@strapi/upload 5.58.0 → 5.59.0

package/dist/server/mcp/handlers/folder-handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"folder-handlers.js","sources":["../../../../server/src/mcp/handlers/folder-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { assertAmbientInstance, getFolderService } from '../ambient-instance';\nimport { ACTIONS, FOLDER_MODEL_UID, FILE_MODEL_UID } from '../../constants';\nimport { isFolderOrChild } from '../../controllers/utils/folders';\nimport { assertMediaPermission } from '../permissions';\nimport { sanitizeMediaFolder } from '../sanitizers/sanitize-media';\nimport {\n  MCP_NOT_FOUND_FOLDER,\n  MCP_FOLDER_NAME_TAKEN,\n  MCP_PARENT_FOLDER_NOT_FOUND,\n  MCP_FOLDER_MOVE_INTO_SELF,\n  MCP_DELETE_FOLDER_UNRESOLVED_IDS,\n} from './constants';\nimport { ok } from '../utils';\n\nimport type { Folder } from '../../types';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's strict Zod\n// input schema before the handler runs, so unknown keys never reach here.\ntype CreateFolderArgs = {\n  name: string;\n  parent?: number | null;\n};\n\ntype RenameFolderArgs = {\n  id: number;\n  name: string;\n};\n\ntype MoveFolderArgs = {\n  id: number;\n  parent: number | null;\n};\n\ntype DeleteFolderArgs = {\n  ids: number[];\n  dryRun?: boolean;\n};\n\n/** The folder fields the handlers need; `path` drives the cascade and subtree checks. */\ntype FolderRow = Pick<Folder, 'id' | 'name' | 'path'>;\n\n/**\n * `withParent` populates the parent relation in the same round trip. Rename needs the parent id\n * to scope its sibling-uniqueness check, so it would otherwise read the same row twice; the\n * subtree and cascade callers do not, and skip the join.\n */\nconst findFolderById = async (\n  strapi: Core.Strapi,\n  id: number,\n  { withParent = false }: { withParent?: boolean } = {}\n): Promise<(FolderRow & { parent?: { id: number } | null }) | null> =>\n  strapi.db.query(FOLDER_MODEL_UID).findOne({\n    select: ['id', 'name', 'path'],\n    where: { id },\n    ...(withParent ? { populate: { parent: { select: ['id'] } } } : {}),\n  });\n\n/**\n * Re-reads a folder with its parent populated, so the write tools can echo back the same shape\n * regardless of what the service returned.\n *\n * `folder.update()` resolves the row it wrote without the `parent` relation, and on a pure rename\n * it never touches the join table at all — so the parent has to be read back to be reported.\n */\nconst readFolderForOutput = async (\n  strapi: Core.Strapi,\n  id: number,\n  fallback: Record<string, unknown>\n) => {\n  const row = await strapi.db.query(FOLDER_MODEL_UID).findOne({\n    where: { id },\n    populate: { parent: { select: ['id', 'name'] } },\n  });\n\n  // The write succeeded, so report it even if the read-back comes back empty rather than\n  // failing a completed operation on a follow-up query.\n  return sanitizeMediaFolder(row ?? fallback);\n};\n\n/**\n * Replicates the admin folder controller's `parent` check: a named parent must exist.\n *\n * null is the media library root and always valid, so only a numeric id is looked up.\n */\nconst assertParentExists = async (strapi: Core.Strapi, parent: number | null | undefined) => {\n  if (parent === null || parent === undefined) {\n    return;\n  }\n\n  const exists = await getFolderService(strapi).exists({ id: parent });\n\n  if (!exists) {\n    throw new errors.ValidationError(MCP_PARENT_FOLDER_NOT_FOUND);\n  }\n};\n\n/**\n * Replicates `is-folder-unique` from the admin folder validation: a folder name must be unique\n * among its siblings.\n *\n * `excludeId` is the folder being renamed — without it a rename to the folder's current name\n * would collide with itself.\n */\nconst assertNameAvailable = async (\n  strapi: Core.Strapi,\n  name: string,\n  parent: number | null,\n  excludeId?: number\n) => {\n  const filters: Record<string, unknown> = { name, parent: parent ?? null };\n\n  if (excludeId !== undefined) {\n    filters.id = { $ne: excludeId };\n  }\n\n  if (await getFolderService(strapi).exists(filters)) {\n    throw new errors.ValidationError(MCP_FOLDER_NAME_TAKEN);\n  }\n};\n\n/**\n * Replicates `dont-move-inside-self`: a folder cannot become its own descendant.\n *\n * Without this the folder service would rewrite the subtree's materialized paths into a cycle,\n * orphaning every descendant — the tree has no root to walk back to afterwards.\n */\nconst assertNotMovedIntoOwnSubtree = async (\n  strapi: Core.Strapi,\n  folder: FolderRow,\n  parent: number | null\n) => {\n  if (parent === null) {\n    return;\n  }\n\n  const destination = await findFolderById(strapi, parent);\n\n  // A missing destination is already reported by `assertParentExists`.\n  if (destination === null) {\n    return;\n  }\n\n  if (isFolderOrChild(destination, folder)) {\n    throw new errors.ValidationError(MCP_FOLDER_MOVE_INTO_SELF);\n  }\n};\n\n/**\n * Counts the folders and files a `deleteByIds` of these paths would remove.\n *\n * Mirrors the two `$or` predicates in `folder.deleteByIds` exactly — self path plus the\n * `${path}/` prefix — so the dry-run number is the same set the destructive branch acts on\n * rather than an independent estimate that could drift from it.\n */\nconst countCascade = async (strapi: Core.Strapi, paths: string[]) => {\n  const pathPredicate = (field: string) => ({\n    $or: paths.flatMap((path) => [\n      { [field]: { $eq: path } },\n      { [field]: { $startsWith: `${path}/` } },\n    ]),\n  });\n\n  const [totalFolderNumber, totalFileNumber] = await Promise.all([\n    strapi.db.query(FOLDER_MODEL_UID).count({ where: pathPredicate('path') }),\n    strapi.db.query(FILE_MODEL_UID).count({ where: pathPredicate('folderPath') }),\n  ]);\n\n  return { totalFolderNumber, totalFileNumber };\n};\n\n/**\n * `media_create_folder` — a new folder, optionally nested.\n *\n * Gated on `plugin::upload.assets.create` and mirrors `POST /upload/folders`: the same\n * permission, the same uniqueness and parent-existence validation, the same `folder.create()`\n * call, and the same `createdBy` attribution from the session user.\n *\n * `create` rather than the `update` the other folder tools use: creating a folder is the one\n * folder operation whose admin route gates on `assets.create`.\n */\nexport const createMediaCreateFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { name, parent = null } = args as CreateFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.create, FOLDER_MODEL_UID);\n\n    await assertParentExists(strapi, parent);\n    await assertNameAvailable(strapi, name, parent);\n\n    const created = await getFolderService(strapi).create({ name, parent }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, created.id, created) });\n  };\n};\n\n/**\n * `media_rename_folder` — changes a folder's name and nothing else.\n *\n * Deliberately does not forward `parent` to `folder.update()`: the service branches on\n * `isUndefined(parent)`, and the name-only branch skips the transaction that rewrites descendant\n * paths. Passing the folder's existing parent would take the move branch and rewrite the whole\n * subtree to compute the identical paths.\n */\nexport const createMediaRenameFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, name } = args as RenameFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id, { withParent: true });\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    // Siblings are the folders sharing this folder's parent, so uniqueness is checked against\n    // the current location — a rename never changes it.\n    const parentId = folder.parent?.id ?? null;\n\n    await assertNameAvailable(strapi, name, parentId, id);\n\n    // `parent` is omitted on purpose — see the note above.\n    const renamed = await getFolderService(strapi).update(id, { name }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, id, renamed ?? { ...folder, name }) });\n  };\n};\n\n/**\n * `media_move_folder` — re-parents a folder, carrying its whole subtree with it.\n *\n * `folder.update()` recalculates the materialized `path` of every descendant folder and the\n * `folderPath` of every contained file inside a transaction, so the move is atomic and no\n * separate bookkeeping is needed here.\n */\nexport const createMediaMoveFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, parent } = args as MoveFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id);\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    await assertParentExists(strapi, parent);\n    await assertNotMovedIntoOwnSubtree(strapi, folder, parent);\n\n    // A folder keeps its name across a move, so uniqueness must hold in the destination.\n    await assertNameAvailable(strapi, folder.name, parent, id);\n\n    const moved = await getFolderService(strapi).update(\n      id,\n      { name: folder.name, parent },\n      { user: context.user }\n    );\n\n    return ok({ data: await readFolderForOutput(strapi, id, moved ?? folder) });\n  };\n};\n\n/**\n * `media_delete_folder` — previews or performs a cascading folder deletion.\n *\n * Two branches behind one tool, because the preview and the deletion must agree on what the\n * cascade covers; splitting them across tools would let the two drift apart, and an agent could\n * reach the destructive one without ever seeing a count.\n *\n * `dryRun` defaults to true (see the input schema): omitting the flag previews, and deleting\n * takes an explicit `dryRun: false`.\n */\nexport const createMediaDeleteFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { ids, dryRun = true } = args as DeleteFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const matched: FolderRow[] = await strapi.db.query(FOLDER_MODEL_UID).findMany({\n      select: ['id', 'name', 'path'],\n      where: { id: { $in: ids } },\n    });\n\n    /**\n     * All-or-nothing: any id that does not resolve to a folder rejects the whole call, before\n     * anything is deleted.\n     *\n     * Folder ids and asset ids are indistinguishable integers, so a list mixing the two is the\n     * mistake this tool exists to catch — and deleting the folders that did match while\n     * reporting the rest back would be exactly the silent confusion that requirement forbids,\n     * with the cascade already gone by the time the agent reads the response.\n     *\n     * An unresolvable id cannot be diagnosed further from here (an asset id and a deleted\n     * folder id look identical), and it does not need to be: either way it is unusable.\n     *\n     * The dry run rejects on the same rule. A preview that reported a cascade for a request the\n     * executing call would refuse is worse than no preview — it is a confirmation an agent\n     * cannot act on.\n     */\n    const matchedIds = new Set(matched.map((folder) => folder.id));\n    const unresolvedIds = ids.filter((id) => matchedIds.has(id) === false);\n\n    if (unresolvedIds.length > 0) {\n      throw new errors.ValidationError(MCP_DELETE_FOLDER_UNRESOLVED_IDS(unresolvedIds));\n    }\n\n    const folders = matched.map((folder) => sanitizeMediaFolder(folder));\n\n    if (dryRun) {\n      const counts = await countCascade(\n        strapi,\n        matched.map((folder) => folder.path)\n      );\n\n      return ok({ dryRun: true, folders, ...counts });\n    }\n\n    const { totalFolderNumber, totalFileNumber } = await getFolderService(strapi).deleteByIds(\n      matched.map((folder) => folder.id)\n    );\n\n    return ok({\n      dryRun: false,\n      folders,\n      totalFolderNumber,\n      totalFileNumber,\n    });\n  };\n};\n"],"names":["findFolderById","strapi","id","withParent","db","query","FOLDER_MODEL_UID","findOne","select","where","populate","parent","readFolderForOutput","fallback","row","sanitizeMediaFolder","assertParentExists","undefined","exists","getFolderService","errors","ValidationError","MCP_PARENT_FOLDER_NOT_FOUND","assertNameAvailable","name","excludeId","filters","$ne","MCP_FOLDER_NAME_TAKEN","assertNotMovedIntoOwnSubtree","folder","destination","isFolderOrChild","MCP_FOLDER_MOVE_INTO_SELF","countCascade","paths","pathPredicate","field","$or","flatMap","path","$eq","$startsWith","totalFolderNumber","totalFileNumber","Promise","all","count","FILE_MODEL_UID","createMediaCreateFolderHandler","context","assertAmbientInstance","args","assertMediaPermission","ACTIONS","create","created","user","ok","data","createMediaRenameFolderHandler","update","NotFoundError","MCP_NOT_FOUND_FOLDER","parentId","renamed","createMediaMoveFolderHandler","moved","createMediaDeleteFolderHandler","ids","dryRun","matched","findMany","$in","matchedIds","Set","map","unresolvedIds","filter","has","length","MCP_DELETE_FOLDER_UNRESOLVED_IDS","folders","counts","deleteByIds"],"mappings":";;;;;;;;;;;AA4CA;;;;IAKA,MAAMA,iBAAiB,OACrBC,MAAAA,EACAC,IACA,EAAEC,UAAAA,GAAa,KAAK,EAA4B,GAAG,EAAE,GAErDF,OAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QACxCC,MAAAA,EAAQ;AAAC,YAAA,IAAA;AAAM,YAAA,MAAA;AAAQ,YAAA;AAAO,SAAA;QAC9BC,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;AACZ,QAAA,GAAIC,UAAAA,GAAa;YAAEO,QAAAA,EAAU;gBAAEC,MAAAA,EAAQ;oBAAEH,MAAAA,EAAQ;AAAC,wBAAA;AAAK;AAAC;AAAE;AAAE,SAAA,GAAI;AAClE,KAAA,CAAA;AAEF;;;;;;AAMC,IACD,MAAMI,mBAAAA,GAAsB,OAC1BX,MAAAA,EACAC,EAAAA,EACAW,QAAAA,GAAAA;IAEA,MAAMC,GAAAA,GAAM,MAAMb,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAC1DE,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;QACZQ,QAAAA,EAAU;YAAEC,MAAAA,EAAQ;gBAAEH,MAAAA,EAAQ;AAAC,oBAAA,IAAA;AAAM,oBAAA;AAAO;AAAC;AAAE;AACjD,KAAA,CAAA;;;AAIA,IAAA,OAAOO,kCAAoBD,GAAAA,IAAOD,QAAAA,CAAAA;AACpC,CAAA;AAEA;;;;IAKA,MAAMG,kBAAAA,GAAqB,OAAOf,MAAAA,EAAqBU,MAAAA,GAAAA;IACrD,IAAIA,MAAAA,KAAW,IAAA,IAAQA,MAAAA,KAAWM,SAAAA,EAAW;AAC3C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS,MAAMC,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAAC;QAAEhB,EAAAA,EAAIS;AAAO,KAAA,CAAA;AAElE,IAAA,IAAI,CAACO,MAAAA,EAAQ;QACX,MAAM,IAAIE,cAAAA,CAAOC,eAAe,CAACC,qCAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;AAMC,IACD,MAAMC,mBAAAA,GAAsB,OAC1BtB,MAAAA,EACAuB,MACAb,MAAAA,EACAc,SAAAA,GAAAA;AAEA,IAAA,MAAMC,OAAAA,GAAmC;AAAEF,QAAAA,IAAAA;AAAMb,QAAAA,MAAAA,EAAQA,MAAAA,IAAU;AAAK,KAAA;AAExE,IAAA,IAAIc,cAAcR,SAAAA,EAAW;AAC3BS,QAAAA,OAAAA,CAAQxB,EAAE,GAAG;YAAEyB,GAAAA,EAAKF;AAAU,SAAA;AAChC,IAAA;AAEA,IAAA,IAAI,MAAMN,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAACQ,OAAAA,CAAAA,EAAU;QAClD,MAAM,IAAIN,cAAAA,CAAOC,eAAe,CAACO,+BAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;AAKC,IACD,MAAMC,4BAAAA,GAA+B,OACnC5B,MAAAA,EACA6B,MAAAA,EACAnB,MAAAA,GAAAA;AAEA,IAAA,IAAIA,WAAW,IAAA,EAAM;AACnB,QAAA;AACF,IAAA;IAEA,MAAMoB,WAAAA,GAAc,MAAM/B,cAAAA,CAAeC,MAAAA,EAAQU,MAAAA,CAAAA;;AAGjD,IAAA,IAAIoB,gBAAgB,IAAA,EAAM;AACxB,QAAA;AACF,IAAA;IAEA,IAAIC,uBAAAA,CAAgBD,aAAaD,MAAAA,CAAAA,EAAS;QACxC,MAAM,IAAIV,cAAAA,CAAOC,eAAe,CAACY,mCAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;IAOA,MAAMC,YAAAA,GAAe,OAAOjC,MAAAA,EAAqBkC,KAAAA,GAAAA;IAC/C,MAAMC,aAAAA,GAAgB,CAACC,KAAAA,IAAmB;AACxCC,YAAAA,GAAAA,EAAKH,KAAAA,CAAMI,OAAO,CAAC,CAACC,IAAAA,GAAS;AAC3B,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEI,GAAAA,EAAKD;AAAK;AAAE,qBAAA;AACzB,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEK,WAAAA,EAAa,CAAA,EAAGF,IAAAA,CAAK,CAAC;AAAE;AAAE;AACxC,iBAAA;SACH,CAAA;AAEA,IAAA,MAAM,CAACG,iBAAAA,EAAmBC,eAAAA,CAAgB,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;AAC7D7C,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkByC,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,MAAA;AAAQ,SAAA,CAAA;AACvEnC,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAAC2C,0BAAAA,CAAAA,CAAgBD,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,YAAA;AAAc,SAAA;AAC5E,KAAA,CAAA;IAED,OAAO;AAAEO,QAAAA,iBAAAA;AAAmBC,QAAAA;AAAgB,KAAA;AAC9C,CAAA;AAEA;;;;;;;;;AASC,IACM,MAAMK,8BAAAA,GAAiC,CAC5ChD,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAE5B,IAAI,EAAEb,MAAAA,GAAS,IAAI,EAAE,GAAGyC,IAAAA;AAEhCC,QAAAA,iCAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,mBAAAA,CAAQC,MAAM,EAAEjD,4BAAAA,CAAAA;AAEvD,QAAA,MAAMU,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMY,mBAAAA,CAAoBtB,QAAQuB,IAAAA,EAAMb,MAAAA,CAAAA;AAExC,QAAA,MAAM6C,OAAAA,GAAU,MAAMrC,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQsD,MAAM,CAAC;AAAE/B,YAAAA,IAAAA;AAAMb,YAAAA;SAAO,EAAG;AAAE8C,YAAAA,IAAAA,EAAMP,QAAQO;AAAK,SAAA,CAAA;AAE7F,QAAA,OAAOC,QAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM/C,mBAAAA,CAAoBX,MAAAA,EAAQuD,OAAAA,CAAQtD,EAAE,EAAEsD,OAAAA;AAAS,SAAA,CAAA;AAC3E,IAAA,CAAA;AACF;AAEA;;;;;;;AAOC,IACM,MAAMI,8BAAAA,GAAiC,CAC5C3D,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAElD,EAAE,EAAEsB,IAAI,EAAE,GAAG4B,IAAAA;AAErBC,QAAAA,iCAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,mBAAAA,CAAQO,MAAM,EAAEvD,4BAAAA,CAAAA;AAEvD,QAAA,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,EAAI;YAAEC,UAAAA,EAAY;AAAK,SAAA,CAAA;AAEnE,QAAA,IAAI2B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,cAAAA,CAAO0C,aAAa,CAACC,8BAAAA,CAAAA;AACjC,QAAA;;;AAIA,QAAA,MAAMC,QAAAA,GAAWlC,MAAAA,CAAOnB,MAAM,EAAET,EAAAA,IAAM,IAAA;QAEtC,MAAMqB,mBAAAA,CAAoBtB,MAAAA,EAAQuB,IAAAA,EAAMwC,QAAAA,EAAU9D,EAAAA,CAAAA;;AAGlD,QAAA,MAAM+D,UAAU,MAAM9C,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ4D,MAAM,CAAC3D,EAAAA,EAAI;AAAEsB,YAAAA;SAAK,EAAG;AAAEiC,YAAAA,IAAAA,EAAMP,QAAQO;AAAK,SAAA,CAAA;AAEzF,QAAA,OAAOC,QAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM/C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAI+D,OAAAA,IAAW;AAAE,gBAAA,GAAGnC,MAAM;AAAEN,gBAAAA;AAAK,aAAA;AAAG,SAAA,CAAA;AAC1F,IAAA,CAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAM0C,4BAAAA,GAA+B,CAC1CjE,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAElD,EAAE,EAAES,MAAM,EAAE,GAAGyC,IAAAA;AAEvBC,QAAAA,iCAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,mBAAAA,CAAQO,MAAM,EAAEvD,4BAAAA,CAAAA;QAEvD,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,CAAAA;AAE5C,QAAA,IAAI4B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,cAAAA,CAAO0C,aAAa,CAACC,8BAAAA,CAAAA;AACjC,QAAA;AAEA,QAAA,MAAM/C,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMkB,4BAAAA,CAA6B5B,QAAQ6B,MAAAA,EAAQnB,MAAAA,CAAAA;;AAGnD,QAAA,MAAMY,mBAAAA,CAAoBtB,MAAAA,EAAQ6B,MAAAA,CAAON,IAAI,EAAEb,MAAAA,EAAQT,EAAAA,CAAAA;AAEvD,QAAA,MAAMiE,QAAQ,MAAMhD,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ4D,MAAM,CACjD3D,EAAAA,EACA;AAAEsB,YAAAA,IAAAA,EAAMM,OAAON,IAAI;AAAEb,YAAAA;SAAO,EAC5B;AAAE8C,YAAAA,IAAAA,EAAMP,QAAQO;AAAK,SAAA,CAAA;AAGvB,QAAA,OAAOC,QAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM/C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAIiE,KAAAA,IAASrC,MAAAA;AAAQ,SAAA,CAAA;AAC3E,IAAA,CAAA;AACF;AAEA;;;;;;;;;AASC,IACM,MAAMsC,8BAAAA,GAAiC,CAC5CnE,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEiB,GAAG,EAAEC,MAAAA,GAAS,IAAI,EAAE,GAAGlB,IAAAA;AAE/BC,QAAAA,iCAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,mBAAAA,CAAQO,MAAM,EAAEvD,4BAAAA,CAAAA;QAEvD,MAAMiE,OAAAA,GAAuB,MAAMtE,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkBkE,QAAQ,CAAC;YAC5EhE,MAAAA,EAAQ;AAAC,gBAAA,IAAA;AAAM,gBAAA,MAAA;AAAQ,gBAAA;AAAO,aAAA;YAC9BC,KAAAA,EAAO;gBAAEP,EAAAA,EAAI;oBAAEuE,GAAAA,EAAKJ;AAAI;AAAE;AAC5B,SAAA,CAAA;AAEA;;;;;;;;;;;;;;;QAgBA,MAAMK,UAAAA,GAAa,IAAIC,GAAAA,CAAIJ,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,MAAAA,GAAWA,MAAAA,CAAO5B,EAAE,CAAA,CAAA;QAC5D,MAAM2E,aAAAA,GAAgBR,IAAIS,MAAM,CAAC,CAAC5E,EAAAA,GAAOwE,UAAAA,CAAWK,GAAG,CAAC7E,EAAAA,CAAAA,KAAQ,KAAA,CAAA;QAEhE,IAAI2E,aAAAA,CAAcG,MAAM,GAAG,CAAA,EAAG;AAC5B,YAAA,MAAM,IAAI5D,cAAAA,CAAOC,eAAe,CAAC4D,0CAAAA,CAAiCJ,aAAAA,CAAAA,CAAAA;AACpE,QAAA;AAEA,QAAA,MAAMK,UAAUX,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,SAAWf,iCAAAA,CAAoBe,MAAAA,CAAAA,CAAAA;AAE5D,QAAA,IAAIwC,MAAAA,EAAQ;YACV,MAAMa,MAAAA,GAAS,MAAMjD,YAAAA,CACnBjC,MAAAA,EACAsE,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,MAAAA,GAAWA,MAAAA,CAAOU,IAAI,CAAA,CAAA;AAGrC,YAAA,OAAOkB,QAAAA,CAAG;gBAAEY,MAAAA,EAAQ,IAAA;AAAMY,gBAAAA,OAAAA;AAAS,gBAAA,GAAGC;AAAO,aAAA,CAAA;AAC/C,QAAA;AAEA,QAAA,MAAM,EAAExC,iBAAiB,EAAEC,eAAe,EAAE,GAAG,MAAMzB,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQmF,WAAW,CACvFb,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,MAAAA,GAAWA,OAAO5B,EAAE,CAAA,CAAA;AAGnC,QAAA,OAAOwD,QAAAA,CAAG;YACRY,MAAAA,EAAQ,KAAA;AACRY,YAAAA,OAAAA;AACAvC,YAAAA,iBAAAA;AACAC,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;AACF;;;;;;;"}
