@atlassian-dc-mcp/confluence 0.28.0 → 0.30.0

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACvH,OAAO,EAAE,iBAAiB,EAAqB,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE/C,uBAAuB,EAAE,CAAC;AAE1B,0CAA0C;AAC1C,MAAM,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,CAAC;AAC1D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,gCAAgC;AAChC,MAAM,gBAAgB,GAAG,0BAA0B,EAAE,CAAC;AACtD,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAC7C,gBAAgB,CAAC,IAAI,EACrB,GAAG,EAAE,CAAC,0BAA0B,EAAE,CAAC,KAAK,EACxC,gBAAgB,CAAC,WAAW,EAC5B,kBAAkB,CACnB,CAAC;AAEF,kCAAkC;AAClC,MAAM,sBAAsB,GAAG,yCAAyC,CAAC;AAEzE,wBAAwB;AACxB,MAAM,MAAM,GAAG,eAAe,CAAC;IAC7B,IAAI,EAAE,0BAA0B;IAChC,OAAO;CACR,CAAC,CAAC;AAEH,+BAA+B;AAC/B,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,yCAAyC,sBAAsB,EAAE,EACjE,qBAAqB,CAAC,UAAU,EAChC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE;IACjE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACxG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yBAAyB,sBAAsB,YAAY,EAC3D,qBAAqB,CAAC,aAAa,EACnC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;IAC/C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yBAAyB,sBAAsB,EAAE,EACjD,qBAAqB,CAAC,aAAa,EACnC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7D,MAAM,UAAU,GAAsB;QACpC,IAAI,EAAE,IAAI,IAAI,MAAM;QACpB,KAAK;QACL,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,SAAS;aAC1B;SACF;KACF,CAAC;IAEF,2CAA2C;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,kBAAkB,CAAC;YACxB,GAAG,MAAM;YACT,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,8BAA8B,sBAAsB,EAAE,EACtD,qBAAqB,CAAC,aAAa,EACnC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE;IACvE,8CAA8C;IAC9C,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAExE,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,kBAAkB,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sCAAsC,SAAS,KAAK,cAAc,CAAC,KAAK,IAAI,eAAe,EAAE;SACrG,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,MAAM,WAAW,GAAG,cAAc,CAAC,IAIlC,CAAC;IAEF,MAAM,SAAS,GAAsB;QACnC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,KAAK,EAAE,KAAK,IAAI,WAAW,CAAC,KAAK;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,OAAO,EAAE;YACP,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,cAAc;SACxB;KACF,CAAC;IAEF,0CAA0C;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,GAAG;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,SAAS;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,kBAAkB,CAAC;YACxB,GAAG,MAAM;YACT,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAClC,wBAAwB,sBAAsB,EAAE,EAChD,qBAAqB,CAAC,YAAY,EAClC,KAAK,EAAE,EACE,UAAU,EACV,KAAK,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACR,EAAE,EAAE;IACV,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/F,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACjJ,OAAO,EAAE,iBAAiB,EAAqB,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE/C,uBAAuB,EAAE,CAAC;AAE1B,0CAA0C;AAC1C,MAAM,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,CAAC;AAC1D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,gCAAgC;AAChC,MAAM,gBAAgB,GAAG,0BAA0B,EAAE,CAAC;AACtD,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAC7C,gBAAgB,CAAC,IAAI,EACrB,GAAG,EAAE,CAAC,0BAA0B,EAAE,CAAC,KAAK,EACxC,gBAAgB,CAAC,WAAW,EAC5B,kBAAkB,CACnB,CAAC;AAEF,kCAAkC;AAClC,MAAM,sBAAsB,GAAG,yCAAyC,CAAC;AAEzE,wBAAwB;AACxB,MAAM,MAAM,GAAG,eAAe,CAAC;IAC7B,IAAI,EAAE,0BAA0B;IAChC,OAAO;CACR,CAAC,CAAC;AAEH,+BAA+B;AAC/B,MAAM,CAAC,IAAI,CACT,uBAAuB,EACvB,yCAAyC,sBAAsB,EAAE,EACjE,qBAAqB,CAAC,UAAU,EAChC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE;IACjE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACxG