@strapi/upload 5.54.0 → 5.55.0

package/dist/server/services/extensions/utils.mjs

@@ -1,35 +1,308 @@
+import path from 'path';
+import { omit } from 'lodash/fp';
 import { traverseEntity, async } from '@strapi/utils';
 import { getService } from '../../utils/index.mjs';
 import { FILE_MODEL_UID } from '../../constants.mjs';
 
+const createSignCache = ()=>new Map();
+/**
+ * URL bearing syntaxes found in a richtext (markdown) value. Each pattern
+ * captures a prefix (group 1) and the URL (group 2) so the rebuild loop in
+ * `mapRichtextUrls` can splice a new URL in place without touching anything
+ * else.
+ *
+ * - markdown image / link: `![alt](url)` or `[text](url)`. The URL is captured
+ *   up to the first whitespace or closing parenthesis, which also covers the
+ *   optional title form `[text](url "title")`.
+ * - raw HTML `src` / `href` attributes, double or single quoted, on the
+ *   elements the editor lets users write by hand (`<img src="..." width="200">`
+ *   is the usual way to size an image).
+ */ const RICHTEXT_URL_REGEXES = [
+    /(!?\[[^\]]*\]\()([^)\s]+)/g,
+    /(<(?:img|a|source|video|audio)\b[^>]*?\b(?:src|href)=")([^"]+)/gi,
+    /(<(?:img|a|source|video|audio)\b[^>]*?\b(?:src|href)=')([^']+)/gi
+];
+/** Cheap short circuit for richtext values that cannot contain a URL we would rewrite. */ const RICHTEXT_URL_HINTS = [
+    '](',
+    'src=',
+    'href='
+];
 function isFile(value, attribute) {
     if (!value || attribute.type !== 'media') {
         return false;
     }
     return true;
 }
+const stripQueryString = (url)=>url.split('?')[0];
+const decodeQueryParamName = (pair)=>{
+    const name = pair.split('=')[0];
+    try {
+        return decodeURIComponent(name);
+    } catch  {
+        return name;
+    }
+};
 /**
- * Visitor function to sign media URLs
- */ const signEntityMediaVisitor = async ({ key, value, attribute }, { set })=>{
-    const { signFileUrls } = getService('file');
-    if (!attribute) {
-        return;
-    }
-    if (attribute.type !== 'media') {
-        return;
-    }
-    if (isFile(value, attribute)) {
-        // If the attribute is repeatable sign each file
-        if (attribute.multiple) {
-            const signedFiles = await async.map(value, signFileUrls);
-            set(key, signedFiles);
+ * Split a URL into what precedes the `?`, the raw `key=value` pairs of its
+ * query string and the `#fragment`, if any. Plain string work on purpose:
+ * `new URL` throws on the relative `/uploads/...` paths a local provider
+ * writes, and would re-encode the pairs we want to hand back untouched.
+ */ const splitUrl = (url)=>{
+    const hashIndex = url.indexOf('#');
+    const fragment = hashIndex === -1 ? '' : url.slice(hashIndex);
+    const withoutFragment = hashIndex === -1 ? url : url.slice(0, hashIndex);
+    const queryIndex = withoutFragment.indexOf('?');
+    if (queryIndex === -1) {
+        return {
+            base: withoutFragment,
+            pairs: [],
+            fragment
+        };
+    }
+    return {
+        base: withoutFragment.slice(0, queryIndex),
+        pairs: withoutFragment.slice(queryIndex + 1).split('&').filter(Boolean),
+        fragment
+    };
+};
+/** Names of the query parameters of `url`, decoded, in order. */ const getQueryParamNames = (url)=>splitUrl(url).pairs.map(decodeQueryParamName);
+/**
+ * `url` with every query parameter whose name is in `names` removed. The
+ * surviving pairs keep their order and encoding; the `?` is dropped when
+ * nothing is left.
+ */ const removeQueryParams = (url, names)=>{
+    const { base, pairs, fragment } = splitUrl(url);
+    if (pairs.length === 0 || names.length === 0) {
+        return url;
+    }
+    const kept = pairs.filter((pair)=>!names.includes(decodeQueryParamName(pair)));
+    return kept.length === 0 ? `${base}${fragment}` : `${base}?${kept.join('&')}${fragment}`;
+};
+/**
+ * Build the minimal file shape `signFileUrls` needs out of a bare URL, as found
+ * in a richtext value.
+ *
+ * `hash` and `ext` are taken from the last path segment and `path` is left
+ * unset, which rebuilds the S3 key for the default layout and for the
+ * `rootPath` provider option (the provider prefixes it itself). A URL whose key
+ * has extra segments (a file uploaded with the per-file `path` option, or an
+ * older key layout) is still recognised as ours by the provider, but it is
+ * signed with a key that does not exist and the link returns 403. Media
+ * signing has the same limit because `path` is not persisted on the file
+ * (`content-types/file.ts`). Not addressed here.
+ */ const getFileFromUrl = (url)=>{
+    const unsignedUrl = stripQueryString(url);
+    const { provider } = strapi.config.get('plugin::upload');
+    const { name, ext } = path.parse(unsignedUrl.split('/').pop() ?? '');
+    return {
+        url: unsignedUrl,
+        hash: name,
+        ext,
+        provider
+    };
+};
+/**
+ * Ask the provider to sign `file` and return the signed URL if the provider
+ * owns it, otherwise `null`. Memoised in `cache` by the bare URL.
+ *
+ * Ownership is decided by whether the provider changed the URL: `signFileUrls`
+ * flags every file of the configured provider as signed, but the provider
+ * itself returns URLs it does not own untouched (an S3 URL from another
+ * bucket, an external site, a local `/uploads` path), so a changed URL is the
+ * only reliable signal. `file.url` must already be the bare URL so the
+ * comparison is meaningful.
+ */ const signFileIfOwned = (file, cache)=>{
+    const bareUrl = file.url ?? '';
+    const cached = cache.get(bareUrl);
+    if (cached) {
+        return cached;
+    }
+    const pending = (async ()=>{
+        const { signFileUrls } = getService('file');
+        const signedFile = await signFileUrls(file);
+        return signedFile.url && signedFile.url !== bareUrl ? signedFile.url : null;
+    })();
+    cache.set(bareUrl, pending);
+    return pending;
+};
+/**
+ * Signs a richtext URL if the configured provider owns it, otherwise `null`.
+ * See `signFileIfOwned` for how ownership is decided. A single predicate means
+ * the read path (sign) and the write path (unsign) can never disagree about
+ * what they own.
+ */ const signIfOwned = (url, cache)=>signFileIfOwned(getFileFromUrl(url), cache);
+/**
+ * Returns a richtext URL with its signature removed, if we own it.
+ *
+ * Only the query parameters the provider's own fresh signature introduces are
+ * removed (for S3, the `X-Amz-*` family), every other parameter is kept. That
+ * way a provider that signs whatever it is handed cannot make us drop `?v=x`
+ * from a link to an external site. A parameter of an old signature that the
+ * fresh one no longer carries (an `X-Amz-Security-Token` from credentials no
+ * longer in use, say) survives in the row; it is not a signature, and the read
+ * path replaces the whole URL with the provider output anyway.
+ */ const stripSignedUrl = async (url, cache)=>{
+    // Nothing to strip, and no reason to ask the provider
+    if (!url.includes('?')) {
+        return url;
+    }
+    const signedUrl = await signIfOwned(url, cache);
+    if (signedUrl === null) {
+        return url;
+    }
+    return removeQueryParams(url, getQueryParamNames(signedUrl));
+};
+/** Returns a freshly signed richtext URL, if we own it. */ const signUrl = async (url, cache)=>await signIfOwned(url, cache) ?? url;
+/**
+ * Apply `mapUrl` to every markdown image / link URL and every raw HTML
+ * `src` / `href` URL of a richtext value.
+ */ const mapRichtextUrls = async (value, mapUrl)=>{
+    if (typeof value !== 'string' || !RICHTEXT_URL_HINTS.some((hint)=>value.includes(hint))) {
+        return value;
+    }
+    // The rebuild loop splices by match index, so matches must be in ascending order
+    const matches = RICHTEXT_URL_REGEXES.flatMap((regex)=>Array.from(value.matchAll(regex))).sort((a, b)=>a.index - b.index);
+    if (matches.length === 0) {
+        return value;
+    }
+    const urls = await async.map(matches, (match)=>mapUrl(match[2]));
+    let result = '';
+    let cursor = 0;
+    matches.forEach((match, index)=>{
+        const urlStart = match.index + match[1].length;
+        // Two patterns matched overlapping text: keep the first, never splice twice
+        if (urlStart < cursor) {
             return;
         }
-        // If the attribute is not repeatable only sign a single file
-        const signedFile = await signFileUrls(value);
-        set(key, signedFile);
+        result += value.slice(cursor, urlStart) + urls[index];
+        cursor = urlStart + match[2].length;
+    });
+    return result + value.slice(cursor);
+};
+/**
+ * Apply `mapImage` to every `image` node of a blocks value, recursively.
+ * A new array is always returned, the original value is never mutated.
+ */ const mapBlocksImages = async (value, mapImage)=>{
+    if (!Array.isArray(value)) {
+        return value;
+    }
+    return async.map(value, async (node)=>{
+        if (!node || typeof node !== 'object') {
+            return node;
+        }
+        let result = node;
+        if (node.type === 'image' && node.image) {
+            result = {
+                ...result,
+                image: await mapImage(node.image)
+            };
+        }
+        if (Array.isArray(node.children)) {
+            result = {
+                ...result,
+                children: await mapBlocksImages(node.children, mapImage)
+            };
+        }
+        return result;
+    });
+};
+const getImageFormats = (image)=>Object.entries(image.formats ?? {});
+/** True when the node still carries anything `unsignImage` would remove. */ const hasSignatureTraces = (image)=>{
+    if (image.isUrlSigned !== undefined || (image.url ?? '').includes('?')) {
+        return true;
     }
+    return getImageFormats(image).some(([, format])=>format?.isUrlSigned !== undefined || (format?.url ?? '').includes('?'));
 };
+/**
+ * Remove the signature from a blocks `image` node: the signature parameters on
+ * the file URL and on every format URL (the same presigner signs them all, so
+ * the same parameter names apply), and the `isUrlSigned` flag `signFileUrls`
+ * sets on the file and on each format. The node carries a full file object, so
+ * the ownership check is made with it rather than with a URL derived stand in.
+ */ const unsignImage = async (image, cache = createSignCache())=>{
+    // Already bare: nothing to do, and no reason to ask the provider
+    if (!hasSignatureTraces(image)) {
+        return image;
+    }
+    const bareUrl = stripQueryString(image.url ?? '');
+    const signedUrl = await signFileIfOwned({
+        ...image,
+        url: bareUrl
+    }, cache);
+    // Not one of ours (different provider, external URL, public provider): the
+    // provider hands the URL back unchanged, leave the node as is
+    if (signedUrl === null) {
+        return image;
+    }
+    const names = getQueryParamNames(signedUrl);
+    const result = omit([
+        'isUrlSigned'
+    ], {
+        ...image,
+        url: removeQueryParams(image.url ?? '', names)
+    });
+    if (image.formats) {
+        result.formats = Object.fromEntries(getImageFormats(image).map(([key, format])=>[
+                key,
+                format && typeof format === 'object' ? omit([
+                    'isUrlSigned'
+                ], {
+                    ...format,
+                    ...format.url ? {
+                        url: removeQueryParams(format.url, names)
+                    } : {}
+                }) : format
+            ]));
+    }
+    return result;
+};
+/**
+ * Visitor function to sign media URLs
+ */ const createSignEntityMediaVisitor = (cache)=>async ({ key, value, attribute }, { set })=>{
+        const { signFileUrls } = getService('file');
+        if (!attribute) {
+            return;
+        }
+        switch(attribute.type){
+            case 'blocks':
+                set(key, await mapBlocksImages(value, signFileUrls));
+                return;
+            case 'richtext':
+                set(key, await mapRichtextUrls(value, (url)=>signUrl(url, cache)));
+                return;
+            case 'media':
+                {
+                    if (isFile(value, attribute)) {
+                        // If the attribute is repeatable sign each file
+                        if (attribute.multiple) {
+                            const signedFiles = await async.map(value, signFileUrls);
+                            set(key, signedFiles);
+                            return;
+                        }
+                        // If the attribute is not repeatable only sign a single file
+                        const signedFile = await signFileUrls(value);
+                        set(key, signedFile);
+                    }
+                    break;
+                }
+        }
+    };
+/**
+ * Visitor function to remove the signature from richtext / blocks URLs before
+ * they are persisted. Media attributes are left alone: the files table already
+ * holds the unsigned URL.
+ */ const createUnsignEntityMediaVisitor = (cache)=>async ({ key, value, attribute }, { set })=>{
+        if (!attribute) {
+            return;
+        }
+        if (attribute.type === 'blocks') {
+            set(key, await mapBlocksImages(value, (image)=>unsignImage(image, cache)));
+            return;
+        }
+        if (attribute.type === 'richtext') {
+            set(key, await mapRichtextUrls(value, (url)=>stripSignedUrl(url, cache)));
+        }
+    };
 /**
  *
  * Iterate through an entity manager result
@@ -38,8 +311,9 @@ function isFile(value, attribute) {
  *
  * @param {Object} entity
  * @param {Object} modelAttributes
+ * @param {Map} cache one per document service call, see `SignCache`
  * @returns
- */ const signEntityMedia = async (entity, uid)=>{
+ */ const signEntityMedia = async (entity, uid, cache = createSignCache())=>{
     if (!entity) {
         return entity;
     }
@@ -51,11 +325,26 @@ function isFile(value, attribute) {
     // If the entity is a regular content type, look for media attributes
     const model = strapi.getModel(uid);
     return traverseEntity(// @ts-expect-error - FIXME: fix traverseEntity using wrong types
-    signEntityMediaVisitor, {
+    createSignEntityMediaVisitor(cache), {
         schema: model,
         getModel: strapi.getModel.bind(strapi)
     }, entity);
 };
+/**
+ * Iterate through the input data of a create / update / clone and replace
+ * every signed provider URL found in a richtext or blocks attribute with its
+ * unsigned form, so that a short lived signature is never persisted.
+ */ const unsignEntityMedia = async (data, uid, cache = createSignCache())=>{
+    if (!data || uid === FILE_MODEL_UID) {
+        return data;
+    }
+    const model = strapi.getModel(uid);
+    return traverseEntity(// @ts-expect-error - FIXME: fix traverseEntity using wrong types
+    createUnsignEntityMediaVisitor(cache), {
+        schema: model,
+        getModel: strapi.getModel.bind(strapi)
+    }, data);
+};
 
