@strapi/upload 5.53.0 → 5.55.0

package/dist/server/controllers/admin-upload.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-upload.js","sources":["../../../server/src/controllers/admin-upload.ts"],"sourcesContent":["import os from 'os';\nimport path from 'path';\nimport fse from 'fs-extra';\nimport _ from 'lodash';\nimport { errors, async } from '@strapi/utils';\n\nimport type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\nimport { validateBulkUpdateBody, validateUploadBody } from './validation/admin/upload';\nimport { findEntityAndCheckPermissions } from './utils/find-entity-and-check-permissions';\nimport { Config, FileInfo } from '../types';\nimport { prepareUploadRequest, type FileUploadError } from '../utils/mime-validation';\nimport type { UploadFileInfo } from '../../../shared/contracts/files';\n\nexport default {\n  async bulkUpdateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const { updates } = await validateBulkUpdateBody(body);\n    const uploadService = getService('upload');\n\n    const results = await async.map(\n      updates,\n      async ({ id, fileInfo }: { id: number; fileInfo: FileInfo }) => {\n        const { pm } = await findEntityAndCheckPermissions(\n          userAbility,\n          ACTIONS.update,\n          FILE_MODEL_UID,\n          id\n        );\n\n        const updated = await uploadService.updateFileInfo(id, fileInfo as any, { user });\n\n        // Sign file urls for private providers\n        const signedFile = await getService('file').signFileUrls(updated);\n\n        return pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n      }\n    );\n\n    ctx.body = results;\n  },\n\n  /**\n   * `PUT /upload/files/:id`\n   *\n   * Update the editable metadata (`fileInfo`) of an existing file. Also reached\n   * through the `POST /upload` multiplexer, which delegates here with the id in\n   * `ctx.query` — hence the dual read below, route params winning.\n   */\n  async updateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    const data = await validateUploadBody(body);\n\n    const file = await uploadService.updateFileInfo(id, data.fileInfo as any, { user });\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(file);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  /**\n   * `POST /upload/files/:id/replace`\n   *\n   * Replace the binary content of an existing file. Also reached through the\n   * `POST /upload` multiplexer, which delegates here with the id in `ctx.query`\n   * — hence the dual read below, route params winning.\n   */\n  async replaceFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files: filesInput } = {} },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    if (Array.isArray(filesInput) && filesInput.length > 1) {\n      throw new errors.ApplicationError('Cannot replace a file with multiple ones');\n    }\n\n    const files = Array.isArray(filesInput) ? filesInput[0] : filesInput;\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const data = (await validateUploadBody(filteredBody)) as { fileInfo: FileInfo };\n    const replacedFile = await uploadService.replace(id, { data, file: validFiles[0] }, { user });\n\n    // Regenerate AI metadata for image replacements so the alt text / caption\n    // reflect the new file content. Mirrors the post-upload hook in\n    // `uploadFiles`; failure is logged and swallowed to keep the replace flow\n    // resilient when the AI provider is unavailable.\n    const aiMetadataService = getService('aiMetadata');\n    if (replacedFile?.mime?.startsWith('image/') && (await aiMetadataService.isEnabled())) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles([replacedFile]);\n        await aiMetadataService.updateFilesWithAIMetadata([replacedFile], metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed on replace, proceeding without it', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(replacedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  async uploadFiles(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const isMultipleFiles = validFiles.length > 1;\n    const data = await validateUploadBody(filteredBody, isMultipleFiles);\n\n    let filesArray = validFiles;\n\n    if (\n      data.fileInfo &&\n      Array.isArray(data.fileInfo) &&\n      filesArray.length === data.fileInfo.length\n    ) {\n      // Reorder filesArray to match data.fileInfo order\n      const alignedFilesArray = data.fileInfo\n        .map((info) => {\n          return filesArray.find((file) => file.originalFilename === info.name);\n        })\n        .filter(Boolean) as any[];\n\n      filesArray = alignedFilesArray;\n    }\n\n    // Upload files first to get thumbnails\n    const uploadedFiles = await uploadService.upload({ data, files: filesArray }, { user });\n    if (uploadedFiles.some((file) => file.mime?.startsWith('image/'))) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    const aiMetadataService = getService('aiMetadata');\n\n    // AFTER upload - generate AI metadata for images\n    if (await aiMetadataService.isEnabled()) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles(uploadedFiles);\n        // Update the uploaded files with AI metadata\n        await aiMetadataService.updateFilesWithAIMetadata(uploadedFiles, metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed, proceeding without AI enhancements', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFiles = await async.map(uploadedFiles, getService('file').signFileUrls);\n\n    ctx.body = await pm.sanitizeOutput(signedFiles, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/files`\n   *\n   * Upload a single file and return the created File.\n   *\n   * Accepts one file per request (multipart `files` + `fileInfo`) and returns a\n   * single `File` object. Unlike `uploadFiles`, it does **not** run AI metadata\n   * generation inline — that responsibility is decoupled and will be handled by a\n   * background job. Auth and permission checks mirror `POST /upload`.\n   */\n  async uploadFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    // Accept a single file per request; ignore any extras defensively.\n    const file = Array.isArray(files) ? files[0] : files;\n    const fileName = file.originalFilename || 'unknown';\n\n    // Parse the single fileInfo object from the multipart body.\n    let fileInfo: UploadFileInfo = {\n      name: fileName,\n      caption: null,\n      alternativeText: null,\n      folder: null,\n    };\n    if (body?.fileInfo) {\n      const raw = body.fileInfo;\n      if (typeof raw === 'string') {\n        fileInfo = JSON.parse(raw);\n      } else if (Array.isArray(raw)) {\n        fileInfo = (typeof raw[0] === 'string' ? JSON.parse(raw[0]) : raw[0]) as UploadFileInfo;\n      } else {\n        fileInfo = raw as UploadFileInfo;\n      }\n    }\n\n    // Validate this single file using security checks.\n    const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n      file,\n      { fileInfo: JSON.stringify(fileInfo) },\n      strapi\n    );\n\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0]?.message || 'Validation failed');\n    }\n\n    const data = await validateUploadBody({ fileInfo }, false);\n    const [uploadedFile] = await uploadService.upload({ data, files: [validFiles[0]] }, { user });\n\n    if (uploadedFile.mime?.startsWith('image/')) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    // No inline AI metadata generation — intentionally decoupled for the async job.\n\n    // Sign file url for private providers.\n    const signedFile = await getService('file').signFileUrls(uploadedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/actions/upload-from-urls`\n   *\n   * Upload files from URLs with SSE streaming for per-file progress\n   *\n   * Accepts JSON body with URLs and fetches them server-side.\n   * Streams Server-Sent Events as each URL is fetched and uploaded:\n   * - file:fetching  — when starting to fetch a URL\n   * - file:uploading — when upload starts for a fetched file\n   * - file:complete  — when a file is successfully uploaded\n   * - file:error     — when a URL fetch or upload fails\n   * - stream:complete — final summary with all results\n   */\n  async uploadFromUrls(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const fileService = getService('file');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    // Parse and validate request body\n    const { urls, folderId } = body as { urls?: string[]; folderId?: number | null };\n\n    if (!urls || !Array.isArray(urls) || urls.length === 0) {\n      throw new errors.ApplicationError('URLs are required');\n    }\n\n    if (urls.length > 20) {\n      throw new errors.ApplicationError('Maximum 20 URLs allowed per request');\n    }\n\n    // Take manual control of the response for SSE streaming\n    ctx.respond = false;\n    const res = ctx.res;\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n    });\n\n    const writeSSE = (event: string, data: Record<string, unknown>) => {\n      res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n    };\n\n    const total = urls.length;\n    const uploadErrors: FileUploadError[] = [];\n    const successfulFiles: any[] = [];\n\n    // Create temp directory for fetched files\n    const tmpWorkingDirectory = await fse.mkdtemp(path.join(os.tmpdir(), 'strapi-url-upload-'));\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n\n    try {\n      // Process each URL sequentially\n      for (let i = 0; i < urls.length; i += 1) {\n        const url = urls[i];\n\n        writeSSE('file:fetching', { url, index: i, total });\n\n        try {\n          // Fetch URL to temp file\n          const { file } = await fileService.fetchUrlToInputFile(\n            url,\n            tmpWorkingDirectory,\n            sizeLimit\n          );\n          const fileName = file.originalFilename;\n\n          writeSSE('file:uploading', {\n            name: fileName,\n            index: i,\n            total,\n            size: file.size,\n          });\n\n          // Validate using security checks\n          const fileInfo: UploadFileInfo = {\n            name: fileName,\n            caption: null,\n            alternativeText: null,\n            folder: folderId ?? null,\n          };\n\n          const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n            file,\n            { fileInfo: JSON.stringify(fileInfo) },\n            strapi\n          );\n\n          if (validFiles.length === 0) {\n            const errorMessage = validationErrors[0]?.message || 'Validation failed';\n            uploadErrors.push({ name: fileName, message: errorMessage });\n            writeSSE('file:error', { name: fileName, url, index: i, message: errorMessage });\n          } else {\n            // Upload the file\n            const data = await validateUploadBody({ fileInfo }, false);\n            const [uploadedFile] = await uploadService.upload(\n              { data, files: [validFiles[0]] },\n              { user }\n            );\n\n            // Sign file url\n            const signedFile = await fileService.signFileUrls(uploadedFile);\n            successfulFiles.push(signedFile);\n\n            writeSSE('file:complete', { name: fileName, index: i, file: signedFile });\n          }\n        } catch (error) {\n          const errorMessage = error instanceof Error ? error.message : String(error);\n          uploadErrors.push({ name: url, message: errorMessage });\n          writeSSE('file:error', { url, index: i, message: errorMessage });\n        }\n      }\n\n      // Track image upload metric once if any images were uploaded\n      if (successfulFiles.some((file) => file.mime?.startsWith('image/'))) {\n        await getService('metrics').trackUsage('didUploadImage');\n      }\n\n      // Send final stream summary\n      writeSSE('stream:complete', {\n        data: await pm.sanitizeOutput(successfulFiles, { action: ACTIONS.read }),\n        errors: uploadErrors,\n      });\n    } finally {\n      // Clean up temp directory\n      await fse.remove(tmpWorkingDirectory);\n    }\n\n    res.end();\n  },\n\n  // TODO: split into multiple endpoints\n  async upload(ctx: Context) {\n    const {\n      query: { id },\n      request: { files: { files } = {} },\n    } = ctx;\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      if (id) {\n        return this.updateFileInfo(ctx);\n      }\n\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    await (id ? this.replaceFile : this.uploadFiles)(ctx);\n  },\n};\n"],"names":["bulkUpdateFileInfo","ctx","state","userAbility","user","request","body","updates","validateBulkUpdateBody","uploadService","getService","results","async","map","id","fileInfo","pm","findEntityAndCheckPermissions","ACTIONS","update","FILE_MODEL_UID","updated","updateFileInfo","signedFile","signFileUrls","sanitizeOutput","action","read","params","query","errors","ValidationError","data","validateUploadBody","file","replaceFile","files","filesInput","Array","isArray","length","ApplicationError","validFiles","filteredBody","validationErrors","prepareUploadRequest","strapi","message","replacedFile","replace","aiMetadataService","mime","startsWith","isEnabled","metadataResults","processFiles","updateFilesWithAIMetadata","error","log","warn","Error","String","uploadFiles","service","createPermissionsManager","ability","create","model","isAllowed","forbidden","isMultipleFiles","filesArray","alignedFilesArray","info","find","originalFilename","name","filter","Boolean","uploadedFiles","upload","some","trackUsage","signedFiles","status","uploadFile","_","isEmpty","size","fileName","caption","alternativeText","folder","raw","JSON","parse","stringify","uploadedFile","uploadFromUrls","fileService","urls","folderId","respond","res","writeHead","Connection","writeSSE","event","write","total","uploadErrors","successfulFiles","tmpWorkingDirectory","fse","mkdtemp","path","join","os","tmpdir","sizeLimit","config","get","i","url","index","fetchUrlToInputFile","errorMessage","push","remove","end"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgBA,kBAAe;AACb,IAAA,MAAMA,oBAAmBC,GAAY,EAAA;AACnC,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAM,EAAEM,OAAO,EAAE,GAAG,MAAMC,6BAAAA,CAAuBF,IAAAA,CAAAA;AACjD,QAAA,MAAMG,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;QAEjC,MAAMC,OAAAA,GAAU,MAAMC,WAAAA,CAAMC,GAAG,CAC7BN,OAAAA,EACA,OAAO,EAAEO,EAAE,EAAEC,QAAQ,EAAsC,GAAA;YACzD,MAAM,EAAEC,EAAE,EAAE,GAAG,MAAMC,4DACnBd,WAAAA,EACAe,iBAAAA,CAAQC,MAAM,EACdC,wBAAAA,EACAN,EAAAA,CAAAA;AAGF,YAAA,MAAMO,UAAU,MAAMZ,aAAAA,CAAca,cAAc,CAACR,IAAIC,QAAAA,EAAiB;AAAEX,gBAAAA;AAAK,aAAA,CAAA;;AAG/E,YAAA,MAAMmB,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACH,OAAAA,CAAAA;YAEzD,OAAOL,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,gBAAAA,MAAAA,EAAQR,kBAAQS;AAAK,aAAA,CAAA;AAC9D,QAAA,CAAA,CAAA;AAGF1B,QAAAA,GAAAA,CAAIK,IAAI,GAAGK,OAAAA;AACb,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMW,gBAAerB,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,YAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,4DACnBd,WAAAA,EACAe,iBAAAA,CAAQC,MAAM,EACdC,wBAAAA,EACAN,EAAAA,CAAAA;QAGF,MAAMkB,IAAAA,GAAO,MAAMC,yBAAAA,CAAmB3B,IAAAA,CAAAA;QAEtC,MAAM4B,IAAAA,GAAO,MAAMzB,aAAAA,CAAca,cAAc,CAACR,EAAAA,EAAIkB,IAAAA,CAAKjB,QAAQ,EAAS;AAAEX,YAAAA;AAAK,SAAA,CAAA;;AAGjF,QAAA,MAAMmB,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACU,IAAAA,CAAAA;AAEzDjC,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMQ,aAAYlC,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,OAAOC,UAAU,EAAE,GAAG,EAAE,EAAE,EACrD,GAAGpC,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,YAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,4DACnBd,WAAAA,EACAe,iBAAAA,CAAQC,MAAM,EACdC,wBAAAA,EACAN,EAAAA,CAAAA;AAGF,QAAA,IAAIwB,MAAMC,OAAO,CAACF,eAAeA,UAAAA,CAAWG,MAAM,GAAG,CAAA,EAAG;YACtD,MAAM,IAAIV,YAAAA,CAAOW,gBAAgB,CAAC,0CAAA,CAAA;AACpC,QAAA;QAEA,MAAML,KAAAA,GAAQE,MAAMC,OAAO,CAACF,cAAcA,UAAU,CAAC,EAAE,GAAGA,UAAAA;AAE1D,QAAA,MAAM,EACJK,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,mCAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,aAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMf,IAAAA,GAAQ,MAAMC,yBAAAA,CAAmBU,YAAAA,CAAAA;AACvC,QAAA,MAAMK,YAAAA,GAAe,MAAMvC,aAAAA,CAAcwC,OAAO,CAACnC,EAAAA,EAAI;AAAEkB,YAAAA,IAAAA;YAAME,IAAAA,EAAMQ,UAAU,CAAC,CAAA;SAAG,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;;;;;AAM3F,QAAA,MAAM8C,oBAAoBxC,gBAAAA,CAAW,YAAA,CAAA;AACrC,QAAA,IAAIsC,cAAcG,IAAAA,EAAMC,UAAAA,CAAW,aAAc,MAAMF,iBAAAA,CAAkBG,SAAS,EAAA,EAAK;YACrF,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAAC;AAACP,oBAAAA;AAAa,iBAAA,CAAA;gBAC3E,MAAME,iBAAAA,CAAkBM,yBAAyB,CAAC;AAACR,oBAAAA;AAAa,iBAAA,EAAEM,eAAAA,EAAiBlD,IAAAA,CAAAA;AACrF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,iEAAA,EAAmE;AACjFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;AAGA,QAAA,MAAMlC,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACwB,YAAAA,CAAAA;AAEzD/C,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA,IAAA,MAAMmC,aAAY7D,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,kBAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,MAAM,EACJ3B,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,mCAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,aAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMuB,eAAAA,GAAkB5B,UAAAA,CAAWF,MAAM,GAAG,CAAA;QAC5C,MAAMR,IAAAA,GAAO,MAAMC,yBAAAA,CAAmBU,YAAAA,EAAc2B,eAAAA,CAAAA;AAEpD,QAAA,IAAIC,UAAAA,GAAa7B,UAAAA;AAEjB,QAAA,IACEV,KAAKjB,QAAQ,IACbuB,KAAAA,CAAMC,OAAO,CAACP,IAAAA,CAAKjB,QAAQ,CAAA,IAC3BwD,UAAAA,CAAW/B,MAAM,KAAKR,IAAAA,CAAKjB,QAAQ,CAACyB,MAAM,EAC1C;;AAEA,YAAA,MAAMgC,oBAAoBxC,IAAAA,CAAKjB,QAAQ,CACpCF,GAAG,CAAC,CAAC4D,IAAAA,GAAAA;gBACJ,OAAOF,UAAAA,CAAWG,IAAI,CAAC,CAACxC,OAASA,IAAAA,CAAKyC,gBAAgB,KAAKF,IAAAA,CAAKG,IAAI,CAAA;AACtE,YAAA,CAAA,CAAA,CACCC,MAAM,CAACC,OAAAA,CAAAA;YAEVP,UAAAA,GAAaC,iBAAAA;AACf,QAAA;;AAGA,QAAA,MAAMO,aAAAA,GAAgB,MAAMtE,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAOmC;SAAW,EAAG;AAAEnE,YAAAA;AAAK,SAAA,CAAA;QACrF,IAAI2E,aAAAA,CAAcE,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;YACjE,MAAM1C,gBAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;AAEA,QAAA,MAAMhC,oBAAoBxC,gBAAAA,CAAW,YAAA,CAAA;;QAGrC,IAAI,MAAMwC,iBAAAA,CAAkBG,SAAS,EAAA,EAAI;YACvC,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAACwB,aAAAA,CAAAA;;AAE7D,gBAAA,MAAM7B,iBAAAA,CAAkBM,yBAAyB,CAACuB,aAAAA,EAAezB,eAAAA,EAAiBlD,IAAAA,CAAAA;AACpF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,mEAAA,EAAqE;AACnFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;QAGA,MAAM0B,WAAAA,GAAc,MAAMvE,WAAAA,CAAMC,GAAG,CAACkE,aAAAA,EAAerE,gBAAAA,CAAW,QAAQc,YAAY,CAAA;AAElFvB,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAAC0D,WAAAA,EAAa;AAAEzD,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACvE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;MAUA,MAAMC,YAAWpF,GAAY,EAAA;QAC3B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,kBAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,IAAIiB,kBAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;YACnE,MAAM,IAAI1D,YAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;;QAGA,MAAMP,IAAAA,GAAOI,MAAMC,OAAO,CAACH,SAASA,KAAK,CAAC,EAAE,GAAGA,KAAAA;QAC/C,MAAMqD,QAAAA,GAAWvD,IAAAA,CAAKyC,gBAAgB,IAAI,SAAA;;AAG1C,QAAA,IAAI5D,QAAAA,GAA2B;YAC7B6D,IAAAA,EAAMa,QAAAA;YACNC,OAAAA,EAAS,IAAA;YACTC,eAAAA,EAAiB,IAAA;YACjBC,MAAAA,EAAQ;AACV,SAAA;AACA,QAAA,IAAItF,MAAMS,QAAAA,EAAU;YAClB,MAAM8E,GAAAA,GAAMvF,KAAKS,QAAQ;YACzB,IAAI,OAAO8E,QAAQ,QAAA,EAAU;gBAC3B9E,QAAAA,GAAW+E,IAAAA,CAAKC,KAAK,CAACF,GAAAA,CAAAA;AACxB,YAAA,CAAA,MAAO,IAAIvD,KAAAA,CAAMC,OAAO,CAACsD,GAAAA,CAAAA,EAAM;AAC7B9E,gBAAAA,QAAAA,GAAY,OAAO8E,GAAG,CAAC,CAAA,CAAE,KAAK,QAAA,GAAWC,IAAAA,CAAKC,KAAK,CAACF,GAAG,CAAC,CAAA,CAAE,CAAA,GAAIA,GAAG,CAAC,CAAA,CAAE;YACtE,CAAA,MAAO;gBACL9E,QAAAA,GAAW8E,GAAAA;AACb,YAAA;AACF,QAAA;;QAGA,MAAM,EAAEnD,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,mCAAAA,CACrDX,IAAAA,EACA;YAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;SAAU,EACrC+B,MAAAA,CAAAA;QAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,aAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA,CAAA;AACnE,QAAA;QAEA,MAAMf,IAAAA,GAAO,MAAMC,yBAAAA,CAAmB;AAAElB,YAAAA;SAAS,EAAG,KAAA,CAAA;AACpD,QAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAO;AAACM,gBAAAA,UAAU,CAAC,CAAA;AAAG;SAAC,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;AAE3F,QAAA,IAAI6F,YAAAA,CAAa9C,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,EAAW;YAC3C,MAAM1C,gBAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;;;AAKA,QAAA,MAAM3D,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACyE,YAAAA,CAAAA;AAEzDhG,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACtE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;;;;MAaA,MAAMc,gBAAejG,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMyF,cAAczF,gBAAAA,CAAW,MAAA,CAAA;AAC/B,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,kBAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;;AAGA,QAAA,MAAM,EAAE+B,IAAI,EAAEC,QAAQ,EAAE,GAAG/F,IAAAA;QAE3B,IAAI,CAAC8F,IAAAA,IAAQ,CAAC9D,KAAAA,CAAMC,OAAO,CAAC6D,IAAAA,CAAAA,IAASA,IAAAA,CAAK5D,MAAM,KAAK,CAAA,EAAG;YACtD,MAAM,IAAIV,YAAAA,CAAOW,gBAAgB,CAAC,mBAAA,CAAA;AACpC,QAAA;QAEA,IAAI2D,IAAAA,CAAK5D,MAAM,GAAG,EAAA,EAAI;YACpB,MAAM,IAAIV,YAAAA,CAAOW,gBAAgB,CAAC,qCAAA,CAAA;AACpC,QAAA;;AAGAxC,QAAAA,GAAAA,CAAIqG,OAAO,GAAG,KAAA;QACd,MAAMC,GAAAA,GAAMtG,IAAIsG,GAAG;QACnBA,GAAAA,CAAIC,SAAS,CAAC,GAAA,EAAK;YACjB,cAAA,EAAgB,mBAAA;YAChB,eAAA,EAAiB,UAAA;YACjBC,UAAAA,EAAY;AACd,SAAA,CAAA;QAEA,MAAMC,QAAAA,GAAW,CAACC,KAAAA,EAAe3E,IAAAA,GAAAA;AAC/BuE,YAAAA,GAAAA,CAAIK,KAAK,CAAC,CAAC,OAAO,EAAED,KAAAA,CAAM,QAAQ,EAAEb,IAAAA,CAAKE,SAAS,CAAChE,IAAAA,CAAAA,CAAM,IAAI,CAAC,CAAA;AAChE,QAAA,CAAA;QAEA,MAAM6E,KAAAA,GAAQT,KAAK5D,MAAM;AACzB,QAAA,MAAMsE,eAAkC,EAAE;AAC1C,QAAA,MAAMC,kBAAyB,EAAE;;QAGjC,MAAMC,mBAAAA,GAAsB,MAAMC,oBAAAA,CAAIC,OAAO,CAACC,sBAAKC,IAAI,CAACC,mBAAAA,CAAGC,MAAM,EAAA,EAAI,oBAAA,CAAA,CAAA;QACrE,MAAM,EAAEC,SAAS,EAAE,GAAGzE,OAAO0E,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;QAEhD,IAAI;;YAEF,IAAK,IAAIC,IAAI,CAAA,EAAGA,CAAAA,GAAItB,KAAK5D,MAAM,EAAEkF,KAAK,CAAA,CAAG;gBACvC,MAAMC,GAAAA,GAAMvB,IAAI,CAACsB,CAAAA,CAAE;AAEnBhB,gBAAAA,QAAAA,CAAS,eAAA,EAAiB;AAAEiB,oBAAAA,GAAAA;oBAAKC,KAAAA,EAAOF,CAAAA;AAAGb,oBAAAA;AAAM,iBAAA,CAAA;gBAEjD,IAAI;;oBAEF,MAAM,EAAE3E,IAAI,EAAE,GAAG,MAAMiE,WAAAA,CAAY0B,mBAAmB,CACpDF,GAAAA,EACAX,mBAAAA,EACAO,SAAAA,CAAAA;oBAEF,MAAM9B,QAAAA,GAAWvD,KAAKyC,gBAAgB;AAEtC+B,oBAAAA,QAAAA,CAAS,gBAAA,EAAkB;wBACzB9B,IAAAA,EAAMa,QAAAA;wBACNmC,KAAAA,EAAOF,CAAAA;AACPb,wBAAAA,KAAAA;AACArB,wBAAAA,IAAAA,EAAMtD,KAAKsD;AACb,qBAAA,CAAA;;AAGA,oBAAA,MAAMzE,QAAAA,GAA2B;wBAC/B6D,IAAAA,EAAMa,QAAAA;wBACNC,OAAAA,EAAS,IAAA;wBACTC,eAAAA,EAAiB,IAAA;AACjBC,wBAAAA,MAAAA,EAAQS,QAAAA,IAAY;AACtB,qBAAA;oBAEA,MAAM,EAAE3D,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,mCAAAA,CACrDX,IAAAA,EACA;wBAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;qBAAU,EACrC+B,MAAAA,CAAAA;oBAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;AAC3B,wBAAA,MAAMsF,YAAAA,GAAelF,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA;AACrD+D,wBAAAA,YAAAA,CAAaiB,IAAI,CAAC;4BAAEnD,IAAAA,EAAMa,QAAAA;4BAAU1C,OAAAA,EAAS+E;AAAa,yBAAA,CAAA;AAC1DpB,wBAAAA,QAAAA,CAAS,YAAA,EAAc;4BAAE9B,IAAAA,EAAMa,QAAAA;AAAUkC,4BAAAA,GAAAA;4BAAKC,KAAAA,EAAOF,CAAAA;4BAAG3E,OAAAA,EAAS+E;AAAa,yBAAA,CAAA;oBAChF,CAAA,MAAO;;wBAEL,MAAM9F,IAAAA,GAAO,MAAMC,yBAAAA,CAAmB;AAAElB,4BAAAA;yBAAS,EAAG,KAAA,CAAA;AACpD,wBAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAC/C;AAAEhD,4BAAAA,IAAAA;4BAAMI,KAAAA,EAAO;AAACM,gCAAAA,UAAU,CAAC,CAAA;AAAG;yBAAC,EAC/B;AAAEtC,4BAAAA;AAAK,yBAAA,CAAA;;AAIT,wBAAA,MAAMmB,UAAAA,GAAa,MAAM4E,WAAAA,CAAY3E,YAAY,CAACyE,YAAAA,CAAAA;AAClDc,wBAAAA,eAAAA,CAAgBgB,IAAI,CAACxG,UAAAA,CAAAA;AAErBmF,wBAAAA,QAAAA,CAAS,eAAA,EAAiB;4BAAE9B,IAAAA,EAAMa,QAAAA;4BAAUmC,KAAAA,EAAOF,CAAAA;4BAAGxF,IAAAA,EAAMX;AAAW,yBAAA,CAAA;AACzE,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;AACd,oBAAA,MAAMqE,eAAerE,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA,CAAAA;AACrEqD,oBAAAA,YAAAA,CAAaiB,IAAI,CAAC;wBAAEnD,IAAAA,EAAM+C,GAAAA;wBAAK5E,OAAAA,EAAS+E;AAAa,qBAAA,CAAA;AACrDpB,oBAAAA,QAAAA,CAAS,YAAA,EAAc;AAAEiB,wBAAAA,GAAAA;wBAAKC,KAAAA,EAAOF,CAAAA;wBAAG3E,OAAAA,EAAS+E;AAAa,qBAAA,CAAA;AAChE,gBAAA;AACF,YAAA;;YAGA,IAAIf,eAAAA,CAAgB9B,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;gBACnE,MAAM1C,gBAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,YAAA;;AAGAwB,YAAAA,QAAAA,CAAS,iBAAA,EAAmB;AAC1B1E,gBAAAA,IAAAA,EAAM,MAAMhB,EAAAA,CAAGS,cAAc,CAACsF,eAAAA,EAAiB;AAAErF,oBAAAA,MAAAA,EAAQR,kBAAQS;AAAK,iBAAA,CAAA;gBACtEG,MAAAA,EAAQgF;AACV,aAAA,CAAA;QACF,CAAA,QAAU;;YAER,MAAMG,oBAAAA,CAAIe,MAAM,CAAChB,mBAAAA,CAAAA;AACnB,QAAA;AAEAT,QAAAA,GAAAA,CAAI0B,GAAG,EAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAMjD,QAAO/E,GAAY,EAAA;AACvB,QAAA,MAAM,EACJ4B,KAAAA,EAAO,EAAEf,EAAE,EAAE,EACbT,OAAAA,EAAS,EAAE+B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACnC,GAAGnC,GAAAA;AAEJ,QAAA,IAAIqF,kBAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;AACnE,YAAA,IAAI1E,EAAAA,EAAI;gBACN,OAAO,IAAI,CAACQ,cAAc,CAACrB,GAAAA,CAAAA;AAC7B,YAAA;YAEA,MAAM,IAAI6B,YAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;QAEA,MAAO3B,CAAAA,EAAAA,GAAK,IAAI,CAACqB,WAAW,GAAG,IAAI,CAAC2B,WAAU,EAAG7D,GAAAA,CAAAA;AACnD,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"admin-upload.js","sources":["../../../server/src/controllers/admin-upload.ts"],"sourcesContent":["import os from 'os';\nimport path from 'path';\nimport fse from 'fs-extra';\nimport _ from 'lodash';\nimport { errors, async } from '@strapi/utils';\n\nimport type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\nimport { validateBulkUpdateBody, validateUploadBody } from './validation/admin/upload';\nimport { findEntityAndCheckPermissions } from './utils/find-entity-and-check-permissions';\nimport { Config, FileInfo } from '../types';\nimport { prepareUploadRequest, type FileUploadError } from '../utils/mime-validation';\nimport type { UploadFileInfo } from '../../../shared/contracts/files';\nimport type { UrlFetchProgress } from '../services/file';\n\n/**\n * Minimum delay between two `file:progress` frames for the same URL.\n *\n * `fetchUrlToInputFile` reports once per streamed chunk (~8000 calls for a 512MB file at\n * 64KB chunks); at ~5 frames a second a 10s transfer costs ~50 frames, which is plenty for\n * a bar the user watches.