@akbarsafari00/bonyan-content-manager 5.52.1-fa.2

package/dist/server/mcp/handlers/single-type-handlers.mjs

@@ -0,0 +1,336 @@
+import { errors, async, setCreatorFields } from '@strapi/utils';
+import { getService } from '../../utils/index.mjs';
+import { getDocumentLocaleAndStatus } from '../../controllers/validation/dimensions.mjs';
+import { formatDocumentWithMetadata } from '../../controllers/utils/metadata.mjs';
+import { getPopulateForLocalizations } from '../../services/utils/populate.mjs';
+import { MCP_NOT_FOUND_DOCUMENT } from './constants.mjs';
+import { isContentTypeLocalized } from '../permissions.mjs';
+import { shapeRelationsForMcp } from '../sanitizers/shape-relations.mjs';
+import { ok, sanitizeFormatShape } from '../utils.mjs';
+
+// ---------------------------------------------------------------------------
+// Shared create-or-update logic mirroring single-types controller
+// ---------------------------------------------------------------------------
+/**
+ * Core write logic shared by the single-type write handler.
+ * Creates the document when none exists; updates the existing draft otherwise.
+ * Enforces RBAC create/update permission and sanitizes input + output.
+ */ const singleCreateOrUpdate = async (strapi, uid, context, args)=>{
+    const { userAbility, user } = context;
+    const { data, locale } = args;
+    // TODO: fix UID.SingleType assignability in @strapi/types
+    const typedUid = uid;
+    const documentManager = getService('document-manager');
+    const permissionChecker = getService('permission-checker').create({
+        userAbility,
+        model: uid
+    });
+    if (permissionChecker.cannot.create() && permissionChecker.cannot.update()) {
+        throw new errors.ForbiddenError();
+    }
+    const sanitizedQuery = await permissionChecker.sanitizedQuery.update({
+        locale
+    });
+    const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({
+        locale
+    }, uid);
+    const populate = await getService('populate-builder')(typedUid).populateFromQuery(sanitizedQuery).populateDeep(Infinity).withPopulateOverride(getPopulateForLocalizations(typedUid)).build();
+    const draftFindQuery = {
+        ...sanitizedQuery,
+        populate,
+        locale: resolvedLocale,
+        status: 'draft'
+    };
+    const [documentVersion, otherDocumentVersion] = await Promise.all([
+        documentManager.findMany(draftFindQuery, typedUid).then((docs)=>docs[0]),
+        strapi.db.query(typedUid).findOne({
+            select: [
+                'documentId'
+            ]
+        })
+    ]);
+    const documentId = otherDocumentVersion?.documentId;
+    if (documentVersion) {
+        if (permissionChecker.cannot.update(documentVersion)) {
+            throw new errors.ForbiddenError();
+        }
+    } else if (permissionChecker.cannot.create()) {
+        throw new errors.ForbiddenError();
+    }
+    const sanitizeInput = documentVersion ? permissionChecker.sanitizeUpdateInput(documentVersion) : permissionChecker.sanitizeCreateInput;
+    const isEdition = documentVersion !== null && documentVersion !== undefined;
+    const sanitizedData = setCreatorFields({
+        user,
+        isEdition
+    })(await sanitizeInput(data));
+    const formatted = await strapi.db.transaction(async ()=>{
+        let doc;
+        if (documentId === undefined) {
+            doc = await documentManager.create(typedUid, {
+                data: sanitizedData,
+                ...sanitizedQuery,
+                locale: resolvedLocale
+            });
+        } else {
+            doc = await documentManager.update(documentId, typedUid, {
+                data: sanitizedData,
+                populate,
+                locale: resolvedLocale
+            });
+        }
+        return sanitizeFormatShape(permissionChecker, typedUid, doc);
+    });
+    return ok(formatted);
+};
+// ---------------------------------------------------------------------------
+// Handler factories
+// ---------------------------------------------------------------------------
+/**
+ * Creates a handler for reading the single-type document.
+ * Returns available locale metadata when the requested locale version does not exist.
+ * Enforces RBAC read permission.
+ */ const createSingleGetHandler = (uid)=>(strapi, context)=>async ({ args })=>{
+            const { userAbility } = context;
+            const { locale, status } = args;
+            // TODO: fix UID.SingleType assignability in @strapi/types
+            const typedUid = uid;
+            const permissionChecker = getService('permission-checker').create({
+                userAbility,
+                model: uid
+            });
+            if (permissionChecker.cannot.read()) {
+                throw new errors.ForbiddenError();
+            }
+            const permissionQuery = await permissionChecker.sanitizedQuery.read({
+                locale,
+                status
+            });
+            const { locale: resolvedLocale, status: resolvedStatus } = await getDocumentLocaleAndStatus({
+                locale,
+                status
+            }, uid);
+            const populate = await getService('populate-builder')(typedUid).populateFromQuery(permissionQuery).populateDeep(Infinity).withPopulateOverride(getPopulateForLocalizations(typedUid)).build();
+            const versionFindQuery = {
+                ...permissionQuery,
+                populate,
+                locale: resolvedLocale,
+                status: resolvedStatus
+            };
+            const version = await getService('document-manager').findMany(versionFindQuery, typedUid).then((docs)=>docs[0]);
+            if (!version) {
+                if (permissionChecker.cannot.create()) {
+                    throw new errors.ForbiddenError();
+                }
+                const document = await strapi.db.query(typedUid).findOne({});
+                if (!document) {
+                    throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);
+                }
+                const { meta } = await formatDocumentWithMetadata(permissionChecker, typedUid, {
+                    documentId: document.documentId,
+                    locale: resolvedLocale,
+                    publishedAt: null
+                }, {
+                    availableLocales: true,
+                    availableStatus: false
+                });
+                return ok({
+                    data: {},
+                    meta
+                });
+            }
+            if (permissionChecker.cannot.read(version)) {
+                throw new errors.ForbiddenError();
+            }
+            const result = await sanitizeFormatShape(permissionChecker, typedUid, version);
+            return ok(result);
+        };
+/**
+ * Creates a handler for creating or updating the single-type document.
+ * Delegates to `singleCreateOrUpdate`; enforces RBAC create/update permission.
+ */ const createSingleWriteHandler = (uid)=>(strapi, context)=>async ({ args })=>{
+            return singleCreateOrUpdate(strapi, uid, context, args);
+        };
+/**
+ * Creates a handler for deleting the single-type document (or a specific locale).
+ * Enforces RBAC delete permission on every locale version before deletion.
+ */ const createSingleDeleteHandler = (uid)=>(strapi, context)=>async ({ args })=>{
+            const { userAbility } = context;
+            const { locale } = args;
+            // TODO: fix UID.SingleType assignability in @strapi/types
+            const typedUid = uid;
+            const documentManager = getService('document-manager');
+            const permissionChecker = getService('permission-checker').create({
+                userAbility,
+                model: uid
+            });
+            if (permissionChecker.cannot.delete()) {
+                throw new errors.ForbiddenError();
+            }
+            const sanitizedQuery = await permissionChecker.sanitizedQuery.delete({
+                locale
+            });
+            const populate = await getService('populate-builder')(typedUid).populateFromQuery(sanitizedQuery).populateDeep(Infinity).withPopulateOverride(getPopulateForLocalizations(typedUid)).build();
+            const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({
+                locale
+            }, uid);
+            const isLocalized = isContentTypeLocalized(strapi, uid);
+            const localeForQuery = isLocalized === true ? resolvedLocale : undefined;
+            const documentLocales = await documentManager.findLocales(undefined, typedUid, {
+                populate,
+                locale: localeForQuery
+            });
+            if (documentLocales.length === 0) {
+                throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);
+            }
+            for (const document of documentLocales){
+                if (permissionChecker.cannot.delete(document)) {
+                    throw new errors.ForbiddenError();
+                }
+            }
+            const deletedEntity = await documentManager.delete(documentLocales[0].documentId, typedUid, {
+                locale: localeForQuery
+            });
+            // Delete returns `{ data }` without metadata — no status to compute, so sanitize + shape only.
+            const sanitizedResult = await permissionChecker.sanitizeOutput(deletedEntity);
+            const shapedResult = await shapeRelationsForMcp(typedUid, sanitizedResult);
+            return ok({
+                data: shapedResult
+            });
+        };
+/**
+ * Creates a handler for publishing the single-type document draft.
+ * Enforces RBAC publish permission; throws NotFound when the draft is missing.
+ */ const createSinglePublishHandler = (uid)=>(strapi, context)=>async ({ args })=>{
+            const { userAbility } = context;
+            const { locale } = args;
+            // TODO: fix UID.SingleType assignability in @strapi/types
+            const typedUid = uid;
+            const documentManager = getService('document-manager');
+            const permissionChecker = getService('permission-checker').create({
+                userAbility,
+                model: uid
+            });
+            if (permissionChecker.cannot.publish()) {
+                throw new errors.ForbiddenError();
+            }
+            const publishedDocument = await strapi.db.transaction(async ()=>{
+                const sanitizedQuery = await permissionChecker.sanitizedQuery.publish({
+                    locale
+                });
+                const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({
+                    locale
+                }, uid);
+                const publishFindQuery = {
+                    ...sanitizedQuery,
+                    locale: resolvedLocale,
+                    status: 'draft'
+                };
+                const document = await getService('document-manager').findMany(publishFindQuery, typedUid).then((docs)=>docs[0]);
+                if (!document) {
+                    throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);
+                }
+                if (permissionChecker.cannot.publish(document)) {
+                    throw new errors.ForbiddenError();
+                }
+                const publishResult = await documentManager.publish(document.documentId, typedUid, {
+                    locale: resolvedLocale
+                });
+                return publishResult?.at(0);
+            });
+            const result = await sanitizeFormatShape(permissionChecker, typedUid, publishedDocument);
+            return ok(result);
+        };
+/**
+ * Creates a handler for unpublishing the single-type document.
+ * Optionally discards the draft in the same transaction when `discardDraft` is true.
+ * Enforces RBAC unpublish (and discard) permission.
