@akbarsafari00/bonyan-content-manager 5.52.1-fa.2

package/dist/server/mcp/permissions.mjs

@@ -0,0 +1,131 @@
+import { z } from '@strapi/utils';
+import { getService } from '../utils/index.mjs';
+
+/** Returns true if the content type identified by `uid` has the i18n `localized` plugin option enabled. */ const isContentTypeLocalized = (strapi, uid)=>{
+    const ct = strapi.contentTypes?.[uid];
+    if (ct === undefined) return false;
+    return ct.pluginOptions?.i18n?.localized === true;
+};
+const localeDefaultDescription = (defaultLocale, allowedLocales)=>{
+    if (defaultLocale !== null && allowedLocales.includes(defaultLocale)) {
+        return `Defaults to "${defaultLocale}".`;
+    }
+    return 'Defaults to the default locale.';
+};
+/**
+ * Builds the base locale Zod schema for a derived MCP tool input.
+ * When `localeCodes` is provided, constrains the field to a `z.enum` of available codes
+ * with an optional default; otherwise falls back to a plain optional string.
+ */ const buildLocaleSchema = (localeCodes, defaultLocale)=>{
+    if (localeCodes !== null && localeCodes.length > 0) {
+        let schema = z.enum(localeCodes).optional();
+        if (defaultLocale !== null && localeCodes.includes(defaultLocale)) {
+            schema = schema.default(defaultLocale);
+        }
+        return schema.describe(`Locale code. Available: ${localeCodes.join(', ')}. ${localeDefaultDescription(defaultLocale, localeCodes)}`);
+    }
+    return z.string().optional().describe('Locale code (e.g. "en", "fr"). Defaults to the default locale.');
+};
+/**
+ * Narrows the base locale schema to only locales the session is permitted to access
+ * for the given action + uid combination.
+ *
+ * Returns the base schema unchanged when:
+ *   - localeCodes is null (i18n not installed)
+ *   - the content type is not localized
+ *   - all installed locales are permitted for this action
+ *
+ * Returns z.never().optional() when no locales are permitted, keeping the tool
+ * registered but signalling no valid locale input.
+ */ const resolvePermittedLocaleSchema = (strapi, context, action, uid, localeCodes, defaultLocale, baseLocaleSchema)=>{
+    if (localeCodes === null) return baseLocaleSchema;
+    const isLocalized = isContentTypeLocalized(strapi, uid);
+    if (isLocalized === false) {
+        return z.string().optional().describe('This content type is not localized. Locale is ignored.');
+    }
+    const permissionChecker = getService('permission-checker').create({
+        userAbility: context.userAbility,
+        model: uid
+    });
+    const permitted = getPermittedLocales(permissionChecker, action, localeCodes);
+    if (permitted === null) return baseLocaleSchema;
+    if (permitted.length === 0) {
+        return z.never().optional().describe('No locale access for this action.');
+    }
+    let schema = z.enum(permitted).optional();
+    if (defaultLocale !== null && permitted.includes(defaultLocale)) {
+        schema = schema.default(defaultLocale);
+    }
+    return schema.describe(`Locale code. Permitted: ${permitted.join(', ')}. ${localeDefaultDescription(defaultLocale, permitted)}`);
+};
+/**
+ * Recursively resolves leaf field paths for a component, matching the nested
+ * path format used by CASL rules (e.g. 'SEO.title', 'SEO.og.image').
+ *
+ * The admin RBAC system decomposes component attrs into nested paths and removes
+ * the parent key — so checking `ability.can(action, uid, 'SEO')` returns false
+ * even when the user has full access to the component's sub-fields.
+ */ const getComponentLeafPaths = (strapi, componentUid, prefix, visited = new Set())=>{
+    if (visited.has(componentUid) === true) return [
+        prefix
+    ];
+    const component = strapi.components[componentUid];
+    if (component === undefined) return [
+        prefix
+    ];
+    visited.add(componentUid);
+    const paths = [];
+    for (const [key, attr] of Object.entries(component.attributes)){
+        if (key === 'id') {
+            continue;
+        }
+        const fieldPath = `${prefix}.${key}`;
+        if (attr.type === 'component' && attr.component !== undefined) {
+            paths.push(...getComponentLeafPaths(strapi, attr.component, fieldPath, visited));
+        } else {
+            paths.push(fieldPath);
+        }
+    }
+    visited.delete(componentUid);
+    return paths.length > 0 ? paths : [
+        prefix
+    ];
+};
+/**
+ * Returns the subset of attribute keys the session may access for `action` on `uid`.
+ * Returns `null` when all fields are permitted (caller should skip field filtering).
+ * Component attributes are resolved to their nested leaf paths before checking CASL rules.
+ */ const getPermittedFields = (strapi, userAbility, action, uid, attributes)=>{
+    const allKeys = Object.keys(attributes);
+    const permitted = allKeys.filter((key)=>{
+        if (userAbility.can(action, uid, key) === true) return true;
+        // Component attrs: CASL rules use nested paths (e.g. 'SEO.title').
+        // Check if at least one sub-field path is permitted.
+        const attr = attributes[key];
+        if (attr.type === 'component' && attr.component !== undefined) {
+            const leafPaths = getComponentLeafPaths(strapi, attr.component, key);
+            return leafPaths.some((path)=>userAbility.can(action, uid, path) === true);
+        }
+        return false;
+    });
+    if (permitted.length === allKeys.length) {
+        return null;
+    }
+    return new Set(permitted);
+};
+/**
+ * Filters `localeCodes` to only those the session may access for `action`.
+ * Returns `null` when all locales are permitted (caller should use the unfiltered base schema).
+ * Returns an empty tuple-like array when no locale is permitted.
+ */ const getPermittedLocales = (permissionChecker, action, localeCodes)=>{
+    const permitted = localeCodes.filter((code)=>permissionChecker.cannot(action, {
+            locale: code
+        }) === false);
+    if (permitted.length === localeCodes.length) {
+        return null;
+    }
+    return permitted.length > 0 ? permitted : [];
+};
+
+export { buildLocaleSchema, getComponentLeafPaths, getPermittedFields, getPermittedLocales, isContentTypeLocalized, resolvePermittedLocaleSchema };
+//# sourceMappingURL=permissions.mjs.map