-export { signEntityMedia };
+export { createSignCache, mapBlocksImages, mapRichtextUrls, signEntityMedia, stripSignedUrl, unsignEntityMedia, unsignImage };
 //# sourceMappingURL=utils.mjs.map

package/dist/server/services/extensions/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","sources":["../../../../server/src/services/extensions/utils.ts"],"sourcesContent":["import { async, traverseEntity } from '@strapi/utils';\n\nimport type { Schema, UID } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { FILE_MODEL_UID } from '../../constants';\n\nimport type { File } from '../../types';\n\ntype SignEntityMediaVisitor = (\n  args: {\n    key: string;\n    value: unknown;\n    attribute: Schema.Attribute.AnyAttribute;\n  },\n  utils: {\n    set: (key: string, value: unknown) => void;\n  }\n) => Promise<void>;\n\nfunction isFile(value: unknown, attribute: Schema.Attribute.AnyAttribute): value is File {\n  if (!value || attribute.type !== 'media') {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Visitor function to sign media URLs\n */\nconst signEntityMediaVisitor: SignEntityMediaVisitor = async (\n  { key, value, attribute },\n  { set }\n) => {\n  const { signFileUrls } = getService('file');\n\n  if (!attribute) {\n    return;\n  }\n\n  if (attribute.type !== 'media') {\n    return;\n  }\n\n  if (isFile(value, attribute)) {\n    // If the attribute is repeatable sign each file\n    if (attribute.multiple) {\n      const signedFiles = await async.map(value, signFileUrls);\n      set(key, signedFiles);\n      return;\n    }\n\n    // If the attribute is not repeatable only sign a single file\n    const signedFile = await signFileUrls(value);\n    set(key, signedFile);\n  }\n};\n\n/**\n *\n * Iterate through an entity manager result\n * Check which modelAttributes are media and pre sign the image URLs\n * if they are from the current upload provider\n *\n * @param {Object} entity\n * @param {Object} modelAttributes\n * @returns\n */\nconst signEntityMedia = async (entity: any, uid: UID.Schema) => {\n  if (!entity) {\n    return entity;\n  }\n\n  // If the entity itself is a file, sign it directly\n  if (uid === FILE_MODEL_UID) {\n    const { signFileUrls } = getService('file');\n    return signFileUrls(entity);\n  }\n\n  // If the entity is a regular content type, look for media attributes\n  const model = strapi.getModel(uid);\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    signEntityMediaVisitor,\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n};\n\nexport { signEntityMedia };\n"],"names":["isFile","value","attribute","type","signEntityMediaVisitor","key","set","signFileUrls","getService","multiple","signedFiles","async","map","signedFile","signEntityMedia","entity","uid","FILE_MODEL_UID","model","strapi","getModel","traverseEntity","schema","bind"],"mappings":";;;;AAoBA,SAASA,MAAAA,CAAOC,KAAc,EAAEC,SAAwC,EAAA;AACtE,IAAA,IAAI,CAACD,KAAAA,IAASC,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;QACxC,OAAO,KAAA;AACT,IAAA;IAEA,OAAO,IAAA;AACT;AAEA;;AAEC,IACD,MAAMC,sBAAAA,GAAiD,OACrD,EAAEC,GAAG,EAAEJ,KAAK,EAAEC,SAAS,EAAE,EACzB,EAAEI,GAAG,EAAE,GAAA;AAEP,IAAA,MAAM,EAAEC,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;AAEpC,IAAA,IAAI,CAACN,SAAAA,EAAW;AACd,QAAA;AACF,IAAA;IAEA,IAAIA,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;AAC9B,QAAA;AACF,IAAA;IAEA,IAAIH,MAAAA,CAAOC,OAAOC,SAAAA,CAAAA,EAAY;;QAE5B,IAAIA,SAAAA,CAAUO,QAAQ,EAAE;AACtB,YAAA,MAAMC,WAAAA,GAAc,MAAMC,KAAAA,CAAMC,GAAG,CAACX,KAAAA,EAAOM,YAAAA,CAAAA;AAC3CD,YAAAA,GAAAA,CAAID,GAAAA,EAAKK,WAAAA,CAAAA;AACT,YAAA;AACF,QAAA;;QAGA,MAAMG,UAAAA,GAAa,MAAMN,YAAAA,CAAaN,KAAAA,CAAAA;AACtCK,QAAAA,GAAAA,CAAID,GAAAA,EAAKQ,UAAAA,CAAAA;AACX,IAAA;AACF,CAAA;AAEA;;;;;;;;;IAUA,MAAMC,eAAAA,GAAkB,OAAOC,MAAAA,EAAaC,GAAAA,GAAAA;AAC1C,IAAA,IAAI,CAACD,MAAAA,EAAQ;QACX,OAAOA,MAAAA;AACT,IAAA;;AAGA,IAAA,IAAIC,QAAQC,cAAAA,EAAgB;AAC1B,QAAA,MAAM,EAAEV,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;AACpC,QAAA,OAAOD,YAAAA,CAAaQ,MAAAA,CAAAA;AACtB,IAAA;;IAGA,MAAMG,KAAAA,GAAQC,MAAAA,CAAOC,QAAQ,CAACJ,GAAAA,CAAAA;AAC9B,IAAA,OAAOK;IAELjB,sBAAAA,EACA;QAAEkB,MAAAA,EAAQJ,KAAAA;AAAOE,QAAAA,QAAAA,EAAUD,MAAAA,CAAOC,QAAQ,CAACG,IAAI,CAACJ,MAAAA;KAAQ,EACxDJ,MAAAA,CAAAA;AAEJ;;;;"}
+{"version":3,"file":"utils.mjs","sources":["../../../../server/src/services/extensions/utils.ts"],"sourcesContent":["import path from 'path';\n\nimport { omit } from 'lodash/fp';\nimport { async, traverseEntity } from '@strapi/utils';\n\nimport type { Schema, UID } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { FILE_MODEL_UID } from '../../constants';\n\nimport type { Config, File } from '../../types';\n\ntype SignEntityMediaVisitor = (\n  args: {\n    key: string;\n    value: unknown;\n    attribute: Schema.Attribute.AnyAttribute;\n  },\n  utils: {\n    set: (key: string, value: unknown) => void;\n  }\n) => Promise<void>;\n\n/**\n * One presign per distinct URL, keyed by the bare (unsigned) URL. The promise\n * is stored rather than its result so concurrent occurrences of the same URL\n * (the `async.map` in `mapRichtextUrls`, or several entries of a `findMany`)\n * share a single provider call.\n *\n * A cache must never outlive the document service call or migration run that\n * created it: a signed URL is only as fresh as the request that produced it.\n */\ntype SignCache = Map<string, Promise<string | null>>;\n\nconst createSignCache = (): SignCache => new Map();\n\n/**\n * URL bearing syntaxes found in a richtext (markdown) value. Each pattern\n * captures a prefix (group 1) and the URL (group 2) so the rebuild loop in\n * `mapRichtextUrls` can splice a new URL in place without touching anything\n * else.\n *\n * - markdown image / link: `![alt](url)` or `[text](url)`. The URL is captured\n *   up to the first whitespace or closing parenthesis, which also covers the\n *   optional title form `[text](url \"title\")`.\n * - raw HTML `src` / `href` attributes, double or single quoted, on the\n *   elements the editor lets users write by hand (`<img src=\"...\" width=\"200\">`\n *   is the usual way to size an image).\n */\nconst RICHTEXT_URL_REGEXES = [\n  /(!?\\[[^\\]]*\\]\\()([^)\\s]+)/g,\n  /(<(?:img|a|source|video|audio)\\b[^>]*?