@strapi/upload 5.52.3 → 5.54.0

package/dist/server/mcp/schemas/input-schemas.mjs

@@ -0,0 +1,190 @@
+import { z } from '@strapi/utils';
+import { ALLOWED_SORT_STRINGS } from '../../constants.mjs';
+
+/**
+ * Media files and folders are NOT documents: they are plain entities keyed by a numeric `id`,
+ * so there is no `documentId` and no draft/published pair. Every media identifier in the MCP
+ * surface is this numeric id.
+ */ const mediaIdSchema = z.number().int().min(1).describe('Numeric media asset id (e.g. 42). Media files are not documents — they have no documentId and no draft/published versions.');
+const folderIdSchema = z.number().int().min(1).describe('Numeric media folder id (e.g. 3). Folders are not documents — they use numeric ids.');
+const pageSchema = z.number().int().min(1).optional().describe('Page number (1-indexed, default: 1).');
+const pageSizeSchema = z.number().int().min(1).max(100).optional().describe('Items per page (default: 25, max: 100).');
+/**
+ * Sort is constrained to the same whitelist the Media Library admin uses, so MCP callers
+ * cannot sort by private columns such as `folderPath`.
+ */ const sortSchema = z.enum(ALLOWED_SORT_STRINGS).optional().describe(`Sort expression. One of: ${ALLOWED_SORT_STRINGS.join(', ')}. Defaults to "createdAt:DESC".`);
+const mediaListAssetsInputSchema = z.object({
+    folderId: folderIdSchema.optional().describe('Only return assets directly inside this folder. Omit for every folder; pass null for assets at the media library root.').nullable(),
+    mime: z.string().min(1).optional().describe('Filter by mime type prefix or exact value (e.g. "image", "image/png", "application/pdf").'),
+    name: z.string().min(1).optional().describe('Case-insensitive substring search on the asset name.'),
+    page: pageSchema,
+    pageSize: pageSizeSchema,
+    sort: sortSchema
+});
+const mediaGetAssetInputSchema = z.object({
+    id: mediaIdSchema
+});
+z.object({});
+const FOLDER_INPUT_KEYS = [
+    'folder',
+    'folderId',
+    'folderPath'
+];
+/**
+ * `media_update_asset` input — the only writable asset metadata.
+ *
+ * `.strict()` turns an out-of-scope field into an error rather than a silent no-op. The custom
+ * object error directs folder-shaped inputs to `media_move_assets`; other unknown keys are named by
+ * Zod's default error, so the agent can correct the call without a round-trip.
+ *
+ * The "at least one field" rule is enforced in the handler, not here: a `.refine()` would turn
+ * this into a `ZodEffects`, which the MCP tool registry cannot expose as an input schema.
+ */ const mediaUpdateAssetInputSchema = z.object({
+    id: mediaIdSchema,
+    name: z.string().min(1).optional().describe('New asset name as shown in the Media Library. Renames the entry only — the stored file and its URL are unchanged.'),
+    alternativeText: z.string().nullable().optional().describe('Alt text used by the frontend for accessibility. Pass null to clear it; the field then reads back as an empty string.'),
+    caption: z.string().nullable().optional().describe('Caption shown alongside the asset. Pass null to clear it; the field then reads back as an empty string.')
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && FOLDER_INPUT_KEYS.some((key)=>issue.keys.includes(key))) {
+            return 'Folder changes are not supported by media_update_asset. Use media_move_assets to move an asset between folders.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * Folder name, validated to the same rules as the admin folder controller
+ * (`controllers/validation/admin/folder.ts`): non-empty, no slashes, no surrounding whitespace.
+ *
+ * Enforcing the shape here rather than only in the handler means the agent is corrected by the
+ * tool schema — before a call is made — instead of by a service-level error afterwards. The
+ * uniqueness rule cannot live here: it needs a DB read, so it stays in the handler.
+ */ const folderNameSchema = z.string().min(1).regex(/^[^/]+$/, 'Folder name cannot contain slashes.').regex(/^(?! ).+(?<! )$/, 'Folder name cannot start or end with a whitespace.').describe('Folder name as shown in the Media Library. Cannot contain slashes or start/end with a space, and must be unique among its siblings.');
+/**
+ * `parent` is nullable-with-meaning: null is the media library root, an id nests the folder.
+ * The two are distinct from *omitting* the key, which `media_move_folder` forbids (a move needs a
+ * destination) and `media_create_folder` reads as the root.
+ */ const parentFolderIdSchema = folderIdSchema.nullable().describe('Numeric id of the containing folder. Pass null for the media library root. Use media_list_folders to discover folder ids.');
+const mediaCreateFolderInputSchema = z.object({
+    name: folderNameSchema,
+    parent: parentFolderIdSchema.optional().describe('Numeric id of the parent folder. Omit or pass null to create the folder at the media library root.')
+}).strict();
+/**
+ * `media_rename_folder` deliberately takes no `parent`: renaming and moving are separate tools, so an
+ * agent picks by intent. A `parent` here is a sign the caller wanted `media_move_folder`, and the
+ * custom object error says so rather than letting Zod's generic "unrecognized key" stand.
+ */ const mediaRenameFolderInputSchema = z.object({
+    id: folderIdSchema,
+    name: folderNameSchema
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('parent')) {
+            return 'media_rename_folder only changes a folder name. Use media_move_folder to change a folder location.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * `media_move_folder` requires `parent` — including an explicit null for the root. Making it required
+ * is what keeps a mistyped move from silently becoming a no-op update.
+ */ const mediaMoveFolderInputSchema = z.object({
+    id: folderIdSchema,
+    parent: parentFolderIdSchema
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('name')) {
+            return 'media_move_folder only changes a folder location. Use media_rename_folder to change a folder name.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * `media_delete_folder` input.
+ *
+ * `dryRun` defaults to true: the safe branch is the one an agent gets when it omits the flag, so
+ * a destructive cascade is never the path of least resistance (the initiative card's mitigation
+ * for irreversible MCP operations). Deleting requires saying `dryRun: false` on purpose.
+ *
+ * That default lives in the handler (`folder-handlers.ts`, `dryRun = true`), NOT in this schema:
+ * `.default(true)` here is deliberately avoided so an omitted flag is a preview no matter how a
+ * client serialises the advertised schema. The `.describe()` text below is what tells an agent
+ * the default, so the two must be kept in step — do not "fix" this to `.default(true)`.
+ */ const mediaDeleteFolderInputSchema = z.object({
+    ids: z.array(folderIdSchema).min(1).max(100).describe('Numeric ids of the folders to delete (1-100). FOLDER ids only — asset ids are a separate namespace of integers and are rejected here; use media_delete_assets for assets.'),
+    dryRun: z.boolean().optional().describe('When true (the default), nothing is deleted and the tool only reports how many folders and files WOULD be removed. Pass false to actually perform the irreversible deletion.')
+}).strict();
+/**
+ * `media_move_assets` input.
+ *
+ * Bulk by design: an agent reorganising a library moves many assets at once, and one call with a
+ * per-id report is cheaper and easier to recover from than N sequential calls. There is no
+ * single-asset variant — the array length is the only difference, and a second tool would add a
+ * choice without removing a mistake. The admin REST API agrees: `/actions/bulk-move` is the only
+ * move route.
+ *
+ * `folder` is required, including an explicit null for the root, for the same reason `media_move_folder`
+ * requires `parent`: a move needs a destination, and an omitted key would silently become a no-op.
+ *
+ * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently
+ * numbered, so the same integer routinely names both; the handler resolves ids in the file table,
+ * which means a folder id whose number collides with an asset moves that asset — and reports it
+ * as a success. Only an id matching no asset at all is reported as failed.
+ *
+ * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the
+ * caller to say which namespace it meant, and refusing every colliding id would make those assets
+ * permanently unmovable over MCP. The mitigation is the tool description. The durable fix is
+ * namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which is a breaking
+ * change to the read tools and belongs to its own ticket.
+ */ const mediaMoveAssetsInputSchema = z.object({
+    ids: z.array(mediaIdSchema).min(1).max(100).describe('Numeric ids of the assets to move (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here moves the asset sharing that number; use media_move_folder to move a folder.'),
+    folder: folderIdSchema.nullable().describe('Numeric id of the destination folder. Pass null to move the assets to the media library root. Required — including the explicit null — so a move always names a destination. Use media_list_folders to discover folder ids.')
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.some((key)=>key === 'id' || key === 'fileIds')) {
+            return 'media_move_assets moves assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';
+        }
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {
+            return 'media_move_assets moves assets only. Use media_move_folder to move a folder.';
+        }
+        return undefined;
+    }
+}).strict();
+/**
+ * `media_delete_assets` input.
+ *
+ * Bulk-only, like `media_move_assets`: the admin REST API has no single-asset delete route either
+ * (`/actions/bulk-delete` is the only one), and single-vs-bulk is an array length rather than a
+ * distinction an agent can get wrong.
+ *
+ * `dryRun` defaults to true in the handler, not here — same reasoning as `media_delete_folder`: the
+ * safe branch is what an agent gets when it omits the flag, so an irreversible delete is never
+ * the path of least resistance. A schema-level `.default(true)` would publish as a JSON Schema
+ * default a client could serialise away.
+ *
+ * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently
+ * numbered, so the same integer routinely names both; the handler resolves ids in the file table,
+ * which means a folder id whose number collides with an asset deletes that asset. Only an id
+ * matching no asset at all is reported as failed.
+ *
+ * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the
+ * caller to say which namespace it meant, and refusing every colliding id would make those assets
+ * permanently undeletable over MCP. The mitigations are the dry run and the tool description. The
+ * durable fix is namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which
+ * is a breaking change to the read tools and belongs to its own ticket.
+ */ const mediaDeleteAssetsInputSchema = z.object({
+    ids: z.array(mediaIdSchema).min(1).max(100).describe('Numeric ids of the assets to delete (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here deletes the asset sharing that number; use media_delete_folder for folders.'),
+    dryRun: z.boolean().optional().describe('When true (the default), NOTHING is deleted and the tool only reports which assets WOULD be permanently removed. Pass false to actually perform the irreversible deletion.')
