@strapi/utils 5.36.0 → 5.37.0

package/dist/validate/visitors/throw-unrecognized-fields.mjs

@@ -1,62 +1,46 @@
-import { constants, isMorphToRelationalAttribute, isComponentSchema, isDynamicZoneAttribute, hasRelationReordering, isRelationalAttribute, isMediaAttribute } from '../../content-types.mjs';
+import { ID_FIELDS, isMorphToRelationalAttribute, MORPH_TO_KEYS, isComponentSchema, isDynamicZoneAttribute, DYNAMIC_ZONE_KEYS, isRelationalAttribute, isMediaAttribute, RELATION_OPERATION_KEYS, isComponentAttribute } from '../../content-types.mjs';
 import { throwInvalidKey } from '../utils.mjs';
 
-// TODO these should all be centralized somewhere instead of maintaining a list
-const ID_FIELDS = [
-    constants.DOC_ID_ATTRIBUTE,
-    constants.DOC_ID_ATTRIBUTE
-];
-const ALLOWED_ROOT_LEVEL_FIELDS = [
-    ...ID_FIELDS
-];
-const MORPH_TO_ALLOWED_FIELDS = [
-    '__type'
-];
-const DYNAMIC_ZONE_ALLOWED_FIELDS = [
-    '__component'
-];
-const RELATION_REORDERING_FIELDS = [
-    'connect',
-    'disconnect',
-    'set',
-    'options'
-];
-const throwUnrecognizedFields = ({ key, attribute, path, schema, parent })=>{
+const throwUnrecognizedFields = ({ key, attribute, path, schema, parent, allowedExtraRootKeys }, // eslint-disable-next-line @typescript-eslint/no-unused-vars -- Visitor type requires second param
+_visitorUtils)=>{
     // We only look at properties that are not attributes
     if (attribute) {
         return;
     }
-    // At root level (path.attribute === null), only accept allowed fields
+    // At root level (path.attribute === null), only accept id-like fields
     if (path.attribute === null) {
-        if (ALLOWED_ROOT_LEVEL_FIELDS.includes(key)) {
+        if (ID_FIELDS.includes(key)) {
+            return;
+        }
+        if (allowedExtraRootKeys?.includes(key)) {
             return;
         }
         return throwInvalidKey({
             key,
-            path: attribute
+            path: path.attribute
         });
     }
     // allow special morphTo keys
-    if (isMorphToRelationalAttribute(parent?.attribute) && MORPH_TO_ALLOWED_FIELDS.includes(key)) {
+    if (isMorphToRelationalAttribute(parent?.attribute) && MORPH_TO_KEYS.includes(key)) {
         return;
     }
     // allow special dz keys
-    if (isComponentSchema(schema) && isDynamicZoneAttribute(parent?.attribute) && DYNAMIC_ZONE_ALLOWED_FIELDS.includes(key)) {
+    if (isComponentSchema(schema) && isDynamicZoneAttribute(parent?.attribute) && DYNAMIC_ZONE_KEYS.includes(key)) {
         return;
     }
-    // allow special relation reordering keys in manyToX and XtoMany relations
-    if (hasRelationReordering(parent?.attribute) && RELATION_REORDERING_FIELDS.includes(key)) {
+    // allow relation operation keys (connect, disconnect, set, options) for relations and media
+    if ((isRelationalAttribute(parent?.attribute) || isMediaAttribute(parent?.attribute)) && RELATION_OPERATION_KEYS.includes(key)) {
         return;
     }
-    // allow id fields where it is needed for setting a relational id rather than trying to create with a given id
-    const canUseID = isRelationalAttribute(parent?.attribute) || isMediaAttribute(parent?.attribute);
-    if (canUseID && !ID_FIELDS.includes(key)) {
+    // allow id fields for relations, media, and components
