@strapi/upload 5.58.0 → 5.60.0

package/dist/admin/utils/allowedMediaTypes.mjs

@@ -0,0 +1,39 @@
+/**
+ * The `allowedTypes` values a `media` attribute can carry, and the mime prefix
+ * each one stands for. `files` is the catch-all: anything that is not an image,
+ * video or audio.
+ */ const MEDIA_KINDS = [
+    'image',
+    'video',
+    'audio'
+];
+const SINGULAR = {
+    files: 'file',
+    images: 'image',
+    videos: 'video',
+    audios: 'audio'
+};
+/**
+ * Whether a mime type satisfies a field's `allowedTypes`.
+ *
+ * No `allowedTypes` means the field takes anything. A file with no mime is only
+ * allowed where `files` is, since nothing places it in one of the three media
+ * kinds.
+ */ const isMediaTypeAllowed = (allowedTypes, mime)=>{
+    if (!allowedTypes || allowedTypes.length === 0) {
+        return true;
+    }
+    const singularTypes = new Set(allowedTypes.map((type)=>SINGULAR[type]).filter((type)=>Boolean(type)));
+    const kind = mime?.split('/')[0];
+    if (!kind) {
+        return singularTypes.has('file');
+    }
+    if (singularTypes.has('file') && !MEDIA_KINDS.includes(kind)) {
+        return true;
+    }
+    return singularTypes.has(kind);
+};
+/** The subset of `files` this field accepts, in the order they were given. */ const filterAllowedFiles = (allowedTypes, files)=>files.filter((file)=>isMediaTypeAllowed(allowedTypes, file.type));
+
+export { filterAllowedFiles, isMediaTypeAllowed };
+//# sourceMappingURL=allowedMediaTypes.mjs.map

package/dist/admin/utils/allowedMediaTypes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowedMediaTypes.mjs","sources":["../../../admin/src/utils/allowedMediaTypes.ts"],"sourcesContent":["/**\n * The `allowedTypes` values a `media` attribute can carry, and the mime prefix\n * each one stands for. `files` is the catch-all: anything that is not an image,\n * video or audio.\n */\nexport type AllowedMediaType = 'files' | 'images' | 'videos' | 'audios';\n\nconst MEDIA_KINDS = ['image', 'video', 'audio'] as const;\n\nconst SINGULAR: Record<AllowedMediaType, string> = {\n  files: 'file',\n  images: 'image',\n  videos: 'video',\n  audios: 'audio',\n};\n\n/**\n * Whether a mime type satisfies a field's `allowedTypes`.\n *\n * No `allowedTypes` means the field takes anything. A file with no mime is only\n * allowed where `files` is, since nothing places it in one of the three media\n * kinds.\n */\nexport const isMediaTypeAllowed = (\n  allowedTypes: AllowedMediaType[] | null | undefined,\n  mime: string | undefined\n): boolean => {\n  if (!allowedTypes || allowedTypes.length === 0) {\n    return true;\n  }\n\n  const singularTypes = new Set(\n    allowedTypes.map((type) => SINGULAR[type]).filter((type): type is string => Boolean(type))\n  );\n  const kind = mime?.split('/')[0];\n\n  if (!kind) {\n    return singularTypes.has('file');\n  }\n\n  if (singularTypes.has('file') && !MEDIA_KINDS.includes(kind as (typeof MEDIA_KINDS)[number])) {\n    return true;\n  }\n\n  return singularTypes.has(kind);\n};\n\n/** The subset of `files` this field accepts, in the order they were given. */\nexport const filterAllowedFiles = (\n  allowedTypes: AllowedMediaType[] | null | undefined,\n  files: globalThis.File[]\n): globalThis.File[] => files.filter((file) => isMediaTypeAllowed(allowedTypes, file.type));\n"],"names":["MEDIA_KINDS","SINGULAR","files","images","videos","audios","isMediaTypeAllowed","allowedTypes","mime","length","singularTypes","Set","map","type","filter","Boolean","kind","split","has","includes","filterAllowedFiles","file"],"mappings":"AAAA;;;;AAIC,IAGD,MAAMA,WAAAA,GAAc;AAAC,IAAA,OAAA;AAAS,IAAA,OAAA;AAAS,IAAA;AAAQ,CAAA;AAE/C,MAAMC,QAAAA,GAA6C;IACjDC,KAAAA,EAAO,MAAA;IACPC,MAAAA,EAAQ,OAAA;IACRC,MAAAA,EAAQ,OAAA;IACRC,MAAAA,EAAQ;AACV,CAAA;AAEA;;;;;;AAMC,IACM,MAAMC,kBAAAA,GAAqB,CAChCC,YAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,IAAI,CAACD,YAAAA,IAAgBA,YAAAA,CAAaE,MAAM,KAAK,CAAA,EAAG;QAC9C,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,MAAMC,gBAAgB,IAAIC,GAAAA,CACxBJ,YAAAA,CAAaK,GAAG,CAAC,CAACC,IAAAA,GAASZ,QAAQ,CAACY,KAAK,CAAA,CAAEC,MAAM,CAAC,CAACD,OAAyBE,OAAAA,CAAQF,IAAAA,CAAAA,CAAAA,CAAAA;AAEtF,IAAA,MAAMG,IAAAA,GAAOR,IAAAA,EAAMS,KAAAA,CAAM,GAAA,CAAI,CAAC,CAAA,CAAE;AAEhC,IAAA,IAAI,CAACD,IAAAA,EAAM;QACT,OAAON,aAAAA,CAAcQ,GAAG,CAAC,MAAA,CAAA;AAC3B,IAAA;IAEA,IAAIR,aAAAA,CAAcQ,GAAG,CAAC,MAAA,CAAA,IAAW,CAAClB,WAAAA,CAAYmB,QAAQ,CAACH,IAAAA,CAAAA,EAAuC;QAC5F,OAAO,IAAA;AACT,IAAA;IAEA,OAAON,aAAAA,CAAcQ,GAAG,CAACF,IAAAA,CAAAA;AAC3B;AAEA,+EACO,MAAMI,kBAAAA,GAAqB,CAChCb,cACAL,KAAAA,GACsBA,KAAAA,CAAMY,MAAM,CAAC,CAACO,IAAAA,GAASf,kBAAAA,CAAmBC,YAAAA,EAAcc,IAAAA,CAAKR,IAAI,CAAA;;;;"}

package/dist/admin/utils/findFolderPath.js

@@ -0,0 +1,26 @@
+'use strict';
+
+/**
+ * The chain of folders from the library root down to `targetId`, inclusive, or
+ * `null` when the folder is not in the tree (deleted, or not loaded yet).
+ */ const findFolderPath = (nodes, targetId, trail = [])=>{
+    for (const node of nodes){
+        const nextTrail = node.id != null ? [
+            ...trail,
+            node
+        ] : trail;
+        if (node.id === targetId) {
+            return nextTrail;
+        }
+        if (node.children?.length) {
+            const found = findFolderPath(node.children, targetId, nextTrail);
+            if (found !== null) {
+                return found;
+            }
+        }
+    }
+    return null;
+};
+
+exports.findFolderPath = findFolderPath;
+//# sourceMappingURL=findFolderPath.js.map

package/dist/admin/utils/findFolderPath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findFolderPath.js","sources":["../../../admin/src/utils/findFolderPath.ts"],"sourcesContent":["import type { FolderNode } from '../../../shared/contracts/folders';\n\n/**\n * The chain of folders from the library root down to `targetId`, inclusive, or\n * `null` when the folder is not in the tree (deleted, or not loaded yet).\n */\nexport const findFolderPath = (\n  nodes: FolderNode[],\n  targetId: number,\n  trail: FolderNode[] = []\n): FolderNode[] | null => {\n  for (const node of nodes) {\n    const nextTrail = node.id != null ? [...trail, node] : trail;\n\n    if (node.id === targetId) {\n      return nextTrail;\n    }\n\n    if (node.children?.length) {\n      const found = findFolderPath(node.children, targetId, nextTrail);\n\n      if (found !== null) {\n        return found;\n      }\n    }\n  }\n\n  return null;\n};\n"],"names":["findFolderPath","nodes","targetId","trail","node","nextTrail","id","children","length","found"],"mappings":";;AAEA;;;AAGC,IACM,MAAMA,cAAAA,GAAiB,CAC5BC,KAAAA,EACAC,QAAAA,EACAC,QAAsB,EAAE,GAAA;IAExB,KAAK,MAAMC,QAAQH,KAAAA,CAAO;AACxB,QAAA,MAAMI,SAAAA,GAAYD,IAAAA,CAAKE,EAAE,IAAI,IAAA,GAAO;AAAIH,YAAAA,GAAAA,KAAAA;AAAOC,YAAAA;SAAK,GAAGD,KAAAA;QAEvD,IAAIC,IAAAA,CAAKE,EAAE,KAAKJ,QAAAA,EAAU;YACxB,OAAOG,SAAAA;AACT,QAAA;QAEA,IAAID,IAAAA,CAAKG,QAAQ,EAAEC,MAAAA,EAAQ;AACzB,YAAA,MAAMC,KAAAA,GAAQT,cAAAA,CAAeI,IAAAA,CAAKG,QAAQ,EAAEL,QAAAA,EAAUG,SAAAA,CAAAA;AAEtD,YAAA,IAAII,UAAU,IAAA,EAAM;gBAClB,OAAOA,KAAAA;AACT,YAAA;AACF,QAAA;AACF,IAAA;IAEA,OAAO,IAAA;AACT;;;;"}

package/dist/admin/utils/findFolderPath.mjs

@@ -0,0 +1,24 @@
+/**
+ * The chain of folders from the library root down to `targetId`, inclusive, or
+ * `null` when the folder is not in the tree (deleted, or not loaded yet).
+ */ const findFolderPath = (nodes, targetId, trail = [])=>{
+    for (const node of nodes){
+        const nextTrail = node.id != null ? [
+            ...trail,
+            node
+        ] : trail;
+        if (node.id === targetId) {
+            return nextTrail;
+        }
+        if (node.children?.length) {
+            const found = findFolderPath(node.children, targetId, nextTrail);
+            if (found !== null) {
+                return found;
+            }
+        }
+    }
+    return null;
+};
+
+export { findFolderPath };
+//# sourceMappingURL=findFolderPath.mjs.map

