npm - sdlc-agent-4-enterprise-server - Versions diffs - 1.55.1 → 1.55.3 - Mend

sdlc-agent-4-enterprise-server 1.55.1 → 1.55.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (97) hide show

package/.kiro/agents/prompts/ba-agent.md CHANGED Viewed

@@ -285,9 +285,9 @@ After creating ALL `.drawio` files, you MUST export each one to PNG using the dr
 **CRITICAL — This step MUST be executed. Do NOT skip it.**
-**Flow: embed_images → export_docx(file_path=...)**
+**Flow: embed_image → execute_dynamic_tool(toolName="export_docx", arguments={file_path=...})**
-1. Call `embed_images` tool (via `execute_dynamic_tool`) to create self-contained markdown:
+1. Call `embed_image` tool (via `execute_dynamic_tool`) to create self-contained markdown:
    - `file_path`: absolute path to `documents/{TICKET-KEY}/BRD.md`
    - `output_path`: absolute path to `documents/{TICKET-KEY}/BRD-embedded.md`
    - This replaces all `![](diagrams/...)` with inline base64 data URIs
@@ -412,9 +412,9 @@ Verify all PNGs exist after export. Embed PNGs in FSD.
 **CRITICAL — This step MUST be executed. Do NOT skip it.**
-**Flow: embed_images → export_docx(file_path=...)**
+**Flow: embed_image → execute_dynamic_tool(toolName="export_docx", arguments={file_path=...})**
-1. Call `embed_images` tool (via `execute_dynamic_tool`) to create self-contained markdown:
+1. Call `embed_image` tool (via `execute_dynamic_tool`) to create self-contained markdown:
    - `file_path`: absolute path to `documents/{TICKET-KEY}/FSD.md`
    - `output_path`: absolute path to `documents/{TICKET-KEY}/FSD-embedded.md`
 2. Call `export_docx` tool (via `execute_dynamic_tool`) with **file_path**:

package/.kiro/agents/prompts/sa-agent.md CHANGED Viewed

@@ -296,13 +296,13 @@ Create draw.io XML diagrams and export to PNG:
 **After completing TDD.md, you MUST export to DOCX using our tools:**
-1. Call `embed_images` tool to create self-contained markdown:
+1. Call `embed_image` tool to create self-contained markdown:
    ```
-   embed_images(file_path="C:/projects/.../documents/{TICKET-KEY}/TDD.md", output_path="C:/projects/.../documents/{TICKET-KEY}/TDD-embedded.md")
+   embed_image(file_path="C:/projects/.../documents/{TICKET-KEY}/TDD.md", output_path="C:/projects/.../documents/{TICKET-KEY}/TDD-embedded.md")
    ```
 2. Call `export_docx` via `execute_dynamic_tool` with file_path (NOT content):
    ```
-   export_docx(file_path="C:/projects/.../documents/{TICKET-KEY}/TDD-embedded.md", file_name="TDD-v{VERSION}-{TICKET-KEY}")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="C:/projects/.../documents/{TICKET-KEY}/TDD-embedded.md", file_name="TDD-v{VERSION}-{TICKET-KEY}"})
    ```
 3. Copy exported DOCX to `documents/{TICKET-KEY}/TDD-v{VERSION}-{TICKET-KEY}.docx`
 4. Delete temp `TDD-embedded.md` file