+    const canUseID = isRelationalAttribute(parent?.attribute) || isMediaAttribute(parent?.attribute) || isComponentAttribute(parent?.attribute);
+    if (canUseID && ID_FIELDS.includes(key)) {
         return;
     }
     // if we couldn't find any reason for it to be here, throw
     throwInvalidKey({
         key,
-        path: attribute
+        path: path.attribute
     });
 };
 

package/dist/validate/visitors/throw-unrecognized-fields.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"throw-unrecognized-fields.mjs","sources":["../../../src/validate/visitors/throw-unrecognized-fields.ts"],"sourcesContent":["import {\n  isDynamicZoneAttribute,\n  isMorphToRelationalAttribute,\n  isRelationalAttribute,\n  constants,\n  isComponentSchema,\n  isMediaAttribute,\n  hasRelationReordering,\n} from '../../content-types';\nimport type { Visitor } from '../../traverse-entity';\nimport { throwInvalidKey } from '../utils';\n\n// TODO these should all be centralized somewhere instead of maintaining a list\nconst ID_FIELDS = [constants.DOC_ID_ATTRIBUTE, constants.DOC_ID_ATTRIBUTE];\nconst ALLOWED_ROOT_LEVEL_FIELDS = [...ID_FIELDS];\nconst MORPH_TO_ALLOWED_FIELDS = ['__type'];\nconst DYNAMIC_ZONE_ALLOWED_FIELDS = ['__component'];\nconst RELATION_REORDERING_FIELDS = ['connect', 'disconnect', 'set', 'options'];\n\nconst throwUnrecognizedFields: Visitor = ({ key, attribute, path, schema, parent }) => {\n  // We only look at properties that are not attributes\n  if (attribute) {\n    return;\n  }\n\n  // At root level (path.attribute === null), only accept allowed fields\n  if (path.attribute === null) {\n    if (ALLOWED_ROOT_LEVEL_FIELDS.includes(key)) {\n      return;\n    }\n\n    return throwInvalidKey({ key, path: attribute });\n  }\n\n  // allow special morphTo keys\n  if (isMorphToRelationalAttribute(parent?.attribute) && MORPH_TO_ALLOWED_FIELDS.includes(key)) {\n    return;\n  }\n\n  // allow special dz keys\n  if (\n    isComponentSchema(schema) &&\n    isDynamicZoneAttribute(parent?.attribute) &&\n    DYNAMIC_ZONE_ALLOWED_FIELDS.includes(key)\n  ) {\n    return;\n  }\n\n  // allow special relation reordering keys in manyToX and XtoMany relations\n  if (hasRelationReordering(parent?.attribute) && RELATION_REORDERING_FIELDS.includes(key)) {\n    return;\n  }\n\n  // allow id fields where it is needed for setting a relational id rather than trying to create with a given id\n  const canUseID = isRelationalAttribute(parent?.attribute) || isMediaAttribute(parent?.attribute);\n  if (canUseID && !ID_FIELDS.includes(key)) {\n    return;\n  }\n\n  // if we couldn't find any reason for it to be here, throw\n  throwInvalidKey({ key, path: attribute });\n};\n\nexport default throwUnrecognizedFields;\n"],"names":["ID_FIELDS","constants","DOC_ID_ATTRIBUTE","ALLOWED_ROOT_LEVEL_FIELDS","MORPH_TO_ALLOWED_FIELDS","DYNAMIC_ZONE_ALLOWED_FIELDS","RELATION_REORDERING_FIELDS","throwUnrecognizedFields","key","attribute","path","schema","parent","includes","throwInvalidKey","isMorphToRelationalAttribute","isComponentSchema","isDynamicZoneAttribute","hasRelationReordering","canUseID","isRelationalAttribute","isMediaAttribute"],"mappings":";;;AAYA;AACA,MAAMA,SAAY,GAAA;AAACC,IAAAA,SAAAA,CAAUC,gBAAgB;AAAED,IAAAA,SAAAA,CAAUC;AAAiB,CAAA;AAC1E,MAAMC,yBAA4B,GAAA;AAAIH,IAAAA,GAAAA;AAAU,CAAA;AAChD,MAAMI,uBAA0B,GAAA;AAAC,IAAA;AAAS,CAAA;AAC1C,MAAMC,2BAA8B,GAAA;AAAC,IAAA;AAAc,CAAA;AACnD,MAAMC,0BAA6B,GAAA;AAAC,IAAA,SAAA;AAAW,IAAA,YAAA;AAAc,IAAA,KAAA;AAAO,IAAA;AAAU,CAAA;AAE9E,MAAMC,uBAAmC,GAAA,CAAC,EAAEC,GAAG,EAAEC,SAAS,EAAEC,IAAI,EAAEC,MAAM,EAAEC,MAAM,EAAE,GAAA;;AAEhF,IAAA,IAAIH,SAAW,EAAA;AACb,QAAA;AACF;;IAGA,IAAIC,IAAAA,CAAKD,SAAS,KAAK,IAAM,EAAA;QAC3B,IAAIN,yBAAAA,CAA0BU,QAAQ,CAACL,GAAM,CAAA,EAAA;AAC3C,YAAA;AACF;AAEA,QAAA,OAAOM,eAAgB,CAAA;AAAEN,YAAAA,GAAAA;YAAKE,IAAMD,EAAAA;AAAU,SAAA,CAAA;AAChD;;AAGA,IAAA,IAAIM,6BAA6BH,MAAQH,EAAAA,SAAAA,CAAAA,IAAcL,uBAAwBS,CAAAA,QAAQ,CAACL,GAAM,CAAA,EAAA;AAC5F,QAAA;AACF;;IAGA,IACEQ,iBAAAA,CAAkBL,WAClBM,sBAAuBL,CAAAA,MAAAA,EAAQH,cAC/BJ,2BAA4BQ,CAAAA,QAAQ,CAACL,GACrC,CAAA,EAAA;AACA,QAAA;AACF;;AAGA,IAAA,IAAIU,sBAAsBN,MAAQH,EAAAA,SAAAA,CAAAA,IAAcH,0BAA2BO,CAAAA,QAAQ,CAACL,GAAM,CAAA,EAAA;AACxF,QAAA;AACF;;AAGA,IAAA,MAAMW,QAAWC,GAAAA,qBAAAA,CAAsBR,MAAQH,EAAAA,SAAAA,CAAAA,IAAcY,iBAAiBT,MAAQH,EAAAA,SAAAA,CAAAA;AACtF,IAAA,IAAIU,QAAY,IAAA,CAACnB,SAAUa,CAAAA,QAAQ,CAACL,GAAM,CAAA,EAAA;AACxC,QAAA;AACF;;IAGAM,eAAgB,CAAA;AAAEN,QAAAA,GAAAA;QAAKE,IAAMD,EAAAA;AAAU,KAAA,CAAA;AACzC;;;;"}
+{"version":3,"file":"throw-unrecognized-fields.mjs","sources":["../../../src/validate/visitors/throw-unrecognized-fields.ts"],"sourcesContent":["import {\n  isDynamicZoneAttribute,\n  isMorphToRelationalAttribute,\n  isRelationalAttribute,\n  isComponentSchema,\n  isMediaAttribute,\n  isComponentAttribute,\n  DYNAMIC_ZONE_KEYS,\n  ID_FIELDS,\n  MORPH_TO_KEYS,\n  RELATION_OPERATION_KEYS,\n} from '../../content-types';\nimport type { Visitor } from '../../traverse-entity';\nimport { throwInvalidKey } from '../utils';\n\nconst throwUnrecognizedFields: Visitor = (\n  { key, attribute, path, schema, parent, allowedExtraRootKeys },\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars -- Visitor type requires second param\n  _visitorUtils\n) => {\n  // We only look at properties that are not attributes\n  if (attribute) {\n    return;\n  }\n\n  // At root level (path.attribute === null), only accept id-like fields\n  if (path.attribute === null) {\n    if (ID_FIELDS.includes(key)) {\n      return;\n    }\n    if (allowedExtraRootKeys?.includes(key)) {\n      return;\n    }\n\n    return throwInvalidKey({ key, path: path.attribute });\n  }\n\n  // allow special morphTo keys\n  if (isMorphToRelationalAttribute(parent?.attribute) && MORPH_TO_KEYS.includes(key)) {\n    return;\n  }\n\n  // allow special dz keys\n  if (\n    isComponentSchema(schema) &&\n    isDynamicZoneAttribute(parent?.attribute) &&\n    DYNAMIC_ZONE_KEYS.includes(key)\n  ) {\n    return;\n  }\n\n  // allow relation operation keys (connect, disconnect, set, options) for relations and media\n  if (\n    (isRelationalAttribute(parent?.attribute) || isMediaAttribute(parent?.attribute)) &&\n    RELATION_OPERATION_KEYS.includes(key)\n  ) {\n    return;\n  }\n\n  // allow id fields for relations, media, and components\n  const canUseID =\n    isRelationalAttribute(parent?.attribute) ||\n    isMediaAttribute(parent?.attribute) ||\n    isComponentAttribute(parent?.attribute);\n  if (canUseID && ID_FIELDS.includes(key)) {\n    return;\n  }\n\n  // if we couldn't find any reason for it to be here, throw\n  