@strapi/upload 5.58.0 → 5.60.0

package/dist/server/src/mcp/ambient-instance.d.ts

@@ -18,9 +18,11 @@ import type { Core } from '@strapi/types';
  * `strapi.getModel`, `update` runs a multi-statement transaction, and every admin controller and
  * validator already depends on the ambient form.
  *
- * So the dependency is made explicit and asserted instead. Handlers call this in their factory
- * body — at handler construction, not per call — so a mismatch fails while the tool is being
- * registered rather than surfacing to an agent as tool output mid-conversation.
+ * So the dependency is made explicit and asserted instead. `buildUploadMcpToolDefinitions`
+ * wraps every tool's `createHandler` in this check, so it applies to the whole media surface by
+ * construction rather than by each factory remembering to call it. It runs at handler
+ * construction, not per call, so a mismatch fails while the tool is being registered rather
+ * than surfacing to an agent as tool output mid-conversation.
  *
  * A single-app server is unaffected: `createStrapi` assigns its instance to `global.strapi`, so
  * the two agree. If they ever diverge — a second Strapi instance in one process — this throws
@@ -31,8 +33,8 @@ export declare const assertAmbientInstance: (strapi: Core.Strapi) => void;
  * Resolves the `folder` service for an MCP handler.
  *
  * A bare `getService('folder', strapi)` reads as instance-bound but is not — see
- * `assertAmbientInstance` for why. Handlers assert the instance once at construction; this keeps
- * the resolution behind a named helper so the call sites do not reintroduce the misleading form.
+ * `assertAmbientInstance` for why, and for where that is enforced. This keeps the resolution
+ * behind a named helper so the call sites do not reintroduce the misleading form.
  */
 export declare const getFolderService: (strapi: Core.Strapi) => {
     create: (folderData: Pick<import("../types").Folder, "name" | "parent">, opts?: {

package/dist/server/src/mcp/ambient-instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ambient-instance.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/ambient-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,IAAI,CAAC,MAAM,SASxD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ,IAAI,CAAC,MAAM;;;;;;;;;;;;;;;;cACisB,CAAC;;;;;;;;;;;;;CADjqB,CAAC"}
+{"version":3,"file":"ambient-instance.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/ambient-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,qBAAqB,GAAI,QAAQ,IAAI,CAAC,MAAM,SASxD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ,IAAI,CAAC,MAAM;;;;;;;;;;;;;;;;cACmjB,CAAC;;;;;;;;;;;;;CADnhB,CAAC"}

package/dist/server/src/mcp/handlers/folder-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"folder-handlers.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/handlers/folder-handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AA4KnD;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,GACzC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAY7C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GACzC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAsB7C,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GACvC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAyB7C,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,GACzC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAuD7C,CAAC"}
+{"version":3,"file":"folder-handlers.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/handlers/folder-handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AA4KnD;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,GACxC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAW3C,CAAC;AAEJ;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GACxC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAqB3C,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GACtC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAwB3C,CAAC;AAEJ;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,GACxC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAsD3C,CAAC"}

package/dist/server/src/mcp/handlers/read-handlers.d.ts

@@ -28,8 +28,9 @@ export declare const createMediaGetAssetHandler: (strapi: Core.Strapi, context:
  * filtering, so this is gated on the model-level read permission only — matching
  * `GET /upload/folder-structure` in the admin API.
  *
- * The factory asserts the handler's instance is the ambient `global.strapi` the folder service
- * actually queries — see `assertAmbientInstance` for why.
+ * The folder service queries the ambient `global.strapi` regardless of the instance passed to
+ * `getService`; `buildUploadMcpToolDefinitions` asserts the two agree before this handler is
+ * ever constructed — see `assertAmbientInstance` for why.
  */
 export declare const createMediaListFoldersHandler: (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) => () => Promise<Modules.MCP.McpToolHandlerReturn>;
 //# sourceMappingURL=read-handlers.d.ts.map

package/dist/server/src/mcp/handlers/read-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-handlers.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/handlers/read-handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AA4DnD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GACvC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAmB7C,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACrC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CA0B7C,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,GACxC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAIrB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAO1D,CAAC"}
+{"version":3,"file":"read-handlers.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/handlers/read-handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AA4DnD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,GACtC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAkB3C,CAAC;AAEJ;;;;;;;;GAQG;AACH,eAAO,MAAM,0BAA0B,GACpC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAyB3C,CAAC;AAEJ;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,GACvC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,WAClD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAMjD,CAAC"}

