@strapi/upload 5.48.1 → 5.49.0

package/dist/server/services/file.js.map

@@ -1 +1 @@
-{"version":3,"file":"file.js","sources":["../../../server/src/services/file.ts"],"sourcesContent":["import path from 'path';\nimport dns from 'dns/promises';\nimport net from 'net';\nimport fse from 'fs-extra';\nimport { cloneDeep } from 'lodash/fp';\nimport { async, errors } from '@strapi/utils';\n\nimport { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants';\nimport { getService } from '../utils';\n\nimport { Config, type File } from '../types';\n\nconst { ApplicationError } = errors;\n\nconst FETCH_TIMEOUT_MS = 60_000; // 60 seconds\n\n// Blocks loopback, link-local (cloud metadata), and RFC-1918 private ranges to prevent SSRF\nconst SSRF_BLOCK_LIST = new net.BlockList();\nSSRF_BLOCK_LIST.addSubnet('127.0.0.0', 8); // loopback\nSSRF_BLOCK_LIST.addSubnet('10.0.0.0', 8); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('172.16.0.0', 12); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('192.168.0.0', 16); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('169.254.0.0', 16); // link-local / cloud metadata (AWS, GCP, Azure)\nSSRF_BLOCK_LIST.addSubnet('::1', 128, 'ipv6'); // IPv6 loopback\nSSRF_BLOCK_LIST.addSubnet('fc00::', 7, 'ipv6'); // IPv6 unique local\nSSRF_BLOCK_LIST.addSubnet('fe80::', 10, 'ipv6'); // IPv6 link-local\n\n/**\n * Represents a file fetched from a URL, compatible with the upload pipeline\n */\ninterface UrlFetchedFile {\n  filepath: string;\n  originalFilename: string;\n  mimetype: string;\n  size: number;\n  tmpWorkingDirectory?: string;\n}\n\ninterface FetchUrlResult {\n  file: UrlFetchedFile;\n}\n\n/**\n * Extracts filename from a URL path or Content-Disposition header\n */\nconst getFilenameFromUrl = (url: string, contentDisposition?: string | null): string => {\n  // Try Content-Disposition header first\n  if (contentDisposition) {\n    // Extracts filename from Content-Disposition header (e.g. filename=\"photo.jpg\" or filename*=UTF-8''photo.jpg)\n    const filenameMatch = contentDisposition.match(\n      /filename\\*?=['\"]?(?:UTF-\\d['\"]*)?([^;\\r\\n\"']*)['\"]?/i\n    );\n    if (filenameMatch?.[1]) {\n      // Use path.basename to prevent path traversal attacks\n      return path.basename(decodeURIComponent(filenameMatch[1]));\n    }\n  }\n\n  // Fall back to URL path\n  try {\n    const urlObj = new URL(url);\n    const pathname = urlObj.pathname;\n    const filename = pathname.split('/').pop();\n    if (filename && filename.length > 0) {\n      // Use path.basename to prevent path traversal attacks (e.g., URL-encoded separators)\n      return path.basename(decodeURIComponent(filename));\n    }\n  } catch {\n    // Invalid URL, use default\n  }\n\n  // Generate a timestamp-based default filename\n  const now = new Date();\n  const date = now.toISOString().split('T')[0]; // 2024-02-23\n  const time = now.toTimeString().split(' ')[0].replace(/:/g, ''); // 143052\n  return `untitled_${date}_${time}`;\n};\n\n/**\n * Fetches a URL and saves it as a temporary file\n * Returns an InputFile-compatible object for use with the upload pipeline\n */\nconst fetchUrlToInputFile = async (\n  url: string,\n  tmpWorkingDirectory: string,\n  sizeLimit?: number\n): Promise<FetchUrlResult> => {\n  // Validate URL protocol\n  let parsedUrl: URL;\n  try {\n    parsedUrl = new URL(url);\n  } catch {\n    throw new ApplicationError(`Invalid URL: ${url}`);\n  }\n\n  if (!['http:', 'https:'].includes(parsedUrl.protocol)) {\n    throw new ApplicationError(`Invalid URL protocol. Only http and https are allowed: ${url}`);\n  }\n\n  // Resolve hostname and block private/internal IP ranges to prevent SSRF\n  try {\n    const { address, family } = await dns.lookup(parsedUrl.hostname);\n    const type = family === 6 ? 'ipv6' : 'ipv4';\n    if (SSRF_BLOCK_LIST.check(address, type)) {\n      throw new ApplicationError(`URL resolves to a blocked address: ${url}`);\n    }\n  } catch (error) {\n    if (error instanceof ApplicationError) throw error;\n    throw new ApplicationError(`Could not resolve hostname: ${parsedUrl.hostname}`);\n  }\n\n  // use strapi.fetch so we can intercept requests and support proxy settings\n  const doFetch = typeof strapi?.fetch === 'function' ? strapi.fetch : fetch;\n  let response: Response;\n  try {\n    response = await doFetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n  } catch (error) {\n    if (error instanceof Error && error.name === 'TimeoutError') {\n      throw new ApplicationError(`Request timed out while fetching URL: ${url}`);\n    }\n    throw error;\n  }\n\n  if (!response.ok) {\n    throw new ApplicationError(\n      `Failed to fetch URL: ${url} (${response.status} ${response.statusText})`\n    );\n  }\n\n  // Check Content-Length header for early rejection of large files\n  if (sizeLimit) {\n    const contentLength = response.headers.get('content-length');\n    if (contentLength && parseInt(contentLength, 10) > sizeLimit) {\n      throw new ApplicationError(\n        `File too large: maximum allowed size is ${Math.round(sizeLimit / (1024 * 1024))}MB`\n      );\n    }\n  }\n\n  // Get content type and filename\n  const contentType =\n    response.headers.get('content-type')?.split(';')[0] || 'application/octet-stream';\n  const contentDisposition = response.headers.get('content-disposition');\n  const filename = getFilenameFromUrl(response.url, contentDisposition);\n\n  // Read response body\n  const arrayBuffer = await response.arrayBuffer();\n  const buffer = Buffer.from(arrayBuffer);\n\n  // Write to temp file\n  const tmpFilePath = path.join(tmpWorkingDirectory, filename);\n  await fse.writeFile(tmpFilePath, buffer);\n\n  // Create file object compatible with upload pipeline\n  const fetchedFile: UrlFetchedFile = {\n    filepath: tmpFilePath,\n    originalFilename: filename,\n    mimetype: contentType,\n    size: buffer.length,\n    tmpWorkingDirectory,\n  };\n\n  return { file: fetchedFile };\n};\n\nconst getFolderPath = async (folderId?: number | null) => {\n  if (!folderId) return '/';\n\n  const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } });\n\n  return parentFolder.path;\n};\n\nconst deleteByIds = async (ids: number[] = []) => {\n  const filesToDelete = await strapi.db\n    .query(FILE_MODEL_UID)\n    .findMany({ where: { id: { $in: ids } } });\n\n  await Promise.all(filesToDelete.map((file: File) => getService('upload').remove(file)));\n\n  return filesToDelete;\n};\n\nconst signFileUrls = async (file: File) => {\n  const { provider } = strapi.plugins.upload;\n  const { provider: providerConfig } = strapi.config.get<Config>('plugin::upload');\n  const isPrivate = await provider.isPrivate();\n  file.isUrlSigned = false;\n\n  // Check file provider and if provider is private\n  if (file.provider !== providerConfig || !isPrivate) {\n    return file;\n  }\n\n  const signUrl = async (file: File) => {\n    const signedUrl = await provider.getSignedUrl(file);\n    file.url = signedUrl.url;\n    file.isUrlSigned = true;\n  };\n\n  const signedFile = cloneDeep(file);\n\n  // Sign each file format\n  await signUrl(signedFile);\n  if (file.formats) {\n    await async.map(Object.values(signedFile.formats ?? {}), signUrl);\n  }\n\n  return signedFile;\n};\n\nexport type { UrlFetchedFile, FetchUrlResult };\nexport default { getFolderPath, deleteByIds, signFileUrls, fetchUrlToInputFile };\n"],"names":["ApplicationError","errors","FETCH_TIMEOUT_MS","SSRF_BLOCK_LIST","net","BlockList","addSubnet","getFilenameFromUrl","url","contentDisposition","filenameMatch","match","path","basename","decodeURIComponent","urlObj","URL","pathname","filename","split","pop","length","now","Date","date","toISOString","time","toTimeString","replace","fetchUrlToInputFile","tmpWorkingDirectory","sizeLimit","parsedUrl","includes","protocol","address","family","dns","lookup","hostname","type","check","error","doFetch","strapi","fetch","response","signal","AbortSignal","timeout","Error","name","ok","status","statusText","contentLength","headers","get","parseInt","Math","round","contentType","arrayBuffer","buffer","Buffer","from","tmpFilePath","join","fse","writeFile","fetchedFile","filepath","originalFilename","mimetype","size","file","getFolderPath","folderId","parentFolder","db","query","FOLDER_MODEL_UID","findOne","where","id","deleteByIds","ids","filesToDelete","FILE_MODEL_UID","findMany","$in","Promise","all","map","getService","remove","signFileUrls","provider","plugins","upload","providerConfig","config","isPrivate","isUrlSigned","signUrl","signedUrl","getSignedUrl","signedFile","cloneDeep","formats","async","Object","values"],"mappings":";;;;;;;;;;;AAYA,MAAM,EAAEA,gBAAgB,EAAE,GAAGC,YAAAA;AAE7B,MAAMC,gBAAAA,GAAmB;AAEzB;AACA,MAAMC,eAAAA,GAAkB,IAAIC,GAAAA,CAAIC,SAAS,EAAA;AACzCF,eAAAA,CAAgBG,SAAS,CAAC,WAAA,EAAa,CAAA,CAAA,CAAA;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,UAAA,EAAY,CAAA,CAAA,CAAA;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,YAAA,EAAc,EAAA,CAAA,CAAA;AACxCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,KAAA,EAAO,GAAA,EAAK;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,CAAA,EAAG;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,EAAA,EAAI;AAiBxC;;IAGA,MAAMC,kBAAAA,GAAqB,CAACC,GAAAA,EAAaC,kBAAAA,GAAAA;;AAEvC,IAAA,IAAIA,kBAAAA,EAAoB;;QAEtB,MAAMC,aAAAA,GAAgBD,kBAAAA,CAAmBE,KAAK,CAC5C,sDAAA,CAAA;QAEF,IAAID,aAAAA,GAAgB,CAAA,CAAE,EAAE;;AAEtB,YAAA,OAAOE,KAAKC,QAAQ,CAACC,kBAAAA,CAAmBJ,aAAa,CAAC,CAAA,CAAE,CAAA,CAAA;AAC1D,QAAA;AACF,IAAA;;IAGA,IAAI;QACF,MAAMK,MAAAA,GAAS,IAAIC,GAAAA,CAAIR,GAAAA,CAAAA;QACvB,MAAMS,QAAAA,GAAWF,OAAOE,QAAQ;AAChC,QAAA,MAAMC,QAAAA,GAAWD,QAAAA,CAASE,KAAK,CAAC,KAAKC,GAAG,EAAA;AACxC,QAAA,IAAIF,QAAAA,IAAYA,QAAAA,CAASG,MAAM,GAAG,CAAA,EAAG;;YAEnC,OAAOT,IAAAA,CAAKC,QAAQ,CAACC,kBAAAA,CAAmBI,QAAAA,CAAAA,CAAAA;AAC1C,QAAA;AACF,IAAA,CAAA,CAAE,OAAM;;AAER,IAAA;;AAGA,IAAA,MAAMI,MAAM,IAAIC,IAAAA,EAAAA;IAChB,MAAMC,IAAAA,GAAOF,GAAAA,CAAIG,WAAW,EAAA,CAAGN,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAAA;AAC5C,IAAA,MAAMO,IAAAA,GAAOJ,GAAAA,CAAIK,YAAY,EAAA,CAAGR,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAACS,OAAO,CAAC,IAAA,EAAM;AAC5D,IAAA,OAAO,CAAC,SAAS,EAAEJ,IAAAA,CAAK,CAAC,EAAEE,IAAAA,CAAAA,CAAM;AACnC,CAAA;AAEA;;;AAGC,IACD,MAAMG,mBAAAA,GAAsB,OAC1BrB,GAAAA,EACAsB,mBAAAA,EACAC,SAAAA,GAAAA;;IAGA,IAAIC,SAAAA;IACJ,IAAI;AACFA,QAAAA,SAAAA,GAAY,IAAIhB,GAAAA,CAAIR,GAAAA,CAAAA;AACtB,IAAA,CAAA,CAAE,OAAM;AACN,QAAA,MAAM,IAAIR,gBAAAA,CAAiB,CAAC,aAAa,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAClD,IAAA;AAEA,IAAA,IAAI,CAAC;AAAC,QAAA,OAAA;AAAS,QAAA;AAAS,KAAA,CAACyB,QAAQ,CAACD,SAAAA,CAAUE,QAAQ,CAAA,EAAG;AACrD,QAAA,MAAM,IAAIlC,gBAAAA,CAAiB,CAAC,uDAAuD,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC5F,IAAA;;IAGA,IAAI;QACF,MAAM,EAAE2B,OAAO,EAAEC,MAAM,EAAE,GAAG,MAAMC,GAAAA,CAAIC,MAAM,CAACN,SAAAA,CAAUO,QAAQ,CAAA;QAC/D,MAAMC,IAAAA,GAAOJ,MAAAA,KAAW,CAAA,GAAI,MAAA,GAAS,MAAA;AACrC,QAAA,IAAIjC,eAAAA,CAAgBsC,KAAK,CAACN,OAAAA,EAASK,IAAAA,CAAAA,EAAO;AACxC,YAAA,MAAM,IAAIxC,gBAAAA,CAAiB,CAAC,mCAAmC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AACxE,QAAA;AACF,IAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;QACd,IAAIA,KAAAA,YAAiB1C,kBAAkB,MAAM0C,KAAAA;AAC7C,QAAA,MAAM,IAAI1C,gBAAAA,CAAiB,CAAC,4BAA4B,EAAEgC,SAAAA,CAAUO,QAAQ,CAAA,CAAE,CAAA;AAChF,IAAA;;AAGA,IAAA,MAAMI,UAAU,OAAOC,MAAAA,EAAQC,UAAU,UAAA,GAAaD,MAAAA,CAAOC,KAAK,GAAGA,KAAAA;IACrE,IAAIC,QAAAA;IACJ,IAAI;QACFA,QAAAA,GAAW,MAAMH,QAAQnC,GAAAA,EAAK;YAAEuC,MAAAA,EAAQC,WAAAA,CAAYC,OAAO,CAAC/C,gBAAAA;AAAkB,SAAA,CAAA;AAChF,IAAA,CAAA,CAAE,OAAOwC,KAAAA,EAAO;AACd,QAAA,IAAIA,KAAAA,YAAiBQ,KAAAA,IAASR,KAAAA,CAAMS,IAAI,KAAK,cAAA,EAAgB;AAC3D,YAAA,MAAM,IAAInD,gBAAAA,CAAiB,CAAC,sCAAsC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC3E,QAAA;QACA,MAAMkC,KAAAA;AACR,IAAA;IAEA,IAAI,CAACI,QAAAA,CAASM,EAAE,EAAE;AAChB,QAAA,MAAM,IAAIpD,gBAAAA,CACR,CAAC,qBAAqB,EAAEQ,IAAI,EAAE,EAAEsC,QAAAA,CAASO,MAAM,CAAC,CAAC,EAAEP,SAASQ,UAAU,CAAC,CAAC,CAAC,CAAA;AAE7E,IAAA;;AAGA,IAAA,IAAIvB,SAAAA,EAAW;AACb,QAAA,MAAMwB,aAAAA,GAAgBT,QAAAA,CAASU,OAAO,CAACC,GAAG,CAAC,gBAAA,CAAA;AAC3C,QAAA,IAAIF,aAAAA,IAAiBG,QAAAA,CAASH,aAAAA,EAAe,EAAA,CAAA,GAAMxB,SAAAA,EAAW;AAC5D,YAAA,MAAM,IAAI/B,gBAAAA,CACR,CAAC,wCAAwC,EAAE2D,IAAAA,CAAKC,KAAK,CAAC7B,SAAAA,IAAa,IAAA,GAAO,IAAG,CAAA,CAAA,CAAI,EAAE,CAAC,CAAA;AAExF,QAAA;AACF,IAAA;;IAGA,MAAM8B,WAAAA,GACJf,QAAAA,CAASU,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,EAAiBtC,KAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,0BAAA;AACzD,IAAA,MAAMV,kBAAAA,GAAqBqC,QAAAA,CAASU,OAAO,CAACC,GAAG,CAAC,qBAAA,CAAA;AAChD,IAAA,MAAMvC,QAAAA,GAAWX,kBAAAA,CAAmBuC,QAAAA,CAAStC,GAAG,EAAEC,kBAAAA,CAAAA;;IAGlD,MAAMqD,WAAAA,GAAc,MAAMhB,QAAAA,CAASgB,WAAW,EAAA;IAC9C,MAAMC,MAAAA,GAASC,MAAAA,CAAOC,IAAI,CAACH,WAAAA,CAAAA;;AAG3B,IAAA,MAAMI,WAAAA,GAActD,IAAAA,CAAKuD,IAAI,CAACrC,mBAAAA,EAAqBZ,QAAAA,CAAAA;IACnD,MAAMkD,GAAAA,CAAIC,SAAS,CAACH,WAAAA,EAAaH,MAAAA,CAAAA;;AAGjC,IAAA,MAAMO,WAAAA,GAA8B;QAClCC,QAAAA,EAAUL,WAAAA;QACVM,gBAAAA,EAAkBtD,QAAAA;QAClBuD,QAAAA,EAAUZ,WAAAA;AACVa,QAAAA,IAAAA,EAAMX,OAAO1C,MAAM;AACnBS,QAAAA;AACF,KAAA;IAEA,OAAO;QAAE6C,IAAAA,EAAML;AAAY,KAAA;AAC7B,CAAA;AAEA,MAAMM,gBAAgB,OAAOC,QAAAA,GAAAA;IAC3B,IAAI,CAACA,UAAU,OAAO,GAAA;IAEtB,MAAMC,YAAAA,GAAe,MAAMlC,MAAAA,CAAOmC,EAAE,CAACC,KAAK,CAACC,0BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAAEC,KAAAA,EAAO;YAAEC,EAAAA,EAAIP;AAAS;AAAE,KAAA,CAAA;AAE/F,IAAA,OAAOC,aAAalE,IAAI;AAC1B,CAAA;AAEA,MAAMyE,WAAAA,GAAc,OAAOC,GAAAA,GAAgB,EAAE,GAAA;IAC3C,MAAMC,aAAAA,GAAgB,MAAM3C,MAAAA,CAAOmC,EAAE,CAClCC,KAAK,CAACQ,wBAAAA,CAAAA,CACNC,QAAQ,CAAC;QAAEN,KAAAA,EAAO;YAAEC,EAAAA,EAAI;gBAAEM,GAAAA,EAAKJ;AAAI;AAAE;AAAE,KAAA,CAAA;IAE1C,MAAMK,OAAAA,CAAQC,GAAG,CAACL,aAAAA,CAAcM,GAAG,CAAC,CAAClB,IAAAA,GAAemB,gBAAAA,CAAW,QAAA,CAAA,CAAUC,MAAM,CAACpB,IAAAA,CAAAA,CAAAA,CAAAA;IAEhF,OAAOY,aAAAA;AACT,CAAA;AAEA,MAAMS,eAAe,OAAOrB,IAAAA,GAAAA;AAC1B,IAAA,MAAM,EAAEsB,QAAQ,EAAE,GAAGrD,MAAAA,CAAOsD,OAAO,CAACC,MAAM;IAC1C,MAAM,EAAEF,UAAUG,cAAc,EAAE,GAAGxD,MAAAA,CAAOyD,MAAM,CAAC5C,GAAG,CAAS,gBAAA,CAAA;IAC/D,MAAM6C,SAAAA,GAAY,MAAML,QAAAA,CAASK,SAAS,EAAA;AAC1C3B,IAAAA,IAAAA,CAAK4B,WAAW,GAAG,KAAA;;AAGnB,IAAA,IAAI5B,IAAAA,CAAKsB,QAAQ,KAAKG,cAAAA,IAAkB,CAACE,SAAAA,EAAW;QAClD,OAAO3B,IAAAA;AACT,IAAA;AAEA,IAAA,MAAM6B,UAAU,OAAO7B,IAAAA,GAAAA;AACrB,QAAA,MAAM8B,SAAAA,GAAY,MAAMR,QAAAA,CAASS,YAAY,CAAC/B,IAAAA,CAAAA;QAC9CA,IAAAA,CAAKnE,GAAG,GAAGiG,SAAAA,CAAUjG,GAAG;AACxBmE,QAAAA,IAAAA,CAAK4B,WAAW,GAAG,IAAA;AACrB,IAAA,CAAA;AAEA,IAAA,MAAMI,aAAaC,YAAAA,CAAUjC,IAAAA,CAAAA;;AAG7B,IAAA,MAAM6B,OAAAA,CAAQG,UAAAA,CAAAA;IACd,IAAIhC,IAAAA,CAAKkC,OAAO,EAAE;QAChB,MAAMC,WAAAA,CAAMjB,GAAG,CAACkB,MAAAA,CAAOC,MAAM,CAACL,UAAAA,CAAWE,OAAO,IAAI,EAAC,CAAA,EAAIL,OAAAA,CAAAA;AAC3D,IAAA;IAEA,OAAOG,UAAAA;AACT,CAAA;AAGA,WAAe;AAAE/B,IAAAA,aAAAA;AAAeS,IAAAA,WAAAA;AAAaW,IAAAA,YAAAA;AAAcnE,IAAAA;AAAoB,CAAA;;;;"}
