@payloadcms/plugin-mcp 4.0.0-internal.fa345ef → 4.0.0-internal.fec2230

package/dist/mcp/builtin/collections/authTools.js

@@ -1,4 +1,5 @@
-import { z } from 'zod';
+import { createLocalReq, strictObject, z } from 'payload';
+import { defaultAccess } from '../../../defaultAccess.js';
 import { defineCollectionTool } from '../../../defineTool.js';
 import { getLogger } from '../../../utils/getLogger.js';
 /**
@@ -10,13 +11,13 @@ import { getLogger } from '../../../utils/getLogger.js';
  * `auth` (check current token) doesn't actually depend on the collection at
  * runtime — `payload.auth({ headers })` is global — but it's grouped under the
  * users collection so all auth-shaped tools live in one place.
- */ const emailSchema = z.string().email().describe('The user email address');
-const wrapError = (name)=>({ collectionSlug, message })=>{
+ */ const emailSchema = z.email().check(z.describe('The user email address.'));
+const wrapError = (name)=>({ slug, message })=>{
         return {
             content: [
                 {
                     type: 'text',
-                    text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`
+                    text: `❌ **Error in ${name}** on ${slug}: ${message}`
                 }
             ]
         };
@@ -30,10 +31,10 @@ export const authCollectionTool = defineCollectionTool({
         title: 'Check Auth Status'
     },
     description: 'Checks authentication status for the current user.',
-    input: z.object({
-        headers: z.record(z.string(), z.string()).describe('Optional custom headers to send with the authentication request').optional()
+    input: strictObject({
+        headers: z.optional(z.record(z.string(), z.string())).check(z.describe('Custom headers to send with the authentication request.'))
     })
-}).handler(async ({ collectionSlug, input, req })=>{
+}).handler(async ({ slug, authorizedMCP, input, req })=>{
     const logger = getLogger({
         payload: req.payload
     });
@@ -42,9 +43,32 @@ export const authCollectionTool = defineCollectionTool({
         if (input.headers) {
             authHeaders = new Headers(input.headers);
         }
+        const authReq = await createLocalReq({
+            req: {
+                headers: authHeaders
+            }
+        }, req.payload);
         const result = await req.payload.auth({
-            headers: authHeaders
+            headers: authHeaders,
+            req: authReq
         });
+        if (result.user) {
+            const authenticatedUser = result.user;
+            // Auth strategies read users with trusted Local API access. Re-read the user with the MCP
+            // caller's access level before returning it to the client.
+            const user = await req.payload.findByID({
+                id: authenticatedUser.id,
+                collection: authenticatedUser.collection,
+                overrideAccess: authorizedMCP.overrideAccess,
+                req: authReq
+            });
+            result.user = {
+                ...user,
+                _sid: authenticatedUser._sid,
+                _strategy: authenticatedUser._strategy,
+                collection: authenticatedUser.collection
+            };
+        }
         return {
             content: [
                 {
@@ -56,9 +80,9 @@ export const authCollectionTool = defineCollectionTool({
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error in auth tool on ${slug}: ${errorMessage}`);
         return wrapError('auth')({
-            collectionSlug,
+            slug,
             message: errorMessage
         });
     }
@@ -72,38 +96,36 @@ export const forgotPasswordCollectionTool = defineCollectionTool({
         title: 'Forgot Password'
     },
     description: 'Sends a password reset email to a user.',
-    input: z.object({
-        disableEmail: z.boolean().describe('Whether to disable sending the email (for testing)').optional().default(false),
+    input: strictObject({
         email: emailSchema
     })
-}).handler(async ({ collectionSlug, input, req })=>{
+}).handler(async ({ slug, input, req })=>{
     const logger = getLogger({
         payload: req.payload
     });
     try {
-        const result = await req.payload.forgotPassword({
-            collection: collectionSlug,
+        await req.payload.forgotPassword({
+            collection: slug,
             data: {
                 email: input.email
             },
-            disableEmail: input.disableEmail
+            disableEmail: false,
+            overrideAccess: false,
+            req
         });
         return {
             content: [
                 {
                     type: 'text',
-                    text: `# Forgot Password Email Sent\n\n**Collection:** ${collectionSlug}\n**Email:** ${input.email}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                    text: 'If an account matches that email, password reset instructions have been sent.'
                 }
-            ],
-            doc: {
-                result
-            }
+            ]
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error in forgotPassword tool on ${slug}: ${errorMessage}`);
         return wrapError('forgotPassword')({
-            collectionSlug,
+            slug,
             message: errorMessage
         });
     }
@@ -117,40 +139,39 @@ export const loginCollectionTool = defineCollectionTool({
         title: 'User Login'
     },
     description: 'Authenticates a user with email and password.',
-    input: z.object({
-        depth: z.number().int().min(0).max(10).describe('Depth of population for relationships').optional().default(0),
+    input: strictObject({
+        depth: z._default(z.int().check(z.minimum(0), z.maximum(10)), 0).check(z.describe('Depth of population for relationships.')),
         email: emailSchema,
-        password: z.string().describe('The user password'),
-        showHiddenFields: z.boolean().describe('Whether to show hidden fields in the response').optional().default(false)
+        password: z.string().check(z.describe('The user password.'))
     })
-}).handler(async ({ collectionSlug, input, req })=>{
+}).handler(async ({ slug, authorizedMCP, input, req })=>{
     const logger = getLogger({
         payload: req.payload
     });
     try {
         const result = await req.payload.login({
-            collection: collectionSlug,
+            collection: slug,
             data: {
                 email: input.email,
                 password: input.password
             },
             depth: input.depth,
-            showHiddenFields: input.showHiddenFields
+            overrideAccess: authorizedMCP.overrideAccess
         });
         return {
             content: [
                 {
                     type: 'text',
-                    text: `# Login Successful\n\n**User:** ${input.email}\n**Collection:** ${collectionSlug}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                    text: `# Login Successful\n\n**User:** ${input.email}\n**Collection:** ${slug}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
                 }
             ],
             doc: result
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error in login tool on ${slug}: ${errorMessage}`);
         return wrapError('login')({
-            collectionSlug,
+            slug,
             message: errorMessage
         });
     }
@@ -164,42 +185,43 @@ export const resetPasswordCollectionTool = defineCollectionTool({
         title: 'Reset Password'
     },
     description: 'Resets a user password with a reset token.',
-    input: z.object({
-        password: z.string().describe('The new password for the user'),
-        token: z.string().describe('The password reset token sent to the user email')
+    input: strictObject({
+        password: z.string().check(z.describe('The new password for the user.')),
+        token: z.string().check(z.describe('The password reset token sent to the user email.'))
