sdlc-agent-4-enterprise-server 1.55.2 → 1.55.3

package/dist/modules/orchestration/ProxiedToolRegistry.js

@@ -2,10 +2,18 @@
  * ProxiedToolRegistry — tracks tools proxied from child MCP servers.
  * SA4E-218: reserved (locally-provided) tool names are never shadowed by child servers.
  * Extracted from McpClientManager (SA4E-223 line-count gate, <= 200 lines/file).
+ *
+ * Content proxy: file-producing child tools (`export_…` / `render_…` / `generate_…`)
+ * are registered with the wrapper markers (`content_base64`, `x-content-param`,
+ * `x-output-base64`) and their capability is kept for invocation/result adaptation.
  */
+import { detectCapability } from './content-proxy/detect.js';
+import { adaptToolDefinition } from './content-proxy/schema-adapter.js';
 export class ProxiedToolRegistry {
     toolsToServer = new Map();
     proxiedTools = [];
+    /** Content-proxy capability per adapted tool. */
+    capabilities = new Map();
     /** Tool names provided locally by the orchestrator/registry — child servers must never shadow these. */
     reservedToolNames = new Set();
     logger;
@@ -18,6 +26,8 @@ export class ProxiedToolRegistry {
     /** Returns the child server name owning a tool, or undefined if not proxied. */
     getOwningServer(toolName) { return this.toolsToServer.get(toolName); }
     getProxiedTools() { return this.proxiedTools; }
+    /** Content-proxy capability for a tool, or undefined for unadapted tools. */
+    getCapability(toolName) { return this.capabilities.get(toolName); }
     getToolCount(serverName) {
         let count = 0;
         for (const [, sn] of this.toolsToServer.entries()) {
@@ -35,10 +45,16 @@ export class ProxiedToolRegistry {
                 continue;
             }
             this.toolsToServer.set(tool.name, name);
-            this.proxiedTools.push({
+            const definition = {
                 name: tool.name, description: tool.description ?? '',
                 category: name, inputSchema: tool.inputSchema,
-            });
+            };
+            const capability = detectCapability(definition);
+            if (capability) {
+                this.capabilities.set(tool.name, capability);
+                this.logger.info({ tool: tool.name, contentParam: capability.contentParam }, 'Content proxy enabled for child tool');
+            }
+            this.proxiedTools.push(capability ? adaptToolDefinition(definition, capability) : definition);
         }
     }
     clearServerTools(name) {
@@ -47,8 +63,10 @@ export class ProxiedToolRegistry {
             if (sn === name)
                 names.push(tn);
         }
-        for (const tn of names)
+        for (const tn of names) {
             this.toolsToServer.delete(tn);
+            this.capabilities.delete(tn);
+        }
         this.proxiedTools = this.proxiedTools.filter((t) => !names.includes(t.name));
     }
 }

