@strapi/upload 5.53.0 → 5.55.0

package/dist/server/mcp/utils.mjs

@@ -0,0 +1,12 @@
+/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */ const ok = (structuredContent)=>({
+        content: [
+            {
+                type: 'text',
+                text: JSON.stringify(structuredContent)
+            }
+        ],
+        structuredContent
+    });
+
+export { ok };
+//# sourceMappingURL=utils.mjs.map

package/dist/server/mcp/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","sources":["../../../server/src/mcp/utils.ts"],"sourcesContent":["import type { Modules } from '@strapi/types';\n\n/** Wraps a plain object into the dual-representation MCP tool return value (text + structuredContent). */\nexport const ok = (\n  structuredContent: Record<string, unknown>\n): Modules.MCP.McpToolHandlerReturn => ({\n  content: [{ type: 'text', text: JSON.stringify(structuredContent) }],\n  structuredContent,\n});\n"],"names":["ok","structuredContent","content","type","text","JSON","stringify"],"mappings":"AAEA,2GACO,MAAMA,EAAAA,GAAK,CAChBC,qBACsC;QACtCC,OAAAA,EAAS;AAAC,YAAA;gBAAEC,IAAAA,EAAM,MAAA;gBAAQC,IAAAA,EAAMC,IAAAA,CAAKC,SAAS,CAACL,iBAAAA;AAAmB;AAAE,SAAA;AACpEA,QAAAA;AACF,KAAA;;;;"}

package/dist/server/media-library-default-notice.js

@@ -0,0 +1,42 @@
+'use strict';
+
+const NOTICE_STORE_KEY = 'media_library_default_notice';
+const NOTICE = [
+    'The Media Library has been redesigned and is now the default.',
+    'To keep the previous one, set `useLegacyMediaLibrary: true` in config/features.'
+].join(' ');
+/**
+ * Tells an upgrading app, once, that its Media Library changed.
+ *
+ * At GA every existing app changes behaviour with nothing in its config to hint at it,
+ * because nobody has a flag set. Three conditions keep this from becoming noise:
+ *
+ * - only when the flag is absent — setting it either way is a deliberate choice, and
+ *   `false` is how an app says "I know, I want the new one"
+ * - only for an app that has booted this plugin before, so a fresh install (which has
+ *   no previous Media Library to lose) stays quiet
+ * - only once, tracked in the plugin store rather than in memory, so restarts and
+ *   multi-instance deployments do not repeat it
+ */ const notifyMediaLibraryDefault = async ({ strapi, isExistingApp })=>{
+    const optOut = strapi.config.get('features.useLegacyMediaLibrary');
+    if (optOut !== undefined || !isExistingApp) {
+        return;
+    }
+    const store = strapi.store({
+        type: 'plugin',
+        name: 'upload',
+        key: NOTICE_STORE_KEY
+    });
+    if (await store.get({}) !== null) {
+        return;
+    }
+    strapi.log.info(NOTICE);
+    await store.set({
+        value: {
+            shown: true
+        }
+    });
+};
+
+exports.notifyMediaLibraryDefault = notifyMediaLibraryDefault;
+//# sourceMappingURL=media-library-default-notice.js.map

package/dist/server/media-library-default-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-library-default-notice.js","sources":["../../server/src/media-library-default-notice.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nconst NOTICE_STORE_KEY = 'media_library_default_notice';\n\nconst NOTICE = [\n  'The Media Library has been redesigned and is now the default.',\n  'To keep the previous one, set `useLegacyMediaLibrary: true` in config/features.',\n].join(' ');\n\n/**\n * Tells an upgrading app, once, that its Media Library changed.\n *\n * At GA every existing app changes behaviour with nothing in its config to hint at it,\n * because nobody has a flag set. Three conditions keep this from becoming noise:\n *\n * - only when the flag is absent — setting it either way is a deliberate choice, and\n *   `false` is how an app says \"I know, I want the new one\"\n * - only for an app that has booted this plugin before, so a fresh install (which has\n *   no previous Media Library to lose) stays quiet\n * - only once, tracked in the plugin store rather than in memory, so restarts and\n *   multi-instance deployments do not repeat it\n */\nexport const notifyMediaLibraryDefault = async ({\n  strapi,\n  isExistingApp,\n}: {\n  strapi: Core.Strapi;\n  isExistingApp: boolean;\n}) => {\n  const optOut = strapi.config.get('features.useLegacyMediaLibrary');\n\n  if (optOut !== undefined || !isExistingApp) {\n    return;\n  }\n\n  const store = strapi.store!({ type: 'plugin', name: 'upload', key: NOTICE_STORE_KEY });\n\n  if ((await store.get({})) !== null) {\n    return;\n  }\n\n  strapi.log.info(NOTICE);\n  await store.set({ value: { shown: true } });\n};\n"],"names":["NOTICE_STORE_KEY","NOTICE","join","notifyMediaLibraryDefault","strapi","isExistingApp","optOut","config","get","undefined","store","type","name","key","log","info","set","value","shown"],"mappings":";;AAEA,MAAMA,gBAAAA,GAAmB,8BAAA;AAEzB,MAAMC,MAAAA,GAAS;AACb,IAAA,+DAAA;AACA,IAAA;AACD,CAAA,CAACC,IAAI,CAAC,GAAA,CAAA;AAEP;;;;;;;;;;;;UAaaC,yBAAAA,GAA4B,OAAO,EAC9CC,MAAM,EACNC,aAAa,EAId,GAAA;AACC,IAAA,MAAMC,MAAAA,GAASF,MAAAA,CAAOG,MAAM,CAACC,GAAG,CAAC,gCAAA,CAAA;IAEjC,IAAIF,MAAAA,KAAWG,SAAAA,IAAa,CAACJ,aAAAA,EAAe;AAC1C,QAAA;AACF,IAAA;IAEA,MAAMK,KAAAA,GAAQN,MAAAA,CAAOM,KAAK,CAAE;QAAEC,IAAAA,EAAM,QAAA;QAAUC,IAAAA,EAAM,QAAA;QAAUC,GAAAA,EAAKb;AAAiB,KAAA,CAAA;AAEpF,IAAA,IAAI,MAAOU,KAAAA,CAAMF,GAAG,CAAC,QAAS,IAAA,EAAM;AAClC,QAAA;AACF,IAAA;IAEAJ,MAAAA,CAAOU,GAAG,CAACC,IAAI,CAACd,MAAAA,CAAAA;IAChB,MAAMS,KAAAA,CAAMM,GAAG,CAAC;QAAEC,KAAAA,EAAO;YAAEC,KAAAA,EAAO;AAAK;AAAE,KAAA,CAAA;AAC3C;;;;"}

package/dist/server/media-library-default-notice.mjs

@@ -0,0 +1,40 @@
+const NOTICE_STORE_KEY = 'media_library_default_notice';
+const NOTICE = [
+    'The Media Library has been redesigned and is now the default.',
+    'To keep the previous one, set `useLegacyMediaLibrary: true` in config/features.'
+].join(' ');
+/**
+ * Tells an upgrading app, once, that its Media Library changed.
+ *
+ * At GA every existing app changes behaviour with nothing in its config to hint at it,
+ * because nobody has a flag set. Three conditions keep this from becoming noise:
+ *
+ * - only when the flag is absent — setting it either way is a deliberate choice, and
+ *   `false` is how an app says "I know, I want the new one"
+ * - only for an app that has booted this plugin before, so a fresh install (which has
+ *   no previous Media Library to lose) stays quiet
+ * - only once, tracked in the plugin store rather than in memory, so restarts and
+ *   multi-instance deployments do not repeat it
+ */ const notifyMediaLibraryDefault = async ({ strapi, isExistingApp })=>{
+    const optOut = strapi.config.get('features.useLegacyMediaLibrary');
+    if (optOut !== undefined || !isExistingApp) {
+        return;
+    }
+    const store = strapi.store({
+        type: 'plugin',
+        name: 'upload',
+        key: NOTICE_STORE_KEY
+    });
+    if (await store.get({}) !== null) {
+        return;
+    }
+    strapi.log.info(NOTICE);
+    await store.set({
+        value: {
+            shown: true
+        }
+    });
+};
+
+export { notifyMediaLibraryDefault };
+//# sourceMappingURL=media-library-default-notice.mjs.map

