@strapi/openapi 0.0.0-experimental.621b019265f3aaccab5e5bc1feae5ef4b524fa32 → 0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282

package/README.md

@@ -1 +1,77 @@
 # @strapi/openapi
+
+`@strapi/openapi` provides the core OpenAPI generation pipeline used by Strapi.
+
+## Generate a specification
+
+You can generate a document from the CLI:
+
+```bash
+strapi openapi generate
+```
+
+This command generates a `content-api` specification by default.
+
+## Expose `/openapi.json` from the server
+
+Strapi can expose a generated OpenAPI document over HTTP. Both endpoints are
+disabled by default; opt in per endpoint via `server.openapi`:
+
+```js
+// config/server.js
+module.exports = () => ({
+  openapi: {
+    'content-api': {
+      // 'disabled' (default) | 'public'
+      access: 'public',
+      route: {
+        path: '/openapi.json',
+      },
+      cache: {
+        enabled: true,
+        maxAgeMs: 60_000,
+        filePath: '.strapi/openapi/content-api.json',
+      },
+    },
+    admin: {
+      // 'disabled' (default) | 'authenticated' ('public' is not allowed)
+      access: 'authenticated',
+      route: {
+        path: '/openapi.json',
+      },
+      cache: {
+        enabled: true,
+        maxAgeMs: 60_000,
+        filePath: '.strapi/openapi/admin.json',
+      },
+    },
+  },
+});
+```
+
+### Options
+
+- `server.openapi['content-api']`: config for the Content API OpenAPI endpoint.
+- `server.openapi.admin`: config for the Admin API OpenAPI endpoint.
+- `access`: controls exposure and protection in a single setting (default `disabled`). See below.
+- `route.path`: endpoint subpath to register (resolved under `/api` for content-api and under `/admin` for admin by default).
+- `cache.enabled`: enables file-based cache for generated output.
+- `cache.maxAgeMs`: cache validity in milliseconds.
+- `cache.filePath`: output file path for cached spec (absolute or app-root relative).
+
+### Access control
+
+A single `access` value per endpoint controls both whether the endpoint exists and how it is protected.
+Access is governed by Strapi's existing auth, not by a bespoke access surface:
+
+- `disabled` (default): the endpoint is not registered.
+- `public` (**content-api only**): no authentication — anyone can read the spec.
+- `authenticated` (**admin only**): requires an authenticated admin (any role). Granular
+  per-permission RBAC is intentionally left for a later iteration.
+
+The content-api endpoint is only available as public for now. The admin endpoint is never public.
+Unsupported access values throw at startup.
+
+> **Security note:** a `public` content-api spec describes your entire Content API surface — including
+> content types that are not publicly readable — to anyone. If you need a gated spec, use the admin
+> endpoint with `authenticated`. Review who can reach each endpoint before enabling it.

package/dist/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAgB1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,QAAQ,WAAY,KAAK,MAAM,YAAY,iBAAiB,KAAG,eA4B3E,CAAC;AAEF,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../src/exports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAgB1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,QAAQ,GAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,UAAU,iBAAiB,KAAG,eA4B3E,CAAC;AAEF,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC"}

package/dist/index.js

@@ -1,8 +1,8 @@
 'use strict';
 
-var _exports = require('./exports.js');
+var exports$1 = require('./exports.js');
 
 
 
-exports.generate = _exports.generate;
+exports.generate = exports$1.generate;
 //# sourceMappingURL=index.js.map

package/dist/post-processor/component-writer.js

@@ -3,7 +3,8 @@
 var z = require('zod/v4');
 var zod = require('../utils/zod.js');
 
-function _interopNamespaceDefault(e) {
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
   var n = Object.create(null);
   if (e) {
     Object.keys(e).forEach(function (k) {
@@ -20,7 +21,7 @@ function _interopNamespaceDefault(e) {
   return Object.freeze(n);
 }
 