     })
-}).handler(async ({ collectionSlug, input, req })=>{
+}).handler(async ({ slug, authorizedMCP, input, req })=>{
     const logger = getLogger({
         payload: req.payload
     });
     try {
         const result = await req.payload.resetPassword({
-            collection: collectionSlug,
+            collection: slug,
             data: {
                 password: input.password,
                 token: input.token
             },
-            overrideAccess: true
+            overrideAccess: authorizedMCP.overrideAccess
         });
         return {
             content: [
                 {
                     type: 'text',
-                    text: `# Password Reset Successful\n\n**Collection:** ${collectionSlug}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                    text: `# Password Reset Successful\n\n**Collection:** ${slug}\n\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
                 }
             ],
             doc: result
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error in resetPassword tool on ${slug}: ${errorMessage}`);
         return wrapError('resetPassword')({
-            collectionSlug,
+            slug,
             message: errorMessage
         });
     }
 });
 export const unlockCollectionTool = defineCollectionTool({
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.slug]?.unlock),
     annotations: {
         destructiveHint: false,
         idempotentHint: true,
@@ -208,26 +230,27 @@ export const unlockCollectionTool = defineCollectionTool({
         title: 'Unlock Account'
     },
     description: 'Unlocks a user account that has been locked due to failed login attempts.',
-    input: z.object({
+    input: strictObject({
         email: emailSchema
     })
-}).handler(async ({ collectionSlug, input, req })=>{
+}).handler(async ({ slug, authorizedMCP, input, req })=>{
     const logger = getLogger({
         payload: req.payload
     });
     try {
         const result = await req.payload.unlock({
-            collection: collectionSlug,
+            collection: slug,
             data: {
                 email: input.email
             },
-            overrideAccess: true
+            overrideAccess: authorizedMCP.overrideAccess,
+            req
         });
         return {
             content: [
                 {
                     type: 'text',
-                    text: `# Account Unlocked\n\n**Collection:** ${collectionSlug}\n**Email:** ${input.email}\n**Result:** ${result ? 'Success' : 'Failed'}`
+                    text: `# Account Unlocked\n\n**Collection:** ${slug}\n**Email:** ${input.email}\n**Result:** ${result ? 'Success' : 'Failed'}`
                 }
             ],
             doc: {
@@ -236,9 +259,9 @@ export const unlockCollectionTool = defineCollectionTool({
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error in unlock tool on ${slug}: ${errorMessage}`);
         return wrapError('unlock')({
-            collectionSlug,
+            slug,
             message: errorMessage
         });
     }
@@ -252,23 +275,23 @@ export const verifyCollectionTool = defineCollectionTool({
         title: 'Email Verification'
     },
     description: 'Verifies a user email with a verification token.',
-    input: z.object({
-        token: z.string().describe('The verification token sent to the user email')
+    input: strictObject({
+        token: z.string().check(z.describe('The verification token sent to the user email.'))
     })
-}).handler(async ({ collectionSlug, input, req })=>{
+}).handler(async ({ slug, input, req })=>{
     const logger = getLogger({
         payload: req.payload
     });
     try {
         const result = await req.payload.verifyEmail({
-            collection: collectionSlug,
+            collection: slug,
             token: input.token
         });
         return {
             content: [
                 {
                     type: 'text',
-                    text: `# Email Verification Successful\n\n**Collection:** ${collectionSlug}\n**Result:** ${result ? 'Success' : 'Failed'}`
+                    text: `# Email Verification Successful\n\n**Collection:** ${slug}\n**Result:** ${result ? 'Success' : 'Failed'}`
                 }
             ],
             doc: {
@@ -277,9 +300,9 @@ export const verifyCollectionTool = defineCollectionTool({
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error in verify tool on ${slug}: ${errorMessage}`);
         return wrapError('verify')({
-            collectionSlug,
+            slug,
             message: errorMessage
         });
     }

package/dist/mcp/builtin/collections/authTools.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.string().email().describe('The user email address')\n\nconst wrapError =\n  (name: string) =>\n  ({ collectionSlug, message }: { collectionSlug: string; message: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${collectionSlug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Check Auth Status',\n  },\n  description: 'Checks authentication status for the current user.',\n  input: z.object({\n    headers: z\n      .record(z.string(), z.string())\n      .describe('Optional custom headers to send with the authentication request')\n      .optional(),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      authHeaders = new Headers(input.headers)\n    }\n    const result = await req.payload.auth({ headers: authHeaders })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('auth')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n    readOnlyHint: false,\n    title: 'Forgot Password',\n  },\n  description: 'Sends a password reset email to a user.',\n  input: z.object({\n    disableEmail: z\n      .boolean()\n      .describe('Whether to disable sending the email (for testing)')\n      .optional()\n      .default(false),\n    email: emailSchema,\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.forgotPassword({\n      collection: collectionSlug,\n      data: { email: input.email },\n      disableEmail: input.disableEmail,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Forgot Password Email Sent\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'User Login',\n  },\n  description: 'Authenticates a user with email and password.',\n  input: z.object({\n    depth: z\n      .number()\n      .int()\n      .min(0)\n      .max(10)\n      .describe('Depth of population for relationships')\n      .optional()\n      .default(0),\n    email: emailSchema,\n    password: z.string().describe('The user password'),\n    showHiddenFields: z\n      .boolean()\n      .describe('Whether to show hidden fields in the response')\n      .optional()\n      .default(false),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: collectionSlug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      showHiddenFields: input.showHiddenFields,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('login')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Reset Password',\n  },\n  description: 'Resets a user password with