package/.kiro/agents/prompts/sm-agent.md CHANGED Viewed

@@ -98,9 +98,9 @@ After discovery, log:
 ### Quy trình attach (áp dụng cho mọi document):
 ```
-1. embed_images(file_path="documents/{TICKET}/{DOC}.md", output_path="documents/{TICKET}/{DOC}-embedded.md")
-2. export_docx(file_path="documents/{TICKET}/{DOC}-embedded.md", file_name="{DOC}-v{version}-{TICKET}")
-3. jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/{DOC}-v{version}-{TICKET}.docx")
+1. embed_image(file_path="documents/{TICKET}/{DOC}.md", output_path="documents/{TICKET}/{DOC}-embedded.md")
+2. execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/{DOC}-embedded.md", file_name="{DOC}-v{version}-{TICKET}"})
+3. jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/{DOC}-v{version}-{TICKET}.docx")
 ```
 ### Timing:
@@ -625,12 +625,12 @@ invokeSubAgent(
 5. Update STATUS: `requirements.status = "done"`, `requirements.version = 1`
 6. **Attach BRD to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/BRD.md", output_path="documents/{TICKET}/BRD-embedded.md")
-   export_docx(file_path="documents/{TICKET}/BRD-embedded.md", file_name="BRD-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/BRD.md", output_path="documents/{TICKET}/BRD-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/BRD-embedded.md", file_name="BRD-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/BRD-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/BRD-v1-{TICKET}.docx")
    ```
 7. Report: "✅ Phase 1 done — BRD.md created & attached to Jira. Chuyển sang Phase 2 (Specification)?"
 8. Wait for user confirmation.
@@ -682,12 +682,12 @@ invokeSubAgent(
 7. Update STATUS: `specification.status = "done"`, `specification.version = 1`
 8. **Attach FSD to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/FSD.md", output_path="documents/{TICKET}/FSD-embedded.md")
-   export_docx(file_path="documents/{TICKET}/FSD-embedded.md", file_name="FSD-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/FSD.md", output_path="documents/{TICKET}/FSD-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/FSD-embedded.md", file_name="FSD-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/FSD-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/FSD-v1-{TICKET}.docx")
    ```
 9. Report:
    ```
@@ -717,7 +717,7 @@ invokeSubAgent(
        name: "ui-agent",
        prompt: "{TICKET} — Phase 2.5: Tạo wireframes (draw.io) + UI-SPEC.md cho tất cả screens.
        Đọc FSD.md để xác định screens. Export PNG từ drawio. Embed images vào UI-SPEC.md.
-       ⛔ PHẢI có hình trong UI-SPEC.md (dùng embed_images tool sau khi viết xong)."
+       ⛔ PHẢI có hình trong UI-SPEC.md (dùng embed_image tool sau khi viết xong)."
      )
      ```
    - Verify: `documents/{TICKET}/UI-SPEC.md` exists, `diagrams/ui-*.drawio` files exist
@@ -746,12 +746,12 @@ invokeSubAgent(
 6. If no discrepancy → Update STATUS: `design.status = "done"`
 7. **Attach TDD to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/TDD.md", output_path="documents/{TICKET}/TDD-embedded.md")
-   export_docx(file_path="documents/{TICKET}/TDD-embedded.md", file_name="TDD-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/TDD.md", output_path="documents/{TICKET}/TDD-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/TDD-embedded.md", file_name="TDD-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/TDD-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/TDD-v1-{TICKET}.docx")
    ```
 8. **Verify diagrams exist** (MANDATORY):
    - Check `documents/{TICKET}/diagrams/` directory exists and has `.drawio` + `.png` files
@@ -903,14 +903,15 @@ If review found issues:
 2. Update STATUS: `test_planning.review = "approved"` (hoặc "approved_with_conditions")
 3. **Attach STP/STC to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/STP.md", output_path="documents/{TICKET}/STP-embedded.md")
-   export_docx(file_path="documents/{TICKET}/STP-embedded.md", file_name="STP-v1-{TICKET}")
-   embed_images(file_path="documents/{TICKET}/STC.md", output_path="documents/{TICKET}/STC-embedded.md")
-   export_docx(file_path="documents/{TICKET}/STC-embedded.md", file_name="STC-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/STP.md", output_path="documents/{TICKET}/STP-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/STP-embedded.md", file_name="STP-v1-{TICKET}"})
+   embed_image(file_path="documents/{TICKET}/STC.md", output_path="documents/{TICKET}/STC-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/STC-embedded.md", file_name="STC-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/STP-v1-{TICKET}.docx,documents/{TICKET}/STC-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/STP-v1-{TICKET}.docx")
+jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/STC-v1-{TICKET}.docx")
    ```
 4. Report:
    ```

package/.kiro/agents/prompts/ta-agent.md CHANGED Viewed

@@ -260,7 +260,7 @@ Before delivering the FSD, verify:
 **After completing the FSD, you MUST export to DOCX format.**
-1. Use `embed_images` tool to create a self-contained markdown (images as base64):
+1. Use `embed_image` tool to create a self-contained markdown (images as base64):
    - `file_path`: absolute path to FSD.md
    - `output_path`: absolute path to FSD-embedded.md (temp file)
 2. Use the discovered **DOCX export tool** (query: "convert markdown to docx") to export:

package/.kiro/agents/prompts/ui-agent.md CHANGED Viewed

@@ -257,8 +257,8 @@ After creating UI-SPEC.md with wireframe references:
 1. Use **relative paths** for all images: `![Screen Name](diagrams/ui-{screen-name}.png)`
 2. **⛔ KHÔNG embed base64** vào UI-SPEC.md — chỉ dùng relative paths
-3. `embed_images` tool CHỈ được gọi khi cần **export DOCX** (vì DOCX tool không có filesystem access)
-4. Workflow export DOCX: copy file → embed_images (tạo bản tạm có base64) → export_docx → xóa bản tạm
+3. `embed_image` tool CHỈ được gọi khi cần **export DOCX** (vì DOCX tool không có filesystem access)
+4. Workflow export DOCX: copy file → embed_image (tạo bản tạm có base64) → export_docx → xóa bản tạm
 ### Step 7: Update FSD with UI Artifacts

