@contentrain/mcp 1.9.0 → 1.10.0

package/README.md

@@ -71,9 +71,9 @@ All write operations are designed around git-backed safety:
 
 ## Tool Surface
 
-19 MCP tools with [annotations](https://spec.modelcontextprotocol.io/specification/2025-03-26/server/tools/#annotations) (`readOnlyHint`, `destructiveHint`, `idempotentHint`, and `openWorldHint: false` — every tool operates on the configured repository only) for client safety hints.
+24 MCP tools — 19 core + 5 media — with [annotations](https://spec.modelcontextprotocol.io/specification/2025-03-26/server/tools/#annotations) (`readOnlyHint`, `destructiveHint`, `idempotentHint`, and `openWorldHint: false` everywhere except `contentrain_media_ingest`, which fetches a caller-supplied URL server-side) for client safety hints.
 
-**Tool listing is capability-aware.** `tools/list` only advertises tools the resolved provider + `projectRoot` pair can actually satisfy. A local stdio server lists all 19; a session driven by a remote provider (GitHub/GitLab, no local checkout) lists only the remote-safe subset — `status`, `describe`, `describe_format`, `model_save`, `model_delete`, `content_save`, `content_delete`, `content_list`, `validate`. The requirement map lives in `TOOL_REQUIREMENTS` (`@contentrain/mcp/tools/availability`).
+**Tool listing is capability-aware.** `tools/list` only advertises tools the resolved provider + `projectRoot` pair can actually satisfy. A local stdio server lists the 19 core tools; a session driven by a remote provider (GitHub/GitLab, no local checkout) lists only the remote-safe subset — `status`, `describe`, `describe_format`, `model_save`, `model_delete`, `content_save`, `content_delete`, `content_list`, `validate`. The requirement map lives in `TOOL_REQUIREMENTS` (`@contentrain/mcp/tools/availability`).
 
 | Tool | Purpose | Read-only | Destructive |
 | --- | --- | --- | --- |
@@ -96,6 +96,13 @@ All write operations are designed around git-backed safety:
 | `contentrain_scan` | Graph- and candidate-based hardcoded string scan | Yes | — |
 | `contentrain_apply` | Normalize extract/reuse execution with dry-run support | — | — |
 | `contentrain_bulk` | Bulk locale copy, status updates, and deletes | — | — |
+| `contentrain_media_list` | List media assets (search, tag filter, cursor pagination) | Yes | — |
+| `contentrain_media_get` | Get one media asset by id | Yes | — |
+| `contentrain_media_ingest` | Ingest an asset from a source URL (provider fetches server-side) | — | — |
+| `contentrain_media_update` | Update asset metadata (alt, tags, filename) | — | — |
+| `contentrain_media_delete` | Delete an asset from the media stack | — | **Yes** |
+
+The five `contentrain_media_*` tools are a deterministic passthrough to the provider's optional media facet (`RepoProvider.media`) and are registered **only when the provider exposes one** (e.g. Studio MCP Cloud). Local stdio servers and plain GitHub/GitLab providers never list them. Ingest is URL-based (MCP has no binary channel); the provider implementation owns SSRF/MIME/size policy for the fetch.
 
 ## Quick Start
 
@@ -257,7 +264,7 @@ These are intended for Contentrain tooling and advanced integrations, not for di
 Key design decisions in this package:
 
 - local-first **by default** — stdio transport + LocalProvider works without any network dependency
-- provider-agnostic engine — the same 19 tools run over LocalProvider, GitHubProvider, or GitLabProvider behind a single `RepoProvider` contract
+- provider-agnostic engine — the same core tools run over LocalProvider, GitHubProvider, or GitLabProvider behind a single `RepoProvider` contract; media tools ride the provider's optional media facet
 - remote provider SDKs (`@octokit/rest`, `@gitbeaker/rest`) are optional peer dependencies — pulled in only when their provider is used
 - JSON-only content storage
 - git-backed write workflow (worktree transaction locally, single atomic commit over the Git Data / REST APIs remotely)

