@strapi/content-manager 5.48.1 → 5.50.0

package/dist/server/mcp/schemas/output-schemas.mjs

@@ -1,5 +1,29 @@
 import { z } from '@strapi/utils';
+import { isManyRelationForMcp } from '../sanitizers/shape-relations.mjs';
 
+const relationIdentity = z.object({
+    documentId: z.string(),
+    locale: z.string().optional(),
+    __type: z.string().optional(),
+    // Computed publish status preserved on `localizations` entries (calculate, then strip).
+    status: z.string().optional()
+});
+const buildAttributeSchema = (key, attributes)=>{
+    const attribute = attributes[key];
+    if (attribute?.type !== 'relation') {
+        return z.unknown().optional();
+    }
+    // admin::user relations are out of scope — left as unknown
+    if (attribute.target === 'admin::user') {
+        return z.unknown().optional();
+    }
+    // Must match the runtime shaping cardinality (shape-relations.ts) — the MCP SDK
+    // validates structuredContent against this schema, so a mismatch fails the tool call.
+    if (isManyRelationForMcp(attribute)) {
+        return z.array(relationIdentity).optional();
+    }
+    return relationIdentity.nullable().optional();
+};
 const buildOutputDataSchema = (attributes, permittedFields)=>{
     const readableKeys = Object.keys(attributes).filter((key)=>permittedFields === null || permittedFields.has(key));
     if (readableKeys.length === 0) {
@@ -7,7 +31,7 @@ const buildOutputDataSchema = (attributes, permittedFields)=>{
     }
     const shape = Object.fromEntries(readableKeys.map((key)=>[
             key,
-            z.unknown().optional()
+            buildAttributeSchema(key, attributes)
         ]));
     return z.object(shape).loose();
 };
@@ -35,9 +59,11 @@ const buildOutputDataSchema = (attributes, permittedFields)=>{
     }).loose();
 /**
  * Builds the MCP output schema for a delete response (`{ data }`).
- * Field shape is constrained to `readFields` when non-null (RBAC field filtering).
- */ const buildDeleteOutputSchema = (attributes, readFields)=>z.object({
-        data: buildOutputDataSchema(attributes, readFields).nullable()
+ * Delete handlers return an empty data object, so do not require document relation fields.
+ */ const buildDeleteOutputSchema = (// eslint-disable-next-line @typescript-eslint/no-unused-vars
+_attributes, // eslint-disable-next-line @typescript-eslint/no-unused-vars
+_readFields)=>z.object({
+        data: z.object({}).loose().nullable()
     }).loose();
 
 export { buildDeleteOutputSchema, buildDocumentOutputSchema, buildListOutputSchema };

