@strapi/upload 5.54.0 → 5.55.1

package/dist/admin/utils/itemSource.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"itemSource.js","sources":["../../../admin/src/utils/itemSource.ts"],"sourcesContent":["import type { DragItemData } from '../types/dnd';\n\n/**\n * Where an item currently lives, regardless of its kind — folders carry their\n * location on `parentId`, files on `folderId`.\n */\nexport const sourceFolderIdOf = (item: DragItemData): number | null =>\n  item.kind === 'folder' ? item.parentId : item.folderId;\n\n/**\n * The one folder every item in a move came from, or `null` when there isn't one.\n *\n * A selection made under a global search can hold items from anywhere, so a move\n * has a nameable source only when the whole set agrees on it. `null` also covers\n * the empty set. Callers pass the result straight to `formatMoveSuccessMessage`,\n * which drops the source from the wording rather than crediting one item's\n * folder to all of them.\n *\n * Note `null` is overloaded on purpose at the *label* level: an item at the\n * Media Library root also has a `null` location, and both cases end up reading\n * as \"no folder to name\". Use `hasUniformSource` when the difference matters.\n */\nexport const uniformSourceFolderId = (items: DragItemData[]): number | null => {\n  if (!hasUniformSource(items)) {\n    return null;\n  }\n\n  return sourceFolderIdOf(items[0]);\n};\n\n/** Whether every item in the set came from the same folder. False for an empty set. */\nexport const hasUniformSource = (items: DragItemData[]): boolean => {\n  if (items.length === 0) {\n    return false;\n  }\n\n  const first = sourceFolderIdOf(items[0]);\n\n  return items.every((item) => sourceFolderIdOf(item) === first);\n};\n"],"names":["sourceFolderIdOf","item","kind","parentId","folderId","uniformSourceFolderId","items","hasUniformSource","length","first","every"],"mappings":";;AAEA;;;AAGC,IACM,MAAMA,gBAAAA,GAAmB,CAACC,OAC/BA,IAAAA,CAAKC,IAAI,KAAK,QAAA,GAAWD,IAAAA,CAAKE,QAAQ,GAAGF,IAAAA,CAAKG;AAEhD;;;;;;;;;;;;IAaO,MAAMC,qBAAAA,GAAwB,CAACC,KAAAA,GAAAA;IACpC,IAAI,CAACC,iBAAiBD,KAAAA,CAAAA,EAAQ;QAC5B,OAAO,IAAA;AACT,IAAA;IAEA,OAAON,gBAAAA,CAAiBM,KAAK,CAAC,CAAA,CAAE,CAAA;AAClC;AAEA,wFACO,MAAMC,gBAAAA,GAAmB,CAACD,KAAAA,GAAAA;IAC/B,IAAIA,KAAAA,CAAME,MAAM,KAAK,CAAA,EAAG;QACtB,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMC,KAAAA,GAAQT,gBAAAA,CAAiBM,KAAK,CAAC,CAAA,CAAE,CAAA;AAEvC,IAAA,OAAOA,MAAMI,KAAK,CAAC,CAACT,IAAAA,GAASD,iBAAiBC,IAAAA,CAAAA,KAAUQ,KAAAA,CAAAA;AAC1D;;;;;;"}

package/dist/admin/utils/itemSource.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"itemSource.mjs","sources":["../../../admin/src/utils/itemSource.ts"],"sourcesContent":["import type { DragItemData } from '../types/dnd';\n\n/**\n * Where an item currently lives, regardless of its kind — folders carry their\n * location on `parentId`, files on `folderId`.\n */\nexport const sourceFolderIdOf = (item: DragItemData): number | null =>\n  item.kind === 'folder' ? item.parentId : item.folderId;\n\n/**\n * The one folder every item in a move came from, or `null` when there isn't one.\n *\n * A selection made under a global search can hold items from anywhere, so a move\n * has a nameable source only when the whole set agrees on it. `null` also covers\n * the empty set. Callers pass the result straight to `formatMoveSuccessMessage`,\n * which drops the source from the wording rather than crediting one item's\n * folder to all of them.\n *\n * Note `null` is overloaded on purpose at the *label* level: an item at the\n * Media Library root also has a `null` location, and both cases end up reading\n * as \"no folder to name\". Use `hasUniformSource` when the difference matters.\n */\nexport const uniformSourceFolderId = (items: DragItemData[]): number | null => {\n  if (!hasUniformSource(items)) {\n    return null;\n  }\n\n  return sourceFolderIdOf(items[0]);\n};\n\n/** Whether every item in the set came from the same folder. False for an empty set. */\nexport const hasUniformSource = (items: DragItemData[]): boolean => {\n  if (items.length === 0) {\n    return false;\n  }\n\n  const first = sourceFolderIdOf(items[0]);\n\n  return items.every((item) => sourceFolderIdOf(item) === first);\n};\n"],"names":["sourceFolderIdOf","item","kind","parentId","folderId","uniformSourceFolderId","items","hasUniformSource","length","first","every"],"mappings":"AAEA;;;AAGC,IACM,MAAMA,gBAAAA,GAAmB,CAACC,OAC/BA,IAAAA,CAAKC,IAAI,KAAK,QAAA,GAAWD,IAAAA,CAAKE,QAAQ,GAAGF,IAAAA,CAAKG;AAEhD;;;;;;;;;;;;IAaO,MAAMC,qBAAAA,GAAwB,CAACC,KAAAA,GAAAA;IACpC,IAAI,CAACC,iBAAiBD,KAAAA,CAAAA,EAAQ;QAC5B,OAAO,IAAA;AACT,IAAA;IAEA,OAAON,gBAAAA,CAAiBM,KAAK,CAAC,CAAA,CAAE,CAAA;AAClC;AAEA,wFACO,MAAMC,gBAAAA,GAAmB,CAACD,KAAAA,GAAAA;IAC/B,IAAIA,KAAAA,CAAME,MAAM,KAAK,CAAA,EAAG;QACtB,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMC,KAAAA,GAAQT,gBAAAA,CAAiBM,KAAK,CAAC,CAAA,CAAE,CAAA;AAEvC,IAAA,OAAOA,MAAMI,KAAK,CAAC,CAACT,IAAAA,GAASD,iBAAiBC,IAAAA,CAAAA,KAAUQ,KAAAA,CAAAA;AAC1D;;;;"}

package/dist/admin/utils/searchQueryParam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchQueryParam.js","sources":["../../../admin/src/utils/searchQueryParam.ts"],"sourcesContent":["/**\n * `_q` must be encoded on both hops: `useQueryParams.setQuery` and the fetch\n * client both stringify with `{ encode: false }`, so an unencoded `&` would\n * truncate the query. `qs.parse` decodes `+` as a space, so `+` needs escaping\n * beyond what `encodeURIComponent` does.\n */\nexport const encodeSearchQuery = (value: string): string =>\n  encodeURIComponent(value).replace(/\\+/g, '%2B');\n"],"names":["encodeSearchQuery","value","encodeURIComponent","replace"],"mappings":";;AAAA;;;;;IAMO,MAAMA,iBAAAA,GAAoB,CAACC,KAAAA,GAChCC,mBAAmBD,KAAAA,CAAAA,CAAOE,OAAO,CAAC,KAAA,EAAO,KAAA;;;;"}

package/dist/admin/utils/searchQueryParam.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchQueryParam.mjs","sources":["../../../admin/src/utils/searchQueryParam.ts"],"sourcesContent":["/**\n * `_q` must be encoded on both hops: `useQueryParams.setQuery` and the fetch\n * client both stringify with `{ encode: false }`, so an unencoded `&` would\n * truncate the query. `qs.parse` decodes `+` as a space, so `+` needs escaping\n * beyond what `encodeURIComponent` does.\n */\nexport const encodeSearchQuery = (value: string): string =>\n  encodeURIComponent(value).replace(/\\+/g, '%2B');\n"],"names":["encodeSearchQuery","value","encodeURIComponent","replace"],"mappings":"AAAA;;;;;IAMO,MAAMA,iBAAAA,GAAoB,CAACC,KAAAA,GAChCC,mBAAmBD,KAAAA,CAAAA,CAAOE,OAAO,CAAC,KAAA,EAAO,KAAA;;;;"}

package/dist/admin/utils/translations.js

@@ -0,0 +1,8 @@
+'use strict';
+
+var pluginId = require('../pluginId.js');
+
+const getTranslationKey = (id)=>`${pluginId.pluginId}.${id}`;
+
+exports.getTranslationKey = getTranslationKey;
+//# sourceMappingURL=translations.js.map

package/dist/admin/utils/translations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.js","sources":["../../../admin/src/utils/translations.ts"],"sourcesContent":["import { pluginId } from '../pluginId';\n\nexport const getTranslationKey = (id: string) => `${pluginId}.${id}`;\n"],"names":["getTranslationKey","id","pluginId"],"mappings":";;;;AAEO,MAAMA,oBAAoB,CAACC,EAAAA,GAAe,GAAGC,iBAAAA,CAAS,CAAC,EAAED,EAAAA,CAAAA;;;;"}

package/dist/admin/utils/translations.mjs

@@ -0,0 +1,6 @@
+import { pluginId } from '../pluginId.mjs';
+
+const getTranslationKey = (id)=>`${pluginId}.${id}`;
+
+export { getTranslationKey };
+//# sourceMappingURL=translations.mjs.map

package/dist/admin/utils/translations.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"translations.mjs","sources":["../../../admin/src/utils/translations.ts"],"sourcesContent":["import { pluginId } from '../pluginId';\n\nexport const getTranslationKey = (id: string) => `${pluginId}.${id}`;\n"],"names":["getTranslationKey","id","pluginId"],"mappings":";;AAEO,MAAMA,oBAAoB,CAACC,EAAAA,GAAe,GAAGC,QAAAA,CAAS,CAAC,EAAED,EAAAA,CAAAA;;;;"}

package/dist/server/controllers/admin-settings.js

@@ -27,10 +27,7 @@ var adminSettings = {
         };
     },
     async getSettings (ctx) {
-        const { state: { userAbility } } = ctx;
-        if (userAbility.cannot(constants.ACTIONS.readSettings, constants.FILE_MODEL_UID)) {
-            return ctx.forbidden();
-        }
+        // Gated on `plugin::upload.read` by the route policy.
         const data = await index.getService('upload').getSettings();
         // Read-only echo of the app config so the admin knows how many upload
         // requests it may fire in parallel. Distinct from `concurrentUploadSize`,