package/dist/{annotations-DSzewhL4.mjs → annotations-D3tlsF38.mjs}

@@ -2,9 +2,9 @@
 /**
 * Centralized tool annotations registry.
 * MCP clients use these hints to distinguish read-only vs. write vs. destructive tools.
-* `openWorldHint` is `false` across the board: every tool operates on the
-* configured content repository only — none reaches out to arbitrary
-* external systems.
+* `openWorldHint` is `false` everywhere except `contentrain_media_ingest`,
+* which fetches a caller-supplied external URL server-side; every other
+* tool operates on the configured content repository only.
 *
 * Also serves as the **single source of truth for the tool name list**. Consumers
 * that need to enumerate every registered tool (e.g. parity tests in
@@ -144,6 +144,41 @@ const TOOL_ANNOTATIONS = {
 		destructiveHint: false,
 		idempotentHint: false,
 		openWorldHint: false
+	},
+	contentrain_media_list: {
+		title: "List Media Assets",
+		readOnlyHint: true,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: false
+	},
+	contentrain_media_get: {
+		title: "Get Media Asset",
+		readOnlyHint: true,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: false
+	},
+	contentrain_media_ingest: {
+		title: "Ingest Media From URL",
+		readOnlyHint: false,
+		destructiveHint: false,
+		idempotentHint: false,
+		openWorldHint: true
+	},
+	contentrain_media_update: {
+		title: "Update Media Metadata",
+		readOnlyHint: false,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: false
+	},
+	contentrain_media_delete: {
+		title: "Delete Media Asset",
+		readOnlyHint: false,
+		destructiveHint: true,
+		idempotentHint: false,
+		openWorldHint: false
 	}
 };
 /**
@@ -157,4 +192,4 @@ const TOOL_NAMES = Object.freeze(Object.keys(TOOL_ANNOTATIONS));
 //#endregion
 export { TOOL_NAMES as n, TOOL_ANNOTATIONS as t };
 
-//# sourceMappingURL=annotations-DSzewhL4.mjs.map
+//# sourceMappingURL=annotations-D3tlsF38.mjs.map

package/dist/annotations-D3tlsF38.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotations-D3tlsF38.mjs","names":[],"sources":["../src/tools/annotations.ts"],"sourcesContent":["import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js'\n\n/**\n * Centralized tool annotations registry.\n * MCP clients use these hints to distinguish read-only vs. write vs. destructive tools.\n * `openWorldHint` is `false` everywhere except `contentrain_media_ingest`,\n * which fetches a caller-supplied external URL server-side; every other\n * tool operates on the configured content repository only.\n *\n * Also serves as the **single source of truth for the tool name list**. Consumers\n * that need to enumerate every registered tool (e.g. parity tests in\n * `@contentrain/rules` / `@contentrain/skills`) should import `TOOL_NAMES` below\n * rather than hardcoding the list.\n */\nexport const TOOL_ANNOTATIONS: Record<string, ToolAnnotations> = {\n  // ─── Context (read-only) ───\n  contentrain_status: {\n    title: 'Project Status',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_describe: {\n    title: 'Describe Model',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_describe_format: {\n    title: 'Describe Format',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_doctor: {\n    title: 'Project Health Report',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n\n  // ─── Setup (write + git) ───\n  contentrain_init: {\n    title: 'Initialize Project',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n  contentrain_scaffold: {\n    title: 'Scaffold Template',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Model (write + git) ───\n  contentrain_model_save: {\n    title: 'Save Model',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_model_delete: {\n    title: 'Delete Model',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Content (mixed) ───\n  contentrain_content_save: {\n    title: 'Save Content',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_content_delete: {\n    title: 'Delete Content',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n  contentrain_content_list: {\n    title: 'List Content',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n\n  // ─── Workflow (mixed) ───\n  contentrain_validate: {\n    title: 'Validate Project',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_submit: {\n    title: 'Submit Branches',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_merge: {\n    title: 'Merge Branch',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n  contentrain_branch_list: {\n    title: 'List Branches',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_branch_delete: {\n    title: 'Delete Branch',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Normalize (mixed) ───\n  contentrain_scan: {\n    title: 'Scan Source Code',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_apply: {\n    title: 'Apply Normalize',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Bulk (write + git) ───\n  contentrain_bulk: {\n    title: 'Bulk Operations',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n\n  // ─── Media (provider media facet — registered only when RepoProvider.media is present) ───\n  contentrain_media_list: {\n    title: 'List Media Assets',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_media_get: {\n    title: 'Get Media Asset',\n    readOnlyHint: true,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_media_ingest: {\n    title: 'Ingest Media From URL',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: false,\n    openWorldHint: true,\n  },\n  contentrain_media_update: {\n    title: 'Update Media Metadata',\n    readOnlyHint: false,\n    destructiveHint: false,\n    idempotentHint: true,\n    openWorldHint: false,\n  },\n  contentrain_media_delete: {\n    title: 'Delete Media Asset',\n    readOnlyHint: false,\n    destructiveHint: true,\n    idempotentHint: false,\n    openWorldHint: false,\n  },\n}\n\n/**\n * Canonical list of every registered MCP tool name, derived from the\n * single source of truth above. Re-exported here with a stable name so\n * parity tests in sibling packages (`@contentrain/rules`,\n * `@contentrain/skills`) can assert against it without depending on\n * `TOOL_ANNOTATIONS` internals.\n */\nexport const TOOL_NAMES: readonly string[] = Object.freeze(Object.keys(TOOL_ANNOTATIONS))\n"],"mappings":";;;;;;;;;;;;;AAcA,MAAa,mBAAoD;CAE/D,oBAAoB;EAClB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,sBAAsB;EACpB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,6BAA6B;EAC3B,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,oBAAoB;EAClB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,kBAAkB;EAChB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,sBAAsB;EACpB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,wBAAwB;EACtB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,4BAA4B;EAC1B,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,sBAAsB;EACpB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,oBAAoB;EAClB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,mBAAmB;EACjB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,yBAAyB;EACvB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,2BAA2B;EACzB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,kBAAkB;EAChB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,mBAAmB;EACjB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,kBAAkB;EAChB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CAGD,wBAAwB;EACtB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,uBAAuB;EACrB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACD,0BAA0B;EACxB,OAAO;EACP,cAAc;EACd,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;EAChB;CACF;;;;;;;;AASD,MAAa,aAAgC,OAAO,OAAO,OAAO,KAAK,iBAAiB,CAAC"}