package/dist/server/mcp/permissions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.mjs","sources":["../../../server/src/mcp/permissions.ts"],"sourcesContent":["import { z } from '@strapi/utils';\r\nimport type { Core, Modules, Struct, UID } from '@strapi/types';\r\n\r\nimport { getService } from '../utils';\r\nimport type { ContentManagerModelForMcp } from './types';\r\n\r\n/** Returns true if the content type identified by `uid` has the i18n `localized` plugin option enabled. */\r\nexport const isContentTypeLocalized = (strapi: Core.Strapi, uid: string): boolean => {\r\n  const ct = strapi.contentTypes?.[uid as UID.ContentType];\r\n  if (ct === undefined) return false;\r\n  return (\r\n    (ct as { pluginOptions?: { i18n?: { localized?: boolean } } }).pluginOptions?.i18n\r\n      ?.localized === true\r\n  );\r\n};\r\n\r\nconst localeDefaultDescription = (\r\n  defaultLocale: string | null,\r\n  allowedLocales: readonly string[]\r\n): string => {\r\n  if (defaultLocale !== null && allowedLocales.includes(defaultLocale)) {\r\n    return `Defaults to \"${defaultLocale}\".`;\r\n  }\r\n\r\n  return 'Defaults to the default locale.';\r\n};\r\n\r\n/**\r\n * Builds the base locale Zod schema for a derived MCP tool input.\r\n * When `localeCodes` is provided, constrains the field to a `z.enum` of available codes\r\n * with an optional default; otherwise falls back to a plain optional string.\r\n */\r\nexport const buildLocaleSchema = (\r\n  localeCodes: [string, ...string[]] | null,\r\n  defaultLocale: string | null\r\n): z.ZodTypeAny => {\r\n  if (localeCodes !== null && localeCodes.length > 0) {\r\n    let schema: z.ZodTypeAny = z.enum(localeCodes).optional();\r\n\r\n    if (defaultLocale !== null && localeCodes.includes(defaultLocale)) {\r\n      schema = schema.default(defaultLocale);\r\n    }\r\n\r\n    return schema.describe(\r\n      `Locale code. Available: ${localeCodes.join(', ')}. ${localeDefaultDescription(defaultLocale, localeCodes)}`\r\n    );\r\n  }\r\n\r\n  return z\r\n    .string()\r\n    .optional()\r\n    .describe('Locale code (e.g. \"en\", \"fr\"). Defaults to the default locale.');\r\n};\r\n\r\n/**\r\n * Narrows the base locale schema to only locales the session is permitted to access\r\n * for the given action + uid combination.\r\n *\r\n * Returns the base schema unchanged when:\r\n *   - localeCodes is null (i18n not installed)\r\n *   - the content type is not localized\r\n *   - all installed locales are permitted for this action\r\n *\r\n * Returns z.never().optional() when no locales are permitted, keeping the tool\r\n * registered but signalling no valid locale input.\r\n */\r\nexport const resolvePermittedLocaleSchema = (\r\n  strapi: Core.Strapi,\r\n  context: Modules.MCP.McpHandlerContext,\r\n  action: string,\r\n  uid: string,\r\n  localeCodes: [string, ...string[]] | null,\r\n  defaultLocale: string | null,\r\n  baseLocaleSchema: z.ZodTypeAny\r\n): z.ZodTypeAny => {\r\n  if (localeCodes === null) return baseLocaleSchema;\r\n\r\n  const isLocalized = isContentTypeLocalized(strapi, uid);\r\n  if (isLocalized === false) {\r\n    return z.string().optional().describe('This content type is not localized. Locale is ignored.');\r\n  }\r\n\r\n  const permissionChecker = getService('permission-checker').create({\r\n    userAbility: context.userAbility,\r\n    model: uid,\r\n  });\r\n  const permitted = getPermittedLocales(permissionChecker, action, localeCodes);\r\n  if (permitted === null) return baseLocaleSchema;\r\n  if (permitted.length === 0) {\r\n    return z.never().optional().describe('No locale access for this action.');\r\n  }\r\n\r\n  let schema: z.ZodTypeAny = z.enum(permitted).optional();\r\n\r\n  if (defaultLocale !== null && permitted.includes(defaultLocale)) {\r\n    schema = schema.default(defaultLocale);\r\n  }\r\n\r\n  return schema.describe(\r\n    `Locale code. Permitted: ${permitted.join(', ')}. ${localeDefaultDescription(defaultLocale, permitted)}`\r\n  );\r\n};\r\n\r\n/**\r\n * Recursively resolves leaf field paths for a component, matching the nested\r\n * path format used by CASL rules (e.g. 'SEO.title', 'SEO.og.image').\r\n *\r\n * The admin RBAC system decomposes component attrs into nested paths and removes\r\n * the parent key — so checking `ability.can(action, uid, 'SEO')` returns false\r\n * even when the user has full access to the component's sub-fields.\r\n */\r\nexport const getComponentLeafPaths = (\r\n  strapi: Core.Strapi,\r\n  componentUid: string,\r\n  prefix: string,\r\n  visited: Set<string> = new Set()\r\n): string[] => {\r\n  if (visited.has(componentUid) === true) return [prefix];\r\n\r\n  type ComponentEntry = { attributes: Record<string, { type: string; component?: string }> };\r\n  const component = (strapi.components as unknown as Record<string, ComponentEntry | undefined>)[\r\n    componentUid\r\n  ];\r\n  if (component === undefined) return [prefix];\r\n\r\n  visited.add(componentUid);\r\n  const paths: string[] = [];\r\n\r\n  for (const [key, attr] of Object.entries(component.attributes)) {\r\n    if (key === 'id') {\r\n      // skip system id field — it is not a user-facing permission path\r\n      // eslint-disable-next-line no-continue\r\n      continue;\r\n    }\r\n    const fieldPath = `${prefix}.${key}`;\r\n\r\n    if (attr.type === 'component' && attr.component !== undefined) {\r\n      paths.push(...getComponentLeafPaths(strapi, attr.component, fieldPath, visited));\r\n    } else {\r\n      paths.push(fieldPath);\r\n    }\r\n  }\r\n\r\n  visited.delete(componentUid);\r\n\r\n  return paths.length > 0 ? paths : [prefix];\r\n};\r\n\r\n/**\r\n * Returns the subset of attribute keys the session may access for `action` on `uid`.\r\n * Returns `null` when all fields are permitted (caller should skip field filtering).\r\n * Component attributes are resolved to their nested leaf paths before checking CASL rules.\r\n */\r\nexport const getPermittedFields = (\r\n  strapi: Core.Strapi,\r\n  userAbility: Modules.MCP.McpHandlerContext['userAbility'],\r\n  action: string,\r\n  uid: string,\r\n  attributes: Struct.SchemaAttributes\r\n): Set<string> | null => {\r\n  const allKeys = Object.keys(attributes);\r\n  const permitted = allKeys.filter((key) => {\r\n    if (userAbility.can(action, uid, key) === true) return true;\r\n\r\n    // Component attrs: CASL rules use nested paths (e.g. 'SEO.title').\r\n    // Check if at least one sub-field path is permitted.\r\n    const attr = attributes[key] as { type: string; component?: string };\r\n    if (attr.type === 'component' && attr.component !== undefined) {\r\n      const leafPaths = getComponentLeafPaths(strapi, attr.component, key);\r\n      return leafPaths.some((path) => userAbility.can(action, uid, path) === true);\r\n    }\r\n\r\n    return false;\r\n  });\r\n\r\n  if (permitted.length === allKeys.length) {\r\n    return null;\r\n  }\r\n\r\n  return new Set(permitted);\r\n};\r\n\r\n/**\r\n * Filters `localeCodes` to only those the session may access for `action`.\r\n * Returns `null` when all locales are permitted (caller should use the unfiltered base schema).\r\n * Returns an empty tuple-like array when no locale is permitted.\r\n */\r\nexport const getPermittedLocales = (\r\n  permissionChecker: { cannot: (action: string, entity?: unknown) => boolean },\r\n  action: string,\r\n  localeCodes: [string, ...string[]]\r\n): [string, ...string[]] | null => {\r\n  const permitted = localeCodes.filter(\r\n    (code) => permissionChecker.cannot(action, { locale: code }) === false\r\n  );\r\n\r\n  if (permitted.length === localeCodes.length) {\r\n    return null;\r\n  }\r\n\r\n  return permitted.length > 0\r\n    ? (permitted as [string, ...string[]])\r\n    : ([] as unknown as [string, ...string[]]);\r\n};\r\n\r\n// Re-export for use in handler files (avoids needing to import from permissions in each handler)\r\nexport type { ContentManagerModelForMcp };\r\n"],"names":["isContentTypeLocalized","strapi","uid","ct","contentTypes","undefined","pluginOptions","i18n","localized","localeDefaultDescription","defaultLocale","allowedLocales","includes","buildLocaleSchema","localeCodes","length","schema","z","enum","optional","default","describe","join","string","resolvePermittedLocaleSchema","context","action","baseLocaleSchema","isLocalized","permissionChecker","getService","create","userAbility","model","permitted","getPermittedLocales","never","getComponentLeafPaths","componentUid","prefix","visited","Set","has","component","components","add","paths","key","attr","Object","entries","attributes","fieldPath","type","push","delete","getPermittedFields","allKeys","keys","filter","can","leafPaths","some","path","code","cannot","locale"],"mappings":";;;AAMA,4GACO,MAAMA,sBAAAA,GAAyB,CAACC,MAAAA,EAAqBC,GAAAA,GAAAA;AAC1D,IAAA,MAAMC,EAAAA,GAAKF,MAAAA,CAAOG,YAAY,GAAGF,GAAAA,CAAuB;IACxD,IAAIC,EAAAA,KAAOE,WAAW,OAAO,KAAA;AAC7B,IAAA,OACE,EAACF,CAA8DG,aAAa,EAAEC,MAC1EC,SAAAA,KAAc,IAAA;AAEtB;AAEA,MAAMC,wBAAAA,GAA2B,CAC/BC,aAAAA,EACAC,cAAAA,GAAAA;AAEA,IAAA,IAAID,aAAAA,KAAkB,IAAA,IAAQC,cAAAA,CAAeC,QAAQ,CAACF,aAAAA,CAAAA,EAAgB;AACpE,QAAA,OAAO,CAAC,aAAa,EAAEA,aAAAA,CAAc,EAAE,CAAC;AAC1C,IAAA;IAEA,OAAO,iCAAA;AACT,CAAA;AAEA;;;;AAIC,IACM,MAAMG,iBAAAA,GAAoB,CAC/BC,WAAAA,EACAJ,aAAAA,GAAAA;AAEA,IAAA,IAAII,WAAAA,KAAgB,IAAA,IAAQA,WAAAA,CAAYC,MAAM,GAAG,CAAA,EAAG;AAClD,QAAA,IAAIC,MAAAA,GAAuBC,CAAAA,CAAEC,IAAI,CAACJ,aAAaK,QAAQ,EAAA;AAEvD,QAAA,IAAIT,aAAAA,KAAkB,IAAA,IAAQI,WAAAA,CAAYF,QAAQ,CAACF,aAAAA,CAAAA,EAAgB;YACjEM,MAAAA,GAASA,MAAAA,CAAOI,OAAO,CAACV,aAAAA,CAAAA;AAC1B,QAAA;AAEA,QAAA,OAAOM,MAAAA,CAAOK,QAAQ,CACpB,CAAC,wBAAwB,EAAEP,WAAAA,CAAYQ,IAAI,CAAC,IAAA,CAAA,CAAM,EAAE,EAAEb,wBAAAA,CAAyBC,eAAeI,WAAAA,CAAAA,CAAAA,CAAc,CAAA;AAEhH,IAAA;AAEA,IAAA,OAAOG,EACJM,MAAM,EAAA,CACNJ,QAAQ,EAAA,CACRE,QAAQ,CAAC,gEAAA,CAAA;AACd;AAEA;;;;;;;;;;;UAYaG,4BAAAA,GAA+B,CAC1CvB,QACAwB,OAAAA,EACAC,MAAAA,EACAxB,GAAAA,EACAY,WAAAA,EACAJ,aAAAA,EACAiB,gBAAAA,GAAAA;IAEA,IAAIb,WAAAA,KAAgB,MAAM,OAAOa,gBAAAA;IAEjC,MAAMC,WAAAA,GAAc5B,uBAAuBC,MAAAA,EAAQC,GAAAA,CAAAA;AACnD,IAAA,IAAI0B,gBAAgB,KAAA,EAAO;AACzB,QAAA,OAAOX,EAAEM,MAAM,EAAA,CAAGJ,QAAQ,EAAA,CAAGE,QAAQ,CAAC,wDAAA,CAAA;AACxC,IAAA;AAEA,IAAA,MAAMQ,iBAAAA,GAAoBC,UAAAA,CAAW,oBAAA,CAAA,CAAsBC,MAAM,CAAC;AAChEC,QAAAA,WAAAA,EAAaP,QAAQO,WAAW;QAChCC,KAAAA,EAAO/B;AACT,KAAA,CAAA;IACA,MAAMgC,SAAAA,GAAYC,mBAAAA,CAAoBN,iBAAAA,EAAmBH,MAAAA,EAAQZ,WAAAA,CAAAA;IACjE,IAAIoB,SAAAA,KAAc,MAAM,OAAOP,gBAAAA;IAC/B,IAAIO,SAAAA,CAAUnB,MAAM,KAAK,CAAA,EAAG;AAC1B,QAAA,OAAOE,EAAEmB,KAAK,EAAA,CAAGjB,QAAQ,EAAA,CAAGE,QAAQ,CAAC,mCAAA,CAAA;AACvC,IAAA;AAEA,IAAA,IAAIL,MAAAA,GAAuBC,CAAAA,CAAEC,IAAI,CAACgB,WAAWf,QAAQ,EAAA;AAErD,IAAA,IAAIT,aAAAA,KAAkB,IAAA,IAAQwB,SAAAA,CAAUtB,QAAQ,CAACF,aAAAA,CAAAA,EAAgB;QAC/DM,MAAAA,GAASA,MAAAA,CAAOI,OAAO,CAACV,aAAAA,CAAAA;AAC1B,IAAA;AAEA,IAAA,OAAOM,MAAAA,CAAOK,QAAQ,CACpB,CAAC,wBAAwB,EAAEa,SAAAA,CAAUZ,IAAI,CAAC,IAAA,CAAA,CAAM,EAAE,EAAEb,wBAAAA,CAAyBC,eAAewB,SAAAA,CAAAA,CAAAA,CAAY,CAAA;AAE5G;AAEA;;;;;;;UAQaG,qBAAAA,GAAwB,CACnCpC,QACAqC,YAAAA,EACAC,MAAAA,EACAC,OAAAA,GAAuB,IAAIC,GAAAA,EAAK,GAAA;AAEhC,IAAA,IAAID,OAAAA,CAAQE,GAAG,CAACJ,YAAAA,CAAAA,KAAkB,MAAM,OAAO;AAACC,QAAAA;AAAO,KAAA;AAGvD,IAAA,MAAMI,YAAY,MAAC1C,CAAO2C,UAAoE,CAC5FN,YAAAA,CACD;IACD,IAAIK,SAAAA,KAActC,WAAW,OAAO;AAACkC,QAAAA;AAAO,KAAA;AAE5CC,IAAAA,OAAAA,CAAQK,GAAG,CAACP,YAAAA,CAAAA;AACZ,IAAA,MAAMQ,QAAkB,EAAE;IAE1B,KAAK,MAAM,CAACC,GAAAA,EAAKC,IAAAA,CAAK,IAAIC,OAAOC,OAAO,CAACP,SAAAA,CAAUQ,UAAU,CAAA,CAAG;AAC9D,QAAA,IAAIJ,QAAQ,IAAA,EAAM;AAGhB,YAAA;AACF,QAAA;AACA,QAAA,MAAMK,SAAAA,GAAY,CAAA,EAAGb,MAAAA,CAAO,CAAC,EAAEQ,GAAAA,CAAAA,CAAK;AAEpC,QAAA,IAAIC,KAAKK,IAAI,KAAK,eAAeL,IAAAA,CAAKL,SAAS,KAAKtC,SAAAA,EAAW;AAC7DyC,YAAAA,KAAAA,CAAMQ,IAAI,CAAA,GAAIjB,qBAAAA,CAAsBpC,QAAQ+C,IAAAA,CAAKL,SAAS,EAAES,SAAAA,EAAWZ,OAAAA,CAAAA,CAAAA;QACzE,CAAA,MAAO;AACLM,YAAAA,KAAAA,CAAMQ,IAAI,CAACF,SAAAA,CAAAA;AACb,QAAA;AACF,IAAA;AAEAZ,IAAAA,OAAAA,CAAQe,MAAM,CAACjB,YAAAA,CAAAA;AAEf,IAAA,OAAOQ,KAAAA,CAAM/B,MAAM,GAAG,CAAA,GAAI+B,KAAAA,GAAQ;AAACP,QAAAA;AAAO,KAAA;AAC5C;AAEA;;;;AAIC,IACM,MAAMiB,kBAAAA,GAAqB,CAChCvD,MAAAA,EACA+B,WAAAA,EACAN,QACAxB,GAAAA,EACAiD,UAAAA,GAAAA;IAEA,MAAMM,OAAAA,GAAUR,MAAAA,CAAOS,IAAI,CAACP,UAAAA,CAAAA;AAC5B,IAAA,MAAMjB,SAAAA,GAAYuB,OAAAA,CAAQE,MAAM,CAAC,CAACZ,GAAAA,GAAAA;AAChC,QAAA,IAAIf,YAAY4B,GAAG,CAAClC,QAAQxB,GAAAA,EAAK6C,GAAAA,CAAAA,KAAS,MAAM,OAAO,IAAA;;;QAIvD,MAAMC,IAAAA,GAAOG,UAAU,CAACJ,GAAAA,CAAI;AAC5B,QAAA,IAAIC,KAAKK,IAAI,KAAK,eAAeL,IAAAA,CAAKL,SAAS,KAAKtC,SAAAA,EAAW;AAC7D,YAAA,MAAMwD,SAAAA,GAAYxB,qBAAAA,CAAsBpC,MAAAA,EAAQ+C,IAAAA,CAAKL,SAAS,EAAEI,GAAAA,CAAAA;YAChE,OAAOc,SAAAA,CAAUC,IAAI,CAAC,CAACC,IAAAA,GAAS/B,YAAY4B,GAAG,CAAClC,MAAAA,EAAQxB,GAAAA,EAAK6D,IAAAA,CAAAA,KAAU,IAAA,CAAA;AACzE,QAAA;QAEA,OAAO,KAAA;AACT,IAAA,CAAA,CAAA;AAEA,IAAA,IAAI7B,SAAAA,CAAUnB,MAAM,KAAK0C,OAAAA,CAAQ1C,MAAM,EAAE;QACvC,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAO,IAAI0B,GAAAA,CAAIP,SAAAA,CAAAA;AACjB;AAEA;;;;AAIC,IACM,MAAMC,mBAAAA,GAAsB,CACjCN,mBACAH,MAAAA,EACAZ,WAAAA,GAAAA;IAEA,MAAMoB,SAAAA,GAAYpB,YAAY6C,MAAM,CAClC,CAACK,IAAAA,GAASnC,iBAAAA,CAAkBoC,MAAM,CAACvC,MAAAA,EAAQ;YAAEwC,MAAAA,EAAQF;SAAK,CAAA,KAAO,KAAA,CAAA;AAGnE,IAAA,IAAI9B,SAAAA,CAAUnB,MAAM,KAAKD,WAAAA,CAAYC,MAAM,EAAE;QAC3C,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAOmB,SAAAA,CAAUnB,MAAM,GAAG,CAAA,GACrBmB,YACA,EAAE;AACT;;;;"}