package/.kiro/agents/sm-agent.md CHANGED Viewed

@@ -110,9 +110,9 @@ After discovery, log:
 ### Quy trình attach (áp dụng cho mọi document):
 ```
-1. embed_images(file_path="documents/{TICKET}/{DOC}.md", output_path="documents/{TICKET}/{DOC}-embedded.md")
-2. export_docx(file_path="documents/{TICKET}/{DOC}-embedded.md", file_name="{DOC}-v{version}-{TICKET}")
-3. jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/{DOC}-v{version}-{TICKET}.docx")
+1. embed_image(file_path="documents/{TICKET}/{DOC}.md", output_path="documents/{TICKET}/{DOC}-embedded.md")
+2. execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/{DOC}-embedded.md", file_name="{DOC}-v{version}-{TICKET}"})
+3. jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/{DOC}-v{version}-{TICKET}.docx")
 ```
 ### Timing:
@@ -642,12 +642,12 @@ invokeSubAgent(
 5. Update STATUS: `requirements.status = "done"`, `requirements.version = 1`
 6. **Attach BRD to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/BRD.md", output_path="documents/{TICKET}/BRD-embedded.md")
-   export_docx(file_path="documents/{TICKET}/BRD-embedded.md", file_name="BRD-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/BRD.md", output_path="documents/{TICKET}/BRD-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/BRD-embedded.md", file_name="BRD-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/BRD-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/BRD-v1-{TICKET}.docx")
    ```
 7. Report: "✅ Phase 1 done — BRD.md created & attached to Jira. Chuyển sang Phase 2 (Specification)?"
 8. Wait for user confirmation.
@@ -699,12 +699,12 @@ invokeSubAgent(
 7. Update STATUS: `specification.status = "done"`, `specification.version = 1`
 8. **Attach FSD to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/FSD.md", output_path="documents/{TICKET}/FSD-embedded.md")
-   export_docx(file_path="documents/{TICKET}/FSD-embedded.md", file_name="FSD-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/FSD.md", output_path="documents/{TICKET}/FSD-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/FSD-embedded.md", file_name="FSD-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/FSD-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/FSD-v1-{TICKET}.docx")
    ```
 9. Report:
    ```
@@ -736,12 +736,12 @@ invokeSubAgent(
 6. If no discrepancy → Update STATUS: `design.status = "done"`
 7. **Attach TDD to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/TDD.md", output_path="documents/{TICKET}/TDD-embedded.md")
-   export_docx(file_path="documents/{TICKET}/TDD-embedded.md", file_name="TDD-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/TDD.md", output_path="documents/{TICKET}/TDD-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/TDD-embedded.md", file_name="TDD-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/TDD-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/TDD-v1-{TICKET}.docx")
    ```
 8. **Verify diagrams exist** (MANDATORY):
    - Check `documents/{TICKET}/diagrams/` directory exists and has `.drawio` + `.png` files
@@ -893,14 +893,15 @@ If review found issues:
 2. Update STATUS: `test_planning.review = "approved"` (hoặc "approved_with_conditions")
 3. **Attach STP/STC to Jira** (MANDATORY — attach ngay sau khi phase hoàn thành):
    ```
-   // Export DOCX: embed_images → export_docx
-   embed_images(file_path="documents/{TICKET}/STP.md", output_path="documents/{TICKET}/STP-embedded.md")
-   export_docx(file_path="documents/{TICKET}/STP-embedded.md", file_name="STP-v1-{TICKET}")
-   embed_images(file_path="documents/{TICKET}/STC.md", output_path="documents/{TICKET}/STC-embedded.md")
-   export_docx(file_path="documents/{TICKET}/STC-embedded.md", file_name="STC-v1-{TICKET}")
+   // Export DOCX: embed_image → export_docx
+   embed_image(file_path="documents/{TICKET}/STP.md", output_path="documents/{TICKET}/STP-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/STP-embedded.md", file_name="STP-v1-{TICKET}"})
+   embed_image(file_path="documents/{TICKET}/STC.md", output_path="documents/{TICKET}/STC-embedded.md")
+   execute_dynamic_tool(toolName="export_docx", arguments={file_path="documents/{TICKET}/STC-embedded.md", file_name="STC-v1-{TICKET}"})
    // Attach to Jira
-   jira_update_issue(issue_key: "{TICKET}", fields: "{}", attachments: "documents/{TICKET}/STP-v1-{TICKET}.docx,documents/{TICKET}/STC-v1-{TICKET}.docx")
+   jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/STP-v1-{TICKET}.docx")
+jira_attach_file(issue_key: "{TICKET}", file_path: "documents/{TICKET}/STC-v1-{TICKET}.docx")
    ```
 4. Report:
    ```

