@umbraco-cms/mcp-dev 17.4.1 → 17.4.2

package/dist/{chunk-H5ZIS43M.cjs → chunk-Q4LCXM42.cjs}

@@ -18711,7 +18711,7 @@ async function validateFilePath(filePath, allowedPaths) {
     try {
       const realAllowedPath = fs.realpathSync(allowedPath);
       return normalizedPath.startsWith(realAllowedPath);
-    } catch (e) {
+    } catch (e2) {
       return false;
     }
   });
@@ -18729,7 +18729,7 @@ async function validateFilePath(filePath, allowedPaths) {
         try {
           const realAllowedPath = fs.realpathSync(allowedPath);
           return realPath.startsWith(realAllowedPath);
-        } catch (e2) {
+        } catch (e3) {
           return false;
         }
       });
@@ -18756,6 +18756,7 @@ async function validateFilePath(filePath, allowedPaths) {
 
 
 
+var BASE64_MAX_BYTES = 10 * 1024;
 function getExtensionFromMimeType(mimeType) {
   if (!mimeType) return void 0;
   const baseMimeType = mimeType.split(";")[0].trim();
@@ -18877,6 +18878,13 @@ async function createFilePayload(sourceType, filePath, fileUrl, fileAsBase64, fi
       if (!fileAsBase64) {
         throw new Error("fileAsBase64 is required when sourceType is 'base64'");
       }
+      const padding = fileAsBase64.endsWith("==") ? 2 : fileAsBase64.endsWith("=") ? 1 : 0;
+      const estimatedBytes = Math.floor(fileAsBase64.length * 3 / 4) - padding;
+      if (estimatedBytes > BASE64_MAX_BYTES) {
+        throw new Error(
+          `base64 upload rejected: decoded payload is ~${estimatedBytes.toLocaleString()} bytes (limit is ${BASE64_MAX_BYTES.toLocaleString()} bytes). Use sourceType="url" with a public direct-download URL, or sourceType="file" if the file is attached to the chat.`
+        );
+      }
       const buffer = Buffer.from(fileAsBase64, "base64");
       let filename = fileName;
       if (!fileName.includes(".")) {
@@ -18958,6 +18966,174 @@ function buildSourceTypeSection(allowFilePath, otherSources) {
   return sources.map((s, i) => `  ${i + 1}. ${s}`).join("\n");
 }
 
+// src/umb-management-api/tools/media/post/helpers/streaming-upload.ts
+
+
+var _mcphosted = require('@umbraco-cms/mcp-hosted');
+
+
+
+
+
+
+var authContext = null;
+function isStreamingAuthContextConfigured() {
+  return authContext !== null;
+}
+async function resolveAuth() {
+  if (!authContext) {
+    throw new Error(
+      "Streaming auth context not configured. setStreamingAuthContext() must be called in worker init()."
+    );
+  }
+  const entry = await _mcphosted.getStoredUmbracoToken.call(void 0, authContext.env.OAUTH_KV, authContext.tokenKey);
+  if (!_optionalChain([entry, 'optionalAccess', _48 => _48.tokens, 'optionalAccess', _49 => _49.access_token])) {
+    throw new Error("No Umbraco access token in KV. Reconnect the MCP connector.");
+  }
+  const baseUrl = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([entry, 'access', _50 => _50.site, 'optionalAccess', _51 => _51.serverUrl]), () => ( _optionalChain([entry, 'access', _52 => _52.site, 'optionalAccess', _53 => _53.baseUrl]))), () => ( authContext.env.UMBRACO_SERVER_URL)), () => ( authContext.env.UMBRACO_BASE_URL));
+  if (!baseUrl) {
+    throw new Error("No Umbraco base URL resolvable from site or env.");
+  }
+  return { accessToken: entry.tokens.access_token, baseUrl: _mcpserversdk.normalizeBaseUrl.call(void 0, baseUrl) };
+}
+function ensureExtension(name, contentType, urlPath) {
+  if (name.includes(".")) return name;
+  const fromUrl = _optionalChain([urlPath, 'access', _54 => _54.match, 'call', _55 => _55(/\.([a-z0-9]{1,8})$/i), 'optionalAccess', _56 => _56[0]]);
+  if (fromUrl) return `${name}${fromUrl}`;
+  if (contentType) {
+    const subtype = contentType.split(";")[0].split("/")[1];
+    if (subtype && /^[a-z0-9]{1,8}$/i.test(subtype)) {
+      return `${name}.${subtype === "jpeg" ? "jpg" : subtype}`;
+    }
+  }
+  return `${name}.bin`;
+}
+async function streamingUploadFromUrl(params) {
+  const client = UmbracoManagementClient3.getClient();
+  const validatedMediaTypeName = validateMediaTypeForSvg(
+    void 0,
+    params.sourceUrl,
