@strapi/content-manager 5.46.1 → 5.47.1

package/dist/server/src/mcp/permissions.d.ts

@@ -0,0 +1,49 @@
+import { z } from '@strapi/utils';
+import type { Core, Modules, Struct } from '@strapi/types';
+import type { ContentManagerModelForMcp } from './types';
+/** Returns true if the content type identified by `uid` has the i18n `localized` plugin option enabled. */
+export declare const isContentTypeLocalized: (strapi: Core.Strapi, uid: string) => boolean;
+/**
+ * Builds the base locale Zod schema for a derived MCP tool input.
+ * When `localeCodes` is provided, constrains the field to a `z.enum` of available codes
+ * with an optional default; otherwise falls back to a plain optional string.
+ */
+export declare const buildLocaleSchema: (localeCodes: [string, ...string[]] | null, defaultLocale: string | null) => z.ZodTypeAny;
+/**
+ * Narrows the base locale schema to only locales the session is permitted to access
+ * for the given action + uid combination.
+ *
+ * Returns the base schema unchanged when:
+ *   - localeCodes is null (i18n not installed)
+ *   - the content type is not localized
+ *   - all installed locales are permitted for this action
+ *
+ * Returns z.never().optional() when no locales are permitted, keeping the tool
+ * registered but signalling no valid locale input.
+ */
+export declare const resolvePermittedLocaleSchema: (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext, action: string, uid: string, localeCodes: [string, ...string[]] | null, defaultLocale: string | null, baseLocaleSchema: z.ZodTypeAny) => z.ZodTypeAny;
+/**
+ * Recursively resolves leaf field paths for a component, matching the nested
+ * path format used by CASL rules (e.g. 'SEO.title', 'SEO.og.image').
+ *
+ * The admin RBAC system decomposes component attrs into nested paths and removes
+ * the parent key — so checking `ability.can(action, uid, 'SEO')` returns false
+ * even when the user has full access to the component's sub-fields.
+ */
+export declare const getComponentLeafPaths: (strapi: Core.Strapi, componentUid: string, prefix: string, visited?: Set<string>) => string[];
+/**
+ * Returns the subset of attribute keys the session may access for `action` on `uid`.
+ * Returns `null` when all fields are permitted (caller should skip field filtering).
+ * Component attributes are resolved to their nested leaf paths before checking CASL rules.
+ */
+export declare const getPermittedFields: (strapi: Core.Strapi, userAbility: Modules.MCP.McpHandlerContext['userAbility'], action: string, uid: string, attributes: Struct.SchemaAttributes) => Set<string> | null;
+/**
+ * Filters `localeCodes` to only those the session may access for `action`.
+ * Returns `null` when all locales are permitted (caller should use the unfiltered base schema).
+ * Returns an empty tuple-like array when no locale is permitted.
+ */
+export declare const getPermittedLocales: (permissionChecker: {
+    cannot: (action: string, entity?: unknown) => boolean;
+}, action: string, localeCodes: [string, ...string[]]) => [string, ...string[]] | null;
+export type { ContentManagerModelForMcp };
+//# sourceMappingURL=permissions.d.ts.map

package/dist/server/src/mcp/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAO,MAAM,eAAe,CAAC;AAGhE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,SAAS,CAAC;AAEzD,2GAA2G;AAC3G,eAAO,MAAM,sBAAsB,WAAY,KAAK,MAAM,OAAO,MAAM,KAAG,OAOzE,CAAC;AAaF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,gBACf,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,iBAC1B,MAAM,GAAG,IAAI,KAC3B,EAAE,UAiBJ,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,4BAA4B,WAC/B,KAAK,MAAM,WACV,QAAQ,GAAG,CAAC,iBAAiB,UAC9B,MAAM,OACT,MAAM,eACE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,iBAC1B,MAAM,GAAG,IAAI,oBACV,EAAE,UAAU,KAC7B,EAAE,UA2BJ,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,WACxB,KAAK,MAAM,gBACL,MAAM,UACZ,MAAM,YACL,IAAI,MAAM,CAAC,KACnB,MAAM,EA8BR,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,WACrB,KAAK,MAAM,eACN,QAAQ,GAAG,CAAC,iBAAiB,CAAC,aAAa,CAAC,UACjD,MAAM,OACT,MAAM,cACC,OAAO,gBAAgB,KAClC,IAAI,MAAM,CAAC,GAAG,IAqBhB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,sBACX;IAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,KAAK,OAAO,CAAA;CAAE,UACpE,MAAM,eACD,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,KACjC,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,IAY1B,CAAC;AAGF,YAAY,EAAE,yBAAyB,EAAE,CAAC"}

