@strapi/upload 5.52.3 → 5.54.0

package/dist/server/mcp/sanitizers/sanitize-media.js

@@ -0,0 +1,97 @@
+'use strict';
+
+/** Coerces a value to a string, or null when it is absent. Timestamps arrive as Date or string. */ const toNullableString = (value)=>{
+    if (value === null || value === undefined) return null;
+    if (value instanceof Date) return value.toISOString();
+    return String(value);
+};
+const toNullableNumber = (value)=>{
+    if (value === null || value === undefined) return null;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+};
+/**
+ * Projects a raw file row onto the MCP asset shape.
+ *
+ * This is an allowlist: every exposed key is named explicitly, so `provider`,
+ * `provider_metadata` (which can carry provider credentials), `hash`, `formats`, `related`,
+ * and the private `folderPath` never reach an MCP client — including after new fields are
+ * added to the file content-type.
+ */ const sanitizeMediaAsset = (asset)=>{
+    const folder = asset.folder;
+    return {
+        id: Number(asset.id),
+        name: String(asset.name ?? ''),
+        alternativeText: toNullableString(asset.alternativeText),
+        caption: toNullableString(asset.caption),
+        url: String(asset.url ?? ''),
+        mime: String(asset.mime ?? ''),
+        size: Number(asset.size ?? 0),
+        width: toNullableNumber(asset.width),
+        height: toNullableNumber(asset.height),
+        ext: toNullableString(asset.ext),
+        folder: folder !== null && folder !== undefined && folder.id !== undefined ? {
+            id: Number(folder.id),
+            name: String(folder.name ?? '')
+        } : null,
+        createdAt: toNullableString(asset.createdAt),
+        updatedAt: toNullableString(asset.updatedAt)
+    };
+};
+/**
+ * Projects the recursive output of `folder.getStructure()` onto `{ id, name, children }`,
+ * dropping `path` and `pathId` (internal materialized-path bookkeeping).
+ */ const sanitizeMediaFolderTree = (nodes)=>{
+    if (Array.isArray(nodes) === false) return [];
+    return nodes.map((node)=>({
+            id: Number(node.id),
+            name: String(node.name ?? ''),
+            children: sanitizeMediaFolderTree(node.children)
+        }));
+};
+/**
+ * Projects a raw folder row onto the MCP folder shape.
+ *
+ * An allowlist for the same reason as `sanitizeMediaAsset`: `path` and `pathId` are the internal
+ * materialized-path bookkeeping the folder service uses to cascade moves and deletes. Exposing
+ * them would invite an agent to treat them as addressable, and any field added to the folder
+ * content-type later stays invisible until it is named here on purpose.
+ */ const sanitizeMediaFolder = (folder)=>{
+    if (folder === null || folder === undefined) {
+        return null;
+    }
+    const parent = folder.parent;
+    /**
+   * `parent: null` is a claim, not a default: the output contract defines it as "this folder
+   * sits at the media library root". A row selected without the relation cannot support that
+   * claim — it knows nothing about the parent either way — so the key is omitted rather than
+   * asserted as null, which would report a nested folder as root-level.
+   *
+   * A populated relation arrives either as an object or as a bare id, depending on the query.
+   */ const parentValue = (()=>{
+        if ('parent' in folder === false || parent === undefined) return undefined;
+        if (parent === null) return null;
+        if (typeof parent === 'number') return {
+            id: parent
+        };
+        if (parent.id === undefined) return null;
+        return {
+            id: Number(parent.id),
+            name: String(parent.name ?? '')
+        };
+    })();
+    return {
+        id: Number(folder.id),
+        name: String(folder.name ?? ''),
+        ...parentValue === undefined ? {} : {
+            parent: parentValue
+        },
+        createdAt: toNullableString(folder.createdAt),
+        updatedAt: toNullableString(folder.updatedAt)
+    };
+};
+
+exports.sanitizeMediaAsset = sanitizeMediaAsset;
+exports.sanitizeMediaFolder = sanitizeMediaFolder;
+exports.sanitizeMediaFolderTree = sanitizeMediaFolderTree;
+//# sourceMappingURL=sanitize-media.js.map

package/dist/server/mcp/sanitizers/sanitize-media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-media.js","sources":["../../../../server/src/mcp/sanitizers/sanitize-media.ts"],"sourcesContent":["import type { MediaFolderNode } from '../schemas';\n\ntype RawFolder = {\n  id?: unknown;\n  name?: unknown;\n  children?: unknown;\n};\n\ntype RawAsset = Record<string, unknown> & {\n  folder?: RawFolder | null;\n};\n\n/** Coerces a value to a string, or null when it is absent. Timestamps arrive as Date or string. */\nconst toNullableString = (value: unknown): string | null => {\n  if (value === null || value === undefined) return null;\n  if (value instanceof Date) return value.toISOString();\n  return String(value);\n};\n\nconst toNullableNumber = (value: unknown): number | null => {\n  if (value === null || value === undefined) return null;\n  const parsed = Number(value);\n  return Number.isFinite(parsed) ? parsed : null;\n};\n\n/**\n * Projects a raw file row onto the MCP asset shape.\n *\n * This is an allowlist: every exposed key is named explicitly, so `provider`,\n * `provider_metadata` (which can carry provider credentials), `hash`, `formats`, `related`,\n * and the private `folderPath` never reach an MCP client — including after new fields are\n * added to the file content-type.\n */\nexport const sanitizeMediaAsset = (asset: RawAsset) => {\n  const folder = asset.folder;\n\n  return {\n    id: Number(asset.id),\n    name: String(asset.name ?? ''),\n    alternativeText: toNullableString(asset.alternativeText),\n    caption: toNullableString(asset.caption),\n    url: String(asset.url ?? ''),\n    mime: String(asset.mime ?? ''),\n    size: Number(asset.size ?? 0),\n    width: toNullableNumber(asset.width),\n    height: toNullableNumber(asset.height),\n    ext: toNullableString(asset.ext),\n    folder:\n      folder !== null && folder !== undefined && folder.id !