package/dist/admin/utils/findFolderPath.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"findFolderPath.mjs","sources":["../../../admin/src/utils/findFolderPath.ts"],"sourcesContent":["import type { FolderNode } from '../../../shared/contracts/folders';\n\n/**\n * The chain of folders from the library root down to `targetId`, inclusive, or\n * `null` when the folder is not in the tree (deleted, or not loaded yet).\n */\nexport const findFolderPath = (\n  nodes: FolderNode[],\n  targetId: number,\n  trail: FolderNode[] = []\n): FolderNode[] | null => {\n  for (const node of nodes) {\n    const nextTrail = node.id != null ? [...trail, node] : trail;\n\n    if (node.id === targetId) {\n      return nextTrail;\n    }\n\n    if (node.children?.length) {\n      const found = findFolderPath(node.children, targetId, nextTrail);\n\n      if (found !== null) {\n        return found;\n      }\n    }\n  }\n\n  return null;\n};\n"],"names":["findFolderPath","nodes","targetId","trail","node","nextTrail","id","children","length","found"],"mappings":"AAEA;;;AAGC,IACM,MAAMA,cAAAA,GAAiB,CAC5BC,KAAAA,EACAC,QAAAA,EACAC,QAAsB,EAAE,GAAA;IAExB,KAAK,MAAMC,QAAQH,KAAAA,CAAO;AACxB,QAAA,MAAMI,SAAAA,GAAYD,IAAAA,CAAKE,EAAE,IAAI,IAAA,GAAO;AAAIH,YAAAA,GAAAA,KAAAA;AAAOC,YAAAA;SAAK,GAAGD,KAAAA;QAEvD,IAAIC,IAAAA,CAAKE,EAAE,KAAKJ,QAAAA,EAAU;YACxB,OAAOG,SAAAA;AACT,QAAA;QAEA,IAAID,IAAAA,CAAKG,QAAQ,EAAEC,MAAAA,EAAQ;AACzB,YAAA,MAAMC,KAAAA,GAAQT,cAAAA,CAAeI,IAAAA,CAAKG,QAAQ,EAAEL,QAAAA,EAAUG,SAAAA,CAAAA;AAEtD,YAAA,IAAII,UAAU,IAAA,EAAM;gBAClB,OAAOA,KAAAA;AACT,YAAA;AACF,QAAA;AACF,IAAA;IAEA,OAAO,IAAA;AACT;;;;"}

package/dist/admin/utils/isAllowedAssetType.js

@@ -0,0 +1,33 @@
+'use strict';
+
+var enums = require('../enums.js');
+
+const MEDIA_KIND_BY_MIME_FAMILY = {
+    [enums.ASSET_TYPES.Image]: 'images',
+    [enums.ASSET_TYPES.Video]: 'videos',
+    [enums.ASSET_TYPES.Audio]: 'audios'
+};
+/**
+ * Whether an asset fits a media field's `allowedTypes`, by the same rule as the
+ * legacy picker: only the MIME family (before the `/`) counts, and `files`
+ * covers everything that is not an image, a video or an audio file.
+ *
+ * Not `typeFromMime`: it matches anywhere in the MIME type, so
+ * `application/x-iso9660-image` would count as an image.
+ *
+ * No restriction (missing or empty) allows everything.
+ */ const isAllowedAssetType = (allowedTypes, mime)=>{
+    const kinds = allowedTypes == null ? [] : [
+        allowedTypes
+    ].flat();
+    if (kinds.length === 0) {
+        return true;
+    }
+    if (!mime) {
+        return false;
+    }
+    return kinds.includes(MEDIA_KIND_BY_MIME_FAMILY[mime.split('/')[0]] ?? 'files');
+};
+
+exports.isAllowedAssetType = isAllowedAssetType;
+//# sourceMappingURL=isAllowedAssetType.js.map

package/dist/admin/utils/isAllowedAssetType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isAllowedAssetType.js","sources":["../../../admin/src/utils/isAllowedAssetType.ts"],"sourcesContent":["import { ASSET_TYPES } from '../enums';\n\nimport type { Schema } from '@strapi/types';\n\n/** A media field's `allowedTypes`, exactly as its schema can hold it. */\nexport type MediaAllowedTypes =\n  Schema.Attribute.MediaProperties<Schema.Attribute.MediaKind>['allowedTypes'];\n\nconst MEDIA_KIND_BY_MIME_FAMILY: Record<string, Schema.Attribute.MediaKind> = {\n  [ASSET_TYPES.Image]: 'images',\n  [ASSET_TYPES.Video]: 'videos',\n  [ASSET_TYPES.Audio]: 'audios',\n};\n\n/**\n * Whether an asset fits a media field's `allowedTypes`, by the same rule as the\n * legacy picker: only the MIME family (before the `/`) counts, and `files`\n * covers everything that is not an image, a video or an audio file.\n *\n * Not `typeFromMime`: it matches anywhere in the MIME type, so\n * `application/x-iso9660-image` would count as an image.\n *\n * No restriction (missing or empty) allows everything.\n */\nexport const isAllowedAssetType = (\n  allowedTypes: MediaAllowedTypes | null,\n  mime: string | null | undefined\n): boolean => {\n  const kinds = allowedTypes == null ? [] : [allowedTypes].flat();\n\n  if (kinds.length === 0) {\n    return true;\n  }\n\n  if (!mime) {\n    return false;\n  }\n\n  return kinds.includes(MEDIA_KIND_BY_MIME_FAMILY[mime.split('/')[0]] ?? 'files');\n};\n"],"names":["MEDIA_KIND_BY_MIME_FAMILY","ASSET_TYPES","Image","Video","Audio","isAllowedAssetType","allowedTypes","mime","kinds","flat","length","includes","split"],"mappings":";;;;AAQA,MAAMA,yBAAAA,GAAwE;IAC5E,CAACC,iBAAAA,CAAYC,KAAK,GAAG,QAAA;IACrB,CAACD,iBAAAA,CAAYE,KAAK,GAAG,QAAA;IACrB,CAACF,iBAAAA,CAAYG,KAAK,GAAG;AACvB,CAAA;AAEA;;;;;;;;;AASC,IACM,MAAMC,kBAAAA,GAAqB,CAChCC,YAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,MAAMC,KAAAA,GAAQF,YAAAA,IAAgB,IAAA,GAAO,EAAE,GAAG;AAACA,QAAAA;AAAa,KAAA,CAACG,IAAI,EAAA;IAE7D,IAAID,KAAAA,CAAME,MAAM,KAAK,CAAA,EAAG;QACtB,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,IAAI,CAACH,IAAAA,EAAM;QACT,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,OAAOC,KAAAA,CAAMG,QAAQ,CAACX,yBAAyB,CAACO,IAAAA,CAAKK,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAAC,IAAI,OAAA,CAAA;AACzE;;;;"}

package/dist/admin/utils/isAllowedAssetType.mjs

@@ -0,0 +1,31 @@
+import { ASSET_TYPES } from '../enums.mjs';
+
+const MEDIA_KIND_BY_MIME_FAMILY = {
+    [ASSET_TYPES.Image]: 'images',
+    [ASSET_TYPES.Video]: 'videos',
+    [ASSET_TYPES.Audio]: 'audios'
+};
+/**
+ * Whether an asset fits a media field's `allowedTypes`, by the same rule as the
+ * legacy picker: only the MIME family (before the `/`) counts, and `files`
+ * covers everything that is not an image, a video or an audio file.
+ *
+ * Not `typeFromMime`: it matches anywhere in the MIME type, so
+ * `application/x-iso9660-image` would count as an image.
+ *
+ * No restriction (missing or empty) allows everything.
+ */ const isAllowedAssetType = (allowedTypes, mime)=>{
+    const kinds = allowedTypes == null ? [] : [
+        allowedTypes
+    ].flat();
+    if (kinds.length === 0) {
+        return true;
+    }
+    if (!mime) {
+        return false;
+    }
+    return kinds.includes(MEDIA_KIND_BY_MIME_FAMILY[mime.split('/')[0]] ?? 'files');
+};
+
+export { isAllowedAssetType };
+//# sourceMappingURL=isAllowedAssetType.mjs.map

package/dist/admin/utils/isAllowedAssetType.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"isAllowedAssetType.mjs","sources":["../../../admin/src/utils/isAllowedAssetType.ts"],"sourcesContent":["import { ASSET_TYPES } from '../enums';\n\nimport type { Schema } from '@strapi/types';\n\n/** A media field's `allowedTypes`, exactly as its schema can hold it. */\nexport type MediaAllowedTypes =\n  Schema.Attribute.MediaProperties<Schema.Attribute.MediaKind>['allowedTypes'];\n\nconst MEDIA_KIND_BY_MIME_FAMILY: Record<string, Schema.Attribute.MediaKind> = {\n  [ASSET_TYPES.Image]: 'images',\n  [ASSET_TYPES.Video]: 'videos',\n  [ASSET_TYPES.Audio]: 'audios',\n};\n\n/**\n * Whether an asset fits a media field's `allowedTypes`, by the same rule as the\n * legacy picker: only the MIME family (before the `/`) counts, and `files`\n * covers everything that is not an image, a video or an audio file.\n *\n * Not `typeFromMime`: it matches anywhere in the MIME type, so\n * `application/x-iso9660-image` would count as an image.\n *\n * No restriction (missing or empty) allows everything.\n */\nexport const isAllowedAssetType = (\n  allowedTypes: MediaAllowedTypes | null,\n  mime: string | null | undefined\n): boolean => {\n  const kinds = allowedTypes == null ? [] : [allowedTypes].flat();\n\n  if (kinds.length === 0) {\n    return true;\n  }\n\n  if (!mime) {\n    return false;\n  }\n\n  return kinds.includes(MEDIA_KIND_BY_MIME_FAMILY[mime.split('/')[0]] ?? 'files');\n};\n"],"names":["MEDIA_KIND_BY_MIME_FAMILY","ASSET_TYPES","Image","Video","Audio","isAllowedAssetType","allowedTypes","mime","kinds","flat","length","includes","split"],"mappings":";;AAQA,MAAMA,yBAAAA,GAAwE;IAC5E,CAACC,WAAAA,CAAYC,KAAK,GAAG,QAAA;IACrB,CAACD,WAAAA,CAAYE,KAAK,GAAG,QAAA;IACrB,CAACF,WAAAA,CAAYG,KAAK,GAAG;AACvB,CAAA;AAEA;;;;;;;;;AASC,IACM,MAAMC,kBAAAA,GAAqB,CAChCC,YAAAA,EACAC,IAAAA,GAAAA;AAEA,IAAA,MAAMC,KAAAA,GAAQF,YAAAA,IAAgB,IAAA,GAAO,EAAE,GAAG;AAACA,QAAAA;AAAa,KAAA,CAACG,IAAI,EAAA;IAE7D,IAAID,KAAAA,CAAME,MAAM,KAAK,CAAA,EAAG;QACtB,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,IAAI,CAACH,IAAAA,EAAM;QACT,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,OAAOC,KAAAA,CAAMG,QAAQ,CAACX,yBAAyB,CAACO,IAAAA,CAAKK,KAAK,CAAC,GAAA,CAAI,CAAC,CAAA,CAAE,CAAC,IAAI,OAAA,CAAA;AACzE;;;;"}

package/dist/server/config.js

@@ -26,6 +26,12 @@ const config = {
         assertPositiveInteger('concurrentUploadSize', config.concurrentUploadSize);
         // Client-side parallelism: upload requests the admin fires at once.
         assertPositiveInteger('concurrentUploadRequests', config.concurrentUploadRequests);
+        // Sharp throws on anything else at every image call, which the upload flow
+        // reads as "not an image" and skips processing silently.
+        const limitInputPixels = config.sharp?.limitInputPixels;
+        if (limitInputPixels != null && typeof limitInputPixels !== 'boolean' && !(Number.isInteger(limitInputPixels) && limitInputPixels >= 0)) {
+            throw new Error('upload plugin config: "sharp.limitInputPixels" must be a boolean or an integer greater than or equal to 0 (use env.int() to read it from the environment)');
+        }
     }
 };
 

