euparliamentmonitor 0.8.56 → 0.8.58

package/README.md

@@ -136,7 +136,7 @@ The published site is the audience-facing companion to this npm/TypeScript packa
 
 **MCP Server Integration**: The project uses the
 [European-Parliament-MCP-Server](https://github.com/Hack23/European-Parliament-MCP-Server)
-v1.2.20 for accessing real EU Parliament data via the Model Context Protocol.
+v1.2.21 for accessing real EU Parliament data via the Model Context Protocol.
 
 - **MCP Server Status**: ✅ Fully operational — 60+ EP data tools available
   (feeds, direct lookups, analytical tools, intelligence correlation)
@@ -432,7 +432,7 @@ import type { ArticleCategory, LanguageCode } from 'euparliamentmonitor/types';
 
 ## 🔌 Data Sources
 
-**Primary — European Parliament MCP Server** ([Hack23/European-Parliament-MCP-Server](https://github.com/Hack23/European-Parliament-MCP-Server) v1.2.20+, fully operational):
+**Primary — European Parliament MCP Server** ([Hack23/European-Parliament-MCP-Server](https://github.com/Hack23/European-Parliament-MCP-Server) v1.2.21+, fully operational):
 
 - 🗳️ Plenary sessions, voting records, roll-call votes
 - 📜 Adopted texts, motions, resolutions, urgency files

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "euparliamentmonitor",
-  "version": "0.8.56",
+  "version": "0.8.58",
   "type": "module",
   "description": "European Parliament Intelligence Platform - Monitor political activity with systematic transparency",
   "main": "scripts/index.js",
@@ -140,8 +140,8 @@
     "@types/markdown-it": "^14.1.2",
     "@types/node": "25.6.0",
     "@types/papaparse": "5.5.2",
-    "@typescript-eslint/eslint-plugin": "8.59.1",
-    "@typescript-eslint/parser": "8.59.1",
+    "@typescript-eslint/eslint-plugin": "8.59.2",
+    "@typescript-eslint/parser": "8.59.2",
     "@vitest/coverage-v8": "4.1.5",
     "@vitest/ui": "4.1.5",
     "chart.js": "4.5.1",
@@ -171,7 +171,7 @@
     "node": ">=25"
   },
   "dependencies": {
-    "european-parliament-mcp-server": "1.2.20",
+    "european-parliament-mcp-server": "1.2.21",
     "markdown-it": "^14.1.1",
     "markdown-it-anchor": "^9.2.0",
     "markdown-it-attrs": "^4.3.1",

package/scripts/aggregator/article-html.js

@@ -18,9 +18,9 @@
  * `11.14.0`); regenerating articles after a Mermaid bump invalidates
  * browser and CloudFront caches automatically.
  */
-import { BASE_URL, MERMAID_VERSION } from '../constants/config.js';
+import { BASE_URL, BUILD_SHORT, MERMAID_VERSION } from '../constants/config.js';
 import { buildHeadFreshnessTags } from '../constants/build-info-meta.js';
-import { ALL_LANGUAGES, LANGUAGE_NAMES, LANGUAGE_FLAGS, PAGE_TITLES, SKIP_LINK_TEXTS, TOC_ARIA_LABELS, UPDATE_AVAILABLE_LABELS, UPDATE_REFRESH_CTA_LABELS, UPDATE_DISMISS_LABELS, getLocalizedString, getTextDirection, } from '../constants/languages.js';
+import { ALL_LANGUAGES, LANGUAGE_NAMES, LANGUAGE_FLAGS, PAGE_TITLES, SKIP_LINK_TEXTS, TOC_ARIA_LABELS, getLocalizedString, getTextDirection, } from '../constants/languages.js';
 import { escapeHTML } from '../utils/file-utils.js';
 import { buildSiteFooter, buildSiteHeader, buildPageBanner, } from '../templates/section-builders.js';
 import { READER_GUIDE_SECTION_ID } from './reader-guide-constants.js';
@@ -233,10 +233,7 @@ ${hreflangLinks}
   <link rel="apple-touch-icon" sizes="180x180" href="../images/apple-touch-icon.png">
   <link rel="manifest" href="../site.webmanifest">
   <meta name="theme-color" content="#003399">
-  <link rel="stylesheet" href="../styles.css">
-  <meta name="ep-i18n-update-text" content="${escapeHTML(getLocalizedString(UPDATE_AVAILABLE_LABELS, safeLang))}">
-  <meta name="ep-i18n-update-cta" content="${escapeHTML(getLocalizedString(UPDATE_REFRESH_CTA_LABELS, safeLang))}">
-  <meta name="ep-i18n-dismiss" content="${escapeHTML(getLocalizedString(UPDATE_DISMISS_LABELS, safeLang))}">
+  <link rel="stylesheet" href="../styles.css?v=${BUILD_SHORT}">
 ${buildHeadFreshnessTags('../')}
   <script type="application/ld+json">${jsonLdString}</script>
   <script type="module" src="../js/mermaid-init.js?v=${MERMAID_VERSION}" defer></script>

