npm - @strapi/content-manager - Versions diffs - 5.48.0 → 5.49.0 - Mend

@strapi/content-manager 5.48.0 → 5.49.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (331) hide show

package/dist/server/src/mcp/utils.d.ts CHANGED Viewed

@@ -1,9 +1,26 @@
-import type { Modules } from '@strapi/types';
+import type { Modules, UID } from '@strapi/types';
+import type { GetMetadataOptions } from '../services/document-metadata';
 /**
  * Converts a Strapi content-type UID into a safe MCP tool-name segment.
  * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.
  */
 export declare const slugifyUidForMcpToolName: (uid: string) => string;
+type McpPermissionChecker = {
+    sanitizeOutput: (doc: unknown) => Promise<Record<string, unknown>>;
+};
+/**
+ * Output chokepoint for MCP handlers returning `{ data, meta }`.
+ * Order matters — calculate, then strip:
+ * 1. permission-based sanitization,
+ * 2. formatDocumentWithMetadata — computes `data.status` and `localizations[].status`
+ *    from `publishedAt`/`updatedAt`, which relation shaping removes,
+ * 3. relation shaping on the formatted `data` (identity-only relations; the
+ *    freshly-computed `localizations[].status` survives via RelationIdentity).
+ *
+ * Handlers that do NOT attach metadata (delete, list) compose
+ * `permissionChecker.sanitizeOutput` + `shapeRelationsForMcp` directly instead.
+ */
+export declare const sanitizeFormatShape: (permissionChecker: McpPermissionChecker, uid: UID.ContentType, doc: unknown, opts?: GetMetadataOptions) => Promise<Record<string, unknown>>;
 /** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */
 export declare const ok: (structuredContent: Record<string, unknown>) => Modules.MCP.McpToolHandlerReturn;
 /**
@@ -18,4 +35,5 @@ export declare const describeTool: (params: {
     title: string;
     description: string;
 };
+export {};
 //# sourceMappingURL=utils.d.ts.map

package/dist/server/src/mcp/utils.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;~~AAE7C~~;;;GAGG;AACH,eAAO,MAAM,wBAAwB,QAAS,MAAM,KAAG,~~MAOtD~~,CAAC;AAEF,0GAA0G;AAC1G,eAAO,MAAM,EAAE,sBACM,OAAO,MAAM,EAAE,OAAO,CAAC,KACzC,QAAQ,GAAG,CAAC,oBAGb,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY,WAAY;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,KAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAiBvC,CAAC"}
1	+ {"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGxE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,QAAS,MAAM,KAAG,MAStD,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,cAAc,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,sBACX,oBAAoB,OAClC,IAAI,WAAW,OACf,OAAO,SACL,kBAAkB,KACxB,QAAQ,OAAO,MAAM,EAAE,OAAO,CAAC,CAejC,CAAC;AAEF,0GAA0G;AAC1G,eAAO,MAAM,EAAE,sBACM,OAAO,MAAM,EAAE,OAAO,CAAC,KACzC,QAAQ,GAAG,CAAC,oBAGb,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,YAAY,WAAY;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,KAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAiBvC,CAAC"}

package/dist/server/src/services/index.d.ts CHANGED Viewed

@@ -247,7 +247,9 @@ declare const _default: {
         }): any;
         populateDeep(level?: number): any;
         withPopulateOverride(overrides: Record<string, any>): any;
-        build(): Promise<{} | undefined>;
+        build(): Promise<string | import("@strapi/types/dist/modules/entity-service/params/populate").ArrayNotation<import("@strapi/types/dist/uid").Schema> | {
+            [key: string]: boolean | object;
+        } | undefined>;
     };
     uid: ({ strapi }: {
         strapi: import("@strapi/types/dist/core").Strapi;

package/dist/server/src/services/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,wBAeE"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../server/src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,wBAeE"}

package/dist/server/src/services/populate-builder.d.ts CHANGED Viewed

@@ -31,7 +31,9 @@ declare const _default: () => (uid: UID.Schema) => {
      * Construct the populate object based on the builder options.
      * @returns Populate object
      */
-    build(): Promise<{} | undefined>;
+    build(): Promise<string | import("@strapi/types/dist/modules/entity-service/params/populate").ArrayNotation<UID.Schema> | {
+        [key: string]: boolean | object;
+    } | undefined>;
 };
 export default _default;
 //# sourceMappingURL=populate-builder.d.ts.map

package/dist/server/src/services/populate-builder.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"populate-builder.d.ts","sourceRoot":"","sources":["../../../../server/src/services/populate-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;;IAwBrC;;;OAGG;;IAMH;;;;;OAKG;;;;;IAWH;;;OAGG;;IAMH;;;;;OAKG;;IAQH;;;OAGG~~;;;AAeP~~,wBAAqC"}
1	+ {"version":3,"file":"populate-builder.d.ts","sourceRoot":"","sources":["../../../../server/src/services/populate-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;;IAwBrC;;;OAGG;;IAMH;;;;;OAKG;;;;;IAWH;;;OAGG;;IAMH;;;;;OAKG;;IAQH;;;OAGG;;;;;AAkBP,wBAAqC"}