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yBAAyB,sBAAsB,YAAY,EAC3D,qBAAqB,CAAC,aAAa,EACnC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;IAC/C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,yBAAyB,sBAAsB,EAAE,EACjD,qBAAqB,CAAC,aAAa,EACnC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;IAC7D,MAAM,UAAU,GAAsB;QACpC,IAAI,EAAE,IAAI,IAAI,MAAM;QACpB,KAAK;QACL,KAAK,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,SAAS;aAC1B;SACF;KACF,CAAC;IAEF,2CAA2C;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,kBAAkB,CAAC;YACxB,GAAG,MAAM;YACT,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CACT,0BAA0B,EAC1B,8BAA8B,sBAAsB,EAAE,EACtD,qBAAqB,CAAC,aAAa,EACnC,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE;IACvE,8CAA8C;IAC9C,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAExE,IAAI,CAAC,cAAc,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACpD,OAAO,kBAAkB,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sCAAsC,SAAS,KAAK,cAAc,CAAC,KAAK,IAAI,eAAe,EAAE;SACrG,CAAC,CAAC;IACL,CAAC;IAED,6DAA6D;IAC7D,MAAM,WAAW,GAAG,cAAc,CAAC,IAIlC,CAAC;IAEF,MAAM,SAAS,GAAsB;QACnC,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,KAAK,EAAE,KAAK,IAAI,WAAW,CAAC,KAAK;QACjC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,OAAO,EAAE;YACP,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,cAAc;SACxB;KACF,CAAC;IAEF,0CAA0C;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,SAAS,CAAC,IAAI,GAAG;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,OAAO;gBACd,cAAc,EAAE,SAAS;aAC1B;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,kBAAkB,CAAC;YACxB,GAAG,MAAM;YACT,IAAI,EAAE,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;AAEvE,wFAAwF;AACxF,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,CAAC,IAAI,CACT,6BAA6B,EAC7B,8EAA8E,sBAAsB,kHAAkH,EACtN,qBAAqB,CAAC,gBAAgB,EACtC,KAAK,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,EAAE,EAAE;QAC1G,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CACrD,SAAS,EACT,UAAU,EACV,iBAAiB,CAAC,MAAM,EACxB,QAAQ,EACR,OAAO,EACP,SAAS,EACT,MAAM,EACN,eAAe,EACf,eAAe,CAChB,CAAC;QACF,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,0FAA0F;AAC1F,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC;AAC/D,MAAM,CAAC,IAAI,CACT,+BAA+B,EAC/B,4EAA4E,sBAAsB,+IAA+I,mBAAmB,CAAC,CAAC,CAAC,qGAAqG,CAAC,CAAC,CAAC,mDAAmD,EAAE,EACpa,EAAE,GAAG,qBAAqB,CAAC,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,qBAAqB,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACnI,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAO1E,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,6BAA6B,CAAC;QACnE,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,aAAa;QACb,cAAc;QACd,YAAY,EAAE,iBAAiB,CAAC,QAAQ;KACzC,CAAC,CAAC;IACH,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAClC,wBAAwB,sBAAsB,EAAE,EAChD,qBAAqB,CAAC,YAAY,EAClC,KAAK,EAAE,EACE,UAAU,EACV,KAAK,EACL,KAAK,EACL,MAAM,EACN,OAAO,EACR,EAAE,EAAE;IACV,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/F,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlassian-dc-mcp/confluence",
-  "version": "0.28.0",
+  "version": "0.30.0",
   "main": "build/index.js",
   "type": "module",
   "bin": "./bin/run.js",
@@ -31,7 +31,7 @@
     "test": "jest --passWithNoTests"
   },
   "dependencies": {
-    "@atlassian-dc-mcp/common": "^0.28.0",
+    "@atlassian-dc-mcp/common": "^0.30.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "dotenv": "^16.4.7",
     "zod": "^3.24.2"
@@ -45,5 +45,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "gitHead": "7f51cd1b0328ecc90785211511415e9609d09a25"
+  "gitHead": "92a4fc60548de5ee374489deef4d09271536014f"
 }

