payload-mcp-toolkit 0.8.0 → 0.9.0

package/README.md

@@ -1,10 +1,13 @@
 # payload-mcp-toolkit
 
-> Standalone schema-aware MCP plugin for Payload CMS v3. Owns the `/api/mcp` endpoint, scoped API keys, draft workflow, and AI-friendly authoring tools so non-technical editors can manage content via AI chat.
+A Payload CMS v3 plugin that lets AI apps such as Claude and ChatGPT read and edit your content over MCP.
 
-`payload-mcp-toolkit` is a single, self-contained Payload v3 plugin. It introspects your Payload config at boot, registers schema-aware **prompts**, **resources**, and **tools** for any MCP-compatible client (Claude Desktop, Claude API, Continue, Cline), and exposes them over `POST /api/mcp` with bearer-token authentication on a built-in API-keys collection.
+It reads your Payload config when the server starts and builds tools, prompts and resources from your collections, globals and blocks. It serves them at `/api/mcp`. Clients connect in one of two ways:
 
-It is the standalone successor to the toolkit's earlier wrapper around `@payloadcms/plugin-mcp` — see [Upgrading from 0.3.x](#upgrading-from-03x) below.
+- **API keys** for scripts and local agents. Each key has its own permissions.
+- **Website sign-in (OAuth)** for Claude and ChatGPT connectors. Users sign in with their site account and choose what the AI may do. Optional. See [docs/oauth.md](docs/oauth.md).
+
+Payload access control applies to every call. Tools run as the signed-in user or the key's user, with `overrideAccess: false`.
 
 ## Install
 
@@ -12,174 +15,125 @@ It is the standalone successor to the toolkit's earlier wrapper around `@payload
 pnpm add payload-mcp-toolkit
 ```
 
-Peer dependencies: `payload` ^3, `zod` ^3.25 or ^4. (Zod 4 needs
-`@modelcontextprotocol/sdk` 1.23 or newer, which this package depends on.)
-
-## Configure — zero config
+Peer dependencies: `payload` ^3, `@payloadcms/ui` ^3, `zod` ^3.25 or ^4.
 
 ```ts
 // payload.config.ts
 import { mcpToolkitPlugin } from 'payload-mcp-toolkit'
 
 export default buildConfig({
-  // ...your collections, blocks, globals
-  serverURL: process.env.SITE_URL,        // used for absolute preview URLs + Host check
-  admin: { user: 'users' },               // your auth collection
+  serverURL: process.env.SITE_URL, // used for preview links and the Host check
+  admin: { user: 'users' },
   plugins: [mcpToolkitPlugin()],
 })
 ```
 
-That is the entire integration. The toolkit:
+This adds:
 
-- Adds the `payload-mcp-api-keys` collection (admin UI: **MCP → API Keys**).
-- Registers a bearer authentication strategy on your user collection.
-- Mounts `POST /api/mcp` and `GET /api/mcp` (the latter returns 405 with a JSON-RPC error so probing clients see something useful).
-- Builds tools / prompts / resources from your introspected schema.
+- The `payload-mcp-api-keys` collection (admin: **MCP → API Keys**) and a bearer strategy on your user collection.
+- `POST /api/mcp`. `GET /api/mcp` returns 405.
+- Tools, prompts and resources built from your schema.
 
-Everything else is inferred:
+The plugin works out the rest from your config:
 
-- **Draft behavior** — collections with `versions.drafts` get `always-draft` semantics (clients flow through `publishDraft` / `patchLayout` / `updateDocument`); others publish immediately.
-- **Preview URLs** — pulled from each collection's `admin.livePreview.url` (or `admin.preview` as a fallback). Falls back to a generic admin-panel hint when neither is set.
-- **Block nesting** — recorded for every blocks-typed field anywhere in the schema; the AI composes layouts at any depth from that map.
-- **User collection** — `admin.user`.
+- **Drafts:** collections and globals with `versions.drafts` save changes as drafts. Others publish on save.
+- **Preview links:** taken from `admin.livePreview.url`, or `admin.preview`.
+- **Blocks:** every blocks field, at any depth, so the AI can build valid layouts.
 
-## API keys
+Schema changes add database tables or columns. On Postgres or SQLite with `push: false`, generate and commit a Payload migration after installing or upgrading.
 
-Create one in admin (**MCP → API Keys → Create**). The plaintext key is shown once on creation; from then on only its `keyPrefix` (first 8 chars) is visible.
+## API keys
 
-Authenticate every MCP request with:
+Create a key in **MCP → API Keys**. The admin shows the full key once. After that you see only its first 8 characters.
 
 ```http
-POST /api/mcp HTTP/1.1
-Authorization: Bearer <plaintext-key>
+POST /api/mcp
+Authorization: Bearer <key>
 Content-Type: application/json
 ```
 
-### Scopes
-
-Configure each key's permissions through typed admin fields — no JSON to hand-edit.
-
-| Field | Effect |
-|---|---|
-| `preset` | Role preset: **Read-only**, **Editor** (read + create + update on collections; read-only on globals — see below), **Admin** (all actions on both), or **Custom** (use the override fields below). Required. Defaults to **Custom** so new keys deny everything until explicitly scoped. Switching away from Custom **clears every override field on save** (collectionScopes, globalScopes, toolAllow, toolDeny); switching back to Custom starts from a fresh deny-all baseline — reconfigure the matrices before saving. |
-| `collectionScopes` | Array of `{ slug, actions[] }`. Only honoured when preset is **Custom**. Each row whitelists a collection and the actions (`read` / `create` / `update` / `delete`) allowed on it. An empty `actions[]` denies all actions on that collection. Listed collections are a *whitelist* — collections not in the list are denied. (Pre-v0.6 rows using `{ collection, actions[] }` are tolerated via a one-release legacy fallback; resave them to migrate.) |
-| `globalScopes` | Array of `{ slug, actions[] }`. Only honoured when preset is **Custom** *and* the host config has at least one global. Globals only support `read` and `update` (no `create` / `delete` — they're singletons). Same whitelist semantics as `collectionScopes`. (Pre-v0.6 rows using `{ global, actions[] }` are tolerated via the same legacy fallback.) |
-| `toolAllow` | Multi-select. Only honoured when preset is **Custom**. If set, only these tools are callable with this key. An empty list under Custom is treated as deny-all on the tools axis **only when no collection or global scopes are set** (the fresh-Custom-key sentinel); when collection or global scopes are populated, an empty list collapses to "no tool restriction" so the resource scopes alone gate access. To deny every tool while keeping resource scopes, enumerate them in `toolDeny` instead. |
-| `toolDeny` | Multi-select. Always applied on top of any preset. Tools listed here are blocked regardless of preset / collection / global scopes. |
-
-The collection and tool dropdowns are populated at plugin-init time from your live Payload config + the toolkit's registered tools. Adding a collection or custom tool requires a dev-server / app restart for it to surface in the dropdowns.
-
-The same shape is editable programmatically via Payload's REST and GraphQL APIs against the `payload-mcp-api-keys` collection — useful for seeding keys from CI or scripted provisioning.
-
-### Lifecycle fields
-
-| Field | Effect |
-|---|---|
-| `name`, `description` | Human-readable identifier in the admin list. |
-| `expiresAt` | Authentication rejects keys past this date. |
-| `revokedAt` | Authentication rejects keys when set. |
-| `lastUsedAt` | Updated fire-and-forget on each successful auth. |
-| `keyPrefix` | First 8 chars of the plaintext, for audit-log identification. |
-
-## What the plugin adds
-
-**Auto-generated prompts:**
+Each key has a **preset**:
 
-- `contentModelOverview` — every collection, fields, and relationships.
-- `blockCompositionGuide` — section/leaf hierarchy and nesting rules.
-- `draftWorkflowGuide` — which collections need `publishDraft` to go live.
+| Preset | Collections | Globals |
+|---|---|---|
+| Read-only | read | read |
+| Editor | read, create, update | read |
+| Admin | read, create, update, delete | read, update |
+| Custom | only what you tick | only what you tick |
 
-**Auto-generated resources:** `blocks://catalog`, `blocks://nesting`, `collections://schema`, `collections://relationships`. Plus `globals://schema` when the host config has at least one global.
+New keys start as **Custom** with nothing ticked, so they can do nothing until you choose. Custom gives you a collection matrix, a global matrix, a tool allow list and a tool deny list. The deny list applies to every preset.
 
-**Tools (19 total — 10 collection-routed, 6 global-routed, 3 account-routed; globals tools register only when the host config has at least one global, and version / publish tools register only on draft-enabled resources):**
+Editor keys cannot change globals. One bad write to a global (site name, footer, navigation) shows on every page. To let a key edit a specific global, use Custom.
 
-*Authoring*
-- `createDocument` — local-API based creation for any collection. JSON-string `data`. Defaults to `draft: true` on draft-enabled collections.
-- `updateDocument` — local-API based update. Replaces the upstream plugin's `update<Resource>` tools, which crash on collections containing richText/upload/blocks fields.
-- `patchLayout` — surgical append/prepend/insertAt/replaceAt against any blocks-typed field. Validates each block recursively against the introspected nesting map.
-- `uploadMedia` — fetch a public HTTPS image, validate (SSRF-safe with a streaming size cap), create a Media doc.
+A key limited to some collections or globals also has these rules:
 
-*Discovery*
-- `findDocument` — read documents by `documentId` or `where` filter, polymorphic across collections. Decorates draft responses with preview URLs when configured.
-- `resolveReference` — search collections by name/title/slug for relationship IDs.
-- `searchContent` — natural-language editor triage (status, recency, missing fields, free text).
+- It gets linked entries as IDs only.
+- `findDocument` refuses filters with a dotted path.
+- Search, reference and upload tools are off, because they reach across every collection.
 
-*Lifecycle / safety*
-- `publishDraft` — flip `_status` from draft to published. Recovers from Payload's post-write field-validator quirk (validator throws *after* the new version row commits in some draft+versions setups): on a caught error, the tool re-reads the doc with `draft: false` and only downgrades to a "published-with-warning" response when the live row reflects the current attempt (strictly newer `updatedAt`), so a stale prior publish cannot mask a real failure.
