@atlassian-dc-mcp/confluence 0.28.0 → 0.30.0

package/CHANGELOG.md

@@ -3,6 +3,28 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [0.30.0](https://github.com/b1ff/atlassian-dc-mcp/compare/v0.29.0...v0.30.0) (2026-08-30)
+
+**Note:** Version bump only for package @atlassian-dc-mcp/confluence
+
+
+
+
+
+# [0.29.0](https://github.com/b1ff/atlassian-dc-mcp/compare/v0.28.0...v0.29.0) (2026-07-26)
+
+
+### Features
+
+* add confluence_uploadAttachment tool ([b73cf9e](https://github.com/b1ff/atlassian-dc-mcp/commit/b73cf9ef1e296ca6639bf2a3f162d3f142115019))
+* **attachments:** sandbox local filesystem access behind an opt-in gateway ([5cc1776](https://github.com/b1ff/atlassian-dc-mcp/commit/5cc177632d1441e1a644cb9db7396fbb9b754fe6))
+* **confluence:** add confluence_downloadAttachment tool ([aae8aab](https://github.com/b1ff/atlassian-dc-mcp/commit/aae8aabd43602aece8da98c13a8052805ba0d14d))
+* **confluence:** add versionIfExists flag to uploadAttachment ([1e0453f](https://github.com/b1ff/atlassian-dc-mcp/commit/1e0453fa01d984939def34a3da8a37927e13f4fe))
+
+
+
+
+
 # [0.28.0](https://github.com/b1ff/atlassian-dc-mcp/compare/v0.27.0...v0.28.0) (2026-07-22)
 
 **Note:** Version bump only for package @atlassian-dc-mcp/confluence

package/README.md

@@ -103,6 +103,37 @@ Available flags: `--host`/`-H`, `--api-base-path`/`-b`, `--token`/`-t`, `--defau
 
    See [Configuration sources](#configuration-sources) for the full precedence chain.
 
+   ### Attachment filesystem access (opt-in)
+
+   By default this server is an API-only client: the attachment tools never read from or write to the local filesystem, and `confluence_uploadAttachment` is **not even registered**. `confluence_downloadAttachment` is always available but can only return file bytes inline (base64/text) — it cannot touch local disk.
+
+   Local filesystem access is opt-in and confined to operator-configured directories that the model cannot choose:
+
+   ```
+   # Enable each direction separately (default: false)
+   CONFLUENCE_ATTACHMENTS_UPLOAD_ENABLED=true
+   CONFLUENCE_ATTACHMENTS_DOWNLOAD_ENABLED=true
+
+   # Allowed roots (os path-separator list). Uploads may only read from these,
+   # downloads may only write into the first configured download root.
+   CONFLUENCE_ATTACHMENTS_UPLOAD_ROOTS=/srv/confluence-exchange/in
+   CONFLUENCE_ATTACHMENTS_DOWNLOAD_ROOTS=/srv/confluence-exchange/out
+
+   # Convenience: a single dedicated exchange directory used as both roots
+   CONFLUENCE_ATTACHMENTS_DIR=/srv/confluence-exchange
+
+   # Hard per-file size limits in bytes (default: 25 MiB)
+   CONFLUENCE_ATTACHMENTS_MAX_UPLOAD_BYTES=26214400
+   CONFLUENCE_ATTACHMENTS_MAX_DOWNLOAD_BYTES=26214400
+   ```
+
+   Guardrails applied when enabled:
+   - A direction only activates when its flag is set **and** at least one root resolves; otherwise the tool stays disabled and a warning is logged.
+   - Roots are canonicalized (realpath) at startup. Requested paths are relative to a root; absolute paths and `..` segments are rejected, and a path that escapes a root through a symlinked directory is refused.
+   - Uploads reject symlinks and non-regular files (FIFOs, devices, directories).
+   - Downloads never overwrite an existing file (including a symlink) — they use an exclusive write.
+   - Both directions enforce the configured hard size limit.
+
    To create a personal access token:
    - In Confluence, select your profile picture at the top right
    - Select **Settings** > **Personal Access Tokens**
@@ -209,3 +240,29 @@ Parameters:
 - `start` (number, optional): Start index for pagination
 - `expand` (string, optional): Comma-separated list of properties to expand
 - `excerpt` (`none` | `highlight`, optional): Excerpt mode for search results. Defaults to `none`.
+
+#### 6. confluence_uploadAttachment
+
+Upload a local file as an attachment to a Confluence content (page). Only registered when filesystem uploads are enabled (see [Attachment filesystem access](#attachment-filesystem-access-opt-in)).
+
+Parameters:
+- `contentId` (string, required): ID of the content (page) to attach the file to
+- `sourcePath` (string, required): Path to the file to upload, **relative to a server-configured upload directory**. Absolute paths and `..` segments are rejected; symlinks and non-regular files are refused.
+- `filename` (string, optional): Override for the attachment filename (defaults to the basename of `sourcePath`)
+- `comment` (string, optional): Comment describing the attachment
+- `minorEdit` (boolean, optional): If true, no notification email is sent to watchers
+- `hidden` (boolean, optional): If true, no notification email or activity stream entry is generated
+- `allowDuplicated` (boolean, optional): Allow upload even if an attachment with the same filename already exists
+- `versionIfExists` (boolean, optional): If true and an attachment with the same filename already exists, upload as a new version instead of failing
+
+#### 7. confluence_downloadAttachment
+
+Download one or more attachments from a Confluence content (page). Returns the file content inline (base64 or text) — useful for inspecting a file or moving it elsewhere (e.g. re-uploading to a Jira issue). When filesystem downloads are enabled (see [Attachment filesystem access](#attachment-filesystem-access-opt-in)), it can also save into the server-configured download directory.
+
+Parameters:
+- `contentId` (string, required): ID of the content (page) whose attachment(s) to download
+- `filename` (string, optional): Exact filename of a single attachment to download. If omitted, all attachments on the content are downloaded.
+- `returnContent` (`none` | `base64` | `text`, optional): Whether to embed the file bytes in the response. Defaults to `none`.
+- `maxInlineBytes` (number, optional): Maximum bytes to embed inline when `returnContent` is `base64`/`text`. Larger files are omitted from the inline content. Defaults to 1 MiB.
+- `save` (boolean, optional): Save the attachment(s) into the server-configured download directory. Requires filesystem downloads to be enabled; existing files are never overwritten. *(Only available when downloads are enabled.)*
+- `saveName` (string, optional): File name (no directories) to use when saving a single attachment; defaults to the attachment's own name. *(Only available when downloads are enabled.)*