package/src/__tests__/confluence-download.test.ts

@@ -0,0 +1,89 @@
+import type { AttachmentGatewaySide } from '@atlassian-dc-mcp/common';
+import { ConfluenceService } from '../confluence-service.js';
+import { AttachmentsService } from '../confluence-client/index.js';
+
+const DISABLED_DOWNLOAD: AttachmentGatewaySide = { enabled: false, roots: [], maxBytes: 25 * 1024 * 1024 };
+
+jest.mock('../confluence-client/index.js', () => ({
+  AttachmentsService: {
+    getAttachments: jest.fn(),
+  },
+  ContentResourceService: {},
+  SearchService: {},
+  UserService: {},
+  OpenAPI: { BASE: '', TOKEN: '', VERSION: '' },
+}));
+
+function mockFetchText(text: string) {
+  global.fetch = jest.fn().mockResolvedValue({
+    ok: true,
+    status: 200,
+    statusText: 'OK',
+    headers: { get: () => 'text/plain' },
+    arrayBuffer: async () => Buffer.from(text),
+  }) as unknown as typeof fetch;
+}
+
+describe('ConfluenceService.downloadAttachmentFromContent', () => {
+  let service: ConfluenceService;
+
+  beforeEach(() => {
+    service = new ConfluenceService('test-host', 'test-token');
+    jest.clearAllMocks();
+  });
+
+  afterEach(() => jest.restoreAllMocks());
+
+  it('builds an absolute download URL from the relative _links.download and returns content', async () => {
+    (AttachmentsService.getAttachments as jest.Mock).mockResolvedValue({
+      results: [
+        { title: 'doc.txt', metadata: { mediaType: 'text/plain' }, _links: { download: '/download/attachments/123/doc.txt?version=1' } },
+      ],
+    });
+    mockFetchText('file body');
+
+    const result = await service.downloadAttachmentFromContent({ contentId: '123', filename: 'doc.txt', returnContent: 'text', downloadSide: DISABLED_DOWNLOAD });
+
+    expect(AttachmentsService.getAttachments).toHaveBeenCalledWith('123', undefined, 'doc.txt');
+    expect(global.fetch).toHaveBeenCalledWith(
+      'https://test-host/download/attachments/123/doc.txt?version=1',
+      expect.objectContaining({ headers: expect.objectContaining({ Authorization: 'Bearer test-token' }) }),
+    );
+    expect(result.success).toBe(true);
+    expect(result.data).toMatchObject({ contentId: '123', count: 1 });
+    expect(result.data!.attachments[0]).toMatchObject({ filename: 'doc.txt', content: 'file body', mediaType: 'text/plain' });
+  });
+
+  it('downloads all attachments when no filename is given', async () => {
+    (AttachmentsService.getAttachments as jest.Mock).mockResolvedValue({
+      results: [
+        { title: 'a.txt', _links: { download: '/download/attachments/123/a.txt' } },
+        { title: 'b.txt', _links: { download: '/download/attachments/123/b.txt' } },
+      ],
+    });
+    mockFetchText('x');
+
+    const result = await service.downloadAttachmentFromContent({ contentId: '123', downloadSide: DISABLED_DOWNLOAD });
+
+    expect(result.success).toBe(true);
+    expect(result.data!.count).toBe(2);
+    expect(global.fetch).toHaveBeenCalledTimes(2);
+  });
+
+  it('returns a failure when the content has no matching attachment', async () => {
+    (AttachmentsService.getAttachments as jest.Mock).mockResolvedValue({ results: [] });
+
+    const result = await service.downloadAttachmentFromContent({ contentId: '123', filename: 'missing.txt', downloadSide: DISABLED_DOWNLOAD });
+
+    expect(result.success).toBe(false);
+    expect(result.error).toContain('No attachment named "missing.txt"');
+  });
+
+  it('refuses to save to disk when downloads are disabled', async () => {
+    const result = await service.downloadAttachmentFromContent({ contentId: '123', filename: 'doc.txt', save: true, downloadSide: DISABLED_DOWNLOAD });
+
+    expect(result.success).toBe(false);
+    expect(result.error).toContain('disabled');
+    expect(global.fetch).not.toHaveBeenCalled();
+  });
+});