+{"version":3,"file":"file.js","sources":["../../../server/src/services/file.ts"],"sourcesContent":["import path from 'path';\nimport dns from 'dns/promises';\nimport net from 'net';\nimport fse from 'fs-extra';\nimport { cloneDeep } from 'lodash/fp';\nimport { async, errors } from '@strapi/utils';\n\nimport { FOLDER_MODEL_UID, FILE_MODEL_UID } from '../constants';\nimport { getService } from '../utils';\n\nimport { Config, type File } from '../types';\n\nconst { ApplicationError } = errors;\n\nconst FETCH_TIMEOUT_MS = 60_000; // 60 seconds\n\n// Blocks loopback, link-local (cloud metadata), and RFC-1918 private ranges to prevent SSRF\nconst SSRF_BLOCK_LIST = new net.BlockList();\nSSRF_BLOCK_LIST.addSubnet('127.0.0.0', 8); // loopback\nSSRF_BLOCK_LIST.addSubnet('10.0.0.0', 8); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('172.16.0.0', 12); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('192.168.0.0', 16); // RFC-1918\nSSRF_BLOCK_LIST.addSubnet('169.254.0.0', 16); // link-local / cloud metadata (AWS, GCP, Azure)\nSSRF_BLOCK_LIST.addSubnet('::1', 128, 'ipv6'); // IPv6 loopback\nSSRF_BLOCK_LIST.addSubnet('fc00::', 7, 'ipv6'); // IPv6 unique local\nSSRF_BLOCK_LIST.addSubnet('fe80::', 10, 'ipv6'); // IPv6 link-local\n\n/**\n * Represents a file fetched from a URL, compatible with the upload pipeline\n */\ninterface UrlFetchedFile {\n  filepath: string;\n  originalFilename: string;\n  mimetype: string;\n  size: number;\n  tmpWorkingDirectory?: string;\n}\n\ninterface FetchUrlResult {\n  file: UrlFetchedFile;\n}\n\n/**\n * Extracts filename from a URL path or Content-Disposition header\n */\nconst getFilenameFromUrl = (url: string, contentDisposition?: string | null): string => {\n  // Try Content-Disposition header first\n  if (contentDisposition) {\n    // Extracts filename from Content-Disposition header (e.g. filename=\"photo.jpg\" or filename*=UTF-8''photo.jpg)\n    const filenameMatch = contentDisposition.match(\n      /filename\\*?=['\"]?(?:UTF-\\d['\"]*)?([^;\\r\\n\"']*)['\"]?/i\n    );\n    if (filenameMatch?.[1]) {\n      // Use path.basename to prevent path traversal attacks\n      return path.basename(decodeURIComponent(filenameMatch[1]));\n    }\n  }\n\n  // Fall back to URL path\n  try {\n    const urlObj = new URL(url);\n    const pathname = urlObj.pathname;\n    const filename = pathname.split('/').pop();\n    if (filename && filename.length > 0) {\n      // Use path.basename to prevent path traversal attacks (e.g., URL-encoded separators)\n      return path.basename(decodeURIComponent(filename));\n    }\n  } catch {\n    // Invalid URL, use default\n  }\n\n  // Generate a timestamp-based default filename\n  const now = new Date();\n  const date = now.toISOString().split('T')[0]; // 2024-02-23\n  const time = now.toTimeString().split(' ')[0].replace(/:/g, ''); // 143052\n  return `untitled_${date}_${time}`;\n};\n\n/**\n * Fetches a URL and saves it as a temporary file\n * Returns an InputFile-compatible object for use with the upload pipeline\n */\nconst fetchUrlToInputFile = async (\n  url: string,\n  tmpWorkingDirectory: string,\n  sizeLimit?: number\n): Promise<FetchUrlResult> => {\n  // Validate URL protocol\n  let parsedUrl: URL;\n  try {\n    parsedUrl = new URL(url);\n  } catch {\n    throw new ApplicationError(`Invalid URL: ${url}`);\n  }\n\n  if (!['http:', 'https:'].includes(parsedUrl.protocol)) {\n    throw new ApplicationError(`Invalid URL protocol. Only http and https are allowed: ${url}`);\n  }\n\n  // Resolve hostname and block private/internal IP ranges to prevent SSRF\n  try {\n    const { address, family } = await dns.lookup(parsedUrl.hostname);\n    const type = family === 6 ? 'ipv6' : 'ipv4';\n    if (SSRF_BLOCK_LIST.check(address, type)) {\n      throw new ApplicationError(`URL resolves to a blocked address: ${url}`);\n    }\n  } catch (error) {\n    if (error instanceof ApplicationError) throw error;\n    throw new ApplicationError(`Could not resolve hostname: ${parsedUrl.hostname}`);\n  }\n\n  // use strapi.fetch so we can intercept requests and support proxy settings\n  const doFetch = typeof strapi?.fetch === 'function' ? strapi.fetch : fetch;\n  let response: Response;\n  try {\n    response = await doFetch(url, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });\n  } catch (error) {\n    if (error instanceof Error && error.name === 'TimeoutError') {\n      throw new ApplicationError(`Request timed out while fetching URL: ${url}`);\n    }\n    throw error;\n  }\n\n  if (!response.ok) {\n    throw new ApplicationError(\n      `Failed to fetch URL: ${url} (${response.status} ${response.statusText})`\n    );\n  }\n\n  // Check Content-Length header for early rejection of large files\n  if (sizeLimit) {\n    const contentLength = response.headers.get('content-length');\n    if (contentLength && parseInt(contentLength, 10) > sizeLimit) {\n      throw new ApplicationError(\n        `File too large: maximum allowed size is ${Math.round(sizeLimit / (1024 * 1024))}MB`\n      );\n    }\n  }\n\n  // Get content type and filename\n  const contentType =\n    response.headers.get('content-type')?.split(';')[0] || 'application/octet-stream';\n  const contentDisposition = response.headers.get('content-disposition');\n  const filename = getFilenameFromUrl(response.url, contentDisposition);\n\n  // Read response body\n  const arrayBuffer = await response.arrayBuffer();\n  const buffer = Buffer.from(arrayBuffer);\n\n  // Write to temp file\n  const tmpFilePath = path.join(tmpWorkingDirectory, filename);\n  await fse.writeFile(tmpFilePath, buffer);\n\n  // Create file object compatible with upload pipeline\n  const fetchedFile: UrlFetchedFile = {\n    filepath: tmpFilePath,\n    originalFilename: filename,\n    mimetype: contentType,\n    size: buffer.length,\n    tmpWorkingDirectory,\n  };\n\n  return { file: fetchedFile };\n};\n\nconst getFolderPath = async (folderId?: number | null) => {\n  if (!folderId) return '/';\n\n  const parentFolder = await strapi.db.query(FOLDER_MODEL_UID).findOne({ where: { id: folderId } });\n\n  return parentFolder.path;\n};\n\nconst deleteByIds = async (ids: number[] = []) => {\n  const filesToDelete = await strapi.db\n    .query(FILE_MODEL_UID)\n    .findMany({ where: { id: { $in: ids } } });\n\n  await Promise.all(filesToDelete.map((file: File) => getService('upload').remove(file)));\n\n  return filesToDelete;\n};\n\nconst signFileUrls = async (file: File) => {\n  const { provider } = strapi.plugins.upload;\n  const { provider: providerConfig } = strapi.config.get<Config>('plugin::upload');\n  const isPrivate = await provider.isPrivate();\n  file.isUrlSigned = false;\n\n  // Check file provider and if provider is private\n  if (file.provider !== providerConfig || !isPrivate) {\n    return file;\n  }\n\n  const signUrl = async (file: File) => {\n    const signedUrl = await provider.getSignedUrl(file);\n    file.url = signedUrl.url;\n    file.isUrlSigned = true;\n  };\n\n  const signedFile = cloneDeep(file);\n\n  // Sign each file format\n  await signUrl(signedFile);\n  if (file.formats) {\n    await async.map(Object.values(signedFile.formats ?? {}), signUrl);\n  }\n\n  return signedFile;\n};\n\nexport type { UrlFetchedFile, FetchUrlResult };\nexport default { getFolderPath, deleteByIds, signFileUrls, fetchUrlToInputFile };\n"],"names":["ApplicationError","errors","FETCH_TIMEOUT_MS","SSRF_BLOCK_LIST","net","BlockList","addSubnet","getFilenameFromUrl","url","contentDisposition","filenameMatch","match","path","basename","decodeURIComponent","urlObj","URL","pathname","filename","split","pop","length","now","Date","date","toISOString","time","toTimeString","replace","fetchUrlToInputFile","tmpWorkingDirectory","sizeLimit","parsedUrl","includes","protocol","address","family","dns","lookup","hostname","type","check","error","doFetch","strapi","fetch","response","signal","AbortSignal","timeout","Error","name","ok","status","statusText","contentLength","headers","get","parseInt","Math","round","contentType","arrayBuffer","buffer","Buffer","from","tmpFilePath","join","fse","writeFile","fetchedFile","filepath","originalFilename","mimetype","size","file","getFolderPath","folderId","parentFolder","db","query","FOLDER_MODEL_UID","findOne","where","id","deleteByIds","ids","filesToDelete","FILE_MODEL_UID","findMany","$in","Promise","all","map","getService","remove","signFileUrls","provider","plugins","upload","providerConfig","config","isPrivate","isUrlSigned","signUrl","signedUrl","getSignedUrl","signedFile","cloneDeep","formats","async","Object","values"],"mappings":";;;;;;;;;;;;;;;;;;AAYA,MAAM,EAAEA,gBAAgB,EAAE,GAAGC,YAAAA;AAE7B,MAAMC,gBAAAA,GAAmB;AAEzB;AACA,MAAMC,eAAAA,GAAkB,IAAIC,oBAAAA,CAAIC,SAAS,EAAA;AACzCF,eAAAA,CAAgBG,SAAS,CAAC,WAAA,EAAa,CAAA,CAAA,CAAA;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,UAAA,EAAY,CAAA,CAAA,CAAA;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,YAAA,EAAc,EAAA,CAAA,CAAA;AACxCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,aAAA,EAAe,EAAA,CAAA,CAAA;AACzCH,eAAAA,CAAgBG,SAAS,CAAC,KAAA,EAAO,GAAA,EAAK;AACtCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,CAAA,EAAG;AACvCH,eAAAA,CAAgBG,SAAS,CAAC,QAAA,EAAU,EAAA,EAAI;AAiBxC;;IAGA,MAAMC,kBAAAA,GAAqB,CAACC,GAAAA,EAAaC,kBAAAA,GAAAA;;AAEvC,IAAA,IAAIA,kBAAAA,EAAoB;;QAEtB,MAAMC,aAAAA,GAAgBD,kBAAAA,CAAmBE,KAAK,CAC5C,sDAAA,CAAA;QAEF,IAAID,aAAAA,GAAgB,CAAA,CAAE,EAAE;;AAEtB,YAAA,OAAOE,sBAAKC,QAAQ,CAACC,kBAAAA,CAAmBJ,aAAa,CAAC,CAAA,CAAE,CAAA,CAAA;AAC1D,QAAA;AACF,IAAA;;IAGA,IAAI;QACF,MAAMK,MAAAA,GAAS,IAAIC,GAAAA,CAAIR,GAAAA,CAAAA;QACvB,MAAMS,QAAAA,GAAWF,OAAOE,QAAQ;AAChC,QAAA,MAAMC,QAAAA,GAAWD,QAAAA,CAASE,KAAK,CAAC,KAAKC,GAAG,EAAA;AACxC,QAAA,IAAIF,QAAAA,IAAYA,QAAAA,CAASG,MAAM,GAAG,CAAA,EAAG;;YAEnC,OAAOT,qBAAAA,CAAKC,QAAQ,CAACC,kBAAAA,CAAmBI,QAAAA,CAAAA,CAAAA;AAC1C,QAAA;AACF,IAAA,CAAA,CAAE,OAAM;;AAER,IAAA;;AAGA,IAAA,MAAMI,MAAM,IAAIC,IAAAA,EAAAA;IAChB,MAAMC,IAAAA,GAAOF,GAAAA,CAAIG,WAAW,EAAA,CAAGN,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAAA;AAC5C,IAAA,MAAMO,IAAAA,GAAOJ,GAAAA,CAAIK,YAAY,EAAA,CAAGR,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAACS,OAAO,CAAC,IAAA,EAAM;AAC5D,IAAA,OAAO,CAAC,SAAS,EAAEJ,IAAAA,CAAK,CAAC,EAAEE,IAAAA,CAAAA,CAAM;AACnC,CAAA;AAEA;;;AAGC,IACD,MAAMG,mBAAAA,GAAsB,OAC1BrB,GAAAA,EACAsB,mBAAAA,EACAC,SAAAA,GAAAA;;IAGA,IAAIC,SAAAA;IACJ,IAAI;AACFA,QAAAA,SAAAA,GAAY,IAAIhB,GAAAA,CAAIR,GAAAA,CAAAA;AACtB,IAAA,CAAA,CAAE,OAAM;AACN,QAAA,MAAM,IAAIR,gBAAAA,CAAiB,CAAC,aAAa,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAClD,IAAA;AAEA,IAAA,IAAI,CAAC;AAAC,QAAA,OAAA;AAAS,QAAA;AAAS,KAAA,CAACyB,QAAQ,CAACD,SAAAA,CAAUE,QAAQ,CAAA,EAAG;AACrD,QAAA,MAAM,IAAIlC,gBAAAA,CAAiB,CAAC,uDAAuD,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC5F,IAAA;;IAGA,IAAI;QACF,MAAM,EAAE2B,OAAO,EAAEC,MAAM,EAAE,GAAG,MAAMC,oBAAAA,CAAIC,MAAM,CAACN,SAAAA,CAAUO,QAAQ,CAAA;QAC/D,MAAMC,IAAAA,GAAOJ,MAAAA,KAAW,CAAA,GAAI,MAAA,GAAS,MAAA;AACrC,QAAA,IAAIjC,eAAAA,CAAgBsC,KAAK,CAACN,OAAAA,EAASK,IAAAA,CAAAA,EAAO;AACxC,YAAA,MAAM,IAAIxC,gBAAAA,CAAiB,CAAC,mCAAmC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AACxE,QAAA;AACF,IAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;QACd,IAAIA,KAAAA,YAAiB1C,kBAAkB,MAAM0C,KAAAA;AAC7C,QAAA,MAAM,IAAI1C,gBAAAA,CAAiB,CAAC,4BAA4B,EAAEgC,SAAAA,CAAUO,QAAQ,CAAA,CAAE,CAAA;AAChF,IAAA;;AAGA,IAAA,MAAMI,UAAU,OAAOC,MAAAA,EAAQC,UAAU,UAAA,GAAaD,MAAAA,CAAOC,KAAK,GAAGA,KAAAA;IACrE,IAAIC,QAAAA;IACJ,IAAI;QACFA,QAAAA,GAAW,MAAMH,QAAQnC,GAAAA,EAAK;YAAEuC,MAAAA,EAAQC,WAAAA,CAAYC,OAAO,CAAC/C,gBAAAA;AAAkB,SAAA,CAAA;AAChF,IAAA,CAAA,CAAE,OAAOwC,KAAAA,EAAO;AACd,QAAA,IAAIA,KAAAA,YAAiBQ,KAAAA,IAASR,KAAAA,CAAMS,IAAI,KAAK,cAAA,EAAgB;AAC3D,YAAA,MAAM,IAAInD,gBAAAA,CAAiB,CAAC,sCAAsC,EAAEQ,GAAAA,CAAAA,CAAK,CAAA;AAC3E,QAAA;QACA,MAAMkC,KAAAA;AACR,IAAA;IAEA,IAAI,CAACI,QAAAA,CAASM,EAAE,EAAE;AAChB,QAAA,MAAM,IAAIpD,gBAAAA,CACR,CAAC,qBAAqB,EAAEQ,IAAI,EAAE,EAAEsC,QAAAA,CAASO,MAAM,CAAC,CAAC,EAAEP,SAASQ,UAAU,CAAC,CAAC,CAAC,CAAA;AAE7E,IAAA;;AAGA,IAAA,IAAIvB,SAAAA,EAAW;AACb,QAAA,MAAMwB,aAAAA,GAAgBT,QAAAA,CAASU,OAAO,CAACC,GAAG,CAAC,gBAAA,CAAA;AAC3C,QAAA,IAAIF,aAAAA,IAAiBG,QAAAA,CAASH,aAAAA,EAAe,EAAA,CAAA,GAAMxB,SAAAA,EAAW;AAC5D,YAAA,MAAM,IAAI/B,gBAAAA,CACR,CAAC,wCAAwC,EAAE2D,IAAAA,CAAKC,KAAK,CAAC7B,SAAAA,IAAa,IAAA,GAAO,IAAG,CAAA,CAAA,CAAI,EAAE,CAAC,CAAA;AAExF,QAAA;AACF,IAAA;;IAGA,MAAM8B,WAAAA,GACJf,QAAAA,CAASU,OAAO,CAACC,GAAG,CAAC,cAAA,CAAA,EAAiBtC,KAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,0BAAA;AACzD,IAAA,MAAMV,kBAAAA,GAAqBqC,QAAAA,CAASU,OAAO,CAACC,GAAG,CAAC,qBAAA,CAAA;AAChD,IAAA,MAAMvC,QAAAA,GAAWX,kBAAAA,CAAmBuC,QAAAA,CAAStC,GAAG,EAAEC,kBAAAA,CAAAA;;IAGlD,MAAMqD,WAAAA,GAAc,MAAMhB,QAAAA,CAASgB,WAAW,EAAA;IAC9C,MAAMC,MAAAA,GAASC,MAAAA,CAAOC,IAAI,CAACH,WAAAA,CAAAA;;AAG3B,IAAA,MAAMI,WAAAA,GAActD,qBAAAA,CAAKuD,IAAI,CAACrC,mBAAAA,EAAqBZ,QAAAA,CAAAA;IACnD,MAAMkD,oBAAAA,CAAIC,SAAS,CAACH,WAAAA,EAAaH,MAAAA,CAAAA;;AAGjC,IAAA,MAAMO,WAAAA,GAA8B;QAClCC,QAAAA,EAAUL,WAAAA;QACVM,gBAAAA,EAAkBtD,QAAAA;QAClBuD,QAAAA,EAAUZ,WAAAA;AACVa,QAAAA,IAAAA,EAAMX,OAAO1C,MAAM;AACnBS,QAAAA;AACF,KAAA;IAEA,OAAO;QAAE6C,IAAAA,EAAML;AAAY,KAAA;AAC7B,CAAA;AAEA,MAAMM,gBAAgB,OAAOC,QAAAA,GAAAA;IAC3B,IAAI,CAACA,UAAU,OAAO,GAAA;IAEtB,MAAMC,YAAAA,GAAe,MAAMlC,MAAAA,CAAOmC,EAAE,CAACC,KAAK,CAACC,0BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAAEC,KAAAA,EAAO;YAAEC,EAAAA,EAAIP;AAAS;AAAE,KAAA,CAAA;AAE/F,IAAA,OAAOC,aAAalE,IAAI;AAC1B,CAAA;AAEA,MAAMyE,WAAAA,GAAc,OAAOC,GAAAA,GAAgB,EAAE,GAAA;IAC3C,MAAMC,aAAAA,GAAgB,MAAM3C,MAAAA,CAAOmC,EAAE,CAClCC,KAAK,CAACQ,wBAAAA,CAAAA,CACNC,QAAQ,CAAC;QAAEN,KAAAA,EAAO;YAAEC,EAAAA,EAAI;gBAAEM,GAAAA,EAAKJ;AAAI;AAAE;AAAE,KAAA,CAAA;IAE1C,MAAMK,OAAAA,CAAQC,GAAG,CAACL,aAAAA,CAAcM,GAAG,CAAC,CAAClB,IAAAA,GAAemB,gBAAAA,CAAW,QAAA,CAAA,CAAUC,MAAM,CAACpB,IAAAA,CAAAA,CAAAA,CAAAA;IAEhF,OAAOY,aAAAA;AACT,CAAA;AAEA,MAAMS,eAAe,OAAOrB,IAAAA,GAAAA;AAC1B,IAAA,MAAM,EAAEsB,QAAQ,EAAE,GAAGrD,MAAAA,CAAOsD,OAAO,CAACC,MAAM;IAC1C,MAAM,EAAEF,UAAUG,cAAc,EAAE,GAAGxD,MAAAA,CAAOyD,MAAM,CAAC5C,GAAG,CAAS,gBAAA,CAAA;IAC/D,MAAM6C,SAAAA,GAAY,MAAML,QAAAA,CAASK,SAAS,EAAA;AAC1C3B,IAAAA,IAAAA,CAAK4B,WAAW,GAAG,KAAA;;AAGnB,IAAA,IAAI5B,IAAAA,CAAKsB,QAAQ,KAAKG,cAAAA,IAAkB,CAACE,SAAAA,EAAW;QAClD,OAAO3B,IAAAA;AACT,IAAA;AAEA,IAAA,MAAM6B,UAAU,OAAO7B,IAAAA,GAAAA;AACrB,QAAA,MAAM8B,SAAAA,GAAY,MAAMR,QAAAA,CAASS,YAAY,CAAC/B,IAAAA,CAAAA;QAC9CA,IAAAA,CAAKnE,GAAG,GAAGiG,SAAAA,CAAUjG,GAAG;AACxBmE,QAAAA,IAAAA,CAAK4B,WAAW,GAAG,IAAA;AACrB,IAAA,CAAA;AAEA,IAAA,MAAMI,aAAaC,YAAAA,CAAUjC,IAAAA,CAAAA;;AAG7B,IAAA,MAAM6B,OAAAA,CAAQG,UAAAA,CAAAA;IACd,IAAIhC,IAAAA,CAAKkC,OAAO,EAAE;QAChB,MAAMC,WAAAA,CAAMjB,GAAG,CAACkB,MAAAA,CAAOC,MAAM,CAACL,UAAAA,CAAWE,OAAO,IAAI,EAAC,CAAA,EAAIL,OAAAA,CAAAA;AAC3D,IAAA;IAEA,OAAOG,UAAAA;AACT,CAAA;AAGA,WAAe;AAAE/B,IAAAA,aAAAA;AAAeS,IAAAA,WAAAA;AAAaW,IAAAA,YAAAA;AAAcnE,IAAAA;AAAoB,CAAA;;;;"}