package/dist/server/mcp/register-content-manager-mcp-tools.js

@@ -0,0 +1,33 @@
+'use strict';
+
+var deriveContentTypeMcpTools = require('./derive-content-type-mcp-tools.js');
+var index = require('../utils/index.js');
+
+/**
+ * Registers derived content-type MCP tools via strapi.ai.mcp.registerTool().
+ * Must be called from the plugin register phase, before the MCP HTTP server starts.
+ */ const registerContentManagerMcpTools = async ({ strapi })=>{
+    // Performance only: registerTool() is safe when MCP is disabled (definitions are stored but
+    // never exposed). Skip the expensive derivation below when the MCP server will not start.
+    if (strapi.ai.mcp.isEnabled() !== true) {
+        return;
+    }
+    const i18nPlugin = strapi.plugin('i18n');
+    let localeCodes = null;
+    let defaultLocale = null;
+    if (i18nPlugin !== undefined) {
+        localeCodes = (await i18nPlugin.service('locales').find()).map((locale)=>locale.code);
+        defaultLocale = await i18nPlugin.service('locales').getDefaultLocale();
+    }
+    const models = index.getService('content-types').findDisplayedContentTypes();
+    const tools = deriveContentTypeMcpTools.deriveDisplayedContentTypeMcpToolDefinitions(strapi, models, {
+        localeCodes,
+        defaultLocale
+    });
+    for (const tool of tools){
+        strapi.ai.mcp.registerTool(tool);
+    }
+};
+
+exports.registerContentManagerMcpTools = registerContentManagerMcpTools;
+//# sourceMappingURL=register-content-manager-mcp-tools.js.map