package/build/__tests__/confluence-download.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=confluence-download.test.d.ts.map

package/build/__tests__/confluence-download.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confluence-download.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/confluence-download.test.ts"],"names":[],"mappings":""}

package/build/__tests__/confluence-download.test.js

@@ -0,0 +1,69 @@
+import { ConfluenceService } from '../confluence-service.js';
+import { AttachmentsService } from '../confluence-client/index.js';
+const DISABLED_DOWNLOAD = { enabled: false, roots: [], maxBytes: 25 * 1024 * 1024 };
+jest.mock('../confluence-client/index.js', () => ({
+    AttachmentsService: {
+        getAttachments: jest.fn(),
+    },
+    ContentResourceService: {},
+    SearchService: {},
+    UserService: {},
+    OpenAPI: { BASE: '', TOKEN: '', VERSION: '' },
+}));
+function mockFetchText(text) {
+    global.fetch = jest.fn().mockResolvedValue({
+        ok: true,
+        status: 200,
+        statusText: 'OK',
+        headers: { get: () => 'text/plain' },
+        arrayBuffer: async () => Buffer.from(text),
+    });
+}
+describe('ConfluenceService.downloadAttachmentFromContent', () => {
+    let service;
+    beforeEach(() => {
+        service = new ConfluenceService('test-host', 'test-token');
+        jest.clearAllMocks();
+    });
+    afterEach(() => jest.restoreAllMocks());
+    it('builds an absolute download URL from the relative _links.download and returns content', async () => {
+        AttachmentsService.getAttachments.mockResolvedValue({
+            results: [
+                { title: 'doc.txt', metadata: { mediaType: 'text/plain' }, _links: { download: '/download/attachments/123/doc.txt?version=1' } },
+            ],
+        });
+        mockFetchText('file body');
+        const result = await service.downloadAttachmentFromContent({ contentId: '123', filename: 'doc.txt', returnContent: 'text', downloadSide: DISABLED_DOWNLOAD });
+        expect(AttachmentsService.getAttachments).toHaveBeenCalledWith('123', undefined, 'doc.txt');
+        expect(global.fetch).toHaveBeenCalledWith('https://test-host/download/attachments/123/doc.txt?version=1', expect.objectContaining({ headers: expect.objectContaining({ Authorization: 'Bearer test-token' }) }));
+        expect(result.success).toBe(true);
+        expect(result.data).toMatchObject({ contentId: '123', count: 1 });
+        expect(result.data.attachments[0]).toMatchObject({ filename: 'doc.txt', content: 'file body', mediaType: 'text/plain' });
+    });
+    it('downloads all attachments when no filename is given', async () => {
+        AttachmentsService.getAttachments.mockResolvedValue({
+            results: [
+                { title: 'a.txt', _links: { download: '/download/attachments/123/a.txt' } },
+                { title: 'b.txt', _links: { download: '/download/attachments/123/b.txt' } },
+            ],
+        });
+        mockFetchText('x');
+        const result = await service.downloadAttachmentFromContent({ contentId: '123', downloadSide: DISABLED_DOWNLOAD });
+        expect(result.success).toBe(true);
+        expect(result.data.count).toBe(2);
+        expect(global.fetch).toHaveBeenCalledTimes(2);
+    });
+    it('returns a failure when the content has no matching attachment', async () => {
+        AttachmentsService.getAttachments.mockResolvedValue({ results: [] });
+        const result = await service.downloadAttachmentFromContent({ contentId: '123', filename: 'missing.txt', downloadSide: DISABLED_DOWNLOAD });
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('No attachment named "missing.txt"');
+    });
+    it('refuses to save to disk when downloads are disabled', async () => {
+        const result = await service.downloadAttachmentFromContent({ contentId: '123', filename: 'doc.txt', save: true, downloadSide: DISABLED_DOWNLOAD });
+        expect(result.success).toBe(false);
+        expect(result.error).toContain('disabled');
+        expect(global.fetch).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=confluence-download.test.js.map

package/build/__tests__/confluence-download.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confluence-download.test.js","sourceRoot":"","sources":["../../src/__tests__/confluence-download.test.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,MAAM,iBAAiB,GAA0B,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAE3G,IAAI,CAAC,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,kBAAkB,EAAE;QAClB,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE;KAC1B;IACD,sBAAsB,EAAE,EAAE;IAC1B,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;CAC9C,CAAC,CAAC,CAAC;AAEJ,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;QACzC,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE;QACpC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;KAC3C,CAA4B,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,IAAI,OAA0B,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAExC,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACpG,kBAAkB,CAAC,cAA4B,CAAC,iBAAiB,CAAC;YACjE,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,6CAA6C,EAAE,EAAE;aACjI;SACF,CAAC,CAAC;QACH,aAAa,CAAC,WAAW,CAAC,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,6BAA6B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAE9J,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC5F,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CACvC,8DAA8D,EAC9D,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CACtG,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QAClE,kBAAkB,CAAC,cAA4B,CAAC,iBAAiB,CAAC;YACjE,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,iCAAiC,EAAE,EAAE;gBAC3E,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,iCAAiC,EAAE,EAAE;aAC5E;SACF,CAAC,CAAC;QACH,aAAa,CAAC,GAAG,CAAC,CAAC;QAEnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,6BAA6B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAElH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC5E,kBAAkB,CAAC,cAA4B,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,6BAA6B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAE3I,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,6BAA6B,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAEnJ,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/__tests__/confluence-upload.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=confluence-upload.test.d.ts.map