package/dist/modules/orchestration/ProxiedToolRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"ProxiedToolRegistry.js","sourceRoot":"","sources":["../../../src/modules/orchestration/ProxiedToolRegistry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,OAAO,mBAAmB;IACtB,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC/C,YAAY,GAAqB,EAAE,CAAC;IAC5C,wGAAwG;IAChG,iBAAiB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAC3C,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,0FAA0F;IAC1F,oBAAoB,CAAC,KAAkB,IAAU,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,CAAC,CAAC;IAElF,QAAQ,CAAC,QAAgB,IAAa,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEhF,gFAAgF;IAChF,eAAe,CAAC,QAAgB,IAAwB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAElG,eAAe,KAAuB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAEjE,YAAY,CAAC,UAAkB;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,EAAE,KAAK,UAAU;gBAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,MAAc;QACpD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAC3C,qFAAqF;YACrF,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,iHAAiH,CAAC,CAAC;gBACvK,SAAS;YACX,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACpD,QAAQ,EAAE,IAAkC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAiD;aAClH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,IAAY;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,EAAE,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACzF,KAAK,MAAM,EAAE,IAAI,KAAK;YAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF"}
+{"version":3,"file":"ProxiedToolRegistry.js","sourceRoot":"","sources":["../../../src/modules/orchestration/ProxiedToolRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAGxE,MAAM,OAAO,mBAAmB;IACtB,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC/C,YAAY,GAAqB,EAAE,CAAC;IAC5C,iDAAiD;IACzC,YAAY,GAAmC,IAAI,GAAG,EAAE,CAAC;IACjE,wGAAwG;IAChG,iBAAiB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAC3C,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,0FAA0F;IAC1F,oBAAoB,CAAC,KAAkB,IAAU,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,CAAC,CAAC;IAElF,QAAQ,CAAC,QAAgB,IAAa,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAEhF,gFAAgF;IAChF,eAAe,CAAC,QAAgB,IAAwB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAElG,eAAe,KAAuB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAEjE,6EAA6E;IAC7E,aAAa,CAAC,QAAgB,IAAmC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE1G,YAAY,CAAC,UAAkB;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,EAAE,KAAK,UAAU;gBAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY,EAAE,MAAc;QACpD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAC3C,qFAAqF;YACrF,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,iHAAiH,CAAC,CAAC;gBACvK,SAAS;YACX,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,UAAU,GAAmB;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;gBACpD,QAAQ,EAAE,IAAkC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAiD;aAClH,CAAC;YACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACvH,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,IAAY;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,EAAE,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACzF,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/modules/orchestration/content-proxy/artifact-name.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Artifact naming — derive a safe, bare file name for inlined bytes.
+ * No path fragments ever leave the backend: only `path.basename` survives.
+ */
+/** Keep only a bare file name — never a path fragment from a child result. */
+export declare function safeName(value: unknown): string | null;
+/** File name from a location (path/URI) or, failing that, from the MIME type. */
+export declare function nameFromLocation(location: string, mime?: string): string;
+/** Stable fallback name when the child provides neither a name nor a usable location. */
+export declare function nameFromMime(mime?: string): string;

package/dist/modules/orchestration/content-proxy/artifact-name.js

@@ -0,0 +1,36 @@
+/**
+ * Artifact naming — derive a safe, bare file name for inlined bytes.
+ * No path fragments ever leave the backend: only `path.basename` survives.
+ */
+import * as path from 'path';
+/** Keep only a bare file name — never a path fragment from a child result. */
+export function safeName(value) {
+    if (typeof value !== 'string')
+        return null;
+    const trimmed = value.trim().split(/[?#]/)[0];
+    const base = path.basename(trimmed);
+    return base.length > 0 && base !== '.' && base !== '..' ? base : null;
+}
+/** File name from a location (path/URI) or, failing that, from the MIME type. */
+export function nameFromLocation(location, mime) {
+    return safeName(location) ?? nameFromMime(mime);
+}
+/** Stable fallback name when the child provides neither a name nor a usable location. */
+export function nameFromMime(mime) {
+    return (mime && MIME_NAMES[mime.toLowerCase()]) || 'artifact.bin';
+}
+const MIME_NAMES = {
+    'application/pdf': 'artifact.pdf',
+    'application/json': 'artifact.json',
+    'application/zip': 'artifact.zip',
+    'text/html': 'artifact.html',
+    'text/plain': 'artifact.txt',
+    'text/markdown': 'artifact.md',
+    'image/png': 'artifact.png',
+    'image/jpeg': 'artifact.jpg',
+    'image/svg+xml': 'artifact.svg',
+    'application/vnd.openxmlformats-officedocument.wordprocessingml.document': 'artifact.docx',
+    'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet': 'artifact.xlsx',
+    'application/vnd.openxmlformats-officedocument.presentationml.presentation': 'artifact.pptx',
+};
+//# sourceMappingURL=artifact-name.js.map