package/dist/server/src/mcp/handlers/write-handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write-handlers.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/handlers/write-handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAiEnD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,GACxC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CA4C7C,CAAC;AA8BF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,4BAA4B,GACvC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAgF7C,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,8BAA8B,GACzC,QAAQ,IAAI,CAAC,MAAM,EACnB,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAIxB,WAEX;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAmF7C,CAAC"}
+{"version":3,"file":"write-handlers.d.ts","sourceRoot":"","sources":["../../../../../server/src/mcp/handlers/write-handlers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAgEnD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,GACvC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CA2C3C,CAAC;AA8BJ;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,4BAA4B,GACtC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CA+E3C,CAAC;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,8BAA8B,GACxC,QAAQ,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,CAAC,iBAAiB,MACrD,WAEJ;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,KAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAkF3C,CAAC"}

package/dist/server/src/mcp/register-upload-mcp-tools.d.ts

@@ -1,22 +1,17 @@
 import type { Core } from '@strapi/types';
 import type { UploadMcpTool } from './types';
 /**
- * The Media Library MCP tools.
+ * The Media Library MCP tools, every handler factory wrapped in the ambient-instance guard.
  *
- * Folder writes inherit the same `plugin::upload.assets.update` action rather than introducing a
- * folder-specific one, matching what the admin UI enforces today. MCP-specific folder RBAC is
- * out of scope.
+ * The guard is applied here rather than left to each factory so it is structural: a tool added
+ * to the array above cannot forget it. See `assertAmbientInstance` for what it defends against
+ * — the `folder` and `file` services query `global.strapi` regardless of the instance passed to
+ * `getService`, so a handler acting on any other instance would read or write the wrong app's
+ * media library.
  *
- * Renaming and moving are separate tools for both objects — rename/update changes attributes,
- * move changes location — so an agent selects by intent instead of assembling a combined patch.
- *
- * The asset and folder tools stay separate for both move and delete, even though
- * `/actions/bulk-move` accepts both id lists at once and `/actions/bulk-delete` accepts `fileIds`
- * and `folderIds` together. Asset ids and folder ids are indistinguishable integers from separate
- * namespaces, and both `media_list_assets` and `media_list_folders` return a plain `id`, so a
- * combined tool would let an agent pass folder ids where assets were meant with nothing to
- * object. On the delete side that mistake is unrecoverable, and two tools also let each
- * description carry the warning matched to its own blast radius.
+ * Wrapping the factory, not the handler, keeps the failure at handler construction: the MCP
+ * registry catches a factory throw, logs it and substitutes a fallback handler, so the invariant
+ * reaches the operator's log instead of an agent's tool output.
  */
 export declare const buildUploadMcpToolDefinitions: () => UploadMcpTool[];
 /**

package/dist/server/src/mcp/register-upload-mcp-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-upload-mcp-tools.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/register-upload-mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAmC7C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,6BAA6B,QAAO,aAAa,EAiH7D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,KAAG,IAO5E,CAAC"}
+{"version":3,"file":"register-upload-mcp-tools.d.ts","sourceRoot":"","sources":["../../../../server/src/mcp/register-upload-mcp-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAI1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAwK7C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,QAAO,aAAa,EAQzD,CAAC;AAEN;;;GAGG;AACH,eAAO,MAAM,sBAAsB,GAAI,YAAY;IAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAA;CAAE,KAAG,IAO5E,CAAC"}