+{"version":3,"file":"folder-handlers.js","sources":["../../../../server/src/mcp/handlers/folder-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { getFolderService } from '../ambient-instance';\nimport { ACTIONS, FOLDER_MODEL_UID, FILE_MODEL_UID } from '../../constants';\nimport { isFolderOrChild } from '../../controllers/utils/folders';\nimport { assertMediaPermission } from '../permissions';\nimport { sanitizeMediaFolder } from '../sanitizers/sanitize-media';\nimport {\n  MCP_NOT_FOUND_FOLDER,\n  MCP_FOLDER_NAME_TAKEN,\n  MCP_PARENT_FOLDER_NOT_FOUND,\n  MCP_FOLDER_MOVE_INTO_SELF,\n  MCP_DELETE_FOLDER_UNRESOLVED_IDS,\n} from './constants';\nimport { ok } from '../utils';\n\nimport type { Folder } from '../../types';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's strict Zod\n// input schema before the handler runs, so unknown keys never reach here.\ntype CreateFolderArgs = {\n  name: string;\n  parent?: number | null;\n};\n\ntype RenameFolderArgs = {\n  id: number;\n  name: string;\n};\n\ntype MoveFolderArgs = {\n  id: number;\n  parent: number | null;\n};\n\ntype DeleteFolderArgs = {\n  ids: number[];\n  dryRun?: boolean;\n};\n\n/** The folder fields the handlers need; `path` drives the cascade and subtree checks. */\ntype FolderRow = Pick<Folder, 'id' | 'name' | 'path'>;\n\n/**\n * `withParent` populates the parent relation in the same round trip. Rename needs the parent id\n * to scope its sibling-uniqueness check, so it would otherwise read the same row twice; the\n * subtree and cascade callers do not, and skip the join.\n */\nconst findFolderById = async (\n  strapi: Core.Strapi,\n  id: number,\n  { withParent = false }: { withParent?: boolean } = {}\n): Promise<(FolderRow & { parent?: { id: number } | null }) | null> =>\n  strapi.db.query(FOLDER_MODEL_UID).findOne({\n    select: ['id', 'name', 'path'],\n    where: { id },\n    ...(withParent ? { populate: { parent: { select: ['id'] } } } : {}),\n  });\n\n/**\n * Re-reads a folder with its parent populated, so the write tools can echo back the same shape\n * regardless of what the service returned.\n *\n * `folder.update()` resolves the row it wrote without the `parent` relation, and on a pure rename\n * it never touches the join table at all — so the parent has to be read back to be reported.\n */\nconst readFolderForOutput = async (\n  strapi: Core.Strapi,\n  id: number,\n  fallback: Record<string, unknown>\n) => {\n  const row = await strapi.db.query(FOLDER_MODEL_UID).findOne({\n    where: { id },\n    populate: { parent: { select: ['id', 'name'] } },\n  });\n\n  // The write succeeded, so report it even if the read-back comes back empty rather than\n  // failing a completed operation on a follow-up query.\n  return sanitizeMediaFolder(row ?? fallback);\n};\n\n/**\n * Replicates the admin folder controller's `parent` check: a named parent must exist.\n *\n * null is the media library root and always valid, so only a numeric id is looked up.\n */\nconst assertParentExists = async (strapi: Core.Strapi, parent: number | null | undefined) => {\n  if (parent === null || parent === undefined) {\n    return;\n  }\n\n  const exists = await getFolderService(strapi).exists({ id: parent });\n\n  if (!exists) {\n    throw new errors.ValidationError(MCP_PARENT_FOLDER_NOT_FOUND);\n  }\n};\n\n/**\n * Replicates `is-folder-unique` from the admin folder validation: a folder name must be unique\n * among its siblings.\n *\n * `excludeId` is the folder being renamed — without it a rename to the folder's current name\n * would collide with itself.\n */\nconst assertNameAvailable = async (\n  strapi: Core.Strapi,\n  name: string,\n  parent: number | null,\n  excludeId?: number\n) => {\n  const filters: Record<string, unknown> = { name, parent: parent ?? null };\n\n  if (excludeId !== undefined) {\n    filters.id = { $ne: excludeId };\n  }\n\n  if (await getFolderService(strapi).exists(filters)) {\n    throw new errors.ValidationError(MCP_FOLDER_NAME_TAKEN);\n  }\n};\n\n/**\n * Replicates `dont-move-inside-self`: a folder cannot become its own descendant.\n *\n * Without this the folder service would rewrite the subtree's materialized paths into a cycle,\n * orphaning every descendant — the tree has no root to walk back to afterwards.\n */\nconst assertNotMovedIntoOwnSubtree = async (\n  strapi: Core.Strapi,\n  folder: FolderRow,\n  parent: number | null\n) => {\n  if (parent === null) {\n    return;\n  }\n\n  const destination = await findFolderById(strapi, parent);\n\n  // A missing destination is already reported by `assertParentExists`.\n  if (destination === null) {\n    return;\n  }\n\n  if (isFolderOrChild(destination, folder)) {\n    throw new errors.ValidationError(MCP_FOLDER_MOVE_INTO_SELF);\n  }\n};\n\n/**\n * Counts the folders and files a `deleteByIds` of these paths would remove.\n *\n * Mirrors the two `$or` predicates in `folder.deleteByIds` exactly — self path plus the\n * `${path}/` prefix — so the dry-run number is the same set the destructive branch acts on\n * rather than an independent estimate that could drift from it.\n */\nconst countCascade = async (strapi: Core.Strapi, paths: string[]) => {\n  const pathPredicate = (field: string) => ({\n    $or: paths.flatMap((path) => [\n      { [field]: { $eq: path } },\n      { [field]: { $startsWith: `${path}/` } },\n    ]),\n  });\n\n  const [totalFolderNumber, totalFileNumber] = await Promise.all([\n    strapi.db.query(FOLDER_MODEL_UID).count({ where: pathPredicate('path') }),\n    strapi.db.query(FILE_MODEL_UID).count({ where: pathPredicate('folderPath') }),\n  ]);\n\n  return { totalFolderNumber, totalFileNumber };\n};\n\n/**\n * `media_create_folder` — a new folder, optionally nested.\n *\n * Gated on `plugin::upload.assets.create` and mirrors `POST /upload/folders`: the same\n * permission, the same uniqueness and parent-existence validation, the same `folder.create()`\n * call, and the same `createdBy` attribution from the session user.\n *\n * `create` rather than the `update` the other folder tools use: creating a folder is the one\n * folder operation whose admin route gates on `assets.create`.\n */\nexport const createMediaCreateFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { name, parent = null } = args as CreateFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.create, FOLDER_MODEL_UID);\n\n    await assertParentExists(strapi, parent);\n    await assertNameAvailable(strapi, name, parent);\n\n    const created = await getFolderService(strapi).create({ name, parent }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, created.id, created) });\n  };\n\n/**\n * `media_rename_folder` — changes a folder's name and nothing else.\n *\n * Deliberately does not forward `parent` to `folder.update()`: the service branches on\n * `isUndefined(parent)`, and the name-only branch skips the transaction that rewrites descendant\n * paths. Passing the folder's existing parent would take the move branch and rewrite the whole\n * subtree to compute the identical paths.\n */\nexport const createMediaRenameFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, name } = args as RenameFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id, { withParent: true });\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    // Siblings are the folders sharing this folder's parent, so uniqueness is checked against\n    // the current location — a rename never changes it.\n    const parentId = folder.parent?.id ?? null;\n\n    await assertNameAvailable(strapi, name, parentId, id);\n\n    // `parent` is omitted on purpose — see the note above.\n    const renamed = await getFolderService(strapi).update(id, { name }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, id, renamed ?? { ...folder, name }) });\n  };\n\n/**\n * `media_move_folder` — re-parents a folder, carrying its whole subtree with it.\n *\n * `folder.update()` recalculates the materialized `path` of every descendant folder and the\n * `folderPath` of every contained file inside a transaction, so the move is atomic and no\n * separate bookkeeping is needed here.\n */\nexport const createMediaMoveFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, parent } = args as MoveFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id);\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    await assertParentExists(strapi, parent);\n    await assertNotMovedIntoOwnSubtree(strapi, folder, parent);\n\n    // A folder keeps its name across a move, so uniqueness must hold in the destination.\n    await assertNameAvailable(strapi, folder.name, parent, id);\n\n    const moved = await getFolderService(strapi).update(\n      id,\n      { name: folder.name, parent },\n      { user: context.user }\n    );\n\n    return ok({ data: await readFolderForOutput(strapi, id, moved ?? folder) });\n  };\n\n/**\n * `media_delete_folder` — previews or performs a cascading folder deletion.\n *\n * Two branches behind one tool, because the preview and the deletion must agree on what the\n * cascade covers; splitting them across tools would let the two drift apart, and an agent could\n * reach the destructive one without ever seeing a count.\n *\n * `dryRun` defaults to true (see the input schema): omitting the flag previews, and deleting\n * takes an explicit `dryRun: false`.\n */\nexport const createMediaDeleteFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { ids, dryRun = true } = args as DeleteFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const matched: FolderRow[] = await strapi.db.query(FOLDER_MODEL_UID).findMany({\n      select: ['id', 'name', 'path'],\n      where: { id: { $in: ids } },\n    });\n\n    /**\n     * All-or-nothing: any id that does not resolve to a folder rejects the whole call, before\n     * anything is deleted.\n     *\n     * Folder ids and asset ids are indistinguishable integers, so a list mixing the two is the\n     * mistake this tool exists to catch — and deleting the folders that did match while\n     * reporting the rest back would be exactly the silent confusion that requirement forbids,\n     * with the cascade already gone by the time the agent reads the response.\n     *\n     * An unresolvable id cannot be diagnosed further from here (an asset id and a deleted\n     * folder id look identical), and it does not need to be: either way it is unusable.\n     *\n     * The dry run rejects on the same rule. A preview that reported a cascade for a request the\n     * executing call would refuse is worse than no preview — it is a confirmation an agent\n     * cannot act on.\n     */\n    const matchedIds = new Set(matched.map((folder) => folder.id));\n    const unresolvedIds = ids.filter((id) => matchedIds.has(id) === false);\n\n    if (unresolvedIds.length > 0) {\n      throw new errors.ValidationError(MCP_DELETE_FOLDER_UNRESOLVED_IDS(unresolvedIds));\n    }\n\n    const folders = matched.map((folder) => sanitizeMediaFolder(folder));\n\n    if (dryRun) {\n      const counts = await countCascade(\n        strapi,\n        matched.map((folder) => folder.path)\n      );\n\n      return ok({ dryRun: true, folders, ...counts });\n    }\n\n    const { totalFolderNumber, totalFileNumber } = await getFolderService(strapi).deleteByIds(\n      matched.map((folder) => folder.id)\n    );\n\n    return ok({\n      dryRun: false,\n      folders,\n      totalFolderNumber,\n      totalFileNumber,\n    });\n  };\n"],"names":["findFolderById","strapi","id","withParent","db","query","FOLDER_MODEL_UID","findOne","select","where","populate","parent","readFolderForOutput","fallback","row","sanitizeMediaFolder","assertParentExists","undefined","exists","getFolderService","errors","ValidationError","MCP_PARENT_FOLDER_NOT_FOUND","assertNameAvailable","name","excludeId","filters","$ne","MCP_FOLDER_NAME_TAKEN","assertNotMovedIntoOwnSubtree","folder","destination","isFolderOrChild","MCP_FOLDER_MOVE_INTO_SELF","countCascade","paths","pathPredicate","field","$or","flatMap","path","$eq","$startsWith","totalFolderNumber","totalFileNumber","Promise","all","count","FILE_MODEL_UID","createMediaCreateFolderHandler","context","args","assertMediaPermission","ACTIONS","create","created","user","ok","data","createMediaRenameFolderHandler","update","NotFoundError","MCP_NOT_FOUND_FOLDER","parentId","renamed","createMediaMoveFolderHandler","moved","createMediaDeleteFolderHandler","ids","dryRun","matched","findMany","$in","matchedIds","Set","map","unresolvedIds","filter","has","length","MCP_DELETE_FOLDER_UNRESOLVED_IDS","folders","counts","deleteByIds"],"mappings":";;;;;;;;;;;AA4CA;;;;IAKA,MAAMA,iBAAiB,OACrBC,MAAAA,EACAC,IACA,EAAEC,UAAAA,GAAa,KAAK,EAA4B,GAAG,EAAE,GAErDF,OAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QACxCC,MAAAA,EAAQ;AAAC,YAAA,IAAA;AAAM,YAAA,MAAA;AAAQ,YAAA;AAAO,SAAA;QAC9BC,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;AACZ,QAAA,GAAIC,UAAAA,GAAa;YAAEO,QAAAA,EAAU;gBAAEC,MAAAA,EAAQ;oBAAEH,MAAAA,EAAQ;AAAC,wBAAA;AAAK;AAAC;AAAE;AAAE,SAAA,GAAI;AAClE,KAAA,CAAA;AAEF;;;;;;AAMC,IACD,MAAMI,mBAAAA,GAAsB,OAC1BX,MAAAA,EACAC,EAAAA,EACAW,QAAAA,GAAAA;IAEA,MAAMC,GAAAA,GAAM,MAAMb,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAC1DE,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;QACZQ,QAAAA,EAAU;YAAEC,MAAAA,EAAQ;gBAAEH,MAAAA,EAAQ;AAAC,oBAAA,IAAA;AAAM,oBAAA;AAAO;AAAC;AAAE;AACjD,KAAA,CAAA;;;AAIA,IAAA,OAAOO,kCAAoBD,GAAAA,IAAOD,QAAAA,CAAAA;AACpC,CAAA;AAEA;;;;IAKA,MAAMG,kBAAAA,GAAqB,OAAOf,MAAAA,EAAqBU,MAAAA,GAAAA;IACrD,IAAIA,MAAAA,KAAW,IAAA,IAAQA,MAAAA,KAAWM,SAAAA,EAAW;AAC3C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS,MAAMC,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAAC;QAAEhB,EAAAA,EAAIS;AAAO,KAAA,CAAA;AAElE,IAAA,IAAI,CAACO,MAAAA,EAAQ;QACX,MAAM,IAAIE,cAAAA,CAAOC,eAAe,CAACC,qCAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;AAMC,IACD,MAAMC,mBAAAA,GAAsB,OAC1BtB,MAAAA,EACAuB,MACAb,MAAAA,EACAc,SAAAA,GAAAA;AAEA,IAAA,MAAMC,OAAAA,GAAmC;AAAEF,QAAAA,IAAAA;AAAMb,QAAAA,MAAAA,EAAQA,MAAAA,IAAU;AAAK,KAAA;AAExE,IAAA,IAAIc,cAAcR,SAAAA,EAAW;AAC3BS,QAAAA,OAAAA,CAAQxB,EAAE,GAAG;YAAEyB,GAAAA,EAAKF;AAAU,SAAA;AAChC,IAAA;AAEA,IAAA,IAAI,MAAMN,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAACQ,OAAAA,CAAAA,EAAU;QAClD,MAAM,IAAIN,cAAAA,CAAOC,eAAe,CAACO,+BAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;AAKC,IACD,MAAMC,4BAAAA,GAA+B,OACnC5B,MAAAA,EACA6B,MAAAA,EACAnB,MAAAA,GAAAA;AAEA,IAAA,IAAIA,WAAW,IAAA,EAAM;AACnB,QAAA;AACF,IAAA;IAEA,MAAMoB,WAAAA,GAAc,MAAM/B,cAAAA,CAAeC,MAAAA,EAAQU,MAAAA,CAAAA;;AAGjD,IAAA,IAAIoB,gBAAgB,IAAA,EAAM;AACxB,QAAA;AACF,IAAA;IAEA,IAAIC,uBAAAA,CAAgBD,aAAaD,MAAAA,CAAAA,EAAS;QACxC,MAAM,IAAIV,cAAAA,CAAOC,eAAe,CAACY,mCAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;IAOA,MAAMC,YAAAA,GAAe,OAAOjC,MAAAA,EAAqBkC,KAAAA,GAAAA;IAC/C,MAAMC,aAAAA,GAAgB,CAACC,KAAAA,IAAmB;AACxCC,YAAAA,GAAAA,EAAKH,KAAAA,CAAMI,OAAO,CAAC,CAACC,IAAAA,GAAS;AAC3B,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEI,GAAAA,EAAKD;AAAK;AAAE,qBAAA;AACzB,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEK,WAAAA,EAAa,CAAA,EAAGF,IAAAA,CAAK,CAAC;AAAE;AAAE;AACxC,iBAAA;SACH,CAAA;AAEA,IAAA,MAAM,CAACG,iBAAAA,EAAmBC,eAAAA,CAAgB,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;AAC7D7C,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkByC,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,MAAA;AAAQ,SAAA,CAAA;AACvEnC,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAAC2C,0BAAAA,CAAAA,CAAgBD,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,YAAA;AAAc,SAAA;AAC5E,KAAA,CAAA;IAED,OAAO;AAAEO,QAAAA,iBAAAA;AAAmBC,QAAAA;AAAgB,KAAA;AAC9C,CAAA;AAEA;;;;;;;;;UAUaK,8BAAAA,GACX,CAAChD,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAE3B,IAAI,EAAEb,MAAAA,GAAS,IAAI,EAAE,GAAGwC,IAAAA;AAEhCC,QAAAA,iCAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,mBAAAA,CAAQC,MAAM,EAAEhD,4BAAAA,CAAAA;AAEvD,QAAA,MAAMU,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMY,mBAAAA,CAAoBtB,QAAQuB,IAAAA,EAAMb,MAAAA,CAAAA;AAExC,QAAA,MAAM4C,OAAAA,GAAU,MAAMpC,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQqD,MAAM,CAAC;AAAE9B,YAAAA,IAAAA;AAAMb,YAAAA;SAAO,EAAG;AAAE6C,YAAAA,IAAAA,EAAMN,QAAQM;AAAK,SAAA,CAAA;AAE7F,QAAA,OAAOC,QAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM9C,mBAAAA,CAAoBX,MAAAA,EAAQsD,OAAAA,CAAQrD,EAAE,EAAEqD,OAAAA;AAAS,SAAA,CAAA;IAC3E;AAEF;;;;;;;UAQaI,8BAAAA,GACX,CAAC1D,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEjD,EAAE,EAAEsB,IAAI,EAAE,GAAG2B,IAAAA;AAErBC,QAAAA,iCAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,mBAAAA,CAAQO,MAAM,EAAEtD,4BAAAA,CAAAA;AAEvD,QAAA,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,EAAI;YAAEC,UAAAA,EAAY;AAAK,SAAA,CAAA;AAEnE,QAAA,IAAI2B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,cAAAA,CAAOyC,aAAa,CAACC,8BAAAA,CAAAA;AACjC,QAAA;;;AAIA,QAAA,MAAMC,QAAAA,GAAWjC,MAAAA,CAAOnB,MAAM,EAAET,EAAAA,IAAM,IAAA;QAEtC,MAAMqB,mBAAAA,CAAoBtB,MAAAA,EAAQuB,IAAAA,EAAMuC,QAAAA,EAAU7D,EAAAA,CAAAA;;AAGlD,QAAA,MAAM8D,UAAU,MAAM7C,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ2D,MAAM,CAAC1D,EAAAA,EAAI;AAAEsB,YAAAA;SAAK,EAAG;AAAEgC,YAAAA,IAAAA,EAAMN,QAAQM;AAAK,SAAA,CAAA;AAEzF,QAAA,OAAOC,QAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM9C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAI8D,OAAAA,IAAW;AAAE,gBAAA,GAAGlC,MAAM;AAAEN,gBAAAA;AAAK,aAAA;AAAG,SAAA,CAAA;IAC1F;AAEF;;;;;;UAOayC,4BAAAA,GACX,CAAChE,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEjD,EAAE,EAAES,MAAM,EAAE,GAAGwC,IAAAA;AAEvBC,QAAAA,iCAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,mBAAAA,CAAQO,MAAM,EAAEtD,4BAAAA,CAAAA;QAEvD,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,CAAAA;AAE5C,QAAA,IAAI4B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,cAAAA,CAAOyC,aAAa,CAACC,8BAAAA,CAAAA;AACjC,QAAA;AAEA,QAAA,MAAM9C,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMkB,4BAAAA,CAA6B5B,QAAQ6B,MAAAA,EAAQnB,MAAAA,CAAAA;;AAGnD,QAAA,MAAMY,mBAAAA,CAAoBtB,MAAAA,EAAQ6B,MAAAA,CAAON,IAAI,EAAEb,MAAAA,EAAQT,EAAAA,CAAAA;AAEvD,QAAA,MAAMgE,QAAQ,MAAM/C,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ2D,MAAM,CACjD1D,EAAAA,EACA;AAAEsB,YAAAA,IAAAA,EAAMM,OAAON,IAAI;AAAEb,YAAAA;SAAO,EAC5B;AAAE6C,YAAAA,IAAAA,EAAMN,QAAQM;AAAK,SAAA,CAAA;AAGvB,QAAA,OAAOC,QAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM9C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAIgE,KAAAA,IAASpC,MAAAA;AAAQ,SAAA,CAAA;IAC3E;AAEF;;;;;;;;;UAUaqC,8BAAAA,GACX,CAAClE,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEiB,GAAG,EAAEC,MAAAA,GAAS,IAAI,EAAE,GAAGlB,IAAAA;AAE/BC,QAAAA,iCAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,mBAAAA,CAAQO,MAAM,EAAEtD,4BAAAA,CAAAA;QAEvD,MAAMgE,OAAAA,GAAuB,MAAMrE,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,4BAAAA,CAAAA,CAAkBiE,QAAQ,CAAC;YAC5E/D,MAAAA,EAAQ;AAAC,gBAAA,IAAA;AAAM,gBAAA,MAAA;AAAQ,gBAAA;AAAO,aAAA;YAC9BC,KAAAA,EAAO;gBAAEP,EAAAA,EAAI;oBAAEsE,GAAAA,EAAKJ;AAAI;AAAE;AAC5B,SAAA,CAAA;AAEA;;;;;;;;;;;;;;;QAgBA,MAAMK,UAAAA,GAAa,IAAIC,GAAAA,CAAIJ,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,MAAAA,GAAWA,MAAAA,CAAO5B,EAAE,CAAA,CAAA;QAC5D,MAAM0E,aAAAA,GAAgBR,IAAIS,MAAM,CAAC,CAAC3E,EAAAA,GAAOuE,UAAAA,CAAWK,GAAG,CAAC5E,EAAAA,CAAAA,KAAQ,KAAA,CAAA;QAEhE,IAAI0E,aAAAA,CAAcG,MAAM,GAAG,CAAA,EAAG;AAC5B,YAAA,MAAM,IAAI3D,cAAAA,CAAOC,eAAe,CAAC2D,0CAAAA,CAAiCJ,aAAAA,CAAAA,CAAAA;AACpE,QAAA;AAEA,QAAA,MAAMK,UAAUX,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,SAAWf,iCAAAA,CAAoBe,MAAAA,CAAAA,CAAAA;AAE5D,QAAA,IAAIuC,MAAAA,EAAQ;YACV,MAAMa,MAAAA,GAAS,MAAMhD,YAAAA,CACnBjC,MAAAA,EACAqE,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,MAAAA,GAAWA,MAAAA,CAAOU,IAAI,CAAA,CAAA;AAGrC,YAAA,OAAOiB,QAAAA,CAAG;gBAAEY,MAAAA,EAAQ,IAAA;AAAMY,gBAAAA,OAAAA;AAAS,gBAAA,GAAGC;AAAO,aAAA,CAAA;AAC/C,QAAA;AAEA,QAAA,MAAM,EAAEvC,iBAAiB,EAAEC,eAAe,EAAE,GAAG,MAAMzB,gCAAAA,CAAiBlB,MAAAA,CAAAA,CAAQkF,WAAW,CACvFb,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,MAAAA,GAAWA,OAAO5B,EAAE,CAAA,CAAA;AAGnC,QAAA,OAAOuD,QAAAA,CAAG;YACRY,MAAAA,EAAQ,KAAA;AACRY,YAAAA,OAAAA;AACAtC,YAAAA,iBAAAA;AACAC,YAAAA;AACF,SAAA,CAAA;IACF;;;;;;;"}