package/dist/server/src/mcp/register-content-manager-mcp-tools.d.ts

@@ -0,0 +1,8 @@
+import type { Core } from '@strapi/types';
+/**
+ * Registers derived content-type MCP tools during plugin bootstrap, before the MCP HTTP server starts.
+ */
+export declare const registerContentManagerMcpTools: ({ strapi, }: {
+    strapi: Core.Strapi;
+}) => Promise<void>;
+//# sourceMappingURL=register-content-manager-mcp-tools.d.ts.map

package/dist/server/src/mcp/register-content-manager-mcp-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-content-manager-mcp-tools.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/register-content-manager-mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAK1C;;GAEG;AACH,eAAO,MAAM,8BAA8B,gBAExC;IACD,MAAM,EAAE,KAAK,MAAM,CAAC;CACrB,KAAG,QAAQ,IAAI,CAyBf,CAAC"}

package/dist/server/src/mcp/schemas/blocks-schema.d.ts

@@ -0,0 +1,8 @@
+import { z } from '@strapi/utils';
+/**
+ * Returns the Zod schema for a Strapi Blocks (rich-text) field input.
+ * Accepts an array of block nodes — paragraph, heading, quote, code, image, and list —
+ * matching Strapi's internal blocks data model.
+ */
+export declare const buildBlocksInputSchema: () => z.ZodArray<z.ZodTypeAny>;
+//# sourceMappingURL=blocks-schema.d.ts.map

package/dist/server/src/mcp/schemas/blocks-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocks-schema.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/blocks-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAgIlC;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,QAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAOkB,CAAC"}

package/dist/server/src/mcp/schemas/data-schema.d.ts

@@ -0,0 +1,36 @@
+import { z } from '@strapi/utils';
+import type { Core, Schema, Struct } from '@strapi/types';
+import type { ContentManagerModelForMcp } from '../types';
+/**
+ * Builds a structured Zod object schema for a Strapi component UID.
+ * Declared as a regular function so it is hoisted above `attributeToInputSchema`
+ * — the two functions are mutually recursive (component attrs recurse into
+ * attributeToInputSchema; attributeToInputSchema calls this for 'component' cases).
+ *
+ * @param strapi - Strapi instance (components registry available post-load).
+ * @param componentUid - e.g. "common.seo".
+ * @param visited - cycle-guard; prevents infinite recursion on self-referencing components.
+ */
+export declare function buildComponentInputSchema(strapi: Core.Strapi, componentUid: string, visited?: Set<string>): z.ZodTypeAny;
+/**
+ * Maps a single Strapi attribute to a Zod input schema, carrying constraints
+ * (min, max, minLength, maxLength, required, enum values, etc.).
+ *
+ * Mirrors the `mapAttributeToInputSchema` logic from
+ * `packages/core/core/src/core-api/routes/validation/mappers.ts` — kept inline
+ * here to avoid a cross-package import from @strapi/content-manager into
+ * @strapi/core (which is not a listed dependency).
+ *
+ * TODO — custom fields call `strapi.get('custom-fields')` at schema-build
+ * time; confirm with an integration test that the registry is populated when MCP
+ * tools are registered (post-bootstrap).
+ */
+export declare const attributeToInputSchema: (strapi: Core.Strapi, attr: Schema.Attribute.AnyAttribute, visited?: Set<string>) => z.ZodTypeAny;
+/**
+ * Derives a per-content-type `data` Zod schema from the model's writable attributes.
+ * Uses `contentTypes.isWritableAttribute` to filter system-managed keys
+ * (id, documentId, timestamps, createdBy, updatedBy, localizations, locale, etc.).
+ * Unknown keys are rejected (strict mode) — invalid field names fail at the MCP boundary.
+ */
+export declare const buildDataSchema: (strapi: Core.Strapi, schema: Struct.ContentTypeSchema | ContentManagerModelForMcp, attributes: Struct.SchemaAttributes, permittedFields?: Set<string> | null) => z.ZodTypeAny;
+//# sourceMappingURL=data-schema.d.ts.map