package/scripts/aggregator/artifact-order.d.ts

@@ -24,12 +24,24 @@ export interface ArtifactSection {
     readonly artifacts: readonly string[];
 }
 /**
- * Canonical ordering. Order matches the plan:
- *  1. Executive brief   2. Synthesis   3. Significance   4. Actors & forces
- *  5. Coalitions        6. Stakeholders 7. PESTLE         8. Economic
- *  9. Risk             10. Threat      11. Scenarios     12. Continuity
- * 13. Deep analysis     14. Documents   15. Extended      16. MCP audit
- * 17. Quality & reflection.
+ * Canonical ordering. Order is shaped for a political-intelligence
+ * journalist: news-arc first (story → stakes → forecast), then deep
+ * structural context, then provenance/audit appendices:
+ *
+ *  1. Executive brief   2. Synthesis        3. Significance
+ *  4. Actors & forces   5. Coalitions       6. Stakeholders
+ *  7. Economic          8. Risk             9. Threat
+ * 10. Scenarios        11. Forward (What to Watch)  12. Electoral arc
+ * 13. PESTLE & history 14. Continuity      15. Deep analysis
+ * 16. Documents        17. Extended        18. MCP audit
+ * 19. Quality & reflection.
+ *
+ * Rationale: Stakeholder Map (who is affected) flows directly into
+ * Economic Context (macro stakes) without the structural-frame
+ * detour of PESTLE. Risk → Threat → Scenarios → Forward Projection →
+ * Electoral Arc forms a coherent "consequences and forecast" block.
+ * PESTLE & historical-baseline then opens the deep-context section
+ * for readers who want structural backdrop after the news.
  */
 export declare const ARTIFACT_SECTIONS: readonly ArtifactSection[];
 /** Id of the catch-all bucket for artifacts not matched by any section. */

package/scripts/aggregator/artifact-order.js

@@ -1,12 +1,24 @@
 // SPDX-FileCopyrightText: 2024-2026 Hack23 AB
 // SPDX-License-Identifier: Apache-2.0
 /**
- * Canonical ordering. Order matches the plan:
- *  1. Executive brief   2. Synthesis   3. Significance   4. Actors & forces
- *  5. Coalitions        6. Stakeholders 7. PESTLE         8. Economic
- *  9. Risk             10. Threat      11. Scenarios     12. Continuity
- * 13. Deep analysis     14. Documents   15. Extended      16. MCP audit
- * 17. Quality & reflection.
+ * Canonical ordering. Order is shaped for a political-intelligence
+ * journalist: news-arc first (story → stakes → forecast), then deep
+ * structural context, then provenance/audit appendices:
+ *
+ *  1. Executive brief   2. Synthesis        3. Significance
+ *  4. Actors & forces   5. Coalitions       6. Stakeholders
+ *  7. Economic          8. Risk             9. Threat
+ * 10. Scenarios        11. Forward (What to Watch)  12. Electoral arc
+ * 13. PESTLE & history 14. Continuity      15. Deep analysis
+ * 16. Documents        17. Extended        18. MCP audit
+ * 19. Quality & reflection.
+ *
+ * Rationale: Stakeholder Map (who is affected) flows directly into
+ * Economic Context (macro stakes) without the structural-frame
+ * detour of PESTLE. Risk → Threat → Scenarios → Forward Projection →
+ * Electoral Arc forms a coherent "consequences and forecast" block.
+ * PESTLE & historical-baseline then opens the deep-context section
+ * for readers who want structural backdrop after the news.
  */
 export const ARTIFACT_SECTIONS = [
     {
@@ -58,11 +70,6 @@ export const ARTIFACT_SECTIONS = [
         title: 'Stakeholder Map',
         artifacts: ['intelligence/stakeholder-map.md', 'existing/stakeholder-impact.md'],
     },
-    {
-        id: 'pestle-context',
-        title: 'PESTLE & Context',
-        artifacts: ['intelligence/pestle-analysis.md', 'intelligence/historical-baseline.md'],
-    },
     {
         id: 'economic-context',
         title: 'Economic Context',
@@ -120,6 +127,11 @@ export const ARTIFACT_SECTIONS = [
             'intelligence/commission-wp-alignment.md',
         ],
     },
+    {
+        id: 'pestle-context',
+        title: 'PESTLE & Context',
+        artifacts: ['intelligence/pestle-analysis.md', 'intelligence/historical-baseline.md'],
+    },
     {
         id: 'continuity',
         title: 'Cross-Run Continuity',

package/scripts/constants/build-info-meta.d.ts

@@ -1,5 +1,5 @@
 /**
- * Build the shared freshness/PWA `<head>` block.
+ * Build the shared build-identity + PWA `<head>` block.
  *
  * @param pathPrefix - Asset path prefix (`''` for root pages, `'../'`
  *                     for `news/` pages).