package/dist/server/mcp/schemas/output-schemas.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"output-schemas.mjs","sources":["../../../../server/src/mcp/schemas/output-schemas.ts"],"sourcesContent":["import { z } from '@strapi/utils';\nimport type { Struct } from '@strapi/types';\n\nconst buildOutputDataSchema = (\n  attributes: Struct.SchemaAttributes,\n  permittedFields: Set<string> | null\n): z.ZodTypeAny => {\n  const readableKeys = Object.keys(attributes).filter(\n    (key) => permittedFields === null || permittedFields.has(key)\n  );\n\n  if (readableKeys.length === 0) {\n    return z.record(z.string(), z.unknown());\n  }\n\n  const shape = Object.fromEntries(readableKeys.map((key) => [key, z.unknown().optional()]));\n\n  return z.object(shape).loose();\n};\n\n/**\n * Builds the MCP output schema for a single-document response (`{ data, meta }`).\n * Field shape is constrained to `readFields` when non-null (RBAC field filtering).\n */\nexport const buildDocumentOutputSchema = (\n  attributes: Struct.SchemaAttributes,\n  readFields: Set<string> | null\n): z.ZodObject<z.ZodRawShape> =>\n  z\n    .object({\n      data: buildOutputDataSchema(attributes, readFields).nullable(),\n      meta: z\n        .object({\n          availableLocales: z.array(z.record(z.string(), z.unknown())).optional(),\n          availableStatus: z.array(z.record(z.string(), z.unknown())).optional(),\n        })\n        .optional(),\n    })\n    .loose();\n\n/**\n * Builds the MCP output schema for a paginated list response (`{ results, pagination }`).\n * Field shape is constrained to `readFields` when non-null (RBAC field filtering).\n */\nexport const buildListOutputSchema = (\n  attributes: Struct.SchemaAttributes,\n  readFields: Set<string> | null\n): z.ZodObject<z.ZodRawShape> =>\n  z\n    .object({\n      results: z.array(buildOutputDataSchema(attributes, readFields)),\n      pagination: z.object({\n        page: z.number(),\n        pageSize: z.number(),\n        pageCount: z.number(),\n        total: z.number(),\n      }),\n    })\n    .loose();\n\n/**\n * Builds the MCP output schema for a delete response (`{ data }`).\n * Field shape is constrained to `readFields` when non-null (RBAC field filtering).\n */\nexport const buildDeleteOutputSchema = (\n  attributes: Struct.SchemaAttributes,\n  readFields: Set<string> | null\n): z.ZodObject<z.ZodRawShape> =>\n  z\n    .object({\n      data: buildOutputDataSchema(attributes, readFields).nullable(),\n    })\n    .loose();\n"],"names":["buildOutputDataSchema","attributes","permittedFields","readableKeys","Object","keys","filter","key","has","length","z","record","string","unknown","shape","fromEntries","map","optional","object","loose","buildDocumentOutputSchema","readFields","data","nullable","meta","availableLocales","array","availableStatus","buildListOutputSchema","results","pagination","page","number","pageSize","pageCount","total","buildDeleteOutputSchema"],"mappings":";;AAGA,MAAMA,qBAAAA,GAAwB,CAC5BC,UAAAA,EACAC,eAAAA,GAAAA;AAEA,IAAA,MAAMC,YAAAA,GAAeC,MAAAA,CAAOC,IAAI,CAACJ,UAAAA,CAAAA,CAAYK,MAAM,CACjD,CAACC,GAAAA,GAAQL,eAAAA,KAAoB,IAAA,IAAQA,eAAAA,CAAgBM,GAAG,CAACD,GAAAA,CAAAA,CAAAA;IAG3D,IAAIJ,YAAAA,CAAaM,MAAM,KAAK,CAAA,EAAG;AAC7B,QAAA,OAAOC,EAAEC,MAAM,CAACD,EAAEE,MAAM,EAAA,EAAIF,EAAEG,OAAO,EAAA,CAAA;AACvC,IAAA;IAEA,MAAMC,KAAAA,GAAQV,OAAOW,WAAW,CAACZ,aAAaa,GAAG,CAAC,CAACT,GAAAA,GAAQ;AAACA,YAAAA,GAAAA;YAAKG,CAAAA,CAAEG,OAAO,GAAGI,QAAQ;AAAG,SAAA,CAAA,CAAA;AAExF,IAAA,OAAOP,CAAAA,CAAEQ,MAAM,CAACJ,KAAAA,CAAAA,CAAOK,KAAK,EAAA;AAC9B,CAAA;AAEA;;;UAIaC,yBAAAA,GAA4B,CACvCnB,YACAoB,UAAAA,GAEAX,CAAAA,CACGQ,MAAM,CAAC;QACNI,IAAAA,EAAMtB,qBAAAA,CAAsBC,UAAAA,EAAYoB,UAAAA,CAAAA,CAAYE,QAAQ,EAAA;QAC5DC,IAAAA,EAAMd,CAAAA,CACHQ,MAAM,CAAC;AACNO,YAAAA,gBAAAA,EAAkBf,CAAAA,CAAEgB,KAAK,CAAChB,CAAAA,CAAEC,MAAM,CAACD,CAAAA,CAAEE,MAAM,EAAA,EAAIF,CAAAA,CAAEG,OAAO,EAAA,CAAA,CAAA,CAAKI,QAAQ,EAAA;AACrEU,YAAAA,eAAAA,EAAiBjB,CAAAA,CAAEgB,KAAK,CAAChB,CAAAA,CAAEC,MAAM,CAACD,CAAAA,CAAEE,MAAM,EAAA,EAAIF,CAAAA,CAAEG,OAAO,EAAA,CAAA,CAAA,CAAKI,QAAQ;AACtE,SAAA,CAAA,CACCA,QAAQ;AACb,KAAA,CAAA,CACCE,KAAK;AAEV;;;UAIaS,qBAAAA,GAAwB,CACnC3B,YACAoB,UAAAA,GAEAX,CAAAA,CACGQ,MAAM,CAAC;AACNW,QAAAA,OAAAA,EAASnB,CAAAA,CAAEgB,KAAK,CAAC1B,qBAAAA,CAAsBC,UAAAA,EAAYoB,UAAAA,CAAAA,CAAAA;QACnDS,UAAAA,EAAYpB,CAAAA,CAAEQ,MAAM,CAAC;AACnBa,YAAAA,IAAAA,EAAMrB,EAAEsB,MAAM,EAAA;AACdC,YAAAA,QAAAA,EAAUvB,EAAEsB,MAAM,EAAA;AAClBE,YAAAA,SAAAA,EAAWxB,EAAEsB,MAAM,EAAA;AACnBG,YAAAA,KAAAA,EAAOzB,EAAEsB,MAAM;AACjB,SAAA;AACF,KAAA,CAAA,CACCb,KAAK;AAEV;;;UAIaiB,uBAAAA,GAA0B,CACrCnC,YACAoB,UAAAA,GAEAX,CAAAA,CACGQ,MAAM,CAAC;QACNI,IAAAA,EAAMtB,qBAAAA,CAAsBC,UAAAA,EAAYoB,UAAAA,CAAAA,CAAYE,QAAQ;AAC9D,KAAA,CAAA,CACCJ,KAAK;;;;"}
+{"version":3,"file":"output-schemas.mjs","sources":["../../../../server/src/mcp/schemas/output-schemas.ts"],"sourcesContent":["import { z } from '@strapi/utils';\nimport type { Struct } from '@strapi/types';\n\nimport { isManyRelationForMcp } from '../sanitizers/shape-relations';\n\nconst relationIdentity = z.object({\n  documentId: z.string(),\n  locale: z.string().optional(),\n  __type: z.string().optional(),\n  // Computed publish status preserved on `localizations` entries (calculate, then strip).\n  status: z.string().optional(),\n});\n\nconst buildAttributeSchema = (key: string, attributes: Struct.SchemaAttributes): z.ZodTypeAny => {\n  const attribute = attributes[key];\n\n  if (attribute?.type !== 'relation') {\n    return z.unknown().optional();\n  }\n\n  // admin::user relations are out of scope — left as unknown\n  if ((attribute as { target?: string }).target === 'admin::user') {\n    return z.unknown().optional();\n  }\n\n  // Must match the runtime shaping cardinality (shape-relations.ts) — the MCP SDK\n  // validates structuredContent against this schema, so a mismatch fails the tool call.\n  if (isManyRelationForMcp(attribute as { relation?: string })) {\n    return z.array(relationIdentity).optional();\n  }\n\n  return relationIdentity.nullable().optional();\n};\n\nconst buildOutputDataSchema = (\n  attributes: Struct.SchemaAttributes,\n  permittedFields: Set<string> | null\n): z.ZodTypeAny => {\n  const readableKeys = Object.keys(attributes).filter(\n    (key) => permittedFields === null || permittedFields.has(key)\n  );\n\n  if (readableKeys.length === 0) {\n    return z.record(z.string(), z.unknown());\n  }\n\n  const shape = Object.fromEntries(\n    readableKeys.map((key) => [key, buildAttributeSchema(key, attributes)])\n  );\n\n  return z.object(shape).loose();\n};\n\n/**\n * Builds the MCP output schema for a single-document response (`{ data, meta }`).\n * Field shape is constrained to `readFields` when non-null (RBAC field filtering).\n */\nexport const buildDocumentOutputSchema = (\n  attributes: Struct.SchemaAttributes,\n  readFields: Set<string> | null\n): z.ZodObject<z.ZodRawShape> =>\n  z\n    .object({\n      data: buildOutputDataSchema(attributes, readFields).nullable(),\n      meta: z\n        .object({\n          availableLocales: z.array(z.record(z.string(), z.unknown())).optional(),\n          availableStatus: z.array(z.record(z.string(), z.unknown())).optional(),\n        })\n        .optional(),\n    })\n    .loose();\n\n/**\n * Builds the MCP output schema for a paginated list response (`{ results, pagination }`).\n * Field shape is constrained to `readFields` when non-null (RBAC field filtering).\n */\nexport const buildListOutputSchema = (\n  attributes: Struct.SchemaAttributes,\n  readFields: Set<string> | null\n): z.ZodObject<z.ZodRawShape> =>\n  z\n    .object({\n      results: z.array(buildOutputDataSchema(attributes, readFields)),\n      pagination: z.object({\n        page: z.number(),\n        pageSize: z.number(),\n        pageCount: z.number(),\n        total: z.number(),\n      }),\n    })\n    .loose();\n\n/**\n * Builds the MCP output schema for a delete response (`{ data }`).\n * Delete handlers return an empty data object, so do not require document relation fields.\n */\nexport const buildDeleteOutputSchema = (\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  _attributes: Struct.SchemaAttributes,\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  _readFields: Set<string> | null\n): z.ZodObject<z.ZodRawShape> =>\n  z\n    .object({\n      data: z.object({}).loose().nullable(),\n    })\n    .loose();\n"],"names":["relationIdentity","z","object","documentId","string","locale","optional","__type","status","buildAttributeSchema","key","attributes","attribute","type","unknown","target","isManyRelationForMcp","array","nullable","buildOutputDataSchema","permittedFields","readableKeys","Object","keys","filter","has","length","record","shape","fromEntries","map","loose","buildDocumentOutputSchema","readFields","data","meta","availableLocales","availableStatus","buildListOutputSchema","results","pagination","page","number","pageSize","pageCount","total","buildDeleteOutputSchema","_attributes","_readFields"],"mappings":";;;AAKA,MAAMA,gBAAAA,GAAmBC,CAAAA,CAAEC,MAAM,CAAC;AAChCC,IAAAA,UAAAA,EAAYF,EAAEG,MAAM,EAAA;IACpBC,MAAAA,EAAQJ,CAAAA,CAAEG,MAAM,EAAA,CAAGE,QAAQ,EAAA;IAC3BC,MAAAA,EAAQN,CAAAA,CAAEG,MAAM,EAAA,CAAGE,QAAQ,EAAA;;IAE3BE,MAAAA,EAAQP,CAAAA,CAAEG,MAAM,EAAA,CAAGE,QAAQ;AAC7B,CAAA,CAAA;AAEA,MAAMG,oBAAAA,GAAuB,CAACC,GAAAA,EAAaC,UAAAA,GAAAA;IACzC,MAAMC,SAAAA,GAAYD,UAAU,CAACD,GAAAA,CAAI;IAEjC,IAAIE,SAAAA,EAAWC,SAAS,UAAA,EAAY;QAClC,OAAOZ,CAAAA,CAAEa,OAAO,EAAA,CAAGR,QAAQ,EAAA;AAC7B,IAAA;;AAGA,IAAA,IAAI,SAACM,CAAkCG,MAAM,KAAK,aAAA,EAAe;QAC/D,OAAOd,CAAAA,CAAEa,OAAO,EAAA,CAAGR,QAAQ,EAAA;AAC7B,IAAA;;;AAIA,IAAA,IAAIU,qBAAqBJ,SAAAA,CAAAA,EAAqC;AAC5D,QAAA,OAAOX,CAAAA,CAAEgB,KAAK,CAACjB,gBAAAA,CAAAA,CAAkBM,QAAQ,EAAA;AAC3C,IAAA;IAEA,OAAON,gBAAAA,CAAiBkB,QAAQ,EAAA,CAAGZ,QAAQ,EAAA;AAC7C,CAAA;AAEA,MAAMa,qBAAAA,GAAwB,CAC5BR,UAAAA,EACAS,eAAAA,GAAAA;AAEA,IAAA,MAAMC,YAAAA,GAAeC,MAAAA,CAAOC,IAAI,CAACZ,UAAAA,CAAAA,CAAYa,MAAM,CACjD,CAACd,GAAAA,GAAQU,eAAAA,KAAoB,IAAA,IAAQA,eAAAA,CAAgBK,GAAG,CAACf,GAAAA,CAAAA,CAAAA;IAG3D,IAAIW,YAAAA,CAAaK,MAAM,KAAK,CAAA,EAAG;AAC7B,QAAA,OAAOzB,EAAE0B,MAAM,CAAC1B,EAAEG,MAAM,EAAA,EAAIH,EAAEa,OAAO,EAAA,CAAA;AACvC,IAAA;IAEA,MAAMc,KAAAA,GAAQN,OAAOO,WAAW,CAC9BR,aAAaS,GAAG,CAAC,CAACpB,GAAAA,GAAQ;AAACA,YAAAA,GAAAA;AAAKD,YAAAA,oBAAAA,CAAqBC,GAAAA,EAAKC,UAAAA;AAAY,SAAA,CAAA,CAAA;AAGxE,IAAA,OAAOV,CAAAA,CAAEC,MAAM,CAAC0B,KAAAA,CAAAA,CAAOG,KAAK,EAAA;AAC9B,CAAA;AAEA;;;UAIaC,yBAAAA,GAA4B,CACvCrB,YACAsB,UAAAA,GAEAhC,CAAAA,CACGC,MAAM,CAAC;QACNgC,IAAAA,EAAMf,qBAAAA,CAAsBR,UAAAA,EAAYsB,UAAAA,CAAAA,CAAYf,QAAQ,EAAA;QAC5DiB,IAAAA,EAAMlC,CAAAA,CACHC,MAAM,CAAC;AACNkC,YAAAA,gBAAAA,EAAkBnC,CAAAA,CAAEgB,KAAK,CAAChB,CAAAA,CAAE0B,MAAM,CAAC1B,CAAAA,CAAEG,MAAM,EAAA,EAAIH,CAAAA,CAAEa,OAAO,EAAA,CAAA,CAAA,CAAKR,QAAQ,EAAA;AACrE+B,YAAAA,eAAAA,EAAiBpC,CAAAA,CAAEgB,KAAK,CAAChB,CAAAA,CAAE0B,MAAM,CAAC1B,CAAAA,CAAEG,MAAM,EAAA,EAAIH,CAAAA,CAAEa,OAAO,EAAA,CAAA,CAAA,CAAKR,QAAQ;AACtE,SAAA,CAAA,CACCA,QAAQ;AACb,KAAA,CAAA,CACCyB,KAAK;AAEV;;;UAIaO,qBAAAA,GAAwB,CACnC3B,YACAsB,UAAAA,GAEAhC,CAAAA,CACGC,MAAM,CAAC;AACNqC,QAAAA,OAAAA,EAAStC,CAAAA,CAAEgB,KAAK,CAACE,qBAAAA,CAAsBR,UAAAA,EAAYsB,UAAAA,CAAAA,CAAAA;QACnDO,UAAAA,EAAYvC,CAAAA,CAAEC,MAAM,CAAC;AACnBuC,YAAAA,IAAAA,EAAMxC,EAAEyC,MAAM,EAAA;AACdC,YAAAA,QAAAA,EAAU1C,EAAEyC,MAAM,EAAA;AAClBE,YAAAA,SAAAA,EAAW3C,EAAEyC,MAAM,EAAA;AACnBG,YAAAA,KAAAA,EAAO5C,EAAEyC,MAAM;AACjB,SAAA;AACF,KAAA,CAAA,CACCX,KAAK;AAEV;;;AAGC,IACM,MAAMe,uBAAAA,GAA0B;AAErCC,WAAAA;AAEAC,WAAAA,GAEA/C,CAAAA,CACGC,MAAM,CAAC;AACNgC,QAAAA,IAAAA,EAAMjC,EAAEC,MAAM,CAAC,EAAC,CAAA,CAAG6B,KAAK,GAAGb,QAAQ;AACrC,KAAA,CAAA,CACCa,KAAK;;;;"}

package/dist/server/mcp/utils.js

@@ -1,15 +1,41 @@
 'use strict';
 