package/build/__tests__/confluence-upload.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confluence-upload.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/confluence-upload.test.ts"],"names":[],"mappings":""}

package/build/__tests__/confluence-upload.test.js

@@ -0,0 +1,59 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { ConfluenceService } from '../confluence-service.js';
+import { AttachmentsService } from '../confluence-client/index.js';
+jest.mock('../confluence-client/index.js', () => ({
+    AttachmentsService: {
+        getAttachments: jest.fn(),
+        createAttachments: jest.fn(),
+        updateData: jest.fn(),
+    },
+    ContentResourceService: {},
+    SearchService: {},
+    UserService: {},
+    OpenAPI: { BASE: '', TOKEN: '', VERSION: '', HEADERS: undefined },
+}));
+describe('ConfluenceService.uploadAttachment', () => {
+    let service;
+    let root;
+    const uploadSide = () => ({ enabled: true, roots: [fs.realpathSync(root)], maxBytes: 1024 });
+    beforeEach(() => {
+        service = new ConfluenceService('test-host', 'test-token');
+        root = fs.mkdtempSync(path.join(os.tmpdir(), 'dc-mcp-cup-'));
+        jest.clearAllMocks();
+        AttachmentsService.createAttachments.mockResolvedValue({ results: [{ id: '1', title: 'a.txt' }] });
+    });
+    afterEach(() => {
+        fs.rmSync(root, { recursive: true, force: true });
+        jest.restoreAllMocks();
+    });
+    it('uploads a file resolved within the upload root', async () => {
+        fs.writeFileSync(path.join(root, 'a.txt'), 'hello');
+        const result = await service.uploadAttachment('42', 'a.txt', uploadSide());
+        expect(result.success).toBe(true);
+        expect(AttachmentsService.createAttachments).toHaveBeenCalledTimes(1);
+        const formData = AttachmentsService.createAttachments.mock.calls[0][4];
+        expect(formData.file.name).toBe('a.txt');
+    });
+    it('rejects an absolute path outside the root', async () => {
+        const result = await service.uploadAttachment('42', '/etc/passwd', uploadSide());
+        expect(result.success).toBe(false);
+        expect(AttachmentsService.createAttachments).not.toHaveBeenCalled();
+    });
+    it('rejects a symlink inside the root', async () => {
+        const target = path.join(root, 'real.txt');
+        fs.writeFileSync(target, 'secret');
+        fs.symlinkSync(target, path.join(root, 'link.txt'));
+        const result = await service.uploadAttachment('42', 'link.txt', uploadSide());
+        expect(result.success).toBe(false);
+        expect(AttachmentsService.createAttachments).not.toHaveBeenCalled();
+    });
+    it('rejects a file over the size limit', async () => {
+        fs.writeFileSync(path.join(root, 'big.txt'), 'x'.repeat(2048));
+        const result = await service.uploadAttachment('42', 'big.txt', uploadSide());
+        expect(result.success).toBe(false);
+        expect(AttachmentsService.createAttachments).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=confluence-upload.test.js.map

package/build/__tests__/confluence-upload.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confluence-upload.test.js","sourceRoot":"","sources":["../../src/__tests__/confluence-upload.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,IAAI,CAAC,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,kBAAkB,EAAE;QAClB,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE;QACzB,iBAAiB,EAAE,IAAI,CAAC,EAAE,EAAE;QAC5B,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE;KACtB;IACD,sBAAsB,EAAE,EAAE;IAC1B,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;CAClE,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,IAAI,OAA0B,CAAC;IAC/B,IAAI,IAAY,CAAC;IACjB,MAAM,UAAU,GAAG,GAA0B,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpH,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,IAAI,iBAAiB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,kBAAkB,CAAC,iBAA+B,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAE3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAI,kBAAkB,CAAC,iBAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/confluence-service.d.ts