package/dist/server/controllers/admin-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-settings.js","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const validated = await validateSettings(body);\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    const {\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = { data: { ...data, concurrentUploadRequests } };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get"],"mappings":";;;;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,wBAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,iBAAAA,CAAQC,YAAY,EAAEC,wBAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;QAEA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBT,IAAAA,CAAAA;AACzC,QAAA,MAAMU,MAAAA,GAASF,SAAAA;AACf,QAAA,MAAMG,IAAAA,GAAOlB,MAAAA,CAAOmB,WAAW,CAC7BpB,cAAcqB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCb,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEW,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYpB,GAAY,EAAA;AAC5B,QAAA,MAAM,EACJG,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,iBAAAA,CAAQC,YAAY,EAAEC,wBAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,MAAMI,IAAAA,GAAO,MAAMK,gBAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnExB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YAAEW,IAAAA,EAAM;AAAE,gBAAA,GAAGA,IAAI;AAAEQ,gBAAAA;AAAyB;AAAE,SAAA;AAC3D,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"admin-settings.js","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const validated = await validateSettings(body);\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    // Gated on `plugin::upload.read` by the route policy.\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = { data: { ...data, concurrentUploadRequests } };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get"],"mappings":";;;;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,wBAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,iBAAAA,CAAQC,YAAY,EAAEC,wBAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;QAEA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBT,IAAAA,CAAAA;AACzC,QAAA,MAAMU,MAAAA,GAASF,SAAAA;AACf,QAAA,MAAMG,IAAAA,GAAOlB,MAAAA,CAAOmB,WAAW,CAC7BpB,cAAcqB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCb,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEW,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYpB,GAAY,EAAA;;AAE5B,QAAA,MAAMa,IAAAA,GAAO,MAAMK,gBAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnExB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YAAEW,IAAAA,EAAM;AAAE,gBAAA,GAAGA,IAAI;AAAEQ,gBAAAA;AAAyB;AAAE,SAAA;AAC3D,IAAA;AACF,CAAA;;;;"}

package/dist/server/controllers/admin-settings.mjs

@@ -25,10 +25,7 @@ var adminSettings = {
         };
     },
     async getSettings (ctx) {
-        const { state: { userAbility } } = ctx;
-        if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {
-            return ctx.forbidden();
-        }
+        // Gated on `plugin::upload.read` by the route policy.
         const data = await getService('upload').getSettings();
         // Read-only echo of the app config so the admin knows how many upload
         // requests it may fire in parallel. Distinct from `concurrentUploadSize`,

package/dist/server/controllers/admin-settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-settings.mjs","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const validated = await validateSettings(body);\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    const {\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = { data: { ...data, concurrentUploadRequests } };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get"],"mappings":";;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,eAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,OAAAA,CAAQC,YAAY,EAAEC,cAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;QAEA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBT,IAAAA,CAAAA;AACzC,QAAA,MAAMU,MAAAA,GAASF,SAAAA;AACf,QAAA,MAAMG,IAAAA,GAAOlB,MAAAA,CAAOmB,WAAW,CAC7BpB,cAAcqB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,UAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCb,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEW,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYpB,GAAY,EAAA;AAC5B,QAAA,MAAM,EACJG,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,OAAAA,CAAQC,YAAY,EAAEC,cAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;AAEA,QAAA,MAAMI,IAAAA,GAAO,MAAMK,UAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnExB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YAAEW,IAAAA,EAAM;AAAE,gBAAA,GAAGA,IAAI;AAAEQ,gBAAAA;AAAyB;AAAE,SAAA;AAC3D,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"admin-settings.mjs","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const validated = await validateSettings(body);\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    // Gated on `plugin::upload.read` by the route policy.\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = { data: { ...data, concurrentUploadRequests } };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get"],"mappings":";;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,eAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,OAAAA,CAAQC,YAAY,EAAEC,cAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;QAEA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBT,IAAAA,CAAAA;AACzC,QAAA,MAAMU,MAAAA,GAASF,SAAAA;AACf,QAAA,MAAMG,IAAAA,GAAOlB,MAAAA,CAAOmB,WAAW,CAC7BpB,cAAcqB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,UAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCb,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEW,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYpB,GAAY,EAAA;;AAE5B,QAAA,MAAMa,IAAAA,GAAO,MAAMK,UAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnExB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YAAEW,IAAAA,EAAM;AAAE,gBAAA,GAAGA,IAAI;AAAEQ,gBAAAA;AAAyB;AAAE,SAAA;AAC3D,IAAA;AACF,CAAA;;;;"}

package/dist/server/migrations/unsign-richtext-and-blocks-urls.js

@@ -0,0 +1,147 @@
+'use strict';
+
+var fp = require('lodash/fp');
+var utils = require('../services/extensions/utils.js');
+
+const BATCH_SIZE = 100;
+const LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';
+const getTargetAttributes = (schema)=>Object.entries(schema.attributes ?? {}).filter(([, attribute])=>attribute.type === 'richtext' || attribute.type === 'blocks').map(([name, attribute])=>({
+            name,
+            type: attribute.type
+        }));
+const unsignValue = async (value, type, cache)=>{
+    return type === 'blocks' ? utils.mapBlocksImages(value, (image)=>utils.unsignImage(image, cache)) : utils.mapRichtextUrls(value, (url)=>utils.stripSignedUrl(url, cache));
+};
+const migrateSchema = async (trx, db, schema, cache)=>{
+    const progress = {
+        scanned: 0,
+        updated: 0
+    };
+    const attributes = getTargetAttributes(schema);
+    if (attributes.length === 0) {
+        return progress;
+    }
+    const { uid } = schema;
+    if (!db.metadata.has(uid)) {
+        return progress;
+    }
+    const meta = db.metadata.get(uid);
+    const { tableName } = meta;
+    // The schema checks must run on the migration transaction: on SQLite the pool
+    // has a single connection, so a root-connection query would wait on it forever
+    const knex = db.getSchemaConnection(trx);
+    // On a fresh project the migrations run before the tables exist
+    if (!await knex.hasTable(tableName)) {
+        return progress;
+    }
+    // Internal migrations run before the schema sync: an attribute added in the
+    // same deploy as this version has no column yet, so only select what exists
+    const existing = [];
+    for (const attribute of attributes){
+        const attributeMeta = meta.attributes[attribute.name];
+        const columnName = attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName ? attributeMeta.columnName : attribute.name;
+        if (await knex.hasColumn(tableName, columnName)) {
+            existing.push(attribute);
+        }
+    }
+    if (existing.length === 0) {
+        return progress;
+    }
+    const select = [
+        'id',
+        ...existing.map(({ name })=>name)
+    ];
+    let offset = 0;
+    let hasMore = true;
+    while(hasMore){
+        const rows = await strapi.db.query(uid).findMany({
+            select,
+            limit: BATCH_SIZE,
+            offset,
+            orderBy: {
+                id: 'asc'
+            }
+        });
+        hasMore = rows.length === BATCH_SIZE;
+        offset += rows.length;
+        progress.scanned += rows.length;
+        for (const row of rows){
+            const data = {};
+            for (const { name, type } of existing){
+                // A value the mapper cannot process is logged and skipped. This is safe
+                // to catch: the mapper does no database work (presigning is local to
+                // the provider), so the surrounding transaction is not poisoned.
+                try {
+                    const unsigned = await unsignValue(row[name], type, cache);
+                    if (!fp.isEqual(unsigned, row[name])) {
+                        data[name] = unsigned;
+                    }
+                } catch (error) {
+                    strapi.log.warn(`${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            if (Object.keys(data).length > 0) {
+                await strapi.db.query(uid).update({
+                    where: {
+                        id: row.id
+                    },
+                    data
+                });
+                progress.updated += 1;
+            }
+        }
+    }
+    if (progress.scanned > 0) {
+        strapi.log.info(`${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`);
+    }
+    return progress;
+};
+const migrateUp = async (trx, db)=>{
+    const { provider } = strapi.plugins.upload;
+    // Nothing is signed on a public provider, so there is nothing to strip
+    if (!provider || !await provider.isPrivate()) {
+        return;
+    }
+    const schemas = [
+        ...Object.values(strapi.contentTypes),
+        ...Object.values(strapi.components)
+    ];
+    // One presign per distinct URL for the whole run, however many rows it appears in
+    const cache = utils.createSignCache();
+    const total = {
+        scanned: 0,
+        updated: 0
+    };
+    for (const schema of schemas){
+        const progress = await migrateSchema(trx, db, schema, cache);
+        total.scanned += progress.scanned;
+        total.updated += progress.updated;
+    }
+    strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);
+};
+/**
+ * Richtext and blocks attributes embed the file URL in their own value, so a
+ * signed URL written by the admin used to be frozen in the row and broke as
+ * soon as the signature expired. New writes are normalised by the upload
+ * document service middleware, and the read path re-signs a stored URL that
+ * still carries a stale signature, so this migration is a cleanup of the rows
+ * written before the fix rather than a prerequisite for it.
+ *
+ * Idempotent: re-running it finds nothing left to change.
+ *
+ * Runs inside the internal migration transaction like every other internal
+ * migration: a database error fails the boot. A single value the mapper cannot
+ * process is logged with a warning and skipped; it is normalised by the
+ * middleware on its next save and re-signed on read until then.
+ */ const unsignRichtextAndBlocksUrls = {
+    name: 'upload::unsign-richtext-and-blocks-urls',
+    async up (trx, db) {
+        await migrateUp(trx, db);
+    },
+    async down () {
+        throw new Error('not implemented');
+    }
+};
+
+exports.unsignRichtextAndBlocksUrls = unsignRichtextAndBlocksUrls;
+//# sourceMappingURL=unsign-richtext-and-blocks-urls.js.map