+var metadata = require('../controllers/utils/metadata.js');
+var shapeRelations = require('./sanitizers/shape-relations.js');
+
 /**
  * Converts a Strapi content-type UID into a safe MCP tool-name segment.
  * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.
  */ const slugifyUidForMcpToolName = (uid)=>{
     const [namespace, modelName] = uid.split('::');
-    const modelNameParts = modelName.split('.').map((part)=>part.toLowerCase());
+    const parts = modelName.split('.').map((part)=>part.toLowerCase());
     if (namespace === 'api') {
-        return `${modelNameParts[0]}`;
+        return parts[0];
+    }
+    return `${namespace.toLowerCase()}-${parts.join('_')}`;
+};
+/**
+ * Output chokepoint for MCP handlers returning `{ data, meta }`.
+ * Order matters — calculate, then strip:
+ * 1. permission-based sanitization,
+ * 2. formatDocumentWithMetadata — computes `data.status` and `localizations[].status`
+ *    from `publishedAt`/`updatedAt`, which relation shaping removes,
+ * 3. relation shaping on the formatted `data` (identity-only relations; the
+ *    freshly-computed `localizations[].status` survives via RelationIdentity).
+ *
+ * Handlers that do NOT attach metadata (delete, list) compose
+ * `permissionChecker.sanitizeOutput` + `shapeRelationsForMcp` directly instead.
+ */ const sanitizeFormatShape = async (permissionChecker, uid, doc, opts)=>{
+    const sanitized = await permissionChecker.sanitizeOutput(doc);
+    const formatted = await metadata.formatDocumentWithMetadata(permissionChecker, uid, sanitized, opts);
+    if (formatted.data === null || formatted.data === undefined) {
+        return formatted;
     }
-    return `${namespace.toLowerCase()}_${modelNameParts[0]}`;
+    const shapedData = await shapeRelations.shapeRelationsForMcp(uid, formatted.data);
+    return {
+        ...formatted,
+        data: shapedData
+    };
 };
 /** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */ const ok = (structuredContent)=>({
         content: [
@@ -39,5 +65,6 @@
 
 exports.describeTool = describeTool;
 exports.ok = ok;
+exports.sanitizeFormatShape = sanitizeFormatShape;
 exports.slugifyUidForMcpToolName = slugifyUidForMcpToolName;
 //# sourceMappingURL=utils.js.map

package/dist/server/mcp/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sources":["../../../server/src/mcp/utils.ts"],"sourcesContent":["import type { Modules } from '@strapi/types';\n\n/**\n * Converts a Strapi content-type UID into a safe MCP tool-name segment.\n * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.\n */\nexport const slugifyUidForMcpToolName = (uid: string): string => {\n  const [namespace, modelName] = uid.split('::');\n  const modelNameParts = modelName.split('.').map((part) => part.toLowerCase());\n  if (namespace === 'api') {\n    return `${modelNameParts[0]}`;\n  }\n  return `${namespace.toLowerCase()}_${modelNameParts[0]}`;\n};\n\n/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */\nexport const ok = (\n  structuredContent: Record<string, unknown>\n): Modules.MCP.McpToolHandlerReturn => ({\n  content: [{ type: 'text', text: JSON.stringify(structuredContent) }],\n  structuredContent,\n});\n\n/**\n * Generates the `title` and `description` metadata for a derived MCP tool.\n * Appends operation-specific notes for write/publish/unpublish/discard_draft operations.\n */\nexport const describeTool = (params: {\n  apiID: string;\n  uid: string;\n  operation: string;\n}): { title: string; description: string } => {\n  const { apiID, uid, operation } = params;\n  const operationNoteByType: Partial<Record<string, string>> = {\n    write:\n      ' Creates or updates the single-type document. If no document exists, creates one; otherwise updates the existing draft.',\n    publish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the published version row.',\n    unpublish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the draft version row.',\n    discard_draft:\n      ' Operates on an existing document by documentId; treat documentId as the stable identity.',\n  };\n\n  return {\n    title: `Content: ${apiID} — ${operation}`,\n    description: `Content-manager ${operation} for ${uid}.${operationNoteByType[operation] ?? ''}`,\n  };\n};\n"],"names":["slugifyUidForMcpToolName","uid","namespace","modelName","split","modelNameParts","map","part","toLowerCase","ok","structuredContent","content","type","text","JSON","stringify","describeTool","params","apiID","operation","operationNoteByType","write","publish","unpublish","discard_draft","title","description"],"mappings":";;AAEA;;;IAIO,MAAMA,wBAAAA,GAA2B,CAACC,GAAAA,GAAAA;AACvC,IAAA,MAAM,CAACC,SAAAA,EAAWC,SAAAA,CAAU,GAAGF,GAAAA,CAAIG,KAAK,CAAC,IAAA,CAAA;IACzC,MAAMC,cAAAA,GAAiBF,SAAAA,CAAUC,KAAK,CAAC,GAAA,CAAA,CAAKE,GAAG,CAAC,CAACC,IAAAA,GAASA,IAAAA,CAAKC,WAAW,EAAA,CAAA;AAC1E,IAAA,IAAIN,cAAc,KAAA,EAAO;AACvB,QAAA,OAAO,CAAA,EAAGG,cAAc,CAAC,CAAA,CAAE,CAAA,CAAE;AAC/B,IAAA;IACA,OAAO,CAAA,EAAGH,UAAUM,WAAW,EAAA,CAAG,CAAC,EAAEH,cAAc,CAAC,CAAA,CAAE,CAAA,CAAE;AAC1D;AAEA,2GACO,MAAMI,EAAAA,GAAK,CAChBC,qBACsC;QACtCC,OAAAA,EAAS;AAAC,YAAA;gBAAEC,IAAAA,EAAM,MAAA;gBAAQC,IAAAA,EAAMC,IAAAA,CAAKC,SAAS,CAACL,iBAAAA;AAAmB;AAAE,SAAA;AACpEA,QAAAA;AACF,KAAA;AAEA;;;IAIO,MAAMM,YAAAA,GAAe,CAACC,MAAAA,GAAAA;AAK3B,IAAA,MAAM,EAAEC,KAAK,EAAEjB,GAAG,EAAEkB,SAAS,EAAE,GAAGF,MAAAA;AAClC,IAAA,MAAMG,mBAAAA,GAAuD;QAC3DC,KAAAA,EACE,yHAAA;QACFC,OAAAA,EACE,sHAAA;QACFC,SAAAA,EACE,kHAAA;QACFC,aAAAA,EACE;AACJ,KAAA;IAEA,OAAO;AACLC,QAAAA,KAAAA,EAAO,CAAC,SAAS,EAAEP,KAAAA,CAAM,GAAG,EAAEC,SAAAA,CAAAA,CAAW;AACzCO,QAAAA,WAAAA,EAAa,CAAC,gBAAgB,EAAEP,SAAAA,CAAU,KAAK,EAAElB,GAAAA,CAAI,CAAC,EAAEmB,mBAAmB,CAACD,SAAAA,CAAU,IAAI,EAAA,CAAA;AAC5F,KAAA;AACF;;;;;;"}
+{"version":3,"file":"utils.js","sources":["../../../server/src/mcp/utils.ts"],"sourcesContent":["import type { Modules, UID } from '@strapi/types';\n\nimport { formatDocumentWithMetadata } from '../controllers/utils/metadata';\nimport type { GetMetadataOptions } from '../services/document-metadata';\nimport { shapeRelationsForMcp } from './sanitizers/shape-relations';\n\n/**\n * Converts a Strapi content-type UID into a safe MCP tool-name segment.\n * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.\n */\nexport const slugifyUidForMcpToolName = (uid: string): string => {\n  const [namespace, modelName] = uid.split('::');\n  const parts = modelName.split('.').map((part) => part.toLowerCase());\n\n  if (namespace === 'api') {\n    return parts[0];\n  }\n\n  return `${namespace.toLowerCase()}-${parts.join('_')}`;\n};\n\ntype McpPermissionChecker = {\n  sanitizeOutput: (doc: unknown) => Promise<Record<string, unknown>>;\n};\n\n/**\n * Output chokepoint for MCP handlers returning `{ data, meta }`.\n * Order matters — calculate, then strip:\n * 1. permission-based sanitization,\n * 2. formatDocumentWithMetadata — computes `data.status` and `localizations[].status`\n *    from `publishedAt`/`updatedAt`, which relation shaping removes,\n * 3. relation shaping on the formatted `data` (identity-only relations; the\n *    freshly-computed `localizations[].status` survives via RelationIdentity).\n *\n * Handlers that do NOT attach metadata (delete, list) compose\n * `permissionChecker.sanitizeOutput` + `shapeRelationsForMcp` directly instead.\n */\nexport const sanitizeFormatShape = async (\n  permissionChecker: McpPermissionChecker,\n  uid: UID.ContentType,\n  doc: unknown,\n  opts?: GetMetadataOptions\n): Promise<Record<string, unknown>> => {\n  const sanitized = await permissionChecker.sanitizeOutput(doc);\n  const formatted = await formatDocumentWithMetadata(\n    permissionChecker,\n    uid,\n    sanitized as unknown as Parameters<typeof formatDocumentWithMetadata>[2],\n    opts\n  );\n\n  if (formatted.data === null || formatted.data === undefined) {\n    return formatted;\n  }\n\n  const shapedData = await shapeRelationsForMcp(uid, formatted.data as Record<string, unknown>);\n  return { ...formatted, data: shapedData };\n};\n\n/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */\nexport const ok = (\n  structuredContent: Record<string, unknown>\n): Modules.MCP.McpToolHandlerReturn => ({\n  content: [{ type: 'text', text: JSON.stringify(structuredContent) }],\n  structuredContent,\n});\n\n/**\n * Generates the `title` and `description` metadata for a derived MCP tool.\n * Appends operation-specific notes for write/publish/unpublish/discard_draft operations.\n */\nexport const describeTool = (params: {\n  apiID: string;\n  uid: string;\n  operation: string;\n}): { title: string; description: string } => {\n  const { apiID, uid, operation } = params;\n  const operationNoteByType: Partial<Record<string, string>> = {\n    write:\n      ' Creates or updates the single-type document. If no document exists, creates one; otherwise updates the existing draft.',\n    publish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the published version row.',\n    unpublish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the draft version row.',\n    discard_draft:\n      ' Operates on an existing document by documentId; treat documentId as the stable identity.',\n  };\n\n  return {\n    title: `Content: ${apiID} — ${operation}`,\n    description: `Content-manager ${operation} for ${uid}.${operationNoteByType[operation] ?? ''}`,\n  };\n};\n"],"names":["slugifyUidForMcpToolName","uid","namespace","modelName","split","parts","map","part","toLowerCase","join","sanitizeFormatShape","permissionChecker","doc","opts","sanitized","sanitizeOutput","formatted","formatDocumentWithMetadata","data","undefined","shapedData","shapeRelationsForMcp","ok","structuredContent","content","type","text","JSON","stringify","describeTool","params","apiID","operation","operationNoteByType","write","publish","unpublish","discard_draft","title","description"],"mappings":";;;;;AAMA;;;IAIO,MAAMA,wBAAAA,GAA2B,CAACC,GAAAA,GAAAA;AACvC,IAAA,MAAM,CAACC,SAAAA,EAAWC,SAAAA,CAAU,GAAGF,GAAAA,CAAIG,KAAK,CAAC,IAAA,CAAA;IACzC,MAAMC,KAAAA,GAAQF,SAAAA,CAAUC,KAAK,CAAC,GAAA,CAAA,CAAKE,GAAG,CAAC,CAACC,IAAAA,GAASA,IAAAA,CAAKC,WAAW,EAAA,CAAA;AAEjE,IAAA,IAAIN,cAAc,KAAA,EAAO;QACvB,OAAOG,KAAK,CAAC,CAAA,CAAE;AACjB,IAAA;IAEA,OAAO,CAAA,EAAGH,UAAUM,WAAW,EAAA,CAAG,CAAC,EAAEH,KAAAA,CAAMI,IAAI,CAAC,GAAA,CAAA,CAAA,CAAM;AACxD;AAMA;;;;;;;;;;;AAWC,IACM,MAAMC,mBAAAA,GAAsB,OACjCC,iBAAAA,EACAV,KACAW,GAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,MAAMC,SAAAA,GAAY,MAAMH,iBAAAA,CAAkBI,cAAc,CAACH,GAAAA,CAAAA;AACzD,IAAA,MAAMI,SAAAA,GAAY,MAAMC,mCAAAA,CACtBN,iBAAAA,EACAV,KACAa,SAAAA,EACAD,IAAAA,CAAAA;AAGF,IAAA,IAAIG,UAAUE,IAAI,KAAK,QAAQF,SAAAA,CAAUE,IAAI,KAAKC,SAAAA,EAAW;QAC3D,OAAOH,SAAAA;AACT,IAAA;AAEA,IAAA,MAAMI,UAAAA,GAAa,MAAMC,mCAAAA,CAAqBpB,GAAAA,EAAKe,UAAUE,IAAI,CAAA;IACjE,OAAO;AAAE,QAAA,GAAGF,SAAS;QAAEE,IAAAA,EAAME;AAAW,KAAA;AAC1C;AAEA,2GACO,MAAME,EAAAA,GAAK,CAChBC,qBACsC;QACtCC,OAAAA,EAAS;AAAC,YAAA;gBAAEC,IAAAA,EAAM,MAAA;gBAAQC,IAAAA,EAAMC,IAAAA,CAAKC,SAAS,CAACL,iBAAAA;AAAmB;AAAE,SAAA;AACpEA,QAAAA;AACF,KAAA;AAEA;;;IAIO,MAAMM,YAAAA,GAAe,CAACC,MAAAA,GAAAA;AAK3B,IAAA,MAAM,EAAEC,KAAK,EAAE9B,GAAG,EAAE+B,SAAS,EAAE,GAAGF,MAAAA;AAClC,IAAA,MAAMG,mBAAAA,GAAuD;QAC3DC,KAAAA,EACE,yHAAA;QACFC,OAAAA,EACE,sHAAA;QACFC,SAAAA,EACE,kHAAA;QACFC,aAAAA,EACE;AACJ,KAAA;IAEA,OAAO;AACLC,QAAAA,KAAAA,EAAO,CAAC,SAAS,EAAEP,KAAAA,CAAM,GAAG,EAAEC,SAAAA,CAAAA,CAAW;AACzCO,QAAAA,WAAAA,EAAa,CAAC,gBAAgB,EAAEP,SAAAA,CAAU,KAAK,EAAE/B,GAAAA,CAAI,CAAC,EAAEgC,mBAAmB,CAACD,SAAAA,CAAU,IAAI,EAAA,CAAA;AAC5F,KAAA;AACF;;;;;;;"}

