@strapi/core 5.36.1 → 5.37.1

package/dist/core-api/controller/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core-api/controller/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAalD,iBAAS,gBAAgB,CAAC,CAAC,SAAS,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE;IAC/F,WAAW,EAAE,CAAC,CAAC;CAChB,GAAG,CAAC,SAAS,MAAM,CAAC,gBAAgB,GACjC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,GAClC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;AA4D3C,OAAO,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core-api/controller/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAyBlD,iBAAS,gBAAgB,CAAC,CAAC,SAAS,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE;IAC/F,WAAW,EAAE,CAAC,CAAC;CAChB,GAAG,CAAC,SAAS,MAAM,CAAC,gBAAgB,GACjC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,GAClC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;AAoD3C,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/core-api/controller/index.js

@@ -9,6 +9,19 @@ var requestContext = require('../../services/request-context.js');
 
 const isSingleType = (contentType)=>strapiUtils.contentTypes.isSingleType(contentType);
 const getAuthFromKoaContext = (ctx)=>fp.prop('state.auth', ctx) ?? {};
+/** Build options for contentAPI.sanitize/validate from the request context (auth, route, strictParams). */ const getContentAPIOptions = (ctx)=>{
+    const auth = getAuthFromKoaContext(ctx);
+    const route = ctx.state?.route;
+    const options = {
+        auth,
+        route
+    };
+    const apiStrictParams = strapi.config.get('api.rest.strictParams');
+    if (typeof apiStrictParams === 'boolean') {
+        options.strictParams = apiStrictParams;
+    }
+    return options;
+};
 function createController({ contentType }) {
     // TODO: replace with Base class + SingleType and CollectionType classes
     const proto = {
@@ -27,28 +40,16 @@ function createController({ contentType }) {
             });
         },
         async sanitizeInput (data, ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.sanitize.input(data, contentType, {
-                auth
-            });
+            return strapi.contentAPI.sanitize.input(data, contentType, getContentAPIOptions(ctx));
         },
         async sanitizeQuery (ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.sanitize.query(ctx.query, contentType, {
-                auth
-            });
+            return strapi.contentAPI.sanitize.query(ctx.query, contentType, getContentAPIOptions(ctx));
         },
         async validateQuery (ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.validate.query(ctx.query, contentType, {
-                auth
-            });
+            return strapi.contentAPI.validate.query(ctx.query, contentType, getContentAPIOptions(ctx));
         },
         async validateInput (data, ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.validate.input(data, contentType, {
-                auth
-            });
+            return strapi.contentAPI.validate.input(data, contentType, getContentAPIOptions(ctx));
         }
     };
     let ctrl;

package/dist/core-api/controller/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../src/core-api/controller/index.ts"],"sourcesContent":["import { prop } from 'lodash/fp';\nimport type Koa from 'koa';\nimport { contentTypes as contentTypeUtils } from '@strapi/utils';\nimport type { Core, Struct } from '@strapi/types';\n\nimport { transformResponse } from './transform';\nimport { createSingleTypeController } from './single-type';\nimport { createCollectionTypeController } from './collection-type';\nimport requestCtx from '../../services/request-context';\n\nconst isSingleType = (\n  contentType: Struct.ContentTypeSchema\n): contentType is Struct.SingleTypeSchema => contentTypeUtils.isSingleType(contentType);\n\nconst getAuthFromKoaContext = (ctx: Koa.Context) => prop('state.auth', ctx) ?? {};\n\nfunction createController<T extends Struct.SingleTypeSchema | Struct.CollectionTypeSchema>(opts: {\n  contentType: T;\n}): T extends Struct.SingleTypeSchema\n  ? Core.CoreAPI.Controller.SingleType\n  : Core.CoreAPI.Controller.CollectionType;\nfunction createController({\n  contentType,\n}: {\n  contentType: Struct.SingleTypeSchema | Struct.CollectionTypeSchema;\n}) {\n  // TODO: replace with Base class + SingleType and CollectionType classes\n\n  const proto: Core.CoreAPI.Controller.Base = {\n    transformResponse(data, meta) {\n      const ctx = requestCtx.get();\n      return transformResponse(data, meta, {\n        contentType,\n        useJsonAPIFormat: ctx?.headers?.['strapi-response-format'] === 'v4',\n        encodeSourceMaps: ctx?.headers?.['strapi-encode-source-maps'] === 'true',\n      });\n    },\n\n    async sanitizeOutput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.output(data, contentType, { auth });\n    },\n\n    async sanitizeInput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.input(data, contentType, { auth });\n    },\n\n    async sanitizeQuery(ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.query(ctx.query, contentType, { auth });\n    },\n\n    async validateQuery(ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.validate.query(ctx.query, contentType, { auth });\n    },\n\n    async validateInput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.validate.input(data, contentType, { auth });\n    },\n  };\n\n  let ctrl;\n\n  if (isSingleType(contentType)) {\n    ctrl = createSingleTypeController({ contentType });\n  } else {\n    ctrl = createCollectionTypeController({ contentType });\n  }\n\n  return Object.assign(Object.create(proto), ctrl);\n}\n\nexport { createController };\n"],"names":["isSingleType","contentType","contentTypeUtils","getAuthFromKoaContext","ctx","prop","createController","proto","transformResponse","data","meta","requestCtx","get","useJsonAPIFormat","headers","encodeSourceMaps","sanitizeOutput","auth","strapi","contentAPI","sanitize","output","sanitizeInput","input","sanitizeQuery","query","validateQuery","validate","validateInput","ctrl","createSingleTypeController","createCollectionTypeController","Object","assign","create"],"mappings":";;;;;;;;;AAUA,MAAMA,YAAe,GAAA,CACnBC,WAC2CC,GAAAA,wBAAAA,CAAiBF,YAAY,CAACC,WAAAA,CAAAA;AAE3E,MAAME,wBAAwB,CAACC,GAAAA,GAAqBC,OAAK,CAAA,YAAA,EAAcD,QAAQ,EAAC;AAOhF,SAASE,gBAAAA,CAAiB,EACxBL,WAAW,EAGZ,EAAA;;AAGC,IAAA,MAAMM,KAAsC,GAAA;QAC1CC,iBAAkBC,CAAAA,CAAAA,IAAI,EAAEC,IAAI,EAAA;YAC1B,MAAMN,GAAAA,GAAMO,eAAWC,GAAG,EAAA;YAC1B,OAAOJ,2BAAAA,CAAkBC,MAAMC,IAAM,EAAA;AACnCT,gBAAAA,WAAAA;AACAY,gBAAAA,gBAAAA,EAAkBT,GAAKU,EAAAA,OAAAA,GAAU,wBAAA,CAAyB,KAAK,IAAA;AAC/DC,gBAAAA,gBAAAA,EAAkBX,GAAKU,EAAAA,OAAAA,GAAU,2BAAA,CAA4B,KAAK;AACpE,aAAA,CAAA;AACF,SAAA;QAEA,MAAME,cAAAA,CAAAA,CAAeP,IAAI,EAAEL,GAAG,EAAA;AAC5B,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACC,QAAQ,CAACC,MAAM,CAACZ,MAAMR,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACrE,SAAA;QAEA,MAAMK,aAAAA,CAAAA,CAAcb,IAAI,EAAEL,GAAG,EAAA;AAC3B,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACC,QAAQ,CAACG,KAAK,CAACd,MAAMR,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACpE,SAAA;AAEA,QAAA,MAAMO,eAAcpB,GAAG,EAAA;AACrB,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACC,QAAQ,CAACK,KAAK,CAACrB,GAAAA,CAAIqB,KAAK,EAAExB,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACzE,SAAA;AAEA,QAAA,MAAMS,eAActB,GAAG,EAAA;AACrB,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACQ,QAAQ,CAACF,KAAK,CAACrB,GAAAA,CAAIqB,KAAK,EAAExB,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACzE,SAAA;QAEA,MAAMW,aAAAA,CAAAA,CAAcnB,IAAI,EAAEL,GAAG,EAAA;AAC3B,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACQ,QAAQ,CAACJ,KAAK,CAACd,MAAMR,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACpE;AACF,KAAA;IAEA,IAAIY,IAAAA;AAEJ,IAAA,IAAI7B,aAAaC,WAAc,CAAA,EAAA;AAC7B4B,QAAAA,IAAAA,GAAOC,qCAA2B,CAAA;AAAE7B,YAAAA;AAAY,SAAA,CAAA;KAC3C,MAAA;AACL4B,QAAAA,IAAAA,GAAOE,6CAA+B,CAAA;AAAE9B,YAAAA;AAAY,SAAA,CAAA;AACtD;AAEA,IAAA,OAAO+B,OAAOC,MAAM,CAACD,MAAOE,CAAAA,MAAM,CAAC3B,KAAQsB,CAAAA,EAAAA,IAAAA,CAAAA;AAC7C;;;;"}
+{"version":3,"file":"index.js","sources":["../../../src/core-api/controller/index.ts"],"sourcesContent":["import { prop } from 'lodash/fp';\nimport type Koa from 'koa';\nimport { contentTypes as contentTypeUtils } from '@strapi/utils';\nimport type { Core, Struct } from '@strapi/types';\n\nimport { transformResponse } from './transform';\nimport { createSingleTypeController } from './single-type';\nimport { createCollectionTypeController } from './collection-type';\nimport requestCtx from '../../services/request-context';\n\nconst isSingleType = (\n  contentType: Struct.ContentTypeSchema\n): contentType is Struct.SingleTypeSchema => contentTypeUtils.isSingleType(contentType);\n\nconst getAuthFromKoaContext = (ctx: Koa.Context) => prop('state.auth', ctx) ?? {};\n\n/** Build options for contentAPI.sanitize/validate from the request context (auth, route, strictParams). */\nconst getContentAPIOptions = (ctx: Koa.Context) => {\n  const auth = getAuthFromKoaContext(ctx);\n  const route = ctx.state?.route;\n  const options: { auth: unknown; strictParams?: boolean; route?: typeof route } = { auth, route };\n  const apiStrictParams = strapi.config.get('api.rest.strictParams');\n  if (typeof apiStrictParams === 'boolean') {\n    options.strictParams = apiStrictParams;\n  }\n  return options;\n};\n\nfunction createController<T extends Struct.SingleTypeSchema | Struct.CollectionTypeSchema>(opts: {\n  contentType: T;\n}): T extends Struct.SingleTypeSchema\n  ? Core.CoreAPI.Controller.SingleType\n  : Core.CoreAPI.Controller.CollectionType;\nfunction createController({\n  contentType,\n}: {\n  contentType: Struct.SingleTypeSchema | Struct.CollectionTypeSchema;\n}) {\n  // TODO: replace with Base class + SingleType and CollectionType classes\n\n  const proto: Core.CoreAPI.Controller.Base = {\n    transformResponse(data, meta) {\n      const ctx = requestCtx.get();\n      return transformResponse(data, meta, {\n        contentType,\n        useJsonAPIFormat: ctx?.headers?.['strapi-response-format'] === 'v4',\n        encodeSourceMaps: ctx?.headers?.['strapi-encode-source-maps'] === 'true',\n      });\n    },\n\n    async sanitizeOutput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.output(data, contentType, { auth });\n    },\n\n    async sanitizeInput(data, ctx) {\n      return strapi.contentAPI.sanitize.input(data, contentType, getContentAPIOptions(ctx));\n    },\n\n    async sanitizeQuery(ctx) {\n      return strapi.contentAPI.sanitize.query(ctx.query, contentType, getContentAPIOptions(ctx));\n    },\n\n    async validateQuery(ctx) {\n      return strapi.contentAPI.validate.query(ctx.query, contentType, getContentAPIOptions(ctx));\n    },\n\n    async validateInput(data, ctx) {\n      return strapi.contentAPI.validate.input(data, contentType, getContentAPIOptions(ctx));\n    },\n  };\n\n  let ctrl;\n\n  if (isSingleType(contentType)) {\n    ctrl = createSingleTypeController({ contentType });\n  } else {\n    ctrl = createCollectionTypeController({ contentType });\n  }\n\n  return Object.assign(Object.create(proto), ctrl);\n}\n\nexport { createController };\n"],"names":["isSingleType","contentType","contentTypeUtils","getAuthFromKoaContext","ctx","prop","getContentAPIOptions","auth","route","state","options","apiStrictParams","strapi","config","get","strictParams","createController","proto","transformResponse","data","meta","requestCtx","useJsonAPIFormat","headers","encodeSourceMaps","sanitizeOutput","contentAPI","sanitize","output","sanitizeInput","input","sanitizeQuery","query","validateQuery","validate","validateInput","ctrl","createSingleTypeController","createCollectionTypeController","Object","assign","create"],"mappings":";;;;;;;;;AAUA,MAAMA,YAAe,GAAA,CACnBC,WAC2CC,GAAAA,wBAAAA,CAAiBF,YAAY,CAACC,WAAAA,CAAAA;AAE3E,MAAME,wBAAwB,CAACC,GAAAA,GAAqBC,OAAK,CAAA,YAAA,EAAcD,QAAQ,EAAC;AAEhF,4GACA,MAAME,oBAAAA,GAAuB,CAACF,GAAAA,GAAAA;AAC5B,IAAA,MAAMG,OAAOJ,qBAAsBC,CAAAA,GAAAA,CAAAA;IACnC,MAAMI,KAAAA,GAAQJ,GAAIK,CAAAA,KAAK,EAAED,KAAAA;AACzB,IAAA,MAAME,OAA2E,GAAA;AAAEH,QAAAA,IAAAA;AAAMC,QAAAA;AAAM,KAAA;AAC/F,IAAA,MAAMG,eAAkBC,GAAAA,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,uBAAA,CAAA;IAC1C,IAAI,OAAOH,oBAAoB,SAAW,EAAA;AACxCD,QAAAA,OAAAA,CAAQK,YAAY,GAAGJ,eAAAA;AACzB;IACA,OAAOD,OAAAA;AACT,CAAA;AAOA,SAASM,gBAAAA,CAAiB,EACxBf,WAAW,EAGZ,EAAA;;AAGC,IAAA,MAAMgB,KAAsC,GAAA;QAC1CC,iBAAkBC,CAAAA,CAAAA,IAAI,EAAEC,IAAI,EAAA;YAC1B,MAAMhB,GAAAA,GAAMiB,eAAWP,GAAG,EAAA;YAC1B,OAAOI,2BAAAA,CAAkBC,MAAMC,IAAM,EAAA;AACnCnB,gBAAAA,WAAAA;AACAqB,gBAAAA,gBAAAA,EAAkBlB,GAAKmB,EAAAA,OAAAA,GAAU,wBAAA,CAAyB,KAAK,IAAA;AAC/DC,gBAAAA,gBAAAA,EAAkBpB,GAAKmB,EAAAA,OAAAA,GAAU,2BAAA,CAA4B,KAAK;AACpE,aAAA,CAAA;AACF,SAAA;QAEA,MAAME,cAAAA,CAAAA,CAAeN,IAAI,EAAEf,GAAG,EAAA;AAC5B,YAAA,MAAMG,OAAOJ,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOQ,MAAAA,CAAOc,UAAU,CAACC,QAAQ,CAACC,MAAM,CAACT,MAAMlB,WAAa,EAAA;AAAEM,gBAAAA;AAAK,aAAA,CAAA;AACrE,SAAA;QAEA,MAAMsB,aAAAA,CAAAA,CAAcV,IAAI,EAAEf,GAAG,EAAA;YAC3B,OAAOQ,MAAAA,CAAOc,UAAU,CAACC,QAAQ,CAACG,KAAK,CAACX,IAAMlB,EAAAA,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AAClF,SAAA;AAEA,QAAA,MAAM2B,eAAc3B,GAAG,EAAA;YACrB,OAAOQ,MAAAA,CAAOc,UAAU,CAACC,QAAQ,CAACK,KAAK,CAAC5B,GAAI4B,CAAAA,KAAK,EAAE/B,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AACvF,SAAA;AAEA,QAAA,MAAM6B,eAAc7B,GAAG,EAAA;YACrB,OAAOQ,MAAAA,CAAOc,UAAU,CAACQ,QAAQ,CAACF,KAAK,CAAC5B,GAAI4B,CAAAA,KAAK,EAAE/B,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AACvF,SAAA;QAEA,MAAM+B,aAAAA,CAAAA,CAAchB,IAAI,EAAEf,GAAG,EAAA;YAC3B,OAAOQ,MAAAA,CAAOc,UAAU,CAACQ,QAAQ,CAACJ,KAAK,CAACX,IAAMlB,EAAAA,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AAClF;AACF,KAAA;IAEA,IAAIgC,IAAAA;AAEJ,IAAA,IAAIpC,aAAaC,WAAc,CAAA,EAAA;AAC7BmC,QAAAA,IAAAA,GAAOC,qCAA2B,CAAA;AAAEpC,YAAAA;AAAY,SAAA,CAAA;KAC3C,MAAA;AACLmC,QAAAA,IAAAA,GAAOE,6CAA+B,CAAA;AAAErC,YAAAA;AAAY,SAAA,CAAA;AACtD;AAEA,IAAA,OAAOsC,OAAOC,MAAM,CAACD,MAAOE,CAAAA,MAAM,CAACxB,KAAQmB,CAAAA,EAAAA,IAAAA,CAAAA;AAC7C;;;;"}