@@ -1,4 +1,5 @@
 import { z } from 'zod';
+import { type AttachmentContentEncoding, type AttachmentGatewaySide } from '@atlassian-dc-mcp/common';
 import { ConfluenceBodyMode } from './confluence-response-mapper.js';
 /**
  * Escapes user input for safe use inside a CQL quoted string.
@@ -29,7 +30,14 @@ export interface ConfluenceContent {
 }
 export declare class ConfluenceService {
     private readonly getPageSize;
+    private readonly baseUrl;
+    private readonly tokenProvider;
     constructor(host: string | undefined, token: string | (() => string | undefined), apiBasePath?: string, getPageSize?: () => number);
+    /**
+     * Builds an absolute download URL from a Confluence attachment `_links.download`
+     * value, which is a path relative to the site base (context path included).
+     */
+    private buildDownloadUrl;
     /**
      * Get a Confluence page by ID
      * @param contentId The ID of the page to retrieve
@@ -74,6 +82,41 @@ export declare class ConfluenceService {
      * @param content The updated content object
      */
     updateContent(contentId: string, content: ConfluenceContent): Promise<import("@atlassian-dc-mcp/common").ApiErrorResponse<import("./confluence-client/index.js").Content>>;
+    /**
+     * Upload a file as an attachment to a Confluence content entity
+     * @param contentId The ID of the content the attachment will be attached to
+     * @param sourcePath Path to the file to upload, relative to a server-configured upload directory
+     * @param uploadSide Resolved upload gateway (roots, size limit, enabled flag)
+     * @param filename Optional override for the attachment filename (defaults to basename of sourcePath)
+     * @param comment Optional comment describing the attachment
+     * @param minorEdit If true, no notification email will be generated
+     * @param hidden If true, no notification email or activity stream entry will be generated
+     * @param allowDuplicated Allow upload even if an attachment with the same filename exists
+     */
+    uploadAttachment(contentId: string, sourcePath: string, uploadSide: AttachmentGatewaySide, filename?: string, comment?: string, minorEdit?: boolean, hidden?: boolean, allowDuplicated?: boolean, versionIfExists?: boolean): Promise<import("@atlassian-dc-mcp/common").ApiErrorResponse<import("./confluence-client/index.js").Content>>;
+    /**
+     * Download one or more attachments from a Confluence content entity.
+     * @param params.contentId The ID of the content the attachment(s) are on
+     * @param params.filename If provided, download only the attachment with this exact filename; otherwise download all attachments on the content
+     * @param params.save Whether to write the attachment(s) to the operator-configured download directory
+     * @param params.saveName Optional file name (basename only) when saving a single attachment
+     * @param params.returnContent Whether/how to embed the bytes inline in the response
+     * @param params.maxInlineBytes Inline embedding cap
+     * @param params.downloadSide Resolved download gateway (roots, size limit, enabled flag)
+     */
+    downloadAttachmentFromContent(params: {
+        contentId: string;
+        filename?: string;
+        save?: boolean;
+        saveName?: string;
+        returnContent?: AttachmentContentEncoding;
+        maxInlineBytes?: number;
+        downloadSide: AttachmentGatewaySide;
+    }): Promise<import("@atlassian-dc-mcp/common").ApiErrorResponse<{
+        contentId: string;
+        count: number;
+        attachments: import("@atlassian-dc-mcp/common").AttachmentDownloadResult[];
+    }>>;
     /**
      * Search for spaces by text
      * @param searchText Text to search for in space names or descriptions
@@ -136,5 +179,25 @@ export declare const confluenceToolSchemas: {
         expand: z.ZodOptional<z.ZodString>;
         excerpt: z.ZodOptional<z.ZodEnum<["none", "highlight"]>>;
     };
+    uploadAttachment: {
+        contentId: z.ZodString;
+        sourcePath: z.ZodString;
+        filename: z.ZodOptional<z.ZodString>;
+        comment: z.ZodOptional<z.ZodString>;
+        minorEdit: z.ZodOptional<z.ZodBoolean>;
+        hidden: z.ZodOptional<z.ZodBoolean>;
+        allowDuplicated: z.ZodOptional<z.ZodBoolean>;
+        versionIfExists: z.ZodOptional<z.ZodBoolean>;
+    };
+    downloadAttachment: {
+        contentId: z.ZodString;
+        filename: z.ZodOptional<z.ZodString>;
+        returnContent: z.ZodOptional<z.ZodEnum<["none", "base64", "text"]>>;
+        maxInlineBytes: z.ZodOptional<z.ZodNumber>;
+    };
+    downloadAttachmentSaveFields: {
+        save: z.ZodOptional<z.ZodBoolean>;
+        saveName: z.ZodOptional<z.ZodString>;
+    };
 };
 //# sourceMappingURL=confluence-service.d.ts.map

package/build/confluence-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confluence-service.d.ts","sourceRoot":"","sources":["../src/confluence-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,kBAAkB,EAA0B,MAAM,iCAAiC,CAAC;AAE7F;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC;YACd,cAAc,EAAE,SAAS,CAAC;SAC3B,CAAC;KACH,CAAC;IACF,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnC;AAYD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;gBAGzC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,EAC1C,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,GAAE,MAAM,MAA2B;IAYhD;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAQhD,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,GAAE,kBAA8B,EACxC,YAAY,CAAC,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM;;;;;;IAapB;;;;;;OAMG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,GAAG,WAAoB;;;;;;;gBA5B5E,CAAC;mBAA6B,CAAC;gBAA0B,CAAC;gBAGtG,CAAD;gBACM,CAAC;;;IAuCN;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,iBAAiB;IAI9C;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB;IAIjE;;;;;;OAMG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,MAAM,GAAG,WAAoB;;;;;;;gBAxEI,CAAC;mBAA6B,CAAC;gBAA0B,CAAC;gBAGtG,CAAD;gBACM,CAAC;;;IAsFA,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC,MAAM,CAAC,cAAc,IAAI,MAAM,EAAE;CAGlC;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCjC,CAAC"}
+{"version":3,"file":"confluence-service.d.ts","sourceRoot":"","sources":["../src/confluence-service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAML,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAA0B,MAAM,iCAAiC,CAAC;AAE7F;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QACL,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC;YACd,cAAc,EAAE,SAAS,CAAC;SAC3B,CAAC;KACH,CAAC;IACF,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACnC;AAYD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAe;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsC;gBAGlE,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,EAC1C,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,GAAE,MAAM,MAA2B;IAgBhD;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAOxB;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAQhD,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,QAAQ,GAAE,kBAA8B,EACxC,YAAY,CAAC,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM;;;;;;IAapB;;;;;;OAMG;IACG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,GAAG,WAAoB;;;;;;;gBApDxG,CAAC;mBAIhB,CAAD;gBAA0B,CAAC;gBAA0B,CAAC;gBAA0B,CAAC;;;IA+DjF;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,iBAAiB;IAI9C;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB;IAIjE;;;;;;;;;;OAUG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,qBAAqB,EACjC,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,OAAO,EACnB,MAAM,CAAC,EAAE,OAAO,EAChB,eAAe,CAAC,EAAE,OAAO,EACzB,eAAe,CAAC,EAAE,OAAO;IAmC3B;;;;;;;;;OASG;IACG,6BAA6B,CAAC,MAAM,EAAE;QAC1C,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,CAAC,EAAE,yBAAyB,CAAC;QAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,qBAAqB,CAAC;KACrC;;;;;IAqDD;;;;;;OAMG;IACG,YAAY,CAChB,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,MAAM,GAAG,WAAoB;;;;;;;gBA9NxB,CAAC;mBAIhB,CAAD;gBAA0B,CAAC;gBAA0B,CAAC;gBAA0B,CAAC;;;IA4O3E,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC,MAAM,CAAC,cAAc,IAAI,MAAM,EAAE;CAGlC;AAED,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0DjC,CAAC"}