package/dist/modules/orchestration/content-proxy/artifact-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-name.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/content-proxy/artifact-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,8EAA8E;AAC9E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,IAAa;IAC9D,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,cAAc,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,GAA2B;IACzC,iBAAiB,EAAE,cAAc;IACjC,kBAAkB,EAAE,eAAe;IACnC,iBAAiB,EAAE,cAAc;IACjC,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,aAAa;IAC9B,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,cAAc;IAC5B,eAAe,EAAE,cAAc;IAC/B,yEAAyE,EAAE,eAAe;IAC1F,mEAAmE,EAAE,eAAe;IACpF,2EAA2E,EAAE,eAAe;CAC7F,CAAC"}

package/dist/modules/orchestration/content-proxy/artifact-source.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Artifact source resolution — turns whatever a child tool returns into bytes.
+ *
+ * Transport-agnostic by design: the backend may run next to the child (stdio)
+ * or far away from it (httpStream). Retrieval order per artifact:
+ *   1. inline payload (`output_base64` / `base64` / `data`)
+ *   2. location: data URI / http(s) URL / MCP resource URI / filesystem path
+ *   3. filesystem path (backend host) → MCP resources/read fallback (remote host)
+ *
+ * Remote servers that only return a bare local path cannot be read — the bytes
+ * live on another machine. That case is reported as a tool error by the caller,
+ * never silently downgraded to a path.
+ */
+export interface ArtifactDeps {
+    /** Read a resource from the child server (works across hosts). */
+    readResource?: (uri: string) => Promise<Buffer | null>;
+    /** Fetch an http(s) URL. Overridable for tests; defaults to global fetch. */
+    fetchUrl?: (url: string) => Promise<Buffer | null>;
+}
+export interface FetchedArtifact {
+    buffer: Buffer;
+    file_name: string;
+    mime_type?: string;
+}
+/** Resolve one `artifacts[]` entry to bytes, or null when nothing is readable. */
+export declare function resolveArtifact(artifact: any, deps: ArtifactDeps): Promise<FetchedArtifact | null>;
+/** Resolve a standard MCP content block (resource / resource_link / image / audio). */
+export declare function resolveContentBlock(block: any, deps: ArtifactDeps): Promise<FetchedArtifact | null>;
+/** Read any supported location to bytes. */
+export declare function readLocation(location: string, deps: ArtifactDeps): Promise<Buffer | null>;