package/dist/server/media-library-default-notice.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-library-default-notice.mjs","sources":["../../server/src/media-library-default-notice.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nconst NOTICE_STORE_KEY = 'media_library_default_notice';\n\nconst NOTICE = [\n  'The Media Library has been redesigned and is now the default.',\n  'To keep the previous one, set `useLegacyMediaLibrary: true` in config/features.',\n].join(' ');\n\n/**\n * Tells an upgrading app, once, that its Media Library changed.\n *\n * At GA every existing app changes behaviour with nothing in its config to hint at it,\n * because nobody has a flag set. Three conditions keep this from becoming noise:\n *\n * - only when the flag is absent — setting it either way is a deliberate choice, and\n *   `false` is how an app says \"I know, I want the new one\"\n * - only for an app that has booted this plugin before, so a fresh install (which has\n *   no previous Media Library to lose) stays quiet\n * - only once, tracked in the plugin store rather than in memory, so restarts and\n *   multi-instance deployments do not repeat it\n */\nexport const notifyMediaLibraryDefault = async ({\n  strapi,\n  isExistingApp,\n}: {\n  strapi: Core.Strapi;\n  isExistingApp: boolean;\n}) => {\n  const optOut = strapi.config.get('features.useLegacyMediaLibrary');\n\n  if (optOut !== undefined || !isExistingApp) {\n    return;\n  }\n\n  const store = strapi.store!({ type: 'plugin', name: 'upload', key: NOTICE_STORE_KEY });\n\n  if ((await store.get({})) !== null) {\n    return;\n  }\n\n  strapi.log.info(NOTICE);\n  await store.set({ value: { shown: true } });\n};\n"],"names":["NOTICE_STORE_KEY","NOTICE","join","notifyMediaLibraryDefault","strapi","isExistingApp","optOut","config","get","undefined","store","type","name","key","log","info","set","value","shown"],"mappings":"AAEA,MAAMA,gBAAAA,GAAmB,8BAAA;AAEzB,MAAMC,MAAAA,GAAS;AACb,IAAA,+DAAA;AACA,IAAA;AACD,CAAA,CAACC,IAAI,CAAC,GAAA,CAAA;AAEP;;;;;;;;;;;;UAaaC,yBAAAA,GAA4B,OAAO,EAC9CC,MAAM,EACNC,aAAa,EAId,GAAA;AACC,IAAA,MAAMC,MAAAA,GAASF,MAAAA,CAAOG,MAAM,CAACC,GAAG,CAAC,gCAAA,CAAA;IAEjC,IAAIF,MAAAA,KAAWG,SAAAA,IAAa,CAACJ,aAAAA,EAAe;AAC1C,QAAA;AACF,IAAA;IAEA,MAAMK,KAAAA,GAAQN,MAAAA,CAAOM,KAAK,CAAE;QAAEC,IAAAA,EAAM,QAAA;QAAUC,IAAAA,EAAM,QAAA;QAAUC,GAAAA,EAAKb;AAAiB,KAAA,CAAA;AAEpF,IAAA,IAAI,MAAOU,KAAAA,CAAMF,GAAG,CAAC,QAAS,IAAA,EAAM;AAClC,QAAA;AACF,IAAA;IAEAJ,MAAAA,CAAOU,GAAG,CAACC,IAAI,CAACd,MAAAA,CAAAA;IAChB,MAAMS,KAAAA,CAAMM,GAAG,CAAC;QAAEC,KAAAA,EAAO;YAAEC,KAAAA,EAAO;AAAK;AAAE,KAAA,CAAA;AAC3C;;;;"}

package/dist/server/migrations/unsign-richtext-and-blocks-urls.js

@@ -0,0 +1,147 @@
+'use strict';
+
+var fp = require('lodash/fp');
+var utils = require('../services/extensions/utils.js');
+
+const BATCH_SIZE = 100;
+const LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';
+const getTargetAttributes = (schema)=>Object.entries(schema.attributes ?? {}).filter(([, attribute])=>attribute.type === 'richtext' || attribute.type === 'blocks').map(([name, attribute])=>({
+            name,
+            type: attribute.type
+        }));
+const unsignValue = async (value, type, cache)=>{
+    return type === 'blocks' ? utils.mapBlocksImages(value, (image)=>utils.unsignImage(image, cache)) : utils.mapRichtextUrls(value, (url)=>utils.stripSignedUrl(url, cache));
+};
+const migrateSchema = async (trx, db, schema, cache)=>{
+    const progress = {
+        scanned: 0,
+        updated: 0
+    };
+    const attributes = getTargetAttributes(schema);
+    if (attributes.length === 0) {
+        return progress;
+    }
+    const { uid } = schema;
+    if (!db.metadata.has(uid)) {
+        return progress;
+    }
+    const meta = db.metadata.get(uid);
+    const { tableName } = meta;
+    // The schema checks must run on the migration transaction: on SQLite the pool
+    // has a single connection, so a root-connection query would wait on it forever
+    const knex = db.getSchemaConnection(trx);
+    // On a fresh project the migrations run before the tables exist
+    if (!await knex.hasTable(tableName)) {
+        return progress;
+    }
+    // Internal migrations run before the schema sync: an attribute added in the
+    // same deploy as this version has no column yet, so only select what exists
+    const existing = [];
+    for (const attribute of attributes){
+        const attributeMeta = meta.attributes[attribute.name];
+        const columnName = attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName ? attributeMeta.columnName : attribute.name;
+        if (await knex.hasColumn(tableName, columnName)) {
+            existing.push(attribute);
+        }
+    }
+    if (existing.length === 0) {
+        return progress;
+    }
+    const select = [
+        'id',
+        ...existing.map(({ name })=>name)
+    ];
+    let offset = 0;
+    let hasMore = true;
+    while(hasMore){
+        const rows = await strapi.db.query(uid).findMany({
+            select,
+            limit: BATCH_SIZE,
+            offset,
+            orderBy: {
+                id: 'asc'
+            }
+        });
+        hasMore = rows.length === BATCH_SIZE;
+        offset += rows.length;
+        progress.scanned += rows.length;
+        for (const row of rows){
+            const data = {};
+            for (const { name, type } of existing){
+                // A value the mapper cannot process is logged and skipped. This is safe
+                // to catch: the mapper does no database work (presigning is local to
+                // the provider), so the surrounding transaction is not poisoned.
+                try {
+                    const unsigned = await unsignValue(row[name], type, cache);
+                    if (!fp.isEqual(unsigned, row[name])) {
+                        data[name] = unsigned;
+                    }
+                } catch (error) {
+                    strapi.log.warn(`${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            if (Object.keys(data).length > 0) {
+                await strapi.db.query(uid).update({
+                    where: {
+                        id: row.id
+                    },
+                    data
+                });
+                progress.updated += 1;
+            }
+        }
+    }
+    if (progress.scanned > 0) {
+        strapi.log.info(`${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`);
+    }
+    return progress;
+};
+const migrateUp = async (trx, db)=>{
+    const { provider } = strapi.plugins.upload;
+    // Nothing is signed on a public provider, so there is nothing to strip
+    if (!provider || !await provider.isPrivate()) {
+        return;
+    }
+    const schemas = [
+        ...Object.values(strapi.contentTypes),
+        ...Object.values(strapi.components)
+    ];
+    // One presign per distinct URL for the whole run, however many rows it appears in
+    const cache = utils.createSignCache();
+    const total = {
+        scanned: 0,
+        updated: 0
+    };
+    for (const schema of schemas){
+        const progress = await migrateSchema(trx, db, schema, cache);
+        total.scanned += progress.scanned;
+        total.updated += progress.updated;
+    }
+    strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);
+};
+/**
+ * Richtext and blocks attributes embed the file URL in their own value, so a
+ * signed URL written by the admin used to be frozen in the row and broke as
+ * soon as the signature expired. New writes are normalised by the upload
+ * document service middleware, and the read path re-signs a stored URL that
+ * still carries a stale signature, so this migration is a cleanup of the rows
+ * written before the fix rather than a prerequisite for it.
+ *
+ * Idempotent: re-running it finds nothing left to change.
+ *
+ * Runs inside the internal migration transaction like every other internal
+ * migration: a database error fails the boot. A single value the mapper cannot
+ * process is logged with a warning and skipped; it is normalised by the
+ * middleware on its next save and re-signed on read until then.
+ */ const unsignRichtextAndBlocksUrls = {
+    name: 'upload::unsign-richtext-and-blocks-urls',
+    async up (trx, db) {
+        await migrateUp(trx, db);
+    },
+    async down () {
+        throw new Error('not implemented');
+    }
+};
+
+exports.unsignRichtextAndBlocksUrls = unsignRichtextAndBlocksUrls;
+//# sourceMappingURL=unsign-richtext-and-blocks-urls.js.map