a reset token.',\n  input: z.object({\n    password: z.string().describe('The new password for the user'),\n    token: z.string().describe('The password reset token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: collectionSlug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${collectionSlug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Unlock Account',\n  },\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: z.object({ email: emailSchema }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: collectionSlug,\n      data: { email: input.email },\n      overrideAccess: true,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${collectionSlug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('unlock')({ collectionSlug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Email Verification',\n  },\n  description: 'Verifies a user email with a verification token.',\n  input: z.object({\n    token: z.string().describe('The verification token sent to the user email'),\n  }),\n}).handler(async ({ collectionSlug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: collectionSlug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${collectionSlug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${collectionSlug}: ${errorMessage}`)\n    return wrapError('verify')({ collectionSlug, message: errorMessage })\n  }\n})\n"],"names":["z","defineCollectionTool","getLogger","emailSchema","string","email","describe","wrapError","name","collectionSlug","message","content","type","text","authCollectionTool","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","headers","record","optional","handler","req","logger","payload","authHeaders","Headers","result","auth","JSON","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","disableEmail","boolean","default","forgotPassword","collection","data","loginCollectionTool","depth","number","int","min","max","password","showHiddenFields","login","resetPasswordCollectionTool","token","resetPassword","overrideAccess","unlockCollectionTool","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAIvB,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcH,EAAEI,MAAM,GAAGC,KAAK,GAAGC,QAAQ,CAAC;AAEhD,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,cAAc,EAAEC,OAAO,EAA+C;QACvE,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,eAAe,EAAE,EAAEC,SAAS;gBACjE;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,SAASxB,EACNyB,MAAM,CAACzB,EAAEI,MAAM,IAAIJ,EAAEI,MAAM,IAC3BE,QAAQ,CAAC,mEACToB,QAAQ;IACb;AACF,GAAGC,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIV,MAAME,OAAO,EAAE;YACjBO,cAAc,IAAIC,QAAQV,MAAME,OAAO;QACzC;QACA,MAAMS,SAAS,MAAML,IAAIE,OAAO,CAACI,IAAI,CAAC;YAAEV,SAASO;QAAY;QAC7D,OAAO;YACLpB,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEsB,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,sBAAsB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACvE,OAAOhC,UAAU,QAAQ;YAAEE;YAAgBC,SAAS6B;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BxC,qBAAqB;IAC/Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmB,cAAc1C,EACX2C,OAAO,GACPrC,QAAQ,CAAC,sDACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;IACT;AACF,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACe,cAAc,CAAC;YAC9CC,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BqC,cAAcpB,MAAMoB,YAAY;QAClC;QACA,OAAO;YACL/B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gDAAgD,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,gBAAgB,EAAE8B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBACvJ;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,gCAAgC,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACjF,OAAOhC,UAAU,kBAAkB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC7E;AACF,GAAE;AAEF,OAAO,MAAMS,sBAAsB/C,qBAAqB;IACtDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd0B,OAAOjD,EACJkD,MAAM,GACNC,GAAG,GACHC,GAAG,CAAC,GACJC,GAAG,CAAC,IACJ/C,QAAQ,CAAC,yCACToB,QAAQ,GACRkB,OAAO,CAAC;QACXvC,OAAOF;QACPmD,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BiD,kBAAkBvD,EACf2C,OAAO,GACPrC,QAAQ,CAAC,iDACToB,QAAQ,GACRkB,OAAO,CAAC;IACb;AACF,GAAGjB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC0B,KAAK,CAAC;YACrCV,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;gBAAEiD,UAAUhC,MAAMgC,QAAQ;YAAC;YACrDL,OAAO3B,MAAM2B,KAAK;YAClBM,kBAAkBjC,MAAMiC,gBAAgB;QAC1C;QACA,OAAO;YACL5C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAES,MAAMjB,KAAK,CAAC,kBAAkB,EAAEI,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC5I;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,uBAAuB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACxE,OAAOhC,UAAU,SAAS;YAAEE;YAAgBC,SAAS6B;QAAa;IACpE;AACF,GAAE;AAEF,OAAO,MAAMkB,8BAA8BxD,qBAAqB;IAC9Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACd+B,UAAUtD,EAAEI,MAAM,GAAGE,QAAQ,CAAC;QAC9BoD,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAAC6B,aAAa,CAAC;YAC7Cb,YAAYrC;YACZsC,MAAM;gBAAEO,UAAUhC,MAAMgC,QAAQ;gBAAEI,OAAOpC,MAAMoC,KAAK;YAAC;YACrDE,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,eAAe,gBAAgB,EAAE0B,KAAKC,SAAS,CAACH,QAAQ,QAAQ,CAAC;gBAC3H;aACD;YACDI,KAAKJ;QACP;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,+BAA+B,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QAChF,OAAOhC,UAAU,iBAAiB;YAAEE;YAAgBC,SAAS6B;QAAa;IAC5E;AACF,GAAE;AAEF,OAAO,MAAMsB,uBAAuB5D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QAAElB,OAAOF;IAAY;AACvC,GAAGwB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACgC,MAAM,CAAC;YACtChB,YAAYrC;YACZsC,MAAM;gBAAE1C,OAAOiB,MAAMjB,KAAK;YAAC;YAC3BuD,gBAAgB;QAClB;QACA,OAAO;YACLjD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,eAAe,aAAa,EAAEa,MAAMjB,KAAK,CAAC,cAAc,EAAE4B,SAAS,YAAY,UAAU;gBAC1I;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuB9D,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOtB,EAAEuB,MAAM,CAAC;QACdmC,OAAO1D,EAAEI,MAAM,GAAGE,QAAQ,CAAC;IAC7B;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,cAAc,EAAEa,KAAK,EAAEM,GAAG,EAAE;IAC9C,MAAMC,SAAS3B,UAAU;QAAE4B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMG,SAAS,MAAML,IAAIE,OAAO,CAACkC,WAAW,CAAC;YAC3ClB,YAAYrC;YACZiD,OAAOpC,MAAMoC,KAAK;QACpB;QACA,OAAO;YACL/C,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,eAAe,cAAc,EAAEwB,SAAS,YAAY,UAAU;gBAC5H;aACD;YACDI,KAAK;gBAAEJ;YAAO;QAChB;IACF,EAAE,OAAOK,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAM5B,OAAO,GAAG;QAC9DmB,OAAOS,KAAK,CAAC,CAAC,wBAAwB,EAAE7B,eAAe,EAAE,EAAE8B,cAAc;QACzE,OAAOhC,UAAU,UAAU;YAAEE;YAAgBC,SAAS6B;QAAa;IACrE;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/authTools.ts"],"sourcesContent":["import { createLocalReq, strictObject, z } from 'payload'\n\nimport type { MCPToolResponse } from '../../../types.js'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\n/**\n * Auth tools surfaced under `collections.<auth-collection>.tools`. Opt-in: they\n * default off (an LLM with `login` access can probe passwords; not something\n * to expose by default). Enable in plugin config via `tools: { login: true }`\n * (or `{ description: '...' }`).