package/dist/{availability-Bj9zOfEn.mjs → availability-sWWRz2W0.mjs}

@@ -27,7 +27,12 @@ const TOOL_REQUIREMENTS = {
 	contentrain_apply: {
 		projectRoot: true,
 		capabilities: ["sourceRead"]
-	}
+	},
+	contentrain_media_list: { media: true },
+	contentrain_media_get: { media: true },
+	contentrain_media_ingest: { media: true },
+	contentrain_media_update: { media: true },
+	contentrain_media_delete: { media: true }
 };
 /**
 * Whether a tool can ever succeed for this provider + projectRoot pair.
@@ -39,9 +44,10 @@ function isToolAvailable(name, provider, projectRoot) {
 	const req = TOOL_REQUIREMENTS[name];
 	if (!req) return true;
 	if (req.projectRoot && !projectRoot) return false;
+	if (req.media && !provider.media) return false;
 	return (req.capabilities ?? []).every((cap) => provider.capabilities[cap]);
 }
 //#endregion
 export { isToolAvailable as n, TOOL_REQUIREMENTS as t };
 
-//# sourceMappingURL=availability-Bj9zOfEn.mjs.map
+//# sourceMappingURL=availability-sWWRz2W0.mjs.map

package/dist/availability-sWWRz2W0.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"availability-sWWRz2W0.mjs","names":[],"sources":["../src/tools/availability.ts"],"sourcesContent":["import type { ProviderCapabilities } from '@contentrain/types'\n\n/**\n * Declarative availability requirements for capability-gated tools.\n *\n * This is the single source of truth `createServer` uses to decide which\n * tools to register for a given provider + projectRoot combination. Tools\n * absent from this map are always available. The requirements mirror the\n * call-time guards inside each tool handler (`capabilityError`) — those\n * guards remain as defense in depth, but a client talking to a remote\n * provider no longer sees tools that could never succeed in `tools/list`.\n *\n * `contentrain_validate` is intentionally NOT listed: read-only validate\n * works over any provider; only `fix: true` needs a local worktree and\n * keeps its call-time guard.\n */\nexport interface ToolRequirements {\n  /** Tool needs a local project root on disk (worktree git transactions, IDE config, AST scans). */\n  projectRoot?: boolean\n  /** Provider capability flags that must all be `true`. */\n  capabilities?: readonly (keyof ProviderCapabilities)[]\n  /** Tool needs the provider's optional media facet (`RepoProvider.media`). */\n  media?: boolean\n}\n\nexport const TOOL_REQUIREMENTS: Readonly<Record<string, ToolRequirements>> = {\n  contentrain_init: { projectRoot: true },\n  contentrain_scaffold: { projectRoot: true },\n  contentrain_doctor: { projectRoot: true },\n  contentrain_bulk: { projectRoot: true },\n  contentrain_submit: { projectRoot: true, capabilities: ['localWorktree', 'pushRemote'] },\n  contentrain_merge: { projectRoot: true, capabilities: ['localWorktree'] },\n  contentrain_branch_list: { projectRoot: true, capabilities: ['localWorktree'] },\n  contentrain_branch_delete: { projectRoot: true, capabilities: ['localWorktree'] },\n  contentrain_scan: { projectRoot: true, capabilities: ['astScan'] },\n  // Registration requires the extract path (sourceRead); reuse mode\n  // additionally needs sourceWrite, which stays a call-time check because\n  // it depends on the `mode` input.\n  contentrain_apply: { projectRoot: true, capabilities: ['sourceRead'] },\n  // Media tools exist only where the provider exposes a media stack\n  // (Studio MCP Cloud). Local and plain remote providers never list them.\n  contentrain_media_list: { media: true },\n  contentrain_media_get: { media: true },\n  contentrain_media_ingest: { media: true },\n  contentrain_media_update: { media: true },\n  contentrain_media_delete: { media: true },\n}\n\n/**\n * Whether a tool can ever succeed for this provider + projectRoot pair.\n * Used by `createServer` to filter registration; also exported for\n * embedders (e.g. Studio) that want to reason about the effective tool\n * surface without spinning up a server.\n */\nexport function isToolAvailable(\n  name: string,\n  provider: { capabilities: ProviderCapabilities, media?: unknown },\n  projectRoot: string | undefined,\n): boolean {\n  const req = TOOL_REQUIREMENTS[name]\n  if (!req) return true\n  if (req.projectRoot && !projectRoot) return false\n  if (req.media && !provider.media) return false\n  return (req.capabilities ?? []).every(cap => provider.capabilities[cap])\n}\n"],"mappings":";AAyBA,MAAa,oBAAgE;CAC3E,kBAAkB,EAAE,aAAa,MAAM;CACvC,sBAAsB,EAAE,aAAa,MAAM;CAC3C,oBAAoB,EAAE,aAAa,MAAM;CACzC,kBAAkB,EAAE,aAAa,MAAM;CACvC,oBAAoB;EAAE,aAAa;EAAM,cAAc,CAAC,iBAAiB,aAAa;EAAE;CACxF,mBAAmB;EAAE,aAAa;EAAM,cAAc,CAAC,gBAAgB;EAAE;CACzE,yBAAyB;EAAE,aAAa;EAAM,cAAc,CAAC,gBAAgB;EAAE;CAC/E,2BAA2B;EAAE,aAAa;EAAM,cAAc,CAAC,gBAAgB;EAAE;CACjF,kBAAkB;EAAE,aAAa;EAAM,cAAc,CAAC,UAAU;EAAE;CAIlE,mBAAmB;EAAE,aAAa;EAAM,cAAc,CAAC,aAAa;EAAE;CAGtE,wBAAwB,EAAE,OAAO,MAAM;CACvC,uBAAuB,EAAE,OAAO,MAAM;CACtC,0BAA0B,EAAE,OAAO,MAAM;CACzC,0BAA0B,EAAE,OAAO,MAAM;CACzC,0BAA0B,EAAE,OAAO,MAAM;CAC1C;;;;;;;AAQD,SAAgB,gBACd,MACA,UACA,aACS;CACT,MAAM,MAAM,kBAAkB;AAC9B,KAAI,CAAC,IAAK,QAAO;AACjB,KAAI,IAAI,eAAe,CAAC,YAAa,QAAO;AAC5C,KAAI,IAAI,SAAS,CAAC,SAAS,MAAO,QAAO;AACzC,SAAQ,IAAI,gBAAgB,EAAE,EAAE,OAAM,QAAO,SAAS,aAAa,KAAK"}