package/dist/server/mcp/register-content-manager-mcp-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-content-manager-mcp-tools.js","sources":["../../../server/src/mcp/register-content-manager-mcp-tools.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\r\n\r\nimport { deriveDisplayedContentTypeMcpToolDefinitions } from './derive-content-type-mcp-tools';\r\nimport { getService } from '../utils';\r\n\r\n/**\r\n * Registers derived content-type MCP tools via strapi.ai.mcp.registerTool().\r\n * Must be called from the plugin register phase, before the MCP HTTP server starts.\r\n */\r\nexport const registerContentManagerMcpTools = async ({\r\n  strapi,\r\n}: {\r\n  strapi: Core.Strapi;\r\n}): Promise<void> => {\r\n  // Performance only: registerTool() is safe when MCP is disabled (definitions are stored but\r\n  // never exposed). Skip the expensive derivation below when the MCP server will not start.\r\n  if (strapi.ai.mcp.isEnabled() !== true) {\r\n    return;\r\n  }\r\n\r\n  const i18nPlugin = strapi.plugin('i18n');\r\n\r\n  let localeCodes = null;\r\n  let defaultLocale: string | null = null;\r\n  if (i18nPlugin !== undefined) {\r\n    localeCodes = (await i18nPlugin.service('locales').find()).map(\r\n      (locale: { code: string }) => locale.code\r\n    ) as [string, ...string[]];\r\n    defaultLocale = await i18nPlugin.service('locales').getDefaultLocale();\r\n  }\r\n\r\n  const models = getService('content-types').findDisplayedContentTypes();\r\n  const tools = deriveDisplayedContentTypeMcpToolDefinitions(strapi, models, {\r\n    localeCodes,\r\n    defaultLocale,\r\n  });\r\n\r\n  for (const tool of tools) {\r\n    strapi.ai.mcp.registerTool(tool);\r\n  }\r\n};\r\n"],"names":["registerContentManagerMcpTools","strapi","ai","mcp","isEnabled","i18nPlugin","plugin","localeCodes","defaultLocale","undefined","service","find","map","locale","code","getDefaultLocale","models","getService","findDisplayedContentTypes","tools","deriveDisplayedContentTypeMcpToolDefinitions","tool","registerTool"],"mappings":";;;;;AAKA;;;AAGC,IACM,MAAMA,8BAAAA,GAAiC,OAAO,EACnDC,MAAM,EAGP,GAAA;;;AAGC,IAAA,IAAIA,OAAOC,EAAE,CAACC,GAAG,CAACC,SAAS,OAAO,IAAA,EAAM;AACtC,QAAA;AACF,IAAA;IAEA,MAAMC,UAAAA,GAAaJ,MAAAA,CAAOK,MAAM,CAAC,MAAA,CAAA;AAEjC,IAAA,IAAIC,WAAAA,GAAc,IAAA;AAClB,IAAA,IAAIC,aAAAA,GAA+B,IAAA;AACnC,IAAA,IAAIH,eAAeI,SAAAA,EAAW;AAC5BF,QAAAA,WAAAA,GAAc,CAAC,MAAMF,UAAAA,CAAWK,OAAO,CAAC,SAAA,CAAA,CAAWC,IAAI,EAAC,EAAGC,GAAG,CAC5D,CAACC,MAAAA,GAA6BA,OAAOC,IAAI,CAAA;AAE3CN,QAAAA,aAAAA,GAAgB,MAAMH,UAAAA,CAAWK,OAAO,CAAC,WAAWK,gBAAgB,EAAA;AACtE,IAAA;IAEA,MAAMC,MAAAA,GAASC,gBAAAA,CAAW,eAAA,CAAA,CAAiBC,yBAAyB,EAAA;IACpE,MAAMC,KAAAA,GAAQC,sEAAAA,CAA6CnB,MAAAA,EAAQe,MAAAA,EAAQ;AACzET,QAAAA,WAAAA;AACAC,QAAAA;AACF,KAAA,CAAA;IAEA,KAAK,MAAMa,QAAQF,KAAAA,CAAO;AACxBlB,QAAAA,MAAAA,CAAOC,EAAE,CAACC,GAAG,CAACmB,YAAY,CAACD,IAAAA,CAAAA;AAC7B,IAAA;AACF;;;;"}

package/dist/server/mcp/register-content-manager-mcp-tools.mjs

@@ -0,0 +1,31 @@
+import { deriveDisplayedContentTypeMcpToolDefinitions } from './derive-content-type-mcp-tools.mjs';
+import { getService } from '../utils/index.mjs';
+
+/**
+ * Registers derived content-type MCP tools via strapi.ai.mcp.registerTool().
+ * Must be called from the plugin register phase, before the MCP HTTP server starts.
+ */ const registerContentManagerMcpTools = async ({ strapi })=>{
+    // Performance only: registerTool() is safe when MCP is disabled (definitions are stored but
+    // never exposed). Skip the expensive derivation below when the MCP server will not start.
+    if (strapi.ai.mcp.isEnabled() !== true) {
+        return;
+    }
+    const i18nPlugin = strapi.plugin('i18n');
+    let localeCodes = null;
+    let defaultLocale = null;
+    if (i18nPlugin !== undefined) {
+        localeCodes = (await i18nPlugin.service('locales').find()).map((locale)=>locale.code);
+        defaultLocale = await i18nPlugin.service('locales').getDefaultLocale();
+    }
+    const models = getService('content-types').findDisplayedContentTypes();
+    const tools = deriveDisplayedContentTypeMcpToolDefinitions(strapi, models, {
+        localeCodes,
+        defaultLocale
+    });
+    for (const tool of tools){
+        strapi.ai.mcp.registerTool(tool);
+    }
+};
+
+export { registerContentManagerMcpTools };
+//# sourceMappingURL=register-content-manager-mcp-tools.mjs.map

package/dist/server/mcp/register-content-manager-mcp-tools.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-content-manager-mcp-tools.mjs","sources":["../../../server/src/mcp/register-content-manager-mcp-tools.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\r\n\r\nimport { deriveDisplayedContentTypeMcpToolDefinitions } from './derive-content-type-mcp-tools';\r\nimport { getService } from '../utils';\r\n\r\n/**\r\n * Registers derived content-type MCP tools via strapi.ai.mcp.registerTool().\r\n * Must be called from the plugin register phase, before the MCP HTTP server starts.\r\n */\r\nexport const registerContentManagerMcpTools = async ({\r\n  strapi,\r\n}: {\r\n  strapi: Core.Strapi;\r\n}): Promise<void> => {\r\n  // Performance only: registerTool() is safe when MCP is disabled (definitions are stored but\r\n  // never exposed). Skip the expensive derivation below when the MCP server will not start.\r\n  if (strapi.ai.mcp.isEnabled() !== true) {\r\n    return;\r\n  }\r\n\r\n  const i18nPlugin = strapi.plugin('i18n');\r\n\r\n  let localeCodes = null;\r\n  let defaultLocale: string | null = null;\r\n  if (i18nPlugin !== undefined) {\r\n    localeCodes = (await i18nPlugin.service('locales').find()).map(\r\n      (locale: { code: string }) => locale.code\r\n    ) as [string, ...string[]];\r\n    defaultLocale = await i18nPlugin.service('locales').getDefaultLocale();\r\n  }\r\n\r\n  const models = getService('content-types').findDisplayedContentTypes();\r\n  const tools = deriveDisplayedContentTypeMcpToolDefinitions(strapi, models, {\r\n    localeCodes,\r\n    defaultLocale,\r\n  });\r\n\r\n  for (const tool of tools) {\r\n    strapi.ai.mcp.registerTool(tool);\r\n  }\r\n};\r\n"],"names":["registerContentManagerMcpTools","strapi","ai","mcp","isEnabled","i18nPlugin","plugin","localeCodes","defaultLocale","undefined","service","find","map","locale","code","getDefaultLocale","models","getService","findDisplayedContentTypes","tools","deriveDisplayedContentTypeMcpToolDefinitions","tool","registerTool"],"mappings":";;;AAKA;;;AAGC,IACM,MAAMA,8BAAAA,GAAiC,OAAO,EACnDC,MAAM,EAGP,GAAA;;;AAGC,IAAA,IAAIA,OAAOC,EAAE,CAACC,GAAG,CAACC,SAAS,OAAO,IAAA,EAAM;AACtC,QAAA;AACF,IAAA;IAEA,MAAMC,UAAAA,GAAaJ,MAAAA,CAAOK,MAAM,CAAC,MAAA,CAAA;AAEjC,IAAA,IAAIC,WAAAA,GAAc,IAAA;AAClB,IAAA,IAAIC,aAAAA,GAA+B,IAAA;AACnC,IAAA,IAAIH,eAAeI,SAAAA,EAAW;AAC5BF,QAAAA,WAAAA,GAAc,CAAC,MAAMF,UAAAA,CAAWK,OAAO,CAAC,SAAA,CAAA,CAAWC,IAAI,EAAC,EAAGC,GAAG,CAC5D,CAACC,MAAAA,GAA6BA,OAAOC,IAAI,CAAA;AAE3CN,QAAAA,aAAAA,GAAgB,MAAMH,UAAAA,CAAWK,OAAO,CAAC,WAAWK,gBAAgB,EAAA;AACtE,IAAA;IAEA,MAAMC,MAAAA,GAASC,UAAAA,CAAW,eAAA,CAAA,CAAiBC,yBAAyB,EAAA;IACpE,MAAMC,KAAAA,GAAQC,4CAAAA,CAA6CnB,MAAAA,EAAQe,MAAAA,EAAQ;AACzET,QAAAA,WAAAA;AACAC,QAAAA;AACF,KAAA,CAAA;IAEA,KAAK,MAAMa,QAAQF,KAAAA,CAAO;AACxBlB,QAAAA,MAAAA,CAAOC,EAAE,CAACC,GAAG,CAACmB,YAAY,CAACD,IAAAA,CAAAA;AAC7B,IAAA;AACF;;;;"}