package/dist/server/migrations/unsign-richtext-and-blocks-urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsign-richtext-and-blocks-urls.js","sources":["../../../server/src/migrations/unsign-richtext-and-blocks-urls.ts"],"sourcesContent":["import { isEqual } from 'lodash/fp';\n\nimport type { Database, Migration } from '@strapi/database';\nimport type { Struct } from '@strapi/types';\n\nimport {\n  createSignCache,\n  mapBlocksImages,\n  mapRichtextUrls,\n  stripSignedUrl,\n  unsignImage,\n} from '../services/extensions/utils';\nimport type { SignCache } from '../services/extensions/utils';\n\nconst BATCH_SIZE = 100;\nconst LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';\n\ntype MigrationTrx = Parameters<Migration['up']>[0];\n\ntype TargetAttribute = { name: string; type: 'richtext' | 'blocks' };\n\ntype Progress = { scanned: number; updated: number };\n\nconst getTargetAttributes = (schema: Struct.Schema): TargetAttribute[] =>\n  Object.entries(schema.attributes ?? {})\n    .filter(([, attribute]) => attribute.type === 'richtext' || attribute.type === 'blocks')\n    .map(([name, attribute]) => ({ name, type: attribute.type as TargetAttribute['type'] }));\n\nconst unsignValue = async (value: unknown, type: TargetAttribute['type'], cache: SignCache) => {\n  return type === 'blocks'\n    ? mapBlocksImages(value, (image) => unsignImage(image, cache))\n    : mapRichtextUrls(value, (url) => stripSignedUrl(url, cache));\n};\n\nconst migrateSchema = async (\n  trx: MigrationTrx,\n  db: Database,\n  schema: Struct.Schema,\n  cache: SignCache\n): Promise<Progress> => {\n  const progress: Progress = { scanned: 0, updated: 0 };\n  const attributes = getTargetAttributes(schema);\n\n  if (attributes.length === 0) {\n    return progress;\n  }\n\n  const { uid } = schema;\n\n  if (!db.metadata.has(uid)) {\n    return progress;\n  }\n\n  const meta = db.metadata.get(uid);\n  const { tableName } = meta;\n  // The schema checks must run on the migration transaction: on SQLite the pool\n  // has a single connection, so a root-connection query would wait on it forever\n  const knex = db.getSchemaConnection(trx);\n\n  // On a fresh project the migrations run before the tables exist\n  if (!(await knex.hasTable(tableName))) {\n    return progress;\n  }\n\n  // Internal migrations run before the schema sync: an attribute added in the\n  // same deploy as this version has no column yet, so only select what exists\n  const existing: TargetAttribute[] = [];\n\n  for (const attribute of attributes) {\n    const attributeMeta = meta.attributes[attribute.name];\n    const columnName =\n      attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName\n        ? attributeMeta.columnName\n        : attribute.name;\n\n    if (await knex.hasColumn(tableName, columnName)) {\n      existing.push(attribute);\n    }\n  }\n\n  if (existing.length === 0) {\n    return progress;\n  }\n\n  const select = ['id', ...existing.map(({ name }) => name)];\n\n  let offset = 0;\n  let hasMore = true;\n\n  while (hasMore) {\n    const rows: Record<string, any>[] = await strapi.db.query(uid).findMany({\n      select,\n      limit: BATCH_SIZE,\n      offset,\n      orderBy: { id: 'asc' },\n    });\n\n    hasMore = rows.length === BATCH_SIZE;\n    offset += rows.length;\n    progress.scanned += rows.length;\n\n    for (const row of rows) {\n      const data: Record<string, unknown> = {};\n\n      for (const { name, type } of existing) {\n        // A value the mapper cannot process is logged and skipped. This is safe\n        // to catch: the mapper does no database work (presigning is local to\n        // the provider), so the surrounding transaction is not poisoned.\n        try {\n          const unsigned = await unsignValue(row[name], type, cache);\n\n          if (!isEqual(unsigned, row[name])) {\n            data[name] = unsigned;\n          }\n        } catch (error) {\n          strapi.log.warn(\n            `${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${\n              error instanceof Error ? error.message : String(error)\n            }`\n          );\n        }\n      }\n\n      if (Object.keys(data).length > 0) {\n        await strapi.db.query(uid).update({ where: { id: row.id }, data });\n        progress.updated += 1;\n      }\n    }\n  }\n\n  if (progress.scanned > 0) {\n    strapi.log.info(\n      `${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`\n    );\n  }\n\n  return progress;\n};\n\nconst migrateUp = async (trx: MigrationTrx, db: Database) => {\n  const { provider } = strapi.plugins.upload;\n\n  // Nothing is signed on a public provider, so there is nothing to strip\n  if (!provider || !(await provider.isPrivate())) {\n    return;\n  }\n\n  const schemas = [\n    ...Object.values(strapi.contentTypes),\n    ...Object.values(strapi.components),\n  ] as Struct.Schema[];\n\n  // One presign per distinct URL for the whole run, however many rows it appears in\n  const cache = createSignCache();\n  const total: Progress = { scanned: 0, updated: 0 };\n\n  for (const schema of schemas) {\n    const progress = await migrateSchema(trx, db, schema, cache);\n\n    total.scanned += progress.scanned;\n    total.updated += progress.updated;\n  }\n\n  strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);\n};\n\n/**\n * Richtext and blocks attributes embed the file URL in their own value, so a\n * signed URL written by the admin used to be frozen in the row and broke as\n * soon as the signature expired. New writes are normalised by the upload\n * document service middleware, and the read path re-signs a stored URL that\n * still carries a stale signature, so this migration is a cleanup of the rows\n * written before the fix rather than a prerequisite for it.\n *\n * Idempotent: re-running it finds nothing left to change.\n *\n * Runs inside the internal migration transaction like every other internal\n * migration: a database error fails the boot. A single value the mapper cannot\n * process is logged with a warning and skipped; it is normalised by the\n * middleware on its next save and re-signed on read until then.