package/dist/server/mcp/utils.mjs

@@ -1,13 +1,39 @@
+import { formatDocumentWithMetadata } from '../controllers/utils/metadata.mjs';
+import { shapeRelationsForMcp } from './sanitizers/shape-relations.mjs';
+
 /**
  * Converts a Strapi content-type UID into a safe MCP tool-name segment.
  * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.
  */ const slugifyUidForMcpToolName = (uid)=>{
     const [namespace, modelName] = uid.split('::');
-    const modelNameParts = modelName.split('.').map((part)=>part.toLowerCase());
+    const parts = modelName.split('.').map((part)=>part.toLowerCase());
     if (namespace === 'api') {
-        return `${modelNameParts[0]}`;
+        return parts[0];
+    }
+    return `${namespace.toLowerCase()}-${parts.join('_')}`;
+};
+/**
+ * Output chokepoint for MCP handlers returning `{ data, meta }`.
+ * Order matters — calculate, then strip:
+ * 1. permission-based sanitization,
+ * 2. formatDocumentWithMetadata — computes `data.status` and `localizations[].status`
+ *    from `publishedAt`/`updatedAt`, which relation shaping removes,
+ * 3. relation shaping on the formatted `data` (identity-only relations; the
+ *    freshly-computed `localizations[].status` survives via RelationIdentity).
+ *
+ * Handlers that do NOT attach metadata (delete, list) compose
+ * `permissionChecker.sanitizeOutput` + `shapeRelationsForMcp` directly instead.
+ */ const sanitizeFormatShape = async (permissionChecker, uid, doc, opts)=>{
+    const sanitized = await permissionChecker.sanitizeOutput(doc);
+    const formatted = await formatDocumentWithMetadata(permissionChecker, uid, sanitized, opts);
+    if (formatted.data === null || formatted.data === undefined) {
+        return formatted;
     }
-    return `${namespace.toLowerCase()}_${modelNameParts[0]}`;
+    const shapedData = await shapeRelationsForMcp(uid, formatted.data);
+    return {
+        ...formatted,
+        data: shapedData
+    };
 };
 /** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */ const ok = (structuredContent)=>({
         content: [
@@ -35,5 +61,5 @@
     };
 };
 