package/dist/server/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sources":["../../server/src/config.ts"],"sourcesContent":["export const config = {\n  default: {\n    enabled: true,\n    provider: 'local',\n    sizeLimit: 1000000000, // 1GB\n    actionOptions: {},\n    sharp: {\n      cache: false,\n      concurrency: 1,\n    },\n    concurrentUploadSize: 1,\n    concurrentUploadRequests: 1,\n  },\n  validator(config: { concurrentUploadSize?: unknown; concurrentUploadRequests?: unknown }) {\n    const assertPositiveInteger = (key: string, value: unknown) => {\n      if (value === undefined) {\n        return;\n      }\n      if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n        throw new Error(\n          `upload plugin config: \"${key}\" must be an integer greater than or equal to 1`\n        );\n      }\n    };\n\n    // Server-side ceiling: files processed in parallel within one request.\n    assertPositiveInteger('concurrentUploadSize', config.concurrentUploadSize);\n    // Client-side parallelism: upload requests the admin fires at once.\n    assertPositiveInteger('concurrentUploadRequests', config.concurrentUploadRequests);\n  },\n};\n"],"names":["config","default","enabled","provider","sizeLimit","actionOptions","sharp","cache","concurrency","concurrentUploadSize","concurrentUploadRequests","validator","assertPositiveInteger","key","value","undefined","Number","isInteger","Error"],"mappings":";;MAAaA,MAAAA,GAAS;IACpBC,OAAAA,EAAS;QACPC,OAAAA,EAAS,IAAA;QACTC,QAAAA,EAAU,OAAA;QACVC,SAAAA,EAAW,UAAA;AACXC,QAAAA,aAAAA,EAAe,EAAC;QAChBC,KAAAA,EAAO;YACLC,KAAAA,EAAO,KAAA;YACPC,WAAAA,EAAa;AACf,SAAA;QACAC,oBAAAA,EAAsB,CAAA;QACtBC,wBAAAA,EAA0B;AAC5B,KAAA;AACAC,IAAAA,SAAAA,CAAAA,CAAUX,MAA8E,EAAA;QACtF,MAAMY,qBAAAA,GAAwB,CAACC,GAAAA,EAAaC,KAAAA,GAAAA;AAC1C,YAAA,IAAIA,UAAUC,SAAAA,EAAW;AACvB,gBAAA;AACF,YAAA;YACA,IAAI,OAAOD,UAAU,QAAA,IAAY,CAACE,OAAOC,SAAS,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,GAAQ,CAAA,EAAG;AACtE,gBAAA,MAAM,IAAII,KAAAA,CACR,CAAC,uBAAuB,EAAEL,GAAAA,CAAI,+CAA+C,CAAC,CAAA;AAElF,YAAA;AACF,QAAA,CAAA;;QAGAD,qBAAAA,CAAsB,sBAAA,EAAwBZ,OAAOS,oBAAoB,CAAA;;QAEzEG,qBAAAA,CAAsB,0BAAA,EAA4BZ,OAAOU,wBAAwB,CAAA;AACnF,IAAA;AACF;;;;"}
+{"version":3,"file":"config.js","sources":["../../server/src/config.ts"],"sourcesContent":["export const config = {\n  default: {\n    enabled: true,\n    provider: 'local',\n    sizeLimit: 1000000000, // 1GB\n    actionOptions: {},\n    sharp: {\n      cache: false,\n      concurrency: 1,\n    },\n    concurrentUploadSize: 1,\n    concurrentUploadRequests: 1,\n  },\n  validator(config: {\n    concurrentUploadSize?: unknown;\n    concurrentUploadRequests?: unknown;\n    sharp?: { limitInputPixels?: unknown } | null;\n  }) {\n    const assertPositiveInteger = (key: string, value: unknown) => {\n      if (value === undefined) {\n        return;\n      }\n      if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n        throw new Error(\n          `upload plugin config: \"${key}\" must be an integer greater than or equal to 1`\n        );\n      }\n    };\n\n    // Server-side ceiling: files processed in parallel within one request.\n    assertPositiveInteger('concurrentUploadSize', config.concurrentUploadSize);\n    // Client-side parallelism: upload requests the admin fires at once.\n    assertPositiveInteger('concurrentUploadRequests', config.concurrentUploadRequests);\n\n    // Sharp throws on anything else at every image call, which the upload flow\n    // reads as \"not an image\" and skips processing silently.\n    const limitInputPixels = config.sharp?.limitInputPixels;\n    if (\n      limitInputPixels != null &&\n      typeof limitInputPixels !== 'boolean' &&\n      !(Number.isInteger(limitInputPixels) && (limitInputPixels as number) >= 0)\n    ) {\n      throw new Error(\n        'upload plugin config: \"sharp.limitInputPixels\" must be a boolean or an integer greater than or equal to 0 (use env.int() to read it from the environment)'\n      );\n    }\n  },\n};\n"],"names":["config","default","enabled","provider","sizeLimit","actionOptions","sharp","cache","concurrency","concurrentUploadSize","concurrentUploadRequests","validator","assertPositiveInteger","key","value","undefined","Number","isInteger","Error","limitInputPixels"],"mappings":";;MAAaA,MAAAA,GAAS;IACpBC,OAAAA,EAAS;QACPC,OAAAA,EAAS,IAAA;QACTC,QAAAA,EAAU,OAAA;QACVC,SAAAA,EAAW,UAAA;AACXC,QAAAA,aAAAA,EAAe,EAAC;QAChBC,KAAAA,EAAO;YACLC,KAAAA,EAAO,KAAA;YACPC,WAAAA,EAAa;AACf,SAAA;QACAC,oBAAAA,EAAsB,CAAA;QACtBC,wBAAAA,EAA0B;AAC5B,KAAA;AACAC,IAAAA,SAAAA,CAAAA,CAAUX,MAIT,EAAA;QACC,MAAMY,qBAAAA,GAAwB,CAACC,GAAAA,EAAaC,KAAAA,GAAAA;AAC1C,YAAA,IAAIA,UAAUC,SAAAA,EAAW;AACvB,gBAAA;AACF,YAAA;YACA,IAAI,OAAOD,UAAU,QAAA,IAAY,CAACE,OAAOC,SAAS,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,GAAQ,CAAA,EAAG;AACtE,gBAAA,MAAM,IAAII,KAAAA,CACR,CAAC,uBAAuB,EAAEL,GAAAA,CAAI,+CAA+C,CAAC,CAAA;AAElF,YAAA;AACF,QAAA,CAAA;;QAGAD,qBAAAA,CAAsB,sBAAA,EAAwBZ,OAAOS,oBAAoB,CAAA;;QAEzEG,qBAAAA,CAAsB,0BAAA,EAA4BZ,OAAOU,wBAAwB,CAAA;;;QAIjF,MAAMS,gBAAAA,GAAmBnB,MAAAA,CAAOM,KAAK,EAAEa,gBAAAA;AACvC,QAAA,IACEA,gBAAAA,IAAoB,IAAA,IACpB,OAAOA,gBAAAA,KAAqB,aAC5B,EAAEH,MAAAA,CAAOC,SAAS,CAACE,gBAAAA,CAAAA,IAAqB,gBAACA,IAA+B,CAAA,CAAA,EACxE;AACA,YAAA,MAAM,IAAID,KAAAA,CACR,2JAAA,CAAA;AAEJ,QAAA;AACF,IAAA;AACF;;;;"}

package/dist/server/config.mjs

@@ -24,6 +24,12 @@ const config = {
         assertPositiveInteger('concurrentUploadSize', config.concurrentUploadSize);
         // Client-side parallelism: upload requests the admin fires at once.
         assertPositiveInteger('concurrentUploadRequests', config.concurrentUploadRequests);
+        // Sharp throws on anything else at every image call, which the upload flow
+        // reads as "not an image" and skips processing silently.
+        const limitInputPixels = config.sharp?.limitInputPixels;
+        if (limitInputPixels != null && typeof limitInputPixels !== 'boolean' && !(Number.isInteger(limitInputPixels) && limitInputPixels >= 0)) {
+            throw new Error('upload plugin config: "sharp.limitInputPixels" must be a boolean or an integer greater than or equal to 0 (use env.int() to read it from the environment)');
+        }
     }
 };
 