package/dist/core-api/controller/index.mjs

@@ -7,6 +7,19 @@ import requestCtx from '../../services/request-context.mjs';
 
 const isSingleType = (contentType)=>contentTypes.isSingleType(contentType);
 const getAuthFromKoaContext = (ctx)=>prop('state.auth', ctx) ?? {};
+/** Build options for contentAPI.sanitize/validate from the request context (auth, route, strictParams). */ const getContentAPIOptions = (ctx)=>{
+    const auth = getAuthFromKoaContext(ctx);
+    const route = ctx.state?.route;
+    const options = {
+        auth,
+        route
+    };
+    const apiStrictParams = strapi.config.get('api.rest.strictParams');
+    if (typeof apiStrictParams === 'boolean') {
+        options.strictParams = apiStrictParams;
+    }
+    return options;
+};
 function createController({ contentType }) {
     // TODO: replace with Base class + SingleType and CollectionType classes
     const proto = {
@@ -25,28 +38,16 @@ function createController({ contentType }) {
             });
         },
         async sanitizeInput (data, ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.sanitize.input(data, contentType, {
-                auth
-            });
+            return strapi.contentAPI.sanitize.input(data, contentType, getContentAPIOptions(ctx));
         },
         async sanitizeQuery (ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.sanitize.query(ctx.query, contentType, {
-                auth
-            });
+            return strapi.contentAPI.sanitize.query(ctx.query, contentType, getContentAPIOptions(ctx));
         },
         async validateQuery (ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.validate.query(ctx.query, contentType, {
-                auth
-            });
+            return strapi.contentAPI.validate.query(ctx.query, contentType, getContentAPIOptions(ctx));
         },
         async validateInput (data, ctx) {
-            const auth = getAuthFromKoaContext(ctx);
-            return strapi.contentAPI.validate.input(data, contentType, {
-                auth
-            });
+            return strapi.contentAPI.validate.input(data, contentType, getContentAPIOptions(ctx));
         }
     };
     let ctrl;

package/dist/core-api/controller/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../src/core-api/controller/index.ts"],"sourcesContent":["import { prop } from 'lodash/fp';\nimport type Koa from 'koa';\nimport { contentTypes as contentTypeUtils } from '@strapi/utils';\nimport type { Core, Struct } from '@strapi/types';\n\nimport { transformResponse } from './transform';\nimport { createSingleTypeController } from './single-type';\nimport { createCollectionTypeController } from './collection-type';\nimport requestCtx from '../../services/request-context';\n\nconst isSingleType = (\n  contentType: Struct.ContentTypeSchema\n): contentType is Struct.SingleTypeSchema => contentTypeUtils.isSingleType(contentType);\n\nconst getAuthFromKoaContext = (ctx: Koa.Context) => prop('state.auth', ctx) ?? {};\n\nfunction createController<T extends Struct.SingleTypeSchema | Struct.CollectionTypeSchema>(opts: {\n  contentType: T;\n}): T extends Struct.SingleTypeSchema\n  ? Core.CoreAPI.Controller.SingleType\n  : Core.CoreAPI.Controller.CollectionType;\nfunction createController({\n  contentType,\n}: {\n  contentType: Struct.SingleTypeSchema | Struct.CollectionTypeSchema;\n}) {\n  // TODO: replace with Base class + SingleType and CollectionType classes\n\n  const proto: Core.CoreAPI.Controller.Base = {\n    transformResponse(data, meta) {\n      const ctx = requestCtx.get();\n      return transformResponse(data, meta, {\n        contentType,\n        useJsonAPIFormat: ctx?.headers?.['strapi-response-format'] === 'v4',\n        encodeSourceMaps: ctx?.headers?.['strapi-encode-source-maps'] === 'true',\n      });\n    },\n\n    async sanitizeOutput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.output(data, contentType, { auth });\n    },\n\n    async sanitizeInput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.input(data, contentType, { auth });\n    },\n\n    async sanitizeQuery(ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.query(ctx.query, contentType, { auth });\n    },\n\n    async validateQuery(ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.validate.query(ctx.query, contentType, { auth });\n    },\n\n    async validateInput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.validate.input(data, contentType, { auth });\n    },\n  };\n\n  let ctrl;\n\n  if (isSingleType(contentType)) {\n    ctrl = createSingleTypeController({ contentType });\n  } else {\n    ctrl = createCollectionTypeController({ contentType });\n  }\n\n  return Object.assign(Object.create(proto), ctrl);\n}\n\nexport { createController };\n"],"names":["isSingleType","contentType","contentTypeUtils","getAuthFromKoaContext","ctx","prop","createController","proto","transformResponse","data","meta","requestCtx","get","useJsonAPIFormat","headers","encodeSourceMaps","sanitizeOutput","auth","strapi","contentAPI","sanitize","output","sanitizeInput","input","sanitizeQuery","query","validateQuery","validate","validateInput","ctrl","createSingleTypeController","createCollectionTypeController","Object","assign","create"],"mappings":";;;;;;;AAUA,MAAMA,YAAe,GAAA,CACnBC,WAC2CC,GAAAA,YAAAA,CAAiBF,YAAY,CAACC,WAAAA,CAAAA;AAE3E,MAAME,wBAAwB,CAACC,GAAAA,GAAqBC,IAAK,CAAA,YAAA,EAAcD,QAAQ,EAAC;AAOhF,SAASE,gBAAAA,CAAiB,EACxBL,WAAW,EAGZ,EAAA;;AAGC,IAAA,MAAMM,KAAsC,GAAA;QAC1CC,iBAAkBC,CAAAA,CAAAA,IAAI,EAAEC,IAAI,EAAA;YAC1B,MAAMN,GAAAA,GAAMO,WAAWC,GAAG,EAAA;YAC1B,OAAOJ,iBAAAA,CAAkBC,MAAMC,IAAM,EAAA;AACnCT,gBAAAA,WAAAA;AACAY,gBAAAA,gBAAAA,EAAkBT,GAAKU,EAAAA,OAAAA,GAAU,wBAAA,CAAyB,KAAK,IAAA;AAC/DC,gBAAAA,gBAAAA,EAAkBX,GAAKU,EAAAA,OAAAA,GAAU,2BAAA,CAA4B,KAAK;AACpE,aAAA,CAAA;AACF,SAAA;QAEA,MAAME,cAAAA,CAAAA,CAAeP,IAAI,EAAEL,GAAG,EAAA;AAC5B,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACC,QAAQ,CAACC,MAAM,CAACZ,MAAMR,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACrE,SAAA;QAEA,MAAMK,aAAAA,CAAAA,CAAcb,IAAI,EAAEL,GAAG,EAAA;AAC3B,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACC,QAAQ,CAACG,KAAK,CAACd,MAAMR,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACpE,SAAA;AAEA,QAAA,MAAMO,eAAcpB,GAAG,EAAA;AACrB,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACC,QAAQ,CAACK,KAAK,CAACrB,GAAAA,CAAIqB,KAAK,EAAExB,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACzE,SAAA;AAEA,QAAA,MAAMS,eAActB,GAAG,EAAA;AACrB,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACQ,QAAQ,CAACF,KAAK,CAACrB,GAAAA,CAAIqB,KAAK,EAAExB,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACzE,SAAA;QAEA,MAAMW,aAAAA,CAAAA,CAAcnB,IAAI,EAAEL,GAAG,EAAA;AAC3B,YAAA,MAAMa,OAAOd,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOc,MAAAA,CAAOC,UAAU,CAACQ,QAAQ,CAACJ,KAAK,CAACd,MAAMR,WAAa,EAAA;AAAEgB,gBAAAA;AAAK,aAAA,CAAA;AACpE;AACF,KAAA;IAEA,IAAIY,IAAAA;AAEJ,IAAA,IAAI7B,aAAaC,WAAc,CAAA,EAAA;AAC7B4B,QAAAA,IAAAA,GAAOC,0BAA2B,CAAA;AAAE7B,YAAAA;AAAY,SAAA,CAAA;KAC3C,MAAA;AACL4B,QAAAA,IAAAA,GAAOE,8BAA+B,CAAA;AAAE9B,YAAAA;AAAY,SAAA,CAAA;AACtD;AAEA,IAAA,OAAO+B,OAAOC,MAAM,CAACD,MAAOE,CAAAA,MAAM,CAAC3B,KAAQsB,CAAAA,EAAAA,IAAAA,CAAAA;AAC7C;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../src/core-api/controller/index.ts"],"sourcesContent":["import { prop } from 'lodash/fp';\nimport type Koa from 'koa';\nimport { contentTypes as contentTypeUtils } from '@strapi/utils';\nimport type { Core, Struct } from '@strapi/types';\n\nimport { transformResponse } from './transform';\nimport { createSingleTypeController } from './single-type';\nimport { createCollectionTypeController } from './collection-type';\nimport requestCtx from '../../services/request-context';\n\nconst isSingleType = (\n  contentType: Struct.ContentTypeSchema\n): contentType is Struct.SingleTypeSchema => contentTypeUtils.isSingleType(contentType);\n\nconst getAuthFromKoaContext = (ctx: Koa.Context) => prop('state.auth', ctx) ?? {};\n\n/** Build options for contentAPI.sanitize/validate from the request context (auth, route, strictParams). */\nconst getContentAPIOptions = (ctx: Koa.Context) => {\n  const auth = getAuthFromKoaContext(ctx);\n  const route = ctx.state?.route;\n  const options: { auth: unknown; strictParams?: boolean; route?: typeof route } = { auth, route };\n  const apiStrictParams = strapi.config.get('api.rest.strictParams');\n  if (typeof apiStrictParams === 'boolean') {\n    options.strictParams = apiStrictParams;\n  }\n  return options;\n};\n\nfunction createController<T extends Struct.SingleTypeSchema | Struct.CollectionTypeSchema>(opts: {\n  contentType: T;\n}): T extends Struct.SingleTypeSchema\n  ? Core.CoreAPI.Controller.SingleType\n  : Core.CoreAPI.Controller.CollectionType;\nfunction createController({\n  contentType,\n}: {\n  contentType: Struct.SingleTypeSchema | Struct.CollectionTypeSchema;\n}) {\n  // TODO: replace with Base class + SingleType and CollectionType classes\n\n  const proto: Core.CoreAPI.Controller.Base = {\n    transformResponse(data, meta) {\n      const ctx = requestCtx.get();\n      return transformResponse(data, meta, {\n        contentType,\n        useJsonAPIFormat: ctx?.headers?.['strapi-response-format'] === 'v4',\n        encodeSourceMaps: ctx?.headers?.['strapi-encode-source-maps'] === 'true',\n      });\n    },\n\n    async sanitizeOutput(data, ctx) {\n      const auth = getAuthFromKoaContext(ctx);\n\n      return strapi.contentAPI.sanitize.output(data, contentType, { auth });\n    },\n\n    async sanitizeInput(data, ctx) {\n      return strapi.contentAPI.sanitize.input(data, contentType, getContentAPIOptions(ctx));\n    },\n\n    async sanitizeQuery(ctx) {\n      return strapi.contentAPI.sanitize.query(ctx.query, contentType, getContentAPIOptions(ctx));\n    },\n\n    async validateQuery(ctx) {\n      return strapi.contentAPI.validate.query(ctx.query, contentType, getContentAPIOptions(ctx));\n    },\n\n    async validateInput(data, ctx) {\n      return strapi.contentAPI.validate.input(data, contentType, getContentAPIOptions(ctx));\n    },\n  };\n\n  let ctrl;\n\n  if (isSingleType(contentType)) {\n    ctrl = createSingleTypeController({ contentType });\n  } else {\n    ctrl = createCollectionTypeController({ contentType });\n  }\n\n  return Object.assign(Object.create(proto), ctrl);\n}\n\nexport { createController };\n"],"names":["isSingleType","contentType","contentTypeUtils","getAuthFromKoaContext","ctx","prop","getContentAPIOptions","auth","route","state","options","apiStrictParams","strapi","config","get","strictParams","createController","proto","transformResponse","data","meta","requestCtx","useJsonAPIFormat","headers","encodeSourceMaps","sanitizeOutput","contentAPI","sanitize","output","sanitizeInput","input","sanitizeQuery","query","validateQuery","validate","validateInput","ctrl","createSingleTypeController","createCollectionTypeController","Object","assign","create"],"mappings":";;;;;;;AAUA,MAAMA,YAAe,GAAA,CACnBC,WAC2CC,GAAAA,YAAAA,CAAiBF,YAAY,CAACC,WAAAA,CAAAA;AAE3E,MAAME,wBAAwB,CAACC,GAAAA,GAAqBC,IAAK,CAAA,YAAA,EAAcD,QAAQ,EAAC;AAEhF,4GACA,MAAME,oBAAAA,GAAuB,CAACF,GAAAA,GAAAA;AAC5B,IAAA,MAAMG,OAAOJ,qBAAsBC,CAAAA,GAAAA,CAAAA;IACnC,MAAMI,KAAAA,GAAQJ,GAAIK,CAAAA,KAAK,EAAED,KAAAA;AACzB,IAAA,MAAME,OAA2E,GAAA;AAAEH,QAAAA,IAAAA;AAAMC,QAAAA;AAAM,KAAA;AAC/F,IAAA,MAAMG,eAAkBC,GAAAA,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,uBAAA,CAAA;IAC1C,IAAI,OAAOH,oBAAoB,SAAW,EAAA;AACxCD,QAAAA,OAAAA,CAAQK,YAAY,GAAGJ,eAAAA;AACzB;IACA,OAAOD,OAAAA;AACT,CAAA;AAOA,SAASM,gBAAAA,CAAiB,EACxBf,WAAW,EAGZ,EAAA;;AAGC,IAAA,MAAMgB,KAAsC,GAAA;QAC1CC,iBAAkBC,CAAAA,CAAAA,IAAI,EAAEC,IAAI,EAAA;YAC1B,MAAMhB,GAAAA,GAAMiB,WAAWP,GAAG,EAAA;YAC1B,OAAOI,iBAAAA,CAAkBC,MAAMC,IAAM,EAAA;AACnCnB,gBAAAA,WAAAA;AACAqB,gBAAAA,gBAAAA,EAAkBlB,GAAKmB,EAAAA,OAAAA,GAAU,wBAAA,CAAyB,KAAK,IAAA;AAC/DC,gBAAAA,gBAAAA,EAAkBpB,GAAKmB,EAAAA,OAAAA,GAAU,2BAAA,CAA4B,KAAK;AACpE,aAAA,CAAA;AACF,SAAA;QAEA,MAAME,cAAAA,CAAAA,CAAeN,IAAI,EAAEf,GAAG,EAAA;AAC5B,YAAA,MAAMG,OAAOJ,qBAAsBC,CAAAA,GAAAA,CAAAA;YAEnC,OAAOQ,MAAAA,CAAOc,UAAU,CAACC,QAAQ,CAACC,MAAM,CAACT,MAAMlB,WAAa,EAAA;AAAEM,gBAAAA;AAAK,aAAA,CAAA;AACrE,SAAA;QAEA,MAAMsB,aAAAA,CAAAA,CAAcV,IAAI,EAAEf,GAAG,EAAA;YAC3B,OAAOQ,MAAAA,CAAOc,UAAU,CAACC,QAAQ,CAACG,KAAK,CAACX,IAAMlB,EAAAA,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AAClF,SAAA;AAEA,QAAA,MAAM2B,eAAc3B,GAAG,EAAA;YACrB,OAAOQ,MAAAA,CAAOc,UAAU,CAACC,QAAQ,CAACK,KAAK,CAAC5B,GAAI4B,CAAAA,KAAK,EAAE/B,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AACvF,SAAA;AAEA,QAAA,MAAM6B,eAAc7B,GAAG,EAAA;YACrB,OAAOQ,MAAAA,CAAOc,UAAU,CAACQ,QAAQ,CAACF,KAAK,CAAC5B,GAAI4B,CAAAA,KAAK,EAAE/B,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AACvF,SAAA;QAEA,MAAM+B,aAAAA,CAAAA,CAAchB,IAAI,EAAEf,GAAG,EAAA;YAC3B,OAAOQ,MAAAA,CAAOc,UAAU,CAACQ,QAAQ,CAACJ,KAAK,CAACX,IAAMlB,EAAAA,WAAAA,EAAaK,oBAAqBF,CAAAA,GAAAA,CAAAA,CAAAA;AAClF;AACF,KAAA;IAEA,IAAIgC,IAAAA;AAEJ,IAAA,IAAIpC,aAAaC,WAAc,CAAA,EAAA;AAC7BmC,QAAAA,IAAAA,GAAOC,0BAA2B,CAAA;AAAEpC,YAAAA;AAAY,SAAA,CAAA;KAC3C,MAAA;AACLmC,QAAAA,IAAAA,GAAOE,8BAA+B,CAAA;AAAErC,YAAAA;AAAY,SAAA,CAAA;AACtD;AAEA,IAAA,OAAOsC,OAAOC,MAAM,CAACD,MAAOE,CAAAA,MAAM,CAACxB,KAAQmB,CAAAA,EAAAA,IAAAA,CAAAA;AAC7C;;;;"}