package/dist/server/mcp/handlers/folder-handlers.mjs

@@ -1,5 +1,5 @@
 import { errors } from '@strapi/utils';
-import { assertAmbientInstance, getFolderService } from '../ambient-instance.mjs';
+import { getFolderService } from '../ambient-instance.mjs';
 import { FOLDER_MODEL_UID, FILE_MODEL_UID, ACTIONS } from '../../constants.mjs';
 import { isFolderOrChild } from '../../controllers/utils/folders.mjs';
 import { assertMediaPermission } from '../permissions.mjs';
@@ -150,9 +150,7 @@ import { ok } from '../utils.mjs';
  *
  * `create` rather than the `update` the other folder tools use: creating a folder is the one
  * folder operation whose admin route gates on `assets.create`.
- */ const createMediaCreateFolderHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaCreateFolderHandler = (strapi, context)=>async ({ args })=>{
         const { name, parent = null } = args;
         assertMediaPermission(strapi, context, ACTIONS.create, FOLDER_MODEL_UID);
         await assertParentExists(strapi, parent);
@@ -167,7 +165,6 @@ import { ok } from '../utils.mjs';
             data: await readFolderForOutput(strapi, created.id, created)
         });
     };
-};
 /**
  * `media_rename_folder` — changes a folder's name and nothing else.
  *
@@ -175,9 +172,7 @@ import { ok } from '../utils.mjs';
  * `isUndefined(parent)`, and the name-only branch skips the transaction that rewrites descendant
  * paths. Passing the folder's existing parent would take the move branch and rewrite the whole
  * subtree to compute the identical paths.
- */ const createMediaRenameFolderHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaRenameFolderHandler = (strapi, context)=>async ({ args })=>{
         const { id, name } = args;
         assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);
         const folder = await findFolderById(strapi, id, {
@@ -203,16 +198,13 @@ import { ok } from '../utils.mjs';
             })
         });
     };
-};
 /**
  * `media_move_folder` — re-parents a folder, carrying its whole subtree with it.
  *
  * `folder.update()` recalculates the materialized `path` of every descendant folder and the
  * `folderPath` of every contained file inside a transaction, so the move is atomic and no
  * separate bookkeeping is needed here.
- */ const createMediaMoveFolderHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaMoveFolderHandler = (strapi, context)=>async ({ args })=>{
         const { id, parent } = args;
         assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);
         const folder = await findFolderById(strapi, id);
@@ -233,7 +225,6 @@ import { ok } from '../utils.mjs';
             data: await readFolderForOutput(strapi, id, moved ?? folder)
         });
     };
-};
 /**
  * `media_delete_folder` — previews or performs a cascading folder deletion.
  *
@@ -243,9 +234,7 @@ import { ok } from '../utils.mjs';
  *
  * `dryRun` defaults to true (see the input schema): omitting the flag previews, and deleting
  * takes an explicit `dryRun: false`.
- */ const createMediaDeleteFolderHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaDeleteFolderHandler = (strapi, context)=>async ({ args })=>{
         const { ids, dryRun = true } = args;
         assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);
         const matched = await strapi.db.query(FOLDER_MODEL_UID).findMany({
@@ -297,7 +286,6 @@ import { ok } from '../utils.mjs';
             totalFileNumber
         });
     };
-};
 
 export { createMediaCreateFolderHandler, createMediaDeleteFolderHandler, createMediaMoveFolderHandler, createMediaRenameFolderHandler };
 //# sourceMappingURL=folder-handlers.mjs.map