package/dist/server/migrations/unsign-richtext-and-blocks-urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsign-richtext-and-blocks-urls.js","sources":["../../../server/src/migrations/unsign-richtext-and-blocks-urls.ts"],"sourcesContent":["import { isEqual } from 'lodash/fp';\n\nimport type { Database, Migration } from '@strapi/database';\nimport type { Struct } from '@strapi/types';\n\nimport {\n  createSignCache,\n  mapBlocksImages,\n  mapRichtextUrls,\n  stripSignedUrl,\n  unsignImage,\n} from '../services/extensions/utils';\nimport type { SignCache } from '../services/extensions/utils';\n\nconst BATCH_SIZE = 100;\nconst LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';\n\ntype MigrationTrx = Parameters<Migration['up']>[0];\n\ntype TargetAttribute = { name: string; type: 'richtext' | 'blocks' };\n\ntype Progress = { scanned: number; updated: number };\n\nconst getTargetAttributes = (schema: Struct.Schema): TargetAttribute[] =>\n  Object.entries(schema.attributes ?? {})\n    .filter(([, attribute]) => attribute.type === 'richtext' || attribute.type === 'blocks')\n    .map(([name, attribute]) => ({ name, type: attribute.type as TargetAttribute['type'] }));\n\nconst unsignValue = async (value: unknown, type: TargetAttribute['type'], cache: SignCache) => {\n  return type === 'blocks'\n    ? mapBlocksImages(value, (image) => unsignImage(image, cache))\n    : mapRichtextUrls(value, (url) => stripSignedUrl(url, cache));\n};\n\nconst migrateSchema = async (\n  trx: MigrationTrx,\n  db: Database,\n  schema: Struct.Schema,\n  cache: SignCache\n): Promise<Progress> => {\n  const progress: Progress = { scanned: 0, updated: 0 };\n  const attributes = getTargetAttributes(schema);\n\n  if (attributes.length === 0) {\n    return progress;\n  }\n\n  const { uid } = schema;\n\n  if (!db.metadata.has(uid)) {\n    return progress;\n  }\n\n  const meta = db.metadata.get(uid);\n  const { tableName } = meta;\n  // The schema checks must run on the migration transaction: on SQLite the pool\n  // has a single connection, so a root-connection query would wait on it forever\n  const knex = db.getSchemaConnection(trx);\n\n  // On a fresh project the migrations run before the tables exist\n  if (!(await knex.hasTable(tableName))) {\n    return progress;\n  }\n\n  // Internal migrations run before the schema sync: an attribute added in the\n  // same deploy as this version has no column yet, so only select what exists\n  const existing: TargetAttribute[] = [];\n\n  for (const attribute of attributes) {\n    const attributeMeta = meta.attributes[attribute.name];\n    const columnName =\n      attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName\n        ? attributeMeta.columnName\n        : attribute.name;\n\n    if (await knex.hasColumn(tableName, columnName)) {\n      existing.push(attribute);\n    }\n  }\n\n  if (existing.length === 0) {\n    return progress;\n  }\n\n  const select = ['id', ...existing.map(({ name }) => name)];\n\n  let offset = 0;\n  let hasMore = true;\n\n  while (hasMore) {\n    const rows: Record<string, any>[] = await strapi.db.query(uid).findMany({\n      select,\n      limit: BATCH_SIZE,\n      offset,\n      orderBy: { id: 'asc' },\n    });\n\n    hasMore = rows.length === BATCH_SIZE;\n    offset += rows.length;\n    progress.scanned += rows.length;\n\n    for (const row of rows) {\n      const data: Record<string, unknown> = {};\n\n      for (const { name, type } of existing) {\n        // A value the mapper cannot process is logged and skipped. This is safe\n        // to catch: the mapper does no database work (presigning is local to\n        // the provider), so the surrounding transaction is not poisoned.\n        try {\n          const unsigned = await unsignValue(row[name], type, cache);\n\n          if (!isEqual(unsigned, row[name])) {\n            data[name] = unsigned;\n          }\n        } catch (error) {\n          strapi.log.warn(\n            `${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${\n              error instanceof Error ? error.message : String(error)\n            }`\n          );\n        }\n      }\n\n      if (Object.keys(data).length > 0) {\n        await strapi.db.query(uid).update({ where: { id: row.id }, data });\n        progress.updated += 1;\n      }\n    }\n  }\n\n  if (progress.scanned > 0) {\n    strapi.log.info(\n      `${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`\n    );\n  }\n\n  return progress;\n};\n\nconst migrateUp = async (trx: MigrationTrx, db: Database) => {\n  const { provider } = strapi.plugins.upload;\n\n  // Nothing is signed on a public provider, so there is nothing to strip\n  if (!provider || !(await provider.isPrivate())) {\n    return;\n  }\n\n  const schemas = [\n    ...Object.values(strapi.contentTypes),\n    ...Object.values(strapi.components),\n  ] as Struct.Schema[];\n\n  // One presign per distinct URL for the whole run, however many rows it appears in\n  const cache = createSignCache();\n  const total: Progress = { scanned: 0, updated: 0 };\n\n  for (const schema of schemas) {\n    const progress = await migrateSchema(trx, db, schema, cache);\n\n    total.scanned += progress.scanned;\n    total.updated += progress.updated;\n  }\n\n  strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);\n};\n\n/**\n * Richtext and blocks attributes embed the file URL in their own value, so a\n * signed URL written by the admin used to be frozen in the row and broke as\n * soon as the signature expired. New writes are normalised by the upload\n * document service middleware, and the read path re-signs a stored URL that\n * still carries a stale signature, so this migration is a cleanup of the rows\n * written before the fix rather than a prerequisite for it.\n *\n * Idempotent: re-running it finds nothing left to change.\n *\n * Runs inside the internal migration transaction like every other internal\n * migration: a database error fails the boot. A single value the mapper cannot\n * process is logged with a warning and skipped; it is normalised by the\n * middleware on its next save and re-signed on read until then.\n */\nexport const unsignRichtextAndBlocksUrls: Migration = {\n  name: 'upload::unsign-richtext-and-blocks-urls',\n  async up(trx, db) {\n    await migrateUp(trx, db);\n  },\n  async down() {\n    throw new Error('not implemented');\n  },\n};\n"],"names":["BATCH_SIZE","LOG_PREFIX","getTargetAttributes","schema","Object","entries","attributes","filter","attribute","type","map","name","unsignValue","value","cache","mapBlocksImages","image","unsignImage","mapRichtextUrls","url","stripSignedUrl","migrateSchema","trx","db","progress","scanned","updated","length","uid","metadata","has","meta","get","tableName","knex","getSchemaConnection","hasTable","existing","attributeMeta","columnName","hasColumn","push","select","offset","hasMore","rows","strapi","query","findMany","limit","orderBy","id","row","data","unsigned","isEqual","error","log","warn","Error","message","String","keys","update","where","info","migrateUp","provider","plugins","upload","isPrivate","schemas","values","contentTypes","components","createSignCache","total","unsignRichtextAndBlocksUrls","up","down"],"mappings":";;;;;AAcA,MAAMA,UAAAA,GAAa,GAAA;AACnB,MAAMC,UAAAA,GAAa,mCAAA;AAQnB,MAAMC,mBAAAA,GAAsB,CAACC,MAAAA,GAC3BC,MAAAA,CAAOC,OAAO,CAACF,MAAAA,CAAOG,UAAU,IAAI,EAAC,CAAA,CAClCC,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAKA,SAAAA,CAAUC,IAAI,KAAK,UAAA,IAAcD,SAAAA,CAAUC,IAAI,KAAK,QAAA,CAAA,CAC9EC,GAAG,CAAC,CAAC,CAACC,IAAAA,EAAMH,SAAAA,CAAU,IAAM;AAAEG,YAAAA,IAAAA;AAAMF,YAAAA,IAAAA,EAAMD,UAAUC;SAAgC,CAAA,CAAA;AAEzF,MAAMG,WAAAA,GAAc,OAAOC,KAAAA,EAAgBJ,IAAAA,EAA+BK,KAAAA,GAAAA;AACxE,IAAA,OAAOL,IAAAA,KAAS,QAAA,GACZM,qBAAAA,CAAgBF,KAAAA,EAAO,CAACG,KAAAA,GAAUC,iBAAAA,CAAYD,KAAAA,EAAOF,KAAAA,CAAAA,CAAAA,GACrDI,qBAAAA,CAAgBL,KAAAA,EAAO,CAACM,GAAAA,GAAQC,qBAAeD,GAAAA,EAAKL,KAAAA,CAAAA,CAAAA;AAC1D,CAAA;AAEA,MAAMO,aAAAA,GAAgB,OACpBC,GAAAA,EACAC,EAAAA,EACApB,MAAAA,EACAW,KAAAA,GAAAA;AAEA,IAAA,MAAMU,QAAAA,GAAqB;QAAEC,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;AACpD,IAAA,MAAMpB,aAAaJ,mBAAAA,CAAoBC,MAAAA,CAAAA;IAEvC,IAAIG,UAAAA,CAAWqB,MAAM,KAAK,CAAA,EAAG;QAC3B,OAAOH,QAAAA;AACT,IAAA;IAEA,MAAM,EAAEI,GAAG,EAAE,GAAGzB,MAAAA;AAEhB,IAAA,IAAI,CAACoB,EAAAA,CAAGM,QAAQ,CAACC,GAAG,CAACF,GAAAA,CAAAA,EAAM;QACzB,OAAOJ,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMO,IAAAA,GAAOR,EAAAA,CAAGM,QAAQ,CAACG,GAAG,CAACJ,GAAAA,CAAAA;IAC7B,MAAM,EAAEK,SAAS,EAAE,GAAGF,IAAAA;;;IAGtB,MAAMG,IAAAA,GAAOX,EAAAA,CAAGY,mBAAmB,CAACb,GAAAA,CAAAA;;AAGpC,IAAA,IAAI,CAAE,MAAMY,IAAAA,CAAKE,QAAQ,CAACH,SAAAA,CAAAA,EAAa;QACrC,OAAOT,QAAAA;AACT,IAAA;;;AAIA,IAAA,MAAMa,WAA8B,EAAE;IAEtC,KAAK,MAAM7B,aAAaF,UAAAA,CAAY;AAClC,QAAA,MAAMgC,gBAAgBP,IAAAA,CAAKzB,UAAU,CAACE,SAAAA,CAAUG,IAAI,CAAC;QACrD,MAAM4B,UAAAA,GACJD,aAAAA,IAAiB,YAAA,IAAgBA,aAAAA,IAAiBA,aAAAA,CAAcC,UAAU,GACtED,aAAAA,CAAcC,UAAU,GACxB/B,SAAAA,CAAUG,IAAI;AAEpB,QAAA,IAAI,MAAMuB,IAAAA,CAAKM,SAAS,CAACP,WAAWM,UAAAA,CAAAA,EAAa;AAC/CF,YAAAA,QAAAA,CAASI,IAAI,CAACjC,SAAAA,CAAAA;AAChB,QAAA;AACF,IAAA;IAEA,IAAI6B,QAAAA,CAASV,MAAM,KAAK,CAAA,EAAG;QACzB,OAAOH,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMkB,MAAAA,GAAS;AAAC,QAAA,IAAA;AAASL,QAAAA,GAAAA,QAAAA,CAAS3B,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA,IAAAA;AAAM,KAAA;AAE1D,IAAA,IAAIgC,MAAAA,GAAS,CAAA;AACb,IAAA,IAAIC,OAAAA,GAAU,IAAA;AAEd,IAAA,MAAOA,OAAAA,CAAS;QACd,MAAMC,IAAAA,GAA8B,MAAMC,MAAAA,CAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKoB,QAAQ,CAAC;AACtEN,YAAAA,MAAAA;YACAO,KAAAA,EAAOjD,UAAAA;AACP2C,YAAAA,MAAAA;YACAO,OAAAA,EAAS;gBAAEC,EAAAA,EAAI;AAAM;AACvB,SAAA,CAAA;QAEAP,OAAAA,GAAUC,IAAAA,CAAKlB,MAAM,KAAK3B,UAAAA;AAC1B2C,QAAAA,MAAAA,IAAUE,KAAKlB,MAAM;QACrBH,QAAAA,CAASC,OAAO,IAAIoB,IAAAA,CAAKlB,MAAM;QAE/B,KAAK,MAAMyB,OAAOP,IAAAA,CAAM;AACtB,YAAA,MAAMQ,OAAgC,EAAC;AAEvC,YAAA,KAAK,MAAM,EAAE1C,IAAI,EAAEF,IAAI,EAAE,IAAI4B,QAAAA,CAAU;;;;gBAIrC,IAAI;AACF,oBAAA,MAAMiB,WAAW,MAAM1C,WAAAA,CAAYwC,GAAG,CAACzC,IAAAA,CAAK,EAAEF,IAAAA,EAAMK,KAAAA,CAAAA;AAEpD,oBAAA,IAAI,CAACyC,UAAAA,CAAQD,QAAAA,EAAUF,GAAG,CAACzC,KAAK,CAAA,EAAG;wBACjC0C,IAAI,CAAC1C,KAAK,GAAG2C,QAAAA;AACf,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOE,KAAAA,EAAO;oBACdV,MAAAA,CAAOW,GAAG,CAACC,IAAI,CACb,CAAA,EAAGzD,WAAW,SAAS,EAAE2B,GAAAA,CAAI,CAAC,EAAEjB,IAAAA,CAAK,QAAQ,EAAEyC,GAAAA,CAAID,EAAE,CAAC,EAAE,EACtDK,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMI,OAAO,GAAGC,MAAAA,CAAOL,KAAAA,CAAAA,CAAAA,CAChD,CAAA;AAEN,gBAAA;AACF,YAAA;AAEA,YAAA,IAAIpD,OAAO0D,IAAI,CAACT,IAAAA,CAAAA,CAAM1B,MAAM,GAAG,CAAA,EAAG;AAChC,gBAAA,MAAMmB,OAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKmC,MAAM,CAAC;oBAAEC,KAAAA,EAAO;AAAEb,wBAAAA,EAAAA,EAAIC,IAAID;AAAG,qBAAA;AAAGE,oBAAAA;AAAK,iBAAA,CAAA;AAChE7B,gBAAAA,QAAAA,CAASE,OAAO,IAAI,CAAA;AACtB,YAAA;AACF,QAAA;AACF,IAAA;IAEA,IAAIF,QAAAA,CAASC,OAAO,GAAG,CAAA,EAAG;QACxBqB,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CACb,GAAGhE,UAAAA,CAAW,CAAC,EAAE2B,GAAAA,CAAI,EAAE,EAAEJ,QAAAA,CAASC,OAAO,CAAC,eAAe,EAAED,SAASE,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEzF,IAAA;IAEA,OAAOF,QAAAA;AACT,CAAA;AAEA,MAAM0C,SAAAA,GAAY,OAAO5C,GAAAA,EAAmBC,EAAAA,GAAAA;AAC1C,IAAA,MAAM,EAAE4C,QAAQ,EAAE,GAAGrB,MAAAA,CAAOsB,OAAO,CAACC,MAAM;;AAG1C,IAAA,IAAI,CAACF,QAAAA,IAAY,CAAE,MAAMA,QAAAA,CAASG,SAAS,EAAA,EAAK;AAC9C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,OAAAA,GAAU;WACXnE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO2B,YAAY,CAAA;WACjCrE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO4B,UAAU;AACnC,KAAA;;AAGD,IAAA,MAAM5D,KAAAA,GAAQ6D,qBAAAA,EAAAA;AACd,IAAA,MAAMC,KAAAA,GAAkB;QAAEnD,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;IAEjD,KAAK,MAAMvB,UAAUoE,OAAAA,CAAS;AAC5B,QAAA,MAAM/C,QAAAA,GAAW,MAAMH,aAAAA,CAAcC,GAAAA,EAAKC,IAAIpB,MAAAA,EAAQW,KAAAA,CAAAA;QAEtD8D,KAAAA,CAAMnD,OAAO,IAAID,QAAAA,CAASC,OAAO;QACjCmD,KAAAA,CAAMlD,OAAO,IAAIF,QAAAA,CAASE,OAAO;AACnC,IAAA;AAEAoB,IAAAA,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CAAC,CAAA,EAAGhE,WAAW,OAAO,EAAE2E,KAAAA,CAAMnD,OAAO,CAAC,eAAe,EAAEmD,MAAMlD,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC/F,CAAA;AAEA;;;;;;;;;;;;;;UAeamD,2BAAAA,GAAyC;IACpDlE,IAAAA,EAAM,yCAAA;IACN,MAAMmE,EAAAA,CAAAA,CAAGxD,GAAG,EAAEC,EAAE,EAAA;AACd,QAAA,MAAM2C,UAAU5C,GAAAA,EAAKC,EAAAA,CAAAA;AACvB,IAAA,CAAA;IACA,MAAMwD,IAAAA,CAAAA,GAAAA;AACJ,QAAA,MAAM,IAAIpB,KAAAA,CAAM,iBAAA,CAAA;AAClB,IAAA;AACF;;;;"}