package/scripts/constants/build-info-meta.js

@@ -2,13 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 /**
  * @module Constants/BuildInfoMeta
- * @description Shared helper that emits the `<head>` freshness tags every
- * generator must include so the PWA layer (`js/pwa-register.js`) can:
+ * @description Shared helper that emits the `<head>` build-identity and PWA
+ * script tags every generator must include.
  *
- *   - Read the embedded build commit SHA + timestamp from `<meta>` tags.
- *   - Load the same-origin service-worker registration script.
- *   - Tell browsers + intermediate proxies to revalidate every navigation
- *     (`Cache-Control: no-cache`, `Pragma: no-cache`).
+ * The `build-id` / `build-time` meta tags are informational only — they
+ * identify which deploy produced the page (useful for debugging / cache
+ * audits) but are **not** consumed by any client-side JavaScript.
+ *
+ * The `pwa-register.js` script tag loads the service-worker registration
+ * and relative-time formatting IIFE. A `?v=<BUILD_SHORT>` query string
+ * is appended so that immutable-cached old versions are automatically
+ * evicted when a new build is deployed.
  *
  * Every value is HTML-escaped — `BUILD_ID`/`BUILD_TIME` are tightly
  * formatted (40-char hex / ISO 8601) but defence-in-depth is cheap.
@@ -18,10 +22,10 @@
  * 'self'` because the only emitted `<script>` references a same-origin
  * file with a `defer` attribute.
  */
-import { BUILD_ID, BUILD_TIME } from './config.js';
+import { BUILD_ID, BUILD_SHORT, BUILD_TIME } from './config.js';
 import { escapeHTML } from '../utils/file-utils.js';
 /**
- * Build the shared freshness/PWA `<head>` block.
+ * Build the shared build-identity + PWA `<head>` block.
  *
  * @param pathPrefix - Asset path prefix (`''` for root pages, `'../'`
  *                     for `news/` pages).
@@ -31,15 +35,14 @@ import { escapeHTML } from '../utils/file-utils.js';
 export function buildHeadFreshnessTags(pathPrefix) {
     const safeBuildId = escapeHTML(BUILD_ID);
     const safeBuildTime = escapeHTML(BUILD_TIME);
+    const safeBuildShort = escapeHTML(BUILD_SHORT);
     // Path prefix is built from controlled string literals (`''` or `'../'`),
     // but escape it anyway to keep the helper safe under future callers.
     const safePrefix = escapeHTML(pathPrefix);
     return [
         `  <meta name="build-id" content="${safeBuildId}">`,
         `  <meta name="build-time" content="${safeBuildTime}">`,
-        `  <meta http-equiv="Cache-Control" content="no-cache">`,
-        `  <meta http-equiv="Pragma" content="no-cache">`,
-        `  <script src="${safePrefix}js/pwa-register.js" defer></script>`,
+        `  <script src="${safePrefix}js/pwa-register.js?v=${safeBuildShort}" defer></script>`,
     ].join('\n');
 }
 //# sourceMappingURL=build-info-meta.js.map