-- `schedulePublish` — auto-registered for collections with drafts AND a `publishedAt` date field. Stamps a future `publishedAt`; you wire up the actual flip via Payload Jobs Queue / cron / `beforeRead`.
-- `listVersions` — recent saved versions of a draft document.
-- `restoreVersion` — roll a document back to a saved version (creates a new version, so reversible).
-- `safeDelete` — relationship-aware delete. Walks the relationship graph; refuses with a structured impact summary if the doc has inbound references. Override with `confirm: true`.
-- `deleteDocument` — fast unsafe delete (no relationship walk). Use only when you know the doc has no inbound references; prefer `safeDelete` for general use.
+Keys also have `expiresAt`, `revokedAt` and `lastUsedAt`.
 
-*Globals* (registered when the host config has at least one global)
-- `findGlobal` — read any global by slug. Stamps a preview URL on draft documents when `admin.livePreview` / `admin.preview` is configured.
-- `updateGlobal` — partial-merge update; same prose JSON contract as `updateDocument`. Draft-enabled globals default to `'always-draft'`.
-- `patchGlobalLayout` — surgical block-array edits on any blocks-typed field inside a global, at any nesting depth (e.g. `footer.sections`). Registered only when at least one global has a blocks field.
-- `publishGlobalDraft`, `listGlobalVersions`, `restoreGlobalVersion` — registered only for globals with `versions: { drafts: true }`. `publishGlobalDraft` uses the same post-write validation recovery as `publishDraft`, with `fallbackLocale: false` on the verify read so localized globals report the literal `_status` of the requested locale.
+## Website sign-in (OAuth)
 
-## Globals
+```ts
+mcpToolkitPlugin({
+  oauth: {
+    canAuthorize: ({ user }) => user?.role === 'admin', // who may connect; checked on every request
+    access: 'editor', // most the site allows; default 'read-only'
+  },
+})
+```
 
-Globals (site-wide singletons such as site settings, navigation, footer) are exposed alongside collections through the tools listed above and a `globals://schema` resource. The admin UI gains a second "Global scopes" matrix beneath "Collection scopes" under the Custom preset; rows are global slugs, columns are `Read` / `Update`.
+Users add `https://YOUR-SITE/api/mcp` as a custom connector in Claude, or in ChatGPT with Developer mode on. Then they sign in and approve access. The approve screen offers the same choices as a Custom key, capped at `access`. Delete and global writes are never allowed this way.
 
-### Why `editor` is read-only on globals
+The plugin also adds:
 
-The `editor` preset grants read-only access to globals — only `admin` (or a Custom key with explicit `globalScopes`) can write them. Collections under `editor` continue to get `read + create + update`.
+- `/admin/mcp-connections`, where users copy the connector URL and agent instructions, and disconnect.
+- A compact "Connect your AI agent" prompt in the admin sidebar.
 
-The asymmetry exists because globals broadcast site-wide on a single write: site name, footer links, social handles, banner text. A typo in a global is visible on every page that consumes it, with no per-document containment to roll back. Editor-tier keys are typically given to AI agents acting on imperfect natural-language instructions, and `"fix the site title"` going wrong is a one-shot vandalism path against the whole site. If you need editor-tier keys to update specific globals, use the Custom preset with a `globalScopes` entry naming the global slug.
+Setup needs a migration, discovery rewrites and two security headers. See [docs/oauth.md](docs/oauth.md).
 
-## Optional configuration
+## Tools
 
-Every option is an escape hatch — pass only what you need:
+Tools for versions and publishing appear only for collections and globals with drafts. Global tools appear only when the config has globals.
 
-```ts
-mcpToolkitPlugin({
-  auth: {
-    allowedOrigins: ['https://app.example.com'],   // origin allow-list for the /api/mcp Origin/Host check; browser preflight not yet handled — see Known limitations
-  },
-  apiKeyCollection: {
-    slug: 'mcp-keys',                              // default 'payload-mcp-api-keys'
-    userCollection: 'admins',                      // default admin.user
-  },
-  preview: {
-    siteUrl: 'https://staging.example.com',
-    disabled: false,
-  },
-  draftBehavior: {
-    posts: 'always-publish',                       // publish immediately on update
-  },
-  userCollection: 'admins',
-  exclude: {
-    collections: ['internal-bookkeeping'],
-    globals: ['secret-config'],
-  },
-  mediaUpload: { maxFileSize: 25 * 1024 * 1024, collectionSlug: 'images' },
-  domainPrompts: [
-    { name: 'siteVocabulary', title: 'Site Vocabulary', description: 'Site-specific terms.', content: '...' },
-  ],
-})
-```
+| Tool | What it does |
+|---|---|
+| `findDocument` | Read by ID or `where` filter. Draft results include a preview link. |
+| `searchContent` | Find entries by text, status, recent changes or missing fields. |
+| `resolveReference` | Look up IDs by name, title or slug, for relationship fields. |
+| `createDocument` | Create an entry. Draft collections save a draft. |
+| `updateDocument` | Update an entry, including rich text, upload and blocks fields. |
+| `patchLayout` | Append, insert or replace blocks in a blocks field. Checks each block against your schema. |
+| `uploadMedia` | Fetch a public HTTPS image and create a media entry. Size-capped while downloading. |
+| `publishDraft`, `schedulePublish` | Publish a draft now, or set a future `publishedAt`. You run the scheduled publish yourself (Jobs Queue or cron). |
+| `listVersions`, `restoreVersion` | List saved versions and roll back. |
+| `safeDelete` | Delete only if nothing links to the entry, unless `confirm: true`. |
+| `deleteDocument` | Delete without checking links. |
+| `findGlobal`, `updateGlobal`, `patchGlobalLayout` | The same for globals. |
+| `publishGlobalDraft`, `listGlobalVersions`, `restoreGlobalVersion` | Draft tools for globals. |
+
+**Prompts:** `contentModelOverview`, `blockCompositionGuide`, `draftWorkflowGuide`.
+
+**Resources:** `collections://schema`, `collections://relationships`, `blocks://catalog`, `blocks://nesting`, `globals://schema`.
+
+## Options
 
 | Option | Description |
 |---|---|
-| `auth.allowedOrigins` | Origins permitted on the `Origin` header for the DNS-rebinding check. Empty / unset means server-to-server only. `*` is intentionally not honoured. **Note:** browser MCP clients are not yet fully supported — the endpoint does not emit CORS response headers or handle the `OPTIONS` preflight. See [Known limitations](#known-limitations). |
-| `apiKeyCollection.slug` | API-keys collection slug. Defaults to `payload-mcp-api-keys` for zero-touch upgrade compatibility. |
-| `apiKeyCollection.userCollection` | User collection that API keys link to. Defaults to `userCollection` / `admin.user`. |
-| `preview.siteUrl` | Base URL for preview links. Defaults to `serverURL`, then `NEXT_PUBLIC_SERVER_URL`/`SITE_URL` env vars. |
-| `preview.disabled` | Suppress preview URL injection on draft responses. |
-| `draftBehavior` | Per-collection override of inferred behavior. |
-| `userCollection` | Override `admin.user` for API key linkage. |
-| `exclude.collections` / `exclude.globals` | Hide from MCP exposure. |
-| `domainPrompts` | Site-specific vocabulary prompts. |
-| `mediaUpload.maxFileSize` | Default 10MB. Enforced as a streaming cap, not a post-buffer check. |
-| `mediaUpload.collectionSlug` | Default `'media'`. |
-| `customTools` | Extra tools registered alongside the built-ins. See [Custom tools](#custom-tools). |
+| `oauth` | Website sign-in. See above. |
+| `exclude.collections`, `exclude.globals` | Hide collections and globals from MCP. |
+| `customTools` | Your own tools. See below. |
+| `draftBehavior` | Per-collection override, for example `{ posts: 'always-publish' }`. |
+| `preview.siteUrl`, `preview.disabled` | Base URL for preview links (default `serverURL`), or turn them off. |
+| `mediaUpload.maxFileSize`, `mediaUpload.collectionSlug` | Default 10 MB and `'media'`. |
+| `domainPrompts` | Extra prompts with site vocabulary. |
+| `userCollection` | Override `admin.user`. |
+| `apiKeyCollection.slug`, `apiKeyCollection.userCollection` | Rename the keys collection or link keys to another user collection. |
+| `auth.allowedOrigins` | Origins allowed by the `Origin` check. Unset means server-to-server only. |
 
 ## Custom tools
 
-Pass your own tools through `customTools` and they register next to the built-in
-ones:
-
 ```ts
 import { mcpToolkitPlugin, jsonResponse, type ToolFactoryOutput } from 'payload-mcp-toolkit'
 import { z } from 'zod'
@@ -188,137 +142,46 @@ const countActiveMembers: ToolFactoryOutput = {
   name: 'countActiveMembers',
   description: 'Number of members with an active membership.',
   parameters: { since: z.string().optional().describe('ISO date.') },
-  // 'account', not 'collection': the target is hard-coded in the handler, so
-  // there is no argument for the scope check to read. See Scope routing below.
   routing: { kind: 'account', action: 'read' },
   handler: async (args, req) => {
-    const { totalDocs } = await req.payload.count({
-      collection: 'memberships',
-      user: req.user,
-      overrideAccess: false,
-    })
+    const { totalDocs } = await req.payload.count({ collection: 'memberships', user: req.user, overrideAccess: false })
     return jsonResponse({ totalDocs })
   },
 }
 
-plugins: [mcpToolkitPlugin({ customTools: [countActiveMembers] })]
-```
-
-What you get for free:
-
-- **The same wrapper as the built-ins** — the scope check runs before your
-  handler, `req.context.source` is stamped `'mcp'`, and every call (success,
-  failure, scope rejection) lands in the structured audit log.
-- **A slot in the API-key scope dropdowns** — your tool name appears in
-  **Tool allow** / **Tool deny** alongside the built-ins.