\n *\n * `auth` (check current token) doesn't actually depend on the collection at\n * runtime — `payload.auth({ headers })` is global — but it's grouped under the\n * users collection so all auth-shaped tools live in one place.\n */\n\nconst emailSchema = z.email().check(z.describe('The user email address.'))\n\nconst wrapError =\n  (name: string) =>\n  ({ slug, message }: { message: string; slug: string }): MCPToolResponse => {\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error in ${name}** on ${slug}: ${message}`,\n        },\n      ],\n    }\n  }\n\nexport const authCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Check Auth Status',\n  },\n  description: 'Checks authentication status for the current user.',\n  input: strictObject({\n    headers: z\n      .optional(z.record(z.string(), z.string()))\n      .check(z.describe('Custom headers to send with the authentication request.')),\n  }),\n}).handler(async ({ slug, authorizedMCP, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    let authHeaders = new Headers()\n    if (input.headers) {\n      authHeaders = new Headers(input.headers)\n    }\n    const authReq = await createLocalReq({ req: { headers: authHeaders } }, req.payload)\n    const result = await req.payload.auth({ headers: authHeaders, req: authReq })\n\n    if (result.user) {\n      const authenticatedUser = result.user\n      // Auth strategies read users with trusted Local API access. Re-read the user with the MCP\n      // caller's access level before returning it to the client.\n      const user = await req.payload.findByID({\n        id: authenticatedUser.id,\n        collection: authenticatedUser.collection,\n        overrideAccess: authorizedMCP.overrideAccess,\n        req: authReq,\n      })\n      result.user = {\n        ...user,\n        _sid: authenticatedUser._sid,\n        _strategy: authenticatedUser._strategy,\n        collection: authenticatedUser.collection,\n      }\n    }\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Authentication Status\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in auth tool on ${slug}: ${errorMessage}`)\n    return wrapError('auth')({ slug, message: errorMessage })\n  }\n})\n\nexport const forgotPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n    readOnlyHint: false,\n    title: 'Forgot Password',\n  },\n  description: 'Sends a password reset email to a user.',\n  input: strictObject({\n    email: emailSchema,\n  }),\n}).handler(async ({ slug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    await req.payload.forgotPassword({\n      collection: slug,\n      data: { email: input.email },\n      disableEmail: false,\n      overrideAccess: false,\n      req,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: 'If an account matches that email, password reset instructions have been sent.',\n        },\n      ],\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in forgotPassword tool on ${slug}: ${errorMessage}`)\n    return wrapError('forgotPassword')({ slug, message: errorMessage })\n  }\n})\n\nexport const loginCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'User Login',\n  },\n  description: 'Authenticates a user with email and password.',\n  input: strictObject({\n    depth: z\n      ._default(z.int().check(z.minimum(0), z.maximum(10)), 0)\n      .check(z.describe('Depth of population for relationships.')),\n    email: emailSchema,\n    password: z.string().check(z.describe('The user password.')),\n  }),\n}).handler(async ({ slug, authorizedMCP, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.login({\n      collection: slug,\n      data: { email: input.email, password: input.password },\n      depth: input.depth,\n      overrideAccess: authorizedMCP.overrideAccess,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Login Successful\\n\\n**User:** ${input.email}\\n**Collection:** ${slug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in login tool on ${slug}: ${errorMessage}`)\n    return wrapError('login')({ slug, message: errorMessage })\n  }\n})\n\nexport const resetPasswordCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Reset Password',\n  },\n  description: 'Resets a user password with a reset token.',\n  input: strictObject({\n    password: z.string().check(z.describe('The new password for the user.')),\n    token: z.string().check(z.describe('The password reset token sent to the user email.')),\n  }),\n}).handler(async ({ slug, authorizedMCP, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.resetPassword({\n      collection: slug,\n      data: { password: input.password, token: input.token },\n      overrideAccess: authorizedMCP.overrideAccess,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Password Reset Successful\\n\\n**Collection:** ${slug}\\n\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result as unknown as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in resetPassword tool on ${slug}: ${errorMessage}`)\n    return wrapError('resetPassword')({ slug, message: errorMessage })\n  }\n})\n\nexport const unlockCollectionTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.slug]?.unlock),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Unlock Account',\n  },\n  description: 'Unlocks a user account that has been locked due to failed login attempts.',\n  input: strictObject({ email: emailSchema }),\n}).handler(async ({ slug, authorizedMCP, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.unlock({\n      collection: slug,\n      data: { email: input.email },\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Account Unlocked\\n\\n**Collection:** ${slug}\\n**Email:** ${input.email}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in unlock tool on ${slug}: ${errorMessage}`)\n    return wrapError('unlock')({ slug, message: errorMessage })\n  }\n})\n\nexport const verifyCollectionTool = defineCollectionTool({\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n    readOnlyHint: false,\n    title: 'Email Verification',\n  },\n  description: 'Verifies a user email with a verification token.',\n  input: strictObject({\n    token: z.string().check(z.describe('The verification token sent to the user email.')),\n  }),\n}).handler(async ({ slug, input, req }) => {\n  const logger = getLogger({ payload: req.payload })\n  try {\n    const result = await req.payload.verifyEmail({\n      collection: slug,\n      token: input.token,\n    })\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `# Email Verification Successful\\n\\n**Collection:** ${slug}\\n**Result:** ${result ? 