-export { describeTool, ok, slugifyUidForMcpToolName };
+export { describeTool, ok, sanitizeFormatShape, slugifyUidForMcpToolName };
 //# sourceMappingURL=utils.mjs.map

package/dist/server/mcp/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","sources":["../../../server/src/mcp/utils.ts"],"sourcesContent":["import type { Modules } from '@strapi/types';\n\n/**\n * Converts a Strapi content-type UID into a safe MCP tool-name segment.\n * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.\n */\nexport const slugifyUidForMcpToolName = (uid: string): string => {\n  const [namespace, modelName] = uid.split('::');\n  const modelNameParts = modelName.split('.').map((part) => part.toLowerCase());\n  if (namespace === 'api') {\n    return `${modelNameParts[0]}`;\n  }\n  return `${namespace.toLowerCase()}_${modelNameParts[0]}`;\n};\n\n/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */\nexport const ok = (\n  structuredContent: Record<string, unknown>\n): Modules.MCP.McpToolHandlerReturn => ({\n  content: [{ type: 'text', text: JSON.stringify(structuredContent) }],\n  structuredContent,\n});\n\n/**\n * Generates the `title` and `description` metadata for a derived MCP tool.\n * Appends operation-specific notes for write/publish/unpublish/discard_draft operations.\n */\nexport const describeTool = (params: {\n  apiID: string;\n  uid: string;\n  operation: string;\n}): { title: string; description: string } => {\n  const { apiID, uid, operation } = params;\n  const operationNoteByType: Partial<Record<string, string>> = {\n    write:\n      ' Creates or updates the single-type document. If no document exists, creates one; otherwise updates the existing draft.',\n    publish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the published version row.',\n    unpublish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the draft version row.',\n    discard_draft:\n      ' Operates on an existing document by documentId; treat documentId as the stable identity.',\n  };\n\n  return {\n    title: `Content: ${apiID} — ${operation}`,\n    description: `Content-manager ${operation} for ${uid}.${operationNoteByType[operation] ?? ''}`,\n  };\n};\n"],"names":["slugifyUidForMcpToolName","uid","namespace","modelName","split","modelNameParts","map","part","toLowerCase","ok","structuredContent","content","type","text","JSON","stringify","describeTool","params","apiID","operation","operationNoteByType","write","publish","unpublish","discard_draft","title","description"],"mappings":"AAEA;;;IAIO,MAAMA,wBAAAA,GAA2B,CAACC,GAAAA,GAAAA;AACvC,IAAA,MAAM,CAACC,SAAAA,EAAWC,SAAAA,CAAU,GAAGF,GAAAA,CAAIG,KAAK,CAAC,IAAA,CAAA;IACzC,MAAMC,cAAAA,GAAiBF,SAAAA,CAAUC,KAAK,CAAC,GAAA,CAAA,CAAKE,GAAG,CAAC,CAACC,IAAAA,GAASA,IAAAA,CAAKC,WAAW,EAAA,CAAA;AAC1E,IAAA,IAAIN,cAAc,KAAA,EAAO;AACvB,QAAA,OAAO,CAAA,EAAGG,cAAc,CAAC,CAAA,CAAE,CAAA,CAAE;AAC/B,IAAA;IACA,OAAO,CAAA,EAAGH,UAAUM,WAAW,EAAA,CAAG,CAAC,EAAEH,cAAc,CAAC,CAAA,CAAE,CAAA,CAAE;AAC1D;AAEA,2GACO,MAAMI,EAAAA,GAAK,CAChBC,qBACsC;QACtCC,OAAAA,EAAS;AAAC,YAAA;gBAAEC,IAAAA,EAAM,MAAA;gBAAQC,IAAAA,EAAMC,IAAAA,CAAKC,SAAS,CAACL,iBAAAA;AAAmB;AAAE,SAAA;AACpEA,QAAAA;AACF,KAAA;AAEA;;;IAIO,MAAMM,YAAAA,GAAe,CAACC,MAAAA,GAAAA;AAK3B,IAAA,MAAM,EAAEC,KAAK,EAAEjB,GAAG,EAAEkB,SAAS,EAAE,GAAGF,MAAAA;AAClC,IAAA,MAAMG,mBAAAA,GAAuD;QAC3DC,KAAAA,EACE,yHAAA;QACFC,OAAAA,EACE,sHAAA;QACFC,SAAAA,EACE,kHAAA;QACFC,aAAAA,EACE;AACJ,KAAA;IAEA,OAAO;AACLC,QAAAA,KAAAA,EAAO,CAAC,SAAS,EAAEP,KAAAA,CAAM,GAAG,EAAEC,SAAAA,CAAAA,CAAW;AACzCO,QAAAA,WAAAA,EAAa,CAAC,gBAAgB,EAAEP,SAAAA,CAAU,KAAK,EAAElB,GAAAA,CAAI,CAAC,EAAEmB,mBAAmB,CAACD,SAAAA,CAAU,IAAI,EAAA,CAAA;AAC5F,KAAA;AACF;;;;"}
+{"version":3,"file":"utils.mjs","sources":["../../../server/src/mcp/utils.ts"],"sourcesContent":["import type { Modules, UID } from '@strapi/types';\n\nimport { formatDocumentWithMetadata } from '../controllers/utils/metadata';\nimport type { GetMetadataOptions } from '../services/document-metadata';\nimport { shapeRelationsForMcp } from './sanitizers/shape-relations';\n\n/**\n * Converts a Strapi content-type UID into a safe MCP tool-name segment.\n * `api::article.article` → `article`; `plugin::i18n.locale` → `plugin-i18n_locale`.\n */\nexport const slugifyUidForMcpToolName = (uid: string): string => {\n  const [namespace, modelName] = uid.split('::');\n  const parts = modelName.split('.').map((part) => part.toLowerCase());\n\n  if (namespace === 'api') {\n    return parts[0];\n  }\n\n  return `${namespace.toLowerCase()}-${parts.join('_')}`;\n};\n\ntype McpPermissionChecker = {\n  sanitizeOutput: (doc: unknown) => Promise<Record<string, unknown>>;\n};\n\n/**\n * Output chokepoint for MCP handlers returning `{ data, meta }`.\n * Order matters — calculate, then strip:\n * 1. permission-based sanitization,\n * 2. formatDocumentWithMetadata — computes `data.status` and `localizations[].status`\n *    from `publishedAt`/`updatedAt`, which relation shaping removes,\n * 3. relation shaping on the formatted `data` (identity-only relations; the\n *    freshly-computed `localizations[].status` survives via RelationIdentity).\n *\n * Handlers that do NOT attach metadata (delete, list) compose\n * `permissionChecker.sanitizeOutput` + `shapeRelationsForMcp` directly instead.\n */\nexport const sanitizeFormatShape = async (\n  permissionChecker: McpPermissionChecker,\n  uid: UID.ContentType,\n  doc: unknown,\n  opts?: GetMetadataOptions\n): Promise<Record<string, unknown>> => {\n  const sanitized = await permissionChecker.sanitizeOutput(doc);\n  const formatted = await formatDocumentWithMetadata(\n    permissionChecker,\n    uid,\n    sanitized as unknown as Parameters<typeof formatDocumentWithMetadata>[2],\n    opts\n  );\n\n  if (formatted.data === null || formatted.data === undefined) {\n    return formatted;\n  }\n\n  const shapedData = await shapeRelationsForMcp(uid, formatted.data as Record<string, unknown>);\n  return { ...formatted, data: shapedData };\n};\n\n/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */\nexport const ok = (\n  structuredContent: Record<string, unknown>\n): Modules.MCP.McpToolHandlerReturn => ({\n  content: [{ type: 'text', text: JSON.stringify(structuredContent) }],\n  structuredContent,\n});\n\n/**\n * Generates the `title` and `description` metadata for a derived MCP tool.\n * Appends operation-specific notes for write/publish/unpublish/discard_draft operations.\n */\nexport const describeTool = (params: {\n  apiID: string;\n  uid: string;\n  operation: string;\n}): { title: string; description: string } => {\n  const { apiID, uid, operation } = params;\n  const operationNoteByType: Partial<Record<string, string>> = {\n    write:\n      ' Creates or updates the single-type document. If no document exists, creates one; otherwise updates the existing draft.',\n    publish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the published version row.',\n    unpublish:\n      ' Operates on an existing document by documentId and may return a different numeric id for the draft version row.',\n    discard_draft:\n      ' Operates on an existing document by documentId; treat documentId as the stable identity.',\n  };\n\n  return {\n    title: `Content: ${apiID} — ${operation}`,\n    description: `Content-manager ${operation} for ${uid}.${operationNoteByType[operation] ?? ''}`,\n  };\n};\n"],"names":["slugifyUidForMcpToolName","uid","namespace","modelName","split","parts","map","part","toLowerCase","join","sanitizeFormatShape","permissionChecker","doc","opts","sanitized","sanitizeOutput","formatted","formatDocumentWithMetadata","data","undefined","shapedData","shapeRelationsForMcp","ok","structuredContent","content","type","text","JSON","stringify","describeTool","params","apiID","operation","operationNoteByType","write","publish","unpublish","discard_draft","title","description"],"mappings":";;;AAMA;;;IAIO,MAAMA,wBAAAA,GAA2B,CAACC,GAAAA,GAAAA;AACvC,IAAA,MAAM,CAACC,SAAAA,EAAWC,SAAAA,CAAU,GAAGF,GAAAA,CAAIG,KAAK,CAAC,IAAA,CAAA;IACzC,MAAMC,KAAAA,GAAQF,SAAAA,CAAUC,KAAK,CAAC,GAAA,CAAA,CAAKE,GAAG,CAAC,CAACC,IAAAA,GAASA,IAAAA,CAAKC,WAAW,EAAA,CAAA;AAEjE,IAAA,IAAIN,cAAc,KAAA,EAAO;QACvB,OAAOG,KAAK,CAAC,CAAA,CAAE;AACjB,IAAA;IAEA,OAAO,CAAA,EAAGH,UAAUM,WAAW,EAAA,CAAG,CAAC,EAAEH,KAAAA,CAAMI,IAAI,CAAC,GAAA,CAAA,CAAA,CAAM;AACxD;AAMA;;;;;;;;;;;AAWC,IACM,MAAMC,mBAAAA,GAAsB,OACjCC,iBAAAA,EACAV,KACAW,GAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,MAAMC,SAAAA,GAAY,MAAMH,iBAAAA,CAAkBI,cAAc,CAACH,GAAAA,CAAAA;AACzD,IAAA,MAAMI,SAAAA,GAAY,MAAMC,0BAAAA,CACtBN,iBAAAA,EACAV,KACAa,SAAAA,EACAD,IAAAA,CAAAA;AAGF,IAAA,IAAIG,UAAUE,IAAI,KAAK,QAAQF,SAAAA,CAAUE,IAAI,KAAKC,SAAAA,EAAW;QAC3D,OAAOH,SAAAA;AACT,IAAA;AAEA,IAAA,MAAMI,UAAAA,GAAa,MAAMC,oBAAAA,CAAqBpB,GAAAA,EAAKe,UAAUE,IAAI,CAAA;IACjE,OAAO;AAAE,QAAA,GAAGF,SAAS;QAAEE,IAAAA,EAAME;AAAW,KAAA;AAC1C;AAEA,2GACO,MAAME,EAAAA,GAAK,CAChBC,qBACsC;QACtCC,OAAAA,EAAS;AAAC,YAAA;gBAAEC,IAAAA,EAAM,MAAA;gBAAQC,IAAAA,EAAMC,IAAAA,CAAKC,SAAS,CAACL,iBAAAA;AAAmB;AAAE,SAAA;AACpEA,QAAAA;AACF,KAAA;AAEA;;;IAIO,MAAMM,YAAAA,GAAe,CAACC,MAAAA,GAAAA;AAK3B,IAAA,MAAM,EAAEC,KAAK,EAAE9B,GAAG,EAAE+B,SAAS,EAAE,GAAGF,MAAAA;AAClC,IAAA,MAAMG,mBAAAA,GAAuD;QAC3DC,KAAAA,EACE,yHAAA;QACFC,OAAAA,EACE,sHAAA;QACFC,SAAAA,EACE,kHAAA;QACFC,aAAAA,EACE;AACJ,KAAA;IAEA,OAAO;AACLC,QAAAA,KAAAA,EAAO,CAAC,SAAS,EAAEP,KAAAA,CAAM,GAAG,EAAEC,SAAAA,CAAAA,CAAW;AACzCO,QAAAA,WAAAA,EAAa,CAAC,gBAAgB,EAAEP,SAAAA,CAAU,KAAK,EAAE/B,GAAAA,CAAI,CAAC,EAAEgC,mBAAmB,CAACD,SAAAA,CAAU,IAAI,EAAA,CAAA;AAC5F,KAAA;AACF;;;;"}