package/scripts/generators/news-indexes.js

@@ -9,10 +9,10 @@
  */
 import path, { resolve } from 'path';
 import { pathToFileURL } from 'url';
-import { PROJECT_ROOT, APP_VERSION, NEWS_DIR, BASE_URL } from '../constants/config.js';
+import { PROJECT_ROOT, APP_VERSION, BUILD_SHORT, NEWS_DIR, BASE_URL } from '../constants/config.js';
 import { getNewsIndexSeo } from './seo-copy.js';
 import { buildHeadFreshnessTags } from '../constants/build-info-meta.js';
-import { ALL_LANGUAGES, LANGUAGE_NAMES, LANGUAGE_FLAGS, PAGE_TITLES, PAGE_DESCRIPTIONS, SECTION_HEADINGS, NO_ARTICLES_MESSAGES, SKIP_LINK_TEXTS, AI_SECTION_CONTENT, FILTER_LABELS, ARTICLE_TYPE_LABELS, HEADER_SUBTITLE_LABELS, UPDATE_AVAILABLE_LABELS, UPDATE_REFRESH_CTA_LABELS, UPDATE_DISMISS_LABELS, getLocalizedString, getTextDirection, } from '../constants/languages.js';
+import { ALL_LANGUAGES, LANGUAGE_NAMES, LANGUAGE_FLAGS, PAGE_TITLES, PAGE_DESCRIPTIONS, SECTION_HEADINGS, NO_ARTICLES_MESSAGES, SKIP_LINK_TEXTS, AI_SECTION_CONTENT, FILTER_LABELS, ARTICLE_TYPE_LABELS, HEADER_SUBTITLE_LABELS, getLocalizedString, getTextDirection, } from '../constants/languages.js';
 import { buildSiteFooter, buildSiteHeader } from '../templates/section-builders.js';
 import { getNewsArticles, groupArticlesByLanguage, formatSlug, parseArticleFilename, extractArticleMeta, escapeHTML, atomicWrite, } from '../utils/file-utils.js';
 import { writeMetadataDatabase } from '../utils/news-metadata.js';
@@ -294,10 +294,7 @@ export function generateIndexHTML(lang, articles, metaMap = new Map()) {
   <link rel="manifest" href="site.webmanifest">
   <meta name="theme-color" content="#003399">
   <link rel="alternate" type="application/rss+xml" title="EU Parliament Monitor RSS" href="rss.xml">
-  <link rel="stylesheet" href="styles.css">
-  <meta name="ep-i18n-update-text" content="${escapeHTML(getLocalizedString(UPDATE_AVAILABLE_LABELS, lang))}">
-  <meta name="ep-i18n-update-cta" content="${escapeHTML(getLocalizedString(UPDATE_REFRESH_CTA_LABELS, lang))}">
-  <meta name="ep-i18n-dismiss" content="${escapeHTML(getLocalizedString(UPDATE_DISMISS_LABELS, lang))}">
+  <link rel="stylesheet" href="styles.css?v=${BUILD_SHORT}">
 ${buildHeadFreshnessTags('')}
   <script type="application/ld+json">${websiteJsonLd}</script>
   <script type="application/ld+json">${organizationJsonLd}</script>

package/scripts/generators/political-intelligence/html.js

@@ -12,9 +12,9 @@
  * link points at GitHub blob/tree URLs so readers can audit the raw
  * tradecraft behind every published article.
  */
-import { BASE_URL, THEME_TOGGLE_SCRIPT } from '../../constants/config.js';
+import { BASE_URL, BUILD_SHORT, THEME_TOGGLE_SCRIPT } from '../../constants/config.js';
 import { buildHeadFreshnessTags } from '../../constants/build-info-meta.js';
-import { ALL_LANGUAGES, LANGUAGE_FLAGS, LANGUAGE_NAMES, PAGE_TITLES, SKIP_LINK_TEXTS, UPDATE_AVAILABLE_LABELS, UPDATE_REFRESH_CTA_LABELS, UPDATE_DISMISS_LABELS, getLocalizedString, getTextDirection, } from '../../constants/languages.js';
+import { ALL_LANGUAGES, LANGUAGE_FLAGS, LANGUAGE_NAMES, PAGE_TITLES, SKIP_LINK_TEXTS, getLocalizedString, getTextDirection, } from '../../constants/languages.js';
 import { FOOTER_SITEMAP_LABELS } from '../../constants/language-ui.js';
 import { buildSiteFooter, buildSiteHeader, buildPageBanner, } from '../../templates/section-builders.js';
 import { escapeHTML } from '../../utils/file-utils.js';
@@ -418,10 +418,7 @@ ${hreflangLinks}
   <link rel="apple-touch-icon" sizes="180x180" href="images/apple-touch-icon.png">
   <link rel="manifest" href="site.webmanifest">
   <meta name="theme-color" content="#003399">
-  <link rel="stylesheet" href="styles.css">
-  <meta name="ep-i18n-update-text" content="${escapeHTML(getLocalizedString(UPDATE_AVAILABLE_LABELS, lang))}">
-  <meta name="ep-i18n-update-cta" content="${escapeHTML(getLocalizedString(UPDATE_REFRESH_CTA_LABELS, lang))}">
-  <meta name="ep-i18n-dismiss" content="${escapeHTML(getLocalizedString(UPDATE_DISMISS_LABELS, lang))}">
+  <link rel="stylesheet" href="styles.css?v=${BUILD_SHORT}">
 ${buildHeadFreshnessTags('')}
   <script type="application/ld+json">${websiteJsonLd}</script>
   <script type="application/ld+json">${organizationJsonLd}</script>