package/dist/modules/orchestration/content-proxy/artifact-source.js

@@ -0,0 +1,168 @@
+/**
+ * Artifact source resolution — turns whatever a child tool returns into bytes.
+ *
+ * Transport-agnostic by design: the backend may run next to the child (stdio)
+ * or far away from it (httpStream). Retrieval order per artifact:
+ *   1. inline payload (`output_base64` / `base64` / `data`)
+ *   2. location: data URI / http(s) URL / MCP resource URI / filesystem path
+ *   3. filesystem path (backend host) → MCP resources/read fallback (remote host)
+ *
+ * Remote servers that only return a bare local path cannot be read — the bytes
+ * live on another machine. That case is reported as a tool error by the caller,
+ * never silently downgraded to a path.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import { fileURLToPath, pathToFileURL } from 'url';
+import { MAX_ARTIFACT_BYTES } from '../../../config/ContentProxy.js';
+import { nameFromLocation, nameFromMime, safeName } from './artifact-name.js';
+/** Resolve one `artifacts[]` entry to bytes, or null when nothing is readable. */
+export async function resolveArtifact(artifact, deps) {
+    if (!artifact || typeof artifact !== 'object')
+        return null;
+    const mime = typeof artifact.mime_type === 'string' ? artifact.mime_type : undefined;
+    const name = safeName(artifact.name);
+    const inline = firstString(artifact.output_base64, artifact.content_base64, artifact.base64, artifact.data);
+    if (inline)
+        return fromBase64(inline, name, mime);
+    for (const location of [artifact.url, artifact.uri, artifact.path]) {
+        if (typeof location !== 'string' || location.trim() === '')
+            continue;
+        const buffer = await readLocation(location.trim(), deps);
+        if (buffer)
+            return { buffer, file_name: name ?? nameFromLocation(location, mime), mime_type: mime };
+    }
+    return null;
+}
+/** Resolve a standard MCP content block (resource / resource_link / image / audio). */
+export async function resolveContentBlock(block, deps) {
+    if (!block || typeof block !== 'object')
+        return null;
+    if (block.type === 'resource' && block.resource) {
+        const res = block.resource;
+        const mime = typeof res.mimeType === 'string' ? res.mimeType : undefined;
+        if (typeof res.blob === 'string')
+            return fromBase64(res.blob, safeName(res.uri), mime);
+        if (typeof res.text === 'string') {
+            const buffer = Buffer.from(res.text, 'utf8');
+            return { buffer, file_name: safeName(res.uri) ?? nameFromMime(mime), mime_type: mime };
+        }
+        if (typeof res.uri === 'string')
+            return locationArtifact(res.uri, deps, mime);
+    }
+    if (block.type === 'resource_link' && typeof block.uri === 'string') {
+        return locationArtifact(block.uri, deps, typeof block.mimeType === 'string' ? block.mimeType : undefined);
+    }
+    if ((block.type === 'image' || block.type === 'audio' || block.type === 'blob') && typeof block.data === 'string') {
+        const mime = typeof block.mimeType === 'string' ? block.mimeType : undefined;
+        return fromBase64(block.data, safeName(block.name), mime);
+    }
+    return null;
+}
+/** Read any supported location to bytes. */
+export async function readLocation(location, deps) {
+    if (location.startsWith('data:'))
+        return decodeDataUri(location);
+    if (/^https?:\/\//i.test(location))
+        return (deps.fetchUrl ?? fetchHttp)(location);
+    const fileUri = location.startsWith('file:') ? location : toFileUri(location);
+    if (location.startsWith('file:')) {
+        const local = readLocalFileUri(location);
+        if (local)
+            return local;
+        return deps.readResource ? deps.readResource(location) : null;
+    }
+    if (/^[a-z][a-z0-9+.-]*:/i.test(location) && !/^[a-z]:[\\/]/i.test(location)) {
+        // Any other scheme (artifact://, mcp://, …) is server-owned — ask the server.
+        return deps.readResource ? deps.readResource(location) : null;
+    }
+    const local = readLocalFile(path.resolve(location));
+    if (local)
+        return local;
+    return deps.readResource && fileUri ? deps.readResource(fileUri) : null;
+}
+async function locationArtifact(location, deps, mime) {
+    const buffer = await readLocation(location, deps);
+    return buffer ? { buffer, file_name: nameFromLocation(location, mime), mime_type: mime } : null;
+}
+function fromBase64(value, name, mime) {
+    const compact = value.replace(/\s+/g, '');
+    if (!compact || compact.length % 4 !== 0 || !/^[A-Za-z0-9+/]+={0,2}$/.test(compact))
+        return null;
+    const buffer = Buffer.from(compact, 'base64');
+    if (buffer.length === 0 || buffer.length > MAX_ARTIFACT_BYTES)
+        return null;
+    return { buffer, file_name: name ?? nameFromMime(mime), mime_type: mime };
+}
+/** Read a file on the backend host: regular file only, size-capped, no symlinks. */
+function readLocalFile(filePath) {
+    try {
+        const stat = fs.lstatSync(filePath);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_ARTIFACT_BYTES)
+            return null;
+        const buffer = fs.readFileSync(filePath);
+        return buffer.length <= MAX_ARTIFACT_BYTES ? buffer : null;
+    }
+    catch {
+        return null;
+    }
+}
+function readLocalFileUri(uri) {
+    try {
+        return readLocalFile(fileURLToPath(uri));
+    }
+    catch {
+        return null;
+    }
+}
+/** Cross-platform file:// URI — a POSIX path stays POSIX even on a Windows host. */
+function toFileUri(location) {
+    try {
+        if (/^[A-Za-z]:[\\/]/.test(location) || location.startsWith('\\\\')) {
+            return pathToFileURL(location).href;
+        }
+        if (location.startsWith('/'))
+            return `file://${encodeURI(location).replace(/#/g, '%23')}`;
+        return pathToFileURL(path.resolve(location)).href;
+    }
+    catch {
+        return null;
+    }
+}
+async function fetchHttp(url) {
+    try {
+        const res = await fetch(url, { signal: AbortSignal.timeout(30_000), redirect: 'follow' });
+        if (!res.ok)
+            return null;
+        const declared = Number(res.headers.get('content-length') ?? '0');
+        if (declared > MAX_ARTIFACT_BYTES)
+            return null;
+        const buffer = Buffer.from(await res.arrayBuffer());
+        return buffer.length > 0 && buffer.length <= MAX_ARTIFACT_BYTES ? buffer : null;
+    }
+    catch {
+        return null;
+    }
+}
+function decodeDataUri(uri) {
+    const match = /^data:([^;,]*)(;base64)?,(.*)$/is.exec(uri);
+    if (!match)
+        return null;
+    try {
+        const buffer = match[2]
+            ? Buffer.from(match[3], 'base64')
+            : Buffer.from(decodeURIComponent(match[3]), 'utf8');
+        return buffer.length > 0 && buffer.length <= MAX_ARTIFACT_BYTES ? buffer : null;
+    }
+    catch {
+        return null;
+    }
+}
+function firstString(...values) {
+    for (const value of values) {
+        if (typeof value === 'string' && value.trim().length > 0)
+            return value;
+    }
+    return null;
+}
+//# sourceMappingURL=artifact-source.js.map