== undefined\n        ? { id: Number(folder.id), name: String(folder.name ?? '') }\n        : null,\n    createdAt: toNullableString(asset.createdAt),\n    updatedAt: toNullableString(asset.updatedAt),\n  };\n};\n\n/**\n * Projects the recursive output of `folder.getStructure()` onto `{ id, name, children }`,\n * dropping `path` and `pathId` (internal materialized-path bookkeeping).\n */\nexport const sanitizeMediaFolderTree = (nodes: unknown): MediaFolderNode[] => {\n  if (Array.isArray(nodes) === false) return [];\n\n  return (nodes as RawFolder[]).map((node) => ({\n    id: Number(node.id),\n    name: String(node.name ?? ''),\n    children: sanitizeMediaFolderTree(node.children),\n  }));\n};\n\n/**\n * Projects a raw folder row onto the MCP folder shape.\n *\n * An allowlist for the same reason as `sanitizeMediaAsset`: `path` and `pathId` are the internal\n * materialized-path bookkeeping the folder service uses to cascade moves and deletes. Exposing\n * them would invite an agent to treat them as addressable, and any field added to the folder\n * content-type later stays invisible until it is named here on purpose.\n */\nexport const sanitizeMediaFolder = (\n  folder: (RawFolder & Record<string, unknown>) | null | undefined\n) => {\n  if (folder === null || folder === undefined) {\n    return null;\n  }\n\n  const parent = folder.parent as RawFolder | number | null | undefined;\n\n  /**\n   * `parent: null` is a claim, not a default: the output contract defines it as \"this folder\n   * sits at the media library root\". A row selected without the relation cannot support that\n   * claim — it knows nothing about the parent either way — so the key is omitted rather than\n   * asserted as null, which would report a nested folder as root-level.\n   *\n   * A populated relation arrives either as an object or as a bare id, depending on the query.\n   */\n  const parentValue = (() => {\n    if ('parent' in folder === false || parent === undefined) return undefined;\n    if (parent === null) return null;\n    if (typeof parent === 'number') return { id: parent };\n    if (parent.id === undefined) return null;\n    return { id: Number(parent.id), name: String(parent.name ?? '') };\n  })();\n\n  return {\n    id: Number(folder.id),\n    name: String(folder.name ?? ''),\n    ...(parentValue === undefined ? {} : { parent: parentValue }),\n    createdAt: toNullableString(folder.createdAt),\n    updatedAt: toNullableString(folder.updatedAt),\n  };\n};\n"],"names":["toNullableString","value","undefined","Date","toISOString","String","toNullableNumber","parsed","Number","isFinite","sanitizeMediaAsset","asset","folder","id","name","alternativeText","caption","url","mime","size","width","height","ext","createdAt","updatedAt","sanitizeMediaFolderTree","nodes","Array","isArray","map","node","children","sanitizeMediaFolder","parent","parentValue"],"mappings":";;AAYA,oGACA,MAAMA,gBAAAA,GAAmB,CAACC,KAAAA,GAAAA;AACxB,IAAA,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW,OAAO,IAAA;AAClD,IAAA,IAAID,KAAAA,YAAiBE,IAAAA,EAAM,OAAOF,KAAAA,CAAMG,WAAW,EAAA;AACnD,IAAA,OAAOC,MAAAA,CAAOJ,KAAAA,CAAAA;AAChB,CAAA;AAEA,MAAMK,mBAAmB,CAACL,KAAAA,GAAAA;AACxB,IAAA,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW,OAAO,IAAA;AAClD,IAAA,MAAMK,SAASC,MAAAA,CAAOP,KAAAA,CAAAA;AACtB,IAAA,OAAOO,MAAAA,CAAOC,QAAQ,CAACF,MAAAA,CAAAA,GAAUA,MAAAA,GAAS,IAAA;AAC5C,CAAA;AAEA;;;;;;;IAQO,MAAMG,kBAAAA,GAAqB,CAACC,KAAAA,GAAAA;IACjC,MAAMC,MAAAA,GAASD,MAAMC,MAAM;IAE3B,OAAO;QACLC,EAAAA,EAAIL,MAAAA,CAAOG,MAAME,EAAE,CAAA;QACnBC,IAAAA,EAAMT,MAAAA,CAAOM,KAAAA,CAAMG,IAAI,IAAI,EAAA,CAAA;QAC3BC,eAAAA,EAAiBf,gBAAAA,CAAiBW,MAAMI,eAAe,CAAA;QACvDC,OAAAA,EAAShB,gBAAAA,CAAiBW,MAAMK,OAAO,CAAA;QACvCC,GAAAA,EAAKZ,MAAAA,CAAOM,KAAAA,CAAMM,GAAG,IAAI,EAAA,CAAA;QACzBC,IAAAA,EAAMb,MAAAA,CAAOM,KAAAA,CAAMO,IAAI,IAAI,EAAA,CAAA;QAC3BC,IAAAA,EAAMX,MAAAA,CAAOG,KAAAA,CAAMQ,IAAI,IAAI,CAAA,CAAA;QAC3BC,KAAAA,EAAOd,gBAAAA,CAAiBK,MAAMS,KAAK,CAAA;QACnCC,MAAAA,EAAQf,gBAAAA,CAAiBK,MAAMU,MAAM,CAAA;QACrCC,GAAAA,EAAKtB,gBAAAA,CAAiBW,MAAMW,GAAG,CAAA;AAC/BV,QAAAA,MAAAA,EACEA,WAAW,IAAA,IAAQA,MAAAA,KAAWV,aAAaU,MAAAA,CAAOC,EAAE,KAAKX,SAAAA,GACrD;YAAEW,EAAAA,EAAIL,MAAAA,CAAOI,OAAOC,EAAE,CAAA;YAAGC,IAAAA,EAAMT,MAAAA,CAAOO,MAAAA,CAAOE,IAAI,IAAI,EAAA;SAAI,GACzD,IAAA;QACNS,SAAAA,EAAWvB,gBAAAA,CAAiBW,MAAMY,SAAS,CAAA;QAC3CC,SAAAA,EAAWxB,gBAAAA,CAAiBW,MAAMa,SAAS;AAC7C,KAAA;AACF;AAEA;;;IAIO,MAAMC,uBAAAA,GAA0B,CAACC,KAAAA,GAAAA;AACtC,IAAA,IAAIC,MAAMC,OAAO,CAACF,KAAAA,CAAAA,KAAW,KAAA,EAAO,OAAO,EAAE;AAE7C,IAAA,OAAO,KAACA,CAAsBG,GAAG,CAAC,CAACC,QAAU;YAC3CjB,EAAAA,EAAIL,MAAAA,CAAOsB,KAAKjB,EAAE,CAAA;YAClBC,IAAAA,EAAMT,MAAAA,CAAOyB,IAAAA,CAAKhB,IAAI,IAAI,EAAA,CAAA;YAC1BiB,QAAAA,EAAUN,uBAAAA,CAAwBK,KAAKC,QAAQ;SACjD,CAAA,CAAA;AACF;AAEA;;;;;;;IAQO,MAAMC,mBAAAA,GAAsB,CACjCpB,MAAAA,GAAAA;IAEA,IAAIA,MAAAA,KAAW,IAAA,IAAQA,MAAAA,KAAWV,SAAAA,EAAW;QAC3C,OAAO,IAAA;AACT,IAAA;IAEA,MAAM+B,MAAAA,GAASrB,OAAOqB,MAAM;AAE5B;;;;;;;MAQA,MAAMC,WAAAA,GAAe,CAAA,IAAA;AACnB,QAAA,IAAI,QAAA,IAAYtB,MAAAA,KAAW,KAAA,IAASqB,MAAAA,KAAW/B,WAAW,OAAOA,SAAAA;QACjE,IAAI+B,MAAAA,KAAW,MAAM,OAAO,IAAA;QAC5B,IAAI,OAAOA,MAAAA,KAAW,QAAA,EAAU,OAAO;YAAEpB,EAAAA,EAAIoB;AAAO,SAAA;AACpD,QAAA,IAAIA,MAAAA,CAAOpB,EAAE,KAAKX,SAAAA,EAAW,OAAO,IAAA;QACpC,OAAO;YAAEW,EAAAA,EAAIL,MAAAA,CAAOyB,OAAOpB,EAAE,CAAA;YAAGC,IAAAA,EAAMT,MAAAA,CAAO4B,MAAAA,CAAOnB,IAAI,IAAI,EAAA;AAAI,SAAA;IAClE,CAAA,GAAA;IAEA,OAAO;QACLD,EAAAA,EAAIL,MAAAA,CAAOI,OAAOC,EAAE,CAAA;QACpBC,IAAAA,EAAMT,MAAAA,CAAOO,MAAAA,CAAOE,IAAI,IAAI,EAAA,CAAA;QAC5B,GAAIoB,WAAAA,KAAgBhC,SAAAA,GAAY,EAAC,GAAI;YAAE+B,MAAAA,EAAQC;SAAa;QAC5DX,SAAAA,EAAWvB,gBAAAA,CAAiBY,OAAOW,SAAS,CAAA;QAC5CC,SAAAA,EAAWxB,gBAAAA,CAAiBY,OAAOY,SAAS;AAC9C,KAAA;AACF;;;;;;"}

package/dist/server/mcp/sanitizers/sanitize-media.mjs

@@ -0,0 +1,93 @@
+/** Coerces a value to a string, or null when it is absent. Timestamps arrive as Date or string. */ const toNullableString = (value)=>{
+    if (value === null || value === undefined) return null;
+    if (value instanceof Date) return value.toISOString();
+    return String(value);
+};
+const toNullableNumber = (value)=>{
+    if (value === null || value === undefined) return null;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+};
+/**
+ * Projects a raw file row onto the MCP asset shape.