package/dist/{content-manager-BExZy6Eu.d.mts → content-manager-DcmNwvmq.d.mts}

@@ -1,4 +1,4 @@
-import { d as RepoReader } from "./index-6yasXNLQ.mjs";
+import { _ as RepoReader } from "./index-DDX-qYNw.mjs";
 import { ContentrainConfig, LocaleStrategy, ModelDefinition, Vocabulary, parseMarkdownFrontmatter as parseFrontmatter, serializeMarkdownFrontmatter as serializeFrontmatter, validateEntryId as validateEntryId$1, validateLocale as validateLocale$1, validateSlug as validateSlug$1 } from "@contentrain/types";
 
 //#region src/core/content-manager.d.ts
@@ -60,4 +60,4 @@ declare function readContent(projectRoot: string, model: ModelDefinition, opts:
 }): Promise<unknown>;
 //#endregion
 export { writeContent as _, deleteContent as a, readContent as c, resolveLocaleStrategy as d, resolveMdFilePath as f, validateSlug$1 as g, validateLocale$1 as h, WriteResult as i, resolveContentDir as l, validateEntryId$1 as m, DeleteOpts as n, listContent as o, serializeFrontmatter as p, ListOpts as r, parseFrontmatter as s, ContentEntry as t, resolveJsonFilePath as u };
-//# sourceMappingURL=content-manager-BExZy6Eu.d.mts.map
+//# sourceMappingURL=content-manager-DcmNwvmq.d.mts.map

package/dist/{content-manager-BExZy6Eu.d.mts.map → content-manager-DcmNwvmq.d.mts.map}