+    params.name,
+    params.mediaTypeName
+  );
+  const [mediaTypeId, auth] = await Promise.all([
+    fetchMediaTypeId(client, validatedMediaTypeName),
+    (async () => {
+      await client.getTemporaryFileConfiguration().catch(() => void 0);
+      return resolveAuth();
+    })()
+  ]);
+  const { accessToken, baseUrl } = auth;
+  const ctl = new AbortController();
+  const overallTimeout = setTimeout(() => ctl.abort(), 6e4);
+  try {
+    const sourceResp = await fetch(params.sourceUrl, { signal: ctl.signal });
+    if (!sourceResp.ok || !sourceResp.body) {
+      throw new Error(
+        `Failed to fetch source URL: HTTP ${sourceResp.status} ${sourceResp.statusText}`
+      );
+    }
+    const sourceContentType = _nullishCoalesce(sourceResp.headers.get("content-type"), () => ( "application/octet-stream"));
+    const sourceUrl = new URL(params.sourceUrl);
+    const filename = ensureExtension(params.name, sourceContentType, sourceUrl.pathname);
+    const temporaryFileId = crypto.randomUUID();
+    const boundary = `----mcp-stream-${crypto.randomUUID()}`;
+    const encoder = new TextEncoder();
+    const prefix = encoder.encode(
+      `--${boundary}\r
+Content-Disposition: form-data; name="Id"\r
+\r
+${temporaryFileId}\r
+--${boundary}\r
+Content-Disposition: form-data; name="File"; filename="${filename}"\r
+Content-Type: ${sourceContentType}\r
+\r
+`
+    );
+    const suffix = encoder.encode(`\r
+--${boundary}--\r
+`);
+    const sourceBody = sourceResp.body;
+    const multipartBody = new ReadableStream({
+      async start(controller) {
+        const reader = sourceBody.getReader();
+        try {
+          controller.enqueue(prefix);
+          while (true) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            if (value) controller.enqueue(value);
+          }
+          controller.enqueue(suffix);
+          controller.close();
+        } catch (e) {
+          controller.error(e);
+        } finally {
+          reader.releaseLock();
+        }
+      },
+      cancel(reason) {
+        sourceBody.cancel(reason).catch(() => void 0);
+      }
+    });
+    const tempResp = await fetch(`${baseUrl}/umbraco/management/api/v1/temporary-file`, {
+      method: "POST",
+      body: multipartBody,
+      // @ts-expect-error — `duplex` is required by Workers/undici for streaming bodies
+      duplex: "half",
+      signal: ctl.signal,
+      headers: {
+        "Content-Type": `multipart/form-data; boundary=${boundary}`,
+        Authorization: `Bearer ${accessToken}`,
+        Accept: "application/json"
+      }
+    });
+    if (!tempResp.ok) {
+      const errBody = await tempResp.text().catch(() => "");
+      throw new Error(
+        `Umbraco temporary-file POST failed: HTTP ${tempResp.status} ${tempResp.statusText} - ${errBody}`
+      );
+    }
+    const valueStructure = buildValueStructure(validatedMediaTypeName, temporaryFileId);
+    const response = await client.postMedia(
+      {
+        mediaType: { id: mediaTypeId },
+        variants: [{ culture: null, segment: null, name: params.name }],
+        values: [valueStructure],
+        parent: params.parentId ? { id: params.parentId } : null
+      },
+      _mcpserversdk.CAPTURE_RAW_HTTP_RESPONSE
+    );
+    if (response.status < 200 || response.status >= 300) {
+      throw new Error(`postMedia failed with status ${response.status}`);
+    }
+    const locationHeader = _nullishCoalesce(_optionalChain([response, 'access', _57 => _57.headers, 'optionalAccess', _58 => _58.location]), () => ( _optionalChain([response, 'access', _59 => _59.headers, 'optionalAccess', _60 => _60.Location])));
+    const idMatch = _optionalChain([locationHeader, 'optionalAccess', _61 => _61.match, 'call', _62 => _62(/\/([a-f0-9-]{36})$/i)]);
+    if (!idMatch) {
+      throw new Error(
+        `Could not extract media id from Location header: ${_nullishCoalesce(locationHeader, () => ( "(missing)"))}`
+      );
+    }
+    return { name: params.name, id: idMatch[1] };
+  } finally {
+    clearTimeout(overallTimeout);