\n */\nexport const unsignRichtextAndBlocksUrls: Migration = {\n  name: 'upload::unsign-richtext-and-blocks-urls',\n  async up(trx, db) {\n    await migrateUp(trx, db);\n  },\n  async down() {\n    throw new Error('not implemented');\n  },\n};\n"],"names":["BATCH_SIZE","LOG_PREFIX","getTargetAttributes","schema","Object","entries","attributes","filter","attribute","type","map","name","unsignValue","value","cache","mapBlocksImages","image","unsignImage","mapRichtextUrls","url","stripSignedUrl","migrateSchema","trx","db","progress","scanned","updated","length","uid","metadata","has","meta","get","tableName","knex","getSchemaConnection","hasTable","existing","attributeMeta","columnName","hasColumn","push","select","offset","hasMore","rows","strapi","query","findMany","limit","orderBy","id","row","data","unsigned","isEqual","error","log","warn","Error","message","String","keys","update","where","info","migrateUp","provider","plugins","upload","isPrivate","schemas","values","contentTypes","components","createSignCache","total","unsignRichtextAndBlocksUrls","up","down"],"mappings":";;;;;AAcA,MAAMA,UAAAA,GAAa,GAAA;AACnB,MAAMC,UAAAA,GAAa,mCAAA;AAQnB,MAAMC,mBAAAA,GAAsB,CAACC,MAAAA,GAC3BC,MAAAA,CAAOC,OAAO,CAACF,MAAAA,CAAOG,UAAU,IAAI,EAAC,CAAA,CAClCC,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAKA,SAAAA,CAAUC,IAAI,KAAK,UAAA,IAAcD,SAAAA,CAAUC,IAAI,KAAK,QAAA,CAAA,CAC9EC,GAAG,CAAC,CAAC,CAACC,IAAAA,EAAMH,SAAAA,CAAU,IAAM;AAAEG,YAAAA,IAAAA;AAAMF,YAAAA,IAAAA,EAAMD,UAAUC;SAAgC,CAAA,CAAA;AAEzF,MAAMG,WAAAA,GAAc,OAAOC,KAAAA,EAAgBJ,IAAAA,EAA+BK,KAAAA,GAAAA;AACxE,IAAA,OAAOL,IAAAA,KAAS,QAAA,GACZM,qBAAAA,CAAgBF,KAAAA,EAAO,CAACG,KAAAA,GAAUC,iBAAAA,CAAYD,KAAAA,EAAOF,KAAAA,CAAAA,CAAAA,GACrDI,qBAAAA,CAAgBL,KAAAA,EAAO,CAACM,GAAAA,GAAQC,qBAAeD,GAAAA,EAAKL,KAAAA,CAAAA,CAAAA;AAC1D,CAAA;AAEA,MAAMO,aAAAA,GAAgB,OACpBC,GAAAA,EACAC,EAAAA,EACApB,MAAAA,EACAW,KAAAA,GAAAA;AAEA,IAAA,MAAMU,QAAAA,GAAqB;QAAEC,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;AACpD,IAAA,MAAMpB,aAAaJ,mBAAAA,CAAoBC,MAAAA,CAAAA;IAEvC,IAAIG,UAAAA,CAAWqB,MAAM,KAAK,CAAA,EAAG;QAC3B,OAAOH,QAAAA;AACT,IAAA;IAEA,MAAM,EAAEI,GAAG,EAAE,GAAGzB,MAAAA;AAEhB,IAAA,IAAI,CAACoB,EAAAA,CAAGM,QAAQ,CAACC,GAAG,CAACF,GAAAA,CAAAA,EAAM;QACzB,OAAOJ,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMO,IAAAA,GAAOR,EAAAA,CAAGM,QAAQ,CAACG,GAAG,CAACJ,GAAAA,CAAAA;IAC7B,MAAM,EAAEK,SAAS,EAAE,GAAGF,IAAAA;;;IAGtB,MAAMG,IAAAA,GAAOX,EAAAA,CAAGY,mBAAmB,CAACb,GAAAA,CAAAA;;AAGpC,IAAA,IAAI,CAAE,MAAMY,IAAAA,CAAKE,QAAQ,CAACH,SAAAA,CAAAA,EAAa;QACrC,OAAOT,QAAAA;AACT,IAAA;;;AAIA,IAAA,MAAMa,WAA8B,EAAE;IAEtC,KAAK,MAAM7B,aAAaF,UAAAA,CAAY;AAClC,QAAA,MAAMgC,gBAAgBP,IAAAA,CAAKzB,UAAU,CAACE,SAAAA,CAAUG,IAAI,CAAC;QACrD,MAAM4B,UAAAA,GACJD,aAAAA,IAAiB,YAAA,IAAgBA,aAAAA,IAAiBA,aAAAA,CAAcC,UAAU,GACtED,aAAAA,CAAcC,UAAU,GACxB/B,SAAAA,CAAUG,IAAI;AAEpB,QAAA,IAAI,MAAMuB,IAAAA,CAAKM,SAAS,CAACP,WAAWM,UAAAA,CAAAA,EAAa;AAC/CF,YAAAA,QAAAA,CAASI,IAAI,CAACjC,SAAAA,CAAAA;AAChB,QAAA;AACF,IAAA;IAEA,IAAI6B,QAAAA,CAASV,MAAM,KAAK,CAAA,EAAG;QACzB,OAAOH,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMkB,MAAAA,GAAS;AAAC,QAAA,IAAA;AAASL,QAAAA,GAAAA,QAAAA,CAAS3B,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA,IAAAA;AAAM,KAAA;AAE1D,IAAA,IAAIgC,MAAAA,GAAS,CAAA;AACb,IAAA,IAAIC,OAAAA,GAAU,IAAA;AAEd,IAAA,MAAOA,OAAAA,CAAS;QACd,MAAMC,IAAAA,GAA8B,MAAMC,MAAAA,CAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKoB,QAAQ,CAAC;AACtEN,YAAAA,MAAAA;YACAO,KAAAA,EAAOjD,UAAAA;AACP2C,YAAAA,MAAAA;YACAO,OAAAA,EAAS;gBAAEC,EAAAA,EAAI;AAAM;AACvB,SAAA,CAAA;QAEAP,OAAAA,GAAUC,IAAAA,CAAKlB,MAAM,KAAK3B,UAAAA;AAC1B2C,QAAAA,MAAAA,IAAUE,KAAKlB,MAAM;QACrBH,QAAAA,CAASC,OAAO,IAAIoB,IAAAA,CAAKlB,MAAM;QAE/B,KAAK,MAAMyB,OAAOP,IAAAA,CAAM;AACtB,YAAA,MAAMQ,OAAgC,EAAC;AAEvC,YAAA,KAAK,MAAM,EAAE1C,IAAI,EAAEF,IAAI,EAAE,IAAI4B,QAAAA,CAAU;;;;gBAIrC,IAAI;AACF,oBAAA,MAAMiB,WAAW,MAAM1C,WAAAA,CAAYwC,GAAG,CAACzC,IAAAA,CAAK,EAAEF,IAAAA,EAAMK,KAAAA,CAAAA;AAEpD,oBAAA,IAAI,CAACyC,UAAAA,CAAQD,QAAAA,EAAUF,GAAG,CAACzC,KAAK,CAAA,EAAG;wBACjC0C,IAAI,CAAC1C,KAAK,GAAG2C,QAAAA;AACf,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOE,KAAAA,EAAO;oBACdV,MAAAA,CAAOW,GAAG,CAACC,IAAI,CACb,CAAA,EAAGzD,WAAW,SAAS,EAAE2B,GAAAA,CAAI,CAAC,EAAEjB,IAAAA,CAAK,QAAQ,EAAEyC,GAAAA,CAAID,EAAE,CAAC,EAAE,EACtDK,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMI,OAAO,GAAGC,MAAAA,CAAOL,KAAAA,CAAAA,CAAAA,CAChD,CAAA;AAEN,gBAAA;AACF,YAAA;AAEA,YAAA,IAAIpD,OAAO0D,IAAI,CAACT,IAAAA,CAAAA,CAAM1B,MAAM,GAAG,CAAA,EAAG;AAChC,gBAAA,MAAMmB,OAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKmC,MAAM,CAAC;oBAAEC,KAAAA,EAAO;AAAEb,wBAAAA,EAAAA,EAAIC,IAAID;AAAG,qBAAA;AAAGE,oBAAAA;AAAK,iBAAA,CAAA;AAChE7B,gBAAAA,QAAAA,CAASE,OAAO,IAAI,CAAA;AACtB,YAAA;AACF,QAAA;AACF,IAAA;IAEA,IAAIF,QAAAA,CAASC,OAAO,GAAG,CAAA,EAAG;QACxBqB,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CACb,GAAGhE,UAAAA,CAAW,CAAC,EAAE2B,GAAAA,CAAI,EAAE,EAAEJ,QAAAA,CAASC,OAAO,CAAC,eAAe,EAAED,SAASE,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEzF,IAAA;IAEA,OAAOF,QAAAA;AACT,CAAA;AAEA,MAAM0C,SAAAA,GAAY,OAAO5C,GAAAA,EAAmBC,EAAAA,GAAAA;AAC1C,IAAA,MAAM,EAAE4C,QAAQ,EAAE,GAAGrB,MAAAA,CAAOsB,OAAO,CAACC,MAAM;;AAG1C,IAAA,IAAI,CAACF,QAAAA,IAAY,CAAE,MAAMA,QAAAA,CAASG,SAAS,EAAA,EAAK;AAC9C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,OAAAA,GAAU;WACXnE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO2B,YAAY,CAAA;WACjCrE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO4B,UAAU;AACnC,KAAA;;AAGD,IAAA,MAAM5D,KAAAA,GAAQ6D,qBAAAA,EAAAA;AACd,IAAA,MAAMC,KAAAA,GAAkB;QAAEnD,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;IAEjD,KAAK,MAAMvB,UAAUoE,OAAAA,CAAS;AAC5B,QAAA,MAAM/C,QAAAA,GAAW,MAAMH,aAAAA,CAAcC,GAAAA,EAAKC,IAAIpB,MAAAA,EAAQW,KAAAA,CAAAA;QAEtD8D,KAAAA,CAAMnD,OAAO,IAAID,QAAAA,CAASC,OAAO;QACjCmD,KAAAA,CAAMlD,OAAO,IAAIF,QAAAA,CAASE,OAAO;AACnC,IAAA;AAEAoB,IAAAA,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CAAC,CAAA,EAAGhE,WAAW,OAAO,EAAE2E,KAAAA,CAAMnD,OAAO,CAAC,eAAe,EAAEmD,MAAMlD,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC/F,CAAA;AAEA;;;;;;;;;;;;;;UAeamD,2BAAAA,GAAyC;IACpDlE,IAAAA,EAAM,yCAAA;IACN,MAAMmE,EAAAA,CAAAA,CAAGxD,GAAG,EAAEC,EAAE,EAAA;AACd,QAAA,MAAM2C,UAAU5C,GAAAA,EAAKC,EAAAA,CAAAA;AACvB,IAAA,CAAA;IACA,MAAMwD,IAAAA,CAAAA,GAAAA;AACJ,QAAA,MAAM,IAAIpB,KAAAA,CAAM,iBAAA,CAAA;AAClB,IAAA;AACF;;;;"}