+ */ const createSingleUnpublishHandler = (uid)=>(strapi, context)=>async ({ args })=>{
+            const { userAbility } = context;
+            const { locale, discardDraft } = args;
+            // TODO: fix UID.SingleType assignability in @strapi/types
+            const typedUid = uid;
+            const documentManager = getService('document-manager');
+            const permissionChecker = getService('permission-checker').create({
+                userAbility,
+                model: uid
+            });
+            if (permissionChecker.cannot.unpublish()) {
+                throw new errors.ForbiddenError();
+            }
+            if (discardDraft === true && permissionChecker.cannot.discard()) {
+                throw new errors.ForbiddenError();
+            }
+            const sanitizedQuery = await permissionChecker.sanitizedQuery.unpublish({
+                locale
+            });
+            const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({
+                locale
+            }, uid);
+            const unpublishFindQuery = {
+                ...sanitizedQuery,
+                locale: resolvedLocale
+            };
+            const document = await getService('document-manager').findMany(unpublishFindQuery, typedUid).then((docs)=>docs[0]);
+            if (!document) {
+                throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);
+            }
+            if (permissionChecker.cannot.unpublish(document)) {
+                throw new errors.ForbiddenError();
+            }
+            if (discardDraft === true && permissionChecker.cannot.discard(document)) {
+                throw new errors.ForbiddenError();
+            }
+            const result = await strapi.db.transaction(async ()=>{
+                if (discardDraft === true) {
+                    await documentManager.discardDraft(document.documentId, typedUid, {
+                        locale: resolvedLocale
+                    });
+                }
+                return async.pipe((doc)=>documentManager.unpublish(doc.documentId, typedUid, {
+                        locale: resolvedLocale
+                    }), (doc)=>sanitizeFormatShape(permissionChecker, typedUid, doc))(document);
+            });
+            return ok(result);
+        };
+/**
+ * Creates a handler for discarding the draft of the single-type document.
+ * Restores the published version as the draft. Enforces RBAC discard permission.
+ */ const createSingleDiscardDraftHandler = (uid)=>(_strapi, context)=>async ({ args })=>{
+            const { userAbility } = context;
+            const { locale } = args;
+            // TODO: fix UID.SingleType assignability in @strapi/types
+            const typedUid = uid;
+            const documentManager = getService('document-manager');
+            const permissionChecker = getService('permission-checker').create({
+                userAbility,
+                model: uid
+            });
+            if (permissionChecker.cannot.discard()) {
+                throw new errors.ForbiddenError();
+            }
+            const sanitizedQuery = await permissionChecker.sanitizedQuery.discard({
+                locale
+            });
+            const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({
+                locale
+            }, uid);
+            const discardFindQuery = {
+                ...sanitizedQuery,
+                locale: resolvedLocale,
+                status: 'published'
+            };
+            const document = await getService('document-manager').findMany(discardFindQuery, typedUid).then((docs)=>docs[0]);
+            if (!document) {
+                throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);
+            }
+            if (permissionChecker.cannot.discard(document)) {
+                throw new errors.ForbiddenError();
+            }
+            const discardedDocument = await async.pipe((doc)=>documentManager.discardDraft(doc.documentId, typedUid, {
+                    locale: resolvedLocale
+                }), (doc)=>sanitizeFormatShape(permissionChecker, typedUid, doc))(document);
+            return ok(discardedDocument);
+        };
+
+export { createSingleDeleteHandler, createSingleDiscardDraftHandler, createSingleGetHandler, createSinglePublishHandler, createSingleUnpublishHandler, createSingleWriteHandler, singleCreateOrUpdate };
+//# sourceMappingURL=single-type-handlers.mjs.map

package/dist/server/mcp/handlers/single-type-handlers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"single-type-handlers.mjs","sources":["../../../../server/src/mcp/handlers/single-type-handlers.ts"],"sourcesContent":["import { errors, async as asyncPipe, setCreatorFields } from '@strapi/utils';\r\nimport type { Core, Modules, UID } from '@strapi/types';\r\n\r\nimport { getService } from '../../utils';\r\nimport { getDocumentLocaleAndStatus } from '../../controllers/validation/dimensions';\r\nimport { formatDocumentWithMetadata } from '../../controllers/utils/metadata';\r\nimport { getPopulateForLocalizations } from '../../services/utils/populate';\r\nimport { MCP_NOT_FOUND_DOCUMENT } from './constants';\r\nimport { isContentTypeLocalized } from '../permissions';\r\nimport { shapeRelationsForMcp } from '../sanitizers/shape-relations';\r\nimport { ok, sanitizeFormatShape } from '../utils';\r\n\r\ntype McpDocumentQuery = {\r\n  populate?: unknown;\r\n  locale?: string;\r\n  status?: string;\r\n  filters?: unknown;\r\n  sort?: unknown;\r\n  pagination?: unknown;\r\n  [key: string]: unknown;\r\n};\r\n\r\ntype McpFindManyParams = Parameters<Modules.Documents.ServiceInstance['findMany']>[0];\r\n\r\n// ---------------------------------------------------------------------------\r\n// Input arg schemas — used for type-safe narrowing from Record<string, unknown>\r\n// ---------------------------------------------------------------------------\r\n\r\ntype SingleLocaleArgs = { locale?: string };\r\ntype SingleGetArgs = SingleLocaleArgs & { status?: 'draft' | 'published' };\r\ntype SingleUnpublishArgs = SingleLocaleArgs & { discardDraft?: boolean };\r\ntype SingleWriteArgs = { data: Record<string, unknown>; locale?: string };\r\n\r\n// ---------------------------------------------------------------------------\r\n// Shared create-or-update logic mirroring single-types controller\r\n// ---------------------------------------------------------------------------\r\n\r\n/**\r\n * Core write logic shared by the single-type write handler.\r\n * Creates the document when none exists; updates the existing draft otherwise.\r\n * Enforces RBAC create/update permission and sanitizes input + output.\r\n */\r\nexport const singleCreateOrUpdate = async (\r\n  strapi: Core.Strapi,\r\n  uid: UID.SingleType,\r\n  context: Modules.MCP.McpHandlerContext,\r\n  args: SingleWriteArgs\r\n): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n  const { userAbility, user } = context;\r\n  const { data, locale } = args;\r\n  // TODO: fix UID.SingleType assignability in @strapi/types\r\n  const typedUid = uid as UID.ContentType;\r\n\r\n  const documentManager = getService('document-manager');\r\n  const permissionChecker = getService('permission-checker').create({\r\n    userAbility,\r\n    model: uid as string,\r\n  });\r\n\r\n  if (permissionChecker.cannot.create() && permissionChecker.cannot.update()) {\r\n    throw new errors.ForbiddenError();\r\n  }\r\n\r\n  const sanitizedQuery = await permissionChecker.sanitizedQuery.update({ locale });\r\n  const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({ locale }, uid);\r\n\r\n  const populate = await getService('populate-builder')(typedUid)\r\n    .populateFromQuery(sanitizedQuery)\r\n    .populateDeep(Infinity)\r\n    .withPopulateOverride(getPopulateForLocalizations(typedUid))\r\n    .build();\r\n\r\n  const draftFindQuery: McpDocumentQuery = {\r\n    ...sanitizedQuery,\r\n    populate,\r\n    locale: resolvedLocale,\r\n    status: 'draft',\r\n  };\r\n  const [documentVersion, otherDocumentVersion] = await Promise.all([\r\n    documentManager\r\n      .findMany(draftFindQuery as McpFindManyParams, typedUid)\r\n      .then((docs: any[]) => docs[0]),\r\n    strapi.db.query(typedUid).findOne({ select: ['documentId'] }),\r\n  ]);\r\n\r\n  const documentId = otherDocumentVersion?.documentId;\r\n\r\n  if (documentVersion) {\r\n    if (permissionChecker.cannot.update(documentVersion)) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n  } else if (permissionChecker.cannot.create()) {\r\n    throw new errors.ForbiddenError();\r\n  }\r\n\r\n  const sanitizeInput = documentVersion\r\n    ? permissionChecker.sanitizeUpdateInput(documentVersion)\r\n    : permissionChecker.sanitizeCreateInput;\r\n\r\n  const isEdition = documentVersion !