package/.kiro/agents/ui-agent.md CHANGED Viewed

@@ -259,8 +259,8 @@ After creating UI-SPEC.md with wireframe references:
 1. Use **relative paths** for all images: `![Screen Name](diagrams/ui-{screen-name}.png)`
 2. **⛔ KHÔNG embed base64** vào UI-SPEC.md — chỉ dùng relative paths
-3. `embed_images` tool CHỈ được gọi khi cần **export DOCX** (vì DOCX tool không có filesystem access)
-4. Workflow export DOCX: copy file → embed_images (tạo bản tạm có base64) → export_docx → xóa bản tạm
+3. `embed_image` tool CHỈ được gọi khi cần **export DOCX** (vì DOCX tool không có filesystem access)
+4. Workflow export DOCX: copy file → embed_image (tạo bản tạm có base64) → export_docx → xóa bản tạm
 ### Step 7: Update FSD with UI Artifacts

package/Dockerfile CHANGED Viewed

@@ -117,6 +117,16 @@ ARG MARKDOWN_EXPORTER_MCP_REF=1429b6a94767a709f7f5119219ca5951042d9d3c
 # versions). Drop the override once the pinned base image bundles a fixed
 # setuptools.
 ARG SETUPTOOLS_VERSION=84.0.0
+# SA4E-360 follow-up (continued, v1.55.3): Trivy 2026-10-23 flags BOTH venvs —
+#   - certifi 2026.7.22 (pulled via requests): GHSA-6q48-6c7w-9gw2 CRITICAL
+#     (compromised emSign intermediate CA keys), fix 2026.10.19
+#   - pillow 12.3.0: 55 CVEs (CRITICAL+HIGH, e.g. CVE-2026-112393/112403/112900,
+#     fixes in 13.0.0) — markitdown[all] pulls pillow into BOTH venvs
+# Force-upgrade both to fixed versions after the main install; the
+# pillow~=12.1.1 upstream-pin conflict warning stays EXPECTED and non-fatal
+# (same PEP 440 pattern documented below). Probes fail the build on drift.
+ARG CERTIFI_VERSION=2026.10.19
+ARG PILLOW_VERSION=13.0.0
 # `python3` already exists in base (build toolchain); only the venv/ensurepip
 # support is missing. One venv per server: independent dependency trees that
 # are pinned, upgraded and Trivy-scanned separately.
@@ -130,30 +140,31 @@ RUN python3 -m venv /opt/markitdown-venv \
  && /opt/markitdown-venv/bin/python -c "import markitdown_mcp" \
  && /opt/markitdown-venv/bin/pip install --no-cache-dir "setuptools==${SETUPTOOLS_VERSION}" \
  && /opt/markitdown-venv/bin/python -c "from importlib.metadata import version; assert version('setuptools') == '${SETUPTOOLS_VERSION}'" \
+ && /opt/markitdown-venv/bin/pip install --no-cache-dir "certifi==${CERTIFI_VERSION}" "pillow==${PILLOW_VERSION}" \
+ && /opt/markitdown-venv/bin/python -c "from importlib.metadata import version; assert version('certifi') == '${CERTIFI_VERSION}' and version('pillow') == '${PILLOW_VERSION}'" \
  && /opt/markitdown-venv/bin/python -m pip uninstall -y pip
 # `mcp<2` constraint: upstream declares `mcp>=1.27.0` (unbounded) but its code
 # imports `mcp.server.fastmcp` — an API REMOVED in mcp 2.x (FastMCP → MCPServer).
 # The import probe below fails the build on exactly this class of drift
 # (verified: unconstrained pip resolved mcp 2.3.0 → ModuleNotFoundError).
-# `pillow==12.3.0` override (SA4E-360): upstream pins `pillow~=12.1.1`, which
-# resolves to 12.1.1 — carrying 16 HIGH CVEs that fail the production Trivy
-# gate. PEP 440 `~=12.1.1` means >=12.1.1,<12.2, so it does NOT admit the
-# fixed 12.3.0 (which markitdown-venv already runs on the same Python 3.11
-# base). The force-upgrade AFTER the main install therefore triggers a pip
-# metadata conflict warning ("markdown-exporter-mcp-local 0.1.0 requires
-# pillow~=12.1.1 ... incompatible") — EXPECTED and non-fatal: pip installs
-# the requested version and exits 0. Trivy reads the installed 12.3.0
-# metadata, clearing all 16 CVEs. The PIL version probe fails the build if
-# resolution ever regresses to 12.1.1. Remove this override once upstream
-# releases an officially fixed pin (e.g. pillow~=12.3).
+# `pillow` override (SA4E-360, bumped v1.55.3 to 13.0.0): upstream pins
+# `pillow~=12.1.1`, which resolves to 12.1.1 — carrying HIGH CVEs that fail the
+# production Trivy gate. PEP 440 `~=12.1.1` means >=12.1.1,<12.2, so it does
+# NOT admit the fixed 12.3.0/13.0.0. The force-upgrade AFTER the main install
+# therefore triggers a pip metadata conflict warning ("markdown-exporter-mcp-local
+# 0.1.0 requires pillow~=12.1.1 ... incompatible") — EXPECTED and non-fatal:
+# pip installs the requested version and exits 0. Trivy reads the installed
+# version's metadata, clearing the CVEs. The importlib.metadata probe fails the
+# build if resolution ever regresses. Remove this override once upstream
+# releases an officially fixed pin (e.g. pillow~=13).
 RUN python3 -m venv /opt/markdown-exporter-venv \
  && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir \
       "markdown-exporter-mcp-local @ git+https://github.com/Zac-Chen-2001/markdown-exporter-mcp-local@${MARKDOWN_EXPORTER_MCP_REF}" \
       "mcp>=1.27.0,<2.0.0" \
  && test -x /opt/markdown-exporter-venv/bin/markdown-exporter-mcp-local \
  && /opt/markdown-exporter-venv/bin/python -c "import markdown_exporter_mcp.server, md_exporter" \
- && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir "pillow==12.3.0" \
- && /opt/markdown-exporter-venv/bin/python -c "import PIL; assert PIL.__version__ == '12.3.0'" \
+ && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir "pillow==${PILLOW_VERSION}" "certifi==${CERTIFI_VERSION}" \
+ && /opt/markdown-exporter-venv/bin/python -c "from importlib.metadata import version; assert version('pillow') == '${PILLOW_VERSION}' and version('certifi') == '${CERTIFI_VERSION}'" \
  && /opt/markdown-exporter-venv/bin/pip install --no-cache-dir "setuptools==${SETUPTOOLS_VERSION}" \
  && /opt/markdown-exporter-venv/bin/python -c "from importlib.metadata import version; assert version('setuptools') == '${SETUPTOOLS_VERSION}'" \
  && /opt/markdown-exporter-venv/bin/python -m pip uninstall -y pip
@@ -236,7 +247,10 @@ ENV PYTHONUNBUFFERED=1
 RUN groupadd -g 1001 sa4e \
  && useradd -u 1001 -g sa4e -r -s /usr/sbin/nologin sa4e \
  && mkdir -p /app/.code-intel \
- && chown -R sa4e:sa4e /app
+ && chown -R sa4e:sa4e /app \
+ && mkdir -p /home/sa4e \
+ && chmod -R 777 /home/sa4e
 USER sa4e
 ENV NODE_ENV=production