package/dist/server/src/mcp/schemas/data-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-schema.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/data-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,CAAC,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAG1D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AAc1D;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,GAAG,CAAC,MAAM,CAAa,GAC/B,CAAC,CAAC,UAAU,CA2Bd;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sBAAsB,WACzB,KAAK,MAAM,QACb,OAAO,SAAS,CAAC,YAAY,YAC1B,IAAI,MAAM,CAAC,KACnB,EAAE,UAiNJ,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,eAAe,WAClB,KAAK,MAAM,UACX,OAAO,iBAAiB,GAAG,yBAAyB,cAChD,OAAO,gBAAgB,oBACjB,IAAI,MAAM,CAAC,GAAG,IAAI,KACnC,EAAE,UAmBJ,CAAC"}

package/dist/server/src/mcp/schemas/filters-schema.d.ts

@@ -0,0 +1,22 @@
+import { z } from '@strapi/utils';
+import type { Schema, Struct } from '@strapi/types';
+/**
+ * Maps a scalar Strapi attribute type to the appropriate Zod leaf value schema
+ * used inside filter operator objects (e.g. { $eq: <value> }).
+ */
+export declare const attributeTypeToFilterValue: (attr: Schema.Attribute.AnyAttribute) => z.ZodTypeAny;
+/** All supported Strapi filter operators (excludes the experimental `$jsonSupersetOf`). */
+export declare const FILTER_OPERATORS: readonly ["$eq", "$eqi", "$ne", "$nei", "$in", "$notIn", "$lt", "$lte", "$gt", "$gte", "$between", "$contains", "$notContains", "$containsi", "$notContainsi", "$startsWith", "$startsWithi", "$endsWith", "$endsWithi", "$null", "$notNull"];
+/**
+ * Builds a per-content-type recursive filters Zod schema.
+ *
+ * Shape:
+ *   - Logical operators: $and, $or accept an array of filter objects.
+ *   - Logical operator: $not accepts a single filter object.
+ *   - Field keys (scalar attrs only): accept either a direct value (implicit $eq)
+ *     or an operator object { $eq, $contains, $gt, … }.
+ *
+ * If the model has no scalar attributes, the schema is z.never() (filters not allowed).
+ */
+export declare const buildFiltersSchema: (attributes: Struct.SchemaAttributes, permittedFields?: Set<string> | null) => z.ZodTypeAny;
+//# sourceMappingURL=filters-schema.d.ts.map

package/dist/server/src/mcp/schemas/filters-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filters-schema.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/filters-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGpD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,SAAU,OAAO,SAAS,CAAC,YAAY,KAAG,EAAE,UAuBlF,CAAC;AAEF,2FAA2F;AAC3F,eAAO,MAAM,gBAAgB,+OAsBnB,CAAC;AAEX;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,eACjB,OAAO,gBAAgB,oBACjB,IAAI,MAAM,CAAC,GAAG,IAAI,KACnC,EAAE,UAqCJ,CAAC"}

package/dist/server/src/mcp/schemas/index.d.ts

@@ -0,0 +1,7 @@
+export { buildBlocksInputSchema } from './blocks-schema';
+export { localeSchema, statusSchema, documentIdSchema, pageSchema, pageSizeSchema, } from './input-schemas';
+export { buildDataSchema, buildComponentInputSchema, attributeToInputSchema } from './data-schema';
+export { buildSortSchema, getScalarAttributeKeys, SCALAR_ATTRIBUTE_TYPES } from './sort-schema';
+export { buildFiltersSchema, FILTER_OPERATORS, attributeTypeToFilterValue } from './filters-schema';
+export { buildDocumentOutputSchema, buildListOutputSchema, buildDeleteOutputSchema, } from './output-schemas';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/src/mcp/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC"}