== null && documentVersion !== undefined;\r\n  const sanitizedData = setCreatorFields({ user, isEdition })(await sanitizeInput(data)) as Record<\r\n    string,\r\n    unknown\r\n  >;\r\n\r\n  const formatted = await strapi.db.transaction(async () => {\r\n    let doc: any;\r\n\r\n    if (documentId === undefined) {\r\n      doc = await documentManager.create(typedUid, {\r\n        data: sanitizedData,\r\n        ...sanitizedQuery,\r\n        locale: resolvedLocale,\r\n      });\r\n    } else {\r\n      doc = await documentManager.update(documentId, typedUid, {\r\n        data: sanitizedData,\r\n        populate,\r\n        locale: resolvedLocale,\r\n      });\r\n    }\r\n\r\n    return sanitizeFormatShape(permissionChecker, typedUid, doc);\r\n  });\r\n\r\n  return ok(formatted as Record<string, unknown>);\r\n};\r\n\r\n// ---------------------------------------------------------------------------\r\n// Handler factories\r\n// ---------------------------------------------------------------------------\r\n\r\n/**\r\n * Creates a handler for reading the single-type document.\r\n * Returns available locale metadata when the requested locale version does not exist.\r\n * Enforces RBAC read permission.\r\n */\r\nexport const createSingleGetHandler =\r\n  (uid: UID.SingleType) =>\r\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\r\n  async ({ args }: { args: SingleGetArgs }): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n    const { userAbility } = context;\r\n    const { locale, status } = args;\r\n    // TODO: fix UID.SingleType assignability in @strapi/types\r\n    const typedUid = uid as UID.ContentType;\r\n\r\n    const permissionChecker = getService('permission-checker').create({\r\n      userAbility,\r\n      model: uid as string,\r\n    });\r\n\r\n    if (permissionChecker.cannot.read()) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const permissionQuery = await permissionChecker.sanitizedQuery.read({ locale, status });\r\n    const { locale: resolvedLocale, status: resolvedStatus } = await getDocumentLocaleAndStatus(\r\n      { locale, status },\r\n      uid\r\n    );\r\n\r\n    const populate = await getService('populate-builder')(typedUid)\r\n      .populateFromQuery(permissionQuery)\r\n      .populateDeep(Infinity)\r\n      .withPopulateOverride(getPopulateForLocalizations(typedUid))\r\n      .build();\r\n\r\n    const versionFindQuery: McpDocumentQuery = {\r\n      ...permissionQuery,\r\n      populate,\r\n      locale: resolvedLocale,\r\n      status: resolvedStatus,\r\n    };\r\n    const version = await getService('document-manager')\r\n      .findMany(versionFindQuery as McpFindManyParams, typedUid)\r\n      .then((docs: any[]) => docs[0]);\r\n\r\n    if (!version) {\r\n      if (permissionChecker.cannot.create()) {\r\n        throw new errors.ForbiddenError();\r\n      }\r\n\r\n      const document = await strapi.db.query(typedUid).findOne({});\r\n\r\n      if (!document) {\r\n        throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);\r\n      }\r\n\r\n      const { meta } = await formatDocumentWithMetadata(\r\n        permissionChecker,\r\n        typedUid,\r\n        {\r\n          documentId: document.documentId,\r\n          locale: resolvedLocale,\r\n          publishedAt: null,\r\n        } as Parameters<typeof formatDocumentWithMetadata>[2],\r\n        { availableLocales: true, availableStatus: false }\r\n      );\r\n\r\n      return ok({ data: {}, meta } as Record<string, unknown>);\r\n    }\r\n\r\n    if (permissionChecker.cannot.read(version)) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const result = await sanitizeFormatShape(permissionChecker, typedUid, version);\r\n\r\n    return ok(result as Record<string, unknown>);\r\n  };\r\n\r\n/**\r\n * Creates a handler for creating or updating the single-type document.\r\n * Delegates to `singleCreateOrUpdate`; enforces RBAC create/update permission.\r\n */\r\nexport const createSingleWriteHandler =\r\n  (uid: UID.SingleType) =>\r\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\r\n  async ({\r\n    args,\r\n  }: {\r\n    args: Record<string, unknown>;\r\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n    return singleCreateOrUpdate(strapi, uid, context, args as SingleWriteArgs);\r\n  };\r\n\r\n/**\r\n * Creates a handler for deleting the single-type document (or a specific locale).\r\n * Enforces RBAC delete permission on every locale version before deletion.\r\n */\r\nexport const createSingleDeleteHandler =\r\n  (uid: UID.SingleType) =>\r\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\r\n  async ({ args }: { args: SingleLocaleArgs }): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n    const { userAbility } = context;\r\n    const { locale } = args;\r\n    // TODO: fix UID.SingleType assignability in @strapi/types\r\n    const typedUid = uid as UID.ContentType;\r\n\r\n    const documentManager = getService('document-manager');\r\n    const permissionChecker = getService('permission-checker').create({\r\n      userAbility,\r\n      model: uid as string,\r\n    });\r\n\r\n    if (permissionChecker.cannot.delete()) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const sanitizedQuery = await permissionChecker.sanitizedQuery.delete({ locale });\r\n\r\n    const populate = await getService('populate-builder')(typedUid)\r\n      .populateFromQuery(sanitizedQuery)\r\n      .populateDeep(Infinity)\r\n      .withPopulateOverride(getPopulateForLocalizations(typedUid))\r\n      .build();\r\n\r\n    const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({ locale }, uid);\r\n\r\n    const isLocalized = isContentTypeLocalized(strapi, uid);\r\n\r\n    const localeForQuery = isLocalized === true ? resolvedLocale : undefined;\r\n\r\n    const documentLocales = await documentManager.findLocales(undefined, typedUid, {\r\n      populate,\r\n      locale: localeForQuery,\r\n    });\r\n\r\n    if (documentLocales.length === 0) {\r\n      throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);\r\n    }\r\n\r\n    for (const document of documentLocales) {\r\n      if (permissionChecker.cannot.delete(document)) {\r\n        throw new errors.ForbiddenError();\r\n      }\r\n    }\r\n\r\n    const deletedEntity = await documentManager.delete(documentLocales[0].documentId, typedUid, {\r\n      locale: localeForQuery,\r\n    });\r\n\r\n    // Delete returns `{ data }` without metadata — no status to compute, so sanitize + shape only.\r\n    const sanitizedResult = await permissionChecker.sanitizeOutput(deletedEntity);\r\n    const shapedResult = await shapeRelationsForMcp(typedUid, sanitizedResult);\r\n\r\n    return ok({ data: shapedResult } as Record<string, unknown>);\r\n  };\r\n\r\n/**\r\n * Creates a handler for publishing the single-type document draft.\r\n * Enforces RBAC publish permission; throws NotFound when the draft is missing.