EACZ;4BACEkB,aAAaT,KAAKS,WAAW;4BAC7BC,aAAaV,KAAKU,WAAW;4BAC7BJ,aAAaN,KAAK7B,KAAK,GAAGlB,iBAAiB+C,KAAK7B,KAAK,IAAI6C;wBAC3D,GACA,OAAO7C,OAAgBwC;4BACrB,MAAMxB,YAAahB,SAAS,CAAC;4BAC7B,MAAME,WAAW,MAAM2B,KAAKC,OAAO,CAAC;gCAClC9C;gCACAgB,OAAOgB;gCACP9B;gCACA2B,eAAe2B;4BACjB;4BACA,OAAOzC,qBAAqB;gCAC1BC,OAAOgB;gCACPf,kBAAkB4B,KAAK5B,gBAAgB;gCACvCC;gCACAC,UAAUS,KAAKQ,OAAO;4BACxB;wBACF;wBAEFvB,OAAO4C,IAAI,CAAC,CAAC,QAAQ,EAAE7B,KAAKQ,OAAO,CAAC,YAAY,CAAC;wBACjD;oBACF;YACF;QACF;IACF,EAAE,OAAOkC,OAAO;QACd,MAAM,IAAI5E,SAAS,CAAC,gCAAgC,EAAE6E,OAAOD,QAAQ,EAAE;IACzE;IAEA,OAAO9D;AACT,EAAC;AAED,MAAM4C,gBAAgB,CAAC,EAAEpC,KAAK,EAA+B;IAC3D,MAAMuC,cAAc;IACpB,MAAMiB,aAAa5E,EAAE6E,MAAM,GAAGC,KAAK,CAAC9E,EAAE+E,QAAQ,CAACpB;IAE/C,IAAI,CAACvC,OAAO;QACV,OAAOrB,aAAa;YAAEsC,MAAMuC;QAAW;IACzC;IAEA,IAAI,OAAOxD,UAAU,YAAYA,UAAU,QAAQ,eAAeA,OAAO;QACvE,MAAM4D,SAAS5D,KAAK,CAAC,YAAY,CAAC6D,UAAU,CAAC7D,KAAK,CAAC;YAAE8D,QAAQ;QAAgB;QAC7E,MAAMC,aAAaH,OAAOG,UAAU;QAEpC,IAAIA,YAAY9C,MAAM;YACpB,OAAOjB;QACT;QAEA,OAAOgE,oBAAoB;YAAEzB;YAAaqB;QAAO;IACnD;IAEA,OAAOI,oBAAoB;QAAEzB;QAAaqB,QAAQ5D;IAAM;AAC1D;AAEA,MAAMgE,sBAAsB,CAAC,EAC3BzB,WAAW,EACXqB,MAAM,EAIP;IACC,MAAMK,eAAeL;IAKrB,OAAO;QACL,GAAGK,YAAY;QACflD,MAAM;QACNgD,YAAY;YACV,GAAGE,aAAaF,UAAU;YAC1B9C,MAAM;gBACJF,MAAM;gBACNwB;YACF;QACF;QACA2B,UAAUC,MAAMC,IAAI,CAAC,IAAIpC,IAAI;YAAC;eAAYiC,aAAaC,QAAQ,IAAI,EAAE;SAAE;IACzE;AACF"}