+ *
+ * This is an allowlist: every exposed key is named explicitly, so `provider`,
+ * `provider_metadata` (which can carry provider credentials), `hash`, `formats`, `related`,
+ * and the private `folderPath` never reach an MCP client — including after new fields are
+ * added to the file content-type.
+ */ const sanitizeMediaAsset = (asset)=>{
+    const folder = asset.folder;
+    return {
+        id: Number(asset.id),
+        name: String(asset.name ?? ''),
+        alternativeText: toNullableString(asset.alternativeText),
+        caption: toNullableString(asset.caption),
+        url: String(asset.url ?? ''),
+        mime: String(asset.mime ?? ''),
+        size: Number(asset.size ?? 0),
+        width: toNullableNumber(asset.width),
+        height: toNullableNumber(asset.height),
+        ext: toNullableString(asset.ext),
+        folder: folder !== null && folder !== undefined && folder.id !== undefined ? {
+            id: Number(folder.id),
+            name: String(folder.name ?? '')
+        } : null,
+        createdAt: toNullableString(asset.createdAt),
+        updatedAt: toNullableString(asset.updatedAt)
+    };
+};
+/**
+ * Projects the recursive output of `folder.getStructure()` onto `{ id, name, children }`,
+ * dropping `path` and `pathId` (internal materialized-path bookkeeping).
+ */ const sanitizeMediaFolderTree = (nodes)=>{
+    if (Array.isArray(nodes) === false) return [];
+    return nodes.map((node)=>({
+            id: Number(node.id),
+            name: String(node.name ?? ''),
+            children: sanitizeMediaFolderTree(node.children)
+        }));
+};
+/**
+ * Projects a raw folder row onto the MCP folder shape.
+ *
+ * An allowlist for the same reason as `sanitizeMediaAsset`: `path` and `pathId` are the internal
+ * materialized-path bookkeeping the folder service uses to cascade moves and deletes. Exposing
+ * them would invite an agent to treat them as addressable, and any field added to the folder
+ * content-type later stays invisible until it is named here on purpose.
+ */ const sanitizeMediaFolder = (folder)=>{
+    if (folder === null || folder === undefined) {
+        return null;
+    }
+    const parent = folder.parent;
+    /**
+   * `parent: null` is a claim, not a default: the output contract defines it as "this folder
+   * sits at the media library root". A row selected without the relation cannot support that
+   * claim — it knows nothing about the parent either way — so the key is omitted rather than
+   * asserted as null, which would report a nested folder as root-level.
+   *
+   * A populated relation arrives either as an object or as a bare id, depending on the query.
+   */ const parentValue = (()=>{
+        if ('parent' in folder === false || parent === undefined) return undefined;
+        if (parent === null) return null;
+        if (typeof parent === 'number') return {
+            id: parent
+        };
+        if (parent.id === undefined) return null;
+        return {
+            id: Number(parent.id),
+            name: String(parent.name ?? '')
+        };
+    })();
+    return {
+        id: Number(folder.id),
+        name: String(folder.name ?? ''),
+        ...parentValue === undefined ? {} : {
+            parent: parentValue
+        },
+        createdAt: toNullableString(folder.createdAt),
+        updatedAt: toNullableString(folder.updatedAt)
+    };
+};
+
+export { sanitizeMediaAsset, sanitizeMediaFolder, sanitizeMediaFolderTree };
+//# sourceMappingURL=sanitize-media.mjs.map

package/dist/server/mcp/sanitizers/sanitize-media.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-media.mjs","sources":["../../../../server/src/mcp/sanitizers/sanitize-media.ts"],"sourcesContent":["import type { MediaFolderNode } from '../schemas';\n\ntype RawFolder = {\n  id?: unknown;\n  name?: unknown;\n  children?: unknown;\n};\n\ntype RawAsset = Record<string, unknown> & {\n  folder?: RawFolder | null;\n};\n\n/** Coerces a value to a string, or null when it is absent. Timestamps arrive as Date or string. */\nconst toNullableString = (value: unknown): string | null => {\n  if (value === null || value === undefined) return null;\n  if (value instanceof Date) return value.toISOString();\n  return String(value);\n};\n\nconst toNullableNumber = (value: unknown): number | null => {\n  if (value === null || value === undefined) return null;\n  const parsed = Number(value);\n  return Number.isFinite(parsed) ? parsed : null;\n};\n\n/**\n * Projects a raw file row onto the MCP asset shape.\n *\n * This is an allowlist: every exposed key is named explicitly, so `provider`,\n * `provider_metadata` (which can carry provider credentials), `hash`, `formats`, `related`,\n * and the private `folderPath` never reach an MCP client — including after new fields are\n * added to the file content-type.\n */\nexport const sanitizeMediaAsset = (asset: RawAsset) => {\n  const folder = asset.folder;\n\n  return {\n    id: Number(asset.id),\n    name: String(asset.name ?? ''),\n    alternativeText: toNullableString(asset.alternativeText),\n    caption: toNullableString(asset.caption),\n    url: String(asset.url ?? ''),\n    mime: String(asset.mime ?? ''),\n    size: Number(asset.size ?? 0),\n    width: toNullableNumber(asset.width),\n    height: toNullableNumber(asset.height),\n    ext: toNullableString(asset.ext),\n    folder:\n      folder !== null && folder !== undefined && folder.id !== undefined\n        ? { id: Number(folder.id), name: String(folder.name ?? '') }\n        : null,\n    createdAt: toNullableString(asset.createdAt),\n    updatedAt: toNullableString(asset.updatedAt),\n  };\n};\n\n/**\n * Projects the recursive output of `folder.getStructure()` onto `{ id, name, children }`,\n * dropping `path` and `pathId` (internal materialized-path bookkeeping).\n */\nexport const sanitizeMediaFolderTree = (nodes: unknown): MediaFolderNode[] => {\n  if (Array.isArray(nodes) === false) return [];\n\n  return (nodes as RawFolder[]).map((node) => ({\n    id: Number(node.id),\n    name: String(node.name ?? ''),\n    children: sanitizeMediaFolderTree(node.children),\n  }));\n};\n\n/**\n * Projects a raw folder row onto the MCP folder shape.