package/dist/server/mcp/handlers/folder-handlers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"folder-handlers.mjs","sources":["../../../../server/src/mcp/handlers/folder-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { assertAmbientInstance, getFolderService } from '../ambient-instance';\nimport { ACTIONS, FOLDER_MODEL_UID, FILE_MODEL_UID } from '../../constants';\nimport { isFolderOrChild } from '../../controllers/utils/folders';\nimport { assertMediaPermission } from '../permissions';\nimport { sanitizeMediaFolder } from '../sanitizers/sanitize-media';\nimport {\n  MCP_NOT_FOUND_FOLDER,\n  MCP_FOLDER_NAME_TAKEN,\n  MCP_PARENT_FOLDER_NOT_FOUND,\n  MCP_FOLDER_MOVE_INTO_SELF,\n  MCP_DELETE_FOLDER_UNRESOLVED_IDS,\n} from './constants';\nimport { ok } from '../utils';\n\nimport type { Folder } from '../../types';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's strict Zod\n// input schema before the handler runs, so unknown keys never reach here.\ntype CreateFolderArgs = {\n  name: string;\n  parent?: number | null;\n};\n\ntype RenameFolderArgs = {\n  id: number;\n  name: string;\n};\n\ntype MoveFolderArgs = {\n  id: number;\n  parent: number | null;\n};\n\ntype DeleteFolderArgs = {\n  ids: number[];\n  dryRun?: boolean;\n};\n\n/** The folder fields the handlers need; `path` drives the cascade and subtree checks. */\ntype FolderRow = Pick<Folder, 'id' | 'name' | 'path'>;\n\n/**\n * `withParent` populates the parent relation in the same round trip. Rename needs the parent id\n * to scope its sibling-uniqueness check, so it would otherwise read the same row twice; the\n * subtree and cascade callers do not, and skip the join.\n */\nconst findFolderById = async (\n  strapi: Core.Strapi,\n  id: number,\n  { withParent = false }: { withParent?: boolean } = {}\n): Promise<(FolderRow & { parent?: { id: number } | null }) | null> =>\n  strapi.db.query(FOLDER_MODEL_UID).findOne({\n    select: ['id', 'name', 'path'],\n    where: { id },\n    ...(withParent ? { populate: { parent: { select: ['id'] } } } : {}),\n  });\n\n/**\n * Re-reads a folder with its parent populated, so the write tools can echo back the same shape\n * regardless of what the service returned.\n *\n * `folder.update()` resolves the row it wrote without the `parent` relation, and on a pure rename\n * it never touches the join table at all — so the parent has to be read back to be reported.\n */\nconst readFolderForOutput = async (\n  strapi: Core.Strapi,\n  id: number,\n  fallback: Record<string, unknown>\n) => {\n  const row = await strapi.db.query(FOLDER_MODEL_UID).findOne({\n    where: { id },\n    populate: { parent: { select: ['id', 'name'] } },\n  });\n\n  // The write succeeded, so report it even if the read-back comes back empty rather than\n  // failing a completed operation on a follow-up query.\n  return sanitizeMediaFolder(row ?? fallback);\n};\n\n/**\n * Replicates the admin folder controller's `parent` check: a named parent must exist.\n *\n * null is the media library root and always valid, so only a numeric id is looked up.\n */\nconst assertParentExists = async (strapi: Core.Strapi, parent: number | null | undefined) => {\n  if (parent === null || parent === undefined) {\n    return;\n  }\n\n  const exists = await getFolderService(strapi).exists({ id: parent });\n\n  if (!exists) {\n    throw new errors.ValidationError(MCP_PARENT_FOLDER_NOT_FOUND);\n  }\n};\n\n/**\n * Replicates `is-folder-unique` from the admin folder validation: a folder name must be unique\n * among its siblings.\n *\n * `excludeId` is the folder being renamed — without it a rename to the folder's current name\n * would collide with itself.\n */\nconst assertNameAvailable = async (\n  strapi: Core.Strapi,\n  name: string,\n  parent: number | null,\n  excludeId?: number\n) => {\n  const filters: Record<string, unknown> = { name, parent: parent ?? null };\n\n  if (excludeId !== undefined) {\n    filters.id = { $ne: excludeId };\n  }\n\n  if (await getFolderService(strapi).exists(filters)) {\n    throw new errors.ValidationError(MCP_FOLDER_NAME_TAKEN);\n  }\n};\n\n/**\n * Replicates `dont-move-inside-self`: a folder cannot become its own descendant.\n *\n * Without this the folder service would rewrite the subtree's materialized paths into a cycle,\n * orphaning every descendant — the tree has no root to walk back to afterwards.\n */\nconst assertNotMovedIntoOwnSubtree = async (\n  strapi: Core.Strapi,\n  folder: FolderRow,\n  parent: number | null\n) => {\n  if (parent === null) {\n    return;\n  }\n\n  const destination = await findFolderById(strapi, parent);\n\n  // A missing destination is already reported by `assertParentExists`.\n  if (destination === null) {\n    return;\n  }\n\n  if (isFolderOrChild(destination, folder)) {\n    throw new errors.ValidationError(MCP_FOLDER_MOVE_INTO_SELF);\n  }\n};\n\n/**\n * Counts the folders and files a `deleteByIds` of these paths would remove.\n *\n * Mirrors the two `$or` predicates in `folder.deleteByIds` exactly — self path plus the\n * `${path}/` prefix — so the dry-run number is the same set the destructive branch acts on\n * rather than an independent estimate that could drift from it.\n */\nconst countCascade = async (strapi: Core.Strapi, paths: string[]) => {\n  const pathPredicate = (field: string) => ({\n    $or: paths.flatMap((path) => [\n      { [field]: { $eq: path } },\n      { [field]: { $startsWith: `${path}/` } },\n    ]),\n  });\n\n  const [totalFolderNumber, totalFileNumber] = await Promise.all([\n    strapi.db.query(FOLDER_MODEL_UID).count({ where: pathPredicate('path') }),\n    strapi.db.query(FILE_MODEL_UID).count({ where: pathPredicate('folderPath') }),\n  ]);\n\n  return { totalFolderNumber, totalFileNumber };\n};\n\n/**\n * `media_create_folder` — a new folder, optionally nested.\n *\n * Gated on `plugin::upload.assets.create` and mirrors `POST /upload/folders`: the same\n * permission, the same uniqueness and parent-existence validation, the same `folder.create()`\n * call, and the same `createdBy` attribution from the session user.\n *\n * `create` rather than the `update` the other folder tools use: creating a folder is the one\n * folder operation whose admin route gates on `assets.create`.\n */\nexport const createMediaCreateFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { name, parent = null } = args as CreateFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.create, FOLDER_MODEL_UID);\n\n    await assertParentExists(strapi, parent);\n    await assertNameAvailable(strapi, name, parent);\n\n    const created = await getFolderService(strapi).create({ name, parent }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, created.id, created) });\n  };\n};\n\n/**\n * `media_rename_folder` — changes a folder's name and nothing else.\n *\n * Deliberately does not forward `parent` to `folder.update()`: the service branches on\n * `isUndefined(parent)`, and the name-only branch skips the transaction that rewrites descendant\n * paths. Passing the folder's existing parent would take the move branch and rewrite the whole\n * subtree to compute the identical paths.\n */\nexport const createMediaRenameFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, name } = args as RenameFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id, { withParent: true });\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    // Siblings are the folders sharing this folder's parent, so uniqueness is checked against\n    // the current location — a rename never changes it.\n    const parentId = folder.parent?.id ?? null;\n\n    await assertNameAvailable(strapi, name, parentId, id);\n\n    // `parent` is omitted on purpose — see the note above.\n    const renamed = await getFolderService(strapi).update(id, { name }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, id, renamed ?? { ...folder, name }) });\n  };\n};\n\n/**\n * `media_move_folder` — re-parents a folder, carrying its whole subtree with it.\n *\n * `folder.update()` recalculates the materialized `path` of every descendant folder and the\n * `folderPath` of every contained file inside a transaction, so the move is atomic and no\n * separate bookkeeping is needed here.\n */\nexport const createMediaMoveFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, parent } = args as MoveFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id);\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    await assertParentExists(strapi, parent);\n    await assertNotMovedIntoOwnSubtree(strapi, folder, parent);\n\n    // A folder keeps its name across a move, so uniqueness must hold in the destination.\n    await assertNameAvailable(strapi, folder.name, parent, id);\n\n    const moved = await getFolderService(strapi).update(\n      id,\n      { name: folder.name, parent },\n      { user: context.user }\n    );\n\n    return ok({ data: await readFolderForOutput(strapi, id, moved ?? folder) });\n  };\n};\n\n/**\n * `media_delete_folder` — previews or performs a cascading folder deletion.\n *\n * Two branches behind one tool, because the preview and the deletion must agree on what the\n * cascade covers; splitting them across tools would let the two drift apart, and an agent could\n * reach the destructive one without ever seeing a count.\n *\n * `dryRun` defaults to true (see the input schema): omitting the flag previews, and deleting\n * takes an explicit `dryRun: false`.\n */\nexport const createMediaDeleteFolderHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { ids, dryRun = true } = args as DeleteFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const matched: FolderRow[] = await strapi.db.query(FOLDER_MODEL_UID).findMany({\n      select: ['id', 'name', 'path'],\n      where: { id: { $in: ids } },\n    });\n\n    /**\n     * All-or-nothing: any id that does not resolve to a folder rejects the whole call, before\n     * anything is deleted.\n     *\n     * Folder ids and asset ids are indistinguishable integers, so a list mixing the two is the\n     * mistake this tool exists to catch — and deleting the folders that did match while\n     * reporting the rest back would be exactly the silent confusion that requirement forbids,\n     * with the cascade already gone by the time the agent reads the response.\n     *\n     * An unresolvable id cannot be diagnosed further from here (an asset id and a deleted\n     * folder id look identical), and it does not need to be: either way it is unusable.\n     *\n     * The dry run rejects on the same rule. A preview that reported a cascade for a request the\n     * executing call would refuse is worse than no preview — it is a confirmation an agent\n     * cannot act on.\n     */\n    const matchedIds = new Set(matched.map((folder) => folder.id));\n    const unresolvedIds = ids.filter((id) => matchedIds.has(id) === false);\n\n    if (unresolvedIds.length > 0) {\n      throw new errors.ValidationError(MCP_DELETE_FOLDER_UNRESOLVED_IDS(unresolvedIds));\n    }\n\n    const folders = matched.map((folder) => sanitizeMediaFolder(folder));\n\n    if (dryRun) {\n      const counts = await countCascade(\n        strapi,\n        matched.map((folder) => folder.path)\n      );\n\n      return ok({ dryRun: true, folders, ...counts });\n    }\n\n    const { totalFolderNumber, totalFileNumber } = await getFolderService(strapi).deleteByIds(\n      matched.map((folder) => folder.id)\n    );\n\n    return ok({\n      dryRun: false,\n      folders,\n      totalFolderNumber,\n      totalFileNumber,\n    });\n  };\n};\n"],"names":["findFolderById","strapi","id","withParent","db","query","FOLDER_MODEL_UID","findOne","select","where","populate","parent","readFolderForOutput","fallback","row","sanitizeMediaFolder","assertParentExists","undefined","exists","getFolderService","errors","ValidationError","MCP_PARENT_FOLDER_NOT_FOUND","assertNameAvailable","name","excludeId","filters","$ne","MCP_FOLDER_NAME_TAKEN","assertNotMovedIntoOwnSubtree","folder","destination","isFolderOrChild","MCP_FOLDER_MOVE_INTO_SELF","countCascade","paths","pathPredicate","field","$or","flatMap","path","$eq","$startsWith","totalFolderNumber","totalFileNumber","Promise","all","count","FILE_MODEL_UID","createMediaCreateFolderHandler","context","assertAmbientInstance","args","assertMediaPermission","ACTIONS","create","created","user","ok","data","createMediaRenameFolderHandler","update","NotFoundError","MCP_NOT_FOUND_FOLDER","parentId","renamed","createMediaMoveFolderHandler","moved","createMediaDeleteFolderHandler","ids","dryRun","matched","findMany","$in","matchedIds","Set","map","unresolvedIds","filter","has","length","MCP_DELETE_FOLDER_UNRESOLVED_IDS","folders","counts","deleteByIds"],"mappings":";;;;;;;;;AA4CA;;;;IAKA,MAAMA,iBAAiB,OACrBC,MAAAA,EACAC,IACA,EAAEC,UAAAA,GAAa,KAAK,EAA4B,GAAG,EAAE,GAErDF,OAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBC,OAAO,CAAC;QACxCC,MAAAA,EAAQ;AAAC,YAAA,IAAA;AAAM,YAAA,MAAA;AAAQ,YAAA;AAAO,SAAA;QAC9BC,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;AACZ,QAAA,GAAIC,UAAAA,GAAa;YAAEO,QAAAA,EAAU;gBAAEC,MAAAA,EAAQ;oBAAEH,MAAAA,EAAQ;AAAC,wBAAA;AAAK;AAAC;AAAE;AAAE,SAAA,GAAI;AAClE,KAAA,CAAA;AAEF;;;;;;AAMC,IACD,MAAMI,mBAAAA,GAAsB,OAC1BX,MAAAA,EACAC,EAAAA,EACAW,QAAAA,GAAAA;IAEA,MAAMC,GAAAA,GAAM,MAAMb,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAC1DE,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;QACZQ,QAAAA,EAAU;YAAEC,MAAAA,EAAQ;gBAAEH,MAAAA,EAAQ;AAAC,oBAAA,IAAA;AAAM,oBAAA;AAAO;AAAC;AAAE;AACjD,KAAA,CAAA;;;AAIA,IAAA,OAAOO,oBAAoBD,GAAAA,IAAOD,QAAAA,CAAAA;AACpC,CAAA;AAEA;;;;IAKA,MAAMG,kBAAAA,GAAqB,OAAOf,MAAAA,EAAqBU,MAAAA,GAAAA;IACrD,IAAIA,MAAAA,KAAW,IAAA,IAAQA,MAAAA,KAAWM,SAAAA,EAAW;AAC3C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS,MAAMC,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAAC;QAAEhB,EAAAA,EAAIS;AAAO,KAAA,CAAA;AAElE,IAAA,IAAI,CAACO,MAAAA,EAAQ;QACX,MAAM,IAAIE,MAAAA,CAAOC,eAAe,CAACC,2BAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;AAMC,IACD,MAAMC,mBAAAA,GAAsB,OAC1BtB,MAAAA,EACAuB,MACAb,MAAAA,EACAc,SAAAA,GAAAA;AAEA,IAAA,MAAMC,OAAAA,GAAmC;AAAEF,QAAAA,IAAAA;AAAMb,QAAAA,MAAAA,EAAQA,MAAAA,IAAU;AAAK,KAAA;AAExE,IAAA,IAAIc,cAAcR,SAAAA,EAAW;AAC3BS,QAAAA,OAAAA,CAAQxB,EAAE,GAAG;YAAEyB,GAAAA,EAAKF;AAAU,SAAA;AAChC,IAAA;AAEA,IAAA,IAAI,MAAMN,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAACQ,OAAAA,CAAAA,EAAU;QAClD,MAAM,IAAIN,MAAAA,CAAOC,eAAe,CAACO,qBAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;AAKC,IACD,MAAMC,4BAAAA,GAA+B,OACnC5B,MAAAA,EACA6B,MAAAA,EACAnB,MAAAA,GAAAA;AAEA,IAAA,IAAIA,WAAW,IAAA,EAAM;AACnB,QAAA;AACF,IAAA;IAEA,MAAMoB,WAAAA,GAAc,MAAM/B,cAAAA,CAAeC,MAAAA,EAAQU,MAAAA,CAAAA;;AAGjD,IAAA,IAAIoB,gBAAgB,IAAA,EAAM;AACxB,QAAA;AACF,IAAA;IAEA,IAAIC,eAAAA,CAAgBD,aAAaD,MAAAA,CAAAA,EAAS;QACxC,MAAM,IAAIV,MAAAA,CAAOC,eAAe,CAACY,yBAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;IAOA,MAAMC,YAAAA,GAAe,OAAOjC,MAAAA,EAAqBkC,KAAAA,GAAAA;IAC/C,MAAMC,aAAAA,GAAgB,CAACC,KAAAA,IAAmB;AACxCC,YAAAA,GAAAA,EAAKH,KAAAA,CAAMI,OAAO,CAAC,CAACC,IAAAA,GAAS;AAC3B,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEI,GAAAA,EAAKD;AAAK;AAAE,qBAAA;AACzB,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEK,WAAAA,EAAa,CAAA,EAAGF,IAAAA,CAAK,CAAC;AAAE;AAAE;AACxC,iBAAA;SACH,CAAA;AAEA,IAAA,MAAM,CAACG,iBAAAA,EAAmBC,eAAAA,CAAgB,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;AAC7D7C,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkByC,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,MAAA;AAAQ,SAAA,CAAA;AACvEnC,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAAC2C,cAAAA,CAAAA,CAAgBD,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,YAAA;AAAc,SAAA;AAC5E,KAAA,CAAA;IAED,OAAO;AAAEO,QAAAA,iBAAAA;AAAmBC,QAAAA;AAAgB,KAAA;AAC9C,CAAA;AAEA;;;;;;;;;AASC,IACM,MAAMK,8BAAAA,GAAiC,CAC5ChD,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAE5B,IAAI,EAAEb,MAAAA,GAAS,IAAI,EAAE,GAAGyC,IAAAA;AAEhCC,QAAAA,qBAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,OAAAA,CAAQC,MAAM,EAAEjD,gBAAAA,CAAAA;AAEvD,QAAA,MAAMU,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMY,mBAAAA,CAAoBtB,QAAQuB,IAAAA,EAAMb,MAAAA,CAAAA;AAExC,QAAA,MAAM6C,OAAAA,GAAU,MAAMrC,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQsD,MAAM,CAAC;AAAE/B,YAAAA,IAAAA;AAAMb,YAAAA;SAAO,EAAG;AAAE8C,YAAAA,IAAAA,EAAMP,QAAQO;AAAK,SAAA,CAAA;AAE7F,QAAA,OAAOC,EAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM/C,mBAAAA,CAAoBX,MAAAA,EAAQuD,OAAAA,CAAQtD,EAAE,EAAEsD,OAAAA;AAAS,SAAA,CAAA;AAC3E,IAAA,CAAA;AACF;AAEA;;;;;;;AAOC,IACM,MAAMI,8BAAAA,GAAiC,CAC5C3D,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAElD,EAAE,EAAEsB,IAAI,EAAE,GAAG4B,IAAAA;AAErBC,QAAAA,qBAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,OAAAA,CAAQO,MAAM,EAAEvD,gBAAAA,CAAAA;AAEvD,QAAA,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,EAAI;YAAEC,UAAAA,EAAY;AAAK,SAAA,CAAA;AAEnE,QAAA,IAAI2B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,MAAAA,CAAO0C,aAAa,CAACC,oBAAAA,CAAAA;AACjC,QAAA;;;AAIA,QAAA,MAAMC,QAAAA,GAAWlC,MAAAA,CAAOnB,MAAM,EAAET,EAAAA,IAAM,IAAA;QAEtC,MAAMqB,mBAAAA,CAAoBtB,MAAAA,EAAQuB,IAAAA,EAAMwC,QAAAA,EAAU9D,EAAAA,CAAAA;;AAGlD,QAAA,MAAM+D,UAAU,MAAM9C,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ4D,MAAM,CAAC3D,EAAAA,EAAI;AAAEsB,YAAAA;SAAK,EAAG;AAAEiC,YAAAA,IAAAA,EAAMP,QAAQO;AAAK,SAAA,CAAA;AAEzF,QAAA,OAAOC,EAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM/C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAI+D,OAAAA,IAAW;AAAE,gBAAA,GAAGnC,MAAM;AAAEN,gBAAAA;AAAK,aAAA;AAAG,SAAA,CAAA;AAC1F,IAAA,CAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAM0C,4BAAAA,GAA+B,CAC1CjE,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAElD,EAAE,EAAES,MAAM,EAAE,GAAGyC,IAAAA;AAEvBC,QAAAA,qBAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,OAAAA,CAAQO,MAAM,EAAEvD,gBAAAA,CAAAA;QAEvD,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,CAAAA;AAE5C,QAAA,IAAI4B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,MAAAA,CAAO0C,aAAa,CAACC,oBAAAA,CAAAA;AACjC,QAAA;AAEA,QAAA,MAAM/C,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMkB,4BAAAA,CAA6B5B,QAAQ6B,MAAAA,EAAQnB,MAAAA,CAAAA;;AAGnD,QAAA,MAAMY,mBAAAA,CAAoBtB,MAAAA,EAAQ6B,MAAAA,CAAON,IAAI,EAAEb,MAAAA,EAAQT,EAAAA,CAAAA;AAEvD,QAAA,MAAMiE,QAAQ,MAAMhD,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ4D,MAAM,CACjD3D,EAAAA,EACA;AAAEsB,YAAAA,IAAAA,EAAMM,OAAON,IAAI;AAAEb,YAAAA;SAAO,EAC5B;AAAE8C,YAAAA,IAAAA,EAAMP,QAAQO;AAAK,SAAA,CAAA;AAGvB,QAAA,OAAOC,EAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM/C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAIiE,KAAAA,IAASrC,MAAAA;AAAQ,SAAA,CAAA;AAC3E,IAAA,CAAA;AACF;AAEA;;;;;;;;;AASC,IACM,MAAMsC,8BAAAA,GAAiC,CAC5CnE,MAAAA,EACAiD,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBlD,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZmD,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEiB,GAAG,EAAEC,MAAAA,GAAS,IAAI,EAAE,GAAGlB,IAAAA;AAE/BC,QAAAA,qBAAAA,CAAsBpD,MAAAA,EAAQiD,OAAAA,EAASI,OAAAA,CAAQO,MAAM,EAAEvD,gBAAAA,CAAAA;QAEvD,MAAMiE,OAAAA,GAAuB,MAAMtE,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBkE,QAAQ,CAAC;YAC5EhE,MAAAA,EAAQ;AAAC,gBAAA,IAAA;AAAM,gBAAA,MAAA;AAAQ,gBAAA;AAAO,aAAA;YAC9BC,KAAAA,EAAO;gBAAEP,EAAAA,EAAI;oBAAEuE,GAAAA,EAAKJ;AAAI;AAAE;AAC5B,SAAA,CAAA;AAEA;;;;;;;;;;;;;;;QAgBA,MAAMK,UAAAA,GAAa,IAAIC,GAAAA,CAAIJ,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,MAAAA,GAAWA,MAAAA,CAAO5B,EAAE,CAAA,CAAA;QAC5D,MAAM2E,aAAAA,GAAgBR,IAAIS,MAAM,CAAC,CAAC5E,EAAAA,GAAOwE,UAAAA,CAAWK,GAAG,CAAC7E,EAAAA,CAAAA,KAAQ,KAAA,CAAA;QAEhE,IAAI2E,aAAAA,CAAcG,MAAM,GAAG,CAAA,EAAG;AAC5B,YAAA,MAAM,IAAI5D,MAAAA,CAAOC,eAAe,CAAC4D,gCAAAA,CAAiCJ,aAAAA,CAAAA,CAAAA;AACpE,QAAA;AAEA,QAAA,MAAMK,UAAUX,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,SAAWf,mBAAAA,CAAoBe,MAAAA,CAAAA,CAAAA;AAE5D,QAAA,IAAIwC,MAAAA,EAAQ;YACV,MAAMa,MAAAA,GAAS,MAAMjD,YAAAA,CACnBjC,MAAAA,EACAsE,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,MAAAA,GAAWA,MAAAA,CAAOU,IAAI,CAAA,CAAA;AAGrC,YAAA,OAAOkB,EAAAA,CAAG;gBAAEY,MAAAA,EAAQ,IAAA;AAAMY,gBAAAA,OAAAA;AAAS,gBAAA,GAAGC;AAAO,aAAA,CAAA;AAC/C,QAAA;AAEA,QAAA,MAAM,EAAExC,iBAAiB,EAAEC,eAAe,EAAE,GAAG,MAAMzB,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQmF,WAAW,CACvFb,OAAAA,CAAQK,GAAG,CAAC,CAAC9C,MAAAA,GAAWA,OAAO5B,EAAE,CAAA,CAAA;AAGnC,QAAA,OAAOwD,EAAAA,CAAG;YACRY,MAAAA,EAAQ,KAAA;AACRY,YAAAA,OAAAA;AACAvC,YAAAA,iBAAAA;AACAC,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;AACF;;;;"}