package/dist/server/config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"config.mjs","sources":["../../server/src/config.ts"],"sourcesContent":["export const config = {\n  default: {\n    enabled: true,\n    provider: 'local',\n    sizeLimit: 1000000000, // 1GB\n    actionOptions: {},\n    sharp: {\n      cache: false,\n      concurrency: 1,\n    },\n    concurrentUploadSize: 1,\n    concurrentUploadRequests: 1,\n  },\n  validator(config: { concurrentUploadSize?: unknown; concurrentUploadRequests?: unknown }) {\n    const assertPositiveInteger = (key: string, value: unknown) => {\n      if (value === undefined) {\n        return;\n      }\n      if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n        throw new Error(\n          `upload plugin config: \"${key}\" must be an integer greater than or equal to 1`\n        );\n      }\n    };\n\n    // Server-side ceiling: files processed in parallel within one request.\n    assertPositiveInteger('concurrentUploadSize', config.concurrentUploadSize);\n    // Client-side parallelism: upload requests the admin fires at once.\n    assertPositiveInteger('concurrentUploadRequests', config.concurrentUploadRequests);\n  },\n};\n"],"names":["config","default","enabled","provider","sizeLimit","actionOptions","sharp","cache","concurrency","concurrentUploadSize","concurrentUploadRequests","validator","assertPositiveInteger","key","value","undefined","Number","isInteger","Error"],"mappings":"MAAaA,MAAAA,GAAS;IACpBC,OAAAA,EAAS;QACPC,OAAAA,EAAS,IAAA;QACTC,QAAAA,EAAU,OAAA;QACVC,SAAAA,EAAW,UAAA;AACXC,QAAAA,aAAAA,EAAe,EAAC;QAChBC,KAAAA,EAAO;YACLC,KAAAA,EAAO,KAAA;YACPC,WAAAA,EAAa;AACf,SAAA;QACAC,oBAAAA,EAAsB,CAAA;QACtBC,wBAAAA,EAA0B;AAC5B,KAAA;AACAC,IAAAA,SAAAA,CAAAA,CAAUX,MAA8E,EAAA;QACtF,MAAMY,qBAAAA,GAAwB,CAACC,GAAAA,EAAaC,KAAAA,GAAAA;AAC1C,YAAA,IAAIA,UAAUC,SAAAA,EAAW;AACvB,gBAAA;AACF,YAAA;YACA,IAAI,OAAOD,UAAU,QAAA,IAAY,CAACE,OAAOC,SAAS,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,GAAQ,CAAA,EAAG;AACtE,gBAAA,MAAM,IAAII,KAAAA,CACR,CAAC,uBAAuB,EAAEL,GAAAA,CAAI,+CAA+C,CAAC,CAAA;AAElF,YAAA;AACF,QAAA,CAAA;;QAGAD,qBAAAA,CAAsB,sBAAA,EAAwBZ,OAAOS,oBAAoB,CAAA;;QAEzEG,qBAAAA,CAAsB,0BAAA,EAA4BZ,OAAOU,wBAAwB,CAAA;AACnF,IAAA;AACF;;;;"}
+{"version":3,"file":"config.mjs","sources":["../../server/src/config.ts"],"sourcesContent":["export const config = {\n  default: {\n    enabled: true,\n    provider: 'local',\n    sizeLimit: 1000000000, // 1GB\n    actionOptions: {},\n    sharp: {\n      cache: false,\n      concurrency: 1,\n    },\n    concurrentUploadSize: 1,\n    concurrentUploadRequests: 1,\n  },\n  validator(config: {\n    concurrentUploadSize?: unknown;\n    concurrentUploadRequests?: unknown;\n    sharp?: { limitInputPixels?: unknown } | null;\n  }) {\n    const assertPositiveInteger = (key: string, value: unknown) => {\n      if (value === undefined) {\n        return;\n      }\n      if (typeof value !== 'number' || !Number.isInteger(value) || value < 1) {\n        throw new Error(\n          `upload plugin config: \"${key}\" must be an integer greater than or equal to 1`\n        );\n      }\n    };\n\n    // Server-side ceiling: files processed in parallel within one request.\n    assertPositiveInteger('concurrentUploadSize', config.concurrentUploadSize);\n    // Client-side parallelism: upload requests the admin fires at once.\n    assertPositiveInteger('concurrentUploadRequests', config.concurrentUploadRequests);\n\n    // Sharp throws on anything else at every image call, which the upload flow\n    // reads as \"not an image\" and skips processing silently.\n    const limitInputPixels = config.sharp?.limitInputPixels;\n    if (\n      limitInputPixels != null &&\n      typeof limitInputPixels !== 'boolean' &&\n      !(Number.isInteger(limitInputPixels) && (limitInputPixels as number) >= 0)\n    ) {\n      throw new Error(\n        'upload plugin config: \"sharp.limitInputPixels\" must be a boolean or an integer greater than or equal to 0 (use env.int() to read it from the environment)'\n      );\n    }\n  },\n};\n"],"names":["config","default","enabled","provider","sizeLimit","actionOptions","sharp","cache","concurrency","concurrentUploadSize","concurrentUploadRequests","validator","assertPositiveInteger","key","value","undefined","Number","isInteger","Error","limitInputPixels"],"mappings":"MAAaA,MAAAA,GAAS;IACpBC,OAAAA,EAAS;QACPC,OAAAA,EAAS,IAAA;QACTC,QAAAA,EAAU,OAAA;QACVC,SAAAA,EAAW,UAAA;AACXC,QAAAA,aAAAA,EAAe,EAAC;QAChBC,KAAAA,EAAO;YACLC,KAAAA,EAAO,KAAA;YACPC,WAAAA,EAAa;AACf,SAAA;QACAC,oBAAAA,EAAsB,CAAA;QACtBC,wBAAAA,EAA0B;AAC5B,KAAA;AACAC,IAAAA,SAAAA,CAAAA,CAAUX,MAIT,EAAA;QACC,MAAMY,qBAAAA,GAAwB,CAACC,GAAAA,EAAaC,KAAAA,GAAAA;AAC1C,YAAA,IAAIA,UAAUC,SAAAA,EAAW;AACvB,gBAAA;AACF,YAAA;YACA,IAAI,OAAOD,UAAU,QAAA,IAAY,CAACE,OAAOC,SAAS,CAACH,KAAAA,CAAAA,IAAUA,KAAAA,GAAQ,CAAA,EAAG;AACtE,gBAAA,MAAM,IAAII,KAAAA,CACR,CAAC,uBAAuB,EAAEL,GAAAA,CAAI,+CAA+C,CAAC,CAAA;AAElF,YAAA;AACF,QAAA,CAAA;;QAGAD,qBAAAA,CAAsB,sBAAA,EAAwBZ,OAAOS,oBAAoB,CAAA;;QAEzEG,qBAAAA,CAAsB,0BAAA,EAA4BZ,OAAOU,wBAAwB,CAAA;;;QAIjF,MAAMS,gBAAAA,GAAmBnB,MAAAA,CAAOM,KAAK,EAAEa,gBAAAA;AACvC,QAAA,IACEA,gBAAAA,IAAoB,IAAA,IACpB,OAAOA,gBAAAA,KAAqB,aAC5B,EAAEH,MAAAA,CAAOC,SAAS,CAACE,gBAAAA,CAAAA,IAAqB,gBAACA,IAA+B,CAAA,CAAA,EACxE;AACA,YAAA,MAAM,IAAID,KAAAA,CACR,2JAAA,CAAA;AAEJ,QAAA;AACF,IAAA;AACF;;;;"}

package/dist/server/controllers/admin-settings.js

@@ -15,7 +15,11 @@ var adminSettings = {
         if (userAbility.cannot(constants.ACTIONS.readSettings, constants.FILE_MODEL_UID)) {
             return ctx.forbidden();
         }
-        const validated = await settings.default(body);
+        // Validation runs in strict mode, which skips schema defaults. Casting the
+        // validated body applies them, so a body without `aiMetadata` stores `true`
+        // (the value `aiMetadata.isEnabled()` assumes) instead of no key at all.
+        // The cast only adds defaults to an already valid body, so it is a `Settings`.
+        const validated = settings.settingsSchema.cast(await settings.default(body));
         const source = validated;
         const data = Object.fromEntries(SETTINGS_KEYS.filter((key)=>key in source).map((key)=>[
                 key,

package/dist/server/controllers/admin-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-settings.js","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const validated = await validateSettings(body);\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    // Gated on `plugin::upload.read` by the route policy.\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = {\n      data: {\n        ...data,\n        concurrentUploadRequests,\n        aiMetadataAvailable: getService('aiMetadataProvider').hasProvider(),\n      },\n    };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get","aiMetadataAvailable","hasProvider"],"mappings":";;;;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,wBAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,iBAAAA,CAAQC,YAAY,EAAEC,wBAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;QAEA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBT,IAAAA,CAAAA;AACzC,QAAA,MAAMU,MAAAA,GAASF,SAAAA;AACf,QAAA,MAAMG,IAAAA,GAAOlB,MAAAA,CAAOmB,WAAW,CAC7BpB,cAAcqB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCb,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEW,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYpB,GAAY,EAAA;;AAE5B,QAAA,MAAMa,IAAAA,GAAO,MAAMK,gBAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnExB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YACTW,IAAAA,EAAM;AACJ,gBAAA,GAAGA,IAAI;AACPQ,gBAAAA,wBAAAA;gBACAI,mBAAAA,EAAqBP,gBAAAA,CAAW,sBAAsBQ,WAAW;AACnE;AACF,SAAA;AACF,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"admin-settings.js","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema, type Settings } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    // Validation runs in strict mode, which skips schema defaults. Casting the\n    // validated body applies them, so a body without `aiMetadata` stores `true`\n    // (the value `aiMetadata.isEnabled()` assumes) instead of no key at all.\n    // The cast only adds defaults to an already valid body, so it is a `Settings`.\n    const validated = settingsSchema.cast(await validateSettings(body)) as Settings;\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    // Gated on `plugin::upload.read` by the route policy.\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = {\n      data: {\n        ...data,\n        concurrentUploadRequests,\n        aiMetadataAvailable: getService('aiMetadataProvider').hasProvider(),\n      },\n    };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","cast","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get","aiMetadataAvailable","hasProvider"],"mappings":";;;;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,wBAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,iBAAAA,CAAQC,YAAY,EAAEC,wBAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;;;;;AAMA,QAAA,MAAMC,SAAAA,GAAYb,uBAAAA,CAAec,IAAI,CAAC,MAAMC,gBAAAA,CAAiBV,IAAAA,CAAAA,CAAAA;AAC7D,QAAA,MAAMW,MAAAA,GAASH,SAAAA;AACf,QAAA,MAAMI,IAAAA,GAAOnB,MAAAA,CAAOoB,WAAW,CAC7BrB,cAAcsB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,gBAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCd,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEY,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYrB,GAAY,EAAA;;AAE5B,QAAA,MAAMc,IAAAA,GAAO,MAAMK,gBAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnEzB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YACTY,IAAAA,EAAM;AACJ,gBAAA,GAAGA,IAAI;AACPQ,gBAAAA,wBAAAA;gBACAI,mBAAAA,EAAqBP,gBAAAA,CAAW,sBAAsBQ,WAAW;AACnE;AACF,SAAA;AACF,IAAA;AACF,CAAA;;;;"}

package/dist/server/controllers/admin-settings.mjs

@@ -13,7 +13,11 @@ var adminSettings = {
         if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {
             return ctx.forbidden();
         }
-        const validated = await validateSettings(body);
+        // Validation runs in strict mode, which skips schema defaults. Casting the
+        // validated body applies them, so a body without `aiMetadata` stores `true`
+        // (the value `aiMetadata.isEnabled()` assumes) instead of no key at all.
+        // The cast only adds defaults to an already valid body, so it is a `Settings`.
+        const validated = settingsSchema.cast(await validateSettings(body));
         const source = validated;
         const data = Object.fromEntries(SETTINGS_KEYS.filter((key)=>key in source).map((key)=>[
                 key,