package/dist/modules/orchestration/content-proxy/artifact-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-source.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/content-proxy/artifact-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAe9E,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAa,EAAE,IAAkB;IACrE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAElD,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAU,EAAE,IAAkB;IACtE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClH,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAkB;IACrE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;IAElF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,8EAA8E;QAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,IAAkB,EAAE,IAAa;IACjF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAmB,EAAE,IAAa;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC3F,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,CAAC;QACH,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QACtC,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAClE,IAAI,QAAQ,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAAiB;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/modules/orchestration/content-proxy/detect.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Capability detection — decides, from a child tool's name/description/schema,
+ * whether the content proxy should adapt it.
+ *
+ * Only file-producing tools are adapted. That gate keeps the adapter away from
+ * ordinary tools that also happen to have a `body`/`content` argument
+ * (jira_create_issue, confluence_create_page, mem_ingest, …).
+ */
+import type { ContentCapability } from './types.js';
+/** Minimal shape of a child tool (raw MCP listTools entry). */
+export interface ToolLike {
+    name: string;
+    description?: string;
+    inputSchema?: Record<string, unknown>;
+}
+/** Derive the content capability for a child tool, or null when it is not a file tool. */
+export declare function detectCapability(tool: ToolLike): ContentCapability | null;
+/** Pick the argument that carries document content. */
+export declare function detectContentParam(schema: Record<string, any>): string | undefined;