package/build/confluence-service.js

@@ -1,6 +1,9 @@
+import { File } from 'node:buffer';
+import { readFile } from 'node:fs/promises';
+import { basename } from 'node:path';
 import { z } from 'zod';
-import { ContentResourceService, OpenAPI, SearchService, UserService } from './confluence-client/index.js';
-import { handleApiOperation, resolveOpenApiBase } from '@atlassian-dc-mcp/common';
+import { AttachmentsService, ContentResourceService, OpenAPI, SearchService, UserService } from './confluence-client/index.js';
+import { downloadAttachment, handleApiOperation, resolveDownloadDestination, resolveOpenApiBase, resolveUploadSource, } from '@atlassian-dc-mcp/common';
 import { CONFLUENCE_PRODUCT, getDefaultPageSize, getMissingConfig } from './config.js';
 import { shapeConfluenceContent } from './confluence-response-mapper.js';
 /**
@@ -22,17 +25,33 @@ function resolveToken(token, missingTokenMessage) {
 }
 export class ConfluenceService {
     getPageSize;
+    baseUrl;
+    tokenProvider;
     constructor(host, token, apiBasePath, getPageSize = getDefaultPageSize) {
-        OpenAPI.BASE = resolveOpenApiBase({
+        const base = resolveOpenApiBase({
             host,
             apiBasePath,
             defaultBasePath: CONFLUENCE_PRODUCT.defaultApiBasePath ?? '',
             strippableSuffixes: CONFLUENCE_PRODUCT.apiBasePathStrippableSuffixes,
         });
+        OpenAPI.BASE = base;
         OpenAPI.TOKEN = resolveToken(token, 'Missing required environment variable: CONFLUENCE_API_TOKEN');
         OpenAPI.VERSION = '1.0';
+        this.baseUrl = base;
+        this.tokenProvider = token;
         this.getPageSize = getPageSize;
     }
+    /**
+     * Builds an absolute download URL from a Confluence attachment `_links.download`
+     * value, which is a path relative to the site base (context path included).
+     */
+    buildDownloadUrl(downloadLink) {
+        if (/^https?:\/\//i.test(downloadLink)) {
+            return downloadLink;
+        }
+        const base = this.baseUrl.replace(/\/$/, '');
+        return `${base}${downloadLink.startsWith('/') ? '' : '/'}${downloadLink}`;
+    }
     /**
      * Get a Confluence page by ID
      * @param contentId The ID of the page to retrieve
@@ -80,6 +99,99 @@ export class ConfluenceService {
     async updateContent(contentId, content) {
         return handleApiOperation(() => ContentResourceService.update2(contentId, content), 'Error updating content');
     }
+    /**
+     * Upload a file as an attachment to a Confluence content entity
+     * @param contentId The ID of the content the attachment will be attached to
+     * @param sourcePath Path to the file to upload, relative to a server-configured upload directory
+     * @param uploadSide Resolved upload gateway (roots, size limit, enabled flag)
+     * @param filename Optional override for the attachment filename (defaults to basename of sourcePath)
+     * @param comment Optional comment describing the attachment
+     * @param minorEdit If true, no notification email will be generated
+     * @param hidden If true, no notification email or activity stream entry will be generated
+     * @param allowDuplicated Allow upload even if an attachment with the same filename exists
+     */
+    async uploadAttachment(contentId, sourcePath, uploadSide, filename, comment, minorEdit, hidden, allowDuplicated, versionIfExists) {
+        return handleApiOperation(async () => {
+            const { absolutePath } = await resolveUploadSource({ requestedPath: sourcePath, side: uploadSide });
+            const buffer = await readFile(absolutePath);
+            const name = filename || basename(absolutePath);
+            const file = new File([buffer], name);
+            // X-Atlassian-Token: nocheck is required for multipart attachment POSTs (XSRF bypass).
+            // Set it only for the duration of this call; restore afterwards.
+            const prevHeaders = OpenAPI.HEADERS;
+            OpenAPI.HEADERS = { 'X-Atlassian-Token': 'nocheck' };
+            try {
+                if (versionIfExists) {
+                    const existing = await AttachmentsService.getAttachments(contentId, undefined, name);
+                    const existingId = existing?.results?.[0]?.id;
+                    if (existingId) {
+                        // MockAttachmentRequest types file as string, but getFormData handles Blob/File via isBlob()
+                        return await AttachmentsService.updateData(existingId, contentId, { file });
+                    }
+                }
+                // MockAttachmentRequest types file as string, but getFormData in request.ts handles Blob/File via isBlob()
+                const formData = { file, comment, minorEdit, hidden };
+                return await AttachmentsService.createAttachments(contentId, undefined, allowDuplicated ? 'true' : undefined, undefined, formData);
+            }
+            finally {
+                OpenAPI.HEADERS = prevHeaders;
+            }
+        }, 'Error uploading attachment');
+    }
+    /**
+     * Download one or more attachments from a Confluence content entity.
+     * @param params.contentId The ID of the content the attachment(s) are on
+     * @param params.filename If provided, download only the attachment with this exact filename; otherwise download all attachments on the content
+     * @param params.save Whether to write the attachment(s) to the operator-configured download directory
+     * @param params.saveName Optional file name (basename only) when saving a single attachment