package/dist/core-api/routes/index.js

@@ -194,7 +194,19 @@ const getCollectionTypeRoutes = (schema, strapi1)=>{
         }
     };
 };
-const getConditionalQueryParams = (schema)=>{
+/**
+ * Query params that are conditionally part of this route's contract (and OpenAPI spec)
+ * based on the content type: e.g. locale only for localized types, status only for draft & publish.
+ *
+ * This is separate from the runtime allowlist used when api.rest.strictParams is on
+ * (ALLOWED_QUERY_PARAM_KEYS + registerQueryParam in @strapi/utils). That allowlist is global
+ * (locale and status are always allowed); validate/sanitize then pass them through and the
+ * document service or i18n layer ignores them when not applicable.
+ *
+ * So the two can differ: a non-localized route will not declare "locale" here (OpenAPI says
+ * no locale param), but the runtime allowlist still allows the key and downstream ignores it.
+ * That is intentional: this drives the route contract/docs; the allowlist drives enforcement.
+ */ const getConditionalQueryParams = (schema)=>{
     const isLocalized = strapi.plugin('i18n').service('content-types').isLocalizedContentType(schema);
     const hasDraftAndPublish = strapiUtils.contentTypes.hasDraftAndPublish(schema);
     return [
@@ -202,7 +214,8 @@ const getConditionalQueryParams = (schema)=>{
             'locale'
         ] : [],
         ...hasDraftAndPublish ? [
-            'status'
+            'status',
+            'hasPublishedVersion'
         ] : []
     ];
 };

package/dist/core-api/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../src/core-api/routes/index.ts"],"sourcesContent":["import type { Core, Schema } from '@strapi/types';\n\nimport { contentTypes, contentTypes as contentTypeUtils } from '@strapi/utils';\nimport * as z from 'zod/v4';\nimport type { QueryParam } from './validation/content-type';\n\nimport { CoreContentTypeRouteValidator } from './validation';\n\nexport const createRoutes = ({\n  strapi,\n  contentType,\n}: {\n  strapi: Core.Strapi;\n  contentType: Schema.ContentType;\n}) => {\n  if (contentTypeUtils.isSingleType(contentType)) {\n    return getSingleTypeRoutes(contentType, strapi);\n  }\n\n  return getCollectionTypeRoutes(contentType, strapi);\n};\n\nconst getSingleTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.singularName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.singularName}`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.singularName}`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n  };\n};\n\nconst getCollectionTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams([\n          'fields',\n          'filters',\n          '_q',\n          'pagination',\n          'sort',\n          'populate',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.documents }),\n      config: {},\n    },\n    findOne: {\n      method: 'GET',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.findOne`,\n      request: {\n        params: { id: validator.documentID },\n        query: validator.queryParams([\n          'fields',\n          'populate',\n          'filters',\n          'sort',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.document }),\n    },\n    create: {\n      method: 'POST',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.create`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.body },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n      },\n      response: z.object({ data: validator.document }),\n    },\n  };\n};\n\nconst getConditionalQueryParams = (schema: Schema.ContentType) => {\n  const isLocalized = strapi.plugin('i18n').service('content-types').isLocalizedContentType(schema);\n  const hasDraftAndPublish = contentTypes.hasDraftAndPublish(schema);\n\n  return [\n    ...(isLocalized ? ['locale'] : []),\n    ...(hasDraftAndPublish ? ['status'] : []),\n  ] as QueryParam[];\n};\n"],"names":["createRoutes","strapi","contentType","contentTypeUtils","isSingleType","getSingleTypeRoutes","getCollectionTypeRoutes","schema","uid","info","validator","CoreContentTypeRouteValidator","conditionalQueryParams","getConditionalQueryParams","find","method","path","singularName","handler","request","query","queryParams","response","z","object","data","document","config","update","body","partialBody","delete","pluralName","documents","findOne","params","id","documentID","create","isLocalized","plugin","service","isLocalizedContentType","hasDraftAndPublish","contentTypes"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAQO,MAAMA,eAAe,CAAC,EAC3BC,QAAAA,OAAM,EACNC,WAAW,EAIZ,GAAA;IACC,IAAIC,wBAAAA,CAAiBC,YAAY,CAACF,WAAc,CAAA,EAAA;AAC9C,QAAA,OAAOG,oBAAoBH,WAAaD,EAAAA,OAAAA,CAAAA;AAC1C;AAEA,IAAA,OAAOK,wBAAwBJ,WAAaD,EAAAA,OAAAA,CAAAA;AAC9C;AAEA,MAAMI,mBAAAA,GAAsB,CAC1BE,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,yCAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA;AAC3F,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAI,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA;AAChF,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV;AACF,KAAA;AACF,CAAA;AAEA,MAAMrB,uBAAAA,GAA0B,CAC9BC,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,yCAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,SAAA;AACA,oBAAA,IAAA;AACA,oBAAA,YAAA;AACA,oBAAA,MAAA;AACA,oBAAA,UAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUuB;AAAU,aAAA,CAAA;AAC/CN,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAO,OAAS,EAAA;YACPnB,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,QAAQ,CAAC;YACzBW,OAAS,EAAA;gBACPgB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCjB,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,UAAA;AACA,oBAAA,SAAA;AACA,oBAAA,MAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAY,MAAQ,EAAA;YACNvB,MAAQ,EAAA,MAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUmB;AAAK;AAC7C,aAAA;YACAP,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCR,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAK,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBACzFuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW;AACrC,aAAA;YACAf,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD;AACF,KAAA;AACF,CAAA;AAEA,MAAMb,4BAA4B,CAACN,MAAAA,GAAAA;IACjC,MAAMgC,WAAAA,GAActC,OAAOuC,MAAM,CAAC,QAAQC,OAAO,CAAC,eAAiBC,CAAAA,CAAAA,sBAAsB,CAACnC,MAAAA,CAAAA;IAC1F,MAAMoC,kBAAAA,GAAqBC,wBAAaD,CAAAA,kBAAkB,CAACpC,MAAAA,CAAAA;IAE3D,OAAO;WACDgC,WAAc,GAAA;AAAC,YAAA;AAAS,SAAA,GAAG,EAAE;WAC7BI,kBAAqB,GAAA;AAAC,YAAA;AAAS,SAAA,GAAG;AACvC,KAAA;AACH,CAAA;;;;"}
+{"version":3,"file":"index.js","sources":["../../../src/core-api/routes/index.ts"],"sourcesContent":["import type { Core, Schema } from '@strapi/types';\n\nimport { contentTypes, contentTypes as contentTypeUtils } from '@strapi/utils';\nimport * as z from 'zod/v4';\nimport type { QueryParam } from './validation/content-type';\n\nimport { CoreContentTypeRouteValidator } from './validation';\n\nexport const createRoutes = ({\n  strapi,\n  contentType,\n}: {\n  strapi: Core.Strapi;\n  contentType: Schema.ContentType;\n}) => {\n  if (contentTypeUtils.isSingleType(contentType)) {\n    return getSingleTypeRoutes(contentType, strapi);\n  }\n\n  return getCollectionTypeRoutes(contentType, strapi);\n};\n\nconst getSingleTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.singularName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.singularName}`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.singularName}`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n  };\n};\n\nconst getCollectionTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams([\n          'fields',\n          'filters',\n          '_q',\n          'pagination',\n          'sort',\n          'populate',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.documents }),\n      config: {},\n    },\n    findOne: {\n      method: 'GET',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.findOne`,\n      request: {\n        params: { id: validator.documentID },\n        query: validator.queryParams([\n          'fields',\n          'populate',\n          'filters',\n          'sort',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.document }),\n    },\n    create: {\n      method: 'POST',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.create`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.body },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n      },\n      response: z.object({ data: validator.document }),\n    },\n  };\n};\n\n/**\n * Query params that are conditionally part of this route's contract (and OpenAPI spec)\n * based on the content type: e.g. locale only for localized types, status only for draft & publish.\n *\n * This is separate from the runtime allowlist used when api.rest.strictParams is on\n * (ALLOWED_QUERY_PARAM_KEYS + registerQueryParam in @strapi/utils). That allowlist is global\n * (locale and status are always allowed); validate/sanitize then pass them through and the\n * document service or i18n layer ignores them when not applicable.\n *\n * So the two can differ: a non-localized route will not declare \"locale\" here (OpenAPI says\n * no locale param), but the runtime allowlist still allows the key and downstream ignores it.\n * That is intentional: this drives the route contract/docs; the allowlist drives enforcement.\n */\nconst getConditionalQueryParams = (schema: Schema.ContentType) => {\n  const isLocalized = strapi.plugin('i18n').service('content-types').isLocalizedContentType(schema);\n  const hasDraftAndPublish = contentTypes.hasDraftAndPublish(schema);\n\n  return [\n    ...(isLocalized ? ['locale'] : []),\n    ...(hasDraftAndPublish ? ['status', 'hasPublishedVersion'] : []),\n  ] as QueryParam[];\n};\n"],"names":["createRoutes","strapi","contentType","contentTypeUtils","isSingleType","getSingleTypeRoutes","getCollectionTypeRoutes","schema","uid","info","validator","CoreContentTypeRouteValidator","conditionalQueryParams","getConditionalQueryParams","find","method","path","singularName","handler","request","query","queryParams","response","z","object","data","document","config","update","body","partialBody","delete","pluralName","documents","findOne","params","id","documentID","create","isLocalized","plugin","service","isLocalizedContentType","hasDraftAndPublish","contentTypes"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAQO,MAAMA,eAAe,CAAC,EAC3BC,QAAAA,OAAM,EACNC,WAAW,EAIZ,GAAA;IACC,IAAIC,wBAAAA,CAAiBC,YAAY,CAACF,WAAc,CAAA,EAAA;AAC9C,QAAA,OAAOG,oBAAoBH,WAAaD,EAAAA,OAAAA,CAAAA;AAC1C;AAEA,IAAA,OAAOK,wBAAwBJ,WAAaD,EAAAA,OAAAA,CAAAA;AAC9C;AAEA,MAAMI,mBAAAA,GAAsB,CAC1BE,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,yCAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA;AAC3F,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAI,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA;AAChF,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV;AACF,KAAA;AACF,CAAA;AAEA,MAAMrB,uBAAAA,GAA0B,CAC9BC,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,yCAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,SAAA;AACA,oBAAA,IAAA;AACA,oBAAA,YAAA;AACA,oBAAA,MAAA;AACA,oBAAA,UAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUuB;AAAU,aAAA,CAAA;AAC/CN,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAO,OAAS,EAAA;YACPnB,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,QAAQ,CAAC;YACzBW,OAAS,EAAA;gBACPgB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCjB,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,UAAA;AACA,oBAAA,SAAA;AACA,oBAAA,MAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAY,MAAQ,EAAA;YACNvB,MAAQ,EAAA,MAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUmB;AAAK;AAC7C,aAAA;YACAP,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCR,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAK,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBACzFuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW;AACrC,aAAA;YACAf,QAAUC,EAAAA,YAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD;AACF,KAAA;AACF,CAAA;AAEA;;;;;;;;;;;;IAaA,MAAMb,4BAA4B,CAACN,MAAAA,GAAAA;IACjC,MAAMgC,WAAAA,GAActC,OAAOuC,MAAM,CAAC,QAAQC,OAAO,CAAC,eAAiBC,CAAAA,CAAAA,sBAAsB,CAACnC,MAAAA,CAAAA;IAC1F,MAAMoC,kBAAAA,GAAqBC,wBAAaD,CAAAA,kBAAkB,CAACpC,MAAAA,CAAAA;IAE3D,OAAO;WACDgC,WAAc,GAAA;AAAC,YAAA;AAAS,SAAA,GAAG,EAAE;WAC7BI,kBAAqB,GAAA;AAAC,YAAA,QAAA;AAAU,YAAA;AAAsB,SAAA,GAAG;AAC9D,KAAA;AACH,CAAA;;;;"}

package/dist/core-api/routes/index.mjs

@@ -173,7 +173,19 @@ const getCollectionTypeRoutes = (schema, strapi1)=>{
         }
     };
 };
-const getConditionalQueryParams = (schema)=>{
+/**
+ * Query params that are conditionally part of this route's contract (and OpenAPI spec)
+ * based on the content type: e.g. locale only for localized types, status only for draft & publish.
+ *
+ * This is separate from the runtime allowlist used when api.rest.strictParams is on
+ * (ALLOWED_QUERY_PARAM_KEYS + registerQueryParam in @strapi/utils). That allowlist is global
+ * (locale and status are always allowed); validate/sanitize then pass them through and the
+ * document service or i18n layer ignores them when not applicable.
+ *
+ * So the two can differ: a non-localized route will not declare "locale" here (OpenAPI says
+ * no locale param), but the runtime allowlist still allows the key and downstream ignores it.
+ * That is intentional: this drives the route contract/docs; the allowlist drives enforcement.
+ */ const getConditionalQueryParams = (schema)=>{
     const isLocalized = strapi.plugin('i18n').service('content-types').isLocalizedContentType(schema);
     const hasDraftAndPublish = contentTypes.hasDraftAndPublish(schema);
     return [
@@ -181,7 +193,8 @@ const getConditionalQueryParams = (schema)=>{
             'locale'
         ] : [],
         ...hasDraftAndPublish ? [
-            'status'
+            'status',
+            'hasPublishedVersion'
         ] : []
     ];
 };