package/dist/server/migrations/unsign-richtext-and-blocks-urls.mjs

@@ -0,0 +1,145 @@
+import { isEqual } from 'lodash/fp';
+import { mapBlocksImages, unsignImage, mapRichtextUrls, stripSignedUrl, createSignCache } from '../services/extensions/utils.mjs';
+
+const BATCH_SIZE = 100;
+const LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';
+const getTargetAttributes = (schema)=>Object.entries(schema.attributes ?? {}).filter(([, attribute])=>attribute.type === 'richtext' || attribute.type === 'blocks').map(([name, attribute])=>({
+            name,
+            type: attribute.type
+        }));
+const unsignValue = async (value, type, cache)=>{
+    return type === 'blocks' ? mapBlocksImages(value, (image)=>unsignImage(image, cache)) : mapRichtextUrls(value, (url)=>stripSignedUrl(url, cache));
+};
+const migrateSchema = async (trx, db, schema, cache)=>{
+    const progress = {
+        scanned: 0,
+        updated: 0
+    };
+    const attributes = getTargetAttributes(schema);
+    if (attributes.length === 0) {
+        return progress;
+    }
+    const { uid } = schema;
+    if (!db.metadata.has(uid)) {
+        return progress;
+    }
+    const meta = db.metadata.get(uid);
+    const { tableName } = meta;
+    // The schema checks must run on the migration transaction: on SQLite the pool
+    // has a single connection, so a root-connection query would wait on it forever
+    const knex = db.getSchemaConnection(trx);
+    // On a fresh project the migrations run before the tables exist
+    if (!await knex.hasTable(tableName)) {
+        return progress;
+    }
+    // Internal migrations run before the schema sync: an attribute added in the
+    // same deploy as this version has no column yet, so only select what exists
+    const existing = [];
+    for (const attribute of attributes){
+        const attributeMeta = meta.attributes[attribute.name];
+        const columnName = attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName ? attributeMeta.columnName : attribute.name;
+        if (await knex.hasColumn(tableName, columnName)) {
+            existing.push(attribute);
+        }
+    }
+    if (existing.length === 0) {
+        return progress;
+    }
+    const select = [
+        'id',
+        ...existing.map(({ name })=>name)
+    ];
+    let offset = 0;
+    let hasMore = true;
+    while(hasMore){
+        const rows = await strapi.db.query(uid).findMany({
+            select,
+            limit: BATCH_SIZE,
+            offset,
+            orderBy: {
+                id: 'asc'
+            }
+        });
+        hasMore = rows.length === BATCH_SIZE;
+        offset += rows.length;
+        progress.scanned += rows.length;
+        for (const row of rows){
+            const data = {};
+            for (const { name, type } of existing){
+                // A value the mapper cannot process is logged and skipped. This is safe
+                // to catch: the mapper does no database work (presigning is local to
+                // the provider), so the surrounding transaction is not poisoned.
+                try {
+                    const unsigned = await unsignValue(row[name], type, cache);
+                    if (!isEqual(unsigned, row[name])) {
+                        data[name] = unsigned;
+                    }
+                } catch (error) {
+                    strapi.log.warn(`${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            if (Object.keys(data).length > 0) {
+                await strapi.db.query(uid).update({
+                    where: {
+                        id: row.id
+                    },
+                    data
+                });
+                progress.updated += 1;
+            }
+        }
+    }
+    if (progress.scanned > 0) {
+        strapi.log.info(`${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`);
+    }
+    return progress;
+};
+const migrateUp = async (trx, db)=>{
+    const { provider } = strapi.plugins.upload;
+    // Nothing is signed on a public provider, so there is nothing to strip
+    if (!provider || !await provider.isPrivate()) {
+        return;
+    }
+    const schemas = [
+        ...Object.values(strapi.contentTypes),
+        ...Object.values(strapi.components)
+    ];
+    // One presign per distinct URL for the whole run, however many rows it appears in
+    const cache = createSignCache();
+    const total = {
+        scanned: 0,
+        updated: 0
+    };
+    for (const schema of schemas){
+        const progress = await migrateSchema(trx, db, schema, cache);
+        total.scanned += progress.scanned;
+        total.updated += progress.updated;
+    }
+    strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);
+};
+/**
+ * Richtext and blocks attributes embed the file URL in their own value, so a
+ * signed URL written by the admin used to be frozen in the row and broke as
+ * soon as the signature expired. New writes are normalised by the upload
+ * document service middleware, and the read path re-signs a stored URL that
+ * still carries a stale signature, so this migration is a cleanup of the rows
+ * written before the fix rather than a prerequisite for it.
+ *
+ * Idempotent: re-running it finds nothing left to change.
+ *
+ * Runs inside the internal migration transaction like every other internal
+ * migration: a database error fails the boot. A single value the mapper cannot
+ * process is logged with a warning and skipped; it is normalised by the
+ * middleware on its next save and re-signed on read until then.
+ */ const unsignRichtextAndBlocksUrls = {
+    name: 'upload::unsign-richtext-and-blocks-urls',
+    async up (trx, db) {
+        await migrateUp(trx, db);
+    },
+    async down () {
+        throw new Error('not implemented');
+    }
+};
+
+export { unsignRichtextAndBlocksUrls };
+//# sourceMappingURL=unsign-richtext-and-blocks-urls.mjs.map

