@strapi/upload 5.37.1 → 5.38.1

package/dist/server/services/ai-metadata.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ai-metadata.mjs","sources":["../../../server/src/services/ai-metadata.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { z } from 'zod';\nimport { InputFile, File } from '../types';\nimport { Settings } from '../controllers/validation/admin/settings';\nimport { getService } from '../utils';\nimport { buildFormDataFromFiles } from '../utils/images';\n\n/**\n * Supported image types for AI metadata generation\n * @see https://ai.google.dev/gemini-api/docs/image-understanding\n */\nconst SUPPORTED_IMAGE_TYPES = [\n  'image/png',\n  'image/jpeg',\n  'image/webp',\n  'image/heic',\n  'image/heif',\n] as const;\n\nconst createAIMetadataService = ({ strapi }: { strapi: Core.Strapi }) => {\n  const aiServerUrl = process.env.STRAPI_AI_URL || 'https://strapi-ai.apps.strapi.io';\n\n  return {\n    async isEnabled() {\n      // Check if user disabled AI features globally\n      const isAIEnabled = strapi.config.get('admin.ai.enabled', true);\n      if (!isAIEnabled) {\n        return false;\n      }\n\n      // Check if the user's license grants access to AI features\n      const hasAccess = strapi.ee.features.isEnabled('cms-ai');\n      if (!hasAccess) {\n        return false;\n      }\n\n      // Check if feature is specifically enabled, defaulting to true\n      const settings: Settings = await strapi.plugin('upload').service('upload').getSettings();\n      const aiMetadata: boolean = settings.aiMetadata ?? true;\n\n      return aiMetadata;\n    },\n\n    async countImagesWithoutMetadata() {\n      const imagesWithoutMetadataCountPromise = strapi.db.query('plugin::upload.file').count({\n        where: {\n          mime: {\n            $in: SUPPORTED_IMAGE_TYPES,\n          },\n          $or: [\n            { alternativeText: { $null: true } },\n            { alternativeText: '' },\n            { caption: { $null: true } },\n            { caption: '' },\n          ],\n        },\n      });\n\n      const totalImagesPromise = strapi.db.query('plugin::upload.file').count({\n        where: {\n          mime: {\n            $in: SUPPORTED_IMAGE_TYPES,\n          },\n        },\n      });\n\n      const [imagesWithoutMetadataCount, totalImages] = await Promise.all([\n        imagesWithoutMetadataCountPromise,\n        totalImagesPromise,\n      ]);\n\n      return { imagesWithoutMetadataCount, totalImages };\n    },\n\n    /**\n     * Update files with AI-generated metadata\n     * Shared logic used by both upload flow and retroactive processing\n     */\n    async updateFilesWithAIMetadata(\n      files: File[],\n      metadataResults: Array<{ altText: string; caption: string } | null>,\n      user: { id: string | number }\n    ) {\n      const uploadService = strapi.plugin('upload').service('upload');\n\n      await Promise.all(\n        files.map(async (file, index) => {\n          const aiMetadata = metadataResults[index];\n          if (aiMetadata) {\n            // Only update fields that are missing (null or empty string)\n            const updateData: { alternativeText?: string; caption?: string } = {};\n\n            if (!file.alternativeText || file.alternativeText === '') {\n              updateData.alternativeText = aiMetadata.altText;\n            }\n\n            if (!file.caption || file.caption === '') {\n              updateData.caption = aiMetadata.caption;\n            }\n\n            // Only update if there are fields to update\n            if (Object.keys(updateData).length > 0) {\n              await uploadService.updateFileInfo(file.id, updateData, { user });\n\n              // Update in-memory file object (needed for upload flow response)\n              if (updateData.alternativeText !== undefined) {\n                file.alternativeText = updateData.alternativeText;\n              }\n              if (updateData.caption !== undefined) {\n                file.caption = updateData.caption;\n              }\n            }\n          }\n        })\n      );\n    },\n\n    /**\n     * Process existing files with job tracking for progress updates\n     */\n    async processExistingFiles(jobId: number, user: { id: string | number }): Promise<void> {\n      const jobService = getService('aiMetadataJobs');\n\n      try {\n        // Mark as processing\n        await jobService.updateJob(jobId, { status: 'processing' });\n\n        // Query all images without metadata\n        const files: File[] = await strapi.db.query('plugin::upload.file').findMany({\n          where: {\n            mime: {\n              $in: SUPPORTED_IMAGE_TYPES,\n            },\n            $or: [\n              { alternativeText: { $null: true } },\n              { alternativeText: '' },\n              { caption: { $null: true } },\n              { caption: '' },\n            ],\n          },\n        });\n\n        if (files.length === 0) {\n          await jobService.updateJob(jobId, {\n            status: 'completed',\n            completedAt: new Date(),\n          });\n          return;\n        }\n\n        // Process all files at once\n        const metadataResults = await this.processFiles(files);\n        await this.updateFilesWithAIMetadata(files, metadataResults, user);\n\n        // Mark as completed\n        await jobService.updateJob(jobId, {\n          status: 'completed',\n          completedAt: new Date(),\n        });\n      } catch (error) {\n        strapi.log.error('AI metadata job failed', {\n          jobId,\n          error: error instanceof Error ? error.message : String(error),\n        });\n\n        await jobService.updateJob(jobId, {\n          status: 'failed',\n          completedAt: new Date(),\n        });\n      }\n    },\n\n    /**\n     * Processes provided files for AI metadata generation\n     */\n    async processFiles(files: File[]): Promise<Array<{ altText: string; caption: string } | null>> {\n      if (!(await this.isEnabled()) || !aiServerUrl) {\n        throw new Error('AI Metadata service is not enabled');\n      }\n\n      // Filter for image files only and track their original positions\n      // We need to maintain the original indices so we can map AI results back correctly\n      const imageFiles = files\n        .map((file, index) => ({ file, originalIndex: index }))\n        .filter(({ file }) => file.mime?.startsWith('image/'));\n\n      // Convert filtered image files to InputFile format (uses thumbnails when available)\n      const imageInputFiles = imageFiles.map(({ file }) => {\n        const thumbnail = (file.formats as any)?.thumbnail;\n        return {\n          filepath: thumbnail?.url || file.url || '',\n          mimetype: file.mime,\n          originalFilename: file.name,\n          size: thumbnail?.size || file.size,\n          provider: file.provider,\n        } as InputFile;\n      });\n\n      // If no image files, return sparse array with all nulls to avoid calling the AI server\n      // This maintains the same array length as input files for proper index alignment\n      if (imageFiles.length === 0) {\n        return new Array(files.length).fill(null);\n      }\n\n      const formData = await buildFormDataFromFiles(\n        imageInputFiles,\n        strapi.config.get('server.absoluteUrl'),\n        strapi.log\n      );\n\n      let token: string;\n      try {\n        const tokenData = await strapi.get('ai').getAiToken();\n        token = tokenData.token;\n      } catch (error) {\n        throw new Error('Failed to retrieve AI token', {\n          cause: error instanceof Error ? error : undefined,\n        });\n      }\n\n      strapi.log.http('Contacting AI Server for media metadata generation', {\n        aiServerUrl,\n        imageCount: imageFiles.length,\n      });\n\n      const res = await fetch(`${aiServerUrl}/media-library/generate-metadata`, {\n        method: 'POST',\n        body: formData,\n        headers: {\n          Authorization: `Bearer ${token}`,\n        },\n      });\n\n      if (!res.ok) {\n        const errorText = await res.text();\n        throw Error(`AI metadata generation failed`, { cause: errorText });\n      }\n\n      const responseSchema = z.object({\n        results: z.array(\n          z.object({\n            altText: z.string(),\n            caption: z.string(),\n          })\n        ),\n      });\n\n      const { results } = responseSchema.parse(await res.json());\n      strapi.log.http(`AI generated metadata successfully for ${results.length} files`);\n\n      // Create sparse array with results at original indices\n      // Example: files=[img1, pdf, img2] -> imageFiles=[{img1, index:0}, {img2, index:2}]\n      // AI results=[meta1, meta2] -> sparse=[meta1, null, meta2]\n      // This ensures metadata[i] corresponds to files[i], with null for non-images\n      return imageFiles.reduce((sparseResults, { originalIndex }, resultIndex) => {\n        sparseResults[originalIndex] = results[resultIndex];\n        return sparseResults;\n      }, new Array(files.length).fill(null));\n    },\n  };\n};\n\nexport { createAIMetadataService };\n"],"names":["SUPPORTED_IMAGE_TYPES","createAIMetadataService","strapi","aiServerUrl","process","env","STRAPI_AI_URL","isEnabled","isAIEnabled","config","get","hasAccess","ee","features","settings","plugin","service","getSettings","aiMetadata","countImagesWithoutMetadata","imagesWithoutMetadataCountPromise","db","query","count","where","mime","$in","$or","alternativeText","$null","caption","totalImagesPromise","imagesWithoutMetadataCount","totalImages","Promise","all","updateFilesWithAIMetadata","files","metadataResults","user","uploadService","map","file","index","updateData","altText","Object","keys","length","updateFileInfo","id","undefined","processExistingFiles","jobId","jobService","getService","updateJob","status","findMany","completedAt","Date","processFiles","error","log","Error","message","String","imageFiles","originalIndex","filter","startsWith","imageInputFiles","thumbnail","formats","filepath","url","mimetype","originalFilename","name","size","provider","Array","fill","formData","buildFormDataFromFiles","token","tokenData","getAiToken","cause","http","imageCount","res","fetch","method","body","headers","Authorization","ok","errorText","text","responseSchema","z","object","results","array","string","parse","json","reduce","sparseResults","resultIndex"],"mappings":";;;;AAOA;;;AAGC,IACD,MAAMA,qBAAwB,GAAA;AAC5B,IAAA,WAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA;AACD,CAAA;AAED,MAAMC,uBAA0B,GAAA,CAAC,EAAEC,MAAM,EAA2B,GAAA;AAClE,IAAA,MAAMC,WAAcC,GAAAA,OAAAA,CAAQC,GAAG,CAACC,aAAa,IAAI,kCAAA;IAEjD,OAAO;QACL,MAAMC,SAAAA,CAAAA,GAAAA;;AAEJ,YAAA,MAAMC,cAAcN,MAAOO,CAAAA,MAAM,CAACC,GAAG,CAAC,kBAAoB,EAAA,IAAA,CAAA;AAC1D,YAAA,IAAI,CAACF,WAAa,EAAA;gBAChB,OAAO,KAAA;AACT;;AAGA,YAAA,MAAMG,YAAYT,MAAOU,CAAAA,EAAE,CAACC,QAAQ,CAACN,SAAS,CAAC,QAAA,CAAA;AAC/C,YAAA,IAAI,CAACI,SAAW,EAAA;gBACd,OAAO,KAAA;AACT;;YAGA,MAAMG,QAAAA,GAAqB,MAAMZ,MAAOa,CAAAA,MAAM,CAAC,QAAUC,CAAAA,CAAAA,OAAO,CAAC,QAAA,CAAA,CAAUC,WAAW,EAAA;YACtF,MAAMC,UAAAA,GAAsBJ,QAASI,CAAAA,UAAU,IAAI,IAAA;YAEnD,OAAOA,UAAAA;AACT,SAAA;QAEA,MAAMC,0BAAAA,CAAAA,GAAAA;YACJ,MAAMC,iCAAAA,GAAoClB,OAAOmB,EAAE,CAACC,KAAK,CAAC,qBAAA,CAAA,CAAuBC,KAAK,CAAC;gBACrFC,KAAO,EAAA;oBACLC,IAAM,EAAA;wBACJC,GAAK1B,EAAAA;AACP,qBAAA;oBACA2B,GAAK,EAAA;AACH,wBAAA;4BAAEC,eAAiB,EAAA;gCAAEC,KAAO,EAAA;AAAK;AAAE,yBAAA;AACnC,wBAAA;4BAAED,eAAiB,EAAA;AAAG,yBAAA;AACtB,wBAAA;4BAAEE,OAAS,EAAA;gCAAED,KAAO,EAAA;AAAK;AAAE,yBAAA;AAC3B,wBAAA;4BAAEC,OAAS,EAAA;AAAG;AACf;AACH;AACF,aAAA,CAAA;YAEA,MAAMC,kBAAAA,GAAqB7B,OAAOmB,EAAE,CAACC,KAAK,CAAC,qBAAA,CAAA,CAAuBC,KAAK,CAAC;gBACtEC,KAAO,EAAA;oBACLC,IAAM,EAAA;wBACJC,GAAK1B,EAAAA;AACP;AACF;AACF,aAAA,CAAA;AAEA,YAAA,MAAM,CAACgC,0BAA4BC,EAAAA,WAAAA,CAAY,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;AAClEf,gBAAAA,iCAAAA;AACAW,gBAAAA;AACD,aAAA,CAAA;YAED,OAAO;AAAEC,gBAAAA,0BAAAA;AAA4BC,gBAAAA;AAAY,aAAA;AACnD,SAAA;AAEA;;;AAGC,QACD,MAAMG,yBACJC,CAAAA,CAAAA,KAAa,EACbC,eAAmE,EACnEC,IAA6B,EAAA;AAE7B,YAAA,MAAMC,gBAAgBtC,MAAOa,CAAAA,MAAM,CAAC,QAAA,CAAA,CAAUC,OAAO,CAAC,QAAA,CAAA;AAEtD,YAAA,MAAMkB,QAAQC,GAAG,CACfE,MAAMI,GAAG,CAAC,OAAOC,IAAMC,EAAAA,KAAAA,GAAAA;gBACrB,MAAMzB,UAAAA,GAAaoB,eAAe,CAACK,KAAM,CAAA;AACzC,gBAAA,IAAIzB,UAAY,EAAA;;AAEd,oBAAA,MAAM0B,aAA6D,EAAC;AAEpE,oBAAA,IAAI,CAACF,IAAKd,CAAAA,eAAe,IAAIc,IAAKd,CAAAA,eAAe,KAAK,EAAI,EAAA;wBACxDgB,UAAWhB,CAAAA,eAAe,GAAGV,UAAAA,CAAW2B,OAAO;AACjD;AAEA,oBAAA,IAAI,CAACH,IAAKZ,CAAAA,OAAO,IAAIY,IAAKZ,CAAAA,OAAO,KAAK,EAAI,EAAA;wBACxCc,UAAWd,CAAAA,OAAO,GAAGZ,UAAAA,CAAWY,OAAO;AACzC;;AAGA,oBAAA,IAAIgB,OAAOC,IAAI,CAACH,UAAYI,CAAAA,CAAAA,MAAM,GAAG,CAAG,EAAA;AACtC,wBAAA,MAAMR,cAAcS,cAAc,CAACP,IAAKQ,CAAAA,EAAE,EAAEN,UAAY,EAAA;AAAEL,4BAAAA;AAAK,yBAAA,CAAA;;wBAG/D,IAAIK,UAAAA,CAAWhB,eAAe,KAAKuB,SAAW,EAAA;4BAC5CT,IAAKd,CAAAA,eAAe,GAAGgB,UAAAA,CAAWhB,eAAe;AACnD;wBACA,IAAIgB,UAAAA,CAAWd,OAAO,KAAKqB,SAAW,EAAA;4BACpCT,IAAKZ,CAAAA,OAAO,GAAGc,UAAAA,CAAWd,OAAO;AACnC;AACF;AACF;AACF,aAAA,CAAA,CAAA;AAEJ,SAAA;AAEA;;AAEC,QACD,MAAMsB,oBAAAA,CAAAA,CAAqBC,KAAa,EAAEd,IAA6B,EAAA;AACrE,YAAA,MAAMe,aAAaC,UAAW,CAAA,gBAAA,CAAA;YAE9B,IAAI;;gBAEF,MAAMD,UAAAA,CAAWE,SAAS,CAACH,KAAO,EAAA;oBAAEI,MAAQ,EAAA;AAAa,iBAAA,CAAA;;gBAGzD,MAAMpB,KAAAA,GAAgB,MAAMnC,MAAOmB,CAAAA,EAAE,CAACC,KAAK,CAAC,qBAAuBoC,CAAAA,CAAAA,QAAQ,CAAC;oBAC1ElC,KAAO,EAAA;wBACLC,IAAM,EAAA;4BACJC,GAAK1B,EAAAA;AACP,yBAAA;wBACA2B,GAAK,EAAA;AACH,4BAAA;gCAAEC,eAAiB,EAAA;oCAAEC,KAAO,EAAA;AAAK;AAAE,6BAAA;AACnC,4BAAA;gCAAED,eAAiB,EAAA;AAAG,6BAAA;AACtB,4BAAA;gCAAEE,OAAS,EAAA;oCAAED,KAAO,EAAA;AAAK;AAAE,6BAAA;AAC3B,4BAAA;gCAAEC,OAAS,EAAA;AAAG;AACf;AACH;AACF,iBAAA,CAAA;gBAEA,IAAIO,KAAAA,CAAMW,MAAM,KAAK,CAAG,EAAA;oBACtB,MAAMM,UAAAA,CAAWE,SAAS,CAACH,KAAO,EAAA;wBAChCI,MAAQ,EAAA,WAAA;AACRE,wBAAAA,WAAAA,EAAa,IAAIC,IAAAA;AACnB,qBAAA,CAAA;AACA,oBAAA;AACF;;AAGA,gBAAA,MAAMtB,eAAkB,GAAA,MAAM,IAAI,CAACuB,YAAY,CAACxB,KAAAA,CAAAA;AAChD,gBAAA,MAAM,IAAI,CAACD,yBAAyB,CAACC,OAAOC,eAAiBC,EAAAA,IAAAA,CAAAA;;gBAG7D,MAAMe,UAAAA,CAAWE,SAAS,CAACH,KAAO,EAAA;oBAChCI,MAAQ,EAAA,WAAA;AACRE,oBAAAA,WAAAA,EAAa,IAAIC,IAAAA;AACnB,iBAAA,CAAA;AACF,aAAA,CAAE,OAAOE,KAAO,EAAA;AACd5D,gBAAAA,MAAAA,CAAO6D,GAAG,CAACD,KAAK,CAAC,wBAA0B,EAAA;AACzCT,oBAAAA,KAAAA;AACAS,oBAAAA,KAAAA,EAAOA,KAAiBE,YAAAA,KAAAA,GAAQF,KAAMG,CAAAA,OAAO,GAAGC,MAAOJ,CAAAA,KAAAA;AACzD,iBAAA,CAAA;gBAEA,MAAMR,UAAAA,CAAWE,SAAS,CAACH,KAAO,EAAA;oBAChCI,MAAQ,EAAA,QAAA;AACRE,oBAAAA,WAAAA,EAAa,IAAIC,IAAAA;AACnB,iBAAA,CAAA;AACF;AACF,SAAA;AAEA;;QAGA,MAAMC,cAAaxB,KAAa,EAAA;AAC9B,YAAA,IAAI,CAAE,MAAM,IAAI,CAAC9B,SAAS,EAAA,IAAO,CAACJ,WAAa,EAAA;AAC7C,gBAAA,MAAM,IAAI6D,KAAM,CAAA,oCAAA,CAAA;AAClB;;;AAIA,YAAA,MAAMG,aAAa9B,KAChBI,CAAAA,GAAG,CAAC,CAACC,IAAAA,EAAMC,SAAW;AAAED,oBAAAA,IAAAA;oBAAM0B,aAAezB,EAAAA;iBAAM,CAAA,CAAA,CACnD0B,MAAM,CAAC,CAAC,EAAE3B,IAAI,EAAE,GAAKA,IAAAA,CAAKjB,IAAI,EAAE6C,UAAW,CAAA,QAAA,CAAA,CAAA;;AAG9C,YAAA,MAAMC,kBAAkBJ,UAAW1B,CAAAA,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAA;gBAC9C,MAAM8B,SAAAA,GAAa9B,IAAK+B,CAAAA,OAAO,EAAUD,SAAAA;gBACzC,OAAO;AACLE,oBAAAA,QAAAA,EAAUF,SAAWG,EAAAA,GAAAA,IAAOjC,IAAKiC,CAAAA,GAAG,IAAI,EAAA;AACxCC,oBAAAA,QAAAA,EAAUlC,KAAKjB,IAAI;AACnBoD,oBAAAA,gBAAAA,EAAkBnC,KAAKoC,IAAI;oBAC3BC,IAAMP,EAAAA,SAAAA,EAAWO,IAAQrC,IAAAA,IAAAA,CAAKqC,IAAI;AAClCC,oBAAAA,QAAAA,EAAUtC,KAAKsC;AACjB,iBAAA;AACF,aAAA,CAAA;;;YAIA,IAAIb,UAAAA,CAAWnB,MAAM,KAAK,CAAG,EAAA;AAC3B,gBAAA,OAAO,IAAIiC,KAAM5C,CAAAA,KAAAA,CAAMW,MAAM,CAAA,CAAEkC,IAAI,CAAC,IAAA,CAAA;AACtC;YAEA,MAAMC,QAAAA,GAAW,MAAMC,sBAAAA,CACrBb,eACArE,EAAAA,MAAAA,CAAOO,MAAM,CAACC,GAAG,CAAC,oBAClBR,CAAAA,EAAAA,MAAAA,CAAO6D,GAAG,CAAA;YAGZ,IAAIsB,KAAAA;YACJ,IAAI;AACF,gBAAA,MAAMC,YAAY,MAAMpF,MAAAA,CAAOQ,GAAG,CAAC,MAAM6E,UAAU,EAAA;AACnDF,gBAAAA,KAAAA,GAAQC,UAAUD,KAAK;AACzB,aAAA,CAAE,OAAOvB,KAAO,EAAA;gBACd,MAAM,IAAIE,MAAM,6BAA+B,EAAA;oBAC7CwB,KAAO1B,EAAAA,KAAAA,YAAiBE,QAAQF,KAAQX,GAAAA;AAC1C,iBAAA,CAAA;AACF;AAEAjD,YAAAA,MAAAA,CAAO6D,GAAG,CAAC0B,IAAI,CAAC,oDAAsD,EAAA;AACpEtF,gBAAAA,WAAAA;AACAuF,gBAAAA,UAAAA,EAAYvB,WAAWnB;AACzB,aAAA,CAAA;AAEA,YAAA,MAAM2C,MAAM,MAAMC,KAAAA,CAAM,GAAGzF,WAAY,CAAA,gCAAgC,CAAC,EAAE;gBACxE0F,MAAQ,EAAA,MAAA;gBACRC,IAAMX,EAAAA,QAAAA;gBACNY,OAAS,EAAA;oBACPC,aAAe,EAAA,CAAC,OAAO,EAAEX,KAAO,CAAA;AAClC;AACF,aAAA,CAAA;YAEA,IAAI,CAACM,GAAIM,CAAAA,EAAE,EAAE;gBACX,MAAMC,SAAAA,GAAY,MAAMP,GAAAA,CAAIQ,IAAI,EAAA;AAChC,gBAAA,MAAMnC,KAAM,CAAA,CAAC,6BAA6B,CAAC,EAAE;oBAAEwB,KAAOU,EAAAA;AAAU,iBAAA,CAAA;AAClE;YAEA,MAAME,cAAAA,GAAiBC,CAAEC,CAAAA,MAAM,CAAC;AAC9BC,gBAAAA,OAAAA,EAASF,CAAEG,CAAAA,KAAK,CACdH,CAAAA,CAAEC,MAAM,CAAC;AACPzD,oBAAAA,OAAAA,EAASwD,EAAEI,MAAM,EAAA;AACjB3E,oBAAAA,OAAAA,EAASuE,EAAEI,MAAM;AACnB,iBAAA,CAAA;AAEJ,aAAA,CAAA;YAEA,MAAM,EAAEF,OAAO,EAAE,GAAGH,eAAeM,KAAK,CAAC,MAAMf,GAAAA,CAAIgB,IAAI,EAAA,CAAA;YACvDzG,MAAO6D,CAAAA,GAAG,CAAC0B,IAAI,CAAC,CAAC,uCAAuC,EAAEc,OAAQvD,CAAAA,MAAM,CAAC,MAAM,CAAC,CAAA;;;;;YAMhF,OAAOmB,UAAAA,CAAWyC,MAAM,CAAC,CAACC,eAAe,EAAEzC,aAAa,EAAE,EAAE0C,WAAAA,GAAAA;AAC1DD,gBAAAA,aAAa,CAACzC,aAAAA,CAAc,GAAGmC,OAAO,CAACO,WAAY,CAAA;gBACnD,OAAOD,aAAAA;AACT,aAAA,EAAG,IAAI5B,KAAM5C,CAAAA,KAAAA,CAAMW,MAAM,CAAA,CAAEkC,IAAI,CAAC,IAAA,CAAA,CAAA;AAClC;AACF,KAAA;AACF;;;;"}