package/dist/core-api/routes/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../src/core-api/routes/index.ts"],"sourcesContent":["import type { Core, Schema } from '@strapi/types';\n\nimport { contentTypes, contentTypes as contentTypeUtils } from '@strapi/utils';\nimport * as z from 'zod/v4';\nimport type { QueryParam } from './validation/content-type';\n\nimport { CoreContentTypeRouteValidator } from './validation';\n\nexport const createRoutes = ({\n  strapi,\n  contentType,\n}: {\n  strapi: Core.Strapi;\n  contentType: Schema.ContentType;\n}) => {\n  if (contentTypeUtils.isSingleType(contentType)) {\n    return getSingleTypeRoutes(contentType, strapi);\n  }\n\n  return getCollectionTypeRoutes(contentType, strapi);\n};\n\nconst getSingleTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.singularName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.singularName}`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.singularName}`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n  };\n};\n\nconst getCollectionTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams([\n          'fields',\n          'filters',\n          '_q',\n          'pagination',\n          'sort',\n          'populate',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.documents }),\n      config: {},\n    },\n    findOne: {\n      method: 'GET',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.findOne`,\n      request: {\n        params: { id: validator.documentID },\n        query: validator.queryParams([\n          'fields',\n          'populate',\n          'filters',\n          'sort',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.document }),\n    },\n    create: {\n      method: 'POST',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.create`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.body },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n      },\n      response: z.object({ data: validator.document }),\n    },\n  };\n};\n\nconst getConditionalQueryParams = (schema: Schema.ContentType) => {\n  const isLocalized = strapi.plugin('i18n').service('content-types').isLocalizedContentType(schema);\n  const hasDraftAndPublish = contentTypes.hasDraftAndPublish(schema);\n\n  return [\n    ...(isLocalized ? ['locale'] : []),\n    ...(hasDraftAndPublish ? ['status'] : []),\n  ] as QueryParam[];\n};\n"],"names":["createRoutes","strapi","contentType","contentTypeUtils","isSingleType","getSingleTypeRoutes","getCollectionTypeRoutes","schema","uid","info","validator","CoreContentTypeRouteValidator","conditionalQueryParams","getConditionalQueryParams","find","method","path","singularName","handler","request","query","queryParams","response","z","object","data","document","config","update","body","partialBody","delete","pluralName","documents","findOne","params","id","documentID","create","isLocalized","plugin","service","isLocalizedContentType","hasDraftAndPublish","contentTypes"],"mappings":";;;;AAQO,MAAMA,eAAe,CAAC,EAC3BC,QAAAA,OAAM,EACNC,WAAW,EAIZ,GAAA;IACC,IAAIC,YAAAA,CAAiBC,YAAY,CAACF,WAAc,CAAA,EAAA;AAC9C,QAAA,OAAOG,oBAAoBH,WAAaD,EAAAA,OAAAA,CAAAA;AAC1C;AAEA,IAAA,OAAOK,wBAAwBJ,WAAaD,EAAAA,OAAAA,CAAAA;AAC9C;AAEA,MAAMI,mBAAAA,GAAsB,CAC1BE,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,6BAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA;AAC3F,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAI,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA;AAChF,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV;AACF,KAAA;AACF,CAAA;AAEA,MAAMrB,uBAAAA,GAA0B,CAC9BC,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,6BAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,SAAA;AACA,oBAAA,IAAA;AACA,oBAAA,YAAA;AACA,oBAAA,MAAA;AACA,oBAAA,UAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUuB;AAAU,aAAA,CAAA;AAC/CN,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAO,OAAS,EAAA;YACPnB,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,QAAQ,CAAC;YACzBW,OAAS,EAAA;gBACPgB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCjB,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,UAAA;AACA,oBAAA,SAAA;AACA,oBAAA,MAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAY,MAAQ,EAAA;YACNvB,MAAQ,EAAA,MAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUmB;AAAK;AAC7C,aAAA;YACAP,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCR,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAK,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBACzFuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW;AACrC,aAAA;YACAf,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD;AACF,KAAA;AACF,CAAA;AAEA,MAAMb,4BAA4B,CAACN,MAAAA,GAAAA;IACjC,MAAMgC,WAAAA,GAActC,OAAOuC,MAAM,CAAC,QAAQC,OAAO,CAAC,eAAiBC,CAAAA,CAAAA,sBAAsB,CAACnC,MAAAA,CAAAA;IAC1F,MAAMoC,kBAAAA,GAAqBC,YAAaD,CAAAA,kBAAkB,CAACpC,MAAAA,CAAAA;IAE3D,OAAO;WACDgC,WAAc,GAAA;AAAC,YAAA;AAAS,SAAA,GAAG,EAAE;WAC7BI,kBAAqB,GAAA;AAAC,YAAA;AAAS,SAAA,GAAG;AACvC,KAAA;AACH,CAAA;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../src/core-api/routes/index.ts"],"sourcesContent":["import type { Core, Schema } from '@strapi/types';\n\nimport { contentTypes, contentTypes as contentTypeUtils } from '@strapi/utils';\nimport * as z from 'zod/v4';\nimport type { QueryParam } from './validation/content-type';\n\nimport { CoreContentTypeRouteValidator } from './validation';\n\nexport const createRoutes = ({\n  strapi,\n  contentType,\n}: {\n  strapi: Core.Strapi;\n  contentType: Schema.ContentType;\n}) => {\n  if (contentTypeUtils.isSingleType(contentType)) {\n    return getSingleTypeRoutes(contentType, strapi);\n  }\n\n  return getCollectionTypeRoutes(contentType, strapi);\n};\n\nconst getSingleTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.singularName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.singularName}`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.singularName}`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n  };\n};\n\nconst getCollectionTypeRoutes = (\n  schema: Schema.ContentType,\n  strapi: Core.Strapi\n): Record<string, Partial<Core.Route>> => {\n  const { uid, info } = schema;\n\n  const validator = new CoreContentTypeRouteValidator(strapi, uid);\n  const conditionalQueryParams = getConditionalQueryParams(schema);\n\n  return {\n    find: {\n      method: 'GET',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.find`,\n      request: {\n        query: validator.queryParams([\n          'fields',\n          'filters',\n          '_q',\n          'pagination',\n          'sort',\n          'populate',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.documents }),\n      config: {},\n    },\n    findOne: {\n      method: 'GET',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.findOne`,\n      request: {\n        params: { id: validator.documentID },\n        query: validator.queryParams([\n          'fields',\n          'populate',\n          'filters',\n          'sort',\n          ...conditionalQueryParams,\n        ]),\n      },\n      response: z.object({ data: validator.document }),\n    },\n    create: {\n      method: 'POST',\n      path: `/${info.pluralName}`,\n      handler: `${uid}.create`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        body: { 'application/json': validator.body },\n      },\n      response: z.object({ data: validator.document }),\n      config: {},\n    },\n    update: {\n      method: 'PUT',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.update`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n        body: { 'application/json': validator.partialBody },\n      },\n      response: z.object({ data: validator.document }),\n    },\n    delete: {\n      method: 'DELETE',\n      path: `/${info.pluralName}/:id`,\n      handler: `${uid}.delete`,\n      request: {\n        query: validator.queryParams(['fields', 'populate', 'filters', ...conditionalQueryParams]),\n        params: { id: validator.documentID },\n      },\n      response: z.object({ data: validator.document }),\n    },\n  };\n};\n\n/**\n * Query params that are conditionally part of this route's contract (and OpenAPI spec)\n * based on the content type: e.g. locale only for localized types, status only for draft & publish.\n *\n * This is separate from the runtime allowlist used when api.rest.strictParams is on\n * (ALLOWED_QUERY_PARAM_KEYS + registerQueryParam in @strapi/utils). That allowlist is global\n * (locale and status are always allowed); validate/sanitize then pass them through and the\n * document service or i18n layer ignores them when not applicable.\n *\n * So the two can differ: a non-localized route will not declare \"locale\" here (OpenAPI says\n * no locale param), but the runtime allowlist still allows the key and downstream ignores it.\n * That is intentional: this drives the route contract/docs; the allowlist drives enforcement.\n */\nconst getConditionalQueryParams = (schema: Schema.ContentType) => {\n  const isLocalized = strapi.plugin('i18n').service('content-types').isLocalizedContentType(schema);\n  const hasDraftAndPublish = contentTypes.hasDraftAndPublish(schema);\n\n  return [\n    ...(isLocalized ? ['locale'] : []),\n    ...(hasDraftAndPublish ? ['status', 'hasPublishedVersion'] : []),\n  ] as QueryParam[];\n};\n"],"names":["createRoutes","strapi","contentType","contentTypeUtils","isSingleType","getSingleTypeRoutes","getCollectionTypeRoutes","schema","uid","info","validator","CoreContentTypeRouteValidator","conditionalQueryParams","getConditionalQueryParams","find","method","path","singularName","handler","request","query","queryParams","response","z","object","data","document","config","update","body","partialBody","delete","pluralName","documents","findOne","params","id","documentID","create","isLocalized","plugin","service","isLocalizedContentType","hasDraftAndPublish","contentTypes"],"mappings":";;;;AAQO,MAAMA,eAAe,CAAC,EAC3BC,QAAAA,OAAM,EACNC,WAAW,EAIZ,GAAA;IACC,IAAIC,YAAAA,CAAiBC,YAAY,CAACF,WAAc,CAAA,EAAA;AAC9C,QAAA,OAAOG,oBAAoBH,WAAaD,EAAAA,OAAAA,CAAAA;AAC1C;AAEA,IAAA,OAAOK,wBAAwBJ,WAAaD,EAAAA,OAAAA,CAAAA;AAC9C;AAEA,MAAMI,mBAAAA,GAAsB,CAC1BE,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,6BAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA;AAC3F,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAI,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKQ,YAAY,CAAE,CAAA;YAC7BC,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA;AAChF,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV;AACF,KAAA;AACF,CAAA;AAEA,MAAMrB,uBAAAA,GAA0B,CAC9BC,MACAN,EAAAA,OAAAA,GAAAA;AAEA,IAAA,MAAM,EAAEO,GAAG,EAAEC,IAAI,EAAE,GAAGF,MAAAA;IAEtB,MAAMG,SAAAA,GAAY,IAAIC,6BAAAA,CAA8BV,OAAQO,EAAAA,GAAAA,CAAAA;AAC5D,IAAA,MAAMI,yBAAyBC,yBAA0BN,CAAAA,MAAAA,CAAAA;IAEzD,OAAO;QACLO,IAAM,EAAA;YACJC,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,KAAK,CAAC;YACtBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,SAAA;AACA,oBAAA,IAAA;AACA,oBAAA,YAAA;AACA,oBAAA,MAAA;AACA,oBAAA,UAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUuB;AAAU,aAAA,CAAA;AAC/CN,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAO,OAAS,EAAA;YACPnB,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,QAAQ,CAAC;YACzBW,OAAS,EAAA;gBACPgB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCjB,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAC3B,oBAAA,QAAA;AACA,oBAAA,UAAA;AACA,oBAAA,SAAA;AACA,oBAAA,MAAA;AACGT,oBAAAA,GAAAA;AACJ,iBAAA;AACH,aAAA;YACAU,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAY,MAAQ,EAAA;YACNvB,MAAQ,EAAA,MAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,IAAAA,CAAKuB,UAAU,CAAE,CAAA;YAC3Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EiB,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUmB;AAAK;AAC7C,aAAA;YACAP,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA,CAAA;AAC9CC,YAAAA,MAAAA,EAAQ;AACV,SAAA;QACAC,MAAQ,EAAA;YACNb,MAAQ,EAAA,KAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAeT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBAC9EuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW,iBAAA;gBACnCR,IAAM,EAAA;AAAE,oBAAA,kBAAA,EAAoBnB,UAAUoB;AAAY;AACpD,aAAA;YACAR,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD,SAAA;QACAK,MAAQ,EAAA;YACNhB,MAAQ,EAAA,QAAA;AACRC,YAAAA,IAAAA,EAAM,CAAC,CAAC,EAAEP,KAAKuB,UAAU,CAAC,IAAI,CAAC;YAC/Bd,OAAS,EAAA,CAAA,EAAGV,GAAI,CAAA,OAAO,CAAC;YACxBW,OAAS,EAAA;gBACPC,KAAOV,EAAAA,SAAAA,CAAUW,WAAW,CAAC;AAAC,oBAAA,QAAA;AAAU,oBAAA,UAAA;AAAY,oBAAA,SAAA;AAAcT,oBAAAA,GAAAA;AAAuB,iBAAA,CAAA;gBACzFuB,MAAQ,EAAA;AAAEC,oBAAAA,EAAAA,EAAI1B,UAAU2B;AAAW;AACrC,aAAA;YACAf,QAAUC,EAAAA,CAAAA,CAAEC,MAAM,CAAC;AAAEC,gBAAAA,IAAAA,EAAMf,UAAUgB;AAAS,aAAA;AAChD;AACF,KAAA;AACF,CAAA;AAEA;;;;;;;;;;;;IAaA,MAAMb,4BAA4B,CAACN,MAAAA,GAAAA;IACjC,MAAMgC,WAAAA,GAActC,OAAOuC,MAAM,CAAC,QAAQC,OAAO,CAAC,eAAiBC,CAAAA,CAAAA,sBAAsB,CAACnC,MAAAA,CAAAA;IAC1F,MAAMoC,kBAAAA,GAAqBC,YAAaD,CAAAA,kBAAkB,CAACpC,MAAAA,CAAAA;IAE3D,OAAO;WACDgC,WAAc,GAAA;AAAC,YAAA;AAAS,SAAA,GAAG,EAAE;WAC7BI,kBAAqB,GAAA;AAAC,YAAA,QAAA;AAAU,YAAA;AAAsB,SAAA,GAAG;AAC9D,KAAA;AACH,CAAA;;;;"}

package/dist/core-api/routes/validation/content-type.d.ts

@@ -1,7 +1,7 @@
 import type { UID } from '@strapi/types';
 import * as z from 'zod/v4';
 import { AbstractCoreRouteValidator } from './common';
-export type QueryParam = 'fields' | 'populate' | 'sort' | 'status' | 'locale' | 'pagination' | 'filters' | '_q';
+export type QueryParam = 'fields' | 'populate' | 'sort' | 'status' | 'hasPublishedVersion' | 'locale' | 'pagination' | 'filters' | '_q';
 /**
  * A validator for core content-type routes.
  *
@@ -103,6 +103,10 @@ export declare class CoreContentTypeRouteValidator extends AbstractCoreRouteVali
         draft: "draft";
         published: "published";
     }>;
+    get hasPublishedVersion(): z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
+        true: "true";
+        false: "false";
+    }>]>;
     get data(): z.ZodObject<{}, z.core.$strip>;
     get query(): z.ZodString;
     get body(): z.ZodObject<{

package/dist/core-api/routes/validation/content-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content-type.d.ts","sourceRoot":"","sources":["../../../../src/core-api/routes/validation/content-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,GAAG,EAAE,MAAM,eAAe,CAAC;AAGjD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,UAAU,GACV,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,IAAI,CAAC;AAET;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,6BAA8B,SAAQ,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC;IAC5F;;;;;;;;;;OAUG;IACH,IAAI,UAAU,cAEb;IAED;;;;;;;;;;;;OAYG;IACH,IAAI,QAAQ;;;sBAgBX;IAED;;;;;;;;;;OAUG;IACH,IAAI,SAAS;;;uBAEZ;IAED;;OAEG;IACH,SAAS,KAAK,sBAAsB;;SAMnC;IAED;;OAEG;IACH,SAAS,KAAK,wBAAwB;;;;UAiBrC;IAED;;OAEG;IACH,SAAS,KAAK,oBAAoB;;;;;;;;oFAYjC;IAED;;OAEG;IACH,SAAS,KAAK,kBAAkB;;kBAE/B;IAED,IAAI,MAAM,gBAET;IAED,IAAI,MAAM;;;OAIT;IAED,IAAI,IAAI,mCAYP;IAED,IAAI,KAAK,gBAER;IAED,IAAI,IAAI;;sBAEP;IAED,IAAI,WAAW;;sBAEd;IAED;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;CAiBzE"}
+{"version":3,"file":"content-type.d.ts","sourceRoot":"","sources":["../../../../src/core-api/routes/validation/content-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,GAAG,EAAE,MAAM,eAAe,CAAC;AAGjD,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAEtD,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,UAAU,GACV,MAAM,GACN,QAAQ,GACR,qBAAqB,GACrB,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,IAAI,CAAC;AAET;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,6BAA8B,SAAQ,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC;IAC5F;;;;;;;;;;OAUG;IACH,IAAI,UAAU,cAEb;IAED;;;;;;;;;;;;OAYG;IACH,IAAI,QAAQ;;;sBAgBX;IAED;;;;;;;;;;OAUG;IACH,IAAI,SAAS;;;uBAEZ;IAED;;OAEG;IACH,SAAS,KAAK,sBAAsB;;SAMnC;IAED;;OAEG;IACH,SAAS,KAAK,wBAAwB;;;;UAiBrC;IAED;;OAEG;IACH,SAAS,KAAK,oBAAoB;;;;;;;;oFAYjC;IAED;;OAEG;IACH,SAAS,KAAK,kBAAkB;;kBAE/B;IAED,IAAI,MAAM,gBAET;IAED,IAAI,MAAM;;;OAIT;IAED,IAAI,mBAAmB;;;SAMtB;IAED,IAAI,IAAI,mCAYP;IAED,IAAI,KAAK,gBAER;IAED,IAAI,IAAI;;sBAEP;IAED,IAAI,WAAW;;sBAEd;IAED;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;CAkBzE"}