\n */\nconst URL_FETCH_PROGRESS_INTERVAL_MS = 200;\n\nexport default {\n  async bulkUpdateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const { updates } = await validateBulkUpdateBody(body);\n    const uploadService = getService('upload');\n\n    const results = await async.map(\n      updates,\n      async ({ id, fileInfo }: { id: number; fileInfo: FileInfo }) => {\n        const { pm } = await findEntityAndCheckPermissions(\n          userAbility,\n          ACTIONS.update,\n          FILE_MODEL_UID,\n          id\n        );\n\n        const updated = await uploadService.updateFileInfo(id, fileInfo as any, { user });\n\n        // Sign file urls for private providers\n        const signedFile = await getService('file').signFileUrls(updated);\n\n        return pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n      }\n    );\n\n    ctx.body = results;\n  },\n\n  /**\n   * `PUT /upload/files/:id`\n   *\n   * Update the editable metadata (`fileInfo`) of an existing file. Also reached\n   * through the `POST /upload` multiplexer, which delegates here with the id in\n   * `ctx.query` — hence the dual read below, route params winning.\n   */\n  async updateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    const data = await validateUploadBody(body);\n\n    const file = await uploadService.updateFileInfo(id, data.fileInfo as any, { user });\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(file);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  /**\n   * `POST /upload/files/:id/replace`\n   *\n   * Replace the binary content of an existing file. Also reached through the\n   * `POST /upload` multiplexer, which delegates here with the id in `ctx.query`\n   * — hence the dual read below, route params winning.\n   */\n  async replaceFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files: filesInput } = {} },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    if (Array.isArray(filesInput) && filesInput.length > 1) {\n      throw new errors.ApplicationError('Cannot replace a file with multiple ones');\n    }\n\n    const files = Array.isArray(filesInput) ? filesInput[0] : filesInput;\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const data = (await validateUploadBody(filteredBody)) as { fileInfo: FileInfo };\n    const replacedFile = await uploadService.replace(id, { data, file: validFiles[0] }, { user });\n\n    // Regenerate AI metadata for image replacements so the alt text / caption\n    // reflect the new file content. Mirrors the post-upload hook in\n    // `uploadFiles`; failure is logged and swallowed to keep the replace flow\n    // resilient when the AI provider is unavailable.\n    const aiMetadataService = getService('aiMetadata');\n    if (replacedFile?.mime?.startsWith('image/') && (await aiMetadataService.isEnabled())) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles([replacedFile]);\n        await aiMetadataService.updateFilesWithAIMetadata([replacedFile], metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed on replace, proceeding without it', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(replacedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  async uploadFiles(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const isMultipleFiles = validFiles.length > 1;\n    const data = await validateUploadBody(filteredBody, isMultipleFiles);\n\n    let filesArray = validFiles;\n\n    if (\n      data.fileInfo &&\n      Array.isArray(data.fileInfo) &&\n      filesArray.length === data.fileInfo.length\n    ) {\n      // Reorder filesArray to match data.fileInfo order\n      const alignedFilesArray = data.fileInfo\n        .map((info) => {\n          return filesArray.find((file) => file.originalFilename === info.name);\n        })\n        .filter(Boolean) as any[];\n\n      filesArray = alignedFilesArray;\n    }\n\n    // Upload files first to get thumbnails\n    const uploadedFiles = await uploadService.upload({ data, files: filesArray }, { user });\n    if (uploadedFiles.some((file) => file.mime?.startsWith('image/'))) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    const aiMetadataService = getService('aiMetadata');\n\n    // AFTER upload - generate AI metadata for images\n    if (await aiMetadataService.isEnabled()) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles(uploadedFiles);\n        // Update the uploaded files with AI metadata\n        await aiMetadataService.updateFilesWithAIMetadata(uploadedFiles, metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed, proceeding without AI enhancements', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFiles = await async.map(uploadedFiles, getService('file').signFileUrls);\n\n    ctx.body = await pm.sanitizeOutput(signedFiles, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/files`\n   *\n   * Upload a single file and return the created File.\n   *\n   * Accepts one file per request (multipart `files` + `fileInfo`) and returns a\n   * single `File` object. Unlike `uploadFiles`, it does **not** run AI metadata\n   * generation inline — that responsibility is decoupled and will be handled by a\n   * background job. Auth and permission checks mirror `POST /upload`.\n   */\n  async uploadFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    // Accept a single file per request; ignore any extras defensively.\n    const file = Array.isArray(files) ? files[0] : files;\n    const fileName = file.originalFilename || 'unknown';\n\n    // Parse the single fileInfo object from the multipart body.\n    let fileInfo: UploadFileInfo = {\n      name: fileName,\n      caption: null,\n      alternativeText: null,\n      folder: null,\n    };\n    if (body?.fileInfo) {\n      const raw = body.fileInfo;\n      if (typeof raw === 'string') {\n        fileInfo = JSON.parse(raw);\n      } else if (Array.isArray(raw)) {\n        fileInfo = (typeof raw[0] === 'string' ? JSON.parse(raw[0]) : raw[0]) as UploadFileInfo;\n      } else {\n        fileInfo = raw as UploadFileInfo;\n      }\n    }\n\n    // Validate this single file using security checks.\n    const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n      file,\n      { fileInfo: JSON.stringify(fileInfo) },\n      strapi\n    );\n\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0]?.message || 'Validation failed');\n    }\n\n    const data = await validateUploadBody({ fileInfo }, false);\n    const [uploadedFile] = await uploadService.upload({ data, files: [validFiles[0]] }, { user });\n\n    if (uploadedFile.mime?.startsWith('image/')) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    // No inline AI metadata generation — intentionally decoupled for the async job.\n\n    // Sign file url for private providers.\n    const signedFile = await getService('file').signFileUrls(uploadedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/actions/upload-from-urls`\n   *\n   * Upload files from URLs with SSE streaming for per-file progress\n   *\n   * Accepts JSON body with URLs and fetches them server-side.\n   * Streams Server-Sent Events as each URL is fetched and uploaded:\n   * - file:fetching  — when starting to fetch a URL\n   * - file:progress  — throttled byte progress of the remote → server temp file transfer\n   * - file:uploading — when upload starts for a fetched file\n   * - file:complete  — when a file is successfully uploaded\n   * - file:error     — when a URL fetch or upload fails\n   * - stream:complete — final summary with all results\n   */\n  async uploadFromUrls(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const fileService = getService('file');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    // Parse and validate request body\n    const { urls, folderId } = body as { urls?: string[]; folderId?: number | null };\n\n    if (!urls || !Array.isArray(urls) || urls.length === 0) {\n      throw new errors.ApplicationError('URLs are required');\n    }\n\n    if (urls.length > 20) {\n      throw new errors.ApplicationError('Maximum 20 URLs allowed per request');\n    }\n\n    // Take manual control of the response for SSE streaming\n    ctx.respond = false;\n    const res = ctx.res;\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n    });\n\n    const writeSSE = (event: string, data: Record<string, unknown>) => {\n      res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n    };\n\n    const total = urls.length;\n    const uploadErrors: FileUploadError[] = [];\n    const successfulFiles: any[] = [];\n\n    // Create temp directory for fetched files\n    const tmpWorkingDirectory = await fse.mkdtemp(path.join(os.tmpdir(), 'strapi-url-upload-'));\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n\n    try {\n      // Process each URL sequentially\n      for (let i = 0; i < urls.length; i += 1) {\n        const url = urls[i];\n\n        writeSSE('file:fetching', { url, index: i, total });\n\n        try {\n          // `fetchUrlToInputFile` reports raw, unthrottled progress — coalescing it into a\n          // sane frame rate is the caller's job. State is per URL: the loop is sequential.\n          let lastProgressAt = 0;\n          let hasAnnouncedSize = false;\n          let hasReachedTotal = false;\n\n          const onFetchProgress = ({ bytesWritten, totalBytes }: UrlFetchProgress) => {\n            // The frame that reaches the total always goes out, or a throttled last chunk\n            // leaves the row short of 100% until `file:complete`.\n            const isFinal = !hasReachedTotal && totalBytes !== null && bytesWritten >= totalBytes;\n            if (\n              hasAnnouncedSize &&\n              !isFinal &&\n              Date.now() - lastProgressAt < URL_FETCH_PROGRESS_INTERVAL_MS\n            ) {\n              return;\n            }\n\n            hasAnnouncedSize = true;\n            hasReachedTotal = hasReachedTotal || isFinal;\n            lastProgressAt = Date.now();\n\n            writeSSE('file:progress', {\n              index: i,\n              loadedBytes: bytesWritten,\n              totalBytes,\n              phase: 'fetch',\n            });\n          };\n\n          // Fetch URL to temp file\n          const { file } = await fileService.fetchUrlToInputFile(\n            url,\n            tmpWorkingDirectory,\n            sizeLimit,\n            onFetchProgress\n          );\n          const fileName = file.originalFilename;\n\n          writeSSE('file:uploading', {\n            name: fileName,\n            index: i,\n            total,\n            size: file.size,\n          });\n\n          // Validate using security checks\n          const fileInfo: UploadFileInfo = {\n            name: fileName,\n            caption: null,\n            alternativeText: null,\n            folder: folderId ?? null,\n          };\n\n          const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n            file,\n            { fileInfo: JSON.stringify(fileInfo) },\n            strapi\n          );\n\n          if (validFiles.length === 0) {\n            const errorMessage = validationErrors[0]?.message || 'Validation failed';\n            uploadErrors.push({ name: fileName, message: errorMessage });\n            writeSSE('file:error', { name: fileName, url, index: i, message: errorMessage });\n          } else {\n            // Upload the file\n            const data = await validateUploadBody({ fileInfo }, false);\n            const [uploadedFile] = await uploadService.upload(\n              { data, files: [validFiles[0]] },\n              { user }\n            );\n\n            // Sign file url\n            const signedFile = await fileService.signFileUrls(uploadedFile);\n            successfulFiles.push(signedFile);\n\n            writeSSE('file:complete', { name: fileName, index: i, file: signedFile });\n          }\n        } catch (error) {\n          const errorMessage = error instanceof Error ? error.message : String(error);\n          uploadErrors.push({ name: url, message: errorMessage });\n          writeSSE('file:error', { url, index: i, message: errorMessage });\n        }\n      }\n\n      // Track image upload metric once if any images were uploaded\n      if (successfulFiles.some((file) => file.mime?.startsWith('image/'))) {\n        await getService('metrics').trackUsage('didUploadImage');\n      }\n\n      // Send final stream summary\n      writeSSE('stream:complete', {\n        data: await pm.sanitizeOutput(successfulFiles, { action: ACTIONS.read }),\n        errors: uploadErrors,\n      });\n    } finally {\n      // Clean up temp directory\n      await fse.remove(tmpWorkingDirectory);\n    }\n\n    res.end();\n  },\n\n  // TODO: split into multiple endpoints\n  async upload(ctx: Context) {\n    const {\n      query: { id },\n      request: { files: { files } = {} },\n    } = ctx;\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      if (id) {\n        return this.updateFileInfo(ctx);\n      }\n\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    await (id ? this.replaceFile : this.uploadFiles)(ctx);\n  },\n};\n"],"names":["URL_FETCH_PROGRESS_INTERVAL_MS","bulkUpdateFileInfo","ctx","state","userAbility","user","request","body","updates","validateBulkUpdateBody","uploadService","getService","results","async","map","id","fileInfo","pm","findEntityAndCheckPermissions","ACTIONS","update","FILE_MODEL_UID","updated","updateFileInfo","signedFile","signFileUrls","sanitizeOutput","action","read","params","query","errors","ValidationError","data","validateUploadBody","file","replaceFile","files","filesInput","Array","isArray","length","ApplicationError","validFiles","filteredBody","validationErrors","prepareUploadRequest","strapi","message","replacedFile","replace","aiMetadataService","mime","startsWith","isEnabled","metadataResults","processFiles","updateFilesWithAIMetadata","error","log","warn","Error","String","uploadFiles","service","createPermissionsManager","ability","create","model","isAllowed","forbidden","isMultipleFiles","filesArray","alignedFilesArray","info","find","originalFilename","name","filter","Boolean","uploadedFiles","upload","some","trackUsage","signedFiles","status","uploadFile","_","isEmpty","size","fileName","caption","alternativeText","folder","raw","JSON","parse","stringify","uploadedFile","uploadFromUrls","fileService","urls","folderId","respond","res","writeHead","Connection","writeSSE","event","write","total","uploadErrors","successfulFiles","tmpWorkingDirectory","fse","mkdtemp","path","join","os","tmpdir","sizeLimit","config","get","i","url","index","lastProgressAt","hasAnnouncedSize","hasReachedTotal","onFetchProgress","bytesWritten","totalBytes","isFinal","Date","now","loadedBytes","phase","fetchUrlToInputFile","errorMessage","push","remove","end"],"mappings":";;;;;;;;;;;;;;;;;;;;AAiBA;;;;;;AAMC,IACD,MAAMA,8BAAAA,GAAiC,GAAA;AAEvC,kBAAe;AACb,IAAA,MAAMC,oBAAmBC,GAAY,EAAA;AACnC,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAM,EAAEM,OAAO,EAAE,GAAG,MAAMC,6BAAAA,CAAuBF,IAAAA,CAAAA;AACjD,QAAA,MAAMG,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;QAEjC,MAAMC,OAAAA,GAAU,MAAMC,WAAAA,CAAMC,GAAG,CAC7BN,OAAAA,EACA,OAAO,EAAEO,EAAE,EAAEC,QAAQ,EAAsC,GAAA;YACzD,MAAM,EAAEC,EAAE,EAAE,GAAG,MAAMC,4DACnBd,WAAAA,EACAe,iBAAAA,CAAQC,MAAM,EACdC,wBAAAA,EACAN,EAAAA,CAAAA;AAGF,YAAA,MAAMO,UAAU,MAAMZ,aAAAA,CAAca,cAAc,CAACR,IAAIC,QAAAA,EAAiB;AAAEX,gBAAAA;AAAK,aAAA,CAAA;;AAG/E,YAAA,MAAMmB,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACH,OAAAA,CAAAA;YAEzD,OAAOL,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,gBAAAA,MAAAA,EAAQR,kBAAQS;AAAK,aAAA,CAAA;AAC9D,QAAA,CAAA,CAAA;AAGF1B,QAAAA,GAAAA,CAAIK,IAAI,GAAGK,OAAAA;AACb,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMW,gBAAerB,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,YAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,4DACnBd,WAAAA,EACAe,iBAAAA,CAAQC,MAAM,EACdC,wBAAAA,EACAN,EAAAA,CAAAA;QAGF,MAAMkB,IAAAA,GAAO,MAAMC,yBAAAA,CAAmB3B,IAAAA,CAAAA;QAEtC,MAAM4B,IAAAA,GAAO,MAAMzB,aAAAA,CAAca,cAAc,CAACR,EAAAA,EAAIkB,IAAAA,CAAKjB,QAAQ,EAAS;AAAEX,YAAAA;AAAK,SAAA,CAAA;;AAGjF,QAAA,MAAMmB,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACU,IAAAA,CAAAA;AAEzDjC,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMQ,aAAYlC,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,OAAOC,UAAU,EAAE,GAAG,EAAE,EAAE,EACrD,GAAGpC,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,YAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,4DACnBd,WAAAA,EACAe,iBAAAA,CAAQC,MAAM,EACdC,wBAAAA,EACAN,EAAAA,CAAAA;AAGF,QAAA,IAAIwB,MAAMC,OAAO,CAACF,eAAeA,UAAAA,CAAWG,MAAM,GAAG,CAAA,EAAG;YACtD,MAAM,IAAIV,YAAAA,CAAOW,gBAAgB,CAAC,0CAAA,CAAA;AACpC,QAAA;QAEA,MAAML,KAAAA,GAAQE,MAAMC,OAAO,CAACF,cAAcA,UAAU,CAAC,EAAE,GAAGA,UAAAA;AAE1D,QAAA,MAAM,EACJK,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,mCAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,aAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMf,IAAAA,GAAQ,MAAMC,yBAAAA,CAAmBU,YAAAA,CAAAA;AACvC,QAAA,MAAMK,YAAAA,GAAe,MAAMvC,aAAAA,CAAcwC,OAAO,CAACnC,EAAAA,EAAI;AAAEkB,YAAAA,IAAAA;YAAME,IAAAA,EAAMQ,UAAU,CAAC,CAAA;SAAG,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;;;;;AAM3F,QAAA,MAAM8C,oBAAoBxC,gBAAAA,CAAW,YAAA,CAAA;AACrC,QAAA,IAAIsC,cAAcG,IAAAA,EAAMC,UAAAA,CAAW,aAAc,MAAMF,iBAAAA,CAAkBG,SAAS,EAAA,EAAK;YACrF,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAAC;AAACP,oBAAAA;AAAa,iBAAA,CAAA;gBAC3E,MAAME,iBAAAA,CAAkBM,yBAAyB,CAAC;AAACR,oBAAAA;AAAa,iBAAA,EAAEM,eAAAA,EAAiBlD,IAAAA,CAAAA;AACrF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,iEAAA,EAAmE;AACjFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;AAGA,QAAA,MAAMlC,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACwB,YAAAA,CAAAA;AAEzD/C,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA,IAAA,MAAMmC,aAAY7D,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,kBAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,MAAM,EACJ3B,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,mCAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,aAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMuB,eAAAA,GAAkB5B,UAAAA,CAAWF,MAAM,GAAG,CAAA;QAC5C,MAAMR,IAAAA,GAAO,MAAMC,yBAAAA,CAAmBU,YAAAA,EAAc2B,eAAAA,CAAAA;AAEpD,QAAA,IAAIC,UAAAA,GAAa7B,UAAAA;AAEjB,QAAA,IACEV,KAAKjB,QAAQ,IACbuB,KAAAA,CAAMC,OAAO,CAACP,IAAAA,CAAKjB,QAAQ,CAAA,IAC3BwD,UAAAA,CAAW/B,MAAM,KAAKR,IAAAA,CAAKjB,QAAQ,CAACyB,MAAM,EAC1C;;AAEA,YAAA,MAAMgC,oBAAoBxC,IAAAA,CAAKjB,QAAQ,CACpCF,GAAG,CAAC,CAAC4D,IAAAA,GAAAA;gBACJ,OAAOF,UAAAA,CAAWG,IAAI,CAAC,CAACxC,OAASA,IAAAA,CAAKyC,gBAAgB,KAAKF,IAAAA,CAAKG,IAAI,CAAA;AACtE,YAAA,CAAA,CAAA,CACCC,MAAM,CAACC,OAAAA,CAAAA;YAEVP,UAAAA,GAAaC,iBAAAA;AACf,QAAA;;AAGA,QAAA,MAAMO,aAAAA,GAAgB,MAAMtE,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAOmC;SAAW,EAAG;AAAEnE,YAAAA;AAAK,SAAA,CAAA;QACrF,IAAI2E,aAAAA,CAAcE,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;YACjE,MAAM1C,gBAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;AAEA,QAAA,MAAMhC,oBAAoBxC,gBAAAA,CAAW,YAAA,CAAA;;QAGrC,IAAI,MAAMwC,iBAAAA,CAAkBG,SAAS,EAAA,EAAI;YACvC,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAACwB,aAAAA,CAAAA;;AAE7D,gBAAA,MAAM7B,iBAAAA,CAAkBM,yBAAyB,CAACuB,aAAAA,EAAezB,eAAAA,EAAiBlD,IAAAA,CAAAA;AACpF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,mEAAA,EAAqE;AACnFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;QAGA,MAAM0B,WAAAA,GAAc,MAAMvE,WAAAA,CAAMC,GAAG,CAACkE,aAAAA,EAAerE,gBAAAA,CAAW,QAAQc,YAAY,CAAA;AAElFvB,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAAC0D,WAAAA,EAAa;AAAEzD,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACvE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;MAUA,MAAMC,YAAWpF,GAAY,EAAA;QAC3B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,kBAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,IAAIiB,kBAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;YACnE,MAAM,IAAI1D,YAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;;QAGA,MAAMP,IAAAA,GAAOI,MAAMC,OAAO,CAACH,SAASA,KAAK,CAAC,EAAE,GAAGA,KAAAA;QAC/C,MAAMqD,QAAAA,GAAWvD,IAAAA,CAAKyC,gBAAgB,IAAI,SAAA;;AAG1C,QAAA,IAAI5D,QAAAA,GAA2B;YAC7B6D,IAAAA,EAAMa,QAAAA;YACNC,OAAAA,EAAS,IAAA;YACTC,eAAAA,EAAiB,IAAA;YACjBC,MAAAA,EAAQ;AACV,SAAA;AACA,QAAA,IAAItF,MAAMS,QAAAA,EAAU;YAClB,MAAM8E,GAAAA,GAAMvF,KAAKS,QAAQ;YACzB,IAAI,OAAO8E,QAAQ,QAAA,EAAU;gBAC3B9E,QAAAA,GAAW+E,IAAAA,CAAKC,KAAK,CAACF,GAAAA,CAAAA;AACxB,YAAA,CAAA,MAAO,IAAIvD,KAAAA,CAAMC,OAAO,CAACsD,GAAAA,CAAAA,EAAM;AAC7B9E,gBAAAA,QAAAA,GAAY,OAAO8E,GAAG,CAAC,CAAA,CAAE,KAAK,QAAA,GAAWC,IAAAA,CAAKC,KAAK,CAACF,GAAG,CAAC,CAAA,CAAE,CAAA,GAAIA,GAAG,CAAC,CAAA,CAAE;YACtE,CAAA,MAAO;gBACL9E,QAAAA,GAAW8E,GAAAA;AACb,YAAA;AACF,QAAA;;QAGA,MAAM,EAAEnD,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,mCAAAA,CACrDX,IAAAA,EACA;YAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;SAAU,EACrC+B,MAAAA,CAAAA;QAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,aAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA,CAAA;AACnE,QAAA;QAEA,MAAMf,IAAAA,GAAO,MAAMC,yBAAAA,CAAmB;AAAElB,YAAAA;SAAS,EAAG,KAAA,CAAA;AACpD,QAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAO;AAACM,gBAAAA,UAAU,CAAC,CAAA;AAAG;SAAC,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;AAE3F,QAAA,IAAI6F,YAAAA,CAAa9C,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,EAAW;YAC3C,MAAM1C,gBAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;;;AAKA,QAAA,MAAM3D,UAAAA,GAAa,MAAMb,gBAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACyE,YAAAA,CAAAA;AAEzDhG,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,kBAAQS;AAAK,SAAA,CAAA;AACtE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;;;;;MAcA,MAAMc,gBAAejG,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,gBAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMyF,cAAczF,gBAAAA,CAAW,MAAA,CAAA;AAC/B,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,kBAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;;AAGA,QAAA,MAAM,EAAE+B,IAAI,EAAEC,QAAQ,EAAE,GAAG/F,IAAAA;QAE3B,IAAI,CAAC8F,IAAAA,IAAQ,CAAC9D,KAAAA,CAAMC,OAAO,CAAC6D,IAAAA,CAAAA,IAASA,IAAAA,CAAK5D,MAAM,KAAK,CAAA,EAAG;YACtD,MAAM,IAAIV,YAAAA,CAAOW,gBAAgB,CAAC,mBAAA,CAAA;AACpC,QAAA;QAEA,IAAI2D,IAAAA,CAAK5D,MAAM,GAAG,EAAA,EAAI;YACpB,MAAM,IAAIV,YAAAA,CAAOW,gBAAgB,CAAC,qCAAA,CAAA;AACpC,QAAA;;AAGAxC,QAAAA,GAAAA,CAAIqG,OAAO,GAAG,KAAA;QACd,MAAMC,GAAAA,GAAMtG,IAAIsG,GAAG;QACnBA,GAAAA,CAAIC,SAAS,CAAC,GAAA,EAAK;YACjB,cAAA,EAAgB,mBAAA;YAChB,eAAA,EAAiB,UAAA;YACjBC,UAAAA,EAAY;AACd,SAAA,CAAA;QAEA,MAAMC,QAAAA,GAAW,CAACC,KAAAA,EAAe3E,IAAAA,GAAAA;AAC/BuE,YAAAA,GAAAA,CAAIK,KAAK,CAAC,CAAC,OAAO,EAAED,KAAAA,CAAM,QAAQ,EAAEb,IAAAA,CAAKE,SAAS,CAAChE,IAAAA,CAAAA,CAAM,IAAI,CAAC,CAAA;AAChE,QAAA,CAAA;QAEA,MAAM6E,KAAAA,GAAQT,KAAK5D,MAAM;AACzB,QAAA,MAAMsE,eAAkC,EAAE;AAC1C,QAAA,MAAMC,kBAAyB,EAAE;;QAGjC,MAAMC,mBAAAA,GAAsB,MAAMC,oBAAAA,CAAIC,OAAO,CAACC,sBAAKC,IAAI,CAACC,mBAAAA,CAAGC,MAAM,EAAA,EAAI,oBAAA,CAAA,CAAA;QACrE,MAAM,EAAEC,SAAS,EAAE,GAAGzE,OAAO0E,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;QAEhD,IAAI;;YAEF,IAAK,IAAIC,IAAI,CAAA,EAAGA,CAAAA,GAAItB,KAAK5D,MAAM,EAAEkF,KAAK,CAAA,CAAG;gBACvC,MAAMC,GAAAA,GAAMvB,IAAI,CAACsB,CAAAA,CAAE;AAEnBhB,gBAAAA,QAAAA,CAAS,eAAA,EAAiB;AAAEiB,oBAAAA,GAAAA;oBAAKC,KAAAA,EAAOF,CAAAA;AAAGb,oBAAAA;AAAM,iBAAA,CAAA;gBAEjD,IAAI;;;AAGF,oBAAA,IAAIgB,cAAAA,GAAiB,CAAA;AACrB,oBAAA,IAAIC,gBAAAA,GAAmB,KAAA;AACvB,oBAAA,IAAIC,eAAAA,GAAkB,KAAA;AAEtB,oBAAA,MAAMC,kBAAkB,CAAC,EAAEC,YAAY,EAAEC,UAAU,EAAoB,GAAA;;;AAGrE,wBAAA,MAAMC,OAAAA,GAAU,CAACJ,eAAAA,IAAmBG,UAAAA,KAAe,QAAQD,YAAAA,IAAgBC,UAAAA;AAC3E,wBAAA,IACEJ,oBACA,CAACK,OAAAA,IACDC,KAAKC,GAAG,EAAA,GAAKR,iBAAiB9H,8BAAAA,EAC9B;AACA,4BAAA;AACF,wBAAA;wBAEA+H,gBAAAA,GAAmB,IAAA;AACnBC,wBAAAA,eAAAA,GAAkBA,eAAAA,IAAmBI,OAAAA;AACrCN,wBAAAA,cAAAA,GAAiBO,KAAKC,GAAG,EAAA;AAEzB3B,wBAAAA,QAAAA,CAAS,eAAA,EAAiB;4BACxBkB,KAAAA,EAAOF,CAAAA;4BACPY,WAAAA,EAAaL,YAAAA;AACbC,4BAAAA,UAAAA;4BACAK,KAAAA,EAAO;AACT,yBAAA,CAAA;AACF,oBAAA,CAAA;;oBAGA,MAAM,EAAErG,IAAI,EAAE,GAAG,MAAMiE,YAAYqC,mBAAmB,CACpDb,GAAAA,EACAX,mBAAAA,EACAO,SAAAA,EACAS,eAAAA,CAAAA;oBAEF,MAAMvC,QAAAA,GAAWvD,KAAKyC,gBAAgB;AAEtC+B,oBAAAA,QAAAA,CAAS,gBAAA,EAAkB;wBACzB9B,IAAAA,EAAMa,QAAAA;wBACNmC,KAAAA,EAAOF,CAAAA;AACPb,wBAAAA,KAAAA;AACArB,wBAAAA,IAAAA,EAAMtD,KAAKsD;AACb,qBAAA,CAAA;;AAGA,oBAAA,MAAMzE,QAAAA,GAA2B;wBAC/B6D,IAAAA,EAAMa,QAAAA;wBACNC,OAAAA,EAAS,IAAA;wBACTC,eAAAA,EAAiB,IAAA;AACjBC,wBAAAA,MAAAA,EAAQS,QAAAA,IAAY;AACtB,qBAAA;oBAEA,MAAM,EAAE3D,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,mCAAAA,CACrDX,IAAAA,EACA;wBAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;qBAAU,EACrC+B,MAAAA,CAAAA;oBAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;AAC3B,wBAAA,MAAMiG,YAAAA,GAAe7F,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA;AACrD+D,wBAAAA,YAAAA,CAAa4B,IAAI,CAAC;4BAAE9D,IAAAA,EAAMa,QAAAA;4BAAU1C,OAAAA,EAAS0F;AAAa,yBAAA,CAAA;AAC1D/B,wBAAAA,QAAAA,CAAS,YAAA,EAAc;4BAAE9B,IAAAA,EAAMa,QAAAA;AAAUkC,4BAAAA,GAAAA;4BAAKC,KAAAA,EAAOF,CAAAA;4BAAG3E,OAAAA,EAAS0F;AAAa,yBAAA,CAAA;oBAChF,CAAA,MAAO;;wBAEL,MAAMzG,IAAAA,GAAO,MAAMC,yBAAAA,CAAmB;AAAElB,4BAAAA;yBAAS,EAAG,KAAA,CAAA;AACpD,wBAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAC/C;AAAEhD,4BAAAA,IAAAA;4BAAMI,KAAAA,EAAO;AAACM,gCAAAA,UAAU,CAAC,CAAA;AAAG;yBAAC,EAC/B;AAAEtC,4BAAAA;AAAK,yBAAA,CAAA;;AAIT,wBAAA,MAAMmB,UAAAA,GAAa,MAAM4E,WAAAA,CAAY3E,YAAY,CAACyE,YAAAA,CAAAA;AAClDc,wBAAAA,eAAAA,CAAgB2B,IAAI,CAACnH,UAAAA,CAAAA;AAErBmF,wBAAAA,QAAAA,CAAS,eAAA,EAAiB;4BAAE9B,IAAAA,EAAMa,QAAAA;4BAAUmC,KAAAA,EAAOF,CAAAA;4BAAGxF,IAAAA,EAAMX;AAAW,yBAAA,CAAA;AACzE,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;AACd,oBAAA,MAAMgF,eAAehF,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA,CAAAA;AACrEqD,oBAAAA,YAAAA,CAAa4B,IAAI,CAAC;wBAAE9D,IAAAA,EAAM+C,GAAAA;wBAAK5E,OAAAA,EAAS0F;AAAa,qBAAA,CAAA;AACrD/B,oBAAAA,QAAAA,CAAS,YAAA,EAAc;AAAEiB,wBAAAA,GAAAA;wBAAKC,KAAAA,EAAOF,CAAAA;wBAAG3E,OAAAA,EAAS0F;AAAa,qBAAA,CAAA;AAChE,gBAAA;AACF,YAAA;;YAGA,IAAI1B,eAAAA,CAAgB9B,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;gBACnE,MAAM1C,gBAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,YAAA;;AAGAwB,YAAAA,QAAAA,CAAS,iBAAA,EAAmB;AAC1B1E,gBAAAA,IAAAA,EAAM,MAAMhB,EAAAA,CAAGS,cAAc,CAACsF,eAAAA,EAAiB;AAAErF,oBAAAA,MAAAA,EAAQR,kBAAQS;AAAK,iBAAA,CAAA;gBACtEG,MAAAA,EAAQgF;AACV,aAAA,CAAA;QACF,CAAA,QAAU;;YAER,MAAMG,oBAAAA,CAAI0B,MAAM,CAAC3B,mBAAAA,CAAAA;AACnB,QAAA;AAEAT,QAAAA,GAAAA,CAAIqC,GAAG,EAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAM5D,QAAO/E,GAAY,EAAA;AACvB,QAAA,MAAM,EACJ4B,KAAAA,EAAO,EAAEf,EAAE,EAAE,EACbT,OAAAA,EAAS,EAAE+B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACnC,GAAGnC,GAAAA;AAEJ,QAAA,IAAIqF,kBAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;AACnE,YAAA,IAAI1E,EAAAA,EAAI;gBACN,OAAO,IAAI,CAACQ,cAAc,CAACrB,GAAAA,CAAAA;AAC7B,YAAA;YAEA,MAAM,IAAI6B,YAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;QAEA,MAAO3B,CAAAA,EAAAA,GAAK,IAAI,CAACqB,WAAW,GAAG,IAAI,CAAC2B,WAAU,EAAG7D,GAAAA,CAAAA;AACnD,IAAA;AACF,CAAA;;;;"}