package/dist/modules/orchestration/content-proxy/detect.js

@@ -0,0 +1,60 @@
+/**
+ * Capability detection — decides, from a child tool's name/description/schema,
+ * whether the content proxy should adapt it.
+ *
+ * Only file-producing tools are adapted. That gate keeps the adapter away from
+ * ordinary tools that also happen to have a `body`/`content` argument
+ * (jira_create_issue, confluence_create_page, mem_ingest, …).
+ */
+import { CONTENT_PARAM_ALIASES, CONTENT_PROXY_OVERRIDES, FILE_OUTPUT_DESCRIPTION, FILE_TOOL_NAME_PREFIXES, NON_CONTENT_PARAM, } from '../../../config/ContentProxy.js';
+/** Derive the content capability for a child tool, or null when it is not a file tool. */
+export function detectCapability(tool) {
+    const override = CONTENT_PROXY_OVERRIDES[tool.name];
+    if (override?.enabled === false)
+        return null;
+    const fileOutput = override?.fileOutput ?? looksLikeFileOutput(tool);
+    if (!fileOutput)
+        return null;
+    const schema = (tool.inputSchema ?? {});
+    const properties = (schema.properties ?? {});
+    // Already wrapper-native (declares content_base64 itself, e.g. drawio_export_png):
+    // the extension handles it directly — no adaptation, no double mapping.
+    if (properties.content_base64)
+        return null;
+    const contentParam = override?.contentParam !== undefined
+        ? (override.contentParam ?? undefined)
+        : detectContentParam(schema);
+    return {
+        contentParam,
+        fileOutput,
+        declaredParams: new Set(Object.keys(properties)),
+    };
+}
+/** Pick the argument that carries document content. */
+export function detectContentParam(schema) {
+    const properties = (schema?.properties ?? {});
+    const required = Array.isArray(schema?.required) ? schema.required : [];
+    for (const alias of CONTENT_PARAM_ALIASES) {
+        if (properties[alias] && isStringLike(properties[alias]))
+            return alias;
+    }
+    const candidates = required.filter((name) => properties[name] && isStringLike(properties[name]) && !NON_CONTENT_PARAM.test(name));
+    return candidates.length === 1 ? candidates[0] : undefined;
+}
+function looksLikeFileOutput(tool) {
+    const name = tool.name.toLowerCase();
+    if (FILE_TOOL_NAME_PREFIXES.some((prefix) => name.startsWith(prefix)))
+        return true;
+    return FILE_OUTPUT_DESCRIPTION.test(tool.description ?? '');
+}
+/** JSON-Schema shape check that tolerates `anyOf`/`oneOf` unions (pydantic emits these). */
+function isStringLike(property) {
+    if (!property || typeof property !== 'object')
+        return false;
+    const prop = property;
+    if (prop.type === 'string')
+        return true;
+    const variants = [prop.anyOf, prop.oneOf].find(Array.isArray);
+    return !!variants?.some((variant) => variant?.type === 'string');
+}
+//# sourceMappingURL=detect.js.map

package/dist/modules/orchestration/content-proxy/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/content-proxy/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,iCAAiC,CAAC;AASzC,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAE7C,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAwB,CAAC;IAC/D,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAwB,CAAC;IACpE,mFAAmF;IACnF,wEAAwE;IACxE,IAAI,UAAU,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,YAAY,GAAG,QAAQ,EAAE,YAAY,KAAK,SAAS;QACvD,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,SAAS,CAAC;QACtC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO;QACL,YAAY;QACZ,UAAU;QACV,cAAc,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,kBAAkB,CAAC,MAA2B;IAC5D,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,UAAU,IAAI,EAAE,CAAwB,CAAC;IACrE,MAAM,QAAQ,GAAa,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAElF,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAChC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9F,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAc;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,4FAA4F;AAC5F,SAAS,YAAY,CAAC,QAAiB;IACrC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,IAAI,GAAG,QAA+B,CAAC;IAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2C,CAAC;IACxG,OAAO,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC"}

package/dist/modules/orchestration/content-proxy/invocation-adapter.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Invocation adapter — maps the wrapper's `content_base64` onto the child's own
+ * content argument (e.g. `markdown`) and strips adapter-only arguments.
+ *
+ * Wrapper mode is signalled by the presence of `content_base64` or `output_path`.
+ * Direct (non-wrapper) calls keep their original arguments and result shape.
+ */
+import type { AdaptedInvocation, ContentCapability } from './types.js';
+/** Adapt arguments before they reach the child server. */
+export declare function adaptInvocation(capability: ContentCapability, args: unknown): AdaptedInvocation;