package/dist/server/middlewares/routing.js

@@ -2,6 +2,10 @@
 
 var isNil = require('lodash/isNil');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var isNil__default = /*#__PURE__*/_interopDefault(isNil);
+
 var routing = (async (ctx, next)=>{
     const { model } = ctx.params;
     const ct = strapi.contentTypes[model];
@@ -27,7 +31,7 @@ var routing = (async (ctx, next)=>{
     } else {
         actionConfig = strapi.plugin(ct.plugin).config(`layout.${ct.modelName}.actions.${action}`);
     }
-    if (!isNil(actionConfig)) {
+    if (!isNil__default.default(actionConfig)) {
         const [controller, action] = actionConfig.split('.');
         if (controller && action) {
             return controllers[controller.toLowerCase()][action](ctx, next);

package/dist/server/middlewares/routing.js.map

@@ -1 +1 @@
-{"version":3,"file":"routing.js","sources":["../../../server/src/middlewares/routing.ts"],"sourcesContent":["import type { UID, Core, Struct } from '@strapi/types';\nimport type { Context, Next } from 'koa';\nimport isNil from 'lodash/isNil';\n\ninterface ContentType extends Struct.ContentTypeSchema {\n  plugin?: string;\n}\n\nexport default async (ctx: Context, next: Next) => {\n  const { model }: { model: UID.ContentType } = ctx.params;\n\n  const ct: ContentType = strapi.contentTypes[model];\n\n  if (!ct) {\n    return ctx.send({ error: 'contentType.notFound' }, 404);\n  }\n\n  let controllers;\n  if (!ct.plugin || ct.plugin === 'admin') {\n    controllers = strapi.admin.controllers;\n  } else {\n    controllers = strapi.plugin(ct.plugin).controllers;\n  }\n\n  const { route }: { route: Core.Route } = ctx.state;\n\n  if (typeof route.handler !== 'string') {\n    return next();\n  }\n\n  const [, action] = route.handler.split('.');\n\n  let actionConfig: any;\n  if (!ct.plugin || ct.plugin === 'admin') {\n    actionConfig = strapi.config.get(`admin.layout.${ct.modelName}.actions.${action}`);\n  } else {\n    actionConfig = strapi.plugin(ct.plugin).config(`layout.${ct.modelName}.actions.${action}`);\n  }\n\n  if (!isNil(actionConfig)) {\n    const [controller, action] = actionConfig.split('.');\n\n    if (controller && action) {\n      return controllers[controller.toLowerCase()][action](ctx, next);\n    }\n  }\n\n  await next();\n};\n"],"names":["ctx","next","model","params","ct","strapi","contentTypes","send","error","controllers","plugin","admin","route","state","handler","action","split","actionConfig","config","get","modelName","isNil","controller","toLowerCase"],"mappings":";;;;AAQA,cAAe,CAAA,OAAOA,GAAAA,EAAcC,IAAAA,GAAAA;AAClC,IAAA,MAAM,EAAEC,KAAK,EAAE,GAA+BF,IAAIG,MAAM;AAExD,IAAA,MAAMC,EAAAA,GAAkBC,MAAAA,CAAOC,YAAY,CAACJ,KAAAA,CAAM;AAElD,IAAA,IAAI,CAACE,EAAAA,EAAI;QACP,OAAOJ,GAAAA,CAAIO,IAAI,CAAC;YAAEC,KAAAA,EAAO;SAAuB,EAAG,GAAA,CAAA;AACrD,IAAA;IAEA,IAAIC,WAAAA;AACJ,IAAA,IAAI,CAACL,EAAAA,CAAGM,MAAM,IAAIN,EAAAA,CAAGM,MAAM,KAAK,OAAA,EAAS;QACvCD,WAAAA,GAAcJ,MAAAA,CAAOM,KAAK,CAACF,WAAW;IACxC,CAAA,MAAO;AACLA,QAAAA,WAAAA,GAAcJ,OAAOK,MAAM,CAACN,EAAAA,CAAGM,MAAM,EAAED,WAAW;AACpD,IAAA;AAEA,IAAA,MAAM,EAAEG,KAAK,EAAE,GAA0BZ,IAAIa,KAAK;AAElD,IAAA,IAAI,OAAOD,KAAAA,CAAME,OAAO,KAAK,QAAA,EAAU;QACrC,OAAOb,IAAAA,EAAAA;AACT,IAAA;AAEA,IAAA,MAAM,GAAGc,MAAAA,CAAO,GAAGH,MAAME,OAAO,CAACE,KAAK,CAAC,GAAA,CAAA;IAEvC,IAAIC,YAAAA;AACJ,IAAA,IAAI,CAACb,EAAAA,CAAGM,MAAM,IAAIN,EAAAA,CAAGM,MAAM,KAAK,OAAA,EAAS;AACvCO,QAAAA,YAAAA,GAAeZ,MAAAA,CAAOa,MAAM,CAACC,GAAG,CAAC,CAAC,aAAa,EAAEf,EAAAA,CAAGgB,SAAS,CAAC,SAAS,EAAEL,MAAAA,CAAAA,CAAQ,CAAA;IACnF,CAAA,MAAO;AACLE,QAAAA,YAAAA,GAAeZ,OAAOK,MAAM,CAACN,EAAAA,CAAGM,MAAM,EAAEQ,MAAM,CAAC,CAAC,OAAO,EAAEd,EAAAA,CAAGgB,SAAS,CAAC,SAAS,EAAEL,MAAAA,CAAAA,CAAQ,CAAA;AAC3F,IAAA;IAEA,IAAI,CAACM,MAAMJ,YAAAA,CAAAA,EAAe;AACxB,QAAA,MAAM,CAACK,UAAAA,EAAYP,MAAAA,CAAO,GAAGE,YAAAA,CAAaD,KAAK,CAAC,GAAA,CAAA;AAEhD,QAAA,IAAIM,cAAcP,MAAAA,EAAQ;YACxB,OAAON,WAAW,CAACa,UAAAA,CAAWC,WAAW,GAAG,CAACR,MAAAA,CAAO,CAACf,GAAAA,EAAKC,IAAAA,CAAAA;AAC5D,QAAA;AACF,IAAA;IAEA,MAAMA,IAAAA,EAAAA;AACR,CAAA;;;;"}
+{"version":3,"file":"routing.js","sources":["../../../server/src/middlewares/routing.ts"],"sourcesContent":["import type { UID, Core, Struct } from '@strapi/types';\nimport type { Context, Next } from 'koa';\nimport isNil from 'lodash/isNil';\n\ninterface ContentType extends Struct.ContentTypeSchema {\n  plugin?: string;\n}\n\nexport default async (ctx: Context, next: Next) => {\n  const { model }: { model: UID.ContentType } = ctx.params;\n\n  const ct: ContentType = strapi.contentTypes[model];\n\n  if (!ct) {\n    return ctx.send({ error: 'contentType.notFound' }, 404);\n  }\n\n  let controllers;\n  if (!ct.plugin || ct.plugin === 'admin') {\n    controllers = strapi.admin.controllers;\n  } else {\n    controllers = strapi.plugin(ct.plugin).controllers;\n  }\n\n  const { route }: { route: Core.Route } = ctx.state;\n\n  if (typeof route.handler !== 'string') {\n    return next();\n  }\n\n  const [, action] = route.handler.split('.');\n\n  let actionConfig: any;\n  if (!ct.plugin || ct.plugin === 'admin') {\n    actionConfig = strapi.config.get(`admin.layout.${ct.modelName}.actions.${action}`);\n  } else {\n    actionConfig = strapi.plugin(ct.plugin).config(`layout.${ct.modelName}.actions.${action}`);\n  }\n\n  if (!isNil(actionConfig)) {\n    const [controller, action] = actionConfig.split('.');\n\n    if (controller && action) {\n      return controllers[controller.toLowerCase()][action](ctx, next);\n    }\n  }\n\n  await next();\n};\n"],"names":["ctx","next","model","params","ct","strapi","contentTypes","send","error","controllers","plugin","admin","route","state","handler","action","split","actionConfig","config","get","modelName","isNil","controller","toLowerCase"],"mappings":";;;;;;;;AAQA,cAAe,CAAA,OAAOA,GAAAA,EAAcC,IAAAA,GAAAA;AAClC,IAAA,MAAM,EAAEC,KAAK,EAAE,GAA+BF,IAAIG,MAAM;AAExD,IAAA,MAAMC,EAAAA,GAAkBC,MAAAA,CAAOC,YAAY,CAACJ,KAAAA,CAAM;AAElD,IAAA,IAAI,CAACE,EAAAA,EAAI;QACP,OAAOJ,GAAAA,CAAIO,IAAI,CAAC;YAAEC,KAAAA,EAAO;SAAuB,EAAG,GAAA,CAAA;AACrD,IAAA;IAEA,IAAIC,WAAAA;AACJ,IAAA,IAAI,CAACL,EAAAA,CAAGM,MAAM,IAAIN,EAAAA,CAAGM,MAAM,KAAK,OAAA,EAAS;QACvCD,WAAAA,GAAcJ,MAAAA,CAAOM,KAAK,CAACF,WAAW;IACxC,CAAA,MAAO;AACLA,QAAAA,WAAAA,GAAcJ,OAAOK,MAAM,CAACN,EAAAA,CAAGM,MAAM,EAAED,WAAW;AACpD,IAAA;AAEA,IAAA,MAAM,EAAEG,KAAK,EAAE,GAA0BZ,IAAIa,KAAK;AAElD,IAAA,IAAI,OAAOD,KAAAA,CAAME,OAAO,KAAK,QAAA,EAAU;QACrC,OAAOb,IAAAA,EAAAA;AACT,IAAA;AAEA,IAAA,MAAM,GAAGc,MAAAA,CAAO,GAAGH,MAAME,OAAO,CAACE,KAAK,CAAC,GAAA,CAAA;IAEvC,IAAIC,YAAAA;AACJ,IAAA,IAAI,CAACb,EAAAA,CAAGM,MAAM,IAAIN,EAAAA,CAAGM,MAAM,KAAK,OAAA,EAAS;AACvCO,QAAAA,YAAAA,GAAeZ,MAAAA,CAAOa,MAAM,CAACC,GAAG,CAAC,CAAC,aAAa,EAAEf,EAAAA,CAAGgB,SAAS,CAAC,SAAS,EAAEL,MAAAA,CAAAA,CAAQ,CAAA;IACnF,CAAA,MAAO;AACLE,QAAAA,YAAAA,GAAeZ,OAAOK,MAAM,CAACN,EAAAA,CAAGM,MAAM,EAAEQ,MAAM,CAAC,CAAC,OAAO,EAAEd,EAAAA,CAAGgB,SAAS,CAAC,SAAS,EAAEL,MAAAA,CAAAA,CAAQ,CAAA;AAC3F,IAAA;IAEA,IAAI,CAACM,uBAAMJ,YAAAA,CAAAA,EAAe;AACxB,QAAA,MAAM,CAACK,UAAAA,EAAYP,MAAAA,CAAO,GAAGE,YAAAA,CAAaD,KAAK,CAAC,GAAA,CAAA;AAEhD,QAAA,IAAIM,cAAcP,MAAAA,EAAQ;YACxB,OAAON,WAAW,CAACa,UAAAA,CAAWC,WAAW,GAAG,CAACR,MAAAA,CAAO,CAACf,GAAAA,EAAKC,IAAAA,CAAAA;AAC5D,QAAA;AACF,IAAA;IAEA,MAAMA,IAAAA,EAAAA;AACR,CAAA;;;;"}