package/README.md CHANGED Viewed

@@ -6,7 +6,7 @@
 </p>
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.54.0-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.55.3-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>
@@ -233,6 +233,10 @@ The embedding model is expected at `.code-intel/models/model.onnx`. Download it:
 | Version | Date | Ticket | Changes |
 |---------|------|--------|---------|
+| 1.55.3 | 2026-10-23 | SA4E-380 | Content Proxy for child MCP tools — backend `content-proxy/` layer: convention detection + overrides, in-place schema adaptation, invocation adaptation (strict base64), transport-agnostic artifact retrieval (25 MB cap), multi-file `outputs[]`, host-path stripping; zero new tools. Extension output-proxy fail-loud. Backend content-proxy tests 21/21; live 6/6 exporters. Docs: BRD/FSD/TDD/STP/STC/SECURITY-REVIEW (F-01 binding). |
+| 1.55.2 | 2026-10-23 | SA4E-369 | Fix: Pega config save reverts to default — `updatePegaConfig` uses new dotted keys (`pega.endpoint`, `pega.username`); `WORKSPACE_SCOPED_KEYS` + tests updated. |
+| 1.55.1 | 2026-10-23 | SA4E-369 | Unified config reads — ALL reads via `getSetting` (zero direct `config.get`); one-time migration runner; runtime fallback removed. 3,247/3,247 pass. |
+| 1.55.0 | 2026-10-23 | SA4E-369 | Config keys standardization — 42 settings dot notation, 21 keys renamed + 2 new (`pega.appName/appVersion`); auto-migration. |
 | 1.54.0 | 2026-10-21 | SA4E-369/370/373/374/375 | PeerBus release (agent-to-agent messaging), 77 extension test failures fixed, ide_launch DevToolsActivePort fix, backend test alignment (SA4E-374 SRP + SA4E-375 deterministic projectId/auto-upsert), CI fully GREEN (3,330 backend + 3,224 extension tests). |
 | 1.53.0 | 2026-10-15 | SA4E-360 | Version sync with extension release v1.53.0 (Multi-Resolution Context Supply P1 — skeleton + agentic loading, UAT-verified; backend runtime unchanged).
 | 1.48.0 | 2026-10-10 | SA4E-341 | Version sync (E2E testing framework delivered in standalone `e2e/` package — no backend runtime changes). Also includes SA4E-335 DB-layer 6 bugfixes (memoized id-column check, literal-safe placeholder translation, identifier quoting SQLi guard, safeExec SQLSTATE filter, writable test-backend data dir), SA4E-349 auth 401 fail-loud fixes, SA4E-350 Pega '@baseclass' appliesTo passthrough fix, enrichment retry scoped via X-Project-Id + runtime settings module. |