\\b(?:src|href)=\")([^\"]+)/gi,\n  /(<(?:img|a|source|video|audio)\\b[^>]*?\\b(?:src|href)=')([^']+)/gi,\n];\n\n/** Cheap short circuit for richtext values that cannot contain a URL we would rewrite. */\nconst RICHTEXT_URL_HINTS = ['](', 'src=', 'href='];\n\ntype BlocksNode = {\n  type?: string;\n  image?: File;\n  children?: unknown;\n  [key: string]: unknown;\n};\n\ntype ImageFormat = { url?: string; isUrlSigned?: boolean; [key: string]: unknown };\n\nfunction isFile(value: unknown, attribute: Schema.Attribute.AnyAttribute): value is File {\n  if (!value || attribute.type !== 'media') {\n    return false;\n  }\n\n  return true;\n}\n\nconst stripQueryString = (url: string) => url.split('?')[0];\n\nconst decodeQueryParamName = (pair: string) => {\n  const name = pair.split('=')[0];\n\n  try {\n    return decodeURIComponent(name);\n  } catch {\n    return name;\n  }\n};\n\n/**\n * Split a URL into what precedes the `?`, the raw `key=value` pairs of its\n * query string and the `#fragment`, if any. Plain string work on purpose:\n * `new URL` throws on the relative `/uploads/...` paths a local provider\n * writes, and would re-encode the pairs we want to hand back untouched.\n */\nconst splitUrl = (url: string) => {\n  const hashIndex = url.indexOf('#');\n  const fragment = hashIndex === -1 ? '' : url.slice(hashIndex);\n  const withoutFragment = hashIndex === -1 ? url : url.slice(0, hashIndex);\n\n  const queryIndex = withoutFragment.indexOf('?');\n\n  if (queryIndex === -1) {\n    return { base: withoutFragment, pairs: [] as string[], fragment };\n  }\n\n  return {\n    base: withoutFragment.slice(0, queryIndex),\n    pairs: withoutFragment\n      .slice(queryIndex + 1)\n      .split('&')\n      .filter(Boolean),\n    fragment,\n  };\n};\n\n/** Names of the query parameters of `url`, decoded, in order. */\nconst getQueryParamNames = (url: string): string[] => splitUrl(url).pairs.map(decodeQueryParamName);\n\n/**\n * `url` with every query parameter whose name is in `names` removed. The\n * surviving pairs keep their order and encoding; the `?` is dropped when\n * nothing is left.\n */\nconst removeQueryParams = (url: string, names: string[]): string => {\n  const { base, pairs, fragment } = splitUrl(url);\n\n  if (pairs.length === 0 || names.length === 0) {\n    return url;\n  }\n\n  const kept = pairs.filter((pair) => !names.includes(decodeQueryParamName(pair)));\n\n  return kept.length === 0 ? `${base}${fragment}` : `${base}?${kept.join('&')}${fragment}`;\n};\n\n/**\n * Build the minimal file shape `signFileUrls` needs out of a bare URL, as found\n * in a richtext value.\n *\n * `hash` and `ext` are taken from the last path segment and `path` is left\n * unset, which rebuilds the S3 key for the default layout and for the\n * `rootPath` provider option (the provider prefixes it itself). A URL whose key\n * has extra segments (a file uploaded with the per-file `path` option, or an\n * older key layout) is still recognised as ours by the provider, but it is\n * signed with a key that does not exist and the link returns 403. Media\n * signing has the same limit because `path` is not persisted on the file\n * (`content-types/file.ts`). Not addressed here.\n */\nconst getFileFromUrl = (url: string): File => {\n  const unsignedUrl = stripQueryString(url);\n  const { provider } = strapi.config.get<Config>('plugin::upload');\n  const { name, ext } = path.parse(unsignedUrl.split('/').pop() ?? '');\n\n  return { url: unsignedUrl, hash: name, ext, provider } as File;\n};\n\n/**\n * Ask the provider to sign `file` and return the signed URL if the provider\n * owns it, otherwise `null`. Memoised in `cache` by the bare URL.\n *\n * Ownership is decided by whether the provider changed the URL: `signFileUrls`\n * flags every file of the configured provider as signed, but the provider\n * itself returns URLs it does not own untouched (an S3 URL from another\n * bucket, an external site, a local `/uploads` path), so a changed URL is the\n * only reliable signal. `file.url` must already be the bare URL so the\n * comparison is meaningful.\n */\nconst signFileIfOwned = (file: File, cache: SignCache): Promise<string | null> => {\n  const bareUrl = file.url ?? '';\n  const cached = cache.get(bareUrl);\n\n  if (cached) {\n    return cached;\n  }\n\n  const pending = (async () => {\n    const { signFileUrls } = getService('file');\n    const signedFile = await signFileUrls(file);\n\n    return signedFile.url && signedFile.url !== bareUrl ? signedFile.url : null;\n  })();\n\n  cache.set(bareUrl, pending);\n\n  return pending;\n};\n\n/**\n * Signs a richtext URL if the configured provider owns it, otherwise `null`.\n * See `signFileIfOwned` for how ownership is decided. A single predicate means\n * the read path (sign) and the write path (unsign) can never disagree about\n * what they own.\n */\nconst signIfOwned = (url: string, cache: SignCache): Promise<string | null> =>\n  signFileIfOwned(getFileFromUrl(url), cache);\n\n/**\n * Returns a richtext URL with its signature removed, if we own it.\n *\n * Only the query parameters the provider's own fresh signature introduces are\n * removed (for S3, the `X-Amz-*` family), every other parameter is kept. That\n * way a provider that signs whatever it is handed cannot make us drop `?v=x`\n * from a link to an external site. A parameter of an old signature that the\n * fresh one no longer carries (an `X-Amz-Security-Token` from credentials no\n * longer in use, say) survives in the row; it is not a signature, and the read\n * path replaces the whole URL with the provider output anyway.\n */\nconst stripSignedUrl = async (url: string, cache: SignCache) => {\n  // Nothing to strip, and no reason to ask the provider\n  if (!url.includes('?')) {\n    return url;\n  }\n\n  const signedUrl = await signIfOwned(url, cache);\n\n  if (signedUrl === null) {\n    return url;\n  }\n\n  return removeQueryParams(url, getQueryParamNames(signedUrl));\n};\n\n/** Returns a freshly signed richtext URL, if we own it. */\nconst signUrl = async (url: string, cache: SignCache) => (await signIfOwned(url, cache)) ?? url;\n\n/**\n * Apply `mapUrl` to every markdown image / link URL and every raw HTML\n * `src` / `href` URL of a richtext value.