package/dist/server/mcp/sanitizers/shape-relations.js

@@ -0,0 +1,108 @@
+'use strict';
+
+var strapiUtils = require('@strapi/utils');
+
+// Relations whose cardinality is "many" — maps to Array output.
+// Includes non-owning variants and morph-many.
+const MANY_RELATION_TYPES = new Set([
+    'oneToMany',
+    'manyToMany',
+    'manyWay',
+    'morphToMany',
+    'morphMany'
+]);
+/**
+ * Canonical "is this relation a list" predicate for the MCP output boundary.
+ * Both the runtime shaping (reduceToIdentity) and the registered output schemas
+ * (output-schemas.ts) MUST use this single definition — the MCP SDK validates
+ * structuredContent against the schema, so any divergence fails the tool call.
+ * Intentionally broader than `relations.isAnyToMany` from @strapi/utils, which
+ * ignores `manyWay` and the morph variants.
+ */ const isManyRelationForMcp = (attribute)=>MANY_RELATION_TYPES.has(attribute.relation ?? '');
+/**
+ * Extracts identity fields from a single relation entry.
+ * Returns undefined when the entry has no documentId (e.g. a bare {count} object).
+ */ const pickIdentity = (entry)=>{
+    if (entry === null || typeof entry !== 'object') {
+        return undefined;
+    }
+    const obj = entry;
+    if (typeof obj.documentId !== 'string') {
+        return undefined;
+    }
+    const identity = {
+        documentId: obj.documentId
+    };
+    if (typeof obj.locale === 'string') {
+        identity.locale = obj.locale;
+    }
+    if (typeof obj.__type === 'string') {
+        identity.__type = obj.__type;
+    }
+    // Preserve the computed publish status on `localizations` entries — it is
+    // calculated by formatDocumentWithMetadata BEFORE shaping (calculate, then strip).
+    // Non-localization relation entries never carry a string `status`, so this is a no-op for them.
+    if (typeof obj.status === 'string') {
+        identity.status = obj.status;
+    }
+    return identity;
+};
+/**
+ * Reduces a populated relation value to identity-only shape.
+ *
+ * to-one → { documentId, locale?, __type? } | null
+ * to-many → Array<{ documentId, locale?, __type? }>  ([] when empty)
+ */ const reduceToIdentity = (attribute, value)=>{
+    const isMany = isManyRelationForMcp(attribute);
+    if (isMany) {
+        if (Array.isArray(value)) {
+            return value.map(pickIdentity).filter((v)=>v !== undefined);
+        }
+        // defensive: { count: N } or null/undefined → empty array
+        return [];
+    }
+    // to-one
+    if (value === null || value === undefined) {
+        return null;
+    }
+    if (Array.isArray(value)) {
+        // should not happen, but guard: treat first element
+        return pickIdentity(value[0]) ?? null;
+    }
+    return pickIdentity(value) ?? null;
+};
+/**
+ * Post-sanitize shaping visitor.
+ * Reduces every relation attribute to identity-only (documentId + locale? + __type?).
+ * Skips admin::user relations — those are out of scope and preserved as-is.
+ */ const shapeRelationToIdentity = ({ key, value, attribute }, { set })=>{
+    if (attribute?.type !== 'relation') {
+        return;
+    }
+    const target = attribute.target;
+    // Out of scope — admin user records are preserved untouched (tracked separately).
+    if (target === 'admin::user') {
+        return;
+    }
+    // @ts-expect-error — reduceToIdentity returns a narrower type; traverseEntity Data allows unknown
+    set(key, reduceToIdentity(attribute, value));
+};
+/**
+ * Applies identity shaping to all relation fields in a document, including
+ * nested fields inside components, dynamic zones, and `localizations`.
+ *
+ * This covers leak family #1 (relation targets) and #2 (localizations full draft rows)
+ * with the same single mechanism.
+ */ const shapeRelationsForMcp = async (uid, data)=>{
+    return strapiUtils.traverseEntity(shapeRelationToIdentity, {
+        schema: strapi.getModel(uid),
+        getModel: strapi.getModel.bind(strapi)
+    }, // @ts-expect-error — traverseEntity expects Data; post-sanitize documents are compatible at runtime
+    data);
+};
+
+exports.MANY_RELATION_TYPES = MANY_RELATION_TYPES;
+exports.isManyRelationForMcp = isManyRelationForMcp;
+exports.reduceToIdentity = reduceToIdentity;
+exports.shapeRelationsForMcp = shapeRelationsForMcp;
+//# sourceMappingURL=shape-relations.js.map