@@ -1 +1 @@
-{"version":3,"file":"content-manager-BExZy6Eu.d.mts","names":[],"sources":["../src/core/content-manager.ts"],"mappings":";;;;iBAgBgB,iBAAA,CAAkB,WAAA,UAAqB,KAAA,EAAO,eAAA;AAAA,iBAO9C,qBAAA,CAAsB,KAAA,EAAO,eAAA,GAAkB,cAAA;;iBAK/C,mBAAA,CAAoB,GAAA,UAAa,KAAA,EAAO,eAAA,EAAiB,MAAA;;iBAczD,iBAAA,CAAkB,GAAA,UAAa,KAAA,EAAO,eAAA,EAAiB,MAAA,UAAgB,IAAA;AAAA,UAetE,YAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA,EAAM,MAAA;AAAA;AAAA,UAGS,WAAA;EACf,MAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;AAAA;AAAA,UAGe,UAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA;AAAA;AAAA,UAGe,QAAA;EACf,MAAA;EACA,MAAA,GAAS,MAAA;EACT,OAAA;EACA,KAAA;EACA,MAAA;AAAA;AAAA,iBAsBoB,YAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,OAAA,EAAS,YAAA,IACT,MAAA,EAAQ,iBAAA,EACR,UAAA,GAAa,UAAA,UACZ,OAAA,CAAQ,WAAA;AAAA,iBAyIW,aAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,UAAA,GACL,OAAA;;;;;AApMH;;;;;;;;;;;iBAoUgB,WAAA,CACd,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBACa,WAAA,CACd,MAAA,EAAQ,UAAA,EACR,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBA0QmB,WAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA;EAAQ,MAAA;EAAgB,OAAA;EAAkB,IAAA;AAAA,IACzC,OAAA"}
+{"version":3,"file":"content-manager-DcmNwvmq.d.mts","names":[],"sources":["../src/core/content-manager.ts"],"mappings":";;;;iBAgBgB,iBAAA,CAAkB,WAAA,UAAqB,KAAA,EAAO,eAAA;AAAA,iBAO9C,qBAAA,CAAsB,KAAA,EAAO,eAAA,GAAkB,cAAA;;iBAK/C,mBAAA,CAAoB,GAAA,UAAa,KAAA,EAAO,eAAA,EAAiB,MAAA;;iBAczD,iBAAA,CAAkB,GAAA,UAAa,KAAA,EAAO,eAAA,EAAiB,MAAA,UAAgB,IAAA;AAAA,UAetE,YAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA,EAAM,MAAA;AAAA;AAAA,UAGS,WAAA;EACf,MAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;EACA,UAAA;AAAA;AAAA,UAGe,UAAA;EACf,EAAA;EACA,IAAA;EACA,MAAA;EACA,IAAA;AAAA;AAAA,UAGe,QAAA;EACf,MAAA;EACA,MAAA,GAAS,MAAA;EACT,OAAA;EACA,KAAA;EACA,MAAA;AAAA;AAAA,iBAsBoB,YAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,OAAA,EAAS,YAAA,IACT,MAAA,EAAQ,iBAAA,EACR,UAAA,GAAa,UAAA,UACZ,OAAA,CAAQ,WAAA;AAAA,iBAyIW,aAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,UAAA,GACL,OAAA;;;;;AApMH;;;;;;;;;;;iBAoUgB,WAAA,CACd,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBACa,WAAA,CACd,MAAA,EAAQ,UAAA,EACR,KAAA,EAAO,eAAA,EACP,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,iBAAA,GACP,OAAA;AAAA,iBA0QmB,WAAA,CACpB,WAAA,UACA,KAAA,EAAO,eAAA,EACP,IAAA;EAAQ,MAAA;EAAgB,OAAA;EAAkB,IAAA;AAAA,IACzC,OAAA"}

package/dist/core/config.d.mts

@@ -1,4 +1,4 @@
-import { d as RepoReader } from "../index-6yasXNLQ.mjs";
+import { _ as RepoReader } from "../index-DDX-qYNw.mjs";
 import { ContentrainConfig, Vocabulary } from "@contentrain/types";
 
 //#region src/core/config.d.ts

package/dist/core/content-manager.d.mts

@@ -1,2 +1,2 @@
-import { _ as writeContent, a as deleteContent, c as readContent, d as resolveLocaleStrategy, f as resolveMdFilePath, g as validateSlug, h as validateLocale, i as WriteResult, l as resolveContentDir, m as validateEntryId, n as DeleteOpts, o as listContent, p as serializeFrontmatter, r as ListOpts, s as parseFrontmatter, t as ContentEntry, u as resolveJsonFilePath } from "../content-manager-BExZy6Eu.mjs";
+import { _ as writeContent, a as deleteContent, c as readContent, d as resolveLocaleStrategy, f as resolveMdFilePath, g as validateSlug, h as validateLocale, i as WriteResult, l as resolveContentDir, m as validateEntryId, n as DeleteOpts, o as listContent, p as serializeFrontmatter, r as ListOpts, s as parseFrontmatter, t as ContentEntry, u as resolveJsonFilePath } from "../content-manager-DcmNwvmq.mjs";
 export { ContentEntry, DeleteOpts, ListOpts, WriteResult, deleteContent, listContent, parseFrontmatter, readContent, resolveContentDir, resolveJsonFilePath, resolveLocaleStrategy, resolveMdFilePath, serializeFrontmatter, validateEntryId, validateLocale, validateSlug, writeContent };

package/dist/core/context.d.mts

@@ -1,4 +1,4 @@
-import { a as FileChange, d as RepoReader } from "../index-6yasXNLQ.mjs";
+import { _ as RepoReader, a as FileChange } from "../index-DDX-qYNw.mjs";
 import { ContextJson, ContextSource } from "@contentrain/types";
 