'Success' : 'Failed'}`,\n        },\n      ],\n      doc: { result } as Record<string, unknown>,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error in verify tool on ${slug}: ${errorMessage}`)\n    return wrapError('verify')({ slug, message: errorMessage })\n  }\n})\n"],"names":["createLocalReq","strictObject","z","defaultAccess","defineCollectionTool","getLogger","emailSchema","email","check","describe","wrapError","name","slug","message","content","type","text","authCollectionTool","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","headers","optional","record","string","handler","authorizedMCP","req","logger","payload","authHeaders","Headers","authReq","result","auth","user","authenticatedUser","findByID","id","collection","overrideAccess","_sid","_strategy","JSON","stringify","doc","error","errorMessage","Error","forgotPasswordCollectionTool","forgotPassword","data","disableEmail","loginCollectionTool","depth","_default","int","minimum","maximum","password","login","resetPasswordCollectionTool","token","resetPassword","unlockCollectionTool","access","args","Boolean","permissions","collections","unlock","verifyCollectionTool","verifyEmail"],"mappings":"AAAA,SAASA,cAAc,EAAEC,YAAY,EAAEC,CAAC,QAAQ,UAAS;AAIzD,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD;;;;;;;;;CASC,GAED,MAAMC,cAAcJ,EAAEK,KAAK,GAAGC,KAAK,CAACN,EAAEO,QAAQ,CAAC;AAE/C,MAAMC,YACJ,CAACC,OACD,CAAC,EAAEC,IAAI,EAAEC,OAAO,EAAqC;QACnD,OAAO;YACLC,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,aAAa,EAAEL,KAAK,MAAM,EAAEC,KAAK,EAAE,EAAEC,SAAS;gBACvD;aACD;QACH;IACF;AAEF,OAAO,MAAMI,qBAAqBb,qBAAqB;IACrDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOxB,aAAa;QAClByB,SAASxB,EACNyB,QAAQ,CAACzB,EAAE0B,MAAM,CAAC1B,EAAE2B,MAAM,IAAI3B,EAAE2B,MAAM,KACtCrB,KAAK,CAACN,EAAEO,QAAQ,CAAC;IACtB;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,IAAI,EAAEmB,aAAa,EAAEN,KAAK,EAAEO,GAAG,EAAE;IACnD,MAAMC,SAAS5B,UAAU;QAAE6B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,IAAIC,cAAc,IAAIC;QACtB,IAAIX,MAAMC,OAAO,EAAE;YACjBS,cAAc,IAAIC,QAAQX,MAAMC,OAAO;QACzC;QACA,MAAMW,UAAU,MAAMrC,eAAe;YAAEgC,KAAK;gBAAEN,SAASS;YAAY;QAAE,GAAGH,IAAIE,OAAO;QACnF,MAAMI,SAAS,MAAMN,IAAIE,OAAO,CAACK,IAAI,CAAC;YAAEb,SAASS;YAAaH,KAAKK;QAAQ;QAE3E,IAAIC,OAAOE,IAAI,EAAE;YACf,MAAMC,oBAAoBH,OAAOE,IAAI;YACrC,0FAA0F;YAC1F,2DAA2D;YAC3D,MAAMA,OAAO,MAAMR,IAAIE,OAAO,CAACQ,QAAQ,CAAC;gBACtCC,IAAIF,kBAAkBE,EAAE;gBACxBC,YAAYH,kBAAkBG,UAAU;gBACxCC,gBAAgBd,cAAcc,cAAc;gBAC5Cb,KAAKK;YACP;YACAC,OAAOE,IAAI,GAAG;gBACZ,GAAGA,IAAI;gBACPM,MAAML,kBAAkBK,IAAI;gBAC5BC,WAAWN,kBAAkBM,SAAS;gBACtCH,YAAYH,kBAAkBG,UAAU;YAC1C;QACF;QACA,OAAO;YACL9B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,uCAAuC,EAAEgC,KAAKC,SAAS,CAACX,QAAQ,QAAQ,CAAC;gBAClF;aACD;YACDY,KAAKZ;QACP;IACF,EAAE,OAAOa,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMtC,OAAO,GAAG;QAC9DoB,OAAOkB,KAAK,CAAC,CAAC,sBAAsB,EAAEvC,KAAK,EAAE,EAAEwC,cAAc;QAC7D,OAAO1C,UAAU,QAAQ;YAAEE;YAAMC,SAASuC;QAAa;IACzD;AACF,GAAE;AAEF,OAAO,MAAME,+BAA+BlD,qBAAqB;IAC/Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOxB,aAAa;QAClBM,OAAOD;IACT;AACF,GAAGwB,OAAO,CAAC,OAAO,EAAElB,IAAI,EAAEa,KAAK,EAAEO,GAAG,EAAE;IACpC,MAAMC,SAAS5B,UAAU;QAAE6B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMF,IAAIE,OAAO,CAACqB,cAAc,CAAC;YAC/BX,YAAYhC;YACZ4C,MAAM;gBAAEjD,OAAOkB,MAAMlB,KAAK;YAAC;YAC3BkD,cAAc;YACdZ,gBAAgB;YAChBb;QACF;QACA,OAAO;YACLlB,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM;gBACR;aACD;QACH;IACF,EAAE,OAAOmC,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMtC,OAAO,GAAG;QAC9DoB,OAAOkB,KAAK,CAAC,CAAC,gCAAgC,EAAEvC,KAAK,EAAE,EAAEwC,cAAc;QACvE,OAAO1C,UAAU,kBAAkB;YAAEE;YAAMC,SAASuC;QAAa;IACnE;AACF,GAAE;AAEF,OAAO,MAAMM,sBAAsBtD,qBAAqB;IACtDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOxB,aAAa;QAClB0D,OAAOzD,EACJ0D,QAAQ,CAAC1D,EAAE2D,GAAG,GAAGrD,KAAK,CAACN,EAAE4D,OAAO,CAAC,IAAI5D,EAAE6D,OAAO,CAAC,MAAM,GACrDvD,KAAK,CAACN,EAAEO,QAAQ,CAAC;QACpBF,OAAOD;QACP0D,UAAU9D,EAAE2B,MAAM,GAAGrB,KAAK,CAACN,EAAEO,QAAQ,CAAC;IACxC;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,IAAI,EAAEmB,aAAa,EAAEN,KAAK,EAAEO,GAAG,EAAE;IACnD,MAAMC,SAAS5B,UAAU;QAAE6B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMI,SAAS,MAAMN,IAAIE,OAAO,CAAC+B,KAAK,CAAC;YACrCrB,YAAYhC;YACZ4C,MAAM;gBAAEjD,OAAOkB,MAAMlB,KAAK;gBAAEyD,UAAUvC,MAAMuC,QAAQ;YAAC;YACrDL,OAAOlC,MAAMkC,KAAK;YAClBd,gBAAgBd,cAAcc,cAAc;QAC9C;QACA,OAAO;YACL/B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,gCAAgC,EAAES,MAAMlB,KAAK,CAAC,kBAAkB,EAAEK,KAAK,gBAAgB,EAAEoC,KAAKC,SAAS,CAACX,QAAQ,QAAQ,CAAC;gBAClI;aACD;YACDY,KAAKZ;QACP;IACF,EAAE,OAAOa,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMtC,OAAO,GAAG;QAC9DoB,OAAOkB,KAAK,CAAC,CAAC,uBAAuB,EAAEvC,KAAK,EAAE,EAAEwC,cAAc;QAC9D,OAAO1C,UAAU,SAAS;YAAEE;YAAMC,SAASuC;QAAa;IAC1D;AACF,GAAE;AAEF,OAAO,MAAMc,8BAA8B9D,qBAAqB;IAC9Dc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOxB,aAAa;QAClB+D,UAAU9D,EAAE2B,MAAM,GAAGrB,KAAK,CAACN,EAAEO,QAAQ,CAAC;QACtC0D,OAAOjE,EAAE2B,MAAM,GAAGrB,KAAK,CAACN,EAAEO,QAAQ,CAAC;IACrC;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,IAAI,EAAEmB,aAAa,EAAEN,KAAK,EAAEO,GAAG,EAAE;IACnD,MAAMC,SAAS5B,UAAU;QAAE6B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMI,SAAS,MAAMN,IAAIE,OAAO,CAACkC,aAAa,CAAC;YAC7CxB,YAAYhC;YACZ4C,MAAM;gBAAEQ,UAAUvC,MAAMuC,QAAQ;gBAAEG,OAAO1C,MAAM0C,KAAK;YAAC;YACrDtB,gBAAgBd,cAAcc,cAAc;QAC9C;QACA,OAAO;YACL/B,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,+CAA+C,EAAEJ,KAAK,gBAAgB,EAAEoC,KAAKC,SAAS,CAACX,QAAQ,QAAQ,CAAC;gBACjH;aACD;YACDY,KAAKZ;QACP;IACF,EAAE,OAAOa,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMtC,OAAO,GAAG;QAC9DoB,OAAOkB,KAAK,CAAC,CAAC,+BAA+B,EAAEvC,KAAK,EAAE,EAAEwC,cAAc;QACtE,OAAO1C,UAAU,iBAAiB;YAAEE;YAAMC,SAASuC;QAAa;IAClE;AACF,GAAE;AAEF,OAAO,MAAMiB,uBAAuBjE,qBAAqB;IACvDkE,QAAQ,CAACC,OACPpE,cAAcoE,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAK3D,IAAI,CAAC,EAAE+D;IAC7EzD,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOxB,aAAa;QAAEM,OAAOD;IAAY;AAC3C,GAAGwB,OAAO,CAAC,OAAO,EAAElB,IAAI,EAAEmB,aAAa,EAAEN,KAAK,EAAEO,GAAG,EAAE;IACnD,MAAMC,SAAS5B,UAAU;QAAE6B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMI,SAAS,MAAMN,IAAIE,OAAO,CAACyC,MAAM,CAAC;YACtC/B,YAAYhC;YACZ4C,MAAM;gBAAEjD,OAAOkB,MAAMlB,KAAK;YAAC;YAC3BsC,gBAAgBd,cAAcc,cAAc;YAC5Cb;QACF;QACA,OAAO;YACLlB,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,sCAAsC,EAAEJ,KAAK,aAAa,EAAEa,MAAMlB,KAAK,CAAC,cAAc,EAAE+B,SAAS,YAAY,UAAU;gBAChI;aACD;YACDY,KAAK;gBAAEZ;YAAO;QAChB;IACF,EAAE,OAAOa,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMtC,OAAO,GAAG;QAC9DoB,OAAOkB,KAAK,CAAC,CAAC,wBAAwB,EAAEvC,KAAK,EAAE,EAAEwC,cAAc;QAC/D,OAAO1C,UAAU,UAAU;YAAEE;YAAMC,SAASuC;QAAa;IAC3D;AACF,GAAE;AAEF,OAAO,MAAMwB,uBAAuBxE,qBAAqB;IACvDc,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAa;IACbC,OAAOxB,aAAa;QAClBkE,OAAOjE,EAAE2B,MAAM,GAAGrB,KAAK,CAACN,EAAEO,QAAQ,CAAC;IACrC;AACF,GAAGqB,OAAO,CAAC,OAAO,EAAElB,IAAI,EAAEa,KAAK,EAAEO,GAAG,EAAE;IACpC,MAAMC,SAAS5B,UAAU;QAAE6B,SAASF,IAAIE,OAAO;IAAC;IAChD,IAAI;QACF,MAAMI,SAAS,MAAMN,IAAIE,OAAO,CAAC2C,WAAW,CAAC;YAC3CjC,YAAYhC;YACZuD,OAAO1C,MAAM0C,KAAK;QACpB;QACA,OAAO;YACLrD,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,mDAAmD,EAAEJ,KAAK,cAAc,EAAE0B,SAAS,YAAY,UAAU;gBAClH;aACD;YACDY,KAAK;gBAAEZ;YAAO;QAChB;IACF,EAAE,OAAOa,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMtC,OAAO,GAAG;QAC9DoB,OAAOkB,KAAK,CAAC,CAAC,wBAAwB,EAAEvC,KAAK,EAAE,EAAEwC,cAAc;QAC/D,OAAO1C,UAAU,UAAU;YAAEE;YAAMC,SAASuC;QAAa;IAC3D;AACF,GAAE"}

package/dist/mcp/builtin/collections/countTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"countTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,kBAAkB,4CA8D7B,CAAA"}
+{"version":3,"file":"countTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,kBAAkB,4CAmD7B,CAAA"}