package/dist/config/ContentProxy.d.ts ADDED Viewed

@@ -0,0 +1,34 @@
+/**
+ * Content Proxy configuration — how the backend exposes child tools to the
+ * extension's file↔base64 wrapper without adding new tools.
+ *
+ * Convention (auto-detected, no per-tool code):
+ *  - Tools named `export_*`, `render_*`, `generate_*` (or whose description says
+ *    "… to PDF/DOCX/HTML/…") are file producers → their result artifacts are
+ *    inlined as `output_base64` when invoked through the wrapper.
+ *  - Within those tools the content argument is the first alias present
+ *    (`markdown`, `content`, `html`, …) or the single required string argument.
+ *
+ * Overrides exist only for tools that do not follow the convention.
+ */
+/** Tool-name prefixes whose result is a file written by the child server. */
+export declare const FILE_TOOL_NAME_PREFIXES: readonly string[];
+/** Description fallback: "Convert ... to PDF/DOCX/…" (target must be a file format). */
+export declare const FILE_OUTPUT_DESCRIPTION: RegExp;
+/** Argument names that carry document content, in priority order. */
+export declare const CONTENT_PARAM_ALIASES: readonly string[];
+/** Argument names that are never document content (paths, ids, metadata). */
+export declare const NON_CONTENT_PARAM: RegExp;
+/** Maximum artifact size inlined as base64 (mirrors the extension pre-read cap). */
+export declare const MAX_ARTIFACT_BYTES: number;
+/** Per-tool escape hatch for tools that defy the naming/description convention. */
+export interface ContentProxyOverride {
+    /** Force the content argument (null = the tool has no content argument). */
+    contentParam?: string | null;
+    /** Force artifact inlining on/off. */
+    fileOutput?: boolean;
+    /** Disable the adapter entirely for this tool. */
+    enabled?: boolean;
+}
+/** Empty by default — convention detection covers every current exporter. */
+export declare const CONTENT_PROXY_OVERRIDES: Record<string, ContentProxyOverride>;

package/dist/config/ContentProxy.js ADDED Viewed

@@ -0,0 +1,36 @@
+/**
+ * Content Proxy configuration — how the backend exposes child tools to the
+ * extension's file↔base64 wrapper without adding new tools.
+ *
+ * Convention (auto-detected, no per-tool code):
+ *  - Tools named `export_*`, `render_*`, `generate_*` (or whose description says
+ *    "… to PDF/DOCX/HTML/…") are file producers → their result artifacts are
+ *    inlined as `output_base64` when invoked through the wrapper.
+ *  - Within those tools the content argument is the first alias present
+ *    (`markdown`, `content`, `html`, …) or the single required string argument.
+ *
+ * Overrides exist only for tools that do not follow the convention.
+ */
+/** Tool-name prefixes whose result is a file written by the child server. */
+export const FILE_TOOL_NAME_PREFIXES = ['export_', 'render_', 'generate_'];
+/** Description fallback: "Convert ... to PDF/DOCX/…" (target must be a file format). */
+export const FILE_OUTPUT_DESCRIPTION = /\bto\s+(pdf|docx|html|pptx|xlsx|json|png|jpe?g|gif|svg|zip)\b/i;
+/** Argument names that carry document content, in priority order. */
+export const CONTENT_PARAM_ALIASES = [
+    'markdown',
+    'markdown_content',
+    'content',
+    'html',
+    'xml',
+    'text',
+    'body',
+    'source',
+    'template',
+];
+/** Argument names that are never document content (paths, ids, metadata). */
+export const NON_CONTENT_PARAM = /^(content_base64|.*_base64|file_path|.*_path|path|url|uri|dir|.*_id|id|name|.*_name|key|.*_key|token|secret|password|mime|.*_type|type|format|mode|encoding)$/i;
+/** Maximum artifact size inlined as base64 (mirrors the extension pre-read cap). */
+export const MAX_ARTIFACT_BYTES = 25 * 1024 * 1024;
+/** Empty by default — convention detection covers every current exporter. */
+export const CONTENT_PROXY_OVERRIDES = {};
+//# sourceMappingURL=ContentProxy.js.map

package/dist/config/ContentProxy.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"ContentProxy.js","sourceRoot":"","sources":["../../src/config/ContentProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,gEAAgE,CAAC;AAExG,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,gKAAgK,CAAC;AAEnK,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYnD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAyC,EAAE,CAAC"}