package/dist/server/src/services/utils/populate.d.ts CHANGED Viewed

@@ -12,7 +12,9 @@ type PopulateOptions = {
  * @param options - Options to apply while populating
  * @param level - Current level of nested call
  */
-declare const getDeepPopulate: (uid: UID.Schema, { initialPopulate, countMany, countOne, maxLevel, }?: PopulateOptions, level?: number) => {};
+declare const getDeepPopulate: (uid: UID.Schema, { initialPopulate, countMany, countOne, maxLevel, }?: PopulateOptions, level?: number) => {
+    [key: string]: boolean | object;
+};
 declare const getPopulateForValidation: (uid: UID.Schema) => Record<string, any>;
 declare const getDeepPopulateDraftCount: (uid: UID.Schema) => {
     populate: any;

package/dist/server/src/services/utils/populate.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"populate.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/utils/populate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAU,OAAO,EAAE,MAAM,eAAe,CAAC;AAsB1D,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAE7E,KAAK,eAAe,GAAG;IACrB,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAsHF;;;;;GAKG;AACH,QAAA,MAAM,eAAe,QACd,IAAI,MAAM,wDAMZ,eAAe,~~uBAgCnB~~,CAAC;AAUF,QAAA,MAAM,wBAAwB,QAAS,IAAI,MAAM,KAAG,OAAO,MAAM,EAAE,GAAG,CAuFrE,CAAC;AAaF,QAAA,MAAM,yBAAyB,QAAS,IAAI,MAAM;~~cAFU~~,GAAG;~~kBAAgB~~,OAAO;~~CAqFrF~~,CAAC;AAEF;;GAEG;AACH,QAAA,MAAM,gBAAgB,QAAe,IAAI,MAAM,SAAS,MAAM,KAAG,QAAQ,QAAQ,CA8BhF,CAAC;AAIF,QAAA,MAAM,iBAAiB,QAAe,IAAI,cAAc,iBAcvD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,2BAA2B,UAAW,IAAI,MAAM;;;;;;CAUrD,CAAC;AAEF,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,2BAA2B,GAC5B,CAAC"}
1	+ {"version":3,"file":"populate.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/utils/populate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAU,OAAO,EAAE,MAAM,eAAe,CAAC;AAsB1D,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAE7E,KAAK,eAAe,GAAG;IACrB,eAAe,CAAC,EAAE,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAsHF;;;;;GAKG;AACH,QAAA,MAAM,eAAe,QACd,IAAI,MAAM,wDAMZ,eAAe,qBAEjB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAA;CA8BnC,CAAC;AAUF,QAAA,MAAM,wBAAwB,QAAS,IAAI,MAAM,KAAG,OAAO,MAAM,EAAE,GAAG,CAuFrE,CAAC;AAaF,QAAA,MAAM,yBAAyB,QAAS,IAAI,MAAM,KAAG;IAAE,QAAQ,EAAE,GAAG,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAmF1F,CAAC;AAEF;;GAEG;AACH,QAAA,MAAM,gBAAgB,QAAe,IAAI,MAAM,SAAS,MAAM,KAAG,QAAQ,QAAQ,CA8BhF,CAAC;AAIF,QAAA,MAAM,iBAAiB,QAAe,IAAI,cAAc,iBAcvD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,2BAA2B,UAAW,IAAI,MAAM;;;;;;CAUrD,CAAC;AAEF,OAAO,EACL,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,2BAA2B,GAC5B,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/content-manager",
-  "version": "5.48.0",
+  "version": "5.49.0",
   "description": "A powerful UI to easily manage your data.",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -75,16 +75,17 @@
     "@sindresorhus/slugify": "1.1.0",
     "@strapi/design-system": "2.2.0",
     "@strapi/icons": "2.2.0",
-    "@strapi/types": "5.48.0",
-    "@strapi/utils": "5.48.0",
+    "@strapi/types": "5.49.0",
+    "@strapi/utils": "5.49.0",
     "codemirror5": "npm:codemirror@^5.65.11",
     "date-fns": "2.30.0",
+    "dompurify": "3.4.11",
     "fractional-indexing": "3.2.0",
     "highlight.js": "^10.4.1",
     "immer": "9.0.21",
     "koa": "2.16.4",
     "lodash": "4.18.1",
-    "markdown-it": "14.1.1",
+    "markdown-it": "14.2.0",
     "markdown-it-abbr": "^1.0.4",
     "markdown-it-container": "^3.0.0",
     "markdown-it-deflist": "^2.1.0",
@@ -103,7 +104,6 @@
     "react-query": "3.39.3",
     "react-redux": "8.1.3",
     "react-window": "1.8.10",
-    "sanitize-html": "2.17.4",
     "slate": "0.94.1",
     "slate-history": "0.93.0",
     "slate-react": "0.98.3",
@@ -111,8 +111,8 @@
     "zod": "3.25.67"
   },
   "devDependencies": {
-    "@strapi/admin": "5.48.0",
-    "@strapi/database": "5.48.0",
+    "@strapi/admin": "5.49.0",
+    "@strapi/database": "5.49.0",
     "@testing-library/react": "16.3.2",
     "@types/jest": "29.5.2",
     "@types/lodash": "^4.14.191",
@@ -132,7 +132,7 @@
     "styled-components": "^6.0.0"
   },
   "engines": {
-    "node": ">=20.0.0 <=24.x.x",
+    "node": ">=20.0.0 <=26.x.x",
     "npm": ">=6.0.0"
   },
   "strapi": {