package/dist/server/src/services/extensions/utils.d.ts

@@ -42,36 +42,36 @@ declare const mapBlocksImages: (value: unknown, mapImage: (image: File) => Promi
  */
 declare const unsignImage: (image: File, cache?: SignCache) => Promise<{
     id: number;
+    documentId: string;
     name: string;
     alternativeText?: string | null;
     caption?: string | null;
     focalPoint?: import("../../types").FocalPoint | null;
-    width?: number;
-    height?: number;
-    formats?: Record<string, unknown>;
+    width?: number | null;
+    height?: number | null;
+    formats?: Record<string, unknown> | null;
     hash: string;
     ext?: string;
     mime?: string;
     size?: number;
     sizeInBytes?: number;
     url?: string;
-    previewUrl?: string;
+    previewUrl?: string | null;
     path?: string | null;
     provider?: string;
-    provider_metadata?: Record<string, unknown>;
-    folder?: number | null;
+    provider_metadata?: Record<string, unknown> | null;
+    folder?: import("../../types").Folder | null;
     folderPath?: string;
     related?: {
         id: string | number;
         __type: string;
-        __pivot: {
-            field: string;
-        };
     }[];
     createdAt?: string;
     updatedAt?: string;
-    createdBy?: number;
-    updatedBy?: number;
+    publishedAt?: string;
+    locale?: string | null;
+    createdBy?: number | import("../../types").FileCreator | null;
+    updatedBy?: number | import("../../types").FileCreator | null;
 }>;
 /**
  *

package/dist/server/src/services/image-manipulation.d.ts

@@ -4,7 +4,7 @@ type Dimensions = {
     height: number | null;
 };
 declare const _default: {
-    isFaultyImage: (file: UploadableFile) => Promise<unknown>;
+    isFaultyImage: (file: UploadableFile) => Promise<boolean>;
     isOptimizableImage: (file: UploadableFile) => Promise<boolean>;
     isResizableImage: (file: UploadableFile) => Promise<boolean>;
     isImage: (file: UploadableFile) => Promise<boolean>;

package/dist/server/src/services/image-manipulation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-manipulation.d.ts","sourceRoot":"","sources":["../../../../server/src/services/image-manipulation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;;0BA4OiC,cAAc;+BAiBT,cAAc;6BAYhB,cAAc;oBAYvB,cAAc;0BAlPR,cAAc,KAAG,OAAO,CAAC,UAAU,CAAC;sCAuJxB,cAAc;;;;8BA5FtB,cAAc;qBAqBvB,cAAc;6BA8KZ,MAAM;;AAOtC,wBAUE"}
+{"version":3,"file":"image-manipulation.d.ts","sourceRoot":"","sources":["../../../../server/src/services/image-manipulation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAU,cAAc,EAAE,MAAM,UAAU,CAAC;AAEvD,KAAK,UAAU,GAAG;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;;0BA+PiC,cAAc;+BAsBT,cAAc;6BAYhB,cAAc;oBAYvB,cAAc;0BAzPR,cAAc,KAAG,OAAO,CAAC,UAAU,CAAC;sCAyJxB,cAAc;;;;8BA5FtB,cAAc;qBAqBvB,cAAc;6BAmLZ,MAAM;;AAOtC,wBAUE"}

package/dist/server/src/services/index.d.ts

@@ -138,7 +138,7 @@ export declare const services: {
         sendUploadPluginMetrics(): Promise<void>;
     };
     'image-manipulation': {
-        isFaultyImage: (file: import("../types").UploadableFile) => Promise<unknown>;
+        isFaultyImage: (file: import("../types").UploadableFile) => Promise<boolean>;
         isOptimizableImage: (file: import("../types").UploadableFile) => Promise<boolean>;
         isResizableImage: (file: import("../types").UploadableFile) => Promise<boolean>;
         isImage: (file: import("../types").UploadableFile) => Promise<boolean>;