package/dist/server/services/image-manipulation.js

@@ -7,6 +7,12 @@ var crypto = require('crypto');
 var utils = require('@strapi/utils');
 var index = require('../utils/index.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var fs__default = /*#__PURE__*/_interopDefault(fs);
+var sharp__default = /*#__PURE__*/_interopDefault(sharp);
+var crypto__default = /*#__PURE__*/_interopDefault(crypto);
+
 const { bytesToKbytes } = utils.file;
 const FORMATS_TO_RESIZE = [
     'jpeg',
@@ -33,7 +39,7 @@ const FORMATS_TO_OPTIMIZE = [
 ];
 const isOptimizableFormat = (format)=>format !== undefined && FORMATS_TO_OPTIMIZE.includes(format);
 const writeStreamToFile = (stream, path)=>new Promise((resolve, reject)=>{
-        const writeStream = fs.createWriteStream(path);
+        const writeStream = fs__default.default.createWriteStream(path);
         // Reject promise if there is an error with the provided stream
         stream.on('error', reject);
         stream.pipe(writeStream);
@@ -43,12 +49,12 @@ const writeStreamToFile = (stream, path)=>new Promise((resolve, reject)=>{
 const getMetadata = (file)=>{
     if (!file.filepath) {
         return new Promise((resolve, reject)=>{
-            const pipeline = sharp();
+            const pipeline = sharp__default.default();
             pipeline.metadata().then(resolve).catch(reject);
             file.getStream().pipe(pipeline);
         });
     }
-    return sharp(file.filepath).metadata();
+    return sharp__default.default(file.filepath).metadata();
 };
 const getDimensions = async (file)=>{
     const { width = null, height = null } = await getMetadata(file);
@@ -66,14 +72,14 @@ const resizeFileTo = async (file, options, { name, hash })=>{
     const filePath = file.tmpWorkingDirectory ? path.join(file.tmpWorkingDirectory, hash) : hash;
     let newInfo;
     if (!file.filepath) {
-        const transform = sharp({
+        const transform = sharp__default.default({
             animated: true
         }).resize(options).on('info', (info)=>{
             newInfo = info;
         });
         await writeStreamToFile(file.getStream().pipe(transform), filePath);
     } else {
-        newInfo = await sharp(file.filepath, {
+        newInfo = await sharp__default.default(file.filepath, {
             animated: true
         }).resize(options).toFile(filePath);
     }
@@ -85,7 +91,7 @@ const resizeFileTo = async (file, options, { name, hash })=>{
         mime: file.mime,
         filepath: filePath,
         path: file.path || null,
-        getStream: ()=>fs.createReadStream(filePath)
+        getStream: ()=>fs__default.default.createReadStream(filePath)
     };
     Object.assign(newFile, {
         width,
@@ -115,11 +121,11 @@ const generateThumbnail = async (file)=>{
     if ((sizeOptimization || autoOrientation) && isOptimizableFormat(format)) {
         let transformer;
         if (!file.filepath) {
-            transformer = sharp({
+            transformer = sharp__default.default({
                 animated: true
             });
         } else {
-            transformer = sharp(file.filepath, {
+            transformer = sharp__default.default(file.filepath, {
                 animated: true
             });
         }
@@ -145,7 +151,7 @@ const generateThumbnail = async (file)=>{
         const newFile = {
             ...file
         };
-        newFile.getStream = ()=>fs.createReadStream(filePath);
+        newFile.getStream = ()=>fs__default.default.createReadStream(filePath);
         newFile.filepath = filePath;
         if (newSize && size && newSize > size) {
             // Ignore optimization if output is bigger than original
@@ -205,13 +211,13 @@ const breakpointSmallerThan = (breakpoint, { width, height })=>{
  */ const isFaultyImage = async (file)=>{
     if (!file.filepath) {
         return new Promise((resolve, reject)=>{
-            const pipeline = sharp();
+            const pipeline = sharp__default.default();
             pipeline.stats().then(resolve).catch(reject);
             file.getStream().pipe(pipeline);
         });
     }
     try {
-        await sharp(file.filepath).stats();
+        await sharp__default.default(file.filepath).stats();
         return false;
     } catch (e) {
         return true;
@@ -251,7 +257,7 @@ const isImage = async (file)=>{
     return format && FORMATS_TO_PROCESS.includes(format);
 };
 const generateFileName = (name)=>{
-    const randomSuffix = ()=>crypto.randomBytes(5).toString('hex');
+    const randomSuffix = ()=>crypto__default.default.randomBytes(5).toString('hex');
     const baseName = utils.strings.nameToSlug(name, {
         separator: '_',
         lowercase: false

