emdash 0.40.0 → 0.40.1

package/dist/astro/routes/api/mcp.mjs

@@ -6,7 +6,7 @@ import { i as encodeBase64, t as decodeBase64 } from "../../../base64-DvnNgP7e.m
 import "../../../secrets-CIi0nFiR.mjs";
 import "../../../object-cache-CqWNY5uP.mjs";
 import { i as InvalidCursorError, o as decodeCursor } from "../../../types-BkUg2yHx.mjs";
-import "../../../media-Qp5S3eH3.mjs";
+import "../../../media-CPXTbb1R.mjs";
 import "../../../audit-RfCugiSB.mjs";
 import "../../../request-cache-DzLYKm_x.mjs";
 import "../../../byline-registry-gnKscbQX.mjs";
@@ -29,7 +29,7 @@ import "../../../collection-deletion-processor-Br6rxs3u.mjs";
 import "../../../settings-DYidIB26.mjs";
 import "../../../site-settings-DOgRUoFX.mjs";
 import "../../../errors-BF0_LFhW.mjs";
-import "../../../settings-CgjRWGW9.mjs";
+import "../../../settings-B4vDl1fK.mjs";
 import { t as apiError } from "../../../error-CfvOHP0M.mjs";
 import "../../../redirects-Cv9apQKj.mjs";
 import { Ct as updateCollectionBody, I as createTaxonomyDefBody, St as updateBlockTypeBody, Yt as bylineCreateBody, Z as updateTaxonomyDefBody, dt as createBlockTypeBody, ft as createCollectionBody, rn as contentBylineInputSchema, tn as bylineUpdateBody, wt as updateFieldBody, zt as contentSeoInput } from "../../../entry-lock-BJYdBfXb.mjs";
@@ -51,7 +51,7 @@ import "../../../receipt-B4wJj5Jq.mjs";
 import { S as TRANSFER_SCOPES, n as TransferApprovalRepository } from "../../../approvals-CqMfNxak.mjs";
 import { a as siteImportDecisionsInputSchema, t as isPlanExecutable } from "../../../plan-xjcWrAah.mjs";
 import { i as TransferOperationRepository } from "../../../stage-DgrBz_du.mjs";
-import { C as requestTransferApproval, E as analysisTargetContext, S as handleTransferCapabilities, T as loadImportPlan, _ as handleImportGet, c as handleExportGet, d as handleImportAdvance, f as handleImportAnalyze, h as handleImportExecute, i as handleExportAdvance, o as handleExportCreate, t as exportParamsDigest, w as openExportPackage, x as handleImportReceipt } from "../../../transfer-BhUCrgDc.mjs";
+import { C as requestTransferApproval, E as analysisTargetContext, S as handleTransferCapabilities, T as loadImportPlan, _ as handleImportGet, c as handleExportGet, d as handleImportAdvance, f as handleImportAnalyze, h as handleImportExecute, i as handleExportAdvance, o as handleExportCreate, t as exportParamsDigest, w as openExportPackage, x as handleImportReceipt } from "../../../transfer-DgeCvHnj.mjs";
 import "../../../keys-yxLm5l35.mjs";
 import { z } from "zod";
 import { Permissions, Role, canActOnOwn, hasPermission } from "@emdash-cms/auth";
@@ -1796,44 +1796,25 @@ function createMcpServer(pluginTools = [], request) {
 		}));
 	});
 	server.registerTool("media_create", {
-		title: "Register Uploaded Media",
-		description: "Register a media file that has already been uploaded to storage. The caller is responsible for placing the file at `storageKey` (typically using a signed upload URL obtained from the admin UI or a separate API). This tool persists the metadata record so the file is discoverable via media_list / media_get and can be referenced by content. To upload the file itself, use media_upload (base64 data or a public URL) instead.",
-		inputSchema: z.object({
-			filename: z.string().describe("Original filename (e.g. 'logo.png')"),
-			mimeType: z.string().describe("MIME type (e.g. 'image/png')"),
-			storageKey: z.string().describe("Storage path/key the file was uploaded to"),
-			size: z.number().int().nonnegative().optional().describe("File size in bytes"),
-			width: z.number().int().positive().optional().describe("Image width in pixels"),
-			height: z.number().int().positive().optional().describe("Image height in pixels"),
-			contentHash: z.string().optional().describe("Hash of the file contents (for dedupe)"),
-			blurhash: z.string().optional().describe("Blurhash for image placeholders"),
-			dominantColor: z.string().optional().describe("Hex color string for the image's dominant color")
-		})
+		title: "Confirm Signed Media Upload",
+		description: "Confirm a file after uploading it with a signed URL obtained from POST /_emdash/api/media/upload-url. `storageKey` must be the key returned for the same user. Confirmation checks that the stored file exists and matches the size fixed when the URL was issued, then makes it available through media_list / media_get. To upload through MCP, use media_upload instead.",