package/dist/modules/orchestration/content-proxy/invocation-adapter.js

@@ -0,0 +1,52 @@
+/**
+ * Invocation adapter — maps the wrapper's `content_base64` onto the child's own
+ * content argument (e.g. `markdown`) and strips adapter-only arguments.
+ *
+ * Wrapper mode is signalled by the presence of `content_base64` or `output_path`.
+ * Direct (non-wrapper) calls keep their original arguments and result shape.
+ */
+/** Arguments owned by the extension wrapper, never forwarded to a child. */
+const WRAPPER_ONLY_KEYS = ['content_base64', 'output_path'];
+/** Adapt arguments before they reach the child server. */
+export function adaptInvocation(capability, args) {
+    const input = isRecord(args) ? args : {};
+    const wrapperMode = WRAPPER_ONLY_KEYS.some((key) => Object.prototype.hasOwnProperty.call(input, key));
+    if (!wrapperMode)
+        return { args: input, wrapperMode: false, capability };
+    const adapted = { ...input };
+    const encoded = adapted.content_base64;
+    delete adapted.output_path;
+    if (!capability.declaredParams.has('file_path'))
+        delete adapted.file_path;
+    if (capability.contentParam) {
+        delete adapted.content_base64;
+        if (typeof encoded === 'string' && encoded.length > 0) {
+            const decoded = decodeBase64Utf8(encoded);
+            if (decoded === null) {
+                return { args: adapted, wrapperMode: true, capability, error: 'Invalid content_base64 payload.' };
+            }
+            adapted[capability.contentParam] = decoded;
+        }
+        else if (typeof adapted[capability.contentParam] !== 'string') {
+            return {
+                args: adapted,
+                wrapperMode: true,
+                capability,
+                error: `Missing content: pass file_path so the extension wrapper can inject content_base64 ` +
+                    `(or send ${capability.contentParam} directly).`,
+            };
+        }
+    }
+    return { args: adapted, wrapperMode: true, capability };
+}
+/** Strict UTF-8 base64 decode — rejects payloads that would silently corrupt the document. */
+function decodeBase64Utf8(value) {
+    const compact = value.replace(/\s+/g, '');
+    if (!compact || compact.length % 4 !== 0 || !/^[A-Za-z0-9+/]+={0,2}$/.test(compact))
+        return null;
+    return Buffer.from(compact, 'base64').toString('utf8');
+}
+function isRecord(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+//# sourceMappingURL=invocation-adapter.js.map

package/dist/modules/orchestration/content-proxy/invocation-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation-adapter.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/content-proxy/invocation-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAU,CAAC;AAErE,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,UAA6B,EAAE,IAAa;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACtG,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAEzE,MAAM,OAAO,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IACvC,OAAO,OAAO,CAAC,WAAW,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC;IAE1E,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,cAAc,CAAC;QAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;YACpG,CAAC;YACD,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC;QAC7C,CAAC;aAAM,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,IAAI;gBACjB,UAAU;gBACV,KAAK,EACH,qFAAqF;oBACrF,YAAY,UAAU,CAAC,YAAY,aAAa;aACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED,8FAA8F;AAC9F,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC"}

package/dist/modules/orchestration/content-proxy/result-adapter.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Result adapter — inlines child artifacts as base64 so the extension wrapper can
+ * write them to disk. Only runs in wrapper mode (content in → content out), so
+ * direct dynamic calls keep returning the child's lightweight path response.
+ *
+ * The child result text is usually a JSON document shaped like:
+ *   { success, summary, artifacts: [{ path, name, mime_type, size }] }
+ * Bytes may also arrive as MCP resource blocks (remote servers). Absolute host
+ * paths are stripped from the response; bytes travel as base64.
+ *
+ * Wrapper-mode contract: content or a hard error — never a bare path. A path
+ * that the backend cannot read (remote server, same-host invariant broken) is
+ * reported as ARTIFACT_FETCH_FAILED so the caller cannot mistake it for success.
+ */
+import type { AdaptedInvocation } from './types.js';
+import type { ArtifactDeps } from './artifact-source.js';
+export interface ResultAdapterDeps extends ArtifactDeps {
+    /** Child server name — included in retrieval errors. */
+    serverName?: string;
+}
+/** Adapt a child result for wrapper mode; unchanged for direct calls. */
+export declare function adaptResult(invocation: AdaptedInvocation, result: any, deps?: ResultAdapterDeps): Promise<any>;