\n */\nconst mapRichtextUrls = async (value: unknown, mapUrl: (url: string) => Promise<string>) => {\n  if (typeof value !== 'string' || !RICHTEXT_URL_HINTS.some((hint) => value.includes(hint))) {\n    return value;\n  }\n\n  // The rebuild loop splices by match index, so matches must be in ascending order\n  const matches = RICHTEXT_URL_REGEXES.flatMap((regex) => Array.from(value.matchAll(regex))).sort(\n    (a, b) => (a.index as number) - (b.index as number)\n  );\n\n  if (matches.length === 0) {\n    return value;\n  }\n\n  const urls: string[] = await async.map(matches, (match: RegExpMatchArray) => mapUrl(match[2]));\n\n  let result = '';\n  let cursor = 0;\n\n  matches.forEach((match, index) => {\n    const urlStart = (match.index as number) + match[1].length;\n\n    // Two patterns matched overlapping text: keep the first, never splice twice\n    if (urlStart < cursor) {\n      return;\n    }\n\n    result += value.slice(cursor, urlStart) + urls[index];\n    cursor = urlStart + match[2].length;\n  });\n\n  return result + value.slice(cursor);\n};\n\n/**\n * Apply `mapImage` to every `image` node of a blocks value, recursively.\n * A new array is always returned, the original value is never mutated.\n */\nconst mapBlocksImages = async (\n  value: unknown,\n  mapImage: (image: File) => Promise<File>\n): Promise<unknown> => {\n  if (!Array.isArray(value)) {\n    return value;\n  }\n\n  return async.map(value, async (node: BlocksNode) => {\n    if (!node || typeof node !== 'object') {\n      return node;\n    }\n\n    let result = node;\n\n    if (node.type === 'image' && node.image) {\n      result = { ...result, image: await mapImage(node.image) };\n    }\n\n    if (Array.isArray(node.children)) {\n      result = { ...result, children: await mapBlocksImages(node.children, mapImage) };\n    }\n\n    return result;\n  });\n};\n\nconst getImageFormats = (image: File): [string, ImageFormat][] =>\n  Object.entries(image.formats ?? {}) as [string, ImageFormat][];\n\n/** True when the node still carries anything `unsignImage` would remove. */\nconst hasSignatureTraces = (image: File) => {\n  if (image.isUrlSigned !== undefined || (image.url ?? '').includes('?')) {\n    return true;\n  }\n\n  return getImageFormats(image).some(\n    ([, format]) => format?.isUrlSigned !== undefined || (format?.url ?? '').includes('?')\n  );\n};\n\n/**\n * Remove the signature from a blocks `image` node: the signature parameters on\n * the file URL and on every format URL (the same presigner signs them all, so\n * the same parameter names apply), and the `isUrlSigned` flag `signFileUrls`\n * sets on the file and on each format. The node carries a full file object, so\n * the ownership check is made with it rather than with a URL derived stand in.\n */\nconst unsignImage = async (image: File, cache: SignCache = createSignCache()) => {\n  // Already bare: nothing to do, and no reason to ask the provider\n  if (!hasSignatureTraces(image)) {\n    return image;\n  }\n\n  const bareUrl = stripQueryString(image.url ?? '');\n  const signedUrl = await signFileIfOwned({ ...image, url: bareUrl }, cache);\n\n  // Not one of ours (different provider, external URL, public provider): the\n  // provider hands the URL back unchanged, leave the node as is\n  if (signedUrl === null) {\n    return image;\n  }\n\n  const names = getQueryParamNames(signedUrl);\n  const result: File = omit(['isUrlSigned'], {\n    ...image,\n    url: removeQueryParams(image.url ?? '', names),\n  });\n\n  if (image.formats) {\n    result.formats = Object.fromEntries(\n      getImageFormats(image).map(([key, format]) => [\n        key,\n        format && typeof format === 'object'\n          ? omit(['isUrlSigned'], {\n              ...format,\n              ...(format.url ? { url: removeQueryParams(format.url, names) } : {}),\n            })\n          : format,\n      ])\n    );\n  }\n\n  return result;\n};\n\n/**\n * Visitor function to sign media URLs\n */\nconst createSignEntityMediaVisitor =\n  (cache: SignCache): SignEntityMediaVisitor =>\n  async ({ key, value, attribute }, { set }) => {\n    const { signFileUrls } = getService('file');\n\n    if (!attribute) {\n      return;\n    }\n\n    switch (attribute.type) {\n      case 'blocks':\n        set(key, await mapBlocksImages(value, signFileUrls));\n        return;\n\n      case 'richtext':\n        set(key, await mapRichtextUrls(value, (url) => signUrl(url, cache)));\n        return;\n\n      case 'media': {\n        if (isFile(value, attribute)) {\n          // If the attribute is repeatable sign each file\n          if (attribute.multiple) {\n            const signedFiles = await async.map(value, signFileUrls);\n            set(key, signedFiles);\n            return;\n          }\n\n          // If the attribute is not repeatable only sign a single file\n          const signedFile = await signFileUrls(value);\n          set(key, signedFile);\n        }\n        break;\n      }\n\n      default:\n        break;\n    }\n  };\n\n/**\n * Visitor function to remove the signature from richtext / blocks URLs before\n * they are persisted. Media attributes are left alone: the files table already\n * holds the unsigned URL.\n */\nconst createUnsignEntityMediaVisitor =\n  (cache: SignCache): SignEntityMediaVisitor =>\n  async ({ key, value, attribute }, { set }) => {\n    if (!attribute) {\n      return;\n    }\n\n    if (attribute.type === 'blocks') {\n      set(key, await mapBlocksImages(value, (image) => unsignImage(image, cache)));\n      return;\n    }\n\n    if (attribute.type === 'richtext') {\n      set(key, await mapRichtextUrls(value, (url) => stripSignedUrl(url, cache)));\n    }\n  };\n\n/**\n *\n * Iterate through an entity manager result\n * Check which modelAttributes are media and pre sign the image URLs\n * if they are from the current upload provider\n *\n * @param {Object} entity\n * @param {Object} modelAttributes\n * @param {Map} cache one per document service call, see `SignCache`\n * @returns\n */\nconst signEntityMedia = async (\n  entity: any,\n  uid: UID.Schema,\n  cache: SignCache = createSignCache()\n) => {\n  if (!entity) {\n    return entity;\n  }\n\n  // If the entity itself is a file, sign it directly\n  if (uid === FILE_MODEL_UID) {\n    const { signFileUrls } = getService('file');\n    return signFileUrls(entity);\n  }\n\n  // If the entity is a regular content type, look for media attributes\n  const model = strapi.getModel(uid);\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    createSignEntityMediaVisitor(cache),\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    entity\n  );\n};\n\n/**\n * Iterate through the input data of a create / update / clone and replace\n * every signed provider URL found in a richtext or blocks attribute with its\n * unsigned form, so that a short lived signature is never persisted.