+}, {
+    error (issue) {
+        if (issue.code === 'unrecognized_keys' && issue.keys.some((key)=>key === 'id' || key === 'fileIds')) {
+            return 'media_delete_assets deletes assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';
+        }
+        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {
+            return 'media_delete_assets deletes assets only. Use media_delete_folder to delete a folder.';
+        }
+        return undefined;
+    }
+}).strict();
+
+export { folderIdSchema, folderNameSchema, mediaCreateFolderInputSchema, mediaDeleteAssetsInputSchema, mediaDeleteFolderInputSchema, mediaGetAssetInputSchema, mediaIdSchema, mediaListAssetsInputSchema, mediaMoveAssetsInputSchema, mediaMoveFolderInputSchema, mediaRenameFolderInputSchema, mediaUpdateAssetInputSchema, pageSchema, pageSizeSchema, sortSchema };
+//# sourceMappingURL=input-schemas.mjs.map

package/dist/server/mcp/schemas/input-schemas.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-schemas.mjs","sources":["../../../../server/src/mcp/schemas/input-schemas.ts"],"sourcesContent":["import { z } from '@strapi/utils';\n\nimport { ALLOWED_SORT_STRINGS } from '../../constants';\n\n/**\n * Media files and folders are NOT documents: they are plain entities keyed by a numeric `id`,\n * so there is no `documentId` and no draft/published pair. Every media identifier in the MCP\n * surface is this numeric id.\n */\nexport const mediaIdSchema = z\n  .number()\n  .int()\n  .min(1)\n  .describe(\n    'Numeric media asset id (e.g. 42). Media files are not documents — they have no documentId and no draft/published versions.'\n  );\n\nexport const folderIdSchema = z\n  .number()\n  .int()\n  .min(1)\n  .describe('Numeric media folder id (e.g. 3). Folders are not documents — they use numeric ids.');\n\nexport const pageSchema = z\n  .number()\n  .int()\n  .min(1)\n  .optional()\n  .describe('Page number (1-indexed, default: 1).');\n\nexport const pageSizeSchema = z\n  .number()\n  .int()\n  .min(1)\n  .max(100)\n  .optional()\n  .describe('Items per page (default: 25, max: 100).');\n\n/**\n * Sort is constrained to the same whitelist the Media Library admin uses, so MCP callers\n * cannot sort by private columns such as `folderPath`.\n */\nexport const sortSchema = z\n  .enum(ALLOWED_SORT_STRINGS as [string, ...string[]])\n  .optional()\n  .describe(\n    `Sort expression. One of: ${ALLOWED_SORT_STRINGS.join(', ')}. Defaults to \"createdAt:DESC\".`\n  );\n\nexport const mediaListAssetsInputSchema = z.object({\n  folderId: folderIdSchema\n    .optional()\n    .describe(\n      'Only return assets directly inside this folder. Omit for every folder; pass null for assets at the media library root.'\n    )\n    .nullable(),\n  mime: z\n    .string()\n    .min(1)\n    .optional()\n    .describe(\n      'Filter by mime type prefix or exact value (e.g. \"image\", \"image/png\", \"application/pdf\").'\n    ),\n  name: z\n    .string()\n    .min(1)\n    .optional()\n    .describe('Case-insensitive substring search on the asset name.'),\n  page: pageSchema,\n  pageSize: pageSizeSchema,\n  sort: sortSchema,\n});\n\nexport const mediaGetAssetInputSchema = z.object({\n  id: mediaIdSchema,\n});\n\nexport const mediaListFoldersInputSchema = z.object({});\n\nconst FOLDER_INPUT_KEYS = ['folder', 'folderId', 'folderPath'] as const;\n\n/**\n * `media_update_asset` input — the only writable asset metadata.\n *\n * `.strict()` turns an out-of-scope field into an error rather than a silent no-op. The custom\n * object error directs folder-shaped inputs to `media_move_assets`; other unknown keys are named by\n * Zod's default error, so the agent can correct the call without a round-trip.\n *\n * The \"at least one field\" rule is enforced in the handler, not here: a `.refine()` would turn\n * this into a `ZodEffects`, which the MCP tool registry cannot expose as an input schema.\n */\nexport const mediaUpdateAssetInputSchema = z\n  .object(\n    {\n      id: mediaIdSchema,\n      name: z\n        .string()\n        .min(1)\n        .optional()\n        .describe(\n          'New asset name as shown in the Media Library. Renames the entry only — the stored file and its URL are unchanged.'\n        ),\n      alternativeText: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\n          'Alt text used by the frontend for accessibility. Pass null to clear it; the field then reads back as an empty string.'\n        ),\n      caption: z\n        .string()\n        .nullable()\n        .optional()\n        .describe(\n          'Caption shown alongside the asset. Pass null to clear it; the field then reads back as an empty string.'\n        ),\n    },\n    {\n      error(issue) {\n        if (\n          issue.code === 'unrecognized_keys' &&\n          FOLDER_INPUT_KEYS.some((key) => issue.keys.includes(key))\n        ) {\n          return 'Folder changes are not supported by media_update_asset. Use media_move_assets to move an asset between folders.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * Folder name, validated to the same rules as the admin folder controller\n * (`controllers/validation/admin/folder.ts`): non-empty, no slashes, no surrounding whitespace.\n *\n * Enforcing the shape here rather than only in the handler means the agent is corrected by the\n * tool schema — before a call is made — instead of by a service-level error afterwards. The\n * uniqueness rule cannot live here: it needs a DB read, so it stays in the handler.\n */\nexport const folderNameSchema = z\n  .string()\n  .min(1)\n  .regex(/^[^/]+$/, 'Folder name cannot contain slashes.')\n  .regex(/^(?! ).+(?<! )$/, 'Folder name cannot start or end with a whitespace.')\n  .describe(\n    'Folder name as shown in the Media Library. Cannot contain slashes or start/end with a space, and must be unique among its siblings.'\n  );\n\n/**\n * `parent` is nullable-with-meaning: null is the media library root, an id nests the folder.\n * The two are distinct from *omitting* the key, which `media_move_folder` forbids (a move needs a\n * destination) and `media_create_folder` reads as the root.\n */\nconst parentFolderIdSchema = folderIdSchema\n  .nullable()\n  .describe(\n    'Numeric id of the containing folder. Pass null for the media library root. Use media_list_folders to discover folder ids.'\n  );\n\nexport const mediaCreateFolderInputSchema = z\n  .object({\n    name: folderNameSchema,\n    parent: parentFolderIdSchema\n      .optional()\n      .describe(\n        'Numeric id of the parent folder. Omit or pass null to create the folder at the media library root.'\n      ),\n  })\n  .strict();\n\n/**\n * `media_rename_folder` deliberately takes no `parent`: renaming and moving are separate tools, so an\n * agent picks by intent. A `parent` here is a sign the caller wanted `media_move_folder`, and the\n * custom object error says so rather than letting Zod's generic \"unrecognized key\" stand.\n */\nexport const mediaRenameFolderInputSchema = z\n  .object(\n    {\n      id: folderIdSchema,\n      name: folderNameSchema,\n    },\n    {\n      error(issue) {\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('parent')) {\n          return 'media_rename_folder only changes a folder name. Use media_move_folder to change a folder location.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * `media_move_folder` requires `parent` — including an explicit null for the root. Making it required\n * is what keeps a mistyped move from silently becoming a no-op update.\n */\nexport const mediaMoveFolderInputSchema = z\n  .object(\n    {\n      id: folderIdSchema,\n      parent: parentFolderIdSchema,\n    },\n    {\n      error(issue) {\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('name')) {\n          return 'media_move_folder only changes a folder location. Use media_rename_folder to change a folder name.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * `media_delete_folder` input.\n *\n * `dryRun` defaults to true: the safe branch is the one an agent gets when it omits the flag, so\n * a destructive cascade is never the path of least resistance (the initiative card's mitigation\n * for irreversible MCP operations). Deleting requires saying `dryRun: false` on purpose.\n *\n * That default lives in the handler (`folder-handlers.ts`, `dryRun = true`), NOT in this schema:\n * `.default(true)` here is deliberately avoided so an omitted flag is a preview no matter how a\n * client serialises the advertised schema. The `.describe()` text below is what tells an agent\n * the default, so the two must be kept in step — do not \"fix\" this to `.default(true)`.\n */\nexport const mediaDeleteFolderInputSchema = z\n  .object({\n    ids: z\n      .array(folderIdSchema)\n      .min(1)\n      .max(100)\n      .describe(\n        'Numeric ids of the folders to delete (1-100). FOLDER ids only — asset ids are a separate namespace of integers and are rejected here; use media_delete_assets for assets.'\n      ),\n    dryRun: z\n      .boolean()\n      .optional()\n      .describe(\n        'When true (the default), nothing is deleted and the tool only reports how many folders and files WOULD be removed. Pass false to actually perform the irreversible deletion.'\n      ),\n  })\n  .strict();\n\n/**\n * `media_move_assets` input.\n *\n * Bulk by design: an agent reorganising a library moves many assets at once, and one call with a\n * per-id report is cheaper and easier to recover from than N sequential calls. There is no\n * single-asset variant — the array length is the only difference, and a second tool would add a\n * choice without removing a mistake. The admin REST API agrees: `/actions/bulk-move` is the only\n * move route.\n *\n * `folder` is required, including an explicit null for the root, for the same reason `media_move_folder`\n * requires `parent`: a move needs a destination, and an omitted key would silently become a no-op.\n *\n * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently\n * numbered, so the same integer routinely names both; the handler resolves ids in the file table,\n * which means a folder id whose number collides with an asset moves that asset — and reports it\n * as a success. Only an id matching no asset at all is reported as failed.