 //#region src/core/context.d.ts

package/dist/core/contracts/index.d.mts

@@ -1,2 +1,2 @@
-import { a as FileChange, c as MergeResult, d as RepoReader, f as RepoWriter, i as CommitAuthor, l as ProviderCapabilities, n as Branch, o as FileDiff, r as Commit, s as LOCAL_CAPABILITIES, t as ApplyPlanInput, u as RepoProvider } from "../../index-6yasXNLQ.mjs";
-export { ApplyPlanInput, Branch, Commit, CommitAuthor, FileChange, FileDiff, LOCAL_CAPABILITIES, MergeResult, ProviderCapabilities, RepoProvider, RepoReader, RepoWriter };
+import { _ as RepoReader, a as FileChange, c as MediaAsset, d as MediaListResult, f as MediaProvider, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, l as MediaIngestInput, m as MergeResult, n as Branch, o as FileDiff, p as MediaUpdateInput, r as Commit, s as LOCAL_CAPABILITIES, t as ApplyPlanInput, u as MediaListOptions, v as RepoWriter } from "../../index-DDX-qYNw.mjs";
+export { ApplyPlanInput, Branch, Commit, CommitAuthor, FileChange, FileDiff, LOCAL_CAPABILITIES, MediaAsset, MediaIngestInput, MediaListOptions, MediaListResult, MediaProvider, MediaUpdateInput, MergeResult, ProviderCapabilities, RepoProvider, RepoReader, RepoWriter };

package/dist/core/model-manager.d.mts

@@ -1,4 +1,4 @@
-import { d as RepoReader } from "../index-6yasXNLQ.mjs";
+import { _ as RepoReader } from "../index-DDX-qYNw.mjs";
 import { ModelDefinition, ModelSummary, ModelSummary as ModelSummary$1 } from "@contentrain/types";
 import { z } from "zod";
 

package/dist/core/ops/index.d.mts

@@ -1,5 +1,5 @@
-import { a as FileChange, d as RepoReader } from "../../index-6yasXNLQ.mjs";
-import { t as ContentEntry } from "../../content-manager-BExZy6Eu.mjs";
+import { _ as RepoReader, a as FileChange } from "../../index-DDX-qYNw.mjs";
+import { t as ContentEntry } from "../../content-manager-DcmNwvmq.mjs";
 import { ContentrainConfig, ModelDefinition, Vocabulary } from "@contentrain/types";
 
 //#region src/core/ops/apply-to-worktree.d.ts

package/dist/core/overlay-reader.d.mts

@@ -1,4 +1,4 @@
-import { a as FileChange, d as RepoReader } from "../index-6yasXNLQ.mjs";
+import { _ as RepoReader, a as FileChange } from "../index-DDX-qYNw.mjs";
 
 //#region src/core/overlay-reader.d.ts
 /**

package/dist/core/validator/index.d.mts

@@ -1,4 +1,4 @@
-import { d as RepoReader } from "../../index-6yasXNLQ.mjs";
+import { _ as RepoReader } from "../../index-DDX-qYNw.mjs";
 import { EntryMeta, FieldDef, ModelDefinition, ValidationError, ValidationResult } from "@contentrain/types";
 
 //#region src/core/validator/entry.d.ts

package/dist/index-DDX-qYNw.d.mts

@@ -0,0 +1,2 @@
+import { ApplyPlanInput, Branch, Commit, CommitAuthor, FileChange, FileDiff, LOCAL_CAPABILITIES, MediaAsset, MediaIngestInput, MediaListOptions, MediaListResult, MediaProvider, MediaUpdateInput, MergeResult, ProviderCapabilities as ProviderCapabilities$1, RepoProvider, RepoReader, RepoWriter } from "@contentrain/types";
+export { RepoReader as _, FileChange as a, MediaAsset as c, MediaListResult as d, MediaProvider as f, RepoProvider as g, ProviderCapabilities$1 as h, CommitAuthor as i, MediaIngestInput as l, MergeResult as m, Branch as n, FileDiff as o, MediaUpdateInput as p, Commit as r, LOCAL_CAPABILITIES as s, ApplyPlanInput as t, MediaListOptions as u, RepoWriter as v };

package/dist/index.mjs

@@ -12,8 +12,8 @@ import "./id-DV_T9Ic8.mjs";
 import "./transaction-qliKvBRL.mjs";
 import "./local-BZEUWBoC.mjs";
 import "./detect-wVSI9VuY.mjs";
-import "./annotations-DSzewhL4.mjs";
-import { n as createServer } from "./server-B6_fzRmK.mjs";
+import "./annotations-D3tlsF38.mjs";
+import { n as createServer } from "./server-DtabGAY6.mjs";
 import "./validator-8vaPxSba.mjs";
 import "./scan-config-BGUflS8t.mjs";
 import "./graph-builder-CRUX_8mA.mjs";

package/dist/providers/github/index.d.mts

@@ -1,4 +1,4 @@
-import { c as MergeResult, d as RepoReader, i as CommitAuthor, l as ProviderCapabilities, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput, u as RepoProvider } from "../../index-6yasXNLQ.mjs";
+import { _ as RepoReader, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput } from "../../index-DDX-qYNw.mjs";
 import { Octokit } from "@octokit/rest";
 