-- **A boot-time name check** — reusing a built-in name throws instead of
-  silently shadowing that tool.
-
-The field-by-field contract:
-
-| Field | Notes |
-|---|---|
-| `name` | Must be unique across built-in and custom tools. |
-| `description` | Shown to the model in `tools/list`. Say when to reach for it. |
-| `parameters` | A raw Zod shape (`{ key: z.string() }`) or a `z.object({...})`. Both are accepted. |
-| `routing` | `{kind, action}` — which scope axis gates the tool. `kind` is `'collection'`, `'global'`, or `'account'`. |
-| `handler` | `(args, req, extra) => McpTextResponse`. Read `req.payload` / `req.user` per call; do not close over them at boot. |
-
-### Scope routing
-
-Scope routing reads the target resource from the call's own arguments. A
-`collection`-routed tool **must** take a required `collection` argument (a
-`global`-routed tool, a required `slug`); the registry reads that value to
-decide whether the key's scopes permit the call.
-
-A `collection`- or `global`-routed tool called without that argument is
-**denied**, whatever the key's scopes say. There is no target to check, so the
-check cannot pass. Use `routing.kind: 'account'` for a tool whose target is
-fixed in the handler or spans the whole install — account-routed tools are
-gated by the key's preset instead.
-
-Making the argument optional is the trap: the call then reaches the scope check
-with no target and is refused every time.
-
-Run queries as the authenticated user (`user: req.user, overrideAccess: false`)
-so Payload's own access rules still apply inside the tool. `overrideAccess:
-true` hands an MCP client more reach than the user behind its API key.
-
-## Upgrading from 0.7.0
-
-v0.7.1 is a patch release; no API or breaking config changes. The behavioural changes worth knowing:
-
-- **Preset-switch clears overrides on save.** Switching an API key away from Custom now nulls `collectionScopes`, `globalScopes`, `toolAllow`, and `toolDeny` on save (admin UI conditional-field trap fix — previously, stale Custom-era values silently survived the switch and continued to narrow access). Switching back to Custom starts from a fresh deny-all baseline; reconfigure the matrices before saving.
-- **Empty `toolAllow` under Custom + populated resource scopes no longer denies all tools.** When the key carries collection or global scopes and `toolAllow` is empty, it is treated as "no tool restriction" so the resource scopes alone determine what is callable. The fresh-Custom-key sentinel (no scopes anywhere → deny-all) still applies.
-- **Legacy non-Custom rows with populated overrides emit a one-time warn.** Keys persisted before v0.7.1 that carry populated `collectionScopes` / `globalScopes` / `toolAllow` arrays under a non-Custom preset still narrow access as written (fail-closed safe), but `composeScopes` now logs `mcp.auth.legacy_non_custom_override` once per process to flag them for audit. Re-save affected keys in admin to align persisted state with the v0.7.1 semantics.
-- **Publish tools recover from Payload's post-write validator throw deterministically.** Both `publishDraft` and `publishGlobalDraft` snapshot the document's `updatedAt` before the update and only downgrade a caught error to a `[publishDraft:published_with_warning]` / `[publishGlobalDraft:published_with_warning]` response when the live row reflects the current attempt (strictly newer `updatedAt`). MCP clients can branch on the stable token prefix without regex-matching prose.
-
-## Upgrading from 0.6
-
-v0.7 renames the exported plugin factory so the public symbol matches the package name. Pure rename — no options, runtime behaviour, or scope semantics changed.
-
-```diff
-- import { contentToolkitPlugin } from 'payload-mcp-toolkit'
-+ import { mcpToolkitPlugin } from 'payload-mcp-toolkit'
-
-- plugins: [contentToolkitPlugin()],
-+ plugins: [mcpToolkitPlugin()],
+mcpToolkitPlugin({ customTools: [countActiveMembers] })
 ```
 
-## Upgrading from 0.5
-
-v0.6 adds globals support across the MCP surface. The changes most likely to surprise an upgrade:
-
-- **`editor` preset is read-only on globals.** Editor-tier keys cannot `updateGlobal` or `patchGlobalLayout`. Use the `admin` preset or a Custom key with explicit `globalScopes` for editor-tier writes. See [Why `editor` is read-only on globals](#why-editor-is-read-only-on-globals) for the rationale.
-- **Audit log field rename.** The per-tool audit field `collectionArg` is replaced by `targetSlug` + `targetKind` (`'collection' | 'global' | 'account' | undefined`). Operators with SIEM rules / dashboards filtering on `collectionArg` must update their queries. The old field is gone — there is no compatibility alias, because the original field misreported for global operations.
-- **`tools.allow` without an explicit resource scope is now a deny.** Previously `tools: { allow: ['updateDocument'] }` with no `collections` map and no preset implicitly allowed `updateDocument` on every collection. The fix lands now and applies symmetrically across collections and globals. If your keys rely on the `tools.allow`-only shape (not a documented configuration), add an explicit `collections` / `globals` map or a `preset`.
-- **Production deploys need a migration.** Run `pnpm payload migrate:create` after upgrading to capture the new `globalScopes` JSONB column on `payload-mcp-api-keys`. Local dev with `push: true` syncs on the next `pnpm dev`.
+Custom tools go through the same permission check and audit log as the built-in tools. They also appear in the API-key and sign-in tool lists.
 
-## Upgrading from 0.3.x
+- **`routing`** says which permission gates the tool.
+  - `collection` tools must take a required `collection` argument.
+  - `global` tools must take a required `slug`.
+  - Use `account` when the target is fixed in the handler or spans the whole site. Without the argument, a collection or global tool is always denied.
+- **`handler`** should read `req.payload` and `req.user` on each call. Query with `user: req.user, overrideAccess: false`.
+- **Names** must be unique. Reusing a built-in name throws at startup.
 
-v0.3.x wrapped `@payloadcms/plugin-mcp`. v0.4 owns the small remaining surface (transport, auth, API-key collection, find/delete) directly. The migration is short.
+## Upgrading
 
-1. **Remove the upstream plugin** from `plugins[]`:
-   ```diff
-   - import { mcpPlugin } from '@payloadcms/plugin-mcp'
-   - // ...
-   - plugins: [mcpToolkitPlugin(), mcpPlugin({ ... })],
-   + plugins: [mcpToolkitPlugin()],
-   ```
-2. **Drop the dependency** from `package.json`:
-   ```bash
-   pnpm remove @payloadcms/plugin-mcp
-   ```
-3. **Existing API keys keep authenticating zero-touch.** The `payload-mcp-api-keys` slug, `apiKey` / `apiKeyIndex` columns, and HMAC formula are all preserved.
-4. **Re-scope each key** — see the [API keys](#api-keys) section. Open each existing key in admin, pick a preset (or **Custom** with explicit collection / tool overrides), and save. Until you do, keys carry no scopes and authenticate at full access.
-5. **Browser MCP clients are not yet fully supported.** Server-to-server callers (no `Origin` header — backend scripts, Claude Desktop's local connector) work as before and require no opt-in. Browser-based clients additionally need CORS response headers and `OPTIONS` preflight handling, which haven't landed yet — see [Known limitations](#known-limitations).
-
-If you forget step 1, the plugin throws on boot with the same message — it refuses to register two MCP plugins racing for the `payload-mcp-api-keys` slug.
+- **0.8 → 0.9:** OAuth is new and off by default. Without it, nothing changes for API-key sites, except one rule. Keys limited to some collections or globals now get linked entries as IDs only, and `findDocument` refuses dotted filter paths for them. Regenerate your import map.
+- **Older versions:** see [CHANGELOG.md](CHANGELOG.md).
 
 ## Known limitations
 
-- **Browser MCP clients are not yet fully supported.** The `/api/mcp` endpoint validates the `Origin` / `Host` headers (DNS-rebinding protection) and the `auth.allowedOrigins` option restricts which origins may call it, but the endpoint does not yet emit CORS response headers (`Access-Control-Allow-Origin` etc.) or handle the `OPTIONS` preflight request that browsers send before authenticated cross-origin POSTs. Server-to-server callers (backend scripts, Claude Desktop's local connector — no `Origin` header) are unaffected. Full browser-client support will land in a follow-up release once there is a concrete client to validate against; until then, treat `auth.allowedOrigins` as a server-side allow-list, not a browser opt-in.
+- Browser-based MCP clients are not supported yet. The endpoint does not send CORS headers or answer `OPTIONS` preflight. Server-to-server clients and hosted connectors (Claude, ChatGPT) are not affected.
 
 ## Development
 
-This package follows the [official Payload 3 plugin template](https://github.com/payloadcms/payload/tree/main/templates/plugin) layout: source in `src/`, a fully-working Payload + Next.js app in `dev/`, source-export `package.json` so the dev harness consumes the plugin directly without a build step.
+The `dev/` folder is a working Payload and Next.js app that uses the plugin source directly.
 
 ```bash
 pnpm install
 cp dev/.env.example dev/.env
-pnpm dev          # boot dev/ Next.js + Payload at http://localhost:3000
-pnpm test         # vitest — runs the unit + integration suite
-pnpm build        # produce dist/ for npm publish
+pnpm dev    # http://localhost:3000
+pnpm test
+pnpm build
 ```
 
-The dev harness ships with a realistic CMS schema:
-
-- `Pages` — block-based layout (FullWidth, TwoColumn, CtaBanner, HeadingOnly), drafts enabled.
-- `Posts` — title/slug/excerpt/content/cover/category/authors/tags/SEO, drafts enabled.
-- `Authors`, `Categories`, `Media`, `Users` — taxonomy + auth.
-- `SiteSettings` — global with site name, logo, social, footer.
-- 5 leaf blocks (Heading, RichText, Image, ButtonGroup, Quote) and 4 section blocks.
-
 ## License
 
 MIT

package/dist/api-keys.js

@@ -152,6 +152,22 @@ const isCustomPreset = (data)=>!!data && typeof data === 'object' && data.preset
             disableLocalStrategy: true,
             useAPIKey: true
         },
+        // Every MCP request authenticates by looking up this column. Payload's
+        // `useAPIKey` adds `apiKeyIndex` but does not index it, so each call cost a
+        // sequential scan over the whole key table — and the table only grows.