package/src/__tests__/confluence-upload.test.ts

@@ -0,0 +1,71 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import type { AttachmentGatewaySide } from '@atlassian-dc-mcp/common';
+import { ConfluenceService } from '../confluence-service.js';
+import { AttachmentsService } from '../confluence-client/index.js';
+
+jest.mock('../confluence-client/index.js', () => ({
+  AttachmentsService: {
+    getAttachments: jest.fn(),
+    createAttachments: jest.fn(),
+    updateData: jest.fn(),
+  },
+  ContentResourceService: {},
+  SearchService: {},
+  UserService: {},
+  OpenAPI: { BASE: '', TOKEN: '', VERSION: '', HEADERS: undefined },
+}));
+
+describe('ConfluenceService.uploadAttachment', () => {
+  let service: ConfluenceService;
+  let root: string;
+  const uploadSide = (): AttachmentGatewaySide => ({ enabled: true, roots: [fs.realpathSync(root)], maxBytes: 1024 });
+
+  beforeEach(() => {
+    service = new ConfluenceService('test-host', 'test-token');
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'dc-mcp-cup-'));
+    jest.clearAllMocks();
+    (AttachmentsService.createAttachments as jest.Mock).mockResolvedValue({ results: [{ id: '1', title: 'a.txt' }] });
+  });
+
+  afterEach(() => {
+    fs.rmSync(root, { recursive: true, force: true });
+    jest.restoreAllMocks();
+  });
+
+  it('uploads a file resolved within the upload root', async () => {
+    fs.writeFileSync(path.join(root, 'a.txt'), 'hello');
+
+    const result = await service.uploadAttachment('42', 'a.txt', uploadSide());
+
+    expect(result.success).toBe(true);
+    expect(AttachmentsService.createAttachments).toHaveBeenCalledTimes(1);
+    const formData = (AttachmentsService.createAttachments as jest.Mock).mock.calls[0][4];
+    expect(formData.file.name).toBe('a.txt');
+  });
+
+  it('rejects an absolute path outside the root', async () => {
+    const result = await service.uploadAttachment('42', '/etc/passwd', uploadSide());
+    expect(result.success).toBe(false);
+    expect(AttachmentsService.createAttachments).not.toHaveBeenCalled();
+  });
+
+  it('rejects a symlink inside the root', async () => {
+    const target = path.join(root, 'real.txt');
+    fs.writeFileSync(target, 'secret');
+    fs.symlinkSync(target, path.join(root, 'link.txt'));
+
+    const result = await service.uploadAttachment('42', 'link.txt', uploadSide());
+    expect(result.success).toBe(false);
+    expect(AttachmentsService.createAttachments).not.toHaveBeenCalled();
+  });
+
+  it('rejects a file over the size limit', async () => {
+    fs.writeFileSync(path.join(root, 'big.txt'), 'x'.repeat(2048));
+
+    const result = await service.uploadAttachment('42', 'big.txt', uploadSide());
+    expect(result.success).toBe(false);
+    expect(AttachmentsService.createAttachments).not.toHaveBeenCalled();
+  });
+});

package/src/confluence-service.ts

@@ -1,6 +1,17 @@
+import { File } from 'node:buffer';
+import { readFile } from 'node:fs/promises';
+import { basename } from 'node:path';
 import { z } from 'zod';
-import { ContentResourceService, OpenAPI, SearchService, UserService } from './confluence-client/index.js';
-import { handleApiOperation, resolveOpenApiBase } from '@atlassian-dc-mcp/common';
+import { AttachmentsService, ContentResourceService, OpenAPI, SearchService, UserService } from './confluence-client/index.js';
+import {
+  downloadAttachment,
+  handleApiOperation,
+  resolveDownloadDestination,
+  resolveOpenApiBase,
+  resolveUploadSource,
+  type AttachmentContentEncoding,
+  type AttachmentGatewaySide,
+} from '@atlassian-dc-mcp/common';
 import { CONFLUENCE_PRODUCT, getDefaultPageSize, getMissingConfig } from './config.js';
 import { ConfluenceBodyMode, shapeConfluenceContent } from './confluence-response-mapper.js';
 