+  }
+}
+async function streamingUploadToToolResult(params) {
+  try {
+    const { name, id } = await streamingUploadFromUrl(params);
+    return _mcpserversdk.createToolResult.call(void 0, {
+      message: `Media "${name}" created successfully`,
+      name,
+      id
+    });
+  } catch (error) {
+    return _mcpserversdk.createToolResultError.call(void 0, {
+      detail: `Error creating media: ${error.message}`
+    });
+  }
+}
+
 // src/umb-management-api/tools/media/post/create-media.ts
 
 
@@ -18970,31 +19146,48 @@ function buildSourceTypeSection(allowFilePath, otherSources) {
 
 
 
+var fileObjectSchema = _zod.z.object({
+  download_url: _zod.z.string().describe("Temporary URL the host provides to fetch the file bytes"),
+  file_id: _zod.z.string().describe("Persistent file identifier from the host"),
+  mime_type: _zod.z.string().optional().describe("MIME type if the host knows it"),
+  file_name: _zod.z.string().optional().describe("Original file name if the host knows it")
+});
 var createMediaOutputSchema = _zod.z.object({
   message: _zod.z.string(),
   name: _zod.z.string(),
   id: _zod.z.string().guid()
 });
 function createCreateMediaTool(options) {
-  const sourceTypeValues = options.allowFilePath ? ["filePath", "url", "base64"] : ["url", "base64"];
-  const sourceTypeDescription = options.allowFilePath ? "Media source type: 'filePath' for local files (most efficient), 'url' for web files, 'base64' for embedded data (small files only)" : "Media source type: 'url' for web files, 'base64' for embedded data (small files only)";
+  const sourceTypeValues = options.allowFilePath ? ["filePath", "url", "file", "base64"] : ["url", "file", "base64"];
+  const base64Kib = BASE64_MAX_BYTES / 1024;
+  const filePathPrefix = options.allowFilePath ? "'filePath' for local files (Node stdio only), " : "";
+  const sourceTypeDescription = `Media source type: ${filePathPrefix}'url' for public direct-download URLs (streamed; preferred for everything not already attached to the chat), 'file' for host-injected attachments \u2014 the connector populates the 'file' object automatically when the user attached a file or you generated one in this chat, 'base64' for TINY inline payloads only \u2014 the server rejects base64 above ${base64Kib} KiB decoded to stop LLM-truncated or thumbnail-preview base64 from persisting as corrupt files`;
   const schema = _zod.z.object({
     sourceType: _zod.z.enum(sourceTypeValues).describe(sourceTypeDescription),
     name: _zod.z.string().describe("The name of the media item"),
     mediaTypeName: _zod.z.string().describe(`Media type: '${_mcpserversdk.MEDIA_TYPE_IMAGE}', '${_mcpserversdk.MEDIA_TYPE_ARTICLE}', '${_mcpserversdk.MEDIA_TYPE_AUDIO}', '${_mcpserversdk.MEDIA_TYPE_VIDEO}', '${_mcpserversdk.MEDIA_TYPE_VECTOR_GRAPHICS}', '${_mcpserversdk.MEDIA_TYPE_FILE}', or custom media type name`),
     filePath: _zod.z.string().optional().describe("Absolute path to the file (required if sourceType is 'filePath')"),
-    fileUrl: _zod.z.string().url().optional().describe("[raw] URL to fetch the file from (required if sourceType is 'url')"),
-    fileAsBase64: _zod.z.string().optional().describe("Base64 encoded file data (required if sourceType is 'base64')"),
+    fileUrl: _zod.z.string().url().optional().describe("[raw] Public, direct-download URL to fetch the file from (required if sourceType is 'url'). Must be reachable without authentication. Share/viewer links (e.g. drive.google.com/file/d/<id>/view, Dropbox ?dl=0, OneDrive view URLs) must be converted to their direct-download equivalent first \u2014 Google Drive: drive.google.com/uc?export=download&id=<id>. Uploads are streamed, so multi-MB files round-trip without timing out."),
+    file: fileObjectSchema.optional().describe(
+      "[raw] Host-injected file object (required if sourceType is 'file'). ChatGPT's connector populates this automatically when the user attached a file or you generated one in this chat \u2014 leave it for the host to fill, do not synthesise it yourself."