\r\n */\r\nexport const createSinglePublishHandler =\r\n  (uid: UID.SingleType) =>\r\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\r\n  async ({ args }: { args: SingleLocaleArgs }): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n    const { userAbility } = context;\r\n    const { locale } = args;\r\n    // TODO: fix UID.SingleType assignability in @strapi/types\r\n    const typedUid = uid as UID.ContentType;\r\n\r\n    const documentManager = getService('document-manager');\r\n    const permissionChecker = getService('permission-checker').create({\r\n      userAbility,\r\n      model: uid as string,\r\n    });\r\n\r\n    if (permissionChecker.cannot.publish()) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const publishedDocument = await strapi.db.transaction(async () => {\r\n      const sanitizedQuery = await permissionChecker.sanitizedQuery.publish({ locale });\r\n      const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({ locale }, uid);\r\n\r\n      const publishFindQuery: McpDocumentQuery = {\r\n        ...sanitizedQuery,\r\n        locale: resolvedLocale,\r\n        status: 'draft',\r\n      };\r\n      const document = await getService('document-manager')\r\n        .findMany(publishFindQuery as McpFindManyParams, typedUid)\r\n        .then((docs: any[]) => docs[0]);\r\n\r\n      if (!document) {\r\n        throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);\r\n      }\r\n\r\n      if (permissionChecker.cannot.publish(document)) {\r\n        throw new errors.ForbiddenError();\r\n      }\r\n\r\n      const publishResult = await documentManager.publish(document.documentId, typedUid, {\r\n        locale: resolvedLocale,\r\n      });\r\n\r\n      return publishResult?.at(0);\r\n    });\r\n\r\n    const result = await sanitizeFormatShape(permissionChecker, typedUid, publishedDocument);\r\n\r\n    return ok(result as Record<string, unknown>);\r\n  };\r\n\r\n/**\r\n * Creates a handler for unpublishing the single-type document.\r\n * Optionally discards the draft in the same transaction when `discardDraft` is true.\r\n * Enforces RBAC unpublish (and discard) permission.\r\n */\r\nexport const createSingleUnpublishHandler =\r\n  (uid: UID.SingleType) =>\r\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\r\n  async ({ args }: { args: SingleUnpublishArgs }): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n    const { userAbility } = context;\r\n    const { locale, discardDraft } = args;\r\n    // TODO: fix UID.SingleType assignability in @strapi/types\r\n    const typedUid = uid as UID.ContentType;\r\n\r\n    const documentManager = getService('document-manager');\r\n    const permissionChecker = getService('permission-checker').create({\r\n      userAbility,\r\n      model: uid as string,\r\n    });\r\n\r\n    if (permissionChecker.cannot.unpublish()) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    if (discardDraft === true && permissionChecker.cannot.discard()) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const sanitizedQuery = await permissionChecker.sanitizedQuery.unpublish({ locale });\r\n    const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({ locale }, uid);\r\n\r\n    const unpublishFindQuery: McpDocumentQuery = { ...sanitizedQuery, locale: resolvedLocale };\r\n    const document = await getService('document-manager')\r\n      .findMany(unpublishFindQuery as McpFindManyParams, typedUid)\r\n      .then((docs: any[]) => docs[0]);\r\n\r\n    if (!document) {\r\n      throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);\r\n    }\r\n\r\n    if (permissionChecker.cannot.unpublish(document)) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    if (discardDraft === true && permissionChecker.cannot.discard(document)) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const result = await strapi.db.transaction(async () => {\r\n      if (discardDraft === true) {\r\n        await documentManager.discardDraft(document.documentId, typedUid, {\r\n          locale: resolvedLocale,\r\n        });\r\n      }\r\n\r\n      return asyncPipe.pipe(\r\n        (doc: any) =>\r\n          documentManager.unpublish(doc.documentId, typedUid, { locale: resolvedLocale }),\r\n        (doc: unknown) => sanitizeFormatShape(permissionChecker, typedUid, doc)\r\n      )(document);\r\n    });\r\n\r\n    return ok(result as Record<string, unknown>);\r\n  };\r\n\r\n/**\r\n * Creates a handler for discarding the draft of the single-type document.\r\n * Restores the published version as the draft. Enforces RBAC discard permission.\r\n */\r\nexport const createSingleDiscardDraftHandler =\r\n  (uid: UID.SingleType) =>\r\n  (_strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\r\n  async ({ args }: { args: SingleLocaleArgs }): Promise<Modules.MCP.McpToolHandlerReturn> => {\r\n    const { userAbility } = context;\r\n    const { locale } = args;\r\n    // TODO: fix UID.SingleType assignability in @strapi/types\r\n    const typedUid = uid as UID.ContentType;\r\n\r\n    const documentManager = getService('document-manager');\r\n    const permissionChecker = getService('permission-checker').create({\r\n      userAbility,\r\n      model: uid as string,\r\n    });\r\n\r\n    if (permissionChecker.cannot.discard()) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const sanitizedQuery = await permissionChecker.sanitizedQuery.discard({ locale });\r\n    const { locale: resolvedLocale } = await getDocumentLocaleAndStatus({ locale }, uid);\r\n\r\n    const discardFindQuery: McpDocumentQuery = {\r\n      ...sanitizedQuery,\r\n      locale: resolvedLocale,\r\n      status: 'published',\r\n    };\r\n    const document = await getService('document-manager')\r\n      .findMany(discardFindQuery as McpFindManyParams, typedUid)\r\n      .then((docs: any[]) => docs[0]);\r\n\r\n    if (!document) {\r\n      throw new errors.NotFoundError(MCP_NOT_FOUND_DOCUMENT);\r\n    }\r\n\r\n    if (permissionChecker.cannot.discard(document)) {\r\n      throw new errors.ForbiddenError();\r\n    }\r\n\r\n    const discardedDocument = await asyncPipe.pipe(\r\n      (doc: any) =>\r\n        documentManager.discardDraft(doc.documentId, typedUid, { locale: resolvedLocale }),\r\n      (doc: unknown) => sanitizeFormatShape(permissionChecker, typedUid, doc)\r\n    )(document);\r\n\r\n    return ok(discardedDocument as Record<string, unknown>);\r\n  };\r\n"],"names":["singleCreateOrUpdate","strapi","uid","context","args","userAbility","user","data","locale","typedUid","documentManager","getService","permissionChecker","create","model","cannot","update","errors","ForbiddenError","sanitizedQuery","resolvedLocale","getDocumentLocaleAndStatus","populate","populateFromQuery","populateDeep","Infinity","withPopulateOverride","getPopulateForLocalizations","build","draftFindQuery","status","documentVersion","otherDocumentVersion","Promise","all","findMany","then","docs","db","query","findOne","select","documentId","sanitizeInput","sanitizeUpdateInput","sanitizeCreateInput","isEdition","undefined","sanitizedData","setCreatorFields","formatted","transaction","doc","sanitizeFormatShape","ok","createSingleGetHandler","read","permissionQuery","resolvedStatus","versionFindQuery","version","document","NotFoundError","MCP_NOT_FOUND_DOCUMENT","meta","formatDocumentWithMetadata","publishedAt","availableLocales","availableStatus","result","createSingleWriteHandler","createSingleDeleteHandler","delete","isLocalized","isContentTypeLocalized","localeForQuery","documentLocales","findLocales","length","deletedEntity","sanitizedResult","sanitizeOutput","shapedResult","shapeRelationsForMcp","createSinglePublishHandler","publish","publishedDocument","publishFindQuery","publishResult","at","createSingleUnpublishHandler","discardDraft","unpublish","discard","unpublishFindQuery","asyncPipe","pipe","createSingleDiscardDraftHandler","_strapi","discardFindQuery","discardedDocument"],"mappings":";;;;;;;;;;AAiCA;AACA;AACA;AAEA;;;;AAIC,IACM,MAAMA,oBAAAA,GAAuB,OAClCC,MAAAA,EACAC,KACAC,OAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEC,WAAW,EAAEC,IAAI,EAAE,GAAGH,OAAAA;AAC9B,IAAA,MAAM,EAAEI,IAAI,EAAEC,MAAM,EAAE,GAAGJ,IAAAA;;AAEzB,IAAA,MAAMK,QAAAA,GAAWP,GAAAA;AAEjB,IAAA,MAAMQ,kBAAkBC,UAAAA,CAAW,kBAAA,CAAA;AACnC,IAAA,MAAMC,iBAAAA,GAAoBD,UAAAA,CAAW,oBAAA,CAAA,CAAsBE,MAAM,CAAC;AAChER,QAAAA,WAAAA;QACAS,KAAAA,EAAOZ;AACT,KAAA,CAAA;IAEA,IAAIU,iBAAAA,CAAkBG,MAAM,CAACF,MAAM,MAAMD,iBAAAA,CAAkBG,MAAM,CAACC,MAAM,EAAA,EAAI;QAC1E,MAAM,IAAIC,OAAOC,cAAc,EAAA;AACjC,IAAA;AAEA,IAAA,MAAMC,iBAAiB,MAAMP,iBAAAA,CAAkBO,cAAc,CAACH,MAAM,CAAC;AAAER,QAAAA;AAAO,KAAA,CAAA;AAC9E,IAAA,MAAM,EAAEA,MAAAA,EAAQY,cAAc,EAAE,GAAG,MAAMC,0BAAAA,CAA2B;AAAEb,QAAAA;KAAO,EAAGN,GAAAA,CAAAA;AAEhF,IAAA,MAAMoB,QAAAA,GAAW,MAAMX,UAAAA,CAAW,kBAAA,CAAA,CAAoBF,UACnDc,iBAAiB,CAACJ,cAAAA,CAAAA,CAClBK,YAAY,CAACC,QAAAA,CAAAA,CACbC,oBAAoB,CAACC,2BAAAA,CAA4BlB,WACjDmB,KAAK,EAAA;AAER,IAAA,MAAMC,cAAAA,GAAmC;AACvC,QAAA,GAAGV,cAAc;AACjBG,QAAAA,QAAAA;QACAd,MAAAA,EAAQY,cAAAA;QACRU,MAAAA,EAAQ;AACV,KAAA;AACA,IAAA,MAAM,CAACC,eAAAA,EAAiBC,oBAAAA,CAAqB,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;QAChExB,eAAAA,CACGyB,QAAQ,CAACN,cAAAA,EAAqCpB,QAAAA,CAAAA,CAC9C2B,IAAI,CAAC,CAACC,IAAAA,GAAgBA,IAAI,CAAC,CAAA,CAAE,CAAA;AAChCpC,QAAAA,MAAAA,CAAOqC,EAAE,CAACC,KAAK,CAAC9B,QAAAA,CAAAA,CAAU+B,OAAO,CAAC;YAAEC,MAAAA,EAAQ;AAAC,gBAAA;AAAa;AAAC,SAAA;AAC5D,KAAA,CAAA;AAED,IAAA,MAAMC,aAAaV,oBAAAA,EAAsBU,UAAAA;AAEzC,IAAA,IAAIX,eAAAA,EAAiB;AACnB,QAAA,IAAInB,iBAAAA,CAAkBG,MAAM,CAACC,MAAM,CAACe,eAAAA,CAAAA,EAAkB;YACpD,MAAM,IAAId,OAAOC,cAAc,EAAA;AACjC,QAAA;AACF,IAAA,CAAA,MAAO,IAAIN,iBAAAA,CAAkBG,MAAM,CAACF,MAAM,EAAA,EAAI;QAC5C,MAAM,IAAII,OAAOC,cAAc,EAAA;AACjC,IAAA;AAEA,IAAA,MAAMyB,gBAAgBZ,eAAAA,GAClBnB,iBAAAA,CAAkBgC,mBAAmB,CAACb,eAAAA,CAAAA,GACtCnB,kBAAkBiC,mBAAmB;IAEzC,MAAMC,SAAAA,GAAYf,eAAAA,KAAoB,IAAA,IAAQA,eAAAA,KAAoBgB,SAAAA;AAClE,IAAA,MAAMC,gBAAgBC,gBAAAA,CAAiB;AAAE3C,QAAAA,IAAAA;AAAMwC,QAAAA;AAAU,KAAA,CAAA,CAAG,MAAMH,aAAAA,CAAcpC,IAAAA,CAAAA,CAAAA;AAKhF,IAAA,MAAM2C,YAAY,MAAMjD,MAAAA,CAAOqC,EAAE,CAACa,WAAW,CAAC,UAAA;QAC5C,IAAIC,GAAAA;AAEJ,QAAA,IAAIV,eAAeK,SAAAA,EAAW;AAC5BK,YAAAA,GAAAA,GAAM,MAAM1C,eAAAA,CAAgBG,MAAM,CAACJ,QAAAA,EAAU;gBAC3CF,IAAAA,EAAMyC,aAAAA;AACN,gBAAA,GAAG7B,cAAc;gBACjBX,MAAAA,EAAQY;AACV,aAAA,CAAA;QACF,CAAA,MAAO;AACLgC,YAAAA,GAAAA,GAAM,MAAM1C,eAAAA,CAAgBM,MAAM,CAAC0B,YAAYjC,QAAAA,EAAU;gBACvDF,IAAAA,EAAMyC,aAAAA;AACN1B,gBAAAA,QAAAA;gBACAd,MAAAA,EAAQY;AACV,aAAA,CAAA;AACF,QAAA;QAEA,OAAOiC,mBAAAA,CAAoBzC,mBAAmBH,QAAAA,EAAU2C,GAAAA,CAAAA;AAC1D,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOE,EAAAA,CAAGJ,SAAAA,CAAAA;AACZ;AAEA;AACA;AACA;AAEA;;;;IAKO,MAAMK,sBAAAA,GACX,CAACrD,GAAAA,GACD,CAACD,MAAAA,EAAqBE,OAAAA,GACtB,OAAO,EAAEC,IAAI,EAA2B,GAAA;YACtC,MAAM,EAAEC,WAAW,EAAE,GAAGF,OAAAA;AACxB,YAAA,MAAM,EAAEK,MAAM,EAAEsB,MAAM,EAAE,GAAG1B,IAAAA;;AAE3B,YAAA,MAAMK,QAAAA,GAAWP,GAAAA;AAEjB,YAAA,MAAMU,iBAAAA,GAAoBD,UAAAA,CAAW,oBAAA,CAAA,CAAsBE,MAAM,CAAC;AAChER,gBAAAA,WAAAA;gBACAS,KAAAA,EAAOZ;AACT,aAAA,CAAA;AAEA,YAAA,IAAIU,iBAAAA,CAAkBG,MAAM,CAACyC,IAAI,EAAA,EAAI;gBACnC,MAAM,IAAIvC,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMuC,kBAAkB,MAAM7C,iBAAAA,CAAkBO,cAAc,CAACqC,IAAI,CAAC;AAAEhD,gBAAAA,MAAAA;AAAQsB,gBAAAA;AAAO,aAAA,CAAA;YACrF,MAAM,EAAEtB,QAAQY,cAAc,EAAEU,QAAQ4B,cAAc,EAAE,GAAG,MAAMrC,0BAAAA,CAC/D;AAAEb,gBAAAA,MAAAA;AAAQsB,gBAAAA;aAAO,EACjB5B,GAAAA,CAAAA;AAGF,YAAA,MAAMoB,QAAAA,GAAW,MAAMX,UAAAA,CAAW,kBAAA,CAAA,CAAoBF,UACnDc,iBAAiB,CAACkC,eAAAA,CAAAA,CAClBjC,YAAY,CAACC,QAAAA,CAAAA,CACbC,oBAAoB,CAACC,2BAAAA,CAA4BlB,WACjDmB,KAAK,EAAA;AAER,YAAA,MAAM+B,gBAAAA,GAAqC;AACzC,gBAAA,GAAGF,eAAe;AAClBnC,gBAAAA,QAAAA;gBACAd,MAAAA,EAAQY,cAAAA;gBACRU,MAAAA,EAAQ4B;AACV,aAAA;AACA,YAAA,MAAME,OAAAA,GAAU,MAAMjD,UAAAA,CAAW,kBAAA,CAAA,CAC9BwB,QAAQ,CAACwB,gBAAAA,EAAuClD,QAAAA,CAAAA,CAChD2B,IAAI,CAAC,CAACC,IAAAA,GAAgBA,IAAI,CAAC,CAAA,CAAE,CAAA;AAEhC,YAAA,IAAI,CAACuB,OAAAA,EAAS;AACZ,gBAAA,IAAIhD,iBAAAA,CAAkBG,MAAM,CAACF,MAAM,EAAA,EAAI;oBACrC,MAAM,IAAII,OAAOC,cAAc,EAAA;AACjC,gBAAA;gBAEA,MAAM2C,QAAAA,GAAW,MAAM5D,MAAAA,CAAOqC,EAAE,CAACC,KAAK,CAAC9B,QAAAA,CAAAA,CAAU+B,OAAO,CAAC,EAAC,CAAA;AAE1D,gBAAA,IAAI,CAACqB,QAAAA,EAAU;oBACb,MAAM,IAAI5C,MAAAA,CAAO6C,aAAa,CAACC,sBAAAA,CAAAA;AACjC,gBAAA;AAEA,gBAAA,MAAM,EAAEC,IAAI,EAAE,GAAG,MAAMC,0BAAAA,CACrBrD,mBACAH,QAAAA,EACA;AACEiC,oBAAAA,UAAAA,EAAYmB,SAASnB,UAAU;oBAC/BlC,MAAAA,EAAQY,cAAAA;oBACR8C,WAAAA,EAAa;iBACf,EACA;oBAAEC,gBAAAA,EAAkB,IAAA;oBAAMC,eAAAA,EAAiB;AAAM,iBAAA,CAAA;AAGnD,gBAAA,OAAOd,EAAAA,CAAG;AAAE/C,oBAAAA,IAAAA,EAAM,EAAC;AAAGyD,oBAAAA;AAAK,iBAAA,CAAA;AAC7B,YAAA;AAEA,YAAA,IAAIpD,iBAAAA,CAAkBG,MAAM,CAACyC,IAAI,CAACI,OAAAA,CAAAA,EAAU;gBAC1C,MAAM,IAAI3C,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMmD,MAAAA,GAAS,MAAMhB,mBAAAA,CAAoBzC,iBAAAA,EAAmBH,QAAAA,EAAUmD,OAAAA,CAAAA;AAEtE,YAAA,OAAON,EAAAA,CAAGe,MAAAA,CAAAA;QACZ;AAEF;;;IAIO,MAAMC,wBAAAA,GACX,CAACpE,GAAAA,GACD,CAACD,MAAAA,EAAqBE,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;YACC,OAAOJ,oBAAAA,CAAqBC,MAAAA,EAAQC,GAAAA,EAAKC,OAAAA,EAASC,IAAAA,CAAAA;QACpD;AAEF;;;IAIO,MAAMmE,yBAAAA,GACX,CAACrE,GAAAA,GACD,CAACD,MAAAA,EAAqBE,OAAAA,GACtB,OAAO,EAAEC,IAAI,EAA8B,GAAA;YACzC,MAAM,EAAEC,WAAW,EAAE,GAAGF,OAAAA;YACxB,MAAM,EAAEK,MAAM,EAAE,GAAGJ,IAAAA;;AAEnB,YAAA,MAAMK,QAAAA,GAAWP,GAAAA;AAEjB,YAAA,MAAMQ,kBAAkBC,UAAAA,CAAW,kBAAA,CAAA;AACnC,YAAA,MAAMC,iBAAAA,GAAoBD,UAAAA,CAAW,oBAAA,CAAA,CAAsBE,MAAM,CAAC;AAChER,gBAAAA,WAAAA;gBACAS,KAAAA,EAAOZ;AACT,aAAA,CAAA;AAEA,YAAA,IAAIU,iBAAAA,CAAkBG,MAAM,CAACyD,MAAM,EAAA,EAAI;gBACrC,MAAM,IAAIvD,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMC,iBAAiB,MAAMP,iBAAAA,CAAkBO,cAAc,CAACqD,MAAM,CAAC;AAAEhE,gBAAAA;AAAO,aAAA,CAAA;AAE9E,YAAA,MAAMc,QAAAA,GAAW,MAAMX,UAAAA,CAAW,kBAAA,CAAA,CAAoBF,UACnDc,iBAAiB,CAACJ,cAAAA,CAAAA,CAClBK,YAAY,CAACC,QAAAA,CAAAA,CACbC,oBAAoB,CAACC,2BAAAA,CAA4BlB,WACjDmB,KAAK,EAAA;AAER,YAAA,MAAM,EAAEpB,MAAAA,EAAQY,cAAc,EAAE,GAAG,MAAMC,0BAAAA,CAA2B;AAAEb,gBAAAA;aAAO,EAAGN,GAAAA,CAAAA;YAEhF,MAAMuE,WAAAA,GAAcC,uBAAuBzE,MAAAA,EAAQC,GAAAA,CAAAA;YAEnD,MAAMyE,cAAAA,GAAiBF,WAAAA,KAAgB,IAAA,GAAOrD,cAAAA,GAAiB2B,SAAAA;AAE/D,YAAA,MAAM6B,kBAAkB,MAAMlE,eAAAA,CAAgBmE,WAAW,CAAC9B,WAAWtC,QAAAA,EAAU;AAC7Ea,gBAAAA,QAAAA;gBACAd,MAAAA,EAAQmE;AACV,aAAA,CAAA;YAEA,IAAIC,eAAAA,CAAgBE,MAAM,KAAK,CAAA,EAAG;gBAChC,MAAM,IAAI7D,MAAAA,CAAO6C,aAAa,CAACC,sBAAAA,CAAAA;AACjC,YAAA;YAEA,KAAK,MAAMF,YAAYe,eAAAA,CAAiB;AACtC,gBAAA,IAAIhE,iBAAAA,CAAkBG,MAAM,CAACyD,MAAM,CAACX,QAAAA,CAAAA,EAAW;oBAC7C,MAAM,IAAI5C,OAAOC,cAAc,EAAA;AACjC,gBAAA;AACF,YAAA;YAEA,MAAM6D,aAAAA,GAAgB,MAAMrE,eAAAA,CAAgB8D,MAAM,CAACI,eAAe,CAAC,CAAA,CAAE,CAAClC,UAAU,EAAEjC,QAAAA,EAAU;gBAC1FD,MAAAA,EAAQmE;AACV,aAAA,CAAA;;AAGA,YAAA,MAAMK,eAAAA,GAAkB,MAAMpE,iBAAAA,CAAkBqE,cAAc,CAACF,aAAAA,CAAAA;YAC/D,MAAMG,YAAAA,GAAe,MAAMC,oBAAAA,CAAqB1E,QAAAA,EAAUuE,eAAAA,CAAAA;AAE1D,YAAA,OAAO1B,EAAAA,CAAG;gBAAE/C,IAAAA,EAAM2E;AAAa,aAAA,CAAA;QACjC;AAEF;;;IAIO,MAAME,0BAAAA,GACX,CAAClF,GAAAA,GACD,CAACD,MAAAA,EAAqBE,OAAAA,GACtB,OAAO,EAAEC,IAAI,EAA8B,GAAA;YACzC,MAAM,EAAEC,WAAW,EAAE,GAAGF,OAAAA;YACxB,MAAM,EAAEK,MAAM,EAAE,GAAGJ,IAAAA;;AAEnB,YAAA,MAAMK,QAAAA,GAAWP,GAAAA;AAEjB,YAAA,MAAMQ,kBAAkBC,UAAAA,CAAW,kBAAA,CAAA;AACnC,YAAA,MAAMC,iBAAAA,GAAoBD,UAAAA,CAAW,oBAAA,CAAA,CAAsBE,MAAM,CAAC;AAChER,gBAAAA,WAAAA;gBACAS,KAAAA,EAAOZ;AACT,aAAA,CAAA;AAEA,YAAA,IAAIU,iBAAAA,CAAkBG,MAAM,CAACsE,OAAO,EAAA,EAAI;gBACtC,MAAM,IAAIpE,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMoE,oBAAoB,MAAMrF,MAAAA,CAAOqC,EAAE,CAACa,WAAW,CAAC,UAAA;AACpD,gBAAA,MAAMhC,iBAAiB,MAAMP,iBAAAA,CAAkBO,cAAc,CAACkE,OAAO,CAAC;AAAE7E,oBAAAA;AAAO,iBAAA,CAAA;AAC/E,gBAAA,MAAM,EAAEA,MAAAA,EAAQY,cAAc,EAAE,GAAG,MAAMC,0BAAAA,CAA2B;AAAEb,oBAAAA;iBAAO,EAAGN,GAAAA,CAAAA;AAEhF,gBAAA,MAAMqF,gBAAAA,GAAqC;AACzC,oBAAA,GAAGpE,cAAc;oBACjBX,MAAAA,EAAQY,cAAAA;oBACRU,MAAAA,EAAQ;AACV,iBAAA;AACA,gBAAA,MAAM+B,QAAAA,GAAW,MAAMlD,UAAAA,CAAW,kBAAA,CAAA,CAC/BwB,QAAQ,CAACoD,gBAAAA,EAAuC9E,QAAAA,CAAAA,CAChD2B,IAAI,CAAC,CAACC,IAAAA,GAAgBA,IAAI,CAAC,CAAA,CAAE,CAAA;AAEhC,gBAAA,IAAI,CAACwB,QAAAA,EAAU;oBACb,MAAM,IAAI5C,MAAAA,CAAO6C,aAAa,CAACC,sBAAAA,CAAAA;AACjC,gBAAA;AAEA,gBAAA,IAAInD,iBAAAA,CAAkBG,MAAM,CAACsE,OAAO,CAACxB,QAAAA,CAAAA,EAAW;oBAC9C,MAAM,IAAI5C,OAAOC,cAAc,EAAA;AACjC,gBAAA;gBAEA,MAAMsE,aAAAA,GAAgB,MAAM9E,eAAAA,CAAgB2E,OAAO,CAACxB,QAAAA,CAASnB,UAAU,EAAEjC,QAAAA,EAAU;oBACjFD,MAAAA,EAAQY;AACV,iBAAA,CAAA;AAEA,gBAAA,OAAOoE,eAAeC,EAAAA,CAAG,CAAA,CAAA;AAC3B,YAAA,CAAA,CAAA;AAEA,YAAA,MAAMpB,MAAAA,GAAS,MAAMhB,mBAAAA,CAAoBzC,iBAAAA,EAAmBH,QAAAA,EAAU6E,iBAAAA,CAAAA;AAEtE,YAAA,OAAOhC,EAAAA,CAAGe,MAAAA,CAAAA;QACZ;AAEF;;;;IAKO,MAAMqB,4BAAAA,GACX,CAACxF,GAAAA,GACD,CAACD,MAAAA,EAAqBE,OAAAA,GACtB,OAAO,EAAEC,IAAI,EAAiC,GAAA;YAC5C,MAAM,EAAEC,WAAW,EAAE,GAAGF,OAAAA;AACxB,YAAA,MAAM,EAAEK,MAAM,EAAEmF,YAAY,EAAE,GAAGvF,IAAAA;;AAEjC,YAAA,MAAMK,QAAAA,GAAWP,GAAAA;AAEjB,YAAA,MAAMQ,kBAAkBC,UAAAA,CAAW,kBAAA,CAAA;AACnC,YAAA,MAAMC,iBAAAA,GAAoBD,UAAAA,CAAW,oBAAA,CAAA,CAAsBE,MAAM,CAAC;AAChER,gBAAAA,WAAAA;gBACAS,KAAAA,EAAOZ;AACT,aAAA,CAAA;AAEA,YAAA,IAAIU,iBAAAA,CAAkBG,MAAM,CAAC6E,SAAS,EAAA,EAAI;gBACxC,MAAM,IAAI3E,