@@ -45,6 +56,8 @@ function resolveToken(token: string | (() => string | undefined), missingTokenMe
 
 export class ConfluenceService {
   private readonly getPageSize: () => number;
+  private readonly baseUrl: string;
+  private readonly tokenProvider: string | (() => string | undefined);
 
   constructor(
     host: string | undefined,
@@ -52,16 +65,31 @@ export class ConfluenceService {
     apiBasePath?: string,
     getPageSize: () => number = getDefaultPageSize,
   ) {
-    OpenAPI.BASE = resolveOpenApiBase({
+    const base = resolveOpenApiBase({
       host,
       apiBasePath,
       defaultBasePath: CONFLUENCE_PRODUCT.defaultApiBasePath ?? '',
       strippableSuffixes: CONFLUENCE_PRODUCT.apiBasePathStrippableSuffixes,
     });
+    OpenAPI.BASE = base;
     OpenAPI.TOKEN = resolveToken(token, 'Missing required environment variable: CONFLUENCE_API_TOKEN');
     OpenAPI.VERSION = '1.0';
+    this.baseUrl = base;
+    this.tokenProvider = token;
     this.getPageSize = getPageSize;
   }
+
+  /**
+   * Builds an absolute download URL from a Confluence attachment `_links.download`
+   * value, which is a path relative to the site base (context path included).
+   */
+  private buildDownloadUrl(downloadLink: string): string {
+    if (/^https?:\/\//i.test(downloadLink)) {
+      return downloadLink;
+    }
+    const base = this.baseUrl.replace(/\/$/, '');
+    return `${base}${downloadLink.startsWith('/') ? '' : '/'}${downloadLink}`;
+  }
   /**
    * Get a Confluence page by ID
    * @param contentId The ID of the page to retrieve
@@ -132,6 +160,132 @@ export class ConfluenceService {
     return handleApiOperation(() => ContentResourceService.update2(contentId, content), 'Error updating content');
   }
 