package/dist/server/src/mcp/schemas/input-schemas.d.ts

@@ -0,0 +1,10 @@
+import { z } from '@strapi/utils';
+export declare const localeSchema: z.ZodOptional<z.ZodString>;
+export declare const statusSchema: z.ZodOptional<z.ZodEnum<{
+    draft: "draft";
+    published: "published";
+}>>;
+export declare const documentIdSchema: z.ZodString;
+export declare const pageSchema: z.ZodOptional<z.ZodNumber>;
+export declare const pageSizeSchema: z.ZodOptional<z.ZodNumber>;
+//# sourceMappingURL=input-schemas.d.ts.map

package/dist/server/src/mcp/schemas/input-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-schemas.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/input-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC,eAAO,MAAM,YAAY,4BAGoD,CAAC;AAE9E,eAAO,MAAM,YAAY;;;GAG2D,CAAC;AAErF,eAAO,MAAM,gBAAgB,aAK1B,CAAC;AAEJ,eAAO,MAAM,UAAU,4BAK4B,CAAC;AAEpD,eAAO,MAAM,cAAc,4BAM2B,CAAC"}

package/dist/server/src/mcp/schemas/output-schemas.d.ts

@@ -0,0 +1,18 @@
+import { z } from '@strapi/utils';
+import type { Struct } from '@strapi/types';
+/**
+ * Builds the MCP output schema for a single-document response (`{ data, meta }`).
+ * Field shape is constrained to `readFields` when non-null (RBAC field filtering).
+ */
+export declare const buildDocumentOutputSchema: (attributes: Struct.SchemaAttributes, readFields: Set<string> | null) => z.ZodObject<z.ZodRawShape>;
+/**
+ * Builds the MCP output schema for a paginated list response (`{ results, pagination }`).
+ * Field shape is constrained to `readFields` when non-null (RBAC field filtering).
+ */
+export declare const buildListOutputSchema: (attributes: Struct.SchemaAttributes, readFields: Set<string> | null) => z.ZodObject<z.ZodRawShape>;
+/**
+ * Builds the MCP output schema for a delete response (`{ data }`).
+ * Field shape is constrained to `readFields` when non-null (RBAC field filtering).
+ */
+export declare const buildDeleteOutputSchema: (attributes: Struct.SchemaAttributes, readFields: Set<string> | null) => z.ZodObject<z.ZodRawShape>;
+//# sourceMappingURL=output-schemas.d.ts.map

package/dist/server/src/mcp/schemas/output-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schemas.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/output-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAmB5C;;;GAGG;AACH,eAAO,MAAM,yBAAyB,eACxB,OAAO,gBAAgB,cACvB,IAAI,MAAM,CAAC,GAAG,IAAI,KAC7B,EAAE,SAAS,CAAC,EAAE,WAAW,CAWhB,CAAC;AAEb;;;GAGG;AACH,eAAO,MAAM,qBAAqB,eACpB,OAAO,gBAAgB,cACvB,IAAI,MAAM,CAAC,GAAG,IAAI,KAC7B,EAAE,SAAS,CAAC,EAAE,WAAW,CAWhB,CAAC;AAEb;;;GAGG;AACH,eAAO,MAAM,uBAAuB,eACtB,OAAO,gBAAgB,cACvB,IAAI,MAAM,CAAC,GAAG,IAAI,KAC7B,EAAE,SAAS,CAAC,EAAE,WAAW,CAKhB,CAAC"}

package/dist/server/src/mcp/schemas/sort-schema.d.ts

@@ -0,0 +1,24 @@
+import { z } from '@strapi/utils';
+import type { Struct } from '@strapi/types';
+/** Attribute types considered scalar for sorting and filtering (excludes relations, components, media, json, blocks). */
+export declare const SCALAR_ATTRIBUTE_TYPES: Set<string>;
+/**
+ * Returns the list of scalar attribute keys from a content type's attributes.
+ * Relation, component, dynamiczone, media, json, and blocks are excluded because
+ * they cannot be meaningfully sorted or filtered via simple operators.
+ */
+export declare const getScalarAttributeKeys: (attributes: Struct.SchemaAttributes, permittedFields?: Set<string> | null) => string[];
+/**
+ * Builds a per-content-type sort Zod schema constrained to the model's scalar fields.
+ *
+ * Supports all four Strapi sort notations:
+ *   - string:        "title:asc"
+ *   - string[]:      ["title:asc", "createdAt:desc"]
+ *   - object:        { title: "asc" }
+ *   - object[]:      [{ title: "asc" }, { createdAt: "desc" }]
+ *
+ * Object forms have their keys constrained to known scalar attribute names.
+ * If the model has no scalar attributes, the schema is z.never() (sort not allowed).
+ */
+export declare const buildSortSchema: (attributes: Struct.SchemaAttributes, permittedFields?: Set<string> | null) => z.ZodTypeAny;
+//# sourceMappingURL=sort-schema.d.ts.map