package/dist/server/mcp/sanitizers/shape-relations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape-relations.js","sources":["../../../../server/src/mcp/sanitizers/shape-relations.ts"],"sourcesContent":["import { traverseEntity } from '@strapi/utils';\r\nimport type { UID } from '@strapi/types';\r\n\r\n// Relations whose cardinality is \"many\" — maps to Array output.\r\n// Includes non-owning variants and morph-many.\r\nconst MANY_RELATION_TYPES = new Set([\r\n  'oneToMany',\r\n  'manyToMany',\r\n  'manyWay',\r\n  'morphToMany',\r\n  'morphMany',\r\n]);\r\n\r\n/**\r\n * Canonical \"is this relation a list\" predicate for the MCP output boundary.\r\n * Both the runtime shaping (reduceToIdentity) and the registered output schemas\r\n * (output-schemas.ts) MUST use this single definition — the MCP SDK validates\r\n * structuredContent against the schema, so any divergence fails the tool call.\r\n * Intentionally broader than `relations.isAnyToMany` from @strapi/utils, which\r\n * ignores `manyWay` and the morph variants.\r\n */\r\nexport const isManyRelationForMcp = (attribute: { relation?: string }): boolean =>\r\n  MANY_RELATION_TYPES.has(attribute.relation ?? '');\r\n\r\ntype RelationIdentity = {\r\n  documentId: string;\r\n  locale?: string;\r\n  __type?: string;\r\n  status?: string;\r\n};\r\n\r\n/**\r\n * Extracts identity fields from a single relation entry.\r\n * Returns undefined when the entry has no documentId (e.g. a bare {count} object).\r\n */\r\nconst pickIdentity = (entry: unknown): RelationIdentity | undefined => {\r\n  if (entry === null || typeof entry !== 'object') {\r\n    return undefined;\r\n  }\r\n\r\n  const obj = entry as Record<string, unknown>;\r\n\r\n  if (typeof obj.documentId !== 'string') {\r\n    return undefined;\r\n  }\r\n\r\n  const identity: RelationIdentity = { documentId: obj.documentId };\r\n\r\n  if (typeof obj.locale === 'string') {\r\n    identity.locale = obj.locale;\r\n  }\r\n\r\n  if (typeof obj.__type === 'string') {\r\n    identity.__type = obj.__type;\r\n  }\r\n\r\n  // Preserve the computed publish status on `localizations` entries — it is\r\n  // calculated by formatDocumentWithMetadata BEFORE shaping (calculate, then strip).\r\n  // Non-localization relation entries never carry a string `status`, so this is a no-op for them.\r\n  if (typeof obj.status === 'string') {\r\n    identity.status = obj.status;\r\n  }\r\n\r\n  return identity;\r\n};\r\n\r\n/**\r\n * Reduces a populated relation value to identity-only shape.\r\n *\r\n * to-one → { documentId, locale?, __type? } | null\r\n * to-many → Array<{ documentId, locale?, __type? }>  ([] when empty)\r\n */\r\nconst reduceToIdentity = (\r\n  attribute: { relation?: string },\r\n  value: unknown\r\n): RelationIdentity | RelationIdentity[] | null => {\r\n  const isMany = isManyRelationForMcp(attribute);\r\n\r\n  if (isMany) {\r\n    if (Array.isArray(value)) {\r\n      return value.map(pickIdentity).filter((v): v is RelationIdentity => v !== undefined);\r\n    }\r\n    // defensive: { count: N } or null/undefined → empty array\r\n    return [];\r\n  }\r\n\r\n  // to-one\r\n  if (value === null || value === undefined) {\r\n    return null;\r\n  }\r\n\r\n  if (Array.isArray(value)) {\r\n    // should not happen, but guard: treat first element\r\n    return pickIdentity(value[0]) ?? null;\r\n  }\r\n\r\n  return pickIdentity(value) ?? null;\r\n};\r\n\r\n/**\r\n * Post-sanitize shaping visitor.\r\n * Reduces every relation attribute to identity-only (documentId + locale? + __type?).\r\n * Skips admin::user relations — those are out of scope and preserved as-is.\r\n */\r\nconst shapeRelationToIdentity: Parameters<typeof traverseEntity>[0] = (\r\n  { key, value, attribute },\r\n  { set }\r\n) => {\r\n  if (attribute?.type !== 'relation') {\r\n    return;\r\n  }\r\n\r\n  const target = (attribute as { target?: string }).target;\r\n\r\n  // Out of scope — admin user records are preserved untouched (tracked separately).\r\n  if (target === 'admin::user') {\r\n    return;\r\n  }\r\n\r\n  // @ts-expect-error — reduceToIdentity returns a narrower type; traverseEntity Data allows unknown\r\n  set(key, reduceToIdentity(attribute as { relation?: string }, value));\r\n};\r\n\r\n/**\r\n * Applies identity shaping to all relation fields in a document, including\r\n * nested fields inside components, dynamic zones, and `localizations`.\r\n *\r\n * This covers leak family #1 (relation targets) and #2 (localizations full draft rows)\r\n * with the same single mechanism.\r\n */\r\nexport const shapeRelationsForMcp = async (\r\n  uid: UID.Schema,\r\n  data: Record<string, unknown>\r\n): Promise<Record<string, unknown>> => {\r\n  return traverseEntity(\r\n    shapeRelationToIdentity,\r\n    {\r\n      schema: strapi.getModel(uid),\r\n      getModel: strapi.getModel.bind(strapi),\r\n    },\r\n    // @ts-expect-error — traverseEntity expects Data; post-sanitize documents are compatible at runtime\r\n    data\r\n  );\r\n};\r\n\r\n// Export for unit-testing without a full strapi instance\r\nexport { reduceToIdentity, MANY_RELATION_TYPES };\r\n"],"names":["MANY_RELATION_TYPES","Set","isManyRelationForMcp","attribute","has","relation","pickIdentity","entry","undefined","obj","documentId","identity","locale","__type","status","reduceToIdentity","value","isMany","Array","isArray","map","filter","v","shapeRelationToIdentity","key","set","type","target","shapeRelationsForMcp","uid","data","traverseEntity","schema","strapi","getModel","bind"],"mappings":";;;;AAGA;AACA;AACA,MAAMA,mBAAAA,GAAsB,IAAIC,GAAAA,CAAI;AAClC,IAAA,WAAA;AACA,IAAA,YAAA;AACA,IAAA,SAAA;AACA,IAAA,aAAA;AACA,IAAA;AACD,CAAA;AAED;;;;;;;IAQO,MAAMC,oBAAAA,GAAuB,CAACC,SAAAA,GACnCH,mBAAAA,CAAoBI,GAAG,CAACD,SAAAA,CAAUE,QAAQ,IAAI,EAAA;AAShD;;;IAIA,MAAMC,eAAe,CAACC,KAAAA,GAAAA;AACpB,IAAA,IAAIA,KAAAA,KAAU,IAAA,IAAQ,OAAOA,KAAAA,KAAU,QAAA,EAAU;QAC/C,OAAOC,SAAAA;AACT,IAAA;AAEA,IAAA,MAAMC,GAAAA,GAAMF,KAAAA;AAEZ,IAAA,IAAI,OAAOE,GAAAA,CAAIC,UAAU,KAAK,QAAA,EAAU;QACtC,OAAOF,SAAAA;AACT,IAAA;AAEA,IAAA,MAAMG,QAAAA,GAA6B;AAAED,QAAAA,UAAAA,EAAYD,IAAIC;AAAW,KAAA;AAEhE,IAAA,IAAI,OAAOD,GAAAA,CAAIG,MAAM,KAAK,QAAA,EAAU;QAClCD,QAAAA,CAASC,MAAM,GAAGH,GAAAA,CAAIG,MAAM;AAC9B,IAAA;AAEA,IAAA,IAAI,OAAOH,GAAAA,CAAII,MAAM,KAAK,QAAA,EAAU;QAClCF,QAAAA,CAASE,MAAM,GAAGJ,GAAAA,CAAII,MAAM;AAC9B,IAAA;;;;AAKA,IAAA,IAAI,OAAOJ,GAAAA,CAAIK,MAAM,KAAK,QAAA,EAAU;QAClCH,QAAAA,CAASG,MAAM,GAAGL,GAAAA,CAAIK,MAAM;AAC9B,IAAA;IAEA,OAAOH,QAAAA;AACT,CAAA;AAEA;;;;;IAMA,MAAMI,gBAAAA,GAAmB,CACvBZ,SAAAA,EACAa,KAAAA,GAAAA;AAEA,IAAA,MAAMC,SAASf,oBAAAA,CAAqBC,SAAAA,CAAAA;AAEpC,IAAA,IAAIc,MAAAA,EAAQ;QACV,IAAIC,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;YACxB,OAAOA,KAAAA,CAAMI,GAAG,CAACd,YAAAA,CAAAA,CAAce,MAAM,CAAC,CAACC,IAA6BA,CAAAA,KAAMd,SAAAA,CAAAA;AAC5E,QAAA;;AAEA,QAAA,OAAO,EAAE;AACX,IAAA;;IAGA,IAAIQ,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUR,SAAAA,EAAW;QACzC,OAAO,IAAA;AACT,IAAA;IAEA,IAAIU,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;;AAExB,QAAA,OAAOV,YAAAA,CAAaU,KAAK,CAAC,CAAA,CAAE,CAAA,IAAK,IAAA;AACnC,IAAA;AAEA,IAAA,OAAOV,aAAaU,KAAAA,CAAAA,IAAU,IAAA;AAChC;AAEA;;;;AAIC,IACD,MAAMO,uBAAAA,GAAgE,CACpE,EAAEC,GAAG,EAAER,KAAK,EAAEb,SAAS,EAAE,EACzB,EAAEsB,GAAG,EAAE,GAAA;IAEP,IAAItB,SAAAA,EAAWuB,SAAS,UAAA,EAAY;AAClC,QAAA;AACF,IAAA;IAEA,MAAMC,MAAAA,GAAS,SAACxB,CAAkCwB,MAAM;;AAGxD,IAAA,IAAIA,WAAW,aAAA,EAAe;AAC5B,QAAA;AACF,IAAA;;IAGAF,GAAAA,CAAID,GAAAA,EAAKT,iBAAiBZ,SAAAA,EAAoCa,KAAAA,CAAAA,CAAAA;AAChE,CAAA;AAEA;;;;;;AAMC,IACM,MAAMY,oBAAAA,GAAuB,OAClCC,GAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,OAAOC,2BACLR,uBAAAA,EACA;QACES,MAAAA,EAAQC,MAAAA,CAAOC,QAAQ,CAACL,GAAAA,CAAAA;AACxBK,QAAAA,QAAAA,EAAUD,MAAAA,CAAOC,QAAQ,CAACC,IAAI,CAACF,MAAAA;AACjC,KAAA;AAEAH,IAAAA,IAAAA,CAAAA;AAEJ;;;;;;;"}