package/dist/server/controllers/admin-upload.mjs

@@ -9,6 +9,13 @@ import { validateUploadBody, validateBulkUpdateBody } from './validation/admin/u
 import { findEntityAndCheckPermissions } from './utils/find-entity-and-check-permissions.mjs';
 import { prepareUploadRequest } from '../utils/mime-validation.mjs';
 
+/**
+ * Minimum delay between two `file:progress` frames for the same URL.
+ *
+ * `fetchUrlToInputFile` reports once per streamed chunk (~8000 calls for a 512MB file at
+ * 64KB chunks); at ~5 frames a second a 10s transfer costs ~50 frames, which is plenty for
+ * a bar the user watches.
+ */ const URL_FETCH_PROGRESS_INTERVAL_MS = 200;
 var adminUpload = {
     async bulkUpdateFileInfo (ctx) {
         const { state: { userAbility, user }, request: { body } } = ctx;
@@ -240,6 +247,7 @@ var adminUpload = {
    * Accepts JSON body with URLs and fetches them server-side.
    * Streams Server-Sent Events as each URL is fetched and uploaded:
    * - file:fetching  — when starting to fetch a URL
+   * - file:progress  — throttled byte progress of the remote → server temp file transfer
    * - file:uploading — when upload starts for a fetched file
    * - file:complete  — when a file is successfully uploaded
    * - file:error     — when a URL fetch or upload fails
@@ -291,8 +299,30 @@ var adminUpload = {
                     total
                 });
                 try {
+                    // `fetchUrlToInputFile` reports raw, unthrottled progress — coalescing it into a
+                    // sane frame rate is the caller's job. State is per URL: the loop is sequential.
+                    let lastProgressAt = 0;
+                    let hasAnnouncedSize = false;
+                    let hasReachedTotal = false;
+                    const onFetchProgress = ({ bytesWritten, totalBytes })=>{
+                        // The frame that reaches the total always goes out, or a throttled last chunk
+                        // leaves the row short of 100% until `file:complete`.
+                        const isFinal = !hasReachedTotal && totalBytes !== null && bytesWritten >= totalBytes;
+                        if (hasAnnouncedSize && !isFinal && Date.now() - lastProgressAt < URL_FETCH_PROGRESS_INTERVAL_MS) {
+                            return;
+                        }
+                        hasAnnouncedSize = true;
+                        hasReachedTotal = hasReachedTotal || isFinal;
+                        lastProgressAt = Date.now();
+                        writeSSE('file:progress', {
+                            index: i,
+                            loadedBytes: bytesWritten,
+                            totalBytes,
+                            phase: 'fetch'
+                        });
+                    };
                     // Fetch URL to temp file
-                    const { file } = await fileService.fetchUrlToInputFile(url, tmpWorkingDirectory, sizeLimit);
+                    const { file } = await fileService.fetchUrlToInputFile(url, tmpWorkingDirectory, sizeLimit, onFetchProgress);
                     const fileName = file.originalFilename;
                     writeSSE('file:uploading', {
                         name: fileName,