package/dist/modules/orchestration/McpClientManager.d.ts CHANGED Viewed

@@ -29,6 +29,18 @@ export declare class McpClientManager {
     setReservedToolNames(names: Set<string>): void;
     ownsTool(toolName: string): boolean;
     executeTool(toolName: string, args: unknown): Promise<any>;
+    /**
+     * Execute a tool on a named child server (no registry lookup).
+     * Content-proxy capabilities are applied here: wrapper mode maps
+     * content_base64 → child content arg and inlines artifacts as output_base64.
+     */
+    executeToolOnServer(serverName: string, toolName: string, args: unknown): Promise<any>;
+    /**
+     * Fetch a resource from a child server. Works for remote (httpStream) servers
+     * that expose their artifacts through resources/read; servers without resource
+     * support simply yield null and the adapter falls back to a local read.
+     */
+    private readResourceFromClient;
     connectServer(name: string, config: ServerConfig): Promise<void>;
     disconnectServer(name: string): Promise<void>;
     shutdownAll(): Promise<void>;

package/dist/modules/orchestration/McpClientManager.js CHANGED Viewed

@@ -11,6 +11,8 @@ import { HealthCoordinator } from './health/HealthCoordinator.js';
 import { createTransport } from './health/TransportFactory.js';
 import { McpServerConfigLoader } from './McpServerConfigLoader.js';
 import { ProxiedToolRegistry } from './ProxiedToolRegistry.js';
+import { adaptInvocation } from './content-proxy/invocation-adapter.js';
+import { adaptResult } from './content-proxy/result-adapter.js';
 export class McpClientManager {
     clients = new Map();
     serverConfigs = new Map();
@@ -61,15 +63,57 @@ export class McpClientManager {
         const serverName = this.toolRegistry.getOwningServer(toolName);
         if (!serverName)
             throw new Error(`Tool ${toolName} is not managed by any child server`);
+        return this.executeToolOnServer(serverName, toolName, args);
+    }
+    /**
+     * Execute a tool on a named child server (no registry lookup).
+     * Content-proxy capabilities are applied here: wrapper mode maps
+     * content_base64 → child content arg and inlines artifacts as output_base64.
+     */
+    async executeToolOnServer(serverName, toolName, args) {
         const state = this.stateTracker.getState(serverName);
         if (state !== 'connected')
             throw new Error(this.health.getErrorMsg(serverName, state));
         const client = this.clients.get(serverName);
         if (!client)
             throw new Error(`Client for server ${serverName} is disconnected`);
-        this.logger.info({ toolName, serverName }, 'Proxying tool execution to child server');
-        const result = await client.callTool({ name: toolName, arguments: args });
-        return { content: result.content, isError: result.isError };
+        const capability = this.toolRegistry.getCapability(toolName);
+        const invocation = capability ? adaptInvocation(capability, args) : undefined;
+        if (invocation?.error) {
+            return { content: [{ type: 'text', text: invocation.error }], isError: true };
+        }
+        this.logger.info({ toolName, serverName, wrapperMode: invocation?.wrapperMode ?? false }, 'Proxying tool execution to child server');
+        const result = await client.callTool({
+            name: toolName,
+            arguments: (invocation ? invocation.args : args),
+        });
+        const raw = { content: result.content, isError: result.isError };
+        if (!invocation)
+            return raw;
+        return adaptResult(invocation, raw, {
+            serverName,
+            readResource: (uri) => this.readResourceFromClient(client, uri),
+        });
+    }
+    /**
+     * Fetch a resource from a child server. Works for remote (httpStream) servers
+     * that expose their artifacts through resources/read; servers without resource
+     * support simply yield null and the adapter falls back to a local read.
+     */
+    async readResourceFromClient(client, uri) {
+        try {
+            const response = await client.readResource({ uri });
+            for (const item of response?.contents ?? []) {
+                if (typeof item?.blob === 'string')
+                    return Buffer.from(item.blob, 'base64');
+                if (typeof item?.text === 'string')
+                    return Buffer.from(item.text, 'utf8');
+            }
+        }
+        catch {
+            // No resources capability or unknown URI — the adapter reports the failure.
+        }
+        return null;
     }
     async connectServer(name, config) {
         if (config.disabled || name === 'code-intelligence')