+{"version":3,"file":"folder-handlers.mjs","sources":["../../../../server/src/mcp/handlers/folder-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { getFolderService } from '../ambient-instance';\nimport { ACTIONS, FOLDER_MODEL_UID, FILE_MODEL_UID } from '../../constants';\nimport { isFolderOrChild } from '../../controllers/utils/folders';\nimport { assertMediaPermission } from '../permissions';\nimport { sanitizeMediaFolder } from '../sanitizers/sanitize-media';\nimport {\n  MCP_NOT_FOUND_FOLDER,\n  MCP_FOLDER_NAME_TAKEN,\n  MCP_PARENT_FOLDER_NOT_FOUND,\n  MCP_FOLDER_MOVE_INTO_SELF,\n  MCP_DELETE_FOLDER_UNRESOLVED_IDS,\n} from './constants';\nimport { ok } from '../utils';\n\nimport type { Folder } from '../../types';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's strict Zod\n// input schema before the handler runs, so unknown keys never reach here.\ntype CreateFolderArgs = {\n  name: string;\n  parent?: number | null;\n};\n\ntype RenameFolderArgs = {\n  id: number;\n  name: string;\n};\n\ntype MoveFolderArgs = {\n  id: number;\n  parent: number | null;\n};\n\ntype DeleteFolderArgs = {\n  ids: number[];\n  dryRun?: boolean;\n};\n\n/** The folder fields the handlers need; `path` drives the cascade and subtree checks. */\ntype FolderRow = Pick<Folder, 'id' | 'name' | 'path'>;\n\n/**\n * `withParent` populates the parent relation in the same round trip. Rename needs the parent id\n * to scope its sibling-uniqueness check, so it would otherwise read the same row twice; the\n * subtree and cascade callers do not, and skip the join.\n */\nconst findFolderById = async (\n  strapi: Core.Strapi,\n  id: number,\n  { withParent = false }: { withParent?: boolean } = {}\n): Promise<(FolderRow & { parent?: { id: number } | null }) | null> =>\n  strapi.db.query(FOLDER_MODEL_UID).findOne({\n    select: ['id', 'name', 'path'],\n    where: { id },\n    ...(withParent ? { populate: { parent: { select: ['id'] } } } : {}),\n  });\n\n/**\n * Re-reads a folder with its parent populated, so the write tools can echo back the same shape\n * regardless of what the service returned.\n *\n * `folder.update()` resolves the row it wrote without the `parent` relation, and on a pure rename\n * it never touches the join table at all — so the parent has to be read back to be reported.\n */\nconst readFolderForOutput = async (\n  strapi: Core.Strapi,\n  id: number,\n  fallback: Record<string, unknown>\n) => {\n  const row = await strapi.db.query(FOLDER_MODEL_UID).findOne({\n    where: { id },\n    populate: { parent: { select: ['id', 'name'] } },\n  });\n\n  // The write succeeded, so report it even if the read-back comes back empty rather than\n  // failing a completed operation on a follow-up query.\n  return sanitizeMediaFolder(row ?? fallback);\n};\n\n/**\n * Replicates the admin folder controller's `parent` check: a named parent must exist.\n *\n * null is the media library root and always valid, so only a numeric id is looked up.\n */\nconst assertParentExists = async (strapi: Core.Strapi, parent: number | null | undefined) => {\n  if (parent === null || parent === undefined) {\n    return;\n  }\n\n  const exists = await getFolderService(strapi).exists({ id: parent });\n\n  if (!exists) {\n    throw new errors.ValidationError(MCP_PARENT_FOLDER_NOT_FOUND);\n  }\n};\n\n/**\n * Replicates `is-folder-unique` from the admin folder validation: a folder name must be unique\n * among its siblings.\n *\n * `excludeId` is the folder being renamed — without it a rename to the folder's current name\n * would collide with itself.\n */\nconst assertNameAvailable = async (\n  strapi: Core.Strapi,\n  name: string,\n  parent: number | null,\n  excludeId?: number\n) => {\n  const filters: Record<string, unknown> = { name, parent: parent ?? null };\n\n  if (excludeId !== undefined) {\n    filters.id = { $ne: excludeId };\n  }\n\n  if (await getFolderService(strapi).exists(filters)) {\n    throw new errors.ValidationError(MCP_FOLDER_NAME_TAKEN);\n  }\n};\n\n/**\n * Replicates `dont-move-inside-self`: a folder cannot become its own descendant.\n *\n * Without this the folder service would rewrite the subtree's materialized paths into a cycle,\n * orphaning every descendant — the tree has no root to walk back to afterwards.\n */\nconst assertNotMovedIntoOwnSubtree = async (\n  strapi: Core.Strapi,\n  folder: FolderRow,\n  parent: number | null\n) => {\n  if (parent === null) {\n    return;\n  }\n\n  const destination = await findFolderById(strapi, parent);\n\n  // A missing destination is already reported by `assertParentExists`.\n  if (destination === null) {\n    return;\n  }\n\n  if (isFolderOrChild(destination, folder)) {\n    throw new errors.ValidationError(MCP_FOLDER_MOVE_INTO_SELF);\n  }\n};\n\n/**\n * Counts the folders and files a `deleteByIds` of these paths would remove.\n *\n * Mirrors the two `$or` predicates in `folder.deleteByIds` exactly — self path plus the\n * `${path}/` prefix — so the dry-run number is the same set the destructive branch acts on\n * rather than an independent estimate that could drift from it.\n */\nconst countCascade = async (strapi: Core.Strapi, paths: string[]) => {\n  const pathPredicate = (field: string) => ({\n    $or: paths.flatMap((path) => [\n      { [field]: { $eq: path } },\n      { [field]: { $startsWith: `${path}/` } },\n    ]),\n  });\n\n  const [totalFolderNumber, totalFileNumber] = await Promise.all([\n    strapi.db.query(FOLDER_MODEL_UID).count({ where: pathPredicate('path') }),\n    strapi.db.query(FILE_MODEL_UID).count({ where: pathPredicate('folderPath') }),\n  ]);\n\n  return { totalFolderNumber, totalFileNumber };\n};\n\n/**\n * `media_create_folder` — a new folder, optionally nested.\n *\n * Gated on `plugin::upload.assets.create` and mirrors `POST /upload/folders`: the same\n * permission, the same uniqueness and parent-existence validation, the same `folder.create()`\n * call, and the same `createdBy` attribution from the session user.\n *\n * `create` rather than the `update` the other folder tools use: creating a folder is the one\n * folder operation whose admin route gates on `assets.create`.\n */\nexport const createMediaCreateFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { name, parent = null } = args as CreateFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.create, FOLDER_MODEL_UID);\n\n    await assertParentExists(strapi, parent);\n    await assertNameAvailable(strapi, name, parent);\n\n    const created = await getFolderService(strapi).create({ name, parent }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, created.id, created) });\n  };\n\n/**\n * `media_rename_folder` — changes a folder's name and nothing else.\n *\n * Deliberately does not forward `parent` to `folder.update()`: the service branches on\n * `isUndefined(parent)`, and the name-only branch skips the transaction that rewrites descendant\n * paths. Passing the folder's existing parent would take the move branch and rewrite the whole\n * subtree to compute the identical paths.\n */\nexport const createMediaRenameFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, name } = args as RenameFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id, { withParent: true });\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    // Siblings are the folders sharing this folder's parent, so uniqueness is checked against\n    // the current location — a rename never changes it.\n    const parentId = folder.parent?.id ?? null;\n\n    await assertNameAvailable(strapi, name, parentId, id);\n\n    // `parent` is omitted on purpose — see the note above.\n    const renamed = await getFolderService(strapi).update(id, { name }, { user: context.user });\n\n    return ok({ data: await readFolderForOutput(strapi, id, renamed ?? { ...folder, name }) });\n  };\n\n/**\n * `media_move_folder` — re-parents a folder, carrying its whole subtree with it.\n *\n * `folder.update()` recalculates the materialized `path` of every descendant folder and the\n * `folderPath` of every contained file inside a transaction, so the move is atomic and no\n * separate bookkeeping is needed here.\n */\nexport const createMediaMoveFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id, parent } = args as MoveFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const folder = await findFolderById(strapi, id);\n\n    if (folder === null) {\n      throw new errors.NotFoundError(MCP_NOT_FOUND_FOLDER);\n    }\n\n    await assertParentExists(strapi, parent);\n    await assertNotMovedIntoOwnSubtree(strapi, folder, parent);\n\n    // A folder keeps its name across a move, so uniqueness must hold in the destination.\n    await assertNameAvailable(strapi, folder.name, parent, id);\n\n    const moved = await getFolderService(strapi).update(\n      id,\n      { name: folder.name, parent },\n      { user: context.user }\n    );\n\n    return ok({ data: await readFolderForOutput(strapi, id, moved ?? folder) });\n  };\n\n/**\n * `media_delete_folder` — previews or performs a cascading folder deletion.\n *\n * Two branches behind one tool, because the preview and the deletion must agree on what the\n * cascade covers; splitting them across tools would let the two drift apart, and an agent could\n * reach the destructive one without ever seeing a count.\n *\n * `dryRun` defaults to true (see the input schema): omitting the flag previews, and deleting\n * takes an explicit `dryRun: false`.\n */\nexport const createMediaDeleteFolderHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { ids, dryRun = true } = args as DeleteFolderArgs;\n\n    assertMediaPermission(strapi, context, ACTIONS.update, FOLDER_MODEL_UID);\n\n    const matched: FolderRow[] = await strapi.db.query(FOLDER_MODEL_UID).findMany({\n      select: ['id', 'name', 'path'],\n      where: { id: { $in: ids } },\n    });\n\n    /**\n     * All-or-nothing: any id that does not resolve to a folder rejects the whole call, before\n     * anything is deleted.\n     *\n     * Folder ids and asset ids are indistinguishable integers, so a list mixing the two is the\n     * mistake this tool exists to catch — and deleting the folders that did match while\n     * reporting the rest back would be exactly the silent confusion that requirement forbids,\n     * with the cascade already gone by the time the agent reads the response.\n     *\n     * An unresolvable id cannot be diagnosed further from here (an asset id and a deleted\n     * folder id look identical), and it does not need to be: either way it is unusable.\n     *\n     * The dry run rejects on the same rule. A preview that reported a cascade for a request the\n     * executing call would refuse is worse than no preview — it is a confirmation an agent\n     * cannot act on.\n     */\n    const matchedIds = new Set(matched.map((folder) => folder.id));\n    const unresolvedIds = ids.filter((id) => matchedIds.has(id) === false);\n\n    if (unresolvedIds.length > 0) {\n      throw new errors.ValidationError(MCP_DELETE_FOLDER_UNRESOLVED_IDS(unresolvedIds));\n    }\n\n    const folders = matched.map((folder) => sanitizeMediaFolder(folder));\n\n    if (dryRun) {\n      const counts = await countCascade(\n        strapi,\n        matched.map((folder) => folder.path)\n      );\n\n      return ok({ dryRun: true, folders, ...counts });\n    }\n\n    const { totalFolderNumber, totalFileNumber } = await getFolderService(strapi).deleteByIds(\n      matched.map((folder) => folder.id)\n    );\n\n    return ok({\n      dryRun: false,\n      folders,\n      totalFolderNumber,\n      totalFileNumber,\n    });\n  };\n"],"names":["findFolderById","strapi","id","withParent","db","query","FOLDER_MODEL_UID","findOne","select","where","populate","parent","readFolderForOutput","fallback","row","sanitizeMediaFolder","assertParentExists","undefined","exists","getFolderService","errors","ValidationError","MCP_PARENT_FOLDER_NOT_FOUND","assertNameAvailable","name","excludeId","filters","$ne","MCP_FOLDER_NAME_TAKEN","assertNotMovedIntoOwnSubtree","folder","destination","isFolderOrChild","MCP_FOLDER_MOVE_INTO_SELF","countCascade","paths","pathPredicate","field","$or","flatMap","path","$eq","$startsWith","totalFolderNumber","totalFileNumber","Promise","all","count","FILE_MODEL_UID","createMediaCreateFolderHandler","context","args","assertMediaPermission","ACTIONS","create","created","user","ok","data","createMediaRenameFolderHandler","update","NotFoundError","MCP_NOT_FOUND_FOLDER","parentId","renamed","createMediaMoveFolderHandler","moved","createMediaDeleteFolderHandler","ids","dryRun","matched","findMany","$in","matchedIds","Set","map","unresolvedIds","filter","has","length","MCP_DELETE_FOLDER_UNRESOLVED_IDS","folders","counts","deleteByIds"],"mappings":";;;;;;;;;AA4CA;;;;IAKA,MAAMA,iBAAiB,OACrBC,MAAAA,EACAC,IACA,EAAEC,UAAAA,GAAa,KAAK,EAA4B,GAAG,EAAE,GAErDF,OAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBC,OAAO,CAAC;QACxCC,MAAAA,EAAQ;AAAC,YAAA,IAAA;AAAM,YAAA,MAAA;AAAQ,YAAA;AAAO,SAAA;QAC9BC,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;AACZ,QAAA,GAAIC,UAAAA,GAAa;YAAEO,QAAAA,EAAU;gBAAEC,MAAAA,EAAQ;oBAAEH,MAAAA,EAAQ;AAAC,wBAAA;AAAK;AAAC;AAAE;AAAE,SAAA,GAAI;AAClE,KAAA,CAAA;AAEF;;;;;;AAMC,IACD,MAAMI,mBAAAA,GAAsB,OAC1BX,MAAAA,EACAC,EAAAA,EACAW,QAAAA,GAAAA;IAEA,MAAMC,GAAAA,GAAM,MAAMb,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBC,OAAO,CAAC;QAC1DE,KAAAA,EAAO;AAAEP,YAAAA;AAAG,SAAA;QACZQ,QAAAA,EAAU;YAAEC,MAAAA,EAAQ;gBAAEH,MAAAA,EAAQ;AAAC,oBAAA,IAAA;AAAM,oBAAA;AAAO;AAAC;AAAE;AACjD,KAAA,CAAA;;;AAIA,IAAA,OAAOO,oBAAoBD,GAAAA,IAAOD,QAAAA,CAAAA;AACpC,CAAA;AAEA;;;;IAKA,MAAMG,kBAAAA,GAAqB,OAAOf,MAAAA,EAAqBU,MAAAA,GAAAA;IACrD,IAAIA,MAAAA,KAAW,IAAA,IAAQA,MAAAA,KAAWM,SAAAA,EAAW;AAC3C,QAAA;AACF,IAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS,MAAMC,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAAC;QAAEhB,EAAAA,EAAIS;AAAO,KAAA,CAAA;AAElE,IAAA,IAAI,CAACO,MAAAA,EAAQ;QACX,MAAM,IAAIE,MAAAA,CAAOC,eAAe,CAACC,2BAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;AAMC,IACD,MAAMC,mBAAAA,GAAsB,OAC1BtB,MAAAA,EACAuB,MACAb,MAAAA,EACAc,SAAAA,GAAAA;AAEA,IAAA,MAAMC,OAAAA,GAAmC;AAAEF,QAAAA,IAAAA;AAAMb,QAAAA,MAAAA,EAAQA,MAAAA,IAAU;AAAK,KAAA;AAExE,IAAA,IAAIc,cAAcR,SAAAA,EAAW;AAC3BS,QAAAA,OAAAA,CAAQxB,EAAE,GAAG;YAAEyB,GAAAA,EAAKF;AAAU,SAAA;AAChC,IAAA;AAEA,IAAA,IAAI,MAAMN,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQiB,MAAM,CAACQ,OAAAA,CAAAA,EAAU;QAClD,MAAM,IAAIN,MAAAA,CAAOC,eAAe,CAACO,qBAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;AAKC,IACD,MAAMC,4BAAAA,GAA+B,OACnC5B,MAAAA,EACA6B,MAAAA,EACAnB,MAAAA,GAAAA;AAEA,IAAA,IAAIA,WAAW,IAAA,EAAM;AACnB,QAAA;AACF,IAAA;IAEA,MAAMoB,WAAAA,GAAc,MAAM/B,cAAAA,CAAeC,MAAAA,EAAQU,MAAAA,CAAAA;;AAGjD,IAAA,IAAIoB,gBAAgB,IAAA,EAAM;AACxB,QAAA;AACF,IAAA;IAEA,IAAIC,eAAAA,CAAgBD,aAAaD,MAAAA,CAAAA,EAAS;QACxC,MAAM,IAAIV,MAAAA,CAAOC,eAAe,CAACY,yBAAAA,CAAAA;AACnC,IAAA;AACF,CAAA;AAEA;;;;;;IAOA,MAAMC,YAAAA,GAAe,OAAOjC,MAAAA,EAAqBkC,KAAAA,GAAAA;IAC/C,MAAMC,aAAAA,GAAgB,CAACC,KAAAA,IAAmB;AACxCC,YAAAA,GAAAA,EAAKH,KAAAA,CAAMI,OAAO,CAAC,CAACC,IAAAA,GAAS;AAC3B,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEI,GAAAA,EAAKD;AAAK;AAAE,qBAAA;AACzB,oBAAA;AAAE,wBAAA,CAACH,QAAQ;4BAAEK,WAAAA,EAAa,CAAA,EAAGF,IAAAA,CAAK,CAAC;AAAE;AAAE;AACxC,iBAAA;SACH,CAAA;AAEA,IAAA,MAAM,CAACG,iBAAAA,EAAmBC,eAAAA,CAAgB,GAAG,MAAMC,OAAAA,CAAQC,GAAG,CAAC;AAC7D7C,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkByC,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,MAAA;AAAQ,SAAA,CAAA;AACvEnC,QAAAA,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAAC2C,cAAAA,CAAAA,CAAgBD,KAAK,CAAC;AAAEtC,YAAAA,KAAAA,EAAO2B,aAAAA,CAAc,YAAA;AAAc,SAAA;AAC5E,KAAA,CAAA;IAED,OAAO;AAAEO,QAAAA,iBAAAA;AAAmBC,QAAAA;AAAgB,KAAA;AAC9C,CAAA;AAEA;;;;;;;;;UAUaK,8BAAAA,GACX,CAAChD,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAE3B,IAAI,EAAEb,MAAAA,GAAS,IAAI,EAAE,GAAGwC,IAAAA;AAEhCC,QAAAA,qBAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,OAAAA,CAAQC,MAAM,EAAEhD,gBAAAA,CAAAA;AAEvD,QAAA,MAAMU,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMY,mBAAAA,CAAoBtB,QAAQuB,IAAAA,EAAMb,MAAAA,CAAAA;AAExC,QAAA,MAAM4C,OAAAA,GAAU,MAAMpC,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQqD,MAAM,CAAC;AAAE9B,YAAAA,IAAAA;AAAMb,YAAAA;SAAO,EAAG;AAAE6C,YAAAA,IAAAA,EAAMN,QAAQM;AAAK,SAAA,CAAA;AAE7F,QAAA,OAAOC,EAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM9C,mBAAAA,CAAoBX,MAAAA,EAAQsD,OAAAA,CAAQrD,EAAE,EAAEqD,OAAAA;AAAS,SAAA,CAAA;IAC3E;AAEF;;;;;;;UAQaI,8BAAAA,GACX,CAAC1D,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEjD,EAAE,EAAEsB,IAAI,EAAE,GAAG2B,IAAAA;AAErBC,QAAAA,qBAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,OAAAA,CAAQO,MAAM,EAAEtD,gBAAAA,CAAAA;AAEvD,QAAA,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,EAAI;YAAEC,UAAAA,EAAY;AAAK,SAAA,CAAA;AAEnE,QAAA,IAAI2B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,MAAAA,CAAOyC,aAAa,CAACC,oBAAAA,CAAAA;AACjC,QAAA;;;AAIA,QAAA,MAAMC,QAAAA,GAAWjC,MAAAA,CAAOnB,MAAM,EAAET,EAAAA,IAAM,IAAA;QAEtC,MAAMqB,mBAAAA,CAAoBtB,MAAAA,EAAQuB,IAAAA,EAAMuC,QAAAA,EAAU7D,EAAAA,CAAAA;;AAGlD,QAAA,MAAM8D,UAAU,MAAM7C,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ2D,MAAM,CAAC1D,EAAAA,EAAI;AAAEsB,YAAAA;SAAK,EAAG;AAAEgC,YAAAA,IAAAA,EAAMN,QAAQM;AAAK,SAAA,CAAA;AAEzF,QAAA,OAAOC,EAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM9C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAI8D,OAAAA,IAAW;AAAE,gBAAA,GAAGlC,MAAM;AAAEN,gBAAAA;AAAK,aAAA;AAAG,SAAA,CAAA;IAC1F;AAEF;;;;;;UAOayC,4BAAAA,GACX,CAAChE,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEjD,EAAE,EAAES,MAAM,EAAE,GAAGwC,IAAAA;AAEvBC,QAAAA,qBAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,OAAAA,CAAQO,MAAM,EAAEtD,gBAAAA,CAAAA;QAEvD,MAAMwB,MAAAA,GAAS,MAAM9B,cAAAA,CAAeC,MAAAA,EAAQC,EAAAA,CAAAA;AAE5C,QAAA,IAAI4B,WAAW,IAAA,EAAM;YACnB,MAAM,IAAIV,MAAAA,CAAOyC,aAAa,CAACC,oBAAAA,CAAAA;AACjC,QAAA;AAEA,QAAA,MAAM9C,mBAAmBf,MAAAA,EAAQU,MAAAA,CAAAA;QACjC,MAAMkB,4BAAAA,CAA6B5B,QAAQ6B,MAAAA,EAAQnB,MAAAA,CAAAA;;AAGnD,QAAA,MAAMY,mBAAAA,CAAoBtB,MAAAA,EAAQ6B,MAAAA,CAAON,IAAI,EAAEb,MAAAA,EAAQT,EAAAA,CAAAA;AAEvD,QAAA,MAAMgE,QAAQ,MAAM/C,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQ2D,MAAM,CACjD1D,EAAAA,EACA;AAAEsB,YAAAA,IAAAA,EAAMM,OAAON,IAAI;AAAEb,YAAAA;SAAO,EAC5B;AAAE6C,YAAAA,IAAAA,EAAMN,QAAQM;AAAK,SAAA,CAAA;AAGvB,QAAA,OAAOC,EAAAA,CAAG;AAAEC,YAAAA,IAAAA,EAAM,MAAM9C,mBAAAA,CAAoBX,MAAAA,EAAQC,EAAAA,EAAIgE,KAAAA,IAASpC,MAAAA;AAAQ,SAAA,CAAA;IAC3E;AAEF;;;;;;;;;UAUaqC,8BAAAA,GACX,CAAClE,QAAqBiD,OAAAA,GACtB,OAAO,EACLC,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEiB,GAAG,EAAEC,MAAAA,GAAS,IAAI,EAAE,GAAGlB,IAAAA;AAE/BC,QAAAA,qBAAAA,CAAsBnD,MAAAA,EAAQiD,OAAAA,EAASG,OAAAA,CAAQO,MAAM,EAAEtD,gBAAAA,CAAAA;QAEvD,MAAMgE,OAAAA,GAAuB,MAAMrE,MAAAA,CAAOG,EAAE,CAACC,KAAK,CAACC,gBAAAA,CAAAA,CAAkBiE,QAAQ,CAAC;YAC5E/D,MAAAA,EAAQ;AAAC,gBAAA,IAAA;AAAM,gBAAA,MAAA;AAAQ,gBAAA;AAAO,aAAA;YAC9BC,KAAAA,EAAO;gBAAEP,EAAAA,EAAI;oBAAEsE,GAAAA,EAAKJ;AAAI;AAAE;AAC5B,SAAA,CAAA;AAEA;;;;;;;;;;;;;;;QAgBA,MAAMK,UAAAA,GAAa,IAAIC,GAAAA,CAAIJ,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,MAAAA,GAAWA,MAAAA,CAAO5B,EAAE,CAAA,CAAA;QAC5D,MAAM0E,aAAAA,GAAgBR,IAAIS,MAAM,CAAC,CAAC3E,EAAAA,GAAOuE,UAAAA,CAAWK,GAAG,CAAC5E,EAAAA,CAAAA,KAAQ,KAAA,CAAA;QAEhE,IAAI0E,aAAAA,CAAcG,MAAM,GAAG,CAAA,EAAG;AAC5B,YAAA,MAAM,IAAI3D,MAAAA,CAAOC,eAAe,CAAC2D,gCAAAA,CAAiCJ,aAAAA,CAAAA,CAAAA;AACpE,QAAA;AAEA,QAAA,MAAMK,UAAUX,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,SAAWf,mBAAAA,CAAoBe,MAAAA,CAAAA,CAAAA;AAE5D,QAAA,IAAIuC,MAAAA,EAAQ;YACV,MAAMa,MAAAA,GAAS,MAAMhD,YAAAA,CACnBjC,MAAAA,EACAqE,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,MAAAA,GAAWA,MAAAA,CAAOU,IAAI,CAAA,CAAA;AAGrC,YAAA,OAAOiB,EAAAA,CAAG;gBAAEY,MAAAA,EAAQ,IAAA;AAAMY,gBAAAA,OAAAA;AAAS,gBAAA,GAAGC;AAAO,aAAA,CAAA;AAC/C,QAAA;AAEA,QAAA,MAAM,EAAEvC,iBAAiB,EAAEC,eAAe,EAAE,GAAG,MAAMzB,gBAAAA,CAAiBlB,MAAAA,CAAAA,CAAQkF,WAAW,CACvFb,OAAAA,CAAQK,GAAG,CAAC,CAAC7C,MAAAA,GAAWA,OAAO5B,EAAE,CAAA,CAAA;AAGnC,QAAA,OAAOuD,EAAAA,CAAG;YACRY,MAAAA,EAAQ,KAAA;AACRY,YAAAA,OAAAA;AACAtC,YAAAA,iBAAAA;AACAC,YAAAA;AACF,SAAA,CAAA;IACF;;;;"}