package/dist/server/controllers/admin-upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-upload.mjs","sources":["../../../server/src/controllers/admin-upload.ts"],"sourcesContent":["import os from 'os';\nimport path from 'path';\nimport fse from 'fs-extra';\nimport _ from 'lodash';\nimport { errors, async } from '@strapi/utils';\n\nimport type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\nimport { validateBulkUpdateBody, validateUploadBody } from './validation/admin/upload';\nimport { findEntityAndCheckPermissions } from './utils/find-entity-and-check-permissions';\nimport { Config, FileInfo } from '../types';\nimport { prepareUploadRequest, type FileUploadError } from '../utils/mime-validation';\nimport type { UploadFileInfo } from '../../../shared/contracts/files';\n\nexport default {\n  async bulkUpdateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const { updates } = await validateBulkUpdateBody(body);\n    const uploadService = getService('upload');\n\n    const results = await async.map(\n      updates,\n      async ({ id, fileInfo }: { id: number; fileInfo: FileInfo }) => {\n        const { pm } = await findEntityAndCheckPermissions(\n          userAbility,\n          ACTIONS.update,\n          FILE_MODEL_UID,\n          id\n        );\n\n        const updated = await uploadService.updateFileInfo(id, fileInfo as any, { user });\n\n        // Sign file urls for private providers\n        const signedFile = await getService('file').signFileUrls(updated);\n\n        return pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n      }\n    );\n\n    ctx.body = results;\n  },\n\n  /**\n   * `PUT /upload/files/:id`\n   *\n   * Update the editable metadata (`fileInfo`) of an existing file. Also reached\n   * through the `POST /upload` multiplexer, which delegates here with the id in\n   * `ctx.query` — hence the dual read below, route params winning.\n   */\n  async updateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    const data = await validateUploadBody(body);\n\n    const file = await uploadService.updateFileInfo(id, data.fileInfo as any, { user });\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(file);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  /**\n   * `POST /upload/files/:id/replace`\n   *\n   * Replace the binary content of an existing file. Also reached through the\n   * `POST /upload` multiplexer, which delegates here with the id in `ctx.query`\n   * — hence the dual read below, route params winning.\n   */\n  async replaceFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files: filesInput } = {} },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    if (Array.isArray(filesInput) && filesInput.length > 1) {\n      throw new errors.ApplicationError('Cannot replace a file with multiple ones');\n    }\n\n    const files = Array.isArray(filesInput) ? filesInput[0] : filesInput;\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const data = (await validateUploadBody(filteredBody)) as { fileInfo: FileInfo };\n    const replacedFile = await uploadService.replace(id, { data, file: validFiles[0] }, { user });\n\n    // Regenerate AI metadata for image replacements so the alt text / caption\n    // reflect the new file content. Mirrors the post-upload hook in\n    // `uploadFiles`; failure is logged and swallowed to keep the replace flow\n    // resilient when the AI provider is unavailable.\n    const aiMetadataService = getService('aiMetadata');\n    if (replacedFile?.mime?.startsWith('image/') && (await aiMetadataService.isEnabled())) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles([replacedFile]);\n        await aiMetadataService.updateFilesWithAIMetadata([replacedFile], metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed on replace, proceeding without it', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(replacedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  async uploadFiles(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const isMultipleFiles = validFiles.length > 1;\n    const data = await validateUploadBody(filteredBody, isMultipleFiles);\n\n    let filesArray = validFiles;\n\n    if (\n      data.fileInfo &&\n      Array.isArray(data.fileInfo) &&\n      filesArray.length === data.fileInfo.length\n    ) {\n      // Reorder filesArray to match data.fileInfo order\n      const alignedFilesArray = data.fileInfo\n        .map((info) => {\n          return filesArray.find((file) => file.originalFilename === info.name);\n        })\n        .filter(Boolean) as any[];\n\n      filesArray = alignedFilesArray;\n    }\n\n    // Upload files first to get thumbnails\n    const uploadedFiles = await uploadService.upload({ data, files: filesArray }, { user });\n    if (uploadedFiles.some((file) => file.mime?.startsWith('image/'))) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    const aiMetadataService = getService('aiMetadata');\n\n    // AFTER upload - generate AI metadata for images\n    if (await aiMetadataService.isEnabled()) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles(uploadedFiles);\n        // Update the uploaded files with AI metadata\n        await aiMetadataService.updateFilesWithAIMetadata(uploadedFiles, metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed, proceeding without AI enhancements', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFiles = await async.map(uploadedFiles, getService('file').signFileUrls);\n\n    ctx.body = await pm.sanitizeOutput(signedFiles, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/files`\n   *\n   * Upload a single file and return the created File.\n   *\n   * Accepts one file per request (multipart `files` + `fileInfo`) and returns a\n   * single `File` object. Unlike `uploadFiles`, it does **not** run AI metadata\n   * generation inline — that responsibility is decoupled and will be handled by a\n   * background job. Auth and permission checks mirror `POST /upload`.\n   */\n  async uploadFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    // Accept a single file per request; ignore any extras defensively.\n    const file = Array.isArray(files) ? files[0] : files;\n    const fileName = file.originalFilename || 'unknown';\n\n    // Parse the single fileInfo object from the multipart body.\n    let fileInfo: UploadFileInfo = {\n      name: fileName,\n      caption: null,\n      alternativeText: null,\n      folder: null,\n    };\n    if (body?.fileInfo) {\n      const raw = body.fileInfo;\n      if (typeof raw === 'string') {\n        fileInfo = JSON.parse(raw);\n      } else if (Array.isArray(raw)) {\n        fileInfo = (typeof raw[0] === 'string' ? JSON.parse(raw[0]) : raw[0]) as UploadFileInfo;\n      } else {\n        fileInfo = raw as UploadFileInfo;\n      }\n    }\n\n    // Validate this single file using security checks.\n    const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n      file,\n      { fileInfo: JSON.stringify(fileInfo) },\n      strapi\n    );\n\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0]?.message || 'Validation failed');\n    }\n\n    const data = await validateUploadBody({ fileInfo }, false);\n    const [uploadedFile] = await uploadService.upload({ data, files: [validFiles[0]] }, { user });\n\n    if (uploadedFile.mime?.startsWith('image/')) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    // No inline AI metadata generation — intentionally decoupled for the async job.\n\n    // Sign file url for private providers.\n    const signedFile = await getService('file').signFileUrls(uploadedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/actions/upload-from-urls`\n   *\n   * Upload files from URLs with SSE streaming for per-file progress\n   *\n   * Accepts JSON body with URLs and fetches them server-side.\n   * Streams Server-Sent Events as each URL is fetched and uploaded:\n   * - file:fetching  — when starting to fetch a URL\n   * - file:uploading — when upload starts for a fetched file\n   * - file:complete  — when a file is successfully uploaded\n   * - file:error     — when a URL fetch or upload fails\n   * - stream:complete — final summary with all results\n   */\n  async uploadFromUrls(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const fileService = getService('file');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    // Parse and validate request body\n    const { urls, folderId } = body as { urls?: string[]; folderId?: number | null };\n\n    if (!urls || !Array.isArray(urls) || urls.length === 0) {\n      throw new errors.ApplicationError('URLs are required');\n    }\n\n    if (urls.length > 20) {\n      throw new errors.ApplicationError('Maximum 20 URLs allowed per request');\n    }\n\n    // Take manual control of the response for SSE streaming\n    ctx.respond = false;\n    const res = ctx.res;\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n    });\n\n    const writeSSE = (event: string, data: Record<string, unknown>) => {\n      res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n    };\n\n    const total = urls.length;\n    const uploadErrors: FileUploadError[] = [];\n    const successfulFiles: any[] = [];\n\n    // Create temp directory for fetched files\n    const tmpWorkingDirectory = await fse.mkdtemp(path.join(os.tmpdir(), 'strapi-url-upload-'));\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n\n    try {\n      // Process each URL sequentially\n      for (let i = 0; i < urls.length; i += 1) {\n        const url = urls[i];\n\n        writeSSE('file:fetching', { url, index: i, total });\n\n        try {\n          // Fetch URL to temp file\n          const { file } = await fileService.fetchUrlToInputFile(\n            url,\n            tmpWorkingDirectory,\n            sizeLimit\n          );\n          const fileName = file.originalFilename;\n\n          writeSSE('file:uploading', {\n            name: fileName,\n            index: i,\n            total,\n            size: file.size,\n          });\n\n          // Validate using security checks\n          const fileInfo: UploadFileInfo = {\n            name: fileName,\n            caption: null,\n            alternativeText: null,\n            folder: folderId ?? null,\n          };\n\n          const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n            file,\n            { fileInfo: JSON.stringify(fileInfo) },\n            strapi\n          );\n\n          if (validFiles.length === 0) {\n            const errorMessage = validationErrors[0]?.message || 'Validation failed';\n            uploadErrors.push({ name: fileName, message: errorMessage });\n            writeSSE('file:error', { name: fileName, url, index: i, message: errorMessage });\n          } else {\n            // Upload the file\n            const data = await validateUploadBody({ fileInfo }, false);\n            const [uploadedFile] = await uploadService.upload(\n              { data, files: [validFiles[0]] },\n              { user }\n            );\n\n            // Sign file url\n            const signedFile = await fileService.signFileUrls(uploadedFile);\n            successfulFiles.push(signedFile);\n\n            writeSSE('file:complete', { name: fileName, index: i, file: signedFile });\n          }\n        } catch (error) {\n          const errorMessage = error instanceof Error ? error.message : String(error);\n          uploadErrors.push({ name: url, message: errorMessage });\n          writeSSE('file:error', { url, index: i, message: errorMessage });\n        }\n      }\n\n      // Track image upload metric once if any images were uploaded\n      if (successfulFiles.some((file) => file.mime?.startsWith('image/'))) {\n        await getService('metrics').trackUsage('didUploadImage');\n      }\n\n      // Send final stream summary\n      writeSSE('stream:complete', {\n        data: await pm.sanitizeOutput(successfulFiles, { action: ACTIONS.read }),\n        errors: uploadErrors,\n      });\n    } finally {\n      // Clean up temp directory\n      await fse.remove(tmpWorkingDirectory);\n    }\n\n    res.end();\n  },\n\n  // TODO: split into multiple endpoints\n  async upload(ctx: Context) {\n    const {\n      query: { id },\n      request: { files: { files } = {} },\n    } = ctx;\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      if (id) {\n        return this.updateFileInfo(ctx);\n      }\n\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    await (id ? this.replaceFile : this.uploadFiles)(ctx);\n  },\n};\n"],"names":["bulkUpdateFileInfo","ctx","state","userAbility","user","request","body","updates","validateBulkUpdateBody","uploadService","getService","results","async","map","id","fileInfo","pm","findEntityAndCheckPermissions","ACTIONS","update","FILE_MODEL_UID","updated","updateFileInfo","signedFile","signFileUrls","sanitizeOutput","action","read","params","query","errors","ValidationError","data","validateUploadBody","file","replaceFile","files","filesInput","Array","isArray","length","ApplicationError","validFiles","filteredBody","validationErrors","prepareUploadRequest","strapi","message","replacedFile","replace","aiMetadataService","mime","startsWith","isEnabled","metadataResults","processFiles","updateFilesWithAIMetadata","error","log","warn","Error","String","uploadFiles","service","createPermissionsManager","ability","create","model","isAllowed","forbidden","isMultipleFiles","filesArray","alignedFilesArray","info","find","originalFilename","name","filter","Boolean","uploadedFiles","upload","some","trackUsage","signedFiles","status","uploadFile","_","isEmpty","size","fileName","caption","alternativeText","folder","raw","JSON","parse","stringify","uploadedFile","uploadFromUrls","fileService","urls","folderId","respond","res","writeHead","Connection","writeSSE","event","write","total","uploadErrors","successfulFiles","tmpWorkingDirectory","fse","mkdtemp","path","join","os","tmpdir","sizeLimit","config","get","i","url","index","fetchUrlToInputFile","errorMessage","push","remove","end"],"mappings":";;;;;;;;;;;AAgBA,kBAAe;AACb,IAAA,MAAMA,oBAAmBC,GAAY,EAAA;AACnC,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAM,EAAEM,OAAO,EAAE,GAAG,MAAMC,sBAAAA,CAAuBF,IAAAA,CAAAA;AACjD,QAAA,MAAMG,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;QAEjC,MAAMC,OAAAA,GAAU,MAAMC,KAAAA,CAAMC,GAAG,CAC7BN,OAAAA,EACA,OAAO,EAAEO,EAAE,EAAEC,QAAQ,EAAsC,GAAA;YACzD,MAAM,EAAEC,EAAE,EAAE,GAAG,MAAMC,8BACnBd,WAAAA,EACAe,OAAAA,CAAQC,MAAM,EACdC,cAAAA,EACAN,EAAAA,CAAAA;AAGF,YAAA,MAAMO,UAAU,MAAMZ,aAAAA,CAAca,cAAc,CAACR,IAAIC,QAAAA,EAAiB;AAAEX,gBAAAA;AAAK,aAAA,CAAA;;AAG/E,YAAA,MAAMmB,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACH,OAAAA,CAAAA;YAEzD,OAAOL,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,gBAAAA,MAAAA,EAAQR,QAAQS;AAAK,aAAA,CAAA;AAC9D,QAAA,CAAA,CAAA;AAGF1B,QAAAA,GAAAA,CAAIK,IAAI,GAAGK,OAAAA;AACb,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMW,gBAAerB,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,MAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,8BACnBd,WAAAA,EACAe,OAAAA,CAAQC,MAAM,EACdC,cAAAA,EACAN,EAAAA,CAAAA;QAGF,MAAMkB,IAAAA,GAAO,MAAMC,kBAAAA,CAAmB3B,IAAAA,CAAAA;QAEtC,MAAM4B,IAAAA,GAAO,MAAMzB,aAAAA,CAAca,cAAc,CAACR,EAAAA,EAAIkB,IAAAA,CAAKjB,QAAQ,EAAS;AAAEX,YAAAA;AAAK,SAAA,CAAA;;AAGjF,QAAA,MAAMmB,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACU,IAAAA,CAAAA;AAEzDjC,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMQ,aAAYlC,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,OAAOC,UAAU,EAAE,GAAG,EAAE,EAAE,EACrD,GAAGpC,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,MAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,8BACnBd,WAAAA,EACAe,OAAAA,CAAQC,MAAM,EACdC,cAAAA,EACAN,EAAAA,CAAAA;AAGF,QAAA,IAAIwB,MAAMC,OAAO,CAACF,eAAeA,UAAAA,CAAWG,MAAM,GAAG,CAAA,EAAG;YACtD,MAAM,IAAIV,MAAAA,CAAOW,gBAAgB,CAAC,0CAAA,CAAA;AACpC,QAAA;QAEA,MAAML,KAAAA,GAAQE,MAAMC,OAAO,CAACF,cAAcA,UAAU,CAAC,EAAE,GAAGA,UAAAA;AAE1D,QAAA,MAAM,EACJK,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,oBAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,OAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMf,IAAAA,GAAQ,MAAMC,kBAAAA,CAAmBU,YAAAA,CAAAA;AACvC,QAAA,MAAMK,YAAAA,GAAe,MAAMvC,aAAAA,CAAcwC,OAAO,CAACnC,EAAAA,EAAI;AAAEkB,YAAAA,IAAAA;YAAME,IAAAA,EAAMQ,UAAU,CAAC,CAAA;SAAG,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;;;;;AAM3F,QAAA,MAAM8C,oBAAoBxC,UAAAA,CAAW,YAAA,CAAA;AACrC,QAAA,IAAIsC,cAAcG,IAAAA,EAAMC,UAAAA,CAAW,aAAc,MAAMF,iBAAAA,CAAkBG,SAAS,EAAA,EAAK;YACrF,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAAC;AAACP,oBAAAA;AAAa,iBAAA,CAAA;gBAC3E,MAAME,iBAAAA,CAAkBM,yBAAyB,CAAC;AAACR,oBAAAA;AAAa,iBAAA,EAAEM,eAAAA,EAAiBlD,IAAAA,CAAAA;AACrF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,iEAAA,EAAmE;AACjFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;AAGA,QAAA,MAAMlC,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACwB,YAAAA,CAAAA;AAEzD/C,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA,IAAA,MAAMmC,aAAY7D,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,QAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,MAAM,EACJ3B,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,oBAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,OAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMuB,eAAAA,GAAkB5B,UAAAA,CAAWF,MAAM,GAAG,CAAA;QAC5C,MAAMR,IAAAA,GAAO,MAAMC,kBAAAA,CAAmBU,YAAAA,EAAc2B,eAAAA,CAAAA;AAEpD,QAAA,IAAIC,UAAAA,GAAa7B,UAAAA;AAEjB,QAAA,IACEV,KAAKjB,QAAQ,IACbuB,KAAAA,CAAMC,OAAO,CAACP,IAAAA,CAAKjB,QAAQ,CAAA,IAC3BwD,UAAAA,CAAW/B,MAAM,KAAKR,IAAAA,CAAKjB,QAAQ,CAACyB,MAAM,EAC1C;;AAEA,YAAA,MAAMgC,oBAAoBxC,IAAAA,CAAKjB,QAAQ,CACpCF,GAAG,CAAC,CAAC4D,IAAAA,GAAAA;gBACJ,OAAOF,UAAAA,CAAWG,IAAI,CAAC,CAACxC,OAASA,IAAAA,CAAKyC,gBAAgB,KAAKF,IAAAA,CAAKG,IAAI,CAAA;AACtE,YAAA,CAAA,CAAA,CACCC,MAAM,CAACC,OAAAA,CAAAA;YAEVP,UAAAA,GAAaC,iBAAAA;AACf,QAAA;;AAGA,QAAA,MAAMO,aAAAA,GAAgB,MAAMtE,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAOmC;SAAW,EAAG;AAAEnE,YAAAA;AAAK,SAAA,CAAA;QACrF,IAAI2E,aAAAA,CAAcE,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;YACjE,MAAM1C,UAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;AAEA,QAAA,MAAMhC,oBAAoBxC,UAAAA,CAAW,YAAA,CAAA;;QAGrC,IAAI,MAAMwC,iBAAAA,CAAkBG,SAAS,EAAA,EAAI;YACvC,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAACwB,aAAAA,CAAAA;;AAE7D,gBAAA,MAAM7B,iBAAAA,CAAkBM,yBAAyB,CAACuB,aAAAA,EAAezB,eAAAA,EAAiBlD,IAAAA,CAAAA;AACpF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,mEAAA,EAAqE;AACnFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;QAGA,MAAM0B,WAAAA,GAAc,MAAMvE,KAAAA,CAAMC,GAAG,CAACkE,aAAAA,EAAerE,UAAAA,CAAW,QAAQc,YAAY,CAAA;AAElFvB,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAAC0D,WAAAA,EAAa;AAAEzD,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACvE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;MAUA,MAAMC,YAAWpF,GAAY,EAAA;QAC3B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,QAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,IAAIiB,CAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;YACnE,MAAM,IAAI1D,MAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;;QAGA,MAAMP,IAAAA,GAAOI,MAAMC,OAAO,CAACH,SAASA,KAAK,CAAC,EAAE,GAAGA,KAAAA;QAC/C,MAAMqD,QAAAA,GAAWvD,IAAAA,CAAKyC,gBAAgB,IAAI,SAAA;;AAG1C,QAAA,IAAI5D,QAAAA,GAA2B;YAC7B6D,IAAAA,EAAMa,QAAAA;YACNC,OAAAA,EAAS,IAAA;YACTC,eAAAA,EAAiB,IAAA;YACjBC,MAAAA,EAAQ;AACV,SAAA;AACA,QAAA,IAAItF,MAAMS,QAAAA,EAAU;YAClB,MAAM8E,GAAAA,GAAMvF,KAAKS,QAAQ;YACzB,IAAI,OAAO8E,QAAQ,QAAA,EAAU;gBAC3B9E,QAAAA,GAAW+E,IAAAA,CAAKC,KAAK,CAACF,GAAAA,CAAAA;AACxB,YAAA,CAAA,MAAO,IAAIvD,KAAAA,CAAMC,OAAO,CAACsD,GAAAA,CAAAA,EAAM;AAC7B9E,gBAAAA,QAAAA,GAAY,OAAO8E,GAAG,CAAC,CAAA,CAAE,KAAK,QAAA,GAAWC,IAAAA,CAAKC,KAAK,CAACF,GAAG,CAAC,CAAA,CAAE,CAAA,GAAIA,GAAG,CAAC,CAAA,CAAE;YACtE,CAAA,MAAO;gBACL9E,QAAAA,GAAW8E,GAAAA;AACb,YAAA;AACF,QAAA;;QAGA,MAAM,EAAEnD,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,oBAAAA,CACrDX,IAAAA,EACA;YAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;SAAU,EACrC+B,MAAAA,CAAAA;QAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,OAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA,CAAA;AACnE,QAAA;QAEA,MAAMf,IAAAA,GAAO,MAAMC,kBAAAA,CAAmB;AAAElB,YAAAA;SAAS,EAAG,KAAA,CAAA;AACpD,QAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAO;AAACM,gBAAAA,UAAU,CAAC,CAAA;AAAG;SAAC,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;AAE3F,QAAA,IAAI6F,YAAAA,CAAa9C,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,EAAW;YAC3C,MAAM1C,UAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;;;AAKA,QAAA,MAAM3D,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACyE,YAAAA,CAAAA;AAEzDhG,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACtE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;;;;MAaA,MAAMc,gBAAejG,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMyF,cAAczF,UAAAA,CAAW,MAAA,CAAA;AAC/B,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,QAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;;AAGA,QAAA,MAAM,EAAE+B,IAAI,EAAEC,QAAQ,EAAE,GAAG/F,IAAAA;QAE3B,IAAI,CAAC8F,IAAAA,IAAQ,CAAC9D,KAAAA,CAAMC,OAAO,CAAC6D,IAAAA,CAAAA,IAASA,IAAAA,CAAK5D,MAAM,KAAK,CAAA,EAAG;YACtD,MAAM,IAAIV,MAAAA,CAAOW,gBAAgB,CAAC,mBAAA,CAAA;AACpC,QAAA;QAEA,IAAI2D,IAAAA,CAAK5D,MAAM,GAAG,EAAA,EAAI;YACpB,MAAM,IAAIV,MAAAA,CAAOW,gBAAgB,CAAC,qCAAA,CAAA;AACpC,QAAA;;AAGAxC,QAAAA,GAAAA,CAAIqG,OAAO,GAAG,KAAA;QACd,MAAMC,GAAAA,GAAMtG,IAAIsG,GAAG;QACnBA,GAAAA,CAAIC,SAAS,CAAC,GAAA,EAAK;YACjB,cAAA,EAAgB,mBAAA;YAChB,eAAA,EAAiB,UAAA;YACjBC,UAAAA,EAAY;AACd,SAAA,CAAA;QAEA,MAAMC,QAAAA,GAAW,CAACC,KAAAA,EAAe3E,IAAAA,GAAAA;AAC/BuE,YAAAA,GAAAA,CAAIK,KAAK,CAAC,CAAC,OAAO,EAAED,KAAAA,CAAM,QAAQ,EAAEb,IAAAA,CAAKE,SAAS,CAAChE,IAAAA,CAAAA,CAAM,IAAI,CAAC,CAAA;AAChE,QAAA,CAAA;QAEA,MAAM6E,KAAAA,GAAQT,KAAK5D,MAAM;AACzB,QAAA,MAAMsE,eAAkC,EAAE;AAC1C,QAAA,MAAMC,kBAAyB,EAAE;;QAGjC,MAAMC,mBAAAA,GAAsB,MAAMC,GAAAA,CAAIC,OAAO,CAACC,KAAKC,IAAI,CAACC,EAAAA,CAAGC,MAAM,EAAA,EAAI,oBAAA,CAAA,CAAA;QACrE,MAAM,EAAEC,SAAS,EAAE,GAAGzE,OAAO0E,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;QAEhD,IAAI;;YAEF,IAAK,IAAIC,IAAI,CAAA,EAAGA,CAAAA,GAAItB,KAAK5D,MAAM,EAAEkF,KAAK,CAAA,CAAG;gBACvC,MAAMC,GAAAA,GAAMvB,IAAI,CAACsB,CAAAA,CAAE;AAEnBhB,gBAAAA,QAAAA,CAAS,eAAA,EAAiB;AAAEiB,oBAAAA,GAAAA;oBAAKC,KAAAA,EAAOF,CAAAA;AAAGb,oBAAAA;AAAM,iBAAA,CAAA;gBAEjD,IAAI;;oBAEF,MAAM,EAAE3E,IAAI,EAAE,GAAG,MAAMiE,WAAAA,CAAY0B,mBAAmB,CACpDF,GAAAA,EACAX,mBAAAA,EACAO,SAAAA,CAAAA;oBAEF,MAAM9B,QAAAA,GAAWvD,KAAKyC,gBAAgB;AAEtC+B,oBAAAA,QAAAA,CAAS,gBAAA,EAAkB;wBACzB9B,IAAAA,EAAMa,QAAAA;wBACNmC,KAAAA,EAAOF,CAAAA;AACPb,wBAAAA,KAAAA;AACArB,wBAAAA,IAAAA,EAAMtD,KAAKsD;AACb,qBAAA,CAAA;;AAGA,oBAAA,MAAMzE,QAAAA,GAA2B;wBAC/B6D,IAAAA,EAAMa,QAAAA;wBACNC,OAAAA,EAAS,IAAA;wBACTC,eAAAA,EAAiB,IAAA;AACjBC,wBAAAA,MAAAA,EAAQS,QAAAA,IAAY;AACtB,qBAAA;oBAEA,MAAM,EAAE3D,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,oBAAAA,CACrDX,IAAAA,EACA;wBAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;qBAAU,EACrC+B,MAAAA,CAAAA;oBAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;AAC3B,wBAAA,MAAMsF,YAAAA,GAAelF,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA;AACrD+D,wBAAAA,YAAAA,CAAaiB,IAAI,CAAC;4BAAEnD,IAAAA,EAAMa,QAAAA;4BAAU1C,OAAAA,EAAS+E;AAAa,yBAAA,CAAA;AAC1DpB,wBAAAA,QAAAA,CAAS,YAAA,EAAc;4BAAE9B,IAAAA,EAAMa,QAAAA;AAAUkC,4BAAAA,GAAAA;4BAAKC,KAAAA,EAAOF,CAAAA;4BAAG3E,OAAAA,EAAS+E;AAAa,yBAAA,CAAA;oBAChF,CAAA,MAAO;;wBAEL,MAAM9F,IAAAA,GAAO,MAAMC,kBAAAA,CAAmB;AAAElB,4BAAAA;yBAAS,EAAG,KAAA,CAAA;AACpD,wBAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAC/C;AAAEhD,4BAAAA,IAAAA;4BAAMI,KAAAA,EAAO;AAACM,gCAAAA,UAAU,CAAC,CAAA;AAAG;yBAAC,EAC/B;AAAEtC,4BAAAA;AAAK,yBAAA,CAAA;;AAIT,wBAAA,MAAMmB,UAAAA,GAAa,MAAM4E,WAAAA,CAAY3E,YAAY,CAACyE,YAAAA,CAAAA;AAClDc,wBAAAA,eAAAA,CAAgBgB,IAAI,CAACxG,UAAAA,CAAAA;AAErBmF,wBAAAA,QAAAA,CAAS,eAAA,EAAiB;4BAAE9B,IAAAA,EAAMa,QAAAA;4BAAUmC,KAAAA,EAAOF,CAAAA;4BAAGxF,IAAAA,EAAMX;AAAW,yBAAA,CAAA;AACzE,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;AACd,oBAAA,MAAMqE,eAAerE,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA,CAAAA;AACrEqD,oBAAAA,YAAAA,CAAaiB,IAAI,CAAC;wBAAEnD,IAAAA,EAAM+C,GAAAA;wBAAK5E,OAAAA,EAAS+E;AAAa,qBAAA,CAAA;AACrDpB,oBAAAA,QAAAA,CAAS,YAAA,EAAc;AAAEiB,wBAAAA,GAAAA;wBAAKC,KAAAA,EAAOF,CAAAA;wBAAG3E,OAAAA,EAAS+E;AAAa,qBAAA,CAAA;AAChE,gBAAA;AACF,YAAA;;YAGA,IAAIf,eAAAA,CAAgB9B,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;gBACnE,MAAM1C,UAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,YAAA;;AAGAwB,YAAAA,QAAAA,CAAS,iBAAA,EAAmB;AAC1B1E,gBAAAA,IAAAA,EAAM,MAAMhB,EAAAA,CAAGS,cAAc,CAACsF,eAAAA,EAAiB;AAAErF,oBAAAA,MAAAA,EAAQR,QAAQS;AAAK,iBAAA,CAAA;gBACtEG,MAAAA,EAAQgF;AACV,aAAA,CAAA;QACF,CAAA,QAAU;;YAER,MAAMG,GAAAA,CAAIe,MAAM,CAAChB,mBAAAA,CAAAA;AACnB,QAAA;AAEAT,QAAAA,GAAAA,CAAI0B,GAAG,EAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAMjD,QAAO/E,GAAY,EAAA;AACvB,QAAA,MAAM,EACJ4B,KAAAA,EAAO,EAAEf,EAAE,EAAE,EACbT,OAAAA,EAAS,EAAE+B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACnC,GAAGnC,GAAAA;AAEJ,QAAA,IAAIqF,CAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;AACnE,YAAA,IAAI1E,EAAAA,EAAI;gBACN,OAAO,IAAI,CAACQ,cAAc,CAACrB,GAAAA,CAAAA;AAC7B,YAAA;YAEA,MAAM,IAAI6B,MAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;QAEA,MAAO3B,CAAAA,EAAAA,GAAK,IAAI,CAACqB,WAAW,GAAG,IAAI,CAAC2B,WAAU,EAAG7D,GAAAA,CAAAA;AACnD,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"admin-upload.mjs","sources":["../../../server/src/controllers/admin-upload.ts"],"sourcesContent":["import os from 'os';\nimport path from 'path';\nimport fse from 'fs-extra';\nimport _ from 'lodash';\nimport { errors, async } from '@strapi/utils';\n\nimport type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\nimport { validateBulkUpdateBody, validateUploadBody } from './validation/admin/upload';\nimport { findEntityAndCheckPermissions } from './utils/find-entity-and-check-permissions';\nimport { Config, FileInfo } from '../types';\nimport { prepareUploadRequest, type FileUploadError } from '../utils/mime-validation';\nimport type { UploadFileInfo } from '../../../shared/contracts/files';\nimport type { UrlFetchProgress } from '../services/file';\n\n/**\n * Minimum delay between two `file:progress` frames for the same URL.\n *\n * `fetchUrlToInputFile` reports once per streamed chunk (~8000 calls for a 512MB file at\n * 64KB chunks); at ~5 frames a second a 10s transfer costs ~50 frames, which is plenty for\n * a bar the user watches.\n */\nconst URL_FETCH_PROGRESS_INTERVAL_MS = 200;\n\nexport default {\n  async bulkUpdateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const { updates } = await validateBulkUpdateBody(body);\n    const uploadService = getService('upload');\n\n    const results = await async.map(\n      updates,\n      async ({ id, fileInfo }: { id: number; fileInfo: FileInfo }) => {\n        const { pm } = await findEntityAndCheckPermissions(\n          userAbility,\n          ACTIONS.update,\n          FILE_MODEL_UID,\n          id\n        );\n\n        const updated = await uploadService.updateFileInfo(id, fileInfo as any, { user });\n\n        // Sign file urls for private providers\n        const signedFile = await getService('file').signFileUrls(updated);\n\n        return pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n      }\n    );\n\n    ctx.body = results;\n  },\n\n  /**\n   * `PUT /upload/files/:id`\n   *\n   * Update the editable metadata (`fileInfo`) of an existing file. Also reached\n   * through the `POST /upload` multiplexer, which delegates here with the id in\n   * `ctx.query` — hence the dual read below, route params winning.\n   */\n  async updateFileInfo(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    const data = await validateUploadBody(body);\n\n    const file = await uploadService.updateFileInfo(id, data.fileInfo as any, { user });\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(file);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  /**\n   * `POST /upload/files/:id/replace`\n   *\n   * Replace the binary content of an existing file. Also reached through the\n   * `POST /upload` multiplexer, which delegates here with the id in `ctx.query`\n   * — hence the dual read below, route params winning.\n   */\n  async replaceFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files: filesInput } = {} },\n    } = ctx;\n\n    const id = ctx.params?.id ?? ctx.query.id;\n\n    if (typeof id !== 'string') {\n      throw new errors.ValidationError('File id is required');\n    }\n\n    const uploadService = getService('upload');\n    const { pm } = await findEntityAndCheckPermissions(\n      userAbility,\n      ACTIONS.update,\n      FILE_MODEL_UID,\n      id\n    );\n\n    if (Array.isArray(filesInput) && filesInput.length > 1) {\n      throw new errors.ApplicationError('Cannot replace a file with multiple ones');\n    }\n\n    const files = Array.isArray(filesInput) ? filesInput[0] : filesInput;\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const data = (await validateUploadBody(filteredBody)) as { fileInfo: FileInfo };\n    const replacedFile = await uploadService.replace(id, { data, file: validFiles[0] }, { user });\n\n    // Regenerate AI metadata for image replacements so the alt text / caption\n    // reflect the new file content. Mirrors the post-upload hook in\n    // `uploadFiles`; failure is logged and swallowed to keep the replace flow\n    // resilient when the AI provider is unavailable.\n    const aiMetadataService = getService('aiMetadata');\n    if (replacedFile?.mime?.startsWith('image/') && (await aiMetadataService.isEnabled())) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles([replacedFile]);\n        await aiMetadataService.updateFilesWithAIMetadata([replacedFile], metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed on replace, proceeding without it', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFile = await getService('file').signFileUrls(replacedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n  },\n\n  async uploadFiles(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    const {\n      validFiles,\n      filteredBody,\n      errors: validationErrors,\n    } = await prepareUploadRequest(files, body, strapi);\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0].message);\n    }\n\n    const isMultipleFiles = validFiles.length > 1;\n    const data = await validateUploadBody(filteredBody, isMultipleFiles);\n\n    let filesArray = validFiles;\n\n    if (\n      data.fileInfo &&\n      Array.isArray(data.fileInfo) &&\n      filesArray.length === data.fileInfo.length\n    ) {\n      // Reorder filesArray to match data.fileInfo order\n      const alignedFilesArray = data.fileInfo\n        .map((info) => {\n          return filesArray.find((file) => file.originalFilename === info.name);\n        })\n        .filter(Boolean) as any[];\n\n      filesArray = alignedFilesArray;\n    }\n\n    // Upload files first to get thumbnails\n    const uploadedFiles = await uploadService.upload({ data, files: filesArray }, { user });\n    if (uploadedFiles.some((file) => file.mime?.startsWith('image/'))) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    const aiMetadataService = getService('aiMetadata');\n\n    // AFTER upload - generate AI metadata for images\n    if (await aiMetadataService.isEnabled()) {\n      try {\n        const metadataResults = await aiMetadataService.processFiles(uploadedFiles);\n        // Update the uploaded files with AI metadata\n        await aiMetadataService.updateFilesWithAIMetadata(uploadedFiles, metadataResults, user);\n      } catch (error) {\n        strapi.log.warn('AI metadata generation failed, proceeding without AI enhancements', {\n          error: error instanceof Error ? error.message : String(error),\n        });\n      }\n    }\n\n    // Sign file urls for private providers\n    const signedFiles = await async.map(uploadedFiles, getService('file').signFileUrls);\n\n    ctx.body = await pm.sanitizeOutput(signedFiles, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/files`\n   *\n   * Upload a single file and return the created File.\n   *\n   * Accepts one file per request (multipart `files` + `fileInfo`) and returns a\n   * single `File` object. Unlike `uploadFiles`, it does **not** run AI metadata\n   * generation inline — that responsibility is decoupled and will be handled by a\n   * background job. Auth and permission checks mirror `POST /upload`.\n   */\n  async uploadFile(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body, files: { files } = {} },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    // Accept a single file per request; ignore any extras defensively.\n    const file = Array.isArray(files) ? files[0] : files;\n    const fileName = file.originalFilename || 'unknown';\n\n    // Parse the single fileInfo object from the multipart body.\n    let fileInfo: UploadFileInfo = {\n      name: fileName,\n      caption: null,\n      alternativeText: null,\n      folder: null,\n    };\n    if (body?.fileInfo) {\n      const raw = body.fileInfo;\n      if (typeof raw === 'string') {\n        fileInfo = JSON.parse(raw);\n      } else if (Array.isArray(raw)) {\n        fileInfo = (typeof raw[0] === 'string' ? JSON.parse(raw[0]) : raw[0]) as UploadFileInfo;\n      } else {\n        fileInfo = raw as UploadFileInfo;\n      }\n    }\n\n    // Validate this single file using security checks.\n    const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n      file,\n      { fileInfo: JSON.stringify(fileInfo) },\n      strapi\n    );\n\n    if (validFiles.length === 0) {\n      throw new errors.ValidationError(validationErrors[0]?.message || 'Validation failed');\n    }\n\n    const data = await validateUploadBody({ fileInfo }, false);\n    const [uploadedFile] = await uploadService.upload({ data, files: [validFiles[0]] }, { user });\n\n    if (uploadedFile.mime?.startsWith('image/')) {\n      await getService('metrics').trackUsage('didUploadImage');\n    }\n\n    // No inline AI metadata generation — intentionally decoupled for the async job.\n\n    // Sign file url for private providers.\n    const signedFile = await getService('file').signFileUrls(uploadedFile);\n\n    ctx.body = await pm.sanitizeOutput(signedFile, { action: ACTIONS.read });\n    ctx.status = 201;\n  },\n\n  /**\n   * `POST /upload/actions/upload-from-urls`\n   *\n   * Upload files from URLs with SSE streaming for per-file progress\n   *\n   * Accepts JSON body with URLs and fetches them server-side.\n   * Streams Server-Sent Events as each URL is fetched and uploaded:\n   * - file:fetching  — when starting to fetch a URL\n   * - file:progress  — throttled byte progress of the remote → server temp file transfer\n   * - file:uploading — when upload starts for a fetched file\n   * - file:complete  — when a file is successfully uploaded\n   * - file:error     — when a URL fetch or upload fails\n   * - stream:complete — final summary with all results\n   */\n  async uploadFromUrls(ctx: Context) {\n    const {\n      state: { userAbility, user },\n      request: { body },\n    } = ctx;\n\n    const uploadService = getService('upload');\n    const fileService = getService('file');\n    const pm = strapi.service('admin::permission').createPermissionsManager({\n      ability: userAbility,\n      action: ACTIONS.create,\n      model: FILE_MODEL_UID,\n    });\n\n    if (!pm.isAllowed) {\n      return ctx.forbidden();\n    }\n\n    // Parse and validate request body\n    const { urls, folderId } = body as { urls?: string[]; folderId?: number | null };\n\n    if (!urls || !Array.isArray(urls) || urls.length === 0) {\n      throw new errors.ApplicationError('URLs are required');\n    }\n\n    if (urls.length > 20) {\n      throw new errors.ApplicationError('Maximum 20 URLs allowed per request');\n    }\n\n    // Take manual control of the response for SSE streaming\n    ctx.respond = false;\n    const res = ctx.res;\n    res.writeHead(200, {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache',\n      Connection: 'keep-alive',\n    });\n\n    const writeSSE = (event: string, data: Record<string, unknown>) => {\n      res.write(`event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`);\n    };\n\n    const total = urls.length;\n    const uploadErrors: FileUploadError[] = [];\n    const successfulFiles: any[] = [];\n\n    // Create temp directory for fetched files\n    const tmpWorkingDirectory = await fse.mkdtemp(path.join(os.tmpdir(), 'strapi-url-upload-'));\n    const { sizeLimit } = strapi.config.get<Config>('plugin::upload');\n\n    try {\n      // Process each URL sequentially\n      for (let i = 0; i < urls.length; i += 1) {\n        const url = urls[i];\n\n        writeSSE('file:fetching', { url, index: i, total });\n\n        try {\n          // `fetchUrlToInputFile` reports raw, unthrottled progress — coalescing it into a\n          // sane frame rate is the caller's job. State is per URL: the loop is sequential.