package/dist/server/services/image-manipulation.js.map

@@ -1 +1 @@
-{"version":3,"file":"image-manipulation.js","sources":["../../../server/src/services/image-manipulation.ts"],"sourcesContent":["import fs from 'fs';\nimport { join } from 'path';\nimport sharp from 'sharp';\nimport crypto from 'crypto';\nimport { strings, file as fileUtils } from '@strapi/utils';\n\nimport { getService } from '../utils';\n\nimport type { UploadableFile } from '../types';\n\ntype Dimensions = {\n  width: number | null;\n  height: number | null;\n};\n\n// TODO: remove after upgrading sharp to >=0.34.2 (pageHeight added to OutputInfo types)\ndeclare module 'sharp' {\n  interface OutputInfo {\n    pageHeight?: number;\n  }\n}\n\nconst { bytesToKbytes } = fileUtils;\n\nconst FORMATS_TO_RESIZE = ['jpeg', 'png', 'webp', 'tiff', 'gif'];\nconst FORMATS_TO_PROCESS = ['jpeg', 'png', 'webp', 'tiff', 'svg', 'gif', 'avif'];\nconst FORMATS_TO_OPTIMIZE = ['jpeg', 'png', 'webp', 'tiff', 'avif'];\n\nconst isOptimizableFormat = (\n  format: string | undefined\n): format is 'jpeg' | 'png' | 'webp' | 'tiff' | 'avif' =>\n  format !== undefined && FORMATS_TO_OPTIMIZE.includes(format);\n\nconst writeStreamToFile = (stream: NodeJS.ReadWriteStream, path: string) =>\n  new Promise<void>((resolve, reject) => {\n    const writeStream = fs.createWriteStream(path);\n    // Reject promise if there is an error with the provided stream\n    stream.on('error', reject);\n    stream.pipe(writeStream);\n    writeStream.on('close', () => resolve());\n    writeStream.on('error', reject);\n  });\n\nconst getMetadata = (file: UploadableFile): Promise<sharp.Metadata> => {\n  if (!file.filepath) {\n    return new Promise((resolve, reject) => {\n      const pipeline = sharp();\n      pipeline.metadata().then(resolve).catch(reject);\n      file.getStream().pipe(pipeline);\n    });\n  }\n\n  return sharp(file.filepath).metadata();\n};\n\nconst getDimensions = async (file: UploadableFile): Promise<Dimensions> => {\n  const { width = null, height = null } = await getMetadata(file);\n\n  return { width, height };\n};\n\nconst THUMBNAIL_RESIZE_OPTIONS = {\n  width: 245,\n  height: 156,\n  fit: 'inside',\n} satisfies sharp.ResizeOptions;\n\nconst resizeFileTo = async (\n  file: UploadableFile,\n  options: sharp.ResizeOptions,\n  {\n    name,\n    hash,\n  }: {\n    name: string;\n    hash: string;\n  }\n) => {\n  const filePath = file.tmpWorkingDirectory ? join(file.tmpWorkingDirectory, hash) : hash;\n\n  let newInfo;\n  if (!file.filepath) {\n    const transform = sharp({ animated: true })\n      .resize(options)\n      .on('info', (info) => {\n        newInfo = info;\n      });\n\n    await writeStreamToFile(file.getStream().pipe(transform), filePath);\n  } else {\n    newInfo = await sharp(file.filepath, { animated: true }).resize(options).toFile(filePath);\n  }\n\n  const { width, height, size, pageHeight } = newInfo ?? {};\n\n  const newFile: UploadableFile = {\n    name,\n    hash,\n    ext: file.ext,\n    mime: file.mime,\n    filepath: filePath,\n    path: file.path || null,\n    getStream: () => fs.createReadStream(filePath),\n  };\n\n  Object.assign(newFile, {\n    width,\n    height: pageHeight ?? height,\n    size: size ? bytesToKbytes(size) : 0,\n    sizeInBytes: size,\n  });\n  return newFile;\n};\n\nconst generateThumbnail = async (file: UploadableFile) => {\n  if (\n    file.width &&\n    file.height &&\n    (file.width > THUMBNAIL_RESIZE_OPTIONS.width || file.height > THUMBNAIL_RESIZE_OPTIONS.height)\n  ) {\n    return resizeFileTo(file, THUMBNAIL_RESIZE_OPTIONS, {\n      name: `thumbnail_${file.name}`,\n      hash: `thumbnail_${file.hash}`,\n    });\n  }\n\n  return null;\n};\n\n/**\n * Optimize image by:\n *    - auto orienting image based on EXIF data\n *    - reduce image quality\n *\n */\nconst optimize = async (file: UploadableFile) => {\n  const { sizeOptimization = false, autoOrientation = false } =\n    (await getService('upload').getSettings()) ?? {};\n\n  const { format, size } = await getMetadata(file);\n\n  if ((sizeOptimization || autoOrientation) && isOptimizableFormat(format)) {\n    let transformer;\n    if (!file.filepath) {\n      transformer = sharp({ animated: true });\n    } else {\n      transformer = sharp(file.filepath, { animated: true });\n    }\n    // reduce image quality\n    transformer[format]({ quality: sizeOptimization ? 80 : 100 });\n    // rotate image based on EXIF data\n    if (autoOrientation) {\n      transformer.rotate();\n    }\n    const filePath = file.tmpWorkingDirectory\n      ? join(file.tmpWorkingDirectory, `optimized-${file.hash}`)\n      : `optimized-${file.hash}`;\n\n    let newInfo;\n    if (!file.filepath) {\n      transformer.on('info', (info) => {\n        newInfo = info;\n      });\n\n      await writeStreamToFile(file.getStream().pipe(transformer), filePath);\n    } else {\n      newInfo = await transformer.toFile(filePath);\n    }\n\n    const {\n      width: newWidth,\n      height: newHeight,\n      size: newSize,\n      pageHeight: newPageHeight,\n    } = newInfo ?? {};\n\n    const newFile = { ...file };\n\n    newFile.getStream = () => fs.createReadStream(filePath);\n    newFile.filepath = filePath;\n\n    if (newSize && size && newSize > size) {\n      // Ignore optimization if output is bigger than original\n      return file;\n    }\n\n    return Object.assign(newFile, {\n      width: newWidth,\n      height: newPageHeight ?? newHeight,\n      size: newSize ? bytesToKbytes(newSize) : 0,\n      sizeInBytes: newSize,\n    });\n  }\n\n  return file;\n};\n\nconst DEFAULT_BREAKPOINTS = {\n  large: 1000,\n  medium: 750,\n  small: 500,\n};\n\nconst getBreakpoints = () =>\n  strapi.config.get<Record<string, number>>('plugin::upload.breakpoints', DEFAULT_BREAKPOINTS);\n\nconst generateResponsiveFormats = async (file: UploadableFile) => {\n  const { responsiveDimensions = false } = (await getService('upload').getSettings()) ?? {};\n\n  if (!responsiveDimensions) return [];\n\n  const originalDimensions = await getDimensions(file);\n\n  const breakpoints = getBreakpoints();\n  const results = [];\n\n  for (const key of Object.keys(breakpoints)) {\n    const breakpoint = breakpoints[key];\n\n    if (breakpointSmallerThan(breakpoint, originalDimensions)) {\n      results.push(await generateBreakpoint(key, { file, breakpoint }));\n    }\n  }\n\n  return results;\n};\n\nconst generateBreakpoint = async (\n  key: string,\n  { file, breakpoint }: { file: UploadableFile; breakpoint: number }\n) => {\n  const newFile = await resizeFileTo(\n    file,\n    {\n      width: breakpoint,\n      height: breakpoint,\n      fit: 'inside',\n    },\n    {\n      name: `${key}_${file.name}`,\n      hash: `${key}_${file.hash}`,\n    }\n  );\n  return {\n    key,\n    file: newFile,\n  };\n};\n\nconst breakpointSmallerThan = (breakpoint: number, { width, height }: Dimensions) => {\n  return breakpoint < (width ?? 0) || breakpoint < (height ?? 0);\n};\n\n/**\n *  Applies a simple image transformation to see if the image is faulty/corrupted.\n */\nconst isFaultyImage = async (file: UploadableFile) => {\n  if (!file.filepath) {\n    return new Promise((resolve, reject) => {\n      const pipeline = sharp();\n      pipeline.stats().then(resolve).catch(reject);\n      file.getStream().pipe(pipeline);\n    });\n  }\n\n  try {\n    await sharp(file.filepath).stats();\n    return false;\n  } catch (e) {\n    return true;\n  }\n};\n\nconst isOptimizableImage = async (file: UploadableFile) => {\n  let format;\n  try {\n    const metadata = await getMetadata(file);\n    format = metadata.format;\n  } catch (e) {\n    // throw when the file is not a supported image\n    return false;\n  }\n  return format && FORMATS_TO_OPTIMIZE.includes(format);\n};\n\nconst isResizableImage = async (file: UploadableFile) => {\n  let format;\n  try {\n    const metadata = await getMetadata(file);\n    format = metadata.format;\n  } catch (e) {\n    // throw when the file is not a supported image\n    return false;\n  }\n  return format && FORMATS_TO_RESIZE.includes(format);\n};\n\nconst isImage = async (file: UploadableFile) => {\n  let format;\n  try {\n    const metadata = await getMetadata(file);\n    format = metadata.format;\n  } catch (e) {\n    // throw when the file is not a supported image\n    return false;\n  }\n  return format && FORMATS_TO_PROCESS.includes(format);\n};\n\nconst generateFileName = (name: string) => {\n  const randomSuffix = () => crypto.randomBytes(5).toString('hex');\n  const baseName = strings.nameToSlug(name, { separator: '_', lowercase: false });\n\n  return `${baseName}_${randomSuffix()}`;\n};\n\nexport default {\n  isFaultyImage,\n  isOptimizableImage,\n  isResizableImage,\n  isImage,\n  getDimensions,\n  generateResponsiveFormats,\n  generateThumbnail,\n  optimize,\n  generateFileName,\n};\n"],"names":["bytesToKbytes","fileUtils","FORMATS_TO_RESIZE","FORMATS_TO_PROCESS","FORMATS_TO_OPTIMIZE","isOptimizableFormat","format","undefined","includes","writeStreamToFile","stream","path","Promise","resolve","reject","writeStream","fs","createWriteStream","on","pipe","getMetadata","file","filepath","pipeline","sharp","metadata","then","catch","getStream","getDimensions","width","height","THUMBNAIL_RESIZE_OPTIONS","fit","resizeFileTo","options","name","hash","filePath","tmpWorkingDirectory","join","newInfo","transform","animated","resize","info","toFile","size","pageHeight","newFile","ext","mime","createReadStream","Object","assign","sizeInBytes","generateThumbnail","optimize","sizeOptimization","autoOrientation","getService","getSettings","transformer","quality","rotate","newWidth","newHeight","newSize","newPageHeight","DEFAULT_BREAKPOINTS","large","medium","small","getBreakpoints","strapi","config","get","generateResponsiveFormats","responsiveDimensions","originalDimensions","breakpoints","results","key","keys","breakpoint","breakpointSmallerThan","push","generateBreakpoint","isFaultyImage","stats","e","isOptimizableImage","isResizableImage","isImage","generateFileName","randomSuffix","crypto","randomBytes","toString","baseName","strings","nameToSlug","separator","lowercase"],"mappings":";;;;;;;;;AAsBA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;AAE1B,MAAMC,iBAAAA,GAAoB;AAAC,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA;AAAM,CAAA;AAChE,MAAMC,kBAAAA,GAAqB;AAAC,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,KAAA;AAAO,IAAA;AAAO,CAAA;AAChF,MAAMC,mBAAAA,GAAsB;AAAC,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA;AAAO,CAAA;AAEnE,MAAMC,sBAAsB,CAC1BC,MAAAA,GAEAA,WAAWC,SAAAA,IAAaH,mBAAAA,CAAoBI,QAAQ,CAACF,MAAAA,CAAAA;AAEvD,MAAMG,oBAAoB,CAACC,MAAAA,EAAgCC,OACzD,IAAIC,OAAAA,CAAc,CAACC,OAAAA,EAASC,MAAAA,GAAAA;QAC1B,MAAMC,WAAAA,GAAcC,EAAAA,CAAGC,iBAAiB,CAACN,IAAAA,CAAAA;;QAEzCD,MAAAA,CAAOQ,EAAE,CAAC,OAAA,EAASJ,MAAAA,CAAAA;AACnBJ,QAAAA,MAAAA,CAAOS,IAAI,CAACJ,WAAAA,CAAAA;QACZA,WAAAA,CAAYG,EAAE,CAAC,OAAA,EAAS,IAAML,OAAAA,EAAAA,CAAAA;QAC9BE,WAAAA,CAAYG,EAAE,CAAC,OAAA,EAASJ,MAAAA,CAAAA;AAC1B,IAAA,CAAA,CAAA;AAEF,MAAMM,cAAc,CAACC,IAAAA,GAAAA;IACnB,IAAI,CAACA,IAAAA,CAAKC,QAAQ,EAAE;QAClB,OAAO,IAAIV,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;AAC3B,YAAA,MAAMS,QAAAA,GAAWC,KAAAA,EAAAA;AACjBD,YAAAA,QAAAA,CAASE,QAAQ,EAAA,CAAGC,IAAI,CAACb,OAAAA,CAAAA,CAASc,KAAK,CAACb,MAAAA,CAAAA;YACxCO,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAACI,QAAAA,CAAAA;AACxB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,OAAOC,KAAAA,CAAMH,IAAAA,CAAKC,QAAQ,CAAA,CAAEG,QAAQ,EAAA;AACtC,CAAA;AAEA,MAAMI,gBAAgB,OAAOR,IAAAA,GAAAA;IAC3B,MAAM,EAAES,QAAQ,IAAI,EAAEC,SAAS,IAAI,EAAE,GAAG,MAAMX,WAAAA,CAAYC,IAAAA,CAAAA;IAE1D,OAAO;AAAES,QAAAA,KAAAA;AAAOC,QAAAA;AAAO,KAAA;AACzB,CAAA;AAEA,MAAMC,wBAAAA,GAA2B;IAC/BF,KAAAA,EAAO,GAAA;IACPC,MAAAA,EAAQ,GAAA;IACRE,GAAAA,EAAK;AACP,CAAA;AAEA,MAAMC,YAAAA,GAAe,OACnBb,IAAAA,EACAc,OAAAA,EACA,EACEC,IAAI,EACJC,IAAI,EAIL,GAAA;IAED,MAAMC,QAAAA,GAAWjB,KAAKkB,mBAAmB,GAAGC,UAAKnB,IAAAA,CAAKkB,mBAAmB,EAAEF,IAAAA,CAAAA,GAAQA,IAAAA;IAEnF,IAAII,OAAAA;IACJ,IAAI,CAACpB,IAAAA,CAAKC,QAAQ,EAAE;AAClB,QAAA,MAAMoB,YAAYlB,KAAAA,CAAM;YAAEmB,QAAAA,EAAU;AAAK,SAAA,CAAA,CACtCC,MAAM,CAACT,OAAAA,CAAAA,CACPjB,EAAE,CAAC,QAAQ,CAAC2B,IAAAA,GAAAA;YACXJ,OAAAA,GAAUI,IAAAA;AACZ,QAAA,CAAA,CAAA;AAEF,QAAA,MAAMpC,kBAAkBY,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAACuB,SAAAA,CAAAA,EAAYJ,QAAAA,CAAAA;IAC5D,CAAA,MAAO;AACLG,QAAAA,OAAAA,GAAU,MAAMjB,KAAAA,CAAMH,IAAAA,CAAKC,QAAQ,EAAE;YAAEqB,QAAAA,EAAU;AAAK,SAAA,CAAA,CAAGC,MAAM,CAACT,OAAAA,CAAAA,CAASW,MAAM,CAACR,QAAAA,CAAAA;AAClF,IAAA;IAEA,MAAM,EAAER,KAAK,EAAEC,MAAM,EAAEgB,IAAI,EAAEC,UAAU,EAAE,GAAGP,OAAAA,IAAW,EAAC;AAExD,IAAA,MAAMQ,OAAAA,GAA0B;AAC9Bb,QAAAA,IAAAA;AACAC,QAAAA,IAAAA;AACAa,QAAAA,GAAAA,EAAK7B,KAAK6B,GAAG;AACbC,QAAAA,IAAAA,EAAM9B,KAAK8B,IAAI;QACf7B,QAAAA,EAAUgB,QAAAA;QACV3B,IAAAA,EAAMU,IAAAA,CAAKV,IAAI,IAAI,IAAA;QACnBiB,SAAAA,EAAW,IAAMZ,EAAAA,CAAGoC,gBAAgB,CAACd,QAAAA;AACvC,KAAA;IAEAe,MAAAA,CAAOC,MAAM,CAACL,OAAAA,EAAS;AACrBnB,QAAAA,KAAAA;AACAC,QAAAA,MAAAA,EAAQiB,UAAAA,IAAcjB,MAAAA;QACtBgB,IAAAA,EAAMA,IAAAA,GAAO/C,cAAc+C,IAAAA,CAAAA,GAAQ,CAAA;QACnCQ,WAAAA,EAAaR;AACf,KAAA,CAAA;IACA,OAAOE,OAAAA;AACT,CAAA;AAEA,MAAMO,oBAAoB,OAAOnC,IAAAA,GAAAA;AAC/B,IAAA,IACEA,KAAKS,KAAK,IACVT,KAAKU,MAAM,KACVV,IAAAA,CAAKS,KAAK,GAAGE,wBAAAA,CAAyBF,KAAK,IAAIT,IAAAA,CAAKU,MAAM,GAAGC,wBAAAA,CAAyBD,MAAM,CAAD,EAC5F;QACA,OAAOG,YAAAA,CAAab,MAAMW,wBAAAA,EAA0B;AAClDI,YAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEf,IAAAA,CAAKe,IAAI,CAAA,CAAE;AAC9BC,YAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEhB,IAAAA,CAAKgB,IAAI,CAAA;AAC9B,SAAA,CAAA;AACF,IAAA;IAEA,OAAO,IAAA;AACT,CAAA;AAEA;;;;;IAMA,MAAMoB,WAAW,OAAOpC,IAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEqC,gBAAAA,GAAmB,KAAK,EAAEC,kBAAkB,KAAK,EAAE,GACxD,MAAMC,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,MAAO,EAAC;AAEjD,IAAA,MAAM,EAAEvD,MAAM,EAAEyC,IAAI,EAAE,GAAG,MAAM3B,WAAAA,CAAYC,IAAAA,CAAAA;AAE3C,IAAA,IAAI,CAACqC,gBAAAA,IAAoBC,eAAc,KAAMtD,oBAAoBC,MAAAA,CAAAA,EAAS;QACxE,IAAIwD,WAAAA;QACJ,IAAI,CAACzC,IAAAA,CAAKC,QAAQ,EAAE;AAClBwC,YAAAA,WAAAA,GAActC,KAAAA,CAAM;gBAAEmB,QAAAA,EAAU;AAAK,aAAA,CAAA;QACvC,CAAA,MAAO;YACLmB,WAAAA,GAActC,KAAAA,CAAMH,IAAAA,CAAKC,QAAQ,EAAE;gBAAEqB,QAAAA,EAAU;AAAK,aAAA,CAAA;AACtD,QAAA;;QAEAmB,WAAW,CAACxD,OAAO,CAAC;AAAEyD,YAAAA,OAAAA,EAASL,mBAAmB,EAAA,GAAK;AAAI,SAAA,CAAA;;AAE3D,QAAA,IAAIC,eAAAA,EAAiB;AACnBG,YAAAA,WAAAA,CAAYE,MAAM,EAAA;AACpB,QAAA;QACA,MAAM1B,QAAAA,GAAWjB,KAAKkB,mBAAmB,GACrCC,UAAKnB,IAAAA,CAAKkB,mBAAmB,EAAE,CAAC,UAAU,EAAElB,IAAAA,CAAKgB,IAAI,EAAE,CAAA,GACvD,CAAC,UAAU,EAAEhB,IAAAA,CAAKgB,IAAI,CAAA,CAAE;QAE5B,IAAII,OAAAA;QACJ,IAAI,CAACpB,IAAAA,CAAKC,QAAQ,EAAE;YAClBwC,WAAAA,CAAY5C,EAAE,CAAC,MAAA,EAAQ,CAAC2B,IAAAA,GAAAA;gBACtBJ,OAAAA,GAAUI,IAAAA;AACZ,YAAA,CAAA,CAAA;AAEA,YAAA,MAAMpC,kBAAkBY,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAAC2C,WAAAA,CAAAA,EAAcxB,QAAAA,CAAAA;QAC9D,CAAA,MAAO;YACLG,OAAAA,GAAU,MAAMqB,WAAAA,CAAYhB,MAAM,CAACR,QAAAA,CAAAA;AACrC,QAAA;AAEA,QAAA,MAAM,EACJR,KAAAA,EAAOmC,QAAQ,EACflC,QAAQmC,SAAS,EACjBnB,IAAAA,EAAMoB,OAAO,EACbnB,UAAAA,EAAYoB,aAAa,EAC1B,GAAG3B,WAAW,EAAC;AAEhB,QAAA,MAAMQ,OAAAA,GAAU;AAAE,YAAA,GAAG5B;AAAK,SAAA;AAE1B4B,QAAAA,OAAAA,CAAQrB,SAAS,GAAG,IAAMZ,EAAAA,CAAGoC,gBAAgB,CAACd,QAAAA,CAAAA;AAC9CW,QAAAA,OAAAA,CAAQ3B,QAAQ,GAAGgB,QAAAA;QAEnB,IAAI6B,OAAAA,IAAWpB,IAAAA,IAAQoB,OAAAA,GAAUpB,IAAAA,EAAM;;YAErC,OAAO1B,IAAAA;AACT,QAAA;QAEA,OAAOgC,MAAAA,CAAOC,MAAM,CAACL,OAAAA,EAAS;YAC5BnB,KAAAA,EAAOmC,QAAAA;AACPlC,YAAAA,MAAAA,EAAQqC,aAAAA,IAAiBF,SAAAA;YACzBnB,IAAAA,EAAMoB,OAAAA,GAAUnE,cAAcmE,OAAAA,CAAAA,GAAW,CAAA;YACzCZ,WAAAA,EAAaY;AACf,SAAA,CAAA;AACF,IAAA;IAEA,OAAO9C,IAAAA;AACT,CAAA;AAEA,MAAMgD,mBAAAA,GAAsB;IAC1BC,KAAAA,EAAO,IAAA;IACPC,MAAAA,EAAQ,GAAA;IACRC,KAAAA,EAAO;AACT,CAAA;AAEA,MAAMC,iBAAiB,IACrBC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAyB,4BAAA,EAA8BP,mBAAAA,CAAAA;AAE1E,MAAMQ,4BAA4B,OAAOxD,IAAAA,GAAAA;IACvC,MAAM,EAAEyD,oBAAAA,GAAuB,KAAK,EAAE,GAAG,MAAOlB,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,EAAA,IAAO,EAAC;IAExF,IAAI,CAACiB,oBAAAA,EAAsB,OAAO,EAAE;IAEpC,MAAMC,kBAAAA,GAAqB,MAAMlD,aAAAA,CAAcR,IAAAA,CAAAA;AAE/C,IAAA,MAAM2D,WAAAA,GAAcP,cAAAA,EAAAA;AACpB,IAAA,MAAMQ,UAAU,EAAE;AAElB,IAAA,KAAK,MAAMC,GAAAA,IAAO7B,MAAAA,CAAO8B,IAAI,CAACH,WAAAA,CAAAA,CAAc;QAC1C,MAAMI,UAAAA,GAAaJ,WAAW,CAACE,GAAAA,CAAI;QAEnC,IAAIG,qBAAAA,CAAsBD,YAAYL,kBAAAA,CAAAA,EAAqB;AACzDE,YAAAA,OAAAA,CAAQK,IAAI,CAAC,MAAMC,kBAAAA,CAAmBL,GAAAA,EAAK;AAAE7D,gBAAAA,IAAAA;AAAM+D,gBAAAA;AAAW,aAAA,CAAA,CAAA;AAChE,QAAA;AACF,IAAA;IAEA,OAAOH,OAAAA;AACT,CAAA;AAEA,MAAMM,qBAAqB,OACzBL,GAAAA,EACA,EAAE7D,IAAI,EAAE+D,UAAU,EAAgD,GAAA;IAElE,MAAMnC,OAAAA,GAAU,MAAMf,YAAAA,CACpBb,IAAAA,EACA;QACES,KAAAA,EAAOsD,UAAAA;QACPrD,MAAAA,EAAQqD,UAAAA;QACRnD,GAAAA,EAAK;KACP,EACA;AACEG,QAAAA,IAAAA,EAAM,GAAG8C,GAAAA,CAAI,CAAC,EAAE7D,IAAAA,CAAKe,IAAI,CAAA,CAAE;AAC3BC,QAAAA,IAAAA,EAAM,GAAG6C,GAAAA,CAAI,CAAC,EAAE7D,IAAAA,CAAKgB,IAAI,CAAA;AAC3B,KAAA,CAAA;IAEF,OAAO;AACL6C,QAAAA,GAAAA;QACA7D,IAAAA,EAAM4B;AACR,KAAA;AACF,CAAA;AAEA,MAAMoC,wBAAwB,CAACD,UAAAA,EAAoB,EAAEtD,KAAK,EAAEC,MAAM,EAAc,GAAA;IAC9E,OAAOqD,UAAAA,IAActD,KAAAA,IAAS,CAAA,KAAMsD,UAAAA,IAAcrD,UAAU,CAAA,CAAA;AAC9D,CAAA;AAEA;;IAGA,MAAMyD,gBAAgB,OAAOnE,IAAAA,GAAAA;IAC3B,IAAI,CAACA,IAAAA,CAAKC,QAAQ,EAAE;QAClB,OAAO,IAAIV,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;AAC3B,YAAA,MAAMS,QAAAA,GAAWC,KAAAA,EAAAA;AACjBD,YAAAA,QAAAA,CAASkE,KAAK,EAAA,CAAG/D,IAAI,CAACb,OAAAA,CAAAA,CAASc,KAAK,CAACb,MAAAA,CAAAA;YACrCO,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAACI,QAAAA,CAAAA;AACxB,QAAA,CAAA,CAAA;AACF,IAAA;IAEA,IAAI;AACF,QAAA,MAAMC,KAAAA,CAAMH,IAAAA,CAAKC,QAAQ,CAAA,CAAEmE,KAAK,EAAA;QAChC,OAAO,KAAA;AACT,IAAA,CAAA,CAAE,OAAOC,CAAAA,EAAG;QACV,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA,MAAMC,qBAAqB,OAAOtE,IAAAA,GAAAA;IAChC,IAAIf,MAAAA;IACJ,IAAI;QACF,MAAMmB,QAAAA,GAAW,MAAML,WAAAA,CAAYC,IAAAA,CAAAA;AACnCf,QAAAA,MAAAA,GAASmB,SAASnB,MAAM;AAC1B,IAAA,CAAA,CAAE,OAAOoF,CAAAA,EAAG;;QAEV,OAAO,KAAA;AACT,IAAA;IACA,OAAOpF,MAAAA,IAAUF,mBAAAA,CAAoBI,QAAQ,CAACF,MAAAA,CAAAA;AAChD,CAAA;AAEA,MAAMsF,mBAAmB,OAAOvE,IAAAA,GAAAA;IAC9B,IAAIf,MAAAA;IACJ,IAAI;QACF,MAAMmB,QAAAA,GAAW,MAAML,WAAAA,CAAYC,IAAAA,CAAAA;AACnCf,QAAAA,MAAAA,GAASmB,SAASnB,MAAM;AAC1B,IAAA,CAAA,CAAE,OAAOoF,CAAAA,EAAG;;QAEV,OAAO,KAAA;AACT,IAAA;IACA,OAAOpF,MAAAA,IAAUJ,iBAAAA,CAAkBM,QAAQ,CAACF,MAAAA,CAAAA;AAC9C,CAAA;AAEA,MAAMuF,UAAU,OAAOxE,IAAAA,GAAAA;IACrB,IAAIf,MAAAA;IACJ,IAAI;QACF,MAAMmB,QAAAA,GAAW,MAAML,WAAAA,CAAYC,IAAAA,CAAAA;AACnCf,QAAAA,MAAAA,GAASmB,SAASnB,MAAM;AAC1B,IAAA,CAAA,CAAE,OAAOoF,CAAAA,EAAG;;QAEV,OAAO,KAAA;AACT,IAAA;IACA,OAAOpF,MAAAA,IAAUH,kBAAAA,CAAmBK,QAAQ,CAACF,MAAAA,CAAAA;AAC/C,CAAA;AAEA,MAAMwF,mBAAmB,CAAC1D,IAAAA,GAAAA;AACxB,IAAA,MAAM2D,eAAe,IAAMC,MAAAA,CAAOC,WAAW,CAAC,CAAA,CAAA,CAAGC,QAAQ,CAAC,KAAA,CAAA;AAC1D,IAAA,MAAMC,QAAAA,GAAWC,aAAAA,CAAQC,UAAU,CAACjE,IAAAA,EAAM;QAAEkE,SAAAA,EAAW,GAAA;QAAKC,SAAAA,EAAW;AAAM,KAAA,CAAA;AAE7E,IAAA,OAAO,CAAA,EAAGJ,QAAAA,CAAS,CAAC,EAAEJ,YAAAA,EAAAA,CAAAA,CAAgB;AACxC,CAAA;AAEA,wBAAe;AACbP,IAAAA,aAAAA;AACAG,IAAAA,kBAAAA;AACAC,IAAAA,gBAAAA;AACAC,IAAAA,OAAAA;AACAhE,IAAAA,aAAAA;AACAgD,IAAAA,yBAAAA;AACArB,IAAAA,iBAAAA;AACAC,IAAAA,QAAAA;AACAqC,IAAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"image-manipulation.js","sources":["../../../server/src/services/image-manipulation.ts"],"sourcesContent":["import fs from 'fs';\nimport { join } from 'path';\nimport sharp from 'sharp';\nimport crypto from 'crypto';\nimport { strings, file as fileUtils } from '@strapi/utils';\n\nimport { getService } from '../utils';\n\nimport type { UploadableFile } from '../types';\n\ntype Dimensions = {\n  width: number | null;\n  height: number | null;\n};\n\n// TODO: remove after upgrading sharp to >=0.34.2 (pageHeight added to OutputInfo types)\ndeclare module 'sharp' {\n  interface OutputInfo {\n    pageHeight?: number;\n  }\n}\n\nconst { bytesToKbytes } = fileUtils;\n\nconst FORMATS_TO_RESIZE = ['jpeg', 'png', 'webp', 'tiff', 'gif'];\nconst FORMATS_TO_PROCESS = ['jpeg', 'png', 'webp', 'tiff', 'svg', 'gif', 'avif'];\nconst FORMATS_TO_OPTIMIZE = ['jpeg', 'png', 'webp', 'tiff', 'avif'];\n\nconst isOptimizableFormat = (\n  format: string | undefined\n): format is 'jpeg' | 'png' | 'webp' | 'tiff' | 'avif' =>\n  format !== undefined && FORMATS_TO_OPTIMIZE.includes(format);\n\nconst writeStreamToFile = (stream: NodeJS.ReadWriteStream, path: string) =>\n  new Promise<void>((resolve, reject) => {\n    const writeStream = fs.createWriteStream(path);\n    // Reject promise if there is an error with the provided stream\n    stream.on('error', reject);\n    stream.pipe(writeStream);\n    writeStream.on('close', () => resolve());\n    writeStream.on('error', reject);\n  });\n\nconst getMetadata = (file: UploadableFile): Promise<sharp.Metadata> => {\n  if (!file.filepath) {\n    return new Promise((resolve, reject) => {\n      const pipeline = sharp();\n      pipeline.metadata().then(resolve).catch(reject);\n      file.getStream().pipe(pipeline);\n    });\n  }\n\n  return sharp(file.filepath).metadata();\n};\n\nconst getDimensions = async (file: UploadableFile): Promise<Dimensions> => {\n  const { width = null, height = null } = await getMetadata(file);\n\n  return { width, height };\n};\n\nconst THUMBNAIL_RESIZE_OPTIONS = {\n  width: 245,\n  height: 156,\n  fit: 'inside',\n} satisfies sharp.ResizeOptions;\n\nconst resizeFileTo = async (\n  file: UploadableFile,\n  options: sharp.ResizeOptions,\n  {\n    name,\n    hash,\n  }: {\n    name: string;\n    hash: string;\n  }\n) => {\n  const filePath = file.tmpWorkingDirectory ? join(file.tmpWorkingDirectory, hash) : hash;\n\n  let newInfo;\n  if (!file.filepath) {\n    const transform = sharp({ animated: true })\n      .resize(options)\n      .on('info', (info) => {\n        newInfo = info;\n      });\n\n    await writeStreamToFile(file.getStream().pipe(transform), filePath);\n  } else {\n    newInfo = await sharp(file.filepath, { animated: true }).resize(options).toFile(filePath);\n  }\n\n  const { width, height, size, pageHeight } = newInfo ?? {};\n\n  const newFile: UploadableFile = {\n    name,\n    hash,\n    ext: file.ext,\n    mime: file.mime,\n    filepath: filePath,\n    path: file.path || null,\n    getStream: () => fs.createReadStream(filePath),\n  };\n\n  Object.assign(newFile, {\n    width,\n    height: pageHeight ?? height,\n    size: size ? bytesToKbytes(size) : 0,\n    sizeInBytes: size,\n  });\n  return newFile;\n};\n\nconst generateThumbnail = async (file: UploadableFile) => {\n  if (\n    file.width &&\n    file.height &&\n    (file.width > THUMBNAIL_RESIZE_OPTIONS.width || file.height > THUMBNAIL_RESIZE_OPTIONS.height)\n  ) {\n    return resizeFileTo(file, THUMBNAIL_RESIZE_OPTIONS, {\n      name: `thumbnail_${file.name}`,\n      hash: `thumbnail_${file.hash}`,\n    });\n  }\n\n  return null;\n};\n\n/**\n * Optimize image by:\n *    - auto orienting image based on EXIF data\n *    - reduce image quality\n *\n */\nconst optimize = async (file: UploadableFile) => {\n  const { sizeOptimization = false, autoOrientation = false } =\n    (await getService('upload').getSettings()) ?? {};\n\n  const { format, size } = await getMetadata(file);\n\n  if ((sizeOptimization || autoOrientation) && isOptimizableFormat(format)) {\n    let transformer;\n    if (!file.filepath) {\n      transformer = sharp({ animated: true });\n    } else {\n      transformer = sharp(file.filepath, { animated: true });\n    }\n    // reduce image quality\n    transformer[format]({ quality: sizeOptimization ? 80 : 100 });\n    // rotate image based on EXIF data\n    if (autoOrientation) {\n      transformer.rotate();\n    }\n    const filePath = file.tmpWorkingDirectory\n      ? join(file.tmpWorkingDirectory, `optimized-${file.hash}`)\n      : `optimized-${file.hash}`;\n\n    let newInfo;\n    if (!file.filepath) {\n      transformer.on('info', (info) => {\n        newInfo = info;\n      });\n\n      await writeStreamToFile(file.getStream().pipe(transformer), filePath);\n    } else {\n      newInfo = await transformer.toFile(filePath);\n    }\n\n    const {\n      width: newWidth,\n      height: newHeight,\n      size: newSize,\n      pageHeight: newPageHeight,\n    } = newInfo ?? {};\n\n    const newFile = { ...file };\n\n    newFile.getStream = () => fs.createReadStream(filePath);\n    newFile.filepath = filePath;\n\n    if (newSize && size && newSize > size) {\n      // Ignore optimization if output is bigger than original\n      return file;\n    }\n\n    return Object.assign(newFile, {\n      width: newWidth,\n      height: newPageHeight ?? newHeight,\n      size: newSize ? bytesToKbytes(newSize) : 0,\n      sizeInBytes: newSize,\n    });\n  }\n\n  return file;\n};\n\nconst DEFAULT_BREAKPOINTS = {\n  large: 1000,\n  medium: 750,\n  small: 500,\n};\n\nconst getBreakpoints = () =>\n  strapi.config.get<Record<string, number>>('plugin::upload.breakpoints', DEFAULT_BREAKPOINTS);\n\nconst generateResponsiveFormats = async (file: UploadableFile) => {\n  const { responsiveDimensions = false } = (await getService('upload').getSettings()) ?? {};\n\n  if (!responsiveDimensions) return [];\n\n  const originalDimensions = await getDimensions(file);\n\n  const breakpoints = getBreakpoints();\n  const results = [];\n\n  for (const key of Object.keys(breakpoints)) {\n    const breakpoint = breakpoints[key];\n\n    if (breakpointSmallerThan(breakpoint, originalDimensions)) {\n      results.push(await generateBreakpoint(key, { file, breakpoint }));\n    }\n  }\n\n  return results;\n};\n\nconst generateBreakpoint = async (\n  key: string,\n  { file, breakpoint }: { file: UploadableFile; breakpoint: number }\n) => {\n  const newFile = await resizeFileTo(\n    file,\n    {\n      width: breakpoint,\n      height: breakpoint,\n      fit: 'inside',\n    },\n    {\n      name: `${key}_${file.name}`,\n      hash: `${key}_${file.hash}`,\n    }\n  );\n  return {\n    key,\n    file: newFile,\n  };\n};\n\nconst breakpointSmallerThan = (breakpoint: number, { width, height }: Dimensions) => {\n  return breakpoint < (width ?? 