+        // Declared here rather than added by hand in a host migration, so Payload's
+        // schema builder knows about it and never offers to drop it.
+        //
+        // Not unique: rows exist with a null `apiKeyIndex` (a key row saved before
+        // `enableAPIKey` is ticked), and a unique index would let only one of them
+        // exist at a time.
+        indexes: [
+            {
+                fields: [
+                    'apiKeyIndex'
+                ]
+            }
+        ],
         hooks: {
             beforeValidate: [
                 ({ data, originalDoc })=>{

package/dist/api-keys.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/api-keys.ts"],"sourcesContent":["import type { CollectionBeforeValidateHook, CollectionConfig, Field } from 'payload'\n\nexport const API_KEYS_DEFAULT_SLUG = 'payload-mcp-api-keys'\n\nexport interface CreateApiKeysCollectionOptions {\n  /**\n   * Collection slug. Defaults to `payload-mcp-api-keys` for zero-touch\n   * compatibility with rows created by `@payloadcms/plugin-mcp` v0.3.x.\n   */\n  slug?: string\n  /**\n   * Slug of the user collection that API keys link to. Required.\n   */\n  userCollection: string\n  /**\n   * Collection slugs offered to the collection-scopes matrix component.\n   * Snapshotted at plugin-init time from the host Payload config; adding a\n   * collection requires a dev-server restart for it to surface in the\n   * admin UI.\n   */\n  availableCollections: string[]\n  /**\n   * Tool names offered as options for the `toolAllow` / `toolDeny` selects.\n   * Sourced from the toolkit's registered tools at plugin init.\n   */\n  availableTools: string[]\n  /**\n   * Global slugs offered to the global-scopes matrix component. Optional —\n   * direct callers of the factory that pre-date globals support continue\n   * to work; sites with no globals get an empty array and the second\n   * matrix table is not rendered.\n   */\n  availableGlobals?: string[]\n}\n\nconst PRESET_OPTIONS = [\n  { label: 'Read-only', value: 'read-only' },\n  { label: 'Editor (read + create + update)', value: 'editor' },\n  { label: 'Admin (all actions)', value: 'admin' },\n  { label: 'Custom (use overrides below)', value: 'custom' },\n] as const\n\nconst isCustomPreset = (data: unknown): boolean =>\n  !!data && typeof data === 'object' && (data as { preset?: unknown }).preset === 'custom'\n\n/**\n * Builds the `payload-mcp-api-keys` collection used by the v0.4 standalone\n * plugin. Reuses Payload's built-in `useAPIKey: true` so the underlying\n * `apiKey` / `apiKeyIndex` columns match what `@payloadcms/plugin-mcp`\n * v0.3.x wrote — existing rows authenticate without re-issue.\n *\n * Layout:\n *   - Main column: name, description, preset, scopes matrix (custom only),\n *     tools collapsible (custom only).\n *   - Sidebar: user relationship, key prefix, expiresAt, revokedAt,\n *     lastUsedAt — identity + lifecycle metadata kept out of the\n *     scope-editing flow.\n */\nexport function createApiKeysCollection(\n  options: CreateApiKeysCollectionOptions,\n): CollectionConfig {\n  if (!options || !options.userCollection) {\n    throw new Error(\n      'createApiKeysCollection: `userCollection` is required (slug of the user collection that owns API keys).',\n    )\n  }\n  if (!Array.isArray(options.availableCollections)) {\n    throw new Error(\n      'createApiKeysCollection: `availableCollections` is required (slugs of collections that scope overrides may target).',\n    )\n  }\n  if (!Array.isArray(options.availableTools)) {\n    throw new Error(\n      'createApiKeysCollection: `availableTools` is required (names of registered MCP tools).',\n    )\n  }\n\n  const slug = options.slug ?? API_KEYS_DEFAULT_SLUG\n  const toolOptions = options.availableTools.map((t) => ({ label: t, value: t }))\n  const availableGlobals = Array.isArray(options.availableGlobals)\n    ? options.availableGlobals\n    : []\n\n  const presetField: Field = {\n    name: 'preset',\n    type: 'select',\n    required: true,\n    defaultValue: 'custom',\n    options: PRESET_OPTIONS as unknown as { label: string; value: string }[],\n    admin: {\n      description:\n        'Role preset. \"Custom\" unlocks the per-collection matrix and the tool overrides below. ' +\n        'Switching away from Custom CLEARS every override on save (collectionScopes, globalScopes, ' +\n        'toolAllow, toolDeny); switching back to Custom starts from a fresh deny-all baseline, so ' +\n        'reconfigure the matrices and tool lists before saving.',\n    },\n  }\n\n  // Stored shape: Array<{ slug: string; actions: ('read'|'create'|'update'|'delete')[] }>\n  // The default Payload UI for an `array` would force users to add rows\n  // one at a time; the custom matrix component renders all available\n  // collections at once with a checkbox grid (rows × actions).\n  //\n  // `availableCollections` is forwarded via `clientProps` — Payload v3's\n  // sanctioned escape hatch for serializable static data that the client\n  // component needs at render time.\n  const collectionScopesField: Field = {\n    name: 'collectionScopes',\n    type: 'json',\n    admin: {\n      condition: isCustomPreset,\n      components: {\n        Field: {\n          path: 'payload-mcp-toolkit/client',\n          exportName: 'CollectionScopesMatrix',\n          clientProps: {\n            availableCollections: options.availableCollections,\n          },\n        },\n      },\n    },\n  }\n\n  // Mirrors `collectionScopes` exactly — one additive JSONB column with a\n  // default of `'[]'`, default-rendered by `GlobalScopesMatrix`. Hidden\n  // under non-custom presets. Stored shape:\n  //   Array<{ slug: string; actions: ('read'|'update')[] }>\n  // No `availableGlobals.length > 0` gate: `ScopesTable` renders its own\n  // empty-state message when zero items are passed, so the field surfaces\n  // under Custom regardless of host config, matching the collection variant.\n  const globalScopesField: Field = {\n    name: 'globalScopes',\n    type: 'json',\n    admin: {\n      condition: isCustomPreset,\n      components: {\n        Field: {\n          path: 'payload-mcp-toolkit/client',\n          exportName: 'GlobalScopesMatrix',\n          clientProps: {\n            availableGlobals,\n          },\n        },\n      },\n    },\n  }\n\n  const toolsCollapsible: Field = {\n    type: 'collapsible',\n    label: 'Tool overrides',\n    admin: {\n      condition: isCustomPreset,\n      description:\n        'Per-tool whitelist / blacklist. Layered on top of preset and collection scopes.',\n      initCollapsed: true,\n    },\n    fields: [\n      {\n        name: 'toolAllow',\n        type: 'select',\n        hasMany: true,\n        options: toolOptions,\n        admin: {\n          description:\n            'If set, only these tools are callable with this key. Leave empty to allow any tool ' +\n            'the collection or global scopes permit. Under the Custom preset, an empty list is ' +\n            'treated as deny-all ONLY when no collection or global scopes are set (the fresh- ' +\n            'Custom-key sentinel); when collection or global scopes are populated, an empty list ' +\n            'collapses to \"no tool restriction\" so the resource scopes alone determine what is ' +\n            'callable — to deny every tool while keeping resource scopes, enumerate them in ' +\n            'toolDeny instead. Preset-mode keys created via the REST API with an empty list are ' +\n            'coerced to \"no restriction\".',\n        },\n      },\n      {\n        name: 'toolDeny',\n        type: 'select',\n        hasMany: true,\n        options: toolOptions,\n        admin: {\n          description: 'These tools are blocked regardless of any other scope.',\n        },\n      },\n    ],\n  }\n\n  return {\n    slug,\n    admin: {\n      group: 'MCP',\n      useAsTitle: 'name',\n      description:\n        'API keys for MCP clients. Scopes control which collections and tools each key can access.',\n      defaultColumns: ['name', 'user', 'keyPrefix', 'preset', 'lastUsedAt', 'expiresAt', 'revokedAt'],\n    },\n    auth: {\n      disableLocalStrategy: true,\n      useAPIKey: true,\n    },\n    hooks: {\n      beforeValidate: [\n        (({ data, originalDoc }) => {\n          // The override fields (collectionScopes, globalScopes, toolAllow,\n          // toolDeny) are conditionally rendered only under the Custom preset\n          // (`condition: isCustomPreset`). Under any other preset they are\n          // hidden in the admin UI, which means two things:\n          //\n          //   1. The admin form omits hidden fields from its payload on save,\n          //      so `data` only carries the visible fields — we can't\n          //      \"collapse the empty array we see in `data`\" because we never\n          //      see it at all. The stale value lives on `originalDoc`.