\n          let lastProgressAt = 0;\n          let hasAnnouncedSize = false;\n          let hasReachedTotal = false;\n\n          const onFetchProgress = ({ bytesWritten, totalBytes }: UrlFetchProgress) => {\n            // The frame that reaches the total always goes out, or a throttled last chunk\n            // leaves the row short of 100% until `file:complete`.\n            const isFinal = !hasReachedTotal && totalBytes !== null && bytesWritten >= totalBytes;\n            if (\n              hasAnnouncedSize &&\n              !isFinal &&\n              Date.now() - lastProgressAt < URL_FETCH_PROGRESS_INTERVAL_MS\n            ) {\n              return;\n            }\n\n            hasAnnouncedSize = true;\n            hasReachedTotal = hasReachedTotal || isFinal;\n            lastProgressAt = Date.now();\n\n            writeSSE('file:progress', {\n              index: i,\n              loadedBytes: bytesWritten,\n              totalBytes,\n              phase: 'fetch',\n            });\n          };\n\n          // Fetch URL to temp file\n          const { file } = await fileService.fetchUrlToInputFile(\n            url,\n            tmpWorkingDirectory,\n            sizeLimit,\n            onFetchProgress\n          );\n          const fileName = file.originalFilename;\n\n          writeSSE('file:uploading', {\n            name: fileName,\n            index: i,\n            total,\n            size: file.size,\n          });\n\n          // Validate using security checks\n          const fileInfo: UploadFileInfo = {\n            name: fileName,\n            caption: null,\n            alternativeText: null,\n            folder: folderId ?? null,\n          };\n\n          const { validFiles, errors: validationErrors } = await prepareUploadRequest(\n            file,\n            { fileInfo: JSON.stringify(fileInfo) },\n            strapi\n          );\n\n          if (validFiles.length === 0) {\n            const errorMessage = validationErrors[0]?.message || 'Validation failed';\n            uploadErrors.push({ name: fileName, message: errorMessage });\n            writeSSE('file:error', { name: fileName, url, index: i, message: errorMessage });\n          } else {\n            // Upload the file\n            const data = await validateUploadBody({ fileInfo }, false);\n            const [uploadedFile] = await uploadService.upload(\n              { data, files: [validFiles[0]] },\n              { user }\n            );\n\n            // Sign file url\n            const signedFile = await fileService.signFileUrls(uploadedFile);\n            successfulFiles.push(signedFile);\n\n            writeSSE('file:complete', { name: fileName, index: i, file: signedFile });\n          }\n        } catch (error) {\n          const errorMessage = error instanceof Error ? error.message : String(error);\n          uploadErrors.push({ name: url, message: errorMessage });\n          writeSSE('file:error', { url, index: i, message: errorMessage });\n        }\n      }\n\n      // Track image upload metric once if any images were uploaded\n      if (successfulFiles.some((file) => file.mime?.startsWith('image/'))) {\n        await getService('metrics').trackUsage('didUploadImage');\n      }\n\n      // Send final stream summary\n      writeSSE('stream:complete', {\n        data: await pm.sanitizeOutput(successfulFiles, { action: ACTIONS.read }),\n        errors: uploadErrors,\n      });\n    } finally {\n      // Clean up temp directory\n      await fse.remove(tmpWorkingDirectory);\n    }\n\n    res.end();\n  },\n\n  // TODO: split into multiple endpoints\n  async upload(ctx: Context) {\n    const {\n      query: { id },\n      request: { files: { files } = {} },\n    } = ctx;\n\n    if (_.isEmpty(files) || (!Array.isArray(files) && files.size === 0)) {\n      if (id) {\n        return this.updateFileInfo(ctx);\n      }\n\n      throw new errors.ApplicationError('Files are empty');\n    }\n\n    await (id ? this.replaceFile : this.uploadFiles)(ctx);\n  },\n};\n"],"names":["URL_FETCH_PROGRESS_INTERVAL_MS","bulkUpdateFileInfo","ctx","state","userAbility","user","request","body","updates","validateBulkUpdateBody","uploadService","getService","results","async","map","id","fileInfo","pm","findEntityAndCheckPermissions","ACTIONS","update","FILE_MODEL_UID","updated","updateFileInfo","signedFile","signFileUrls","sanitizeOutput","action","read","params","query","errors","ValidationError","data","validateUploadBody","file","replaceFile","files","filesInput","Array","isArray","length","ApplicationError","validFiles","filteredBody","validationErrors","prepareUploadRequest","strapi","message","replacedFile","replace","aiMetadataService","mime","startsWith","isEnabled","metadataResults","processFiles","updateFilesWithAIMetadata","error","log","warn","Error","String","uploadFiles","service","createPermissionsManager","ability","create","model","isAllowed","forbidden","isMultipleFiles","filesArray","alignedFilesArray","info","find","originalFilename","name","filter","Boolean","uploadedFiles","upload","some","trackUsage","signedFiles","status","uploadFile","_","isEmpty","size","fileName","caption","alternativeText","folder","raw","JSON","parse","stringify","uploadedFile","uploadFromUrls","fileService","urls","folderId","respond","res","writeHead","Connection","writeSSE","event","write","total","uploadErrors","successfulFiles","tmpWorkingDirectory","fse","mkdtemp","path","join","os","tmpdir","sizeLimit","config","get","i","url","index","lastProgressAt","hasAnnouncedSize","hasReachedTotal","onFetchProgress","bytesWritten","totalBytes","isFinal","Date","now","loadedBytes","phase","fetchUrlToInputFile","errorMessage","push","remove","end"],"mappings":";;;;;;;;;;;AAiBA;;;;;;AAMC,IACD,MAAMA,8BAAAA,GAAiC,GAAA;AAEvC,kBAAe;AACb,IAAA,MAAMC,oBAAmBC,GAAY,EAAA;AACnC,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAM,EAAEM,OAAO,EAAE,GAAG,MAAMC,sBAAAA,CAAuBF,IAAAA,CAAAA;AACjD,QAAA,MAAMG,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;QAEjC,MAAMC,OAAAA,GAAU,MAAMC,KAAAA,CAAMC,GAAG,CAC7BN,OAAAA,EACA,OAAO,EAAEO,EAAE,EAAEC,QAAQ,EAAsC,GAAA;YACzD,MAAM,EAAEC,EAAE,EAAE,GAAG,MAAMC,8BACnBd,WAAAA,EACAe,OAAAA,CAAQC,MAAM,EACdC,cAAAA,EACAN,EAAAA,CAAAA;AAGF,YAAA,MAAMO,UAAU,MAAMZ,aAAAA,CAAca,cAAc,CAACR,IAAIC,QAAAA,EAAiB;AAAEX,gBAAAA;AAAK,aAAA,CAAA;;AAG/E,YAAA,MAAMmB,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACH,OAAAA,CAAAA;YAEzD,OAAOL,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,gBAAAA,MAAAA,EAAQR,QAAQS;AAAK,aAAA,CAAA;AAC9D,QAAA,CAAA,CAAA;AAGF1B,QAAAA,GAAAA,CAAIK,IAAI,GAAGK,OAAAA;AACb,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMW,gBAAerB,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,MAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,8BACnBd,WAAAA,EACAe,OAAAA,CAAQC,MAAM,EACdC,cAAAA,EACAN,EAAAA,CAAAA;QAGF,MAAMkB,IAAAA,GAAO,MAAMC,kBAAAA,CAAmB3B,IAAAA,CAAAA;QAEtC,MAAM4B,IAAAA,GAAO,MAAMzB,aAAAA,CAAca,cAAc,CAACR,EAAAA,EAAIkB,IAAAA,CAAKjB,QAAQ,EAAS;AAAEX,YAAAA;AAAK,SAAA,CAAA;;AAGjF,QAAA,MAAMmB,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACU,IAAAA,CAAAA;AAEzDjC,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA;;;;;;MAOA,MAAMQ,aAAYlC,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,OAAOC,UAAU,EAAE,GAAG,EAAE,EAAE,EACrD,GAAGpC,GAAAA;QAEJ,MAAMa,EAAAA,GAAKb,IAAI2B,MAAM,EAAEd,MAAMb,GAAAA,CAAI4B,KAAK,CAACf,EAAE;QAEzC,IAAI,OAAOA,OAAO,QAAA,EAAU;YAC1B,MAAM,IAAIgB,MAAAA,CAAOC,eAAe,CAAC,qBAAA,CAAA;AACnC,QAAA;AAEA,QAAA,MAAMtB,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;QACjC,MAAM,EAAEM,EAAE,EAAE,GAAG,MAAMC,8BACnBd,WAAAA,EACAe,OAAAA,CAAQC,MAAM,EACdC,cAAAA,EACAN,EAAAA,CAAAA;AAGF,QAAA,IAAIwB,MAAMC,OAAO,CAACF,eAAeA,UAAAA,CAAWG,MAAM,GAAG,CAAA,EAAG;YACtD,MAAM,IAAIV,MAAAA,CAAOW,gBAAgB,CAAC,0CAAA,CAAA;AACpC,QAAA;QAEA,MAAML,KAAAA,GAAQE,MAAMC,OAAO,CAACF,cAAcA,UAAU,CAAC,EAAE,GAAGA,UAAAA;AAE1D,QAAA,MAAM,EACJK,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,oBAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,OAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMf,IAAAA,GAAQ,MAAMC,kBAAAA,CAAmBU,YAAAA,CAAAA;AACvC,QAAA,MAAMK,YAAAA,GAAe,MAAMvC,aAAAA,CAAcwC,OAAO,CAACnC,EAAAA,EAAI;AAAEkB,YAAAA,IAAAA;YAAME,IAAAA,EAAMQ,UAAU,CAAC,CAAA;SAAG,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;;;;;AAM3F,QAAA,MAAM8C,oBAAoBxC,UAAAA,CAAW,YAAA,CAAA;AACrC,QAAA,IAAIsC,cAAcG,IAAAA,EAAMC,UAAAA,CAAW,aAAc,MAAMF,iBAAAA,CAAkBG,SAAS,EAAA,EAAK;YACrF,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAAC;AAACP,oBAAAA;AAAa,iBAAA,CAAA;gBAC3E,MAAME,iBAAAA,CAAkBM,yBAAyB,CAAC;AAACR,oBAAAA;AAAa,iBAAA,EAAEM,eAAAA,EAAiBlD,IAAAA,CAAAA;AACrF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,iEAAA,EAAmE;AACjFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;AAGA,QAAA,MAAMlC,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACwB,YAAAA,CAAAA;AAEzD/C,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACxE,IAAA,CAAA;AAEA,IAAA,MAAMmC,aAAY7D,GAAY,EAAA;QAC5B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,QAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,MAAM,EACJ3B,UAAU,EACVC,YAAY,EACZb,MAAAA,EAAQc,gBAAgB,EACzB,GAAG,MAAMC,oBAAAA,CAAqBT,KAAAA,EAAO9B,IAAAA,EAAMwC,MAAAA,CAAAA;QAC5C,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,OAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,CAACG,OAAO,CAAA;AAC9D,QAAA;QAEA,MAAMuB,eAAAA,GAAkB5B,UAAAA,CAAWF,MAAM,GAAG,CAAA;QAC5C,MAAMR,IAAAA,GAAO,MAAMC,kBAAAA,CAAmBU,YAAAA,EAAc2B,eAAAA,CAAAA;AAEpD,QAAA,IAAIC,UAAAA,GAAa7B,UAAAA;AAEjB,QAAA,IACEV,KAAKjB,QAAQ,IACbuB,KAAAA,CAAMC,OAAO,CAACP,IAAAA,CAAKjB,QAAQ,CAAA,IAC3BwD,UAAAA,CAAW/B,MAAM,KAAKR,IAAAA,CAAKjB,QAAQ,CAACyB,MAAM,EAC1C;;AAEA,YAAA,MAAMgC,oBAAoBxC,IAAAA,CAAKjB,QAAQ,CACpCF,GAAG,CAAC,CAAC4D,IAAAA,GAAAA;gBACJ,OAAOF,UAAAA,CAAWG,IAAI,CAAC,CAACxC,OAASA,IAAAA,CAAKyC,gBAAgB,KAAKF,IAAAA,CAAKG,IAAI,CAAA;AACtE,YAAA,CAAA,CAAA,CACCC,MAAM,CAACC,OAAAA,CAAAA;YAEVP,UAAAA,GAAaC,iBAAAA;AACf,QAAA;;AAGA,QAAA,MAAMO,aAAAA,GAAgB,MAAMtE,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAOmC;SAAW,EAAG;AAAEnE,YAAAA;AAAK,SAAA,CAAA;QACrF,IAAI2E,aAAAA,CAAcE,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;YACjE,MAAM1C,UAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;AAEA,QAAA,MAAMhC,oBAAoBxC,UAAAA,CAAW,YAAA,CAAA;;QAGrC,IAAI,MAAMwC,iBAAAA,CAAkBG,SAAS,EAAA,EAAI;YACvC,IAAI;AACF,gBAAA,MAAMC,eAAAA,GAAkB,MAAMJ,iBAAAA,CAAkBK,YAAY,CAACwB,aAAAA,CAAAA;;AAE7D,gBAAA,MAAM7B,iBAAAA,CAAkBM,yBAAyB,CAACuB,aAAAA,EAAezB,eAAAA,EAAiBlD,IAAAA,CAAAA;AACpF,YAAA,CAAA,CAAE,OAAOqD,KAAAA,EAAO;AACdX,gBAAAA,MAAAA,CAAOY,GAAG,CAACC,IAAI,CAAC,mEAAA,EAAqE;AACnFF,oBAAAA,KAAAA,EAAOA,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA;AACzD,iBAAA,CAAA;AACF,YAAA;AACF,QAAA;;QAGA,MAAM0B,WAAAA,GAAc,MAAMvE,KAAAA,CAAMC,GAAG,CAACkE,aAAAA,EAAerE,UAAAA,CAAW,QAAQc,YAAY,CAAA;AAElFvB,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAAC0D,WAAAA,EAAa;AAAEzD,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACvE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;MAUA,MAAMC,YAAWpF,GAAY,EAAA;QAC3B,MAAM,EACJC,OAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE8B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACzC,GAAGnC,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,QAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,IAAIiB,CAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;YACnE,MAAM,IAAI1D,MAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;;QAGA,MAAMP,IAAAA,GAAOI,MAAMC,OAAO,CAACH,SAASA,KAAK,CAAC,EAAE,GAAGA,KAAAA;QAC/C,MAAMqD,QAAAA,GAAWvD,IAAAA,CAAKyC,gBAAgB,IAAI,SAAA;;AAG1C,QAAA,IAAI5D,QAAAA,GAA2B;YAC7B6D,IAAAA,EAAMa,QAAAA;YACNC,OAAAA,EAAS,IAAA;YACTC,eAAAA,EAAiB,IAAA;YACjBC,MAAAA,EAAQ;AACV,SAAA;AACA,QAAA,IAAItF,MAAMS,QAAAA,EAAU;YAClB,MAAM8E,GAAAA,GAAMvF,KAAKS,QAAQ;YACzB,IAAI,OAAO8E,QAAQ,QAAA,EAAU;gBAC3B9E,QAAAA,GAAW+E,IAAAA,CAAKC,KAAK,CAACF,GAAAA,CAAAA;AACxB,YAAA,CAAA,MAAO,IAAIvD,KAAAA,CAAMC,OAAO,CAACsD,GAAAA,CAAAA,EAAM;AAC7B9E,gBAAAA,QAAAA,GAAY,OAAO8E,GAAG,CAAC,CAAA,CAAE,KAAK,QAAA,GAAWC,IAAAA,CAAKC,KAAK,CAACF,GAAG,CAAC,CAAA,CAAE,CAAA,GAAIA,GAAG,CAAC,CAAA,CAAE;YACtE,CAAA,MAAO;gBACL9E,QAAAA,GAAW8E,GAAAA;AACb,YAAA;AACF,QAAA;;QAGA,MAAM,EAAEnD,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,oBAAAA,CACrDX,IAAAA,EACA;YAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;SAAU,EACrC+B,MAAAA,CAAAA;QAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;YAC3B,MAAM,IAAIV,OAAOC,eAAe,CAACa,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA,CAAA;AACnE,QAAA;QAEA,MAAMf,IAAAA,GAAO,MAAMC,kBAAAA,CAAmB;AAAElB,YAAAA;SAAS,EAAG,KAAA,CAAA;AACpD,QAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAAC;AAAEhD,YAAAA,IAAAA;YAAMI,KAAAA,EAAO;AAACM,gBAAAA,UAAU,CAAC,CAAA;AAAG;SAAC,EAAG;AAAEtC,YAAAA;AAAK,SAAA,CAAA;AAE3F,QAAA,IAAI6F,YAAAA,CAAa9C,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,EAAW;YAC3C,MAAM1C,UAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,QAAA;;;AAKA,QAAA,MAAM3D,UAAAA,GAAa,MAAMb,UAAAA,CAAW,MAAA,CAAA,CAAQc,YAAY,CAACyE,YAAAA,CAAAA;AAEzDhG,QAAAA,GAAAA,CAAIK,IAAI,GAAG,MAAMU,EAAAA,CAAGS,cAAc,CAACF,UAAAA,EAAY;AAAEG,YAAAA,MAAAA,EAAQR,QAAQS;AAAK,SAAA,CAAA;AACtE1B,QAAAA,GAAAA,CAAImF,MAAM,GAAG,GAAA;AACf,IAAA,CAAA;AAEA;;;;;;;;;;;;;MAcA,MAAMc,gBAAejG,GAAY,EAAA;AAC/B,QAAA,MAAM,EACJC,KAAAA,EAAO,EAAEC,WAAW,EAAEC,IAAI,EAAE,EAC5BC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EAClB,GAAGL,GAAAA;AAEJ,QAAA,MAAMQ,gBAAgBC,UAAAA,CAAW,QAAA,CAAA;AACjC,QAAA,MAAMyF,cAAczF,UAAAA,CAAW,MAAA,CAAA;AAC/B,QAAA,MAAMM,KAAK8B,MAAAA,CAAOiB,OAAO,CAAC,mBAAA,CAAA,CAAqBC,wBAAwB,CAAC;YACtEC,OAAAA,EAAS9D,WAAAA;AACTuB,YAAAA,MAAAA,EAAQR,QAAQgD,MAAM;YACtBC,KAAAA,EAAO/C;AACT,SAAA,CAAA;QAEA,IAAI,CAACJ,EAAAA,CAAGoD,SAAS,EAAE;AACjB,YAAA,OAAOnE,IAAIoE,SAAS,EAAA;AACtB,QAAA;;AAGA,QAAA,MAAM,EAAE+B,IAAI,EAAEC,QAAQ,EAAE,GAAG/F,IAAAA;QAE3B,IAAI,CAAC8F,IAAAA,IAAQ,CAAC9D,KAAAA,CAAMC,OAAO,CAAC6D,IAAAA,CAAAA,IAASA,IAAAA,CAAK5D,MAAM,KAAK,CAAA,EAAG;YACtD,MAAM,IAAIV,MAAAA,CAAOW,gBAAgB,CAAC,mBAAA,CAAA;AACpC,QAAA;QAEA,IAAI2D,IAAAA,CAAK5D,MAAM,GAAG,EAAA,EAAI;YACpB,MAAM,IAAIV,MAAAA,CAAOW,gBAAgB,CAAC,qCAAA,CAAA;AACpC,QAAA;;AAGAxC,QAAAA,GAAAA,CAAIqG,OAAO,GAAG,KAAA;QACd,MAAMC,GAAAA,GAAMtG,IAAIsG,GAAG;QACnBA,GAAAA,CAAIC,SAAS,CAAC,GAAA,EAAK;YACjB,cAAA,EAAgB,mBAAA;YAChB,eAAA,EAAiB,UAAA;YACjBC,UAAAA,EAAY;AACd,SAAA,CAAA;QAEA,MAAMC,QAAAA,GAAW,CAACC,KAAAA,EAAe3E,IAAAA,GAAAA;AAC/BuE,YAAAA,GAAAA,CAAIK,KAAK,CAAC,CAAC,OAAO,EAAED,KAAAA,CAAM,QAAQ,EAAEb,IAAAA,CAAKE,SAAS,CAAChE,IAAAA,CAAAA,CAAM,IAAI,CAAC,CAAA;AAChE,QAAA,CAAA;QAEA,MAAM6E,KAAAA,GAAQT,KAAK5D,MAAM;AACzB,QAAA,MAAMsE,eAAkC,EAAE;AAC1C,QAAA,MAAMC,kBAAyB,EAAE;;QAGjC,MAAMC,mBAAAA,GAAsB,MAAMC,GAAAA,CAAIC,OAAO,CAACC,KAAKC,IAAI,CAACC,EAAAA,CAAGC,MAAM,EAAA,EAAI,oBAAA,CAAA,CAAA;QACrE,MAAM,EAAEC,SAAS,EAAE,GAAGzE,OAAO0E,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;QAEhD,IAAI;;YAEF,IAAK,IAAIC,IAAI,CAAA,EAAGA,CAAAA,GAAItB,KAAK5D,MAAM,EAAEkF,KAAK,CAAA,CAAG;gBACvC,MAAMC,GAAAA,GAAMvB,IAAI,CAACsB,CAAAA,CAAE;AAEnBhB,gBAAAA,QAAAA,CAAS,eAAA,EAAiB;AAAEiB,oBAAAA,GAAAA;oBAAKC,KAAAA,EAAOF,CAAAA;AAAGb,oBAAAA;AAAM,iBAAA,CAAA;gBAEjD,IAAI;;;AAGF,oBAAA,IAAIgB,cAAAA,GAAiB,CAAA;AACrB,oBAAA,IAAIC,gBAAAA,GAAmB,KAAA;AACvB,oBAAA,IAAIC,eAAAA,GAAkB,KAAA;AAEtB,oBAAA,MAAMC,kBAAkB,CAAC,EAAEC,YAAY,EAAEC,UAAU,EAAoB,GAAA;;;AAGrE,wBAAA,MAAMC,OAAAA,GAAU,CAACJ,eAAAA,IAAmBG,UAAAA,KAAe,QAAQD,YAAAA,IAAgBC,UAAAA;AAC3E,wBAAA,IACEJ,oBACA,CAACK,OAAAA,IACDC,KAAKC,GAAG,EAAA,GAAKR,iBAAiB9H,8BAAAA,EAC9B;AACA,4BAAA;AACF,wBAAA;wBAEA+H,gBAAAA,GAAmB,IAAA;AACnBC,wBAAAA,eAAAA,GAAkBA,eAAAA,IAAmBI,OAAAA;AACrCN,wBAAAA,cAAAA,GAAiBO,KAAKC,GAAG,EAAA;AAEzB3B,wBAAAA,QAAAA,CAAS,eAAA,EAAiB;4BACxBkB,KAAAA,EAAOF,CAAAA;4BACPY,WAAAA,EAAaL,YAAAA;AACbC,4BAAAA,UAAAA;4BACAK,KAAAA,EAAO;AACT,yBAAA,CAAA;AACF,oBAAA,CAAA;;oBAGA,MAAM,EAAErG,IAAI,EAAE,GAAG,MAAMiE,YAAYqC,mBAAmB,CACpDb,GAAAA,EACAX,mBAAAA,EACAO,SAAAA,EACAS,eAAAA,CAAAA;oBAEF,MAAMvC,QAAAA,GAAWvD,KAAKyC,gBAAgB;AAEtC+B,oBAAAA,QAAAA,CAAS,gBAAA,EAAkB;wBACzB9B,IAAAA,EAAMa,QAAAA;wBACNmC,KAAAA,EAAOF,CAAAA;AACPb,wBAAAA,KAAAA;AACArB,wBAAAA,IAAAA,EAAMtD,KAAKsD;AACb,qBAAA,CAAA;;AAGA,oBAAA,MAAMzE,QAAAA,GAA2B;wBAC/B6D,IAAAA,EAAMa,QAAAA;wBACNC,OAAAA,EAAS,IAAA;wBACTC,eAAAA,EAAiB,IAAA;AACjBC,wBAAAA,MAAAA,EAAQS,QAAAA,IAAY;AACtB,qBAAA;oBAEA,MAAM,EAAE3D,UAAU,EAAEZ,MAAAA,EAAQc,gBAAgB,EAAE,GAAG,MAAMC,oBAAAA,CACrDX,IAAAA,EACA;wBAAEnB,QAAAA,EAAU+E,IAAAA,CAAKE,SAAS,CAACjF,QAAAA;qBAAU,EACrC+B,MAAAA,CAAAA;oBAGF,IAAIJ,UAAAA,CAAWF,MAAM,KAAK,CAAA,EAAG;AAC3B,wBAAA,MAAMiG,YAAAA,GAAe7F,gBAAgB,CAAC,CAAA,CAAE,EAAEG,OAAAA,IAAW,mBAAA;AACrD+D,wBAAAA,YAAAA,CAAa4B,IAAI,CAAC;4BAAE9D,IAAAA,EAAMa,QAAAA;4BAAU1C,OAAAA,EAAS0F;AAAa,yBAAA,CAAA;AAC1D/B,wBAAAA,QAAAA,CAAS,YAAA,EAAc;4BAAE9B,IAAAA,EAAMa,QAAAA;AAAUkC,4BAAAA,GAAAA;4BAAKC,KAAAA,EAAOF,CAAAA;4BAAG3E,OAAAA,EAAS0F;AAAa,yBAAA,CAAA;oBAChF,CAAA,MAAO;;wBAEL,MAAMzG,IAAAA,GAAO,MAAMC,kBAAAA,CAAmB;AAAElB,4BAAAA;yBAAS,EAAG,KAAA,CAAA;AACpD,wBAAA,MAAM,CAACkF,YAAAA,CAAa,GAAG,MAAMxF,aAAAA,CAAcuE,MAAM,CAC/C;AAAEhD,4BAAAA,IAAAA;4BAAMI,KAAAA,EAAO;AAACM,gCAAAA,UAAU,CAAC,CAAA;AAAG;yBAAC,EAC/B;AAAEtC,4BAAAA;AAAK,yBAAA,CAAA;;AAIT,wBAAA,MAAMmB,UAAAA,GAAa,MAAM4E,WAAAA,CAAY3E,YAAY,CAACyE,YAAAA,CAAAA;AAClDc,wBAAAA,eAAAA,CAAgB2B,IAAI,CAACnH,UAAAA,CAAAA;AAErBmF,wBAAAA,QAAAA,CAAS,eAAA,EAAiB;4BAAE9B,IAAAA,EAAMa,QAAAA;4BAAUmC,KAAAA,EAAOF,CAAAA;4BAAGxF,IAAAA,EAAMX;AAAW,yBAAA,CAAA;AACzE,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOkC,KAAAA,EAAO;AACd,oBAAA,MAAMgF,eAAehF,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMV,OAAO,GAAGc,MAAAA,CAAOJ,KAAAA,CAAAA;AACrEqD,oBAAAA,YAAAA,CAAa4B,IAAI,CAAC;wBAAE9D,IAAAA,EAAM+C,GAAAA;wBAAK5E,OAAAA,EAAS0F;AAAa,qBAAA,CAAA;AACrD/B,oBAAAA,QAAAA,CAAS,YAAA,EAAc;AAAEiB,wBAAAA,GAAAA;wBAAKC,KAAAA,EAAOF,CAAAA;wBAAG3E,OAAAA,EAAS0F;AAAa,qBAAA,CAAA;AAChE,gBAAA;AACF,YAAA;;YAGA,IAAI1B,eAAAA,CAAgB9B,IAAI,CAAC,CAAC/C,OAASA,IAAAA,CAAKiB,IAAI,EAAEC,UAAAA,CAAW,QAAA,CAAA,CAAA,EAAY;gBACnE,MAAM1C,UAAAA,CAAW,SAAA,CAAA,CAAWwE,UAAU,CAAC,gBAAA,CAAA;AACzC,YAAA;;AAGAwB,YAAAA,QAAAA,CAAS,iBAAA,EAAmB;AAC1B1E,gBAAAA,IAAAA,EAAM,MAAMhB,EAAAA,CAAGS,cAAc,CAACsF,eAAAA,EAAiB;AAAErF,oBAAAA,MAAAA,EAAQR,QAAQS;AAAK,iBAAA,CAAA;gBACtEG,MAAAA,EAAQgF;AACV,aAAA,CAAA;QACF,CAAA,QAAU;;YAER,MAAMG,GAAAA,CAAI0B,MAAM,CAAC3B,mBAAAA,CAAAA;AACnB,QAAA;AAEAT,QAAAA,GAAAA,CAAIqC,GAAG,EAAA;AACT,IAAA,CAAA;;AAGA,IAAA,MAAM5D,QAAO/E,GAAY,EAAA;AACvB,QAAA,MAAM,EACJ4B,KAAAA,EAAO,EAAEf,EAAE,EAAE,EACbT,OAAAA,EAAS,EAAE+B,KAAAA,EAAO,EAAEA,KAAK,EAAE,GAAG,EAAE,EAAE,EACnC,GAAGnC,GAAAA;AAEJ,QAAA,IAAIqF,CAAAA,CAAEC,OAAO,CAACnD,KAAAA,CAAAA,IAAW,CAACE,KAAAA,CAAMC,OAAO,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,CAAMoD,IAAI,KAAK,CAAA,EAAI;AACnE,YAAA,IAAI1E,EAAAA,EAAI;gBACN,OAAO,IAAI,CAACQ,cAAc,CAACrB,GAAAA,CAAAA;AAC7B,YAAA;YAEA,MAAM,IAAI6B,MAAAA,CAAOW,gBAAgB,CAAC,iBAAA,CAAA;AACpC,QAAA;QAEA,MAAO3B,CAAAA,EAAAA,GAAK,IAAI,CAACqB,WAAW,GAAG,IAAI,CAAC2B,WAAU,EAAG7D,GAAAA,CAAAA;AACnD,IAAA;AACF,CAAA;;;;"}