+     * @param params.returnContent Whether/how to embed the bytes inline in the response
+     * @param params.maxInlineBytes Inline embedding cap
+     * @param params.downloadSide Resolved download gateway (roots, size limit, enabled flag)
+     */
+    async downloadAttachmentFromContent(params) {
+        return handleApiOperation(async () => {
+            if (params.save && !params.downloadSide.enabled) {
+                throw new Error('Saving attachments to disk is disabled on this server. Enable it with ' +
+                    'CONFLUENCE_ATTACHMENTS_DOWNLOAD_ENABLED and configure a download directory.');
+            }
+            const list = await AttachmentsService.getAttachments(params.contentId, undefined, params.filename);
+            const results = (list?.results ?? []);
+            if (results.length === 0) {
+                throw new Error(params.filename
+                    ? `No attachment named "${params.filename}" found on content ${params.contentId}`
+                    : `No attachments found on content ${params.contentId}`);
+            }
+            const targets = params.filename ? [results[0]] : results;
+            const multiple = targets.length > 1;
+            const attachments = [];
+            for (const attachment of targets) {
+                const downloadLink = attachment?._links?.download;
+                if (!downloadLink) {
+                    throw new Error(`Attachment "${attachment?.title ?? params.filename}" has no download link`);
+                }
+                const name = attachment?.title ?? params.filename ?? 'attachment';
+                const mediaType = attachment?.metadata?.mediaType ?? attachment?.extensions?.mediaType;
+                let destination;
+                if (params.save) {
+                    const requestedName = multiple ? name : params.saveName ?? name;
+                    destination = await resolveDownloadDestination({ requestedName, side: params.downloadSide });
+                }
+                attachments.push(await downloadAttachment({
+                    url: this.buildDownloadUrl(downloadLink),
+                    token: this.tokenProvider,
+                    filename: name,
+                    mediaType,
+                    options: {
+                        destination,
+                        returnContent: params.returnContent,
+                        maxInlineBytes: params.maxInlineBytes,
+                        maxDownloadBytes: params.downloadSide.maxBytes,
+                    },
+                }));
+            }
+            return { contentId: params.contentId, count: attachments.length, attachments };
+        }, 'Error downloading attachment');
+    }
     /**
      * Search for spaces by text
      * @param searchText Text to search for in space names or descriptions
@@ -138,6 +250,26 @@ export const confluenceToolSchemas = {
         start: z.number().optional().describe("Start index for pagination"),
         expand: z.string().optional().describe("Comma-separated list of properties to expand"),
         excerpt: z.enum(['none', 'highlight']).optional().describe("Excerpt mode for search results. Defaults to none.")
+    },
+    uploadAttachment: {
+        contentId: z.string().describe("ID of the Confluence content (page) to attach the file to"),
+        sourcePath: z.string().describe("Path to the file to upload, relative to a server-configured attachment upload directory. Absolute paths and '..' segments are rejected; symlinks and non-regular files are refused."),
+        filename: z.string().optional().describe("Override for the attachment filename (defaults to the basename of sourcePath)"),
+        comment: z.string().optional().describe("Optional comment describing the attachment"),
+        minorEdit: z.boolean().optional().describe("If true, no notification email is sent to watchers"),
+        hidden: z.boolean().optional().describe("If true, no notification email or activity stream entry is generated"),
+        allowDuplicated: z.boolean().optional().describe("Allow upload even if an attachment with the same filename already exists"),
+        versionIfExists: z.boolean().optional().describe("If true and an attachment with the same filename already exists, upload as a new version instead of failing")
+    },
+    downloadAttachment: {
+        contentId: z.string().describe("ID of the Confluence content (page) whose attachment(s) to download"),
+        filename: z.string().optional().describe("Exact filename of a single attachment to download. If omitted, all attachments on the content are downloaded."),
+        returnContent: z.enum(['none', 'base64', 'text']).optional().describe("Whether to embed the file bytes in the response: 'none' (default), 'base64' for binary, or 'text' for UTF-8 text."),
+        maxInlineBytes: z.number().optional().describe("Maximum bytes to embed inline when returnContent is base64/text. Larger files are omitted from the inline content. Defaults to 1 MiB.")
+    },
+    downloadAttachmentSaveFields: {
+        save: z.boolean().optional().describe("Save the attachment(s) into the server-configured download directory. Requires disk downloads to be enabled on the server."),
+        saveName: z.string().optional().describe("Optional file name (no directories) to use when saving a single attachment; defaults to the attachment's own name. Existing files are never overwritten.")
     }
 };
 //# sourceMappingURL=confluence-service.js.map