\n */\nconst unsignEntityMedia = async (\n  data: any,\n  uid: UID.Schema,\n  cache: SignCache = createSignCache()\n) => {\n  if (!data || uid === FILE_MODEL_UID) {\n    return data;\n  }\n\n  const model = strapi.getModel(uid);\n\n  return traverseEntity(\n    // @ts-expect-error - FIXME: fix traverseEntity using wrong types\n    createUnsignEntityMediaVisitor(cache),\n    { schema: model, getModel: strapi.getModel.bind(strapi) },\n    data\n  );\n};\n\nexport type { SignCache };\n\nexport {\n  createSignCache,\n  signEntityMedia,\n  unsignEntityMedia,\n  mapRichtextUrls,\n  mapBlocksImages,\n  stripSignedUrl,\n  unsignImage,\n};\n"],"names":["createSignCache","Map","RICHTEXT_URL_REGEXES","RICHTEXT_URL_HINTS","isFile","value","attribute","type","stripQueryString","url","split","decodeQueryParamName","pair","name","decodeURIComponent","splitUrl","hashIndex","indexOf","fragment","slice","withoutFragment","queryIndex","base","pairs","filter","Boolean","getQueryParamNames","map","removeQueryParams","names","length","kept","includes","join","getFileFromUrl","unsignedUrl","provider","strapi","config","get","ext","path","parse","pop","hash","signFileIfOwned","file","cache","bareUrl","cached","pending","signFileUrls","getService","signedFile","set","signIfOwned","stripSignedUrl","signedUrl","signUrl","mapRichtextUrls","mapUrl","some","hint","matches","flatMap","regex","Array","from","matchAll","sort","a","b","index","urls","async","match","result","cursor","forEach","urlStart","mapBlocksImages","mapImage","isArray","node","image","children","getImageFormats","Object","entries","formats","hasSignatureTraces","isUrlSigned","undefined","format","unsignImage","omit","fromEntries","key","createSignEntityMediaVisitor","multiple","signedFiles","createUnsignEntityMediaVisitor","signEntityMedia","entity","uid","FILE_MODEL_UID","model","getModel","traverseEntity","schema","bind","unsignEntityMedia","data"],"mappings":";;;;;;AAkCA,MAAMA,eAAAA,GAAkB,IAAiB,IAAIC,GAAAA;AAE7C;;;;;;;;;;;;AAYC,IACD,MAAMC,oBAAAA,GAAuB;AAC3B,IAAA,4BAAA;AACA,IAAA,kEAAA;AACA,IAAA;AACD,CAAA;AAED,2FACA,MAAMC,kBAAAA,GAAqB;AAAC,IAAA,IAAA;AAAM,IAAA,MAAA;AAAQ,IAAA;AAAQ,CAAA;AAWlD,SAASC,MAAAA,CAAOC,KAAc,EAAEC,SAAwC,EAAA;AACtE,IAAA,IAAI,CAACD,KAAAA,IAASC,SAAAA,CAAUC,IAAI,KAAK,OAAA,EAAS;QACxC,OAAO,KAAA;AACT,IAAA;IAEA,OAAO,IAAA;AACT;AAEA,MAAMC,gBAAAA,GAAmB,CAACC,GAAAA,GAAgBA,GAAAA,CAAIC,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE;AAE3D,MAAMC,uBAAuB,CAACC,IAAAA,GAAAA;AAC5B,IAAA,MAAMC,OAAOD,IAAAA,CAAKF,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE;IAE/B,IAAI;AACF,QAAA,OAAOI,kBAAAA,CAAmBD,IAAAA,CAAAA;AAC5B,IAAA,CAAA,CAAE,OAAM;QACN,OAAOA,IAAAA;AACT,IAAA;AACF,CAAA;AAEA;;;;;IAMA,MAAME,WAAW,CAACN,GAAAA,GAAAA;IAChB,MAAMO,SAAAA,GAAYP,GAAAA,CAAIQ,OAAO,CAAC,GAAA,CAAA;AAC9B,IAAA,MAAMC,WAAWF,SAAAA,KAAc,KAAK,EAAA,GAAKP,GAAAA,CAAIU,KAAK,CAACH,SAAAA,CAAAA;IACnD,MAAMI,eAAAA,GAAkBJ,cAAc,EAAC,GAAIP,MAAMA,GAAAA,CAAIU,KAAK,CAAC,CAAA,EAAGH,SAAAA,CAAAA;IAE9D,MAAMK,UAAAA,GAAaD,eAAAA,CAAgBH,OAAO,CAAC,GAAA,CAAA;IAE3C,IAAII,UAAAA,KAAe,EAAC,EAAG;QACrB,OAAO;YAAEC,IAAAA,EAAMF,eAAAA;AAAiBG,YAAAA,KAAAA,EAAO,EAAE;AAAcL,YAAAA;AAAS,SAAA;AAClE,IAAA;IAEA,OAAO;QACLI,IAAAA,EAAMF,eAAAA,CAAgBD,KAAK,CAAC,CAAA,EAAGE,UAAAA,CAAAA;QAC/BE,KAAAA,EAAOH,eAAAA,CACJD,KAAK,CAACE,UAAAA,GAAa,GACnBX,KAAK,CAAC,GAAA,CAAA,CACNc,MAAM,CAACC,OAAAA,CAAAA;AACVP,QAAAA;AACF,KAAA;AACF,CAAA;AAEA,kEACA,MAAMQ,kBAAAA,GAAqB,CAACjB,GAAAA,GAA0BM,SAASN,GAAAA,CAAAA,CAAKc,KAAK,CAACI,GAAG,CAAChB,oBAAAA,CAAAA;AAE9E;;;;IAKA,MAAMiB,iBAAAA,GAAoB,CAACnB,GAAAA,EAAaoB,KAAAA,GAAAA;IACtC,MAAM,EAAEP,IAAI,EAAEC,KAAK,EAAEL,QAAQ,EAAE,GAAGH,QAAAA,CAASN,GAAAA,CAAAA;AAE3C,IAAA,IAAIc,MAAMO,MAAM,KAAK,KAAKD,KAAAA,CAAMC,MAAM,KAAK,CAAA,EAAG;QAC5C,OAAOrB,GAAAA;AACT,IAAA;IAEA,MAAMsB,IAAAA,GAAOR,KAAAA,CAAMC,MAAM,CAAC,CAACZ,OAAS,CAACiB,KAAAA,CAAMG,QAAQ,CAACrB,oBAAAA,CAAqBC,IAAAA,CAAAA,CAAAA,CAAAA;AAEzE,IAAA,OAAOmB,KAAKD,MAAM,KAAK,CAAA,GAAI,CAAA,EAAGR,OAAOJ,QAAAA,CAAAA,CAAU,GAAG,CAAA,EAAGI,IAAAA,CAAK,CAAC,EAAES,IAAAA,CAAKE,IAAI,CAAC,OAAOf,QAAAA,CAAAA,CAAU;AAC1F,CAAA;AAEA;;;;;;;;;;;;IAaA,MAAMgB,iBAAiB,CAACzB,GAAAA,GAAAA;AACtB,IAAA,MAAM0B,cAAc3B,gBAAAA,CAAiBC,GAAAA,CAAAA;IACrC,MAAM,EAAE2B,QAAQ,EAAE,GAAGC,OAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAC/C,IAAA,MAAM,EAAE1B,IAAI,EAAE2B,GAAG,EAAE,GAAGC,IAAAA,CAAKC,KAAK,CAACP,WAAAA,CAAYzB,KAAK,CAAC,GAAA,CAAA,CAAKiC,GAAG,EAAA,IAAM,EAAA,CAAA;IAEjE,OAAO;QAAElC,GAAAA,EAAK0B,WAAAA;QAAaS,IAAAA,EAAM/B,IAAAA;AAAM2B,QAAAA,GAAAA;AAAKJ,QAAAA;AAAS,KAAA;AACvD,CAAA;AAEA;;;;;;;;;;IAWA,MAAMS,eAAAA,GAAkB,CAACC,IAAAA,EAAYC,KAAAA,GAAAA;IACnC,MAAMC,OAAAA,GAAUF,IAAAA,CAAKrC,GAAG,IAAI,EAAA;IAC5B,MAAMwC,MAAAA,GAASF,KAAAA,CAAMR,GAAG,CAACS,OAAAA,CAAAA;AAEzB,IAAA,IAAIC,MAAAA,EAAQ;QACV,OAAOA,MAAAA;AACT,IAAA;IAEA,MAAMC,OAAAA,GAAU,CAAC,UAAA;AACf,QAAA,MAAM,EAAEC,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;QACpC,MAAMC,UAAAA,GAAa,MAAMF,YAAAA,CAAaL,IAAAA,CAAAA;QAEtC,OAAOO,UAAAA,CAAW5C,GAAG,IAAI4C,UAAAA,CAAW5C,GAAG,KAAKuC,OAAAA,GAAUK,UAAAA,CAAW5C,GAAG,GAAG,IAAA;IACzE,CAAA,GAAA;IAEAsC,KAAAA,CAAMO,GAAG,CAACN,OAAAA,EAASE,OAAAA,CAAAA;IAEnB,OAAOA,OAAAA;AACT,CAAA;AAEA;;;;;AAKC,IACD,MAAMK,WAAAA,GAAc,CAAC9C,KAAasC,KAAAA,GAChCF,eAAAA,CAAgBX,eAAezB,GAAAA,CAAAA,EAAMsC,KAAAA,CAAAA;AAEvC;;;;;;;;;;IAWA,MAAMS,cAAAA,GAAiB,OAAO/C,GAAAA,EAAasC,KAAAA,GAAAA;;AAEzC,IAAA,IAAI,CAACtC,GAAAA,CAAIuB,QAAQ,CAAC,GAAA,CAAA,EAAM;QACtB,OAAOvB,GAAAA;AACT,IAAA;IAEA,MAAMgD,SAAAA,GAAY,MAAMF,WAAAA,CAAY9C,GAAAA,EAAKsC,KAAAA,CAAAA;AAEzC,IAAA,IAAIU,cAAc,IAAA,EAAM;QACtB,OAAOhD,GAAAA;AACT,IAAA;IAEA,OAAOmB,iBAAAA,CAAkBnB,KAAKiB,