package/scripts/generators/sitemap/html.js

@@ -19,10 +19,10 @@
  * `test/unit/sitemap-byte-equality.test.js` (compares against the
  * golden snapshots taken from `npm run prebuild`).
  */
-import { BASE_URL, THEME_TOGGLE_SCRIPT } from '../../constants/config.js';
+import { BASE_URL, BUILD_SHORT, THEME_TOGGLE_SCRIPT } from '../../constants/config.js';
 import { buildHeadFreshnessTags } from '../../constants/build-info-meta.js';
 import { getSitemapSeo } from '../seo-copy.js';
-import { ALL_LANGUAGES, LANGUAGE_NAMES, LANGUAGE_FLAGS, PAGE_TITLES, PAGE_DESCRIPTIONS, SKIP_LINK_TEXTS, UPDATE_AVAILABLE_LABELS, UPDATE_REFRESH_CTA_LABELS, UPDATE_DISMISS_LABELS, getLocalizedString, getTextDirection, } from '../../constants/languages.js';
+import { ALL_LANGUAGES, LANGUAGE_NAMES, LANGUAGE_FLAGS, PAGE_TITLES, PAGE_DESCRIPTIONS, SKIP_LINK_TEXTS, getLocalizedString, getTextDirection, } from '../../constants/languages.js';
 import { escapeHTML } from '../../utils/file-utils.js';
 import { detectCategory } from '../../utils/article-category.js';
 import { ARTICLE_TYPE_LABELS, FOOTER_POLITICAL_INTELLIGENCE_LABELS, } from '../../constants/language-ui.js';
@@ -311,10 +311,7 @@ ${hreflangLinks}
   <link rel="apple-touch-icon" sizes="180x180" href="images/apple-touch-icon.png">
   <link rel="manifest" href="site.webmanifest">
   <meta name="theme-color" content="#003399">
-  <link rel="stylesheet" href="styles.css">
-  <meta name="ep-i18n-update-text" content="${escapeHTML(getLocalizedString(UPDATE_AVAILABLE_LABELS, lang))}">
-  <meta name="ep-i18n-update-cta" content="${escapeHTML(getLocalizedString(UPDATE_REFRESH_CTA_LABELS, lang))}">
-  <meta name="ep-i18n-dismiss" content="${escapeHTML(getLocalizedString(UPDATE_DISMISS_LABELS, lang))}">
+  <link rel="stylesheet" href="styles.css?v=${BUILD_SHORT}">
 ${buildHeadFreshnessTags('')}
   <script type="application/ld+json">${websiteJsonLd}</script>
   <script type="application/ld+json">${organizationJsonLd}</script>