package/dist/server/controllers/admin-settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"admin-settings.mjs","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    const validated = await validateSettings(body);\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    // Gated on `plugin::upload.read` by the route policy.\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = {\n      data: {\n        ...data,\n        concurrentUploadRequests,\n        aiMetadataAvailable: getService('aiMetadataProvider').hasProvider(),\n      },\n    };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get","aiMetadataAvailable","hasProvider"],"mappings":";;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,eAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,OAAAA,CAAQC,YAAY,EAAEC,cAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;QAEA,MAAMC,SAAAA,GAAY,MAAMC,gBAAAA,CAAiBT,IAAAA,CAAAA;AACzC,QAAA,MAAMU,MAAAA,GAASF,SAAAA;AACf,QAAA,MAAMG,IAAAA,GAAOlB,MAAAA,CAAOmB,WAAW,CAC7BpB,cAAcqB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,UAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCb,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEW,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYpB,GAAY,EAAA;;AAE5B,QAAA,MAAMa,IAAAA,GAAO,MAAMK,UAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnExB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YACTW,IAAAA,EAAM;AACJ,gBAAA,GAAGA,IAAI;AACPQ,gBAAAA,wBAAAA;gBACAI,mBAAAA,EAAqBP,UAAAA,CAAW,sBAAsBQ,WAAW;AACnE;AACF,SAAA;AACF,IAAA;AACF,CAAA;;;;"}
+{"version":3,"file":"admin-settings.mjs","sources":["../../../server/src/controllers/admin-settings.ts"],"sourcesContent":["import type { Context } from 'koa';\n\nimport { getService } from '../utils';\nimport { ACTIONS, FILE_MODEL_UID } from '../constants';\n\nimport type { Config } from '../types';\nimport validateSettings, { settingsSchema, type Settings } from './validation/admin/settings';\n\n// The stored settings' known keys. `GET /upload/settings` echoes read-only\n// config (e.g. `concurrentUploadRequests`) alongside them, and the legacy\n// Settings page PUTs the whole payload back — narrowing to these keys keeps\n// those echoes out of the store. Derived from the schema so it can't drift.\nconst SETTINGS_KEYS = Object.keys(settingsSchema.fields);\n\nexport default {\n  async updateSettings(ctx: Context) {\n    const {\n      request: { body },\n      state: { userAbility },\n    } = ctx;\n\n    if (userAbility.cannot(ACTIONS.readSettings, FILE_MODEL_UID)) {\n      return ctx.forbidden();\n    }\n\n    // Validation runs in strict mode, which skips schema defaults. Casting the\n    // validated body applies them, so a body without `aiMetadata` stores `true`\n    // (the value `aiMetadata.isEnabled()` assumes) instead of no key at all.\n    // The cast only adds defaults to an already valid body, so it is a `Settings`.\n    const validated = settingsSchema.cast(await validateSettings(body)) as Settings;\n    const source = validated as Record<string, unknown>;\n    const data = Object.fromEntries(\n      SETTINGS_KEYS.filter((key) => key in source).map((key) => [key, source[key]])\n    ) as typeof validated;\n\n    await getService('upload').setSettings(data);\n\n    ctx.body = { data };\n  },\n\n  async getSettings(ctx: Context) {\n    // Gated on `plugin::upload.read` by the route policy.\n    const data = await getService('upload').getSettings();\n\n    // Read-only echo of the app config so the admin knows how many upload\n    // requests it may fire in parallel. Distinct from `concurrentUploadSize`,\n    // which is the server-side per-request processing ceiling. Deployments that\n    // need to bound this override the config.\n    const { concurrentUploadRequests = 1 } = strapi.config.get<Config>('plugin::upload');\n\n    ctx.body = {\n      data: {\n        ...data,\n        concurrentUploadRequests,\n        aiMetadataAvailable: getService('aiMetadataProvider').hasProvider(),\n      },\n    };\n  },\n};\n"],"names":["SETTINGS_KEYS","Object","keys","settingsSchema","fields","updateSettings","ctx","request","body","state","userAbility","cannot","ACTIONS","readSettings","FILE_MODEL_UID","forbidden","validated","cast","validateSettings","source","data","fromEntries","filter","key","map","getService","setSettings","getSettings","concurrentUploadRequests","strapi","config","get","aiMetadataAvailable","hasProvider"],"mappings":";;;;AAQA;AACA;AACA;AACA;AACA,MAAMA,aAAAA,GAAgBC,MAAAA,CAAOC,IAAI,CAACC,eAAeC,MAAM,CAAA;AAEvD,oBAAe;AACb,IAAA,MAAMC,gBAAeC,GAAY,EAAA;QAC/B,MAAM,EACJC,OAAAA,EAAS,EAAEC,IAAI,EAAE,EACjBC,KAAAA,EAAO,EAAEC,WAAW,EAAE,EACvB,GAAGJ,GAAAA;AAEJ,QAAA,IAAII,YAAYC,MAAM,CAACC,OAAAA,CAAQC,YAAY,EAAEC,cAAAA,CAAAA,EAAiB;AAC5D,YAAA,OAAOR,IAAIS,SAAS,EAAA;AACtB,QAAA;;;;;AAMA,QAAA,MAAMC,SAAAA,GAAYb,cAAAA,CAAec,IAAI,CAAC,MAAMC,gBAAAA,CAAiBV,IAAAA,CAAAA,CAAAA;AAC7D,QAAA,MAAMW,MAAAA,GAASH,SAAAA;AACf,QAAA,MAAMI,IAAAA,GAAOnB,MAAAA,CAAOoB,WAAW,CAC7BrB,cAAcsB,MAAM,CAAC,CAACC,GAAAA,GAAQA,GAAAA,IAAOJ,MAAAA,CAAAA,CAAQK,GAAG,CAAC,CAACD,GAAAA,GAAQ;AAACA,gBAAAA,GAAAA;AAAKJ,gBAAAA,MAAM,CAACI,GAAAA;AAAK,aAAA,CAAA,CAAA;QAG9E,MAAME,UAAAA,CAAW,QAAA,CAAA,CAAUC,WAAW,CAACN,IAAAA,CAAAA;AAEvCd,QAAAA,GAAAA,CAAIE,IAAI,GAAG;AAAEY,YAAAA;AAAK,SAAA;AACpB,IAAA,CAAA;AAEA,IAAA,MAAMO,aAAYrB,GAAY,EAAA;;AAE5B,QAAA,MAAMc,IAAAA,GAAO,MAAMK,UAAAA,CAAW,QAAA,CAAA,CAAUE,WAAW,EAAA;;;;;QAMnD,MAAM,EAAEC,2BAA2B,CAAC,EAAE,GAAGC,MAAAA,CAAOC,MAAM,CAACC,GAAG,CAAS,gBAAA,CAAA;AAEnEzB,QAAAA,GAAAA,CAAIE,IAAI,GAAG;YACTY,IAAAA,EAAM;AACJ,gBAAA,GAAGA,IAAI;AACPQ,gBAAAA,wBAAAA;gBACAI,mBAAAA,EAAqBP,UAAAA,CAAW,sBAAsBQ,WAAW;AACnE;AACF,SAAA;AACF,IAAA;AACF,CAAA;;;;"}

package/dist/server/controllers/validation/admin/upload.js.map

@@ -1 +1 @@
-{"version":3,"file":"upload.js","sources":["../../../../../server/src/controllers/validation/admin/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport { getService } from '../../../utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup.object({\n  name: yup.string().nullable(),\n  alternativeText: yup.string().nullable(),\n  caption: yup.string().nullable(),\n  focalPoint: focalPointSchema,\n  folder: yup\n    .strapiID()\n    .nullable()\n    .test('folder-exists', 'the folder does not exist', async (folderId) => {\n      if (folderId == null) {\n        return true;\n      }\n\n      const exists = await getService('folder').exists({ id: folderId });\n\n      return exists;\n    }),\n});\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  | yup.InferType<typeof uploadSchema>\n  | yup.InferType<typeof multiUploadSchema>;\n\nconst bulkUpdatesSchema = yup.object({\n  updates: yup\n    .array()\n    .of(\n      yup.object({\n        id: yup.number().required(),\n        fileInfo: fileInfoSchema.required(),\n      })\n    )\n    .min(1)\n    .required(),\n});\n\nexport const validateBulkUpdateBody = validateYupSchema(bulkUpdatesSchema);\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","folder","strapiID","test","folderId","exists","getService","id","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict","bulkUpdatesSchema","updates","validateBulkUpdateBody"],"mappings":";;;;;AAGA,MAAMA,gBAAAA,GAAmBC,SAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,SAAAA,CAAIC,MAAM,CAAC;IAChCU,IAAAA,EAAMX,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB,gBAAAA;IACZiB,MAAAA,EAAQhB,SAAAA,CACLiB,QAAQ,EAAA,CACRT,QAAQ,GACRU,IAAI,CAAC,eAAA,EAAiB,2BAAA,EAA6B,OAAOC,QAAAA,GAAAA;AACzD,QAAA,IAAIA,YAAY,IAAA,EAAM;YACpB,OAAO,IAAA;AACT,QAAA;AAEA,QAAA,MAAMC,MAAAA,GAAS,MAAMC,gBAAAA,CAAW,QAAA,CAAA,CAAUD,MAAM,CAAC;YAAEE,EAAAA,EAAIH;AAAS,SAAA,CAAA;QAEhE,OAAOC,MAAAA;AACT,IAAA,CAAA;AACJ,CAAA,CAAA;AAEA,MAAMG,YAAAA,GAAevB,SAAAA,CAAIC,MAAM,CAAC;IAC9BuB,QAAAA,EAAUd;AACZ,CAAA,CAAA;AAEA,MAAMe,iBAAAA,GAAoBzB,SAAAA,CAAIC,MAAM,CAAC;AACnCuB,IAAAA,QAAAA,EAAUxB,SAAAA,CAAI0B,KAAK,EAAA,CAAGC,EAAE,CAACjB,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMkB,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,wBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;AAQA,MAAMK,iBAAAA,GAAoBlC,SAAAA,CAAIC,MAAM,CAAC;AACnCkC,IAAAA,OAAAA,EAASnC,UACN0B,KAAK,EAAA,CACLC,EAAE,CACD3B,SAAAA,CAAIC,MAAM,CAAC;QACTqB,EAAAA,EAAItB,SAAAA,CAAIG,MAAM,EAAA,CAAGG,QAAQ,EAAA;AACzBkB,QAAAA,QAAAA,EAAUd,eAAeJ,QAAQ;KACnC,CAAA,CAAA,CAEDF,GAAG,CAAC,CAAA,CAAA,CACJE,QAAQ;AACb,CAAA,CAAA;AAEO,MAAM8B,sBAAAA,GAAyBJ,uBAAAA,CAAkBE,iBAAAA;;;;;"}
+{"version":3,"file":"upload.js","sources":["../../../../../server/src/controllers/validation/admin/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport { getService } from '../../../utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup.object({\n  name: yup.string().nullable(),\n  alternativeText: yup.string().nullable(),\n  caption: yup.string().nullable(),\n  focalPoint: focalPointSchema,\n  folder: yup\n    .strapiID()\n    .nullable()\n    .test('folder-exists', 'the folder does not exist', async (folderId) => {\n      if (folderId == null) {\n        return true;\n      }\n\n      const exists = await getService('folder').exists({ id: folderId });\n\n      return exists;\n    }),\n});\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  yup.InferType<typeof uploadSchema> | yup.InferType<typeof multiUploadSchema>;\n\nconst bulkUpdatesSchema = yup.object({\n  updates: yup\n    .array()\n    .of(\n      yup.object({\n        id: yup.number().required(),\n        fileInfo: fileInfoSchema.required(),\n      })\n    )\n    .min(1)\n    .required(),\n});\n\nexport const validateBulkUpdateBody = validateYupSchema(bulkUpdatesSchema);\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","folder","strapiID","test","folderId","exists","getService","id","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict","bulkUpdatesSchema","updates","validateBulkUpdateBody"],"mappings":";;;;;AAGA,MAAMA,gBAAAA,GAAmBC,SAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,SAAAA,CAAIC,MAAM,CAAC;IAChCU,IAAAA,EAAMX,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB,gBAAAA;IACZiB,MAAAA,EAAQhB,SAAAA,CACLiB,QAAQ,EAAA,CACRT,QAAQ,GACRU,IAAI,CAAC,eAAA,EAAiB,2BAAA,EAA6B,OAAOC,QAAAA,GAAAA;AACzD,QAAA,IAAIA,YAAY,IAAA,EAAM;YACpB,OAAO,IAAA;AACT,QAAA;AAEA,QAAA,MAAMC,MAAAA,GAAS,MAAMC,gBAAAA,CAAW,QAAA,CAAA,CAAUD,MAAM,CAAC;YAAEE,EAAAA,EAAIH;AAAS,SAAA,CAAA;QAEhE,OAAOC,MAAAA;AACT,IAAA,CAAA;AACJ,CAAA,CAAA;AAEA,MAAMG,YAAAA,GAAevB,SAAAA,CAAIC,MAAM,CAAC;IAC9BuB,QAAAA,EAAUd;AACZ,CAAA,CAAA;AAEA,MAAMe,iBAAAA,GAAoBzB,SAAAA,CAAIC,MAAM,CAAC;AACnCuB,IAAAA,QAAAA,EAAUxB,SAAAA,CAAI0B,KAAK,EAAA,CAAGC,EAAE,CAACjB,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMkB,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,wBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;AAOA,MAAMK,iBAAAA,GAAoBlC,SAAAA,CAAIC,MAAM,CAAC;AACnCkC,IAAAA,OAAAA,EAASnC,UACN0B,KAAK,EAAA,CACLC,EAAE,CACD3B,SAAAA,CAAIC,MAAM,CAAC;QACTqB,EAAAA,EAAItB,SAAAA,CAAIG,MAAM,EAAA,CAAGG,QAAQ,EAAA;AACzBkB,QAAAA,QAAAA,EAAUd,eAAeJ,QAAQ;KACnC,CAAA,CAAA,CAEDF,GAAG,CAAC,CAAA,CAAA,CACJE,QAAQ;AACb,CAAA,CAAA;AAEO,MAAM8B,sBAAAA,GAAyBJ,uBAAAA,CAAkBE,iBAAAA;;;;;"}