 //#region src/providers/github/app-auth.d.ts

package/dist/providers/gitlab/index.d.mts

@@ -1,4 +1,4 @@
-import { c as MergeResult, d as RepoReader, i as CommitAuthor, l as ProviderCapabilities, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput, u as RepoProvider } from "../../index-6yasXNLQ.mjs";
+import { _ as RepoReader, g as RepoProvider, h as ProviderCapabilities, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit, t as ApplyPlanInput } from "../../index-DDX-qYNw.mjs";
 import { Gitlab } from "@gitbeaker/rest";
 
 //#region src/providers/gitlab/capabilities.d.ts

package/dist/providers/local/index.d.mts

@@ -1,4 +1,4 @@
-import { a as FileChange, c as MergeResult, d as RepoReader, i as CommitAuthor, l as ProviderCapabilities$1, n as Branch, o as FileDiff, r as Commit, u as RepoProvider } from "../../index-6yasXNLQ.mjs";
+import { _ as RepoReader, a as FileChange, g as RepoProvider, h as ProviderCapabilities$1, i as CommitAuthor, m as MergeResult, n as Branch, o as FileDiff, r as Commit } from "../../index-DDX-qYNw.mjs";
 import { SyncResult, WorkflowMode } from "@contentrain/types";
 
 //#region src/providers/local/types.d.ts

package/dist/server/http/index.d.mts

@@ -1,4 +1,4 @@
-import { r as ToolProvider } from "../../server-B1KfvywF.mjs";
+import { r as ToolProvider } from "../../server-vA1tM7DA.mjs";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import http from "node:http";
 

package/dist/server/http/index.mjs

@@ -11,8 +11,8 @@ import "../../id-DV_T9Ic8.mjs";
 import "../../transaction-qliKvBRL.mjs";
 import "../../local-BZEUWBoC.mjs";
 import "../../detect-wVSI9VuY.mjs";
-import "../../annotations-DSzewhL4.mjs";
-import { n as createServer } from "../../server-B6_fzRmK.mjs";
+import "../../annotations-D3tlsF38.mjs";
+import { n as createServer } from "../../server-DtabGAY6.mjs";
 import "../../validator-8vaPxSba.mjs";
 import "../../scan-config-BGUflS8t.mjs";
 import "../../graph-builder-CRUX_8mA.mjs";