-var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
+var z__namespace = /*#__PURE__*/_interopNamespace(z);
 
 class ComponentsWriter {
     postProcess(context) {

package/dist/post-processor/component-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"component-writer.js","sources":["../../src/post-processor/component-writer.ts"],"sourcesContent":["import { OpenAPIV3_1 } from 'openapi-types';\nimport * as z from 'zod/v4';\nimport type { DocumentContext } from '../types';\nimport { toComponentsPath } from '../utils/zod';\nimport type { PostProcessor } from './types';\n\nexport class ComponentsWriter implements PostProcessor {\n  postProcess(context: DocumentContext): void {\n    const { output } = context;\n\n    const { schemas } = z.toJSONSchema(z.globalRegistry, {\n      uri: toComponentsPath,\n    }) as OpenAPIV3_1.ComponentsObject;\n\n    output.data.components = { schemas };\n  }\n}\n"],"names":["ComponentsWriter","postProcess","context","output","schemas","z","toJSONSchema","globalRegistry","uri","toComponentsPath","data","components"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAMO,MAAMA,gBAAAA,CAAAA;AACXC,IAAAA,WAAAA,CAAYC,OAAwB,EAAQ;QAC1C,MAAM,EAAEC,MAAM,EAAE,GAAGD,OAAAA;QAEnB,MAAM,EAAEE,OAAO,EAAE,GAAGC,aAAEC,YAAY,CAACD,YAAAA,CAAEE,cAAc,EAAE;YACnDC,GAAAA,EAAKC;AACP,SAAA,CAAA;QAEAN,MAAAA,CAAOO,IAAI,CAACC,UAAU,GAAG;AAAEP,YAAAA;AAAQ,SAAA;AACrC,IAAA;AACF;;;;"}
+{"version":3,"file":"component-writer.js","sources":["../../src/post-processor/component-writer.ts"],"sourcesContent":["import { OpenAPIV3_1 } from 'openapi-types';\nimport * as z from 'zod/v4';\nimport type { DocumentContext } from '../types';\nimport { toComponentsPath } from '../utils/zod';\nimport type { PostProcessor } from './types';\n\nexport class ComponentsWriter implements PostProcessor {\n  postProcess(context: DocumentContext): void {\n    const { output } = context;\n\n    const { schemas } = z.toJSONSchema(z.globalRegistry, {\n      uri: toComponentsPath,\n    }) as OpenAPIV3_1.ComponentsObject;\n\n    output.data.components = { schemas };\n  }\n}\n"],"names":["ComponentsWriter","postProcess","context","output","schemas","z","toJSONSchema","globalRegistry","uri","toComponentsPath","data","components"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAMO,MAAMA,gBAAAA,CAAAA;AACXC,IAAAA,WAAAA,CAAYC,OAAwB,EAAQ;QAC1C,MAAM,EAAEC,MAAM,EAAE,GAAGD,OAAAA;QAEnB,MAAM,EAAEE,OAAO,EAAE,GAAGC,aAAEC,YAAY,CAACD,YAAAA,CAAEE,cAAc,EAAE;YACnDC,GAAAA,EAAKC;AACP,SAAA,CAAA;QAEAN,MAAAA,CAAOO,IAAI,CAACC,UAAU,GAAG;AAAEP,YAAAA;AAAQ,SAAA;AACrC,IAAA;AACF;;;;"}

package/dist/routes/rules/is-of-type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"is-of-type.d.ts","sourceRoot":"","sources":["../../../src/routes/rules/is-of-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,eAAO,MAAM,QAAQ,SAAU,MAAM,KAAG,WAEvC,CAAC"}
+{"version":3,"file":"is-of-type.d.ts","sourceRoot":"","sources":["../../../src/routes/rules/is-of-type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,KAAG,WAEvC,CAAC"}

package/dist/utils/debug.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,OAAO,CAAC;AAIhC,eAAO,MAAM,cAAc,aAChB,MAAM,GAAG,IAAI,cACX,MAAM,yBAGlB,CAAC"}
+{"version":3,"file":"debug.d.ts","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,WAAW,MAAM,OAAO,CAAC;AAIhC,eAAO,MAAM,cAAc,GACzB,UAAS,MAAM,GAAG,IAAW,EAC7B,YAAW,MAAwB,yBAGpC,CAAC"}

package/dist/utils/debug.js

@@ -3,8 +3,12 @@
 var createDebug = require('debug');
 var constants = require('../constants.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var createDebug__default = /*#__PURE__*/_interopDefault(createDebug);
+
 const createDebugger = (section = null, namespace = constants.DEBUG_NAMESPACE)=>{
-    return section !== null ? createDebug(`${namespace}:${section}`) : createDebug(namespace);
+    return section !== null ? createDebug__default.default(`${namespace}:${section}`) : createDebug__default.default(namespace);
 };
 
 exports.createDebugger = createDebugger;