package/dist/server/controllers/utils/find-entity-and-check-permissions.js

@@ -8,15 +8,26 @@ function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
 var ___default = /*#__PURE__*/_interopDefault(_);
 
-const findEntityAndCheckPermissions = async (ability, action, model, id)=>{
-    const file = await index.getService('upload').findOne(id, [
+/**
+ * Loads a file and enforces the permission *conditions* attached to `action` on it.
+ *
+ * `createdBy` and the creator's `roles` have to be populated before `toSubject`: the admin
+ * conditions read them (`admin::is-creator` matches `createdBy.id`, `admin::has-same-role-as-creator`
+ * matches `createdBy.roles`), and a subject missing those fields can never satisfy the rule — so
+ * a conditioned grant would be denied its own files rather than allowed them.
+ *
+ * `strapiInstance` defaults to the ambient global for the admin controllers, which have no
+ * `strapi` in scope. Callers that are handed an instance — MCP tool handlers — pass it
+ * explicitly so they never bind to a different one.
+ */ const findEntityAndCheckPermissions = async (ability, action, model, id, strapiInstance = strapi)=>{
+    const file = await index.getService('upload', strapiInstance).findOne(id, [
         utils.contentTypes.constants.CREATED_BY_ATTRIBUTE,
         'folder'
     ]);
     if (___default.default.isNil(file)) {
         throw new utils.errors.NotFoundError();
     }
-    const pm = strapi.service('admin::permission').createPermissionsManager({
+    const pm = strapiInstance.service('admin::permission').createPermissionsManager({
         ability,
         action,
         model
@@ -25,7 +36,7 @@ const findEntityAndCheckPermissions = async (ability, action, model, id)=>{
         utils.contentTypes.constants.CREATED_BY_ATTRIBUTE,
         'id'
     ]);
-    const author = creatorId ? await strapi.service('admin::user').findOne(creatorId, [
+    const author = creatorId ? await strapiInstance.service('admin::user').findOne(creatorId, [
         'roles'
     ]) : null;
     const fileWithRoles = ___default.default.set(___default.default.cloneDeep(file), 'createdBy', author);

package/dist/server/controllers/utils/find-entity-and-check-permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"find-entity-and-check-permissions.js","sources":["../../../../server/src/controllers/utils/find-entity-and-check-permissions.ts"],"sourcesContent":["import _ from 'lodash';\nimport { errors, contentTypes as contentTypesUtils } from '@strapi/utils';\nimport { getService } from '../../utils';\n\nconst findEntityAndCheckPermissions = async (\n  ability: unknown,\n  action: string,\n  model: string,\n  id: string | number\n) => {\n  const file = await getService('upload').findOne(id, [\n    contentTypesUtils.constants.CREATED_BY_ATTRIBUTE,\n    'folder',\n  ]);\n\n  if (_.isNil(file)) {\n    throw new errors.NotFoundError();\n  }\n\n  const pm = strapi\n    .service('admin::permission')\n    .createPermissionsManager({ ability, action, model });\n\n  const creatorId = _.get(file, [contentTypesUtils.constants.CREATED_BY_ATTRIBUTE, 'id']);\n  const author = creatorId\n    ? await strapi.service('admin::user').findOne(creatorId, ['roles'])\n    : null;\n\n  const fileWithRoles = _.set(_.cloneDeep(file), 'createdBy', author);\n\n  if (pm.ability.cannot(pm.action, pm.toSubject(fileWithRoles))) {\n    throw new errors.ForbiddenError();\n  }\n\n  return { pm, file };\n};\n\nexport { findEntityAndCheckPermissions };\n"],"names":["findEntityAndCheckPermissions","ability","action","model","id","file","getService","findOne","contentTypesUtils","constants","CREATED_BY_ATTRIBUTE","_","isNil","errors","NotFoundError","pm","strapi","service","createPermissionsManager","creatorId","get","author","fileWithRoles","set","cloneDeep","cannot","toSubject","ForbiddenError"],"mappings":";;;;;;;;;;AAIA,MAAMA,6BAAAA,GAAgC,OACpCC,OAAAA,EACAC,MAAAA,EACAC,KAAAA,EACAC,EAAAA,GAAAA;AAEA,IAAA,MAAMC,OAAO,MAAMC,gBAAAA,CAAW,QAAA,CAAA,CAAUC,OAAO,CAACH,EAAAA,EAAI;QAClDI,kBAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAChD,QAAA;AACD,KAAA,CAAA;IAED,IAAIC,kBAAAA,CAAEC,KAAK,CAACP,IAAAA,CAAAA,EAAO;QACjB,MAAM,IAAIQ,aAAOC,aAAa,EAAA;AAChC,IAAA;AAEA,IAAA,MAAMC,KAAKC,MAAAA,CACRC,OAAO,CAAC,mBAAA,CAAA,CACRC,wBAAwB,CAAC;AAAEjB,QAAAA,OAAAA;AAASC,QAAAA,MAAAA;AAAQC,QAAAA;AAAM,KAAA,CAAA;AAErD,IAAA,MAAMgB,SAAAA,GAAYR,kBAAAA,CAAES,GAAG,CAACf,IAAAA,EAAM;QAACG,kBAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAAE,QAAA;AAAK,KAAA,CAAA;IACtF,MAAMW,MAAAA,GAASF,YACX,MAAMH,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeV,OAAO,CAACY,SAAAA,EAAW;AAAC,QAAA;KAAQ,CAAA,GAChE,IAAA;IAEJ,MAAMG,aAAAA,GAAgBX,mBAAEY,GAAG,CAACZ,mBAAEa,SAAS,CAACnB,OAAO,WAAA,EAAagB,MAAAA,CAAAA;IAE5D,IAAIN,EAAAA,CAAGd,OAAO,CAACwB,MAAM,CAACV,EAAAA,CAAGb,MAAM,EAAEa,EAAAA,CAAGW,SAAS,CAACJ,aAAAA,CAAAA,CAAAA,EAAiB;QAC7D,MAAM,IAAIT,aAAOc,cAAc,EAAA;AACjC,IAAA;IAEA,OAAO;AAAEZ,QAAAA,EAAAA;AAAIV,QAAAA;AAAK,KAAA;AACpB;;;;"}
+{"version":3,"file":"find-entity-and-check-permissions.js","sources":["../../../../server/src/controllers/utils/find-entity-and-check-permissions.ts"],"sourcesContent":["import _ from 'lodash';\nimport { errors, contentTypes as contentTypesUtils } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\nimport { getService } from '../../utils';\n\n/**\n * Loads a file and enforces the permission *conditions* attached to `action` on it.\n *\n * `createdBy` and the creator's `roles` have to be populated before `toSubject`: the admin\n * conditions read them (`admin::is-creator` matches `createdBy.id`, `admin::has-same-role-as-creator`\n * matches `createdBy.roles`), and a subject missing those fields can never satisfy the rule — so\n * a conditioned grant would be denied its own files rather than allowed them.\n *\n * `strapiInstance` defaults to the ambient global for the admin controllers, which have no\n * `strapi` in scope. Callers that are handed an instance — MCP tool handlers — pass it\n * explicitly so they never bind to a different one.\n */\nconst findEntityAndCheckPermissions = async (\n  ability: unknown,\n  action: string,\n  model: string,\n  id: string | number,\n  strapiInstance: Core.Strapi = strapi\n) => {\n  const file = await getService('upload', strapiInstance).findOne(id, [\n    contentTypesUtils.constants.CREATED_BY_ATTRIBUTE,\n    'folder',\n  ]);\n\n  if (_.isNil(file)) {\n    throw new errors.NotFoundError();\n  }\n\n  const pm = strapiInstance\n    .service('admin::permission')\n    .createPermissionsManager({ ability, action, model });\n\n  const creatorId = _.get(file, [contentTypesUtils.constants.CREATED_BY_ATTRIBUTE, 'id']);\n  const author = creatorId\n    ? await strapiInstance.service('admin::user').findOne(creatorId, ['roles'])\n    : null;\n\n  const fileWithRoles = _.set(_.cloneDeep(file), 'createdBy', author);\n\n  if (pm.ability.cannot(pm.action, pm.toSubject(fileWithRoles))) {\n    throw new errors.ForbiddenError();\n  }\n\n  return { pm, file };\n};\n\nexport { findEntityAndCheckPermissions };\n"],"names":["findEntityAndCheckPermissions","ability","action","model","id","strapiInstance","strapi","file","getService","findOne","contentTypesUtils","constants","CREATED_BY_ATTRIBUTE","_","isNil","errors","NotFoundError","pm","service","createPermissionsManager","creatorId","get","author","fileWithRoles","set","cloneDeep","cannot","toSubject","ForbiddenError"],"mappings":";;;;;;;;;;AAKA;;;;;;;;;;;IAYA,MAAMA,gCAAgC,OACpCC,OAAAA,EACAC,QACAC,KAAAA,EACAC,EAAAA,EACAC,iBAA8BC,MAAM,GAAA;AAEpC,IAAA,MAAMC,OAAO,MAAMC,gBAAAA,CAAW,UAAUH,cAAAA,CAAAA,CAAgBI,OAAO,CAACL,EAAAA,EAAI;QAClEM,kBAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAChD,QAAA;AACD,KAAA,CAAA;IAED,IAAIC,kBAAAA,CAAEC,KAAK,CAACP,IAAAA,CAAAA,EAAO;QACjB,MAAM,IAAIQ,aAAOC,aAAa,EAAA;AAChC,IAAA;AAEA,IAAA,MAAMC,KAAKZ,cAAAA,CACRa,OAAO,CAAC,mBAAA,CAAA,CACRC,wBAAwB,CAAC;AAAElB,QAAAA,OAAAA;AAASC,QAAAA,MAAAA;AAAQC,QAAAA;AAAM,KAAA,CAAA;AAErD,IAAA,MAAMiB,SAAAA,GAAYP,kBAAAA,CAAEQ,GAAG,CAACd,IAAAA,EAAM;QAACG,kBAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAAE,QAAA;AAAK,KAAA,CAAA;IACtF,MAAMU,MAAAA,GAASF,YACX,MAAMf,cAAAA,CAAea,OAAO,CAAC,aAAA,CAAA,CAAeT,OAAO,CAACW,SAAAA,EAAW;AAAC,QAAA;KAAQ,CAAA,GACxE,IAAA;IAEJ,MAAMG,aAAAA,GAAgBV,mBAAEW,GAAG,CAACX,mBAAEY,SAAS,CAAClB,OAAO,WAAA,EAAae,MAAAA,CAAAA;IAE5D,IAAIL,EAAAA,CAAGhB,OAAO,CAACyB,MAAM,CAACT,EAAAA,CAAGf,MAAM,EAAEe,EAAAA,CAAGU,SAAS,CAACJ,aAAAA,CAAAA,CAAAA,EAAiB;QAC7D,MAAM,IAAIR,aAAOa,cAAc,EAAA;AACjC,IAAA;IAEA,OAAO;AAAEX,QAAAA,EAAAA;AAAIV,QAAAA;AAAK,KAAA;AACpB;;;;"}

package/dist/server/controllers/utils/find-entity-and-check-permissions.mjs

@@ -2,15 +2,26 @@ import _ from 'lodash';
 import { contentTypes, errors } from '@strapi/utils';
 import { getService } from '../../utils/index.mjs';
 