package/dist/server/mcp/handlers/read-handlers.js

@@ -48,9 +48,7 @@ const DEFAULT_SORT = 'createdAt:DESC';
  * Permission conditions are applied through the permissions manager
  * (`addPermissionsQueryTo`) so a token restricted by a condition — e.g. own-assets-only —
  * sees the same subset it would through the admin API.
- */ const createMediaListAssetsHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaListAssetsHandler = (strapi, context)=>async ({ args })=>{
         const { folderId, mime, name, page, pageSize, sort } = args;
         const pm = permissions.assertMediaPermission(strapi, context, constants.ACTIONS.read, constants.FILE_MODEL_UID);
         const query = await pm.addPermissionsQueryTo({
@@ -77,7 +75,6 @@ const DEFAULT_SORT = 'createdAt:DESC';
             pagination
         });
     };
-};
 /**
  * `media_get_asset` — a single asset by numeric id.
  *
@@ -86,9 +83,7 @@ const DEFAULT_SORT = 'createdAt:DESC';
  * before building the CASL subject, which is what the admin conditions read. Checking a subject
  * without those fields would deny a conditioned grant its own assets, and would disagree with
  * `media_list_assets`, where the condition is pushed into the query instead.
- */ const createMediaGetAssetHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaGetAssetHandler = (strapi, context)=>async ({ args })=>{
         const { id } = args;
         // Model-level gate first, so a token without upload read at all is refused before a lookup.
         permissions.assertMediaPermission(strapi, context, constants.ACTIONS.read, constants.FILE_MODEL_UID);
@@ -107,7 +102,6 @@ const DEFAULT_SORT = 'createdAt:DESC';
             data: sanitizeMedia.sanitizeMediaAsset(asset)
         });
     };
-};
 /**
  * `media_list_folders` — the nested folder structure, reusing `folder.getStructure()`.
  *
@@ -115,18 +109,16 @@ const DEFAULT_SORT = 'createdAt:DESC';
  * filtering, so this is gated on the model-level read permission only — matching
  * `GET /upload/folder-structure` in the admin API.
  *
- * The factory asserts the handler's instance is the ambient `global.strapi` the folder service
- * actually queries — see `assertAmbientInstance` for why.
- */ const createMediaListFoldersHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ()=>{
+ * The folder service queries the ambient `global.strapi` regardless of the instance passed to
+ * `getService`; `buildUploadMcpToolDefinitions` asserts the two agree before this handler is
+ * ever constructed — see `assertAmbientInstance` for why.
+ */ const createMediaListFoldersHandler = (strapi, context)=>async ()=>{
         permissions.assertMediaPermission(strapi, context, constants.ACTIONS.read, constants.FOLDER_MODEL_UID);
         const structure = await ambientInstance.getFolderService(strapi).getStructure();
         return utils.ok({
             data: sanitizeMedia.sanitizeMediaFolderTree(structure)
         });
     };
-};
 
 exports.createMediaGetAssetHandler = createMediaGetAssetHandler;
 exports.createMediaListAssetsHandler = createMediaListAssetsHandler;

package/dist/server/mcp/handlers/read-handlers.js.map

@@ -1 +1 @@
-{"version":3,"file":"read-handlers.js","sources":["../../../../server/src/mcp/handlers/read-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { assertAmbientInstance, getFolderService } from '../ambient-instance';\nimport { ACTIONS, FILE_MODEL_UID, FOLDER_MODEL_UID } from '../../constants';\nimport { assertMediaPermission } from '../permissions';\nimport { findEntityAndCheckPermissions } from '../../controllers/utils/find-entity-and-check-permissions';\nimport { sanitizeMediaAsset, sanitizeMediaFolderTree } from '../sanitizers/sanitize-media';\nimport { MCP_NOT_FOUND_ASSET } from './constants';\nimport { ok } from '../utils';\n\nconst DEFAULT_SORT = 'createdAt:DESC';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's Zod input\n// schema before the handler runs, so handlers accept the erased `Record<string, unknown>` the\n// registry hands them and narrow it here.\ntype ListMediaArgs = {\n  folderId?: number | null;\n  mime?: string;\n  name?: string;\n  page?: number;\n  pageSize?: number;\n  sort?: string;\n};\n\ntype GetMediaArgs = {\n  id: number;\n};\n\n/**\n * Builds the `filters` clause for `media_list_assets`.\n *\n * `folderId: null` is meaningfully different from an omitted `folderId`: null means \"assets at\n * the media library root\" (no folder relation), while omitting it means \"any folder\".\n *\n * `mime` accepts both a full type and a bare prefix. An exact match on \"image\" would never hit,\n * so a value without a slash is matched as a prefix (\"image\" → every \"image/*\").\n */\nconst buildAssetFilters = (args: ListMediaArgs): Record<string, unknown> => {\n  const filters: Record<string, unknown> = {};\n\n  if (args.folderId === null) {\n    filters.folder = null;\n  } else if (args.folderId !== undefined) {\n    filters.folder = { id: args.folderId };\n  }\n\n  if (args.mime !== undefined) {\n    filters.mime = args.mime.includes('/')\n      ? { $eqi: args.mime }\n      : { $startsWithi: `${args.mime}/` };\n  }\n\n  if (args.name !== undefined) {\n    filters.name = { $containsi: args.name };\n  }\n\n  return filters;\n};\n\n/**\n * `media_list_assets` — paginated, filtered listing of media files.\n *\n * Permission conditions are applied through the permissions manager\n * (`addPermissionsQueryTo`) so a token restricted by a condition — e.g. own-assets-only —\n * sees the same subset it would through the admin API.\n */\nexport const createMediaListAssetsHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { folderId, mime, name, page, pageSize, sort } = args as ListMediaArgs;\n    const pm = assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    const query = await pm.addPermissionsQueryTo({\n      filters: buildAssetFilters({ folderId, mime, name }),\n      sort: sort ?? DEFAULT_SORT,\n      page: page ?? 1,\n      pageSize: pageSize ?? 25,\n      populate: { folder: { fields: ['id', 'name'] } },\n    });\n\n    const { results, pagination } = await getService('upload', strapi).findPage(query);\n\n    return ok({\n      results: results.map(sanitizeMediaAsset),\n      pagination,\n    });\n  };\n};\n\n/**\n * `media_get_asset` — a single asset by numeric id.\n *\n * Row-level permission *conditions* are enforced by `findEntityAndCheckPermissions`, the same\n * helper the admin `findOne` controller uses: it populates `createdBy` and the creator's roles\n * before building the CASL subject, which is what the admin conditions read. Checking a subject\n * without those fields would deny a conditioned grant its own assets, and would disagree with\n * `media_list_assets`, where the condition is pushed into the query instead.\n */\nexport const createMediaGetAssetHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id } = args as GetMediaArgs;\n\n    // Model-level gate first, so a token without upload read at all is refused before a lookup.\n    assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    let asset;\n    try {\n      ({ file: asset } = await findEntityAndCheckPermissions(\n        context.userAbility,\n        ACTIONS.read,\n        FILE_MODEL_UID,\n        id,\n        strapi\n      ));\n    } catch (error) {\n      // The helper is written for HTTP, where a bare NotFoundError is enough. MCP answers an\n      // agent, so restate it with the message the other media tools use.\n      if (error instanceof errors.NotFoundError) {\n        throw new errors.NotFoundError(MCP_NOT_FOUND_ASSET);\n      }\n      throw error;\n    }\n\n    return ok({ data: sanitizeMediaAsset(asset) });\n  };\n};\n\n/**\n * `media_list_folders` — the nested folder structure, reusing `folder.getStructure()`.\n *\n * `getStructure()` returns the whole tree in one query and has no permission-condition\n * filtering, so this is gated on the model-level read permission only — matching\n * `GET /upload/folder-structure` in the admin API.\n *\n * The factory asserts the handler's instance is the ambient `global.strapi` the folder service\n * actually queries — see `assertAmbientInstance` for why.\n */\nexport const createMediaListFoldersHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async (): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    assertMediaPermission(strapi, context, ACTIONS.read, FOLDER_MODEL_UID);\n\n    const structure = await getFolderService(strapi).getStructure();\n\n    return ok({ data: sanitizeMediaFolderTree(structure) });\n  };\n};\n"],"names":["DEFAULT_SORT","buildAssetFilters","args","filters","folderId","folder","undefined","id","mime","includes","$eqi","$startsWithi","name","$containsi","createMediaListAssetsHandler","strapi","context","assertAmbientInstance","page","pageSize","sort","pm","assertMediaPermission","ACTIONS","read","FILE_MODEL_UID","query","addPermissionsQueryTo","populate","fields","results","pagination","getService","findPage","ok","map","sanitizeMediaAsset","createMediaGetAssetHandler","asset","file","findEntityAndCheckPermissions","userAbility","error","errors","NotFoundError","MCP_NOT_FOUND_ASSET","data","createMediaListFoldersHandler","FOLDER_MODEL_UID","structure","getFolderService","getStructure","sanitizeMediaFolderTree"],"mappings":";;;;;;;;;;;;AAYA,MAAMA,YAAAA,GAAe,gBAAA;AAkBrB;;;;;;;;IASA,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,MAAMC,UAAmC,EAAC;IAE1C,IAAID,IAAAA,CAAKE,QAAQ,KAAK,IAAA,EAAM;AAC1BD,QAAAA,OAAAA,CAAQE,MAAM,GAAG,IAAA;AACnB,IAAA,CAAA,MAAO,IAAIH,IAAAA,CAAKE,QAAQ,KAAKE,SAAAA,EAAW;AACtCH,QAAAA,OAAAA,CAAQE,MAAM,GAAG;AAAEE,YAAAA,EAAAA,EAAIL,KAAKE;AAAS,SAAA;AACvC,IAAA;IAEA,IAAIF,IAAAA,CAAKM,IAAI,KAAKF,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQK,IAAI,GAAGN,IAAAA,CAAKM,IAAI,CAACC,QAAQ,CAAC,GAAA,CAAA,GAC9B;AAAEC,YAAAA,IAAAA,EAAMR,KAAKM;SAAK,GAClB;AAAEG,YAAAA,YAAAA,EAAc,CAAA,EAAGT,IAAAA,CAAKM,IAAI,CAAC,CAAC;AAAE,SAAA;AACtC,IAAA;IAEA,IAAIN,IAAAA,CAAKU,IAAI,KAAKN,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQS,IAAI,GAAG;AAAEC,YAAAA,UAAAA,EAAYX,KAAKU;AAAK,SAAA;AACzC,IAAA;IAEA,OAAOT,OAAAA;AACT,CAAA;AAEA;;;;;;AAMC,IACM,MAAMW,4BAAAA,GAA+B,CAC1CC,MAAAA,EACAC,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBF,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZb,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEE,QAAQ,EAAEI,IAAI,EAAEI,IAAI,EAAEM,IAAI,EAAEC,QAAQ,EAAEC,IAAI,EAAE,GAAGlB,IAAAA;AACvD,QAAA,MAAMmB,KAAKC,iCAAAA,CAAsBP,MAAAA,EAAQC,OAAAA,EAASO,iBAAAA,CAAQC,IAAI,EAAEC,wBAAAA,CAAAA;AAEhE,QAAA,MAAMC,KAAAA,GAAQ,MAAML,EAAAA,CAAGM,qBAAqB,CAAC;AAC3CxB,YAAAA,OAAAA,EAASF,iBAAAA,CAAkB;AAAEG,gBAAAA,QAAAA;AAAUI,gBAAAA,IAAAA;AAAMI,gBAAAA;AAAK,aAAA,CAAA;AAClDQ,YAAAA,IAAAA,EAAMA,IAAAA,IAAQpB,YAAAA;AACdkB,YAAAA,IAAAA,EAAMA,IAAAA,IAAQ,CAAA;AACdC,YAAAA,QAAAA,EAAUA,QAAAA,IAAY,EAAA;YACtBS,QAAAA,EAAU;gBAAEvB,MAAAA,EAAQ;oBAAEwB,MAAAA,EAAQ;AAAC,wBAAA,IAAA;AAAM,wBAAA;AAAO;AAAC;AAAE;AACjD,SAAA,CAAA;QAEA,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAE,GAAG,MAAMC,gBAAAA,CAAW,QAAA,EAAUjB,MAAAA,CAAAA,CAAQkB,QAAQ,CAACP,KAAAA,CAAAA;AAE5E,QAAA,OAAOQ,QAAAA,CAAG;YACRJ,OAAAA,EAASA,OAAAA,CAAQK,GAAG,CAACC,gCAAAA,CAAAA;AACrBL,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;AACF;AAEA;;;;;;;;AAQC,IACM,MAAMM,0BAAAA,GAA6B,CACxCtB,MAAAA,EACAC,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBF,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZb,IAAI,EAGL,GAAA;QACC,MAAM,EAAEK,EAAE,EAAE,GAAGL,IAAAA;;AAGfoB,QAAAA,iCAAAA,CAAsBP,MAAAA,EAAQC,OAAAA,EAASO,iBAAAA,CAAQC,IAAI,EAAEC,wBAAAA,CAAAA;QAErD,IAAIa,KAAAA;QACJ,IAAI;AACD,YAAA,CAAA,EAAEC,IAAAA,EAAMD,KAAK,EAAE,GAAG,MAAME,2DAAAA,CACvBxB,OAAAA,CAAQyB,WAAW,EACnBlB,iBAAAA,CAAQC,IAAI,EACZC,wBAAAA,EACAlB,IACAQ,MAAAA,CACF;AACF,QAAA,CAAA,CAAE,OAAO2B,KAAAA,EAAO;;;YAGd,IAAIA,KAAAA,YAAiBC,cAAAA,CAAOC,aAAa,EAAE;gBACzC,MAAM,IAAID,cAAAA,CAAOC,aAAa,CAACC,+BAAAA,CAAAA;AACjC,YAAA;YACA,MAAMH,KAAAA;AACR,QAAA;AAEA,QAAA,OAAOR,QAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMV,gCAAAA,CAAmBE,KAAAA;AAAO,SAAA,CAAA;AAC9C,IAAA,CAAA;AACF;AAEA;;;;;;;;;AASC,IACM,MAAMS,6BAAAA,GAAgC,CAC3ChC,MAAAA,EACAC,OAAAA,GAAAA;IAEAC,qCAAAA,CAAsBF,MAAAA,CAAAA;IAEtB,OAAO,UAAA;AACLO,QAAAA,iCAAAA,CAAsBP,MAAAA,EAAQC,OAAAA,EAASO,iBAAAA,CAAQC,IAAI,EAAEwB,0BAAAA,CAAAA;AAErD,QAAA,MAAMC,SAAAA,GAAY,MAAMC,gCAAAA,CAAiBnC,MAAAA,CAAAA,CAAQoC,YAAY,EAAA;AAE7D,QAAA,OAAOjB,QAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMM,qCAAAA,CAAwBH,SAAAA;AAAW,SAAA,CAAA;AACvD,IAAA,CAAA;AACF;;;;;;"}
+{"version":3,"file":"read-handlers.js","sources":["../../../../server/src/mcp/handlers/read-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { getFolderService } from '../ambient-instance';\nimport { ACTIONS, FILE_MODEL_UID, FOLDER_MODEL_UID } from '../../constants';\nimport { assertMediaPermission } from '../permissions';\nimport { findEntityAndCheckPermissions } from '../../controllers/utils/find-entity-and-check-permissions';\nimport { sanitizeMediaAsset, sanitizeMediaFolderTree } from '../sanitizers/sanitize-media';\nimport { MCP_NOT_FOUND_ASSET } from './constants';\nimport { ok } from '../utils';\n\nconst DEFAULT_SORT = 'createdAt:DESC';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's Zod input\n// schema before the handler runs, so handlers accept the erased `Record<string, unknown>` the\n// registry hands them and narrow it here.\ntype ListMediaArgs = {\n  folderId?: number | null;\n  mime?: string;\n  name?: string;\n  page?: number;\n  pageSize?: number;\n  sort?: string;\n};\n\ntype GetMediaArgs = {\n  id: number;\n};\n\n/**\n * Builds the `filters` clause for `media_list_assets`.\n *\n * `folderId: null` is meaningfully different from an omitted `folderId`: null means \"assets at\n * the media library root\" (no folder relation), while omitting it means \"any folder\".\n *\n * `mime` accepts both a full type and a bare prefix. An exact match on \"image\" would never hit,\n * so a value without a slash is matched as a prefix (\"image\" → every \"image/*\").\n */\nconst buildAssetFilters = (args: ListMediaArgs): Record<string, unknown> => {\n  const filters: Record<string, unknown> = {};\n\n  if (args.folderId === null) {\n    filters.folder = null;\n  } else if (args.folderId !== undefined) {\n    filters.folder = { id: args.folderId };\n  }\n\n  if (args.mime !== undefined) {\n    filters.mime = args.mime.includes('/')\n      ? { $eqi: args.mime }\n      : { $startsWithi: `${args.mime}/` };\n  }\n\n  if (args.name !== undefined) {\n    filters.name = { $containsi: args.name };\n  }\n\n  return filters;\n};\n\n/**\n * `media_list_assets` — paginated, filtered listing of media files.\n *\n * Permission conditions are applied through the permissions manager\n * (`addPermissionsQueryTo`) so a token restricted by a condition — e.g. own-assets-only —\n * sees the same subset it would through the admin API.\n */\nexport const createMediaListAssetsHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { folderId, mime, name, page, pageSize, sort } = args as ListMediaArgs;\n    const pm = assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    const query = await pm.addPermissionsQueryTo({\n      filters: buildAssetFilters({ folderId, mime, name }),\n      sort: sort ?? DEFAULT_SORT,\n      page: page ?? 1,\n      pageSize: pageSize ?? 25,\n      populate: { folder: { fields: ['id', 'name'] } },\n    });\n\n    const { results, pagination } = await getService('upload', strapi).findPage(query);\n\n    return ok({\n      results: results.map(sanitizeMediaAsset),\n      pagination,\n    });\n  };\n\n/**\n * `media_get_asset` — a single asset by numeric id.\n *\n * Row-level permission *conditions* are enforced by `findEntityAndCheckPermissions`, the same\n * helper the admin `findOne` controller uses: it populates `createdBy` and the creator's roles\n * before building the CASL subject, which is what the admin conditions read. Checking a subject\n * without those fields would deny a conditioned grant its own assets, and would disagree with\n * `media_list_assets`, where the condition is pushed into the query instead.\n */\nexport const createMediaGetAssetHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id } = args as GetMediaArgs;\n\n    // Model-level gate first, so a token without upload read at all is refused before a lookup.\n    assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    let asset;\n    try {\n      ({ file: asset } = await findEntityAndCheckPermissions(\n        context.userAbility,\n        ACTIONS.read,\n        FILE_MODEL_UID,\n        id,\n        strapi\n      ));\n    } catch (error) {\n      // The helper is written for HTTP, where a bare NotFoundError is enough. MCP answers an\n      // agent, so restate it with the message the other media tools use.\n      if (error instanceof errors.NotFoundError) {\n        throw new errors.NotFoundError(MCP_NOT_FOUND_ASSET);\n      }\n      throw error;\n    }\n\n    return ok({ data: sanitizeMediaAsset(asset) });\n  };\n\n/**\n * `media_list_folders` — the nested folder structure, reusing `folder.getStructure()`.\n *\n * `getStructure()` returns the whole tree in one query and has no permission-condition\n * filtering, so this is gated on the model-level read permission only — matching\n * `GET /upload/folder-structure` in the admin API.\n *\n * The folder service queries the ambient `global.strapi` regardless of the instance passed to\n * `getService`; `buildUploadMcpToolDefinitions` asserts the two agree before this handler is\n * ever constructed — see `assertAmbientInstance` for why.\n */\nexport const createMediaListFoldersHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async (): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    assertMediaPermission(strapi, context, ACTIONS.read, FOLDER_MODEL_UID);\n\n    const structure = await getFolderService(strapi).getStructure();\n\n    return ok({ data: sanitizeMediaFolderTree(structure) });\n  };\n"],"names":["DEFAULT_SORT","buildAssetFilters","args","filters","folderId","folder","undefined","id","mime","includes","$eqi","$startsWithi","name","$containsi","createMediaListAssetsHandler","strapi","context","page","pageSize","sort","pm","assertMediaPermission","ACTIONS","read","FILE_MODEL_UID","query","addPermissionsQueryTo","populate","fields","results","pagination","getService","findPage","ok","map","sanitizeMediaAsset","createMediaGetAssetHandler","asset","file","findEntityAndCheckPermissions","userAbility","error","errors","NotFoundError","MCP_NOT_FOUND_ASSET","data","createMediaListFoldersHandler","FOLDER_MODEL_UID","structure","getFolderService","getStructure","sanitizeMediaFolderTree"],"mappings":";;;;;;;;;;;;AAYA,MAAMA,YAAAA,GAAe,gBAAA;AAkBrB;;;;;;;;IASA,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,MAAMC,UAAmC,EAAC;IAE1C,IAAID,IAAAA,CAAKE,QAAQ,KAAK,IAAA,EAAM;AAC1BD,QAAAA,OAAAA,CAAQE,MAAM,GAAG,IAAA;AACnB,IAAA,CAAA,MAAO,IAAIH,IAAAA,CAAKE,QAAQ,KAAKE,SAAAA,EAAW;AACtCH,QAAAA,OAAAA,CAAQE,MAAM,GAAG;AAAEE,YAAAA,EAAAA,EAAIL,KAAKE;AAAS,SAAA;AACvC,IAAA;IAEA,IAAIF,IAAAA,CAAKM,IAAI,KAAKF,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQK,IAAI,GAAGN,IAAAA,CAAKM,IAAI,CAACC,QAAQ,CAAC,GAAA,CAAA,GAC9B;AAAEC,YAAAA,IAAAA,EAAMR,KAAKM;SAAK,GAClB;AAAEG,YAAAA,YAAAA,EAAc,CAAA,EAAGT,IAAAA,CAAKM,IAAI,CAAC,CAAC;AAAE,SAAA;AACtC,IAAA;IAEA,IAAIN,IAAAA,CAAKU,IAAI,KAAKN,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQS,IAAI,GAAG;AAAEC,YAAAA,UAAAA,EAAYX,KAAKU;AAAK,SAAA;AACzC,IAAA;IAEA,OAAOT,OAAAA;AACT,CAAA;AAEA;;;;;;UAOaW,4BAAAA,GACX,CAACC,QAAqBC,OAAAA,GACtB,OAAO,EACLd,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEE,QAAQ,EAAEI,IAAI,EAAEI,IAAI,EAAEK,IAAI,EAAEC,QAAQ,EAAEC,IAAI,EAAE,GAAGjB,IAAAA;AACvD,QAAA,MAAMkB,KAAKC,iCAAAA,CAAsBN,MAAAA,EAAQC,OAAAA,EAASM,iBAAAA,CAAQC,IAAI,EAAEC,wBAAAA,CAAAA;AAEhE,QAAA,MAAMC,KAAAA,GAAQ,MAAML,EAAAA,CAAGM,qBAAqB,CAAC;AAC3CvB,YAAAA,OAAAA,EAASF,iBAAAA,CAAkB;AAAEG,gBAAAA,QAAAA;AAAUI,gBAAAA,IAAAA;AAAMI,gBAAAA;AAAK,aAAA,CAAA;AAClDO,YAAAA,IAAAA,EAAMA,IAAAA,IAAQnB,YAAAA;AACdiB,YAAAA,IAAAA,EAAMA,IAAAA,IAAQ,CAAA;AACdC,YAAAA,QAAAA,EAAUA,QAAAA,IAAY,EAAA;YACtBS,QAAAA,EAAU;gBAAEtB,MAAAA,EAAQ;oBAAEuB,MAAAA,EAAQ;AAAC,wBAAA,IAAA;AAAM,wBAAA;AAAO;AAAC;AAAE;AACjD,SAAA,CAAA;QAEA,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAE,GAAG,MAAMC,gBAAAA,CAAW,QAAA,EAAUhB,MAAAA,CAAAA,CAAQiB,QAAQ,CAACP,KAAAA,CAAAA;AAE5E,QAAA,OAAOQ,QAAAA,CAAG;YACRJ,OAAAA,EAASA,OAAAA,CAAQK,GAAG,CAACC,gCAAAA,CAAAA;AACrBL,YAAAA;AACF,SAAA,CAAA;IACF;AAEF;;;;;;;;UASaM,0BAAAA,GACX,CAACrB,QAAqBC,OAAAA,GACtB,OAAO,EACLd,IAAI,EAGL,GAAA;QACC,MAAM,EAAEK,EAAE,EAAE,GAAGL,IAAAA;;AAGfmB,QAAAA,iCAAAA,CAAsBN,MAAAA,EAAQC,OAAAA,EAASM,iBAAAA,CAAQC,IAAI,EAAEC,wBAAAA,CAAAA;QAErD,IAAIa,KAAAA;QACJ,IAAI;AACD,YAAA,CAAA,EAAEC,IAAAA,EAAMD,KAAK,EAAE,GAAG,MAAME,2DAAAA,CACvBvB,OAAAA,CAAQwB,WAAW,EACnBlB,iBAAAA,CAAQC,IAAI,EACZC,wBAAAA,EACAjB,IACAQ,MAAAA,CACF;AACF,QAAA,CAAA,CAAE,OAAO0B,KAAAA,EAAO;;;YAGd,IAAIA,KAAAA,YAAiBC,cAAAA,CAAOC,aAAa,EAAE;gBACzC,MAAM,IAAID,cAAAA,CAAOC,aAAa,CAACC,+BAAAA,CAAAA;AACjC,YAAA;YACA,MAAMH,KAAAA;AACR,QAAA;AAEA,QAAA,OAAOR,QAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMV,gCAAAA,CAAmBE,KAAAA;AAAO,SAAA,CAAA;IAC9C;AAEF;;;;;;;;;;AAUC,IACM,MAAMS,6BAAAA,GACX,CAAC/B,QAAqBC,OAAAA,GACtB,UAAA;AACEK,QAAAA,iCAAAA,CAAsBN,MAAAA,EAAQC,OAAAA,EAASM,iBAAAA,CAAQC,IAAI,EAAEwB,0BAAAA,CAAAA;AAErD,QAAA,MAAMC,SAAAA,GAAY,MAAMC,gCAAAA,CAAiBlC,MAAAA,CAAAA,CAAQmC,YAAY,EAAA;AAE7D,QAAA,OAAOjB,QAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMM,qCAAAA,CAAwBH,SAAAA;AAAW,SAAA,CAAA;IACvD;;;;;;"}