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,IAAIyE,iBAAiB,IAAA,IAAQ/E,iBAAAA,CAAkBG,MAAM,CAAC8E,OAAO,EAAA,EAAI;gBAC/D,MAAM,IAAI5E,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMC,iBAAiB,MAAMP,iBAAAA,CAAkBO,cAAc,CAACyE,SAAS,CAAC;AAAEpF,gBAAAA;AAAO,aAAA,CAAA;AACjF,YAAA,MAAM,EAAEA,MAAAA,EAAQY,cAAc,EAAE,GAAG,MAAMC,0BAAAA,CAA2B;AAAEb,gBAAAA;aAAO,EAAGN,GAAAA,CAAAA;AAEhF,YAAA,MAAM4F,kBAAAA,GAAuC;AAAE,gBAAA,GAAG3E,cAAc;gBAAEX,MAAAA,EAAQY;AAAe,aAAA;AACzF,YAAA,MAAMyC,QAAAA,GAAW,MAAMlD,UAAAA,CAAW,kBAAA,CAAA,CAC/BwB,QAAQ,CAAC2D,kBAAAA,EAAyCrF,QAAAA,CAAAA,CAClD2B,IAAI,CAAC,CAACC,IAAAA,GAAgBA,IAAI,CAAC,CAAA,CAAE,CAAA;AAEhC,YAAA,IAAI,CAACwB,QAAAA,EAAU;gBACb,MAAM,IAAI5C,MAAAA,CAAO6C,aAAa,CAACC,sBAAAA,CAAAA;AACjC,YAAA;AAEA,YAAA,IAAInD,iBAAAA,CAAkBG,MAAM,CAAC6E,SAAS,CAAC/B,QAAAA,CAAAA,EAAW;gBAChD,MAAM,IAAI5C,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,IAAIyE,iBAAiB,IAAA,IAAQ/E,iBAAAA,CAAkBG,MAAM,CAAC8E,OAAO,CAAChC,QAAAA,CAAAA,EAAW;gBACvE,MAAM,IAAI5C,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMmD,SAAS,MAAMpE,MAAAA,CAAOqC,EAAE,CAACa,WAAW,CAAC,UAAA;AACzC,gBAAA,IAAIwC,iBAAiB,IAAA,EAAM;AACzB,oBAAA,MAAMjF,gBAAgBiF,YAAY,CAAC9B,QAAAA,CAASnB,UAAU,EAAEjC,QAAAA,EAAU;wBAChED,MAAAA,EAAQY;AACV,qBAAA,CAAA;AACF,gBAAA;gBAEA,OAAO2E,KAAAA,CAAUC,IAAI,CACnB,CAAC5C,GAAAA,GACC1C,eAAAA,CAAgBkF,SAAS,CAACxC,GAAAA,CAAIV,UAAU,EAAEjC,QAAAA,EAAU;wBAAED,MAAAA,EAAQY;AAAe,qBAAA,CAAA,EAC/E,CAACgC,GAAAA,GAAiBC,mBAAAA,CAAoBzC,iBAAAA,EAAmBH,UAAU2C,GAAAA,CAAAA,CAAAA,CACnES,QAAAA,CAAAA;AACJ,YAAA,CAAA,CAAA;AAEA,YAAA,OAAOP,EAAAA,CAAGe,MAAAA,CAAAA;QACZ;AAEF;;;IAIO,MAAM4B,+BAAAA,GACX,CAAC/F,GAAAA,GACD,CAACgG,OAAAA,EAAsB/F,OAAAA,GACvB,OAAO,EAAEC,IAAI,EAA8B,GAAA;YACzC,MAAM,EAAEC,WAAW,EAAE,GAAGF,OAAAA;YACxB,MAAM,EAAEK,MAAM,EAAE,GAAGJ,IAAAA;;AAEnB,YAAA,MAAMK,QAAAA,GAAWP,GAAAA;AAEjB,YAAA,MAAMQ,kBAAkBC,UAAAA,CAAW,kBAAA,CAAA;AACnC,YAAA,MAAMC,iBAAAA,GAAoBD,UAAAA,CAAW,oBAAA,CAAA,CAAsBE,MAAM,CAAC;AAChER,gBAAAA,WAAAA;gBACAS,KAAAA,EAAOZ;AACT,aAAA,CAAA;AAEA,YAAA,IAAIU,iBAAAA,CAAkBG,MAAM,CAAC8E,OAAO,EAAA,EAAI;gBACtC,MAAM,IAAI5E,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMC,iBAAiB,MAAMP,iBAAAA,CAAkBO,cAAc,CAAC0E,OAAO,CAAC;AAAErF,gBAAAA;AAAO,aAAA,CAAA;AAC/E,YAAA,MAAM,EAAEA,MAAAA,EAAQY,cAAc,EAAE,GAAG,MAAMC,0BAAAA,CAA2B;AAAEb,gBAAAA;aAAO,EAAGN,GAAAA,CAAAA;AAEhF,YAAA,MAAMiG,gBAAAA,GAAqC;AACzC,gBAAA,GAAGhF,cAAc;gBACjBX,MAAAA,EAAQY,cAAAA;gBACRU,MAAAA,EAAQ;AACV,aAAA;AACA,YAAA,MAAM+B,QAAAA,GAAW,MAAMlD,UAAAA,CAAW,kBAAA,CAAA,CAC/BwB,QAAQ,CAACgE,gBAAAA,EAAuC1F,QAAAA,CAAAA,CAChD2B,IAAI,CAAC,CAACC,IAAAA,GAAgBA,IAAI,CAAC,CAAA,CAAE,CAAA;AAEhC,YAAA,IAAI,CAACwB,QAAAA,EAAU;gBACb,MAAM,IAAI5C,MAAAA,CAAO6C,aAAa,CAACC,sBAAAA,CAAAA;AACjC,YAAA;AAEA,YAAA,IAAInD,iBAAAA,CAAkBG,MAAM,CAAC8E,OAAO,CAAChC,QAAAA,CAAAA,EAAW;gBAC9C,MAAM,IAAI5C,OAAOC,cAAc,EAAA;AACjC,YAAA;AAEA,YAAA,MAAMkF,iBAAAA,GAAoB,MAAML,KAAAA,CAAUC,IAAI,CAC5C,CAAC5C,GAAAA,GACC1C,eAAAA,CAAgBiF,YAAY,CAACvC,GAAAA,CAAIV,UAAU,EAAEjC,QAAAA,EAAU;oBAAED,MAAAA,EAAQY;AAAe,iBAAA,CAAA,EAClF,CAACgC,GAAAA,GAAiBC,mBAAAA,CAAoBzC,iBAAAA,EAAmBH,UAAU2C,GAAAA,CAAAA,CAAAA,CACnES,QAAAA,CAAAA;AAEF,YAAA,OAAOP,EAAAA,CAAG8C,iBAAAA,CAAAA;QACZ;;;;"}

package/dist/server/mcp/permissions.js

@@ -0,0 +1,138 @@
+'use strict';
+
+var strapiUtils = require('@strapi/utils');
+var index = require('../utils/index.js');
+
+/** Returns true if the content type identified by `uid` has the i18n `localized` plugin option enabled. */ const isContentTypeLocalized = (strapi, uid)=>{
+    const ct = strapi.contentTypes?.[uid];
+    if (ct === undefined) return false;
+    return ct.pluginOptions?.i18n?.localized === true;
+};
+const localeDefaultDescription = (defaultLocale, allowedLocales)=>{
+    if (defaultLocale !== null && allowedLocales.includes(defaultLocale)) {
+        return `Defaults to "${defaultLocale}".`;
+    }
+    return 'Defaults to the default locale.';
+};
+/**
+ * Builds the base locale Zod schema for a derived MCP tool input.
+ * When `localeCodes` is provided, constrains the field to a `z.enum` of available codes
+ * with an optional default; otherwise falls back to a plain optional string.
+ */ const buildLocaleSchema = (localeCodes, defaultLocale)=>{
+    if (localeCodes !== null && localeCodes.length > 0) {
+        let schema = strapiUtils.z.enum(localeCodes).optional();
+        if (defaultLocale !== null && localeCodes.includes(defaultLocale)) {
+            schema = schema.default(defaultLocale);
+        }
+        return schema.describe(`Locale code. Available: ${localeCodes.join(', ')}. ${localeDefaultDescription(defaultLocale, localeCodes)}`);
+    }
+    return strapiUtils.z.string().optional().describe('Locale code (e.g. "en", "fr"). Defaults to the default locale.');
+};
+/**
+ * Narrows the base locale schema to only locales the session is permitted to access
+ * for the given action + uid combination.
+ *
+ * Returns the base schema unchanged when:
+ *   - localeCodes is null (i18n not installed)
+ *   - the content type is not localized
+ *   - all installed locales are permitted for this action
+ *
+ * Returns z.never().optional() when no locales are permitted, keeping the tool
+ * registered but signalling no valid locale input.
+ */ const resolvePermittedLocaleSchema = (strapi, context, action, uid, localeCodes, defaultLocale, baseLocaleSchema)=>{
+    if (localeCodes === null) return baseLocaleSchema;
+    const isLocalized = isContentTypeLocalized(strapi, uid);
+    if (isLocalized === false) {
+        return strapiUtils.z.string().optional().describe('This content type is not localized. Locale is ignored.');
+    }
+    const permissionChecker = index.getService('permission-checker').create({
+        userAbility: context.userAbility,
+        model: uid
+    });
+    const permitted = getPermittedLocales(permissionChecker, action, localeCodes);
+    if (permitted === null) return baseLocaleSchema;
+    if (permitted.length === 0) {
+        return strapiUtils.z.never().optional().describe('No locale access for this action.');
+    }
+    let schema = strapiUtils.z.enum(permitted).optional();
+    if (defaultLocale !== null && permitted.includes(defaultLocale)) {
+        schema = schema.default(defaultLocale);
+    }
+    return schema.describe(`Locale code. Permitted: ${permitted.join(', ')}. ${localeDefaultDescription(defaultLocale, permitted)}`);
+};
+/**
+ * Recursively resolves leaf field paths for a component, matching the nested
+ * path format used by CASL rules (e.g. 'SEO.title', 'SEO.og.image').
+ *
+ * The admin RBAC system decomposes component attrs into nested paths and removes
+ * the parent key — so checking `ability.can(action, uid, 'SEO')` returns false
+ * even when the user has full access to the component's sub-fields.
+ */ const getComponentLeafPaths = (strapi, componentUid, prefix, visited = new Set())=>{
+    if (visited.has(componentUid) === true) return [
+        prefix
+    ];
+    const component = strapi.components[componentUid];
+    if (component === undefined) return [
+        prefix
+    ];
+    visited.add(componentUid);
+    const paths = [];
+    for (const [key, attr] of Object.entries(component.attributes)){
+        if (key === 'id') {
+            continue;
+        }
+        const fieldPath = `${prefix}.${key}`;
+        if (attr.type === 'component' && attr.component !== undefined) {
+            paths.push(...getComponentLeafPaths(strapi, attr.component, fieldPath, visited));
+        } else {
+            paths.push(fieldPath);
+        }
+    }
+    visited.delete(componentUid);
+    return paths.length > 0 ? paths : [
+        prefix
+    ];
+};
+/**
+ * Returns the subset of attribute keys the session may access for `action` on `uid`.
+ * Returns `null` when all fields are permitted (caller should skip field filtering).
+ * Component attributes are resolved to their nested leaf paths before checking CASL rules.
+ */ const getPermittedFields = (strapi, userAbility, action, uid, attributes)=>{
+    const allKeys = Object.keys(attributes);
+    const permitted = allKeys.filter((key)=>{
+        if (userAbility.can(action, uid, key) === true) return true;
+        // Component attrs: CASL rules use nested paths (e.g. 'SEO.title').