+    ),
+    fileAsBase64: _zod.z.string().optional().describe(`Base64-encoded file data (required if sourceType is 'base64'). HARD LIMIT: decoded payload must be \u2264${base64Kib} KiB; the server rejects anything larger because LLMs reliably truncate big base64 strings or substitute thumbnail previews, both producing corrupt files. Use sourceType='url' or 'file' for everything bigger.`),
     parentId: _zod.z.string().uuid().optional().describe("Parent folder ID (defaults to root)")
   });
   const filePathSection = buildSourceTypeSection(options.allowFilePath, [
-    "url - Fetch from web URL",
-    "base64 - Only for small files (<10KB) due to token usage"
+    `url - Stream from any public direct-download URL (Drive / Dropbox / etc.). Use this for anything above ${base64Kib} KiB that isn't already attached to the chat.`,
+    `file - Stream a host-attached file. The connector injects { download_url, file_id, mime_type, file_name } on the 'file' field automatically when the user attached a file or you generated one in this chat \u2014 prefer this over url for chat-bound files.`,
+    `base64 - ONLY for tiny inline payloads; server hard-rejects decoded base64 over ${base64Kib} KiB to prevent LLM-truncated corrupt files.`
   ]);
   const tool = {
     name: "create-media",
     description: `Upload any media file to Umbraco (images, documents, audio, video, SVG, or custom types).
 
+  Pick the sourceType that matches where the file lives:
+  - If the file is attached to this chat or you just generated it \u2192 sourceType="file" (the host fills in the file reference automatically).
+  - If you have a public direct-download URL \u2192 sourceType="url".
+  - For tiny inline payloads (\u2264${base64Kib} KiB decoded) \u2192 sourceType="base64".
+
   Media Types:
   - ${_mcpserversdk.MEDIA_TYPE_IMAGE}: jpg, png, gif, webp, etc. (supports cropping)
   - ${_mcpserversdk.MEDIA_TYPE_ARTICLE}: pdf, docx, doc (documents)
@@ -19015,16 +19208,43 @@ ${filePathSection}
     inputSchema: schema.shape,
     outputSchema: createMediaOutputSchema.shape,
     slices: ["create"],
+    _meta: { "openai/fileParams": ["file"] },
     handler: (async (model) => {
+      let effectiveSourceType;
+      let effectiveFileUrl = model.fileUrl;
+      if (model.sourceType === "file") {
+        if (!_optionalChain([model, 'access', _63 => _63.file, 'optionalAccess', _64 => _64.download_url])) {
+          return _mcpserversdk.createToolResultError.call(void 0, {
+            detail: "Error creating media: sourceType is 'file' but no file object was provided. ChatGPT's connector should inject this automatically when a file is attached \u2014 if it didn't, the user has nothing attached or your client doesn't support openai/fileParams."
+          });
+        }
+        effectiveSourceType = "url";
+        effectiveFileUrl = model.file.download_url;
+      } else {
+        effectiveSourceType = model.sourceType;
+      }
+      if (effectiveSourceType === "url" && isStreamingAuthContextConfigured()) {
+        if (!effectiveFileUrl) {
+          return _mcpserversdk.createToolResultError.call(void 0, {
+            detail: "Error creating media: fileUrl is required when sourceType is 'url'"
+          });
+        }
+        return streamingUploadToToolResult({
+          sourceUrl: effectiveFileUrl,
+          name: model.name,
+          mediaTypeName: model.mediaTypeName,
+          parentId: model.parentId
+        });
+      }
       try {
         const client = UmbracoManagementClient3.getClient();
         const temporaryFileId = _uuid.v4.call(void 0, );
         const { name: actualName, id } = await uploadMediaFile(client, {
-          sourceType: model.sourceType,
+          sourceType: effectiveSourceType,
           name: model.name,
           mediaTypeName: model.mediaTypeName,
           filePath: model.filePath,
-          fileUrl: model.fileUrl,
+          fileUrl: effectiveFileUrl,
           fileAsBase64: model.fileAsBase64,
           parentId: model.parentId,
           temporaryFileId
@@ -19068,73 +19288,125 @@ var createMediaMultipleOutputSchema = _zod.z.object({
     error: _zod.z.string().optional()
   }))
 });
+var fileObjectSchema2 = _zod.z.object({
+  download_url: _zod.z.string().describe("Temporary URL the host provides to fetch the file bytes"),
+  file_id: _zod.z.string().describe("Persistent file identifier from the host"),
+  mime_type: _zod.z.string().optional().describe("MIME type if the host knows it"),
+  file_name: _zod.z.string().optional().describe("Original file name if the host knows it")