package/dist/utils/debug.js.map

@@ -1 +1 @@
-{"version":3,"file":"debug.js","sources":["../../src/utils/debug.ts"],"sourcesContent":["import createDebug from 'debug';\n\nimport { DEBUG_NAMESPACE } from '../constants';\n\nexport const createDebugger = (\n  section: string | null = null,\n  namespace: string = DEBUG_NAMESPACE\n) => {\n  return section !== null ? createDebug(`${namespace}:${section}`) : createDebug(namespace);\n};\n"],"names":["createDebugger","section","namespace","DEBUG_NAMESPACE","createDebug"],"mappings":";;;;;MAIaA,cAAAA,GAAiB,CAC5BC,UAAyB,IAAI,EAC7BC,YAAoBC,yBAAe,GAAA;IAEnC,OAAOF,OAAAA,KAAY,OAAOG,WAAAA,CAAY,CAAA,EAAGF,UAAU,CAAC,EAAED,OAAAA,CAAAA,CAAS,CAAA,GAAIG,WAAAA,CAAYF,SAAAA,CAAAA;AACjF;;;;"}
+{"version":3,"file":"debug.js","sources":["../../src/utils/debug.ts"],"sourcesContent":["import createDebug from 'debug';\n\nimport { DEBUG_NAMESPACE } from '../constants';\n\nexport const createDebugger = (\n  section: string | null = null,\n  namespace: string = DEBUG_NAMESPACE\n) => {\n  return section !== null ? createDebug(`${namespace}:${section}`) : createDebug(namespace);\n};\n"],"names":["createDebugger","section","namespace","DEBUG_NAMESPACE","createDebug"],"mappings":";;;;;;;;;MAIaA,cAAAA,GAAiB,CAC5BC,UAAyB,IAAI,EAC7BC,YAAoBC,yBAAe,GAAA;IAEnC,OAAOF,OAAAA,KAAY,OAAOG,4BAAAA,CAAY,CAAA,EAAGF,UAAU,CAAC,EAAED,OAAAA,CAAAA,CAAS,CAAA,GAAIG,4BAAAA,CAAYF,SAAAA,CAAAA;AACjF;;;;"}

package/dist/utils/zod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"zod.d.ts","sourceRoot":"","sources":["../../src/utils/zod.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,eAAO,MAAM,YAAY,cACZ,EAAE,OAAO,KACnB,YAAY,YAAY,GAAG,YAAY,eAsBzC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,OAAQ,MAAM,WAAiC,CAAC"}
+{"version":3,"file":"zod.d.ts","sourceRoot":"","sources":["../../src/utils/zod.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,eAAO,MAAM,YAAY,GACvB,WAAW,CAAC,CAAC,OAAO,KACnB,WAAW,CAAC,YAAY,GAAG,WAAW,CAAC,eAsBzC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAAI,IAAI,MAAM,WAAiC,CAAC"}

package/dist/utils/zod.js

@@ -3,7 +3,8 @@
 var node_crypto = require('node:crypto');
 var z = require('zod/v4');
 
-function _interopNamespaceDefault(e) {
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
   var n = Object.create(null);
   if (e) {
     Object.keys(e).forEach(function (k) {
@@ -20,7 +21,7 @@ function _interopNamespaceDefault(e) {
   return Object.freeze(n);
 }
 
-var z__namespace = /*#__PURE__*/_interopNamespaceDefault(z);
+var z__namespace = /*#__PURE__*/_interopNamespace(z);
 
 /**
  * Converts a Zod schema to an OpenAPI Schema Object.