0) || breakpoint < (height ?? 0);\n};\n\n/**\n *  Applies a simple image transformation to see if the image is faulty/corrupted.\n */\nconst isFaultyImage = async (file: UploadableFile) => {\n  if (!file.filepath) {\n    return new Promise((resolve, reject) => {\n      const pipeline = sharp();\n      pipeline.stats().then(resolve).catch(reject);\n      file.getStream().pipe(pipeline);\n    });\n  }\n\n  try {\n    await sharp(file.filepath).stats();\n    return false;\n  } catch (e) {\n    return true;\n  }\n};\n\nconst isOptimizableImage = async (file: UploadableFile) => {\n  let format;\n  try {\n    const metadata = await getMetadata(file);\n    format = metadata.format;\n  } catch (e) {\n    // throw when the file is not a supported image\n    return false;\n  }\n  return format && FORMATS_TO_OPTIMIZE.includes(format);\n};\n\nconst isResizableImage = async (file: UploadableFile) => {\n  let format;\n  try {\n    const metadata = await getMetadata(file);\n    format = metadata.format;\n  } catch (e) {\n    // throw when the file is not a supported image\n    return false;\n  }\n  return format && FORMATS_TO_RESIZE.includes(format);\n};\n\nconst isImage = async (file: UploadableFile) => {\n  let format;\n  try {\n    const metadata = await getMetadata(file);\n    format = metadata.format;\n  } catch (e) {\n    // throw when the file is not a supported image\n    return false;\n  }\n  return format && FORMATS_TO_PROCESS.includes(format);\n};\n\nconst generateFileName = (name: string) => {\n  const randomSuffix = () => crypto.randomBytes(5).toString('hex');\n  const baseName = strings.nameToSlug(name, { separator: '_', lowercase: false });\n\n  return `${baseName}_${randomSuffix()}`;\n};\n\nexport default {\n  isFaultyImage,\n  isOptimizableImage,\n  isResizableImage,\n  isImage,\n  getDimensions,\n  generateResponsiveFormats,\n  generateThumbnail,\n  optimize,\n  generateFileName,\n};\n"],"names":["bytesToKbytes","fileUtils","FORMATS_TO_RESIZE","FORMATS_TO_PROCESS","FORMATS_TO_OPTIMIZE","isOptimizableFormat","format","undefined","includes","writeStreamToFile","stream","path","Promise","resolve","reject","writeStream","fs","createWriteStream","on","pipe","getMetadata","file","filepath","pipeline","sharp","metadata","then","catch","getStream","getDimensions","width","height","THUMBNAIL_RESIZE_OPTIONS","fit","resizeFileTo","options","name","hash","filePath","tmpWorkingDirectory","join","newInfo","transform","animated","resize","info","toFile","size","pageHeight","newFile","ext","mime","createReadStream","Object","assign","sizeInBytes","generateThumbnail","optimize","sizeOptimization","autoOrientation","getService","getSettings","transformer","quality","rotate","newWidth","newHeight","newSize","newPageHeight","DEFAULT_BREAKPOINTS","large","medium","small","getBreakpoints","strapi","config","get","generateResponsiveFormats","responsiveDimensions","originalDimensions","breakpoints","results","key","keys","breakpoint","breakpointSmallerThan","push","generateBreakpoint","isFaultyImage","stats","e","isOptimizableImage","isResizableImage","isImage","generateFileName","randomSuffix","crypto","randomBytes","toString","baseName","strings","nameToSlug","separator","lowercase"],"mappings":";;;;;;;;;;;;;;;AAsBA,MAAM,EAAEA,aAAa,EAAE,GAAGC,UAAAA;AAE1B,MAAMC,iBAAAA,GAAoB;AAAC,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA;AAAM,CAAA;AAChE,MAAMC,kBAAAA,GAAqB;AAAC,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,KAAA;AAAO,IAAA;AAAO,CAAA;AAChF,MAAMC,mBAAAA,GAAsB;AAAC,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA;AAAO,CAAA;AAEnE,MAAMC,sBAAsB,CAC1BC,MAAAA,GAEAA,WAAWC,SAAAA,IAAaH,mBAAAA,CAAoBI,QAAQ,CAACF,MAAAA,CAAAA;AAEvD,MAAMG,oBAAoB,CAACC,MAAAA,EAAgCC,OACzD,IAAIC,OAAAA,CAAc,CAACC,OAAAA,EAASC,MAAAA,GAAAA;QAC1B,MAAMC,WAAAA,GAAcC,mBAAAA,CAAGC,iBAAiB,CAACN,IAAAA,CAAAA;;QAEzCD,MAAAA,CAAOQ,EAAE,CAAC,OAAA,EAASJ,MAAAA,CAAAA;AACnBJ,QAAAA,MAAAA,CAAOS,IAAI,CAACJ,WAAAA,CAAAA;QACZA,WAAAA,CAAYG,EAAE,CAAC,OAAA,EAAS,IAAML,OAAAA,EAAAA,CAAAA;QAC9BE,WAAAA,CAAYG,EAAE,CAAC,OAAA,EAASJ,MAAAA,CAAAA;AAC1B,IAAA,CAAA,CAAA;AAEF,MAAMM,cAAc,CAACC,IAAAA,GAAAA;IACnB,IAAI,CAACA,IAAAA,CAAKC,QAAQ,EAAE;QAClB,OAAO,IAAIV,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;AAC3B,YAAA,MAAMS,QAAAA,GAAWC,sBAAAA,EAAAA;AACjBD,YAAAA,QAAAA,CAASE,QAAQ,EAAA,CAAGC,IAAI,CAACb,OAAAA,CAAAA,CAASc,KAAK,CAACb,MAAAA,CAAAA;YACxCO,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAACI,QAAAA,CAAAA;AACxB,QAAA,CAAA,CAAA;AACF,IAAA;AAEA,IAAA,OAAOC,sBAAAA,CAAMH,IAAAA,CAAKC,QAAQ,CAAA,CAAEG,QAAQ,EAAA;AACtC,CAAA;AAEA,MAAMI,gBAAgB,OAAOR,IAAAA,GAAAA;IAC3B,MAAM,EAAES,QAAQ,IAAI,EAAEC,SAAS,IAAI,EAAE,GAAG,MAAMX,WAAAA,CAAYC,IAAAA,CAAAA;IAE1D,OAAO;AAAES,QAAAA,KAAAA;AAAOC,QAAAA;AAAO,KAAA;AACzB,CAAA;AAEA,MAAMC,wBAAAA,GAA2B;IAC/BF,KAAAA,EAAO,GAAA;IACPC,MAAAA,EAAQ,GAAA;IACRE,GAAAA,EAAK;AACP,CAAA;AAEA,MAAMC,YAAAA,GAAe,OACnBb,IAAAA,EACAc,OAAAA,EACA,EACEC,IAAI,EACJC,IAAI,EAIL,GAAA;IAED,MAAMC,QAAAA,GAAWjB,KAAKkB,mBAAmB,GAAGC,UAAKnB,IAAAA,CAAKkB,mBAAmB,EAAEF,IAAAA,CAAAA,GAAQA,IAAAA;IAEnF,IAAII,OAAAA;IACJ,IAAI,CAACpB,IAAAA,CAAKC,QAAQ,EAAE;AAClB,QAAA,MAAMoB,YAAYlB,sBAAAA,CAAM;YAAEmB,QAAAA,EAAU;AAAK,SAAA,CAAA,CACtCC,MAAM,CAACT,OAAAA,CAAAA,CACPjB,EAAE,CAAC,QAAQ,CAAC2B,IAAAA,GAAAA;YACXJ,OAAAA,GAAUI,IAAAA;AACZ,QAAA,CAAA,CAAA;AAEF,QAAA,MAAMpC,kBAAkBY,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAACuB,SAAAA,CAAAA,EAAYJ,QAAAA,CAAAA;IAC5D,CAAA,MAAO;AACLG,QAAAA,OAAAA,GAAU,MAAMjB,sBAAAA,CAAMH,IAAAA,CAAKC,QAAQ,EAAE;YAAEqB,QAAAA,EAAU;AAAK,SAAA,CAAA,CAAGC,MAAM,CAACT,OAAAA,CAAAA,CAASW,MAAM,CAACR,QAAAA,CAAAA;AAClF,IAAA;IAEA,MAAM,EAAER,KAAK,EAAEC,MAAM,EAAEgB,IAAI,EAAEC,UAAU,EAAE,GAAGP,OAAAA,IAAW,EAAC;AAExD,IAAA,MAAMQ,OAAAA,GAA0B;AAC9Bb,QAAAA,IAAAA;AACAC,QAAAA,IAAAA;AACAa,QAAAA,GAAAA,EAAK7B,KAAK6B,GAAG;AACbC,QAAAA,IAAAA,EAAM9B,KAAK8B,IAAI;QACf7B,QAAAA,EAAUgB,QAAAA;QACV3B,IAAAA,EAAMU,IAAAA,CAAKV,IAAI,IAAI,IAAA;QACnBiB,SAAAA,EAAW,IAAMZ,mBAAAA,CAAGoC,gBAAgB,CAACd,QAAAA;AACvC,KAAA;IAEAe,MAAAA,CAAOC,MAAM,CAACL,OAAAA,EAAS;AACrBnB,QAAAA,KAAAA;AACAC,QAAAA,MAAAA,EAAQiB,UAAAA,IAAcjB,MAAAA;QACtBgB,IAAAA,EAAMA,IAAAA,GAAO/C,cAAc+C,IAAAA,CAAAA,GAAQ,CAAA;QACnCQ,WAAAA,EAAaR;AACf,KAAA,CAAA;IACA,OAAOE,OAAAA;AACT,CAAA;AAEA,MAAMO,oBAAoB,OAAOnC,IAAAA,GAAAA;AAC/B,IAAA,IACEA,KAAKS,KAAK,IACVT,KAAKU,MAAM,KACVV,IAAAA,CAAKS,KAAK,GAAGE,wBAAAA,CAAyBF,KAAK,IAAIT,IAAAA,CAAKU,MAAM,GAAGC,wBAAAA,CAAyBD,MAAM,CAAD,EAC5F;QACA,OAAOG,YAAAA,CAAab,MAAMW,wBAAAA,EAA0B;AAClDI,YAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEf,IAAAA,CAAKe,IAAI,CAAA,CAAE;AAC9BC,YAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEhB,IAAAA,CAAKgB,IAAI,CAAA;AAC9B,SAAA,CAAA;AACF,IAAA;IAEA,OAAO,IAAA;AACT,CAAA;AAEA;;;;;IAMA,MAAMoB,WAAW,OAAOpC,IAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEqC,gBAAAA,GAAmB,KAAK,EAAEC,kBAAkB,KAAK,EAAE,GACxD,MAAMC,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,MAAO,EAAC;AAEjD,IAAA,MAAM,EAAEvD,MAAM,EAAEyC,IAAI,EAAE,GAAG,MAAM3B,WAAAA,CAAYC,IAAAA,CAAAA;AAE3C,IAAA,IAAI,CAACqC,gBAAAA,IAAoBC,eAAc,KAAMtD,oBAAoBC,MAAAA,CAAAA,EAAS;QACxE,IAAIwD,WAAAA;QACJ,IAAI,CAACzC,IAAAA,CAAKC,QAAQ,EAAE;AAClBwC,YAAAA,WAAAA,GAActC,sBAAAA,CAAM;gBAAEmB,QAAAA,EAAU;AAAK,aAAA,CAAA;QACvC,CAAA,MAAO;YACLmB,WAAAA,GAActC,sBAAAA,CAAMH,IAAAA,CAAKC,QAAQ,EAAE;gBAAEqB,QAAAA,EAAU;AAAK,aAAA,CAAA;AACtD,QAAA;;QAEAmB,WAAW,CAACxD,OAAO,CAAC;AAAEyD,YAAAA,OAAAA,EAASL,mBAAmB,EAAA,GAAK;AAAI,SAAA,CAAA;;AAE3D,QAAA,IAAIC,eAAAA,EAAiB;AACnBG,YAAAA,WAAAA,CAAYE,MAAM,EAAA;AACpB,QAAA;QACA,MAAM1B,QAAAA,GAAWjB,KAAKkB,mBAAmB,GACrCC,UAAKnB,IAAAA,CAAKkB,mBAAmB,EAAE,CAAC,UAAU,EAAElB,IAAAA,CAAKgB,IAAI,EAAE,CAAA,GACvD,CAAC,UAAU,EAAEhB,IAAAA,CAAKgB,IAAI,CAAA,CAAE;QAE5B,IAAII,OAAAA;QACJ,IAAI,CAACpB,IAAAA,CAAKC,QAAQ,EAAE;YAClBwC,WAAAA,CAAY5C,EAAE,CAAC,MAAA,EAAQ,CAAC2B,IAAAA,GAAAA;gBACtBJ,OAAAA,GAAUI,IAAAA;AACZ,YAAA,CAAA,CAAA;AAEA,YAAA,MAAMpC,kBAAkBY,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAAC2C,WAAAA,CAAAA,EAAcxB,QAAAA,CAAAA;QAC9D,CAAA,MAAO;YACLG,OAAAA,GAAU,MAAMqB,WAAAA,CAAYhB,MAAM,CAACR,QAAAA,CAAAA;AACrC,QAAA;AAEA,QAAA,MAAM,EACJR,KAAAA,EAAOmC,QAAQ,EACflC,QAAQmC,SAAS,EACjBnB,IAAAA,EAAMoB,OAAO,EACbnB,UAAAA,EAAYoB,aAAa,EAC1B,GAAG3B,WAAW,EAAC;AAEhB,QAAA,MAAMQ,OAAAA,GAAU;AAAE,YAAA,GAAG5B;AAAK,SAAA;AAE1B4B,QAAAA,OAAAA,CAAQrB,SAAS,GAAG,IAAMZ,mBAAAA,CAAGoC,gBAAgB,CAACd,QAAAA,CAAAA;AAC9CW,QAAAA,OAAAA,CAAQ3B,QAAQ,GAAGgB,QAAAA;QAEnB,IAAI6B,OAAAA,IAAWpB,IAAAA,IAAQoB,OAAAA,GAAUpB,IAAAA,EAAM;;YAErC,OAAO1B,IAAAA;AACT,QAAA;QAEA,OAAOgC,MAAAA,CAAOC,MAAM,CAACL,OAAAA,EAAS;YAC5BnB,KAAAA,EAAOmC,QAAAA;AACPlC,YAAAA,MAAAA,EAAQqC,aAAAA,IAAiBF,SAAAA;YACzBnB,IAAAA,EAAMoB,OAAAA,GAAUnE,cAAcmE,OAAAA,CAAAA,GAAW,CAAA;YACzCZ,WAAAA,EAAaY;AACf,SAAA,CAAA;AACF,IAAA;IAEA,OAAO9C,IAAAA;AACT,CAAA;AAEA,MAAMgD,mBAAAA,GAAsB;IAC1BC,KAAAA,EAAO,IAAA;IACPC,MAAAA,EAAQ,GAAA;IACRC,KAAAA,EAAO;AACT,CAAA;AAEA,MAAMC,iBAAiB,IACrBC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAyB,4BAAA,EAA8BP,mBAAAA,CAAAA;AAE1E,MAAMQ,4BAA4B,OAAOxD,IAAAA,GAAAA;IACvC,MAAM,EAAEyD,oBAAAA,GAAuB,KAAK,EAAE,GAAG,MAAOlB,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,EAAA,IAAO,EAAC;IAExF,IAAI,CAACiB,oBAAAA,EAAsB,OAAO,EAAE;IAEpC,MAAMC,kBAAAA,GAAqB,MAAMlD,aAAAA,CAAcR,IAAAA,CAAAA;AAE/C,IAAA,MAAM2D,WAAAA,GAAcP,cAAAA,EAAAA;AACpB,IAAA,MAAMQ,UAAU,EAAE;AAElB,IAAA,KAAK,MAAMC,GAAAA,IAAO7B,MAAAA,CAAO8B,IAAI,CAACH,WAAAA,CAAAA,CAAc;QAC1C,MAAMI,UAAAA,GAAaJ,WAAW,CAACE,GAAAA,CAAI;QAEnC,IAAIG,qBAAAA,CAAsBD,YAAYL,kBAAAA,CAAAA,EAAqB;AACzDE,YAAAA,OAAAA,CAAQK,IAAI,CAAC,MAAMC,kBAAAA,CAAmBL,GAAAA,EAAK;AAAE7D,gBAAAA,IAAAA;AAAM+D,gBAAAA;AAAW,aAAA,CAAA,CAAA;AAChE,QAAA;AACF,IAAA;IAEA,OAAOH,OAAAA;AACT,CAAA;AAEA,MAAMM,qBAAqB,OACzBL,GAAAA,EACA,EAAE7D,IAAI,EAAE+D,UAAU,EAAgD,GAAA;IAElE,MAAMnC,OAAAA,GAAU,MAAMf,YAAAA,CACpBb,IAAAA,EACA;QACES,KAAAA,EAAOsD,UAAAA;QACPrD,MAAAA,EAAQqD,UAAAA;QACRnD,GAAAA,EAAK;KACP,EACA;AACEG,QAAAA,IAAAA,EAAM,GAAG8C,GAAAA,CAAI,CAAC,EAAE7D,IAAAA,CAAKe,IAAI,CAAA,CAAE;AAC3BC,QAAAA,IAAAA,EAAM,GAAG6C,GAAAA,CAAI,CAAC,EAAE7D,IAAAA,CAAKgB,IAAI,CAAA;AAC3B,KAAA,CAAA;IAEF,OAAO;AACL6C,QAAAA,GAAAA;QACA7D,IAAAA,EAAM4B;AACR,KAAA;AACF,CAAA;AAEA,MAAMoC,wBAAwB,CAACD,UAAAA,EAAoB,EAAEtD,KAAK,EAAEC,MAAM,EAAc,GAAA;IAC9E,OAAOqD,UAAAA,IAActD,KAAAA,IAAS,CAAA,KAAMsD,UAAAA,IAAcrD,UAAU,CAAA,CAAA;AAC9D,CAAA;AAEA;;IAGA,MAAMyD,gBAAgB,OAAOnE,IAAAA,GAAAA;IAC3B,IAAI,CAACA,IAAAA,CAAKC,QAAQ,EAAE;QAClB,OAAO,IAAIV,OAAAA,CAAQ,CAACC,OAAAA,EAASC,MAAAA,GAAAA;AAC3B,YAAA,MAAMS,QAAAA,GAAWC,sBAAAA,EAAAA;AACjBD,YAAAA,QAAAA,CAASkE,KAAK,EAAA,CAAG/D,IAAI,CAACb,OAAAA,CAAAA,CAASc,KAAK,CAACb,MAAAA,CAAAA;YACrCO,IAAAA,CAAKO,SAAS,EAAA,CAAGT,IAAI,CAACI,QAAAA,CAAAA;AACxB,QAAA,CAAA,CAAA;AACF,IAAA;IAEA,IAAI;AACF,QAAA,MAAMC,sBAAAA,CAAMH,IAAAA,CAAKC,QAAQ,CAAA,CAAEmE,KAAK,EAAA;QAChC,OAAO,KAAA;AACT,IAAA,CAAA,CAAE,OAAOC,CAAAA,EAAG;QACV,OAAO,IAAA;AACT,IAAA;AACF,CAAA;AAEA,MAAMC,qBAAqB,OAAOtE,IAAAA,GAAAA;IAChC,IAAIf,MAAAA;IACJ,IAAI;QACF,MAAMmB,QAAAA,GAAW,MAAML,WAAAA,CAAYC,IAAAA,CAAAA;AACnCf,QAAAA,MAAAA,GAASmB,SAASnB,MAAM;AAC1B,IAAA,CAAA,CAAE,OAAOoF,CAAAA,EAAG;;QAEV,OAAO,KAAA;AACT,IAAA;IACA,OAAOpF,MAAAA,IAAUF,mBAAAA,CAAoBI,QAAQ,CAACF,MAAAA,CAAAA;AAChD,CAAA;AAEA,MAAMsF,mBAAmB,OAAOvE,IAAAA,GAAAA;IAC9B,IAAIf,MAAAA;IACJ,IAAI;QACF,MAAMmB,QAAAA,GAAW,MAAML,WAAAA,CAAYC,IAAAA,CAAAA;AACnCf,QAAAA,MAAAA,GAASmB,SAASnB,MAAM;AAC1B,IAAA,CAAA,CAAE,OAAOoF,CAAAA,EAAG;;QAEV,OAAO,KAAA;AACT,IAAA;IACA,OAAOpF,MAAAA,IAAUJ,iBAAAA,CAAkBM,QAAQ,CAACF,MAAAA,CAAAA;AAC9C,CAAA;AAEA,MAAMuF,UAAU,OAAOxE,IAAAA,GAAAA;IACrB,IAAIf,MAAAA;IACJ,IAAI;QACF,MAAMmB,QAAAA,GAAW,MAAML,WAAAA,CAAYC,IAAAA,CAAAA;AACnCf,QAAAA,MAAAA,GAASmB,SAASnB,MAAM;AAC1B,IAAA,CAAA,CAAE,OAAOoF,CAAAA,EAAG;;QAEV,OAAO,KAAA;AACT,IAAA;IACA,OAAOpF,MAAAA,IAAUH,kBAAAA,CAAmBK,QAAQ,CAACF,MAAAA,CAAAA;AAC/C,CAAA;AAEA,MAAMwF,mBAAmB,CAAC1D,IAAAA,GAAAA;AACxB,IAAA,MAAM2D,eAAe,IAAMC,uBAAAA,CAAOC,WAAW,CAAC,CAAA,CAAA,CAAGC,QAAQ,CAAC,KAAA,CAAA;AAC1D,IAAA,MAAMC,QAAAA,GAAWC,aAAAA,CAAQC,UAAU,CAACjE,IAAAA,EAAM;QAAEkE,SAAAA,EAAW,GAAA;QAAKC,SAAAA,EAAW;AAAM,KAAA,CAAA;AAE7E,IAAA,OAAO,CAAA,EAAGJ,QAAAA,CAAS,CAAC,EAAEJ,YAAAA,EAAAA,CAAAA,CAAgB;AACxC,CAAA;AAEA,wBAAe;AACbP,IAAAA,aAAAA;AACAG,IAAAA,kBAAAA;AACAC,IAAAA,gBAAAA;AACAC,IAAAA,OAAAA;AACAhE,IAAAA,aAAAA;AACAgD,IAAAA,yBAAAA;AACArB,IAAAA,iBAAAA;AACAC,IAAAA,QAAAA;AACAqC,IAAAA;AACF,CAAA;;;;"}