package/dist/server/src/types.d.ts

@@ -8,39 +8,82 @@ export interface FocalPoint {
     x: number;
     y: number;
 }
+/**
+ * Admin user that created or updated a file, when the relation is populated
+ */
+export interface FileCreator {
+    id: number;
+    firstname?: string | null;
+    lastname?: string | null;
+    username?: string | null;
+    email?: string;
+}
+/**
+ * A `plugin::upload.file` row, as the upload service returns it
+ */
 export interface File {
     id: number;
+    documentId: string;
     name: string;
     alternativeText?: string | null;
     caption?: string | null;
     focalPoint?: FocalPoint | null;
-    width?: number;
-    height?: number;
-    formats?: Record<string, unknown>;
+    /**
+     * null for non-image files
+     */
+    width?: number | null;
+    /**
+     * null for non-image files
+     */
+    height?: number | null;
+    /**
+     * null for non-image files
+     */
+    formats?: Record<string, unknown> | null;
     hash: string;
     ext?: string;
     mime?: string;
     size?: number;
+    /**
+     * Set on files sent to the provider, never stored on the row
+     */
     sizeInBytes?: number;
     url?: string;
-    previewUrl?: string;
+    /**
+     * Provider-dependent: null with the local provider
+     */
+    previewUrl?: string | null;
+    /**
+     * Set on files sent to the provider, never stored on the row
+     */
     path?: string | null;
     provider?: string;
-    provider_metadata?: Record<string, unknown>;
+    /**
+     * Provider-dependent: null with the local provider
+     */
+    provider_metadata?: Record<string, unknown> | null;
     isUrlSigned?: boolean;
-    folder?: number | null;
+    /**
+     * Present only when populated
+     */
+    folder?: Folder | null;
     folderPath?: string;
+    /**
+     * Present only when populated: the related entries, with their `__type`
+     */
     related?: {
         id: string | number;
         __type: string;
-        __pivot: {
-            field: string;
-        };
     }[];
     createdAt?: string;
     updatedAt?: string;
-    createdBy?: number;
-    updatedBy?: number;
+    publishedAt?: string;
+    locale?: string | null;
+    /**
+     * Present only when populated: the admin user, or null when no admin user is set
+     */
+    createdBy?: number | FileCreator | null;
+    updatedBy?: number | FileCreator | null;
 }
 export interface Folder {
     id: number;
@@ -65,6 +108,7 @@ export interface Config {
     sharp?: {
         cache?: boolean;
         concurrency?: number;
+        limitInputPixels?: number | boolean;
     };
     /** Server-side ceiling: files processed in parallel within a single request. */
     concurrentUploadSize?: number;
@@ -75,7 +119,15 @@ export interface Config {
         deniedTypes?: string[];
     };
 }
-export interface UploadableFile extends Omit<File, 'id'> {
+export interface UploadableFile extends Omit<File, 'id' | 'documentId' | 'folder' | 'related'> {
+    folder?: number | null;
+    related?: {
+        id: string | number;
+        __type: string;
+        __pivot: {
+            field: string;
+        };
+    }[];
     filepath?: string;
     getStream: () => NodeJS.ReadableStream;
     stream?: NodeJS.ReadableStream;

package/dist/server/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../server/src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5B,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iFAAiF;IACjF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,MAAM,CAAC,cAAc,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../server/src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,IAAI,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzD,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;KAChB,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;KACrC,CAAC;IACF,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,iFAAiF;IACjF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,EAAE;QACT,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5F,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5B,EAAE,CAAC;IACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,MAAM,CAAC,cAAc,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,QAAQ,GAAG;IACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/upload",
-  "version": "5.58.0",
+  "version": "5.60.0",
   "description": "Makes it easy to upload images and files to your Strapi Application.",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -71,15 +71,17 @@
   "dependencies": {
     "@dnd-kit/core": "6.3.1",
     "@dnd-kit/modifiers": "9.0.0",
+    "@dnd-kit/sortable": "10.0.0",
+    "@dnd-kit/utilities": "3.2.2",
     "@mux/mux-player-react": "3.1.0",
     "@radix-ui/react-dialog": "1.0.5",
     "@radix-ui/react-toggle-group": "1.1.11",
     "@reduxjs/toolkit": "1.9.7",
-    "@strapi/database": "5.58.0",
+    "@strapi/database": "5.60.0",
     "@strapi/design-system": "2.2.4",
     "@strapi/icons": "2.2.4",
-    "@strapi/provider-upload-local": "5.58.0",
-    "@strapi/utils": "5.58.0",
+    "@strapi/provider-upload-local": "5.60.0",
+    "@strapi/utils": "5.60.0",
     "byte-size": "8.1.1",
     "cropperjs": "1.6.2",
     "date-fns": "2.30.0",
@@ -103,8 +105,8 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@strapi/admin": "5.58.0",
-    "@strapi/types": "5.58.0",
+    "@strapi/admin": "5.60.0",
+    "@strapi/types": "5.60.0",
     "@testing-library/dom": "10.4.1",
     "@testing-library/jest-dom": "6.9.1",
     "@testing-library/react": "16.3.2",