+});
+var UPLOAD_CONCURRENCY = 4;
+var MAX_BATCH_SIZE = 20;
+async function mapWithConcurrency(items, concurrency, producer) {
+  const results = new Array(items.length);
+  let nextIndex = 0;
+  async function worker() {
+    while (true) {
+      const current = nextIndex++;
+      if (current >= items.length) return;
+      results[current] = await producer(items[current], current);
+    }
+  }
+  const workers = Array.from({ length: Math.min(concurrency, items.length) }, () => worker());
+  await Promise.all(workers);
+  return results;
+}
 function createCreateMediaMultipleTool(options) {
-  const sourceTypeValues = options.allowFilePath ? ["filePath", "url"] : ["url"];
-  const sourceTypeDescription = options.allowFilePath ? "Media source type: 'filePath' for local files (most efficient), 'url' for web files. Base64 not supported for batch uploads due to token usage." : "Media source type: 'url' for web files. Base64 not supported for batch uploads due to token usage.";
+  const sourceTypeValues = options.allowFilePath ? ["filePath", "url", "file"] : ["url", "file"];
+  const filePathPrefix = options.allowFilePath ? "'filePath' for local files (most efficient, Node stdio only), " : "";
+  const sourceTypeDescription = `Media source type: ${filePathPrefix}'url' for public direct-download URLs (streamed), 'file' for host-injected attachments \u2014 the connector populates each entry's 'file' object automatically when the user attached or generated files in this chat. Base64 is not supported for batch uploads due to token usage \u2014 use single-file create-media for tiny inline payloads.`;
   const schema = _zod.z.object({
     sourceType: _zod.z.enum(sourceTypeValues).describe(sourceTypeDescription),
     files: _zod.z.array(_zod.z.object({
       name: _zod.z.string().describe("The name of the media item"),
       filePath: _zod.z.string().optional().describe("Absolute path to the file (required if sourceType is 'filePath')"),
-      fileUrl: _zod.z.string().url().optional().describe("URL to fetch the file from (required if sourceType is 'url')"),
+      fileUrl: _zod.z.string().url().optional().describe("[raw] Public direct-download URL (required if sourceType is 'url'). Drive / Dropbox share links must be converted to their direct-download equivalent first \u2014 see the create-media tool description for the format. Streamed, so multi-MB files round-trip without timing out."),
+      file: fileObjectSchema2.optional().describe("[raw] Host-injected file reference (required if sourceType is 'file'). ChatGPT's connector populates this per entry automatically when files are attached."),
       mediaTypeName: _zod.z.string().optional().describe(`Optional override: '${_mcpserversdk.MEDIA_TYPE_IMAGE}', '${_mcpserversdk.MEDIA_TYPE_ARTICLE}', '${_mcpserversdk.MEDIA_TYPE_AUDIO}', '${_mcpserversdk.MEDIA_TYPE_VIDEO}', '${_mcpserversdk.MEDIA_TYPE_VECTOR_GRAPHICS}', '${_mcpserversdk.MEDIA_TYPE_FILE}', or custom media type name. If not specified, defaults to '${_mcpserversdk.MEDIA_TYPE_FILE}'`)
-    })).describe("Array of files to upload (maximum 20 files per batch)"),
+    })).max(MAX_BATCH_SIZE).describe(`Array of files to upload (maximum ${MAX_BATCH_SIZE} files per batch)`),
     parentId: _zod.z.string().uuid().optional().describe("Parent folder ID (defaults to root)")
   });
   const filePathSection = buildSourceTypeSection(options.allowFilePath, [
-    "url - Fetch from web URL"
+    "url - Stream from any public direct-download URL (Drive / Dropbox / etc.).",
+    "file - Stream a host-attached file. The connector injects { download_url, file_id, ... } per entry automatically when the user attached or generated files in this chat \u2014 prefer this over 'url' for chat-bound files."
   ]);
   const tool = {
     name: "create-media-multiple",
-    description: `Batch upload multiple media files to Umbraco (maximum 20 files per batch).
+    description: `Batch upload multiple media files to Umbraco (maximum ${MAX_BATCH_SIZE} files per batch).
 
-  Supports any file type: images, documents, audio, video, SVG, or custom types.
+  Use this \u2014 not several separate create-media calls \u2014 when the user attached or generated multiple files in this chat (sourceType="file"), or has a list of public URLs to upload (sourceType="url"). ChatGPT's connector populates each entry's 'file' field automatically.
 
   Source Types:
 ${filePathSection}
 
   Note: base64 is not supported for batch uploads due to token usage.
 
-  The tool processes files sequentially and returns detailed results for each file.