kBAAAA,CAAmB+B,SAAAA,CAAAA,CAAAA;AACnD;AAEA,4DACA,MAAMC,OAAAA,GAAU,OAAOjD,GAAAA,EAAasC,QAAqB,MAAOQ,WAAAA,CAAY9C,GAAAA,EAAKsC,KAAAA,CAAAA,IAAWtC,GAAAA;AAE5F;;;IAIA,MAAMkD,eAAAA,GAAkB,OAAOtD,KAAAA,EAAgBuD,MAAAA,GAAAA;AAC7C,IAAA,IAAI,OAAOvD,KAAAA,KAAU,QAAA,IAAY,CAACF,kBAAAA,CAAmB0D,IAAI,CAAC,CAACC,IAAAA,GAASzD,KAAAA,CAAM2B,QAAQ,CAAC8B,IAAAA,CAAAA,CAAAA,EAAQ;QACzF,OAAOzD,KAAAA;AACT,IAAA;;IAGA,MAAM0D,OAAAA,GAAU7D,qBAAqB8D,OAAO,CAAC,CAACC,KAAAA,GAAUC,KAAAA,CAAMC,IAAI,CAAC9D,KAAAA,CAAM+D,QAAQ,CAACH,KAAAA,CAAAA,CAAAA,CAAAA,CAASI,IAAI,CAC7F,CAACC,CAAAA,EAAGC,CAAAA,GAAM,CAACD,CAAEE,KAAK,GAAeD,CAAAA,CAAEC,KAAK,CAAA;IAG1C,IAAIT,OAAAA,CAAQjC,MAAM,KAAK,CAAA,EAAG;QACxB,OAAOzB,KAAAA;AACT,IAAA;IAEA,MAAMoE,IAAAA,GAAiB,MAAMC,KAAAA,CAAM/C,GAAG,CAACoC,OAAAA,EAAS,CAACY,KAAAA,GAA4Bf,MAAAA,CAAOe,KAAK,CAAC,CAAA,CAAE,CAAA,CAAA;AAE5F,IAAA,IAAIC,MAAAA,GAAS,EAAA;AACb,IAAA,IAAIC,MAAAA,GAAS,CAAA;IAEbd,OAAAA,CAAQe,OAAO,CAAC,CAACH,KAAAA,EAAOH,KAAAA,GAAAA;QACtB,MAAMO,QAAAA,GAAW,KAACJ,CAAMH,KAAK,GAAcG,KAAK,CAAC,CAAA,CAAE,CAAC7C,MAAM;;AAG1D,QAAA,IAAIiD,WAAWF,MAAAA,EAAQ;AACrB,YAAA;AACF,QAAA;AAEAD,QAAAA,MAAAA,IAAUvE,MAAMc,KAAK,CAAC0D,QAAQE,QAAAA,CAAAA,GAAYN,IAAI,CAACD,KAAAA,CAAM;AACrDK,QAAAA,MAAAA,GAASE,QAAAA,GAAWJ,KAAK,CAAC,CAAA,CAAE,CAAC7C,MAAM;AACrC,IAAA,CAAA,CAAA;IAEA,OAAO8C,MAAAA,GAASvE,KAAAA,CAAMc,KAAK,CAAC0D,MAAAA,CAAAA;AAC9B;AAEA;;;IAIA,MAAMG,eAAAA,GAAkB,OACtB3E,KAAAA,EACA4E,QAAAA,GAAAA;AAEA,IAAA,IAAI,CAACf,KAAAA,CAAMgB,OAAO,CAAC7E,KAAAA,CAAAA,EAAQ;QACzB,OAAOA,KAAAA;AACT,IAAA;AAEA,IAAA,OAAOqE,KAAAA,CAAM/C,GAAG,CAACtB,KAAAA,EAAO,OAAO8E,IAAAA,GAAAA;AAC7B,QAAA,IAAI,CAACA,IAAAA,IAAQ,OAAOA,IAAAA,KAAS,QAAA,EAAU;YACrC,OAAOA,IAAAA;AACT,QAAA;AAEA,QAAA,IAAIP,MAAAA,GAASO,IAAAA;AAEb,QAAA,IAAIA,KAAK5E,IAAI,KAAK,OAAA,IAAW4E,IAAAA,CAAKC,KAAK,EAAE;YACvCR,MAAAA,GAAS;AAAE,gBAAA,GAAGA,MAAM;gBAAEQ,KAAAA,EAAO,MAAMH,QAAAA,CAASE,IAAAA,CAAKC,KAAK;AAAE,aAAA;AAC1D,QAAA;AAEA,QAAA,IAAIlB,KAAAA,CAAMgB,OAAO,CAACC,IAAAA,CAAKE,QAAQ,CAAA,EAAG;YAChCT,MAAAA,GAAS;AAAE,gBAAA,GAAGA,MAAM;AAAES,gBAAAA,QAAAA,EAAU,MAAML,eAAAA,CAAgBG,IAAAA,CAAKE,QAAQ,EAAEJ,QAAAA;AAAU,aAAA;AACjF,QAAA;QAEA,OAAOL,MAAAA;AACT,IAAA,CAAA,CAAA;AACF;AAEA,MAAMU,eAAAA,GAAkB,CAACF,KAAAA,GACvBG,MAAAA,CAAOC,OAAO,CAACJ,KAAAA,CAAMK,OAAO,IAAI,EAAC,CAAA;AAEnC,6EACA,MAAMC,kBAAAA,GAAqB,CAACN,KAAAA,GAAAA;AAC1B,IAAA,IAAIA,KAAAA,CAAMO,WAAW,KAAKC,SAAAA,IAAa,CAACR,KAAAA,CAAM3E,GAAG,IAAI,EAAC,EAAGuB,QAAQ,CAAC,GAAA,CAAA,EAAM;QACtE,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAOsD,gBAAgBF,KAAAA,CAAAA,CAAOvB,IAAI,CAChC,CAAC,GAAGgC,OAAO,GAAKA,MAAAA,EAAQF,WAAAA,KAAgBC,SAAAA,IAAa,CAACC,MAAAA,EAAQpF,OAAO,EAAC,EAAGuB,QAAQ,CAAC,GAAA,CAAA,CAAA;AAEtF,CAAA;AAEA;;;;;;AAMC,IACD,MAAM8D,WAAAA,GAAc,OAAOV,KAAAA,EAAarC,QAAmB/C,eAAAA,EAAiB,GAAA;;IAE1E,IAAI,CAAC0F,mBAAmBN,KAAAA,CAAAA,EAAQ;QAC9B,OAAOA,KAAAA;AACT,IAAA;AAEA,IAAA,MAAMpC,OAAAA,GAAUxC,gBAAAA,CAAiB4E,KAAAA,CAAM3E,GAAG,IAAI,EAAA,CAAA;IAC9C,MAAMgD,SAAAA,GAAY,MAAMZ,eAAAA,CAAgB;AAAE,QAAA,GAAGuC,KAAK;QAAE3E,GAAAA,EAAKuC;KAAQ,EAAGD,KAAAA,CAAAA;;;AAIpE,IAAA,IAAIU,cAAc,IAAA,EAAM;QACtB,OAAO2B,KAAAA;AACT,IAAA;AAEA,IAAA,MAAMvD,QAAQH,kBAAAA,CAAmB+B,SAAAA,CAAAA;AACjC,IAAA,MAAMmB,SAAemB,IAAAA,CAAK;AAAC,QAAA;KAAc,EAAE;AACzC,QAAA,GAAGX,KAAK;AACR3E,QAAAA,GAAAA,EAAKmB,iBAAAA,CAAkBwD,KAAAA,CAAM3E,GAAG,IAAI,EAAA,EAAIoB,KAAAA;AAC1C,KAAA,CAAA;IAEA,IAAIuD,KAAAA,CAAMK,OAAO,EAAE;AACjBb,QAAAA,MAAAA,CAAOa,OAAO,GAAGF,MAAAA,CAAOS,WAAW,CACjCV,eAAAA,CAAgBF,KAAAA,CAAAA,CAAOzD,GAAG,CAAC,CAAC,CAACsE,GAAAA,EAAKJ,OAAO,GAAK;AAC5CI,gBAAAA,GAAAA;gBACAJ,MAAAA,IAAU,OAAOA,MAAAA,KAAW,QAAA,GACxBE,IAAAA,CAAK;AAAC,oBAAA;iBAAc,EAAE;AACpB,oBAAA,GAAGF,MAAM;oBACT,GAAIA,MAAAA,CAAOpF,GAAG,GAAG;wBAAEA,GAAAA,EAAKmB,iBAAAA,CAAkBiE,MAAAA,CAAOpF,GAAG,EAAEoB,KAAAA;AAAO,qBAAA,GAAI;iBACnE,CAAA,GACAgE;AACL,aAAA,CAAA,CAAA;AAEL,IAAA;IAEA,OAAOjB,MAAAA;AACT;AAEA;;AAEC,IACD,MAAMsB,4BAAAA,GACJ,CAACnD,KAAAA,GACD,OAAO,EAAEkD,GAAG,EAAE5F,KAAK,EAAEC,SAAS,EAAE,EAAE,EAAEgD,GAAG,EAAE,GAAA;AACvC,QAAA,MAAM,EAAEH,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;AAEpC,QAAA,IAAI,CAAC9C,SAAAA,EAAW;AACd,YAAA;AACF,QAAA;AAEA,QAAA,OAAQA,UAAUC,IAAI;YACpB,KAAK,QAAA;gBACH+C,GAAAA,CAAI2C,GAAAA,EAAK,MAAMjB,eAAAA,CAAgB3E,KAAAA,EAAO8C,YAAAA,CAAAA,CAAAA;AACtC,gBAAA;YAEF,KAAK,UAAA;AACHG,gBAAAA,GAAAA,CAAI2C,KAAK,MAAMtC,eAAAA,CAAgBtD,OAAO,CAACI,GAAAA,GAAQiD,QAAQjD,GAAAA,EAAKsC,KAAAA,CAAAA,CAAAA,CAAAA;AAC5D,gBAAA;YAEF,KAAK,OAAA;AAAS,gBAAA;oBACZ,IAAI3C,MAAAA,CAAOC,OAAOC,SAAAA,CAAAA,EAAY;;wBAE5B,IAAIA,SAAAA,CAAU6F,QAAQ,EAAE;AACtB,4BAAA,MAAMC,WAAAA,GAAc,MAAM1B,KAAAA,CAAM/C,GAAG,CAACtB,KAAAA,EAAO8C,YAAAA,CAAAA;AAC3CG,4BAAAA,GAAAA,CAAI2C,GAAAA,EAAKG,WAAAA,CAAAA;AACT,4BAAA;AACF,wBAAA;;wBAGA,MAAM/C,UAAAA,GAAa,MAAMF,YAAAA,CAAa9C,KAAAA,CAAAA;AACtCiD,wBAAAA,GAAAA,CAAI2C,GAAAA,EAAK5C,UAAAA,CAAAA;AACX,oBAAA;AACA,oBAAA;AACF,gBAAA;AAIF;AACF,IAAA,CAAA;AAEF;;;;AAIC,IACD,MAAMgD,8BAAAA,GACJ,CAACtD,KAAAA,GACD,OAAO,EAAEkD,GAAG,EAAE5F,KAAK,EAAEC,SAAS,EAAE,EAAE,EAAEgD,GAAG,EAAE,GAAA;AACvC,QAAA,IAAI,CAAChD,SAAAA,EAAW;AACd,YAAA;AACF,QAAA;QAEA,IAAIA,SAAAA,CAAUC,IAAI,KAAK,QAAA,EAAU;AAC/B+C,YAAAA,GAAAA,CAAI2C,KAAK,MAAMjB,eAAAA,CAAgB3E,OAAO,CAAC+E,KAAAA,GAAUU,YAAYV,KAAAA,EAAOrC,KAAAA,CAAAA,CAAAA,CAAAA;AACpE,YAAA;AACF,QAAA;QAEA,IAAIzC,SAAAA,CAAUC,IAAI,KAAK,UAAA,EAAY;AACjC+C,YAAAA,GAAAA,CAAI2C,KAAK,MAAMtC,eAAAA,CAAgBtD,OAAO,CAACI,GAAAA,GAAQ+C,eAAe/C,GAAAA,EAAKsC,KAAAA,CAAAA,CAAAA,CAAAA;AACrE,QAAA;AACF,IAAA,CAAA;AAEF;;;;;;;;;;AAUC,UACKuD,eAAAA,GAAkB,OACtBC,MAAAA,EACAC,GAAAA,EACAzD,QAAmB/C,eAAAA,EAAiB,GAAA;AAEpC,IAAA,IAAI,CAACuG,MAAAA,EAAQ;QACX,OAAOA,MAAAA;AACT,IAAA;;AAGA,IAAA,IAAIC,QAAQC,cAAAA,EAAgB;AAC1B,QAAA,MAAM,EAAEtD,YAAY,EAAE,GAAGC,UAAAA,CAAW,MAAA,CAAA;AACpC,QAAA,OAAOD,YAAAA,CAAaoD,MAAAA,CAAAA;AACtB,IAAA;;IAGA,MAAMG,KAAAA,GAAQrE,MAAAA,CAAOsE,QAAQ,CAACH,GAAAA,CAAAA;AAC9B,IAAA,OAAOI;AAELV,IAAAA,4BAAAA,CAA6BnD,KAAAA,CAAAA,EAC7B;QAAE8D,MAAAA,EAAQH,KAAAA;AAAOC,QAAAA,QAAAA,EAAUtE,MAAAA,CAAOsE,QAAQ,CAACG,IAAI,CAACzE,MAAAA;KAAQ,EACxDkE,MAAAA,CAAAA;AAEJ;AAEA;;;;AAIC,UACKQ,iBAAAA,GAAoB,OACxBC,IAAAA,EACAR,GAAAA,EACAzD,QAAmB/C,eAAAA,EAAiB,GAAA;IAEpC,IAAI,CAACgH,IAAAA,IAAQR,GAAAA,KAAQC,cAAAA,EAAgB;QACnC,OAAOO,IAAAA;AACT,IAAA;IAEA,MAAMN,KAAAA,GAAQrE,MAAAA,CAAOsE,QAAQ,CAACH,GAAAA,CAAAA;AAE9B,IAAA,OAAOI;AAELP,IAAAA,8BAAAA,CAA+BtD,KAAAA,CAAAA,EAC/B;QAAE8D,MAAAA,EAAQH,KAAAA;AAAOC,QAAAA,QAAAA,EAAUtE,MAAAA,CAAOsE,QAAQ,CAACG,IAAI,CAACzE,MAAAA;KAAQ,EACxD2E,IAAAA,CAAAA;AAEJ;;;;"}