package/dist/server/controllers/validation/admin/upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"upload.mjs","sources":["../../../../../server/src/controllers/validation/admin/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport { getService } from '../../../utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup.object({\n  name: yup.string().nullable(),\n  alternativeText: yup.string().nullable(),\n  caption: yup.string().nullable(),\n  focalPoint: focalPointSchema,\n  folder: yup\n    .strapiID()\n    .nullable()\n    .test('folder-exists', 'the folder does not exist', async (folderId) => {\n      if (folderId == null) {\n        return true;\n      }\n\n      const exists = await getService('folder').exists({ id: folderId });\n\n      return exists;\n    }),\n});\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  | yup.InferType<typeof uploadSchema>\n  | yup.InferType<typeof multiUploadSchema>;\n\nconst bulkUpdatesSchema = yup.object({\n  updates: yup\n    .array()\n    .of(\n      yup.object({\n        id: yup.number().required(),\n        fileInfo: fileInfoSchema.required(),\n      })\n    )\n    .min(1)\n    .required(),\n});\n\nexport const validateBulkUpdateBody = validateYupSchema(bulkUpdatesSchema);\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","folder","strapiID","test","folderId","exists","getService","id","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict","bulkUpdatesSchema","updates","validateBulkUpdateBody"],"mappings":";;;AAGA,MAAMA,gBAAAA,GAAmBC,GAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,GAAAA,CAAIC,MAAM,CAAC;IAChCU,IAAAA,EAAMX,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB,gBAAAA;IACZiB,MAAAA,EAAQhB,GAAAA,CACLiB,QAAQ,EAAA,CACRT,QAAQ,GACRU,IAAI,CAAC,eAAA,EAAiB,2BAAA,EAA6B,OAAOC,QAAAA,GAAAA;AACzD,QAAA,IAAIA,YAAY,IAAA,EAAM;YACpB,OAAO,IAAA;AACT,QAAA;AAEA,QAAA,MAAMC,MAAAA,GAAS,MAAMC,UAAAA,CAAW,QAAA,CAAA,CAAUD,MAAM,CAAC;YAAEE,EAAAA,EAAIH;AAAS,SAAA,CAAA;QAEhE,OAAOC,MAAAA;AACT,IAAA,CAAA;AACJ,CAAA,CAAA;AAEA,MAAMG,YAAAA,GAAevB,GAAAA,CAAIC,MAAM,CAAC;IAC9BuB,QAAAA,EAAUd;AACZ,CAAA,CAAA;AAEA,MAAMe,iBAAAA,GAAoBzB,GAAAA,CAAIC,MAAM,CAAC;AACnCuB,IAAAA,QAAAA,EAAUxB,GAAAA,CAAI0B,KAAK,EAAA,CAAGC,EAAE,CAACjB,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMkB,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,kBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;AAQA,MAAMK,iBAAAA,GAAoBlC,GAAAA,CAAIC,MAAM,CAAC;AACnCkC,IAAAA,OAAAA,EAASnC,IACN0B,KAAK,EAAA,CACLC,EAAE,CACD3B,GAAAA,CAAIC,MAAM,CAAC;QACTqB,EAAAA,EAAItB,GAAAA,CAAIG,MAAM,EAAA,CAAGG,QAAQ,EAAA;AACzBkB,QAAAA,QAAAA,EAAUd,eAAeJ,QAAQ;KACnC,CAAA,CAAA,CAEDF,GAAG,CAAC,CAAA,CAAA,CACJE,QAAQ;AACb,CAAA,CAAA;AAEO,MAAM8B,sBAAAA,GAAyBJ,iBAAAA,CAAkBE,iBAAAA;;;;"}
+{"version":3,"file":"upload.mjs","sources":["../../../../../server/src/controllers/validation/admin/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\nimport { getService } from '../../../utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup.object({\n  name: yup.string().nullable(),\n  alternativeText: yup.string().nullable(),\n  caption: yup.string().nullable(),\n  focalPoint: focalPointSchema,\n  folder: yup\n    .strapiID()\n    .nullable()\n    .test('folder-exists', 'the folder does not exist', async (folderId) => {\n      if (folderId == null) {\n        return true;\n      }\n\n      const exists = await getService('folder').exists({ id: folderId });\n\n      return exists;\n    }),\n});\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  yup.InferType<typeof uploadSchema> | yup.InferType<typeof multiUploadSchema>;\n\nconst bulkUpdatesSchema = yup.object({\n  updates: yup\n    .array()\n    .of(\n      yup.object({\n        id: yup.number().required(),\n        fileInfo: fileInfoSchema.required(),\n      })\n    )\n    .min(1)\n    .required(),\n});\n\nexport const validateBulkUpdateBody = validateYupSchema(bulkUpdatesSchema);\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","folder","strapiID","test","folderId","exists","getService","id","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict","bulkUpdatesSchema","updates","validateBulkUpdateBody"],"mappings":";;;AAGA,MAAMA,gBAAAA,GAAmBC,GAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,GAAAA,CAAIC,MAAM,CAAC;IAChCU,IAAAA,EAAMX,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB,gBAAAA;IACZiB,MAAAA,EAAQhB,GAAAA,CACLiB,QAAQ,EAAA,CACRT,QAAQ,GACRU,IAAI,CAAC,eAAA,EAAiB,2BAAA,EAA6B,OAAOC,QAAAA,GAAAA;AACzD,QAAA,IAAIA,YAAY,IAAA,EAAM;YACpB,OAAO,IAAA;AACT,QAAA;AAEA,QAAA,MAAMC,MAAAA,GAAS,MAAMC,UAAAA,CAAW,QAAA,CAAA,CAAUD,MAAM,CAAC;YAAEE,EAAAA,EAAIH;AAAS,SAAA,CAAA;QAEhE,OAAOC,MAAAA;AACT,IAAA,CAAA;AACJ,CAAA,CAAA;AAEA,MAAMG,YAAAA,GAAevB,GAAAA,CAAIC,MAAM,CAAC;IAC9BuB,QAAAA,EAAUd;AACZ,CAAA,CAAA;AAEA,MAAMe,iBAAAA,GAAoBzB,GAAAA,CAAIC,MAAM,CAAC;AACnCuB,IAAAA,QAAAA,EAAUxB,GAAAA,CAAI0B,KAAK,EAAA,CAAGC,EAAE,CAACjB,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMkB,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,kBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;AAOA,MAAMK,iBAAAA,GAAoBlC,GAAAA,CAAIC,MAAM,CAAC;AACnCkC,IAAAA,OAAAA,EAASnC,IACN0B,KAAK,EAAA,CACLC,EAAE,CACD3B,GAAAA,CAAIC,MAAM,CAAC;QACTqB,EAAAA,EAAItB,GAAAA,CAAIG,MAAM,EAAA,CAAGG,QAAQ,EAAA;AACzBkB,QAAAA,QAAAA,EAAUd,eAAeJ,QAAQ;KACnC,CAAA,CAAA,CAEDF,GAAG,CAAC,CAAA,CAAA,CACJE,QAAQ;AACb,CAAA,CAAA;AAEO,MAAM8B,sBAAAA,GAAyBJ,iBAAAA,CAAkBE,iBAAAA;;;;"}

package/dist/server/controllers/validation/content-api/upload.js.map

@@ -1 +1 @@
-{"version":3,"file":"upload.js","sources":["../../../../../server/src/controllers/validation/content-api/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup\n  .object({\n    name: yup.string().nullable(),\n    alternativeText: yup.string().nullable(),\n    caption: yup.string().nullable(),\n    focalPoint: focalPointSchema,\n  })\n  .noUnknown();\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  | yup.InferType<typeof uploadSchema>\n  | yup.InferType<typeof multiUploadSchema>;\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","noUnknown","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict"],"mappings":";;;;AAEA,MAAMA,gBAAAA,GAAmBC,SAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,SAAAA,CACpBC,MAAM,CAAC;IACNU,IAAAA,EAAMX,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB;AACd,CAAA,CAAA,CACCiB,SAAS,EAAA;AAEZ,MAAMC,YAAAA,GAAejB,SAAAA,CAAIC,MAAM,CAAC;IAC9BiB,QAAAA,EAAUR;AACZ,CAAA,CAAA;AAEA,MAAMS,iBAAAA,GAAoBnB,SAAAA,CAAIC,MAAM,CAAC;AACnCiB,IAAAA,QAAAA,EAAUlB,SAAAA,CAAIoB,KAAK,EAAA,CAAGC,EAAE,CAACX,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMY,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,wBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;;;;"}
+{"version":3,"file":"upload.js","sources":["../../../../../server/src/controllers/validation/content-api/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup\n  .object({\n    name: yup.string().nullable(),\n    alternativeText: yup.string().nullable(),\n    caption: yup.string().nullable(),\n    focalPoint: focalPointSchema,\n  })\n  .noUnknown();\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  yup.InferType<typeof uploadSchema> | yup.InferType<typeof multiUploadSchema>;\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","noUnknown","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict"],"mappings":";;;;AAEA,MAAMA,gBAAAA,GAAmBC,SAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,SAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,SAAAA,CACpBC,MAAM,CAAC;IACNU,IAAAA,EAAMX,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,SAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB;AACd,CAAA,CAAA,CACCiB,SAAS,EAAA;AAEZ,MAAMC,YAAAA,GAAejB,SAAAA,CAAIC,MAAM,CAAC;IAC9BiB,QAAAA,EAAUR;AACZ,CAAA,CAAA;AAEA,MAAMS,iBAAAA,GAAoBnB,SAAAA,CAAIC,MAAM,CAAC;AACnCiB,IAAAA,QAAAA,EAAUlB,SAAAA,CAAIoB,KAAK,EAAA,CAAGC,EAAE,CAACX,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMY,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,wBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;;;;"}