package/dist/server/src/mcp/schemas/sort-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sort-schema.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/schemas/sort-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,yHAAyH;AACzH,eAAO,MAAM,sBAAsB,aAiBjC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,eACrB,OAAO,gBAAgB,oBACjB,IAAI,MAAM,CAAC,GAAG,IAAI,KACnC,MAAM,EAaR,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,eACd,OAAO,gBAAgB,oBACjB,IAAI,MAAM,CAAC,GAAG,IAAI,KACnC,EAAE,UAqCJ,CAAC"}

package/dist/server/src/mcp/types.d.ts

@@ -0,0 +1,31 @@
+import type { Struct, Modules } from '@strapi/types';
+import type { z } from '@strapi/utils';
+export type ContentManagerModelForMcp = Pick<Struct.ContentTypeSchema, 'uid' | 'kind' | 'options'> & {
+    /** Present on content-manager DTOs from data-mapper.toContentManagerModel */
+    apiID: string;
+    /**
+     * Formatted attributes from data-mapper.toContentManagerModel (includes id, documentId,
+     * timestamps, creator fields).
+     */
+    attributes: Struct.SchemaAttributes;
+};
+export type McpToolsBuildContext = {
+    /** Installed locale codes from i18n plugin. null when i18n is not installed. */
+    localeCodes: [string, ...string[]] | null;
+    /** Default locale from i18n plugin. null when i18n is not installed or unknown. */
+    defaultLocale: string | null;
+};
+export type DerivedTool = {
+    name: string;
+    telemetry: {
+        source: 'content-manager';
+        name: string;
+    };
+    title: string;
+    description: string;
+    auth: Modules.MCP.McpCapabilityAuth;
+    resolveInputSchema: (context: Modules.MCP.McpHandlerContext) => z.ZodObject<z.ZodRawShape>;
+    resolveOutputSchema: (context: Modules.MCP.McpHandlerContext) => z.ZodObject<z.ZodRawShape>;
+    createHandler: (strapi: import('@strapi/types').Core.Strapi, context: Modules.MCP.McpHandlerContext) => Modules.MCP.McpToolHandler<z.ZodObject<z.ZodRawShape>, z.ZodObject<z.ZodRawShape>>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/server/src/mcp/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,MAAM,CAAC,iBAAiB,EACxB,KAAK,GAAG,MAAM,GAAG,SAAS,CAC3B,GAAG;IACF,6EAA6E;IAC7E,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,gFAAgF;IAChF,WAAW,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IAC1C,mFAAmF;IACnF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE;QAAE,MAAM,EAAE,iBAAiB,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACpC,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3F,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC5F,aAAa,EAAE,CACb,MAAM,EAAE,OAAO,eAAe,EAAE,IAAI,CAAC,MAAM,EAC3C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KACnC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;CACzF,CAAC"}

package/dist/server/src/mcp/utils.d.ts

@@ -0,0 +1,21 @@
+import type { Modules } from '@strapi/types';
+/**
+ * Converts a Strapi content-type UID into a safe MCP tool-name segment.
+ * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.
+ */
+export declare const slugifyUidForMcpToolName: (uid: string) => string;
+/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */
+export declare const ok: (structuredContent: Record<string, unknown>) => Modules.MCP.McpToolHandlerReturn;
+/**
+ * Generates the `title` and `description` metadata for a derived MCP tool.
+ * Appends operation-specific notes for write/publish/unpublish/discard_draft operations.
+ */
+export declare const describeTool: (params: {
+    apiID: string;
+    uid: string;
+    operation: string;
+}) => {
+    title: string;
+    description: string;
+};
+//# sourceMappingURL=utils.d.ts.map