package/dist/modules/orchestration/McpClientManager.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"McpClientManager.js","sourceRoot":"","sources":["../../../src/modules/orchestration/McpClientManager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;~~AAE~~/D,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;IACrD,MAAM,CAAS;IACf,YAAY,CAAyB;IACrC,YAAY,CAAsB;IAClC,YAAY,CAAwB;IACpC,MAAM,CAAoB;IAElC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC;YAClC,MAAM;YACN,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAClD,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,gEAAgE,CAAC,CAAC;gBAC3G,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe,KAAuB,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAEnF,gBAAgB;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,KAAkB,IAAU,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjG,QAAQ,CAAC,QAAgB,IAAa,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEpF,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAa;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,qCAAqC,CAAC,CAAC;~~QAExF~~,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAEvF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,kBAAkB,CAAC,CAAC;QAEhF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,yCAAyC,CAAC,CAAC;~~QACtF~~,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,~~QAAQ~~,EAAE,~~SAAS~~,EAAE,~~IAA+B~~,EAAE,CAAC,CAAC;~~QACrG~~,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,~~EAAE~~,CAAC;~~IAC9D~~,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,MAAoB;QACpD,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,KAAK,mBAAmB;YAAE,OAAO;QAE5D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAQ,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACvG,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YACzB,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;SACxF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,uCAAuC,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB,KAAW,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACnD,iBAAiB,KAAW,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEjD,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/F,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,cAAc;YAAE,OAAO;QAC9D,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,GAAG,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,mBAAmB,CAAC,EAA6B;QAC/C,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,oBAAoB,CAAC,MAAkC,IAAU,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEpG,iBAAiB,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC;IACpF,CAAC;IAED,kBAAkB,CAAC,IAAY,IAAY,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzF,kBAAkB;IAEV,mBAAmB,CAAC,IAAY,EAAE,MAAc;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;CACF"}
1	+ {"version":3,"file":"McpClientManager.js","sourceRoot":"","sources":["../../../src/modules/orchestration/McpClientManager.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAEhE,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAAwB,IAAI,GAAG,EAAE,CAAC;IACzC,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;IACrD,MAAM,CAAS;IACf,YAAY,CAAyB;IACrC,YAAY,CAAsB;IAClC,YAAY,CAAwB;IACpC,MAAM,CAAoB;IAElC,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC;YAClC,MAAM;YACN,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAClD,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,gEAAgE,CAAC,CAAC;gBAC3G,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACxE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,eAAe,KAAuB,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAEnF,gBAAgB;QACd,OAAO,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,KAAkB,IAAU,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjG,QAAQ,CAAC,QAAgB,IAAa,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEpF,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAa;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,qCAAqC,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,UAAkB,EAAE,QAAgB,EAAE,IAAa;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAEvF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,kBAAkB,CAAC,CAAC;QAEhF,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,UAAU,EAAE,KAAK,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,IAAI,KAAK,EAAE,EAAE,yCAAyC,CAAC,CAAC;QACrI,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAA4B;SAC5E,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAC;QAC5B,OAAO,WAAW,CAAC,UAAU,EAAE,GAAG,EAAE;YAClC,UAAU;YACV,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,GAAW;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAQ,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAC5C,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC5E,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,MAAoB;QACpD,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,KAAK,mBAAmB;YAAE,OAAO;QAE5D,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAQ,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACvG,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YACzB,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;SACxF,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,uCAAuC,CAAC,CAAC;YAC3E,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB,KAAW,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACnD,iBAAiB,KAAW,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEjD,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/F,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,cAAc;YAAE,OAAO;QAC9D,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,GAAG,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,mBAAmB,CAAC,EAA6B;QAC/C,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,oBAAoB,CAAC,MAAkC,IAAU,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAEpG,iBAAiB,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC;IACpF,CAAC;IAED,kBAAkB,CAAC,IAAY,IAAY,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEzF,kBAAkB;IAEV,mBAAmB,CAAC,IAAY,EAAE,MAAc;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;CACF"}

package/dist/modules/orchestration/ProxiedToolRegistry.d.ts CHANGED Viewed

@@ -2,13 +2,20 @@
  * ProxiedToolRegistry — tracks tools proxied from child MCP servers.
  * SA4E-218: reserved (locally-provided) tool names are never shadowed by child servers.
  * Extracted from McpClientManager (SA4E-223 line-count gate, <= 200 lines/file).
+ *
+ * Content proxy: file-producing child tools (`export_…` / `render_…` / `generate_…`)
+ * are registered with the wrapper markers (`content_base64`, `x-content-param`,
+ * `x-output-base64`) and their capability is kept for invocation/result adaptation.
  */
 import type { Logger } from 'pino';
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import type { ToolDefinition } from '../../types/tool.js';
+import type { ContentCapability } from './content-proxy/types.js';
 export declare class ProxiedToolRegistry {
     private toolsToServer;
     private proxiedTools;
+    /** Content-proxy capability per adapted tool. */
+    private capabilities;
     /** Tool names provided locally by the orchestrator/registry — child servers must never shadow these. */
     private reservedToolNames;
     private logger;
@@ -19,6 +26,8 @@ export declare class ProxiedToolRegistry {
     /** Returns the child server name owning a tool, or undefined if not proxied. */
     getOwningServer(toolName: string): string | undefined;
     getProxiedTools(): ToolDefinition[];
+    /** Content-proxy capability for a tool, or undefined for unadapted tools. */
+    getCapability(toolName: string): ContentCapability | undefined;
     getToolCount(serverName: string): number;
     registerServerTools(name: string, client: Client): Promise<void>;
     clearServerTools(name: string): void;