package/dist/server/migrations/unsign-richtext-and-blocks-urls.mjs

@@ -0,0 +1,145 @@
+import { isEqual } from 'lodash/fp';
+import { mapBlocksImages, unsignImage, mapRichtextUrls, stripSignedUrl, createSignCache } from '../services/extensions/utils.mjs';
+
+const BATCH_SIZE = 100;
+const LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';
+const getTargetAttributes = (schema)=>Object.entries(schema.attributes ?? {}).filter(([, attribute])=>attribute.type === 'richtext' || attribute.type === 'blocks').map(([name, attribute])=>({
+            name,
+            type: attribute.type
+        }));
+const unsignValue = async (value, type, cache)=>{
+    return type === 'blocks' ? mapBlocksImages(value, (image)=>unsignImage(image, cache)) : mapRichtextUrls(value, (url)=>stripSignedUrl(url, cache));
+};
+const migrateSchema = async (trx, db, schema, cache)=>{
+    const progress = {
+        scanned: 0,
+        updated: 0
+    };
+    const attributes = getTargetAttributes(schema);
+    if (attributes.length === 0) {
+        return progress;
+    }
+    const { uid } = schema;
+    if (!db.metadata.has(uid)) {
+        return progress;
+    }
+    const meta = db.metadata.get(uid);
+    const { tableName } = meta;
+    // The schema checks must run on the migration transaction: on SQLite the pool
+    // has a single connection, so a root-connection query would wait on it forever
+    const knex = db.getSchemaConnection(trx);
+    // On a fresh project the migrations run before the tables exist
+    if (!await knex.hasTable(tableName)) {
+        return progress;
+    }
+    // Internal migrations run before the schema sync: an attribute added in the
+    // same deploy as this version has no column yet, so only select what exists
+    const existing = [];
+    for (const attribute of attributes){
+        const attributeMeta = meta.attributes[attribute.name];
+        const columnName = attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName ? attributeMeta.columnName : attribute.name;
+        if (await knex.hasColumn(tableName, columnName)) {
+            existing.push(attribute);
+        }
+    }
+    if (existing.length === 0) {
+        return progress;
+    }
+    const select = [
+        'id',
+        ...existing.map(({ name })=>name)
+    ];
+    let offset = 0;
+    let hasMore = true;
+    while(hasMore){
+        const rows = await strapi.db.query(uid).findMany({
+            select,
+            limit: BATCH_SIZE,
+            offset,
+            orderBy: {
+                id: 'asc'
+            }
+        });
+        hasMore = rows.length === BATCH_SIZE;
+        offset += rows.length;
+        progress.scanned += rows.length;
+        for (const row of rows){
+            const data = {};
+            for (const { name, type } of existing){
+                // A value the mapper cannot process is logged and skipped. This is safe
+                // to catch: the mapper does no database work (presigning is local to
+                // the provider), so the surrounding transaction is not poisoned.
+                try {
+                    const unsigned = await unsignValue(row[name], type, cache);
+                    if (!isEqual(unsigned, row[name])) {
+                        data[name] = unsigned;
+                    }
+                } catch (error) {
+                    strapi.log.warn(`${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${error instanceof Error ? error.message : String(error)}`);
+                }
+            }
+            if (Object.keys(data).length > 0) {
+                await strapi.db.query(uid).update({
+                    where: {
+                        id: row.id
+                    },
+                    data
+                });
+                progress.updated += 1;
+            }
+        }
+    }
+    if (progress.scanned > 0) {
+        strapi.log.info(`${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`);
+    }
+    return progress;
+};
+const migrateUp = async (trx, db)=>{
+    const { provider } = strapi.plugins.upload;
+    // Nothing is signed on a public provider, so there is nothing to strip
+    if (!provider || !await provider.isPrivate()) {
+        return;
+    }
+    const schemas = [
+        ...Object.values(strapi.contentTypes),
+        ...Object.values(strapi.components)
+    ];
+    // One presign per distinct URL for the whole run, however many rows it appears in
+    const cache = createSignCache();
+    const total = {
+        scanned: 0,
+        updated: 0
+    };
+    for (const schema of schemas){
+        const progress = await migrateSchema(trx, db, schema, cache);
+        total.scanned += progress.scanned;
+        total.updated += progress.updated;
+    }
+    strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);
+};
+/**
+ * Richtext and blocks attributes embed the file URL in their own value, so a
+ * signed URL written by the admin used to be frozen in the row and broke as
+ * soon as the signature expired. New writes are normalised by the upload
+ * document service middleware, and the read path re-signs a stored URL that
+ * still carries a stale signature, so this migration is a cleanup of the rows
+ * written before the fix rather than a prerequisite for it.
+ *
+ * Idempotent: re-running it finds nothing left to change.
+ *
+ * Runs inside the internal migration transaction like every other internal
+ * migration: a database error fails the boot. A single value the mapper cannot
+ * process is logged with a warning and skipped; it is normalised by the
+ * middleware on its next save and re-signed on read until then.
+ */ const unsignRichtextAndBlocksUrls = {
+    name: 'upload::unsign-richtext-and-blocks-urls',
+    async up (trx, db) {
+        await migrateUp(trx, db);
+    },
+    async down () {
+        throw new Error('not implemented');
+    }
+};
+
+export { unsignRichtextAndBlocksUrls };
+//# sourceMappingURL=unsign-richtext-and-blocks-urls.mjs.map