package/dist/server/src/mcp/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,wBAAwB,QAAS,MAAM,KAAG,MAOtD,CAAC;AAEF,0GAA0G;AAC1G,eAAO,MAAM,EAAE,sBACM,OAAO,MAAM,EAAE,OAAO,CAAC,KACzC,QAAQ,GAAG,CAAC,oBAGb,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY,WAAY;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,KAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAiBvC,CAAC"}

package/dist/server/src/services/document-metadata.d.ts

@@ -25,7 +25,17 @@ declare const _default: ({ strapi }: {
     strapi: Core.Strapi;
 }) => {
     /**
-     * Returns available locales of a document for the current status
+     * Returns available locales of a document for the current status.
+     *
+     * The result is sorted with the default locale (as defined by the i18n plugin)
+     * at index 0 when present. This is the canonical-source invariant relied on by
+     * `useDocument.getInitialFormValues` in the admin: when creating a new locale
+     * draft, non-localized scalar/media values are inherited from
+     * `availableLocales[0]`. Putting the default locale first means inheritance
+     * stays predictable when sibling locales have drifted on non-localized fields
+     * (which can happen because the server only syncs non-localized fields at
+     * locale-creation time, not on subsequent updates — see
+     * `copyNonLocalizedFields` in document-service/internationalization.ts).
      */
     getAvailableLocales(uid: UID.ContentType, version: DocumentVersion, allVersions: DocumentVersion[]): Promise<import("../../../shared/contracts/collection-types").AvailableLocaleDocument[]>;
     /**

package/dist/server/src/services/document-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document-metadata.d.ts","sourceRoot":"","sources":["../../../../server/src/services/document-metadata.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAInF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;CACpC;AA0CD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;qCAoB2B;IAAE,MAAM,EAAE,KAAK,MAAM,CAAA;CAAE;IACjD;;OAEG;6BAEI,IAAI,WAAW,WACX,eAAe,eACX,eAAe,EAAE;IA2ChC;;OAEG;gCACyB,eAAe,eAAe,eAAe,EAAE;IAoB3E;;;;;OAKG;gCAC+B,IAAI,WAAW,aAAa,eAAe,EAAE;uBAuB5D,eAAe,0BAA0B,gBAAgB,CAAC,iBAAiB,CAAC;qBAgCxF,IAAI,WAAW,WACX,eAAe,0CAC6B,kBAAkB;;;;;;;;;IA8GzE;;;;OAIG;oCAEI,IAAI,WAAW,YACV,eAAe,SACnB,kBAAkB;;;;;;;;;;;;;;;;;;;AA9P5B,wBAgTG"}
+{"version":3,"file":"document-metadata.d.ts","sourceRoot":"","sources":["../../../../server/src/services/document-metadata.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAInF,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;CACpC;AA0CD;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;qCAoB2B;IAAE,MAAM,EAAE,KAAK,MAAM,CAAA;CAAE;IACjD;;;;;;;;;;;;OAYG;6BAEI,IAAI,WAAW,WACX,eAAe,eACX,eAAe,EAAE;IA8DhC;;OAEG;gCACyB,eAAe,eAAe,eAAe,EAAE;IAoB3E;;;;;OAKG;gCAC+B,IAAI,WAAW,aAAa,eAAe,EAAE;uBAuB5D,eAAe,0BAA0B,gBAAgB,CAAC,iBAAiB,CAAC;qBAgCxF,IAAI,WAAW,WACX,eAAe,0CAC6B,kBAAkB;;;;;;;;;IA8GzE;;;;OAIG;oCAEI,IAAI,WAAW,YACV,eAAe,SACnB,kBAAkB;;;;;;;;;;;;;;;;;;;AA3R5B,wBA6UG"}

package/dist/server/src/services/index.d.ts

@@ -175,19 +175,19 @@ declare const _default: {
         strapi: import("@strapi/types/dist/core").Strapi;
     }) => {
         create: ({ userAbility, model }: {
-            userAbility: any;
+            userAbility: import("@casl/ability").Ability<import("@casl/ability").AbilityTuple, any>;
             model: string;
         }) => {
             can: (action: string, entity?: ({
                 id: import("@strapi/types/dist/data").ID;
             } & {
                 [key: string]: any;
-            }) | undefined, field: string) => any;
+            }) | undefined, field: string) => boolean;
             cannot: (action: string, entity?: ({
                 id: import("@strapi/types/dist/data").ID;
             } & {
                 [key: string]: any;
-            }) | undefined, field: string) => any;
+            }) | undefined, field: string) => boolean;
             requiresEntity: (action: string) => boolean;
             sanitizeOutput: (data: {
                 id: import("@strapi/types/dist/data").ID;