package/dist/server/services/provider.js

@@ -26,6 +26,30 @@ var provider = (({ strapi })=>({
                     delete file.filepath;
                 }
             }
+        },
+        async replace (newFile, oldFile) {
+            const provider = strapi.plugin('upload').provider;
+            if (fp.isFunction(provider.replaceStream)) {
+                newFile.stream = newFile.getStream();
+                await provider.replaceStream(newFile, oldFile);
+                delete newFile.stream;
+                if ('filepath' in newFile) {
+                    delete newFile.filepath;
+                }
+                return;
+            }
+            if (fp.isFunction(provider.replace)) {
+                newFile.buffer = await utils.file.streamToBuffer(newFile.getStream());
+                await provider.replace(newFile, oldFile);
+                delete newFile.buffer;
+                if ('filepath' in newFile) {
+                    delete newFile.filepath;
+                }
+                return;
+            }
+            // Fallback: delete old then upload new — preserves current behavior for the file.
+            await provider.delete(oldFile);
+            await this.upload(newFile);
         }
     }));
 

package/dist/server/services/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sources":["../../../server/src/services/provider.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport { file as fileUtils } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport { Config, UploadableFile } from '../types';\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async checkFileSize(file: UploadableFile) {\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n    await strapi.plugin('upload').provider.checkFileSize(file, { sizeLimit });\n  },\n\n  async upload(file: UploadableFile) {\n    if (isFunction(strapi.plugin('upload').provider.uploadStream)) {\n      file.stream = file.getStream();\n      await strapi.plugin('upload').provider.uploadStream(file);\n\n      delete file.stream;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    } else {\n      file.buffer = await fileUtils.streamToBuffer(file.getStream());\n      await strapi.plugin('upload').provider.upload(file);\n\n      delete file.buffer;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    }\n  },\n});\n"],"names":["strapi","checkFileSize","file","sizeLimit","config","get","plugin","provider","upload","isFunction","uploadStream","stream","getStream","filepath","buffer","fileUtils","streamToBuffer"],"mappings":";;;;;AAMA,eAAe,CAAA,CAAC,EAAEA,MAAM,EAA2B,IAAM;AACvD,QAAA,MAAMC,eAAcC,IAAoB,EAAA;YACtC,MAAM,EAAEC,SAAS,EAAE,GAAGH,OAAOI,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;YAChD,MAAML,MAAAA,CAAOM,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACN,aAAa,CAACC,IAAAA,EAAM;AAAEC,gBAAAA;AAAU,aAAA,CAAA;AACzE,QAAA,CAAA;AAEA,QAAA,MAAMK,QAAON,IAAoB,EAAA;YAC/B,IAAIO,aAAAA,CAAWT,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAAA,EAAG;gBAC7DR,IAAAA,CAAKS,MAAM,GAAGT,IAAAA,CAAKU,SAAS,EAAA;AAC5B,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAACR,IAAAA,CAAAA;AAEpD,gBAAA,OAAOA,KAAKS,MAAM;AAElB,gBAAA,IAAI,cAAcT,IAAAA,EAAM;AACtB,oBAAA,OAAOA,KAAKW,QAAQ;AACtB,gBAAA;YACF,CAAA,MAAO;AACLX,gBAAAA,IAAAA,CAAKY,MAAM,GAAG,MAAMC,WAAUC,cAAc,CAACd,KAAKU,SAAS,EAAA,CAAA;AAC3D,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACC,MAAM,CAACN,IAAAA,CAAAA;AAE9C,gBAAA,OAAOA,KAAKY,MAAM;AAElB,gBAAA,IAAI,cAAcZ,IAAAA,EAAM;AACtB,oBAAA,OAAOA,KAAKW,QAAQ;AACtB,gBAAA;AACF,YAAA;AACF,QAAA;AACF,KAAA,CAAC;;;;"}
+{"version":3,"file":"provider.js","sources":["../../../server/src/services/provider.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport { file as fileUtils } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport { Config, File, UploadableFile } from '../types';\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async checkFileSize(file: UploadableFile) {\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n    await strapi.plugin('upload').provider.checkFileSize(file, { sizeLimit });\n  },\n\n  async upload(file: UploadableFile) {\n    if (isFunction(strapi.plugin('upload').provider.uploadStream)) {\n      file.stream = file.getStream();\n      await strapi.plugin('upload').provider.uploadStream(file);\n\n      delete file.stream;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    } else {\n      file.buffer = await fileUtils.streamToBuffer(file.getStream());\n      await strapi.plugin('upload').provider.upload(file);\n\n      delete file.buffer;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    }\n  },\n\n  async replace(newFile: UploadableFile, oldFile: File) {\n    const provider = strapi.plugin('upload').provider;\n\n    if (isFunction(provider.replaceStream)) {\n      newFile.stream = newFile.getStream();\n      await provider.replaceStream(newFile, oldFile);\n\n      delete newFile.stream;\n\n      if ('filepath' in newFile) {\n        delete newFile.filepath;\n      }\n      return;\n    }\n\n    if (isFunction(provider.replace)) {\n      newFile.buffer = await fileUtils.streamToBuffer(newFile.getStream());\n      await provider.replace(newFile, oldFile);\n\n      delete newFile.buffer;\n\n      if ('filepath' in newFile) {\n        delete newFile.filepath;\n      }\n      return;\n    }\n\n    // Fallback: delete old then upload new — preserves current behavior for the file.\n    await provider.delete(oldFile);\n    await this.upload(newFile);\n  },\n});\n"],"names":["strapi","checkFileSize","file","sizeLimit","config","get","plugin","provider","upload","isFunction","uploadStream","stream","getStream","filepath","buffer","fileUtils","streamToBuffer","replace","newFile","oldFile","replaceStream","delete"],"mappings":";;;;;AAMA,eAAe,CAAA,CAAC,EAAEA,MAAM,EAA2B,IAAM;AACvD,QAAA,MAAMC,eAAcC,IAAoB,EAAA;YACtC,MAAM,EAAEC,SAAS,EAAE,GAAGH,OAAOI,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;YAChD,MAAML,MAAAA,CAAOM,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACN,aAAa,CAACC,IAAAA,EAAM;AAAEC,gBAAAA;AAAU,aAAA,CAAA;AACzE,QAAA,CAAA;AAEA,QAAA,MAAMK,QAAON,IAAoB,EAAA;YAC/B,IAAIO,aAAAA,CAAWT,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAAA,EAAG;gBAC7DR,IAAAA,CAAKS,MAAM,GAAGT,IAAAA,CAAKU,SAAS,EAAA;AAC5B,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAACR,IAAAA,CAAAA;AAEpD,gBAAA,OAAOA,KAAKS,MAAM;AAElB,gBAAA,IAAI,cAAcT,IAAAA,EAAM;AACtB,oBAAA,OAAOA,KAAKW,QAAQ;AACtB,gBAAA;YACF,CAAA,MAAO;AACLX,gBAAAA,IAAAA,CAAKY,MAAM,GAAG,MAAMC,WAAUC,cAAc,CAACd,KAAKU,SAAS,EAAA,CAAA;AAC3D,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACC,MAAM,CAACN,IAAAA,CAAAA;AAE9C,gBAAA,OAAOA,KAAKY,MAAM;AAElB,gBAAA,IAAI,cAAcZ,IAAAA,EAAM;AACtB,oBAAA,OAAOA,KAAKW,QAAQ;AACtB,gBAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEA,MAAMI,OAAAA,CAAAA,CAAQC,OAAuB,EAAEC,OAAa,EAAA;AAClD,YAAA,MAAMZ,QAAAA,GAAWP,MAAAA,CAAOM,MAAM,CAAC,UAAUC,QAAQ;YAEjD,IAAIE,aAAAA,CAAWF,QAAAA,CAASa,aAAa,CAAA,EAAG;gBACtCF,OAAAA,CAAQP,MAAM,GAAGO,OAAAA,CAAQN,SAAS,EAAA;gBAClC,MAAML,QAAAA,CAASa,aAAa,CAACF,OAAAA,EAASC,OAAAA,CAAAA;AAEtC,gBAAA,OAAOD,QAAQP,MAAM;AAErB,gBAAA,IAAI,cAAcO,OAAAA,EAAS;AACzB,oBAAA,OAAOA,QAAQL,QAAQ;AACzB,gBAAA;AACA,gBAAA;AACF,YAAA;YAEA,IAAIJ,aAAAA,CAAWF,QAAAA,CAASU,OAAO,CAAA,EAAG;AAChCC,gBAAAA,OAAAA,CAAQJ,MAAM,GAAG,MAAMC,WAAUC,cAAc,CAACE,QAAQN,SAAS,EAAA,CAAA;gBACjE,MAAML,QAAAA,CAASU,OAAO,CAACC,OAAAA,EAASC,OAAAA,CAAAA;AAEhC,gBAAA,OAAOD,QAAQJ,MAAM;AAErB,gBAAA,IAAI,cAAcI,OAAAA,EAAS;AACzB,oBAAA,OAAOA,QAAQL,QAAQ;AACzB,gBAAA;AACA,gBAAA;AACF,YAAA;;YAGA,MAAMN,QAAAA,CAASc,MAAM,CAACF,OAAAA,CAAAA;YACtB,MAAM,IAAI,CAACX,MAAM,CAACU,OAAAA,CAAAA;AACpB,QAAA;AACF,KAAA,CAAC;;;;"}

package/dist/server/services/provider.mjs

@@ -24,6 +24,30 @@ var provider = (({ strapi })=>({
                     delete file$1.filepath;
                 }
             }
+        },
+        async replace (newFile, oldFile) {
+            const provider = strapi.plugin('upload').provider;
+            if (isFunction(provider.replaceStream)) {
+                newFile.stream = newFile.getStream();
+                await provider.replaceStream(newFile, oldFile);
+                delete newFile.stream;
+                if ('filepath' in newFile) {
+                    delete newFile.filepath;
+                }
+                return;
+            }
+            if (isFunction(provider.replace)) {
+                newFile.buffer = await file.streamToBuffer(newFile.getStream());
+                await provider.replace(newFile, oldFile);
+                delete newFile.buffer;
+                if ('filepath' in newFile) {
+                    delete newFile.filepath;
+                }
+                return;
+            }
+            // Fallback: delete old then upload new — preserves current behavior for the file.
+            await provider.delete(oldFile);
+            await this.upload(newFile);
         }
     }));
 