package/dist/core-api/routes/validation/content-type.js

@@ -146,6 +146,15 @@ var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
             'published'
         ]).describe('Fetch documents based on their status. Default to "published" if not specified.');
     }
+    get hasPublishedVersion() {
+        return z__namespace.union([
+            z__namespace.boolean(),
+            z__namespace.enum([
+                'true',
+                'false'
+            ])
+        ]).describe('Filter documents by whether they have a published version. Use with status=draft to find documents that have never been published');
+    }
     get data() {
         const isWritableAttribute = ([attributeName])=>{
             return strapiUtils.contentTypes.isWritableAttribute(this._schema, attributeName);
@@ -191,6 +200,7 @@ var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
             locale: ()=>this.locale.optional(),
             pagination: ()=>this.pagination.optional(),
             status: ()=>this.status.optional(),
+            hasPublishedVersion: ()=>this.hasPublishedVersion.optional(),
             _q: ()=>this.query.optional()
         };
         return params.reduce((acc, param)=>({

package/dist/core-api/routes/validation/content-type.js.map

@@ -1 +1 @@
-{"version":3,"file":"content-type.js","sources":["../../../../src/core-api/routes/validation/content-type.ts"],"sourcesContent":["import type { Schema, UID } from '@strapi/types';\n\nimport { contentTypes } from '@strapi/utils';\nimport * as z from 'zod/v4';\n\n// eslint-disable-next-line import/no-cycle\nimport { createAttributesInputSchema, createAttributesSchema } from './mappers';\nimport { AbstractCoreRouteValidator } from './common';\n\nexport type QueryParam =\n  | 'fields'\n  | 'populate'\n  | 'sort'\n  | 'status'\n  | 'locale'\n  | 'pagination'\n  | 'filters'\n  | '_q';\n\n/**\n * A validator for core content-type routes.\n *\n * Provides validation schemas and utilities for handling content-type-specific route validation.\n * Extends the base AbstractRouteValidator with schema-aware validation for Strapi content types.\n *\n * @example\n * ```ts\n * const strapi = // ... strapi instance\n * const uid = 'api::article.article'\n * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n *\n * // Get validation schema for document\n * const documentSchema = validator.document;\n *\n * // Validate query parameters with schema awareness\n * const querySchema = validator.queryParams(['fields', 'populate', 'sort']);\n * ```\n */\nexport class CoreContentTypeRouteValidator extends AbstractCoreRouteValidator<UID.ContentType> {\n  /**\n   * Generates a validation schema for document IDs\n   *\n   * @returns A schema that validates UUIDs\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const idSchema = validator.documentID;\n   * ```\n   */\n  get documentID() {\n    return z.uuid().describe('The document ID, represented by a UUID');\n  }\n\n  /**\n   * Generates a comprehensive validation schema for a single document.\n   *\n   * Combines scalar fields and populatable fields into a single schema.\n   *\n   * @returns A schema for validating complete documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docSchema = validator.document;\n   * ```\n   */\n  get document() {\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove passwords from the attribute list\n      .filter(([, attribute]) => !['password'].includes(attribute.type));\n\n    // Merge all attributes into a single schema\n    const attributesSchema = createAttributesSchema(sanitizedAttributes);\n\n    return z\n      .object({\n        documentId: this.documentID,\n        id: z.union([z.string(), z.number()]),\n      })\n      .extend(attributesSchema.shape);\n  }\n\n  /**\n   * Generates a validation schema for an array of documents\n   *\n   * @returns A schema for validating arrays of documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docsSchema = validator.documents;\n   * ```\n   */\n  get documents() {\n    return z.array(this.document);\n  }\n\n  /**\n   * Schema-aware fields validation that restricts to actual model fields\n   */\n  protected get schemaAwareQueryFields() {\n    return this.scalarFieldsArray\n      .readonly()\n      .describe(\n        `The fields to return, this doesn't include populatable fields like relations, components, files, or dynamic zones`\n      );\n  }\n\n  /**\n   * Schema-aware populate validation that restricts to actual populatable fields\n   */\n  protected get schemaAwareQueryPopulate() {\n    const wildcardPopulate = z\n      .literal('*')\n      .readonly()\n      .describe(\n        'Populate all the first level relations, components, files, and dynamic zones for the entry'\n      );\n\n    const singleFieldPopulate = this.populatableFieldsEnum\n      .readonly()\n      .describe('Populate a single relation, component, file, or dynamic zone');\n\n    const multiPopulate = this.populatableFieldsArray.describe(\n      'Populate a selection of multiple relations, components, files, or dynamic zones'\n    );\n\n    return z.union([wildcardPopulate, singleFieldPopulate, multiPopulate]);\n  }\n\n  /**\n   * Schema-aware sort validation that restricts to actual model fields\n   */\n  protected get schemaAwareQuerySort() {\n    const orderDirection = z.enum(['asc', 'desc']);\n\n    // TODO: Handle nested sorts but very low priority, very little usage\n    return z\n      .union([\n        this.scalarFieldsEnum, // 'name' | 'title'\n        this.scalarFieldsArray, // ['name', 'title']\n        this.fieldRecord(orderDirection), // { name: 'desc' } | { title: 'asc' }\n        z.array(this.fieldRecord(orderDirection)), // [{ name: 'desc'}, { title: 'asc' }]\n      ])\n      .describe('Sort the result');\n  }\n\n  /**\n   * Schema-aware filters validation that restricts to actual model fields\n   */\n  protected get schemaAwareFilters() {\n    return z.record(this.scalarFieldsEnum, z.any()).describe('Filters to apply to the query');\n  }\n\n  get locale() {\n    return z.string().describe('Select a locale');\n  }\n\n  get status() {\n    return z\n      .enum(['draft', 'published'])\n      .describe('Fetch documents based on their status. Default to \"published\" if not specified.');\n  }\n\n  get data() {\n    const isWritableAttribute = ([attributeName]: [string, Schema.Attribute.AnyAttribute]) => {\n      return contentTypes.isWritableAttribute(this._schema, attributeName);\n    };\n\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove non-writable attributes\n      .filter(isWritableAttribute);\n\n    return createAttributesInputSchema(sanitizedAttributes);\n  }\n\n  get query() {\n    return z.string();\n  }\n\n  get body() {\n    return z.object({ data: this.data });\n  }\n\n  get partialBody() {\n    return z.object({ data: this.data.partial() });\n  }\n\n  /**\n   * Creates validation schemas for query parameters\n   *\n   * @param params - Array of query parameters to validate ('fields', 'populate', 'sort', ...)\n   * @returns Object containing validation schemas for requested parameters\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const querySchemas = validator.queryParams(['fields', 'populate']);\n   * ```\n   */\n  queryParams(params: QueryParam[]): Partial<Record<QueryParam, z.Schema>> {\n    const map: Record<QueryParam, () => z.Schema> = {\n      fields: () => this.schemaAwareQueryFields.optional(),\n      populate: () => this.schemaAwareQueryPopulate.optional(),\n      sort: () => this.schemaAwareQuerySort.optional(),\n      filters: () => this.schemaAwareFilters.optional(),\n      locale: () => this.locale.optional(),\n      pagination: () => this.pagination.optional(),\n      status: () => this.status.optional(),\n      _q: () => this.query.optional(),\n    } as const;\n\n    return params.reduce(\n      (acc, param) => ({ ...acc, [param]: map[param]() }),\n      {} as Partial<Record<QueryParam, z.Schema>>\n    );\n  }\n}\n"],"names":["CoreContentTypeRouteValidator","AbstractCoreRouteValidator","documentID","z","uuid","describe","document","entries","Object","_scalarFields","_populatableFields","sanitizedAttributes","filter","attribute","includes","type","attributesSchema","createAttributesSchema","object","documentId","id","union","string","number","extend","shape","documents","array","schemaAwareQueryFields","scalarFieldsArray","readonly","schemaAwareQueryPopulate","wildcardPopulate","literal","singleFieldPopulate","populatableFieldsEnum","multiPopulate","populatableFieldsArray","schemaAwareQuerySort","orderDirection","enum","scalarFieldsEnum","fieldRecord","schemaAwareFilters","record","any","locale","status","data","isWritableAttribute","attributeName","contentTypes","_schema","createAttributesInputSchema","query","body","partialBody","partial","queryParams","params","map","fields","optional","populate","sort","filters","pagination","_q","reduce","acc","param"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA;;;;;;;;;;;;;;;;;;IAmBO,MAAMA,6BAAsCC,SAAAA,iCAAAA,CAAAA;AACjD;;;;;;;;;;AAUC,MACD,IAAIC,UAAa,GAAA;AACf,QAAA,OAAOC,YAAEC,CAAAA,IAAI,EAAGC,CAAAA,QAAQ,CAAC,wCAAA,CAAA;AAC3B;AAEA;;;;;;;;;;;;AAYC,MACD,IAAIC,QAAW,GAAA;QACb,MAAMC,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAK,CAAC;AAAC,gBAAA;aAAW,CAACC,QAAQ,CAACD,SAAAA,CAAUE,IAAI,CAAA,CAAA;;AAGlE,QAAA,MAAMC,mBAAmBC,8BAAuBN,CAAAA,mBAAAA,CAAAA;QAEhD,OAAOR,YAAAA,CACJe,MAAM,CAAC;YACNC,UAAY,EAAA,IAAI,CAACjB,UAAU;YAC3BkB,EAAIjB,EAAAA,YAAAA,CAAEkB,KAAK,CAAC;AAAClB,gBAAAA,YAAAA,CAAEmB,MAAM,EAAA;AAAInB,gBAAAA,YAAAA,CAAEoB,MAAM;AAAG,aAAA;SAErCC,CAAAA,CAAAA,MAAM,CAACR,gBAAAA,CAAiBS,KAAK,CAAA;AAClC;AAEA;;;;;;;;;;AAUC,MACD,IAAIC,SAAY,GAAA;AACd,QAAA,OAAOvB,YAAEwB,CAAAA,KAAK,CAAC,IAAI,CAACrB,QAAQ,CAAA;AAC9B;AAEA;;AAEC,MACD,IAAcsB,sBAAyB,GAAA;QACrC,OAAO,IAAI,CAACC,iBAAiB,CAC1BC,QAAQ,GACRzB,QAAQ,CACP,CAAC,iHAAiH,CAAC,CAAA;AAEzH;AAEA;;AAEC,MACD,IAAc0B,wBAA2B,GAAA;QACvC,MAAMC,gBAAAA,GAAmB7B,aACtB8B,OAAO,CAAC,KACRH,QAAQ,EAAA,CACRzB,QAAQ,CACP,4FAAA,CAAA;QAGJ,MAAM6B,mBAAAA,GAAsB,IAAI,CAACC,qBAAqB,CACnDL,QAAQ,EAAA,CACRzB,QAAQ,CAAC,8DAAA,CAAA;AAEZ,QAAA,MAAM+B,gBAAgB,IAAI,CAACC,sBAAsB,CAAChC,QAAQ,CACxD,iFAAA,CAAA;QAGF,OAAOF,YAAAA,CAAEkB,KAAK,CAAC;AAACW,YAAAA,gBAAAA;AAAkBE,YAAAA,mBAAAA;AAAqBE,YAAAA;AAAc,SAAA,CAAA;AACvE;AAEA;;AAEC,MACD,IAAcE,oBAAuB,GAAA;QACnC,MAAMC,cAAAA,GAAiBpC,YAAEqC,CAAAA,IAAI,CAAC;AAAC,YAAA,KAAA;AAAO,YAAA;AAAO,SAAA,CAAA;;QAG7C,OAAOrC,YAAAA,CACJkB,KAAK,CAAC;AACL,YAAA,IAAI,CAACoB,gBAAgB;AACrB,YAAA,IAAI,CAACZ,iBAAiB;YACtB,IAAI,CAACa,WAAW,CAACH,cAAAA,CAAAA;AACjBpC,YAAAA,YAAAA,CAAEwB,KAAK,CAAC,IAAI,CAACe,WAAW,CAACH,cAAAA,CAAAA;AAC1B,SAAA,CAAA,CACAlC,QAAQ,CAAC,iBAAA,CAAA;AACd;AAEA;;AAEC,MACD,IAAcsC,kBAAqB,GAAA;QACjC,OAAOxC,YAAAA,CAAEyC,MAAM,CAAC,IAAI,CAACH,gBAAgB,EAAEtC,YAAE0C,CAAAA,GAAG,EAAIxC,CAAAA,CAAAA,QAAQ,CAAC,+BAAA,CAAA;AAC3D;AAEA,IAAA,IAAIyC,MAAS,GAAA;AACX,QAAA,OAAO3C,YAAEmB,CAAAA,MAAM,EAAGjB,CAAAA,QAAQ,CAAC,iBAAA,CAAA;AAC7B;AAEA,IAAA,IAAI0C,MAAS,GAAA;QACX,OAAO5C,YAAAA,CACJqC,IAAI,CAAC;AAAC,YAAA,OAAA;AAAS,YAAA;AAAY,SAAA,CAAA,CAC3BnC,QAAQ,CAAC,iFAAA,CAAA;AACd;AAEA,IAAA,IAAI2C,IAAO,GAAA;QACT,MAAMC,mBAAAA,GAAsB,CAAC,CAACC,aAAuD,CAAA,GAAA;AACnF,YAAA,OAAOC,yBAAaF,mBAAmB,CAAC,IAAI,CAACG,OAAO,EAAEF,aAAAA,CAAAA;AACxD,SAAA;QAEA,MAAM3C,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAACqC,mBAAAA,CAAAA;AAEV,QAAA,OAAOI,mCAA4B1C,CAAAA,mBAAAA,CAAAA;AACrC;AAEA,IAAA,IAAI2C,KAAQ,GAAA;AACV,QAAA,OAAOnD,aAAEmB,MAAM,EAAA;AACjB;AAEA,IAAA,IAAIiC,IAAO,GAAA;QACT,OAAOpD,YAAAA,CAAEe,MAAM,CAAC;YAAE8B,IAAM,EAAA,IAAI,CAACA;AAAK,SAAA,CAAA;AACpC;AAEA,IAAA,IAAIQ,WAAc,GAAA;QAChB,OAAOrD,YAAAA,CAAEe,MAAM,CAAC;AAAE8B,YAAAA,IAAAA,EAAM,IAAI,CAACA,IAAI,CAACS,OAAO;AAAG,SAAA,CAAA;AAC9C;AAEA;;;;;;;;;;;MAYAC,WAAAA,CAAYC,MAAoB,EAAyC;AACvE,QAAA,MAAMC,GAA0C,GAAA;AAC9CC,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACjC,sBAAsB,CAACkC,QAAQ,EAAA;AAClDC,YAAAA,QAAAA,EAAU,IAAM,IAAI,CAAChC,wBAAwB,CAAC+B,QAAQ,EAAA;AACtDE,YAAAA,IAAAA,EAAM,IAAM,IAAI,CAAC1B,oBAAoB,CAACwB,QAAQ,EAAA;AAC9CG,YAAAA,OAAAA,EAAS,IAAM,IAAI,CAACtB,kBAAkB,CAACmB,QAAQ,EAAA;AAC/ChB,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACgB,QAAQ,EAAA;AAClCI,YAAAA,UAAAA,EAAY,IAAM,IAAI,CAACA,UAAU,CAACJ,QAAQ,EAAA;AAC1Cf,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACe,QAAQ,EAAA;AAClCK,YAAAA,EAAAA,EAAI,IAAM,IAAI,CAACb,KAAK,CAACQ,QAAQ;AAC/B,SAAA;AAEA,QAAA,OAAOH,OAAOS,MAAM,CAClB,CAACC,GAAAA,EAAKC,SAAW;AAAE,gBAAA,GAAGD,GAAG;AAAE,gBAAA,CAACC,KAAM,GAAEV,GAAG,CAACU,KAAM,CAAA;AAAG,aAAA,GACjD,EAAC,CAAA;AAEL;AACF;;;;"}