package/dist/mcp/builtin/collections/countTool.js

@@ -1,12 +1,10 @@
-import { z } from 'zod';
+import { countDocumentsInputSchema } from 'payload';
 import { defaultAccess } from '../../../defaultAccess.js';
 import { defineCollectionTool } from '../../../defineTool.js';
 import { getLogger } from '../../../utils/getLogger.js';
-import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
-import { whereSchema } from '../../../utils/whereSchema.js';
 const DEFAULT_DESCRIPTION = 'Count documents in any collection by passing the collection slug and optional where clause.';
 export const countDocumentsTool = defineCollectionTool({
-    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.slug]?.read),
     annotations: {
         destructiveHint: false,
         idempotentHint: true,
@@ -15,23 +13,19 @@ export const countDocumentsTool = defineCollectionTool({
         title: 'Count Documents'
     },
     description: DEFAULT_DESCRIPTION,
-    input: z.object({
-        locale: z.string().describe('Optional: locale code to count documents in').optional(),
-        trash: z.boolean().describe('Optional: include soft-deleted documents when trash is enabled on the collection').optional(),
-        where: whereSchema.describe('Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {"title":{"contains":"test"}}').optional()
-    })
-}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    input: countDocumentsInputSchema
+}).handler(async ({ slug, authorizedMCP, input, req })=>{
     const payload = req.payload;
     const logger = getLogger({
         payload
     });
     const { locale, trash, where } = input;
-    logger.info(`Counting documents in collection: ${collectionSlug}`);
+    logger.info(`Counting documents in collection: ${slug}`);
     try {
         const result = await payload.count({
-            collection: collectionSlug,
+            collection: slug,
+            overrideAccess: authorizedMCP.overrideAccess,
             req,
-            ...localAPIDefaults(authorizedMCP),
             ...locale ? {
                 locale
             } : {},
@@ -46,19 +40,19 @@ export const countDocumentsTool = defineCollectionTool({
             content: [
                 {
                     type: 'text',
-                    text: `Collection "${collectionSlug}" contains ${result.totalDocs} matching documents.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                    text: `Collection "${slug}" contains ${result.totalDocs} matching documents.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
                 }
             ],
             doc: result
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error counting documents in ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error counting documents in ${slug}: ${errorMessage}`);
         return {
             content: [
                 {
                     type: 'text',
-                    text: `❌ **Error counting documents in collection "${collectionSlug}":** ${errorMessage}`
+                    text: `❌ **Error counting documents in collection "${slug}":** ${errorMessage}`
                 }
             ],
             isError: true

package/dist/mcp/builtin/collections/countTool.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { localAPIDefaults } from '../../../utils/localAPIDefaults.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count documents in any collection by passing the collection slug and optional where clause.'\n\nexport const countDocumentsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.read),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Documents',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    locale: z.string().describe('Optional: locale code to count documents in').optional(),\n    trash: z\n      .boolean()\n      .describe('Optional: include soft-deleted documents when trash is enabled on the collection')\n      .optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering. Use field names with Payload operators, and/or arrays for grouping. Example: {\"title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, trash, where } = input\n\n  logger.info(`Counting documents in collection: ${collectionSlug}`)\n\n  try {\n    const result = await payload.count({\n      collection: collectionSlug,\n      req,\n      ...localAPIDefaults(authorizedMCP),\n      ...(locale ? { locale } : {}),\n      ...(trash !== undefined ? { trash } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${collectionSlug}\" contains ${result.totalDocs} matching documents.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting documents in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting documents in collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","localAPIDefaults","whereSchema","DEFAULT_DESCRIPTION","countDocumentsTool","access","args","Boolean","permissions","collections","collectionSlug","read","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","locale","string","describe","optional","trash","boolean","where","handler","authorizedMCP","req","payload","logger","info","result","count","collection","undefined","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,gBAAgB,QAAQ,qCAAoC;AACrE,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,qBAAqBL,qBAAqB;IACrDM,QAAQ,CAACC,OACPR,cAAcQ,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IACvFC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,QAAQxB,EAAEyB,MAAM,GAAGC,QAAQ,CAAC,+CAA+CC,QAAQ;QACnFC,OAAO5B,EACJ6B,OAAO,GACPH,QAAQ,CAAC,oFACTC,QAAQ;QACXG,OAAOzB,YACJqB,QAAQ,CACP,oJAEDC,QAAQ;IACb;AACF,GAAGI,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEnB,cAAc,EAAES,KAAK,EAAEW,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAShC,UAAU;QAAE+B;IAAQ;IACnC,MAAM,EAAEV,MAAM,EAAEI,KAAK,EAAEE,KAAK,EAAE,GAAGR;IAEjCa,OAAOC,IAAI,CAAC,CAAC,kCAAkC,EAAEvB,gBAAgB;IAEjE,IAAI;QACF,MAAMwB,SAAS,MAAMH,QAAQI,KAAK,CAAC;YACjCC,YAAY1B;YACZoB;YACA,GAAG7B,iBAAiB4B,cAAc;YAClC,GAAIR,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAII,UAAUY,YAAY;gBAAEZ;YAAM,IAAI,CAAC,CAAC;YACxC,GAAIE,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLW,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAE9B,eAAe,WAAW,EAAEwB,OAAOO,SAAS,CAAC,kCAAkC,EAAEC,KAAKC,SAAS,CAACT,QAAQ,QAAQ,CAAC;gBACxI;aACD;YACDU,KAAKV;QACP;IACF,EAAE,OAAOW,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DhB,OAAOa,KAAK,CAAC,CAAC,4BAA4B,EAAEnC,eAAe,EAAE,EAAEoC,cAAc;QAC7E,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,4CAA4C,EAAE9B,eAAe,KAAK,EAAEoC,cAAc;gBAC3F;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/countTool.ts"],"sourcesContent":["import { countDocumentsInputSchema } from 'payload'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count documents in any collection by passing the collection slug and optional where clause.'