package/dist/server/mcp/handlers/read-handlers.mjs

@@ -1,6 +1,6 @@
 import { errors } from '@strapi/utils';
 import { getService } from '../../utils/index.mjs';
-import { assertAmbientInstance, getFolderService } from '../ambient-instance.mjs';
+import { getFolderService } from '../ambient-instance.mjs';
 import { ACTIONS, FILE_MODEL_UID, FOLDER_MODEL_UID } from '../../constants.mjs';
 import { assertMediaPermission } from '../permissions.mjs';
 import { findEntityAndCheckPermissions } from '../../controllers/utils/find-entity-and-check-permissions.mjs';
@@ -46,9 +46,7 @@ const DEFAULT_SORT = 'createdAt:DESC';
  * Permission conditions are applied through the permissions manager
  * (`addPermissionsQueryTo`) so a token restricted by a condition — e.g. own-assets-only —
  * sees the same subset it would through the admin API.
- */ const createMediaListAssetsHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaListAssetsHandler = (strapi, context)=>async ({ args })=>{
         const { folderId, mime, name, page, pageSize, sort } = args;
         const pm = assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);
         const query = await pm.addPermissionsQueryTo({
@@ -75,7 +73,6 @@ const DEFAULT_SORT = 'createdAt:DESC';
             pagination
         });
     };
-};
 /**
  * `media_get_asset` — a single asset by numeric id.
  *
@@ -84,9 +81,7 @@ const DEFAULT_SORT = 'createdAt:DESC';
  * before building the CASL subject, which is what the admin conditions read. Checking a subject
  * without those fields would deny a conditioned grant its own assets, and would disagree with
  * `media_list_assets`, where the condition is pushed into the query instead.
- */ const createMediaGetAssetHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaGetAssetHandler = (strapi, context)=>async ({ args })=>{
         const { id } = args;
         // Model-level gate first, so a token without upload read at all is refused before a lookup.
         assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);
@@ -105,7 +100,6 @@ const DEFAULT_SORT = 'createdAt:DESC';
             data: sanitizeMediaAsset(asset)
         });
     };
-};
 /**
  * `media_list_folders` — the nested folder structure, reusing `folder.getStructure()`.
  *
@@ -113,18 +107,16 @@ const DEFAULT_SORT = 'createdAt:DESC';
  * filtering, so this is gated on the model-level read permission only — matching
  * `GET /upload/folder-structure` in the admin API.
  *
- * The factory asserts the handler's instance is the ambient `global.strapi` the folder service
- * actually queries — see `assertAmbientInstance` for why.
- */ const createMediaListFoldersHandler = (strapi, context)=>{
-    assertAmbientInstance(strapi);
-    return async ()=>{
+ * The folder service queries the ambient `global.strapi` regardless of the instance passed to
+ * `getService`; `buildUploadMcpToolDefinitions` asserts the two agree before this handler is
+ * ever constructed — see `assertAmbientInstance` for why.
+ */ const createMediaListFoldersHandler = (strapi, context)=>async ()=>{
         assertMediaPermission(strapi, context, ACTIONS.read, FOLDER_MODEL_UID);
         const structure = await getFolderService(strapi).getStructure();
         return ok({
             data: sanitizeMediaFolderTree(structure)
         });
     };
-};
 
 export { createMediaGetAssetHandler, createMediaListAssetsHandler, createMediaListFoldersHandler };
 //# sourceMappingURL=read-handlers.mjs.map