package/scripts/mcp/ep-mcp-client.d.ts

@@ -7,7 +7,7 @@ import { MCPConnection } from './mcp-connection.js';
 import type { MCPClientOptions, MCPToolResult, GetMEPsOptions, GetPlenarySessionsOptions, SearchDocumentsOptions, GetParliamentaryQuestionsOptions, GetCommitteeInfoOptions, MonitorLegislativePipelineOptions, AssessMEPInfluenceOptions, AnalyzeCoalitionDynamicsOptions, DetectVotingAnomaliesOptions, ComparePoliticalGroupsOptions, VotingRecordsOptions, VotingPatternsOptions, GenerateReportOptions, AnalyzeLegislativeEffectivenessOptions, AnalyzeCommitteeActivityOptions, TrackMEPAttendanceOptions, AnalyzeCountryDelegationOptions, GeneratePoliticalLandscapeOptions, GetCurrentMEPsOptions, GetSpeechesOptions, GetProceduresOptions, GetAdoptedTextsOptions, GetEventsOptions, GetMeetingActivitiesOptions, GetMeetingDecisionsOptions, GetMEPDeclarationsOptions, GetIncomingMEPsOptions, GetOutgoingMEPsOptions, GetHomonymMEPsOptions, GetPlenaryDocumentsOptions, GetCommitteeDocumentsOptions, GetPlenarySessionDocumentsOptions, GetPlenarySessionDocumentItemsOptions, GetControlledVocabulariesOptions, GetExternalDocumentsOptions, GetMeetingForeseenActivitiesOptions, GetProcedureEventsOptions, GetMeetingPlenarySessionDocumentsOptions, GetMeetingPlenarySessionDocumentItemsOptions, NetworkAnalysisOptions, SentimentTrackerOptions, EarlyWarningSystemOptions, ComparativeIntelligenceOptions, CorrelateIntelligenceOptions, GetAllGeneratedStatsOptions, GetMEPsFeedOptions, GetEventsFeedOptions, GetProceduresFeedOptions, GetAdoptedTextsFeedOptions, GetMEPDeclarationsFeedOptions, GetDocumentsFeedOptions, GetPlenaryDocumentsFeedOptions, GetCommitteeDocumentsFeedOptions, GetPlenarySessionDocumentsFeedOptions, GetExternalDocumentsFeedOptions, GetParliamentaryQuestionsFeedOptions, GetCorporateBodiesFeedOptions, GetControlledVocabulariesFeedOptions, GetProcedureEventByIdOptions, GetFreshProceduresOptions } from '../types/index.js';
 /**
  * Canonical list of tools exposed by the European Parliament MCP gateway
- * (`european-parliament-mcp-server@1.2.20`). The news workflows, prompt
+ * (`european-parliament-mcp-server@1.2.21`). The news workflows, prompt
  * library (`.github/prompts/07-mcp-reference.md`), and the integration test
  * suite all reference this list so a regression that adds/removes a tool
  * fails a single drift guard
@@ -22,7 +22,7 @@ export declare const EP_MCP_TOOLS: readonly string[];
  * covering the two shapes historically emitted by the EP MCP server.
  *
  * 1. **Uniform envelope** (all feeds as of
- *    `european-parliament-mcp-server@1.2.20`) —
+ *    `european-parliament-mcp-server@1.2.21`) —
  *    `{status:"unavailable", items:[], generatedAt:"..."}` established by
  *    Hack23/European-Parliament-MCP-Server#301 and extended to
  *    `get_events_feed`/`get_procedures_feed` by
@@ -206,9 +206,9 @@ export declare class EuropeanParliamentMCPClient extends MCPConnection {
      *
      * @remarks
      * This repository is currently documented/configured against
-     * `european-parliament-mcp-server@1.2.20`.
+     * `european-parliament-mcp-server@1.2.21`.
      *
-     * **Upstream date-filter contract (v1.2.14+, active on the pinned v1.2.20 server):** the upstream server
+     * **Upstream date-filter contract (v1.2.14+, active on the pinned v1.2.21 server):** the upstream server
      * applies a server-side post-filter on `dateFrom`/`dateTo` before serialisation, because the
      * EP Open Data Portal `/meetings` endpoint silently ignores its `date-from`/`date-to` query
      * parameters (Defect #5). Under this contract:
@@ -217,7 +217,7 @@ export declare class EuropeanParliamentMCPClient extends MCPConnection {
      * - Per-window session counts are reproducible because the EP-side regression is masked by
      *   the upstream post-filter.
      *
-     * No local post-filter is applied here. The repository is pinned to v1.2.20, so the
+     * No local post-filter is applied here. The repository is pinned to v1.2.21, so the
      * date-filter guarantees above apply; consumers running against an older server image
      * (pre-v1.2.14) must not assume them.
      */

package/scripts/mcp/ep-mcp-client.js

@@ -11,7 +11,7 @@ import { recordPendingDocument, markDocumentResolved, getPendingDocumentsForRepr
 import { EP_NEXT_ELECTION_START, EP_NEXT_ELECTION_END, EP_CURRENT_TERM, EP_NEXT_TERM, } from '../constants/config.js';
 /**
  * Canonical list of tools exposed by the European Parliament MCP gateway
- * (`european-parliament-mcp-server@1.2.20`). The news workflows, prompt
+ * (`european-parliament-mcp-server@1.2.21`). The news workflows, prompt
  * library (`.github/prompts/07-mcp-reference.md`), and the integration test
  * suite all reference this list so a regression that adds/removes a tool
  * fails a single drift guard
@@ -115,7 +115,7 @@ const CONTENT_NOT_YET_AVAILABLE_SUBSTRING = 'document indexed but content not ye
 /**
  * Classify an error message into a diagnostic error category.
  *
- * Maps EP MCP Server v1.2.20 structured error codes and generic HTTP/network
+ * Maps EP MCP Server v1.2.21 structured error codes and generic HTTP/network
  * errors into one of six broad categories used for logging and retry decisions:
  *
  * Returned categories (priority order):
@@ -131,7 +131,7 @@ const CONTENT_NOT_YET_AVAILABLE_SUBSTRING = 'document indexed but content not ye
  */
 function classifyToolError(message) {
     const lowerMsg = message.toLowerCase();
-    // EP MCP Server v1.2.20 structured error codes (matched case-insensitively)
+    // EP MCP Server v1.2.21 structured error codes (matched case-insensitively)
     if (lowerMsg.includes('internal_error')) {
         return 'INTERNAL_ERROR';
     }
@@ -190,7 +190,7 @@ function _parseResultPayload(result) {
  * covering the two shapes historically emitted by the EP MCP server.
  *
  * 1. **Uniform envelope** (all feeds as of
- *    `european-parliament-mcp-server@1.2.20`) —
+ *    `european-parliament-mcp-server@1.2.21`) —
  *    `{status:"unavailable", items:[], generatedAt:"..."}` established by
  *    Hack23/European-Parliament-MCP-Server#301 and extended to
  *    `get_events_feed`/`get_procedures_feed` by
@@ -591,9 +591,9 @@ export class EuropeanParliamentMCPClient extends MCPConnection {
      *
      * @remarks
      * This repository is currently documented/configured against
-     * `european-parliament-mcp-server@1.2.20`.
+     * `european-parliament-mcp-server@1.2.21`.
      *
-     * **Upstream date-filter contract (v1.2.14+, active on the pinned v1.2.20 server):** the upstream server
+     * **Upstream date-filter contract (v1.2.14+, active on the pinned v1.2.21 server):** the upstream server
      * applies a server-side post-filter on `dateFrom`/`dateTo` before serialisation, because the
      * EP Open Data Portal `/meetings` endpoint silently ignores its `date-from`/`date-to` query
      * parameters (Defect #5). Under this contract:
@@ -602,7 +602,7 @@ export class EuropeanParliamentMCPClient extends MCPConnection {
      * - Per-window session counts are reproducible because the EP-side regression is masked by
      *   the upstream post-filter.
      *
-     * No local post-filter is applied here. The repository is pinned to v1.2.20, so the
+     * No local post-filter is applied here. The repository is pinned to v1.2.21, so the
      * date-filter guarantees above apply; consumers running against an older server image
      * (pre-v1.2.14) must not assume them.
      */