-  If some files fail, others will continue processing (continue-on-error strategy).`,
+  The tool processes up to ${UPLOAD_CONCURRENCY} uploads in parallel and returns detailed results for each file in input order. If some files fail, others continue processing (continue-on-error strategy).`,
     inputSchema: schema.shape,
     outputSchema: createMediaMultipleOutputSchema.shape,
     slices: ["create"],
+    _meta: { "openai/fileParams": ["files"] },
     handler: (async (model) => {
-      if (model.files.length > 20) {
+      if (model.files.length > MAX_BATCH_SIZE) {
         return _mcpserversdk.createToolResultError.call(void 0, {
-          detail: `Batch upload limited to 20 files per call. You provided ${model.files.length} files. Please split into multiple batches.`
+          detail: `Batch upload limited to ${MAX_BATCH_SIZE} files per call. You provided ${model.files.length} files. Please split into multiple batches.`
         });
       }
-      const results = [];
       const client = UmbracoManagementClient3.getClient();
-      for (const file of model.files) {
-        try {
-          const temporaryFileId = _uuid.v4.call(void 0, );
-          const defaultMediaType = file.mediaTypeName || _mcpserversdk.MEDIA_TYPE_FILE;
-          const { name: actualName, id: mediaId } = await uploadMediaFile(client, {
-            sourceType: model.sourceType,
-            name: file.name,
-            mediaTypeName: defaultMediaType,
-            filePath: file.filePath,
-            fileUrl: file.fileUrl,
-            fileAsBase64: void 0,
-            parentId: model.parentId,
-            temporaryFileId
-          });
-          results.push({
-            success: true,
-            name: actualName,
-            id: mediaId
-          });
-        } catch (error) {
-          results.push({
-            success: false,
-            name: file.name,
-            error: error.message
-          });
+      const streamingAvailable = isStreamingAuthContextConfigured();
+      const results = await mapWithConcurrency(
+        model.files,
+        UPLOAD_CONCURRENCY,
+        async (file) => {
+          try {
+            const mediaTypeName = file.mediaTypeName || _mcpserversdk.MEDIA_TYPE_FILE;
+            let effectiveSourceType;
+            let effectiveFileUrl = file.fileUrl;
+            if (model.sourceType === "file") {
+              if (!_optionalChain([file, 'access', _65 => _65.file, 'optionalAccess', _66 => _66.download_url])) {
+                return {
+                  success: false,
+                  name: file.name,
+                  error: "sourceType is 'file' but no file object was provided for this entry. The host connector should inject this automatically when a file is attached."
+                };
+              }
+              effectiveSourceType = "url";
+              effectiveFileUrl = file.file.download_url;
+            } else {
+              effectiveSourceType = model.sourceType;
+            }
+            if (effectiveSourceType === "url" && streamingAvailable) {
+              if (!effectiveFileUrl) {
+                return {
+                  success: false,
+                  name: file.name,
+                  error: "fileUrl is required when sourceType is 'url'."
+                };
+              }
+              const { name: actualName2, id: mediaId2 } = await streamingUploadFromUrl({
+                sourceUrl: effectiveFileUrl,
+                name: file.name,
+                mediaTypeName,
+                parentId: model.parentId
+              });
+              return { success: true, name: actualName2, id: mediaId2 };
+            }
+            const temporaryFileId = _uuid.v4.call(void 0, );
+            const { name: actualName, id: mediaId } = await uploadMediaFile(client, {
+              sourceType: effectiveSourceType,
+              name: file.name,
+              mediaTypeName,
+              filePath: file.filePath,
+              fileUrl: effectiveFileUrl,
+              fileAsBase64: void 0,
+              parentId: model.parentId,
+              temporaryFileId
+            });
+            return { success: true, name: actualName, id: mediaId };
+          } catch (error) {
+            return { success: false, name: file.name, error: error.message };
+          }
         }
-      }
+      );
       const successCount = results.filter((r) => r.success).length;
       const failureCount = results.filter((r) => !r.success).length;
       return _mcpserversdk.createToolResult.call(void 0, {
@@ -19189,7 +19461,7 @@ var CreateMediaFolderTool = {
       if (response.status < 200 || response.status >= 300) {
         throw new Error(`Request failed with status code ${response.status}`);
       }
-      const locationHeader = _optionalChain([response, 'access', _48 => _48.headers, 'optionalAccess', _49 => _49.location]) || _optionalChain([response, 'access', _50 => _50.headers, 'optionalAccess', _51 => _51.Location]);
+      const locationHeader = _optionalChain([response, 'access', _67 => _67.headers, 'optionalAccess', _68 => _68.location]) || _optionalChain([response, 'access', _69 => _69.headers, 'optionalAccess', _70 => _70.Location]);