\n *\n * An allowlist for the same reason as `sanitizeMediaAsset`: `path` and `pathId` are the internal\n * materialized-path bookkeeping the folder service uses to cascade moves and deletes. Exposing\n * them would invite an agent to treat them as addressable, and any field added to the folder\n * content-type later stays invisible until it is named here on purpose.\n */\nexport const sanitizeMediaFolder = (\n  folder: (RawFolder & Record<string, unknown>) | null | undefined\n) => {\n  if (folder === null || folder === undefined) {\n    return null;\n  }\n\n  const parent = folder.parent as RawFolder | number | null | undefined;\n\n  /**\n   * `parent: null` is a claim, not a default: the output contract defines it as \"this folder\n   * sits at the media library root\". A row selected without the relation cannot support that\n   * claim — it knows nothing about the parent either way — so the key is omitted rather than\n   * asserted as null, which would report a nested folder as root-level.\n   *\n   * A populated relation arrives either as an object or as a bare id, depending on the query.\n   */\n  const parentValue = (() => {\n    if ('parent' in folder === false || parent === undefined) return undefined;\n    if (parent === null) return null;\n    if (typeof parent === 'number') return { id: parent };\n    if (parent.id === undefined) return null;\n    return { id: Number(parent.id), name: String(parent.name ?? '') };\n  })();\n\n  return {\n    id: Number(folder.id),\n    name: String(folder.name ?? ''),\n    ...(parentValue === undefined ? {} : { parent: parentValue }),\n    createdAt: toNullableString(folder.createdAt),\n    updatedAt: toNullableString(folder.updatedAt),\n  };\n};\n"],"names":["toNullableString","value","undefined","Date","toISOString","String","toNullableNumber","parsed","Number","isFinite","sanitizeMediaAsset","asset","folder","id","name","alternativeText","caption","url","mime","size","width","height","ext","createdAt","updatedAt","sanitizeMediaFolderTree","nodes","Array","isArray","map","node","children","sanitizeMediaFolder","parent","parentValue"],"mappings":"AAYA,oGACA,MAAMA,gBAAAA,GAAmB,CAACC,KAAAA,GAAAA;AACxB,IAAA,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW,OAAO,IAAA;AAClD,IAAA,IAAID,KAAAA,YAAiBE,IAAAA,EAAM,OAAOF,KAAAA,CAAMG,WAAW,EAAA;AACnD,IAAA,OAAOC,MAAAA,CAAOJ,KAAAA,CAAAA;AAChB,CAAA;AAEA,MAAMK,mBAAmB,CAACL,KAAAA,GAAAA;AACxB,IAAA,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW,OAAO,IAAA;AAClD,IAAA,MAAMK,SAASC,MAAAA,CAAOP,KAAAA,CAAAA;AACtB,IAAA,OAAOO,MAAAA,CAAOC,QAAQ,CAACF,MAAAA,CAAAA,GAAUA,MAAAA,GAAS,IAAA;AAC5C,CAAA;AAEA;;;;;;;IAQO,MAAMG,kBAAAA,GAAqB,CAACC,KAAAA,GAAAA;IACjC,MAAMC,MAAAA,GAASD,MAAMC,MAAM;IAE3B,OAAO;QACLC,EAAAA,EAAIL,MAAAA,CAAOG,MAAME,EAAE,CAAA;QACnBC,IAAAA,EAAMT,MAAAA,CAAOM,KAAAA,CAAMG,IAAI,IAAI,EAAA,CAAA;QAC3BC,eAAAA,EAAiBf,gBAAAA,CAAiBW,MAAMI,eAAe,CAAA;QACvDC,OAAAA,EAAShB,gBAAAA,CAAiBW,MAAMK,OAAO,CAAA;QACvCC,GAAAA,EAAKZ,MAAAA,CAAOM,KAAAA,CAAMM,GAAG,IAAI,EAAA,CAAA;QACzBC,IAAAA,EAAMb,MAAAA,CAAOM,KAAAA,CAAMO,IAAI,IAAI,EAAA,CAAA;QAC3BC,IAAAA,EAAMX,MAAAA,CAAOG,KAAAA,CAAMQ,IAAI,IAAI,CAAA,CAAA;QAC3BC,KAAAA,EAAOd,gBAAAA,CAAiBK,MAAMS,KAAK,CAAA;QACnCC,MAAAA,EAAQf,gBAAAA,CAAiBK,MAAMU,MAAM,CAAA;QACrCC,GAAAA,EAAKtB,gBAAAA,CAAiBW,MAAMW,GAAG,CAAA;AAC/BV,QAAAA,MAAAA,EACEA,WAAW,IAAA,IAAQA,MAAAA,KAAWV,aAAaU,MAAAA,CAAOC,EAAE,KAAKX,SAAAA,GACrD;YAAEW,EAAAA,EAAIL,MAAAA,CAAOI,OAAOC,EAAE,CAAA;YAAGC,IAAAA,EAAMT,MAAAA,CAAOO,MAAAA,CAAOE,IAAI,IAAI,EAAA;SAAI,GACzD,IAAA;QACNS,SAAAA,EAAWvB,gBAAAA,CAAiBW,MAAMY,SAAS,CAAA;QAC3CC,SAAAA,EAAWxB,gBAAAA,CAAiBW,MAAMa,SAAS;AAC7C,KAAA;AACF;AAEA;;;IAIO,MAAMC,uBAAAA,GAA0B,CAACC,KAAAA,GAAAA;AACtC,IAAA,IAAIC,MAAMC,OAAO,CAACF,KAAAA,CAAAA,KAAW,KAAA,EAAO,OAAO,EAAE;AAE7C,IAAA,OAAO,KAACA,CAAsBG,GAAG,CAAC,CAACC,QAAU;YAC3CjB,EAAAA,EAAIL,MAAAA,CAAOsB,KAAKjB,EAAE,CAAA;YAClBC,IAAAA,EAAMT,MAAAA,CAAOyB,IAAAA,CAAKhB,IAAI,IAAI,EAAA,CAAA;YAC1BiB,QAAAA,EAAUN,uBAAAA,CAAwBK,KAAKC,QAAQ;SACjD,CAAA,CAAA;AACF;AAEA;;;;;;;IAQO,MAAMC,mBAAAA,GAAsB,CACjCpB,MAAAA,GAAAA;IAEA,IAAIA,MAAAA,KAAW,IAAA,IAAQA,MAAAA,KAAWV,SAAAA,EAAW;QAC3C,OAAO,IAAA;AACT,IAAA;IAEA,MAAM+B,MAAAA,GAASrB,OAAOqB,MAAM;AAE5B;;;;;;;MAQA,MAAMC,WAAAA,GAAe,CAAA,IAAA;AACnB,QAAA,IAAI,QAAA,IAAYtB,MAAAA,KAAW,KAAA,IAASqB,MAAAA,KAAW/B,WAAW,OAAOA,SAAAA;QACjE,IAAI+B,MAAAA,KAAW,MAAM,OAAO,IAAA;QAC5B,IAAI,OAAOA,MAAAA,KAAW,QAAA,EAAU,OAAO;YAAEpB,EAAAA,EAAIoB;AAAO,SAAA;AACpD,QAAA,IAAIA,MAAAA,CAAOpB,EAAE,KAAKX,SAAAA,EAAW,OAAO,IAAA;QACpC,OAAO;YAAEW,EAAAA,EAAIL,MAAAA,CAAOyB,OAAOpB,EAAE,CAAA;YAAGC,IAAAA,EAAMT,MAAAA,CAAO4B,MAAAA,CAAOnB,IAAI,IAAI,EAAA;AAAI,SAAA;IAClE,CAAA,GAAA;IAEA,OAAO;QACLD,EAAAA,EAAIL,MAAAA,CAAOI,OAAOC,EAAE,CAAA;QACpBC,IAAAA,EAAMT,MAAAA,CAAOO,MAAAA,CAAOE,IAAI,IAAI,EAAA,CAAA;QAC5B,GAAIoB,WAAAA,KAAgBhC,SAAAA,GAAY,EAAC,GAAI;YAAE+B,MAAAA,EAAQC;SAAa;QAC5DX,SAAAA,EAAWvB,gBAAAA,CAAiBY,OAAOW,SAAS,CAAA;QAC5CC,SAAAA,EAAWxB,gBAAAA,CAAiBY,OAAOY,SAAS;AAC9C,KAAA;AACF;;;;"}

package/dist/server/mcp/schemas/input-schemas.js

@@ -0,0 +1,206 @@
+'use strict';
+
+var utils = require('@strapi/utils');
+var constants = require('../../constants.js');
+
+/**
+ * Media files and folders are NOT documents: they are plain entities keyed by a numeric `id`,
+ * so there is no `documentId` and no draft/published pair. Every media identifier in the MCP
+ * surface is this numeric id.
+ */ const mediaIdSchema = utils.z.number().int().min(1).describe('Numeric media asset id (e.g. 42). Media files are not documents — they have no documentId and no draft/published versions.');
+const folderIdSchema = utils.z.number().int().min(1).describe('Numeric media folder id (e.g. 3). Folders are not documents — they use numeric ids.');
+const pageSchema = utils.z.number().int().min(1).optional().describe('Page number (1-indexed, default: 1).');
+const pageSizeSchema = utils.z.number().int().min(1).max(100).optional().describe('Items per page (default: 25, max: 100).');
+/**
+ * Sort is constrained to the same whitelist the Media Library admin uses, so MCP callers
+ * cannot sort by private columns such as `folderPath`.