package/dist/server/migrations/unsign-richtext-and-blocks-urls.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsign-richtext-and-blocks-urls.mjs","sources":["../../../server/src/migrations/unsign-richtext-and-blocks-urls.ts"],"sourcesContent":["import { isEqual } from 'lodash/fp';\n\nimport type { Database, Migration } from '@strapi/database';\nimport type { Struct } from '@strapi/types';\n\nimport {\n  createSignCache,\n  mapBlocksImages,\n  mapRichtextUrls,\n  stripSignedUrl,\n  unsignImage,\n} from '../services/extensions/utils';\nimport type { SignCache } from '../services/extensions/utils';\n\nconst BATCH_SIZE = 100;\nconst LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';\n\ntype MigrationTrx = Parameters<Migration['up']>[0];\n\ntype TargetAttribute = { name: string; type: 'richtext' | 'blocks' };\n\ntype Progress = { scanned: number; updated: number };\n\nconst getTargetAttributes = (schema: Struct.Schema): TargetAttribute[] =>\n  Object.entries(schema.attributes ?? {})\n    .filter(([, attribute]) => attribute.type === 'richtext' || attribute.type === 'blocks')\n    .map(([name, attribute]) => ({ name, type: attribute.type as TargetAttribute['type'] }));\n\nconst unsignValue = async (value: unknown, type: TargetAttribute['type'], cache: SignCache) => {\n  return type === 'blocks'\n    ? mapBlocksImages(value, (image) => unsignImage(image, cache))\n    : mapRichtextUrls(value, (url) => stripSignedUrl(url, cache));\n};\n\nconst migrateSchema = async (\n  trx: MigrationTrx,\n  db: Database,\n  schema: Struct.Schema,\n  cache: SignCache\n): Promise<Progress> => {\n  const progress: Progress = { scanned: 0, updated: 0 };\n  const attributes = getTargetAttributes(schema);\n\n  if (attributes.length === 0) {\n    return progress;\n  }\n\n  const { uid } = schema;\n\n  if (!db.metadata.has(uid)) {\n    return progress;\n  }\n\n  const meta = db.metadata.get(uid);\n  const { tableName } = meta;\n  // The schema checks must run on the migration transaction: on SQLite the pool\n  // has a single connection, so a root-connection query would wait on it forever\n  const knex = db.getSchemaConnection(trx);\n\n  // On a fresh project the migrations run before the tables exist\n  if (!(await knex.hasTable(tableName))) {\n    return progress;\n  }\n\n  // Internal migrations run before the schema sync: an attribute added in the\n  // same deploy as this version has no column yet, so only select what exists\n  const existing: TargetAttribute[] = [];\n\n  for (const attribute of attributes) {\n    const attributeMeta = meta.attributes[attribute.name];\n    const columnName =\n      attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName\n        ? attributeMeta.columnName\n        : attribute.name;\n\n    if (await knex.hasColumn(tableName, columnName)) {\n      existing.push(attribute);\n    }\n  }\n\n  if (existing.length === 0) {\n    return progress;\n  }\n\n  const select = ['id', ...existing.map(({ name }) => name)];\n\n  let offset = 0;\n  let hasMore = true;\n\n  while (hasMore) {\n    const rows: Record<string, any>[] = await strapi.db.query(uid).findMany({\n      select,\n      limit: BATCH_SIZE,\n      offset,\n      orderBy: { id: 'asc' },\n    });\n\n    hasMore = rows.length === BATCH_SIZE;\n    offset += rows.length;\n    progress.scanned += rows.length;\n\n    for (const row of rows) {\n      const data: Record<string, unknown> = {};\n\n      for (const { name, type } of existing) {\n        // A value the mapper cannot process is logged and skipped. This is safe\n        // to catch: the mapper does no database work (presigning is local to\n        // the provider), so the surrounding transaction is not poisoned.\n        try {\n          const unsigned = await unsignValue(row[name], type, cache);\n\n          if (!isEqual(unsigned, row[name])) {\n            data[name] = unsigned;\n          }\n        } catch (error) {\n          strapi.log.warn(\n            `${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${\n              error instanceof Error ? error.message : String(error)\n            }`\n          );\n        }\n      }\n\n      if (Object.keys(data).length > 0) {\n        await strapi.db.query(uid).update({ where: { id: row.id }, data });\n        progress.updated += 1;\n      }\n    }\n  }\n\n  if (progress.scanned > 0) {\n    strapi.log.info(\n      `${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`\n    );\n  }\n\n  return progress;\n};\n\nconst migrateUp = async (trx: MigrationTrx, db: Database) => {\n  const { provider } = strapi.plugins.upload;\n\n  // Nothing is signed on a public provider, so there is nothing to strip\n  if (!provider || !(await provider.isPrivate())) {\n    return;\n  }\n\n  const schemas = [\n    ...Object.values(strapi.contentTypes),\n    ...Object.values(strapi.components),\n  ] as Struct.Schema[];\n\n  // One presign per distinct URL for the whole run, however many rows it appears in\n  const cache = createSignCache();\n  const total: Progress = { scanned: 0, updated: 0 };\n\n  for (const schema of schemas) {\n    const progress = await migrateSchema(trx, db, schema, cache);\n\n    total.scanned += progress.scanned;\n    total.updated += progress.updated;\n  }\n\n  strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);\n};\n\n/**\n * Richtext and blocks attributes embed the file URL in their own value, so a\n * signed URL written by the admin used to be frozen in the row and broke as\n * soon as the signature expired. New writes are normalised by the upload\n * document service middleware, and the read path re-signs a stored URL that\n * still carries a stale signature, so this migration is a cleanup of the rows\n * written before the fix rather than a prerequisite for it.\n *\n * Idempotent: re-running it finds nothing left to change.\n *\n * Runs inside the internal migration transaction like every other internal\n * migration: a database error fails the boot. A single value the mapper cannot\n * process is logged with a warning and skipped; it is normalised by the\n * middleware on its next save and re-signed on read until then.\n */\nexport const unsignRichtextAndBlocksUrls: Migration = {\n  name: 'upload::unsign-richtext-and-blocks-urls',\n  async up(trx, db) {\n    await migrateUp(trx, db);\n  },\n  async down() {\n    throw new Error('not implemented');\n  },\n};\n"],"names":["BATCH_SIZE","LOG_PREFIX","getTargetAttributes","schema","Object","entries","attributes","filter","attribute","type","map","name","unsignValue","value","cache","mapBlocksImages","image","unsignImage","mapRichtextUrls","url","stripSignedUrl","migrateSchema","trx","db","progress","scanned","updated","length","uid","metadata","has","meta","get","tableName","knex","getSchemaConnection","hasTable","existing","attributeMeta","columnName","hasColumn","push","select","offset","hasMore","rows","strapi","query","findMany","limit","orderBy","id","row","data","unsigned","isEqual","error","log","warn","Error","message","String","keys","update","where","info","migrateUp","provider","plugins","upload","isPrivate","schemas","values","contentTypes","components","createSignCache","total","unsignRichtextAndBlocksUrls","up","down"],"mappings":";;;AAcA,MAAMA,UAAAA,GAAa,GAAA;AACnB,MAAMC,UAAAA,GAAa,mCAAA;AAQnB,MAAMC,mBAAAA,GAAsB,CAACC,MAAAA,GAC3BC,MAAAA,CAAOC,OAAO,CAACF,MAAAA,CAAOG,UAAU,IAAI,EAAC,CAAA,CAClCC,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAKA,SAAAA,CAAUC,IAAI,KAAK,UAAA,IAAcD,SAAAA,CAAUC,IAAI,KAAK,QAAA,CAAA,CAC9EC,GAAG,CAAC,CAAC,CAACC,IAAAA,EAAMH,SAAAA,CAAU,IAAM;AAAEG,YAAAA,IAAAA;AAAMF,YAAAA,IAAAA,EAAMD,UAAUC;SAAgC,CAAA,CAAA;AAEzF,MAAMG,WAAAA,GAAc,OAAOC,KAAAA,EAAgBJ,IAAAA,EAA+BK,KAAAA,GAAAA;AACxE,IAAA,OAAOL,IAAAA,KAAS,QAAA,GACZM,eAAAA,CAAgBF,KAAAA,EAAO,CAACG,KAAAA,GAAUC,WAAAA,CAAYD,KAAAA,EAAOF,KAAAA,CAAAA,CAAAA,GACrDI,eAAAA,CAAgBL,KAAAA,EAAO,CAACM,GAAAA,GAAQC,eAAeD,GAAAA,EAAKL,KAAAA,CAAAA,CAAAA;AAC1D,CAAA;AAEA,MAAMO,aAAAA,GAAgB,OACpBC,GAAAA,EACAC,EAAAA,EACApB,MAAAA,EACAW,KAAAA,GAAAA;AAEA,IAAA,MAAMU,QAAAA,GAAqB;QAAEC,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;AACpD,IAAA,MAAMpB,aAAaJ,mBAAAA,CAAoBC,MAAAA,CAAAA;IAEvC,IAAIG,UAAAA,CAAWqB,MAAM,KAAK,CAAA,EAAG;QAC3B,OAAOH,QAAAA;AACT,IAAA;IAEA,MAAM,EAAEI,GAAG,EAAE,GAAGzB,MAAAA;AAEhB,IAAA,IAAI,CAACoB,EAAAA,CAAGM,QAAQ,CAACC,GAAG,CAACF,GAAAA,CAAAA,EAAM;QACzB,OAAOJ,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMO,IAAAA,GAAOR,EAAAA,CAAGM,QAAQ,CAACG,GAAG,CAACJ,GAAAA,CAAAA;IAC7B,MAAM,EAAEK,SAAS,EAAE,GAAGF,IAAAA;;;IAGtB,MAAMG,IAAAA,GAAOX,EAAAA,CAAGY,mBAAmB,CAACb,GAAAA,CAAAA;;AAGpC,IAAA,IAAI,CAAE,MAAMY,IAAAA,CAAKE,QAAQ,CAACH,SAAAA,CAAAA,EAAa;QACrC,OAAOT,QAAAA;AACT,IAAA;;;AAIA,IAAA,MAAMa,WAA8B,EAAE;IAEtC,KAAK,MAAM7B,aAAaF,UAAAA,CAAY;AAClC,QAAA,MAAMgC,gBAAgBP,IAAAA,CAAKzB,UAAU,CAACE,SAAAA,CAAUG,IAAI,CAAC;QACrD,MAAM4B,UAAAA,GACJD,aAAAA,IAAiB,YAAA,IAAgBA,aAAAA,IAAiBA,aAAAA,CAAcC,UAAU,GACtED,aAAAA,CAAcC,UAAU,GACxB/B,SAAAA,CAAUG,IAAI;AAEpB,QAAA,IAAI,MAAMuB,IAAAA,CAAKM,SAAS,CAACP,WAAWM,UAAAA,CAAAA,EAAa;AAC/CF,YAAAA,QAAAA,CAASI,IAAI,CAACjC,SAAAA,CAAAA;AAChB,QAAA;AACF,IAAA;IAEA,IAAI6B,QAAAA,CAASV,MAAM,KAAK,CAAA,EAAG;QACzB,OAAOH,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMkB,MAAAA,GAAS;AAAC,QAAA,IAAA;AAASL,QAAAA,GAAAA,QAAAA,CAAS3B,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA,IAAAA;AAAM,KAAA;AAE1D,IAAA,IAAIgC,MAAAA,GAAS,CAAA;AACb,IAAA,IAAIC,OAAAA,GAAU,IAAA;AAEd,IAAA,MAAOA,OAAAA,CAAS;QACd,MAAMC,IAAAA,GAA8B,MAAMC,MAAAA,CAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKoB,QAAQ,CAAC;AACtEN,YAAAA,MAAAA;YACAO,KAAAA,EAAOjD,UAAAA;AACP2C,YAAAA,MAAAA;YACAO,OAAAA,EAAS;gBAAEC,EAAAA,EAAI;AAAM;AACvB,SAAA,CAAA;QAEAP,OAAAA,GAAUC,IAAAA,CAAKlB,MAAM,KAAK3B,UAAAA;AAC1B2C,QAAAA,MAAAA,IAAUE,KAAKlB,MAAM;QACrBH,QAAAA,CAASC,OAAO,IAAIoB,IAAAA,CAAKlB,MAAM;QAE/B,KAAK,MAAMyB,OAAOP,IAAAA,CAAM;AACtB,YAAA,MAAMQ,OAAgC,EAAC;AAEvC,YAAA,KAAK,MAAM,EAAE1C,IAAI,EAAEF,IAAI,EAAE,IAAI4B,QAAAA,CAAU;;;;gBAIrC,IAAI;AACF,oBAAA,MAAMiB,WAAW,MAAM1C,WAAAA,CAAYwC,GAAG,CAACzC,IAAAA,CAAK,EAAEF,IAAAA,EAAMK,KAAAA,CAAAA;AAEpD,oBAAA,IAAI,CAACyC,OAAAA,CAAQD,QAAAA,EAAUF,GAAG,CAACzC,KAAK,CAAA,EAAG;wBACjC0C,IAAI,CAAC1C,KAAK,GAAG2C,QAAAA;AACf,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOE,KAAAA,EAAO;oBACdV,MAAAA,CAAOW,GAAG,CAACC,IAAI,CACb,CAAA,EAAGzD,WAAW,SAAS,EAAE2B,GAAAA,CAAI,CAAC,EAAEjB,IAAAA,CAAK,QAAQ,EAAEyC,GAAAA,CAAID,EAAE,CAAC,EAAE,EACtDK,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMI,OAAO,GAAGC,MAAAA,CAAOL,KAAAA,CAAAA,CAAAA,CAChD,CAAA;AAEN,gBAAA;AACF,YAAA;AAEA,YAAA,IAAIpD,OAAO0D,IAAI,CAACT,IAAAA,CAAAA,CAAM1B,MAAM,GAAG,CAAA,EAAG;AAChC,gBAAA,MAAMmB,OAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKmC,MAAM,CAAC;oBAAEC,KAAAA,EAAO;AAAEb,wBAAAA,EAAAA,EAAIC,IAAID;AAAG,qBAAA;AAAGE,oBAAAA;AAAK,iBAAA,CAAA;AAChE7B,gBAAAA,QAAAA,CAASE,OAAO,IAAI,CAAA;AACtB,YAAA;AACF,QAAA;AACF,IAAA;IAEA,IAAIF,QAAAA,CAASC,OAAO,GAAG,CAAA,EAAG;QACxBqB,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CACb,GAAGhE,UAAAA,CAAW,CAAC,EAAE2B,GAAAA,CAAI,EAAE,EAAEJ,QAAAA,CAASC,OAAO,CAAC,eAAe,EAAED,SAASE,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEzF,IAAA;IAEA,OAAOF,QAAAA;AACT,CAAA;AAEA,MAAM0C,SAAAA,GAAY,OAAO5C,GAAAA,EAAmBC,EAAAA,GAAAA;AAC1C,IAAA,MAAM,EAAE4C,QAAQ,EAAE,GAAGrB,MAAAA,CAAOsB,OAAO,CAACC,MAAM;;AAG1C,IAAA,IAAI,CAACF,QAAAA,IAAY,CAAE,MAAMA,QAAAA,CAASG,SAAS,EAAA,EAAK;AAC9C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,OAAAA,GAAU;WACXnE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO2B,YAAY,CAAA;WACjCrE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO4B,UAAU;AACnC,KAAA;;AAGD,IAAA,MAAM5D,KAAAA,GAAQ6D,eAAAA,EAAAA;AACd,IAAA,MAAMC,KAAAA,GAAkB;QAAEnD,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;IAEjD,KAAK,MAAMvB,UAAUoE,OAAAA,CAAS;AAC5B,QAAA,MAAM/C,QAAAA,GAAW,MAAMH,aAAAA,CAAcC,GAAAA,EAAKC,IAAIpB,MAAAA,EAAQW,KAAAA,CAAAA;QAEtD8D,KAAAA,CAAMnD,OAAO,IAAID,QAAAA,CAASC,OAAO;QACjCmD,KAAAA,CAAMlD,OAAO,IAAIF,QAAAA,CAASE,OAAO;AACnC,IAAA;AAEAoB,IAAAA,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CAAC,CAAA,EAAGhE,WAAW,OAAO,EAAE2E,KAAAA,CAAMnD,OAAO,CAAC,eAAe,EAAEmD,MAAMlD,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC/F,CAAA;AAEA;;;;;;;;;;;;;;UAeamD,2BAAAA,GAAyC;IACpDlE,IAAAA,EAAM,yCAAA;IACN,MAAMmE,EAAAA,CAAAA,CAAGxD,GAAG,EAAEC,EAAE,EAAA;AACd,QAAA,MAAM2C,UAAU5C,GAAAA,EAAKC,EAAAA,CAAAA;AACvB,IAAA,CAAA;IACA,MAAMwD,IAAAA,CAAAA,GAAAA;AACJ,QAAA,MAAM,IAAIpB,KAAAA,CAAM,iBAAA,CAAA;AAClB,IAAA;AACF;;;;"}