package/dist/{server-B6_fzRmK.mjs → server-DtabGAY6.mjs}

@@ -8,9 +8,9 @@ import { n as readContext } from "./context-CYN__o3Q.mjs";
 import { a as deleteRemoteBranch, c as pruneMergedRemoteBranches, i as cleanupMergedBranches, n as checkBranchHealth, s as listRemoteCrBranches } from "./branch-lifecycle-D7tXOE4f.mjs";
 import { i as mergeBranch, n as createTransaction, r as ensureContentBranch, t as buildBranchName } from "./transaction-qliKvBRL.mjs";
 import { n as isMerged, t as LocalProvider } from "./local-BZEUWBoC.mjs";
-import { n as isToolAvailable, t as TOOL_REQUIREMENTS } from "./availability-Bj9zOfEn.mjs";
+import { n as isToolAvailable, t as TOOL_REQUIREMENTS } from "./availability-sWWRz2W0.mjs";
 import { t as detectStack } from "./detect-wVSI9VuY.mjs";
-import { t as TOOL_ANNOTATIONS } from "./annotations-DSzewhL4.mjs";
+import { t as TOOL_ANNOTATIONS } from "./annotations-D3tlsF38.mjs";
 import { n as listTemplates, t as getTemplate } from "./templates-D6EllixQ.mjs";
 import { t as validateProject } from "./validator-8vaPxSba.mjs";
 import { t as OverlayReader } from "./overlay-reader-BOb105gS.mjs";
@@ -2368,8 +2368,137 @@ function registerDoctorTools(server, _provider, projectRoot) {
 	});
 }
 //#endregion
+//#region src/tools/media.ts
+/**
+* Media tools — a deterministic passthrough to the provider's optional
+* media facet (`RepoProvider.media`). Registration is capability-aware:
+* `createServer` skips all five tools when the provider has no media
+* stack, so the guard below is defense in depth only.
+*
+* The facet closes the discovery loop for external agents: list assets →
+* pick a `media/...` path → reference it via `contentrain_content_save`
+* (which normalizes it to an absolute delivery URL when `mediaBaseUrl`
+* is set). Ingest is URL-based — MCP has no binary channel — and the
+* provider implementation owns SSRF/MIME/size policy for the fetch.
+*/
+function mediaUnavailable(tool) {
+	return {
+		content: [{
+			type: "text",
+			text: JSON.stringify({
+				error: `${tool} requires a provider with a media stack.`,
+				capability_required: "media",
+				hint: "Media tools are available when MCP is driven by a media-capable provider (e.g. Studio MCP Cloud). Local and plain git providers do not expose one."
+			})
+		}],
+		isError: true
+	};
+}
+function mediaError(error, stage) {
+	return {
+		content: [{
+			type: "text",
+			text: JSON.stringify({ ...normalizeOperationError(error, stage) })
+		}],
+		isError: true
+	};
+}
+function ok(payload) {
+	return { content: [{
+		type: "text",
+		text: JSON.stringify(payload)
+	}] };
+}
+function registerMediaTools(server, provider, _projectRoot) {
+	server.tool("contentrain_media_list", "List media assets from the provider media stack. Returns storage paths (media/...) usable in media/image/file fields via contentrain_content_save, plus delivery URLs when available. Supports search, tag filter, and cursor pagination.", {
+		search: z.string().optional().describe("Substring match on filename/path/alt"),
+		tag: z.string().optional().describe("Only assets carrying this tag"),
+		limit: z.number().int().min(1).max(100).optional().describe("Page size. Default: provider-defined"),
+		cursor: z.string().optional().describe("Opaque cursor from a previous response")
+	}, TOOL_ANNOTATIONS["contentrain_media_list"], async (input) => {
+		if (!provider.media) return mediaUnavailable("contentrain_media_list");
+		try {
+			const result = await provider.media.list(input);
+			return ok({
+				assets: result.assets,
+				next_cursor: result.nextCursor,
+				total: result.total
+			});
+		} catch (error) {
+			return mediaError(error, "media_list");
+		}
+	});
+	server.tool("contentrain_media_get", "Get a single media asset by id, including its storage path, delivery URL, and metadata.", { id: z.string().describe("Asset id (from contentrain_media_list)") }, TOOL_ANNOTATIONS["contentrain_media_get"], async (input) => {
+		if (!provider.media) return mediaUnavailable("contentrain_media_get");
+		try {
+			const asset = await provider.media.get(input.id);
+			if (!asset) return {
+				content: [{
+					type: "text",
+					text: JSON.stringify({
+						error: `Media asset not found: ${input.id}`,
+						hint: "Use contentrain_media_list to discover asset ids."
+					})
+				}],
+				isError: true
+			};
+			return ok({ asset });
+		} catch (error) {
+			return mediaError(error, "media_get");
+		}
+	});
+	server.tool("contentrain_media_ingest", "Ingest a media asset from a source URL. The provider fetches the URL server-side under its own SSRF/MIME/size policy and stores the asset in the media stack. Returns the stored asset with its media/... path.", {
+		url: z.string().url().describe("Source URL to fetch server-side"),
+		filename: z.string().optional().describe("Target filename override"),
+		alt: z.string().optional().describe("Alt text for the asset"),
+		tags: z.array(z.string()).max(20).optional().describe("Tags to attach")
+	}, TOOL_ANNOTATIONS["contentrain_media_ingest"], async (input) => {
+		if (!provider.media) return mediaUnavailable("contentrain_media_ingest");
+		try {
+			return ok({
+				status: "ingested",
+				asset: await provider.media.ingest(input)
+			});
+		} catch (error) {
+			return mediaError(error, "media_ingest");
+		}
+	});
+	server.tool("contentrain_media_update", "Update metadata (alt text, tags, filename) of an existing media asset. Does not touch the binary.", {
+		id: z.string().describe("Asset id to update"),
+		alt: z.string().optional().describe("New alt text"),
+		tags: z.array(z.string()).max(20).optional().describe("Replacement tag list"),
+		filename: z.string().optional().describe("New filename")
+	}, TOOL_ANNOTATIONS["contentrain_media_update"], async (input) => {
+		if (!provider.media) return mediaUnavailable("contentrain_media_update");
+		try {
+			const { id, ...patch } = input;
+			return ok({
+				status: "updated",
+				asset: await provider.media.update(id, patch)
+			});
+		} catch (error) {
+			return mediaError(error, "media_update");
+		}
+	});
+	server.tool("contentrain_media_delete", "Delete a media asset from the media stack. Content entries referencing its path are NOT rewritten — check references before deleting.", {
+		id: z.string().describe("Asset id to delete"),
+		confirm: z.literal(true).describe("Must be true to confirm deletion")
+	}, TOOL_ANNOTATIONS["contentrain_media_delete"], async (input) => {
+		if (!provider.media) return mediaUnavailable("contentrain_media_delete");
+		try {
+			await provider.media.delete(input.id);
+			return ok({
+				status: "deleted",
+				id: input.id
+			});
+		} catch (error) {
+			return mediaError(error, "media_delete");
+		}
+	});
+}
+//#endregion
 //#region package.json
-var version = "1.9.0";
+var version = "1.10.0";
 //#endregion
 //#region src/server.ts
 /**
@@ -2410,6 +2539,7 @@ function createServer(input) {
 	registerNormalizeTools(server, provider, projectRoot);
 	registerBulkTools(server, provider, projectRoot);
 	registerDoctorTools(server, provider, projectRoot);
+	registerMediaTools(server, provider, projectRoot);
 	return server;
 }
 function resolveServerContext(input) {
@@ -2438,4 +2568,4 @@ function resolveServerContext(input) {
 //#endregion
 export { createServer as n, DEFAULT_INSTRUCTIONS as t };
 
-//# sourceMappingURL=server-B6_fzRmK.mjs.map
+//# sourceMappingURL=server-DtabGAY6.mjs.map