throwInvalidKey({ key, path: path.attribute });\n};\n\nexport default throwUnrecognizedFields;\n"],"names":["throwUnrecognizedFields","key","attribute","path","schema","parent","allowedExtraRootKeys","_visitorUtils","ID_FIELDS","includes","throwInvalidKey","isMorphToRelationalAttribute","MORPH_TO_KEYS","isComponentSchema","isDynamicZoneAttribute","DYNAMIC_ZONE_KEYS","isRelationalAttribute","isMediaAttribute","RELATION_OPERATION_KEYS","canUseID","isComponentAttribute"],"mappings":";;;AAeA,MAAMA,0BAAmC,CACvC,EAAEC,GAAG,EAAEC,SAAS,EAAEC,IAAI,EAAEC,MAAM,EAAEC,MAAM,EAAEC,oBAAoB,EAAE;AAE9DC,aAAAA,GAAAA;;AAGA,IAAA,IAAIL,SAAW,EAAA;AACb,QAAA;AACF;;IAGA,IAAIC,IAAAA,CAAKD,SAAS,KAAK,IAAM,EAAA;QAC3B,IAAIM,SAAAA,CAAUC,QAAQ,CAACR,GAAM,CAAA,EAAA;AAC3B,YAAA;AACF;QACA,IAAIK,oBAAAA,EAAsBG,SAASR,GAAM,CAAA,EAAA;AACvC,YAAA;AACF;AAEA,QAAA,OAAOS,eAAgB,CAAA;AAAET,YAAAA,GAAAA;AAAKE,YAAAA,IAAAA,EAAMA,KAAKD;AAAU,SAAA,CAAA;AACrD;;AAGA,IAAA,IAAIS,6BAA6BN,MAAQH,EAAAA,SAAAA,CAAAA,IAAcU,aAAcH,CAAAA,QAAQ,CAACR,GAAM,CAAA,EAAA;AAClF,QAAA;AACF;;IAGA,IACEY,iBAAAA,CAAkBT,WAClBU,sBAAuBT,CAAAA,MAAAA,EAAQH,cAC/Ba,iBAAkBN,CAAAA,QAAQ,CAACR,GAC3B,CAAA,EAAA;AACA,QAAA;AACF;;AAGA,IAAA,IACE,CAACe,qBAAsBX,CAAAA,MAAAA,EAAQH,SAAce,CAAAA,IAAAA,gBAAAA,CAAiBZ,MAAQH,EAAAA,SAAAA,CAAS,KAC/EgB,uBAAAA,CAAwBT,QAAQ,CAACR,GACjC,CAAA,EAAA;AACA,QAAA;AACF;;IAGA,MAAMkB,QAAAA,GACJH,sBAAsBX,MAAQH,EAAAA,SAAAA,CAAAA,IAC9Be,iBAAiBZ,MAAQH,EAAAA,SAAAA,CAAAA,IACzBkB,qBAAqBf,MAAQH,EAAAA,SAAAA,CAAAA;AAC/B,IAAA,IAAIiB,QAAYX,IAAAA,SAAAA,CAAUC,QAAQ,CAACR,GAAM,CAAA,EAAA;AACvC,QAAA;AACF;;IAGAS,eAAgB,CAAA;AAAET,QAAAA,GAAAA;AAAKE,QAAAA,IAAAA,EAAMA,KAAKD;AAAU,KAAA,CAAA;AAC9C;;;;"}

package/dist/zod-schema.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Re-export of the Zod v4 schema builder from the same version Strapi uses
+ * internally. Use this for building schemas passed to content API param
+ * registration (addQueryParams / addInputParams) so your code stays compatible
+ * across Strapi minor/patch updates.
+ *
+ * @example
+ * import { z } from '@strapi/utils';
+ * strapi.contentAPI.addQueryParams({
+ *   search: {
+ *     schema: z.string().max(200).optional(),
+ *     matchRoute: (route) => route.path.includes('articles'),
+ *   },
+ * });
+ */
+export { z } from 'zod/v4';
+//# sourceMappingURL=zod-schema.d.ts.map

package/dist/zod-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-schema.d.ts","sourceRoot":"","sources":["../src/zod-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/utils",
-  "version": "5.36.0",
+  "version": "5.37.0",
   "description": "Shared utilities for the Strapi packages",
   "keywords": [
     "strapi",
@@ -50,10 +50,10 @@
     "date-fns": "2.30.0",
     "execa": "5.1.1",
     "http-errors": "2.0.0",
-    "lodash": "4.17.21",
+    "lodash": "4.17.23",
     "node-machine-id": "1.1.12",
     "p-map": "4.0.0",
-    "preferred-pm": "3.1.2",
+    "preferred-pm": "3.1.3",
     "yup": "0.32.9",
     "zod": "3.25.67"
   },
@@ -61,10 +61,10 @@
     "@types/http-errors": "2.0.4",
     "@types/koa": "2.13.4",
     "@types/node": "24.10.0",
-    "eslint-config-custom": "5.36.0",
+    "eslint-config-custom": "5.37.0",
     "koa": "2.16.3",
     "koa-body": "6.0.1",
-    "tsconfig": "5.36.0"
+    "tsconfig": "5.37.0"
   },
   "engines": {
     "node": ">=20.0.0 <=24.x.x",