package/scripts/mcp/imf-mcp-client.d.ts

@@ -81,6 +81,10 @@ export interface IMFClientOptions extends MCPClientOptions {
     timeoutMs?: number;
     /** Optional `fetch` implementation injection for testing. */
     fetchImpl?: typeof fetch;
+    /** MCP fetch-proxy gateway URL (bypasses AWF Squid proxy). */
+    fetchProxyGatewayUrl?: string;
+    /** API key for the MCP gateway. */
+    fetchProxyApiKey?: string;
 }
 /**
  * Count observations in an IMF SDMX-JSON data payload.
@@ -106,6 +110,8 @@ export declare class IMFMCPClient {
     private readonly _apiBaseUrl;
     private readonly _timeoutMs;
     private readonly _fetchImpl;
+    private readonly _fetchProxyGatewayUrl;
+    private readonly _fetchProxyApiKey;
     private _connected;
     constructor(options?: IMFClientOptions);
     /**
@@ -214,6 +220,8 @@ export declare class IMFMCPClient {
     }): Promise<MCPToolResult>;
     /**
      * Build a full URL and GET it as text, enforcing the client-wide timeout.
+     * Tries the MCP fetch-proxy gateway first (bypasses AWF Squid proxy in
+     * agentic workflow sandbox), then falls back to direct fetch.
      *
      * @param path - Path (already URL-encoded) to append to the base URL.
      * @returns Response body (`text/*` or `application/*`) as a string.
@@ -222,6 +230,15 @@ export declare class IMFMCPClient {
      * @internal
      */
     private _getText;
+    /**
+     * Fetch a URL via the MCP fetch-proxy gateway (JSON-RPC 2.0 over HTTP).
+     * The fetch-proxy server runs in a container that bypasses the AWF Squid proxy.
+     *
+     * @param url - Fully-qualified URL to fetch.
+     * @returns Response text, or null if the gateway call fails.
+     * @internal
+     */
+    private _fetchViaGateway;
     /**
      * GET a URL and parse the response body as JSON.
      *