\n *\n * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the\n * caller to say which namespace it meant, and refusing every colliding id would make those assets\n * permanently unmovable over MCP. The mitigation is the tool description. The durable fix is\n * namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which is a breaking\n * change to the read tools and belongs to its own ticket.\n */\nexport const mediaMoveAssetsInputSchema = z\n  .object(\n    {\n      ids: z\n        .array(mediaIdSchema)\n        .min(1)\n        .max(100)\n        .describe(\n          'Numeric ids of the assets to move (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here moves the asset sharing that number; use media_move_folder to move a folder.'\n        ),\n      folder: folderIdSchema\n        .nullable()\n        .describe(\n          'Numeric id of the destination folder. Pass null to move the assets to the media library root. Required — including the explicit null — so a move always names a destination. Use media_list_folders to discover folder ids.'\n        ),\n    },\n    {\n      error(issue) {\n        if (\n          issue.code === 'unrecognized_keys' &&\n          issue.keys.some((key) => key === 'id' || key === 'fileIds')\n        ) {\n          return 'media_move_assets moves assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';\n        }\n\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {\n          return 'media_move_assets moves assets only. Use media_move_folder to move a folder.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n\n/**\n * `media_delete_assets` input.\n *\n * Bulk-only, like `media_move_assets`: the admin REST API has no single-asset delete route either\n * (`/actions/bulk-delete` is the only one), and single-vs-bulk is an array length rather than a\n * distinction an agent can get wrong.\n *\n * `dryRun` defaults to true in the handler, not here — same reasoning as `media_delete_folder`: the\n * safe branch is what an agent gets when it omits the flag, so an irreversible delete is never\n * the path of least resistance. A schema-level `.default(true)` would publish as a JSON Schema\n * default a client could serialise away.\n *\n * ASSET ids only, and the schema CANNOT enforce it. Asset ids and folder ids are independently\n * numbered, so the same integer routinely names both; the handler resolves ids in the file table,\n * which means a folder id whose number collides with an asset deletes that asset. Only an id\n * matching no asset at all is reported as failed.\n *\n * This is an accepted risk, not an oversight: with a bare `ids: number[]` there is no way for the\n * caller to say which namespace it meant, and refusing every colliding id would make those assets\n * permanently undeletable over MCP. The mitigations are the dry run and the tool description. The\n * durable fix is namespaced handles (`asset:1` / `folder:1`) across the whole media surface, which\n * is a breaking change to the read tools and belongs to its own ticket.\n */\nexport const mediaDeleteAssetsInputSchema = z\n  .object(\n    {\n      ids: z\n        .array(mediaIdSchema)\n        .min(1)\n        .max(100)\n        .describe(\n          'Numeric ids of the assets to delete (1-100). ASSET ids only, taken from media_list_assets or media_get_asset — never from media_list_folders. Folder ids are numbered separately and the same number often names both an asset and a folder, so a folder id here deletes the asset sharing that number; use media_delete_folder for folders.'\n        ),\n      dryRun: z\n        .boolean()\n        .optional()\n        .describe(\n          'When true (the default), NOTHING is deleted and the tool only reports which assets WOULD be permanently removed. Pass false to actually perform the irreversible deletion.'\n        ),\n    },\n    {\n      error(issue) {\n        if (\n          issue.code === 'unrecognized_keys' &&\n          issue.keys.some((key) => key === 'id' || key === 'fileIds')\n        ) {\n          return 'media_delete_assets deletes assets in bulk: pass `ids` as an array of numeric asset ids, even for a single asset.';\n        }\n\n        if (issue.code === 'unrecognized_keys' && issue.keys.includes('folderIds')) {\n          return 'media_delete_assets deletes assets only. Use media_delete_folder to delete a folder.';\n        }\n\n        return undefined;\n      },\n    }\n  )\n  .strict();\n"],"names":["mediaIdSchema","z","number","int","min","describe","folderIdSchema","pageSchema","optional","pageSizeSchema","max","sortSchema","enum","ALLOWED_SORT_STRINGS","join","mediaListAssetsInputSchema","object","folderId","nullable","mime","string","name","page","pageSize","sort","mediaGetAssetInputSchema","id","FOLDER_INPUT_KEYS","mediaUpdateAssetInputSchema","alternativeText","caption","error","issue","code","some","key","keys","includes","undefined","strict","folderNameSchema","regex","parentFolderIdSchema","mediaCreateFolderInputSchema","parent","mediaRenameFolderInputSchema","mediaMoveFolderInputSchema","mediaDeleteFolderInputSchema","ids","array","dryRun","boolean","mediaMoveAssetsInputSchema","folder","mediaDeleteAssetsInputSchema"],"mappings":";;;AAIA;;;;AAIC,IACM,MAAMA,aAAAA,GAAgBC,CAAAA,CAC1BC,MAAM,EAAA,CACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJC,QAAQ,CACP,4HAAA;AAGG,MAAMC,cAAAA,GAAiBL,CAAAA,CAC3BC,MAAM,EAAA,CACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJC,QAAQ,CAAC,qFAAA;AAEL,MAAME,UAAAA,GAAaN,CAAAA,CACvBC,MAAM,GACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CAAC,sCAAA;MAECI,cAAAA,GAAiBR,CAAAA,CAC3BC,MAAM,EAAA,CACNC,GAAG,EAAA,CACHC,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJF,QAAQ,EAAA,CACRH,QAAQ,CAAC,yCAAA;AAEZ;;;UAIaM,UAAAA,GAAaV,CAAAA,CACvBW,IAAI,CAACC,oBAAAA,CAAAA,CACLL,QAAQ,EAAA,CACRH,QAAQ,CACP,CAAC,yBAAyB,EAAEQ,oBAAAA,CAAqBC,IAAI,CAAC,IAAA,CAAA,CAAM,+BAA+B,CAAC;AAGzF,MAAMC,0BAAAA,GAA6Bd,CAAAA,CAAEe,MAAM,CAAC;AACjDC,IAAAA,QAAAA,EAAUX,eACPE,QAAQ,EAAA,CACRH,QAAQ,CACP,0HAEDa,QAAQ,EAAA;IACXC,IAAAA,EAAMlB,CAAAA,CACHmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CACP,2FAAA,CAAA;IAEJgB,IAAAA,EAAMpB,CAAAA,CACHmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CAAC,sDAAA,CAAA;IACZiB,IAAAA,EAAMf,UAAAA;IACNgB,QAAAA,EAAUd,cAAAA;IACVe,IAAAA,EAAMb;AACR,CAAA;AAEO,MAAMc,wBAAAA,GAA2BxB,CAAAA,CAAEe,MAAM,CAAC;IAC/CU,EAAAA,EAAI1B;AACN,CAAA;AAE2CC,CAAAA,CAAEe,MAAM,CAAC,EAAC;AAErD,MAAMW,iBAAAA,GAAoB;AAAC,IAAA,QAAA;AAAU,IAAA,UAAA;AAAY,IAAA;AAAa,CAAA;AAE9D;;;;;;;;;AASC,IACM,MAAMC,2BAAAA,GAA8B3B,CAAAA,CACxCe,MAAM,CACL;IACEU,EAAAA,EAAI1B,aAAAA;IACJqB,IAAAA,EAAMpB,CAAAA,CACHmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJI,QAAQ,EAAA,CACRH,QAAQ,CACP,mHAAA,CAAA;IAEJwB,eAAAA,EAAiB5B,CAAAA,CACdmB,MAAM,EAAA,CACNF,QAAQ,GACRV,QAAQ,EAAA,CACRH,QAAQ,CACP,uHAAA,CAAA;IAEJyB,OAAAA,EAAS7B,CAAAA,CACNmB,MAAM,EAAA,CACNF,QAAQ,GACRV,QAAQ,EAAA,CACRH,QAAQ,CACP,yGAAA;AAEN,CAAA,EACA;AACE0B,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;AACT,QAAA,IACEA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IACfN,kBAAkBO,IAAI,CAAC,CAACC,GAAAA,GAAQH,KAAAA,CAAMI,IAAI,CAACC,QAAQ,CAACF,GAAAA,CAAAA,CAAAA,EACpD;YACA,OAAO,iHAAA;AACT,QAAA;QAEA,OAAOG,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;;;;;AAOC,IACM,MAAMC,gBAAAA,GAAmBvC,EAC7BmB,MAAM,EAAA,CACNhB,GAAG,CAAC,CAAA,CAAA,CACJqC,KAAK,CAAC,SAAA,EAAW,uCACjBA,KAAK,CAAC,mBAAmB,oDAAA,CAAA,CACzBpC,QAAQ,CACP,qIAAA;AAGJ;;;;AAIC,IACD,MAAMqC,oBAAAA,GAAuBpC,cAAAA,CAC1BY,QAAQ,EAAA,CACRb,QAAQ,CACP,2HAAA,CAAA;AAGG,MAAMsC,4BAAAA,GAA+B1C,CAAAA,CACzCe,MAAM,CAAC;IACNK,IAAAA,EAAMmB,gBAAAA;AACNI,IAAAA,MAAAA,EAAQF,oBAAAA,CACLlC,QAAQ,EAAA,CACRH,QAAQ,CACP,oGAAA;AAEN,CAAA,CAAA,CACCkC,MAAM;AAET;;;;AAIC,IACM,MAAMM,4BAAAA,GAA+B5C,CAAAA,CACzCe,MAAM,CACL;IACEU,EAAAA,EAAIpB,cAAAA;IACJe,IAAAA,EAAMmB;AACR,CAAA,EACA;AACET,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;QACT,IAAIA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,QAAA,CAAA,EAAW;YACvE,OAAO,oGAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;AAGC,IACM,MAAMO,0BAAAA,GAA6B7C,CAAAA,CACvCe,MAAM,CACL;IACEU,EAAAA,EAAIpB,cAAAA;IACJsC,MAAAA,EAAQF;AACV,CAAA,EACA;AACEX,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;QACT,IAAIA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,MAAA,CAAA,EAAS;YACrE,OAAO,oGAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;;;;;;;;;AAWC,IACM,MAAMQ,4BAAAA,GAA+B9C,CAAAA,CACzCe,MAAM,CAAC;IACNgC,GAAAA,EAAK/C,CAAAA,CACFgD,KAAK,CAAC3C,cAAAA,CAAAA,CACNF,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJL,QAAQ,CACP,2KAAA,CAAA;AAEJ6C,IAAAA,MAAAA,EAAQjD,EACLkD,OAAO,EAAA,CACP3C,QAAQ,EAAA,CACRH,QAAQ,CACP,8KAAA;AAEN,CAAA,CAAA,CACCkC,MAAM;AAET;;;;;;;;;;;;;;;;;;;;;;AAsBC,IACM,MAAMa,0BAAAA,GAA6BnD,CAAAA,CACvCe,MAAM,CACL;IACEgC,GAAAA,EAAK/C,CAAAA,CACFgD,KAAK,CAACjD,aAAAA,CAAAA,CACNI,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJL,QAAQ,CACP,6UAAA,CAAA;AAEJgD,IAAAA,MAAAA,EAAQ/C,cAAAA,CACLY,QAAQ,EAAA,CACRb,QAAQ,CACP,6NAAA;AAEN,CAAA,EACA;AACE0B,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;AACT,QAAA,IACEA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IACfD,MAAMI,IAAI,CAACF,IAAI,CAAC,CAACC,GAAAA,GAAQA,GAAAA,KAAQ,IAAA,IAAQA,QAAQ,SAAA,CAAA,EACjD;YACA,OAAO,+GAAA;AACT,QAAA;QAEA,IAAIH,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,WAAA,CAAA,EAAc;YAC1E,OAAO,8EAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;AAET;;;;;;;;;;;;;;;;;;;;;;AAsBC,IACM,MAAMe,4BAAAA,GAA+BrD,CAAAA,CACzCe,MAAM,CACL;IACEgC,GAAAA,EAAK/C,CAAAA,CACFgD,KAAK,CAACjD,aAAAA,CAAAA,CACNI,GAAG,CAAC,CAAA,CAAA,CACJM,GAAG,CAAC,GAAA,CAAA,CACJL,QAAQ,CACP,8UAAA,CAAA;AAEJ6C,IAAAA,MAAAA,EAAQjD,EACLkD,OAAO,EAAA,CACP3C,QAAQ,EAAA,CACRH,QAAQ,CACP,4KAAA;AAEN,CAAA,EACA;AACE0B,IAAAA,KAAAA,CAAAA,CAAMC,KAAK,EAAA;AACT,QAAA,IACEA,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IACfD,MAAMI,IAAI,CAACF,IAAI,CAAC,CAACC,GAAAA,GAAQA,GAAAA,KAAQ,IAAA,IAAQA,QAAQ,SAAA,CAAA,EACjD;YACA,OAAO,mHAAA;AACT,QAAA;QAEA,IAAIH,KAAAA,CAAMC,IAAI,KAAK,mBAAA,IAAuBD,MAAMI,IAAI,CAACC,QAAQ,CAAC,WAAA,CAAA,EAAc;YAC1E,OAAO,sFAAA;AACT,QAAA;QAEA,OAAOC,SAAAA;AACT,IAAA;AACF,CAAA,CAAA,CAEDC,MAAM;;;;"}

package/dist/server/mcp/schemas/output-schemas.js

@@ -0,0 +1,158 @@
+'use strict';
+
+var utils = require('@strapi/utils');
+
+/**
+ * The exhaustive set of asset fields the MCP surface may expose — an allowlist, for the reasons
+ * in `sanitizeMediaAsset`. A field added to the file content-type stays invisible to MCP until
+ * it is added both here and there.