+{"version":3,"file":"ai-metadata.mjs","sources":["../../../server/src/services/ai-metadata.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { z } from 'zod';\nimport { InputFile, File } from '../types';\nimport { Settings } from '../controllers/validation/admin/settings';\nimport { getService } from '../utils';\nimport { buildFormDataFromFiles } from '../utils/images';\n\n/**\n * Supported image types for AI metadata generation\n * @see https://ai.google.dev/gemini-api/docs/image-understanding\n */\nconst SUPPORTED_IMAGE_TYPES = [\n  'image/png',\n  'image/jpeg',\n  'image/webp',\n  'image/heic',\n  'image/heif',\n] as const;\n\nconst createAIMetadataService = ({ strapi }: { strapi: Core.Strapi }) => {\n  const aiServerUrl = process.env.STRAPI_AI_URL || 'https://strapi-ai.apps.strapi.io';\n\n  return {\n    async isEnabled() {\n      // Check if user disabled AI features globally\n      const isAIEnabled = strapi.config.get('admin.ai.enabled', true);\n      if (!isAIEnabled) {\n        return false;\n      }\n\n      // Check if the user's license grants access to AI features\n      const hasAccess = strapi.ee.features.isEnabled('cms-ai');\n      if (!hasAccess) {\n        return false;\n      }\n\n      // Check if feature is specifically enabled, defaulting to true\n      const settings: Settings = await strapi.plugin('upload').service('upload').getSettings();\n      const aiMetadata: boolean = settings.aiMetadata ?? true;\n\n      return aiMetadata;\n    },\n\n    async countImagesWithoutMetadata() {\n      const imagesWithoutMetadataCountPromise = strapi.db.query('plugin::upload.file').count({\n        where: {\n          mime: {\n            $in: SUPPORTED_IMAGE_TYPES,\n          },\n          $or: [\n            { alternativeText: { $null: true } },\n            { alternativeText: '' },\n            { caption: { $null: true } },\n            { caption: '' },\n          ],\n        },\n      });\n\n      const totalImagesPromise = strapi.db.query('plugin::upload.file').count({\n        where: {\n          mime: {\n            $in: SUPPORTED_IMAGE_TYPES,\n          },\n        },\n      });\n\n      const [imagesWithoutMetadataCount, totalImages] = await Promise.all([\n        imagesWithoutMetadataCountPromise,\n        totalImagesPromise,\n      ]);\n\n      return { imagesWithoutMetadataCount, totalImages };\n    },\n\n    /**\n     * Update files with AI-generated metadata\n     * Shared logic used by both upload flow and retroactive processing\n     */\n    async updateFilesWithAIMetadata(\n      files: File[],\n      metadataResults: Array<{ altText: string; caption: string } | null>,\n      user: { id: string | number }\n    ) {\n      const uploadService = strapi.plugin('upload').service('upload');\n\n      await Promise.all(\n        files.map(async (file, index) => {\n          const aiMetadata = metadataResults[index];\n          if (aiMetadata) {\n            // Only update fields that are missing (null or empty string)\n            const updateData: { alternativeText?: string; caption?: string } = {};\n\n            if (!file.alternativeText || file.alternativeText === '') {\n              updateData.alternativeText = aiMetadata.altText;\n            }\n\n            if (!file.caption || file.caption === '') {\n              updateData.caption = aiMetadata.caption;\n            }\n\n            // Only update if there are fields to update\n            if (Object.keys(updateData).length > 0) {\n              await uploadService.updateFileInfo(file.id, updateData, { user });\n\n              // Update in-memory file object (needed for upload flow response)\n              if (updateData.alternativeText !== undefined) {\n                file.alternativeText = updateData.alternativeText;\n              }\n              if (updateData.caption !== undefined) {\n                file.caption = updateData.caption;\n              }\n            }\n          }\n        })\n      );\n    },\n\n    /**\n     * Process existing files with job tracking for progress updates\n     */\n    async processExistingFiles(jobId: number, user: { id: string | number }): Promise<void> {\n      const jobService = getService('aiMetadataJobs');\n\n      try {\n        // Mark as processing\n        await jobService.updateJob(jobId, { status: 'processing' });\n\n        // Query all images without metadata\n        const files: File[] = await strapi.db.query('plugin::upload.file').findMany({\n          where: {\n            mime: {\n              $in: SUPPORTED_IMAGE_TYPES,\n            },\n            $or: [\n              { alternativeText: { $null: true } },\n              { alternativeText: '' },\n              { caption: { $null: true } },\n              { caption: '' },\n            ],\n          },\n        });\n\n        if (files.length === 0) {\n          await jobService.updateJob(jobId, {\n            status: 'completed',\n            completedAt: new Date(),\n          });\n          return;\n        }\n\n        // Process all files at once\n        const metadataResults = await this.processFiles(files);\n        await this.updateFilesWithAIMetadata(files, metadataResults, user);\n\n        // Mark as completed\n        await jobService.updateJob(jobId, {\n          status: 'completed',\n          completedAt: new Date(),\n        });\n      } catch (error) {\n        strapi.log.error('AI metadata job failed', {\n          jobId,\n          error: error instanceof Error ? error.message : String(error),\n        });\n\n        await jobService.updateJob(jobId, {\n          status: 'failed',\n          completedAt: new Date(),\n        });\n      }\n    },\n\n    /**\n     * Processes provided files for AI metadata generation\n     */\n    async processFiles(files: File[]): Promise<Array<{ altText: string; caption: string } | null>> {\n      if (!(await this.isEnabled()) || !aiServerUrl) {\n        throw new Error('AI Metadata service is not enabled');\n      }\n\n      // Filter for image files only and track their original positions\n      // We need to maintain the original indices so we can map AI results back correctly\n      const imageFiles = files\n        .map((file, index) => ({ file, originalIndex: index }))\n        .filter(({ file }) => file.mime?.startsWith('image/'));\n\n      // Convert filtered image files to InputFile format (uses thumbnails when available)\n      const imageInputFiles = imageFiles.map(({ file }) => {\n        const thumbnail = (file.formats as any)?.thumbnail;\n        return {\n          filepath: thumbnail?.url || file.url || '',\n          mimetype: file.mime,\n          originalFilename: file.name,\n          size: thumbnail?.size || file.size,\n          provider: file.provider,\n        } as InputFile;\n      });\n\n      // If no image files, return sparse array with all nulls to avoid calling the AI server\n      // This maintains the same array length as input files for proper index alignment\n      if (imageFiles.length === 0) {\n        return new Array(files.length).fill(null);\n      }\n\n      const formData = await buildFormDataFromFiles(\n        imageInputFiles,\n        strapi.config.get('server.absoluteUrl'),\n        strapi.log\n      );\n\n      let token: string;\n      try {\n        const tokenData = await strapi.get('ai').getAiToken();\n        token = tokenData.token;\n      } catch (error) {\n        throw new Error('Failed to retrieve AI token', {\n          cause: error instanceof Error ? error : undefined,\n        });\n      }\n\n      strapi.log.http('Contacting AI Server for media metadata generation', {\n        aiServerUrl,\n        imageCount: imageFiles.length,\n      });\n\n      const res = await fetch(`${aiServerUrl}/media-library/generate-metadata`, {\n        method: 'POST',\n        body: formData,\n        headers: {\n          Authorization: `Bearer ${token}`,\n        },\n      });\n\n      if (!res.ok) {\n        const errorText = await res.text();\n        throw Error(`AI metadata generation failed`, { cause: errorText });\n      }\n\n      const responseSchema = z.object({\n        results: z.array(\n          z.object({\n            altText: z.string(),\n            caption: z.string(),\n          })\n        ),\n      });\n\n      const { results } = responseSchema.parse(await res.json());\n      strapi.log.http(`AI generated metadata successfully for ${results.length} files`);\n\n      // Create sparse array with results at original indices\n      // Example: files=[img1, pdf, img2] -> imageFiles=[{img1, index:0}, {img2, index:2}]\n      // AI results=[meta1, meta2] -> sparse=[meta1, null, meta2]\n      // This ensures metadata[i] corresponds to files[i], with null for non-images\n      return imageFiles.reduce((sparseResults, { originalIndex }, resultIndex) => {\n        sparseResults[originalIndex] = results[resultIndex];\n        return sparseResults;\n      }, new Array(files.length).fill(null));\n    },\n  };\n};\n\nexport { createAIMetadataService };\n"],"names":["SUPPORTED_IMAGE_TYPES","createAIMetadataService","strapi","aiServerUrl","process","env","STRAPI_AI_URL","isEnabled","isAIEnabled","config","get","hasAccess","ee","features","settings","plugin","service","getSettings","aiMetadata","countImagesWithoutMetadata","imagesWithoutMetadataCountPromise","db","query","count","where","mime","$in","$or","alternativeText","$null","caption","totalImagesPromise","imagesWithoutMetadataCount","totalImages","Promise","all","updateFilesWithAIMetadata","files","metadataResults","user","uploadService","map","file","index","updateData","altText","Object","keys","length","updateFileInfo","id","undefined","processExistingFiles","jobId","jobService","getService","updateJob","status","findMany","completedAt","Date","processFiles","error","log","Error","message","String","imageFiles","originalIndex","filter","startsWith","imageInputFiles","thumbnail","formats","filepath","url","mimetype","originalFilename","name","size","provider","Array","fill","formData","buildFormDataFromFiles","token","tokenData","getAiToken","cause","http","imageCount","res","fetch","method","body","headers","Authorization","ok","errorText","text","responseSchema","z","object","results","array","string","parse","json","reduce","sparseResults","resultIndex"],"mappings":";;;;AAOA;;;AAGC,IACD,MAAMA,qBAAAA,GAAwB;AAC5B,IAAA,WAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA,YAAA;AACA,IAAA;AACD,CAAA;AAED,MAAMC,uBAAAA,GAA0B,CAAC,EAAEC,MAAM,EAA2B,GAAA;AAClE,IAAA,MAAMC,WAAAA,GAAcC,OAAAA,CAAQC,GAAG,CAACC,aAAa,IAAI,kCAAA;IAEjD,OAAO;QACL,MAAMC,SAAAA,CAAAA,GAAAA;;AAEJ,YAAA,MAAMC,cAAcN,MAAAA,CAAOO,MAAM,CAACC,GAAG,CAAC,kBAAA,EAAoB,IAAA,CAAA;AAC1D,YAAA,IAAI,CAACF,WAAAA,EAAa;gBAChB,OAAO,KAAA;AACT,YAAA;;AAGA,YAAA,MAAMG,YAAYT,MAAAA,CAAOU,EAAE,CAACC,QAAQ,CAACN,SAAS,CAAC,QAAA,CAAA;AAC/C,YAAA,IAAI,CAACI,SAAAA,EAAW;gBACd,OAAO,KAAA;AACT,YAAA;;YAGA,MAAMG,QAAAA,GAAqB,MAAMZ,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUC,OAAO,CAAC,QAAA,CAAA,CAAUC,WAAW,EAAA;YACtF,MAAMC,UAAAA,GAAsBJ,QAAAA,CAASI,UAAU,IAAI,IAAA;YAEnD,OAAOA,UAAAA;AACT,QAAA,CAAA;QAEA,MAAMC,0BAAAA,CAAAA,GAAAA;YACJ,MAAMC,iCAAAA,GAAoClB,OAAOmB,EAAE,CAACC,KAAK,CAAC,qBAAA,CAAA,CAAuBC,KAAK,CAAC;gBACrFC,KAAAA,EAAO;oBACLC,IAAAA,EAAM;wBACJC,GAAAA,EAAK1B;AACP,qBAAA;oBACA2B,GAAAA,EAAK;AACH,wBAAA;4BAAEC,eAAAA,EAAiB;gCAAEC,KAAAA,EAAO;AAAK;AAAE,yBAAA;AACnC,wBAAA;4BAAED,eAAAA,EAAiB;AAAG,yBAAA;AACtB,wBAAA;4BAAEE,OAAAA,EAAS;gCAAED,KAAAA,EAAO;AAAK;AAAE,yBAAA;AAC3B,wBAAA;4BAAEC,OAAAA,EAAS;AAAG;AACf;AACH;AACF,aAAA,CAAA;YAEA,MAAMC,kBAAAA,GAAqB7B,OAAOmB,EAAE,CAACC,KAAK,CAAC,qBAAA,CAAA,CAAuBC,KAAK,CAAC;gBACtEC,KAAAA,EAAO;oBACLC,IAAAA,EAAM;wBACJC,GAAAA,EAAK1B;AACP;AACF;AACF,aAAA,CAAA;AAEA,YAAA,MAAM,CAACgC,0BAAAA,EAA4BC,WAAAA,CAAY,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;AAClEf,gBAAAA,iCAAAA;AACAW,gBAAAA;AACD,aAAA,CAAA;YAED,OAAO;AAAEC,gBAAAA,0BAAAA;AAA4BC,gBAAAA;AAAY,aAAA;AACnD,QAAA,CAAA;AAEA;;;AAGC,QACD,MAAMG,yBAAAA,CAAAA,CACJC,KAAa,EACbC,eAAmE,EACnEC,IAA6B,EAAA;AAE7B,YAAA,MAAMC,gBAAgBtC,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUC,OAAO,CAAC,QAAA,CAAA;AAEtD,YAAA,MAAMkB,QAAQC,GAAG,CACfE,MAAMI,GAAG,CAAC,OAAOC,IAAAA,EAAMC,KAAAA,GAAAA;gBACrB,MAAMzB,UAAAA,GAAaoB,eAAe,CAACK,KAAAA,CAAM;AACzC,gBAAA,IAAIzB,UAAAA,EAAY;;AAEd,oBAAA,MAAM0B,aAA6D,EAAC;AAEpE,oBAAA,IAAI,CAACF,IAAAA,CAAKd,eAAe,IAAIc,IAAAA,CAAKd,eAAe,KAAK,EAAA,EAAI;wBACxDgB,UAAAA,CAAWhB,eAAe,GAAGV,UAAAA,CAAW2B,OAAO;AACjD,oBAAA;AAEA,oBAAA,IAAI,CAACH,IAAAA,CAAKZ,OAAO,IAAIY,IAAAA,CAAKZ,OAAO,KAAK,EAAA,EAAI;wBACxCc,UAAAA,CAAWd,OAAO,GAAGZ,UAAAA,CAAWY,OAAO;AACzC,oBAAA;;AAGA,oBAAA,IAAIgB,OAAOC,IAAI,CAACH,UAAAA,CAAAA,CAAYI,MAAM,GAAG,CAAA,EAAG;AACtC,wBAAA,MAAMR,cAAcS,cAAc,CAACP,IAAAA,CAAKQ,EAAE,EAAEN,UAAAA,EAAY;AAAEL,4BAAAA;AAAK,yBAAA,CAAA;;wBAG/D,IAAIK,UAAAA,CAAWhB,eAAe,KAAKuB,SAAAA,EAAW;4BAC5CT,IAAAA,CAAKd,eAAe,GAAGgB,UAAAA,CAAWhB,eAAe;AACnD,wBAAA;wBACA,IAAIgB,UAAAA,CAAWd,OAAO,KAAKqB,SAAAA,EAAW;4BACpCT,IAAAA,CAAKZ,OAAO,GAAGc,UAAAA,CAAWd,OAAO;AACnC,wBAAA;AACF,oBAAA;AACF,gBAAA;AACF,YAAA,CAAA,CAAA,CAAA;AAEJ,QAAA,CAAA;AAEA;;AAEC,QACD,MAAMsB,oBAAAA,CAAAA,CAAqBC,KAAa,EAAEd,IAA6B,EAAA;AACrE,YAAA,MAAMe,aAAaC,UAAAA,CAAW,gBAAA,CAAA;YAE9B,IAAI;;gBAEF,MAAMD,UAAAA,CAAWE,SAAS,CAACH,KAAAA,EAAO;oBAAEI,MAAAA,EAAQ;AAAa,iBAAA,CAAA;;gBAGzD,MAAMpB,KAAAA,GAAgB,MAAMnC,MAAAA,CAAOmB,EAAE,CAACC,KAAK,CAAC,qBAAA,CAAA,CAAuBoC,QAAQ,CAAC;oBAC1ElC,KAAAA,EAAO;wBACLC,IAAAA,EAAM;4BACJC,GAAAA,EAAK1B;AACP,yBAAA;wBACA2B,GAAAA,EAAK;AACH,4BAAA;gCAAEC,eAAAA,EAAiB;oCAAEC,KAAAA,EAAO;AAAK;AAAE,6BAAA;AACnC,4BAAA;gCAAED,eAAAA,EAAiB;AAAG,6BAAA;AACtB,4BAAA;gCAAEE,OAAAA,EAAS;oCAAED,KAAAA,EAAO;AAAK;AAAE,6BAAA;AAC3B,4BAAA;gCAAEC,OAAAA,EAAS;AAAG;AACf;AACH;AACF,iBAAA,CAAA;gBAEA,IAAIO,KAAAA,CAAMW,MAAM,KAAK,CAAA,EAAG;oBACtB,MAAMM,UAAAA,CAAWE,SAAS,CAACH,KAAAA,EAAO;wBAChCI,MAAAA,EAAQ,WAAA;AACRE,wBAAAA,WAAAA,EAAa,IAAIC,IAAAA;AACnB,qBAAA,CAAA;AACA,oBAAA;AACF,gBAAA;;AAGA,gBAAA,MAAMtB,eAAAA,GAAkB,MAAM,IAAI,CAACuB,YAAY,CAACxB,KAAAA,CAAAA;AAChD,gBAAA,MAAM,IAAI,CAACD,yBAAyB,CAACC,OAAOC,eAAAA,EAAiBC,IAAAA,CAAAA;;gBAG7D,MAAMe,UAAAA,CAAWE,SAAS,CAACH,KAAAA,EAAO;oBAChCI,MAAAA,EAAQ,WAAA;AACRE,oBAAAA,WAAAA,EAAa,IAAIC,IAAAA;AACnB,iBAAA,CAAA;AACF,YAAA,CAAA,CAAE,OAAOE,KAAAA,EAAO;AACd5D,gBAAAA,MAAAA,CAAO6D,GAAG,CAACD,KAAK,CAAC,wBAAA,EAA0B;AACzCT,oBAAAA,KAAAA;AACAS,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBE,KAAAA,GAAQF,KAAAA,CAAMG,OAAO,GAAGC,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;gBAEA,MAAMR,UAAAA,CAAWE,SAAS,CAACH,KAAAA,EAAO;oBAChCI,MAAAA,EAAQ,QAAA;AACRE,oBAAAA,WAAAA,EAAa,IAAIC,IAAAA;AACnB,iBAAA,CAAA;AACF,YAAA;AACF,QAAA,CAAA;AAEA;;QAGA,MAAMC,cAAaxB,KAAa,EAAA;AAC9B,YAAA,IAAI,CAAE,MAAM,IAAI,CAAC9B,SAAS,EAAA,IAAO,CAACJ,WAAAA,EAAa;AAC7C,gBAAA,MAAM,IAAI6D,KAAAA,CAAM,oCAAA,CAAA;AAClB,YAAA;;;AAIA,YAAA,MAAMG,aAAa9B,KAAAA,CAChBI,GAAG,CAAC,CAACC,IAAAA,EAAMC,SAAW;AAAED,oBAAAA,IAAAA;oBAAM0B,aAAAA,EAAezB;iBAAM,CAAA,CAAA,CACnD0B,MAAM,CAAC,CAAC,EAAE3B,IAAI,EAAE,GAAKA,IAAAA,CAAKjB,IAAI,EAAE6C,UAAAA,CAAW,QAAA,CAAA,CAAA;;AAG9C,YAAA,MAAMC,kBAAkBJ,UAAAA,CAAW1B,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAA;gBAC9C,MAAM8B,SAAAA,GAAa9B,IAAAA,CAAK+B,OAAO,EAAUD,SAAAA;gBACzC,OAAO;AACLE,oBAAAA,QAAAA,EAAUF,SAAAA,EAAWG,GAAAA,IAAOjC,IAAAA,CAAKiC,GAAG,IAAI,EAAA;AACxCC,oBAAAA,QAAAA,EAAUlC,KAAKjB,IAAI;AACnBoD,oBAAAA,gBAAAA,EAAkBnC,KAAKoC,IAAI;oBAC3BC,IAAAA,EAAMP,SAAAA,EAAWO,IAAAA,IAAQrC,IAAAA,CAAKqC,IAAI;AAClCC,oBAAAA,QAAAA,EAAUtC,KAAKsC;AACjB,iBAAA;AACF,YAAA,CAAA,CAAA;;;YAIA,IAAIb,UAAAA,CAAWnB,MAAM,KAAK,CAAA,EAAG;AAC3B,gBAAA,OAAO,IAAIiC,KAAAA,CAAM5C,KAAAA,CAAMW,MAAM,CAAA,CAAEkC,IAAI,CAAC,IAAA,CAAA;AACtC,YAAA;YAEA,MAAMC,QAAAA,GAAW,MAAMC,sBAAAA,CACrBb,eAAAA,EACArE,MAAAA,CAAOO,MAAM,CAACC,GAAG,CAAC,oBAAA,CAAA,EAClBR,MAAAA,CAAO6D,GAAG,CAAA;YAGZ,IAAIsB,KAAAA;YACJ,IAAI;AACF,gBAAA,MAAMC,YAAY,MAAMpF,MAAAA,CAAOQ,GAAG,CAAC,MAAM6E,UAAU,EAAA;AACnDF,gBAAAA,KAAAA,GAAQC,UAAUD,KAAK;AACzB,YAAA,CAAA,CAAE,OAAOvB,KAAAA,EAAO;gBACd,MAAM,IAAIE,MAAM,6BAAA,EAA+B;oBAC7CwB,KAAAA,EAAO1B,KAAAA,YAAiBE,QAAQF,KAAAA,GAAQX;AAC1C,iBAAA,CAAA;AACF,YAAA;AAEAjD,YAAAA,MAAAA,CAAO6D,GAAG,CAAC0B,IAAI,CAAC,oDAAA,EAAsD;AACpEtF,gBAAAA,WAAAA;AACAuF,gBAAAA,UAAAA,EAAYvB,WAAWnB;AACzB,aAAA,CAAA;AAEA,YAAA,MAAM2C,MAAM,MAAMC,KAAAA,CAAM,GAAGzF,WAAAA,CAAY,gCAAgC,CAAC,EAAE;gBACxE0F,MAAAA,EAAQ,MAAA;gBACRC,IAAAA,EAAMX,QAAAA;gBACNY,OAAAA,EAAS;oBACPC,aAAAA,EAAe,CAAC,OAAO,EAAEX,KAAAA,CAAAA;AAC3B;AACF,aAAA,CAAA;YAEA,IAAI,CAACM,GAAAA,CAAIM,EAAE,EAAE;gBACX,MAAMC,SAAAA,GAAY,MAAMP,GAAAA,CAAIQ,IAAI,EAAA;AAChC,gBAAA,MAAMnC,KAAAA,CAAM,CAAC,6BAA6B,CAAC,EAAE;oBAAEwB,KAAAA,EAAOU;AAAU,iBAAA,CAAA;AAClE,YAAA;YAEA,MAAME,cAAAA,GAAiBC,CAAAA,CAAEC,MAAM,CAAC;AAC9BC,gBAAAA,OAAAA,EAASF,CAAAA,CAAEG,KAAK,CACdH,CAAAA,CAAEC,MAAM,CAAC;AACPzD,oBAAAA,OAAAA,EAASwD,EAAEI,MAAM,EAAA;AACjB3E,oBAAAA,OAAAA,EAASuE,EAAEI,MAAM;AACnB,iBAAA,CAAA;AAEJ,aAAA,CAAA;YAEA,MAAM,EAAEF,OAAO,EAAE,GAAGH,eAAeM,KAAK,CAAC,MAAMf,GAAAA,CAAIgB,IAAI,EAAA,CAAA;YACvDzG,MAAAA,CAAO6D,GAAG,CAAC0B,IAAI,CAAC,CAAC,uCAAuC,EAAEc,OAAAA,CAAQvD,MAAM,CAAC,MAAM,CAAC,CAAA;;;;;YAMhF,OAAOmB,UAAAA,CAAWyC,MAAM,CAAC,CAACC,eAAe,EAAEzC,aAAa,EAAE,EAAE0C,WAAAA,GAAAA;AAC1DD,gBAAAA,aAAa,CAACzC,aAAAA,CAAc,GAAGmC,OAAO,CAACO,WAAAA,CAAY;gBACnD,OAAOD,aAAAA;AACT,YAAA,CAAA,EAAG,IAAI5B,KAAAA,CAAM5C,KAAAA,CAAMW,MAAM,CAAA,CAAEkC,IAAI,CAAC,IAAA,CAAA,CAAA;AAClC,QAAA;AACF,KAAA;AACF;;;;"}