package/build/confluence-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"confluence-service.js","sourceRoot":"","sources":["../src/confluence-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAsB,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC;AAsBD,SAAS,YAAY,CAAC,KAA0C,EAAE,mBAA2B;IAC3F,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,aAAa,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACpE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAiB;IACX,WAAW,CAAe;IAE3C,YACE,IAAwB,EACxB,KAA0C,EAC1C,WAAoB,EACpB,cAA4B,kBAAkB;QAE9C,OAAO,CAAC,IAAI,GAAG,kBAAkB,CAAC;YAChC,IAAI;YACJ,WAAW;YACX,eAAe,EAAE,kBAAkB,CAAC,kBAAkB,IAAI,EAAE;YAC5D,kBAAkB,EAAE,kBAAkB,CAAC,6BAA6B;SACrE,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,6DAA6D,CAAC,CAAC;QACnG,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,MAAe;QACpD,MAAM,WAAW,GAAG,MAAM,IAAI,cAAc,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC5D,CAAC,CAAC,GAAG,MAAM,eAAe;YAC1B,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1H,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,MAAe,EACf,WAA+B,SAAS,EACxC,YAAqB,EACrB,SAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO;gBACL,GAAG,MAAM;gBACT,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;aACjF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,KAAc,EAAE,KAAc,EAAE,MAAe,EAAE,UAAgC,MAAM;QACtH,OAAO,kBAAkB,CACvB,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CACzB,SAAS,EACT,MAAM,EACN,SAAS,EACT,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,EACxC,KAAK,EAAE,QAAQ,EAAE,EACjB,OAAO,EACP,GAAG,CACJ,EACD,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC3G,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAA0B;QAC/D,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAChH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,KAAc,EACd,KAAc,EACd,MAAe,EACf,UAAgC,MAAM;QAEtC,8CAA8C;QAC9C,8EAA8E;QAC9E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,2BAA2B,iBAAiB,GAAG,CAAC;QAE5D,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CACnD,SAAS,EACT,MAAM,EACN,SAAS,EACT,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,EACxC,KAAK,EAAE,QAAQ,EAAE,EACjB,OAAO,EACP,GAAG,CACJ,EAAE,4BAA4B,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,cAAc;QACnB,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE;QACV,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACtF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;QACjJ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAC1G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qMAAqM,CAAC;KACvP;IACD,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0EAA0E,CAAC;QACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACtF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;KACjH;IACD,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;QAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC5F,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;KACnI;IACD,aAAa,EAAE;QACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACjE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;QAChH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;KACnI;IACD,YAAY,EAAE;QACZ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gLAAgL,CAAC;QACjN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACtF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;KACjH;CACF,CAAC"}
+{"version":3,"file":"confluence-service.js","sourceRoot":"","sources":["../src/confluence-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC/H,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,GAGpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvF,OAAO,EAAsB,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAkB;IACvD,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChE,CAAC;AAsBD,SAAS,YAAY,CAAC,KAA0C,EAAE,mBAA2B;IAC3F,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,aAAa,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACpE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAiB;IACX,WAAW,CAAe;IAC1B,OAAO,CAAS;IAChB,aAAa,CAAsC;IAEpE,YACE,IAAwB,EACxB,KAA0C,EAC1C,WAAoB,EACpB,cAA4B,kBAAkB;QAE9C,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,IAAI;YACJ,WAAW;YACX,eAAe,EAAE,kBAAkB,CAAC,kBAAkB,IAAI,EAAE;YAC5D,kBAAkB,EAAE,kBAAkB,CAAC,6BAA6B;SACrE,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,6DAA6D,CAAC,CAAC;QACnG,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,YAAoB;QAC3C,IAAI,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,GAAG,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,YAAY,EAAE,CAAC;IAC5E,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,MAAe;QACpD,MAAM,WAAW,GAAG,MAAM,IAAI,cAAc,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC5D,CAAC,CAAC,GAAG,MAAM,eAAe;YAC1B,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1H,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,MAAe,EACf,WAA+B,SAAS,EACxC,YAAqB,EACrB,SAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,OAAO;gBACL,GAAG,MAAM;gBACT,IAAI,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;aACjF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,GAAW,EAAE,KAAc,EAAE,KAAc,EAAE,MAAe,EAAE,UAAgC,MAAM;QACtH,OAAO,kBAAkB,CACvB,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CACzB,SAAS,EACT,MAAM,EACN,SAAS,EACT,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,EACxC,KAAK,EAAE,QAAQ,EAAE,EACjB,OAAO,EACP,GAAG,CACJ,EACD,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC3G,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,OAA0B;QAC/D,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAChH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,UAAkB,EAClB,UAAiC,EACjC,QAAiB,EACjB,OAAgB,EAChB,SAAmB,EACnB,MAAgB,EAChB,eAAyB,EACzB,eAAyB;QAEzB,OAAO,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,mBAAmB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACpG,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;YACtC,uFAAuF;YACvF,iEAAiE;YACjE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;YACpC,OAAO,CAAC,OAAO,GAAG,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;oBACrF,MAAM,UAAU,GAAI,QAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBACvD,IAAI,UAAU,EAAE,CAAC;wBACf,6FAA6F;wBAC7F,OAAO,MAAM,kBAAkB,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAS,CAAC,CAAC;oBACrF,CAAC;gBACH,CAAC;gBACD,2GAA2G;gBAC3G,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAS,CAAC;gBAC7D,OAAO,MAAM,kBAAkB,CAAC,iBAAiB,CAC/C,SAAS,EACT,SAAS,EACT,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACpC,SAAS,EACT,QAAQ,CACT,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC;YAChC,CAAC;QACH,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,6BAA6B,CAAC,MAQnC;QACC,OAAO,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACnC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACb,wEAAwE;oBACtE,6EAA6E,CAChF,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACnG,MAAM,OAAO,GAAG,CAAE,IAAY,EAAE,OAAO,IAAI,EAAE,CAAe,CAAC;YAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,QAAQ;oBACb,CAAC,CAAC,wBAAwB,MAAM,CAAC,QAAQ,sBAAsB,MAAM,CAAC,SAAS,EAAE;oBACjF,CAAC,CAAC,mCAAmC,MAAM,CAAC,SAAS,EAAE,CAC1D,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC;gBAClD,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,EAAE,KAAK,IAAI,MAAM,CAAC,QAAQ,wBAAwB,CAAC,CAAC;gBAC/F,CAAC;gBACD,MAAM,IAAI,GAAG,UAAU,EAAE,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC;gBAClE,MAAM,SAAS,GAAG,UAAU,EAAE,QAAQ,EAAE,SAAS,IAAI,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC;gBACvF,IAAI,WAA+B,CAAC;gBACpC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;oBAChE,WAAW,GAAG,MAAM,0BAA0B,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC/F,CAAC;gBACD,WAAW,CAAC,IAAI,CACd,MAAM,kBAAkB,CAAC;oBACvB,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;oBACxC,KAAK,EAAE,IAAI,CAAC,aAAa;oBACzB,QAAQ,EAAE,IAAI;oBACd,SAAS;oBACT,OAAO,EAAE;wBACP,WAAW;wBACX,aAAa,EAAE,MAAM,CAAC,aAAa;wBACnC,cAAc,EAAE,MAAM,CAAC,cAAc;wBACrC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ;qBAC/C;iBACF,CAAC,CACH,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QACjF,CAAC,EAAE,8BAA8B,CAAC,CAAC;IACrC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,KAAc,EACd,KAAc,EACd,MAAe,EACf,UAAgC,MAAM;QAEtC,8CAA8C;QAC9C,8EAA8E;QAC9E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,2BAA2B,iBAAiB,GAAG,CAAC;QAE5D,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CACnD,SAAS,EACT,MAAM,EACN,SAAS,EACT,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,EACxC,KAAK,EAAE,QAAQ,EAAE,EACjB,OAAO,EACP,GAAG,CACJ,EAAE,4BAA4B,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,cAAc;QACnB,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE;QACV,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACtF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8EAA8E,CAAC;QACjJ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;QAC1G,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qMAAqM,CAAC;KACvP;IACD,aAAa,EAAE;QACb,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0EAA0E,CAAC;QACpG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACtF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;KACjH;IACD,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAC/E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4EAA4E,CAAC;QAC1G,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC5F,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;KACnI;IACD,aAAa,EAAE;QACb,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;QAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QACjE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;QAChH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACxE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;QAC1E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;KACnI;IACD,YAAY,EAAE;QACZ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gLAAgL,CAAC;QACjN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;QAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;QACtF,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;KACjH;IACD,gBAAgB,EAAE;QAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;QAC3F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qLAAqL,CAAC;QACtN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;QACzH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;QACrF,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;QAChG,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sEAAsE,CAAC;QAC/G,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0EAA0E,CAAC;QAC5H,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6GAA6G,CAAC;KAChK;IACD,kBAAkB,EAAE;QAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qEAAqE,CAAC;QACrG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+GAA+G,CAAC;QACzJ,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mHAAmH,CAAC;QAC1L,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uIAAuI,CAAC;KACxL;IACD,4BAA4B,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4HAA4H,CAAC;QACnK,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0JAA0J,CAAC;KACrM;CACF,CAAC"}