package/dist/server/migrations/unsign-richtext-and-blocks-urls.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsign-richtext-and-blocks-urls.mjs","sources":["../../../server/src/migrations/unsign-richtext-and-blocks-urls.ts"],"sourcesContent":["import { isEqual } from 'lodash/fp';\n\nimport type { Database, Migration } from '@strapi/database';\nimport type { Struct } from '@strapi/types';\n\nimport {\n  createSignCache,\n  mapBlocksImages,\n  mapRichtextUrls,\n  stripSignedUrl,\n  unsignImage,\n} from '../services/extensions/utils';\nimport type { SignCache } from '../services/extensions/utils';\n\nconst BATCH_SIZE = 100;\nconst LOG_PREFIX = '[unsign-richtext-and-blocks-urls]';\n\ntype MigrationTrx = Parameters<Migration['up']>[0];\n\ntype TargetAttribute = { name: string; type: 'richtext' | 'blocks' };\n\ntype Progress = { scanned: number; updated: number };\n\nconst getTargetAttributes = (schema: Struct.Schema): TargetAttribute[] =>\n  Object.entries(schema.attributes ?? {})\n    .filter(([, attribute]) => attribute.type === 'richtext' || attribute.type === 'blocks')\n    .map(([name, attribute]) => ({ name, type: attribute.type as TargetAttribute['type'] }));\n\nconst unsignValue = async (value: unknown, type: TargetAttribute['type'], cache: SignCache) => {\n  return type === 'blocks'\n    ? mapBlocksImages(value, (image) => unsignImage(image, cache))\n    : mapRichtextUrls(value, (url) => stripSignedUrl(url, cache));\n};\n\nconst migrateSchema = async (\n  trx: MigrationTrx,\n  db: Database,\n  schema: Struct.Schema,\n  cache: SignCache\n): Promise<Progress> => {\n  const progress: Progress = { scanned: 0, updated: 0 };\n  const attributes = getTargetAttributes(schema);\n\n  if (attributes.length === 0) {\n    return progress;\n  }\n\n  const { uid } = schema;\n\n  if (!db.metadata.has(uid)) {\n    return progress;\n  }\n\n  const meta = db.metadata.get(uid);\n  const { tableName } = meta;\n  // The schema checks must run on the migration transaction: on SQLite the pool\n  // has a single connection, so a root-connection query would wait on it forever\n  const knex = db.getSchemaConnection(trx);\n\n  // On a fresh project the migrations run before the tables exist\n  if (!(await knex.hasTable(tableName))) {\n    return progress;\n  }\n\n  // Internal migrations run before the schema sync: an attribute added in the\n  // same deploy as this version has no column yet, so only select what exists\n  const existing: TargetAttribute[] = [];\n\n  for (const attribute of attributes) {\n    const attributeMeta = meta.attributes[attribute.name];\n    const columnName =\n      attributeMeta && 'columnName' in attributeMeta && attributeMeta.columnName\n        ? attributeMeta.columnName\n        : attribute.name;\n\n    if (await knex.hasColumn(tableName, columnName)) {\n      existing.push(attribute);\n    }\n  }\n\n  if (existing.length === 0) {\n    return progress;\n  }\n\n  const select = ['id', ...existing.map(({ name }) => name)];\n\n  let offset = 0;\n  let hasMore = true;\n\n  while (hasMore) {\n    const rows: Record<string, any>[] = await strapi.db.query(uid).findMany({\n      select,\n      limit: BATCH_SIZE,\n      offset,\n      orderBy: { id: 'asc' },\n    });\n\n    hasMore = rows.length === BATCH_SIZE;\n    offset += rows.length;\n    progress.scanned += rows.length;\n\n    for (const row of rows) {\n      const data: Record<string, unknown> = {};\n\n      for (const { name, type } of existing) {\n        // A value the mapper cannot process is logged and skipped. This is safe\n        // to catch: the mapper does no database work (presigning is local to\n        // the provider), so the surrounding transaction is not poisoned.\n        try {\n          const unsigned = await unsignValue(row[name], type, cache);\n\n          if (!isEqual(unsigned, row[name])) {\n            data[name] = unsigned;\n          }\n        } catch (error) {\n          strapi.log.warn(\n            `${LOG_PREFIX} Skipped ${uid}.${name} on row ${row.id}: ${\n              error instanceof Error ? error.message : String(error)\n            }`\n          );\n        }\n      }\n\n      if (Object.keys(data).length > 0) {\n        await strapi.db.query(uid).update({ where: { id: row.id }, data });\n        progress.updated += 1;\n      }\n    }\n  }\n\n  if (progress.scanned > 0) {\n    strapi.log.info(\n      `${LOG_PREFIX} ${uid}: ${progress.scanned} rows scanned, ${progress.updated} updated`\n    );\n  }\n\n  return progress;\n};\n\nconst migrateUp = async (trx: MigrationTrx, db: Database) => {\n  const { provider } = strapi.plugins.upload;\n\n  // Nothing is signed on a public provider, so there is nothing to strip\n  if (!provider || !(await provider.isPrivate())) {\n    return;\n  }\n\n  const schemas = [\n    ...Object.values(strapi.contentTypes),\n    ...Object.values(strapi.components),\n  ] as Struct.Schema[];\n\n  // One presign per distinct URL for the whole run, however many rows it appears in\n  const cache = createSignCache();\n  const total: Progress = { scanned: 0, updated: 0 };\n\n  for (const schema of schemas) {\n    const progress = await migrateSchema(trx, db, schema, cache);\n\n    total.scanned += progress.scanned;\n    total.updated += progress.updated;\n  }\n\n  strapi.log.info(`${LOG_PREFIX} Done: ${total.scanned} rows scanned, ${total.updated} updated`);\n};\n\n/**\n * Richtext and blocks attributes embed the file URL in their own value, so a\n * signed URL written by the admin used to be frozen in the row and broke as\n * soon as the signature expired. New writes are normalised by the upload\n * document service middleware, and the read path re-signs a stored URL that\n * still carries a stale signature, so this migration is a cleanup of the rows\n * written before the fix rather than a prerequisite for it.\n *\n * Idempotent: re-running it finds nothing left to change.\n *\n * Runs inside the internal migration transaction like every other internal\n * migration: a database error fails the boot. A single value the mapper cannot\n * process is logged with a warning and skipped; it is normalised by the\n * middleware on its next save and re-signed on read until then.