-const findEntityAndCheckPermissions = async (ability, action, model, id)=>{
-    const file = await getService('upload').findOne(id, [
+/**
+ * Loads a file and enforces the permission *conditions* attached to `action` on it.
+ *
+ * `createdBy` and the creator's `roles` have to be populated before `toSubject`: the admin
+ * conditions read them (`admin::is-creator` matches `createdBy.id`, `admin::has-same-role-as-creator`
+ * matches `createdBy.roles`), and a subject missing those fields can never satisfy the rule — so
+ * a conditioned grant would be denied its own files rather than allowed them.
+ *
+ * `strapiInstance` defaults to the ambient global for the admin controllers, which have no
+ * `strapi` in scope. Callers that are handed an instance — MCP tool handlers — pass it
+ * explicitly so they never bind to a different one.
+ */ const findEntityAndCheckPermissions = async (ability, action, model, id, strapiInstance = strapi)=>{
+    const file = await getService('upload', strapiInstance).findOne(id, [
         contentTypes.constants.CREATED_BY_ATTRIBUTE,
         'folder'
     ]);
     if (_.isNil(file)) {
         throw new errors.NotFoundError();
     }
-    const pm = strapi.service('admin::permission').createPermissionsManager({
+    const pm = strapiInstance.service('admin::permission').createPermissionsManager({
         ability,
         action,
         model
@@ -19,7 +30,7 @@ const findEntityAndCheckPermissions = async (ability, action, model, id)=>{
         contentTypes.constants.CREATED_BY_ATTRIBUTE,
         'id'
     ]);
-    const author = creatorId ? await strapi.service('admin::user').findOne(creatorId, [
+    const author = creatorId ? await strapiInstance.service('admin::user').findOne(creatorId, [
         'roles'
     ]) : null;
     const fileWithRoles = _.set(_.cloneDeep(file), 'createdBy', author);

package/dist/server/controllers/utils/find-entity-and-check-permissions.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"find-entity-and-check-permissions.mjs","sources":["../../../../server/src/controllers/utils/find-entity-and-check-permissions.ts"],"sourcesContent":["import _ from 'lodash';\nimport { errors, contentTypes as contentTypesUtils } from '@strapi/utils';\nimport { getService } from '../../utils';\n\nconst findEntityAndCheckPermissions = async (\n  ability: unknown,\n  action: string,\n  model: string,\n  id: string | number\n) => {\n  const file = await getService('upload').findOne(id, [\n    contentTypesUtils.constants.CREATED_BY_ATTRIBUTE,\n    'folder',\n  ]);\n\n  if (_.isNil(file)) {\n    throw new errors.NotFoundError();\n  }\n\n  const pm = strapi\n    .service('admin::permission')\n    .createPermissionsManager({ ability, action, model });\n\n  const creatorId = _.get(file, [contentTypesUtils.constants.CREATED_BY_ATTRIBUTE, 'id']);\n  const author = creatorId\n    ? await strapi.service('admin::user').findOne(creatorId, ['roles'])\n    : null;\n\n  const fileWithRoles = _.set(_.cloneDeep(file), 'createdBy', author);\n\n  if (pm.ability.cannot(pm.action, pm.toSubject(fileWithRoles))) {\n    throw new errors.ForbiddenError();\n  }\n\n  return { pm, file };\n};\n\nexport { findEntityAndCheckPermissions };\n"],"names":["findEntityAndCheckPermissions","ability","action","model","id","file","getService","findOne","contentTypesUtils","constants","CREATED_BY_ATTRIBUTE","_","isNil","errors","NotFoundError","pm","strapi","service","createPermissionsManager","creatorId","get","author","fileWithRoles","set","cloneDeep","cannot","toSubject","ForbiddenError"],"mappings":";;;;AAIA,MAAMA,6BAAAA,GAAgC,OACpCC,OAAAA,EACAC,MAAAA,EACAC,KAAAA,EACAC,EAAAA,GAAAA;AAEA,IAAA,MAAMC,OAAO,MAAMC,UAAAA,CAAW,QAAA,CAAA,CAAUC,OAAO,CAACH,EAAAA,EAAI;QAClDI,YAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAChD,QAAA;AACD,KAAA,CAAA;IAED,IAAIC,CAAAA,CAAEC,KAAK,CAACP,IAAAA,CAAAA,EAAO;QACjB,MAAM,IAAIQ,OAAOC,aAAa,EAAA;AAChC,IAAA;AAEA,IAAA,MAAMC,KAAKC,MAAAA,CACRC,OAAO,CAAC,mBAAA,CAAA,CACRC,wBAAwB,CAAC;AAAEjB,QAAAA,OAAAA;AAASC,QAAAA,MAAAA;AAAQC,QAAAA;AAAM,KAAA,CAAA;AAErD,IAAA,MAAMgB,SAAAA,GAAYR,CAAAA,CAAES,GAAG,CAACf,IAAAA,EAAM;QAACG,YAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAAE,QAAA;AAAK,KAAA,CAAA;IACtF,MAAMW,MAAAA,GAASF,YACX,MAAMH,MAAAA,CAAOC,OAAO,CAAC,aAAA,CAAA,CAAeV,OAAO,CAACY,SAAAA,EAAW;AAAC,QAAA;KAAQ,CAAA,GAChE,IAAA;IAEJ,MAAMG,aAAAA,GAAgBX,EAAEY,GAAG,CAACZ,EAAEa,SAAS,CAACnB,OAAO,WAAA,EAAagB,MAAAA,CAAAA;IAE5D,IAAIN,EAAAA,CAAGd,OAAO,CAACwB,MAAM,CAACV,EAAAA,CAAGb,MAAM,EAAEa,EAAAA,CAAGW,SAAS,CAACJ,aAAAA,CAAAA,CAAAA,EAAiB;QAC7D,MAAM,IAAIT,OAAOc,cAAc,EAAA;AACjC,IAAA;IAEA,OAAO;AAAEZ,QAAAA,EAAAA;AAAIV,QAAAA;AAAK,KAAA;AACpB;;;;"}
+{"version":3,"file":"find-entity-and-check-permissions.mjs","sources":["../../../../server/src/controllers/utils/find-entity-and-check-permissions.ts"],"sourcesContent":["import _ from 'lodash';\nimport { errors, contentTypes as contentTypesUtils } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\nimport { getService } from '../../utils';\n\n/**\n * Loads a file and enforces the permission *conditions* attached to `action` on it.\n *\n * `createdBy` and the creator's `roles` have to be populated before `toSubject`: the admin\n * conditions read them (`admin::is-creator` matches `createdBy.id`, `admin::has-same-role-as-creator`\n * matches `createdBy.roles`), and a subject missing those fields can never satisfy the rule — so\n * a conditioned grant would be denied its own files rather than allowed them.\n *\n * `strapiInstance` defaults to the ambient global for the admin controllers, which have no\n * `strapi` in scope. Callers that are handed an instance — MCP tool handlers — pass it\n * explicitly so they never bind to a different one.\n */\nconst findEntityAndCheckPermissions = async (\n  ability: unknown,\n  action: string,\n  model: string,\n  id: string | number,\n  strapiInstance: Core.Strapi = strapi\n) => {\n  const file = await getService('upload', strapiInstance).findOne(id, [\n    contentTypesUtils.constants.CREATED_BY_ATTRIBUTE,\n    'folder',\n  ]);\n\n  if (_.isNil(file)) {\n    throw new errors.NotFoundError();\n  }\n\n  const pm = strapiInstance\n    .service('admin::permission')\n    .createPermissionsManager({ ability, action, model });\n\n  const creatorId = _.get(file, [contentTypesUtils.constants.CREATED_BY_ATTRIBUTE, 'id']);\n  const author = creatorId\n    ? await strapiInstance.service('admin::user').findOne(creatorId, ['roles'])\n    : null;\n\n  const fileWithRoles = _.set(_.cloneDeep(file), 'createdBy', author);\n\n  if (pm.ability.cannot(pm.action, pm.toSubject(fileWithRoles))) {\n    throw new errors.ForbiddenError();\n  }\n\n  return { pm, file };\n};\n\nexport { findEntityAndCheckPermissions };\n"],"names":["findEntityAndCheckPermissions","ability","action","model","id","strapiInstance","strapi","file","getService","findOne","contentTypesUtils","constants","CREATED_BY_ATTRIBUTE","_","isNil","errors","NotFoundError","pm","service","createPermissionsManager","creatorId","get","author","fileWithRoles","set","cloneDeep","cannot","toSubject","ForbiddenError"],"mappings":";;;;AAKA;;;;;;;;;;;IAYA,MAAMA,gCAAgC,OACpCC,OAAAA,EACAC,QACAC,KAAAA,EACAC,EAAAA,EACAC,iBAA8BC,MAAM,GAAA;AAEpC,IAAA,MAAMC,OAAO,MAAMC,UAAAA,CAAW,UAAUH,cAAAA,CAAAA,CAAgBI,OAAO,CAACL,EAAAA,EAAI;QAClEM,YAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAChD,QAAA;AACD,KAAA,CAAA;IAED,IAAIC,CAAAA,CAAEC,KAAK,CAACP,IAAAA,CAAAA,EAAO;QACjB,MAAM,IAAIQ,OAAOC,aAAa,EAAA;AAChC,IAAA;AAEA,IAAA,MAAMC,KAAKZ,cAAAA,CACRa,OAAO,CAAC,mBAAA,CAAA,CACRC,wBAAwB,CAAC;AAAElB,QAAAA,OAAAA;AAASC,QAAAA,MAAAA;AAAQC,QAAAA;AAAM,KAAA,CAAA;AAErD,IAAA,MAAMiB,SAAAA,GAAYP,CAAAA,CAAEQ,GAAG,CAACd,IAAAA,EAAM;QAACG,YAAAA,CAAkBC,SAAS,CAACC,oBAAoB;AAAE,QAAA;AAAK,KAAA,CAAA;IACtF,MAAMU,MAAAA,GAASF,YACX,MAAMf,cAAAA,CAAea,OAAO,CAAC,aAAA,CAAA,CAAeT,OAAO,CAACW,SAAAA,EAAW;AAAC,QAAA;KAAQ,CAAA,GACxE,IAAA;IAEJ,MAAMG,aAAAA,GAAgBV,EAAEW,GAAG,CAACX,EAAEY,SAAS,CAAClB,OAAO,WAAA,EAAae,MAAAA,CAAAA;IAE5D,IAAIL,EAAAA,CAAGhB,OAAO,CAACyB,MAAM,CAACT,EAAAA,CAAGf,MAAM,EAAEe,EAAAA,CAAGU,SAAS,CAACJ,aAAAA,CAAAA,CAAAA,EAAiB;QAC7D,MAAM,IAAIR,OAAOa,cAAc,EAAA;AACjC,IAAA;IAEA,OAAO;AAAEX,QAAAA,EAAAA;AAAIV,QAAAA;AAAK,KAAA;AACpB;;;;"}

package/dist/server/controllers/utils/folders.js

@@ -1,6 +1,6 @@
 'use strict';
 
-const isFolderOrChild = (folderOrChild, folder)=>folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);
+/** Only the materialized `path` is compared, so any row carrying one can be passed. */ const isFolderOrChild = (folderOrChild, folder)=>folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);
 
 exports.isFolderOrChild = isFolderOrChild;
 //# sourceMappingURL=folders.js.map

package/dist/server/controllers/utils/folders.js.map

@@ -1 +1 @@
-{"version":3,"file":"folders.js","sources":["../../../../server/src/controllers/utils/folders.ts"],"sourcesContent":["import { Folder } from '../../types';\n\nconst isFolderOrChild = (folderOrChild: Folder, folder: Folder) =>\n  folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);\n\nexport { isFolderOrChild };\n"],"names":["isFolderOrChild","folderOrChild","folder","path","startsWith"],"mappings":";;AAEA,MAAMA,eAAAA,GAAkB,CAACC,aAAAA,EAAuBC,MAAAA,GAC9CD,cAAcE,IAAI,KAAKD,OAAOC,IAAI,IAAIF,cAAcE,IAAI,CAACC,UAAU,CAAC,CAAA,EAAGF,OAAOC,IAAI,CAAC,CAAC,CAAC;;;;"}
+{"version":3,"file":"folders.js","sources":["../../../../server/src/controllers/utils/folders.ts"],"sourcesContent":["import { Folder } from '../../types';\n\n/** Only the materialized `path` is compared, so any row carrying one can be passed. */\nconst isFolderOrChild = (folderOrChild: Pick<Folder, 'path'>, folder: Pick<Folder, 'path'>) =>\n  folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);\n\nexport { isFolderOrChild };\n"],"names":["isFolderOrChild","folderOrChild","folder","path","startsWith"],"mappings":";;AAEA,8FACMA,eAAAA,GAAkB,CAACC,eAAqCC,MAAAA,GAC5DD,aAAAA,CAAcE,IAAI,KAAKD,MAAAA,CAAOC,IAAI,IAAIF,aAAAA,CAAcE,IAAI,CAACC,UAAU,CAAC,GAAGF,MAAAA,CAAOC,IAAI,CAAC,CAAC,CAAC;;;;"}

package/dist/server/controllers/utils/folders.mjs

@@ -1,4 +1,4 @@
-const isFolderOrChild = (folderOrChild, folder)=>folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);
+/** Only the materialized `path` is compared, so any row carrying one can be passed. */ const isFolderOrChild = (folderOrChild, folder)=>folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);
 
 export { isFolderOrChild };
 //# sourceMappingURL=folders.mjs.map

package/dist/server/controllers/utils/folders.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"folders.mjs","sources":["../../../../server/src/controllers/utils/folders.ts"],"sourcesContent":["import { Folder } from '../../types';\n\nconst isFolderOrChild = (folderOrChild: Folder, folder: Folder) =>\n  folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);\n\nexport { isFolderOrChild };\n"],"names":["isFolderOrChild","folderOrChild","folder","path","startsWith"],"mappings":"AAEA,MAAMA,eAAAA,GAAkB,CAACC,aAAAA,EAAuBC,MAAAA,GAC9CD,cAAcE,IAAI,KAAKD,OAAOC,IAAI,IAAIF,cAAcE,IAAI,CAACC,UAAU,CAAC,CAAA,EAAGF,OAAOC,IAAI,CAAC,CAAC,CAAC;;;;"}
+{"version":3,"file":"folders.mjs","sources":["../../../../server/src/controllers/utils/folders.ts"],"sourcesContent":["import { Folder } from '../../types';\n\n/** Only the materialized `path` is compared, so any row carrying one can be passed. */\nconst isFolderOrChild = (folderOrChild: Pick<Folder, 'path'>, folder: Pick<Folder, 'path'>) =>\n  folderOrChild.path === folder.path || folderOrChild.path.startsWith(`${folder.path}/`);\n\nexport { isFolderOrChild };\n"],"names":["isFolderOrChild","folderOrChild","folder","path","startsWith"],"mappings":"AAEA,8FACMA,eAAAA,GAAkB,CAACC,eAAqCC,MAAAA,GAC5DD,aAAAA,CAAcE,IAAI,KAAKD,MAAAA,CAAOC,IAAI,IAAIF,aAAAA,CAAcE,IAAI,CAACC,UAAU,CAAC,GAAGF,MAAAA,CAAOC,IAAI,CAAC,CAAC,CAAC;;;;"}

package/dist/server/mcp/ambient-instance.js

@@ -0,0 +1,46 @@
+'use strict';
+
+var index = require('../utils/index.js');
+
+/**
+ * Asserts that an MCP handler's Strapi instance is the ambient `global.strapi`.
+ *
+ * Two of the upload plugin's services — `folder` and `file` — are registered as plain object
+ * literals rather than factories (see `services/index.ts`), so their methods close over the
+ * module-scope ambient `strapi` and query `global.strapi.db` regardless of which instance is
+ * passed to `getService`. Passing an instance therefore selects the right plugin registry but
+ * does *not* bind the queries to it.
+ *
+ * The folder tools reach `folder` directly. The asset write tools reach `file` transitively:
+ * `upload.updateFileInfo` resolves it with a bare `getService('file')` (`services/upload.ts`),
+ * and `file.getFolderPath` then queries the ambient `strapi.db`. So a handler that looks
+ * instance-bound can still mix ambient reads with instance-bound writes.
+ *
+ * Threading an instance through both services is a broader refactor than the MCP surface should
+ * carry: `create`, `update` and `deleteByIds` reach for `strapi.db`, `strapi.eventHub` and
+ * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and
+ * validator already depends on the ambient form.
+ *
+ * So the dependency is made explicit and asserted instead. Handlers call this in their factory
+ * body — at handler construction, not per call — so a mismatch fails while the tool is being
+ * registered rather than surfacing to an agent as tool output mid-conversation.
+ *
+ * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so
+ * the two agree. If they ever diverge — a second Strapi instance in one process — this throws
+ * rather than silently reading or writing the wrong app's media library.
+ */ const assertAmbientInstance = (strapi)=>{
+    if (strapi !== global.strapi) {
+        throw new Error('The upload `folder` and `file` services are bound to the ambient `global.strapi`, but an ' + 'MCP handler was constructed with a different Strapi instance. Media queries would run ' + 'against the wrong app. Convert those services to factories before serving MCP from a ' + 'non-global instance.');
+    }
+};
+/**
+ * Resolves the `folder` service for an MCP handler.
+ *
+ * A bare `getService('folder', strapi)` reads as instance-bound but is not — see
+ * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps
+ * the resolution behind a named helper so the call sites do not reintroduce the misleading form.
+ */ const getFolderService = (strapi)=>index.getService('folder', strapi);
+
+exports.assertAmbientInstance = assertAmbientInstance;
+exports.getFolderService = getFolderService;
+//# sourceMappingURL=ambient-instance.js.map

package/dist/server/mcp/ambient-instance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ambient-instance.js","sources":["../../../server/src/mcp/ambient-instance.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport { getService } from '../utils';\n\n/**\n * Asserts that an MCP handler's Strapi instance is the ambient `global.strapi`.\n *\n * Two of the upload plugin's services — `folder` and `file` — are registered as plain object\n * literals rather than factories (see `services/index.ts`), so their methods close over the\n * module-scope ambient `strapi` and query `global.strapi.db` regardless of which instance is\n * passed to `getService`. Passing an instance therefore selects the right plugin registry but\n * does *not* bind the queries to it.\n *\n * The folder tools reach `folder` directly. The asset write tools reach `file` transitively:\n * `upload.updateFileInfo` resolves it with a bare `getService('file')` (`services/upload.ts`),\n * and `file.getFolderPath` then queries the ambient `strapi.db`. So a handler that looks\n * instance-bound can still mix ambient reads with instance-bound writes.\n *\n * Threading an instance through both services is a broader refactor than the MCP surface should\n * carry: `create`, `update` and `deleteByIds` reach for `strapi.db`, `strapi.eventHub` and\n * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and\n * validator already depends on the ambient form.\n *\n * So the dependency is made explicit and asserted instead. Handlers call this in their factory\n * body — at handler construction, not per call — so a mismatch fails while the tool is being\n * registered rather than surfacing to an agent as tool output mid-conversation.\n *\n * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so\n * the two agree. If they ever diverge — a second Strapi instance in one process — this throws\n * rather than silently reading or writing the wrong app's media library.\n */\nexport const assertAmbientInstance = (strapi: Core.Strapi) => {\n  if (strapi !== global.strapi) {\n    throw new Error(\n      'The upload `folder` and `file` services are bound to the ambient `global.strapi`, but an ' +\n        'MCP handler was constructed with a different Strapi instance. Media queries would run ' +\n        'against the wrong app. Convert those services to factories before serving MCP from a ' +\n        'non-global instance.'\n    );\n  }\n};\n\n/**\n * Resolves the `folder` service for an MCP handler.\n *\n * A bare `getService('folder', strapi)` reads as instance-bound but is not — see\n * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps\n * the resolution behind a named helper so the call sites do not reintroduce the misleading form.\n */\nexport const getFolderService = (strapi: Core.Strapi) => getService('folder', strapi);\n"],"names":["assertAmbientInstance","strapi","global","Error","getFolderService","getService"],"mappings":";;;;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BO,MAAMA,qBAAAA,GAAwB,CAACC,MAAAA,GAAAA;IACpC,IAAIA,MAAAA,KAAWC,MAAAA,CAAOD,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIE,KAAAA,CACR,2FAAA,GACE,wFAAA,GACA,uFAAA,GACA,sBAAA,CAAA;AAEN,IAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAMC,gBAAAA,GAAmB,CAACH,MAAAA,GAAwBI,gBAAAA,CAAW,UAAUJ,MAAAA;;;;;"}