+ */ const mediaAssetOutputSchema = utils.z.object({
+    id: utils.z.number().describe('Numeric asset id — the canonical identifier for this asset.'),
+    name: utils.z.string(),
+    alternativeText: utils.z.string().nullable().optional(),
+    caption: utils.z.string().nullable().optional(),
+    url: utils.z.string().describe('Public (or signed, for private providers) URL of the asset.'),
+    mime: utils.z.string().describe('Mime type, e.g. "image/png".'),
+    size: utils.z.number().describe('File size in kilobytes, as stored by Strapi.'),
+    width: utils.z.number().nullable().optional().describe('Pixel width, images only.'),
+    height: utils.z.number().nullable().optional().describe('Pixel height, images only.'),
+    ext: utils.z.string().nullable().optional().describe('File extension including the dot, e.g. ".png".'),
+    folder: utils.z.object({
+        id: utils.z.number(),
+        name: utils.z.string()
+    }).nullable().optional().describe('Containing folder, or null when the asset sits at the media library root.'),
+    createdAt: utils.z.string().nullable().optional(),
+    updatedAt: utils.z.string().nullable().optional()
+});
+const mediaGetAssetOutputSchema = utils.z.object({
+    data: mediaAssetOutputSchema.nullable()
+});
+const mediaListAssetsOutputSchema = utils.z.object({
+    results: utils.z.array(mediaAssetOutputSchema),
+    pagination: utils.z.object({
+        page: utils.z.number(),
+        pageSize: utils.z.number(),
+        pageCount: utils.z.number(),
+        total: utils.z.number()
+    })
+});
+const mediaFolderNodeSchema = utils.z.lazy(()=>utils.z.object({
+        id: utils.z.number(),
+        name: utils.z.string(),
+        children: utils.z.array(mediaFolderNodeSchema)
+    }));
+const mediaListFoldersOutputSchema = utils.z.object({
+    data: utils.z.array(mediaFolderNodeSchema).describe('Nested folder structure, roots first.')
+});
+/**
+ * `media_update_asset` output — the updated asset in the same shape the read tools return,
+ * so an agent can confirm the write without a follow-up `media_get_asset` call.
+ */ const mediaUpdateAssetOutputSchema = utils.z.object({
+    data: mediaAssetOutputSchema
+});
+/**
+ * A folder as returned by the write tools.
+ *
+ * Like the asset schema this is an ALLOWLIST: `path` and `pathId` are internal materialized-path
+ * bookkeeping and stay invisible to MCP clients, matching what `media_list_folders` already exposes.
+ */ const mediaFolderOutputSchema = utils.z.object({
+    id: utils.z.number().describe('Numeric folder id — the canonical identifier for this folder.'),
+    name: utils.z.string(),
+    parent: utils.z.object({
+        id: utils.z.number(),
+        name: utils.z.string().optional()
+    }).nullable().optional().describe('Containing folder, or null when the folder sits at the media library root. Absent when this response did not load the relation — absent means unknown, not root.'),
+    createdAt: utils.z.string().nullable().optional(),
+    updatedAt: utils.z.string().nullable().optional()
+});
+const mediaCreateFolderOutputSchema = utils.z.object({
+    data: mediaFolderOutputSchema
+});
+const mediaRenameFolderOutputSchema = utils.z.object({
+    data: mediaFolderOutputSchema
+});
+const mediaMoveFolderOutputSchema = utils.z.object({
+    data: mediaFolderOutputSchema
+});
+/**
+ * `media_delete_folder` output — the same shape for both branches, so an agent reads one contract.
+ *
+ * `dryRun` echoes which branch ran: on true the counts are what *would* be removed and nothing
+ * was touched; on false they are what actually was. Echoing it back means the agent can tell a
+ * preview from a completed deletion without tracking what it sent.
+ *
+ * There is no "skipped ids" field: an id that does not resolve to a folder rejects the whole
+ * call, so every id in the request is accounted for by `folders` on any successful response.
+ */ const mediaDeleteFolderOutputSchema = utils.z.object({
+    dryRun: utils.z.boolean().describe('True when this was a preview and NOTHING was deleted. False when the deletion was performed.'),
+    folders: utils.z.array(mediaFolderOutputSchema).describe('The folders matched by the given ids (the roots of the cascade).'),
+    totalFolderNumber: utils.z.number().describe('Total folders affected, including the matched folders themselves and every descendant.'),
+    totalFileNumber: utils.z.number().describe('Total files affected, across the whole cascade.')
+});
+/**
+ * `media_move_assets` output — a per-id report rather than a single verdict.
+ *
+ * A bad id among good ones does not roll back the valid moves (see the handler), so the response
+ * has to say which ids moved and which did not: an agent that only learned "the call failed"
+ * would either retry moves that already happened or abandon ones that did. `moved` and `failed`
+ * together account for every id in the request, on every successful response — including one
+ * where `moved` is empty because no id resolved.
+ *
+ * `moved` carries the full asset in the same shape the read tools return, so the new folder can
+ * be confirmed without a follow-up `media_get_asset`.
+ */ const mediaMoveAssetsFailureSchema = utils.z.object({
+    id: utils.z.number().describe('The requested asset id that was not moved.'),
+    reason: utils.z.string().describe('Why this id was not moved — a missing asset, or one this token may not edit.')
+});
+const mediaMoveAssetsOutputSchema = utils.z.object({
+    destinationFolder: utils.z.object({
+        id: utils.z.number(),
+        name: utils.z.string().optional()
+    }).nullable().describe('The destination folder, or null when the assets were moved to the media library root.'),
+    moved: utils.z.array(mediaAssetOutputSchema).describe('The assets that were moved, in their new location.'),
+    failed: utils.z.array(mediaMoveAssetsFailureSchema).describe('The ids that were not moved, each with a reason. The moves reported in `moved` still happened — retry only these.')
+});
+/**
+ * `media_delete_assets` output — one contract for both branches, with a per-id account of every
+ * requested id.
+ *
+ * `dryRun` echoes which branch ran: on true `deleted` is what *would* be removed and nothing was
+ * touched; on false it is what actually was. Echoing it back means an agent can tell a preview
+ * from a completed deletion without tracking what it sent — the difference matters more here
+ * than anywhere else in this surface, because one branch is irreversible.
+ *
+ * `deleted` carries the full asset rather than a bare id, so the agent can report what it
+ * destroyed after the row is gone and no read can recover it. On a dry run it is the same shape,
+ * which is exactly what makes the preview a confirmation an agent can act on.
+ *
+ * Unlike `media_delete_folder`, an unresolvable id does NOT reject the call: deletions are performed
+ * per asset and reported per id, so a bad id among good ones neither rolls back the valid
+ * deletions nor stops them from happening. `deleted` and `failed` together account for every id
+ * in the request, on every successful response.
+ */ const mediaDeleteAssetsFailureSchema = utils.z.object({
+    id: utils.z.number().describe('The requested asset id that was not deleted.'),
+    reason: utils.z.string().describe('Why this id was not deleted — a missing asset (possibly a folder id), or one this token may not delete.')
+});
+const mediaDeleteAssetsOutputSchema = utils.z.object({
+    dryRun: utils.z.boolean().describe('True when this was a preview and NOTHING was deleted. False when the deletion was performed and is irreversible.'),
+    deleted: utils.z.array(mediaAssetOutputSchema).describe('On a dry run, the assets that WOULD be permanently deleted. On a real run, the assets that were deleted — they no longer exist and cannot be read back.'),
+    failed: utils.z.array(mediaDeleteAssetsFailureSchema).describe('The ids that were not deleted, each with a reason. On a real run the deletions reported in `deleted` still happened — retry only these.'),
+    totalFileNumber: utils.z.number().describe('How many assets are in `deleted` — the count that WOULD be removed on a dry run, or that was removed on a real one.')
+});
+
+exports.mediaAssetOutputSchema = mediaAssetOutputSchema;
+exports.mediaCreateFolderOutputSchema = mediaCreateFolderOutputSchema;
+exports.mediaDeleteAssetsFailureSchema = mediaDeleteAssetsFailureSchema;
+exports.mediaDeleteAssetsOutputSchema = mediaDeleteAssetsOutputSchema;
+exports.mediaDeleteFolderOutputSchema = mediaDeleteFolderOutputSchema;
+exports.mediaFolderNodeSchema = mediaFolderNodeSchema;
+exports.mediaFolderOutputSchema = mediaFolderOutputSchema;
+exports.mediaGetAssetOutputSchema = mediaGetAssetOutputSchema;
+exports.mediaListAssetsOutputSchema = mediaListAssetsOutputSchema;
+exports.mediaListFoldersOutputSchema = mediaListFoldersOutputSchema;
+exports.mediaMoveAssetsFailureSchema = mediaMoveAssetsFailureSchema;
+exports.mediaMoveAssetsOutputSchema = mediaMoveAssetsOutputSchema;
+exports.mediaMoveFolderOutputSchema = mediaMoveFolderOutputSchema;
+exports.mediaRenameFolderOutputSchema = mediaRenameFolderOutputSchema;
+exports.mediaUpdateAssetOutputSchema = mediaUpdateAssetOutputSchema;
+//# sourceMappingURL=output-schemas.js.map