\n          //   2. A Custom→Admin switch silently keeps the prior\n          //      `toolAllow:[...]` / `collectionScopes:[...]`, and\n          //      `composeScopes` then emits a scope gate that rejects calls\n          //      the user clearly intended to allow.\n          //\n          // Fix: when the preset is non-Custom, explicitly write `null` into\n          // `data` for every override axis (regardless of what `data` carries\n          // or what originalDoc holds). Payload persists nulls, so the stale\n          // values are erased on every save. The Custom-preset branch below\n          // keeps the explicit-empty-means-deny semantic intact.\n          if (!data) return data\n          const d = data as Record<string, unknown>\n          const orig = (originalDoc ?? {}) as Record<string, unknown>\n          const preset = d.preset ?? orig.preset\n\n          // `readField` falls through to originalDoc when `data` omits the\n          // key entirely (admin form skipping hidden fields), but honours\n          // an explicit null/empty in `data` over originalDoc.\n          const readField = (key: string): unknown =>\n            key in d ? d[key] : orig[key]\n          const isNonEmptyArray = (v: unknown): boolean =>\n            Array.isArray(v) && v.length > 0\n          // Null, undefined, or `[]` — the three shapes that mean \"the user\n          // expressed no tool restriction\". Anything else (a bare string, a\n          // number) is malformed and must reach Payload's validator rather than\n          // being silently read as \"no restriction\".\n          const isUnset = (v: unknown): boolean =>\n            v === null || v === undefined || (Array.isArray(v) && v.length === 0)\n\n          const OVERRIDE_AXES = [\n            'collectionScopes',\n            'globalScopes',\n            'toolAllow',\n            'toolDeny',\n          ] as const\n\n          if (preset !== 'custom') {\n            for (const axis of OVERRIDE_AXES) d[axis] = null\n            return data\n          }\n\n          // Custom preset: the Tools collapsible is labelled as an *override*\n          // layered on top of collection / global scopes, and its description\n          // says \"Leave empty to allow any tool the collection scopes permit.\"\n          // Payload's hasMany-select default of `[]` would otherwise turn the\n          // Tools section into a mandatory whitelist — a user who configures\n          // collection scopes and never opens the collapsible would silently\n          // store `toolAllow:[]`, which `composeScopes` honours as deny-all on\n          // the tools axis and rejects every call.\n          //\n          // Resolve the mismatch by coercing a non-populated `toolAllow` to\n          // null whenever the key carries any concrete resource scope\n          // (collection or global entries). \"Non-populated\" covers both `[]`\n          // (what the admin form sends) and a missing key (what a key created\n          // through the Local API sends) — Payload reads an unset hasMany\n          // select back as `[]` either way, so without this a scripted key\n          // with collection scopes and no tool list would deny every tool.\n          // The fresh-Custom-key sentinel in `composeScopes` still covers the\n          // \"no scopes at all\" case (everything null → deny-all), so users who\n          // genuinely want deny-all do not regress.\n          const hasResourceScope =\n            isNonEmptyArray(readField('collectionScopes')) ||\n            isNonEmptyArray(readField('globalScopes'))\n          if (hasResourceScope && isUnset(readField('toolAllow'))) {\n            d.toolAllow = null\n          }\n          return data\n        }) as CollectionBeforeValidateHook,\n      ],\n    },\n    labels: {\n      plural: 'API Keys',\n      singular: 'API Key',\n    },\n    fields: [\n      // Main column.\n      {\n        name: 'name',\n        type: 'text',\n        required: true,\n        admin: { description: 'Human label for this key (e.g. \"Editorial team — Claude Desktop\").' },\n      },\n      {\n        name: 'description',\n        type: 'textarea',\n        admin: { description: 'Optional notes about the purpose of this key.' },\n      },\n      presetField,\n      collectionScopesField,\n      globalScopesField,\n      toolsCollapsible,\n\n      // Sidebar — identity + lifecycle.\n      {\n        name: 'user',\n        type: 'relationship',\n        relationTo: options.userCollection,\n        required: true,\n        admin: {\n          position: 'sidebar',\n          description:\n            'The user this key authenticates as. Tool calls use this user for access checks on target collections.',\n        },\n      },\n      {\n        name: 'keyPrefix',\n        type: 'text',\n        index: true,\n        admin: {\n          position: 'sidebar',\n          readOnly: true,\n          description:\n            'First 8 characters of the API key — used in audit logs to identify the key without exposing the full secret.',\n        },\n        hooks: {\n          beforeChange: [\n            ({ data, originalDoc, value }) => {\n              if (typeof value === 'string' && value.length > 0) return value\n              const incomingKey = (data as { apiKey?: unknown } | undefined)?.apiKey\n              if (typeof incomingKey === 'string' && incomingKey.length >= 8) {\n                return incomingKey.slice(0, 8)\n              }\n              const existing = (originalDoc as { keyPrefix?: unknown } | undefined)?.keyPrefix\n              return typeof existing === 'string' ? existing : undefined\n            },\n          ],\n        },\n      },\n      {\n        name: 'expiresAt',\n        type: 'date',\n        admin: {\n          position: 'sidebar',\n          description: 'Optional expiry. Requests authenticated with an expired key are rejected.',\n        },\n      },\n      {\n        name: 'revokedAt',\n        type: 'date',\n        admin: {\n          position: 'sidebar',\n          description: 'Set to revoke a key. Revoked keys are rejected at auth time.',\n        },\n      },\n      {\n        name: 'lastUsedAt',\n        type: 'date',\n        admin: {\n          position: 'sidebar',\n          readOnly: true,\n          description:\n            'Updated on each successful authentication. Fire-and-forget; not on the request hot path.',\n        },\n      },\n    ],\n  }\n}\n"],"names":["API_KEYS_DEFAULT_SLUG","PRESET_OPTIONS","label","value","isCustomPreset","data","preset","createApiKeysCollection","options","userCollection","Error","Array","isArray","availableCollections","availableTools","slug","toolOptions","map","t","availableGlobals","presetField","name","type","required","defaultValue","admin","description","collectionScopesField","condition","components","Field","path","exportName","clientProps","globalScopesField","toolsCollapsible","initCollapsed","fields","hasMany","group","useAsTitle","defaultColumns","auth","disableLocalStrategy","useAPIKey","hooks","beforeValidate","originalDoc","d","orig","readField","key","isNonEmptyArray","v","length","isUnset","undefined","OVERRIDE_AXES","axis","hasResourceScope","toolAllow","labels","plural","singular","relationTo","position","index","readOnly","beforeChange","incomingKey","apiKey","slice","existing","keyPrefix"],"mappings":"AAEA,OAAO,MAAMA,wBAAwB,uBAAsB;AAiC3D,MAAMC,iBAAiB;IACrB;QAAEC,OAAO;QAAaC,OAAO;IAAY;IACzC;QAAED,OAAO;QAAmCC,OAAO;IAAS;IAC5D;QAAED,OAAO;QAAuBC,OAAO;IAAQ;IAC/C;QAAED,OAAO;QAAgCC,OAAO;IAAS;CAC1D;AAED,MAAMC,iBAAiB,CAACC,OACtB,CAAC,CAACA,QAAQ,OAAOA,SAAS,YAAY,AAACA,KAA8BC,MAAM,KAAK;AAElF;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,wBACdC,OAAuC;IAEvC,IAAI,CAACA,WAAW,CAACA,QAAQC,cAAc,