sdlc-agent-4-enterprise-server 1.55.7 → 1.55.8

package/README.md

@@ -6,7 +6,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.55.3-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.55.8-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>

package/dist/config/ContentProxy.d.ts

@@ -30,9 +30,26 @@ export interface ContentProxyOverride {
     /** Disable the adapter entirely for this tool. */
     enabled?: boolean;
 }
-/** Artifact output roots — dedicated sinks for orphaned artifact files. */
-export declare function artifactOutputRoots(): readonly string[];
-/** Check whether a real path falls inside one of the artifact roots. */
+/**
+ * Artifact output roots — the dedicated sinks for orphaned artifact files
+ * (SA4E-380 F-01/F-05). Shared single source for OI-14 (immediate cleanup +
+ * read confinement) and OI-15 (periodic sweep). The raw OS temp root and the
+ * agent workspace are NEVER roots.
+ *
+ * Resolution order:
+ *  1. `ARTIFACT_OUTPUT_ROOTS` env override — `path.delimiter`-separated list
+ *     (operator trust; see SA-08 for the recommended defense-in-depth checks).
+ *  2. Defaults: the dedicated `%TEMP%/sa4e-artifacts` sink, the workspace
+ *     `tmp/artifacts` directory, and the markdown-exporter child's own
+ *     artifact home (F-01: without it every local-path read fails confinement).
+ */
+export declare function artifactOutputRoots(env?: NodeJS.ProcessEnv): readonly string[];
+/**
+ * F-01 containment: is `candidate` (already realpath-canonicalised by the
+ * caller) located inside `root`? Compares with `path.relative` — case-folded
+ * on win32, cross-device resolves to an absolute path → rejected. Separator
+ * boundary is honoured (`<root>-evil` is NOT inside `<root>`).
+ */
 export declare function isPathWithinRoot(root: string, candidate: string): boolean;
 /** Per-tool escape hatch for tools that defy the naming/description convention. */
 export declare const CONTENT_PROXY_OVERRIDES: Record<string, ContentProxyOverride>;

package/dist/config/ContentProxy.js

@@ -11,7 +11,8 @@
  *
  * Overrides exist only for tools that do not follow the convention.
  */
-import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
 /** Tool-name prefixes whose result is a file written by the child server. */
 export const FILE_TOOL_NAME_PREFIXES = ['export_', 'render_', 'generate_'];
 /** Description fallback: "Convert ... to PDF/DOCX/…" (target must be a file format). */
@@ -32,24 +33,49 @@ export const CONTENT_PARAM_ALIASES = [
 export const NON_CONTENT_PARAM = /^(content_base64|.*_base64|file_path|.*_path|path|url|uri|dir|.*_id|id|name|.*_name|key|.*_key|token|secret|password|mime|.*_type|type|format|mode|encoding)$/i;
 /** Maximum artifact size inlined as base64 (mirrors the extension pre-read cap). */
 export const MAX_ARTIFACT_BYTES = 25 * 1024 * 1024;
-/** Artifact output roots — dedicated sinks for orphaned artifact files. */
-export function artifactOutputRoots() {
-    // Convention: ARTIFACT_OUTPUT_ROOTS env var, or default per-workspace roots
-    const env = process.env.ARTIFACT_OUTPUT_ROOTS;
-    if (env)
-        return env.split(':').map((s) => s.trim()).filter(Boolean);
-    // Default: no roots configured → sweep will find nothing (safe no-op)
-    return [];
+/**
+ * Artifact output roots — the dedicated sinks for orphaned artifact files
+ * (SA4E-380 F-01/F-05). Shared single source for OI-14 (immediate cleanup +
+ * read confinement) and OI-15 (periodic sweep). The raw OS temp root and the
+ * agent workspace are NEVER roots.
+ *
+ * Resolution order:
+ *  1. `ARTIFACT_OUTPUT_ROOTS` env override — `path.delimiter`-separated list
+ *     (operator trust; see SA-08 for the recommended defense-in-depth checks).
+ *  2. Defaults: the dedicated `%TEMP%/sa4e-artifacts` sink, the workspace
+ *     `tmp/artifacts` directory, and the markdown-exporter child's own
+ *     artifact home (F-01: without it every local-path read fails confinement).
+ */
+export function artifactOutputRoots(env = process.env) {
+    const override = parseArtifactRootsEnv(env.ARTIFACT_OUTPUT_ROOTS);
+    if (override)
+        return override;
+    const workspace = path.resolve(process.cwd());
+    const childHome = process.platform === 'win32'
+        ? path.join(process.env.LOCALAPPDATA ?? '', 'markdown-exporter-mcp', 'artifacts')
+        : path.join(process.env.HOME ?? os.homedir(), '.cache', 'markdown-exporter-mcp', 'artifacts');
+    return [
+        path.join(os.tmpdir(), 'sa4e-artifacts'),
+        path.join(workspace, 'tmp', 'artifacts'),
+        path.resolve(childHome),
+    ];
 }
-/** Check whether a real path falls inside one of the artifact roots. */
+/** SA-08 surface: parse the env override; empty/garbage → fall back to defaults. */
+function parseArtifactRootsEnv(raw) {
+    if (!raw)
+        return undefined;
+    const roots = raw.split(path.delimiter).map((s) => s.trim()).filter(Boolean);
+    return roots.length ? roots : undefined;
+}
+/**
+ * F-01 containment: is `candidate` (already realpath-canonicalised by the
+ * caller) located inside `root`? Compares with `path.relative` — case-folded
+ * on win32, cross-device resolves to an absolute path → rejected. Separator
+ * boundary is honoured (`<root>-evil` is NOT inside `<root>`).
+ */
 export function isPathWithinRoot(root, candidate) {
-    try {
-        const real = fs.realpathSync(candidate);
-        return artifactOutputRoots().some((r) => real.startsWith(r));
-    }
-    catch {
-        return false;
-    }
+    const rel = path.relative(path.resolve(root), path.resolve(candidate));
+    return rel === '' || (rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel));
 }
 /** Per-tool escape hatch for tools that defy the naming/description convention. */
 export const CONTENT_PROXY_OVERRIDES = {};