\n\nexport const countDocumentsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.slug]?.read),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Documents',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: countDocumentsInputSchema,\n}).handler(async ({ slug, authorizedMCP, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, trash, where } = input\n\n  logger.info(`Counting documents in collection: ${slug}`)\n\n  try {\n    const result = await payload.count({\n      collection: slug,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n      ...(locale ? { locale } : {}),\n      ...(trash !== undefined ? { trash } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${slug}\" contains ${result.totalDocs} matching documents.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting documents in ${slug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting documents in collection \"${slug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["countDocumentsInputSchema","defaultAccess","defineCollectionTool","getLogger","DEFAULT_DESCRIPTION","countDocumentsTool","access","args","Boolean","permissions","collections","slug","read","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","handler","authorizedMCP","req","payload","logger","locale","trash","where","info","result","count","collection","overrideAccess","undefined","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,yBAAyB,QAAQ,UAAS;AAEnD,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD,MAAMC,sBACJ;AAEF,OAAO,MAAMC,qBAAqBH,qBAAqB;IACrDI,QAAQ,CAACC,OACPN,cAAcM,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,IAAI,CAAC,EAAEC;IAC7EC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOpB;AACT,GAAGqB,OAAO,CAAC,OAAO,EAAEV,IAAI,EAAEW,aAAa,EAAEF,KAAK,EAAEG,GAAG,EAAE;IACnD,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAStB,UAAU;QAAEqB;IAAQ;IACnC,MAAM,EAAEE,MAAM,EAAEC,KAAK,EAAEC,KAAK,EAAE,GAAGR;IAEjCK,OAAOI,IAAI,CAAC,CAAC,kCAAkC,EAAElB,MAAM;IAEvD,IAAI;QACF,MAAMmB,SAAS,MAAMN,QAAQO,KAAK,CAAC;YACjCC,YAAYrB;YACZsB,gBAAgBX,cAAcW,cAAc;YAC5CV;YACA,GAAIG,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAIC,UAAUO,YAAY;gBAAEP;YAAM,IAAI,CAAC,CAAC;YACxC,GAAIC,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLO,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAE1B,KAAK,WAAW,EAAEmB,OAAOQ,SAAS,CAAC,kCAAkC,EAAEC,KAAKC,SAAS,CAACV,QAAQ,QAAQ,CAAC;gBAC9H;aACD;YACDW,KAAKX;QACP;IACF,EAAE,OAAOY,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DpB,OAAOiB,KAAK,CAAC,CAAC,4BAA4B,EAAE/B,KAAK,EAAE,EAAEgC,cAAc;QACnE,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,4CAA4C,EAAE1B,KAAK,KAAK,EAAEgC,cAAc;gBACjF;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/countVersionsTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"countVersionsTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,iBAAiB,4CA6D5B,CAAA"}
+{"version":3,"file":"countVersionsTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,4CAkD5B,CAAA"}

package/dist/mcp/builtin/collections/countVersionsTool.js

@@ -1,12 +1,10 @@
-import { z } from 'zod';
+import { countVersionsInputSchema } from 'payload';
 import { defaultAccess } from '../../../defaultAccess.js';
 import { defineCollectionTool } from '../../../defineTool.js';
 import { getLogger } from '../../../utils/getLogger.js';
-import { localAPIDefaults } from '../../../utils/localAPIDefaults.js';
-import { whereSchema } from '../../../utils/whereSchema.js';
 const DEFAULT_DESCRIPTION = 'Count document versions in any version-enabled collection by passing the collection slug and optional where clause.';
 export const countVersionsTool = defineCollectionTool({
-    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.collectionSlug]?.readVersions),
+    access: (args)=>defaultAccess(args) && Boolean(args.permissions?.collections?.[args.slug]?.readVersions),
     annotations: {
         destructiveHint: false,
         idempotentHint: true,
@@ -15,22 +13,19 @@ export const countVersionsTool = defineCollectionTool({
         title: 'Count Versions'
     },
     description: DEFAULT_DESCRIPTION,
-    input: z.object({
-        locale: z.string().describe('Optional: locale code to count versions in').optional(),
-        where: whereSchema.describe('Optional: where clause for filtering versions. Version document fields are usually under "version". Example: {"version.title":{"contains":"test"}}').optional()
-    })
-}).handler(async ({ authorizedMCP, collectionSlug, input, req })=>{
+    input: countVersionsInputSchema
+}).handler(async ({ slug, authorizedMCP, input, req })=>{
     const payload = req.payload;
     const logger = getLogger({
         payload
     });
     const { locale, where } = input;
-    logger.info(`Counting versions in collection: ${collectionSlug}`);
+    logger.info(`Counting versions in collection: ${slug}`);
     try {
         const result = await payload.countVersions({
-            collection: collectionSlug,
+            collection: slug,
+            overrideAccess: authorizedMCP.overrideAccess,
             req,
-            ...localAPIDefaults(authorizedMCP),
             ...locale ? {
                 locale
             } : {},
@@ -42,19 +37,19 @@ export const countVersionsTool = defineCollectionTool({
             content: [
                 {
                     type: 'text',
-                    text: `Collection "${collectionSlug}" contains ${result.totalDocs} matching versions.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
+                    text: `Collection "${slug}" contains ${result.totalDocs} matching versions.\n\`\`\`json\n${JSON.stringify(result)}\n\`\`\``
                 }
             ],
             doc: result
         };
     } catch (error) {
         const errorMessage = error instanceof Error ? error.message : 'Unknown error';
-        logger.error(`Error counting versions in ${collectionSlug}: ${errorMessage}`);
+        logger.error(`Error counting versions in ${slug}: ${errorMessage}`);
         return {
             content: [
                 {
                     type: 'text',
-                    text: `❌ **Error counting versions in collection "${collectionSlug}":** ${errorMessage}`
+                    text: `❌ **Error counting versions in collection "${slug}":** ${errorMessage}`
                 }
             ],
             isError: true