package/dist/server/register.js

@@ -4,8 +4,10 @@ var _ = require('lodash');
 var sharp = require('sharp');
 var utils = require('@strapi/utils');
 var upload = require('./middlewares/upload.js');
+var unsignRichtextAndBlocksUrls = require('./migrations/unsign-richtext-and-blocks-urls.js');
 var contentApi = require('./documentation/content-api.json.js');
 var aiMetadataJob = require('./models/ai-metadata-job.js');
+var registerUploadMcpTools = require('./mcp/register-upload-mcp-tools.js');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -32,9 +34,15 @@ const { bytesToHumanReadable, kbytesToBytes } = utils.file;
     sharp__default.default.cache(cache);
     sharp__default.default.concurrency(concurrency);
     strapi.plugin('upload').provider = createProvider(uploadConfig);
+    // Rewrites richtext / blocks URLs persisted with a (now expired) signature
+    strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls.unsignRichtextAndBlocksUrls);
     await upload({
         strapi
     });
+    // Register phase, before the MCP HTTP server starts during bootstrap.
+    registerUploadMcpTools.registerUploadMcpTools({
+        strapi
+    });
     if (strapi.plugin('graphql')) {
         const { installGraphqlExtension } = await Promise.resolve().then(function () { return require('./graphql.js'); });
         installGraphqlExtension({