       if (!locationHeader) {
         throw new Error("No Location header in response - cannot determine created folder ID");
       }
@@ -20426,7 +20698,7 @@ var CreateMediaTypeFolderTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _52 => _52.headers, 'optionalAccess', _53 => _53["location"]]) || _optionalChain([response, 'access', _54 => _54.headers, 'optionalAccess', _55 => _55["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _71 => _71.headers, 'optionalAccess', _72 => _72["location"]]) || _optionalChain([response, 'access', _73 => _73.headers, 'optionalAccess', _74 => _74["Location"]]);
       let createdId = model.id || "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/([0-9a-f-]{36})$/i);
@@ -20560,7 +20832,7 @@ var CreateMediaTypeTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _56 => _56.headers, 'optionalAccess', _57 => _57["location"]]) || _optionalChain([response, 'access', _58 => _58.headers, 'optionalAccess', _59 => _59["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _75 => _75.headers, 'optionalAccess', _76 => _76["location"]]) || _optionalChain([response, 'access', _77 => _77.headers, 'optionalAccess', _78 => _78["Location"]]);
       let createdId = model.id || "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/([0-9a-f-]{36})$/i);
@@ -20611,7 +20883,7 @@ var CopyMediaTypeTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _60 => _60.headers, 'optionalAccess', _61 => _61["location"]]) || _optionalChain([response, 'access', _62 => _62.headers, 'optionalAccess', _63 => _63["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _79 => _79.headers, 'optionalAccess', _80 => _80["location"]]) || _optionalChain([response, 'access', _81 => _81.headers, 'optionalAccess', _82 => _82["Location"]]);
       let createdId = "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/([0-9a-f-]{36})$/i);
@@ -20821,7 +21093,7 @@ var CreateMemberTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _64 => _64.headers, 'optionalAccess', _65 => _65["location"]]) || _optionalChain([response, 'access', _66 => _66.headers, 'optionalAccess', _67 => _67["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _83 => _83.headers, 'optionalAccess', _84 => _84["location"]]) || _optionalChain([response, 'access', _85 => _85.headers, 'optionalAccess', _86 => _86["Location"]]);
       let createdId = model.id || "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/([0-9a-f-]{36})$/i);
@@ -21372,7 +21644,7 @@ var CreateMemberTypeTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _68 => _68.headers, 'optionalAccess', _69 => _69["location"]]) || _optionalChain([response, 'access', _70 => _70.headers, 'optionalAccess', _71 => _71["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _87 => _87.headers, 'optionalAccess', _88 => _88["location"]]) || _optionalChain([response, 'access', _89 => _89.headers, 'optionalAccess', _90 => _90["Location"]]);
       let createdId = model.id || "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/([0-9a-f-]{36})$/i);
@@ -21542,7 +21814,7 @@ var CopyMemberTypeTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _72 => _72.headers, 'optionalAccess', _73 => _73["location"]]) || _optionalChain([response, 'access', _74 => _74.headers, 'optionalAccess', _75 => _75["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _91 => _91.headers, 'optionalAccess', _92 => _92["location"]]) || _optionalChain([response, 'access', _93 => _93.headers, 'optionalAccess', _94 => _94["Location"]]);
       let createdId = "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/([0-9a-f-]{36})$/i);
@@ -21902,7 +22174,7 @@ var CreatePartialViewTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _76 => _76.headers, 'optionalAccess', _77 => _77["location"]]) || _optionalChain([response, 'access', _78 => _78.headers, 'optionalAccess', _79 => _79["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _95 => _95.headers, 'optionalAccess', _96 => _96["location"]]) || _optionalChain([response, 'access', _97 => _97.headers, 'optionalAccess', _98 => _98["Location"]]);
       let createdPath = "";
       if (locationHeader) {
         const pathMatch = locationHeader.match(/partial-view\/(.+)$/);
@@ -21949,7 +22221,7 @@ var CreatePartialViewFolderTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _80 => _80.headers, 'optionalAccess', _81 => _81["location"]]) || _optionalChain([response, 'access', _82 => _82.headers, 'optionalAccess', _83 => _83["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _99 => _99.headers, 'optionalAccess', _100 => _100["location"]]) || _optionalChain([response, 'access', _101 => _101.headers, 'optionalAccess', _102 => _102["Location"]]);
       let createdPath = "";
       if (locationHeader) {
         const pathMatch = locationHeader.match(/partial-view\/folder\/(.+)$/);
@@ -22771,7 +23043,7 @@ var CreateScriptTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _84 => _84.headers, 'optionalAccess', _85 => _85["location"]]) || _optionalChain([response, 'access', _86 => _86.headers, 'optionalAccess', _87 => _87["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _103 => _103.headers, 'optionalAccess', _104 => _104["location"]]) || _optionalChain([response, 'access', _105 => _105.headers, 'optionalAccess', _106 => _106["Location"]]);