package/dist/server/services/api-upload-folder.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-upload-folder.js","sources":["../../../server/src/services/api-upload-folder.ts"],"sourcesContent":["import { isNil, get } from 'lodash/fp';\nimport { getService } from '../utils';\nimport { FOLDER_MODEL_UID, API_UPLOAD_FOLDER_BASE_NAME } from '../constants';\n\nconst getStore = () => strapi.store({ type: 'plugin', name: 'upload', key: 'api-folder' });\n\nconst createApiUploadFolder = async () => {\n  let name = API_UPLOAD_FOLDER_BASE_NAME;\n  const folderService = getService('folder');\n\n  let exists = true;\n  let index = 1;\n  while (exists) {\n    exists = await folderService.exists({ name, parent: null });\n    if (exists) {\n      name = `${API_UPLOAD_FOLDER_BASE_NAME} (${index})`;\n      index += 1;\n    }\n  }\n\n  const folder = await folderService.create({ name });\n\n  await getStore().set({ value: { id: folder.id } });\n\n  return folder;\n};\n\nconst getAPIUploadFolder = async () => {\n  const storeValue = await getStore().get({});\n  const folderId = get('id', storeValue);\n\n  const folder = folderId\n    ? await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } })\n    : null;\n\n  return isNil(folder) ? createApiUploadFolder() : folder;\n};\n\nexport default {\n  getAPIUploadFolder,\n};\n"],"names":["getStore","strapi","store","type","name","key","createApiUploadFolder","API_UPLOAD_FOLDER_BASE_NAME","folderService","getService","exists","index","parent","folder","create","set","value","id","getAPIUploadFolder","storeValue","get","folderId","db","query","FOLDER_MODEL_UID","findOne","where","isNil"],"mappings":";;;;;;AAIA,MAAMA,QAAW,GAAA,IAAMC,MAAOC,CAAAA,KAAK,CAAC;QAAEC,IAAM,EAAA,QAAA;QAAUC,IAAM,EAAA,QAAA;QAAUC,GAAK,EAAA;AAAa,KAAA,CAAA;AAExF,MAAMC,qBAAwB,GAAA,UAAA;AAC5B,IAAA,IAAIF,IAAOG,GAAAA,qCAAAA;AACX,IAAA,MAAMC,gBAAgBC,gBAAW,CAAA,QAAA,CAAA;AAEjC,IAAA,IAAIC,MAAS,GAAA,IAAA;AACb,IAAA,IAAIC,OAAQ,GAAA,CAAA;AACZ,IAAA,MAAOD,MAAQ,CAAA;QACbA,MAAS,GAAA,MAAMF,aAAcE,CAAAA,MAAM,CAAC;AAAEN,YAAAA,IAAAA;YAAMQ,MAAQ,EAAA;AAAK,SAAA,CAAA;AACzD,QAAA,IAAIF,MAAQ,EAAA;AACVN,YAAAA,IAAAA,GAAO,GAAGG,qCAA4B,CAAA,EAAE,EAAEI,OAAAA,CAAM,CAAC,CAAC;YAClDA,OAAS,IAAA,CAAA;AACX;AACF;AAEA,IAAA,MAAME,MAAS,GAAA,MAAML,aAAcM,CAAAA,MAAM,CAAC;AAAEV,QAAAA;AAAK,KAAA,CAAA;IAEjD,MAAMJ,QAAAA,EAAAA,CAAWe,GAAG,CAAC;QAAEC,KAAO,EAAA;AAAEC,YAAAA,EAAAA,EAAIJ,OAAOI;AAAG;AAAE,KAAA,CAAA;IAEhD,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,kBAAqB,GAAA,UAAA;AACzB,IAAA,MAAMC,UAAa,GAAA,MAAMnB,QAAWoB,EAAAA,CAAAA,GAAG,CAAC,EAAC,CAAA;IACzC,MAAMC,QAAAA,GAAWD,OAAI,IAAMD,EAAAA,UAAAA,CAAAA;IAE3B,MAAMN,MAAAA,GAASQ,QACX,GAAA,MAAMpB,MAAOqB,CAAAA,EAAE,CAACC,KAAK,CAACC,0BAAkBC,CAAAA,CAAAA,OAAO,CAAC;QAAEC,KAAO,EAAA;YAAET,EAAII,EAAAA;AAAS;KACxE,CAAA,GAAA,IAAA;IAEJ,OAAOM,QAAAA,CAAMd,UAAUP,qBAA0BO,EAAAA,GAAAA,MAAAA;AACnD,CAAA;AAEA,sBAAe;AACbK,IAAAA;AACF,CAAE;;;;"}
+{"version":3,"file":"api-upload-folder.js","sources":["../../../server/src/services/api-upload-folder.ts"],"sourcesContent":["import { isNil, get } from 'lodash/fp';\nimport { getService } from '../utils';\nimport { FOLDER_MODEL_UID, API_UPLOAD_FOLDER_BASE_NAME } from '../constants';\n\nconst getStore = () => strapi.store({ type: 'plugin', name: 'upload', key: 'api-folder' });\n\nconst createApiUploadFolder = async () => {\n  let name = API_UPLOAD_FOLDER_BASE_NAME;\n  const folderService = getService('folder');\n\n  let exists = true;\n  let index = 1;\n  while (exists) {\n    exists = await folderService.exists({ name, parent: null });\n    if (exists) {\n      name = `${API_UPLOAD_FOLDER_BASE_NAME} (${index})`;\n      index += 1;\n    }\n  }\n\n  const folder = await folderService.create({ name });\n\n  await getStore().set({ value: { id: folder.id } });\n\n  return folder;\n};\n\nconst getAPIUploadFolder = async () => {\n  const storeValue = await getStore().get({});\n  const folderId = get('id', storeValue);\n\n  const folder = folderId\n    ? await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } })\n    : null;\n\n  return isNil(folder) ? createApiUploadFolder() : folder;\n};\n\nexport default {\n  getAPIUploadFolder,\n};\n"],"names":["getStore","strapi","store","type","name","key","createApiUploadFolder","API_UPLOAD_FOLDER_BASE_NAME","folderService","getService","exists","index","parent","folder","create","set","value","id","getAPIUploadFolder","storeValue","get","folderId","db","query","FOLDER_MODEL_UID","findOne","where","isNil"],"mappings":";;;;;;AAIA,MAAMA,QAAAA,GAAW,IAAMC,MAAAA,CAAOC,KAAK,CAAC;QAAEC,IAAAA,EAAM,QAAA;QAAUC,IAAAA,EAAM,QAAA;QAAUC,GAAAA,EAAK;AAAa,KAAA,CAAA;AAExF,MAAMC,qBAAAA,GAAwB,UAAA;AAC5B,IAAA,IAAIF,IAAAA,GAAOG,qCAAAA;AACX,IAAA,MAAMC,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AAEjC,IAAA,IAAIC,MAAAA,GAAS,IAAA;AACb,IAAA,IAAIC,OAAAA,GAAQ,CAAA;AACZ,IAAA,MAAOD,MAAAA,CAAQ;QACbA,MAAAA,GAAS,MAAMF,aAAAA,CAAcE,MAAM,CAAC;AAAEN,YAAAA,IAAAA;YAAMQ,MAAAA,EAAQ;AAAK,SAAA,CAAA;AACzD,QAAA,IAAIF,MAAAA,EAAQ;AACVN,YAAAA,IAAAA,GAAO,GAAGG,qCAAAA,CAA4B,EAAE,EAAEI,OAAAA,CAAM,CAAC,CAAC;YAClDA,OAAAA,IAAS,CAAA;AACX,QAAA;AACF,IAAA;AAEA,IAAA,MAAME,MAAAA,GAAS,MAAML,aAAAA,CAAcM,MAAM,CAAC;AAAEV,QAAAA;AAAK,KAAA,CAAA;IAEjD,MAAMJ,QAAAA,EAAAA,CAAWe,GAAG,CAAC;QAAEC,KAAAA,EAAO;AAAEC,YAAAA,EAAAA,EAAIJ,OAAOI;AAAG;AAAE,KAAA,CAAA;IAEhD,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAa,MAAMnB,QAAAA,EAAAA,CAAWoB,GAAG,CAAC,EAAC,CAAA;IACzC,MAAMC,QAAAA,GAAWD,OAAI,IAAA,EAAMD,UAAAA,CAAAA;IAE3B,MAAMN,MAAAA,GAASQ,QAAAA,GACX,MAAMpB,MAAAA,CAAOqB,EAAE,CAACC,KAAK,CAACC,0BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAAEC,KAAAA,EAAO;YAAET,EAAAA,EAAII;AAAS;KAAE,CAAA,GAC1E,IAAA;IAEJ,OAAOM,QAAAA,CAAMd,UAAUP,qBAAAA,EAAAA,GAA0BO,MAAAA;AACnD,CAAA;AAEA,sBAAe;AACbK,IAAAA;AACF,CAAA;;;;"}

package/dist/server/services/api-upload-folder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"api-upload-folder.mjs","sources":["../../../server/src/services/api-upload-folder.ts"],"sourcesContent":["import { isNil, get } from 'lodash/fp';\nimport { getService } from '../utils';\nimport { FOLDER_MODEL_UID, API_UPLOAD_FOLDER_BASE_NAME } from '../constants';\n\nconst getStore = () => strapi.store({ type: 'plugin', name: 'upload', key: 'api-folder' });\n\nconst createApiUploadFolder = async () => {\n  let name = API_UPLOAD_FOLDER_BASE_NAME;\n  const folderService = getService('folder');\n\n  let exists = true;\n  let index = 1;\n  while (exists) {\n    exists = await folderService.exists({ name, parent: null });\n    if (exists) {\n      name = `${API_UPLOAD_FOLDER_BASE_NAME} (${index})`;\n      index += 1;\n    }\n  }\n\n  const folder = await folderService.create({ name });\n\n  await getStore().set({ value: { id: folder.id } });\n\n  return folder;\n};\n\nconst getAPIUploadFolder = async () => {\n  const storeValue = await getStore().get({});\n  const folderId = get('id', storeValue);\n\n  const folder = folderId\n    ? await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } })\n    : null;\n\n  return isNil(folder) ? createApiUploadFolder() : folder;\n};\n\nexport default {\n  getAPIUploadFolder,\n};\n"],"names":["getStore","strapi","store","type","name","key","createApiUploadFolder","API_UPLOAD_FOLDER_BASE_NAME","folderService","getService","exists","index","parent","folder","create","set","value","id","getAPIUploadFolder","storeValue","get","folderId","db","query","FOLDER_MODEL_UID","findOne","where","isNil"],"mappings":";;;;AAIA,MAAMA,QAAW,GAAA,IAAMC,MAAOC,CAAAA,KAAK,CAAC;QAAEC,IAAM,EAAA,QAAA;QAAUC,IAAM,EAAA,QAAA;QAAUC,GAAK,EAAA;AAAa,KAAA,CAAA;AAExF,MAAMC,qBAAwB,GAAA,UAAA;AAC5B,IAAA,IAAIF,IAAOG,GAAAA,2BAAAA;AACX,IAAA,MAAMC,gBAAgBC,UAAW,CAAA,QAAA,CAAA;AAEjC,IAAA,IAAIC,MAAS,GAAA,IAAA;AACb,IAAA,IAAIC,KAAQ,GAAA,CAAA;AACZ,IAAA,MAAOD,MAAQ,CAAA;QACbA,MAAS,GAAA,MAAMF,aAAcE,CAAAA,MAAM,CAAC;AAAEN,YAAAA,IAAAA;YAAMQ,MAAQ,EAAA;AAAK,SAAA,CAAA;AACzD,QAAA,IAAIF,MAAQ,EAAA;AACVN,YAAAA,IAAAA,GAAO,GAAGG,2BAA4B,CAAA,EAAE,EAAEI,KAAAA,CAAM,CAAC,CAAC;YAClDA,KAAS,IAAA,CAAA;AACX;AACF;AAEA,IAAA,MAAME,MAAS,GAAA,MAAML,aAAcM,CAAAA,MAAM,CAAC;AAAEV,QAAAA;AAAK,KAAA,CAAA;IAEjD,MAAMJ,QAAAA,EAAAA,CAAWe,GAAG,CAAC;QAAEC,KAAO,EAAA;AAAEC,YAAAA,EAAAA,EAAIJ,OAAOI;AAAG;AAAE,KAAA,CAAA;IAEhD,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,kBAAqB,GAAA,UAAA;AACzB,IAAA,MAAMC,UAAa,GAAA,MAAMnB,QAAWoB,EAAAA,CAAAA,GAAG,CAAC,EAAC,CAAA;IACzC,MAAMC,QAAAA,GAAWD,IAAI,IAAMD,EAAAA,UAAAA,CAAAA;IAE3B,MAAMN,MAAAA,GAASQ,QACX,GAAA,MAAMpB,MAAOqB,CAAAA,EAAE,CAACC,KAAK,CAACC,gBAAkBC,CAAAA,CAAAA,OAAO,CAAC;QAAEC,KAAO,EAAA;YAAET,EAAII,EAAAA;AAAS;KACxE,CAAA,GAAA,IAAA;IAEJ,OAAOM,KAAAA,CAAMd,UAAUP,qBAA0BO,EAAAA,GAAAA,MAAAA;AACnD,CAAA;AAEA,sBAAe;AACbK,IAAAA;AACF,CAAE;;;;"}
+{"version":3,"file":"api-upload-folder.mjs","sources":["../../../server/src/services/api-upload-folder.ts"],"sourcesContent":["import { isNil, get } from 'lodash/fp';\nimport { getService } from '../utils';\nimport { FOLDER_MODEL_UID, API_UPLOAD_FOLDER_BASE_NAME } from '../constants';\n\nconst getStore = () => strapi.store({ type: 'plugin', name: 'upload', key: 'api-folder' });\n\nconst createApiUploadFolder = async () => {\n  let name = API_UPLOAD_FOLDER_BASE_NAME;\n  const folderService = getService('folder');\n\n  let exists = true;\n  let index = 1;\n  while (exists) {\n    exists = await folderService.exists({ name, parent: null });\n    if (exists) {\n      name = `${API_UPLOAD_FOLDER_BASE_NAME} (${index})`;\n      index += 1;\n    }\n  }\n\n  const folder = await folderService.create({ name });\n\n  await getStore().set({ value: { id: folder.id } });\n\n  return folder;\n};\n\nconst getAPIUploadFolder = async () => {\n  const storeValue = await getStore().get({});\n  const folderId = get('id', storeValue);\n\n  const folder = folderId\n    ? await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } })\n    : null;\n\n  return isNil(folder) ? createApiUploadFolder() : folder;\n};\n\nexport default {\n  getAPIUploadFolder,\n};\n"],"names":["getStore","strapi","store","type","name","key","createApiUploadFolder","API_UPLOAD_FOLDER_BASE_NAME","folderService","getService","exists","index","parent","folder","create","set","value","id","getAPIUploadFolder","storeValue","get","folderId","db","query","FOLDER_MODEL_UID","findOne","where","isNil"],"mappings":";;;;AAIA,MAAMA,QAAAA,GAAW,IAAMC,MAAAA,CAAOC,KAAK,CAAC;QAAEC,IAAAA,EAAM,QAAA;QAAUC,IAAAA,EAAM,QAAA;QAAUC,GAAAA,EAAK;AAAa,KAAA,CAAA;AAExF,MAAMC,qBAAAA,GAAwB,UAAA;AAC5B,IAAA,IAAIF,IAAAA,GAAOG,2BAAAA;AACX,IAAA,MAAMC,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AAEjC,IAAA,IAAIC,MAAAA,GAAS,IAAA;AACb,IAAA,IAAIC,KAAAA,GAAQ,CAAA;AACZ,IAAA,MAAOD,MAAAA,CAAQ;QACbA,MAAAA,GAAS,MAAMF,aAAAA,CAAcE,MAAM,CAAC;AAAEN,YAAAA,IAAAA;YAAMQ,MAAAA,EAAQ;AAAK,SAAA,CAAA;AACzD,QAAA,IAAIF,MAAAA,EAAQ;AACVN,YAAAA,IAAAA,GAAO,GAAGG,2BAAAA,CAA4B,EAAE,EAAEI,KAAAA,CAAM,CAAC,CAAC;YAClDA,KAAAA,IAAS,CAAA;AACX,QAAA;AACF,IAAA;AAEA,IAAA,MAAME,MAAAA,GAAS,MAAML,aAAAA,CAAcM,MAAM,CAAC;AAAEV,QAAAA;AAAK,KAAA,CAAA;IAEjD,MAAMJ,QAAAA,EAAAA,CAAWe,GAAG,CAAC;QAAEC,KAAAA,EAAO;AAAEC,YAAAA,EAAAA,EAAIJ,OAAOI;AAAG;AAAE,KAAA,CAAA;IAEhD,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,kBAAAA,GAAqB,UAAA;AACzB,IAAA,MAAMC,UAAAA,GAAa,MAAMnB,QAAAA,EAAAA,CAAWoB,GAAG,CAAC,EAAC,CAAA;IACzC,MAAMC,QAAAA,GAAWD,IAAI,IAAA,EAAMD,UAAAA,CAAAA;IAE3B,MAAMN,MAAAA,GAASQ,QAAAA,GACX,MAAMpB,MAAAA,CAAOqB,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAAEC,KAAAA,EAAO;YAAET,EAAAA,EAAII;AAAS;KAAE,CAAA,GAC1E,IAAA;IAEJ,OAAOM,KAAAA,CAAMd,UAAUP,qBAAAA,EAAAA,GAA0BO,MAAAA;AACnD,CAAA;AAEA,sBAAe;AACbK,IAAAA;AACF,CAAA;;;;"}