package/dist/server/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  await registerUploadMiddleware({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","registerUploadMiddleware","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;;;;;;;AAWA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,YAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,UAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,2BAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,sBAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,sBAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;AAElD,IAAA,MAAMS,MAAAA,CAAyB;AAAEf,QAAAA;AAAO,KAAA,CAAA;IAExC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAEG,uBAAuB,EAAE,GAAG,MAAM,oDAAO,cAAA,KAAA;QACjDA,uBAAAA,CAAwB;AAAEhB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPI,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,kBAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMP,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMiB,YAAAA,GAAeC,kBAAAA,CAAEC,OAAO,CAACnB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAIkB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACFrB,QAAAA,QAAAA,GAAWmB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmB3B,QAAAA,CAAS4B,IAAI,CAAC3B,eAAAA,CAAAA;IAEvC,IAAI,CAAC0B,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,kBAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAO9C,IAAAA,EAAY+C,OAAAA,GAAUpC,aAAa,CAACmC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAAC9C,IAAAA,EAAM+C,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAActD,IAAe,EAAE,EAAEuD,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAaxD,aAAAA,CAAcC,IAAAA,CAAKwD,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAI3D,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAKyD,gBAAgB,CAAC,uBAAuB,EAAE3D,oBAAAA,CAAqByD,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAa1D,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACA2D,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"register.js","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport { unsignRichtextAndBlocksUrls } from './migrations/unsign-richtext-and-blocks-urls';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\nimport { registerUploadMcpTools } from './mcp';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  // Rewrites richtext / blocks URLs persisted with a (now expired) signature\n  strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls);\n\n  await registerUploadMiddleware({ strapi });\n\n  // Register phase, before the MCP HTTP server starts during bootstrap.\n  registerUploadMcpTools({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","db","migrations","providers","internal","unsignRichtextAndBlocksUrls","registerUploadMiddleware","registerUploadMcpTools","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;;;;;;;;;AAaA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,YAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,UAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,2BAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,sBAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,sBAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;;IAGlDN,MAAAA,CAAOe,EAAE,CAACC,UAAU,CAACC,SAAS,CAACC,QAAQ,CAACnB,QAAQ,CAACoB,uDAAAA,CAAAA;AAEjD,IAAA,MAAMC,MAAAA,CAAyB;AAAEpB,QAAAA;AAAO,KAAA,CAAA;;IAGxCqB,6CAAAA,CAAuB;AAAErB,QAAAA;AAAO,KAAA,CAAA;IAEhC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAES,uBAAuB,EAAE,GAAG,MAAM,oDAAO,cAAA,KAAA;QACjDA,uBAAAA,CAAwB;AAAEtB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPU,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,kBAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMb,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMuB,YAAAA,GAAeC,kBAAAA,CAAEC,OAAO,CAACzB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAIwB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACF3B,QAAAA,QAAAA,GAAWyB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmBjC,QAAAA,CAASkC,IAAI,CAACjC,eAAAA,CAAAA;IAEvC,IAAI,CAACgC,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,kBAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAOpD,IAAAA,EAAYqD,OAAAA,GAAU1C,aAAa,CAACyC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAACpD,IAAAA,EAAMqD,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAAc5D,IAAe,EAAE,EAAE6D,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAa9D,aAAAA,CAAcC,IAAAA,CAAK8D,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAIjE,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAK+D,gBAAgB,CAAC,uBAAuB,EAAEjE,oBAAAA,CAAqB+D,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAahE,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACAiE,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}

package/dist/server/register.mjs

@@ -2,8 +2,10 @@ import _ from 'lodash';
 import sharp from 'sharp';
 import { errors, file } from '@strapi/utils';
 import registerUploadMiddleware from './middlewares/upload.mjs';
+import { unsignRichtextAndBlocksUrls } from './migrations/unsign-richtext-and-blocks-urls.mjs';
 import spec from './documentation/content-api.json.mjs';
 import { aiMetadataJob } from './models/ai-metadata-job.mjs';
+import { registerUploadMcpTools } from './mcp/register-upload-mcp-tools.mjs';
 
 const { PayloadTooLargeError } = errors;
 const { bytesToHumanReadable, kbytesToBytes } = file;
@@ -25,9 +27,15 @@ const { bytesToHumanReadable, kbytesToBytes } = file;
     sharp.cache(cache);
     sharp.concurrency(concurrency);
     strapi.plugin('upload').provider = createProvider(uploadConfig);
+    // Rewrites richtext / blocks URLs persisted with a (now expired) signature
+    strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls);
     await registerUploadMiddleware({
         strapi
     });
+    // Register phase, before the MCP HTTP server starts during bootstrap.
+    registerUploadMcpTools({
+        strapi
+    });
     if (strapi.plugin('graphql')) {
         const { installGraphqlExtension } = await import('./graphql.mjs');
         installGraphqlExtension({

package/dist/server/register.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"register.mjs","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  await registerUploadMiddleware({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","registerUploadMiddleware","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;AAWA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,MAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,IAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,aAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,KAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,KAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;AAElD,IAAA,MAAMS,wBAAAA,CAAyB;AAAEf,QAAAA;AAAO,KAAA,CAAA;IAExC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAEG,uBAAuB,EAAE,GAAG,MAAM,OAAO,eAAA,CAAA;QACjDA,uBAAAA,CAAwB;AAAEhB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPI,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,IAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMP,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMiB,YAAAA,GAAeC,CAAAA,CAAEC,OAAO,CAACnB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAIkB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACFrB,QAAAA,QAAAA,GAAWmB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmB3B,QAAAA,CAAS4B,IAAI,CAAC3B,eAAAA,CAAAA;IAEvC,IAAI,CAAC0B,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,CAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAO9C,IAAAA,EAAY+C,OAAAA,GAAUpC,aAAa,CAACmC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAAC9C,IAAAA,EAAM+C,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAActD,IAAe,EAAE,EAAEuD,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAaxD,aAAAA,CAAcC,IAAAA,CAAKwD,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAI3D,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAKyD,gBAAgB,CAAC,uBAAuB,EAAE3D,oBAAAA,CAAqByD,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAa1D,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACA2D,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"register.mjs","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport { unsignRichtextAndBlocksUrls } from './migrations/unsign-richtext-and-blocks-urls';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\nimport { registerUploadMcpTools } from './mcp';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  // Rewrites richtext / blocks URLs persisted with a (now expired) signature\n  strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls);\n\n  await registerUploadMiddleware({ strapi });\n\n  // Register phase, before the MCP HTTP server starts during bootstrap.\n  registerUploadMcpTools({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","db","migrations","providers","internal","unsignRichtextAndBlocksUrls","registerUploadMiddleware","registerUploadMcpTools","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;;AAaA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,MAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,IAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,aAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,KAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,KAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;;IAGlDN,MAAAA,CAAOe,EAAE,CAACC,UAAU,CAACC,SAAS,CAACC,QAAQ,CAACnB,QAAQ,CAACoB,2BAAAA,CAAAA;AAEjD,IAAA,MAAMC,wBAAAA,CAAyB;AAAEpB,QAAAA;AAAO,KAAA,CAAA;;IAGxCqB,sBAAAA,CAAuB;AAAErB,QAAAA;AAAO,KAAA,CAAA;IAEhC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAES,uBAAuB,EAAE,GAAG,MAAM,OAAO,eAAA,CAAA;QACjDA,uBAAAA,CAAwB;AAAEtB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPU,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,IAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMb,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMuB,YAAAA,GAAeC,CAAAA,CAAEC,OAAO,CAACzB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAIwB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACF3B,QAAAA,QAAAA,GAAWyB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmBjC,QAAAA,CAASkC,IAAI,CAACjC,eAAAA,CAAAA;IAEvC,IAAI,CAACgC,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,CAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAOpD,IAAAA,EAAYqD,OAAAA,GAAU1C,aAAa,CAACyC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAACpD,IAAAA,EAAMqD,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAAc5D,IAAe,EAAE,EAAE6D,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAa9D,aAAAA,CAAcC,IAAAA,CAAK8D,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAIjE,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAK+D,gBAAgB,CAAC,uBAAuB,EAAEjE,oBAAAA,CAAqB+D,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAahE,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACAiE,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}

package/dist/server/routes/admin.js

@@ -13,8 +13,11 @@ const routes = {
                     {
                         name: 'admin::hasPermissions',
                         config: {
+                            // Not `settings.read`: the Media Library needs this payload to
+                            // work, and the default Editor and Author roles don't hold that
+                            // action. Writing still requires it (see the PUT below).
                             actions: [
-                                'plugin::upload.settings.read'
+                                'plugin::upload.read'
                             ]
                         }
                     }