package/dist/server/services/metrics.js

@@ -1,17 +1,18 @@
 'use strict';
 
+var index = require('../utils/index.js');
+
 const getProviderName = ()=>strapi.config.get('plugin::upload.provider', 'local');
 const isProviderPrivate = async ()=>strapi.plugin('upload').provider.isPrivate();
 var metrics = (({ strapi: strapi1 })=>({
         async trackUsage (event, properties) {
-            const settings = await strapi1.plugin('upload').service('upload').getSettings();
-            const isAiAvailable = strapi1.ai.admin.isEnabled();
+            const isAiAvailable = strapi1.ai.admin.isStrapiManagedAiEnabled();
             return strapi1.telemetry.send(event, {
                 ...properties,
                 eventProperties: {
                     ...properties?.eventProperties,
                     ...isAiAvailable === true ? {
-                        isAiMediaLibraryConfigured: Boolean(settings.aiMetadata)
+                        isAiMediaLibraryConfigured: await index.getService('aiMetadata').isEnabled()
                     } : {}
                 }
             });

package/dist/server/services/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sources":["../../../server/src/services/metrics.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { Settings } from '../controllers/validation/admin/settings';\n\nconst getProviderName = () => strapi.config.get('plugin::upload.provider', 'local');\nconst isProviderPrivate = async () => strapi.plugin('upload').provider.isPrivate();\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async trackUsage(event: string, properties?: Record<string, any>) {\n    const settings: Settings = await strapi.plugin('upload').service('upload').getSettings();\n    const isAiAvailable = strapi.ai.admin.isEnabled();\n\n    return strapi.telemetry.send(event, {\n      ...properties,\n      eventProperties: {\n        ...properties?.eventProperties,\n        ...(isAiAvailable === true\n          ? { isAiMediaLibraryConfigured: Boolean(settings.aiMetadata) }\n          : {}),\n      },\n    });\n  },\n  async sendUploadPluginMetrics() {\n    const uploadProvider = getProviderName();\n    const privateProvider = await isProviderPrivate();\n\n    await this.trackUsage('didInitializePluginUpload', {\n      groupProperties: {\n        uploadProvider,\n        privateProvider,\n      },\n    });\n  },\n});\n"],"names":["getProviderName","strapi","config","get","isProviderPrivate","plugin","provider","isPrivate","trackUsage","event","properties","settings","service","getSettings","isAiAvailable","ai","admin","isEnabled","telemetry","send","eventProperties","isAiMediaLibraryConfigured","Boolean","aiMetadata","sendUploadPluginMetrics","uploadProvider","privateProvider","groupProperties"],"mappings":";;AAGA,MAAMA,kBAAkB,IAAMC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,yBAAA,EAA2B,OAAA,CAAA;AAC3E,MAAMC,iBAAAA,GAAoB,UAAYH,MAAAA,CAAOI,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACC,SAAS,EAAA;AAEhF,cAAe,CAAA,CAAC,EAAEN,QAAAA,OAAM,EAA2B,IAAM;QACvD,MAAMO,UAAAA,CAAAA,CAAWC,KAAa,EAAEC,UAAgC,EAAA;YAC9D,MAAMC,QAAAA,GAAqB,MAAMV,OAAAA,CAAOI,MAAM,CAAC,QAAA,CAAA,CAAUO,OAAO,CAAC,QAAA,CAAA,CAAUC,WAAW,EAAA;AACtF,YAAA,MAAMC,gBAAgBb,OAAAA,CAAOc,EAAE,CAACC,KAAK,CAACC,SAAS,EAAA;AAE/C,YAAA,OAAOhB,OAAAA,CAAOiB,SAAS,CAACC,IAAI,CAACV,KAAAA,EAAO;AAClC,gBAAA,GAAGC,UAAU;gBACbU,eAAAA,EAAiB;AACf,oBAAA,GAAGV,YAAYU,eAAe;AAC9B,oBAAA,GAAIN,kBAAkB,IAAA,GAClB;wBAAEO,0BAAAA,EAA4BC,OAAAA,CAAQX,SAASY,UAAU;AAAE,qBAAA,GAC3D;AACN;AACF,aAAA,CAAA;AACF,QAAA,CAAA;QACA,MAAMC,uBAAAA,CAAAA,GAAAA;AACJ,YAAA,MAAMC,cAAAA,GAAiBzB,eAAAA,EAAAA;AACvB,YAAA,MAAM0B,kBAAkB,MAAMtB,iBAAAA,EAAAA;AAE9B,YAAA,MAAM,IAAI,CAACI,UAAU,CAAC,2BAAA,EAA6B;gBACjDmB,eAAAA,EAAiB;AACfF,oBAAAA,cAAAA;AACAC,oBAAAA;AACF;AACF,aAAA,CAAA;AACF,QAAA;AACF,KAAA,CAAC;;;;"}
+{"version":3,"file":"metrics.js","sources":["../../../server/src/services/metrics.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { getService } from '../utils';\n\nconst getProviderName = () => strapi.config.get('plugin::upload.provider', 'local');\nconst isProviderPrivate = async () => strapi.plugin('upload').provider.isPrivate();\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async trackUsage(event: string, properties?: Record<string, any>) {\n    const isAiAvailable = strapi.ai.admin.isStrapiManagedAiEnabled();\n\n    return strapi.telemetry.send(event, {\n      ...properties,\n      eventProperties: {\n        ...properties?.eventProperties,\n        ...(isAiAvailable === true\n          ? { isAiMediaLibraryConfigured: await getService('aiMetadata').isEnabled() }\n          : {}),\n      },\n    });\n  },\n  async sendUploadPluginMetrics() {\n    const uploadProvider = getProviderName();\n    const privateProvider = await isProviderPrivate();\n\n    await this.trackUsage('didInitializePluginUpload', {\n      groupProperties: {\n        uploadProvider,\n        privateProvider,\n      },\n    });\n  },\n});\n"],"names":["getProviderName","strapi","config","get","isProviderPrivate","plugin","provider","isPrivate","trackUsage","event","properties","isAiAvailable","ai","admin","isStrapiManagedAiEnabled","telemetry","send","eventProperties","isAiMediaLibraryConfigured","getService","isEnabled","sendUploadPluginMetrics","uploadProvider","privateProvider","groupProperties"],"mappings":";;;;AAGA,MAAMA,kBAAkB,IAAMC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,yBAAA,EAA2B,OAAA,CAAA;AAC3E,MAAMC,iBAAAA,GAAoB,UAAYH,MAAAA,CAAOI,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACC,SAAS,EAAA;AAEhF,cAAe,CAAA,CAAC,EAAEN,QAAAA,OAAM,EAA2B,IAAM;QACvD,MAAMO,UAAAA,CAAAA,CAAWC,KAAa,EAAEC,UAAgC,EAAA;AAC9D,YAAA,MAAMC,gBAAgBV,OAAAA,CAAOW,EAAE,CAACC,KAAK,CAACC,wBAAwB,EAAA;AAE9D,YAAA,OAAOb,OAAAA,CAAOc,SAAS,CAACC,IAAI,CAACP,KAAAA,EAAO;AAClC,gBAAA,GAAGC,UAAU;gBACbO,eAAAA,EAAiB;AACf,oBAAA,GAAGP,YAAYO,eAAe;AAC9B,oBAAA,GAAIN,kBAAkB,IAAA,GAClB;wBAAEO,0BAAAA,EAA4B,MAAMC,gBAAAA,CAAW,YAAA,CAAA,CAAcC,SAAS;AAAG,qBAAA,GACzE;AACN;AACF,aAAA,CAAA;AACF,QAAA,CAAA;QACA,MAAMC,uBAAAA,CAAAA,GAAAA;AACJ,YAAA,MAAMC,cAAAA,GAAiBtB,eAAAA,EAAAA;AACvB,YAAA,MAAMuB,kBAAkB,MAAMnB,iBAAAA,EAAAA;AAE9B,YAAA,MAAM,IAAI,CAACI,UAAU,CAAC,2BAAA,EAA6B;gBACjDgB,eAAAA,EAAiB;AACfF,oBAAAA,cAAAA;AACAC,oBAAAA;AACF;AACF,aAAA,CAAA;AACF,QAAA;AACF,KAAA,CAAC;;;;"}

package/dist/server/services/metrics.mjs

@@ -1,15 +1,16 @@
+import { getService } from '../utils/index.mjs';
+
 const getProviderName = ()=>strapi.config.get('plugin::upload.provider', 'local');
 const isProviderPrivate = async ()=>strapi.plugin('upload').provider.isPrivate();
 var metrics = (({ strapi: strapi1 })=>({
         async trackUsage (event, properties) {
-            const settings = await strapi1.plugin('upload').service('upload').getSettings();
-            const isAiAvailable = strapi1.ai.admin.isEnabled();
+            const isAiAvailable = strapi1.ai.admin.isStrapiManagedAiEnabled();
             return strapi1.telemetry.send(event, {
                 ...properties,
                 eventProperties: {
                     ...properties?.eventProperties,
                     ...isAiAvailable === true ? {
-                        isAiMediaLibraryConfigured: Boolean(settings.aiMetadata)
+                        isAiMediaLibraryConfigured: await getService('aiMetadata').isEnabled()
                     } : {}
                 }
             });