package/dist/server/services/extensions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../server/src/services/extensions/index.ts"],"sourcesContent":["import { async } from '@strapi/utils';\nimport { signEntityMedia } from './utils';\n\nconst signFileUrlsOnDocumentService = async () => {\n  const { provider } = strapi.plugins.upload;\n  const isPrivate = await provider.isPrivate();\n\n  // We only need to sign the file urls if the provider is private\n  if (!isPrivate) {\n    return;\n  }\n\n  strapi.documents.use(async (ctx, next) => {\n    const uid = ctx.uid;\n    const result: any = await next();\n\n    if (ctx.action === 'findMany') {\n      // Shape: [ entry ]\n      return async.map(result, (entry: any) => signEntityMedia(entry, uid));\n    }\n\n    if (\n      ctx.action === 'findFirst' ||\n      ctx.action === 'findOne' ||\n      ctx.action === 'create' ||\n      ctx.action === 'update'\n    ) {\n      // Shape: entry\n      return signEntityMedia(result, uid);\n    }\n\n    if (\n      ctx.action === 'delete' ||\n      ctx.action === 'clone' ||\n      ctx.action === 'publish' ||\n      ctx.action === 'unpublish' ||\n      ctx.action === 'discardDraft'\n    ) {\n      // Shape: { entries: [ entry ] }\n      // ...\n      return {\n        ...result,\n        entries: await async.map(result.entries, (entry: any) => signEntityMedia(entry, uid)),\n      };\n    }\n\n    return result;\n  });\n};\n\nexport default {\n  signFileUrlsOnDocumentService,\n};\n"],"names":["signFileUrlsOnDocumentService","provider","strapi","plugins","upload","isPrivate","documents","use","ctx","next","uid","result","action","async","map","entry","signEntityMedia","entries"],"mappings":";;;;;AAGA,MAAMA,6BAAgC,GAAA,UAAA;AACpC,IAAA,MAAM,EAAEC,QAAQ,EAAE,GAAGC,MAAOC,CAAAA,OAAO,CAACC,MAAM;IAC1C,MAAMC,SAAAA,GAAY,MAAMJ,QAAAA,CAASI,SAAS,EAAA;;AAG1C,IAAA,IAAI,CAACA,SAAW,EAAA;AACd,QAAA;AACF;AAEAH,IAAAA,MAAAA,CAAOI,SAAS,CAACC,GAAG,CAAC,OAAOC,GAAKC,EAAAA,IAAAA,GAAAA;QAC/B,MAAMC,GAAAA,GAAMF,IAAIE,GAAG;AACnB,QAAA,MAAMC,SAAc,MAAMF,IAAAA,EAAAA;QAE1B,IAAID,GAAAA,CAAII,MAAM,KAAK,UAAY,EAAA;;AAE7B,YAAA,OAAOC,YAAMC,GAAG,CAACH,QAAQ,CAACI,KAAAA,GAAeC,wBAAgBD,KAAOL,EAAAA,GAAAA,CAAAA,CAAAA;AAClE;AAEA,QAAA,IACEF,GAAII,CAAAA,MAAM,KAAK,WAAA,IACfJ,IAAII,MAAM,KAAK,SACfJ,IAAAA,GAAAA,CAAII,MAAM,KAAK,QAAA,IACfJ,GAAII,CAAAA,MAAM,KAAK,QACf,EAAA;;AAEA,YAAA,OAAOI,wBAAgBL,MAAQD,EAAAA,GAAAA,CAAAA;AACjC;AAEA,QAAA,IACEF,IAAII,MAAM,KAAK,YACfJ,GAAII,CAAAA,MAAM,KAAK,OACfJ,IAAAA,GAAAA,CAAII,MAAM,KAAK,SAAA,IACfJ,IAAII,MAAM,KAAK,eACfJ,GAAII,CAAAA,MAAM,KAAK,cACf,EAAA;;;YAGA,OAAO;AACL,gBAAA,GAAGD,MAAM;gBACTM,OAAS,EAAA,MAAMJ,WAAMC,CAAAA,GAAG,CAACH,MAAAA,CAAOM,OAAO,EAAE,CAACF,KAAeC,GAAAA,uBAAAA,CAAgBD,KAAOL,EAAAA,GAAAA,CAAAA;AAClF,aAAA;AACF;QAEA,OAAOC,MAAAA;AACT,KAAA,CAAA;AACF,CAAA;AAEA,iBAAe;AACbX,IAAAA;AACF,CAAE;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../server/src/services/extensions/index.ts"],"sourcesContent":["import { async } from '@strapi/utils';\nimport { signEntityMedia } from './utils';\n\nconst signFileUrlsOnDocumentService = async () => {\n  const { provider } = strapi.plugins.upload;\n  const isPrivate = await provider.isPrivate();\n\n  // We only need to sign the file urls if the provider is private\n  if (!isPrivate) {\n    return;\n  }\n\n  strapi.documents.use(async (ctx, next) => {\n    const uid = ctx.uid;\n    const result: any = await next();\n\n    if (ctx.action === 'findMany') {\n      // Shape: [ entry ]\n      return async.map(result, (entry: any) => signEntityMedia(entry, uid));\n    }\n\n    if (\n      ctx.action === 'findFirst' ||\n      ctx.action === 'findOne' ||\n      ctx.action === 'create' ||\n      ctx.action === 'update'\n    ) {\n      // Shape: entry\n      return signEntityMedia(result, uid);\n    }\n\n    if (\n      ctx.action === 'delete' ||\n      ctx.action === 'clone' ||\n      ctx.action === 'publish' ||\n      ctx.action === 'unpublish' ||\n      ctx.action === 'discardDraft'\n    ) {\n      // Shape: { entries: [ entry ] }\n      // ...\n      return {\n        ...result,\n        entries: await async.map(result.entries, (entry: any) => signEntityMedia(entry, uid)),\n      };\n    }\n\n    return result;\n  });\n};\n\nexport default {\n  signFileUrlsOnDocumentService,\n};\n"],"names":["signFileUrlsOnDocumentService","provider","strapi","plugins","upload","isPrivate","documents","use","ctx","next","uid","result","action","async","map","entry","signEntityMedia","entries"],"mappings":";;;;;AAGA,MAAMA,6BAAAA,GAAgC,UAAA;AACpC,IAAA,MAAM,EAAEC,QAAQ,EAAE,GAAGC,MAAAA,CAAOC,OAAO,CAACC,MAAM;IAC1C,MAAMC,SAAAA,GAAY,MAAMJ,QAAAA,CAASI,SAAS,EAAA;;AAG1C,IAAA,IAAI,CAACA,SAAAA,EAAW;AACd,QAAA;AACF,IAAA;AAEAH,IAAAA,MAAAA,CAAOI,SAAS,CAACC,GAAG,CAAC,OAAOC,GAAAA,EAAKC,IAAAA,GAAAA;QAC/B,MAAMC,GAAAA,GAAMF,IAAIE,GAAG;AACnB,QAAA,MAAMC,SAAc,MAAMF,IAAAA,EAAAA;QAE1B,IAAID,GAAAA,CAAII,MAAM,KAAK,UAAA,EAAY;;AAE7B,YAAA,OAAOC,YAAMC,GAAG,CAACH,QAAQ,CAACI,KAAAA,GAAeC,wBAAgBD,KAAAA,EAAOL,GAAAA,CAAAA,CAAAA;AAClE,QAAA;AAEA,QAAA,IACEF,GAAAA,CAAII,MAAM,KAAK,WAAA,IACfJ,IAAII,MAAM,KAAK,SAAA,IACfJ,GAAAA,CAAII,MAAM,KAAK,QAAA,IACfJ,GAAAA,CAAII,MAAM,KAAK,QAAA,EACf;;AAEA,YAAA,OAAOI,wBAAgBL,MAAAA,EAAQD,GAAAA,CAAAA;AACjC,QAAA;AAEA,QAAA,IACEF,IAAII,MAAM,KAAK,YACfJ,GAAAA,CAAII,MAAM,KAAK,OAAA,IACfJ,GAAAA,CAAII,MAAM,KAAK,SAAA,IACfJ,IAAII,MAAM,KAAK,eACfJ,GAAAA,CAAII,MAAM,KAAK,cAAA,EACf;;;YAGA,OAAO;AACL,gBAAA,GAAGD,MAAM;gBACTM,OAAAA,EAAS,MAAMJ,WAAAA,CAAMC,GAAG,CAACH,MAAAA,CAAOM,OAAO,EAAE,CAACF,KAAAA,GAAeC,uBAAAA,CAAgBD,KAAAA,EAAOL,GAAAA,CAAAA;AAClF,aAAA;AACF,QAAA;QAEA,OAAOC,MAAAA;AACT,IAAA,CAAA,CAAA;AACF,CAAA;AAEA,iBAAe;AACbX,IAAAA;AACF,CAAA;;;;"}

package/dist/server/services/extensions/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sources":["../../../../server/src/services/extensions/index.ts"],"sourcesContent":["import { async } from '@strapi/utils';\nimport { signEntityMedia } from './utils';\n\nconst signFileUrlsOnDocumentService = async () => {\n  const { provider } = strapi.plugins.upload;\n  const isPrivate = await provider.isPrivate();\n\n  // We only need to sign the file urls if the provider is private\n  if (!isPrivate) {\n    return;\n  }\n\n  strapi.documents.use(async (ctx, next) => {\n    const uid = ctx.uid;\n    const result: any = await next();\n\n    if (ctx.action === 'findMany') {\n      // Shape: [ entry ]\n      return async.map(result, (entry: any) => signEntityMedia(entry, uid));\n    }\n\n    if (\n      ctx.action === 'findFirst' ||\n      ctx.action === 'findOne' ||\n      ctx.action === 'create' ||\n      ctx.action === 'update'\n    ) {\n      // Shape: entry\n      return signEntityMedia(result, uid);\n    }\n\n    if (\n      ctx.action === 'delete' ||\n      ctx.action === 'clone' ||\n      ctx.action === 'publish' ||\n      ctx.action === 'unpublish' ||\n      ctx.action === 'discardDraft'\n    ) {\n      // Shape: { entries: [ entry ] }\n      // ...\n      return {\n        ...result,\n        entries: await async.map(result.entries, (entry: any) => signEntityMedia(entry, uid)),\n      };\n    }\n\n    return result;\n  });\n};\n\nexport default {\n  signFileUrlsOnDocumentService,\n};\n"],"names":["signFileUrlsOnDocumentService","provider","strapi","plugins","upload","isPrivate","documents","use","ctx","next","uid","result","action","async","map","entry","signEntityMedia","entries"],"mappings":";;;AAGA,MAAMA,6BAAgC,GAAA,UAAA;AACpC,IAAA,MAAM,EAAEC,QAAQ,EAAE,GAAGC,MAAOC,CAAAA,OAAO,CAACC,MAAM;IAC1C,MAAMC,SAAAA,GAAY,MAAMJ,QAAAA,CAASI,SAAS,EAAA;;AAG1C,IAAA,IAAI,CAACA,SAAW,EAAA;AACd,QAAA;AACF;AAEAH,IAAAA,MAAAA,CAAOI,SAAS,CAACC,GAAG,CAAC,OAAOC,GAAKC,EAAAA,IAAAA,GAAAA;QAC/B,MAAMC,GAAAA,GAAMF,IAAIE,GAAG;AACnB,QAAA,MAAMC,SAAc,MAAMF,IAAAA,EAAAA;QAE1B,IAAID,GAAAA,CAAII,MAAM,KAAK,UAAY,EAAA;;AAE7B,YAAA,OAAOC,MAAMC,GAAG,CAACH,QAAQ,CAACI,KAAAA,GAAeC,gBAAgBD,KAAOL,EAAAA,GAAAA,CAAAA,CAAAA;AAClE;AAEA,QAAA,IACEF,GAAII,CAAAA,MAAM,KAAK,WAAA,IACfJ,IAAII,MAAM,KAAK,SACfJ,IAAAA,GAAAA,CAAII,MAAM,KAAK,QAAA,IACfJ,GAAII,CAAAA,MAAM,KAAK,QACf,EAAA;;AAEA,YAAA,OAAOI,gBAAgBL,MAAQD,EAAAA,GAAAA,CAAAA;AACjC;AAEA,QAAA,IACEF,IAAII,MAAM,KAAK,YACfJ,GAAII,CAAAA,MAAM,KAAK,OACfJ,IAAAA,GAAAA,CAAII,MAAM,KAAK,SAAA,IACfJ,IAAII,MAAM,KAAK,eACfJ,GAAII,CAAAA,MAAM,KAAK,cACf,EAAA;;;YAGA,OAAO;AACL,gBAAA,GAAGD,MAAM;gBACTM,OAAS,EAAA,MAAMJ,KAAMC,CAAAA,GAAG,CAACH,MAAAA,CAAOM,OAAO,EAAE,CAACF,KAAeC,GAAAA,eAAAA,CAAgBD,KAAOL,EAAAA,GAAAA,CAAAA;AAClF,aAAA;AACF;QAEA,OAAOC,MAAAA;AACT,KAAA,CAAA;AACF,CAAA;AAEA,iBAAe;AACbX,IAAAA;AACF,CAAE;;;;"}
+{"version":3,"file":"index.mjs","sources":["../../../../server/src/services/extensions/index.ts"],"sourcesContent":["import { async } from '@strapi/utils';\nimport { signEntityMedia } from './utils';\n\nconst signFileUrlsOnDocumentService = async () => {\n  const { provider } = strapi.plugins.upload;\n  const isPrivate = await provider.isPrivate();\n\n  // We only need to sign the file urls if the provider is private\n  if (!isPrivate) {\n    return;\n  }\n\n  strapi.documents.use(async (ctx, next) => {\n    const uid = ctx.uid;\n    const result: any = await next();\n\n    if (ctx.action === 'findMany') {\n      // Shape: [ entry ]\n      return async.map(result, (entry: any) => signEntityMedia(entry, uid));\n    }\n\n    if (\n      ctx.action === 'findFirst' ||\n      ctx.action === 'findOne' ||\n      ctx.action === 'create' ||\n      ctx.action === 'update'\n    ) {\n      // Shape: entry\n      return signEntityMedia(result, uid);\n    }\n\n    if (\n      ctx.action === 'delete' ||\n      ctx.action === 'clone' ||\n      ctx.action === 'publish' ||\n      ctx.action === 'unpublish' ||\n      ctx.action === 'discardDraft'\n    ) {\n      // Shape: { entries: [ entry ] }\n      // ...\n      return {\n        ...result,\n        entries: await async.map(result.entries, (entry: any) => signEntityMedia(entry, uid)),\n      };\n    }\n\n    return result;\n  });\n};\n\nexport default {\n  signFileUrlsOnDocumentService,\n};\n"],"names":["signFileUrlsOnDocumentService","provider","strapi","plugins","upload","isPrivate","documents","use","ctx","next","uid","result","action","async","map","entry","signEntityMedia","entries"],"mappings":";;;AAGA,MAAMA,6BAAAA,GAAgC,UAAA;AACpC,IAAA,MAAM,EAAEC,QAAQ,EAAE,GAAGC,MAAAA,CAAOC,OAAO,CAACC,MAAM;IAC1C,MAAMC,SAAAA,GAAY,MAAMJ,QAAAA,CAASI,SAAS,EAAA;;AAG1C,IAAA,IAAI,CAACA,SAAAA,EAAW;AACd,QAAA;AACF,IAAA;AAEAH,IAAAA,MAAAA,CAAOI,SAAS,CAACC,GAAG,CAAC,OAAOC,GAAAA,EAAKC,IAAAA,GAAAA;QAC/B,MAAMC,GAAAA,GAAMF,IAAIE,GAAG;AACnB,QAAA,MAAMC,SAAc,MAAMF,IAAAA,EAAAA;QAE1B,IAAID,GAAAA,CAAII,MAAM,KAAK,UAAA,EAAY;;AAE7B,YAAA,OAAOC,MAAMC,GAAG,CAACH,QAAQ,CAACI,KAAAA,GAAeC,gBAAgBD,KAAAA,EAAOL,GAAAA,CAAAA,CAAAA;AAClE,QAAA;AAEA,QAAA,IACEF,GAAAA,CAAII,MAAM,KAAK,WAAA,IACfJ,IAAII,MAAM,KAAK,SAAA,IACfJ,GAAAA,CAAII,MAAM,KAAK,QAAA,IACfJ,GAAAA,CAAII,MAAM,KAAK,QAAA,EACf;;AAEA,YAAA,OAAOI,gBAAgBL,MAAAA,EAAQD,GAAAA,CAAAA;AACjC,QAAA;AAEA,QAAA,IACEF,IAAII,MAAM,KAAK,YACfJ,GAAAA,CAAII,MAAM,KAAK,OAAA,IACfJ,GAAAA,CAAII,MAAM,KAAK,SAAA,IACfJ,IAAII,MAAM,KAAK,eACfJ,GAAAA,CAAII,MAAM,KAAK,cAAA,EACf;;;YAGA,OAAO;AACL,gBAAA,GAAGD,MAAM;gBACTM,OAAAA,EAAS,MAAMJ,KAAAA,CAAMC,GAAG,CAACH,MAAAA,CAAOM,OAAO,EAAE,CAACF,KAAAA,GAAeC,eAAAA,CAAgBD,KAAAA,EAAOL,GAAAA,CAAAA;AAClF,aAAA;AACF,QAAA;QAEA,OAAOC,MAAAA;AACT,IAAA,CAAA,CAAA;AACF,CAAA;AAEA,iBAAe;AACbX,IAAAA;AACF,CAAA;;;;"}