package/build/index.js

@@ -1,7 +1,7 @@
-import { connectServer, createMcpServer, formatToolResponse, initializeRuntimeConfig } from '@atlassian-dc-mcp/common';
+import { connectServer, createMcpServer, formatToolResponse, initializeRuntimeConfig, resolveAttachmentGateway } from '@atlassian-dc-mcp/common';
 import { ConfluenceService, confluenceToolSchemas } from './confluence-service.js';
 import { shapeConfluenceMutationAck } from './confluence-response-mapper.js';
-import { getConfluenceRuntimeConfig, getDefaultPageSize } from './config.js';
+import { CONFLUENCE_PRODUCT, getConfluenceRuntimeConfig, getDefaultPageSize } from './config.js';
 import { createRequire } from 'node:module';
 const require = createRequire(import.meta.url);
 const { version } = require('../package.json');
@@ -94,6 +94,29 @@ server.tool("confluence_updateContent", `Update existing content in ${confluence
     }
     return formatToolResponse(result);
 });
+const attachmentGateway = resolveAttachmentGateway(CONFLUENCE_PRODUCT);
+// Filesystem-reading upload is only registered when the operator explicitly enables it.
+if (attachmentGateway.upload.enabled) {
+    server.tool("confluence_uploadAttachment", `Upload a local file as an attachment to a Confluence content (page) in the ${confluenceInstanceType}. The file must live under the server-configured upload directory; the path is given relative to that directory.`, confluenceToolSchemas.uploadAttachment, async ({ contentId, sourcePath, filename, comment, minorEdit, hidden, allowDuplicated, versionIfExists }) => {
+        const result = await confluenceService.uploadAttachment(contentId, sourcePath, attachmentGateway.upload, filename, comment, minorEdit, hidden, allowDuplicated, versionIfExists);
+        return formatToolResponse(result);
+    });
+}
+// Download always returns content inline (no filesystem access). Saving to disk is
+// only offered when the operator enables it, and is confined to the configured directory.
+const downloadSaveEnabled = attachmentGateway.download.enabled;
+server.tool("confluence_downloadAttachment", `Download one or more attachments from a Confluence content (page) in the ${confluenceInstanceType}. Returns the file content inline (base64 or text). Useful for inspecting a file or moving it elsewhere (e.g. re-uploading to a Jira issue).${downloadSaveEnabled ? ' Can also save into the server-configured download directory; existing files are never overwritten.' : ' Saving to local disk is disabled on this server.'}`, { ...confluenceToolSchemas.downloadAttachment, ...(downloadSaveEnabled ? confluenceToolSchemas.downloadAttachmentSaveFields : {}) }, async ({ contentId, filename, returnContent, maxInlineBytes, save, saveName }) => {
+    const result = await confluenceService.downloadAttachmentFromContent({
+        contentId,
+        filename,
+        save,
+        saveName,
+        returnContent,
+        maxInlineBytes,
+        downloadSide: attachmentGateway.download,
+    });
+    return formatToolResponse(result);
+});
 server.tool('confluence_searchSpace', `Search for spaces in ${confluenceInstanceType}`, confluenceToolSchemas.searchSpaces, async ({ searchText, limit, start, expand, excerpt }) => {
     const result = await confluenceService.searchSpaces(searchText, limit, start, expand, excerpt);
     return formatToolResponse(result);