package/dist/server/controllers/validation/content-api/upload.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"upload.mjs","sources":["../../../../../server/src/controllers/validation/content-api/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup\n  .object({\n    name: yup.string().nullable(),\n    alternativeText: yup.string().nullable(),\n    caption: yup.string().nullable(),\n    focalPoint: focalPointSchema,\n  })\n  .noUnknown();\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  | yup.InferType<typeof uploadSchema>\n  | yup.InferType<typeof multiUploadSchema>;\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","noUnknown","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict"],"mappings":";;AAEA,MAAMA,gBAAAA,GAAmBC,GAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,GAAAA,CACpBC,MAAM,CAAC;IACNU,IAAAA,EAAMX,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB;AACd,CAAA,CAAA,CACCiB,SAAS,EAAA;AAEZ,MAAMC,YAAAA,GAAejB,GAAAA,CAAIC,MAAM,CAAC;IAC9BiB,QAAAA,EAAUR;AACZ,CAAA,CAAA;AAEA,MAAMS,iBAAAA,GAAoBnB,GAAAA,CAAIC,MAAM,CAAC;AACnCiB,IAAAA,QAAAA,EAAUlB,GAAAA,CAAIoB,KAAK,EAAA,CAAGC,EAAE,CAACX,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMY,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,kBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;;;;"}
+{"version":3,"file":"upload.mjs","sources":["../../../../../server/src/controllers/validation/content-api/upload.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst focalPointSchema = yup\n  .object({\n    x: yup.number().min(0).max(100).required(),\n    y: yup.number().min(0).max(100).required(),\n  })\n  .nullable()\n  .default(null);\n\nconst fileInfoSchema = yup\n  .object({\n    name: yup.string().nullable(),\n    alternativeText: yup.string().nullable(),\n    caption: yup.string().nullable(),\n    focalPoint: focalPointSchema,\n  })\n  .noUnknown();\n\nconst uploadSchema = yup.object({\n  fileInfo: fileInfoSchema,\n});\n\nconst multiUploadSchema = yup.object({\n  fileInfo: yup.array().of(fileInfoSchema),\n});\n\nconst validateUploadBody = (data = {}, isMulti = false) => {\n  const schema = isMulti ? multiUploadSchema : uploadSchema;\n\n  return validateYupSchema(schema, { strict: false })(data);\n};\n\nexport { validateUploadBody };\n\nexport type UploadBody =\n  yup.InferType<typeof uploadSchema> | yup.InferType<typeof multiUploadSchema>;\n"],"names":["focalPointSchema","yup","object","x","number","min","max","required","y","nullable","default","fileInfoSchema","name","string","alternativeText","caption","focalPoint","noUnknown","uploadSchema","fileInfo","multiUploadSchema","array","of","validateUploadBody","data","isMulti","schema","validateYupSchema","strict"],"mappings":";;AAEA,MAAMA,gBAAAA,GAAmBC,GAAAA,CACtBC,MAAM,CAAC;IACNC,CAAAA,EAAGF,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ,EAAA;IACxCC,CAAAA,EAAGP,GAAAA,CAAIG,MAAM,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA,CAAGC,GAAG,CAAC,GAAA,CAAA,CAAKC,QAAQ;AAC1C,CAAA,CAAA,CACCE,QAAQ,EAAA,CACRC,OAAO,CAAC,IAAA,CAAA;AAEX,MAAMC,cAAAA,GAAiBV,GAAAA,CACpBC,MAAM,CAAC;IACNU,IAAAA,EAAMX,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC3BK,eAAAA,EAAiBb,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IACtCM,OAAAA,EAASd,GAAAA,CAAIY,MAAM,EAAA,CAAGJ,QAAQ,EAAA;IAC9BO,UAAAA,EAAYhB;AACd,CAAA,CAAA,CACCiB,SAAS,EAAA;AAEZ,MAAMC,YAAAA,GAAejB,GAAAA,CAAIC,MAAM,CAAC;IAC9BiB,QAAAA,EAAUR;AACZ,CAAA,CAAA;AAEA,MAAMS,iBAAAA,GAAoBnB,GAAAA,CAAIC,MAAM,CAAC;AACnCiB,IAAAA,QAAAA,EAAUlB,GAAAA,CAAIoB,KAAK,EAAA,CAAGC,EAAE,CAACX,cAAAA;AAC3B,CAAA,CAAA;AAEA,MAAMY,qBAAqB,CAACC,IAAAA,GAAO,EAAE,EAAEC,UAAU,KAAK,GAAA;IACpD,MAAMC,MAAAA,GAASD,UAAUL,iBAAAA,GAAoBF,YAAAA;AAE7C,IAAA,OAAOS,kBAAkBD,MAAAA,EAAQ;QAAEE,MAAAA,EAAQ;KAAM,CAAA,CAAGJ,IAAAA,CAAAA;AACtD;;;;"}

package/dist/server/mcp/ambient-instance.js

@@ -21,9 +21,11 @@ var index = require('../utils/index.js');
  * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and
  * validator already depends on the ambient form.
  *
- * So the dependency is made explicit and asserted instead. Handlers call this in their factory
- * body — at handler construction, not per call — so a mismatch fails while the tool is being
- * registered rather than surfacing to an agent as tool output mid-conversation.
+ * So the dependency is made explicit and asserted instead. `buildUploadMcpToolDefinitions`
+ * wraps every tool's `createHandler` in this check, so it applies to the whole media surface by
+ * construction rather than by each factory remembering to call it. It runs at handler
+ * construction, not per call, so a mismatch fails while the tool is being registered rather
+ * than surfacing to an agent as tool output mid-conversation.
  *
  * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so
  * the two agree. If they ever diverge — a second Strapi instance in one process — this throws
@@ -37,8 +39,8 @@ var index = require('../utils/index.js');
  * Resolves the `folder` service for an MCP handler.
  *
  * A bare `getService('folder', strapi)` reads as instance-bound but is not — see
- * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps
- * the resolution behind a named helper so the call sites do not reintroduce the misleading form.
+ * `assertAmbientInstance` for why, and for where that is enforced. This keeps the resolution
+ * behind a named helper so the call sites do not reintroduce the misleading form.
  */ const getFolderService = (strapi)=>index.getService('folder', strapi);
 
 exports.assertAmbientInstance = assertAmbientInstance;

package/dist/server/mcp/ambient-instance.js.map

@@ -1 +1 @@
-{"version":3,"file":"ambient-instance.js","sources":["../../../server/src/mcp/ambient-instance.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport { getService } from '../utils';\n\n/**\n * Asserts that an MCP handler's Strapi instance is the ambient `global.strapi`.\n *\n * Two of the upload plugin's services — `folder` and `file` — are registered as plain object\n * literals rather than factories (see `services/index.ts`), so their methods close over the\n * module-scope ambient `strapi` and query `global.strapi.db` regardless of which instance is\n * passed to `getService`. Passing an instance therefore selects the right plugin registry but\n * does *not* bind the queries to it.\n *\n * The folder tools reach `folder` directly. The asset write tools reach `file` transitively:\n * `upload.updateFileInfo` resolves it with a bare `getService('file')` (`services/upload.ts`),\n * and `file.getFolderPath` then queries the ambient `strapi.db`. So a handler that looks\n * instance-bound can still mix ambient reads with instance-bound writes.\n *\n * Threading an instance through both services is a broader refactor than the MCP surface should\n * carry: `create`, `update` and `deleteByIds` reach for `strapi.db`, `strapi.eventHub` and\n * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and\n * validator already depends on the ambient form.\n *\n * So the dependency is made explicit and asserted instead. Handlers call this in their factory\n * body — at handler construction, not per call — so a mismatch fails while the tool is being\n * registered rather than surfacing to an agent as tool output mid-conversation.\n *\n * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so\n * the two agree. If they ever diverge — a second Strapi instance in one process — this throws\n * rather than silently reading or writing the wrong app's media library.\n */\nexport const assertAmbientInstance = (strapi: Core.Strapi) => {\n  if (strapi !== global.strapi) {\n    throw new Error(\n      'The upload `folder` and `file` services are bound to the ambient `global.strapi`, but an ' +\n        'MCP handler was constructed with a different Strapi instance. Media queries would run ' +\n        'against the wrong app. Convert those services to factories before serving MCP from a ' +\n        'non-global instance.'\n    );\n  }\n};\n\n/**\n * Resolves the `folder` service for an MCP handler.\n *\n * A bare `getService('folder', strapi)` reads as instance-bound but is not — see\n * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps\n * the resolution behind a named helper so the call sites do not reintroduce the misleading form.\n */\nexport const getFolderService = (strapi: Core.Strapi) => getService('folder', strapi);\n"],"names":["assertAmbientInstance","strapi","global","Error","getFolderService","getService"],"mappings":";;;;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BO,MAAMA,qBAAAA,GAAwB,CAACC,MAAAA,GAAAA;IACpC,IAAIA,MAAAA,KAAWC,MAAAA,CAAOD,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIE,KAAAA,CACR,2FAAA,GACE,wFAAA,GACA,uFAAA,GACA,sBAAA,CAAA;AAEN,IAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAMC,gBAAAA,GAAmB,CAACH,MAAAA,GAAwBI,gBAAAA,CAAW,UAAUJ,MAAAA;;;;;"}
+{"version":3,"file":"ambient-instance.js","sources":["../../../server/src/mcp/ambient-instance.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport { getService } from '../utils';\n\n/**\n * Asserts that an MCP handler's Strapi instance is the ambient `global.strapi`.\n *\n * Two of the upload plugin's services — `folder` and `file` — are registered as plain object\n * literals rather than factories (see `services/index.ts`), so their methods close over the\n * module-scope ambient `strapi` and query `global.strapi.db` regardless of which instance is\n * passed to `getService`. Passing an instance therefore selects the right plugin registry but\n * does *not* bind the queries to it.\n *\n * The folder tools reach `folder` directly. The asset write tools reach `file` transitively:\n * `upload.updateFileInfo` resolves it with a bare `getService('file')` (`services/upload.ts`),\n * and `file.getFolderPath` then queries the ambient `strapi.db`. So a handler that looks\n * instance-bound can still mix ambient reads with instance-bound writes.\n *\n * Threading an instance through both services is a broader refactor than the MCP surface should\n * carry: `create`, `update` and `deleteByIds` reach for `strapi.db`, `strapi.eventHub` and\n * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and\n * validator already depends on the ambient form.\n *\n * So the dependency is made explicit and asserted instead. `buildUploadMcpToolDefinitions`\n * wraps every tool's `createHandler` in this check, so it applies to the whole media surface by\n * construction rather than by each factory remembering to call it. It runs at handler\n * construction, not per call, so a mismatch fails while the tool is being registered rather\n * than surfacing to an agent as tool output mid-conversation.\n *\n * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so\n * the two agree. If they ever diverge — a second Strapi instance in one process — this throws\n * rather than silently reading or writing the wrong app's media library.\n */\nexport const assertAmbientInstance = (strapi: Core.Strapi) => {\n  if (strapi !== global.strapi) {\n    throw new Error(\n      'The upload `folder` and `file` services are bound to the ambient `global.strapi`, but an ' +\n        'MCP handler was constructed with a different Strapi instance. Media queries would run ' +\n        'against the wrong app. Convert those services to factories before serving MCP from a ' +\n        'non-global instance.'\n    );\n  }\n};\n\n/**\n * Resolves the `folder` service for an MCP handler.\n *\n * A bare `getService('folder', strapi)` reads as instance-bound but is not — see\n * `assertAmbientInstance` for why, and for where that is enforced. This keeps the resolution\n * behind a named helper so the call sites do not reintroduce the misleading form.\n */\nexport const getFolderService = (strapi: Core.Strapi) => getService('folder', strapi);\n"],"names":["assertAmbientInstance","strapi","global","Error","getFolderService","getService"],"mappings":";;;;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6BO,MAAMA,qBAAAA,GAAwB,CAACC,MAAAA,GAAAA;IACpC,IAAIA,MAAAA,KAAWC,MAAAA,CAAOD,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIE,KAAAA,CACR,2FAAA,GACE,wFAAA,GACA,uFAAA,GACA,sBAAA,CAAA;AAEN,IAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAMC,gBAAAA,GAAmB,CAACH,MAAAA,GAAwBI,gBAAAA,CAAW,UAAUJ,MAAAA;;;;;"}