package/dist/server/services/extensions/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sources":["../../../../server/src/services/extensions/utils.ts"],"sourcesContent":["import { async, traverseEntity } from '@strapi/utils';\n\nimport type { Schema, UID } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { FILE_MODEL_UID } from '../../constants';\n\nimport type { File } from '../../types';\n\ntype SignEntityMediaVisitor = (\n  args: {\n    key: string;\n    value: unknown;\n    attribute: Schema.Attribute.AnyAttribute;\n  },\n  utils: {\n    set: (key: string, value: unknown) => void;\n  }\n) => Promise<void>;\n\nfunction isFile(value: unknown, attribute: Schema.Attribute.AnyAttribute): value is File {\n  if (!value || attribute.type !== 'media') {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Visitor function to sign media URLs\n */\nconst signEntityMediaVisitor: SignEntityMediaVisitor = async (\n  { key, value, attribute },\n  { set }\n) => {\n  const { signFileUrls } = getService('file');\n\n  if (!attribute) {\n    return;\n  }\n\n  if (attribute.type !== 'media') {\n    return;\n  }\n\n  if (isFile(value, attribute)) {\n    // If the attribute is repeatable sign each file\n    if (attribute.multiple) {\n      const signedFiles = await async.map(value, signFileUrls);\n      set(key, signedFiles);\n      return;\n    }\n\n    // If the attribute is not repeatable only sign a single file\n    const signedFile = await signFileUrls(value);\n    set(key, signedFile);\n  }\n};\n\n/**\n *\n * Iterate through an entity manager result\n * Check which modelAttributes are media and pre sign the image URLs\n * if they are from the current upload provider\n *\n * @param {Object} entity\n * @param {Object} modelAttributes\n * @returns\n */\nconst signEntityMedia = async (entity: any, uid: UID.Schema) => {\n  if (!entity) {\n    return entity;\n  }\n\n  // If the entity itself is a file, sign it directly\n  if (uid === FILE_MODEL_UID) {\n    const { signFileUrls } = getService('file');\n    return signFileUrls(entity);\n  }\n\n  // If the entity is a regular content type, look for media attributes\n  const model = strapi.getModel(uid);\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    signEntityMediaVisitor,\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n};\n\nexport { signEntityMedia };\n"],"names":["isFile","value","attribute","type","signEntityMediaVisitor","key","set","signFileUrls","getService","multiple","signedFiles","async","map","signedFile","signEntityMedia","entity","uid","FILE_MODEL_UID","model","strapi","getModel","traverseEntity","schema","bind"],"mappings":";;;;;;AAoBA,SAASA,MAAAA,CAAOC,KAAc,EAAEC,SAAwC,EAAA;AACtE,IAAA,IAAI,CAACD,KAAAA,IAASC,SAAUC,CAAAA,IAAI,KAAK,OAAS,EAAA;QACxC,OAAO,KAAA;AACT;IAEA,OAAO,IAAA;AACT;AAEA;;AAEC,IACD,MAAMC,sBAAAA,GAAiD,OACrD,EAAEC,GAAG,EAAEJ,KAAK,EAAEC,SAAS,EAAE,EACzB,EAAEI,GAAG,EAAE,GAAA;AAEP,IAAA,MAAM,EAAEC,YAAY,EAAE,GAAGC,gBAAW,CAAA,MAAA,CAAA;AAEpC,IAAA,IAAI,CAACN,SAAW,EAAA;AACd,QAAA;AACF;IAEA,IAAIA,SAAAA,CAAUC,IAAI,KAAK,OAAS,EAAA;AAC9B,QAAA;AACF;IAEA,IAAIH,MAAAA,CAAOC,OAAOC,SAAY,CAAA,EAAA;;QAE5B,IAAIA,SAAAA,CAAUO,QAAQ,EAAE;AACtB,YAAA,MAAMC,WAAc,GAAA,MAAMC,WAAMC,CAAAA,GAAG,CAACX,KAAOM,EAAAA,YAAAA,CAAAA;AAC3CD,YAAAA,GAAAA,CAAID,GAAKK,EAAAA,WAAAA,CAAAA;AACT,YAAA;AACF;;QAGA,MAAMG,UAAAA,GAAa,MAAMN,YAAaN,CAAAA,KAAAA,CAAAA;AACtCK,QAAAA,GAAAA,CAAID,GAAKQ,EAAAA,UAAAA,CAAAA;AACX;AACF,CAAA;AAEA;;;;;;;;;IAUA,MAAMC,eAAkB,GAAA,OAAOC,MAAaC,EAAAA,GAAAA,GAAAA;AAC1C,IAAA,IAAI,CAACD,MAAQ,EAAA;QACX,OAAOA,MAAAA;AACT;;AAGA,IAAA,IAAIC,QAAQC,wBAAgB,EAAA;AAC1B,QAAA,MAAM,EAAEV,YAAY,EAAE,GAAGC,gBAAW,CAAA,MAAA,CAAA;AACpC,QAAA,OAAOD,YAAaQ,CAAAA,MAAAA,CAAAA;AACtB;;IAGA,MAAMG,KAAAA,GAAQC,MAAOC,CAAAA,QAAQ,CAACJ,GAAAA,CAAAA;AAC9B,IAAA,OAAOK;IAELjB,sBACA,EAAA;QAAEkB,MAAQJ,EAAAA,KAAAA;AAAOE,QAAAA,QAAAA,EAAUD,MAAOC,CAAAA,QAAQ,CAACG,IAAI,CAACJ,MAAAA;KAChDJ,EAAAA,MAAAA,CAAAA;AAEJ;;;;"}
+{"version":3,"file":"utils.js","sources":["../../../../server/src/services/extensions/utils.ts"],"sourcesContent":["import { async, traverseEntity } from '@strapi/utils';\n\nimport type { Schema, UID } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { FILE_MODEL_UID } from '../../constants';\n\nimport type { File } from '../../types';\n\ntype SignEntityMediaVisitor = (\n  args: {\n    key: string;\n    value: unknown;\n    attribute: Schema.Attribute.AnyAttribute;\n  },\n  utils: {\n    set: (key: string, value: unknown) => void;\n  }\n) => Promise<void>;\n\nfunction isFile(value: unknown, attribute: Schema.Attribute.AnyAttribute): value is File {\n  if (!value || attribute.type !== 'media') {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Visitor function to sign media URLs\n */\nconst signEntityMediaVisitor: SignEntityMediaVisitor = async (\n  { key, value, attribute },\n  { set }\n) => {\n  const { signFileUrls } = getService('file');\n\n  if (!attribute) {\n    return;\n  }\n\n  if (attribute.type !== 'media') {\n    return;\n  }\n\n  if (isFile(value, attribute)) {\n    // If the attribute is repeatable sign each file\n    if (attribute.multiple) {\n      const signedFiles = await async.map(value, signFileUrls);\n      set(key, signedFiles);\n      return;\n    }\n\n    // If the attribute is not repeatable only sign a single file\n    const signedFile = await signFileUrls(value);\n    set(key, signedFile);\n  }\n};\n\n/**\n *\n * Iterate through an entity manager result\n * Check which modelAttributes are media and pre sign the image URLs\n * if they are from the current upload provider\n *\n * @param {Object} entity\n * @param {Object} modelAttributes\n * @returns\n */\nconst signEntityMedia = async (entity: any, uid: UID.Schema) => {\n  if (!entity) {\n    return entity;\n  }\n\n  // If the entity itself is a file, sign it directly\n  if (uid === FILE_MODEL_UID) {\n    const { signFileUrls } = getService('file');\n    return signFileUrls(entity);\n  }\n\n  // If the entity is a regular content type, look for media attributes\n  const model = strapi.getModel(uid);\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    signEntityMediaVisitor,\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n};\n\nexport { signEntityMedia };\n"],"names":["isFile","value","attribute","type","signEntityMediaVisitor","key","set","signFileUrls","getService","multiple","signedFiles","async","map","signedFile","signEntityMedia","entity","uid","FILE_MODEL_UID","model","strapi","getModel","traverseEntity","schema","bind"],"mappings":";;;;;;AAoBA,SAASA,MAAAA,CAAOC,KAAc,EAAEC,SAAwC,EAAA;AACtE,IAAA,IAAI,CAACD,KAAAA,IAASC,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;QACxC,OAAO,KAAA;AACT,IAAA;IAEA,OAAO,IAAA;AACT;AAEA;;AAEC,IACD,MAAMC,sBAAAA,GAAiD,OACrD,EAAEC,GAAG,EAAEJ,KAAK,EAAEC,SAAS,EAAE,EACzB,EAAEI,GAAG,EAAE,GAAA;AAEP,IAAA,MAAM,EAAEC,YAAY,EAAE,GAAGC,gBAAAA,CAAW,MAAA,CAAA;AAEpC,IAAA,IAAI,CAACN,SAAAA,EAAW;AACd,QAAA;AACF,IAAA;IAEA,IAAIA,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;AAC9B,QAAA;AACF,IAAA;IAEA,IAAIH,MAAAA,CAAOC,OAAOC,SAAAA,CAAAA,EAAY;;QAE5B,IAAIA,SAAAA,CAAUO,QAAQ,EAAE;AACtB,YAAA,MAAMC,WAAAA,GAAc,MAAMC,WAAAA,CAAMC,GAAG,CAACX,KAAAA,EAAOM,YAAAA,CAAAA;AAC3CD,YAAAA,GAAAA,CAAID,GAAAA,EAAKK,WAAAA,CAAAA;AACT,YAAA;AACF,QAAA;;QAGA,MAAMG,UAAAA,GAAa,MAAMN,YAAAA,CAAaN,KAAAA,CAAAA;AACtCK,QAAAA,GAAAA,CAAID,GAAAA,EAAKQ,UAAAA,CAAAA;AACX,IAAA;AACF,CAAA;AAEA;;;;;;;;;IAUA,MAAMC,eAAAA,GAAkB,OAAOC,MAAAA,EAAaC,GAAAA,GAAAA;AAC1C,IAAA,IAAI,CAACD,MAAAA,EAAQ;QACX,OAAOA,MAAAA;AACT,IAAA;;AAGA,IAAA,IAAIC,QAAQC,wBAAAA,EAAgB;AAC1B,QAAA,MAAM,EAAEV,YAAY,EAAE,GAAGC,gBAAAA,CAAW,MAAA,CAAA;AACpC,QAAA,OAAOD,YAAAA,CAAaQ,MAAAA,CAAAA;AACtB,IAAA;;IAGA,MAAMG,KAAAA,GAAQC,MAAAA,CAAOC,QAAQ,CAACJ,GAAAA,CAAAA;AAC9B,IAAA,OAAOK;IAELjB,sBAAAA,EACA;QAAEkB,MAAAA,EAAQJ,KAAAA;AAAOE,QAAAA,QAAAA,EAAUD,MAAAA,CAAOC,QAAQ,CAACG,IAAI,CAACJ,MAAAA;KAAQ,EACxDJ,MAAAA,CAAAA;AAEJ;;;;"}

package/dist/server/services/extensions/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","sources":["../../../../server/src/services/extensions/utils.ts"],"sourcesContent":["import { async, traverseEntity } from '@strapi/utils';\n\nimport type { Schema, UID } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { FILE_MODEL_UID } from '../../constants';\n\nimport type { File } from '../../types';\n\ntype SignEntityMediaVisitor = (\n  args: {\n    key: string;\n    value: unknown;\n    attribute: Schema.Attribute.AnyAttribute;\n  },\n  utils: {\n    set: (key: string, value: unknown) => void;\n  }\n) => Promise<void>;\n\nfunction isFile(value: unknown, attribute: Schema.Attribute.AnyAttribute): value is File {\n  if (!value || attribute.type !== 'media') {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Visitor function to sign media URLs\n */\nconst signEntityMediaVisitor: SignEntityMediaVisitor = async (\n  { key, value, attribute },\n  { set }\n) => {\n  const { signFileUrls } = getService('file');\n\n  if (!attribute) {\n    return;\n  }\n\n  if (attribute.type !== 'media') {\n    return;\n  }\n\n  if (isFile(value, attribute)) {\n    // If the attribute is repeatable sign each file\n    if (attribute.multiple) {\n      const signedFiles = await async.map(value, signFileUrls);\n      set(key, signedFiles);\n      return;\n    }\n\n    // If the attribute is not repeatable only sign a single file\n    const signedFile = await signFileUrls(value);\n    set(key, signedFile);\n  }\n};\n\n/**\n *\n * Iterate through an entity manager result\n * Check which modelAttributes are media and pre sign the image URLs\n * if they are from the current upload provider\n *\n * @param {Object} entity\n * @param {Object} modelAttributes\n * @returns\n */\nconst signEntityMedia = async (entity: any, uid: UID.Schema) => {\n  if (!entity) {\n    return entity;\n  }\n\n  // If the entity itself is a file, sign it directly\n  if (uid === FILE_MODEL_UID) {\n    const { signFileUrls } = getService('file');\n    return signFileUrls(entity);\n  }\n\n  // If the entity is a regular content type, look for media attributes\n  const model = strapi.getModel(uid);\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    signEntityMediaVisitor,\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n};\n\nexport { signEntityMedia };\n"],"names":["isFile","value","attribute","type","signEntityMediaVisitor","key","set","signFileUrls","getService","multiple","signedFiles","async","map","signedFile","signEntityMedia","entity","uid","FILE_MODEL_UID","model","strapi","getModel","traverseEntity","schema","bind"],"mappings":";;;;AAoBA,SAASA,MAAAA,CAAOC,KAAc,EAAEC,SAAwC,EAAA;AACtE,IAAA,IAAI,CAACD,KAAAA,IAASC,SAAUC,CAAAA,IAAI,KAAK,OAAS,EAAA;QACxC,OAAO,KAAA;AACT;IAEA,OAAO,IAAA;AACT;AAEA;;AAEC,IACD,MAAMC,sBAAAA,GAAiD,OACrD,EAAEC,GAAG,EAAEJ,KAAK,EAAEC,SAAS,EAAE,EACzB,EAAEI,GAAG,EAAE,GAAA;AAEP,IAAA,MAAM,EAAEC,YAAY,EAAE,GAAGC,UAAW,CAAA,MAAA,CAAA;AAEpC,IAAA,IAAI,CAACN,SAAW,EAAA;AACd,QAAA;AACF;IAEA,IAAIA,SAAAA,CAAUC,IAAI,KAAK,OAAS,EAAA;AAC9B,QAAA;AACF;IAEA,IAAIH,MAAAA,CAAOC,OAAOC,SAAY,CAAA,EAAA;;QAE5B,IAAIA,SAAAA,CAAUO,QAAQ,EAAE;AACtB,YAAA,MAAMC,WAAc,GAAA,MAAMC,KAAMC,CAAAA,GAAG,CAACX,KAAOM,EAAAA,YAAAA,CAAAA;AAC3CD,YAAAA,GAAAA,CAAID,GAAKK,EAAAA,WAAAA,CAAAA;AACT,YAAA;AACF;;QAGA,MAAMG,UAAAA,GAAa,MAAMN,YAAaN,CAAAA,KAAAA,CAAAA;AACtCK,QAAAA,GAAAA,CAAID,GAAKQ,EAAAA,UAAAA,CAAAA;AACX;AACF,CAAA;AAEA;;;;;;;;;IAUA,MAAMC,eAAkB,GAAA,OAAOC,MAAaC,EAAAA,GAAAA,GAAAA;AAC1C,IAAA,IAAI,CAACD,MAAQ,EAAA;QACX,OAAOA,MAAAA;AACT;;AAGA,IAAA,IAAIC,QAAQC,cAAgB,EAAA;AAC1B,QAAA,MAAM,EAAEV,YAAY,EAAE,GAAGC,UAAW,CAAA,MAAA,CAAA;AACpC,QAAA,OAAOD,YAAaQ,CAAAA,MAAAA,CAAAA;AACtB;;IAGA,MAAMG,KAAAA,GAAQC,MAAOC,CAAAA,QAAQ,CAACJ,GAAAA,CAAAA;AAC9B,IAAA,OAAOK;IAELjB,sBACA,EAAA;QAAEkB,MAAQJ,EAAAA,KAAAA;AAAOE,QAAAA,QAAAA,EAAUD,MAAOC,CAAAA,QAAQ,CAACG,IAAI,CAACJ,MAAAA;KAChDJ,EAAAA,MAAAA,CAAAA;AAEJ;;;;"}
+{"version":3,"file":"utils.mjs","sources":["../../../../server/src/services/extensions/utils.ts"],"sourcesContent":["import { async, traverseEntity } from '@strapi/utils';\n\nimport type { Schema, UID } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { FILE_MODEL_UID } from '../../constants';\n\nimport type { File } from '../../types';\n\ntype SignEntityMediaVisitor = (\n  args: {\n    key: string;\n    value: unknown;\n    attribute: Schema.Attribute.AnyAttribute;\n  },\n  utils: {\n    set: (key: string, value: unknown) => void;\n  }\n) => Promise<void>;\n\nfunction isFile(value: unknown, attribute: Schema.Attribute.AnyAttribute): value is File {\n  if (!value || attribute.type !== 'media') {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Visitor function to sign media URLs\n */\nconst signEntityMediaVisitor: SignEntityMediaVisitor = async (\n  { key, value, attribute },\n  { set }\n) => {\n  const { signFileUrls } = getService('file');\n\n  if (!attribute) {\n    return;\n  }\n\n  if (attribute.type !== 'media') {\n    return;\n  }\n\n  if (isFile(value, attribute)) {\n    // If the attribute is repeatable sign each file\n    if (attribute.multiple) {\n      const signedFiles = await async.map(value, signFileUrls);\n      set(key, signedFiles);\n      return;\n    }\n\n    // If the attribute is not repeatable only sign a single file\n    const signedFile = await signFileUrls(value);\n    set(key, signedFile);\n  }\n};\n\n/**\n *\n * Iterate through an entity manager result\n * Check which modelAttributes are media and pre sign the image URLs\n * if they are from the current upload provider\n *\n * @param {Object} entity\n * @param {Object} modelAttributes\n * @returns\n */\nconst signEntityMedia = async (entity: any, uid: UID.Schema) => {\n  if (!entity) {\n    return entity;\n  }\n\n  // If the entity itself is a file, sign it directly\n  if (uid === FILE_MODEL_UID) {\n    const { signFileUrls } = getService('file');\n    return signFileUrls(entity);\n  }\n\n  // If the entity is a regular content type, look for media attributes\n  const model = strapi.getModel(uid);\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    signEntityMediaVisitor,\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n};\n\nexport { signEntityMedia };\n"],"names":["isFile","value","attribute","type","signEntityMediaVisitor","key","set","signFileUrls","getService","multiple","signedFiles","async","map","signedFile","signEntityMedia","entity","uid","FILE_MODEL_UID","model","strapi","getModel","traverseEntity","schema","bind"],"mappings":";;;;AAoBA,SAASA,MAAAA,CAAOC,KAAc,EAAEC,SAAwC,EAAA;AACtE,IAAA,IAAI,CAACD,KAAAA,IAASC,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;QACxC,OAAO,KAAA;AACT,IAAA;IAEA,OAAO,IAAA;AACT;AAEA;;AAEC,IACD,MAAMC,sBAAAA,GAAiD,OACrD,EAAEC,GAAG,EAAEJ,KAAK,EAAEC,SAAS,EAAE,EACzB,EAAEI,GAAG,EAAE,GAAA;AAEP,IAAA,MAAM,EAAEC,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;AAEpC,IAAA,IAAI,CAACN,SAAAA,EAAW;AACd,QAAA;AACF,IAAA;IAEA,IAAIA,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;AAC9B,QAAA;AACF,IAAA;IAEA,IAAIH,MAAAA,CAAOC,OAAOC,SAAAA,CAAAA,EAAY;;QAE5B,IAAIA,SAAAA,CAAUO,QAAQ,EAAE;AACtB,YAAA,MAAMC,WAAAA,GAAc,MAAMC,KAAAA,CAAMC,GAAG,CAACX,KAAAA,EAAOM,YAAAA,CAAAA;AAC3CD,YAAAA,GAAAA,CAAID,GAAAA,EAAKK,WAAAA,CAAAA;AACT,YAAA;AACF,QAAA;;QAGA,MAAMG,UAAAA,GAAa,MAAMN,YAAAA,CAAaN,KAAAA,CAAAA;AACtCK,QAAAA,GAAAA,CAAID,GAAAA,EAAKQ,UAAAA,CAAAA;AACX,IAAA;AACF,CAAA;AAEA;;;;;;;;;IAUA,MAAMC,eAAAA,GAAkB,OAAOC,MAAAA,EAAaC,GAAAA,GAAAA;AAC1C,IAAA,IAAI,CAACD,MAAAA,EAAQ;QACX,OAAOA,MAAAA;AACT,IAAA;;AAGA,IAAA,IAAIC,QAAQC,cAAAA,EAAgB;AAC1B,QAAA,MAAM,EAAEV,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;AACpC,QAAA,OAAOD,YAAAA,CAAaQ,MAAAA,CAAAA;AACtB,IAAA;;IAGA,MAAMG,KAAAA,GAAQC,MAAAA,CAAOC,QAAQ,CAACJ,GAAAA,CAAAA;AAC9B,IAAA,OAAOK;IAELjB,sBAAAA,EACA;QAAEkB,MAAAA,EAAQJ,KAAAA;AAAOE,QAAAA,QAAAA,EAAUD,MAAAA,CAAOC,QAAQ,CAACG,IAAI,CAACJ,MAAAA;KAAQ,EACxDJ,MAAAA,CAAAA;AAEJ;;;;"}

package/dist/server/services/file.js

@@ -1,10 +1,128 @@
 'use strict';
 
+var path = require('path');
+var dns = require('dns/promises');
+var net = require('net');
+var fse = require('fs-extra');
 var fp = require('lodash/fp');
 var utils = require('@strapi/utils');
 var constants = require('../constants.js');
 var index = require('../utils/index.js');
 