+ */ const sortSchema = utils.z.enum(constants.ALLOWED_SORT_STRINGS).optional().describe(`Sort expression. One of: ${constants.ALLOWED_SORT_STRINGS.join(', ')}. Defaults to "createdAt:DESC".`);
+const mediaListAssetsInputSchema = utils.z.object({
+    folderId: folderIdSchema.optional().describe('Only return assets directly inside this folder. Omit for every folder; pass null for assets at the media library root.').nullable(),
+    mime: utils.z.string().min(1).optional().describe('Filter by mime type prefix or exact value (e.g. "image", "image/png", "application/pdf").'),
+    name: utils.z.string().min(1).optional().describe('Case-insensitive substring search on the asset name.'),
+    page: pageSchema,
+    pageSize: pageSizeSchema,
+    sort: sortSchema
+});
+const mediaGetAssetInputSchema = utils.z.object({
+    id: mediaIdSchema
+});
+utils.z.object({});
+const FOLDER_INPUT_KEYS = [
+    'folder',
+    'folderId',
+    'folderPath'
+];
+/**
+ * `media_update_asset` input — the only writable asset metadata.
+ *
+ * `.strict()` turns an out-of-scope field into an error rather than a silent no-op. The custom
+ * object error directs folder-shaped inputs to `media_move_assets`; other unknown keys are named by
+ * Zod's default error, so the agent can correct the call without a round-trip.
+ *
+ * The "at least one field" rule is enforced in the handler, not here: a `.refine()` would turn
+ * this into a `ZodEffects`, which the MCP tool registry cannot expose as an input schema.
+ */ const mediaUpdateAssetInputSchema = utils.z.object({
+    id: mediaIdSchema,
+    name: utils.z.string().min(1).optional().describe('New asset name as shown in the Media Library. Renames the entry only — the stored file and its URL are unchanged.'),
+    alternativeText: utils.z.string().nullable().optional().describe('Alt text used by the frontend for accessibility. Pass null to clear it; the field then reads back as an empty string.'),
+    caption: utils.z.string().nullable().optional().describe('Caption shown alongside the asset. Pass null to clear it; the field then reads back as an empty string.')
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && FOLDER_INPUT_KEYS.some((key)=>issue.keys.includes(key))) {
+            return 'Folder changes are not supported by media_update_asset. Use media_move_assets to move an asset between folders.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * Folder name, validated to the same rules as the admin folder controller
+ * (`controllers/validation/admin/folder.ts`): non-empty, no slashes, no surrounding whitespace.
+ *
+ * Enforcing the shape here rather than only in the handler means the agent is corrected by the
+ * tool schema — before a call is made — instead of by a service-level error afterwards. The
+ * uniqueness rule cannot live here: it needs a DB read, so it stays in the handler.
+ */ const folderNameSchema = utils.z.string().min(1).regex(/^[^/]+$/, 'Folder name cannot contain slashes.').regex(/^(?! ).+(?<! )$/, 'Folder name cannot start or end with a whitespace.').describe('Folder name as shown in the Media Library. Cannot contain slashes or start/end with a space, and must be unique among its siblings.');
+/**
+ * `parent` is nullable-with-meaning: null is the media library root, an id nests the folder.
+ * The two are distinct from *omitting* the key, which `media_move_folder` forbids (a move needs a
+ * destination) and `media_create_folder` reads as the root.
+ */ const parentFolderIdSchema = folderIdSchema.nullable().describe('Numeric id of the containing folder. Pass null for the media library root. Use media_list_folders to discover folder ids.');
+const mediaCreateFolderInputSchema = utils.z.object({
+    name: folderNameSchema,
+    parent: parentFolderIdSchema.optional().describe('Numeric id of the parent folder. Omit or pass null to create the folder at the media library root.')
+}).strict();
+/**
+ * `media_rename_folder` deliberately takes no `parent`: renaming and moving are separate tools, so an
+ * agent picks by intent. A `parent` here is a sign the caller wanted `media_move_folder`, and the
+ * custom object error says so rather than letting Zod's generic "unrecognized key" stand.
+ */ const mediaRenameFolderInputSchema = utils.z.object({
+    id: folderIdSchema,
+    name: folderNameSchema
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('parent')) {
+            return 'media_rename_folder only changes a folder name. Use media_move_folder to change a folder location.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * `media_move_folder` requires `parent` — including an explicit null for the root. Making it required
+ * is what keeps a mistyped move from silently becoming a no-op update.
+ */ const mediaMoveFolderInputSchema = utils.z.object({
+    id: folderIdSchema,
+    parent: parentFolderIdSchema
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('name')) {
+            return 'media_move_folder only changes a folder location. Use media_rename_folder to change a folder name.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * `media_delete_folder` input.
+ *
+ * `dryRun` defaults to true: the safe branch is the one an agent gets when it omits the flag, so
+ * a destructive cascade is never the path of least resistance (the initiative card's mitigation
+ * for irreversible MCP operations). Deleting requires saying `dryRun: false` on purpose.
+ *
+ * That default lives in the handler (`folder-handlers.ts`, `dryRun = true`), NOT in this schema:
+ * `.default(true)` here is deliberately avoided so an omitted flag is a preview no matter how a
+ * client serialises the advertised schema. The `.describe()` text below is what tells an agent
+ * the default, so the two must be kept in step — do not "fix" this to `.default(true)`.
+ */ const mediaDeleteFolderInputSchema = utils.z.object({
+    ids: utils.z.array(folderIdSchema).min(1).max(100).describe('Numeric ids of the folders to delete (1-100). FOLDER ids only — asset ids are a separate namespace of integers and are rejected here; use media_delete_assets for assets.'),
+    dryRun: utils.z.boolean().optional().describe('When true (the default), nothing is deleted and the tool only reports how many folders and files WOULD be removed. Pass false to actually perform the irreversible deletion.')
+}).strict();
+/**
+ * `media_move_assets` input.
+ *
+ * Bulk by design: an agent reorganising a library moves many assets at once, and one call with a
+ * per-id report is cheaper and easier to recover from than N sequential calls. There is no
+ * single-asset variant — the array length is the only difference, and a second tool would add a
+ * choice without removing a mistake. The admin REST API agrees: `/actions/bulk-move` is the only
+ * move route.
+ *
+ * `folder` is required, including an explicit null for the root, for the same reason `media_move_folder`
+ * requires `parent`: a move needs a destination, and an omitted key would silently become a no-op.
+ *
+ * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently
+ * numbered, so the same integer routinely names both; the handler resolves ids in the file table,
+ * which means a folder id whose number collides with an asset moves that asset — and reports it
+ * as a success. Only an id matching no asset at all is reported as failed.
+ *
+ * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the
+ * caller to say which namespace it meant, and refusing every colliding id would make those assets
+ * permanently unmovable over MCP. The mitigation is the tool description. The durable fix is
+ * namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which is a breaking
+ * change to the read tools and belongs to its own ticket.
+ */ const mediaMoveAssetsInputSchema = utils.z.object({
+    ids: utils.z.array(mediaIdSchema).min(1).max(100).describe('Numeric ids of the assets to move (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here moves the asset sharing that number; use media_move_folder to move a folder.'),
+    folder: folderIdSchema.nullable().describe('Numeric id of the destination folder. Pass null to move the assets to the media library root. Required — including the explicit null — so a move always names a destination. Use media_list_folders to discover folder ids.')
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.some((key)=>key === 'id' || key === 'fileIds')) {
+            return 'media_move_assets moves assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';
+        }
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {
+            return 'media_move_assets moves assets only. Use media_move_folder to move a folder.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * `media_delete_assets` input.
+ *
+ * Bulk-only, like `media_move_assets`: the admin REST API has no single-asset delete route either
+ * (`/actions/bulk-delete` is the only one), and single-vs-bulk is an array length rather than a
+ * distinction an agent can get wrong.