package/dist/server/src/services/permission-checker.d.ts

@@ -1,4 +1,14 @@
+import type { Ability } from '@casl/ability';
 import type { Core } from '@strapi/types';
+export declare const ACTIONS: {
+    readonly read: "plugin::content-manager.explorer.read";
+    readonly create: "plugin::content-manager.explorer.create";
+    readonly update: "plugin::content-manager.explorer.update";
+    readonly delete: "plugin::content-manager.explorer.delete";
+    readonly publish: "plugin::content-manager.explorer.publish";
+    readonly unpublish: "plugin::content-manager.explorer.publish";
+    readonly discard: "plugin::content-manager.explorer.update";
+};
 type Query = {
     page?: string;
     pageSize?: string;
@@ -8,19 +18,19 @@ declare const _default: ({ strapi }: {
     strapi: Core.Strapi;
 }) => {
     create: ({ userAbility, model }: {
-        userAbility: any;
+        userAbility: Ability<import("@casl/ability").AbilityTuple, any>;
         model: string;
     }) => {
         can: (action: string, entity?: ({
             id: import("@strapi/types/dist/data").ID;
         } & {
             [key: string]: any;
-        }) | undefined, field: string) => any;
+        }) | undefined, field: string) => boolean;
         cannot: (action: string, entity?: ({
             id: import("@strapi/types/dist/data").ID;
         } & {
             [key: string]: any;
-        }) | undefined, field: string) => any;
+        }) | undefined, field: string) => boolean;
         requiresEntity: (action: string) => boolean;
         sanitizeOutput: (data: {
             id: import("@strapi/types/dist/data").ID;

package/dist/server/src/services/permission-checker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-checker.d.ts","sourceRoot":"","sources":["../../../../server/src/services/permission-checker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAgB,MAAM,eAAe,CAAC;AAaxD,KAAK,KAAK,GAAG;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;qCA6I0B;IAAE,MAAM,EAAE,KAAK,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAnD,wBAEG"}
+{"version":3,"file":"permission-checker.d.ts","sourceRoot":"","sources":["../../../../server/src/services/permission-checker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,KAAK,EAAE,IAAI,EAAgB,MAAM,eAAe,CAAC;AAExD,eAAO,MAAM,OAAO;;;;;;;;CAQV,CAAC;AAGX,KAAK,KAAK,GAAG;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;qCA6I0B;IAAE,MAAM,EAAE,KAAK,MAAM,CAAA;CAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAnD,wBAEG"}

package/dist/server/src/services/utils/configuration/index.d.ts

@@ -2,15 +2,15 @@ declare function createDefaultConfiguration(schema: any): Promise<{
     settings: any;
     metadatas: any;
     layouts: {
-        edit: any;
         list: any;
+        edit: any;
     };
 }>;
 declare function syncConfiguration(conf: any, schema: any): Promise<{
     settings: any;
     layouts: {
-        edit: any;
         list: any;
+        edit: any;
     } | {
         list: any;
         edit: any;

package/dist/server/src/services/utils/configuration/layouts.d.ts

@@ -1,11 +1,11 @@
 declare function createDefaultLayouts(schema: any): Promise<{
-    edit: any;
     list: any;
+    edit: any;
 }>;
 /** Synchronisation functions */
 declare function syncLayouts(configuration: any, schema: any): Promise<{
-    edit: any;
     list: any;
+    edit: any;
 }> | {
     list: any;
     edit: any;