package/scripts/mcp/imf-mcp-client.js

@@ -4,7 +4,7 @@
 /** Default base URL for the IMF SDMX 3.0 REST API. */
 const DEFAULT_IMF_API_BASE_URL = 'https://dataservices.imf.org/REST/SDMX_3.0';
 /** Default per-request timeout (milliseconds). */
-const DEFAULT_IMF_API_TIMEOUT_MS = 30_000;
+const DEFAULT_IMF_API_TIMEOUT_MS = 90_000;
 /** Fallback payload shape when an IMF call fails or the server is offline. */
 const IMF_FALLBACK = {
     content: [{ type: 'text', text: '' }],
@@ -191,6 +191,8 @@ export class IMFMCPClient {
     _apiBaseUrl;
     _timeoutMs;
     _fetchImpl;
+    _fetchProxyGatewayUrl;
+    _fetchProxyApiKey;
     _connected = false;
     constructor(options = {}) {
         const envBase = process.env['IMF_API_BASE_URL'];
@@ -211,6 +213,11 @@ export class IMFMCPClient {
                     ? parsedEnvTimeout
                     : DEFAULT_IMF_API_TIMEOUT_MS;
         this._fetchImpl = options.fetchImpl ?? globalThis.fetch.bind(globalThis);
+        // MCP fetch-proxy gateway for AWF sandbox (bypasses Squid proxy)
+        this._fetchProxyGatewayUrl =
+            options.fetchProxyGatewayUrl ?? process.env['FETCH_MCP_GATEWAY_URL'] ?? undefined;
+        this._fetchProxyApiKey =
+            options.fetchProxyApiKey ?? process.env['EP_MCP_GATEWAY_API_KEY'] ?? undefined;
     }
     /**
      * Base URL currently in use (read-only — set at construction time).
@@ -469,6 +476,8 @@ export class IMFMCPClient {
     // ─── private transport helpers ─────────────────────────────────────────────
     /**
      * Build a full URL and GET it as text, enforcing the client-wide timeout.
+     * Tries the MCP fetch-proxy gateway first (bypasses AWF Squid proxy in
+     * agentic workflow sandbox), then falls back to direct fetch.
      *
      * @param path - Path (already URL-encoded) to append to the base URL.
      * @returns Response body (`text/*` or `application/*`) as a string.
@@ -478,6 +487,18 @@ export class IMFMCPClient {
      */
     async _getText(path) {
         const url = `${this._apiBaseUrl}${path.startsWith('/') ? path : `/${path}`}`;
+        // Strategy 1: MCP fetch-proxy gateway (bypasses AWF Squid proxy)
+        if (this._fetchProxyGatewayUrl && this._fetchProxyApiKey) {
+            try {
+                const result = await this._fetchViaGateway(url);
+                if (result !== null)
+                    return result;
+            }
+            catch {
+                // Gateway unavailable — fall through to direct fetch
+            }
+        }
+        // Strategy 2: Direct fetch (works outside AWF sandbox)
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), this._timeoutMs);
         try {
@@ -495,6 +516,61 @@ export class IMFMCPClient {
             clearTimeout(timer);
         }
     }
+    /**
+     * Fetch a URL via the MCP fetch-proxy gateway (JSON-RPC 2.0 over HTTP).
+     * The fetch-proxy server runs in a container that bypasses the AWF Squid proxy.
+     *
+     * @param url - Fully-qualified URL to fetch.
+     * @returns Response text, or null if the gateway call fails.
+     * @internal
+     */
+    async _fetchViaGateway(url) {
+        const rpcRequest = {
+            jsonrpc: '2.0',
+            id: Date.now(),
+            method: 'tools/call',
+            params: {
+                name: 'fetch_url',
+                arguments: { url },
+            },
+        };
+        const headers = {
+            'Content-Type': 'application/json',
+            Accept: 'application/json, text/event-stream',
+        };
+        if (this._fetchProxyApiKey) {
+            headers['Authorization'] = `Bearer ${this._fetchProxyApiKey}`;
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this._timeoutMs);
+        try {
+            const response = await this._fetchImpl(this._fetchProxyGatewayUrl, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify(rpcRequest),
+                signal: controller.signal,
+            });
+            if (!response.ok)
+                return null;
+            let body = await response.text();
+            // Handle SSE format (data: lines)
+            if (body.trimStart().startsWith('data:')) {
+                const lines = body.split('\n').filter((l) => l.startsWith('data:'));
+                body = lines.map((l) => l.slice(5).trim()).join('');
+            }
+            const parsed = JSON.parse(body);
+            if (parsed.error)
+                return null;
+            const text = parsed.result?.content?.[0]?.text;
+            return text && text.length > 0 ? text : null;
+        }
+        catch {
+            return null;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
     /**
      * GET a URL and parse the response body as JSON.
      *

package/scripts/templates/section-builders.js

@@ -300,7 +300,7 @@ export function buildSiteHeader(options) {
       <a href="${escapeHTML(homeHref)}" class="site-header__brand" aria-label="${safeTitle}">
         <picture class="site-header__logo-picture">
           <source srcset="${pathPrefix}images/banner.webp" type="image/webp">
-          <img class="site-header__logo site-header__logo--banner" src="${pathPrefix}images/banner.jpg" alt="${safeTitle}" width="240" height="80" loading="eager">
+          <img class="site-header__logo site-header__logo--banner" src="${pathPrefix}images/banner.jpg" alt="${safeTitle}" width="180" height="60" loading="eager">
         </picture>
         <span class="site-header__brand-text">
           <span class="site-header__title">${safeTitle}</span>