+ *
+ * `dryRun` defaults to true in the handler, not here — same reasoning as `media_delete_folder`: the
+ * safe branch is what an agent gets when it omits the flag, so an irreversible delete is never
+ * the path of least resistance. A schema-level `.default(true)` would publish as a JSON Schema
+ * default a client could serialise away.
+ *
+ * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently
+ * numbered, so the same integer routinely names both; the handler resolves ids in the file table,
+ * which means a folder id whose number collides with an asset deletes that asset. Only an id
+ * matching no asset at all is reported as failed.
+ *
+ * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the
+ * caller to say which namespace it meant, and refusing every colliding id would make those assets
+ * permanently undeletable over MCP. The mitigations are the dry run and the tool description. The
+ * durable fix is namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which
+ * is a breaking change to the read tools and belongs to its own ticket.
+ */ const mediaDeleteAssetsInputSchema = utils.z.object({
+    ids: utils.z.array(mediaIdSchema).min(1).max(100).describe('Numeric ids of the assets to delete (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here deletes the asset sharing that number; use media_delete_folder for folders.'),
+    dryRun: utils.z.boolean().optional().describe('When true (the default), NOTHING is deleted and the tool only reports which assets WOULD be permanently removed. Pass false to actually perform the irreversible deletion.')
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.some((key)=>key === 'id' || key === 'fileIds')) {
+            return 'media_delete_assets deletes assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';
+        }
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {
+            return 'media_delete_assets deletes assets only. Use media_delete_folder to delete a folder.';
+        }
+        return undefined;
+    }
+}).strict();
+
+exports.folderIdSchema = folderIdSchema;
+exports.folderNameSchema = folderNameSchema;
+exports.mediaCreateFolderInputSchema = mediaCreateFolderInputSchema;
+exports.mediaDeleteAssetsInputSchema = mediaDeleteAssetsInputSchema;
+exports.mediaDeleteFolderInputSchema = mediaDeleteFolderInputSchema;
+exports.mediaGetAssetInputSchema = mediaGetAssetInputSchema;
+exports.mediaIdSchema = mediaIdSchema;
+exports.mediaListAssetsInputSchema = mediaListAssetsInputSchema;
+exports.mediaMoveAssetsInputSchema = mediaMoveAssetsInputSchema;
+exports.mediaMoveFolderInputSchema = mediaMoveFolderInputSchema;
+exports.mediaRenameFolderInputSchema = mediaRenameFolderInputSchema;
+exports.mediaUpdateAssetInputSchema = mediaUpdateAssetInputSchema;
+exports.pageSchema = pageSchema;
+exports.pageSizeSchema = pageSizeSchema;
+exports.sortSchema = sortSchema;
+//# sourceMappingURL=input-schemas.js.map

package/dist/server/mcp/schemas/input-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-schemas.js","sources":["../../../../server/src/mcp/schemas/input-schemas.ts"],"sourcesContent":["import { z } from '@strapi/utils';\n\nimport { ALLOWED_SORT_STRINGS } from '../../constants';\n\n/**\n * Media files and folders are NOT documents: they are plain entities keyed by a numeric `id`,\n * so there is no `documentId` and no draft/published pair. Every media identifier in the MCP\n * surface is this numeric id.\n */\nexport const mediaIdSchema = z\n  .number()\n  .int()\n  .min(1)\n  .describe(\n    'Numeric media asset id (e.g. 42). Media files are not documents — they have no documentId and no draft/published versions.'\n  );\n\nexport const folderIdSchema = z\n  .number()\n  .int()\n  .min(1)\n  .describe('Numeric media folder id (e.g. 3). Folders are not documents — they use numeric ids.');\n\nexport const pageSchema = z\n  .number()\n  .int()\n  .min(1)\n  .optional()\n  .describe('Page number (1-indexed, default: 1).');\n\nexport const pageSizeSchema = z\n  .number()\n  .int()\n  .min(1)\n  .max(100)\n  .optional()\n  .describe('Items per page (default: 25, max: 100).');\n\n/**\n * Sort is constrained to the same whitelist the Media Library admin uses, so MCP callers\n * cannot sort by private columns such as `folderPath`.\n */\nexport const sortSchema = z\n  .enum(ALLOWED_SORT_STRINGS as [string, ...string[]])\n  .optional()\n  .describe(\n    `Sort expression. One of: ${ALLOWED_SORT_STRINGS.join(', ')}. Defaults to \"createdAt:DESC\".`\n  );\n\nexport const mediaListAssetsInputSchema = z.object({\n  folderId: folderIdSchema\n    .optional()\n    .describe(\n      'Only return assets directly inside this folder. Omit for every folder; pass null for assets at the media library root.'\n    )\n    .nullable(),\n  mime: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\n      'Filter by mime type prefix or exact value (e.g. \"image\", \"image/png\", \"application/pdf\").'\n    ),\n  name: z\n    .string()\n    .min(1)\n    .optional()\n    .describe('Case-insensitive substring search on the asset name.'),\n  page: pageSchema,\n  pageSize: pageSizeSchema,\n  sort: sortSchema,\n});\n\nexport const mediaGetAssetInputSchema = z.object({\n  id: mediaIdSchema,\n});\n\nexport const mediaListFoldersInputSchema = z.object({});\n\nconst FOLDER_INPUT_KEYS = ['folder', 'folderId', 'folderPath'] as const;\n\n/**\n * `media_update_asset` input — the only writable asset metadata.\n *\n * `.strict()` turns an out-of-scope field into an error rather than a silent no-op. The custom\n * object error directs folder-shaped inputs to `media_move_assets`; other unknown keys are named by\n * Zod's default error, so the agent can correct the call without a round-trip.\n *\n * The \"at least one field\" rule is enforced in the handler, not here: a `.refine()` would turn\n * this into a `ZodEffects`, which the MCP tool registry cannot expose as an input schema.\n */\nexport const mediaUpdateAssetInputSchema = z\n  .object(\n    {\n      id: mediaIdSchema,\n      name: z\n        .string()\n        .min(1)\n        .optional()\n        .describe(\n          'New asset name as shown in the Media Library. Renames the entry only — the stored file and its URL are unchanged.'\n        ),\n      alternativeText: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\n          'Alt text used by the frontend for accessibility. Pass null to clear it; the field then reads back as an empty string.'\n        ),\n      caption: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\n          'Caption shown alongside the asset. Pass null to clear it; the field then reads back as an empty string.'\n        ),\n    },\n    {\n      error(issue) {\n        if (\n          issue.code === 'unrecognized_keys' &&\n          FOLDER_INPUT_KEYS.some((key) => issue.keys.includes(key))\n        ) {\n          return 'Folder changes are not supported by media_update_asset. Use media_move_assets to move an asset between folders.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * Folder name, validated to the same rules as the admin folder controller\n * (`controllers/validation/admin/folder.ts`): non-empty, no slashes, no surrounding whitespace.