+        // Check if at least one sub-field path is permitted.
+        const attr = attributes[key];
+        if (attr.type === 'component' && attr.component !== undefined) {
+            const leafPaths = getComponentLeafPaths(strapi, attr.component, key);
+            return leafPaths.some((path)=>userAbility.can(action, uid, path) === true);
+        }
+        return false;
+    });
+    if (permitted.length === allKeys.length) {
+        return null;
+    }
+    return new Set(permitted);
+};
+/**
+ * Filters `localeCodes` to only those the session may access for `action`.
+ * Returns `null` when all locales are permitted (caller should use the unfiltered base schema).
+ * Returns an empty tuple-like array when no locale is permitted.
+ */ const getPermittedLocales = (permissionChecker, action, localeCodes)=>{
+    const permitted = localeCodes.filter((code)=>permissionChecker.cannot(action, {
+            locale: code
+        }) === false);
+    if (permitted.length === localeCodes.length) {
+        return null;
+    }
+    return permitted.length > 0 ? permitted : [];
+};
+
+exports.buildLocaleSchema = buildLocaleSchema;
+exports.getComponentLeafPaths = getComponentLeafPaths;
+exports.getPermittedFields = getPermittedFields;
+exports.getPermittedLocales = getPermittedLocales;
+exports.isContentTypeLocalized = isContentTypeLocalized;
+exports.resolvePermittedLocaleSchema = resolvePermittedLocaleSchema;
+//# sourceMappingURL=permissions.js.map

package/dist/server/mcp/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sources":["../../../server/src/mcp/permissions.ts"],"sourcesContent":["import { z } from '@strapi/utils';\r\nimport type { Core, Modules, Struct, UID } from '@strapi/types';\r\n\r\nimport { getService } from '../utils';\r\nimport type { ContentManagerModelForMcp } from './types';\r\n\r\n/** Returns true if the content type identified by `uid` has the i18n `localized` plugin option enabled. */\r\nexport const isContentTypeLocalized = (strapi: Core.Strapi, uid: string): boolean => {\r\n  const ct = strapi.contentTypes?.[uid as UID.ContentType];\r\n  if (ct === undefined) return false;\r\n  return (\r\n    (ct as { pluginOptions?: { i18n?: { localized?: boolean } } }).pluginOptions?.i18n\r\n      ?.localized === true\r\n  );\r\n};\r\n\r\nconst localeDefaultDescription = (\r\n  defaultLocale: string | null,\r\n  allowedLocales: readonly string[]\r\n): string => {\r\n  if (defaultLocale !== null && allowedLocales.includes(defaultLocale)) {\r\n    return `Defaults to \"${defaultLocale}\".`;\r\n  }\r\n\r\n  return 'Defaults to the default locale.';\r\n};\r\n\r\n/**\r\n * Builds the base locale Zod schema for a derived MCP tool input.\r\n * When `localeCodes` is provided, constrains the field to a `z.enum` of available codes\r\n * with an optional default; otherwise falls back to a plain optional string.\r\n */\r\nexport const buildLocaleSchema = (\r\n  localeCodes: [string, ...string[]] | null,\r\n  defaultLocale: string | null\r\n): z.ZodTypeAny => {\r\n  if (localeCodes !== null && localeCodes.length > 0) {\r\n    let schema: z.ZodTypeAny = z.enum(localeCodes).optional();\r\n\r\n    if (defaultLocale !== null && localeCodes.includes(defaultLocale)) {\r\n      schema = schema.default(defaultLocale);\r\n    }\r\n\r\n    return schema.describe(\r\n      `Locale code. Available: ${localeCodes.join(', ')}. ${localeDefaultDescription(defaultLocale, localeCodes)}`\r\n    );\r\n  }\r\n\r\n  return z\r\n    .string()\r\n    .optional()\r\n    .describe('Locale code (e.g. \"en\", \"fr\"). Defaults to the default locale.');\r\n};\r\n\r\n/**\r\n * Narrows the base locale schema to only locales the session is permitted to access\r\n * for the given action + uid combination.\r\n *\r\n * Returns the base schema unchanged when:\r\n *   - localeCodes is null (i18n not installed)\r\n *   - the content type is not localized\r\n *   - all installed locales are permitted for this action\r\n *\r\n * Returns z.never().optional() when no locales are permitted, keeping the tool\r\n * registered but signalling no valid locale input.\r\n */\r\nexport const resolvePermittedLocaleSchema = (\r\n  strapi: Core.Strapi,\r\n  context: Modules.MCP.McpHandlerContext,\r\n  action: string,\r\n  uid: string,\r\n  localeCodes: [string, ...string[]] | null,\r\n  defaultLocale: string | null,\r\n  baseLocaleSchema: z.ZodTypeAny\r\n): z.ZodTypeAny => {\r\n  if (localeCodes === null) return baseLocaleSchema;\r\n\r\n  const isLocalized = isContentTypeLocalized(strapi, uid);\r\n  if (isLocalized === false) {\r\n    return z.string().optional().describe('This content type is not localized. Locale is ignored.');\r\n  }\r\n\r\n  const permissionChecker = getService('permission-checker').create({\r\n    userAbility: context.userAbility,\r\n    model: uid,\r\n  });\r\n  const permitted = getPermittedLocales(permissionChecker, action, localeCodes);\r\n  if (permitted === null) return baseLocaleSchema;\r\n  if (permitted.length === 0) {\r\n    return z.never().optional().describe('No locale access for this action.');\r\n  }\r\n\r\n  let schema: z.ZodTypeAny = z.enum(permitted).optional();\r\n\r\n  if (defaultLocale !== null && permitted.includes(defaultLocale)) {\r\n    schema = schema.default(defaultLocale);\r\n  }\r\n\r\n  return schema.describe(\r\n    `Locale code. Permitted: ${permitted.join(', ')}. ${localeDefaultDescription(defaultLocale, permitted)}`\r\n  );\r\n};\r\n\r\n/**\r\n * Recursively resolves leaf field paths for a component, matching the nested\r\n * path format used by CASL rules (e.g. 'SEO.title', 'SEO.og.image').\r\n *\r\n * The admin RBAC system decomposes component attrs into nested paths and removes\r\n * the parent key — so checking `ability.can(action, uid, 'SEO')` returns false\r\n * even when the user has full access to the component's sub-fields.\r\n */\r\nexport const getComponentLeafPaths = (\r\n  strapi: Core.Strapi,\r\n  componentUid: string,\r\n  prefix: string,\r\n  visited: Set<string> = new Set()\r\n): string[] => {\r\n  if (visited.has(componentUid) === true) return [prefix];\r\n\r\n  type ComponentEntry = { attributes: Record<string, { type: string; component?: string }> };\r\n  const component = (strapi.components as unknown as Record<string, ComponentEntry | undefined>)[\r\n    componentUid\r\n  ];\r\n  if (component === undefined) return [prefix];\r\n\r\n  visited.add(componentUid);\r\n  const paths: string[] = [];\r\n\r\n  for (const [key, attr] of Object.entries(component.attributes)) {\r\n    if (key === 'id') {\r\n      // skip system id field — it is not a user-facing permission path\r\n      // eslint-disable-next-line no-continue\r\n      continue;\r\n    }\r\n    const fieldPath = `${prefix}.${key}`;\r\n\r\n    if (attr.type === 'component' && attr.component !== undefined) {\r\n      paths.push(...getComponentLeafPaths(strapi, attr.component, fieldPath, visited));\r\n    } else {\r\n      paths.push(fieldPath);\r\n    }\r\n  }\r\n\r\n  visited.delete(componentUid);\r\n\r\n  return paths.length > 0 ? paths : [prefix];\r\n};\r\n\r\n/**\r\n * Returns the subset of attribute keys the session may access for `action` on `uid`.\r\n * Returns `null` when all fields are permitted (caller should skip field filtering).\r\n * Component attributes are resolved to their nested leaf paths before checking CASL rules.