\n */\nexport const unsignRichtextAndBlocksUrls: Migration = {\n  name: 'upload::unsign-richtext-and-blocks-urls',\n  async up(trx, db) {\n    await migrateUp(trx, db);\n  },\n  async down() {\n    throw new Error('not implemented');\n  },\n};\n"],"names":["BATCH_SIZE","LOG_PREFIX","getTargetAttributes","schema","Object","entries","attributes","filter","attribute","type","map","name","unsignValue","value","cache","mapBlocksImages","image","unsignImage","mapRichtextUrls","url","stripSignedUrl","migrateSchema","trx","db","progress","scanned","updated","length","uid","metadata","has","meta","get","tableName","knex","getSchemaConnection","hasTable","existing","attributeMeta","columnName","hasColumn","push","select","offset","hasMore","rows","strapi","query","findMany","limit","orderBy","id","row","data","unsigned","isEqual","error","log","warn","Error","message","String","keys","update","where","info","migrateUp","provider","plugins","upload","isPrivate","schemas","values","contentTypes","components","createSignCache","total","unsignRichtextAndBlocksUrls","up","down"],"mappings":";;;AAcA,MAAMA,UAAAA,GAAa,GAAA;AACnB,MAAMC,UAAAA,GAAa,mCAAA;AAQnB,MAAMC,mBAAAA,GAAsB,CAACC,MAAAA,GAC3BC,MAAAA,CAAOC,OAAO,CAACF,MAAAA,CAAOG,UAAU,IAAI,EAAC,CAAA,CAClCC,MAAM,CAAC,CAAC,GAAGC,SAAAA,CAAU,GAAKA,SAAAA,CAAUC,IAAI,KAAK,UAAA,IAAcD,SAAAA,CAAUC,IAAI,KAAK,QAAA,CAAA,CAC9EC,GAAG,CAAC,CAAC,CAACC,IAAAA,EAAMH,SAAAA,CAAU,IAAM;AAAEG,YAAAA,IAAAA;AAAMF,YAAAA,IAAAA,EAAMD,UAAUC;SAAgC,CAAA,CAAA;AAEzF,MAAMG,WAAAA,GAAc,OAAOC,KAAAA,EAAgBJ,IAAAA,EAA+BK,KAAAA,GAAAA;AACxE,IAAA,OAAOL,IAAAA,KAAS,QAAA,GACZM,eAAAA,CAAgBF,KAAAA,EAAO,CAACG,KAAAA,GAAUC,WAAAA,CAAYD,KAAAA,EAAOF,KAAAA,CAAAA,CAAAA,GACrDI,eAAAA,CAAgBL,KAAAA,EAAO,CAACM,GAAAA,GAAQC,eAAeD,GAAAA,EAAKL,KAAAA,CAAAA,CAAAA;AAC1D,CAAA;AAEA,MAAMO,aAAAA,GAAgB,OACpBC,GAAAA,EACAC,EAAAA,EACApB,MAAAA,EACAW,KAAAA,GAAAA;AAEA,IAAA,MAAMU,QAAAA,GAAqB;QAAEC,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;AACpD,IAAA,MAAMpB,aAAaJ,mBAAAA,CAAoBC,MAAAA,CAAAA;IAEvC,IAAIG,UAAAA,CAAWqB,MAAM,KAAK,CAAA,EAAG;QAC3B,OAAOH,QAAAA;AACT,IAAA;IAEA,MAAM,EAAEI,GAAG,EAAE,GAAGzB,MAAAA;AAEhB,IAAA,IAAI,CAACoB,EAAAA,CAAGM,QAAQ,CAACC,GAAG,CAACF,GAAAA,CAAAA,EAAM;QACzB,OAAOJ,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMO,IAAAA,GAAOR,EAAAA,CAAGM,QAAQ,CAACG,GAAG,CAACJ,GAAAA,CAAAA;IAC7B,MAAM,EAAEK,SAAS,EAAE,GAAGF,IAAAA;;;IAGtB,MAAMG,IAAAA,GAAOX,EAAAA,CAAGY,mBAAmB,CAACb,GAAAA,CAAAA;;AAGpC,IAAA,IAAI,CAAE,MAAMY,IAAAA,CAAKE,QAAQ,CAACH,SAAAA,CAAAA,EAAa;QACrC,OAAOT,QAAAA;AACT,IAAA;;;AAIA,IAAA,MAAMa,WAA8B,EAAE;IAEtC,KAAK,MAAM7B,aAAaF,UAAAA,CAAY;AAClC,QAAA,MAAMgC,gBAAgBP,IAAAA,CAAKzB,UAAU,CAACE,SAAAA,CAAUG,IAAI,CAAC;QACrD,MAAM4B,UAAAA,GACJD,aAAAA,IAAiB,YAAA,IAAgBA,aAAAA,IAAiBA,aAAAA,CAAcC,UAAU,GACtED,aAAAA,CAAcC,UAAU,GACxB/B,SAAAA,CAAUG,IAAI;AAEpB,QAAA,IAAI,MAAMuB,IAAAA,CAAKM,SAAS,CAACP,WAAWM,UAAAA,CAAAA,EAAa;AAC/CF,YAAAA,QAAAA,CAASI,IAAI,CAACjC,SAAAA,CAAAA;AAChB,QAAA;AACF,IAAA;IAEA,IAAI6B,QAAAA,CAASV,MAAM,KAAK,CAAA,EAAG;QACzB,OAAOH,QAAAA;AACT,IAAA;AAEA,IAAA,MAAMkB,MAAAA,GAAS;AAAC,QAAA,IAAA;AAASL,QAAAA,GAAAA,QAAAA,CAAS3B,GAAG,CAAC,CAAC,EAAEC,IAAI,EAAE,GAAKA,IAAAA;AAAM,KAAA;AAE1D,IAAA,IAAIgC,MAAAA,GAAS,CAAA;AACb,IAAA,IAAIC,OAAAA,GAAU,IAAA;AAEd,IAAA,MAAOA,OAAAA,CAAS;QACd,MAAMC,IAAAA,GAA8B,MAAMC,MAAAA,CAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKoB,QAAQ,CAAC;AACtEN,YAAAA,MAAAA;YACAO,KAAAA,EAAOjD,UAAAA;AACP2C,YAAAA,MAAAA;YACAO,OAAAA,EAAS;gBAAEC,EAAAA,EAAI;AAAM;AACvB,SAAA,CAAA;QAEAP,OAAAA,GAAUC,IAAAA,CAAKlB,MAAM,KAAK3B,UAAAA;AAC1B2C,QAAAA,MAAAA,IAAUE,KAAKlB,MAAM;QACrBH,QAAAA,CAASC,OAAO,IAAIoB,IAAAA,CAAKlB,MAAM;QAE/B,KAAK,MAAMyB,OAAOP,IAAAA,CAAM;AACtB,YAAA,MAAMQ,OAAgC,EAAC;AAEvC,YAAA,KAAK,MAAM,EAAE1C,IAAI,EAAEF,IAAI,EAAE,IAAI4B,QAAAA,CAAU;;;;gBAIrC,IAAI;AACF,oBAAA,MAAMiB,WAAW,MAAM1C,WAAAA,CAAYwC,GAAG,CAACzC,IAAAA,CAAK,EAAEF,IAAAA,EAAMK,KAAAA,CAAAA;AAEpD,oBAAA,IAAI,CAACyC,OAAAA,CAAQD,QAAAA,EAAUF,GAAG,CAACzC,KAAK,CAAA,EAAG;wBACjC0C,IAAI,CAAC1C,KAAK,GAAG2C,QAAAA;AACf,oBAAA;AACF,gBAAA,CAAA,CAAE,OAAOE,KAAAA,EAAO;oBACdV,MAAAA,CAAOW,GAAG,CAACC,IAAI,CACb,CAAA,EAAGzD,WAAW,SAAS,EAAE2B,GAAAA,CAAI,CAAC,EAAEjB,IAAAA,CAAK,QAAQ,EAAEyC,GAAAA,CAAID,EAAE,CAAC,EAAE,EACtDK,KAAAA,YAAiBG,KAAAA,GAAQH,KAAAA,CAAMI,OAAO,GAAGC,MAAAA,CAAOL,KAAAA,CAAAA,CAAAA,CAChD,CAAA;AAEN,gBAAA;AACF,YAAA;AAEA,YAAA,IAAIpD,OAAO0D,IAAI,CAACT,IAAAA,CAAAA,CAAM1B,MAAM,GAAG,CAAA,EAAG;AAChC,gBAAA,MAAMmB,OAAOvB,EAAE,CAACwB,KAAK,CAACnB,GAAAA,CAAAA,CAAKmC,MAAM,CAAC;oBAAEC,KAAAA,EAAO;AAAEb,wBAAAA,EAAAA,EAAIC,IAAID;AAAG,qBAAA;AAAGE,oBAAAA;AAAK,iBAAA,CAAA;AAChE7B,gBAAAA,QAAAA,CAASE,OAAO,IAAI,CAAA;AACtB,YAAA;AACF,QAAA;AACF,IAAA;IAEA,IAAIF,QAAAA,CAASC,OAAO,GAAG,CAAA,EAAG;QACxBqB,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CACb,GAAGhE,UAAAA,CAAW,CAAC,EAAE2B,GAAAA,CAAI,EAAE,EAAEJ,QAAAA,CAASC,OAAO,CAAC,eAAe,EAAED,SAASE,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEzF,IAAA;IAEA,OAAOF,QAAAA;AACT,CAAA;AAEA,MAAM0C,SAAAA,GAAY,OAAO5C,GAAAA,EAAmBC,EAAAA,GAAAA;AAC1C,IAAA,MAAM,EAAE4C,QAAQ,EAAE,GAAGrB,MAAAA,CAAOsB,OAAO,CAACC,MAAM;;AAG1C,IAAA,IAAI,CAACF,QAAAA,IAAY,CAAE,MAAMA,QAAAA,CAASG,SAAS,EAAA,EAAK;AAC9C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,OAAAA,GAAU;WACXnE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO2B,YAAY,CAAA;WACjCrE,MAAAA,CAAOoE,MAAM,CAAC1B,MAAAA,CAAO4B,UAAU;AACnC,KAAA;;AAGD,IAAA,MAAM5D,KAAAA,GAAQ6D,eAAAA,EAAAA;AACd,IAAA,MAAMC,KAAAA,GAAkB;QAAEnD,OAAAA,EAAS,CAAA;QAAGC,OAAAA,EAAS;AAAE,KAAA;IAEjD,KAAK,MAAMvB,UAAUoE,OAAAA,CAAS;AAC5B,QAAA,MAAM/C,QAAAA,GAAW,MAAMH,aAAAA,CAAcC,GAAAA,EAAKC,IAAIpB,MAAAA,EAAQW,KAAAA,CAAAA;QAEtD8D,KAAAA,CAAMnD,OAAO,IAAID,QAAAA,CAASC,OAAO;QACjCmD,KAAAA,CAAMlD,OAAO,IAAIF,QAAAA,CAASE,OAAO;AACnC,IAAA;AAEAoB,IAAAA,MAAAA,CAAOW,GAAG,CAACQ,IAAI,CAAC,CAAA,EAAGhE,WAAW,OAAO,EAAE2E,KAAAA,CAAMnD,OAAO,CAAC,eAAe,EAAEmD,MAAMlD,OAAO,CAAC,QAAQ,CAAC,CAAA;AAC/F,CAAA;AAEA;;;;;;;;;;;;;;UAeamD,2BAAAA,GAAyC;IACpDlE,IAAAA,EAAM,yCAAA;IACN,MAAMmE,EAAAA,CAAAA,CAAGxD,GAAG,EAAEC,EAAE,EAAA;AACd,QAAA,MAAM2C,UAAU5C,GAAAA,EAAKC,EAAAA,CAAAA;AACvB,IAAA,CAAA;IACA,MAAMwD,IAAAA,CAAAA,GAAAA;AACJ,QAAA,MAAM,IAAIpB,KAAAA,CAAM,iBAAA,CAAA;AAClB,IAAA;AACF;;;;"}