\n *\n * Enforcing the shape here rather than only in the handler means the agent is corrected by the\n * tool schema — before a call is made — instead of by a service-level error afterwards. The\n * uniqueness rule cannot live here: it needs a DB read, so it stays in the handler.\n */\nexport const folderNameSchema = z\n  .string()\n  .min(1)\n  .regex(/^[^/]+$/, 'Folder name cannot contain slashes.')\n  .regex(/^(?! ).+(?<! )$/, 'Folder name cannot start or end with a whitespace.')\n  .describe(\n    'Folder name as shown in the Media Library. Cannot contain slashes or start/end with a space, and must be unique among its siblings.'\n  );\n\n/**\n * `parent` is nullable-with-meaning: null is the media library root, an id nests the folder.\n * The two are distinct from *omitting* the key, which `media_move_folder` forbids (a move needs a\n * destination) and `media_create_folder` reads as the root.\n */\nconst parentFolderIdSchema = folderIdSchema\n  .nullable()\n  .describe(\n    'Numeric id of the containing folder. Pass null for the media library root. Use media_list_folders to discover folder ids.'\n  );\n\nexport const mediaCreateFolderInputSchema = z\n  .object({\n    name: folderNameSchema,\n    parent: parentFolderIdSchema\n      .optional()\n      .describe(\n        'Numeric id of the parent folder. Omit or pass null to create the folder at the media library root.'\n      ),\n  })\n  .strict();\n\n/**\n * `media_rename_folder` deliberately takes no `parent`: renaming and moving are separate tools, so an\n * agent picks by intent. A `parent` here is a sign the caller wanted `media_move_folder`, and the\n * custom object error says so rather than letting Zod's generic \"unrecognized key\" stand.\n */\nexport const mediaRenameFolderInputSchema = z\n  .object(\n    {\n      id: folderIdSchema,\n      name: folderNameSchema,\n    },\n    {\n      error(issue) {\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('parent')) {\n          return 'media_rename_folder only changes a folder name. Use media_move_folder to change a folder location.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * `media_move_folder` requires `parent` — including an explicit null for the root. Making it required\n * is what keeps a mistyped move from silently becoming a no-op update.\n */\nexport const mediaMoveFolderInputSchema = z\n  .object(\n    {\n      id: folderIdSchema,\n      parent: parentFolderIdSchema,\n    },\n    {\n      error(issue) {\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('name')) {\n          return 'media_move_folder only changes a folder location. Use media_rename_folder to change a folder name.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * `media_delete_folder` input.\n *\n * `dryRun` defaults to true: the safe branch is the one an agent gets when it omits the flag, so\n * a destructive cascade is never the path of least resistance (the initiative card's mitigation\n * for irreversible MCP operations). Deleting requires saying `dryRun: false` on purpose.\n *\n * That default lives in the handler (`folder-handlers.ts`, `dryRun = true`), NOT in this schema:\n * `.default(true)` here is deliberately avoided so an omitted flag is a preview no matter how a\n * client serialises the advertised schema. The `.describe()` text below is what tells an agent\n * the default, so the two must be kept in step — do not \"fix\" this to `.default(true)`.\n */\nexport const mediaDeleteFolderInputSchema = z\n  .object({\n    ids: z\n      .array(folderIdSchema)\n      .min(1)\n      .max(100)\n      .describe(\n        'Numeric ids of the folders to delete (1-100). FOLDER ids only — asset ids are a separate namespace of integers and are rejected here; use media_delete_assets for assets.'\n      ),\n    dryRun: z\n      .boolean()\n      .optional()\n      .describe(\n        'When true (the default), nothing is deleted and the tool only reports how many folders and files WOULD be removed. Pass false to actually perform the irreversible deletion.'\n      ),\n  })\n  .strict();\n\n/**\n * `media_move_assets` input.\n *\n * Bulk by design: an agent reorganising a library moves many assets at once, and one call with a\n * per-id report is cheaper and easier to recover from than N sequential calls. There is no\n * single-asset variant — the array length is the only difference, and a second tool would add a\n * choice without removing a mistake. The admin REST API agrees: `/actions/bulk-move` is the only\n * move route.\n *\n * `folder` is required, including an explicit null for the root, for the same reason `media_move_folder`\n * requires `parent`: a move needs a destination, and an omitted key would silently become a no-op.\n *\n * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently\n * numbered, so the same integer routinely names both; the handler resolves ids in the file table,\n * which means a folder id whose number collides with an asset moves that asset — and reports it\n * as a success. Only an id matching no asset at all is reported as failed.\n *\n * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the\n * caller to say which namespace it meant, and refusing every colliding id would make those assets\n * permanently unmovable over MCP. The mitigation is the tool description. The durable fix is\n * namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which is a breaking\n * change to the read tools and belongs to its own ticket.\n */\nexport const mediaMoveAssetsInputSchema = z\n  .object(\n    {\n      ids: z\n        .array(mediaIdSchema)\n        .min(1)\n        .max(100)\n        .describe(\n          'Numeric ids of the assets to move (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here moves the asset sharing that number; use media_move_folder to move a folder.'\n        ),\n      folder: folderIdSchema\n        .nullable()\n        .describe(\n          'Numeric id of the destination folder. Pass null to move the assets to the media library root. Required — including the explicit null — so a move always names a destination. Use media_list_folders to discover folder ids.'\n        ),\n    },\n    {\n      error(issue) {\n        if (\n          issue.code === 'unrecognized_keys' &&\n          issue.keys.some((key) => key === 'id' || key === 'fileIds')\n        ) {\n          return 'media_move_assets moves assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';\n        }\n\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {\n          return 'media_move_assets moves assets only. Use media_move_folder to move a folder.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * `media_delete_assets` input.\n *\n * Bulk-only, like `media_move_assets`: the admin REST API has no single-asset delete route either\n * (`/actions/bulk-delete` is the only one), and single-vs-bulk is an array length rather than a\n * distinction an agent can get wrong.\n *\n * `dryRun` defaults to true in the handler, not here — same reasoning as `media_delete_folder`: the\n * safe branch is what an agent gets when it omits the flag, so an irreversible delete is never\n * the path of least resistance. A schema-level `.default(true)` would publish as a JSON Schema\n * default a client could serialise away.