+{"version":3,"file":"content-type.js","sources":["../../../../src/core-api/routes/validation/content-type.ts"],"sourcesContent":["import type { Schema, UID } from '@strapi/types';\n\nimport { contentTypes } from '@strapi/utils';\nimport * as z from 'zod/v4';\n\n// eslint-disable-next-line import/no-cycle\nimport { createAttributesInputSchema, createAttributesSchema } from './mappers';\nimport { AbstractCoreRouteValidator } from './common';\n\nexport type QueryParam =\n  | 'fields'\n  | 'populate'\n  | 'sort'\n  | 'status'\n  | 'hasPublishedVersion'\n  | 'locale'\n  | 'pagination'\n  | 'filters'\n  | '_q';\n\n/**\n * A validator for core content-type routes.\n *\n * Provides validation schemas and utilities for handling content-type-specific route validation.\n * Extends the base AbstractRouteValidator with schema-aware validation for Strapi content types.\n *\n * @example\n * ```ts\n * const strapi = // ... strapi instance\n * const uid = 'api::article.article'\n * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n *\n * // Get validation schema for document\n * const documentSchema = validator.document;\n *\n * // Validate query parameters with schema awareness\n * const querySchema = validator.queryParams(['fields', 'populate', 'sort']);\n * ```\n */\nexport class CoreContentTypeRouteValidator extends AbstractCoreRouteValidator<UID.ContentType> {\n  /**\n   * Generates a validation schema for document IDs\n   *\n   * @returns A schema that validates UUIDs\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const idSchema = validator.documentID;\n   * ```\n   */\n  get documentID() {\n    return z.uuid().describe('The document ID, represented by a UUID');\n  }\n\n  /**\n   * Generates a comprehensive validation schema for a single document.\n   *\n   * Combines scalar fields and populatable fields into a single schema.\n   *\n   * @returns A schema for validating complete documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docSchema = validator.document;\n   * ```\n   */\n  get document() {\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove passwords from the attribute list\n      .filter(([, attribute]) => !['password'].includes(attribute.type));\n\n    // Merge all attributes into a single schema\n    const attributesSchema = createAttributesSchema(sanitizedAttributes);\n\n    return z\n      .object({\n        documentId: this.documentID,\n        id: z.union([z.string(), z.number()]),\n      })\n      .extend(attributesSchema.shape);\n  }\n\n  /**\n   * Generates a validation schema for an array of documents\n   *\n   * @returns A schema for validating arrays of documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docsSchema = validator.documents;\n   * ```\n   */\n  get documents() {\n    return z.array(this.document);\n  }\n\n  /**\n   * Schema-aware fields validation that restricts to actual model fields\n   */\n  protected get schemaAwareQueryFields() {\n    return this.scalarFieldsArray\n      .readonly()\n      .describe(\n        `The fields to return, this doesn't include populatable fields like relations, components, files, or dynamic zones`\n      );\n  }\n\n  /**\n   * Schema-aware populate validation that restricts to actual populatable fields\n   */\n  protected get schemaAwareQueryPopulate() {\n    const wildcardPopulate = z\n      .literal('*')\n      .readonly()\n      .describe(\n        'Populate all the first level relations, components, files, and dynamic zones for the entry'\n      );\n\n    const singleFieldPopulate = this.populatableFieldsEnum\n      .readonly()\n      .describe('Populate a single relation, component, file, or dynamic zone');\n\n    const multiPopulate = this.populatableFieldsArray.describe(\n      'Populate a selection of multiple relations, components, files, or dynamic zones'\n    );\n\n    return z.union([wildcardPopulate, singleFieldPopulate, multiPopulate]);\n  }\n\n  /**\n   * Schema-aware sort validation that restricts to actual model fields\n   */\n  protected get schemaAwareQuerySort() {\n    const orderDirection = z.enum(['asc', 'desc']);\n\n    // TODO: Handle nested sorts but very low priority, very little usage\n    return z\n      .union([\n        this.scalarFieldsEnum, // 'name' | 'title'\n        this.scalarFieldsArray, // ['name', 'title']\n        this.fieldRecord(orderDirection), // { name: 'desc' } | { title: 'asc' }\n        z.array(this.fieldRecord(orderDirection)), // [{ name: 'desc'}, { title: 'asc' }]\n      ])\n      .describe('Sort the result');\n  }\n\n  /**\n   * Schema-aware filters validation that restricts to actual model fields\n   */\n  protected get schemaAwareFilters() {\n    return z.record(this.scalarFieldsEnum, z.any()).describe('Filters to apply to the query');\n  }\n\n  get locale() {\n    return z.string().describe('Select a locale');\n  }\n\n  get status() {\n    return z\n      .enum(['draft', 'published'])\n      .describe('Fetch documents based on their status. Default to \"published\" if not specified.');\n  }\n\n  get hasPublishedVersion() {\n    return z\n      .union([z.boolean(), z.enum(['true', 'false'])])\n      .describe(\n        'Filter documents by whether they have a published version. Use with status=draft to find documents that have never been published'\n      );\n  }\n\n  get data() {\n    const isWritableAttribute = ([attributeName]: [string, Schema.Attribute.AnyAttribute]) => {\n      return contentTypes.isWritableAttribute(this._schema, attributeName);\n    };\n\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove non-writable attributes\n      .filter(isWritableAttribute);\n\n    return createAttributesInputSchema(sanitizedAttributes);\n  }\n\n  get query() {\n    return z.string();\n  }\n\n  get body() {\n    return z.object({ data: this.data });\n  }\n\n  get partialBody() {\n    return z.object({ data: this.data.partial() });\n  }\n\n  /**\n   * Creates validation schemas for query parameters\n   *\n   * @param params - Array of query parameters to validate ('fields', 'populate', 'sort', ...)\n   * @returns Object containing validation schemas for requested parameters\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const querySchemas = validator.queryParams(['fields', 'populate']);\n   * ```\n   */\n  queryParams(params: QueryParam[]): Partial<Record<QueryParam, z.Schema>> {\n    const map: Record<QueryParam, () => z.Schema> = {\n      fields: () => this.schemaAwareQueryFields.optional(),\n      populate: () => this.schemaAwareQueryPopulate.optional(),\n      sort: () => this.schemaAwareQuerySort.optional(),\n      filters: () => this.schemaAwareFilters.optional(),\n      locale: () => this.locale.optional(),\n      pagination: () => this.pagination.optional(),\n      status: () => this.status.optional(),\n      hasPublishedVersion: () => this.hasPublishedVersion.optional(),\n      _q: () => this.query.optional(),\n    } as const;\n\n    return params.reduce(\n      (acc, param) => ({ ...acc, [param]: map[param]() }),\n      {} as Partial<Record<QueryParam, z.Schema>>\n    );\n  }\n}\n"],"names":["CoreContentTypeRouteValidator","AbstractCoreRouteValidator","documentID","z","uuid","describe","document","entries","Object","_scalarFields","_populatableFields","sanitizedAttributes","filter","attribute","includes","type","attributesSchema","createAttributesSchema","object","documentId","id","union","string","number","extend","shape","documents","array","schemaAwareQueryFields","scalarFieldsArray","readonly","schemaAwareQueryPopulate","wildcardPopulate","literal","singleFieldPopulate","populatableFieldsEnum","multiPopulate","populatableFieldsArray","schemaAwareQuerySort","orderDirection","enum","scalarFieldsEnum","fieldRecord","schemaAwareFilters","record","any","locale","status","hasPublishedVersion","boolean","data","isWritableAttribute","attributeName","contentTypes","_schema","createAttributesInputSchema","query","body","partialBody","partial","queryParams","params","map","fields","optional","populate","sort","filters","pagination","_q","reduce","acc","param"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA;;;;;;;;;;;;;;;;;;IAmBO,MAAMA,6BAAsCC,SAAAA,iCAAAA,CAAAA;AACjD;;;;;;;;;;AAUC,MACD,IAAIC,UAAa,GAAA;AACf,QAAA,OAAOC,YAAEC,CAAAA,IAAI,EAAGC,CAAAA,QAAQ,CAAC,wCAAA,CAAA;AAC3B;AAEA;;;;;;;;;;;;AAYC,MACD,IAAIC,QAAW,GAAA;QACb,MAAMC,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAK,CAAC;AAAC,gBAAA;aAAW,CAACC,QAAQ,CAACD,SAAAA,CAAUE,IAAI,CAAA,CAAA;;AAGlE,QAAA,MAAMC,mBAAmBC,8BAAuBN,CAAAA,mBAAAA,CAAAA;QAEhD,OAAOR,YAAAA,CACJe,MAAM,CAAC;YACNC,UAAY,EAAA,IAAI,CAACjB,UAAU;YAC3BkB,EAAIjB,EAAAA,YAAAA,CAAEkB,KAAK,CAAC;AAAClB,gBAAAA,YAAAA,CAAEmB,MAAM,EAAA;AAAInB,gBAAAA,YAAAA,CAAEoB,MAAM;AAAG,aAAA;SAErCC,CAAAA,CAAAA,MAAM,CAACR,gBAAAA,CAAiBS,KAAK,CAAA;AAClC;AAEA;;;;;;;;;;AAUC,MACD,IAAIC,SAAY,GAAA;AACd,QAAA,OAAOvB,YAAEwB,CAAAA,KAAK,CAAC,IAAI,CAACrB,QAAQ,CAAA;AAC9B;AAEA;;AAEC,MACD,IAAcsB,sBAAyB,GAAA;QACrC,OAAO,IAAI,CAACC,iBAAiB,CAC1BC,QAAQ,GACRzB,QAAQ,CACP,CAAC,iHAAiH,CAAC,CAAA;AAEzH;AAEA;;AAEC,MACD,IAAc0B,wBAA2B,GAAA;QACvC,MAAMC,gBAAAA,GAAmB7B,aACtB8B,OAAO,CAAC,KACRH,QAAQ,EAAA,CACRzB,QAAQ,CACP,4FAAA,CAAA;QAGJ,MAAM6B,mBAAAA,GAAsB,IAAI,CAACC,qBAAqB,CACnDL,QAAQ,EAAA,CACRzB,QAAQ,CAAC,8DAAA,CAAA;AAEZ,QAAA,MAAM+B,gBAAgB,IAAI,CAACC,sBAAsB,CAAChC,QAAQ,CACxD,iFAAA,CAAA;QAGF,OAAOF,YAAAA,CAAEkB,KAAK,CAAC;AAACW,YAAAA,gBAAAA;AAAkBE,YAAAA,mBAAAA;AAAqBE,YAAAA;AAAc,SAAA,CAAA;AACvE;AAEA;;AAEC,MACD,IAAcE,oBAAuB,GAAA;QACnC,MAAMC,cAAAA,GAAiBpC,YAAEqC,CAAAA,IAAI,CAAC;AAAC,YAAA,KAAA;AAAO,YAAA;AAAO,SAAA,CAAA;;QAG7C,OAAOrC,YAAAA,CACJkB,KAAK,CAAC;AACL,YAAA,IAAI,CAACoB,gBAAgB;AACrB,YAAA,IAAI,CAACZ,iBAAiB;YACtB,IAAI,CAACa,WAAW,CAACH,cAAAA,CAAAA;AACjBpC,YAAAA,YAAAA,CAAEwB,KAAK,CAAC,IAAI,CAACe,WAAW,CAACH,cAAAA,CAAAA;AAC1B,SAAA,CAAA,CACAlC,QAAQ,CAAC,iBAAA,CAAA;AACd;AAEA;;AAEC,MACD,IAAcsC,kBAAqB,GAAA;QACjC,OAAOxC,YAAAA,CAAEyC,MAAM,CAAC,IAAI,CAACH,gBAAgB,EAAEtC,YAAE0C,CAAAA,GAAG,EAAIxC,CAAAA,CAAAA,QAAQ,CAAC,+BAAA,CAAA;AAC3D;AAEA,IAAA,IAAIyC,MAAS,GAAA;AACX,QAAA,OAAO3C,YAAEmB,CAAAA,MAAM,EAAGjB,CAAAA,QAAQ,CAAC,iBAAA,CAAA;AAC7B;AAEA,IAAA,IAAI0C,MAAS,GAAA;QACX,OAAO5C,YAAAA,CACJqC,IAAI,CAAC;AAAC,YAAA,OAAA;AAAS,YAAA;AAAY,SAAA,CAAA,CAC3BnC,QAAQ,CAAC,iFAAA,CAAA;AACd;AAEA,IAAA,IAAI2C,mBAAsB,GAAA;QACxB,OAAO7C,YAAAA,CACJkB,KAAK,CAAC;AAAClB,YAAAA,YAAAA,CAAE8C,OAAO,EAAA;AAAI9C,YAAAA,YAAAA,CAAEqC,IAAI,CAAC;AAAC,gBAAA,MAAA;AAAQ,gBAAA;AAAQ,aAAA;AAAE,SAAA,CAAA,CAC9CnC,QAAQ,CACP,mIAAA,CAAA;AAEN;AAEA,IAAA,IAAI6C,IAAO,GAAA;QACT,MAAMC,mBAAAA,GAAsB,CAAC,CAACC,aAAuD,CAAA,GAAA;AACnF,YAAA,OAAOC,yBAAaF,mBAAmB,CAAC,IAAI,CAACG,OAAO,EAAEF,aAAAA,CAAAA;AACxD,SAAA;QAEA,MAAM7C,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAACuC,mBAAAA,CAAAA;AAEV,QAAA,OAAOI,mCAA4B5C,CAAAA,mBAAAA,CAAAA;AACrC;AAEA,IAAA,IAAI6C,KAAQ,GAAA;AACV,QAAA,OAAOrD,aAAEmB,MAAM,EAAA;AACjB;AAEA,IAAA,IAAImC,IAAO,GAAA;QACT,OAAOtD,YAAAA,CAAEe,MAAM,CAAC;YAAEgC,IAAM,EAAA,IAAI,CAACA;AAAK,SAAA,CAAA;AACpC;AAEA,IAAA,IAAIQ,WAAc,GAAA;QAChB,OAAOvD,YAAAA,CAAEe,MAAM,CAAC;AAAEgC,YAAAA,IAAAA,EAAM,IAAI,CAACA,IAAI,CAACS,OAAO;AAAG,SAAA,CAAA;AAC9C;AAEA;;;;;;;;;;;MAYAC,WAAAA,CAAYC,MAAoB,EAAyC;AACvE,QAAA,MAAMC,GAA0C,GAAA;AAC9CC,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACnC,sBAAsB,CAACoC,QAAQ,EAAA;AAClDC,YAAAA,QAAAA,EAAU,IAAM,IAAI,CAAClC,wBAAwB,CAACiC,QAAQ,EAAA;AACtDE,YAAAA,IAAAA,EAAM,IAAM,IAAI,CAAC5B,oBAAoB,CAAC0B,QAAQ,EAAA;AAC9CG,YAAAA,OAAAA,EAAS,IAAM,IAAI,CAACxB,kBAAkB,CAACqB,QAAQ,EAAA;AAC/ClB,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACkB,QAAQ,EAAA;AAClCI,YAAAA,UAAAA,EAAY,IAAM,IAAI,CAACA,UAAU,CAACJ,QAAQ,EAAA;AAC1CjB,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACiB,QAAQ,EAAA;AAClChB,YAAAA,mBAAAA,EAAqB,IAAM,IAAI,CAACA,mBAAmB,CAACgB,QAAQ,EAAA;AAC5DK,YAAAA,EAAAA,EAAI,IAAM,IAAI,CAACb,KAAK,CAACQ,QAAQ;AAC/B,SAAA;AAEA,QAAA,OAAOH,OAAOS,MAAM,CAClB,CAACC,GAAAA,EAAKC,SAAW;AAAE,gBAAA,GAAGD,GAAG;AAAE,gBAAA,CAACC,KAAM,GAAEV,GAAG,CAACU,KAAM,CAAA;AAAG,aAAA,GACjD,EAAC,CAAA;AAEL;AACF;;;;"}