package/dist/server/services/metrics.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.mjs","sources":["../../../server/src/services/metrics.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { Settings } from '../controllers/validation/admin/settings';\n\nconst getProviderName = () => strapi.config.get('plugin::upload.provider', 'local');\nconst isProviderPrivate = async () => strapi.plugin('upload').provider.isPrivate();\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async trackUsage(event: string, properties?: Record<string, any>) {\n    const settings: Settings = await strapi.plugin('upload').service('upload').getSettings();\n    const isAiAvailable = strapi.ai.admin.isEnabled();\n\n    return strapi.telemetry.send(event, {\n      ...properties,\n      eventProperties: {\n        ...properties?.eventProperties,\n        ...(isAiAvailable === true\n          ? { isAiMediaLibraryConfigured: Boolean(settings.aiMetadata) }\n          : {}),\n      },\n    });\n  },\n  async sendUploadPluginMetrics() {\n    const uploadProvider = getProviderName();\n    const privateProvider = await isProviderPrivate();\n\n    await this.trackUsage('didInitializePluginUpload', {\n      groupProperties: {\n        uploadProvider,\n        privateProvider,\n      },\n    });\n  },\n});\n"],"names":["getProviderName","strapi","config","get","isProviderPrivate","plugin","provider","isPrivate","trackUsage","event","properties","settings","service","getSettings","isAiAvailable","ai","admin","isEnabled","telemetry","send","eventProperties","isAiMediaLibraryConfigured","Boolean","aiMetadata","sendUploadPluginMetrics","uploadProvider","privateProvider","groupProperties"],"mappings":"AAGA,MAAMA,kBAAkB,IAAMC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,yBAAA,EAA2B,OAAA,CAAA;AAC3E,MAAMC,iBAAAA,GAAoB,UAAYH,MAAAA,CAAOI,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACC,SAAS,EAAA;AAEhF,cAAe,CAAA,CAAC,EAAEN,QAAAA,OAAM,EAA2B,IAAM;QACvD,MAAMO,UAAAA,CAAAA,CAAWC,KAAa,EAAEC,UAAgC,EAAA;YAC9D,MAAMC,QAAAA,GAAqB,MAAMV,OAAAA,CAAOI,MAAM,CAAC,QAAA,CAAA,CAAUO,OAAO,CAAC,QAAA,CAAA,CAAUC,WAAW,EAAA;AACtF,YAAA,MAAMC,gBAAgBb,OAAAA,CAAOc,EAAE,CAACC,KAAK,CAACC,SAAS,EAAA;AAE/C,YAAA,OAAOhB,OAAAA,CAAOiB,SAAS,CAACC,IAAI,CAACV,KAAAA,EAAO;AAClC,gBAAA,GAAGC,UAAU;gBACbU,eAAAA,EAAiB;AACf,oBAAA,GAAGV,YAAYU,eAAe;AAC9B,oBAAA,GAAIN,kBAAkB,IAAA,GAClB;wBAAEO,0BAAAA,EAA4BC,OAAAA,CAAQX,SAASY,UAAU;AAAE,qBAAA,GAC3D;AACN;AACF,aAAA,CAAA;AACF,QAAA,CAAA;QACA,MAAMC,uBAAAA,CAAAA,GAAAA;AACJ,YAAA,MAAMC,cAAAA,GAAiBzB,eAAAA,EAAAA;AACvB,YAAA,MAAM0B,kBAAkB,MAAMtB,iBAAAA,EAAAA;AAE9B,YAAA,MAAM,IAAI,CAACI,UAAU,CAAC,2BAAA,EAA6B;gBACjDmB,eAAAA,EAAiB;AACfF,oBAAAA,cAAAA;AACAC,oBAAAA;AACF;AACF,aAAA,CAAA;AACF,QAAA;AACF,KAAA,CAAC;;;;"}
+{"version":3,"file":"metrics.mjs","sources":["../../../server/src/services/metrics.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { getService } from '../utils';\n\nconst getProviderName = () => strapi.config.get('plugin::upload.provider', 'local');\nconst isProviderPrivate = async () => strapi.plugin('upload').provider.isPrivate();\n\nexport default ({ strapi }: { strapi: Core.Strapi }) => ({\n  async trackUsage(event: string, properties?: Record<string, any>) {\n    const isAiAvailable = strapi.ai.admin.isStrapiManagedAiEnabled();\n\n    return strapi.telemetry.send(event, {\n      ...properties,\n      eventProperties: {\n        ...properties?.eventProperties,\n        ...(isAiAvailable === true\n          ? { isAiMediaLibraryConfigured: await getService('aiMetadata').isEnabled() }\n          : {}),\n      },\n    });\n  },\n  async sendUploadPluginMetrics() {\n    const uploadProvider = getProviderName();\n    const privateProvider = await isProviderPrivate();\n\n    await this.trackUsage('didInitializePluginUpload', {\n      groupProperties: {\n        uploadProvider,\n        privateProvider,\n      },\n    });\n  },\n});\n"],"names":["getProviderName","strapi","config","get","isProviderPrivate","plugin","provider","isPrivate","trackUsage","event","properties","isAiAvailable","ai","admin","isStrapiManagedAiEnabled","telemetry","send","eventProperties","isAiMediaLibraryConfigured","getService","isEnabled","sendUploadPluginMetrics","uploadProvider","privateProvider","groupProperties"],"mappings":";;AAGA,MAAMA,kBAAkB,IAAMC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAC,yBAAA,EAA2B,OAAA,CAAA;AAC3E,MAAMC,iBAAAA,GAAoB,UAAYH,MAAAA,CAAOI,MAAM,CAAC,QAAA,CAAA,CAAUC,QAAQ,CAACC,SAAS,EAAA;AAEhF,cAAe,CAAA,CAAC,EAAEN,QAAAA,OAAM,EAA2B,IAAM;QACvD,MAAMO,UAAAA,CAAAA,CAAWC,KAAa,EAAEC,UAAgC,EAAA;AAC9D,YAAA,MAAMC,gBAAgBV,OAAAA,CAAOW,EAAE,CAACC,KAAK,CAACC,wBAAwB,EAAA;AAE9D,YAAA,OAAOb,OAAAA,CAAOc,SAAS,CAACC,IAAI,CAACP,KAAAA,EAAO;AAClC,gBAAA,GAAGC,UAAU;gBACbO,eAAAA,EAAiB;AACf,oBAAA,GAAGP,YAAYO,eAAe;AAC9B,oBAAA,GAAIN,kBAAkB,IAAA,GAClB;wBAAEO,0BAAAA,EAA4B,MAAMC,UAAAA,CAAW,YAAA,CAAA,CAAcC,SAAS;AAAG,qBAAA,GACzE;AACN;AACF,aAAA,CAAA;AACF,QAAA,CAAA;QACA,MAAMC,uBAAAA,CAAAA,GAAAA;AACJ,YAAA,MAAMC,cAAAA,GAAiBtB,eAAAA,EAAAA;AACvB,YAAA,MAAMuB,kBAAkB,MAAMnB,iBAAAA,EAAAA;AAE9B,YAAA,MAAM,IAAI,CAACI,UAAU,CAAC,2BAAA,EAA6B;gBACjDgB,eAAAA,EAAiB;AACfF,oBAAAA,cAAAA;AACAC,oBAAAA;AACF;AACF,aAAA,CAAA;AACF,QAAA;AACF,KAAA,CAAC;;;;"}

package/dist/server/src/controllers/admin-settings.d.ts

@@ -1,7 +1,7 @@
 import type { Context } from 'koa';
 declare const _default: {
     updateSettings(ctx: Context): Promise<any>;
-    getSettings(ctx: Context): Promise<any>;
+    getSettings(ctx: Context): Promise<void>;
 };
 export default _default;
 //# sourceMappingURL=admin-settings.d.ts.map

package/dist/server/src/controllers/admin-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin-settings.d.ts","sourceRoot":"","sources":["../../../../server/src/controllers/admin-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;;wBAeP,OAAO;qBAqBV,OAAO;;AAtBhC,wBAyCE"}
+{"version":3,"file":"admin-settings.d.ts","sourceRoot":"","sources":["../../../../server/src/controllers/admin-settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC;;wBAeP,OAAO;qBAqBV,OAAO;;AAtBhC,wBAkCE"}

package/dist/server/src/controllers/index.d.ts

@@ -21,7 +21,7 @@ export declare const controllers: {
     };
     'admin-settings': {
         updateSettings(ctx: import("koa").Context): Promise<any>;
-        getSettings(ctx: import("koa").Context): Promise<any>;
+        getSettings(ctx: import("koa").Context): Promise<void>;
     };
     'admin-upload': {
         bulkUpdateFileInfo(ctx: import("koa").Context): Promise<void>;

package/dist/server/src/index.d.ts

@@ -82,7 +82,7 @@ declare const _default: () => {
         };
         'admin-settings': {
             updateSettings(ctx: import("koa").Context): Promise<any>;
-            getSettings(ctx: import("koa").Context): Promise<any>;
+            getSettings(ctx: import("koa").Context): Promise<void>;
         };
         'admin-upload': {
             bulkUpdateFileInfo(ctx: import("koa").Context): Promise<void>;

package/dist/server/src/migrations/unsign-richtext-and-blocks-urls.d.ts

@@ -0,0 +1,18 @@
+import type { Migration } from '@strapi/database';
+/**
+ * Richtext and blocks attributes embed the file URL in their own value, so a
+ * signed URL written by the admin used to be frozen in the row and broke as
+ * soon as the signature expired. New writes are normalised by the upload
+ * document service middleware, and the read path re-signs a stored URL that
+ * still carries a stale signature, so this migration is a cleanup of the rows
+ * written before the fix rather than a prerequisite for it.
+ *
+ * Idempotent: re-running it finds nothing left to change.
+ *
+ * Runs inside the internal migration transaction like every other internal
+ * migration: a database error fails the boot. A single value the mapper cannot
+ * process is logged with a warning and skipped; it is normalised by the
+ * middleware on its next save and re-signed on read until then.
+ */
+export declare const unsignRichtextAndBlocksUrls: Migration;
+//# sourceMappingURL=unsign-richtext-and-blocks-urls.d.ts.map

package/dist/server/src/migrations/unsign-richtext-and-blocks-urls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsign-richtext-and-blocks-urls.d.ts","sourceRoot":"","sources":["../../../../server/src/migrations/unsign-richtext-and-blocks-urls.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAY,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAoK5D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAQzC,CAAC"}

package/dist/server/src/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../server/src/register.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAW1C;;GAEG;AACH,wBAAsB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,iBAuCjE"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../server/src/register.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAY1C;;GAEG;AACH,wBAAsB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,iBA0CjE"}

package/dist/server/src/routes/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/admin.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;CAoTlB,CAAC"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../../server/src/routes/admin.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;CAuTlB,CAAC"}

package/dist/server/src/services/extensions/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/extensions/index.ts"],"names":[],"mappings":";;;AAkDA,wBAEE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../server/src/services/extensions/index.ts"],"names":[],"mappings":";;;AAsEA,wBAEE"}