EAAE;QACvC,MAAM,IAAIC,MACR;IAEJ;IACA,IAAI,CAACC,MAAMC,OAAO,CAACJ,QAAQK,oBAAoB,GAAG;QAChD,MAAM,IAAIH,MACR;IAEJ;IACA,IAAI,CAACC,MAAMC,OAAO,CAACJ,QAAQM,cAAc,GAAG;QAC1C,MAAM,IAAIJ,MACR;IAEJ;IAEA,MAAMK,OAAOP,QAAQO,IAAI,IAAIf;IAC7B,MAAMgB,cAAcR,QAAQM,cAAc,CAACG,GAAG,CAAC,CAACC,IAAO,CAAA;YAAEhB,OAAOgB;YAAGf,OAAOe;QAAE,CAAA;IAC5E,MAAMC,mBAAmBR,MAAMC,OAAO,CAACJ,QAAQW,gBAAgB,IAC3DX,QAAQW,gBAAgB,GACxB,EAAE;IAEN,MAAMC,cAAqB;QACzBC,MAAM;QACNC,MAAM;QACNC,UAAU;QACVC,cAAc;QACdhB,SAASP;QACTwB,OAAO;YACLC,aACE,2FACA,+FACA,8FACA;QACJ;IACF;IAEA,wFAAwF;IACxF,sEAAsE;IACtE,mEAAmE;IACnE,6DAA6D;IAC7D,EAAE;IACF,uEAAuE;IACvE,uEAAuE;IACvE,kCAAkC;IAClC,MAAMC,wBAA+B;QACnCN,MAAM;QACNC,MAAM;QACNG,OAAO;YACLG,WAAWxB;YACXyB,YAAY;gBACVC,OAAO;oBACLC,MAAM;oBACNC,YAAY;oBACZC,aAAa;wBACXpB,sBAAsBL,QAAQK,oBAAoB;oBACpD;gBACF;YACF;QACF;IACF;IAEA,wEAAwE;IACxE,sEAAsE;IACtE,0CAA0C;IAC1C,0DAA0D;IAC1D,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAMqB,oBAA2B;QAC/Bb,MAAM;QACNC,MAAM;QACNG,OAAO;YACLG,WAAWxB;YACXyB,YAAY;gBACVC,OAAO;oBACLC,MAAM;oBACNC,YAAY;oBACZC,aAAa;wBACXd;oBACF;gBACF;YACF;QACF;IACF;IAEA,MAAMgB,mBAA0B;QAC9Bb,MAAM;QACNpB,OAAO;QACPuB,OAAO;YACLG,WAAWxB;YACXsB,aACE;YACFU,eAAe;QACjB;QACAC,QAAQ;YACN;gBACEhB,MAAM;gBACNC,MAAM;gBACNgB,SAAS;gBACT9B,SAASQ;gBACTS,OAAO;oBACLC,aACE,wFACA,uFACA,sFACA,yFACA,uFACA,oFACA,wFACA;gBACJ;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNgB,SAAS;gBACT9B,SAASQ;gBACTS,OAAO;oBACLC,aAAa;gBACf;YACF;SACD;IACH;IAEA,OAAO;QACLX;QACAU,OAAO;YACLc,OAAO;YACPC,YAAY;YACZd,aACE;YACFe,gBAAgB;gBAAC;gBAAQ;gBAAQ;gBAAa;gBAAU;gBAAc;gBAAa;aAAY;QACjG;QACAC,MAAM;YACJC,sBAAsB;YACtBC,WAAW;QACb;QACAC,OAAO;YACLC,gBAAgB;gBACb,CAAC,EAAEzC,IAAI,EAAE0C,WAAW,EAAE;oBACrB,kEAAkE;oBAClE,oEAAoE;oBACpE,iEAAiE;oBACjE,kDAAkD;oBAClD,EAAE;oBACF,oEAAoE;oBACpE,4DAA4D;oBAC5D,oEAAoE;oBACpE,8DAA8D;oBAC9D,sDAAsD;oBACtD,yDAAyD;oBACzD,kEAAkE;oBAClE,2CAA2C;oBAC3C,EAAE;oBACF,mEAAmE;oBACnE,oEAAoE;oBACpE,mEAAmE;oBACnE,kEAAkE;oBAClE,uDAAuD;oBACvD,IAAI,CAAC1C,MAAM,OAAOA;oBAClB,MAAM2C,IAAI3C;oBACV,MAAM4C,OAAQF,eAAe,CAAC;oBAC9B,MAAMzC,SAAS0C,EAAE1C,MAAM,IAAI2C,KAAK3C,MAAM;oBAEtC,iEAAiE;oBACjE,gEAAgE;oBAChE,qDAAqD;oBACrD,MAAM4C,YAAY,CAACC,MACjBA,OAAOH,IAAIA,CAAC,CAACG,IAAI,GAAGF,IAAI,CAACE,IAAI;oBAC/B,MAAMC,kBAAkB,CAACC,IACvB1C,MAAMC,OAAO,CAACyC,MAAMA,EAAEC,MAAM,GAAG;oBACjC,kEAAkE;oBAClE,kEAAkE;oBAClE,sEAAsE;oBACtE,2CAA2C;oBAC3C,MAAMC,UAAU,CAACF,IACfA,MAAM,QAAQA,MAAMG,aAAc7C,MAAMC,OAAO,CAACyC,MAAMA,EAAEC,MAAM,KAAK;oBAErE,MAAMG,gBAAgB;wBACpB;wBACA;wBACA;wBACA;qBACD;oBAED,IAAInD,WAAW,UAAU;wBACvB,KAAK,MAAMoD,QAAQD,cAAeT,CAAC,CAACU,KAAK,GAAG;wBAC5C,OAAOrD;oBACT;oBAEA,oEAAoE;oBACpE,oEAAoE;oBACpE,qEAAqE;oBACrE,oEAAoE;oBACpE,mEAAmE;oBACnE,mEAAmE;oBACnE,qEAAqE;oBACrE,yCAAyC;oBACzC,EAAE;oBACF,kEAAkE;oBAClE,4DAA4D;oBAC5D,mEAAmE;oBACnE,oEAAoE;oBACpE,gEAAgE;oBAChE,iEAAiE;oBACjE,iEAAiE;oBACjE,oEAAoE;oBACpE,qEAAqE;oBACrE,0CAA0C;oBAC1C,MAAMsD,mBACJP,gBAAgBF,UAAU,wBAC1BE,gBAAgBF,UAAU;oBAC5B,IAAIS,oBAAoBJ,QAAQL,UAAU,eAAe;wBACvDF,EAAEY,SAAS,GAAG;oBAChB;oBACA,OAAOvD;gBACT;aACD;QACH;QACAwD,QAAQ;YACNC,QAAQ;YACRC,UAAU;QACZ;QACA1B,QAAQ;YACN,eAAe;YACf;gBACEhB,MAAM;gBACNC,MAAM;gBACNC,UAAU;gBACVE,OAAO;oBAAEC,aAAa;gBAAqE;YAC7F;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBAAEC,aAAa;gBAAgD;YACxE;YACAN;YACAO;YACAO;YACAC;YAEA,kCAAkC;YAClC;gBACEd,MAAM;gBACNC,MAAM;gBACN0C,YAAYxD,QAAQC,cAAc;gBAClCc,UAAU;gBACVE,OAAO;oBACLwC,UAAU;oBACVvC,aACE;gBACJ;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACN4C,OAAO;gBACPzC,OAAO;oBACLwC,UAAU;oBACVE,UAAU;oBACVzC,aACE;gBACJ;gBACAmB,OAAO;oBACLuB,cAAc;wBACZ,CAAC,EAAE/D,IAAI,EAAE0C,WAAW,EAAE5C,KAAK,EAAE;4BAC3B,IAAI,OAAOA,UAAU,YAAYA,MAAMmD,MAAM,GAAG,GAAG,OAAOnD;4BAC1D,MAAMkE,cAAehE,MAA2CiE;4BAChE,IAAI,OAAOD,gBAAgB,YAAYA,YAAYf,MAAM,IAAI,GAAG;gCAC9D,OAAOe,YAAYE,KAAK,CAAC,GAAG;4BAC9B;4BACA,MAAMC,WAAYzB,aAAqD0B;4BACvE,OAAO,OAAOD,aAAa,WAAWA,WAAWhB;wBACnD;qBACD;gBACH;YACF;YACA;gBACEnC,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBACLwC,UAAU;oBACVvC,aAAa;gBACf;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBACLwC,UAAU;oBACVvC,aAAa;gBACf;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBACLwC,UAAU;oBACVE,UAAU;oBACVzC,aACE;gBACJ;YACF;SACD;IACH;AACF"}
+{"version":3,"sources":["../src/api-keys.ts"],"sourcesContent":["import type { CollectionBeforeValidateHook, CollectionConfig, Field } from 'payload'\n\nexport const API_KEYS_DEFAULT_SLUG = 'payload-mcp-api-keys'\n\nexport interface CreateApiKeysCollectionOptions {\n  /**\n   * Collection slug. Defaults to `payload-mcp-api-keys` for zero-touch\n   * compatibility with rows created by `@payloadcms/plugin-mcp` v0.3.x.\n   */\n  slug?: string\n  /**\n   * Slug of the user collection that API keys link to. Required.\n   */\n  userCollection: string\n  /**\n   * Collection slugs offered to the collection-scopes matrix component.\n   * Snapshotted at plugin-init time from the host Payload config; adding a\n   * collection requires a dev-server restart for it to surface in the\n   * admin UI.\n   */\n  availableCollections: string[]\n  /**\n   * Tool names offered as options for the `toolAllow` / `toolDeny` selects.\n   * Sourced from the toolkit's registered tools at plugin init.\n   */\n  availableTools: string[]\n  /**\n   * Global slugs offered to the global-scopes matrix component. Optional —\n   * direct callers of the factory that pre-date globals support continue\n   * to work; sites with no globals get an empty array and the second\n   * matrix table is not rendered.\n   */\n  availableGlobals?: string[]\n}\n\nconst PRESET_OPTIONS = [\n  { label: 'Read-only', value: 'read-only' },\n  { label: 'Editor (read + create + update)', value: 'editor' },\n  { label: 'Admin (all actions)', value: 'admin' },\n  { label: 'Custom (use overrides below)', value: 'custom' },\n] as const\n\nconst isCustomPreset = (data: unknown): boolean =>\n  !!data && typeof data === 'object' && (data as { preset?: unknown }).preset === 'custom'\n\n/**\n * Builds the `payload-mcp-api-keys` collection used by the v0.4 standalone\n * plugin. Reuses Payload's built-in `useAPIKey: true` so the underlying\n * `apiKey` / `apiKeyIndex` columns match what `@payloadcms/plugin-mcp`\n * v0.3.x wrote — existing rows authenticate without re-issue.\n *\n * Layout:\n *   - Main column: name, description, preset, scopes matrix (custom only),\n *     tools collapsible (custom only).\n *   - Sidebar: user relationship, key prefix, expiresAt, revokedAt,\n *     lastUsedAt — identity + lifecycle metadata kept out of the\n *     scope-editing flow.\n */\nexport function createApiKeysCollection(\n  options: CreateApiKeysCollectionOptions,\n): CollectionConfig {\n  if (!options || !options.userCollection) {\n    throw new Error(\n      'createApiKeysCollection: `userCollection` is required (slug of the user collection that owns API keys).',\n    )\n  }\n  if (!Array.isArray(options.availableCollections)) {\n    throw new Error(\n      'createApiKeysCollection: `availableCollections` is required (slugs of collections that scope overrides may target).',\n    )\n  }\n  if (!Array.isArray(options.availableTools)) {\n    throw new Error(\n      'createApiKeysCollection: `availableTools` is required (names of registered MCP tools).',\n    )\n  }\n\n  const slug = options.slug ?? API_KEYS_DEFAULT_SLUG\n  const toolOptions = options.availableTools.map((t) => ({ label: t, value: t }))\n  const availableGlobals = Array.isArray(options.availableGlobals)\n    ? options.availableGlobals\n    : []\n\n  const presetField: Field = {\n    name: 'preset',\n    type: 'select',\n    required: true,\n    defaultValue: 'custom',\n    options: PRESET_OPTIONS as unknown as { label: string; value: string }[],\n    admin: {\n      description:\n        'Role preset. \"Custom\" unlocks the per-collection matrix and the tool overrides below. ' +\n        'Switching away from Custom CLEARS every override on save (collectionScopes, globalScopes, ' +\n        'toolAllow, toolDeny); switching back to Custom starts from a fresh deny-all baseline, so ' +\n        'reconfigure the matrices and tool lists before saving.',\n    },\n  }\n\n  // Stored shape: Array<{ slug: string; actions: ('read'|'create'|'update'|'delete')[] }>\n  // The default Payload UI for an `array` would force users to add rows\n  // one at a time; the custom matrix component renders all available\n  // collections at once with a checkbox grid (rows × actions).