package/dist/server/register.js

@@ -4,6 +4,7 @@ var _ = require('lodash');
 var sharp = require('sharp');
 var utils = require('@strapi/utils');
 var upload = require('./middlewares/upload.js');
+var unsignRichtextAndBlocksUrls = require('./migrations/unsign-richtext-and-blocks-urls.js');
 var contentApi = require('./documentation/content-api.json.js');
 var aiMetadataJob = require('./models/ai-metadata-job.js');
 var registerUploadMcpTools = require('./mcp/register-upload-mcp-tools.js');
@@ -33,6 +34,8 @@ const { bytesToHumanReadable, kbytesToBytes } = utils.file;
     sharp__default.default.cache(cache);
     sharp__default.default.concurrency(concurrency);
     strapi.plugin('upload').provider = createProvider(uploadConfig);
+    // Rewrites richtext / blocks URLs persisted with a (now expired) signature
+    strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls.unsignRichtextAndBlocksUrls);
     await upload({
         strapi
     });

package/dist/server/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\nimport { registerUploadMcpTools } from './mcp';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  await registerUploadMiddleware({ strapi });\n\n  // Register phase, before the MCP HTTP server starts during bootstrap.\n  registerUploadMcpTools({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","registerUploadMiddleware","registerUploadMcpTools","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;;;;;;;;AAYA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,YAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,UAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,2BAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,sBAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,sBAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;AAElD,IAAA,MAAMS,MAAAA,CAAyB;AAAEf,QAAAA;AAAO,KAAA,CAAA;;IAGxCgB,6CAAAA,CAAuB;AAAEhB,QAAAA;AAAO,KAAA,CAAA;IAEhC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAEI,uBAAuB,EAAE,GAAG,MAAM,oDAAO,cAAA,KAAA;QACjDA,uBAAAA,CAAwB;AAAEjB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPK,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,kBAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMR,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMkB,YAAAA,GAAeC,kBAAAA,CAAEC,OAAO,CAACpB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAImB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACFtB,QAAAA,QAAAA,GAAWoB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmB5B,QAAAA,CAAS6B,IAAI,CAAC5B,eAAAA,CAAAA;IAEvC,IAAI,CAAC2B,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,kBAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAO/C,IAAAA,EAAYgD,OAAAA,GAAUrC,aAAa,CAACoC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAAC/C,IAAAA,EAAMgD,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAAcvD,IAAe,EAAE,EAAEwD,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAazD,aAAAA,CAAcC,IAAAA,CAAKyD,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAI5D,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAK0D,gBAAgB,CAAC,uBAAuB,EAAE5D,oBAAAA,CAAqB0D,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAa3D,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACA4D,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"register.js","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport { unsignRichtextAndBlocksUrls } from './migrations/unsign-richtext-and-blocks-urls';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\nimport { registerUploadMcpTools } from './mcp';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  // Rewrites richtext / blocks URLs persisted with a (now expired) signature\n  strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls);\n\n  await registerUploadMiddleware({ strapi });\n\n  // Register phase, before the MCP HTTP server starts during bootstrap.\n  registerUploadMcpTools({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","db","migrations","providers","internal","unsignRichtextAndBlocksUrls","registerUploadMiddleware","registerUploadMcpTools","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;;;;;;;;;AAaA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,YAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,UAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,2BAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,sBAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,sBAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;;IAGlDN,MAAAA,CAAOe,EAAE,CAACC,UAAU,CAACC,SAAS,CAACC,QAAQ,CAACnB,QAAQ,CAACoB,uDAAAA,CAAAA;AAEjD,IAAA,MAAMC,MAAAA,CAAyB;AAAEpB,QAAAA;AAAO,KAAA,CAAA;;IAGxCqB,6CAAAA,CAAuB;AAAErB,QAAAA;AAAO,KAAA,CAAA;IAEhC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAES,uBAAuB,EAAE,GAAG,MAAM,oDAAO,cAAA,KAAA;QACjDA,uBAAAA,CAAwB;AAAEtB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPU,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,kBAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMb,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMuB,YAAAA,GAAeC,kBAAAA,CAAEC,OAAO,CAACzB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAIwB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACF3B,QAAAA,QAAAA,GAAWyB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmBjC,QAAAA,CAASkC,IAAI,CAACjC,eAAAA,CAAAA;IAEvC,IAAI,CAACgC,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,kBAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAOpD,IAAAA,EAAYqD,OAAAA,GAAU1C,aAAa,CAACyC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAACpD,IAAAA,EAAMqD,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAAc5D,IAAe,EAAE,EAAE6D,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAa9D,aAAAA,CAAcC,IAAAA,CAAK8D,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAIjE,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAK+D,gBAAgB,CAAC,uBAAuB,EAAEjE,oBAAAA,CAAqB+D,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAahE,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACAiE,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}

package/dist/server/register.mjs

@@ -2,6 +2,7 @@ import _ from 'lodash';
 import sharp from 'sharp';
 import { errors, file } from '@strapi/utils';
 import registerUploadMiddleware from './middlewares/upload.mjs';
+import { unsignRichtextAndBlocksUrls } from './migrations/unsign-richtext-and-blocks-urls.mjs';
 import spec from './documentation/content-api.json.mjs';
 import { aiMetadataJob } from './models/ai-metadata-job.mjs';
 import { registerUploadMcpTools } from './mcp/register-upload-mcp-tools.mjs';
@@ -26,6 +27,8 @@ const { bytesToHumanReadable, kbytesToBytes } = file;
     sharp.cache(cache);
     sharp.concurrency(concurrency);
     strapi.plugin('upload').provider = createProvider(uploadConfig);
+    // Rewrites richtext / blocks URLs persisted with a (now expired) signature
+    strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls);
     await registerUploadMiddleware({
         strapi
     });