package/dist/server/mcp/ambient-instance.mjs

@@ -19,9 +19,11 @@ import { getService } from '../utils/index.mjs';
  * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and
  * validator already depends on the ambient form.
  *
- * So the dependency is made explicit and asserted instead. Handlers call this in their factory
- * body — at handler construction, not per call — so a mismatch fails while the tool is being
- * registered rather than surfacing to an agent as tool output mid-conversation.
+ * So the dependency is made explicit and asserted instead. `buildUploadMcpToolDefinitions`
+ * wraps every tool's `createHandler` in this check, so it applies to the whole media surface by
+ * construction rather than by each factory remembering to call it. It runs at handler
+ * construction, not per call, so a mismatch fails while the tool is being registered rather
+ * than surfacing to an agent as tool output mid-conversation.
  *
  * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so
  * the two agree. If they ever diverge — a second Strapi instance in one process — this throws
@@ -35,8 +37,8 @@ import { getService } from '../utils/index.mjs';
  * Resolves the `folder` service for an MCP handler.
  *
  * A bare `getService('folder', strapi)` reads as instance-bound but is not — see
- * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps
- * the resolution behind a named helper so the call sites do not reintroduce the misleading form.
+ * `assertAmbientInstance` for why, and for where that is enforced. This keeps the resolution
+ * behind a named helper so the call sites do not reintroduce the misleading form.
  */ const getFolderService = (strapi)=>getService('folder', strapi);
 
 export { assertAmbientInstance, getFolderService };

package/dist/server/mcp/ambient-instance.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ambient-instance.mjs","sources":["../../../server/src/mcp/ambient-instance.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport { getService } from '../utils';\n\n/**\n * Asserts that an MCP handler's Strapi instance is the ambient `global.strapi`.\n *\n * Two of the upload plugin's services — `folder` and `file` — are registered as plain object\n * literals rather than factories (see `services/index.ts`), so their methods close over the\n * module-scope ambient `strapi` and query `global.strapi.db` regardless of which instance is\n * passed to `getService`. Passing an instance therefore selects the right plugin registry but\n * does *not* bind the queries to it.\n *\n * The folder tools reach `folder` directly. The asset write tools reach `file` transitively:\n * `upload.updateFileInfo` resolves it with a bare `getService('file')` (`services/upload.ts`),\n * and `file.getFolderPath` then queries the ambient `strapi.db`. So a handler that looks\n * instance-bound can still mix ambient reads with instance-bound writes.\n *\n * Threading an instance through both services is a broader refactor than the MCP surface should\n * carry: `create`, `update` and `deleteByIds` reach for `strapi.db`, `strapi.eventHub` and\n * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and\n * validator already depends on the ambient form.\n *\n * So the dependency is made explicit and asserted instead. Handlers call this in their factory\n * body — at handler construction, not per call — so a mismatch fails while the tool is being\n * registered rather than surfacing to an agent as tool output mid-conversation.\n *\n * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so\n * the two agree. If they ever diverge — a second Strapi instance in one process — this throws\n * rather than silently reading or writing the wrong app's media library.\n */\nexport const assertAmbientInstance = (strapi: Core.Strapi) => {\n  if (strapi !== global.strapi) {\n    throw new Error(\n      'The upload `folder` and `file` services are bound to the ambient `global.strapi`, but an ' +\n        'MCP handler was constructed with a different Strapi instance. Media queries would run ' +\n        'against the wrong app. Convert those services to factories before serving MCP from a ' +\n        'non-global instance.'\n    );\n  }\n};\n\n/**\n * Resolves the `folder` service for an MCP handler.\n *\n * A bare `getService('folder', strapi)` reads as instance-bound but is not — see\n * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps\n * the resolution behind a named helper so the call sites do not reintroduce the misleading form.\n */\nexport const getFolderService = (strapi: Core.Strapi) => getService('folder', strapi);\n"],"names":["assertAmbientInstance","strapi","global","Error","getFolderService","getService"],"mappings":";;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;IA2BO,MAAMA,qBAAAA,GAAwB,CAACC,MAAAA,GAAAA;IACpC,IAAIA,MAAAA,KAAWC,MAAAA,CAAOD,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIE,KAAAA,CACR,2FAAA,GACE,wFAAA,GACA,uFAAA,GACA,sBAAA,CAAA;AAEN,IAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAMC,gBAAAA,GAAmB,CAACH,MAAAA,GAAwBI,UAAAA,CAAW,UAAUJ,MAAAA;;;;"}
+{"version":3,"file":"ambient-instance.mjs","sources":["../../../server/src/mcp/ambient-instance.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport { getService } from '../utils';\n\n/**\n * Asserts that an MCP handler's Strapi instance is the ambient `global.strapi`.\n *\n * Two of the upload plugin's services — `folder` and `file` — are registered as plain object\n * literals rather than factories (see `services/index.ts`), so their methods close over the\n * module-scope ambient `strapi` and query `global.strapi.db` regardless of which instance is\n * passed to `getService`. Passing an instance therefore selects the right plugin registry but\n * does *not* bind the queries to it.\n *\n * The folder tools reach `folder` directly. The asset write tools reach `file` transitively:\n * `upload.updateFileInfo` resolves it with a bare `getService('file')` (`services/upload.ts`),\n * and `file.getFolderPath` then queries the ambient `strapi.db`. So a handler that looks\n * instance-bound can still mix ambient reads with instance-bound writes.\n *\n * Threading an instance through both services is a broader refactor than the MCP surface should\n * carry: `create`, `update` and `deleteByIds` reach for `strapi.db`, `strapi.eventHub` and\n * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and\n * validator already depends on the ambient form.\n *\n * So the dependency is made explicit and asserted instead. `buildUploadMcpToolDefinitions`\n * wraps every tool's `createHandler` in this check, so it applies to the whole media surface by\n * construction rather than by each factory remembering to call it. It runs at handler\n * construction, not per call, so a mismatch fails while the tool is being registered rather\n * than surfacing to an agent as tool output mid-conversation.\n *\n * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so\n * the two agree. If they ever diverge — a second Strapi instance in one process — this throws\n * rather than silently reading or writing the wrong app's media library.\n */\nexport const assertAmbientInstance = (strapi: Core.Strapi) => {\n  if (strapi !== global.strapi) {\n    throw new Error(\n      'The upload `folder` and `file` services are bound to the ambient `global.strapi`, but an ' +\n        'MCP handler was constructed with a different Strapi instance. Media queries would run ' +\n        'against the wrong app. Convert those services to factories before serving MCP from a ' +\n        'non-global instance.'\n    );\n  }\n};\n\n/**\n * Resolves the `folder` service for an MCP handler.\n *\n * A bare `getService('folder', strapi)` reads as instance-bound but is not — see\n * `assertAmbientInstance` for why, and for where that is enforced. This keeps the resolution\n * behind a named helper so the call sites do not reintroduce the misleading form.\n */\nexport const getFolderService = (strapi: Core.Strapi) => getService('folder', strapi);\n"],"names":["assertAmbientInstance","strapi","global","Error","getFolderService","getService"],"mappings":";;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA6BO,MAAMA,qBAAAA,GAAwB,CAACC,MAAAA,GAAAA;IACpC,IAAIA,MAAAA,KAAWC,MAAAA,CAAOD,MAAM,EAAE;AAC5B,QAAA,MAAM,IAAIE,KAAAA,CACR,2FAAA,GACE,wFAAA,GACA,uFAAA,GACA,sBAAA,CAAA;AAEN,IAAA;AACF;AAEA;;;;;;AAMC,IACM,MAAMC,gBAAAA,GAAmB,CAACH,MAAAA,GAAwBI,UAAAA,CAAW,UAAUJ,MAAAA;;;;"}

package/dist/server/mcp/handlers/folder-handlers.js

@@ -152,9 +152,7 @@ var utils = require('../utils.js');
  *
  * `create` rather than the `update` the other folder tools use: creating a folder is the one
  * folder operation whose admin route gates on `assets.create`.
- */ const createMediaCreateFolderHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaCreateFolderHandler = (strapi, context)=>async ({ args })=>{
         const { name, parent = null } = args;
         permissions.assertMediaPermission(strapi, context, constants$1.ACTIONS.create, constants$1.FOLDER_MODEL_UID);
         await assertParentExists(strapi, parent);
@@ -169,7 +167,6 @@ var utils = require('../utils.js');
             data: await readFolderForOutput(strapi, created.id, created)
         });
     };
-};
 /**
  * `media_rename_folder` — changes a folder's name and nothing else.
  *
@@ -177,9 +174,7 @@ var utils = require('../utils.js');
  * `isUndefined(parent)`, and the name-only branch skips the transaction that rewrites descendant
  * paths. Passing the folder's existing parent would take the move branch and rewrite the whole
  * subtree to compute the identical paths.
- */ const createMediaRenameFolderHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaRenameFolderHandler = (strapi, context)=>async ({ args })=>{
         const { id, name } = args;
         permissions.assertMediaPermission(strapi, context, constants$1.ACTIONS.update, constants$1.FOLDER_MODEL_UID);
         const folder = await findFolderById(strapi, id, {
@@ -205,16 +200,13 @@ var utils = require('../utils.js');
             })
         });
     };
-};
 /**
  * `media_move_folder` — re-parents a folder, carrying its whole subtree with it.
  *
  * `folder.update()` recalculates the materialized `path` of every descendant folder and the
  * `folderPath` of every contained file inside a transaction, so the move is atomic and no
  * separate bookkeeping is needed here.
- */ const createMediaMoveFolderHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaMoveFolderHandler = (strapi, context)=>async ({ args })=>{
         const { id, parent } = args;
         permissions.assertMediaPermission(strapi, context, constants$1.ACTIONS.update, constants$1.FOLDER_MODEL_UID);
         const folder = await findFolderById(strapi, id);
@@ -235,7 +227,6 @@ var utils = require('../utils.js');
             data: await readFolderForOutput(strapi, id, moved ?? folder)
         });
     };
-};
 /**
  * `media_delete_folder` — previews or performs a cascading folder deletion.
  *
@@ -245,9 +236,7 @@ var utils = require('../utils.js');
  *
  * `dryRun` defaults to true (see the input schema): omitting the flag previews, and deleting
  * takes an explicit `dryRun: false`.
- */ const createMediaDeleteFolderHandler = (strapi, context)=>{
-    ambientInstance.assertAmbientInstance(strapi);
-    return async ({ args })=>{
+ */ const createMediaDeleteFolderHandler = (strapi, context)=>async ({ args })=>{
         const { ids, dryRun = true } = args;
         permissions.assertMediaPermission(strapi, context, constants$1.ACTIONS.update, constants$1.FOLDER_MODEL_UID);
         const matched = await strapi.db.query(constants$1.FOLDER_MODEL_UID).findMany({
@@ -299,7 +288,6 @@ var utils = require('../utils.js');
             totalFileNumber
         });
     };
-};
 
 exports.createMediaCreateFolderHandler = createMediaCreateFolderHandler;
 exports.createMediaDeleteFolderHandler = createMediaDeleteFolderHandler;