\n  //\n  // `availableCollections` is forwarded via `clientProps` — Payload v3's\n  // sanctioned escape hatch for serializable static data that the client\n  // component needs at render time.\n  const collectionScopesField: Field = {\n    name: 'collectionScopes',\n    type: 'json',\n    admin: {\n      condition: isCustomPreset,\n      components: {\n        Field: {\n          path: 'payload-mcp-toolkit/client',\n          exportName: 'CollectionScopesMatrix',\n          clientProps: {\n            availableCollections: options.availableCollections,\n          },\n        },\n      },\n    },\n  }\n\n  // Mirrors `collectionScopes` exactly — one additive JSONB column with a\n  // default of `'[]'`, default-rendered by `GlobalScopesMatrix`. Hidden\n  // under non-custom presets. Stored shape:\n  //   Array<{ slug: string; actions: ('read'|'update')[] }>\n  // No `availableGlobals.length > 0` gate: `ScopesTable` renders its own\n  // empty-state message when zero items are passed, so the field surfaces\n  // under Custom regardless of host config, matching the collection variant.\n  const globalScopesField: Field = {\n    name: 'globalScopes',\n    type: 'json',\n    admin: {\n      condition: isCustomPreset,\n      components: {\n        Field: {\n          path: 'payload-mcp-toolkit/client',\n          exportName: 'GlobalScopesMatrix',\n          clientProps: {\n            availableGlobals,\n          },\n        },\n      },\n    },\n  }\n\n  const toolsCollapsible: Field = {\n    type: 'collapsible',\n    label: 'Tool overrides',\n    admin: {\n      condition: isCustomPreset,\n      description:\n        'Per-tool whitelist / blacklist. Layered on top of preset and collection scopes.',\n      initCollapsed: true,\n    },\n    fields: [\n      {\n        name: 'toolAllow',\n        type: 'select',\n        hasMany: true,\n        options: toolOptions,\n        admin: {\n          description:\n            'If set, only these tools are callable with this key. Leave empty to allow any tool ' +\n            'the collection or global scopes permit. Under the Custom preset, an empty list is ' +\n            'treated as deny-all ONLY when no collection or global scopes are set (the fresh- ' +\n            'Custom-key sentinel); when collection or global scopes are populated, an empty list ' +\n            'collapses to \"no tool restriction\" so the resource scopes alone determine what is ' +\n            'callable — to deny every tool while keeping resource scopes, enumerate them in ' +\n            'toolDeny instead. Preset-mode keys created via the REST API with an empty list are ' +\n            'coerced to \"no restriction\".',\n        },\n      },\n      {\n        name: 'toolDeny',\n        type: 'select',\n        hasMany: true,\n        options: toolOptions,\n        admin: {\n          description: 'These tools are blocked regardless of any other scope.',\n        },\n      },\n    ],\n  }\n\n  return {\n    slug,\n    admin: {\n      group: 'MCP',\n      useAsTitle: 'name',\n      description:\n        'API keys for MCP clients. Scopes control which collections and tools each key can access.',\n      defaultColumns: ['name', 'user', 'keyPrefix', 'preset', 'lastUsedAt', 'expiresAt', 'revokedAt'],\n    },\n    auth: {\n      disableLocalStrategy: true,\n      useAPIKey: true,\n    },\n    // Every MCP request authenticates by looking up this column. Payload's\n    // `useAPIKey` adds `apiKeyIndex` but does not index it, so each call cost a\n    // sequential scan over the whole key table — and the table only grows.\n    // Declared here rather than added by hand in a host migration, so Payload's\n    // schema builder knows about it and never offers to drop it.\n    //\n    // Not unique: rows exist with a null `apiKeyIndex` (a key row saved before\n    // `enableAPIKey` is ticked), and a unique index would let only one of them\n    // exist at a time.\n    indexes: [{ fields: ['apiKeyIndex'] }],\n    hooks: {\n      beforeValidate: [\n        (({ data, originalDoc }) => {\n          // The override fields (collectionScopes, globalScopes, toolAllow,\n          // toolDeny) are conditionally rendered only under the Custom preset\n          // (`condition: isCustomPreset`). Under any other preset they are\n          // hidden in the admin UI, which means two things:\n          //\n          //   1. The admin form omits hidden fields from its payload on save,\n          //      so `data` only carries the visible fields — we can't\n          //      \"collapse the empty array we see in `data`\" because we never\n          //      see it at all. The stale value lives on `originalDoc`.\n          //   2. A Custom→Admin switch silently keeps the prior\n          //      `toolAllow:[...]` / `collectionScopes:[...]`, and\n          //      `composeScopes` then emits a scope gate that rejects calls\n          //      the user clearly intended to allow.\n          //\n          // Fix: when the preset is non-Custom, explicitly write `null` into\n          // `data` for every override axis (regardless of what `data` carries\n          // or what originalDoc holds). Payload persists nulls, so the stale\n          // values are erased on every save. The Custom-preset branch below\n          // keeps the explicit-empty-means-deny semantic intact.\n          if (!data) return data\n          const d = data as Record<string, unknown>\n          const orig = (originalDoc ?? {}) as Record<string, unknown>\n          const preset = d.preset ?? orig.preset\n\n          // `readField` falls through to originalDoc when `data` omits the\n          // key entirely (admin form skipping hidden fields), but honours\n          // an explicit null/empty in `data` over originalDoc.\n          const readField = (key: string): unknown =>\n            key in d ? d[key] : orig[key]\n          const isNonEmptyArray = (v: unknown): boolean =>\n            Array.isArray(v) && v.length > 0\n          // Null, undefined, or `[]` — the three shapes that mean \"the user\n          // expressed no tool restriction\". Anything else (a bare string, a\n          // number) is malformed and must reach Payload's validator rather than\n          // being silently read as \"no restriction\".\n          const isUnset = (v: unknown): boolean =>\n            v === null || v === undefined || (Array.isArray(v) && v.length === 0)\n\n          const OVERRIDE_AXES = [\n            'collectionScopes',\n            'globalScopes',\n            'toolAllow',\n            'toolDeny',\n          ] as const\n\n          if (preset !== 'custom') {\n            for (const axis of OVERRIDE_AXES) d[axis] = null\n            return data\n          }\n\n          // Custom preset: the Tools collapsible is labelled as an *override*\n          // layered on top of collection / global scopes, and its description\n          // says \"Leave empty to allow any tool the collection scopes permit.\"\n          // Payload's hasMany-select default of `[]` would otherwise turn the\n          // Tools section into a mandatory whitelist — a user who configures\n          // collection scopes and never opens the collapsible would silently\n          // store `toolAllow:[]`, which `composeScopes` honours as deny-all on\n          // the tools axis and rejects every call.\n          //\n          // Resolve the mismatch by coercing a non-populated `toolAllow` to\n          // null whenever the key carries any concrete resource scope\n          // (collection or global entries). \"Non-populated\" covers both `[]`\n          // (what the admin form sends) and a missing key (what a key created\n          // through the Local API sends) — Payload reads an unset hasMany\n          // select back as `[]` either way, so without this a scripted key\n          // with collection scopes and no tool list would deny every tool.\n          // The fresh-Custom-key sentinel in `composeScopes` still covers the\n          // \"no scopes at all\" case (everything null → deny-all), so users who\n          // genuinely want deny-all do not regress.\n          const hasResourceScope =\n            isNonEmptyArray(readField('collectionScopes')) ||\n            isNonEmptyArray(readField('globalScopes'))\n          if (hasResourceScope && isUnset(readField('toolAllow'))) {\n            d.toolAllow = null\n          }\n          return data\n        }) as CollectionBeforeValidateHook,\n      ],\n    },\n    labels: {\n      plural: 'API Keys',\n      singular: 'API Key',\n    },\n    fields: [\n      // Main column.