package/dist/server/mcp/schemas/output-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schemas.js","sources":["../../../../server/src/mcp/schemas/output-schemas.ts"],"sourcesContent":["import { z } from '@strapi/utils';\n\n/**\n * The exhaustive set of asset fields the MCP surface may expose — an allowlist, for the reasons\n * in `sanitizeMediaAsset`. A field added to the file content-type stays invisible to MCP until\n * it is added both here and there.\n */\nexport const mediaAssetOutputSchema = z.object({\n  id: z.number().describe('Numeric asset id — the canonical identifier for this asset.'),\n  name: z.string(),\n  alternativeText: z.string().nullable().optional(),\n  caption: z.string().nullable().optional(),\n  url: z.string().describe('Public (or signed, for private providers) URL of the asset.'),\n  mime: z.string().describe('Mime type, e.g. \"image/png\".'),\n  size: z.number().describe('File size in kilobytes, as stored by Strapi.'),\n  width: z.number().nullable().optional().describe('Pixel width, images only.'),\n  height: z.number().nullable().optional().describe('Pixel height, images only.'),\n  ext: z.string().nullable().optional().describe('File extension including the dot, e.g. \".png\".'),\n  folder: z\n    .object({\n      id: z.number(),\n      name: z.string(),\n    })\n    .nullable()\n    .optional()\n    .describe('Containing folder, or null when the asset sits at the media library root.'),\n  createdAt: z.string().nullable().optional(),\n  updatedAt: z.string().nullable().optional(),\n});\n\nexport const mediaGetAssetOutputSchema = z.object({\n  data: mediaAssetOutputSchema.nullable(),\n});\n\nexport const mediaListAssetsOutputSchema = z.object({\n  results: z.array(mediaAssetOutputSchema),\n  pagination: z.object({\n    page: z.number(),\n    pageSize: z.number(),\n    pageCount: z.number(),\n    total: z.number(),\n  }),\n});\n\n/**\n * Folder tree node. `children` is recursive and unbounded in depth, so it is typed lazily.\n */\nexport type MediaFolderNode = {\n  id: number;\n  name: string;\n  children: MediaFolderNode[];\n};\n\nexport const mediaFolderNodeSchema: z.ZodType<MediaFolderNode> = z.lazy(() =>\n  z.object({\n    id: z.number(),\n    name: z.string(),\n    children: z.array(mediaFolderNodeSchema),\n  })\n);\n\nexport const mediaListFoldersOutputSchema = z.object({\n  data: z.array(mediaFolderNodeSchema).describe('Nested folder structure, roots first.'),\n});\n\n/**\n * `media_update_asset` output — the updated asset in the same shape the read tools return,\n * so an agent can confirm the write without a follow-up `media_get_asset` call.\n */\nexport const mediaUpdateAssetOutputSchema = z.object({\n  data: mediaAssetOutputSchema,\n});\n\n/**\n * A folder as returned by the write tools.\n *\n * Like the asset schema this is an ALLOWLIST: `path` and `pathId` are internal materialized-path\n * bookkeeping and stay invisible to MCP clients, matching what `media_list_folders` already exposes.\n */\nexport const mediaFolderOutputSchema = z.object({\n  id: z.number().describe('Numeric folder id — the canonical identifier for this folder.'),\n  name: z.string(),\n  parent: z\n    .object({\n      id: z.number(),\n      name: z.string().optional(),\n    })\n    .nullable()\n    .optional()\n    .describe(\n      'Containing folder, or null when the folder sits at the media library root. Absent when this response did not load the relation — absent means unknown, not root.'\n    ),\n  createdAt: z.string().nullable().optional(),\n  updatedAt: z.string().nullable().optional(),\n});\n\nexport const mediaCreateFolderOutputSchema = z.object({\n  data: mediaFolderOutputSchema,\n});\n\nexport const mediaRenameFolderOutputSchema = z.object({\n  data: mediaFolderOutputSchema,\n});\n\nexport const mediaMoveFolderOutputSchema = z.object({\n  data: mediaFolderOutputSchema,\n});\n\n/**\n * `media_delete_folder` output — the same shape for both branches, so an agent reads one contract.\n *\n * `dryRun` echoes which branch ran: on true the counts are what *would* be removed and nothing\n * was touched; on false they are what actually was. Echoing it back means the agent can tell a\n * preview from a completed deletion without tracking what it sent.\n *\n * There is no \"skipped ids\" field: an id that does not resolve to a folder rejects the whole\n * call, so every id in the request is accounted for by `folders` on any successful response.\n */\nexport const mediaDeleteFolderOutputSchema = z.object({\n  dryRun: z\n    .boolean()\n    .describe(\n      'True when this was a preview and NOTHING was deleted. False when the deletion was performed.'\n    ),\n  folders: z\n    .array(mediaFolderOutputSchema)\n    .describe('The folders matched by the given ids (the roots of the cascade).'),\n  totalFolderNumber: z\n    .number()\n    .describe(\n      'Total folders affected, including the matched folders themselves and every descendant.'\n    ),\n  totalFileNumber: z.number().describe('Total files affected, across the whole cascade.'),\n});\n\n/**\n * `media_move_assets` output — a per-id report rather than a single verdict.\n *\n * A bad id among good ones does not roll back the valid moves (see the handler), so the response\n * has to say which ids moved and which did not: an agent that only learned \"the call failed\"\n * would either retry moves that already happened or abandon ones that did. `moved` and `failed`\n * together account for every id in the request, on every successful response — including one\n * where `moved` is empty because no id resolved.\n *\n * `moved` carries the full asset in the same shape the read tools return, so the new folder can\n * be confirmed without a follow-up `media_get_asset`.\n */\nexport const mediaMoveAssetsFailureSchema = z.object({\n  id: z.number().describe('The requested asset id that was not moved.'),\n  reason: z\n    .string()\n    .describe('Why this id was not moved — a missing asset, or one this token may not edit.'),\n});\n\nexport const mediaMoveAssetsOutputSchema = z.object({\n  destinationFolder: z\n    .object({\n      id: z.number(),\n      name: z.string().optional(),\n    })\n    .nullable()\n    .describe(\n      'The destination folder, or null when the assets were moved to the media library root.'\n    ),\n  moved: z\n    .array(mediaAssetOutputSchema)\n    .describe('The assets that were moved, in their new location.'),\n  failed: z\n    .array(mediaMoveAssetsFailureSchema)\n    .describe(\n      'The ids that were not moved, each with a reason. The moves reported in `moved` still happened — retry only these.'\n    ),\n});\n\n/**\n * `media_delete_assets` output — one contract for both branches, with a per-id account of every\n * requested id.\n *\n * `dryRun` echoes which branch ran: on true `deleted` is what *would* be removed and nothing was\n * touched; on false it is what actually was. Echoing it back means an agent can tell a preview\n * from a completed deletion without tracking what it sent — the difference matters more here\n * than anywhere else in this surface, because one branch is irreversible.\n *\n * `deleted` carries the full asset rather than a bare id, so the agent can report what it\n * destroyed after the row is gone and no read can recover it. On a dry run it is the same shape,\n * which is exactly what makes the preview a confirmation an agent can act on.\n *\n * Unlike `media_delete_folder`, an unresolvable id does NOT reject the call: deletions are performed\n * per asset and reported per id, so a bad id among good ones neither rolls back the valid\n * deletions nor stops them from happening. `deleted` and `failed` together account for every id\n * in the request, on every successful response.\n */\nexport const mediaDeleteAssetsFailureSchema = z.object({\n  id: z.number().describe('The requested asset id that was not deleted.'),\n  reason: z\n    .string()\n    .describe(\n      'Why this id was not deleted — a missing asset (possibly a folder id), or one this token may not delete.'\n    ),\n});\n\nexport const mediaDeleteAssetsOutputSchema = z.object({\n  dryRun: z\n    .boolean()\n    .describe(\n      'True when this was a preview and NOTHING was deleted. False when the deletion was performed and is irreversible.'\n    ),\n  deleted: z\n    .array(mediaAssetOutputSchema)\n    .describe(\n      'On a dry run, the assets that WOULD be permanently deleted. On a real run, the assets that were deleted — they no longer exist and cannot be read back.'\n    ),\n  failed: z\n    .array(mediaDeleteAssetsFailureSchema)\n    .describe(\n      'The ids that were not deleted, each with a reason. On a real run the deletions reported in `deleted` still happened — retry only these.'\n    ),\n  totalFileNumber: z\n    .number()\n    .describe(\n      'How many assets are in `deleted` — the count that WOULD be removed on a dry run, or that was removed on a real one.'\n    ),\n});\n"],"names":["mediaAssetOutputSchema","z","object","id","number","describe","name","string","alternativeText","nullable","optional","caption","url","mime","size","width","height","ext","folder","createdAt","updatedAt","mediaGetAssetOutputSchema","data","mediaListAssetsOutputSchema","results","array","pagination","page","pageSize","pageCount","total","mediaFolderNodeSchema","lazy","children","mediaListFoldersOutputSchema","mediaUpdateAssetOutputSchema","mediaFolderOutputSchema","parent","mediaCreateFolderOutputSchema","mediaRenameFolderOutputSchema","mediaMoveFolderOutputSchema","mediaDeleteFolderOutputSchema","dryRun","boolean","folders","totalFolderNumber","totalFileNumber","mediaMoveAssetsFailureSchema","reason","mediaMoveAssetsOutputSchema","destinationFolder","moved","failed","mediaDeleteAssetsFailureSchema","mediaDeleteAssetsOutputSchema","deleted"],"mappings":";;;;AAEA;;;;AAIC,IACM,MAAMA,sBAAAA,GAAyBC,OAAAA,CAAEC,MAAM,CAAC;AAC7CC,IAAAA,EAAAA,EAAIF,OAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,6DAAA,CAAA;AACxBC,IAAAA,IAAAA,EAAML,QAAEM,MAAM,EAAA;AACdC,IAAAA,eAAAA,EAAiBP,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AAC/CC,IAAAA,OAAAA,EAASV,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AACvCE,IAAAA,GAAAA,EAAKX,OAAAA,CAAEM,MAAM,EAAA,CAAGF,QAAQ,CAAC,6DAAA,CAAA;AACzBQ,IAAAA,IAAAA,EAAMZ,OAAAA,CAAEM,MAAM,EAAA,CAAGF,QAAQ,CAAC,8BAAA,CAAA;AAC1BS,IAAAA,IAAAA,EAAMb,OAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,8CAAA,CAAA;IAC1BU,KAAAA,EAAOd,OAAAA,CAAEG,MAAM,EAAA,CAAGK,QAAQ,GAAGC,QAAQ,EAAA,CAAGL,QAAQ,CAAC,2BAAA,CAAA;IACjDW,MAAAA,EAAQf,OAAAA,CAAEG,MAAM,EAAA,CAAGK,QAAQ,GAAGC,QAAQ,EAAA,CAAGL,QAAQ,CAAC,4BAAA,CAAA;IAClDY,GAAAA,EAAKhB,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA,CAAGL,QAAQ,CAAC,gDAAA,CAAA;IAC/Ca,MAAAA,EAAQjB,OAAAA,CACLC,MAAM,CAAC;AACNC,QAAAA,EAAAA,EAAIF,QAAEG,MAAM,EAAA;AACZE,QAAAA,IAAAA,EAAML,QAAEM,MAAM;AAChB,KAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,QAAQ,EAAA,CACRL,QAAQ,CAAC,2EAAA,CAAA;AACZc,IAAAA,SAAAA,EAAWlB,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AACzCU,IAAAA,SAAAA,EAAWnB,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ;AAC3C,CAAA;AAEO,MAAMW,yBAAAA,GAA4BpB,OAAAA,CAAEC,MAAM,CAAC;AAChDoB,IAAAA,IAAAA,EAAMtB,uBAAuBS,QAAQ;AACvC,CAAA;AAEO,MAAMc,2BAAAA,GAA8BtB,OAAAA,CAAEC,MAAM,CAAC;IAClDsB,OAAAA,EAASvB,OAAAA,CAAEwB,KAAK,CAACzB,sBAAAA,CAAAA;IACjB0B,UAAAA,EAAYzB,OAAAA,CAAEC,MAAM,CAAC;AACnByB,QAAAA,IAAAA,EAAM1B,QAAEG,MAAM,EAAA;AACdwB,QAAAA,QAAAA,EAAU3B,QAAEG,MAAM,EAAA;AAClByB,QAAAA,SAAAA,EAAW5B,QAAEG,MAAM,EAAA;AACnB0B,QAAAA,KAAAA,EAAO7B,QAAEG,MAAM;AACjB,KAAA;AACF,CAAA;AAWO,MAAM2B,wBAAoD9B,OAAAA,CAAE+B,IAAI,CAAC,IACtE/B,OAAAA,CAAEC,MAAM,CAAC;AACPC,QAAAA,EAAAA,EAAIF,QAAEG,MAAM,EAAA;AACZE,QAAAA,IAAAA,EAAML,QAAEM,MAAM,EAAA;QACd0B,QAAAA,EAAUhC,OAAAA,CAAEwB,KAAK,CAACM,qBAAAA;KACpB,CAAA;AAGK,MAAMG,4BAAAA,GAA+BjC,OAAAA,CAAEC,MAAM,CAAC;AACnDoB,IAAAA,IAAAA,EAAMrB,OAAAA,CAAEwB,KAAK,CAACM,qBAAAA,CAAAA,CAAuB1B,QAAQ,CAAC,uCAAA;AAChD,CAAA;AAEA;;;AAGC,IACM,MAAM8B,4BAAAA,GAA+BlC,OAAAA,CAAEC,MAAM,CAAC;IACnDoB,IAAAA,EAAMtB;AACR,CAAA;AAEA;;;;;AAKC,IACM,MAAMoC,uBAAAA,GAA0BnC,OAAAA,CAAEC,MAAM,CAAC;AAC9CC,IAAAA,EAAAA,EAAIF,OAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,+DAAA,CAAA;AACxBC,IAAAA,IAAAA,EAAML,QAAEM,MAAM,EAAA;IACd8B,MAAAA,EAAQpC,OAAAA,CACLC,MAAM,CAAC;AACNC,QAAAA,EAAAA,EAAIF,QAAEG,MAAM,EAAA;QACZE,IAAAA,EAAML,OAAAA,CAAEM,MAAM,EAAA,CAAGG,QAAQ;AAC3B,KAAA,CAAA,CACCD,QAAQ,EAAA,CACRC,QAAQ,EAAA,CACRL,QAAQ,CACP,kKAAA,CAAA;AAEJc,IAAAA,SAAAA,EAAWlB,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AACzCU,IAAAA,SAAAA,EAAWnB,OAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ;AAC3C,CAAA;AAEO,MAAM4B,6BAAAA,GAAgCrC,OAAAA,CAAEC,MAAM,CAAC;IACpDoB,IAAAA,EAAMc;AACR,CAAA;AAEO,MAAMG,6BAAAA,GAAgCtC,OAAAA,CAAEC,MAAM,CAAC;IACpDoB,IAAAA,EAAMc;AACR,CAAA;AAEO,MAAMI,2BAAAA,GAA8BvC,OAAAA,CAAEC,MAAM,CAAC;IAClDoB,IAAAA,EAAMc;AACR,CAAA;AAEA;;;;;;;;;AASC,IACM,MAAMK,6BAAAA,GAAgCxC,OAAAA,CAAEC,MAAM,CAAC;AACpDwC,IAAAA,MAAAA,EAAQzC,OAAAA,CACL0C,OAAO,EAAA,CACPtC,QAAQ,CACP,8FAAA,CAAA;AAEJuC,IAAAA,OAAAA,EAAS3C,OAAAA,CACNwB,KAAK,CAACW,uBAAAA,CAAAA,CACN/B,QAAQ,CAAC,kEAAA,CAAA;AACZwC,IAAAA,iBAAAA,EAAmB5C,OAAAA,CAChBG,MAAM,EAAA,CACNC,QAAQ,CACP,wFAAA,CAAA;AAEJyC,IAAAA,eAAAA,EAAiB7C,OAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,iDAAA;AACvC,CAAA;AAEA;;;;;;;;;;;AAWC,IACM,MAAM0C,4BAAAA,GAA+B9C,OAAAA,CAAEC,MAAM,CAAC;AACnDC,IAAAA,EAAAA,EAAIF,OAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,4CAAA,CAAA;AACxB2C,IAAAA,MAAAA,EAAQ/C,OAAAA,CACLM,MAAM,EAAA,CACNF,QAAQ,CAAC,8EAAA;AACd,CAAA;AAEO,MAAM4C,2BAAAA,GAA8BhD,OAAAA,CAAEC,MAAM,CAAC;IAClDgD,iBAAAA,EAAmBjD,OAAAA,CAChBC,MAAM,CAAC;AACNC,QAAAA,EAAAA,EAAIF,QAAEG,MAAM,EAAA;QACZE,IAAAA,EAAML,OAAAA,CAAEM,MAAM,EAAA,CAAGG,QAAQ;KAC3B,CAAA,CACCD,QAAQ,EAAA,CACRJ,QAAQ,CACP,uFAAA,CAAA;AAEJ8C,IAAAA,KAAAA,EAAOlD,OAAAA,CACJwB,KAAK,CAACzB,sBAAAA,CAAAA,CACNK,QAAQ,CAAC,oDAAA,CAAA;AACZ+C,IAAAA,MAAAA,EAAQnD,OAAAA,CACLwB,KAAK,CAACsB,4BAAAA,CAAAA,CACN1C,QAAQ,CACP,mHAAA;AAEN,CAAA;AAEA;;;;;;;;;;;;;;;;;AAiBC,IACM,MAAMgD,8BAAAA,GAAiCpD,OAAAA,CAAEC,MAAM,CAAC;AACrDC,IAAAA,EAAAA,EAAIF,OAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,8CAAA,CAAA;AACxB2C,IAAAA,MAAAA,EAAQ/C,OAAAA,CACLM,MAAM,EAAA,CACNF,QAAQ,CACP,yGAAA;AAEN,CAAA;AAEO,MAAMiD,6BAAAA,GAAgCrD,OAAAA,CAAEC,MAAM,CAAC;AACpDwC,IAAAA,MAAAA,EAAQzC,OAAAA,CACL0C,OAAO,EAAA,CACPtC,QAAQ,CACP,kHAAA,CAAA;AAEJkD,IAAAA,OAAAA,EAAStD,OAAAA,CACNwB,KAAK,CAACzB,sBAAAA,CAAAA,CACNK,QAAQ,CACP,yJAAA,CAAA;AAEJ+C,IAAAA,MAAAA,EAAQnD,OAAAA,CACLwB,KAAK,CAAC4B,8BAAAA,CAAAA,CACNhD,QAAQ,CACP,yIAAA,CAAA;AAEJyC,IAAAA,eAAAA,EAAiB7C,OAAAA,CACdG,MAAM,EAAA,CACNC,QAAQ,CACP,qHAAA;AAEN,CAAA;;;;;;;;;;;;;;;;;;"}

package/dist/server/mcp/schemas/output-schemas.mjs

@@ -0,0 +1,142 @@
+import { z } from '@strapi/utils';
+
+/**
+ * The exhaustive set of asset fields the MCP surface may expose — an allowlist, for the reasons
+ * in `sanitizeMediaAsset`. A field added to the file content-type stays invisible to MCP until
+ * it is added both here and there.
+ */ const mediaAssetOutputSchema = z.object({
+    id: z.number().describe('Numeric asset id — the canonical identifier for this asset.'),
+    name: z.string(),
+    alternativeText: z.string().nullable().optional(),
+    caption: z.string().nullable().optional(),
+    url: z.string().describe('Public (or signed, for private providers) URL of the asset.'),
+    mime: z.string().describe('Mime type, e.g. "image/png".'),
+    size: z.number().describe('File size in kilobytes, as stored by Strapi.'),
+    width: z.number().nullable().optional().describe('Pixel width, images only.'),
+    height: z.number().nullable().optional().describe('Pixel height, images only.'),
+    ext: z.string().nullable().optional().describe('File extension including the dot, e.g. ".png".'),
+    folder: z.object({
+        id: z.number(),
+        name: z.string()
+    }).nullable().optional().describe('Containing folder, or null when the asset sits at the media library root.'),
+    createdAt: z.string().nullable().optional(),
+    updatedAt: z.string().nullable().optional()
+});
+const mediaGetAssetOutputSchema = z.object({
+    data: mediaAssetOutputSchema.nullable()
+});
+const mediaListAssetsOutputSchema = z.object({
+    results: z.array(mediaAssetOutputSchema),
+    pagination: z.object({
+        page: z.number(),
+        pageSize: z.number(),
+        pageCount: z.number(),
+        total: z.number()
+    })
+});
+const mediaFolderNodeSchema = z.lazy(()=>z.object({
+        id: z.number(),
+        name: z.string(),
+        children: z.array(mediaFolderNodeSchema)
+    }));
+const mediaListFoldersOutputSchema = z.object({
+    data: z.array(mediaFolderNodeSchema).describe('Nested folder structure, roots first.')
+});
+/**
+ * `media_update_asset` output — the updated asset in the same shape the read tools return,
+ * so an agent can confirm the write without a follow-up `media_get_asset` call.
+ */ const mediaUpdateAssetOutputSchema = z.object({
+    data: mediaAssetOutputSchema
+});
+/**
+ * A folder as returned by the write tools.
+ *
+ * Like the asset schema this is an ALLOWLIST: `path` and `pathId` are internal materialized-path
+ * bookkeeping and stay invisible to MCP clients, matching what `media_list_folders` already exposes.
+ */ const mediaFolderOutputSchema = z.object({
+    id: z.number().describe('Numeric folder id — the canonical identifier for this folder.'),
+    name: z.string(),
+    parent: z.object({
+        id: z.number(),
+        name: z.string().optional()
+    }).nullable().optional().describe('Containing folder, or null when the folder sits at the media library root. Absent when this response did not load the relation — absent means unknown, not root.'),
+    createdAt: z.string().nullable().optional(),
+    updatedAt: z.string().nullable().optional()
+});
+const mediaCreateFolderOutputSchema = z.object({
+    data: mediaFolderOutputSchema
+});
+const mediaRenameFolderOutputSchema = z.object({
+    data: mediaFolderOutputSchema
+});
+const mediaMoveFolderOutputSchema = z.object({
+    data: mediaFolderOutputSchema
+});
+/**
+ * `media_delete_folder` output — the same shape for both branches, so an agent reads one contract.
+ *
+ * `dryRun` echoes which branch ran: on true the counts are what *would* be removed and nothing
+ * was touched; on false they are what actually was. Echoing it back means the agent can tell a
+ * preview from a completed deletion without tracking what it sent.
+ *
+ * There is no "skipped ids" field: an id that does not resolve to a folder rejects the whole
+ * call, so every id in the request is accounted for by `folders` on any successful response.
+ */ const mediaDeleteFolderOutputSchema = z.object({
+    dryRun: z.boolean().describe('True when this was a preview and NOTHING was deleted. False when the deletion was performed.'),
+    folders: z.array(mediaFolderOutputSchema).describe('The folders matched by the given ids (the roots of the cascade).'),
+    totalFolderNumber: z.number().describe('Total folders affected, including the matched folders themselves and every descendant.'),
+    totalFileNumber: z.number().describe('Total files affected, across the whole cascade.')
+});
+/**
+ * `media_move_assets` output — a per-id report rather than a single verdict.
+ *
+ * A bad id among good ones does not roll back the valid moves (see the handler), so the response
+ * has to say which ids moved and which did not: an agent that only learned "the call failed"
+ * would either retry moves that already happened or abandon ones that did. `moved` and `failed`
+ * together account for every id in the request, on every successful response — including one
+ * where `moved` is empty because no id resolved.
+ *
+ * `moved` carries the full asset in the same shape the read tools return, so the new folder can
+ * be confirmed without a follow-up `media_get_asset`.
+ */ const mediaMoveAssetsFailureSchema = z.object({
+    id: z.number().describe('The requested asset id that was not moved.'),
+    reason: z.string().describe('Why this id was not moved — a missing asset, or one this token may not edit.')
+});
+const mediaMoveAssetsOutputSchema = z.object({
+    destinationFolder: z.object({
+        id: z.number(),
+        name: z.string().optional()
+    }).nullable().describe('The destination folder, or null when the assets were moved to the media library root.'),
+    moved: z.array(mediaAssetOutputSchema).describe('The assets that were moved, in their new location.'),
+    failed: z.array(mediaMoveAssetsFailureSchema).describe('The ids that were not moved, each with a reason. The moves reported in `moved` still happened — retry only these.')
+});
+/**
+ * `media_delete_assets` output — one contract for both branches, with a per-id account of every
+ * requested id.
+ *
+ * `dryRun` echoes which branch ran: on true `deleted` is what *would* be removed and nothing was
+ * touched; on false it is what actually was. Echoing it back means an agent can tell a preview
+ * from a completed deletion without tracking what it sent — the difference matters more here
+ * than anywhere else in this surface, because one branch is irreversible.