package/dist/utils/zod.js.map

@@ -1 +1 @@
-{"version":3,"file":"zod.js","sources":["../../src/utils/zod.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport * as z from 'zod/v4';\n\nimport type { OpenAPIV3_1 } from 'openapi-types';\n\n/**\n * Converts a Zod schema to an OpenAPI Schema Object.\n *\n * @description\n * Takes a Zod schema and converts it into an OpenAPI Schema Object (v3.1).\n * It uses a local registry to handle the conversion process and generates the appropriate\n * OpenAPI components.\n *\n * @param zodSchema - The Zod schema to convert to OpenAPI format. Can be any valid Zod schema.\n *\n * @returns An OpenAPI Schema Object representing the input Zod schema structure.\n * If the conversion cannot be completed, returns undefined.\n *\n * @example\n * ```typescript\n * import * as z from 'zod/v4';\n *\n * // Create a Zod schema\n * const userSchema = z.object({\n *   id: z.number(),\n *   name: z.string(),\n *   email: z.string().email()\n * });\n *\n * // Convert to OpenAPI schema\n * const openAPISchema = zodToOpenAPI(userSchema);\n * ```\n */\n\nexport const zodToOpenAPI = (\n  zodSchema: z.ZodType\n): OpenAPIV3_1.SchemaObject | OpenAPIV3_1.ReferenceObject => {\n  try {\n    const id = randomUUID();\n    const registry = z.registry<{ id: string }>();\n\n    // Add the schema to the local registry with a custom, unique ID\n    registry.add(zodSchema, { id });\n\n    // Copy the global registry definitions into the local registry to make sure references are resolved\n    // This prevent \"__shared\" definitions from being created\n    for (const [key, value] of z.globalRegistry._idmap) {\n      registry.add(value, { id: key });\n    }\n\n    // Generate the schemas and only return the one we want, transform the URI path to be OpenAPI compliant\n    const { schemas } = z.toJSONSchema(registry, { uri: toComponentsPath });\n\n    // TODO: make sure it's compliant\n    return schemas[id] as OpenAPIV3_1.SchemaObject;\n  } catch (e) {\n    throw new Error(\"Couldn't transform the zod schema into an OpenAPI schema\");\n  }\n};\n\n/**\n * Generates a path string for referencing a component schema by its identifier.\n *\n * @param id - The identifier of the component schema.\n * @returns The constructed path string for the specified component schema.\n */\nexport const toComponentsPath = (id: string) => `#/components/schemas/${id}`;\n"],"names":["zodToOpenAPI","zodSchema","id","randomUUID","registry","z","add","key","value","globalRegistry","_idmap","schemas","toJSONSchema","uri","toComponentsPath","e","Error"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6BO,MAAMA,YAAAA,GAAe,CAC1BC,SAAAA,GAAAA;IAEA,IAAI;AACF,QAAA,MAAMC,EAAAA,GAAKC,sBAAAA,EAAAA;QACX,MAAMC,QAAAA,GAAWC,aAAED,QAAQ,EAAA;;QAG3BA,QAAAA,CAASE,GAAG,CAACL,SAAAA,EAAW;AAAEC,YAAAA;AAAG,SAAA,CAAA;;;QAI7B,KAAK,MAAM,CAACK,GAAAA,EAAKC,KAAAA,CAAM,IAAIH,YAAAA,CAAEI,cAAc,CAACC,MAAM,CAAE;YAClDN,QAAAA,CAASE,GAAG,CAACE,KAAAA,EAAO;gBAAEN,EAAAA,EAAIK;AAAI,aAAA,CAAA;AAChC,QAAA;;AAGA,QAAA,MAAM,EAAEI,OAAO,EAAE,GAAGN,YAAAA,CAAEO,YAAY,CAACR,QAAAA,EAAU;YAAES,GAAAA,EAAKC;AAAiB,SAAA,CAAA;;QAGrE,OAAOH,OAAO,CAACT,EAAAA,CAAG;AACpB,IAAA,CAAA,CAAE,OAAOa,CAAAA,EAAG;AACV,QAAA,MAAM,IAAIC,KAAAA,CAAM,0DAAA,CAAA;AAClB,IAAA;AACF;AAEA;;;;;UAMaF,gBAAAA,GAAmB,CAACZ,KAAe,CAAC,qBAAqB,EAAEA,EAAAA,CAAAA;;;;;"}