package/dist/server/mcp/handlers/read-handlers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"read-handlers.mjs","sources":["../../../../server/src/mcp/handlers/read-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { assertAmbientInstance, getFolderService } from '../ambient-instance';\nimport { ACTIONS, FILE_MODEL_UID, FOLDER_MODEL_UID } from '../../constants';\nimport { assertMediaPermission } from '../permissions';\nimport { findEntityAndCheckPermissions } from '../../controllers/utils/find-entity-and-check-permissions';\nimport { sanitizeMediaAsset, sanitizeMediaFolderTree } from '../sanitizers/sanitize-media';\nimport { MCP_NOT_FOUND_ASSET } from './constants';\nimport { ok } from '../utils';\n\nconst DEFAULT_SORT = 'createdAt:DESC';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's Zod input\n// schema before the handler runs, so handlers accept the erased `Record<string, unknown>` the\n// registry hands them and narrow it here.\ntype ListMediaArgs = {\n  folderId?: number | null;\n  mime?: string;\n  name?: string;\n  page?: number;\n  pageSize?: number;\n  sort?: string;\n};\n\ntype GetMediaArgs = {\n  id: number;\n};\n\n/**\n * Builds the `filters` clause for `media_list_assets`.\n *\n * `folderId: null` is meaningfully different from an omitted `folderId`: null means \"assets at\n * the media library root\" (no folder relation), while omitting it means \"any folder\".\n *\n * `mime` accepts both a full type and a bare prefix. An exact match on \"image\" would never hit,\n * so a value without a slash is matched as a prefix (\"image\" → every \"image/*\").\n */\nconst buildAssetFilters = (args: ListMediaArgs): Record<string, unknown> => {\n  const filters: Record<string, unknown> = {};\n\n  if (args.folderId === null) {\n    filters.folder = null;\n  } else if (args.folderId !== undefined) {\n    filters.folder = { id: args.folderId };\n  }\n\n  if (args.mime !== undefined) {\n    filters.mime = args.mime.includes('/')\n      ? { $eqi: args.mime }\n      : { $startsWithi: `${args.mime}/` };\n  }\n\n  if (args.name !== undefined) {\n    filters.name = { $containsi: args.name };\n  }\n\n  return filters;\n};\n\n/**\n * `media_list_assets` — paginated, filtered listing of media files.\n *\n * Permission conditions are applied through the permissions manager\n * (`addPermissionsQueryTo`) so a token restricted by a condition — e.g. own-assets-only —\n * sees the same subset it would through the admin API.\n */\nexport const createMediaListAssetsHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { folderId, mime, name, page, pageSize, sort } = args as ListMediaArgs;\n    const pm = assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    const query = await pm.addPermissionsQueryTo({\n      filters: buildAssetFilters({ folderId, mime, name }),\n      sort: sort ?? DEFAULT_SORT,\n      page: page ?? 1,\n      pageSize: pageSize ?? 25,\n      populate: { folder: { fields: ['id', 'name'] } },\n    });\n\n    const { results, pagination } = await getService('upload', strapi).findPage(query);\n\n    return ok({\n      results: results.map(sanitizeMediaAsset),\n      pagination,\n    });\n  };\n};\n\n/**\n * `media_get_asset` — a single asset by numeric id.\n *\n * Row-level permission *conditions* are enforced by `findEntityAndCheckPermissions`, the same\n * helper the admin `findOne` controller uses: it populates `createdBy` and the creator's roles\n * before building the CASL subject, which is what the admin conditions read. Checking a subject\n * without those fields would deny a conditioned grant its own assets, and would disagree with\n * `media_list_assets`, where the condition is pushed into the query instead.\n */\nexport const createMediaGetAssetHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id } = args as GetMediaArgs;\n\n    // Model-level gate first, so a token without upload read at all is refused before a lookup.\n    assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    let asset;\n    try {\n      ({ file: asset } = await findEntityAndCheckPermissions(\n        context.userAbility,\n        ACTIONS.read,\n        FILE_MODEL_UID,\n        id,\n        strapi\n      ));\n    } catch (error) {\n      // The helper is written for HTTP, where a bare NotFoundError is enough. MCP answers an\n      // agent, so restate it with the message the other media tools use.\n      if (error instanceof errors.NotFoundError) {\n        throw new errors.NotFoundError(MCP_NOT_FOUND_ASSET);\n      }\n      throw error;\n    }\n\n    return ok({ data: sanitizeMediaAsset(asset) });\n  };\n};\n\n/**\n * `media_list_folders` — the nested folder structure, reusing `folder.getStructure()`.\n *\n * `getStructure()` returns the whole tree in one query and has no permission-condition\n * filtering, so this is gated on the model-level read permission only — matching\n * `GET /upload/folder-structure` in the admin API.\n *\n * The factory asserts the handler's instance is the ambient `global.strapi` the folder service\n * actually queries — see `assertAmbientInstance` for why.\n */\nexport const createMediaListFoldersHandler = (\n  strapi: Core.Strapi,\n  context: Modules.MCP.McpHandlerContext\n) => {\n  assertAmbientInstance(strapi);\n\n  return async (): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    assertMediaPermission(strapi, context, ACTIONS.read, FOLDER_MODEL_UID);\n\n    const structure = await getFolderService(strapi).getStructure();\n\n    return ok({ data: sanitizeMediaFolderTree(structure) });\n  };\n};\n"],"names":["DEFAULT_SORT","buildAssetFilters","args","filters","folderId","folder","undefined","id","mime","includes","$eqi","$startsWithi","name","$containsi","createMediaListAssetsHandler","strapi","context","assertAmbientInstance","page","pageSize","sort","pm","assertMediaPermission","ACTIONS","read","FILE_MODEL_UID","query","addPermissionsQueryTo","populate","fields","results","pagination","getService","findPage","ok","map","sanitizeMediaAsset","createMediaGetAssetHandler","asset","file","findEntityAndCheckPermissions","userAbility","error","errors","NotFoundError","MCP_NOT_FOUND_ASSET","data","createMediaListFoldersHandler","FOLDER_MODEL_UID","structure","getFolderService","getStructure","sanitizeMediaFolderTree"],"mappings":";;;;;;;;;;AAYA,MAAMA,YAAAA,GAAe,gBAAA;AAkBrB;;;;;;;;IASA,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,MAAMC,UAAmC,EAAC;IAE1C,IAAID,IAAAA,CAAKE,QAAQ,KAAK,IAAA,EAAM;AAC1BD,QAAAA,OAAAA,CAAQE,MAAM,GAAG,IAAA;AACnB,IAAA,CAAA,MAAO,IAAIH,IAAAA,CAAKE,QAAQ,KAAKE,SAAAA,EAAW;AACtCH,QAAAA,OAAAA,CAAQE,MAAM,GAAG;AAAEE,YAAAA,EAAAA,EAAIL,KAAKE;AAAS,SAAA;AACvC,IAAA;IAEA,IAAIF,IAAAA,CAAKM,IAAI,KAAKF,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQK,IAAI,GAAGN,IAAAA,CAAKM,IAAI,CAACC,QAAQ,CAAC,GAAA,CAAA,GAC9B;AAAEC,YAAAA,IAAAA,EAAMR,KAAKM;SAAK,GAClB;AAAEG,YAAAA,YAAAA,EAAc,CAAA,EAAGT,IAAAA,CAAKM,IAAI,CAAC,CAAC;AAAE,SAAA;AACtC,IAAA;IAEA,IAAIN,IAAAA,CAAKU,IAAI,KAAKN,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQS,IAAI,GAAG;AAAEC,YAAAA,UAAAA,EAAYX,KAAKU;AAAK,SAAA;AACzC,IAAA;IAEA,OAAOT,OAAAA;AACT,CAAA;AAEA;;;;;;AAMC,IACM,MAAMW,4BAAAA,GAA+B,CAC1CC,MAAAA,EACAC,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBF,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZb,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEE,QAAQ,EAAEI,IAAI,EAAEI,IAAI,EAAEM,IAAI,EAAEC,QAAQ,EAAEC,IAAI,EAAE,GAAGlB,IAAAA;AACvD,QAAA,MAAMmB,KAAKC,qBAAAA,CAAsBP,MAAAA,EAAQC,OAAAA,EAASO,OAAAA,CAAQC,IAAI,EAAEC,cAAAA,CAAAA;AAEhE,QAAA,MAAMC,KAAAA,GAAQ,MAAML,EAAAA,CAAGM,qBAAqB,CAAC;AAC3CxB,YAAAA,OAAAA,EAASF,iBAAAA,CAAkB;AAAEG,gBAAAA,QAAAA;AAAUI,gBAAAA,IAAAA;AAAMI,gBAAAA;AAAK,aAAA,CAAA;AAClDQ,YAAAA,IAAAA,EAAMA,IAAAA,IAAQpB,YAAAA;AACdkB,YAAAA,IAAAA,EAAMA,IAAAA,IAAQ,CAAA;AACdC,YAAAA,QAAAA,EAAUA,QAAAA,IAAY,EAAA;YACtBS,QAAAA,EAAU;gBAAEvB,MAAAA,EAAQ;oBAAEwB,MAAAA,EAAQ;AAAC,wBAAA,IAAA;AAAM,wBAAA;AAAO;AAAC;AAAE;AACjD,SAAA,CAAA;QAEA,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAE,GAAG,MAAMC,UAAAA,CAAW,QAAA,EAAUjB,MAAAA,CAAAA,CAAQkB,QAAQ,CAACP,KAAAA,CAAAA;AAE5E,QAAA,OAAOQ,EAAAA,CAAG;YACRJ,OAAAA,EAASA,OAAAA,CAAQK,GAAG,CAACC,kBAAAA,CAAAA;AACrBL,YAAAA;AACF,SAAA,CAAA;AACF,IAAA,CAAA;AACF;AAEA;;;;;;;;AAQC,IACM,MAAMM,0BAAAA,GAA6B,CACxCtB,MAAAA,EACAC,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBF,MAAAA,CAAAA;IAEtB,OAAO,OAAO,EACZb,IAAI,EAGL,GAAA;QACC,MAAM,EAAEK,EAAE,EAAE,GAAGL,IAAAA;;AAGfoB,QAAAA,qBAAAA,CAAsBP,MAAAA,EAAQC,OAAAA,EAASO,OAAAA,CAAQC,IAAI,EAAEC,cAAAA,CAAAA;QAErD,IAAIa,KAAAA;QACJ,IAAI;AACD,YAAA,CAAA,EAAEC,IAAAA,EAAMD,KAAK,EAAE,GAAG,MAAME,6BAAAA,CACvBxB,OAAAA,CAAQyB,WAAW,EACnBlB,OAAAA,CAAQC,IAAI,EACZC,cAAAA,EACAlB,IACAQ,MAAAA,CACF;AACF,QAAA,CAAA,CAAE,OAAO2B,KAAAA,EAAO;;;YAGd,IAAIA,KAAAA,YAAiBC,MAAAA,CAAOC,aAAa,EAAE;gBACzC,MAAM,IAAID,MAAAA,CAAOC,aAAa,CAACC,mBAAAA,CAAAA;AACjC,YAAA;YACA,MAAMH,KAAAA;AACR,QAAA;AAEA,QAAA,OAAOR,EAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMV,kBAAAA,CAAmBE,KAAAA;AAAO,SAAA,CAAA;AAC9C,IAAA,CAAA;AACF;AAEA;;;;;;;;;AASC,IACM,MAAMS,6BAAAA,GAAgC,CAC3ChC,MAAAA,EACAC,OAAAA,GAAAA;IAEAC,qBAAAA,CAAsBF,MAAAA,CAAAA;IAEtB,OAAO,UAAA;AACLO,QAAAA,qBAAAA,CAAsBP,MAAAA,EAAQC,OAAAA,EAASO,OAAAA,CAAQC,IAAI,EAAEwB,gBAAAA,CAAAA;AAErD,QAAA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBnC,MAAAA,CAAAA,CAAQoC,YAAY,EAAA;AAE7D,QAAA,OAAOjB,EAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMM,uBAAAA,CAAwBH,SAAAA;AAAW,SAAA,CAAA;AACvD,IAAA,CAAA;AACF;;;;"}
+{"version":3,"file":"read-handlers.mjs","sources":["../../../../server/src/mcp/handlers/read-handlers.ts"],"sourcesContent":["import { errors } from '@strapi/utils';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { getService } from '../../utils';\nimport { getFolderService } from '../ambient-instance';\nimport { ACTIONS, FILE_MODEL_UID, FOLDER_MODEL_UID } from '../../constants';\nimport { assertMediaPermission } from '../permissions';\nimport { findEntityAndCheckPermissions } from '../../controllers/utils/find-entity-and-check-permissions';\nimport { sanitizeMediaAsset, sanitizeMediaFolderTree } from '../sanitizers/sanitize-media';\nimport { MCP_NOT_FOUND_ASSET } from './constants';\nimport { ok } from '../utils';\n\nconst DEFAULT_SORT = 'createdAt:DESC';\n\n// Arg types are type-level only: the MCP SDK validates `args` against the tool's Zod input\n// schema before the handler runs, so handlers accept the erased `Record<string, unknown>` the\n// registry hands them and narrow it here.\ntype ListMediaArgs = {\n  folderId?: number | null;\n  mime?: string;\n  name?: string;\n  page?: number;\n  pageSize?: number;\n  sort?: string;\n};\n\ntype GetMediaArgs = {\n  id: number;\n};\n\n/**\n * Builds the `filters` clause for `media_list_assets`.\n *\n * `folderId: null` is meaningfully different from an omitted `folderId`: null means \"assets at\n * the media library root\" (no folder relation), while omitting it means \"any folder\".\n *\n * `mime` accepts both a full type and a bare prefix. An exact match on \"image\" would never hit,\n * so a value without a slash is matched as a prefix (\"image\" → every \"image/*\").\n */\nconst buildAssetFilters = (args: ListMediaArgs): Record<string, unknown> => {\n  const filters: Record<string, unknown> = {};\n\n  if (args.folderId === null) {\n    filters.folder = null;\n  } else if (args.folderId !== undefined) {\n    filters.folder = { id: args.folderId };\n  }\n\n  if (args.mime !== undefined) {\n    filters.mime = args.mime.includes('/')\n      ? { $eqi: args.mime }\n      : { $startsWithi: `${args.mime}/` };\n  }\n\n  if (args.name !== undefined) {\n    filters.name = { $containsi: args.name };\n  }\n\n  return filters;\n};\n\n/**\n * `media_list_assets` — paginated, filtered listing of media files.\n *\n * Permission conditions are applied through the permissions manager\n * (`addPermissionsQueryTo`) so a token restricted by a condition — e.g. own-assets-only —\n * sees the same subset it would through the admin API.\n */\nexport const createMediaListAssetsHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { folderId, mime, name, page, pageSize, sort } = args as ListMediaArgs;\n    const pm = assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    const query = await pm.addPermissionsQueryTo({\n      filters: buildAssetFilters({ folderId, mime, name }),\n      sort: sort ?? DEFAULT_SORT,\n      page: page ?? 1,\n      pageSize: pageSize ?? 25,\n      populate: { folder: { fields: ['id', 'name'] } },\n    });\n\n    const { results, pagination } = await getService('upload', strapi).findPage(query);\n\n    return ok({\n      results: results.map(sanitizeMediaAsset),\n      pagination,\n    });\n  };\n\n/**\n * `media_get_asset` — a single asset by numeric id.\n *\n * Row-level permission *conditions* are enforced by `findEntityAndCheckPermissions`, the same\n * helper the admin `findOne` controller uses: it populates `createdBy` and the creator's roles\n * before building the CASL subject, which is what the admin conditions read. Checking a subject\n * without those fields would deny a conditioned grant its own assets, and would disagree with\n * `media_list_assets`, where the condition is pushed into the query instead.\n */\nexport const createMediaGetAssetHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async ({\n    args,\n  }: {\n    args: Record<string, unknown>;\n  }): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    const { id } = args as GetMediaArgs;\n\n    // Model-level gate first, so a token without upload read at all is refused before a lookup.\n    assertMediaPermission(strapi, context, ACTIONS.read, FILE_MODEL_UID);\n\n    let asset;\n    try {\n      ({ file: asset } = await findEntityAndCheckPermissions(\n        context.userAbility,\n        ACTIONS.read,\n        FILE_MODEL_UID,\n        id,\n        strapi\n      ));\n    } catch (error) {\n      // The helper is written for HTTP, where a bare NotFoundError is enough. MCP answers an\n      // agent, so restate it with the message the other media tools use.\n      if (error instanceof errors.NotFoundError) {\n        throw new errors.NotFoundError(MCP_NOT_FOUND_ASSET);\n      }\n      throw error;\n    }\n\n    return ok({ data: sanitizeMediaAsset(asset) });\n  };\n\n/**\n * `media_list_folders` — the nested folder structure, reusing `folder.getStructure()`.\n *\n * `getStructure()` returns the whole tree in one query and has no permission-condition\n * filtering, so this is gated on the model-level read permission only — matching\n * `GET /upload/folder-structure` in the admin API.\n *\n * The folder service queries the ambient `global.strapi` regardless of the instance passed to\n * `getService`; `buildUploadMcpToolDefinitions` asserts the two agree before this handler is\n * ever constructed — see `assertAmbientInstance` for why.\n */\nexport const createMediaListFoldersHandler =\n  (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) =>\n  async (): Promise<Modules.MCP.McpToolHandlerReturn> => {\n    assertMediaPermission(strapi, context, ACTIONS.read, FOLDER_MODEL_UID);\n\n    const structure = await getFolderService(strapi).getStructure();\n\n    return ok({ data: sanitizeMediaFolderTree(structure) });\n  };\n"],"names":["DEFAULT_SORT","buildAssetFilters","args","filters","folderId","folder","undefined","id","mime","includes","$eqi","$startsWithi","name","$containsi","createMediaListAssetsHandler","strapi","context","page","pageSize","sort","pm","assertMediaPermission","ACTIONS","read","FILE_MODEL_UID","query","addPermissionsQueryTo","populate","fields","results","pagination","getService","findPage","ok","map","sanitizeMediaAsset","createMediaGetAssetHandler","asset","file","findEntityAndCheckPermissions","userAbility","error","errors","NotFoundError","MCP_NOT_FOUND_ASSET","data","createMediaListFoldersHandler","FOLDER_MODEL_UID","structure","getFolderService","getStructure","sanitizeMediaFolderTree"],"mappings":";;;;;;;;;;AAYA,MAAMA,YAAAA,GAAe,gBAAA;AAkBrB;;;;;;;;IASA,MAAMC,oBAAoB,CAACC,IAAAA,GAAAA;AACzB,IAAA,MAAMC,UAAmC,EAAC;IAE1C,IAAID,IAAAA,CAAKE,QAAQ,KAAK,IAAA,EAAM;AAC1BD,QAAAA,OAAAA,CAAQE,MAAM,GAAG,IAAA;AACnB,IAAA,CAAA,MAAO,IAAIH,IAAAA,CAAKE,QAAQ,KAAKE,SAAAA,EAAW;AACtCH,QAAAA,OAAAA,CAAQE,MAAM,GAAG;AAAEE,YAAAA,EAAAA,EAAIL,KAAKE;AAAS,SAAA;AACvC,IAAA;IAEA,IAAIF,IAAAA,CAAKM,IAAI,KAAKF,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQK,IAAI,GAAGN,IAAAA,CAAKM,IAAI,CAACC,QAAQ,CAAC,GAAA,CAAA,GAC9B;AAAEC,YAAAA,IAAAA,EAAMR,KAAKM;SAAK,GAClB;AAAEG,YAAAA,YAAAA,EAAc,CAAA,EAAGT,IAAAA,CAAKM,IAAI,CAAC,CAAC;AAAE,SAAA;AACtC,IAAA;IAEA,IAAIN,IAAAA,CAAKU,IAAI,KAAKN,SAAAA,EAAW;AAC3BH,QAAAA,OAAAA,CAAQS,IAAI,GAAG;AAAEC,YAAAA,UAAAA,EAAYX,KAAKU;AAAK,SAAA;AACzC,IAAA;IAEA,OAAOT,OAAAA;AACT,CAAA;AAEA;;;;;;UAOaW,4BAAAA,GACX,CAACC,QAAqBC,OAAAA,GACtB,OAAO,EACLd,IAAI,EAGL,GAAA;AACC,QAAA,MAAM,EAAEE,QAAQ,EAAEI,IAAI,EAAEI,IAAI,EAAEK,IAAI,EAAEC,QAAQ,EAAEC,IAAI,EAAE,GAAGjB,IAAAA;AACvD,QAAA,MAAMkB,KAAKC,qBAAAA,CAAsBN,MAAAA,EAAQC,OAAAA,EAASM,OAAAA,CAAQC,IAAI,EAAEC,cAAAA,CAAAA;AAEhE,QAAA,MAAMC,KAAAA,GAAQ,MAAML,EAAAA,CAAGM,qBAAqB,CAAC;AAC3CvB,YAAAA,OAAAA,EAASF,iBAAAA,CAAkB;AAAEG,gBAAAA,QAAAA;AAAUI,gBAAAA,IAAAA;AAAMI,gBAAAA;AAAK,aAAA,CAAA;AAClDO,YAAAA,IAAAA,EAAMA,IAAAA,IAAQnB,YAAAA;AACdiB,YAAAA,IAAAA,EAAMA,IAAAA,IAAQ,CAAA;AACdC,YAAAA,QAAAA,EAAUA,QAAAA,IAAY,EAAA;YACtBS,QAAAA,EAAU;gBAAEtB,MAAAA,EAAQ;oBAAEuB,MAAAA,EAAQ;AAAC,wBAAA,IAAA;AAAM,wBAAA;AAAO;AAAC;AAAE;AACjD,SAAA,CAAA;QAEA,MAAM,EAAEC,OAAO,EAAEC,UAAU,EAAE,GAAG,MAAMC,UAAAA,CAAW,QAAA,EAAUhB,MAAAA,CAAAA,CAAQiB,QAAQ,CAACP,KAAAA,CAAAA;AAE5E,QAAA,OAAOQ,EAAAA,CAAG;YACRJ,OAAAA,EAASA,OAAAA,CAAQK,GAAG,CAACC,kBAAAA,CAAAA;AACrBL,YAAAA;AACF,SAAA,CAAA;IACF;AAEF;;;;;;;;UASaM,0BAAAA,GACX,CAACrB,QAAqBC,OAAAA,GACtB,OAAO,EACLd,IAAI,EAGL,GAAA;QACC,MAAM,EAAEK,EAAE,EAAE,GAAGL,IAAAA;;AAGfmB,QAAAA,qBAAAA,CAAsBN,MAAAA,EAAQC,OAAAA,EAASM,OAAAA,CAAQC,IAAI,EAAEC,cAAAA,CAAAA;QAErD,IAAIa,KAAAA;QACJ,IAAI;AACD,YAAA,CAAA,EAAEC,IAAAA,EAAMD,KAAK,EAAE,GAAG,MAAME,6BAAAA,CACvBvB,OAAAA,CAAQwB,WAAW,EACnBlB,OAAAA,CAAQC,IAAI,EACZC,cAAAA,EACAjB,IACAQ,MAAAA,CACF;AACF,QAAA,CAAA,CAAE,OAAO0B,KAAAA,EAAO;;;YAGd,IAAIA,KAAAA,YAAiBC,MAAAA,CAAOC,aAAa,EAAE;gBACzC,MAAM,IAAID,MAAAA,CAAOC,aAAa,CAACC,mBAAAA,CAAAA;AACjC,YAAA;YACA,MAAMH,KAAAA;AACR,QAAA;AAEA,QAAA,OAAOR,EAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMV,kBAAAA,CAAmBE,KAAAA;AAAO,SAAA,CAAA;IAC9C;AAEF;;;;;;;;;;AAUC,IACM,MAAMS,6BAAAA,GACX,CAAC/B,QAAqBC,OAAAA,GACtB,UAAA;AACEK,QAAAA,qBAAAA,CAAsBN,MAAAA,EAAQC,OAAAA,EAASM,OAAAA,CAAQC,IAAI,EAAEwB,gBAAAA,CAAAA;AAErD,QAAA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBlC,MAAAA,CAAAA,CAAQmC,YAAY,EAAA;AAE7D,QAAA,OAAOjB,EAAAA,CAAG;AAAEY,YAAAA,IAAAA,EAAMM,uBAAAA,CAAwBH,SAAAA;AAAW,SAAA,CAAA;IACvD;;;;"}

package/dist/server/mcp/handlers/write-handlers.js

@@ -4,7 +4,6 @@ var utils = require('@strapi/utils');
 var index = require('../../utils/index.js');
 var constants$1 = require('../../constants.js');
 var findEntityAndCheckPermissions = require('../../controllers/utils/find-entity-and-check-permissions.js');
-var ambientInstance = require('../ambient-instance.js');
 var permissions = require('../permissions.js');
 var sanitizeMedia = require('../sanitizers/sanitize-media.js');
 var constants = require('./constants.js');
@@ -42,9 +41,7 @@ var utils$1 = require('../utils.js');
  * The response carries the updated asset through the read sanitizer, so a client can confirm
  * the write without a second `media_get_asset` round-trip — and so provider fields stay
  * invisible on the write path too.
- */ const createMediaUpdateAssetHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaUpdateAssetHandler = (strapi, context)=>async ({ args })=>{
         const { id, ...metadata } = args;
         const fileInfo = buildFileInfo(metadata);
         // A patch with no writable field is a caller error, not a no-op success: the schema cannot
@@ -79,7 +76,6 @@ var utils$1 = require('../utils.js');
             data: sanitizeMedia.sanitizeMediaAsset(updated ?? written)
         });
     };
-};
 /**
  * Resolves the destination folder for `media_move_assets`, and rejects one that does not exist.
  *
@@ -129,9 +125,7 @@ var utils$1 = require('../utils.js');
  * The moves are sequential on purpose. Each one writes the join table and `folderPath` for its
  * asset, and a bounded reorganisation (100 ids max, per the input schema) is not worth the
  * connection-pool contention of firing them in parallel.
- */ const createMediaMoveAssetsHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaMoveAssetsHandler = (strapi, context)=>async ({ args })=>{
         const { ids, folder } = args;
         // Model-level gate first, so a token without the action is refused before any DB read.
         permissions.assertMediaPermission(strapi, context, constants$1.ACTIONS.update, constants$1.FILE_MODEL_UID);
@@ -208,7 +202,6 @@ var utils$1 = require('../utils.js');
             failed
         });
     };
-};
 /**
  * `media_delete_assets` — previews or performs the permanent deletion of assets, in bulk.
  *
@@ -233,9 +226,7 @@ var utils$1 = require('../utils.js');
  *
  * The deletions are sequential on purpose: each one performs provider I/O, and a bounded batch
  * (100 ids max, per the input schema) is not worth firing at a provider in parallel.
- */ const createMediaDeleteAssetsHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaDeleteAssetsHandler = (strapi, context)=>async ({ args })=>{
         const { ids, dryRun = true } = args;
         // Model-level gate first, so a token without the action is refused before any DB read.
         // The preview takes the same gate: it reveals which assets exist and what they are.
@@ -307,7 +298,6 @@ var utils$1 = require('../utils.js');
             totalFileNumber: deleted.length
         });
     };
-};
 
 exports.createMediaDeleteAssetsHandler = createMediaDeleteAssetsHandler;
 exports.createMediaMoveAssetsHandler = createMediaMoveAssetsHandler;