       let createdPath = "";
       if (locationHeader) {
         const pathMatch = locationHeader.match(/script\/(.+)$/);
@@ -22818,7 +23090,7 @@ var CreateScriptFolderTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _88 => _88.headers, 'optionalAccess', _89 => _89["location"]]) || _optionalChain([response, 'access', _90 => _90.headers, 'optionalAccess', _91 => _91["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _107 => _107.headers, 'optionalAccess', _108 => _108["location"]]) || _optionalChain([response, 'access', _109 => _109.headers, 'optionalAccess', _110 => _110["Location"]]);
       let createdPath = "";
       if (locationHeader) {
         const pathMatch = locationHeader.match(/script\/folder\/(.+)$/);
@@ -23415,7 +23687,7 @@ var CreateStylesheetTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _92 => _92.headers, 'optionalAccess', _93 => _93["location"]]) || _optionalChain([response, 'access', _94 => _94.headers, 'optionalAccess', _95 => _95["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _111 => _111.headers, 'optionalAccess', _112 => _112["location"]]) || _optionalChain([response, 'access', _113 => _113.headers, 'optionalAccess', _114 => _114["Location"]]);
       let createdPath = "";
       if (locationHeader) {
         const pathMatch = locationHeader.match(/stylesheet\/(.+)$/);
@@ -23462,7 +23734,7 @@ var CreateStylesheetFolderTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _96 => _96.headers, 'optionalAccess', _97 => _97["location"]]) || _optionalChain([response, 'access', _98 => _98.headers, 'optionalAccess', _99 => _99["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _115 => _115.headers, 'optionalAccess', _116 => _116["location"]]) || _optionalChain([response, 'access', _117 => _117.headers, 'optionalAccess', _118 => _118["Location"]]);
       let createdPath = "";
       if (locationHeader) {
         const pathMatch = locationHeader.match(/stylesheet\/folder\/(.+)$/);
@@ -23826,7 +24098,7 @@ var CreateTemplateTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _100 => _100.headers, 'optionalAccess', _101 => _101["location"]]) || _optionalChain([response, 'access', _102 => _102.headers, 'optionalAccess', _103 => _103["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _119 => _119.headers, 'optionalAccess', _120 => _120["location"]]) || _optionalChain([response, 'access', _121 => _121.headers, 'optionalAccess', _122 => _122["Location"]]);
       let createdId = "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/template\/([a-f0-9-]+)$/i);
@@ -24736,7 +25008,7 @@ var CreateUserDataTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _104 => _104.headers, 'optionalAccess', _105 => _105["location"]]) || _optionalChain([response, 'access', _106 => _106.headers, 'optionalAccess', _107 => _107["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _123 => _123.headers, 'optionalAccess', _124 => _124["location"]]) || _optionalChain([response, 'access', _125 => _125.headers, 'optionalAccess', _126 => _126["Location"]]);
       let createdId = "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/user-data\/([a-f0-9-]+)$/i);
@@ -24974,7 +25246,7 @@ var CreateUserGroupTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _108 => _108.headers, 'optionalAccess', _109 => _109["location"]]) || _optionalChain([response, 'access', _110 => _110.headers, 'optionalAccess', _111 => _111["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _127 => _127.headers, 'optionalAccess', _128 => _128["location"]]) || _optionalChain([response, 'access', _129 => _129.headers, 'optionalAccess', _130 => _130["Location"]]);
       let createdId = "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/user-group\/([a-f0-9-]+)$/i);
@@ -25272,7 +25544,7 @@ var CreateWebhookTool = {
       validateStatus: () => true
     });
     if (response.status === 201) {
-      const locationHeader = _optionalChain([response, 'access', _112 => _112.headers, 'optionalAccess', _113 => _113["location"]]) || _optionalChain([response, 'access', _114 => _114.headers, 'optionalAccess', _115 => _115["Location"]]);
+      const locationHeader = _optionalChain([response, 'access', _131 => _131.headers, 'optionalAccess', _132 => _132["location"]]) || _optionalChain([response, 'access', _133 => _133.headers, 'optionalAccess', _134 => _134["Location"]]);
       let createdId = "";
       if (locationHeader) {
         const idMatch = locationHeader.match(/webhook\/([a-f0-9-]+)$/i);
@@ -25508,4 +25780,4 @@ var allSliceNames = [...toolSliceNames, "other"];
 
 
 exports.__commonJS = __commonJS; exports.__toESM = __toESM; exports.UmbracoManagementClient = UmbracoManagementClient3; exports.setAllowFilePathUploads = setAllowFilePathUploads; exports.setUmbracoVersion = setUmbracoVersion; exports.availableCollections = availableCollections; exports.allModes = allModes; exports.allModeNames = allModeNames; exports.allSliceNames = allSliceNames;
-//# sourceMappingURL=chunk-H5ZIS43M.cjs.map
+//# sourceMappingURL=chunk-Q4LCXM42.cjs.map