+  /**
+   * Upload a file as an attachment to a Confluence content entity
+   * @param contentId The ID of the content the attachment will be attached to
+   * @param sourcePath Path to the file to upload, relative to a server-configured upload directory
+   * @param uploadSide Resolved upload gateway (roots, size limit, enabled flag)
+   * @param filename Optional override for the attachment filename (defaults to basename of sourcePath)
+   * @param comment Optional comment describing the attachment
+   * @param minorEdit If true, no notification email will be generated
+   * @param hidden If true, no notification email or activity stream entry will be generated
+   * @param allowDuplicated Allow upload even if an attachment with the same filename exists
+   */
+  async uploadAttachment(
+    contentId: string,
+    sourcePath: string,
+    uploadSide: AttachmentGatewaySide,
+    filename?: string,
+    comment?: string,
+    minorEdit?: boolean,
+    hidden?: boolean,
+    allowDuplicated?: boolean,
+    versionIfExists?: boolean,
+  ) {
+    return handleApiOperation(async () => {
+      const { absolutePath } = await resolveUploadSource({ requestedPath: sourcePath, side: uploadSide });
+      const buffer = await readFile(absolutePath);
+      const name = filename || basename(absolutePath);
+      const file = new File([buffer], name);
+      // X-Atlassian-Token: nocheck is required for multipart attachment POSTs (XSRF bypass).
+      // Set it only for the duration of this call; restore afterwards.
+      const prevHeaders = OpenAPI.HEADERS;
+      OpenAPI.HEADERS = { 'X-Atlassian-Token': 'nocheck' };
+      try {
+        if (versionIfExists) {
+          const existing = await AttachmentsService.getAttachments(contentId, undefined, name);
+          const existingId = (existing as any)?.results?.[0]?.id;
+          if (existingId) {
+            // MockAttachmentRequest types file as string, but getFormData handles Blob/File via isBlob()
+            return await AttachmentsService.updateData(existingId, contentId, { file } as any);
+          }
+        }
+        // MockAttachmentRequest types file as string, but getFormData in request.ts handles Blob/File via isBlob()
+        const formData = { file, comment, minorEdit, hidden } as any;
+        return await AttachmentsService.createAttachments(
+          contentId,
+          undefined,
+          allowDuplicated ? 'true' : undefined,
+          undefined,
+          formData,
+        );
+      } finally {
+        OpenAPI.HEADERS = prevHeaders;
+      }
+    }, 'Error uploading attachment');
+  }
+
+  /**
+   * Download one or more attachments from a Confluence content entity.
+   * @param params.contentId The ID of the content the attachment(s) are on
+   * @param params.filename If provided, download only the attachment with this exact filename; otherwise download all attachments on the content
+   * @param params.save Whether to write the attachment(s) to the operator-configured download directory
+   * @param params.saveName Optional file name (basename only) when saving a single attachment
+   * @param params.returnContent Whether/how to embed the bytes inline in the response
+   * @param params.maxInlineBytes Inline embedding cap
+   * @param params.downloadSide Resolved download gateway (roots, size limit, enabled flag)
+   */
+  async downloadAttachmentFromContent(params: {
+    contentId: string;
+    filename?: string;
+    save?: boolean;
+    saveName?: string;
+    returnContent?: AttachmentContentEncoding;
+    maxInlineBytes?: number;
+    downloadSide: AttachmentGatewaySide;
+  }) {
+    return handleApiOperation(async () => {
+      if (params.save && !params.downloadSide.enabled) {
+        throw new Error(
+          'Saving attachments to disk is disabled on this server. Enable it with ' +
+            'CONFLUENCE_ATTACHMENTS_DOWNLOAD_ENABLED and configure a download directory.',
+        );
+      }
+      const list = await AttachmentsService.getAttachments(params.contentId, undefined, params.filename);
+      const results = ((list as any)?.results ?? []) as Array<any>;
+      if (results.length === 0) {
+        throw new Error(
+          params.filename
+            ? `No attachment named "${params.filename}" found on content ${params.contentId}`
+            : `No attachments found on content ${params.contentId}`,
+        );
+      }
+
+      const targets = params.filename ? [results[0]] : results;
+      const multiple = targets.length > 1;
+      const attachments = [];
+      for (const attachment of targets) {
+        const downloadLink = attachment?._links?.download;
+        if (!downloadLink) {
+          throw new Error(`Attachment "${attachment?.title ?? params.filename}" has no download link`);
+        }
+        const name = attachment?.title ?? params.filename ?? 'attachment';
+        const mediaType = attachment?.metadata?.mediaType ?? attachment?.extensions?.mediaType;
+        let destination: string | undefined;
+        if (params.save) {
+          const requestedName = multiple ? name : params.saveName ?? name;
+          destination = await resolveDownloadDestination({ requestedName, side: params.downloadSide });
+        }
+        attachments.push(
+          await downloadAttachment({
+            url: this.buildDownloadUrl(downloadLink),
+            token: this.tokenProvider,
+            filename: name,
+            mediaType,
+            options: {
+              destination,
+              returnContent: params.returnContent,
+              maxInlineBytes: params.maxInlineBytes,
+              maxDownloadBytes: params.downloadSide.maxBytes,
+            },
+          }),
+        );
+      }
+
+      return { contentId: params.contentId, count: attachments.length, attachments };
+    }, 'Error downloading attachment');
+  }
+
   /**
    * Search for spaces by text
    * @param searchText Text to search for in space names or descriptions
@@ -208,5 +362,25 @@ export const confluenceToolSchemas = {
     start: z.number().optional().describe("Start index for pagination"),
     expand: z.string().optional().describe("Comma-separated list of properties to expand"),
     excerpt: z.enum(['none', 'highlight']).optional().describe("Excerpt mode for search results. Defaults to none.")
+  },
+  uploadAttachment: {
+    contentId: z.string().describe("ID of the Confluence content (page) to attach the file to"),
+    sourcePath: z.string().describe("Path to the file to upload, relative to a server-configured attachment upload directory. Absolute paths and '..' segments are rejected; symlinks and non-regular files are refused."),
+    filename: z.string().optional().describe("Override for the attachment filename (defaults to the basename of sourcePath)"),
+    comment: z.string().optional().describe("Optional comment describing the attachment"),
+    minorEdit: z.boolean().optional().describe("If true, no notification email is sent to watchers"),
+    hidden: z.boolean().optional().describe("If true, no notification email or activity stream entry is generated"),
+    allowDuplicated: z.boolean().optional().describe("Allow upload even if an attachment with the same filename already exists"),
+    versionIfExists: z.boolean().optional().describe("If true and an attachment with the same filename already exists, upload as a new version instead of failing")
+  },
+  downloadAttachment: {
+    contentId: z.string().describe("ID of the Confluence content (page) whose attachment(s) to download"),
+    filename: z.string().optional().describe("Exact filename of a single attachment to download. If omitted, all attachments on the content are downloaded."),
+    returnContent: z.enum(['none', 'base64', 'text']).optional().describe("Whether to embed the file bytes in the response: 'none' (default), 'base64' for binary, or 'text' for UTF-8 text."),
+    maxInlineBytes: z.number().optional().describe("Maximum bytes to embed inline when returnContent is base64/text. Larger files are omitted from the inline content. Defaults to 1 MiB.")
+  },
+  downloadAttachmentSaveFields: {
+    save: z.boolean().optional().describe("Save the attachment(s) into the server-configured download directory. Requires disk downloads to be enabled on the server."),
+    saveName: z.string().optional().describe("Optional file name (no directories) to use when saving a single attachment; defaults to the attachment's own name. Existing files are never overwritten.")
   }
 };