\r\n */\r\nexport const getPermittedFields = (\r\n  strapi: Core.Strapi,\r\n  userAbility: Modules.MCP.McpHandlerContext['userAbility'],\r\n  action: string,\r\n  uid: string,\r\n  attributes: Struct.SchemaAttributes\r\n): Set<string> | null => {\r\n  const allKeys = Object.keys(attributes);\r\n  const permitted = allKeys.filter((key) => {\r\n    if (userAbility.can(action, uid, key) === true) return true;\r\n\r\n    // Component attrs: CASL rules use nested paths (e.g. 'SEO.title').\r\n    // Check if at least one sub-field path is permitted.\r\n    const attr = attributes[key] as { type: string; component?: string };\r\n    if (attr.type === 'component' && attr.component !== undefined) {\r\n      const leafPaths = getComponentLeafPaths(strapi, attr.component, key);\r\n      return leafPaths.some((path) => userAbility.can(action, uid, path) === true);\r\n    }\r\n\r\n    return false;\r\n  });\r\n\r\n  if (permitted.length === allKeys.length) {\r\n    return null;\r\n  }\r\n\r\n  return new Set(permitted);\r\n};\r\n\r\n/**\r\n * Filters `localeCodes` to only those the session may access for `action`.\r\n * Returns `null` when all locales are permitted (caller should use the unfiltered base schema).\r\n * Returns an empty tuple-like array when no locale is permitted.\r\n */\r\nexport const getPermittedLocales = (\r\n  permissionChecker: { cannot: (action: string, entity?: unknown) => boolean },\r\n  action: string,\r\n  localeCodes: [string, ...string[]]\r\n): [string, ...string[]] | null => {\r\n  const permitted = localeCodes.filter(\r\n    (code) => permissionChecker.cannot(action, { locale: code }) === false\r\n  );\r\n\r\n  if (permitted.length === localeCodes.length) {\r\n    return null;\r\n  }\r\n\r\n  return permitted.length > 0\r\n    ? (permitted as [string, ...string[]])\r\n    : ([] as unknown as [string, ...string[]]);\r\n};\r\n\r\n// Re-export for use in handler files (avoids needing to import from permissions in each handler)\r\nexport type { ContentManagerModelForMcp };\r\n"],"names":["isContentTypeLocalized","strapi","uid","ct","contentTypes","undefined","pluginOptions","i18n","localized","localeDefaultDescription","defaultLocale","allowedLocales","includes","buildLocaleSchema","localeCodes","length","schema","z","enum","optional","default","describe","join","string","resolvePermittedLocaleSchema","context","action","baseLocaleSchema","isLocalized","permissionChecker","getService","create","userAbility","model","permitted","getPermittedLocales","never","getComponentLeafPaths","componentUid","prefix","visited","Set","has","component","components","add","paths","key","attr","Object","entries","attributes","fieldPath","type","push","delete","getPermittedFields","allKeys","keys","filter","can","leafPaths","some","path","code","cannot","locale"],"mappings":";;;;;AAMA,4GACO,MAAMA,sBAAAA,GAAyB,CAACC,MAAAA,EAAqBC,GAAAA,GAAAA;AAC1D,IAAA,MAAMC,EAAAA,GAAKF,MAAAA,CAAOG,YAAY,GAAGF,GAAAA,CAAuB;IACxD,IAAIC,EAAAA,KAAOE,WAAW,OAAO,KAAA;AAC7B,IAAA,OACE,EAACF,CAA8DG,aAAa,EAAEC,MAC1EC,SAAAA,KAAc,IAAA;AAEtB;AAEA,MAAMC,wBAAAA,GAA2B,CAC/BC,aAAAA,EACAC,cAAAA,GAAAA;AAEA,IAAA,IAAID,aAAAA,KAAkB,IAAA,IAAQC,cAAAA,CAAeC,QAAQ,CAACF,aAAAA,CAAAA,EAAgB;AACpE,QAAA,OAAO,CAAC,aAAa,EAAEA,aAAAA,CAAc,EAAE,CAAC;AAC1C,IAAA;IAEA,OAAO,iCAAA;AACT,CAAA;AAEA;;;;AAIC,IACM,MAAMG,iBAAAA,GAAoB,CAC/BC,WAAAA,EACAJ,aAAAA,GAAAA;AAEA,IAAA,IAAII,WAAAA,KAAgB,IAAA,IAAQA,WAAAA,CAAYC,MAAM,GAAG,CAAA,EAAG;AAClD,QAAA,IAAIC,MAAAA,GAAuBC,aAAAA,CAAEC,IAAI,CAACJ,aAAaK,QAAQ,EAAA;AAEvD,QAAA,IAAIT,aAAAA,KAAkB,IAAA,IAAQI,WAAAA,CAAYF,QAAQ,CAACF,aAAAA,CAAAA,EAAgB;YACjEM,MAAAA,GAASA,MAAAA,CAAOI,OAAO,CAACV,aAAAA,CAAAA;AAC1B,QAAA;AAEA,QAAA,OAAOM,MAAAA,CAAOK,QAAQ,CACpB,CAAC,wBAAwB,EAAEP,WAAAA,CAAYQ,IAAI,CAAC,IAAA,CAAA,CAAM,EAAE,EAAEb,wBAAAA,CAAyBC,eAAeI,WAAAA,CAAAA,CAAAA,CAAc,CAAA;AAEhH,IAAA;AAEA,IAAA,OAAOG,cACJM,MAAM,EAAA,CACNJ,QAAQ,EAAA,CACRE,QAAQ,CAAC,gEAAA,CAAA;AACd;AAEA;;;;;;;;;;;UAYaG,4BAAAA,GAA+B,CAC1CvB,QACAwB,OAAAA,EACAC,MAAAA,EACAxB,GAAAA,EACAY,WAAAA,EACAJ,aAAAA,EACAiB,gBAAAA,GAAAA;IAEA,IAAIb,WAAAA,KAAgB,MAAM,OAAOa,gBAAAA;IAEjC,MAAMC,WAAAA,GAAc5B,uBAAuBC,MAAAA,EAAQC,GAAAA,CAAAA;AACnD,IAAA,IAAI0B,gBAAgB,KAAA,EAAO;AACzB,QAAA,OAAOX,cAAEM,MAAM,EAAA,CAAGJ,QAAQ,EAAA,CAAGE,QAAQ,CAAC,wDAAA,CAAA;AACxC,IAAA;AAEA,IAAA,MAAMQ,iBAAAA,GAAoBC,gBAAAA,CAAW,oBAAA,CAAA,CAAsBC,MAAM,CAAC;AAChEC,QAAAA,WAAAA,EAAaP,QAAQO,WAAW;QAChCC,KAAAA,EAAO/B;AACT,KAAA,CAAA;IACA,MAAMgC,SAAAA,GAAYC,mBAAAA,CAAoBN,iBAAAA,EAAmBH,MAAAA,EAAQZ,WAAAA,CAAAA;IACjE,IAAIoB,SAAAA,KAAc,MAAM,OAAOP,gBAAAA;IAC/B,IAAIO,SAAAA,CAAUnB,MAAM,KAAK,CAAA,EAAG;AAC1B,QAAA,OAAOE,cAAEmB,KAAK,EAAA,CAAGjB,QAAQ,EAAA,CAAGE,QAAQ,CAAC,mCAAA,CAAA;AACvC,IAAA;AAEA,IAAA,IAAIL,MAAAA,GAAuBC,aAAAA,CAAEC,IAAI,CAACgB,WAAWf,QAAQ,EAAA;AAErD,IAAA,IAAIT,aAAAA,KAAkB,IAAA,IAAQwB,SAAAA,CAAUtB,QAAQ,CAACF,aAAAA,CAAAA,EAAgB;QAC/DM,MAAAA,GAASA,MAAAA,CAAOI,OAAO,CAACV,aAAAA,CAAAA;AAC1B,IAAA;AAEA,IAAA,OAAOM,MAAAA,CAAOK,QAAQ,CACpB,CAAC,wBAAwB,EAAEa,SAAAA,CAAUZ,IAAI,CAAC,IAAA,CAAA,CAAM,EAAE,EAAEb,wBAAAA,CAAyBC,eAAewB,SAAAA,CAAAA,CAAAA,CAAY,CAAA;AAE5G;AAEA;;;;;;;UAQaG,qBAAAA,GAAwB,CACnCpC,QACAqC,YAAAA,EACAC,MAAAA,EACAC,OAAAA,GAAuB,IAAIC,GAAAA,EAAK,GAAA;AAEhC,IAAA,IAAID,OAAAA,CAAQE,GAAG,CAACJ,YAAAA,CAAAA,KAAkB,MAAM,OAAO;AAACC,QAAAA;AAAO,KAAA;AAGvD,IAAA,MAAMI,YAAY,MAAC1C,CAAO2C,UAAoE,CAC5FN,YAAAA,CACD;IACD,IAAIK,SAAAA,KAActC,WAAW,OAAO;AAACkC,QAAAA;AAAO,KAAA;AAE5CC,IAAAA,OAAAA,CAAQK,GAAG,CAACP,YAAAA,CAAAA;AACZ,IAAA,MAAMQ,QAAkB,EAAE;IAE1B,KAAK,MAAM,CAACC,GAAAA,EAAKC,IAAAA,CAAK,IAAIC,OAAOC,OAAO,CAACP,SAAAA,CAAUQ,UAAU,CAAA,CAAG;AAC9D,QAAA,IAAIJ,QAAQ,IAAA,EAAM;AAGhB,YAAA;AACF,QAAA;AACA,QAAA,MAAMK,SAAAA,GAAY,CAAA,EAAGb,MAAAA,CAAO,CAAC,EAAEQ,GAAAA,CAAAA,CAAK;AAEpC,QAAA,IAAIC,KAAKK,IAAI,KAAK,eAAeL,IAAAA,CAAKL,SAAS,KAAKtC,SAAAA,EAAW;AAC7DyC,YAAAA,KAAAA,CAAMQ,IAAI,CAAA,GAAIjB,qBAAAA,CAAsBpC,QAAQ+C,IAAAA,CAAKL,SAAS,EAAES,SAAAA,EAAWZ,OAAAA,CAAAA,CAAAA;QACzE,CAAA,MAAO;AACLM,YAAAA,KAAAA,CAAMQ,IAAI,CAACF,SAAAA,CAAAA;AACb,QAAA;AACF,IAAA;AAEAZ,IAAAA,OAAAA,CAAQe,MAAM,CAACjB,YAAAA,CAAAA;AAEf,IAAA,OAAOQ,KAAAA,CAAM/B,MAAM,GAAG,CAAA,GAAI+B,KAAAA,GAAQ;AAACP,QAAAA;AAAO,KAAA;AAC5C;AAEA;;;;AAIC,IACM,MAAMiB,kBAAAA,GAAqB,CAChCvD,MAAAA,EACA+B,WAAAA,EACAN,QACAxB,GAAAA,EACAiD,UAAAA,GAAAA;IAEA,MAAMM,OAAAA,GAAUR,MAAAA,CAAOS,IAAI,CAACP,UAAAA,CAAAA;AAC5B,IAAA,MAAMjB,SAAAA,GAAYuB,OAAAA,CAAQE,MAAM,CAAC,CAACZ,GAAAA,GAAAA;AAChC,QAAA,IAAIf,YAAY4B,GAAG,CAAClC,QAAQxB,GAAAA,EAAK6C,GAAAA,CAAAA,KAAS,MAAM,OAAO,IAAA;;;QAIvD,MAAMC,IAAAA,GAAOG,UAAU,CAACJ,GAAAA,CAAI;AAC5B,QAAA,IAAIC,KAAKK,IAAI,KAAK,eAAeL,IAAAA,CAAKL,SAAS,KAAKtC,SAAAA,EAAW;AAC7D,YAAA,MAAMwD,SAAAA,GAAYxB,qBAAAA,CAAsBpC,MAAAA,EAAQ+C,IAAAA,CAAKL,SAAS,EAAEI,GAAAA,CAAAA;YAChE,OAAOc,SAAAA,CAAUC,IAAI,CAAC,CAACC,IAAAA,GAAS/B,YAAY4B,GAAG,CAAClC,MAAAA,EAAQxB,GAAAA,EAAK6D,IAAAA,CAAAA,KAAU,IAAA,CAAA;AACzE,QAAA;QAEA,OAAO,KAAA;AACT,IAAA,CAAA,CAAA;AAEA,IAAA,IAAI7B,SAAAA,CAAUnB,MAAM,KAAK0C,OAAAA,CAAQ1C,MAAM,EAAE;QACvC,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAO,IAAI0B,GAAAA,CAAIP,SAAAA,CAAAA;AACjB;AAEA;;;;AAIC,IACM,MAAMC,mBAAAA,GAAsB,CACjCN,mBACAH,MAAAA,EACAZ,WAAAA,GAAAA;IAEA,MAAMoB,SAAAA,GAAYpB,YAAY6C,MAAM,CAClC,CAACK,IAAAA,GAASnC,iBAAAA,CAAkBoC,MAAM,CAACvC,MAAAA,EAAQ;YAAEwC,MAAAA,EAAQF;SAAK,CAAA,KAAO,KAAA,CAAA;AAGnE,IAAA,IAAI9B,SAAAA,CAAUnB,MAAM,KAAKD,WAAAA,CAAYC,MAAM,EAAE;QAC3C,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAOmB,SAAAA,CAAUnB,MAAM,GAAG,CAAA,GACrBmB,YACA,EAAE;AACT;;;;;;;;;"}