package/dist/server/preview/controllers/preview.js

@@ -1,5 +1,7 @@
 'use strict';
 
+var path = require('path');
+var promises = require('fs/promises');
 var utils = require('../utils.js');
 var preview = require('./validation/preview.js');
 
@@ -26,6 +28,13 @@ const createPreviewController = ()=>{
                     url: url || undefined
                 }
             };
+        },
+        /**
+     * Serves the standalone preview script verbatim as JavaScript. The admin fetches
+     * this, injects the config, and posts it to the preview iframe
+     */ async getPreviewScript (ctx) {
+            ctx.type = 'application/javascript';
+            ctx.body = await promises.readFile(path.join(__dirname, 'previewScript.js'), 'utf8');
         }
     };
 };

package/dist/server/preview/controllers/preview.js.map

@@ -1 +1 @@
-{"version":3,"file":"preview.js","sources":["../../../../server/src/preview/controllers/preview.ts"],"sourcesContent":["import type { Core, UID } from '@strapi/types';\n\nimport { Preview } from '../../../../shared/contracts';\n\nimport { getService } from '../utils';\nimport { validatePreviewUrl } from './validation/preview';\n\nconst createPreviewController = () => {\n  return {\n    /**\n     * Transforms an entry into a preview URL, so that it can be previewed\n     * in the Content Manager.\n     */\n    async getPreviewUrl(ctx) {\n      const uid = ctx.params.contentType as UID.ContentType;\n      const query = ctx.request.query as Preview.GetPreviewUrl.Request['query'];\n\n      // Validate the request parameters\n      const params = await validatePreviewUrl(strapi, uid, query);\n\n      // TODO: Permissions to preview content\n\n      // Get the preview URL by using the user-defined config handler\n      const previewService = getService(strapi, 'preview');\n      const url = await previewService.getPreviewUrl(uid, params);\n\n      // If no url is found, set status to 204\n      if (!url) {\n        ctx.status = 204;\n      }\n\n      return {\n        data: { url: url || undefined },\n      } satisfies Preview.GetPreviewUrl.Response;\n    },\n  } satisfies Core.Controller;\n};\n\nexport { createPreviewController };\n"],"names":["createPreviewController","getPreviewUrl","ctx","uid","params","contentType","query","request","validatePreviewUrl","strapi","previewService","getService","url","status","data","undefined"],"mappings":";;;;;AAOA,MAAMA,uBAAAA,GAA0B,IAAA;IAC9B,OAAO;AACL;;;QAIA,MAAMC,eAAcC,GAAG,EAAA;AACrB,YAAA,MAAMC,GAAAA,GAAMD,GAAAA,CAAIE,MAAM,CAACC,WAAW;AAClC,YAAA,MAAMC,KAAAA,GAAQJ,GAAAA,CAAIK,OAAO,CAACD,KAAK;;AAG/B,YAAA,MAAMF,MAAAA,GAAS,MAAMI,0BAAAA,CAAmBC,MAAAA,EAAQN,GAAAA,EAAKG,KAAAA,CAAAA;;;YAKrD,MAAMI,cAAAA,GAAiBC,iBAAWF,MAAAA,EAAQ,SAAA,CAAA;AAC1C,YAAA,MAAMG,GAAAA,GAAM,MAAMF,cAAAA,CAAeT,aAAa,CAACE,GAAAA,EAAKC,MAAAA,CAAAA;;AAGpD,YAAA,IAAI,CAACQ,GAAAA,EAAK;AACRV,gBAAAA,GAAAA,CAAIW,MAAM,GAAG,GAAA;AACf,YAAA;YAEA,OAAO;gBACLC,IAAAA,EAAM;AAAEF,oBAAAA,GAAAA,EAAKA,GAAAA,IAAOG;AAAU;AAChC,aAAA;AACF,QAAA;AACF,KAAA;AACF;;;;"}
+{"version":3,"file":"preview.js","sources":["../../../../server/src/preview/controllers/preview.ts"],"sourcesContent":["import { join } from 'path';\n\nimport type { Core, UID } from '@strapi/types';\n\nimport { readFile } from 'fs/promises';\nimport { Preview } from '../../../../shared/contracts';\n\nimport { getService } from '../utils';\nimport { validatePreviewUrl } from './validation/preview';\n\nconst createPreviewController = () => {\n  return {\n    /**\n     * Transforms an entry into a preview URL, so that it can be previewed\n     * in the Content Manager.\n     */\n    async getPreviewUrl(ctx) {\n      const uid = ctx.params.contentType as UID.ContentType;\n      const query = ctx.request.query as Preview.GetPreviewUrl.Request['query'];\n\n      // Validate the request parameters\n      const params = await validatePreviewUrl(strapi, uid, query);\n\n      // TODO: Permissions to preview content\n\n      // Get the preview URL by using the user-defined config handler\n      const previewService = getService(strapi, 'preview');\n      const url = await previewService.getPreviewUrl(uid, params);\n\n      // If no url is found, set status to 204\n      if (!url) {\n        ctx.status = 204;\n      }\n\n      return {\n        data: { url: url || undefined },\n      } satisfies Preview.GetPreviewUrl.Response;\n    },\n\n    /**\n     * Serves the standalone preview script verbatim as JavaScript. The admin fetches\n     * this, injects the config, and posts it to the preview iframe\n     */\n    async getPreviewScript(ctx) {\n      ctx.type = 'application/javascript';\n      ctx.body = await readFile(join(__dirname, 'previewScript.js'), 'utf8');\n    },\n  } satisfies Core.Controller;\n};\n\nexport { createPreviewController };\n"],"names":["createPreviewController","getPreviewUrl","ctx","uid","params","contentType","query","request","validatePreviewUrl","strapi","previewService","getService","url","status","data","undefined","getPreviewScript","type","body","readFile","join","__dirname"],"mappings":";;;;;;;AAUA,MAAMA,uBAAAA,GAA0B,IAAA;IAC9B,OAAO;AACL;;;QAIA,MAAMC,eAAcC,GAAG,EAAA;AACrB,YAAA,MAAMC,GAAAA,GAAMD,GAAAA,CAAIE,MAAM,CAACC,WAAW;AAClC,YAAA,MAAMC,KAAAA,GAAQJ,GAAAA,CAAIK,OAAO,CAACD,KAAK;;AAG/B,YAAA,MAAMF,MAAAA,GAAS,MAAMI,0BAAAA,CAAmBC,MAAAA,EAAQN,GAAAA,EAAKG,KAAAA,CAAAA;;;YAKrD,MAAMI,cAAAA,GAAiBC,iBAAWF,MAAAA,EAAQ,SAAA,CAAA;AAC1C,YAAA,MAAMG,GAAAA,GAAM,MAAMF,cAAAA,CAAeT,aAAa,CAACE,GAAAA,EAAKC,MAAAA,CAAAA;;AAGpD,YAAA,IAAI,CAACQ,GAAAA,EAAK;AACRV,gBAAAA,GAAAA,CAAIW,MAAM,GAAG,GAAA;AACf,YAAA;YAEA,OAAO;gBACLC,IAAAA,EAAM;AAAEF,oBAAAA,GAAAA,EAAKA,GAAAA,IAAOG;AAAU;AAChC,aAAA;AACF,QAAA,CAAA;AAEA;;;QAIA,MAAMC,kBAAiBd,GAAG,EAAA;AACxBA,YAAAA,GAAAA,CAAIe,IAAI,GAAG,wBAAA;AACXf,YAAAA,GAAAA,CAAIgB,IAAI,GAAG,MAAMC,iBAAAA,CAASC,SAAAA,CAAKC,WAAW,kBAAA,CAAA,EAAqB,MAAA,CAAA;AACjE,QAAA;AACF,KAAA;AACF;;;;"}