+ *
+ * `deleted` carries the full asset rather than a bare id, so the agent can report what it
+ * destroyed after the row is gone and no read can recover it. On a dry run it is the same shape,
+ * which is exactly what makes the preview a confirmation an agent can act on.
+ *
+ * Unlike `media_delete_folder`, an unresolvable id does NOT reject the call: deletions are performed
+ * per asset and reported per id, so a bad id among good ones neither rolls back the valid
+ * deletions nor stops them from happening. `deleted` and `failed` together account for every id
+ * in the request, on every successful response.
+ */ const mediaDeleteAssetsFailureSchema = z.object({
+    id: z.number().describe('The requested asset id that was not deleted.'),
+    reason: z.string().describe('Why this id was not deleted — a missing asset (possibly a folder id), or one this token may not delete.')
+});
+const mediaDeleteAssetsOutputSchema = z.object({
+    dryRun: z.boolean().describe('True when this was a preview and NOTHING was deleted. False when the deletion was performed and is irreversible.'),
+    deleted: z.array(mediaAssetOutputSchema).describe('On a dry run, the assets that WOULD be permanently deleted. On a real run, the assets that were deleted — they no longer exist and cannot be read back.'),
+    failed: z.array(mediaDeleteAssetsFailureSchema).describe('The ids that were not deleted, each with a reason. On a real run the deletions reported in `deleted` still happened — retry only these.'),
+    totalFileNumber: z.number().describe('How many assets are in `deleted` — the count that WOULD be removed on a dry run, or that was removed on a real one.')
+});
+
+export { mediaAssetOutputSchema, mediaCreateFolderOutputSchema, mediaDeleteAssetsFailureSchema, mediaDeleteAssetsOutputSchema, mediaDeleteFolderOutputSchema, mediaFolderNodeSchema, mediaFolderOutputSchema, mediaGetAssetOutputSchema, mediaListAssetsOutputSchema, mediaListFoldersOutputSchema, mediaMoveAssetsFailureSchema, mediaMoveAssetsOutputSchema, mediaMoveFolderOutputSchema, mediaRenameFolderOutputSchema, mediaUpdateAssetOutputSchema };
+//# sourceMappingURL=output-schemas.mjs.map

package/dist/server/mcp/schemas/output-schemas.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-schemas.mjs","sources":["../../../../server/src/mcp/schemas/output-schemas.ts"],"sourcesContent":["import { z } from '@strapi/utils';\n\n/**\n * The exhaustive set of asset fields the MCP surface may expose — an allowlist, for the reasons\n * in `sanitizeMediaAsset`. A field added to the file content-type stays invisible to MCP until\n * it is added both here and there.\n */\nexport const mediaAssetOutputSchema = z.object({\n  id: z.number().describe('Numeric asset id — the canonical identifier for this asset.'),\n  name: z.string(),\n  alternativeText: z.string().nullable().optional(),\n  caption: z.string().nullable().optional(),\n  url: z.string().describe('Public (or signed, for private providers) URL of the asset.'),\n  mime: z.string().describe('Mime type, e.g. \"image/png\".'),\n  size: z.number().describe('File size in kilobytes, as stored by Strapi.'),\n  width: z.number().nullable().optional().describe('Pixel width, images only.'),\n  height: z.number().nullable().optional().describe('Pixel height, images only.'),\n  ext: z.string().nullable().optional().describe('File extension including the dot, e.g. \".png\".'),\n  folder: z\n    .object({\n      id: z.number(),\n      name: z.string(),\n    })\n    .nullable()\n    .optional()\n    .describe('Containing folder, or null when the asset sits at the media library root.'),\n  createdAt: z.string().nullable().optional(),\n  updatedAt: z.string().nullable().optional(),\n});\n\nexport const mediaGetAssetOutputSchema = z.object({\n  data: mediaAssetOutputSchema.nullable(),\n});\n\nexport const mediaListAssetsOutputSchema = z.object({\n  results: z.array(mediaAssetOutputSchema),\n  pagination: z.object({\n    page: z.number(),\n    pageSize: z.number(),\n    pageCount: z.number(),\n    total: z.number(),\n  }),\n});\n\n/**\n * Folder tree node. `children` is recursive and unbounded in depth, so it is typed lazily.\n */\nexport type MediaFolderNode = {\n  id: number;\n  name: string;\n  children: MediaFolderNode[];\n};\n\nexport const mediaFolderNodeSchema: z.ZodType<MediaFolderNode> = z.lazy(() =>\n  z.object({\n    id: z.number(),\n    name: z.string(),\n    children: z.array(mediaFolderNodeSchema),\n  })\n);\n\nexport const mediaListFoldersOutputSchema = z.object({\n  data: z.array(mediaFolderNodeSchema).describe('Nested folder structure, roots first.'),\n});\n\n/**\n * `media_update_asset` output — the updated asset in the same shape the read tools return,\n * so an agent can confirm the write without a follow-up `media_get_asset` call.\n */\nexport const mediaUpdateAssetOutputSchema = z.object({\n  data: mediaAssetOutputSchema,\n});\n\n/**\n * A folder as returned by the write tools.\n *\n * Like the asset schema this is an ALLOWLIST: `path` and `pathId` are internal materialized-path\n * bookkeeping and stay invisible to MCP clients, matching what `media_list_folders` already exposes.\n */\nexport const mediaFolderOutputSchema = z.object({\n  id: z.number().describe('Numeric folder id — the canonical identifier for this folder.'),\n  name: z.string(),\n  parent: z\n    .object({\n      id: z.number(),\n      name: z.string().optional(),\n    })\n    .nullable()\n    .optional()\n    .describe(\n      'Containing folder, or null when the folder sits at the media library root. Absent when this response did not load the relation — absent means unknown, not root.'\n    ),\n  createdAt: z.string().nullable().optional(),\n  updatedAt: z.string().nullable().optional(),\n});\n\nexport const mediaCreateFolderOutputSchema = z.object({\n  data: mediaFolderOutputSchema,\n});\n\nexport const mediaRenameFolderOutputSchema = z.object({\n  data: mediaFolderOutputSchema,\n});\n\nexport const mediaMoveFolderOutputSchema = z.object({\n  data: mediaFolderOutputSchema,\n});\n\n/**\n * `media_delete_folder` output — the same shape for both branches, so an agent reads one contract.\n *\n * `dryRun` echoes which branch ran: on true the counts are what *would* be removed and nothing\n * was touched; on false they are what actually was. Echoing it back means the agent can tell a\n * preview from a completed deletion without tracking what it sent.\n *\n * There is no \"skipped ids\" field: an id that does not resolve to a folder rejects the whole\n * call, so every id in the request is accounted for by `folders` on any successful response.\n */\nexport const mediaDeleteFolderOutputSchema = z.object({\n  dryRun: z\n    .boolean()\n    .describe(\n      'True when this was a preview and NOTHING was deleted. False when the deletion was performed.'\n    ),\n  folders: z\n    .array(mediaFolderOutputSchema)\n    .describe('The folders matched by the given ids (the roots of the cascade).'),\n  totalFolderNumber: z\n    .number()\n    .describe(\n      'Total folders affected, including the matched folders themselves and every descendant.'\n    ),\n  totalFileNumber: z.number().describe('Total files affected, across the whole cascade.'),\n});\n\n/**\n * `media_move_assets` output — a per-id report rather than a single verdict.\n *\n * A bad id among good ones does not roll back the valid moves (see the handler), so the response\n * has to say which ids moved and which did not: an agent that only learned \"the call failed\"\n * would either retry moves that already happened or abandon ones that did. `moved` and `failed`\n * together account for every id in the request, on every successful response — including one\n * where `moved` is empty because no id resolved.\n *\n * `moved` carries the full asset in the same shape the read tools return, so the new folder can\n * be confirmed without a follow-up `media_get_asset`.\n */\nexport const mediaMoveAssetsFailureSchema = z.object({\n  id: z.number().describe('The requested asset id that was not moved.'),\n  reason: z\n    .string()\n    .describe('Why this id was not moved — a missing asset, or one this token may not edit.'),\n});\n\nexport const mediaMoveAssetsOutputSchema = z.object({\n  destinationFolder: z\n    .object({\n      id: z.number(),\n      name: z.string().optional(),\n    })\n    .nullable()\n    .describe(\n      'The destination folder, or null when the assets were moved to the media library root.'\n    ),\n  moved: z\n    .array(mediaAssetOutputSchema)\n    .describe('The assets that were moved, in their new location.'),\n  failed: z\n    .array(mediaMoveAssetsFailureSchema)\n    .describe(\n      'The ids that were not moved, each with a reason. The moves reported in `moved` still happened — retry only these.'\n    ),\n});\n\n/**\n * `media_delete_assets` output — one contract for both branches, with a per-id account of every\n * requested id.