package/dist/server/register.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"register.mjs","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\nimport { registerUploadMcpTools } from './mcp';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  await registerUploadMiddleware({ strapi });\n\n  // Register phase, before the MCP HTTP server starts during bootstrap.\n  registerUploadMcpTools({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","registerUploadMiddleware","registerUploadMcpTools","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;AAYA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,MAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,IAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,aAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,KAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,KAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;AAElD,IAAA,MAAMS,wBAAAA,CAAyB;AAAEf,QAAAA;AAAO,KAAA,CAAA;;IAGxCgB,sBAAAA,CAAuB;AAAEhB,QAAAA;AAAO,KAAA,CAAA;IAEhC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAEI,uBAAuB,EAAE,GAAG,MAAM,OAAO,eAAA,CAAA;QACjDA,uBAAAA,CAAwB;AAAEjB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPK,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,IAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMR,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMkB,YAAAA,GAAeC,CAAAA,CAAEC,OAAO,CAACpB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAImB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACFtB,QAAAA,QAAAA,GAAWoB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmB5B,QAAAA,CAAS6B,IAAI,CAAC5B,eAAAA,CAAAA;IAEvC,IAAI,CAAC2B,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,CAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAO/C,IAAAA,EAAYgD,OAAAA,GAAUrC,aAAa,CAACoC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAAC/C,IAAAA,EAAMgD,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAAcvD,IAAe,EAAE,EAAEwD,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAazD,aAAAA,CAAcC,IAAAA,CAAKyD,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAI5D,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAK0D,gBAAgB,CAAC,uBAAuB,EAAE5D,oBAAAA,CAAqB0D,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAa3D,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACA4D,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"register.mjs","sources":["../../server/src/register.ts"],"sourcesContent":["import _ from 'lodash';\nimport sharp from 'sharp';\n\nimport { errors, file } from '@strapi/utils';\nimport type { Core } from '@strapi/types';\n\nimport registerUploadMiddleware from './middlewares/upload';\nimport { unsignRichtextAndBlocksUrls } from './migrations/unsign-richtext-and-blocks-urls';\nimport spec from '../../documentation/content-api.json';\nimport type { Config, File, InputFile } from './types';\nimport { aiMetadataJob } from './models/ai-metadata-job';\nimport { registerUploadMcpTools } from './mcp';\n\nconst { PayloadTooLargeError } = errors;\nconst { bytesToHumanReadable, kbytesToBytes } = file;\n\n/**\n * Register upload plugin\n */\nexport async function register({ strapi }: { strapi: Core.Strapi }) {\n  // Register AI metadata job model\n  strapi.get('models').add(aiMetadataJob);\n\n  const raw = strapi.config.get<Partial<Config> | null | undefined>('plugin::upload') ?? {};\n  // createProvider needs a provider; empty get() (e.g. in tests) still has defaults.\n  const uploadConfig = {\n    provider: 'local' as const,\n    providerOptions: {} as Config['providerOptions'],\n    actionOptions: {} as Config['actionOptions'],\n    ...raw,\n  } as Config;\n\n  // Configure sharp memory management\n  const { cache = false, concurrency = 1 } = uploadConfig.sharp ?? {};\n  sharp.cache(cache);\n  sharp.concurrency(concurrency);\n\n  strapi.plugin('upload').provider = createProvider(uploadConfig);\n\n  // Rewrites richtext / blocks URLs persisted with a (now expired) signature\n  strapi.db.migrations.providers.internal.register(unsignRichtextAndBlocksUrls);\n\n  await registerUploadMiddleware({ strapi });\n\n  // Register phase, before the MCP HTTP server starts during bootstrap.\n  registerUploadMcpTools({ strapi });\n\n  if (strapi.plugin('graphql')) {\n    const { installGraphqlExtension } = await import('./graphql.js');\n    installGraphqlExtension({ strapi });\n  }\n\n  if (strapi.plugin('documentation')) {\n    strapi\n      .plugin('documentation')\n      .service('override')\n      .registerOverride(spec, {\n        pluginOrigin: 'upload',\n        excludeFromGeneration: ['upload'],\n      });\n  }\n}\n\nconst createProvider = (config: Config) => {\n  const { providerOptions, actionOptions = {} } = config;\n\n  const providerName = _.toLower(config.provider);\n  let provider;\n\n  let modulePath;\n  try {\n    modulePath = require.resolve(`@strapi/provider-upload-${providerName}`);\n  } catch (error) {\n    if (\n      typeof error === 'object' &&\n      error !== null &&\n      'code' in error &&\n      error.code === 'MODULE_NOT_FOUND'\n    ) {\n      modulePath = providerName;\n    } else {\n      throw error;\n    }\n  }\n\n  try {\n    provider = require(modulePath);\n  } catch (err) {\n    const newError = new Error(`Could not load upload provider \"${providerName}\".`);\n\n    if (err instanceof Error) {\n      newError.stack = err.stack;\n    }\n\n    throw newError;\n  }\n\n  const providerInstance = provider.init(providerOptions);\n\n  if (!providerInstance.delete) {\n    throw new Error(`The upload provider \"${providerName}\" doesn't implement the delete method.`);\n  }\n\n  if (!providerInstance.upload && !providerInstance.uploadStream) {\n    throw new Error(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream nor the upload method.`\n    );\n  }\n\n  if (!providerInstance.uploadStream) {\n    process.emitWarning(\n      `The upload provider \"${providerName}\" doesn't implement the uploadStream function. Strapi will fallback on the upload method. Some performance issues may occur.`\n    );\n  }\n\n  const wrappedProvider = _.mapValues(providerInstance, (method, methodName) => {\n    return async (file: File, options = actionOptions[methodName]) =>\n      providerInstance[methodName](file, options);\n  });\n\n  return Object.assign(Object.create(baseProvider), wrappedProvider);\n};\n\nconst baseProvider = {\n  extend(obj: unknown) {\n    Object.assign(this, obj);\n  },\n  checkFileSize(file: InputFile, { sizeLimit }: { sizeLimit: number }) {\n    if (sizeLimit && kbytesToBytes(file.size) > sizeLimit) {\n      throw new PayloadTooLargeError(\n        `${file.originalFilename} exceeds size limit of ${bytesToHumanReadable(sizeLimit)}.`\n      );\n    }\n  },\n  getSignedUrl(file: File) {\n    return file;\n  },\n  isPrivate() {\n    return false;\n  },\n};\n"],"names":["PayloadTooLargeError","errors","bytesToHumanReadable","kbytesToBytes","file","register","strapi","get","add","aiMetadataJob","raw","config","uploadConfig","provider","providerOptions","actionOptions","cache","concurrency","sharp","plugin","createProvider","db","migrations","providers","internal","unsignRichtextAndBlocksUrls","registerUploadMiddleware","registerUploadMcpTools","installGraphqlExtension","service","registerOverride","spec","pluginOrigin","excludeFromGeneration","providerName","_","toLower","modulePath","require","resolve","error","code","err","newError","Error","stack","providerInstance","init","delete","upload","uploadStream","process","emitWarning","wrappedProvider","mapValues","method","methodName","options","Object","assign","create","baseProvider","extend","obj","checkFileSize","sizeLimit","size","originalFilename","getSignedUrl","isPrivate"],"mappings":";;;;;;;;;AAaA,MAAM,EAAEA,oBAAoB,EAAE,GAAGC,MAAAA;AACjC,MAAM,EAAEC,oBAAoB,EAAEC,aAAa,EAAE,GAAGC,IAAAA;AAEhD;;AAEC,IACM,eAAeC,QAAAA,CAAS,EAAEC,MAAM,EAA2B,EAAA;;AAEhEA,IAAAA,MAAAA,CAAOC,GAAG,CAAC,QAAA,CAAA,CAAUC,GAAG,CAACC,aAAAA,CAAAA;AAEzB,IAAA,MAAMC,MAAMJ,MAAAA,CAAOK,MAAM,CAACJ,GAAG,CAAqC,qBAAqB,EAAC;;AAExF,IAAA,MAAMK,YAAAA,GAAe;QACnBC,QAAAA,EAAU,OAAA;AACVC,QAAAA,eAAAA,EAAiB,EAAC;AAClBC,QAAAA,aAAAA,EAAe,EAAC;AAChB,QAAA,GAAGL;AACL,KAAA;;IAGA,MAAM,EAAEM,KAAAA,GAAQ,KAAK,EAAEC,WAAAA,GAAc,CAAC,EAAE,GAAGL,YAAAA,CAAaM,KAAK,IAAI,EAAC;AAClEA,IAAAA,KAAAA,CAAMF,KAAK,CAACA,KAAAA,CAAAA;AACZE,IAAAA,KAAAA,CAAMD,WAAW,CAACA,WAAAA,CAAAA;AAElBX,IAAAA,MAAAA,CAAOa,MAAM,CAAC,QAAA,CAAA,CAAUN,QAAQ,GAAGO,cAAAA,CAAeR,YAAAA,CAAAA;;IAGlDN,MAAAA,CAAOe,EAAE,CAACC,UAAU,CAACC,SAAS,CAACC,QAAQ,CAACnB,QAAQ,CAACoB,2BAAAA,CAAAA;AAEjD,IAAA,MAAMC,wBAAAA,CAAyB;AAAEpB,QAAAA;AAAO,KAAA,CAAA;;IAGxCqB,sBAAAA,CAAuB;AAAErB,QAAAA;AAAO,KAAA,CAAA;IAEhC,IAAIA,MAAAA,CAAOa,MAAM,CAAC,SAAA,CAAA,EAAY;AAC5B,QAAA,MAAM,EAAES,uBAAuB,EAAE,GAAG,MAAM,OAAO,eAAA,CAAA;QACjDA,uBAAAA,CAAwB;AAAEtB,YAAAA;AAAO,SAAA,CAAA;AACnC,IAAA;IAEA,IAAIA,MAAAA,CAAOa,MAAM,CAAC,eAAA,CAAA,EAAkB;QAClCb,MAAAA,CACGa,MAAM,CAAC,eAAA,CAAA,CACPU,OAAO,CAAC,UAAA,CAAA,CACRC,gBAAgB,CAACC,IAAAA,EAAM;YACtBC,YAAAA,EAAc,QAAA;YACdC,qBAAAA,EAAuB;AAAC,gBAAA;AAAS;AACnC,SAAA,CAAA;AACJ,IAAA;AACF;AAEA,MAAMb,iBAAiB,CAACT,MAAAA,GAAAA;AACtB,IAAA,MAAM,EAAEG,eAAe,EAAEC,gBAAgB,EAAE,EAAE,GAAGJ,MAAAA;AAEhD,IAAA,MAAMuB,YAAAA,GAAeC,CAAAA,CAAEC,OAAO,CAACzB,OAAOE,QAAQ,CAAA;IAC9C,IAAIA,QAAAA;IAEJ,IAAIwB,UAAAA;IACJ,IAAI;AACFA,QAAAA,UAAAA,GAAaC,QAAQC,OAAO,CAAC,CAAC,wBAAwB,EAAEL,YAAAA,CAAAA,CAAc,CAAA;AACxE,IAAA,CAAA,CAAE,OAAOM,KAAAA,EAAO;QACd,IACE,OAAOA,KAAAA,KAAU,QAAA,IACjBA,KAAAA,KAAU,IAAA,IACV,UAAUA,KAAAA,IACVA,KAAAA,CAAMC,IAAI,KAAK,kBAAA,EACf;YACAJ,UAAAA,GAAaH,YAAAA;QACf,CAAA,MAAO;YACL,MAAMM,KAAAA;AACR,QAAA;AACF,IAAA;IAEA,IAAI;AACF3B,QAAAA,QAAAA,GAAWyB,OAAAA,CAAQD,UAAAA,CAAAA;AACrB,IAAA,CAAA,CAAE,OAAOK,GAAAA,EAAK;QACZ,MAAMC,QAAAA,GAAW,IAAIC,KAAAA,CAAM,CAAC,gCAAgC,EAAEV,YAAAA,CAAa,EAAE,CAAC,CAAA;AAE9E,QAAA,IAAIQ,eAAeE,KAAAA,EAAO;YACxBD,QAAAA,CAASE,KAAK,GAAGH,GAAAA,CAAIG,KAAK;AAC5B,QAAA;QAEA,MAAMF,QAAAA;AACR,IAAA;IAEA,MAAMG,gBAAAA,GAAmBjC,QAAAA,CAASkC,IAAI,CAACjC,eAAAA,CAAAA;IAEvC,IAAI,CAACgC,gBAAAA,CAAiBE,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIJ,KAAAA,CAAM,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,sCAAsC,CAAC,CAAA;AAC9F,IAAA;AAEA,IAAA,IAAI,CAACY,gBAAAA,CAAiBG,MAAM,IAAI,CAACH,gBAAAA,CAAiBI,YAAY,EAAE;AAC9D,QAAA,MAAM,IAAIN,KAAAA,CACR,CAAC,qBAAqB,EAAEV,YAAAA,CAAa,2DAA2D,CAAC,CAAA;AAErG,IAAA;IAEA,IAAI,CAACY,gBAAAA,CAAiBI,YAAY,EAAE;AAClCC,QAAAA,OAAAA,CAAQC,WAAW,CACjB,CAAC,qBAAqB,EAAElB,YAAAA,CAAa,4HAA4H,CAAC,CAAA;AAEtK,IAAA;AAEA,IAAA,MAAMmB,kBAAkBlB,CAAAA,CAAEmB,SAAS,CAACR,gBAAAA,EAAkB,CAACS,MAAAA,EAAQC,UAAAA,GAAAA;QAC7D,OAAO,OAAOpD,IAAAA,EAAYqD,OAAAA,GAAU1C,aAAa,CAACyC,UAAAA,CAAW,GAC3DV,gBAAgB,CAACU,UAAAA,CAAW,CAACpD,IAAAA,EAAMqD,OAAAA,CAAAA;AACvC,IAAA,CAAA,CAAA;AAEA,IAAA,OAAOC,OAAOC,MAAM,CAACD,MAAAA,CAAOE,MAAM,CAACC,YAAAA,CAAAA,EAAeR,eAAAA,CAAAA;AACpD,CAAA;AAEA,MAAMQ,YAAAA,GAAe;AACnBC,IAAAA,MAAAA,CAAAA,CAAOC,GAAY,EAAA;QACjBL,MAAAA,CAAOC,MAAM,CAAC,IAAI,EAAEI,GAAAA,CAAAA;AACtB,IAAA,CAAA;AACAC,IAAAA,aAAAA,CAAAA,CAAc5D,IAAe,EAAE,EAAE6D,SAAS,EAAyB,EAAA;AACjE,QAAA,IAAIA,SAAAA,IAAa9D,aAAAA,CAAcC,IAAAA,CAAK8D,IAAI,IAAID,SAAAA,EAAW;YACrD,MAAM,IAAIjE,oBAAAA,CACR,CAAA,EAAGI,IAAAA,CAAK+D,gBAAgB,CAAC,uBAAuB,EAAEjE,oBAAAA,CAAqB+D,SAAAA,CAAAA,CAAW,CAAC,CAAC,CAAA;AAExF,QAAA;AACF,IAAA,CAAA;AACAG,IAAAA,YAAAA,CAAAA,CAAahE,IAAU,EAAA;QACrB,OAAOA,IAAAA;AACT,IAAA,CAAA;AACAiE,IAAAA,SAAAA,CAAAA,GAAAA;QACE,OAAO,KAAA;AACT,IAAA;AACF,CAAA;;;;"}