package/dist/server/preview/controllers/preview.mjs

@@ -1,3 +1,5 @@
+import { join } from 'path';
+import { readFile } from 'fs/promises';
 import { getService } from '../utils.mjs';
 import { validatePreviewUrl } from './validation/preview.mjs';
 
@@ -24,6 +26,13 @@ const createPreviewController = ()=>{
                     url: url || undefined
                 }
             };
+        },
+        /**
+     * Serves the standalone preview script verbatim as JavaScript. The admin fetches
+     * this, injects the config, and posts it to the preview iframe
+     */ async getPreviewScript (ctx) {
+            ctx.type = 'application/javascript';
+            ctx.body = await readFile(join(__dirname, 'previewScript.js'), 'utf8');
         }
     };
 };

package/dist/server/preview/controllers/preview.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"preview.mjs","sources":["../../../../server/src/preview/controllers/preview.ts"],"sourcesContent":["import type { Core, UID } from '@strapi/types';\n\nimport { Preview } from '../../../../shared/contracts';\n\nimport { getService } from '../utils';\nimport { validatePreviewUrl } from './validation/preview';\n\nconst createPreviewController = () => {\n  return {\n    /**\n     * Transforms an entry into a preview URL, so that it can be previewed\n     * in the Content Manager.\n     */\n    async getPreviewUrl(ctx) {\n      const uid = ctx.params.contentType as UID.ContentType;\n      const query = ctx.request.query as Preview.GetPreviewUrl.Request['query'];\n\n      // Validate the request parameters\n      const params = await validatePreviewUrl(strapi, uid, query);\n\n      // TODO: Permissions to preview content\n\n      // Get the preview URL by using the user-defined config handler\n      const previewService = getService(strapi, 'preview');\n      const url = await previewService.getPreviewUrl(uid, params);\n\n      // If no url is found, set status to 204\n      if (!url) {\n        ctx.status = 204;\n      }\n\n      return {\n        data: { url: url || undefined },\n      } satisfies Preview.GetPreviewUrl.Response;\n    },\n  } satisfies Core.Controller;\n};\n\nexport { createPreviewController };\n"],"names":["createPreviewController","getPreviewUrl","ctx","uid","params","contentType","query","request","validatePreviewUrl","strapi","previewService","getService","url","status","data","undefined"],"mappings":";;;AAOA,MAAMA,uBAAAA,GAA0B,IAAA;IAC9B,OAAO;AACL;;;QAIA,MAAMC,eAAcC,GAAG,EAAA;AACrB,YAAA,MAAMC,GAAAA,GAAMD,GAAAA,CAAIE,MAAM,CAACC,WAAW;AAClC,YAAA,MAAMC,KAAAA,GAAQJ,GAAAA,CAAIK,OAAO,CAACD,KAAK;;AAG/B,YAAA,MAAMF,MAAAA,GAAS,MAAMI,kBAAAA,CAAmBC,MAAAA,EAAQN,GAAAA,EAAKG,KAAAA,CAAAA;;;YAKrD,MAAMI,cAAAA,GAAiBC,WAAWF,MAAAA,EAAQ,SAAA,CAAA;AAC1C,YAAA,MAAMG,GAAAA,GAAM,MAAMF,cAAAA,CAAeT,aAAa,CAACE,GAAAA,EAAKC,MAAAA,CAAAA;;AAGpD,YAAA,IAAI,CAACQ,GAAAA,EAAK;AACRV,gBAAAA,GAAAA,CAAIW,MAAM,GAAG,GAAA;AACf,YAAA;YAEA,OAAO;gBACLC,IAAAA,EAAM;AAAEF,oBAAAA,GAAAA,EAAKA,GAAAA,IAAOG;AAAU;AAChC,aAAA;AACF,QAAA;AACF,KAAA;AACF;;;;"}
+{"version":3,"file":"preview.mjs","sources":["../../../../server/src/preview/controllers/preview.ts"],"sourcesContent":["import { join } from 'path';\n\nimport type { Core, UID } from '@strapi/types';\n\nimport { readFile } from 'fs/promises';\nimport { Preview } from '../../../../shared/contracts';\n\nimport { getService } from '../utils';\nimport { validatePreviewUrl } from './validation/preview';\n\nconst createPreviewController = () => {\n  return {\n    /**\n     * Transforms an entry into a preview URL, so that it can be previewed\n     * in the Content Manager.\n     */\n    async getPreviewUrl(ctx) {\n      const uid = ctx.params.contentType as UID.ContentType;\n      const query = ctx.request.query as Preview.GetPreviewUrl.Request['query'];\n\n      // Validate the request parameters\n      const params = await validatePreviewUrl(strapi, uid, query);\n\n      // TODO: Permissions to preview content\n\n      // Get the preview URL by using the user-defined config handler\n      const previewService = getService(strapi, 'preview');\n      const url = await previewService.getPreviewUrl(uid, params);\n\n      // If no url is found, set status to 204\n      if (!url) {\n        ctx.status = 204;\n      }\n\n      return {\n        data: { url: url || undefined },\n      } satisfies Preview.GetPreviewUrl.Response;\n    },\n\n    /**\n     * Serves the standalone preview script verbatim as JavaScript. The admin fetches\n     * this, injects the config, and posts it to the preview iframe\n     */\n    async getPreviewScript(ctx) {\n      ctx.type = 'application/javascript';\n      ctx.body = await readFile(join(__dirname, 'previewScript.js'), 'utf8');\n    },\n  } satisfies Core.Controller;\n};\n\nexport { createPreviewController };\n"],"names":["createPreviewController","getPreviewUrl","ctx","uid","params","contentType","query","request","validatePreviewUrl","strapi","previewService","getService","url","status","data","undefined","getPreviewScript","type","body","readFile","join","__dirname"],"mappings":";;;;;AAUA,MAAMA,uBAAAA,GAA0B,IAAA;IAC9B,OAAO;AACL;;;QAIA,MAAMC,eAAcC,GAAG,EAAA;AACrB,YAAA,MAAMC,GAAAA,GAAMD,GAAAA,CAAIE,MAAM,CAACC,WAAW;AAClC,YAAA,MAAMC,KAAAA,GAAQJ,GAAAA,CAAIK,OAAO,CAACD,KAAK;;AAG/B,YAAA,MAAMF,MAAAA,GAAS,MAAMI,kBAAAA,CAAmBC,MAAAA,EAAQN,GAAAA,EAAKG,KAAAA,CAAAA;;;YAKrD,MAAMI,cAAAA,GAAiBC,WAAWF,MAAAA,EAAQ,SAAA,CAAA;AAC1C,YAAA,MAAMG,GAAAA,GAAM,MAAMF,cAAAA,CAAeT,aAAa,CAACE,GAAAA,EAAKC,MAAAA,CAAAA;;AAGpD,YAAA,IAAI,CAACQ,GAAAA,EAAK;AACRV,gBAAAA,GAAAA,CAAIW,MAAM,GAAG,GAAA;AACf,YAAA;YAEA,OAAO;gBACLC,IAAAA,EAAM;AAAEF,oBAAAA,GAAAA,EAAKA,GAAAA,IAAOG;AAAU;AAChC,aAAA;AACF,QAAA,CAAA;AAEA;;;QAIA,MAAMC,kBAAiBd,GAAG,EAAA;AACxBA,YAAAA,GAAAA,CAAIe,IAAI,GAAG,wBAAA;AACXf,YAAAA,GAAAA,CAAIgB,IAAI,GAAG,MAAMC,QAAAA,CAASC,IAAAA,CAAKC,WAAW,kBAAA,CAAA,EAAqB,MAAA,CAAA;AACjE,QAAA;AACF,KAAA;AACF;;;;"}