+const { ApplicationError } = utils.errors;
+const FETCH_TIMEOUT_MS = 60000; // 60 seconds
+// Blocks loopback, link-local (cloud metadata), and RFC-1918 private ranges to prevent SSRF
+const SSRF_BLOCK_LIST = new net.BlockList();
+SSRF_BLOCK_LIST.addSubnet('127.0.0.0', 8); // loopback
+SSRF_BLOCK_LIST.addSubnet('10.0.0.0', 8); // RFC-1918
+SSRF_BLOCK_LIST.addSubnet('172.16.0.0', 12); // RFC-1918
+SSRF_BLOCK_LIST.addSubnet('192.168.0.0', 16); // RFC-1918
+SSRF_BLOCK_LIST.addSubnet('169.254.0.0', 16); // link-local / cloud metadata (AWS, GCP, Azure)
+SSRF_BLOCK_LIST.addSubnet('::1', 128, 'ipv6'); // IPv6 loopback
+SSRF_BLOCK_LIST.addSubnet('fc00::', 7, 'ipv6'); // IPv6 unique local
+SSRF_BLOCK_LIST.addSubnet('fe80::', 10, 'ipv6'); // IPv6 link-local
+/**
+ * Extracts filename from a URL path or Content-Disposition header
+ */ const getFilenameFromUrl = (url, contentDisposition)=>{
+    // Try Content-Disposition header first
+    if (contentDisposition) {
+        // Extracts filename from Content-Disposition header (e.g. filename="photo.jpg" or filename*=UTF-8''photo.jpg)
+        const filenameMatch = contentDisposition.match(/filename\*?=['"]?(?:UTF-\d['"]*)?([^;\r\n"']*)['"]?/i);
+        if (filenameMatch?.[1]) {
+            // Use path.basename to prevent path traversal attacks
+            return path.basename(decodeURIComponent(filenameMatch[1]));
+        }
+    }
+    // Fall back to URL path
+    try {
+        const urlObj = new URL(url);
+        const pathname = urlObj.pathname;
+        const filename = pathname.split('/').pop();
+        if (filename && filename.length > 0) {
+            // Use path.basename to prevent path traversal attacks (e.g., URL-encoded separators)
+            return path.basename(decodeURIComponent(filename));
+        }
+    } catch  {
+    // Invalid URL, use default
+    }
+    // Generate a timestamp-based default filename
+    const now = new Date();
+    const date = now.toISOString().split('T')[0]; // 2024-02-23
+    const time = now.toTimeString().split(' ')[0].replace(/:/g, ''); // 143052
+    return `untitled_${date}_${time}`;
+};
+/**
+ * Fetches a URL and saves it as a temporary file
+ * Returns an InputFile-compatible object for use with the upload pipeline
+ */ const fetchUrlToInputFile = async (url, tmpWorkingDirectory, sizeLimit)=>{
+    // Validate URL protocol
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(url);
+    } catch  {
+        throw new ApplicationError(`Invalid URL: ${url}`);
+    }
+    if (![
+        'http:',
+        'https:'
+    ].includes(parsedUrl.protocol)) {
+        throw new ApplicationError(`Invalid URL protocol. Only http and https are allowed: ${url}`);
+    }
+    // Resolve hostname and block private/internal IP ranges to prevent SSRF
+    try {
+        const { address, family } = await dns.lookup(parsedUrl.hostname);
+        const type = family === 6 ? 'ipv6' : 'ipv4';
+        if (SSRF_BLOCK_LIST.check(address, type)) {
+            throw new ApplicationError(`URL resolves to a blocked address: ${url}`);
+        }
+    } catch (error) {
+        if (error instanceof ApplicationError) throw error;
+        throw new ApplicationError(`Could not resolve hostname: ${parsedUrl.hostname}`);
+    }
+    // Fetch the URL with timeout
+    let response;
+    try {
+        response = await fetch(url, {
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+        });
+    } catch (error) {
+        if (error instanceof Error && error.name === 'TimeoutError') {
+            throw new ApplicationError(`Request timed out while fetching URL: ${url}`);
+        }
+        throw error;
+    }
+    if (!response.ok) {
+        throw new ApplicationError(`Failed to fetch URL: ${url} (${response.status} ${response.statusText})`);
+    }
+    // Check Content-Length header for early rejection of large files
+    if (sizeLimit) {
+        const contentLength = response.headers.get('content-length');
+        if (contentLength && parseInt(contentLength, 10) > sizeLimit) {
+            throw new ApplicationError(`File too large: maximum allowed size is ${Math.round(sizeLimit / (1024 * 1024))}MB`);
+        }
+    }
+    // Get content type and filename
+    const contentType = response.headers.get('content-type')?.split(';')[0] || 'application/octet-stream';
+    const contentDisposition = response.headers.get('content-disposition');
+    const filename = getFilenameFromUrl(response.url, contentDisposition);
+    // Read response body
+    const arrayBuffer = await response.arrayBuffer();
+    const buffer = Buffer.from(arrayBuffer);
+    // Write to temp file
+    const tmpFilePath = path.join(tmpWorkingDirectory, filename);
+    await fse.writeFile(tmpFilePath, buffer);
+    // Create file object compatible with upload pipeline
+    const fetchedFile = {
+        filepath: tmpFilePath,
+        originalFilename: filename,
+        mimetype: contentType,
+        size: buffer.length,
+        tmpWorkingDirectory
+    };
+    return {
+        file: fetchedFile
+    };
+};
 const getFolderPath = async (folderId)=>{
     if (!folderId) return '/';
     const parentFolder = await strapi.db.query(constants.FOLDER_MODEL_UID).findOne({
@@ -50,7 +168,8 @@ const signFileUrls = async (file)=>{
 var file = {
     getFolderPath,
     deleteByIds,
-    signFileUrls
+    signFileUrls,
+    fetchUrlToInputFile
 };
 
 module.exports = file;

package/dist/server/services/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sources":["../../../server/src/services/file.ts"],"sourcesContent":["import { cloneDeep } from 'lodash/fp';\nimport { async } from '@strapi/utils';\n\nimport { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants';\nimport { getService } from '../utils';\n\nimport { Config, type File } from '../types';\n\nconst getFolderPath = async (folderId?: number | null) => {\n  if (!folderId) return '/';\n\n  const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } });\n\n  return parentFolder.path;\n};\n\nconst deleteByIds = async (ids: number[] = []) => {\n  const filesToDelete = await strapi.db\n    .query(FILE_MODEL_UID)\n    .findMany({ where: { id: { $in: ids } } });\n\n  await Promise.all(filesToDelete.map((file: File) => getService('upload').remove(file)));\n\n  return filesToDelete;\n};\n\nconst signFileUrls = async (file: File) => {\n  const { provider } = strapi.plugins.upload;\n  const { provider: providerConfig } = strapi.config.get<Config>('plugin::upload');\n  const isPrivate = await provider.isPrivate();\n  file.isUrlSigned = false;\n\n  // Check file provider and if provider is private\n  if (file.provider !== providerConfig || !isPrivate) {\n    return file;\n  }\n\n  const signUrl = async (file: File) => {\n    const signedUrl = await provider.getSignedUrl(file);\n    file.url = signedUrl.url;\n    file.isUrlSigned = true;\n  };\n\n  const signedFile = cloneDeep(file);\n\n  // Sign each file format\n  await signUrl(signedFile);\n  if (file.formats) {\n    await async.map(Object.values(signedFile.formats ?? {}), signUrl);\n  }\n\n  return signedFile;\n};\n\nexport default { getFolderPath, deleteByIds, signFileUrls };\n"],"names":["getFolderPath","folderId","parentFolder","strapi","db","query","FOLDER_MODEL_UID","findOne","where","id","path","deleteByIds","ids","filesToDelete","FILE_MODEL_UID","findMany","$in","Promise","all","map","file","getService","remove","signFileUrls","provider","plugins","upload","providerConfig","config","get","isPrivate","isUrlSigned","signUrl","signedUrl","getSignedUrl","url","signedFile","cloneDeep","formats","async","Object","values"],"mappings":";;;;;;;AAQA,MAAMA,gBAAgB,OAAOC,QAAAA,GAAAA;IAC3B,IAAI,CAACA,UAAU,OAAO,GAAA;IAEtB,MAAMC,YAAAA,GAAe,MAAMC,MAAOC,CAAAA,EAAE,CAACC,KAAK,CAACC,0BAAkBC,CAAAA,CAAAA,OAAO,CAAC;QAAEC,KAAO,EAAA;YAAEC,EAAIR,EAAAA;AAAS;AAAE,KAAA,CAAA;AAE/F,IAAA,OAAOC,aAAaQ,IAAI;AAC1B,CAAA;AAEA,MAAMC,WAAAA,GAAc,OAAOC,GAAAA,GAAgB,EAAE,GAAA;IAC3C,MAAMC,aAAAA,GAAgB,MAAMV,MAAOC,CAAAA,EAAE,CAClCC,KAAK,CAACS,wBACNC,CAAAA,CAAAA,QAAQ,CAAC;QAAEP,KAAO,EAAA;YAAEC,EAAI,EAAA;gBAAEO,GAAKJ,EAAAA;AAAI;AAAE;AAAE,KAAA,CAAA;IAE1C,MAAMK,OAAAA,CAAQC,GAAG,CAACL,aAAcM,CAAAA,GAAG,CAAC,CAACC,IAAeC,GAAAA,gBAAAA,CAAW,QAAUC,CAAAA,CAAAA,MAAM,CAACF,IAAAA,CAAAA,CAAAA,CAAAA;IAEhF,OAAOP,aAAAA;AACT,CAAA;AAEA,MAAMU,eAAe,OAAOH,IAAAA,GAAAA;AAC1B,IAAA,MAAM,EAAEI,QAAQ,EAAE,GAAGrB,MAAOsB,CAAAA,OAAO,CAACC,MAAM;IAC1C,MAAM,EAAEF,UAAUG,cAAc,EAAE,GAAGxB,MAAOyB,CAAAA,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;IAC/D,MAAMC,SAAAA,GAAY,MAAMN,QAAAA,CAASM,SAAS,EAAA;AAC1CV,IAAAA,IAAAA,CAAKW,WAAW,GAAG,KAAA;;AAGnB,IAAA,IAAIX,IAAKI,CAAAA,QAAQ,KAAKG,cAAAA,IAAkB,CAACG,SAAW,EAAA;QAClD,OAAOV,IAAAA;AACT;AAEA,IAAA,MAAMY,UAAU,OAAOZ,IAAAA,GAAAA;AACrB,QAAA,MAAMa,SAAY,GAAA,MAAMT,QAASU,CAAAA,YAAY,CAACd,IAAAA,CAAAA;QAC9CA,IAAKe,CAAAA,GAAG,GAAGF,SAAAA,CAAUE,GAAG;AACxBf,QAAAA,IAAAA,CAAKW,WAAW,GAAG,IAAA;AACrB,KAAA;AAEA,IAAA,MAAMK,aAAaC,YAAUjB,CAAAA,IAAAA,CAAAA;;AAG7B,IAAA,MAAMY,OAAQI,CAAAA,UAAAA,CAAAA;IACd,IAAIhB,IAAAA,CAAKkB,OAAO,EAAE;QAChB,MAAMC,WAAAA,CAAMpB,GAAG,CAACqB,MAAOC,CAAAA,MAAM,CAACL,UAAWE,CAAAA,OAAO,IAAI,EAAKN,CAAAA,EAAAA,OAAAA,CAAAA;AAC3D;IAEA,OAAOI,UAAAA;AACT,CAAA;AAEA,WAAe;AAAEpC,IAAAA,aAAAA;AAAeW,IAAAA,WAAAA;AAAaY,IAAAA;AAAa,CAAE;;;;"}
+{"version":3,"file":"file.js","sources":["../../../server/src/services/file.ts"],"sourcesContent":["import path from 'path';\nimport dns from 'dns/promises';\nimport net from 'net';\nimport fse from 'fs-extra';\nimport { cloneDeep } from 'lodash/fp';\nimport { async, errors } from '@strapi/utils';\n\nimport { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants';\nimport { getService } from '../utils';\n\nimport { Config, type File } from '../types';\n\nconst { ApplicationError } = errors;\n\nconst FETCH_TIMEOUT_MS = 60_000; // 60 seconds\n\n// Blocks loopback, link-local (cloud metadata), and RFC-1918 private ranges to prevent SSRF\nconst SSRF_BLOCK_LIST = new net.BlockList();\nSSRF_BLOCK_LIST.addSubnet('127.0.0.0', 8); // loopback\nSSRF_BLOCK_LIST.addSubnet('10.0.0.0', 8); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('172.16.0.0', 12); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('192.168.0.0', 16); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('169.254.0.0', 16); // link-local / cloud metadata (AWS, GCP, Azure)\nSSRF_BLOCK_LIST.addSubnet('::1', 128, 'ipv6'); // IPv6 loopback\nSSRF_BLOCK_LIST.addSubnet('fc00::', 7, 'ipv6'); // IPv6 unique local\nSSRF_BLOCK_LIST.addSubnet('fe80::', 10, 'ipv6'); // IPv6 link-local\n\n/**\n * Represents a file fetched from a URL, compatible with the upload pipeline\n */\ninterface UrlFetchedFile {\n  filepath: string;\n  originalFilename: string;\n  mimetype: string;\n  size: number;\n  tmpWorkingDirectory?: string;\n}\n\ninterface FetchUrlResult {\n  file: UrlFetchedFile;\n}\n\n/**\n * Extracts filename from a URL path or Content-Disposition header\n */\nconst getFilenameFromUrl = (url: string, contentDisposition?: string | null): string => {\n  // Try Content-Disposition header first\n  if (contentDisposition) {\n    // Extracts filename from Content-Disposition header (e.g. filename=\"photo.jpg\" or filename*=UTF-8''photo.jpg)\n    const filenameMatch = contentDisposition.match(\n      /filename\\*?=['\"]?(?:UTF-\\d['\"]*)?([^;\\r\\n\"']*)['\"]?/i\n    );\n    if (filenameMatch?.[1]) {\n      // Use path.basename to prevent path traversal attacks\n      return path.basename(decodeURIComponent(filenameMatch[1]));\n    }\n  }\n\n  // Fall back to URL path\n  try {\n    const urlObj = new URL(url);\n    const pathname = urlObj.pathname;\n    const filename = pathname.split('/').pop();\n    if (filename && filename.length > 0) {\n      // Use path.basename to prevent path traversal attacks (e.g., URL-encoded separators)\n      return path.basename(decodeURIComponent(filename));\n    }\n  } catch {\n    // Invalid URL, use default\n  }\n\n  // Generate a timestamp-based default filename\n  const now = new Date();\n  const date = now.toISOString().split('T')[0]; // 2024-02-23\n  const time = now.toTimeString().split(' ')[0].replace(/:/g, ''); // 143052\n  return `untitled_${date}_${time}`;\n};\n\n/**\n * Fetches a URL and saves it as a temporary file\n * Returns an InputFile-compatible object for use with the upload pipeline\n */\nconst fetchUrlToInputFile = async (\n  url: string,\n  tmpWorkingDirectory: string,\n  sizeLimit?: number\n): Promise<FetchUrlResult> => {\n  // Validate URL protocol\n  let parsedUrl: URL;\n  try {\n    parsedUrl = new URL(url);\n  } catch {\n    throw new ApplicationError(`Invalid URL: ${url}`);\n  }\n\n  if (!['http:', 'https:'].includes(parsedUrl.protocol)) {\n    throw new ApplicationError(`Invalid URL protocol. Only http and https are allowed: ${url}`);\n  }\n\n  // Resolve hostname and block private/internal IP ranges to prevent SSRF\n  try {\n    const { address, family } = await dns.lookup(parsedUrl.hostname);\n    const type = family === 6 ? 'ipv6' : 'ipv4';\n    if (SSRF_BLOCK_LIST.check(address, type)) {\n      throw new ApplicationError(`URL resolves to a blocked address: ${url}`);\n    }\n  } catch (error) {\n    if (error instanceof ApplicationError) throw error;\n    throw new ApplicationError(`Could not resolve hostname: ${parsedUrl.hostname}`);\n  }\n\n  // Fetch the URL with timeout\n  let response: Response;\n  try {\n    response = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n  } catch (error) {\n    if (error instanceof Error && error.name === 'TimeoutError') {\n      throw new ApplicationError(`Request timed out while fetching URL: ${url}`);\n    }\n    throw error;\n  }\n\n  if (!response.ok) {\n    throw new ApplicationError(\n      `Failed to fetch URL: ${url} (${response.status} ${response.statusText})`\n    );\n  }\n\n  // Check Content-Length header for early rejection of large files\n  if (sizeLimit) {\n    const contentLength = response.headers.get('content-length');\n    if (contentLength && parseInt(contentLength, 10) > sizeLimit) {\n      throw new ApplicationError(\n        `File too large: maximum allowed size is ${Math.round(sizeLimit / (1024 * 1024))}MB`\n      );\n    }\n  }\n\n  // Get content type and filename\n  const contentType =\n    response.headers.get('content-type')?.split(';')[0] || 'application/octet-stream';\n  const contentDisposition = response.headers.get('content-disposition');\n  const filename = getFilenameFromUrl(response.url, contentDisposition);\n\n  // Read response body\n  const arrayBuffer = await response.arrayBuffer();\n  const buffer = Buffer.from(arrayBuffer);\n\n  // Write to temp file\n  const tmpFilePath = path.join(tmpWorkingDirectory, filename);\n  await fse.writeFile(tmpFilePath, buffer);\n\n  // Create file object compatible with upload pipeline\n  const fetchedFile: UrlFetchedFile = {\n    filepath: tmpFilePath,\n    originalFilename: filename,\n    mimetype: contentType,\n    size: buffer.length,\n    tmpWorkingDirectory,\n  };\n\n  return { file: fetchedFile };\n};\n\nconst getFolderPath = async (folderId?: number | null) => {\n  if (!folderId) return '/';\n\n  const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } });\n\n  return parentFolder.path;\n};\n\nconst deleteByIds = async (ids: number[] = []) => {\n  const filesToDelete = await strapi.db\n    .query(FILE_MODEL_UID)\n    .findMany({ where: { id: { $in: ids } } });\n\n  await Promise.all(filesToDelete.map((file: File) => getService('upload').remove(file)));\n\n  return filesToDelete;\n};\n\nconst signFileUrls = async (file: File) => {\n  const { provider } = strapi.plugins.upload;\n  const { provider: providerConfig } = strapi.config.get<Config>('plugin::upload');\n  const isPrivate = await provider.isPrivate();\n  file.isUrlSigned = false;\n\n  // Check file provider and if provider is private\n  if (file.provider !== providerConfig || !isPrivate) {\n    return file;\n  }\n\n  const signUrl = async (file: File) => {\n    const signedUrl = await provider.getSignedUrl(file);\n    file.url = signedUrl.url;\n    file.isUrlSigned = true;\n  };\n\n  const signedFile = cloneDeep(file);\n\n  // Sign each file format\n  await signUrl(signedFile);\n  if (file.formats) {\n    await async.map(Object.values(signedFile.formats ?? {}), signUrl);\n  }\n\n  return signedFile;\n};\n\nexport type { UrlFetchedFile, FetchUrlResult };\nexport default { getFolderPath, deleteByIds, signFileUrls, fetchUrlToInputFile };\n"],"names":["ApplicationError","errors","FETCH_TIMEOUT_MS","SSRF_BLOCK_LIST","net","BlockList","addSubnet","getFilenameFromUrl","url","contentDisposition","filenameMatch","match","path","basename","decodeURIComponent","urlObj","URL","pathname","filename","split","pop","length","now","Date","date","toISOString","time","toTimeString","replace","fetchUrlToInputFile","tmpWorkingDirectory","sizeLimit","parsedUrl","includes","protocol","address","family","dns","lookup","hostname","type","check","error","response","fetch","signal","AbortSignal","timeout","Error","name","ok","status","statusText","contentLength","headers","get","parseInt","Math","round","contentType","arrayBuffer","buffer","Buffer","from","tmpFilePath","join","fse","writeFile","fetchedFile","filepath","originalFilename","mimetype","size","file","getFolderPath","folderId","parentFolder","strapi","db","query","FOLDER_MODEL_UID","findOne","where","id","deleteByIds","ids","filesToDelete","FILE_MODEL_UID","findMany","$in","Promise","all","map","getService","remove","signFileUrls","provider","plugins","upload","providerConfig","config","isPrivate","isUrlSigned","signUrl","signedUrl","getSignedUrl","signedFile","cloneDeep","formats","async","Object","values"],"mappings":";;;;;;;;;;;AAYA,MAAM,EAAEA,gBAAgB,EAAE,GAAGC,YAAAA;AAE7B,MAAMC,gBAAAA,GAAmB;AAEzB;AACA,MAAMC,eAAAA,GAAkB,IAAIC,GAAAA,CAAIC,SAAS,EAAA;AACzCF,eAAAA,CAAgBG,SAAS,CAAC,WAAA,EAAa,CAAA,CAAA,CAAA;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,UAAA,EAAY,CAAA,CAAA,CAAA;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,YAAA,EAAc,EAAA,CAAA,CAAA;AACxCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,KAAA,EAAO,GAAA,EAAK;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,CAAA,EAAG;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,EAAA,EAAI;AAiBxC;;IAGA,MAAMC,kBAAAA,GAAqB,CAACC,GAAAA,EAAaC,kBAAAA,GAAAA;;AAEvC,IAAA,IAAIA,kBAAAA,EAAoB;;QAEtB,MAAMC,aAAAA,GAAgBD,kBAAAA,CAAmBE,KAAK,CAC5C,sDAAA,CAAA;QAEF,IAAID,aAAAA,GAAgB,CAAA,CAAE,EAAE;;AAEtB,YAAA,OAAOE,KAAKC,QAAQ,CAACC,kBAAAA,CAAmBJ,aAAa,CAAC,CAAA,CAAE,CAAA,CAAA;AAC1D,QAAA;AACF,IAAA;;IAGA,IAAI;QACF,MAAMK,MAAAA,GAAS,IAAIC,GAAAA,CAAIR,GAAAA,CAAAA;QACvB,MAAMS,QAAAA,GAAWF,OAAOE,QAAQ;AAChC,QAAA,MAAMC,QAAAA,GAAWD,QAAAA,CAASE,KAAK,CAAC,KAAKC,GAAG,EAAA;AACxC,QAAA,IAAIF,QAAAA,IAAYA,QAAAA,CAASG,MAAM,GAAG,CAAA,EAAG;;YAEnC,OAAOT,IAAAA,CAAKC,QAAQ,CAACC,kBAAAA,CAAmBI,QAAAA,CAAAA,CAAAA;AAC1C,QAAA;AACF,IAAA,CAAA,CAAE,OAAM;;AAER,IAAA;;AAGA,IAAA,MAAMI,MAAM,IAAIC,IAAAA,EAAAA;IAChB,MAAMC,IAAAA,GAAOF,GAAAA,CAAIG,WAAW,EAAA,CAAGN,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAAA;AAC5C,IAAA,MAAMO,IAAAA,GAAOJ,GAAAA,CAAIK,YAAY,EAAA,CAAGR,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAACS,OAAO,CAAC,IAAA,EAAM;AAC5D,IAAA,OAAO,CAAC,SAAS,EAAEJ,IAAAA,CAAK,CAAC,EAAEE,IAAAA,CAAAA,CAAM;AACnC,CAAA;AAEA;;;AAGC,IACD,MAAMG,mBAAAA,GAAsB,OAC1BrB,GAAAA,EACAsB,mBAAAA,EACAC,SAAAA,GAAAA;;IAGA,IAAIC,SAAAA;IACJ,IAAI;AACFA,QAAAA,SAAAA,GAAY,IAAIhB,GAAAA,CAAIR,GAAAA,CAAAA;AACtB,IAAA,CAAA,CAAE,OAAM;AACN,QAAA,MAAM,IAAIR,gBAAAA,CAAiB,CAAC,aAAa,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAClD,IAAA;AAEA,IAAA,IAAI,CAAC;AAAC,QAAA,OAAA;AAAS,QAAA;AAAS,KAAA,CAACyB,QAAQ,CAACD,SAAAA,CAAUE,QAAQ,CAAA,EAAG;AACrD,QAAA,MAAM,IAAIlC,gBAAAA,CAAiB,CAAC,uDAAuD,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC5F,IAAA;;IAGA,IAAI;QACF,MAAM,EAAE2B,OAAO,EAAEC,MAAM,EAAE,GAAG,MAAMC,GAAAA,CAAIC,MAAM,CAACN,SAAAA,CAAUO,QAAQ,CAAA;QAC/D,MAAMC,IAAAA,GAAOJ,MAAAA,KAAW,CAAA,GAAI,MAAA,GAAS,MAAA;AACrC,QAAA,IAAIjC,eAAAA,CAAgBsC,KAAK,CAACN,OAAAA,EAASK,IAAAA,CAAAA,EAAO;AACxC,YAAA,MAAM,IAAIxC,gBAAAA,CAAiB,CAAC,mCAAmC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AACxE,QAAA;AACF,IAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;QACd,IAAIA,KAAAA,YAAiB1C,kBAAkB,MAAM0C,KAAAA;AAC7C,QAAA,MAAM,IAAI1C,gBAAAA,CAAiB,CAAC,4BAA4B,EAAEgC,SAAAA,CAAUO,QAAQ,CAAA,CAAE,CAAA;AAChF,IAAA;;IAGA,IAAII,QAAAA;IACJ,IAAI;QACFA,QAAAA,GAAW,MAAMC,MAAMpC,GAAAA,EAAK;YAAEqC,MAAAA,EAAQC,WAAAA,CAAYC,OAAO,CAAC7C,gBAAAA;AAAkB,SAAA,CAAA;AAC9E,IAAA,CAAA,CAAE,OAAOwC,KAAAA,EAAO;AACd,QAAA,IAAIA,KAAAA,YAAiBM,KAAAA,IAASN,KAAAA,CAAMO,IAAI,KAAK,cAAA,EAAgB;AAC3D,YAAA,MAAM,IAAIjD,gBAAAA,CAAiB,CAAC,sCAAsC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC3E,QAAA;QACA,MAAMkC,KAAAA;AACR,IAAA;IAEA,IAAI,CAACC,QAAAA,CAASO,EAAE,EAAE;AAChB,QAAA,MAAM,IAAIlD,gBAAAA,CACR,CAAC,qBAAqB,EAAEQ,IAAI,EAAE,EAAEmC,QAAAA,CAASQ,MAAM,CAAC,CAAC,EAAER,SAASS,UAAU,CAAC,CAAC,CAAC,CAAA;AAE7E,IAAA;;AAGA,IAAA,IAAIrB,SAAAA,EAAW;AACb,QAAA,MAAMsB,aAAAA,GAAgBV,QAAAA,CAASW,OAAO,CAACC,GAAG,CAAC,gBAAA,CAAA;AAC3C,QAAA,IAAIF,aAAAA,IAAiBG,QAAAA,CAASH,aAAAA,EAAe,EAAA,CAAA,GAAMtB,SAAAA,EAAW;AAC5D,YAAA,MAAM,IAAI/B,gBAAAA,CACR,CAAC,wCAAwC,EAAEyD,IAAAA,CAAKC,KAAK,CAAC3B,SAAAA,IAAa,IAAA,GAAO,IAAG,CAAA,CAAA,CAAI,EAAE,CAAC,CAAA;AAExF,QAAA;AACF,IAAA;;IAGA,MAAM4B,WAAAA,GACJhB,QAAAA,CAASW,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,EAAiBpC,KAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,0BAAA;AACzD,IAAA,MAAMV,kBAAAA,GAAqBkC,QAAAA,CAASW,OAAO,CAACC,GAAG,CAAC,qBAAA,CAAA;AAChD,IAAA,MAAMrC,QAAAA,GAAWX,kBAAAA,CAAmBoC,QAAAA,CAASnC,GAAG,EAAEC,kBAAAA,CAAAA;;IAGlD,MAAMmD,WAAAA,GAAc,MAAMjB,QAAAA,CAASiB,WAAW,EAAA;IAC9C,MAAMC,MAAAA,GAASC,MAAAA,CAAOC,IAAI,CAACH,WAAAA,CAAAA;;AAG3B,IAAA,MAAMI,WAAAA,GAAcpD,IAAAA,CAAKqD,IAAI,CAACnC,mBAAAA,EAAqBZ,QAAAA,CAAAA;IACnD,MAAMgD,GAAAA,CAAIC,SAAS,CAACH,WAAAA,EAAaH,MAAAA,CAAAA;;AAGjC,IAAA,MAAMO,WAAAA,GAA8B;QAClCC,QAAAA,EAAUL,WAAAA;QACVM,gBAAAA,EAAkBpD,QAAAA;QAClBqD,QAAAA,EAAUZ,WAAAA;AACVa,QAAAA,IAAAA,EAAMX,OAAOxC,MAAM;AACnBS,QAAAA;AACF,KAAA;IAEA,OAAO;QAAE2C,IAAAA,EAAML;AAAY,KAAA;AAC7B,CAAA;AAEA,MAAMM,gBAAgB,OAAOC,QAAAA,GAAAA;IAC3B,IAAI,CAACA,UAAU,OAAO,GAAA;IAEtB,MAAMC,YAAAA,GAAe,MAAMC,MAAAA,CAAOC,EAAE,CAACC,KAAK,CAACC,0BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAAEC,KAAAA,EAAO;YAAEC,EAAAA,EAAIR;AAAS;AAAE,KAAA,CAAA;AAE/F,IAAA,OAAOC,aAAahE,IAAI;AAC1B,CAAA;AAEA,MAAMwE,WAAAA,GAAc,OAAOC,GAAAA,GAAgB,EAAE,GAAA;IAC3C,MAAMC,aAAAA,GAAgB,MAAMT,MAAAA,CAAOC,EAAE,CAClCC,KAAK,CAACQ,wBAAAA,CAAAA,CACNC,QAAQ,CAAC;QAAEN,KAAAA,EAAO;YAAEC,EAAAA,EAAI;gBAAEM,GAAAA,EAAKJ;AAAI;AAAE;AAAE,KAAA,CAAA;IAE1C,MAAMK,OAAAA,CAAQC,GAAG,CAACL,aAAAA,CAAcM,GAAG,CAAC,CAACnB,IAAAA,GAAeoB,gBAAAA,CAAW,QAAA,CAAA,CAAUC,MAAM,CAACrB,IAAAA,CAAAA,CAAAA,CAAAA;IAEhF,OAAOa,aAAAA;AACT,CAAA;AAEA,MAAMS,eAAe,OAAOtB,IAAAA,GAAAA;AAC1B,IAAA,MAAM,EAAEuB,QAAQ,EAAE,GAAGnB,MAAAA,CAAOoB,OAAO,CAACC,MAAM;IAC1C,MAAM,EAAEF,UAAUG,cAAc,EAAE,GAAGtB,MAAAA,CAAOuB,MAAM,CAAC7C,GAAG,CAAS,gBAAA,CAAA;IAC/D,MAAM8C,SAAAA,GAAY,MAAML,QAAAA,CAASK,SAAS,EAAA;AAC1C5B,IAAAA,IAAAA,CAAK6B,WAAW,GAAG,KAAA;;AAGnB,IAAA,IAAI7B,IAAAA,CAAKuB,QAAQ,KAAKG,cAAAA,IAAkB,CAACE,SAAAA,EAAW;QAClD,OAAO5B,IAAAA;AACT,IAAA;AAEA,IAAA,MAAM8B,UAAU,OAAO9B,IAAAA,GAAAA;AACrB,QAAA,MAAM+B,SAAAA,GAAY,MAAMR,QAAAA,CAASS,YAAY,CAAChC,IAAAA,CAAAA;QAC9CA,IAAAA,CAAKjE,GAAG,GAAGgG,SAAAA,CAAUhG,GAAG;AACxBiE,QAAAA,IAAAA,CAAK6B,WAAW,GAAG,IAAA;AACrB,IAAA,CAAA;AAEA,IAAA,MAAMI,aAAaC,YAAAA,CAAUlC,IAAAA,CAAAA;;AAG7B,IAAA,MAAM8B,OAAAA,CAAQG,UAAAA,CAAAA;IACd,IAAIjC,IAAAA,CAAKmC,OAAO,EAAE;QAChB,MAAMC,WAAAA,CAAMjB,GAAG,CAACkB,MAAAA,CAAOC,MAAM,CAACL,UAAAA,CAAWE,OAAO,IAAI,EAAC,CAAA,EAAIL,OAAAA,CAAAA;AAC3D,IAAA;IAEA,OAAOG,UAAAA;AACT,CAAA;AAGA,WAAe;AAAEhC,IAAAA,aAAAA;AAAeU,IAAAA,WAAAA;AAAaW,IAAAA,YAAAA;AAAclE,IAAAA;AAAoB,CAAA;;;;"}