package/dist/server/services/provider.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"provider.mjs","sources":["../../../server/src/services/provider.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport { file as fileUtils } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport { Config, UploadableFile } from '../types';\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async checkFileSize(file: UploadableFile) {\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n    await strapi.plugin('upload').provider.checkFileSize(file, { sizeLimit });\n  },\n\n  async upload(file: UploadableFile) {\n    if (isFunction(strapi.plugin('upload').provider.uploadStream)) {\n      file.stream = file.getStream();\n      await strapi.plugin('upload').provider.uploadStream(file);\n\n      delete file.stream;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    } else {\n      file.buffer = await fileUtils.streamToBuffer(file.getStream());\n      await strapi.plugin('upload').provider.upload(file);\n\n      delete file.buffer;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    }\n  },\n});\n"],"names":["strapi","checkFileSize","file","sizeLimit","config","get","plugin","provider","upload","isFunction","uploadStream","stream","getStream","filepath","buffer","fileUtils","streamToBuffer"],"mappings":";;;AAMA,eAAe,CAAA,CAAC,EAAEA,MAAM,EAA2B,IAAM;AACvD,QAAA,MAAMC,eAAcC,IAAoB,EAAA;YACtC,MAAM,EAAEC,SAAS,EAAE,GAAGH,OAAOI,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;YAChD,MAAML,MAAAA,CAAOM,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACN,aAAa,CAACC,IAAAA,EAAM;AAAEC,gBAAAA;AAAU,aAAA,CAAA;AACzE,QAAA,CAAA;AAEA,QAAA,MAAMK,QAAON,MAAoB,EAAA;YAC/B,IAAIO,UAAAA,CAAWT,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAAA,EAAG;gBAC7DR,MAAAA,CAAKS,MAAM,GAAGT,MAAAA,CAAKU,SAAS,EAAA;AAC5B,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAACR,MAAAA,CAAAA;AAEpD,gBAAA,OAAOA,OAAKS,MAAM;AAElB,gBAAA,IAAI,cAAcT,MAAAA,EAAM;AACtB,oBAAA,OAAOA,OAAKW,QAAQ;AACtB,gBAAA;YACF,CAAA,MAAO;AACLX,gBAAAA,MAAAA,CAAKY,MAAM,GAAG,MAAMC,KAAUC,cAAc,CAACd,OAAKU,SAAS,EAAA,CAAA;AAC3D,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACC,MAAM,CAACN,MAAAA,CAAAA;AAE9C,gBAAA,OAAOA,OAAKY,MAAM;AAElB,gBAAA,IAAI,cAAcZ,MAAAA,EAAM;AACtB,oBAAA,OAAOA,OAAKW,QAAQ;AACtB,gBAAA;AACF,YAAA;AACF,QAAA;AACF,KAAA,CAAC;;;;"}
+{"version":3,"file":"provider.mjs","sources":["../../../server/src/services/provider.ts"],"sourcesContent":["import { isFunction } from 'lodash/fp';\nimport { file as fileUtils } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport { Config, File, UploadableFile } from '../types';\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async checkFileSize(file: UploadableFile) {\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n    await strapi.plugin('upload').provider.checkFileSize(file, { sizeLimit });\n  },\n\n  async upload(file: UploadableFile) {\n    if (isFunction(strapi.plugin('upload').provider.uploadStream)) {\n      file.stream = file.getStream();\n      await strapi.plugin('upload').provider.uploadStream(file);\n\n      delete file.stream;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    } else {\n      file.buffer = await fileUtils.streamToBuffer(file.getStream());\n      await strapi.plugin('upload').provider.upload(file);\n\n      delete file.buffer;\n\n      if ('filepath' in file) {\n        delete file.filepath;\n      }\n    }\n  },\n\n  async replace(newFile: UploadableFile, oldFile: File) {\n    const provider = strapi.plugin('upload').provider;\n\n    if (isFunction(provider.replaceStream)) {\n      newFile.stream = newFile.getStream();\n      await provider.replaceStream(newFile, oldFile);\n\n      delete newFile.stream;\n\n      if ('filepath' in newFile) {\n        delete newFile.filepath;\n      }\n      return;\n    }\n\n    if (isFunction(provider.replace)) {\n      newFile.buffer = await fileUtils.streamToBuffer(newFile.getStream());\n      await provider.replace(newFile, oldFile);\n\n      delete newFile.buffer;\n\n      if ('filepath' in newFile) {\n        delete newFile.filepath;\n      }\n      return;\n    }\n\n    // Fallback: delete old then upload new — preserves current behavior for the file.\n    await provider.delete(oldFile);\n    await this.upload(newFile);\n  },\n});\n"],"names":["strapi","checkFileSize","file","sizeLimit","config","get","plugin","provider","upload","isFunction","uploadStream","stream","getStream","filepath","buffer","fileUtils","streamToBuffer","replace","newFile","oldFile","replaceStream","delete"],"mappings":";;;AAMA,eAAe,CAAA,CAAC,EAAEA,MAAM,EAA2B,IAAM;AACvD,QAAA,MAAMC,eAAcC,IAAoB,EAAA;YACtC,MAAM,EAAEC,SAAS,EAAE,GAAGH,OAAOI,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;YAChD,MAAML,MAAAA,CAAOM,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACN,aAAa,CAACC,IAAAA,EAAM;AAAEC,gBAAAA;AAAU,aAAA,CAAA;AACzE,QAAA,CAAA;AAEA,QAAA,MAAMK,QAAON,MAAoB,EAAA;YAC/B,IAAIO,UAAAA,CAAWT,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAAA,EAAG;gBAC7DR,MAAAA,CAAKS,MAAM,GAAGT,MAAAA,CAAKU,SAAS,EAAA;AAC5B,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACG,YAAY,CAACR,MAAAA,CAAAA;AAEpD,gBAAA,OAAOA,OAAKS,MAAM;AAElB,gBAAA,IAAI,cAAcT,MAAAA,EAAM;AACtB,oBAAA,OAAOA,OAAKW,QAAQ;AACtB,gBAAA;YACF,CAAA,MAAO;AACLX,gBAAAA,MAAAA,CAAKY,MAAM,GAAG,MAAMC,KAAUC,cAAc,CAACd,OAAKU,SAAS,EAAA,CAAA;AAC3D,gBAAA,MAAMZ,OAAOM,MAAM,CAAC,UAAUC,QAAQ,CAACC,MAAM,CAACN,MAAAA,CAAAA;AAE9C,gBAAA,OAAOA,OAAKY,MAAM;AAElB,gBAAA,IAAI,cAAcZ,MAAAA,EAAM;AACtB,oBAAA,OAAOA,OAAKW,QAAQ;AACtB,gBAAA;AACF,YAAA;AACF,QAAA,CAAA;QAEA,MAAMI,OAAAA,CAAAA,CAAQC,OAAuB,EAAEC,OAAa,EAAA;AAClD,YAAA,MAAMZ,QAAAA,GAAWP,MAAAA,CAAOM,MAAM,CAAC,UAAUC,QAAQ;YAEjD,IAAIE,UAAAA,CAAWF,QAAAA,CAASa,aAAa,CAAA,EAAG;gBACtCF,OAAAA,CAAQP,MAAM,GAAGO,OAAAA,CAAQN,SAAS,EAAA;gBAClC,MAAML,QAAAA,CAASa,aAAa,CAACF,OAAAA,EAASC,OAAAA,CAAAA;AAEtC,gBAAA,OAAOD,QAAQP,MAAM;AAErB,gBAAA,IAAI,cAAcO,OAAAA,EAAS;AACzB,oBAAA,OAAOA,QAAQL,QAAQ;AACzB,gBAAA;AACA,gBAAA;AACF,YAAA;YAEA,IAAIJ,UAAAA,CAAWF,QAAAA,CAASU,OAAO,CAAA,EAAG;AAChCC,gBAAAA,OAAAA,CAAQJ,MAAM,GAAG,MAAMC,KAAUC,cAAc,CAACE,QAAQN,SAAS,EAAA,CAAA;gBACjE,MAAML,QAAAA,CAASU,OAAO,CAACC,OAAAA,EAASC,OAAAA,CAAAA;AAEhC,gBAAA,OAAOD,QAAQJ,MAAM;AAErB,gBAAA,IAAI,cAAcI,OAAAA,EAAS;AACzB,oBAAA,OAAOA,QAAQL,QAAQ;AACzB,gBAAA;AACA,gBAAA;AACF,YAAA;;YAGA,MAAMN,QAAAA,CAASc,MAAM,CAACF,OAAAA,CAAAA;YACtB,MAAM,IAAI,CAACX,MAAM,CAACU,OAAAA,CAAAA;AACpB,QAAA;AACF,KAAA,CAAC;;;;"}

package/dist/server/services/upload.js

@@ -11,6 +11,14 @@ var fp = require('lodash/fp');
 var constants = require('../constants.js');
 var index = require('../utils/index.js');
 
+function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
+
+var os__default = /*#__PURE__*/_interopDefault(os);
+var path__default = /*#__PURE__*/_interopDefault(path);
+var fs__default = /*#__PURE__*/_interopDefault(fs);
+var fse__default = /*#__PURE__*/_interopDefault(fse);
+var ___default = /*#__PURE__*/_interopDefault(_);
+
 const { UPDATED_BY_ATTRIBUTE, CREATED_BY_ATTRIBUTE } = utils.contentTypes.constants;
 const { MEDIA_CREATE, MEDIA_UPDATE, MEDIA_DELETE } = constants.ALLOWED_WEBHOOK_EVENTS;
 const { ApplicationError, NotFoundError } = utils.errors;
@@ -18,15 +26,15 @@ const { bytesToKbytes } = utils.file;
 var upload = (({ strapi })=>{
     const fileService = index.getService('file');
     const sendMediaMetrics = async (data)=>{
-        if (_.has(data, 'caption') && !_.isEmpty(data.caption)) {
+        if (___default.default.has(data, 'caption') && !___default.default.isEmpty(data.caption)) {
             await index.getService('metrics').trackUsage('didSaveMediaWithCaption');
         }
-        if (_.has(data, 'alternativeText') && !_.isEmpty(data.alternativeText)) {
+        if (___default.default.has(data, 'alternativeText') && !___default.default.isEmpty(data.alternativeText)) {
             await index.getService('metrics').trackUsage('didSaveMediaWithAlternativeText');
         }
     };
     const createAndAssignTmpWorkingDirectoryToFiles = async (files)=>{
-        const tmpWorkingDirectory = await fse.mkdtemp(path.join(os.tmpdir(), 'strapi-upload-'));
+        const tmpWorkingDirectory = await fse__default.default.mkdtemp(path__default.default.join(os__default.default.tmpdir(), 'strapi-upload-'));
         if (Array.isArray(files)) {
             files.forEach((file)=>{
                 file.tmpWorkingDirectory = tmpWorkingDirectory;
@@ -75,12 +83,12 @@ var upload = (({ strapi })=>{
         if (!isValidFilename(filename)) {
             throw new ApplicationError('File name contains invalid characters');
         }
-        let ext = path.extname(filename);
+        let ext = path__default.default.extname(filename);
         if (!ext) {
             ext = `.${mimeTypes.extension(type)}`;
         }
         const usedName = (fileInfo.name || filename).normalize();
-        const basename = path.basename(usedName, ext);
+        const basename = path__default.default.basename(usedName, ext);
         // Prevent null characters in file name
         if (!isValidFilename(filename)) {
             throw new ApplicationError('File name contains invalid characters');
@@ -133,7 +141,7 @@ var upload = (({ strapi })=>{
             tmpWorkingDirectory: file.tmpWorkingDirectory
         });
         currentFile.filepath = file.filepath;
-        currentFile.getStream = ()=>fs.createReadStream(file.filepath);
+        currentFile.getStream = ()=>fs__default.default.createReadStream(file.filepath);
         const { optimize, isImage, isFaultyImage, isOptimizableImage } = strapi.plugin('upload').service('image-manipulation');
         if (await isImage(currentFile)) {
             if (await isFaultyImage(currentFile)) {
@@ -165,7 +173,7 @@ var upload = (({ strapi })=>{
                 });
             };
             const concurrentUploadSize = Math.max(1, strapi.config.get('plugin::upload').concurrentUploadSize ?? 1);
-            const fileBatches = _.chunk(fileArray.map((file, idx)=>({
+            const fileBatches = ___default.default.chunk(fileArray.map((file, idx)=>({
                     file,
                     fileInfo: fileInfoArray[idx] || {}
                 })), concurrentUploadSize);
@@ -175,7 +183,7 @@ var upload = (({ strapi })=>{
             }
         } finally{
             // delete temporary folder
-            await fse.remove(tmpWorkingDirectory);
+            await fse__default.default.remove(tmpWorkingDirectory);
         }
         return uploadedFiles;
     }
@@ -190,20 +198,20 @@ var upload = (({ strapi })=>{
         const { width, height } = await getDimensions(fileData);
         // Make sure this is assigned before calling any upload
         // That way it can mutate the width and height
-        _.assign(fileData, {
+        ___default.default.assign(fileData, {
             width,
             height
         });
         // For performance reasons, all uploads are wrapped in a single Promise.all
         const uploadThumbnail = async (thumbnailFile)=>{
             await index.getService('provider').upload(thumbnailFile);
-            _.set(fileData, 'formats.thumbnail', thumbnailFile);
+            ___default.default.set(fileData, 'formats.thumbnail', thumbnailFile);
         };
         // Generate thumbnail and responsive formats
         const uploadResponsiveFormat = async (format)=>{
             const { key, file } = format;
             await index.getService('provider').upload(file);
-            _.set(fileData, [
+            ___default.default.set(fileData, [
                 'formats',
                 key
             ], file);
@@ -230,6 +238,61 @@ var upload = (({ strapi })=>{
         await Promise.all(uploadPromises);
     }
     /**
+   * Like uploadImage, but pairs the main file and each format with its old
+   * counterpart and routes through provider.replace so providers that implement
+   * an atomic replace can use it. Formats that no longer exist on the new image
+   * are deleted; formats that didn't exist on the old image are uploaded fresh.
+   */ async function replaceImage(fileData, oldFile) {
+        const { getDimensions, generateThumbnail, generateResponsiveFormats, isResizableImage } = index.getService('image-manipulation');
+        const { width, height } = await getDimensions(fileData);
+        ___default.default.assign(fileData, {
+            width,
+            height
+        });
+        const replaceFormat = async (key, newFormat)=>{
+            const oldFormat = oldFile.formats?.[key];
+            if (oldFormat) {
+                await index.getService('provider').replace(newFormat, oldFormat);
+            } else {
+                await index.getService('provider').upload(newFormat);
+            }
+            ___default.default.set(fileData, [
+                'formats',
+                key
+            ], newFormat);
+        };
+        const promises = [];
+        // Replace the main file
+        promises.push(index.getService('provider').replace(fileData, oldFile));
+        const newFormatKeys = new Set();
+        if (await isResizableImage(fileData)) {
+            const thumbnailFile = await generateThumbnail(fileData);
+            if (thumbnailFile) {
+                newFormatKeys.add('thumbnail');
+                promises.push(replaceFormat('thumbnail', thumbnailFile));
+            }
+            const formats = await generateResponsiveFormats(fileData);
+            if (Array.isArray(formats) && formats.length > 0) {
+                for (const format of formats){
+                    // eslint-disable-next-line no-continue
+                    if (!format) continue;
+                    newFormatKeys.add(format.key);
+                    promises.push(replaceFormat(format.key, format.file));
+                }
+            }
+        }
+        // Delete any formats that existed on the old file but are not present on the new one
+        if (oldFile.formats && oldFile.provider === strapi.config.get('plugin::upload').provider) {
+            for (const oldKey of Object.keys(oldFile.formats)){
+                if (!newFormatKeys.has(oldKey)) {
+                    const oldFormat = oldFile.formats[oldKey];
+                    promises.push(strapi.plugin('upload').provider.delete(oldFormat));
+                }
+            }
+        }
+        await Promise.all(promises);
+    }
+    /**
    * Upload a file. If it is an image it will generate a thumbnail
    * and responsive formats (if enabled).
    */ async function uploadFileAndPersist(fileData, opts) {
@@ -242,7 +305,7 @@ var upload = (({ strapi })=>{
         } else {
             await index.getService('provider').upload(fileData);
         }
-        _.set(fileData, 'provider', config.provider);
+        ___default.default.set(fileData, 'provider', config.provider);
         // Persist file(s)
         return add(fileData, {
             user
@@ -255,14 +318,14 @@ var upload = (({ strapi })=>{
             throw new NotFoundError();
         }
         const fileService = index.getService('file');
-        const newName = _.isNil(name) ? dbFile.name : name;
+        const newName = ___default.default.isNil(name) ? dbFile.name : name;
         const newInfos = {
             name: newName,
-            alternativeText: _.isNil(alternativeText) ? dbFile.alternativeText : alternativeText,
-            caption: _.isNil(caption) ? dbFile.caption : caption,
-            focalPoint: _.isNil(focalPoint) ? dbFile.focalPoint : focalPoint,
-            folder: _.isUndefined(folder) ? dbFile.folder : folder,
-            folderPath: _.isUndefined(folder) ? dbFile.folderPath : await fileService.getFolderPath(folder)
+            alternativeText: ___default.default.isNil(alternativeText) ? dbFile.alternativeText : alternativeText,
+            caption: ___default.default.isNil(caption) ? dbFile.caption : caption,
+            focalPoint: ___default.default.isNil(focalPoint) ? dbFile.focalPoint : focalPoint,
+            folder: ___default.default.isUndefined(folder) ? dbFile.folder : folder,
+            folderPath: ___default.default.isUndefined(folder) ? dbFile.folderPath : await fileService.getFolderPath(folder)
         };
         return update(id, newInfos, {
             user
@@ -283,30 +346,34 @@ var upload = (({ strapi })=>{
             const { fileInfo } = data;
             fileData = await enhanceAndValidateFile(file, fileInfo);
             // keep a constant hash and extension so the file url doesn't change when the file is replaced
-            _.assign(fileData, {
+            ___default.default.assign(fileData, {
                 hash: dbFile.hash,
                 ext: dbFile.ext
             });
-            // execute delete function of the provider
+            // clear old formats — replaceImage / replace will set new ones
+            ___default.default.set(fileData, 'formats', {});
             if (dbFile.provider === config.provider) {
-                await strapi.plugin('upload').provider.delete(dbFile);
-                if (dbFile.formats) {
-                    await Promise.all(Object.keys(dbFile.formats).map((key)=>{
-                        return strapi.plugin('upload').provider.delete(dbFile.formats[key]);
-                    }));
+                if (await isImage(fileData)) {
+                    await replaceImage(fileData, dbFile);
+                } else {
+                    // The new file is not an image, so it has no formats. Replace the main
+                    // file, then delete any formats the old image left behind — otherwise
+                    // they're orphaned in storage since the DB record no longer tracks them.
+                    await index.getService('provider').replace(fileData, dbFile);
+                    if (dbFile.formats) {
+                        await Promise.all(Object.keys(dbFile.formats).map((key)=>strapi.plugin('upload').provider.delete(dbFile.formats[key])));
+                    }
                 }
-            }
-            // clear old formats
-            _.set(fileData, 'formats', {});
-            if (await isImage(fileData)) {
+            } else if (await isImage(fileData)) {
+                // Cross-provider replacement: no delete on the old provider, upload to the new one.
                 await uploadImage(fileData);
             } else {
                 await index.getService('provider').upload(fileData);
             }
-            _.set(fileData, 'provider', config.provider);
+            ___default.default.set(fileData, 'provider', config.provider);
         } finally{
             // delete temporary folder
-            await fse.remove(tmpWorkingDirectory);
+            await fse__default.default.remove(tmpWorkingDirectory);
         }
         return update(id, fileData, {
             user
@@ -459,7 +526,7 @@ var upload = (({ strapi })=>{
         return {
             results: signedResults,
             // Omit total & pageCount when counting is disabled (withCount=false).
-            pagination: fp.isNil(total) ? _.omit(paginationInfo, [
+            pagination: fp.isNil(total) ? ___default.default.omit(paginationInfo, [
                 'total',
                 'pageCount'
             ]) : paginationInfo