package/dist/core-api/routes/validation/content-type.mjs

@@ -125,6 +125,15 @@ import { AbstractCoreRouteValidator } from './common.mjs';
             'published'
         ]).describe('Fetch documents based on their status. Default to "published" if not specified.');
     }
+    get hasPublishedVersion() {
+        return z.union([
+            z.boolean(),
+            z.enum([
+                'true',
+                'false'
+            ])
+        ]).describe('Filter documents by whether they have a published version. Use with status=draft to find documents that have never been published');
+    }
     get data() {
         const isWritableAttribute = ([attributeName])=>{
             return contentTypes.isWritableAttribute(this._schema, attributeName);
@@ -170,6 +179,7 @@ import { AbstractCoreRouteValidator } from './common.mjs';
             locale: ()=>this.locale.optional(),
             pagination: ()=>this.pagination.optional(),
             status: ()=>this.status.optional(),
+            hasPublishedVersion: ()=>this.hasPublishedVersion.optional(),
             _q: ()=>this.query.optional()
         };
         return params.reduce((acc, param)=>({

package/dist/core-api/routes/validation/content-type.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"content-type.mjs","sources":["../../../../src/core-api/routes/validation/content-type.ts"],"sourcesContent":["import type { Schema, UID } from '@strapi/types';\n\nimport { contentTypes } from '@strapi/utils';\nimport * as z from 'zod/v4';\n\n// eslint-disable-next-line import/no-cycle\nimport { createAttributesInputSchema, createAttributesSchema } from './mappers';\nimport { AbstractCoreRouteValidator } from './common';\n\nexport type QueryParam =\n  | 'fields'\n  | 'populate'\n  | 'sort'\n  | 'status'\n  | 'locale'\n  | 'pagination'\n  | 'filters'\n  | '_q';\n\n/**\n * A validator for core content-type routes.\n *\n * Provides validation schemas and utilities for handling content-type-specific route validation.\n * Extends the base AbstractRouteValidator with schema-aware validation for Strapi content types.\n *\n * @example\n * ```ts\n * const strapi = // ... strapi instance\n * const uid = 'api::article.article'\n * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n *\n * // Get validation schema for document\n * const documentSchema = validator.document;\n *\n * // Validate query parameters with schema awareness\n * const querySchema = validator.queryParams(['fields', 'populate', 'sort']);\n * ```\n */\nexport class CoreContentTypeRouteValidator extends AbstractCoreRouteValidator<UID.ContentType> {\n  /**\n   * Generates a validation schema for document IDs\n   *\n   * @returns A schema that validates UUIDs\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const idSchema = validator.documentID;\n   * ```\n   */\n  get documentID() {\n    return z.uuid().describe('The document ID, represented by a UUID');\n  }\n\n  /**\n   * Generates a comprehensive validation schema for a single document.\n   *\n   * Combines scalar fields and populatable fields into a single schema.\n   *\n   * @returns A schema for validating complete documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docSchema = validator.document;\n   * ```\n   */\n  get document() {\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove passwords from the attribute list\n      .filter(([, attribute]) => !['password'].includes(attribute.type));\n\n    // Merge all attributes into a single schema\n    const attributesSchema = createAttributesSchema(sanitizedAttributes);\n\n    return z\n      .object({\n        documentId: this.documentID,\n        id: z.union([z.string(), z.number()]),\n      })\n      .extend(attributesSchema.shape);\n  }\n\n  /**\n   * Generates a validation schema for an array of documents\n   *\n   * @returns A schema for validating arrays of documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docsSchema = validator.documents;\n   * ```\n   */\n  get documents() {\n    return z.array(this.document);\n  }\n\n  /**\n   * Schema-aware fields validation that restricts to actual model fields\n   */\n  protected get schemaAwareQueryFields() {\n    return this.scalarFieldsArray\n      .readonly()\n      .describe(\n        `The fields to return, this doesn't include populatable fields like relations, components, files, or dynamic zones`\n      );\n  }\n\n  /**\n   * Schema-aware populate validation that restricts to actual populatable fields\n   */\n  protected get schemaAwareQueryPopulate() {\n    const wildcardPopulate = z\n      .literal('*')\n      .readonly()\n      .describe(\n        'Populate all the first level relations, components, files, and dynamic zones for the entry'\n      );\n\n    const singleFieldPopulate = this.populatableFieldsEnum\n      .readonly()\n      .describe('Populate a single relation, component, file, or dynamic zone');\n\n    const multiPopulate = this.populatableFieldsArray.describe(\n      'Populate a selection of multiple relations, components, files, or dynamic zones'\n    );\n\n    return z.union([wildcardPopulate, singleFieldPopulate, multiPopulate]);\n  }\n\n  /**\n   * Schema-aware sort validation that restricts to actual model fields\n   */\n  protected get schemaAwareQuerySort() {\n    const orderDirection = z.enum(['asc', 'desc']);\n\n    // TODO: Handle nested sorts but very low priority, very little usage\n    return z\n      .union([\n        this.scalarFieldsEnum, // 'name' | 'title'\n        this.scalarFieldsArray, // ['name', 'title']\n        this.fieldRecord(orderDirection), // { name: 'desc' } | { title: 'asc' }\n        z.array(this.fieldRecord(orderDirection)), // [{ name: 'desc'}, { title: 'asc' }]\n      ])\n      .describe('Sort the result');\n  }\n\n  /**\n   * Schema-aware filters validation that restricts to actual model fields\n   */\n  protected get schemaAwareFilters() {\n    return z.record(this.scalarFieldsEnum, z.any()).describe('Filters to apply to the query');\n  }\n\n  get locale() {\n    return z.string().describe('Select a locale');\n  }\n\n  get status() {\n    return z\n      .enum(['draft', 'published'])\n      .describe('Fetch documents based on their status. Default to \"published\" if not specified.');\n  }\n\n  get data() {\n    const isWritableAttribute = ([attributeName]: [string, Schema.Attribute.AnyAttribute]) => {\n      return contentTypes.isWritableAttribute(this._schema, attributeName);\n    };\n\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove non-writable attributes\n      .filter(isWritableAttribute);\n\n    return createAttributesInputSchema(sanitizedAttributes);\n  }\n\n  get query() {\n    return z.string();\n  }\n\n  get body() {\n    return z.object({ data: this.data });\n  }\n\n  get partialBody() {\n    return z.object({ data: this.data.partial() });\n  }\n\n  /**\n   * Creates validation schemas for query parameters\n   *\n   * @param params - Array of query parameters to validate ('fields', 'populate', 'sort', ...)\n   * @returns Object containing validation schemas for requested parameters\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const querySchemas = validator.queryParams(['fields', 'populate']);\n   * ```\n   */\n  queryParams(params: QueryParam[]): Partial<Record<QueryParam, z.Schema>> {\n    const map: Record<QueryParam, () => z.Schema> = {\n      fields: () => this.schemaAwareQueryFields.optional(),\n      populate: () => this.schemaAwareQueryPopulate.optional(),\n      sort: () => this.schemaAwareQuerySort.optional(),\n      filters: () => this.schemaAwareFilters.optional(),\n      locale: () => this.locale.optional(),\n      pagination: () => this.pagination.optional(),\n      status: () => this.status.optional(),\n      _q: () => this.query.optional(),\n    } as const;\n\n    return params.reduce(\n      (acc, param) => ({ ...acc, [param]: map[param]() }),\n      {} as Partial<Record<QueryParam, z.Schema>>\n    );\n  }\n}\n"],"names":["CoreContentTypeRouteValidator","AbstractCoreRouteValidator","documentID","z","uuid","describe","document","entries","Object","_scalarFields","_populatableFields","sanitizedAttributes","filter","attribute","includes","type","attributesSchema","createAttributesSchema","object","documentId","id","union","string","number","extend","shape","documents","array","schemaAwareQueryFields","scalarFieldsArray","readonly","schemaAwareQueryPopulate","wildcardPopulate","literal","singleFieldPopulate","populatableFieldsEnum","multiPopulate","populatableFieldsArray","schemaAwareQuerySort","orderDirection","enum","scalarFieldsEnum","fieldRecord","schemaAwareFilters","record","any","locale","status","data","isWritableAttribute","attributeName","contentTypes","_schema","createAttributesInputSchema","query","body","partialBody","partial","queryParams","params","map","fields","optional","populate","sort","filters","pagination","_q","reduce","acc","param"],"mappings":";;;;;AAmBA;;;;;;;;;;;;;;;;;;IAmBO,MAAMA,6BAAsCC,SAAAA,0BAAAA,CAAAA;AACjD;;;;;;;;;;AAUC,MACD,IAAIC,UAAa,GAAA;AACf,QAAA,OAAOC,CAAEC,CAAAA,IAAI,EAAGC,CAAAA,QAAQ,CAAC,wCAAA,CAAA;AAC3B;AAEA;;;;;;;;;;;;AAYC,MACD,IAAIC,QAAW,GAAA;QACb,MAAMC,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAK,CAAC;AAAC,gBAAA;aAAW,CAACC,QAAQ,CAACD,SAAAA,CAAUE,IAAI,CAAA,CAAA;;AAGlE,QAAA,MAAMC,mBAAmBC,sBAAuBN,CAAAA,mBAAAA,CAAAA;QAEhD,OAAOR,CAAAA,CACJe,MAAM,CAAC;YACNC,UAAY,EAAA,IAAI,CAACjB,UAAU;YAC3BkB,EAAIjB,EAAAA,CAAAA,CAAEkB,KAAK,CAAC;AAAClB,gBAAAA,CAAAA,CAAEmB,MAAM,EAAA;AAAInB,gBAAAA,CAAAA,CAAEoB,MAAM;AAAG,aAAA;SAErCC,CAAAA,CAAAA,MAAM,CAACR,gBAAAA,CAAiBS,KAAK,CAAA;AAClC;AAEA;;;;;;;;;;AAUC,MACD,IAAIC,SAAY,GAAA;AACd,QAAA,OAAOvB,CAAEwB,CAAAA,KAAK,CAAC,IAAI,CAACrB,QAAQ,CAAA;AAC9B;AAEA;;AAEC,MACD,IAAcsB,sBAAyB,GAAA;QACrC,OAAO,IAAI,CAACC,iBAAiB,CAC1BC,QAAQ,GACRzB,QAAQ,CACP,CAAC,iHAAiH,CAAC,CAAA;AAEzH;AAEA;;AAEC,MACD,IAAc0B,wBAA2B,GAAA;QACvC,MAAMC,gBAAAA,GAAmB7B,EACtB8B,OAAO,CAAC,KACRH,QAAQ,EAAA,CACRzB,QAAQ,CACP,4FAAA,CAAA;QAGJ,MAAM6B,mBAAAA,GAAsB,IAAI,CAACC,qBAAqB,CACnDL,QAAQ,EAAA,CACRzB,QAAQ,CAAC,8DAAA,CAAA;AAEZ,QAAA,MAAM+B,gBAAgB,IAAI,CAACC,sBAAsB,CAAChC,QAAQ,CACxD,iFAAA,CAAA;QAGF,OAAOF,CAAAA,CAAEkB,KAAK,CAAC;AAACW,YAAAA,gBAAAA;AAAkBE,YAAAA,mBAAAA;AAAqBE,YAAAA;AAAc,SAAA,CAAA;AACvE;AAEA;;AAEC,MACD,IAAcE,oBAAuB,GAAA;QACnC,MAAMC,cAAAA,GAAiBpC,CAAEqC,CAAAA,IAAI,CAAC;AAAC,YAAA,KAAA;AAAO,YAAA;AAAO,SAAA,CAAA;;QAG7C,OAAOrC,CAAAA,CACJkB,KAAK,CAAC;AACL,YAAA,IAAI,CAACoB,gBAAgB;AACrB,YAAA,IAAI,CAACZ,iBAAiB;YACtB,IAAI,CAACa,WAAW,CAACH,cAAAA,CAAAA;AACjBpC,YAAAA,CAAAA,CAAEwB,KAAK,CAAC,IAAI,CAACe,WAAW,CAACH,cAAAA,CAAAA;AAC1B,SAAA,CAAA,CACAlC,QAAQ,CAAC,iBAAA,CAAA;AACd;AAEA;;AAEC,MACD,IAAcsC,kBAAqB,GAAA;QACjC,OAAOxC,CAAAA,CAAEyC,MAAM,CAAC,IAAI,CAACH,gBAAgB,EAAEtC,CAAE0C,CAAAA,GAAG,EAAIxC,CAAAA,CAAAA,QAAQ,CAAC,+BAAA,CAAA;AAC3D;AAEA,IAAA,IAAIyC,MAAS,GAAA;AACX,QAAA,OAAO3C,CAAEmB,CAAAA,MAAM,EAAGjB,CAAAA,QAAQ,CAAC,iBAAA,CAAA;AAC7B;AAEA,IAAA,IAAI0C,MAAS,GAAA;QACX,OAAO5C,CAAAA,CACJqC,IAAI,CAAC;AAAC,YAAA,OAAA;AAAS,YAAA;AAAY,SAAA,CAAA,CAC3BnC,QAAQ,CAAC,iFAAA,CAAA;AACd;AAEA,IAAA,IAAI2C,IAAO,GAAA;QACT,MAAMC,mBAAAA,GAAsB,CAAC,CAACC,aAAuD,CAAA,GAAA;AACnF,YAAA,OAAOC,aAAaF,mBAAmB,CAAC,IAAI,CAACG,OAAO,EAAEF,aAAAA,CAAAA;AACxD,SAAA;QAEA,MAAM3C,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAACqC,mBAAAA,CAAAA;AAEV,QAAA,OAAOI,2BAA4B1C,CAAAA,mBAAAA,CAAAA;AACrC;AAEA,IAAA,IAAI2C,KAAQ,GAAA;AACV,QAAA,OAAOnD,EAAEmB,MAAM,EAAA;AACjB;AAEA,IAAA,IAAIiC,IAAO,GAAA;QACT,OAAOpD,CAAAA,CAAEe,MAAM,CAAC;YAAE8B,IAAM,EAAA,IAAI,CAACA;AAAK,SAAA,CAAA;AACpC;AAEA,IAAA,IAAIQ,WAAc,GAAA;QAChB,OAAOrD,CAAAA,CAAEe,MAAM,CAAC;AAAE8B,YAAAA,IAAAA,EAAM,IAAI,CAACA,IAAI,CAACS,OAAO;AAAG,SAAA,CAAA;AAC9C;AAEA;;;;;;;;;;;MAYAC,WAAAA,CAAYC,MAAoB,EAAyC;AACvE,QAAA,MAAMC,GAA0C,GAAA;AAC9CC,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACjC,sBAAsB,CAACkC,QAAQ,EAAA;AAClDC,YAAAA,QAAAA,EAAU,IAAM,IAAI,CAAChC,wBAAwB,CAAC+B,QAAQ,EAAA;AACtDE,YAAAA,IAAAA,EAAM,IAAM,IAAI,CAAC1B,oBAAoB,CAACwB,QAAQ,EAAA;AAC9CG,YAAAA,OAAAA,EAAS,IAAM,IAAI,CAACtB,kBAAkB,CAACmB,QAAQ,EAAA;AAC/ChB,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACgB,QAAQ,EAAA;AAClCI,YAAAA,UAAAA,EAAY,IAAM,IAAI,CAACA,UAAU,CAACJ,QAAQ,EAAA;AAC1Cf,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACe,QAAQ,EAAA;AAClCK,YAAAA,EAAAA,EAAI,IAAM,IAAI,CAACb,KAAK,CAACQ,QAAQ;AAC/B,SAAA;AAEA,QAAA,OAAOH,OAAOS,MAAM,CAClB,CAACC,GAAAA,EAAKC,SAAW;AAAE,gBAAA,GAAGD,GAAG;AAAE,gBAAA,CAACC,KAAM,GAAEV,GAAG,CAACU,KAAM,CAAA;AAAG,aAAA,GACjD,EAAC,CAAA;AAEL;AACF;;;;"}