package/dist/server/mcp/sanitizers/shape-relations.mjs

@@ -0,0 +1,103 @@
+import { traverseEntity } from '@strapi/utils';
+
+// Relations whose cardinality is "many" — maps to Array output.
+// Includes non-owning variants and morph-many.
+const MANY_RELATION_TYPES = new Set([
+    'oneToMany',
+    'manyToMany',
+    'manyWay',
+    'morphToMany',
+    'morphMany'
+]);
+/**
+ * Canonical "is this relation a list" predicate for the MCP output boundary.
+ * Both the runtime shaping (reduceToIdentity) and the registered output schemas
+ * (output-schemas.ts) MUST use this single definition — the MCP SDK validates
+ * structuredContent against the schema, so any divergence fails the tool call.
+ * Intentionally broader than `relations.isAnyToMany` from @strapi/utils, which
+ * ignores `manyWay` and the morph variants.
+ */ const isManyRelationForMcp = (attribute)=>MANY_RELATION_TYPES.has(attribute.relation ?? '');
+/**
+ * Extracts identity fields from a single relation entry.
+ * Returns undefined when the entry has no documentId (e.g. a bare {count} object).
+ */ const pickIdentity = (entry)=>{
+    if (entry === null || typeof entry !== 'object') {
+        return undefined;
+    }
+    const obj = entry;
+    if (typeof obj.documentId !== 'string') {
+        return undefined;
+    }
+    const identity = {
+        documentId: obj.documentId
+    };
+    if (typeof obj.locale === 'string') {
+        identity.locale = obj.locale;
+    }
+    if (typeof obj.__type === 'string') {
+        identity.__type = obj.__type;
+    }
+    // Preserve the computed publish status on `localizations` entries — it is
+    // calculated by formatDocumentWithMetadata BEFORE shaping (calculate, then strip).
+    // Non-localization relation entries never carry a string `status`, so this is a no-op for them.
+    if (typeof obj.status === 'string') {
+        identity.status = obj.status;
+    }
+    return identity;
+};
+/**
+ * Reduces a populated relation value to identity-only shape.
+ *
+ * to-one → { documentId, locale?, __type? } | null
+ * to-many → Array<{ documentId, locale?, __type? }>  ([] when empty)
+ */ const reduceToIdentity = (attribute, value)=>{
+    const isMany = isManyRelationForMcp(attribute);
+    if (isMany) {
+        if (Array.isArray(value)) {
+            return value.map(pickIdentity).filter((v)=>v !== undefined);
+        }
+        // defensive: { count: N } or null/undefined → empty array
+        return [];
+    }
+    // to-one
+    if (value === null || value === undefined) {
+        return null;
+    }
+    if (Array.isArray(value)) {
+        // should not happen, but guard: treat first element
+        return pickIdentity(value[0]) ?? null;
+    }
+    return pickIdentity(value) ?? null;
+};
+/**
+ * Post-sanitize shaping visitor.
+ * Reduces every relation attribute to identity-only (documentId + locale? + __type?).
+ * Skips admin::user relations — those are out of scope and preserved as-is.
+ */ const shapeRelationToIdentity = ({ key, value, attribute }, { set })=>{
+    if (attribute?.type !== 'relation') {
+        return;
+    }
+    const target = attribute.target;
+    // Out of scope — admin user records are preserved untouched (tracked separately).
+    if (target === 'admin::user') {
+        return;
+    }
+    // @ts-expect-error — reduceToIdentity returns a narrower type; traverseEntity Data allows unknown
+    set(key, reduceToIdentity(attribute, value));
+};
+/**
+ * Applies identity shaping to all relation fields in a document, including
+ * nested fields inside components, dynamic zones, and `localizations`.
+ *
+ * This covers leak family #1 (relation targets) and #2 (localizations full draft rows)
+ * with the same single mechanism.
+ */ const shapeRelationsForMcp = async (uid, data)=>{
+    return traverseEntity(shapeRelationToIdentity, {
+        schema: strapi.getModel(uid),
+        getModel: strapi.getModel.bind(strapi)
+    }, // @ts-expect-error — traverseEntity expects Data; post-sanitize documents are compatible at runtime
+    data);
+};
+
+export { MANY_RELATION_TYPES, isManyRelationForMcp, reduceToIdentity, shapeRelationsForMcp };
+//# sourceMappingURL=shape-relations.mjs.map

package/dist/server/mcp/sanitizers/shape-relations.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape-relations.mjs","sources":["../../../../server/src/mcp/sanitizers/shape-relations.ts"],"sourcesContent":["import { traverseEntity } from '@strapi/utils';\r\nimport type { UID } from '@strapi/types';\r\n\r\n// Relations whose cardinality is \"many\" — maps to Array output.\r\n// Includes non-owning variants and morph-many.\r\nconst MANY_RELATION_TYPES = new Set([\r\n  'oneToMany',\r\n  'manyToMany',\r\n  'manyWay',\r\n  'morphToMany',\r\n  'morphMany',\r\n]);\r\n\r\n/**\r\n * Canonical \"is this relation a list\" predicate for the MCP output boundary.\r\n * Both the runtime shaping (reduceToIdentity) and the registered output schemas\r\n * (output-schemas.ts) MUST use this single definition — the MCP SDK validates\r\n * structuredContent against the schema, so any divergence fails the tool call.\r\n * Intentionally broader than `relations.isAnyToMany` from @strapi/utils, which\r\n * ignores `manyWay` and the morph variants.\r\n */\r\nexport const isManyRelationForMcp = (attribute: { relation?: string }): boolean =>\r\n  MANY_RELATION_TYPES.has(attribute.relation ?? '');\r\n\r\ntype RelationIdentity = {\r\n  documentId: string;\r\n  locale?: string;\r\n  __type?: string;\r\n  status?: string;\r\n};\r\n\r\n/**\r\n * Extracts identity fields from a single relation entry.\r\n * Returns undefined when the entry has no documentId (e.g. a bare {count} object).\r\n */\r\nconst pickIdentity = (entry: unknown): RelationIdentity | undefined => {\r\n  if (entry === null || typeof entry !== 'object') {\r\n    return undefined;\r\n  }\r\n\r\n  const obj = entry as Record<string, unknown>;\r\n\r\n  if (typeof obj.documentId !== 'string') {\r\n    return undefined;\r\n  }\r\n\r\n  const identity: RelationIdentity = { documentId: obj.documentId };\r\n\r\n  if (typeof obj.locale === 'string') {\r\n    identity.locale = obj.locale;\r\n  }\r\n\r\n  if (typeof obj.__type === 'string') {\r\n    identity.__type = obj.__type;\r\n  }\r\n\r\n  // Preserve the computed publish status on `localizations` entries — it is\r\n  // calculated by formatDocumentWithMetadata BEFORE shaping (calculate, then strip).\r\n  // Non-localization relation entries never carry a string `status`, so this is a no-op for them.\r\n  if (typeof obj.status === 'string') {\r\n    identity.status = obj.status;\r\n  }\r\n\r\n  return identity;\r\n};\r\n\r\n/**\r\n * Reduces a populated relation value to identity-only shape.\r\n *\r\n * to-one → { documentId, locale?, __type? } | null\r\n * to-many → Array<{ documentId, locale?, __type? }>  ([] when empty)\r\n */\r\nconst reduceToIdentity = (\r\n  attribute: { relation?: string },\r\n  value: unknown\r\n): RelationIdentity | RelationIdentity[] | null => {\r\n  const isMany = isManyRelationForMcp(attribute);\r\n\r\n  if (isMany) {\r\n    if (Array.isArray(value)) {\r\n      return value.map(pickIdentity).filter((v): v is RelationIdentity => v !== undefined);\r\n    }\r\n    // defensive: { count: N } or null/undefined → empty array\r\n    return [];\r\n  }\r\n\r\n  // to-one\r\n  if (value === null || value === undefined) {\r\n    return null;\r\n  }\r\n\r\n  if (Array.isArray(value)) {\r\n    // should not happen, but guard: treat first element\r\n    return pickIdentity(value[0]) ?? null;\r\n  }\r\n\r\n  return pickIdentity(value) ?? null;\r\n};\r\n\r\n/**\r\n * Post-sanitize shaping visitor.\r\n * Reduces every relation attribute to identity-only (documentId + locale? + __type?).\r\n * Skips admin::user relations — those are out of scope and preserved as-is.\r\n */\r\nconst shapeRelationToIdentity: Parameters<typeof traverseEntity>[0] = (\r\n  { key, value, attribute },\r\n  { set }\r\n) => {\r\n  if (attribute?.type !== 'relation') {\r\n    return;\r\n  }\r\n\r\n  const target = (attribute as { target?: string }).target;\r\n\r\n  // Out of scope — admin user records are preserved untouched (tracked separately).\r\n  if (target === 'admin::user') {\r\n    return;\r\n  }\r\n\r\n  // @ts-expect-error — reduceToIdentity returns a narrower type; traverseEntity Data allows unknown\r\n  set(key, reduceToIdentity(attribute as { relation?: string }, value));\r\n};\r\n\r\n/**\r\n * Applies identity shaping to all relation fields in a document, including\r\n * nested fields inside components, dynamic zones, and `localizations`.\r\n *\r\n * This covers leak family #1 (relation targets) and #2 (localizations full draft rows)\r\n * with the same single mechanism.\r\n */\r\nexport const shapeRelationsForMcp = async (\r\n  uid: UID.Schema,\r\n  data: Record<string, unknown>\r\n): Promise<Record<string, unknown>> => {\r\n  return traverseEntity(\r\n    shapeRelationToIdentity,\r\n    {\r\n      schema: strapi.getModel(uid),\r\n      getModel: strapi.getModel.bind(strapi),\r\n    },\r\n    // @ts-expect-error — traverseEntity expects Data; post-sanitize documents are compatible at runtime\r\n    data\r\n  );\r\n};\r\n\r\n// Export for unit-testing without a full strapi instance\r\nexport { reduceToIdentity, MANY_RELATION_TYPES };\r\n"],"names":["MANY_RELATION_TYPES","Set","isManyRelationForMcp","attribute","has","relation","pickIdentity","entry","undefined","obj","documentId","identity","locale","__type","status","reduceToIdentity","value","isMany","Array","isArray","map","filter","v","shapeRelationToIdentity","key","set","type","target","shapeRelationsForMcp","uid","data","traverseEntity","schema","strapi","getModel","bind"],"mappings":";;AAGA;AACA;AACA,MAAMA,mBAAAA,GAAsB,IAAIC,GAAAA,CAAI;AAClC,IAAA,WAAA;AACA,IAAA,YAAA;AACA,IAAA,SAAA;AACA,IAAA,aAAA;AACA,IAAA;AACD,CAAA;AAED;;;;;;;IAQO,MAAMC,oBAAAA,GAAuB,CAACC,SAAAA,GACnCH,mBAAAA,CAAoBI,GAAG,CAACD,SAAAA,CAAUE,QAAQ,IAAI,EAAA;AAShD;;;IAIA,MAAMC,eAAe,CAACC,KAAAA,GAAAA;AACpB,IAAA,IAAIA,KAAAA,KAAU,IAAA,IAAQ,OAAOA,KAAAA,KAAU,QAAA,EAAU;QAC/C,OAAOC,SAAAA;AACT,IAAA;AAEA,IAAA,MAAMC,GAAAA,GAAMF,KAAAA;AAEZ,IAAA,IAAI,OAAOE,GAAAA,CAAIC,UAAU,KAAK,QAAA,EAAU;QACtC,OAAOF,SAAAA;AACT,IAAA;AAEA,IAAA,MAAMG,QAAAA,GAA6B;AAAED,QAAAA,UAAAA,EAAYD,IAAIC;AAAW,KAAA;AAEhE,IAAA,IAAI,OAAOD,GAAAA,CAAIG,MAAM,KAAK,QAAA,EAAU;QAClCD,QAAAA,CAASC,MAAM,GAAGH,GAAAA,CAAIG,MAAM;AAC9B,IAAA;AAEA,IAAA,IAAI,OAAOH,GAAAA,CAAII,MAAM,KAAK,QAAA,EAAU;QAClCF,QAAAA,CAASE,MAAM,GAAGJ,GAAAA,CAAII,MAAM;AAC9B,IAAA;;;;AAKA,IAAA,IAAI,OAAOJ,GAAAA,CAAIK,MAAM,KAAK,QAAA,EAAU;QAClCH,QAAAA,CAASG,MAAM,GAAGL,GAAAA,CAAIK,MAAM;AAC9B,IAAA;IAEA,OAAOH,QAAAA;AACT,CAAA;AAEA;;;;;IAMA,MAAMI,gBAAAA,GAAmB,CACvBZ,SAAAA,EACAa,KAAAA,GAAAA;AAEA,IAAA,MAAMC,SAASf,oBAAAA,CAAqBC,SAAAA,CAAAA;AAEpC,IAAA,IAAIc,MAAAA,EAAQ;QACV,IAAIC,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;YACxB,OAAOA,KAAAA,CAAMI,GAAG,CAACd,YAAAA,CAAAA,CAAce,MAAM,CAAC,CAACC,IAA6BA,CAAAA,KAAMd,SAAAA,CAAAA;AAC5E,QAAA;;AAEA,QAAA,OAAO,EAAE;AACX,IAAA;;IAGA,IAAIQ,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUR,SAAAA,EAAW;QACzC,OAAO,IAAA;AACT,IAAA;IAEA,IAAIU,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,EAAQ;;AAExB,QAAA,OAAOV,YAAAA,CAAaU,KAAK,CAAC,CAAA,CAAE,CAAA,IAAK,IAAA;AACnC,IAAA;AAEA,IAAA,OAAOV,aAAaU,KAAAA,CAAAA,IAAU,IAAA;AAChC;AAEA;;;;AAIC,IACD,MAAMO,uBAAAA,GAAgE,CACpE,EAAEC,GAAG,EAAER,KAAK,EAAEb,SAAS,EAAE,EACzB,EAAEsB,GAAG,EAAE,GAAA;IAEP,IAAItB,SAAAA,EAAWuB,SAAS,UAAA,EAAY;AAClC,QAAA;AACF,IAAA;IAEA,MAAMC,MAAAA,GAAS,SAACxB,CAAkCwB,MAAM;;AAGxD,IAAA,IAAIA,WAAW,aAAA,EAAe;AAC5B,QAAA;AACF,IAAA;;IAGAF,GAAAA,CAAID,GAAAA,EAAKT,iBAAiBZ,SAAAA,EAAoCa,KAAAA,CAAAA,CAAAA;AAChE,CAAA;AAEA;;;;;;AAMC,IACM,MAAMY,oBAAAA,GAAuB,OAClCC,GAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,OAAOC,eACLR,uBAAAA,EACA;QACES,MAAAA,EAAQC,MAAAA,CAAOC,QAAQ,CAACL,GAAAA,CAAAA;AACxBK,QAAAA,QAAAA,EAAUD,MAAAA,CAAOC,QAAQ,CAACC,IAAI,CAACF,MAAAA;AACjC,KAAA;AAEAH,IAAAA,IAAAA,CAAAA;AAEJ;;;;"}