+{"version":3,"file":"zod.js","sources":["../../src/utils/zod.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport * as z from 'zod/v4';\n\nimport type { OpenAPIV3_1 } from 'openapi-types';\n\n/**\n * Converts a Zod schema to an OpenAPI Schema Object.\n *\n * @description\n * Takes a Zod schema and converts it into an OpenAPI Schema Object (v3.1).\n * It uses a local registry to handle the conversion process and generates the appropriate\n * OpenAPI components.\n *\n * @param zodSchema - The Zod schema to convert to OpenAPI format. Can be any valid Zod schema.\n *\n * @returns An OpenAPI Schema Object representing the input Zod schema structure.\n * If the conversion cannot be completed, returns undefined.\n *\n * @example\n * ```typescript\n * import * as z from 'zod/v4';\n *\n * // Create a Zod schema\n * const userSchema = z.object({\n *   id: z.number(),\n *   name: z.string(),\n *   email: z.string().email()\n * });\n *\n * // Convert to OpenAPI schema\n * const openAPISchema = zodToOpenAPI(userSchema);\n * ```\n */\n\nexport const zodToOpenAPI = (\n  zodSchema: z.ZodType\n): OpenAPIV3_1.SchemaObject | OpenAPIV3_1.ReferenceObject => {\n  try {\n    const id = randomUUID();\n    const registry = z.registry<{ id: string }>();\n\n    // Add the schema to the local registry with a custom, unique ID\n    registry.add(zodSchema, { id });\n\n    // Copy the global registry definitions into the local registry to make sure references are resolved\n    // This prevent \"__shared\" definitions from being created\n    for (const [key, value] of z.globalRegistry._idmap) {\n      registry.add(value, { id: key });\n    }\n\n    // Generate the schemas and only return the one we want, transform the URI path to be OpenAPI compliant\n    const { schemas } = z.toJSONSchema(registry, { uri: toComponentsPath });\n\n    // TODO: make sure it's compliant\n    return schemas[id] as OpenAPIV3_1.SchemaObject;\n  } catch (e) {\n    throw new Error(\"Couldn't transform the zod schema into an OpenAPI schema\");\n  }\n};\n\n/**\n * Generates a path string for referencing a component schema by its identifier.\n *\n * @param id - The identifier of the component schema.\n * @returns The constructed path string for the specified component schema.\n */\nexport const toComponentsPath = (id: string) => `#/components/schemas/${id}`;\n"],"names":["zodToOpenAPI","zodSchema","id","randomUUID","registry","z","add","key","value","globalRegistry","_idmap","schemas","toJSONSchema","uri","toComponentsPath","e","Error"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6BO,MAAMA,YAAAA,GAAe,CAC1BC,SAAAA,GAAAA;IAEA,IAAI;AACF,QAAA,MAAMC,EAAAA,GAAKC,sBAAAA,EAAAA;QACX,MAAMC,QAAAA,GAAWC,aAAED,QAAQ,EAAA;;QAG3BA,QAAAA,CAASE,GAAG,CAACL,SAAAA,EAAW;AAAEC,YAAAA;AAAG,SAAA,CAAA;;;QAI7B,KAAK,MAAM,CAACK,GAAAA,EAAKC,KAAAA,CAAM,IAAIH,YAAAA,CAAEI,cAAc,CAACC,MAAM,CAAE;YAClDN,QAAAA,CAASE,GAAG,CAACE,KAAAA,EAAO;gBAAEN,EAAAA,EAAIK;AAAI,aAAA,CAAA;AAChC,QAAA;;AAGA,QAAA,MAAM,EAAEI,OAAO,EAAE,GAAGN,YAAAA,CAAEO,YAAY,CAACR,QAAAA,EAAU;YAAES,GAAAA,EAAKC;AAAiB,SAAA,CAAA;;QAGrE,OAAOH,OAAO,CAACT,EAAAA,CAAG;AACpB,IAAA,CAAA,CAAE,OAAOa,CAAAA,EAAG;AACV,QAAA,MAAM,IAAIC,KAAAA,CAAM,0DAAA,CAAA;AAClB,IAAA;AACF;AAEA;;;;;UAMaF,gBAAAA,GAAmB,CAACZ,KAAe,CAAC,qBAAqB,EAAEA,EAAAA,CAAAA;;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/openapi",
-  "version": "0.0.0-experimental.621b019265f3aaccab5e5bc1feae5ef4b524fa32",
+  "version": "0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282",
   "description": "A tool set to help generate and validate API documentation for Strapi projects",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -53,7 +53,7 @@
     "test:unit:watch": "run -T jest --watch"
   },
   "engines": {
-    "node": ">=20.0.0 <=24.x.x",
+    "node": ">=20.19.0 <=26.x.x",
     "npm": ">=6.0.0"
   },
   "dependencies": {
@@ -62,7 +62,7 @@
     "zod": "3.25.67"
   },
   "devDependencies": {
-    "@strapi/types": "0.0.0-experimental.621b019265f3aaccab5e5bc1feae5ef4b524fa32",
+    "@strapi/types": "0.0.0-experimental.6340da17068c3bed7fb006e7bcc554c71129e282",
     "@types/debug": "^4"
   }
 }