package/dist/server/services/file.mjs

@@ -1,8 +1,126 @@
+import path from 'path';
+import dns from 'dns/promises';
+import net from 'net';
+import fse from 'fs-extra';
 import { cloneDeep } from 'lodash/fp';
-import { async } from '@strapi/utils';
-import { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants.mjs';
+import { errors, async } from '@strapi/utils';
+import { FILE_MODEL_UID, FOLDER_MODEL_UID } from '../constants.mjs';
 import { getService } from '../utils/index.mjs';
 
+const { ApplicationError } = errors;
+const FETCH_TIMEOUT_MS = 60000; // 60 seconds
+// Blocks loopback, link-local (cloud metadata), and RFC-1918 private ranges to prevent SSRF
+const SSRF_BLOCK_LIST = new net.BlockList();
+SSRF_BLOCK_LIST.addSubnet('127.0.0.0', 8); // loopback
+SSRF_BLOCK_LIST.addSubnet('10.0.0.0', 8); // RFC-1918
+SSRF_BLOCK_LIST.addSubnet('172.16.0.0', 12); // RFC-1918
+SSRF_BLOCK_LIST.addSubnet('192.168.0.0', 16); // RFC-1918
+SSRF_BLOCK_LIST.addSubnet('169.254.0.0', 16); // link-local / cloud metadata (AWS, GCP, Azure)
+SSRF_BLOCK_LIST.addSubnet('::1', 128, 'ipv6'); // IPv6 loopback
+SSRF_BLOCK_LIST.addSubnet('fc00::', 7, 'ipv6'); // IPv6 unique local
+SSRF_BLOCK_LIST.addSubnet('fe80::', 10, 'ipv6'); // IPv6 link-local
+/**
+ * Extracts filename from a URL path or Content-Disposition header
+ */ const getFilenameFromUrl = (url, contentDisposition)=>{
+    // Try Content-Disposition header first
+    if (contentDisposition) {
+        // Extracts filename from Content-Disposition header (e.g. filename="photo.jpg" or filename*=UTF-8''photo.jpg)
+        const filenameMatch = contentDisposition.match(/filename\*?=['"]?(?:UTF-\d['"]*)?([^;\r\n"']*)['"]?/i);
+        if (filenameMatch?.[1]) {
+            // Use path.basename to prevent path traversal attacks
+            return path.basename(decodeURIComponent(filenameMatch[1]));
+        }
+    }
+    // Fall back to URL path
+    try {
+        const urlObj = new URL(url);
+        const pathname = urlObj.pathname;
+        const filename = pathname.split('/').pop();
+        if (filename && filename.length > 0) {
+            // Use path.basename to prevent path traversal attacks (e.g., URL-encoded separators)
+            return path.basename(decodeURIComponent(filename));
+        }
+    } catch  {
+    // Invalid URL, use default
+    }
+    // Generate a timestamp-based default filename
+    const now = new Date();
+    const date = now.toISOString().split('T')[0]; // 2024-02-23
+    const time = now.toTimeString().split(' ')[0].replace(/:/g, ''); // 143052
+    return `untitled_${date}_${time}`;
+};
+/**
+ * Fetches a URL and saves it as a temporary file
+ * Returns an InputFile-compatible object for use with the upload pipeline
+ */ const fetchUrlToInputFile = async (url, tmpWorkingDirectory, sizeLimit)=>{
+    // Validate URL protocol
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(url);
+    } catch  {
+        throw new ApplicationError(`Invalid URL: ${url}`);
+    }
+    if (![
+        'http:',
+        'https:'
+    ].includes(parsedUrl.protocol)) {
+        throw new ApplicationError(`Invalid URL protocol. Only http and https are allowed: ${url}`);
+    }
+    // Resolve hostname and block private/internal IP ranges to prevent SSRF
+    try {
+        const { address, family } = await dns.lookup(parsedUrl.hostname);
+        const type = family === 6 ? 'ipv6' : 'ipv4';
+        if (SSRF_BLOCK_LIST.check(address, type)) {
+            throw new ApplicationError(`URL resolves to a blocked address: ${url}`);
+        }
+    } catch (error) {
+        if (error instanceof ApplicationError) throw error;
+        throw new ApplicationError(`Could not resolve hostname: ${parsedUrl.hostname}`);
+    }
+    // Fetch the URL with timeout
+    let response;
+    try {
+        response = await fetch(url, {
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+        });
+    } catch (error) {
+        if (error instanceof Error && error.name === 'TimeoutError') {
+            throw new ApplicationError(`Request timed out while fetching URL: ${url}`);
+        }
+        throw error;
+    }
+    if (!response.ok) {
+        throw new ApplicationError(`Failed to fetch URL: ${url} (${response.status} ${response.statusText})`);
+    }
+    // Check Content-Length header for early rejection of large files
+    if (sizeLimit) {
+        const contentLength = response.headers.get('content-length');
+        if (contentLength && parseInt(contentLength, 10) > sizeLimit) {
+            throw new ApplicationError(`File too large: maximum allowed size is ${Math.round(sizeLimit / (1024 * 1024))}MB`);
+        }
+    }
+    // Get content type and filename
+    const contentType = response.headers.get('content-type')?.split(';')[0] || 'application/octet-stream';
+    const contentDisposition = response.headers.get('content-disposition');
+    const filename = getFilenameFromUrl(response.url, contentDisposition);
+    // Read response body
+    const arrayBuffer = await response.arrayBuffer();
+    const buffer = Buffer.from(arrayBuffer);
+    // Write to temp file
+    const tmpFilePath = path.join(tmpWorkingDirectory, filename);
+    await fse.writeFile(tmpFilePath, buffer);
+    // Create file object compatible with upload pipeline
+    const fetchedFile = {
+        filepath: tmpFilePath,
+        originalFilename: filename,
+        mimetype: contentType,
+        size: buffer.length,
+        tmpWorkingDirectory
+    };
+    return {
+        file: fetchedFile
+    };
+};
 const getFolderPath = async (folderId)=>{
     if (!folderId) return '/';
     const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({
@@ -48,7 +166,8 @@ const signFileUrls = async (file)=>{
 var file = {
     getFolderPath,
     deleteByIds,
-    signFileUrls
+    signFileUrls,
+    fetchUrlToInputFile
 };
 
 export { file as default };