\n      {\n        name: 'name',\n        type: 'text',\n        required: true,\n        admin: { description: 'Human label for this key (e.g. \"Editorial team — Claude Desktop\").' },\n      },\n      {\n        name: 'description',\n        type: 'textarea',\n        admin: { description: 'Optional notes about the purpose of this key.' },\n      },\n      presetField,\n      collectionScopesField,\n      globalScopesField,\n      toolsCollapsible,\n\n      // Sidebar — identity + lifecycle.\n      {\n        name: 'user',\n        type: 'relationship',\n        relationTo: options.userCollection,\n        required: true,\n        admin: {\n          position: 'sidebar',\n          description:\n            'The user this key authenticates as. Tool calls use this user for access checks on target collections.',\n        },\n      },\n      {\n        name: 'keyPrefix',\n        type: 'text',\n        index: true,\n        admin: {\n          position: 'sidebar',\n          readOnly: true,\n          description:\n            'First 8 characters of the API key — used in audit logs to identify the key without exposing the full secret.',\n        },\n        hooks: {\n          beforeChange: [\n            ({ data, originalDoc, value }) => {\n              if (typeof value === 'string' && value.length > 0) return value\n              const incomingKey = (data as { apiKey?: unknown } | undefined)?.apiKey\n              if (typeof incomingKey === 'string' && incomingKey.length >= 8) {\n                return incomingKey.slice(0, 8)\n              }\n              const existing = (originalDoc as { keyPrefix?: unknown } | undefined)?.keyPrefix\n              return typeof existing === 'string' ? existing : undefined\n            },\n          ],\n        },\n      },\n      {\n        name: 'expiresAt',\n        type: 'date',\n        admin: {\n          position: 'sidebar',\n          description: 'Optional expiry. Requests authenticated with an expired key are rejected.',\n        },\n      },\n      {\n        name: 'revokedAt',\n        type: 'date',\n        admin: {\n          position: 'sidebar',\n          description: 'Set to revoke a key. Revoked keys are rejected at auth time.',\n        },\n      },\n      {\n        name: 'lastUsedAt',\n        type: 'date',\n        admin: {\n          position: 'sidebar',\n          readOnly: true,\n          description:\n            'Updated on each successful authentication. Fire-and-forget; not on the request hot path.',\n        },\n      },\n    ],\n  }\n}\n"],"names":["API_KEYS_DEFAULT_SLUG","PRESET_OPTIONS","label","value","isCustomPreset","data","preset","createApiKeysCollection","options","userCollection","Error","Array","isArray","availableCollections","availableTools","slug","toolOptions","map","t","availableGlobals","presetField","name","type","required","defaultValue","admin","description","collectionScopesField","condition","components","Field","path","exportName","clientProps","globalScopesField","toolsCollapsible","initCollapsed","fields","hasMany","group","useAsTitle","defaultColumns","auth","disableLocalStrategy","useAPIKey","indexes","hooks","beforeValidate","originalDoc","d","orig","readField","key","isNonEmptyArray","v","length","isUnset","undefined","OVERRIDE_AXES","axis","hasResourceScope","toolAllow","labels","plural","singular","relationTo","position","index","readOnly","beforeChange","incomingKey","apiKey","slice","existing","keyPrefix"],"mappings":"AAEA,OAAO,MAAMA,wBAAwB,uBAAsB;AAiC3D,MAAMC,iBAAiB;IACrB;QAAEC,OAAO;QAAaC,OAAO;IAAY;IACzC;QAAED,OAAO;QAAmCC,OAAO;IAAS;IAC5D;QAAED,OAAO;QAAuBC,OAAO;IAAQ;IAC/C;QAAED,OAAO;QAAgCC,OAAO;IAAS;CAC1D;AAED,MAAMC,iBAAiB,CAACC,OACtB,CAAC,CAACA,QAAQ,OAAOA,SAAS,YAAY,AAACA,KAA8BC,MAAM,KAAK;AAElF;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,wBACdC,OAAuC;IAEvC,IAAI,CAACA,WAAW,CAACA,QAAQC,cAAc,EAAE;QACvC,MAAM,IAAIC,MACR;IAEJ;IACA,IAAI,CAACC,MAAMC,OAAO,CAACJ,QAAQK,oBAAoB,GAAG;QAChD,MAAM,IAAIH,MACR;IAEJ;IACA,IAAI,CAACC,MAAMC,OAAO,CAACJ,QAAQM,cAAc,GAAG;QAC1C,MAAM,IAAIJ,MACR;IAEJ;IAEA,MAAMK,OAAOP,QAAQO,IAAI,IAAIf;IAC7B,MAAMgB,cAAcR,QAAQM,cAAc,CAACG,GAAG,CAAC,CAACC,IAAO,CAAA;YAAEhB,OAAOgB;YAAGf,OAAOe;QAAE,CAAA;IAC5E,MAAMC,mBAAmBR,MAAMC,OAAO,CAACJ,QAAQW,gBAAgB,IAC3DX,QAAQW,gBAAgB,GACxB,EAAE;IAEN,MAAMC,cAAqB;QACzBC,MAAM;QACNC,MAAM;QACNC,UAAU;QACVC,cAAc;QACdhB,SAASP;QACTwB,OAAO;YACLC,aACE,2FACA,+FACA,8FACA;QACJ;IACF;IAEA,wFAAwF;IACxF,sEAAsE;IACtE,mEAAmE;IACnE,6DAA6D;IAC7D,EAAE;IACF,uEAAuE;IACvE,uEAAuE;IACvE,kCAAkC;IAClC,MAAMC,wBAA+B;QACnCN,MAAM;QACNC,MAAM;QACNG,OAAO;YACLG,WAAWxB;YACXyB,YAAY;gBACVC,OAAO;oBACLC,MAAM;oBACNC,YAAY;oBACZC,aAAa;wBACXpB,sBAAsBL,QAAQK,oBAAoB;oBACpD;gBACF;YACF;QACF;IACF;IAEA,wEAAwE;IACxE,sEAAsE;IACtE,0CAA0C;IAC1C,0DAA0D;IAC1D,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,MAAMqB,oBAA2B;QAC/Bb,MAAM;QACNC,MAAM;QACNG,OAAO;YACLG,WAAWxB;YACXyB,YAAY;gBACVC,OAAO;oBACLC,MAAM;oBACNC,YAAY;oBACZC,aAAa;wBACXd;oBACF;gBACF;YACF;QACF;IACF;IAEA,MAAMgB,mBAA0B;QAC9Bb,MAAM;QACNpB,OAAO;QACPuB,OAAO;YACLG,WAAWxB;YACXsB,aACE;YACFU,eAAe;QACjB;QACAC,QAAQ;YACN;gBACEhB,MAAM;gBACNC,MAAM;gBACNgB,SAAS;gBACT9B,SAASQ;gBACTS,OAAO;oBACLC,aACE,wFACA,uFACA,sFACA,yFACA,uFACA,oFACA,wFACA;gBACJ;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNgB,SAAS;gBACT9B,SAASQ;gBACTS,OAAO;oBACLC,aAAa;gBACf;YACF;SACD;IACH;IAEA,OAAO;QACLX;QACAU,OAAO;YACLc,OAAO;YACPC,YAAY;YACZd,aACE;YACFe,gBAAgB;gBAAC;gBAAQ;gBAAQ;gBAAa;gBAAU;gBAAc;gBAAa;aAAY;QACjG;QACAC,MAAM;YACJC,sBAAsB;YACtBC,WAAW;QACb;QACA,uEAAuE;QACvE,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,6DAA6D;QAC7D,EAAE;QACF,2EAA2E;QAC3E,2EAA2E;QAC3E,mBAAmB;QACnBC,SAAS;YAAC;gBAAER,QAAQ;oBAAC;iBAAc;YAAC;SAAE;QACtCS,OAAO;YACLC,gBAAgB;gBACb,CAAC,EAAE1C,IAAI,EAAE2C,WAAW,EAAE;oBACrB,kEAAkE;oBAClE,oEAAoE;oBACpE,iEAAiE;oBACjE,kDAAkD;oBAClD,EAAE;oBACF,oEAAoE;oBACpE,4DAA4D;oBAC5D,oEAAoE;oBACpE,8DAA8D;oBAC9D,sDAAsD;oBACtD,yDAAyD;oBACzD,kEAAkE;oBAClE,2CAA2C;oBAC3C,EAAE;oBACF,mEAAmE;oBACnE,oEAAoE;oBACpE,mEAAmE;oBACnE,kEAAkE;oBAClE,uDAAuD;oBACvD,IAAI,CAAC3C,MAAM,OAAOA;oBAClB,MAAM4C,IAAI5C;oBACV,MAAM6C,OAAQF,eAAe,CAAC;oBAC9B,MAAM1C,SAAS2C,EAAE3C,MAAM,IAAI4C,KAAK5C,MAAM;oBAEtC,iEAAiE;oBACjE,gEAAgE;oBAChE,qDAAqD;oBACrD,MAAM6C,YAAY,CAACC,MACjBA,OAAOH,IAAIA,CAAC,CAACG,IAAI,GAAGF,IAAI,CAACE,IAAI;oBAC/B,MAAMC,kBAAkB,CAACC,IACvB3C,MAAMC,OAAO,CAAC0C,MAAMA,EAAEC,MAAM,GAAG;oBACjC,kEAAkE;oBAClE,kEAAkE;oBAClE,sEAAsE;oBACtE,2CAA2C;oBAC3C,MAAMC,UAAU,CAACF,IACfA,MAAM,QAAQA,MAAMG,aAAc9C,MAAMC,OAAO,CAAC0C,MAAMA,EAAEC,MAAM,KAAK;oBAErE,MAAMG,gBAAgB;wBACpB;wBACA;wBACA;wBACA;qBACD;oBAED,IAAIpD,WAAW,UAAU;wBACvB,KAAK,MAAMqD,QAAQD,cAAeT,CAAC,CAACU,KAAK,GAAG;wBAC5C,OAAOtD;oBACT;oBAEA,oEAAoE;oBACpE,oEAAoE;oBACpE,qEAAqE;oBACrE,oEAAoE;oBACpE,mEAAmE;oBACnE,mEAAmE;oBACnE,qEAAqE;oBACrE,yCAAyC;oBACzC,EAAE;oBACF,kEAAkE;oBAClE,4DAA4D;oBAC5D,mEAAmE;oBACnE,oEAAoE;oBACpE,gEAAgE;oBAChE,iEAAiE;oBACjE,iEAAiE;oBACjE,oEAAoE;oBACpE,qEAAqE;oBACrE,0CAA0C;oBAC1C,MAAMuD,mBACJP,gBAAgBF,UAAU,wBAC1BE,gBAAgBF,UAAU;oBAC5B,IAAIS,oBAAoBJ,QAAQL,UAAU,eAAe;wBACvDF,EAAEY,SAAS,GAAG;oBAChB;oBACA,OAAOxD;gBACT;aACD;QACH;QACAyD,QAAQ;YACNC,QAAQ;YACRC,UAAU;QACZ;QACA3B,QAAQ;YACN,eAAe;YACf;gBACEhB,MAAM;gBACNC,MAAM;gBACNC,UAAU;gBACVE,OAAO;oBAAEC,aAAa;gBAAqE;YAC7F;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBAAEC,aAAa;gBAAgD;YACxE;YACAN;YACAO;YACAO;YACAC;YAEA,kCAAkC;YAClC;gBACEd,MAAM;gBACNC,MAAM;gBACN2C,YAAYzD,QAAQC,cAAc;gBAClCc,UAAU;gBACVE,OAAO;oBACLyC,UAAU;oBACVxC,aACE;gBACJ;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACN6C,OAAO;gBACP1C,OAAO;oBACLyC,UAAU;oBACVE,UAAU;oBACV1C,aACE;gBACJ;gBACAoB,OAAO;oBACLuB,cAAc;wBACZ,CAAC,EAAEhE,IAAI,EAAE2C,WAAW,EAAE7C,KAAK,EAAE;4BAC3B,IAAI,OAAOA,UAAU,YAAYA,MAAMoD,MAAM,GAAG,GAAG,OAAOpD;4BAC1D,MAAMmE,cAAejE,MAA2CkE;4BAChE,IAAI,OAAOD,gBAAgB,YAAYA,YAAYf,MAAM,IAAI,GAAG;gCAC9D,OAAOe,YAAYE,KAAK,CAAC,GAAG;4BAC9B;4BACA,MAAMC,WAAYzB,aAAqD0B;4BACvE,OAAO,OAAOD,aAAa,WAAWA,WAAWhB;wBACnD;qBACD;gBACH;YACF;YACA;gBACEpC,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBACLyC,UAAU;oBACVxC,aAAa;gBACf;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBACLyC,UAAU;oBACVxC,aAAa;gBACf;YACF;YACA;gBACEL,MAAM;gBACNC,MAAM;gBACNG,OAAO;oBACLyC,UAAU;oBACVE,UAAU;oBACV1C,aACE;gBACJ;YACF;SACD;IACH;AACF"}