\n *\n * `dryRun` echoes which branch ran: on true `deleted` is what *would* be removed and nothing was\n * touched; on false it is what actually was. Echoing it back means an agent can tell a preview\n * from a completed deletion without tracking what it sent — the difference matters more here\n * than anywhere else in this surface, because one branch is irreversible.\n *\n * `deleted` carries the full asset rather than a bare id, so the agent can report what it\n * destroyed after the row is gone and no read can recover it. On a dry run it is the same shape,\n * which is exactly what makes the preview a confirmation an agent can act on.\n *\n * Unlike `media_delete_folder`, an unresolvable id does NOT reject the call: deletions are performed\n * per asset and reported per id, so a bad id among good ones neither rolls back the valid\n * deletions nor stops them from happening. `deleted` and `failed` together account for every id\n * in the request, on every successful response.\n */\nexport const mediaDeleteAssetsFailureSchema = z.object({\n  id: z.number().describe('The requested asset id that was not deleted.'),\n  reason: z\n    .string()\n    .describe(\n      'Why this id was not deleted — a missing asset (possibly a folder id), or one this token may not delete.'\n    ),\n});\n\nexport const mediaDeleteAssetsOutputSchema = z.object({\n  dryRun: z\n    .boolean()\n    .describe(\n      'True when this was a preview and NOTHING was deleted. False when the deletion was performed and is irreversible.'\n    ),\n  deleted: z\n    .array(mediaAssetOutputSchema)\n    .describe(\n      'On a dry run, the assets that WOULD be permanently deleted. On a real run, the assets that were deleted — they no longer exist and cannot be read back.'\n    ),\n  failed: z\n    .array(mediaDeleteAssetsFailureSchema)\n    .describe(\n      'The ids that were not deleted, each with a reason. On a real run the deletions reported in `deleted` still happened — retry only these.'\n    ),\n  totalFileNumber: z\n    .number()\n    .describe(\n      'How many assets are in `deleted` — the count that WOULD be removed on a dry run, or that was removed on a real one.'\n    ),\n});\n"],"names":["mediaAssetOutputSchema","z","object","id","number","describe","name","string","alternativeText","nullable","optional","caption","url","mime","size","width","height","ext","folder","createdAt","updatedAt","mediaGetAssetOutputSchema","data","mediaListAssetsOutputSchema","results","array","pagination","page","pageSize","pageCount","total","mediaFolderNodeSchema","lazy","children","mediaListFoldersOutputSchema","mediaUpdateAssetOutputSchema","mediaFolderOutputSchema","parent","mediaCreateFolderOutputSchema","mediaRenameFolderOutputSchema","mediaMoveFolderOutputSchema","mediaDeleteFolderOutputSchema","dryRun","boolean","folders","totalFolderNumber","totalFileNumber","mediaMoveAssetsFailureSchema","reason","mediaMoveAssetsOutputSchema","destinationFolder","moved","failed","mediaDeleteAssetsFailureSchema","mediaDeleteAssetsOutputSchema","deleted"],"mappings":";;AAEA;;;;AAIC,IACM,MAAMA,sBAAAA,GAAyBC,CAAAA,CAAEC,MAAM,CAAC;AAC7CC,IAAAA,EAAAA,EAAIF,CAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,6DAAA,CAAA;AACxBC,IAAAA,IAAAA,EAAML,EAAEM,MAAM,EAAA;AACdC,IAAAA,eAAAA,EAAiBP,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AAC/CC,IAAAA,OAAAA,EAASV,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AACvCE,IAAAA,GAAAA,EAAKX,CAAAA,CAAEM,MAAM,EAAA,CAAGF,QAAQ,CAAC,6DAAA,CAAA;AACzBQ,IAAAA,IAAAA,EAAMZ,CAAAA,CAAEM,MAAM,EAAA,CAAGF,QAAQ,CAAC,8BAAA,CAAA;AAC1BS,IAAAA,IAAAA,EAAMb,CAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,8CAAA,CAAA;IAC1BU,KAAAA,EAAOd,CAAAA,CAAEG,MAAM,EAAA,CAAGK,QAAQ,GAAGC,QAAQ,EAAA,CAAGL,QAAQ,CAAC,2BAAA,CAAA;IACjDW,MAAAA,EAAQf,CAAAA,CAAEG,MAAM,EAAA,CAAGK,QAAQ,GAAGC,QAAQ,EAAA,CAAGL,QAAQ,CAAC,4BAAA,CAAA;IAClDY,GAAAA,EAAKhB,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA,CAAGL,QAAQ,CAAC,gDAAA,CAAA;IAC/Ca,MAAAA,EAAQjB,CAAAA,CACLC,MAAM,CAAC;AACNC,QAAAA,EAAAA,EAAIF,EAAEG,MAAM,EAAA;AACZE,QAAAA,IAAAA,EAAML,EAAEM,MAAM;AAChB,KAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,QAAQ,EAAA,CACRL,QAAQ,CAAC,2EAAA,CAAA;AACZc,IAAAA,SAAAA,EAAWlB,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AACzCU,IAAAA,SAAAA,EAAWnB,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ;AAC3C,CAAA;AAEO,MAAMW,yBAAAA,GAA4BpB,CAAAA,CAAEC,MAAM,CAAC;AAChDoB,IAAAA,IAAAA,EAAMtB,uBAAuBS,QAAQ;AACvC,CAAA;AAEO,MAAMc,2BAAAA,GAA8BtB,CAAAA,CAAEC,MAAM,CAAC;IAClDsB,OAAAA,EAASvB,CAAAA,CAAEwB,KAAK,CAACzB,sBAAAA,CAAAA;IACjB0B,UAAAA,EAAYzB,CAAAA,CAAEC,MAAM,CAAC;AACnByB,QAAAA,IAAAA,EAAM1B,EAAEG,MAAM,EAAA;AACdwB,QAAAA,QAAAA,EAAU3B,EAAEG,MAAM,EAAA;AAClByB,QAAAA,SAAAA,EAAW5B,EAAEG,MAAM,EAAA;AACnB0B,QAAAA,KAAAA,EAAO7B,EAAEG,MAAM;AACjB,KAAA;AACF,CAAA;AAWO,MAAM2B,wBAAoD9B,CAAAA,CAAE+B,IAAI,CAAC,IACtE/B,CAAAA,CAAEC,MAAM,CAAC;AACPC,QAAAA,EAAAA,EAAIF,EAAEG,MAAM,EAAA;AACZE,QAAAA,IAAAA,EAAML,EAAEM,MAAM,EAAA;QACd0B,QAAAA,EAAUhC,CAAAA,CAAEwB,KAAK,CAACM,qBAAAA;KACpB,CAAA;AAGK,MAAMG,4BAAAA,GAA+BjC,CAAAA,CAAEC,MAAM,CAAC;AACnDoB,IAAAA,IAAAA,EAAMrB,CAAAA,CAAEwB,KAAK,CAACM,qBAAAA,CAAAA,CAAuB1B,QAAQ,CAAC,uCAAA;AAChD,CAAA;AAEA;;;AAGC,IACM,MAAM8B,4BAAAA,GAA+BlC,CAAAA,CAAEC,MAAM,CAAC;IACnDoB,IAAAA,EAAMtB;AACR,CAAA;AAEA;;;;;AAKC,IACM,MAAMoC,uBAAAA,GAA0BnC,CAAAA,CAAEC,MAAM,CAAC;AAC9CC,IAAAA,EAAAA,EAAIF,CAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,+DAAA,CAAA;AACxBC,IAAAA,IAAAA,EAAML,EAAEM,MAAM,EAAA;IACd8B,MAAAA,EAAQpC,CAAAA,CACLC,MAAM,CAAC;AACNC,QAAAA,EAAAA,EAAIF,EAAEG,MAAM,EAAA;QACZE,IAAAA,EAAML,CAAAA,CAAEM,MAAM,EAAA,CAAGG,QAAQ;AAC3B,KAAA,CAAA,CACCD,QAAQ,EAAA,CACRC,QAAQ,EAAA,CACRL,QAAQ,CACP,kKAAA,CAAA;AAEJc,IAAAA,SAAAA,EAAWlB,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ,EAAA;AACzCU,IAAAA,SAAAA,EAAWnB,CAAAA,CAAEM,MAAM,EAAA,CAAGE,QAAQ,GAAGC,QAAQ;AAC3C,CAAA;AAEO,MAAM4B,6BAAAA,GAAgCrC,CAAAA,CAAEC,MAAM,CAAC;IACpDoB,IAAAA,EAAMc;AACR,CAAA;AAEO,MAAMG,6BAAAA,GAAgCtC,CAAAA,CAAEC,MAAM,CAAC;IACpDoB,IAAAA,EAAMc;AACR,CAAA;AAEO,MAAMI,2BAAAA,GAA8BvC,CAAAA,CAAEC,MAAM,CAAC;IAClDoB,IAAAA,EAAMc;AACR,CAAA;AAEA;;;;;;;;;AASC,IACM,MAAMK,6BAAAA,GAAgCxC,CAAAA,CAAEC,MAAM,CAAC;AACpDwC,IAAAA,MAAAA,EAAQzC,CAAAA,CACL0C,OAAO,EAAA,CACPtC,QAAQ,CACP,8FAAA,CAAA;AAEJuC,IAAAA,OAAAA,EAAS3C,CAAAA,CACNwB,KAAK,CAACW,uBAAAA,CAAAA,CACN/B,QAAQ,CAAC,kEAAA,CAAA;AACZwC,IAAAA,iBAAAA,EAAmB5C,CAAAA,CAChBG,MAAM,EAAA,CACNC,QAAQ,CACP,wFAAA,CAAA;AAEJyC,IAAAA,eAAAA,EAAiB7C,CAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,iDAAA;AACvC,CAAA;AAEA;;;;;;;;;;;AAWC,IACM,MAAM0C,4BAAAA,GAA+B9C,CAAAA,CAAEC,MAAM,CAAC;AACnDC,IAAAA,EAAAA,EAAIF,CAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,4CAAA,CAAA;AACxB2C,IAAAA,MAAAA,EAAQ/C,CAAAA,CACLM,MAAM,EAAA,CACNF,QAAQ,CAAC,8EAAA;AACd,CAAA;AAEO,MAAM4C,2BAAAA,GAA8BhD,CAAAA,CAAEC,MAAM,CAAC;IAClDgD,iBAAAA,EAAmBjD,CAAAA,CAChBC,MAAM,CAAC;AACNC,QAAAA,EAAAA,EAAIF,EAAEG,MAAM,EAAA;QACZE,IAAAA,EAAML,CAAAA,CAAEM,MAAM,EAAA,CAAGG,QAAQ;KAC3B,CAAA,CACCD,QAAQ,EAAA,CACRJ,QAAQ,CACP,uFAAA,CAAA;AAEJ8C,IAAAA,KAAAA,EAAOlD,CAAAA,CACJwB,KAAK,CAACzB,sBAAAA,CAAAA,CACNK,QAAQ,CAAC,oDAAA,CAAA;AACZ+C,IAAAA,MAAAA,EAAQnD,CAAAA,CACLwB,KAAK,CAACsB,4BAAAA,CAAAA,CACN1C,QAAQ,CACP,mHAAA;AAEN,CAAA;AAEA;;;;;;;;;;;;;;;;;AAiBC,IACM,MAAMgD,8BAAAA,GAAiCpD,CAAAA,CAAEC,MAAM,CAAC;AACrDC,IAAAA,EAAAA,EAAIF,CAAAA,CAAEG,MAAM,EAAA,CAAGC,QAAQ,CAAC,8CAAA,CAAA;AACxB2C,IAAAA,MAAAA,EAAQ/C,CAAAA,CACLM,MAAM,EAAA,CACNF,QAAQ,CACP,yGAAA;AAEN,CAAA;AAEO,MAAMiD,6BAAAA,GAAgCrD,CAAAA,CAAEC,MAAM,CAAC;AACpDwC,IAAAA,MAAAA,EAAQzC,CAAAA,CACL0C,OAAO,EAAA,CACPtC,QAAQ,CACP,kHAAA,CAAA;AAEJkD,IAAAA,OAAAA,EAAStD,CAAAA,CACNwB,KAAK,CAACzB,sBAAAA,CAAAA,CACNK,QAAQ,CACP,yJAAA,CAAA;AAEJ+C,IAAAA,MAAAA,EAAQnD,CAAAA,CACLwB,KAAK,CAAC4B,8BAAAA,CAAAA,CACNhD,QAAQ,CACP,yIAAA,CAAA;AAEJyC,IAAAA,eAAAA,EAAiB7C,CAAAA,CACdG,MAAM,EAAA,CACNC,QAAQ,CACP,qHAAA;AAEN,CAAA;;;;"}

package/dist/server/mcp/utils.js

@@ -0,0 +1,14 @@
+'use strict';
+
+/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */ const ok = (structuredContent)=>({
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify(structuredContent)
+            }
+        ],
+        structuredContent
+    });
+
+exports.ok = ok;
+//# sourceMappingURL=utils.js.map

package/dist/server/mcp/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sources":["../../../server/src/mcp/utils.ts"],"sourcesContent":["import type { Modules } from '@strapi/types';\n\n/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */\nexport const ok = (\n  structuredContent: Record<string, unknown>\n): Modules.MCP.McpToolHandlerReturn => ({\n  content: [{ type: 'text', text: JSON.stringify(structuredContent) }],\n  structuredContent,\n});\n"],"names":["ok","structuredContent","content","type","text","JSON","stringify"],"mappings":";;AAEA,2GACO,MAAMA,EAAAA,GAAK,CAChBC,qBACsC;QACtCC,OAAAA,EAAS;AAAC,YAAA;gBAAEC,IAAAA,EAAM,MAAA;gBAAQC,IAAAA,EAAMC,IAAAA,CAAKC,SAAS,CAACL,iBAAAA;AAAmB;AAAE,SAAA;AACpEA,QAAAA;AACF,KAAA;;;;"}