package/dist/server/services/file.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"file.mjs","sources":["../../../server/src/services/file.ts"],"sourcesContent":["import { cloneDeep } from 'lodash/fp';\nimport { async } from '@strapi/utils';\n\nimport { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants';\nimport { getService } from '../utils';\n\nimport { Config, type File } from '../types';\n\nconst getFolderPath = async (folderId?: number | null) => {\n  if (!folderId) return '/';\n\n  const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } });\n\n  return parentFolder.path;\n};\n\nconst deleteByIds = async (ids: number[] = []) => {\n  const filesToDelete = await strapi.db\n    .query(FILE_MODEL_UID)\n    .findMany({ where: { id: { $in: ids } } });\n\n  await Promise.all(filesToDelete.map((file: File) => getService('upload').remove(file)));\n\n  return filesToDelete;\n};\n\nconst signFileUrls = async (file: File) => {\n  const { provider } = strapi.plugins.upload;\n  const { provider: providerConfig } = strapi.config.get<Config>('plugin::upload');\n  const isPrivate = await provider.isPrivate();\n  file.isUrlSigned = false;\n\n  // Check file provider and if provider is private\n  if (file.provider !== providerConfig || !isPrivate) {\n    return file;\n  }\n\n  const signUrl = async (file: File) => {\n    const signedUrl = await provider.getSignedUrl(file);\n    file.url = signedUrl.url;\n    file.isUrlSigned = true;\n  };\n\n  const signedFile = cloneDeep(file);\n\n  // Sign each file format\n  await signUrl(signedFile);\n  if (file.formats) {\n    await async.map(Object.values(signedFile.formats ?? {}), signUrl);\n  }\n\n  return signedFile;\n};\n\nexport default { getFolderPath, deleteByIds, signFileUrls };\n"],"names":["getFolderPath","folderId","parentFolder","strapi","db","query","FOLDER_MODEL_UID","findOne","where","id","path","deleteByIds","ids","filesToDelete","FILE_MODEL_UID","findMany","$in","Promise","all","map","file","getService","remove","signFileUrls","provider","plugins","upload","providerConfig","config","get","isPrivate","isUrlSigned","signUrl","signedUrl","getSignedUrl","url","signedFile","cloneDeep","formats","async","Object","values"],"mappings":";;;;;AAQA,MAAMA,gBAAgB,OAAOC,QAAAA,GAAAA;IAC3B,IAAI,CAACA,UAAU,OAAO,GAAA;IAEtB,MAAMC,YAAAA,GAAe,MAAMC,MAAOC,CAAAA,EAAE,CAACC,KAAK,CAACC,gBAAkBC,CAAAA,CAAAA,OAAO,CAAC;QAAEC,KAAO,EAAA;YAAEC,EAAIR,EAAAA;AAAS;AAAE,KAAA,CAAA;AAE/F,IAAA,OAAOC,aAAaQ,IAAI;AAC1B,CAAA;AAEA,MAAMC,WAAAA,GAAc,OAAOC,GAAAA,GAAgB,EAAE,GAAA;IAC3C,MAAMC,aAAAA,GAAgB,MAAMV,MAAOC,CAAAA,EAAE,CAClCC,KAAK,CAACS,cACNC,CAAAA,CAAAA,QAAQ,CAAC;QAAEP,KAAO,EAAA;YAAEC,EAAI,EAAA;gBAAEO,GAAKJ,EAAAA;AAAI;AAAE;AAAE,KAAA,CAAA;IAE1C,MAAMK,OAAAA,CAAQC,GAAG,CAACL,aAAcM,CAAAA,GAAG,CAAC,CAACC,IAAeC,GAAAA,UAAAA,CAAW,QAAUC,CAAAA,CAAAA,MAAM,CAACF,IAAAA,CAAAA,CAAAA,CAAAA;IAEhF,OAAOP,aAAAA;AACT,CAAA;AAEA,MAAMU,eAAe,OAAOH,IAAAA,GAAAA;AAC1B,IAAA,MAAM,EAAEI,QAAQ,EAAE,GAAGrB,MAAOsB,CAAAA,OAAO,CAACC,MAAM;IAC1C,MAAM,EAAEF,UAAUG,cAAc,EAAE,GAAGxB,MAAOyB,CAAAA,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;IAC/D,MAAMC,SAAAA,GAAY,MAAMN,QAAAA,CAASM,SAAS,EAAA;AAC1CV,IAAAA,IAAAA,CAAKW,WAAW,GAAG,KAAA;;AAGnB,IAAA,IAAIX,IAAKI,CAAAA,QAAQ,KAAKG,cAAAA,IAAkB,CAACG,SAAW,EAAA;QAClD,OAAOV,IAAAA;AACT;AAEA,IAAA,MAAMY,UAAU,OAAOZ,IAAAA,GAAAA;AACrB,QAAA,MAAMa,SAAY,GAAA,MAAMT,QAASU,CAAAA,YAAY,CAACd,IAAAA,CAAAA;QAC9CA,IAAKe,CAAAA,GAAG,GAAGF,SAAAA,CAAUE,GAAG;AACxBf,QAAAA,IAAAA,CAAKW,WAAW,GAAG,IAAA;AACrB,KAAA;AAEA,IAAA,MAAMK,aAAaC,SAAUjB,CAAAA,IAAAA,CAAAA;;AAG7B,IAAA,MAAMY,OAAQI,CAAAA,UAAAA,CAAAA;IACd,IAAIhB,IAAAA,CAAKkB,OAAO,EAAE;QAChB,MAAMC,KAAAA,CAAMpB,GAAG,CAACqB,MAAOC,CAAAA,MAAM,CAACL,UAAWE,CAAAA,OAAO,IAAI,EAAKN,CAAAA,EAAAA,OAAAA,CAAAA;AAC3D;IAEA,OAAOI,UAAAA;AACT,CAAA;AAEA,WAAe;AAAEpC,IAAAA,aAAAA;AAAeW,IAAAA,WAAAA;AAAaY,IAAAA;AAAa,CAAE;;;;"}
+{"version":3,"file":"file.mjs","sources":["../../../server/src/services/file.ts"],"sourcesContent":["import path from 'path';\nimport dns from 'dns/promises';\nimport net from 'net';\nimport fse from 'fs-extra';\nimport { cloneDeep } from 'lodash/fp';\nimport { async, errors } from '@strapi/utils';\n\nimport { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants';\nimport { getService } from '../utils';\n\nimport { Config, type File } from '../types';\n\nconst { ApplicationError } = errors;\n\nconst FETCH_TIMEOUT_MS = 60_000; // 60 seconds\n\n// Blocks loopback, link-local (cloud metadata), and RFC-1918 private ranges to prevent SSRF\nconst SSRF_BLOCK_LIST = new net.BlockList();\nSSRF_BLOCK_LIST.addSubnet('127.0.0.0', 8); // loopback\nSSRF_BLOCK_LIST.addSubnet('10.0.0.0', 8); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('172.16.0.0', 12); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('192.168.0.0', 16); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('169.254.0.0', 16); // link-local / cloud metadata (AWS, GCP, Azure)\nSSRF_BLOCK_LIST.addSubnet('::1', 128, 'ipv6'); // IPv6 loopback\nSSRF_BLOCK_LIST.addSubnet('fc00::', 7, 'ipv6'); // IPv6 unique local\nSSRF_BLOCK_LIST.addSubnet('fe80::', 10, 'ipv6'); // IPv6 link-local\n\n/**\n * Represents a file fetched from a URL, compatible with the upload pipeline\n */\ninterface UrlFetchedFile {\n  filepath: string;\n  originalFilename: string;\n  mimetype: string;\n  size: number;\n  tmpWorkingDirectory?: string;\n}\n\ninterface FetchUrlResult {\n  file: UrlFetchedFile;\n}\n\n/**\n * Extracts filename from a URL path or Content-Disposition header\n */\nconst getFilenameFromUrl = (url: string, contentDisposition?: string | null): string => {\n  // Try Content-Disposition header first\n  if (contentDisposition) {\n    // Extracts filename from Content-Disposition header (e.g. filename=\"photo.jpg\" or filename*=UTF-8''photo.jpg)\n    const filenameMatch = contentDisposition.match(\n      /filename\\*?=['\"]?(?:UTF-\\d['\"]*)?([^;\\r\\n\"']*)['\"]?/i\n    );\n    if (filenameMatch?.[1]) {\n      // Use path.basename to prevent path traversal attacks\n      return path.basename(decodeURIComponent(filenameMatch[1]));\n    }\n  }\n\n  // Fall back to URL path\n  try {\n    const urlObj = new URL(url);\n    const pathname = urlObj.pathname;\n    const filename = pathname.split('/').pop();\n    if (filename && filename.length > 0) {\n      // Use path.basename to prevent path traversal attacks (e.g., URL-encoded separators)\n      return path.basename(decodeURIComponent(filename));\n    }\n  } catch {\n    // Invalid URL, use default\n  }\n\n  // Generate a timestamp-based default filename\n  const now = new Date();\n  const date = now.toISOString().split('T')[0]; // 2024-02-23\n  const time = now.toTimeString().split(' ')[0].replace(/:/g, ''); // 143052\n  return `untitled_${date}_${time}`;\n};\n\n/**\n * Fetches a URL and saves it as a temporary file\n * Returns an InputFile-compatible object for use with the upload pipeline\n */\nconst fetchUrlToInputFile = async (\n  url: string,\n  tmpWorkingDirectory: string,\n  sizeLimit?: number\n): Promise<FetchUrlResult> => {\n  // Validate URL protocol\n  let parsedUrl: URL;\n  try {\n    parsedUrl = new URL(url);\n  } catch {\n    throw new ApplicationError(`Invalid URL: ${url}`);\n  }\n\n  if (!['http:', 'https:'].includes(parsedUrl.protocol)) {\n    throw new ApplicationError(`Invalid URL protocol. Only http and https are allowed: ${url}`);\n  }\n\n  // Resolve hostname and block private/internal IP ranges to prevent SSRF\n  try {\n    const { address, family } = await dns.lookup(parsedUrl.hostname);\n    const type = family === 6 ? 'ipv6' : 'ipv4';\n    if (SSRF_BLOCK_LIST.check(address, type)) {\n      throw new ApplicationError(`URL resolves to a blocked address: ${url}`);\n    }\n  } catch (error) {\n    if (error instanceof ApplicationError) throw error;\n    throw new ApplicationError(`Could not resolve hostname: ${parsedUrl.hostname}`);\n  }\n\n  // Fetch the URL with timeout\n  let response: Response;\n  try {\n    response = await fetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n  } catch (error) {\n    if (error instanceof Error && error.name === 'TimeoutError') {\n      throw new ApplicationError(`Request timed out while fetching URL: ${url}`);\n    }\n    throw error;\n  }\n\n  if (!response.ok) {\n    throw new ApplicationError(\n      `Failed to fetch URL: ${url} (${response.status} ${response.statusText})`\n    );\n  }\n\n  // Check Content-Length header for early rejection of large files\n  if (sizeLimit) {\n    const contentLength = response.headers.get('content-length');\n    if (contentLength && parseInt(contentLength, 10) > sizeLimit) {\n      throw new ApplicationError(\n        `File too large: maximum allowed size is ${Math.round(sizeLimit / (1024 * 1024))}MB`\n      );\n    }\n  }\n\n  // Get content type and filename\n  const contentType =\n    response.headers.get('content-type')?.split(';')[0] || 'application/octet-stream';\n  const contentDisposition = response.headers.get('content-disposition');\n  const filename = getFilenameFromUrl(response.url, contentDisposition);\n\n  // Read response body\n  const arrayBuffer = await response.arrayBuffer();\n  const buffer = Buffer.from(arrayBuffer);\n\n  // Write to temp file\n  const tmpFilePath = path.join(tmpWorkingDirectory, filename);\n  await fse.writeFile(tmpFilePath, buffer);\n\n  // Create file object compatible with upload pipeline\n  const fetchedFile: UrlFetchedFile = {\n    filepath: tmpFilePath,\n    originalFilename: filename,\n    mimetype: contentType,\n    size: buffer.length,\n    tmpWorkingDirectory,\n  };\n\n  return { file: fetchedFile };\n};\n\nconst getFolderPath = async (folderId?: number | null) => {\n  if (!folderId) return '/';\n\n  const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } });\n\n  return parentFolder.path;\n};\n\nconst deleteByIds = async (ids: number[] = []) => {\n  const filesToDelete = await strapi.db\n    .query(FILE_MODEL_UID)\n    .findMany({ where: { id: { $in: ids } } });\n\n  await Promise.all(filesToDelete.map((file: File) => getService('upload').remove(file)));\n\n  return filesToDelete;\n};\n\nconst signFileUrls = async (file: File) => {\n  const { provider } = strapi.plugins.upload;\n  const { provider: providerConfig } = strapi.config.get<Config>('plugin::upload');\n  const isPrivate = await provider.isPrivate();\n  file.isUrlSigned = false;\n\n  // Check file provider and if provider is private\n  if (file.provider !== providerConfig || !isPrivate) {\n    return file;\n  }\n\n  const signUrl = async (file: File) => {\n    const signedUrl = await provider.getSignedUrl(file);\n    file.url = signedUrl.url;\n    file.isUrlSigned = true;\n  };\n\n  const signedFile = cloneDeep(file);\n\n  // Sign each file format\n  await signUrl(signedFile);\n  if (file.formats) {\n    await async.map(Object.values(signedFile.formats ?? {}), signUrl);\n  }\n\n  return signedFile;\n};\n\nexport type { UrlFetchedFile, FetchUrlResult };\nexport default { getFolderPath, deleteByIds, signFileUrls, fetchUrlToInputFile };\n"],"names":["ApplicationError","errors","FETCH_TIMEOUT_MS","SSRF_BLOCK_LIST","net","BlockList","addSubnet","getFilenameFromUrl","url","contentDisposition","filenameMatch","match","path","basename","decodeURIComponent","urlObj","URL","pathname","filename","split","pop","length","now","Date","date","toISOString","time","toTimeString","replace","fetchUrlToInputFile","tmpWorkingDirectory","sizeLimit","parsedUrl","includes","protocol","address","family","dns","lookup","hostname","type","check","error","response","fetch","signal","AbortSignal","timeout","Error","name","ok","status","statusText","contentLength","headers","get","parseInt","Math","round","contentType","arrayBuffer","buffer","Buffer","from","tmpFilePath","join","fse","writeFile","fetchedFile","filepath","originalFilename","mimetype","size","file","getFolderPath","folderId","parentFolder","strapi","db","query","FOLDER_MODEL_UID","findOne","where","id","deleteByIds","ids","filesToDelete","FILE_MODEL_UID","findMany","$in","Promise","all","map","getService","remove","signFileUrls","provider","plugins","upload","providerConfig","config","isPrivate","isUrlSigned","signUrl","signedUrl","getSignedUrl","signedFile","cloneDeep","formats","async","Object","values"],"mappings":";;;;;;;;;AAYA,MAAM,EAAEA,gBAAgB,EAAE,GAAGC,MAAAA;AAE7B,MAAMC,gBAAAA,GAAmB;AAEzB;AACA,MAAMC,eAAAA,GAAkB,IAAIC,GAAAA,CAAIC,SAAS,EAAA;AACzCF,eAAAA,CAAgBG,SAAS,CAAC,WAAA,EAAa,CAAA,CAAA,CAAA;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,UAAA,EAAY,CAAA,CAAA,CAAA;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,YAAA,EAAc,EAAA,CAAA,CAAA;AACxCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,KAAA,EAAO,GAAA,EAAK;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,CAAA,EAAG;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,EAAA,EAAI;AAiBxC;;IAGA,MAAMC,kBAAAA,GAAqB,CAACC,GAAAA,EAAaC,kBAAAA,GAAAA;;AAEvC,IAAA,IAAIA,kBAAAA,EAAoB;;QAEtB,MAAMC,aAAAA,GAAgBD,kBAAAA,CAAmBE,KAAK,CAC5C,sDAAA,CAAA;QAEF,IAAID,aAAAA,GAAgB,CAAA,CAAE,EAAE;;AAEtB,YAAA,OAAOE,KAAKC,QAAQ,CAACC,kBAAAA,CAAmBJ,aAAa,CAAC,CAAA,CAAE,CAAA,CAAA;AAC1D,QAAA;AACF,IAAA;;IAGA,IAAI;QACF,MAAMK,MAAAA,GAAS,IAAIC,GAAAA,CAAIR,GAAAA,CAAAA;QACvB,MAAMS,QAAAA,GAAWF,OAAOE,QAAQ;AAChC,QAAA,MAAMC,QAAAA,GAAWD,QAAAA,CAASE,KAAK,CAAC,KAAKC,GAAG,EAAA;AACxC,QAAA,IAAIF,QAAAA,IAAYA,QAAAA,CAASG,MAAM,GAAG,CAAA,EAAG;;YAEnC,OAAOT,IAAAA,CAAKC,QAAQ,CAACC,kBAAAA,CAAmBI,QAAAA,CAAAA,CAAAA;AAC1C,QAAA;AACF,IAAA,CAAA,CAAE,OAAM;;AAER,IAAA;;AAGA,IAAA,MAAMI,MAAM,IAAIC,IAAAA,EAAAA;IAChB,MAAMC,IAAAA,GAAOF,GAAAA,CAAIG,WAAW,EAAA,CAAGN,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAAA;AAC5C,IAAA,MAAMO,IAAAA,GAAOJ,GAAAA,CAAIK,YAAY,EAAA,CAAGR,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAACS,OAAO,CAAC,IAAA,EAAM;AAC5D,IAAA,OAAO,CAAC,SAAS,EAAEJ,IAAAA,CAAK,CAAC,EAAEE,IAAAA,CAAAA,CAAM;AACnC,CAAA;AAEA;;;AAGC,IACD,MAAMG,mBAAAA,GAAsB,OAC1BrB,GAAAA,EACAsB,mBAAAA,EACAC,SAAAA,GAAAA;;IAGA,IAAIC,SAAAA;IACJ,IAAI;AACFA,QAAAA,SAAAA,GAAY,IAAIhB,GAAAA,CAAIR,GAAAA,CAAAA;AACtB,IAAA,CAAA,CAAE,OAAM;AACN,QAAA,MAAM,IAAIR,gBAAAA,CAAiB,CAAC,aAAa,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAClD,IAAA;AAEA,IAAA,IAAI,CAAC;AAAC,QAAA,OAAA;AAAS,QAAA;AAAS,KAAA,CAACyB,QAAQ,CAACD,SAAAA,CAAUE,QAAQ,CAAA,EAAG;AACrD,QAAA,MAAM,IAAIlC,gBAAAA,CAAiB,CAAC,uDAAuD,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC5F,IAAA;;IAGA,IAAI;QACF,MAAM,EAAE2B,OAAO,EAAEC,MAAM,EAAE,GAAG,MAAMC,GAAAA,CAAIC,MAAM,CAACN,SAAAA,CAAUO,QAAQ,CAAA;QAC/D,MAAMC,IAAAA,GAAOJ,MAAAA,KAAW,CAAA,GAAI,MAAA,GAAS,MAAA;AACrC,QAAA,IAAIjC,eAAAA,CAAgBsC,KAAK,CAACN,OAAAA,EAASK,IAAAA,CAAAA,EAAO;AACxC,YAAA,MAAM,IAAIxC,gBAAAA,CAAiB,CAAC,mCAAmC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AACxE,QAAA;AACF,IAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;QACd,IAAIA,KAAAA,YAAiB1C,kBAAkB,MAAM0C,KAAAA;AAC7C,QAAA,MAAM,IAAI1C,gBAAAA,CAAiB,CAAC,4BAA4B,EAAEgC,SAAAA,CAAUO,QAAQ,CAAA,CAAE,CAAA;AAChF,IAAA;;IAGA,IAAII,QAAAA;IACJ,IAAI;QACFA,QAAAA,GAAW,MAAMC,MAAMpC,GAAAA,EAAK;YAAEqC,MAAAA,EAAQC,WAAAA,CAAYC,OAAO,CAAC7C,gBAAAA;AAAkB,SAAA,CAAA;AAC9E,IAAA,CAAA,CAAE,OAAOwC,KAAAA,EAAO;AACd,QAAA,IAAIA,KAAAA,YAAiBM,KAAAA,IAASN,KAAAA,CAAMO,IAAI,KAAK,cAAA,EAAgB;AAC3D,YAAA,MAAM,IAAIjD,gBAAAA,CAAiB,CAAC,sCAAsC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC3E,QAAA;QACA,MAAMkC,KAAAA;AACR,IAAA;IAEA,IAAI,CAACC,QAAAA,CAASO,EAAE,EAAE;AAChB,QAAA,MAAM,IAAIlD,gBAAAA,CACR,CAAC,qBAAqB,EAAEQ,IAAI,EAAE,EAAEmC,QAAAA,CAASQ,MAAM,CAAC,CAAC,EAAER,SAASS,UAAU,CAAC,CAAC,CAAC,CAAA;AAE7E,IAAA;;AAGA,IAAA,IAAIrB,SAAAA,EAAW;AACb,QAAA,MAAMsB,aAAAA,GAAgBV,QAAAA,CAASW,OAAO,CAACC,GAAG,CAAC,gBAAA,CAAA;AAC3C,QAAA,IAAIF,aAAAA,IAAiBG,QAAAA,CAASH,aAAAA,EAAe,EAAA,CAAA,GAAMtB,SAAAA,EAAW;AAC5D,YAAA,MAAM,IAAI/B,gBAAAA,CACR,CAAC,wCAAwC,EAAEyD,IAAAA,CAAKC,KAAK,CAAC3B,SAAAA,IAAa,IAAA,GAAO,IAAG,CAAA,CAAA,CAAI,EAAE,CAAC,CAAA;AAExF,QAAA;AACF,IAAA;;IAGA,MAAM4B,WAAAA,GACJhB,QAAAA,CAASW,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,EAAiBpC,KAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,0BAAA;AACzD,IAAA,MAAMV,kBAAAA,GAAqBkC,QAAAA,CAASW,OAAO,CAACC,GAAG,CAAC,qBAAA,CAAA;AAChD,IAAA,MAAMrC,QAAAA,GAAWX,kBAAAA,CAAmBoC,QAAAA,CAASnC,GAAG,EAAEC,kBAAAA,CAAAA;;IAGlD,MAAMmD,WAAAA,GAAc,MAAMjB,QAAAA,CAASiB,WAAW,EAAA;IAC9C,MAAMC,MAAAA,GAASC,MAAAA,CAAOC,IAAI,CAACH,WAAAA,CAAAA;;AAG3B,IAAA,MAAMI,WAAAA,GAAcpD,IAAAA,CAAKqD,IAAI,CAACnC,mBAAAA,EAAqBZ,QAAAA,CAAAA;IACnD,MAAMgD,GAAAA,CAAIC,SAAS,CAACH,WAAAA,EAAaH,MAAAA,CAAAA;;AAGjC,IAAA,MAAMO,WAAAA,GAA8B;QAClCC,QAAAA,EAAUL,WAAAA;QACVM,gBAAAA,EAAkBpD,QAAAA;QAClBqD,QAAAA,EAAUZ,WAAAA;AACVa,QAAAA,IAAAA,EAAMX,OAAOxC,MAAM;AACnBS,QAAAA;AACF,KAAA;IAEA,OAAO;QAAE2C,IAAAA,EAAML;AAAY,KAAA;AAC7B,CAAA;AAEA,MAAMM,gBAAgB,OAAOC,QAAAA,GAAAA;IAC3B,IAAI,CAACA,UAAU,OAAO,GAAA;IAEtB,MAAMC,YAAAA,GAAe,MAAMC,MAAAA,CAAOC,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAAEC,KAAAA,EAAO;YAAEC,EAAAA,EAAIR;AAAS;AAAE,KAAA,CAAA;AAE/F,IAAA,OAAOC,aAAahE,IAAI;AAC1B,CAAA;AAEA,MAAMwE,WAAAA,GAAc,OAAOC,GAAAA,GAAgB,EAAE,GAAA;IAC3C,MAAMC,aAAAA,GAAgB,MAAMT,MAAAA,CAAOC,EAAE,CAClCC,KAAK,CAACQ,cAAAA,CAAAA,CACNC,QAAQ,CAAC;QAAEN,KAAAA,EAAO;YAAEC,EAAAA,EAAI;gBAAEM,GAAAA,EAAKJ;AAAI;AAAE;AAAE,KAAA,CAAA;IAE1C,MAAMK,OAAAA,CAAQC,GAAG,CAACL,aAAAA,CAAcM,GAAG,CAAC,CAACnB,IAAAA,GAAeoB,UAAAA,CAAW,QAAA,CAAA,CAAUC,MAAM,CAACrB,IAAAA,CAAAA,CAAAA,CAAAA;IAEhF,OAAOa,aAAAA;AACT,CAAA;AAEA,MAAMS,eAAe,OAAOtB,IAAAA,GAAAA;AAC1B,IAAA,MAAM,EAAEuB,QAAQ,EAAE,GAAGnB,MAAAA,CAAOoB,OAAO,CAACC,MAAM;IAC1C,MAAM,EAAEF,UAAUG,cAAc,EAAE,GAAGtB,MAAAA,CAAOuB,MAAM,CAAC7C,GAAG,CAAS,gBAAA,CAAA;IAC/D,MAAM8C,SAAAA,GAAY,MAAML,QAAAA,CAASK,SAAS,EAAA;AAC1C5B,IAAAA,IAAAA,CAAK6B,WAAW,GAAG,KAAA;;AAGnB,IAAA,IAAI7B,IAAAA,CAAKuB,QAAQ,KAAKG,cAAAA,IAAkB,CAACE,SAAAA,EAAW;QAClD,OAAO5B,IAAAA;AACT,IAAA;AAEA,IAAA,MAAM8B,UAAU,OAAO9B,IAAAA,GAAAA;AACrB,QAAA,MAAM+B,SAAAA,GAAY,MAAMR,QAAAA,CAASS,YAAY,CAAChC,IAAAA,CAAAA;QAC9CA,IAAAA,CAAKjE,GAAG,GAAGgG,SAAAA,CAAUhG,GAAG;AACxBiE,QAAAA,IAAAA,CAAK6B,WAAW,GAAG,IAAA;AACrB,IAAA,CAAA;AAEA,IAAA,MAAMI,aAAaC,SAAAA,CAAUlC,IAAAA,CAAAA;;AAG7B,IAAA,MAAM8B,OAAAA,CAAQG,UAAAA,CAAAA;IACd,IAAIjC,IAAAA,CAAKmC,OAAO,EAAE;QAChB,MAAMC,KAAAA,CAAMjB,GAAG,CAACkB,MAAAA,CAAOC,MAAM,CAACL,UAAAA,CAAWE,OAAO,IAAI,EAAC,CAAA,EAAIL,OAAAA,CAAAA;AAC3D,IAAA;IAEA,OAAOG,UAAAA;AACT,CAAA;AAGA,WAAe;AAAEhC,IAAAA,aAAAA;AAAeU,IAAAA,WAAAA;AAAaW,IAAAA,YAAAA;AAAclE,IAAAA;AAAoB,CAAA;;;;"}