package/dist/server/src/services/utils/populate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"populate.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/utils/populate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAU,OAAO,EAAE,MAAM,eAAe,CAAC;AAqB1D,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAE7E,KAAK,eAAe,GAAG;IACrB,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAsHF;;;;;GAKG;AACH,QAAA,MAAM,eAAe,QACd,IAAI,MAAM,wDAMZ,eAAe,uBAgCnB,CAAC;AAUF,QAAA,MAAM,wBAAwB,QAAS,IAAI,MAAM,KAAG,OAAO,MAAM,EAAE,GAAG,CAiFrE,CAAC;AAaF,QAAA,MAAM,yBAAyB,QAAS,IAAI,MAAM;cAFU,GAAG;kBAAgB,OAAO;CAqFrF,CAAC;AAEF;;GAEG;AACH,QAAA,MAAM,gBAAgB,QAAe,IAAI,MAAM,SAAS,MAAM,KAAG,QAAQ,QAAQ,CA8BhF,CAAC;AAIF,QAAA,MAAM,iBAAiB,QAAe,IAAI,cAAc,iBAcvD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,2BAA2B,UAAW,IAAI,MAAM;;;;;;CAUrD,CAAC;AAEF,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,2BAA2B,GAC5B,CAAC"}
+{"version":3,"file":"populate.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/utils/populate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAU,OAAO,EAAE,MAAM,eAAe,CAAC;AAsB1D,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAE7E,KAAK,eAAe,GAAG;IACrB,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAsHF;;;;;GAKG;AACH,QAAA,MAAM,eAAe,QACd,IAAI,MAAM,wDAMZ,eAAe,uBAgCnB,CAAC;AAUF,QAAA,MAAM,wBAAwB,QAAS,IAAI,MAAM,KAAG,OAAO,MAAM,EAAE,GAAG,CAuFrE,CAAC;AAaF,QAAA,MAAM,yBAAyB,QAAS,IAAI,MAAM;cAFU,GAAG;kBAAgB,OAAO;CAqFrF,CAAC;AAEF;;GAEG;AACH,QAAA,MAAM,gBAAgB,QAAe,IAAI,MAAM,SAAS,MAAM,KAAG,QAAQ,QAAQ,CA8BhF,CAAC;AAIF,QAAA,MAAM,iBAAiB,QAAe,IAAI,cAAc,iBAcvD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,2BAA2B,UAAW,IAAI,MAAM;;;;;;CAUrD,CAAC;AAEF,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,2BAA2B,GAC5B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/content-manager",
-  "version": "5.46.1",
+  "version": "5.47.1",
   "description": "A powerful UI to easily manage your data.",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -66,6 +66,7 @@
     "watch": "run -T rollup -c -w"
   },
   "dependencies": {
+    "@casl/ability": "6.7.5",
     "@dnd-kit/core": "6.3.1",
     "@dnd-kit/sortable": "10.0.0",
     "@dnd-kit/utilities": "3.2.2",
@@ -74,8 +75,8 @@
     "@sindresorhus/slugify": "1.1.0",
     "@strapi/design-system": "2.2.0",
     "@strapi/icons": "2.2.0",
-    "@strapi/types": "5.46.1",
-    "@strapi/utils": "5.46.1",
+    "@strapi/types": "5.47.1",
+    "@strapi/utils": "5.47.1",
     "codemirror5": "npm:codemirror@^5.65.11",
     "date-fns": "2.30.0",
     "fractional-indexing": "3.2.0",
@@ -94,7 +95,7 @@
     "markdown-it-sub": "^1.0.0",
     "markdown-it-sup": "1.0.0",
     "prismjs": "1.30.0",
-    "qs": "6.15.0",
+    "qs": "6.15.2",
     "react-dnd": "16.0.1",
     "react-dnd-html5-backend": "16.0.1",
     "react-helmet": "^6.1.0",
@@ -102,15 +103,16 @@
     "react-query": "3.39.3",
     "react-redux": "8.1.3",
     "react-window": "1.8.10",
-    "sanitize-html": "2.13.0",
+    "sanitize-html": "2.17.4",
     "slate": "0.94.1",
     "slate-history": "0.93.0",
     "slate-react": "0.98.3",
-    "yup": "0.32.9"
+    "yup": "0.32.9",
+    "zod": "3.25.67"
   },
   "devDependencies": {
-    "@strapi/admin": "5.46.1",
-    "@strapi/database": "5.46.1",
+    "@strapi/admin": "5.47.1",
+    "@strapi/database": "5.47.1",
     "@testing-library/react": "16.3.0",
     "@types/jest": "29.5.2",
     "@types/lodash": "^4.14.191",