\n *\n * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently\n * numbered, so the same integer routinely names both; the handler resolves ids in the file table,\n * which means a folder id whose number collides with an asset deletes that asset. Only an id\n * matching no asset at all is reported as failed.\n *\n * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the\n * caller to say which namespace it meant, and refusing every colliding id would make those assets\n * permanently undeletable over MCP. The mitigations are the dry run and the tool description. The\n * durable fix is namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which\n * is a breaking change to the read tools and belongs to its own ticket.\n */\nexport const mediaDeleteAssetsInputSchema = z\n  .object(\n    {\n      ids: z\n        .array(mediaIdSchema)\n        .min(1)\n        .max(100)\n        .describe(\n          'Numeric ids of the assets to delete (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here deletes the asset sharing that number; use media_delete_folder for folders.'\n        ),\n      dryRun: z\n        .boolean()\n        .optional()\n        .describe(\n          'When true (the default), NOTHING is deleted and the tool only reports which assets WOULD be permanently removed. Pass false to actually perform the irreversible deletion.'\n        ),\n    },\n    {\n      error(issue) {\n        if (\n          issue.code === 'unrecognized_keys' &&\n          issue.keys.some((key) => key === 'id' || key === 'fileIds')\n        ) {\n          return 'media_delete_assets deletes assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';\n        }\n\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {\n          return 'media_delete_assets deletes assets only. Use media_delete_folder to delete a folder.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n"],"names":["mediaIdSchema","z","number","int","min","describe","folderIdSchema","pageSchema","optional","pageSizeSchema","max","sortSchema","enum","ALLOWED_SORT_STRINGS","join","mediaListAssetsInputSchema","object","folderId","nullable","mime","string","name","page","pageSize","sort","mediaGetAssetInputSchema","id","FOLDER_INPUT_KEYS","mediaUpdateAssetInputSchema","alternativeText","caption","error","issue","code","some","key","keys","includes","undefined","strict","folderNameSchema","regex","parentFolderIdSchema","mediaCreateFolderInputSchema","parent","mediaRenameFolderInputSchema","mediaMoveFolderInputSchema","mediaDeleteFolderInputSchema","ids","array","dryRun","boolean","mediaMoveAssetsInputSchema","folder","mediaDeleteAssetsInputSchema"],"mappings":";;;;;AAIA;;;;AAIC,IACM,MAAMA,aAAAA,GAAgBC,OAAAA,CAC1BC,MAAM,EAAA,CACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJC,QAAQ,CACP,4HAAA;AAGG,MAAMC,cAAAA,GAAiBL,OAAAA,CAC3BC,MAAM,EAAA,CACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJC,QAAQ,CAAC,qFAAA;AAEL,MAAME,UAAAA,GAAaN,OAAAA,CACvBC,MAAM,GACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CAAC,sCAAA;MAECI,cAAAA,GAAiBR,OAAAA,CAC3BC,MAAM,EAAA,CACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJF,QAAQ,EAAA,CACRH,QAAQ,CAAC,yCAAA;AAEZ;;;UAIaM,UAAAA,GAAaV,OAAAA,CACvBW,IAAI,CAACC,8BAAAA,CAAAA,CACLL,QAAQ,EAAA,CACRH,QAAQ,CACP,CAAC,yBAAyB,EAAEQ,8BAAAA,CAAqBC,IAAI,CAAC,IAAA,CAAA,CAAM,+BAA+B,CAAC;AAGzF,MAAMC,0BAAAA,GAA6Bd,OAAAA,CAAEe,MAAM,CAAC;AACjDC,IAAAA,QAAAA,EAAUX,eACPE,QAAQ,EAAA,CACRH,QAAQ,CACP,0HAEDa,QAAQ,EAAA;IACXC,IAAAA,EAAMlB,OAAAA,CACHmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CACP,2FAAA,CAAA;IAEJgB,IAAAA,EAAMpB,OAAAA,CACHmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CAAC,sDAAA,CAAA;IACZiB,IAAAA,EAAMf,UAAAA;IACNgB,QAAAA,EAAUd,cAAAA;IACVe,IAAAA,EAAMb;AACR,CAAA;AAEO,MAAMc,wBAAAA,GAA2BxB,OAAAA,CAAEe,MAAM,CAAC;IAC/CU,EAAAA,EAAI1B;AACN,CAAA;AAE2CC,OAAAA,CAAEe,MAAM,CAAC,EAAC;AAErD,MAAMW,iBAAAA,GAAoB;AAAC,IAAA,QAAA;AAAU,IAAA,UAAA;AAAY,IAAA;AAAa,CAAA;AAE9D;;;;;;;;;AASC,IACM,MAAMC,2BAAAA,GAA8B3B,OAAAA,CACxCe,MAAM,CACL;IACEU,EAAAA,EAAI1B,aAAAA;IACJqB,IAAAA,EAAMpB,OAAAA,CACHmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CACP,mHAAA,CAAA;IAEJwB,eAAAA,EAAiB5B,OAAAA,CACdmB,MAAM,EAAA,CACNF,QAAQ,GACRV,QAAQ,EAAA,CACRH,QAAQ,CACP,uHAAA,CAAA;IAEJyB,OAAAA,EAAS7B,OAAAA,CACNmB,MAAM,EAAA,CACNF,QAAQ,GACRV,QAAQ,EAAA,CACRH,QAAQ,CACP,yGAAA;AAEN,CAAA,EACA;AACE0B,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;AACT,QAAA,IACEA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IACfN,kBAAkBO,IAAI,CAAC,CAACC,GAAAA,GAAQH,KAAAA,CAAMI,IAAI,CAACC,QAAQ,CAACF,GAAAA,CAAAA,CAAAA,EACpD;YACA,OAAO,iHAAA;AACT,QAAA;QAEA,OAAOG,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;;;;;AAOC,IACM,MAAMC,gBAAAA,GAAmBvC,QAC7BmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJqC,KAAK,CAAC,SAAA,EAAW,uCACjBA,KAAK,CAAC,mBAAmB,oDAAA,CAAA,CACzBpC,QAAQ,CACP,qIAAA;AAGJ;;;;AAIC,IACD,MAAMqC,oBAAAA,GAAuBpC,cAAAA,CAC1BY,QAAQ,EAAA,CACRb,QAAQ,CACP,2HAAA,CAAA;AAGG,MAAMsC,4BAAAA,GAA+B1C,OAAAA,CACzCe,MAAM,CAAC;IACNK,IAAAA,EAAMmB,gBAAAA;AACNI,IAAAA,MAAAA,EAAQF,oBAAAA,CACLlC,QAAQ,EAAA,CACRH,QAAQ,CACP,oGAAA;AAEN,CAAA,CAAA,CACCkC,MAAM;AAET;;;;AAIC,IACM,MAAMM,4BAAAA,GAA+B5C,OAAAA,CACzCe,MAAM,CACL;IACEU,EAAAA,EAAIpB,cAAAA;IACJe,IAAAA,EAAMmB;AACR,CAAA,EACA;AACET,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;QACT,IAAIA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,QAAA,CAAA,EAAW;YACvE,OAAO,oGAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;AAGC,IACM,MAAMO,0BAAAA,GAA6B7C,OAAAA,CACvCe,MAAM,CACL;IACEU,EAAAA,EAAIpB,cAAAA;IACJsC,MAAAA,EAAQF;AACV,CAAA,EACA;AACEX,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;QACT,IAAIA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,MAAA,CAAA,EAAS;YACrE,OAAO,oGAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;;;;;;;;;AAWC,IACM,MAAMQ,4BAAAA,GAA+B9C,OAAAA,CACzCe,MAAM,CAAC;IACNgC,GAAAA,EAAK/C,OAAAA,CACFgD,KAAK,CAAC3C,cAAAA,CAAAA,CACNF,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJL,QAAQ,CACP,2KAAA,CAAA;AAEJ6C,IAAAA,MAAAA,EAAQjD,QACLkD,OAAO,EAAA,CACP3C,QAAQ,EAAA,CACRH,QAAQ,CACP,8KAAA;AAEN,CAAA,CAAA,CACCkC,MAAM;AAET;;;;;;;;;;;;;;;;;;;;;;AAsBC,IACM,MAAMa,0BAAAA,GAA6BnD,OAAAA,CACvCe,MAAM,CACL;IACEgC,GAAAA,EAAK/C,OAAAA,CACFgD,KAAK,CAACjD,aAAAA,CAAAA,CACNI,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJL,QAAQ,CACP,6UAAA,CAAA;AAEJgD,IAAAA,MAAAA,EAAQ/C,cAAAA,CACLY,QAAQ,EAAA,CACRb,QAAQ,CACP,6NAAA;AAEN,CAAA,EACA;AACE0B,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;AACT,QAAA,IACEA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IACfD,MAAMI,IAAI,CAACF,IAAI,CAAC,CAACC,GAAAA,GAAQA,GAAAA,KAAQ,IAAA,IAAQA,QAAQ,SAAA,CAAA,EACjD;YACA,OAAO,+GAAA;AACT,QAAA;QAEA,IAAIH,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,WAAA,CAAA,EAAc;YAC1E,OAAO,8EAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;;;;;;;;;;;;;;;;;;;;AAsBC,IACM,MAAMe,4BAAAA,GAA+BrD,OAAAA,CACzCe,MAAM,CACL;IACEgC,GAAAA,EAAK/C,OAAAA,CACFgD,KAAK,CAACjD,aAAAA,CAAAA,CACNI,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJL,QAAQ,CACP,8UAAA,CAAA;AAEJ6C,IAAAA,MAAAA,EAAQjD,QACLkD,OAAO,EAAA,CACP3C,QAAQ,EAAA,CACRH,QAAQ,CACP,4KAAA;AAEN,CAAA,EACA;AACE0B,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;AACT,QAAA,IACEA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IACfD,MAAMI,IAAI,CAACF,IAAI,CAAC,CAACC,GAAAA,GAAQA,GAAAA,KAAQ,IAAA,IAAQA,QAAQ,SAAA,CAAA,EACjD;YACA,OAAO,mHAAA;AACT,QAAA;QAEA,IAAIH,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,WAAA,CAAA,EAAc;YAC1E,OAAO,sFAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;;;;;;;;;;;;;;;;;;"}