+{"version":3,"file":"content-type.mjs","sources":["../../../../src/core-api/routes/validation/content-type.ts"],"sourcesContent":["import type { Schema, UID } from '@strapi/types';\n\nimport { contentTypes } from '@strapi/utils';\nimport * as z from 'zod/v4';\n\n// eslint-disable-next-line import/no-cycle\nimport { createAttributesInputSchema, createAttributesSchema } from './mappers';\nimport { AbstractCoreRouteValidator } from './common';\n\nexport type QueryParam =\n  | 'fields'\n  | 'populate'\n  | 'sort'\n  | 'status'\n  | 'hasPublishedVersion'\n  | 'locale'\n  | 'pagination'\n  | 'filters'\n  | '_q';\n\n/**\n * A validator for core content-type routes.\n *\n * Provides validation schemas and utilities for handling content-type-specific route validation.\n * Extends the base AbstractRouteValidator with schema-aware validation for Strapi content types.\n *\n * @example\n * ```ts\n * const strapi = // ... strapi instance\n * const uid = 'api::article.article'\n * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n *\n * // Get validation schema for document\n * const documentSchema = validator.document;\n *\n * // Validate query parameters with schema awareness\n * const querySchema = validator.queryParams(['fields', 'populate', 'sort']);\n * ```\n */\nexport class CoreContentTypeRouteValidator extends AbstractCoreRouteValidator<UID.ContentType> {\n  /**\n   * Generates a validation schema for document IDs\n   *\n   * @returns A schema that validates UUIDs\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const idSchema = validator.documentID;\n   * ```\n   */\n  get documentID() {\n    return z.uuid().describe('The document ID, represented by a UUID');\n  }\n\n  /**\n   * Generates a comprehensive validation schema for a single document.\n   *\n   * Combines scalar fields and populatable fields into a single schema.\n   *\n   * @returns A schema for validating complete documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docSchema = validator.document;\n   * ```\n   */\n  get document() {\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove passwords from the attribute list\n      .filter(([, attribute]) => !['password'].includes(attribute.type));\n\n    // Merge all attributes into a single schema\n    const attributesSchema = createAttributesSchema(sanitizedAttributes);\n\n    return z\n      .object({\n        documentId: this.documentID,\n        id: z.union([z.string(), z.number()]),\n      })\n      .extend(attributesSchema.shape);\n  }\n\n  /**\n   * Generates a validation schema for an array of documents\n   *\n   * @returns A schema for validating arrays of documents\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const docsSchema = validator.documents;\n   * ```\n   */\n  get documents() {\n    return z.array(this.document);\n  }\n\n  /**\n   * Schema-aware fields validation that restricts to actual model fields\n   */\n  protected get schemaAwareQueryFields() {\n    return this.scalarFieldsArray\n      .readonly()\n      .describe(\n        `The fields to return, this doesn't include populatable fields like relations, components, files, or dynamic zones`\n      );\n  }\n\n  /**\n   * Schema-aware populate validation that restricts to actual populatable fields\n   */\n  protected get schemaAwareQueryPopulate() {\n    const wildcardPopulate = z\n      .literal('*')\n      .readonly()\n      .describe(\n        'Populate all the first level relations, components, files, and dynamic zones for the entry'\n      );\n\n    const singleFieldPopulate = this.populatableFieldsEnum\n      .readonly()\n      .describe('Populate a single relation, component, file, or dynamic zone');\n\n    const multiPopulate = this.populatableFieldsArray.describe(\n      'Populate a selection of multiple relations, components, files, or dynamic zones'\n    );\n\n    return z.union([wildcardPopulate, singleFieldPopulate, multiPopulate]);\n  }\n\n  /**\n   * Schema-aware sort validation that restricts to actual model fields\n   */\n  protected get schemaAwareQuerySort() {\n    const orderDirection = z.enum(['asc', 'desc']);\n\n    // TODO: Handle nested sorts but very low priority, very little usage\n    return z\n      .union([\n        this.scalarFieldsEnum, // 'name' | 'title'\n        this.scalarFieldsArray, // ['name', 'title']\n        this.fieldRecord(orderDirection), // { name: 'desc' } | { title: 'asc' }\n        z.array(this.fieldRecord(orderDirection)), // [{ name: 'desc'}, { title: 'asc' }]\n      ])\n      .describe('Sort the result');\n  }\n\n  /**\n   * Schema-aware filters validation that restricts to actual model fields\n   */\n  protected get schemaAwareFilters() {\n    return z.record(this.scalarFieldsEnum, z.any()).describe('Filters to apply to the query');\n  }\n\n  get locale() {\n    return z.string().describe('Select a locale');\n  }\n\n  get status() {\n    return z\n      .enum(['draft', 'published'])\n      .describe('Fetch documents based on their status. Default to \"published\" if not specified.');\n  }\n\n  get hasPublishedVersion() {\n    return z\n      .union([z.boolean(), z.enum(['true', 'false'])])\n      .describe(\n        'Filter documents by whether they have a published version. Use with status=draft to find documents that have never been published'\n      );\n  }\n\n  get data() {\n    const isWritableAttribute = ([attributeName]: [string, Schema.Attribute.AnyAttribute]) => {\n      return contentTypes.isWritableAttribute(this._schema, attributeName);\n    };\n\n    const entries = Object.entries({ ...this._scalarFields, ...this._populatableFields });\n\n    const sanitizedAttributes = entries\n      // Remove non-writable attributes\n      .filter(isWritableAttribute);\n\n    return createAttributesInputSchema(sanitizedAttributes);\n  }\n\n  get query() {\n    return z.string();\n  }\n\n  get body() {\n    return z.object({ data: this.data });\n  }\n\n  get partialBody() {\n    return z.object({ data: this.data.partial() });\n  }\n\n  /**\n   * Creates validation schemas for query parameters\n   *\n   * @param params - Array of query parameters to validate ('fields', 'populate', 'sort', ...)\n   * @returns Object containing validation schemas for requested parameters\n   *\n   * @example\n   * ```ts\n   * const validator = new CoreContentTypeRouteValidator(strapi, uid);\n   * const querySchemas = validator.queryParams(['fields', 'populate']);\n   * ```\n   */\n  queryParams(params: QueryParam[]): Partial<Record<QueryParam, z.Schema>> {\n    const map: Record<QueryParam, () => z.Schema> = {\n      fields: () => this.schemaAwareQueryFields.optional(),\n      populate: () => this.schemaAwareQueryPopulate.optional(),\n      sort: () => this.schemaAwareQuerySort.optional(),\n      filters: () => this.schemaAwareFilters.optional(),\n      locale: () => this.locale.optional(),\n      pagination: () => this.pagination.optional(),\n      status: () => this.status.optional(),\n      hasPublishedVersion: () => this.hasPublishedVersion.optional(),\n      _q: () => this.query.optional(),\n    } as const;\n\n    return params.reduce(\n      (acc, param) => ({ ...acc, [param]: map[param]() }),\n      {} as Partial<Record<QueryParam, z.Schema>>\n    );\n  }\n}\n"],"names":["CoreContentTypeRouteValidator","AbstractCoreRouteValidator","documentID","z","uuid","describe","document","entries","Object","_scalarFields","_populatableFields","sanitizedAttributes","filter","attribute","includes","type","attributesSchema","createAttributesSchema","object","documentId","id","union","string","number","extend","shape","documents","array","schemaAwareQueryFields","scalarFieldsArray","readonly","schemaAwareQueryPopulate","wildcardPopulate","literal","singleFieldPopulate","populatableFieldsEnum","multiPopulate","populatableFieldsArray","schemaAwareQuerySort","orderDirection","enum","scalarFieldsEnum","fieldRecord","schemaAwareFilters","record","any","locale","status","hasPublishedVersion","boolean","data","isWritableAttribute","attributeName","contentTypes","_schema","createAttributesInputSchema","query","body","partialBody","partial","queryParams","params","map","fields","optional","populate","sort","filters","pagination","_q","reduce","acc","param"],"mappings":";;;;;AAoBA;;;;;;;;;;;;;;;;;;IAmBO,MAAMA,6BAAsCC,SAAAA,0BAAAA,CAAAA;AACjD;;;;;;;;;;AAUC,MACD,IAAIC,UAAa,GAAA;AACf,QAAA,OAAOC,CAAEC,CAAAA,IAAI,EAAGC,CAAAA,QAAQ,CAAC,wCAAA,CAAA;AAC3B;AAEA;;;;;;;;;;;;AAYC,MACD,IAAIC,QAAW,GAAA;QACb,MAAMC,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAK,CAAC;AAAC,gBAAA;aAAW,CAACC,QAAQ,CAACD,SAAAA,CAAUE,IAAI,CAAA,CAAA;;AAGlE,QAAA,MAAMC,mBAAmBC,sBAAuBN,CAAAA,mBAAAA,CAAAA;QAEhD,OAAOR,CAAAA,CACJe,MAAM,CAAC;YACNC,UAAY,EAAA,IAAI,CAACjB,UAAU;YAC3BkB,EAAIjB,EAAAA,CAAAA,CAAEkB,KAAK,CAAC;AAAClB,gBAAAA,CAAAA,CAAEmB,MAAM,EAAA;AAAInB,gBAAAA,CAAAA,CAAEoB,MAAM;AAAG,aAAA;SAErCC,CAAAA,CAAAA,MAAM,CAACR,gBAAAA,CAAiBS,KAAK,CAAA;AAClC;AAEA;;;;;;;;;;AAUC,MACD,IAAIC,SAAY,GAAA;AACd,QAAA,OAAOvB,CAAEwB,CAAAA,KAAK,CAAC,IAAI,CAACrB,QAAQ,CAAA;AAC9B;AAEA;;AAEC,MACD,IAAcsB,sBAAyB,GAAA;QACrC,OAAO,IAAI,CAACC,iBAAiB,CAC1BC,QAAQ,GACRzB,QAAQ,CACP,CAAC,iHAAiH,CAAC,CAAA;AAEzH;AAEA;;AAEC,MACD,IAAc0B,wBAA2B,GAAA;QACvC,MAAMC,gBAAAA,GAAmB7B,EACtB8B,OAAO,CAAC,KACRH,QAAQ,EAAA,CACRzB,QAAQ,CACP,4FAAA,CAAA;QAGJ,MAAM6B,mBAAAA,GAAsB,IAAI,CAACC,qBAAqB,CACnDL,QAAQ,EAAA,CACRzB,QAAQ,CAAC,8DAAA,CAAA;AAEZ,QAAA,MAAM+B,gBAAgB,IAAI,CAACC,sBAAsB,CAAChC,QAAQ,CACxD,iFAAA,CAAA;QAGF,OAAOF,CAAAA,CAAEkB,KAAK,CAAC;AAACW,YAAAA,gBAAAA;AAAkBE,YAAAA,mBAAAA;AAAqBE,YAAAA;AAAc,SAAA,CAAA;AACvE;AAEA;;AAEC,MACD,IAAcE,oBAAuB,GAAA;QACnC,MAAMC,cAAAA,GAAiBpC,CAAEqC,CAAAA,IAAI,CAAC;AAAC,YAAA,KAAA;AAAO,YAAA;AAAO,SAAA,CAAA;;QAG7C,OAAOrC,CAAAA,CACJkB,KAAK,CAAC;AACL,YAAA,IAAI,CAACoB,gBAAgB;AACrB,YAAA,IAAI,CAACZ,iBAAiB;YACtB,IAAI,CAACa,WAAW,CAACH,cAAAA,CAAAA;AACjBpC,YAAAA,CAAAA,CAAEwB,KAAK,CAAC,IAAI,CAACe,WAAW,CAACH,cAAAA,CAAAA;AAC1B,SAAA,CAAA,CACAlC,QAAQ,CAAC,iBAAA,CAAA;AACd;AAEA;;AAEC,MACD,IAAcsC,kBAAqB,GAAA;QACjC,OAAOxC,CAAAA,CAAEyC,MAAM,CAAC,IAAI,CAACH,gBAAgB,EAAEtC,CAAE0C,CAAAA,GAAG,EAAIxC,CAAAA,CAAAA,QAAQ,CAAC,+BAAA,CAAA;AAC3D;AAEA,IAAA,IAAIyC,MAAS,GAAA;AACX,QAAA,OAAO3C,CAAEmB,CAAAA,MAAM,EAAGjB,CAAAA,QAAQ,CAAC,iBAAA,CAAA;AAC7B;AAEA,IAAA,IAAI0C,MAAS,GAAA;QACX,OAAO5C,CAAAA,CACJqC,IAAI,CAAC;AAAC,YAAA,OAAA;AAAS,YAAA;AAAY,SAAA,CAAA,CAC3BnC,QAAQ,CAAC,iFAAA,CAAA;AACd;AAEA,IAAA,IAAI2C,mBAAsB,GAAA;QACxB,OAAO7C,CAAAA,CACJkB,KAAK,CAAC;AAAClB,YAAAA,CAAAA,CAAE8C,OAAO,EAAA;AAAI9C,YAAAA,CAAAA,CAAEqC,IAAI,CAAC;AAAC,gBAAA,MAAA;AAAQ,gBAAA;AAAQ,aAAA;AAAE,SAAA,CAAA,CAC9CnC,QAAQ,CACP,mIAAA,CAAA;AAEN;AAEA,IAAA,IAAI6C,IAAO,GAAA;QACT,MAAMC,mBAAAA,GAAsB,CAAC,CAACC,aAAuD,CAAA,GAAA;AACnF,YAAA,OAAOC,aAAaF,mBAAmB,CAAC,IAAI,CAACG,OAAO,EAAEF,aAAAA,CAAAA;AACxD,SAAA;QAEA,MAAM7C,OAAAA,GAAUC,MAAOD,CAAAA,OAAO,CAAC;YAAE,GAAG,IAAI,CAACE,aAAa;YAAE,GAAG,IAAI,CAACC;AAAmB,SAAA,CAAA;QAEnF,MAAMC,mBAAAA,GAAsBJ,OAC1B;AACCK,SAAAA,MAAM,CAACuC,mBAAAA,CAAAA;AAEV,QAAA,OAAOI,2BAA4B5C,CAAAA,mBAAAA,CAAAA;AACrC;AAEA,IAAA,IAAI6C,KAAQ,GAAA;AACV,QAAA,OAAOrD,EAAEmB,MAAM,EAAA;AACjB;AAEA,IAAA,IAAImC,IAAO,GAAA;QACT,OAAOtD,CAAAA,CAAEe,MAAM,CAAC;YAAEgC,IAAM,EAAA,IAAI,CAACA;AAAK,SAAA,CAAA;AACpC;AAEA,IAAA,IAAIQ,WAAc,GAAA;QAChB,OAAOvD,CAAAA,CAAEe,MAAM,CAAC;AAAEgC,YAAAA,IAAAA,EAAM,IAAI,CAACA,IAAI,CAACS,OAAO;AAAG,SAAA,CAAA;AAC9C;AAEA;;;;;;;;;;;MAYAC,WAAAA,CAAYC,MAAoB,EAAyC;AACvE,QAAA,MAAMC,GAA0C,GAAA;AAC9CC,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACnC,sBAAsB,CAACoC,QAAQ,EAAA;AAClDC,YAAAA,QAAAA,EAAU,IAAM,IAAI,CAAClC,wBAAwB,CAACiC,QAAQ,EAAA;AACtDE,YAAAA,IAAAA,EAAM,IAAM,IAAI,CAAC5B,oBAAoB,CAAC0B,QAAQ,EAAA;AAC9CG,YAAAA,OAAAA,EAAS,IAAM,IAAI,CAACxB,kBAAkB,CAACqB,QAAQ,EAAA;AAC/ClB,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACkB,QAAQ,EAAA;AAClCI,YAAAA,UAAAA,EAAY,IAAM,IAAI,CAACA,UAAU,CAACJ,QAAQ,EAAA;AAC1CjB,YAAAA,MAAAA,EAAQ,IAAM,IAAI,CAACA,MAAM,CAACiB,QAAQ,EAAA;AAClChB,YAAAA,mBAAAA,EAAqB,IAAM,IAAI,CAACA,mBAAmB,CAACgB,QAAQ,EAAA;AAC5DK,YAAAA,EAAAA,EAAI,IAAM,IAAI,CAACb,KAAK,CAACQ,QAAQ;AAC/B,SAAA;AAEA,QAAA,OAAOH,OAAOS,MAAM,CAClB,CAACC,GAAAA,EAAKC,SAAW;AAAE,gBAAA,GAAGD,GAAG;AAAE,gBAAA,CAACC,KAAM,GAAEV,GAAG,CAACU,KAAM,CAAA;AAAG,aAAA,GACjD,EAAC,CAAA;AAEL;AACF;;;;"}

package/dist/migrations/database/5.0.0-discard-drafts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"5.0.0-discard-drafts.d.ts","sourceRoot":"","sources":["../../../src/migrations/database/5.0.0-discard-drafts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAW5D,KAAK,eAAe,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9D,KAAK,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AA0uF3C;;;;;GAKG;AACH,wBAAuB,iBAAiB,CAAC,EACvC,EAAE,EACF,GAAG,EACH,GAAG,EACH,gBAAuB,GACxB,EAAE;IACD,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,oDAgCA;AAED,eAAO,MAAM,qBAAqB,EAAE,SAQnC,CAAC"}
+{"version":3,"file":"5.0.0-discard-drafts.d.ts","sourceRoot":"","sources":["../../../src/migrations/database/5.0.0-discard-drafts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAY5D,KAAK,eAAe,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9D,KAAK,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAk1G3C;;;;;GAKG;AACH,wBAAuB,iBAAiB,CAAC,EACvC,EAAE,EACF,GAAG,EACH,GAAG,EACH,gBAAuB,GACxB,EAAE;IACD,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,EAAE,IAAI,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,oDAgCA;AAED,eAAO,MAAM,qBAAqB,EAAE,SAQnC,CAAC"}