package/dist/mcp/builtin/collections/countVersionsTool.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\nimport { localAPIDefaults } from '../../../utils/localAPIDefaults.js'\nimport { whereSchema } from '../../../utils/whereSchema.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count document versions in any version-enabled collection by passing the collection slug and optional where clause.'\n\nexport const countVersionsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) &&\n    Boolean(args.permissions?.collections?.[args.collectionSlug]?.readVersions),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Versions',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: z.object({\n    locale: z\n      .string()\n      .describe('Optional: locale code to count versions in')\n      .optional(),\n    where: whereSchema\n      .describe(\n        'Optional: where clause for filtering versions. Version document fields are usually under \"version\". Example: {\"version.title\":{\"contains\":\"test\"}}',\n      )\n      .optional(),\n  }),\n}).handler(async ({ authorizedMCP, collectionSlug, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, where } = input\n\n  logger.info(`Counting versions in collection: ${collectionSlug}`)\n\n  try {\n    const result = await payload.countVersions({\n      collection: collectionSlug,\n      req,\n      ...localAPIDefaults(authorizedMCP),\n      ...(locale ? { locale } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${collectionSlug}\" contains ${result.totalDocs} matching versions.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting versions in ${collectionSlug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting versions in collection \"${collectionSlug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["z","defaultAccess","defineCollectionTool","getLogger","localAPIDefaults","whereSchema","DEFAULT_DESCRIPTION","countVersionsTool","access","args","Boolean","permissions","collections","collectionSlug","readVersions","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","object","locale","string","describe","optional","where","handler","authorizedMCP","req","payload","logger","info","result","countVersions","collection","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,CAAC,QAAQ,MAAK;AAEvB,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AACvD,SAASC,gBAAgB,QAAQ,qCAAoC;AACrE,SAASC,WAAW,QAAQ,gCAA+B;AAE3D,MAAMC,sBACJ;AAEF,OAAO,MAAMC,oBAAoBL,qBAAqB;IACpDM,QAAQ,CAACC,OACPR,cAAcQ,SACdC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,cAAc,CAAC,EAAEC;IAChEC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOtB,EAAEuB,MAAM,CAAC;QACdC,QAAQxB,EACLyB,MAAM,GACNC,QAAQ,CAAC,8CACTC,QAAQ;QACXC,OAAOvB,YACJqB,QAAQ,CACP,sJAEDC,QAAQ;IACb;AACF,GAAGE,OAAO,CAAC,OAAO,EAAEC,aAAa,EAAEjB,cAAc,EAAES,KAAK,EAAES,GAAG,EAAE;IAC7D,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAS9B,UAAU;QAAE6B;IAAQ;IACnC,MAAM,EAAER,MAAM,EAAEI,KAAK,EAAE,GAAGN;IAE1BW,OAAOC,IAAI,CAAC,CAAC,iCAAiC,EAAErB,gBAAgB;IAEhE,IAAI;QACF,MAAMsB,SAAS,MAAMH,QAAQI,aAAa,CAAC;YACzCC,YAAYxB;YACZkB;YACA,GAAG3B,iBAAiB0B,cAAc;YAClC,GAAIN,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAII,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLU,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAE3B,eAAe,WAAW,EAAEsB,OAAOM,SAAS,CAAC,iCAAiC,EAAEC,KAAKC,SAAS,CAACR,QAAQ,QAAQ,CAAC;gBACvI;aACD;YACDS,KAAKT;QACP;IACF,EAAE,OAAOU,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9Df,OAAOY,KAAK,CAAC,CAAC,2BAA2B,EAAEhC,eAAe,EAAE,EAAEiC,cAAc;QAC5E,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,2CAA2C,EAAE3B,eAAe,KAAK,EAAEiC,cAAc;gBAC1F;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}
+{"version":3,"sources":["../../../../src/mcp/builtin/collections/countVersionsTool.ts"],"sourcesContent":["import { countVersionsInputSchema } from 'payload'\n\nimport { defaultAccess } from '../../../defaultAccess.js'\nimport { defineCollectionTool } from '../../../defineTool.js'\nimport { getLogger } from '../../../utils/getLogger.js'\n\nconst DEFAULT_DESCRIPTION =\n  'Count document versions in any version-enabled collection by passing the collection slug and optional where clause.'\n\nexport const countVersionsTool = defineCollectionTool({\n  access: (args) =>\n    defaultAccess(args) && Boolean(args.permissions?.collections?.[args.slug]?.readVersions),\n  annotations: {\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n    readOnlyHint: true,\n    title: 'Count Versions',\n  },\n  description: DEFAULT_DESCRIPTION,\n  input: countVersionsInputSchema,\n}).handler(async ({ slug, authorizedMCP, input, req }) => {\n  const payload = req.payload\n  const logger = getLogger({ payload })\n  const { locale, where } = input\n\n  logger.info(`Counting versions in collection: ${slug}`)\n\n  try {\n    const result = await payload.countVersions({\n      collection: slug,\n      overrideAccess: authorizedMCP.overrideAccess,\n      req,\n      ...(locale ? { locale } : {}),\n      ...(where ? { where } : {}),\n    })\n\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `Collection \"${slug}\" contains ${result.totalDocs} matching versions.\\n\\`\\`\\`json\\n${JSON.stringify(result)}\\n\\`\\`\\``,\n        },\n      ],\n      doc: result,\n    }\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error'\n    logger.error(`Error counting versions in ${slug}: ${errorMessage}`)\n    return {\n      content: [\n        {\n          type: 'text',\n          text: `❌ **Error counting versions in collection \"${slug}\":** ${errorMessage}`,\n        },\n      ],\n      isError: true,\n    }\n  }\n})\n"],"names":["countVersionsInputSchema","defaultAccess","defineCollectionTool","getLogger","DEFAULT_DESCRIPTION","countVersionsTool","access","args","Boolean","permissions","collections","slug","readVersions","annotations","destructiveHint","idempotentHint","openWorldHint","readOnlyHint","title","description","input","handler","authorizedMCP","req","payload","logger","locale","where","info","result","countVersions","collection","overrideAccess","content","type","text","totalDocs","JSON","stringify","doc","error","errorMessage","Error","message","isError"],"mappings":"AAAA,SAASA,wBAAwB,QAAQ,UAAS;AAElD,SAASC,aAAa,QAAQ,4BAA2B;AACzD,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,SAAS,QAAQ,8BAA6B;AAEvD,MAAMC,sBACJ;AAEF,OAAO,MAAMC,oBAAoBH,qBAAqB;IACpDI,QAAQ,CAACC,OACPN,cAAcM,SAASC,QAAQD,KAAKE,WAAW,EAAEC,aAAa,CAACH,KAAKI,IAAI,CAAC,EAAEC;IAC7EC,aAAa;QACXC,iBAAiB;QACjBC,gBAAgB;QAChBC,eAAe;QACfC,cAAc;QACdC,OAAO;IACT;IACAC,aAAaf;IACbgB,OAAOpB;AACT,GAAGqB,OAAO,CAAC,OAAO,EAAEV,IAAI,EAAEW,aAAa,EAAEF,KAAK,EAAEG,GAAG,EAAE;IACnD,MAAMC,UAAUD,IAAIC,OAAO;IAC3B,MAAMC,SAAStB,UAAU;QAAEqB;IAAQ;IACnC,MAAM,EAAEE,MAAM,EAAEC,KAAK,EAAE,GAAGP;IAE1BK,OAAOG,IAAI,CAAC,CAAC,iCAAiC,EAAEjB,MAAM;IAEtD,IAAI;QACF,MAAMkB,SAAS,MAAML,QAAQM,aAAa,CAAC;YACzCC,YAAYpB;YACZqB,gBAAgBV,cAAcU,cAAc;YAC5CT;YACA,GAAIG,SAAS;gBAAEA;YAAO,IAAI,CAAC,CAAC;YAC5B,GAAIC,QAAQ;gBAAEA;YAAM,IAAI,CAAC,CAAC;QAC5B;QAEA,OAAO;YACLM,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,YAAY,EAAExB,KAAK,WAAW,EAAEkB,OAAOO,SAAS,CAAC,iCAAiC,EAAEC,KAAKC,SAAS,CAACT,QAAQ,QAAQ,CAAC;gBAC7H;aACD;YACDU,KAAKV;QACP;IACF,EAAE,OAAOW,OAAO;QACd,MAAMC,eAAeD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAG;QAC9DlB,OAAOe,KAAK,CAAC,CAAC,2BAA2B,EAAE7B,KAAK,EAAE,EAAE8B,cAAc;QAClE,OAAO;YACLR,SAAS;gBACP;oBACEC,MAAM;oBACNC,MAAM,CAAC,2CAA2C,EAAExB,KAAK,KAAK,EAAE8B,cAAc;gBAChF;aACD;YACDG,SAAS;QACX;IACF;AACF,GAAE"}

package/dist/mcp/builtin/collections/createTool.d.ts

@@ -1,2 +1,2 @@
-export declare const createDocumentTool: import("../../../types.js").CollectionTool;
+export declare const createDocumentsTool: import("../../../types.js").CollectionTool;
 //# sourceMappingURL=createTool.d.ts.map

package/dist/mcp/builtin/collections/createTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,kBAAkB,4CA4F7B,CAAA"}
+{"version":3,"file":"createTool.d.ts","sourceRoot":"","sources":["../../../../src/mcp/builtin/collections/createTool.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,mBAAmB,4CA8H9B,CAAA"}