package/src/index.ts

@@ -1,7 +1,7 @@
-import { connectServer, createMcpServer, formatToolResponse, initializeRuntimeConfig } from '@atlassian-dc-mcp/common';
+import { connectServer, createMcpServer, formatToolResponse, initializeRuntimeConfig, resolveAttachmentGateway } from '@atlassian-dc-mcp/common';
 import { ConfluenceService, ConfluenceContent, confluenceToolSchemas } from './confluence-service.js';
 import { shapeConfluenceMutationAck } from './confluence-response-mapper.js';
-import { getConfluenceRuntimeConfig, getDefaultPageSize } from './config.js';
+import { CONFLUENCE_PRODUCT, getConfluenceRuntimeConfig, getDefaultPageSize } from './config.js';
 import { createRequire } from 'node:module';
 
 const require = createRequire(import.meta.url);
@@ -141,6 +141,59 @@ server.tool(
   }
 );
 
+const attachmentGateway = resolveAttachmentGateway(CONFLUENCE_PRODUCT);
+
+// Filesystem-reading upload is only registered when the operator explicitly enables it.
+if (attachmentGateway.upload.enabled) {
+  server.tool(
+    "confluence_uploadAttachment",
+    `Upload a local file as an attachment to a Confluence content (page) in the ${confluenceInstanceType}. The file must live under the server-configured upload directory; the path is given relative to that directory.`,
+    confluenceToolSchemas.uploadAttachment,
+    async ({ contentId, sourcePath, filename, comment, minorEdit, hidden, allowDuplicated, versionIfExists }) => {
+      const result = await confluenceService.uploadAttachment(
+        contentId,
+        sourcePath,
+        attachmentGateway.upload,
+        filename,
+        comment,
+        minorEdit,
+        hidden,
+        allowDuplicated,
+        versionIfExists,
+      );
+      return formatToolResponse(result);
+    }
+  );
+}
+
+// Download always returns content inline (no filesystem access). Saving to disk is
+// only offered when the operator enables it, and is confined to the configured directory.
+const downloadSaveEnabled = attachmentGateway.download.enabled;
+server.tool(
+  "confluence_downloadAttachment",
+  `Download one or more attachments from a Confluence content (page) in the ${confluenceInstanceType}. Returns the file content inline (base64 or text). Useful for inspecting a file or moving it elsewhere (e.g. re-uploading to a Jira issue).${downloadSaveEnabled ? ' Can also save into the server-configured download directory; existing files are never overwritten.' : ' Saving to local disk is disabled on this server.'}`,
+  { ...confluenceToolSchemas.downloadAttachment, ...(downloadSaveEnabled ? confluenceToolSchemas.downloadAttachmentSaveFields : {}) },
+  async ({ contentId, filename, returnContent, maxInlineBytes, save, saveName }: {
+    contentId: string;
+    filename?: string;
+    returnContent?: 'none' | 'base64' | 'text';
+    maxInlineBytes?: number;
+    save?: boolean;
+    saveName?: string;
+  }) => {
+    const result = await confluenceService.downloadAttachmentFromContent({
+      contentId,
+      filename,
+      save,
+      saveName,
+      returnContent,
+      maxInlineBytes,
+      downloadSide: attachmentGateway.download,
+    });
+    return formatToolResponse(result);
+  }
+);
+
 server.tool('confluence_searchSpace',
   `Search for spaces in ${confluenceInstanceType}`,
   confluenceToolSchemas.searchSpaces,