+		inputSchema: z.object({ storageKey: z.string().describe("Storage key returned by the signed upload URL request") })
 	}, async (args, extra) => {
 		requireScope(extra, "media:write");
 		requireRole(extra, Role.AUTHOR);
 		const { emdash, userId } = getExtra(extra);
-		return unwrap(await emdash.handleMediaCreate({
-			filename: args.filename,
-			mimeType: args.mimeType,
+		return unwrap(await emdash.handleMediaRegisterUpload({
 			storageKey: args.storageKey,
-			size: args.size,
-			width: args.width,
-			height: args.height,
-			contentHash: args.contentHash,
-			blurhash: args.blurhash,
-			dominantColor: args.dominantColor,
 			authorId: userId
 		}));
 	});
 	server.registerTool("media_upload", {
 		title: "Upload Media",
-		description: "Upload a media file from base64-encoded data or an external URL and register it in the media library. Returns the media item with id, storageKey, and url — ready to reference from content fields (e.g. featured_image) via content_create / content_update. Uploads are deduplicated by content hash: re-uploading identical bytes returns the existing item with deduplicated: true. URL fetches must resolve to a public http(s) host (SSRF-guarded). Subject to the global upload MIME allowlist and the configured maximum upload size.",
+		description: "Upload a media file from base64-encoded data and register it in the media library. Returns the media item with id, storageKey, and url — ready to reference from content fields (e.g. featured_image) via content_create / content_update. Uploads are deduplicated by content hash: re-uploading identical bytes returns the existing item with deduplicated: true. Subject to the global upload MIME allowlist and the configured maximum upload size.",
 		inputSchema: z.object({
 			filename: z.string().min(1).describe("Filename including extension (e.g. 'cover.png')"),
-			base64: z.string().optional().describe("Base64-encoded file contents. Provide exactly one of base64 / url."),
-			url: z.url().optional().describe("Public http(s) URL to fetch the file from. Provide exactly one of base64 / url."),
-			contentType: z.string().regex(CONTENT_TYPE_RE, "Invalid content type").optional().describe("MIME type (e.g. 'image/png'). Required with base64; with url it defaults to the response's Content-Type header."),
+			base64: z.string().describe("Base64-encoded file contents."),
+			contentType: z.string().regex(CONTENT_TYPE_RE, "Invalid content type").describe("MIME type (e.g. 'image/png')."),
 			alt: z.string().optional().describe("Alt text for accessibility")
 		}),
 		annotations: { destructiveHint: false }
@@ -1846,7 +1827,6 @@ function createMcpServer(pluginTools = [], request) {
 			return unwrap(await emdash.handleMediaUpload({
 				filename: args.filename,
 				base64: args.base64,
-				url: args.url,
 				contentType: args.contentType,
 				alt: args.alt,
 				authorId: userId,
@@ -1922,7 +1902,7 @@ function createMcpServer(pluginTools = [], request) {
 			};
 		} else input = { scope: "all" };
 		try {
-			const { handleMediaUsageRepair } = await import("../../../media-usage-My-Vi-ex.mjs").then((n) => n.o);
+			const { handleMediaUsageRepair } = await import("../../../media-usage-De-zeR9E.mjs").then((n) => n.o);
 			return unwrap(await handleMediaUsageRepair(ec.db, input));
 		} catch (error) {
 			return respondHandlerError(error, "MEDIA_USAGE_REPAIR_ERROR");
@@ -2407,7 +2387,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.EDITOR);
 		const ec = getEmDash(extra);
 		try {
-			const { handleSettingsGet } = await import("../../../settings-2xNYr90o.mjs").then((n) => n.r);
+			const { handleSettingsGet } = await import("../../../settings-Dyj6v8C4.mjs").then((n) => n.r);
 			return unwrap(await handleSettingsGet(ec.db, ec.storage));
 		} catch (error) {
 			return respondHandlerError(error, "SETTINGS_READ_ERROR");
@@ -2433,7 +2413,7 @@ function createMcpServer(pluginTools = [], request) {
 		requireRole(extra, Role.ADMIN);
 		const ec = getEmDash(extra);
 		try {
-			const { handleSettingsUpdate } = await import("../../../settings-2xNYr90o.mjs").then((n) => n.r);
+			const { handleSettingsUpdate } = await import("../../../settings-Dyj6v8C4.mjs").then((n) => n.r);
 			return unwrapAndInvalidate(extra, await handleSettingsUpdate(ec.db, ec.storage, args), [siteSettingsTag()]);
 		} catch (error) {
 			return respondHandlerError(error, "SETTINGS_UPDATE_ERROR");