package/dist/server/mcp/schemas/blocks-schema.js

@@ -0,0 +1,124 @@
+'use strict';
+
+var strapiUtils = require('@strapi/utils');
+
+// ---------------------------------------------------------------------------
+// Inline nodes
+// ---------------------------------------------------------------------------
+const textNodeSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('text'),
+    text: strapiUtils.z.string().describe('The text content.'),
+    bold: strapiUtils.z.boolean().optional(),
+    italic: strapiUtils.z.boolean().optional(),
+    underline: strapiUtils.z.boolean().optional(),
+    strikethrough: strapiUtils.z.boolean().optional(),
+    code: strapiUtils.z.boolean().optional()
+}).describe('A text node with optional formatting marks.');
+const linkNodeSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('link'),
+    url: strapiUtils.z.string().describe('The URL the link points to.'),
+    children: strapiUtils.z.array(textNodeSchema).min(1)
+}).describe('An inline link node. Children must be text nodes.');
+const inlineNodeSchema = strapiUtils.z.discriminatedUnion('type', [
+    textNodeSchema,
+    linkNodeSchema
+]);
+// ---------------------------------------------------------------------------
+// Root block nodes
+// ---------------------------------------------------------------------------
+const paragraphSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('paragraph'),
+    children: strapiUtils.z.array(inlineNodeSchema).min(1)
+});
+const headingSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('heading'),
+    level: strapiUtils.z.union([
+        strapiUtils.z.literal(1),
+        strapiUtils.z.literal(2),
+        strapiUtils.z.literal(3),
+        strapiUtils.z.literal(4),
+        strapiUtils.z.literal(5),
+        strapiUtils.z.literal(6)
+    ]),
+    children: strapiUtils.z.array(inlineNodeSchema).min(1)
+});
+const quoteSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('quote'),
+    children: strapiUtils.z.array(inlineNodeSchema).min(1)
+});
+const codeSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('code'),
+    language: strapiUtils.z.string().nullable().optional().describe('Programming language identifier (e.g. "javascript", "python").'),
+    children: strapiUtils.z.array(textNodeSchema).min(1)
+});
+// ---------------------------------------------------------------------------
+// List nodes (recursive via z.lazy — mirrors yup.lazy in blocks-validator.ts)
+// ---------------------------------------------------------------------------
+const listItemSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('list-item'),
+    children: strapiUtils.z.array(inlineNodeSchema).min(1)
+});
+// ZodType annotation is required because of the self-reference via z.lazy
+const listSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('list'),
+    format: strapiUtils.z.enum([
+        'ordered',
+        'unordered'
+    ]),
+    indentLevel: strapiUtils.z.number().optional(),
+    children: strapiUtils.z.array(strapiUtils.z.lazy(()=>strapiUtils.z.union([
+            listItemSchema,
+            listSchema
+        ]))).min(1).describe('Children must be list-item or nested list nodes.')
+});
+// ---------------------------------------------------------------------------
+// Image block
+// ---------------------------------------------------------------------------
+const imageSchema = strapiUtils.z.object({
+    type: strapiUtils.z.literal('image'),
+    image: strapiUtils.z.object({
+        name: strapiUtils.z.string(),
+        alternativeText: strapiUtils.z.string().nullable().optional(),
+        url: strapiUtils.z.string(),
+        caption: strapiUtils.z.string().nullable().optional(),
+        width: strapiUtils.z.number(),
+        height: strapiUtils.z.number(),
+        formats: strapiUtils.z.record(strapiUtils.z.string(), strapiUtils.z.unknown()).nullable().optional(),
+        hash: strapiUtils.z.string(),
+        ext: strapiUtils.z.string(),
+        mime: strapiUtils.z.string(),
+        size: strapiUtils.z.number(),
+        previewUrl: strapiUtils.z.string().nullable().optional(),
+        provider: strapiUtils.z.string(),
+        provider_metadata: strapiUtils.z.unknown().nullable().optional(),
+        createdAt: strapiUtils.z.string(),
+        updatedAt: strapiUtils.z.string()
+    }).describe('An existing media asset. Use media tools to retrieve this data — MCP cannot upload files.'),
+    children: strapiUtils.z.array(strapiUtils.z.object({
+        type: strapiUtils.z.literal('text'),
+        text: strapiUtils.z.literal('')
+    })).length(1)
+});
+// ---------------------------------------------------------------------------
+// Top-level schema
+// ---------------------------------------------------------------------------
+const blockNodeSchema = strapiUtils.z.discriminatedUnion('type', [
+    paragraphSchema,
+    headingSchema,
+    quoteSchema,
+    codeSchema,
+    imageSchema
+]);
+/**
+ * Returns the Zod schema for a Strapi Blocks (rich-text) field input.
+ * Accepts an array of block nodes — paragraph, heading, quote, code, image, and list —
+ * matching Strapi's internal blocks data model.
+ */ const buildBlocksInputSchema = ()=>strapiUtils.z.array(// listSchema uses z.lazy so it cannot participate in discriminatedUnion;
+    // use a regular union to merge it back in.
+    strapiUtils.z.union([
+        blockNodeSchema,
+        listSchema
+    ])).describe('An array of block nodes representing structured rich text content.');
+
+exports.buildBlocksInputSchema = buildBlocksInputSchema;
+//# sourceMappingURL=blocks-schema.js.map