package/dist/config/ContentProxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"ContentProxy.js","sourceRoot":"","sources":["../../src/config/ContentProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,gEAAgE,CAAC;AAExG,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,gKAAgK,CAAC;AAEnK,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYnD,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB;IACjC,4EAA4E;IAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC9C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,sEAAsE;IACtE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAyC,EAAE,CAAC"}
+{"version":3,"file":"ContentProxy.js","sourceRoot":"","sources":["../../src/config/ContentProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,gEAAgE,CAAC;AAExG,qEAAqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAsB;IACtD,UAAU;IACV,kBAAkB;IAClB,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAC5B,gKAAgK,CAAC;AAEnK,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYnD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GACb,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,uBAAuB,EAAE,WAAW,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,uBAAuB,EAAE,WAAW,CAAC,CAAC;IAClG,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAyC,EAAE,CAAC"}

package/dist/modules/orchestration/content-proxy/artifact-source.d.ts

@@ -11,11 +11,19 @@
  * live on another machine. That case is reported as a tool error by the caller,
  * never silently downgraded to a path.
  */
+import * as fs from 'fs';
 export interface ArtifactDeps {
     /** Read a resource from the child server (works across hosts). */
     readResource?: (uri: string) => Promise<Buffer | null>;
     /** Fetch an http(s) URL. Overridable for tests; defaults to global fetch. */
     fetchUrl?: (url: string) => Promise<Buffer | null>;
+    /**
+     * OI-14 local-read cleanup hook. Receives the absolute path and the
+     * pre-read stat; the default (no hook) deletes the artifact after its
+     * bytes are inlined. Only local reads invoke it — resource/URL/blob
+     * resolutions never do (UT-46).
+     */
+    cleanup?: (filePath: string, stat: fs.Stats) => void;
 }
 export interface FetchedArtifact {
     buffer: Buffer;

package/dist/modules/orchestration/content-proxy/artifact-source.js

@@ -15,6 +15,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { MAX_ARTIFACT_BYTES } from '../../../config/ContentProxy.js';
+import { isWithinArtifactRoots } from '../artifact-cleanup/artifact-roots.js';
 import { nameFromLocation, nameFromMime, safeName } from './artifact-name.js';
 /** Resolve one `artifacts[]` entry to bytes, or null when nothing is readable. */
 export async function resolveArtifact(artifact, deps) {
@@ -67,7 +68,7 @@ export async function readLocation(location, deps) {
         return (deps.fetchUrl ?? fetchHttp)(location);
     const fileUri = location.startsWith('file:') ? location : toFileUri(location);
     if (location.startsWith('file:')) {
-        const local = readLocalFileUri(location);
+        const local = readLocalFileUri(location, deps);
         if (local)
             return local;
         return deps.readResource ? deps.readResource(location) : null;
@@ -76,7 +77,7 @@ export async function readLocation(location, deps) {
         // Any other scheme (artifact://, mcp://, …) is server-owned — ask the server.
         return deps.readResource ? deps.readResource(location) : null;
     }
-    const local = readLocalFile(path.resolve(location));
+    const local = readLocalFile(path.resolve(location), deps);
     if (local)
         return local;
     return deps.readResource && fileUri ? deps.readResource(fileUri) : null;
@@ -94,27 +95,71 @@ function fromBase64(value, name, mime) {
         return null;
     return { buffer, file_name: name ?? nameFromMime(mime), mime_type: mime };
 }
-/** Read a file on the backend host: regular file only, size-capped, no symlinks. */
-function readLocalFile(filePath) {
+/**
+ * Read a file on the backend host: regular file only, size-capped, no symlinks.
+ *
+ * SA4E-380 F-01 (binding): the path's real location (symlinks/junctions/`..`
+ * resolved) must fall inside the dedicated ARTIFACT_OUTPUT_ROOTS BEFORE any
+ * filesystem access — an out-of-root path is never read and never deleted.
+ *
+ * SA4E-380 OI-14: once the bytes are inlined the local artifact is garbage —
+ * the cleanup hook (default: delete with F-06 stat-identity re-verification)
+ * runs after the successful read. A failed read never deletes anything.
+ */
+function readLocalFile(filePath, deps) {
+    if (!isWithinArtifactRoots(filePath))
+        return null;
     try {
         const stat = fs.lstatSync(filePath);
         if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_ARTIFACT_BYTES)
             return null;
         const buffer = fs.readFileSync(filePath);
-        return buffer.length <= MAX_ARTIFACT_BYTES ? buffer : null;
+        if (buffer.length > MAX_ARTIFACT_BYTES)
+            return null;
+        try {
+            (deps.cleanup ?? deleteLocalArtifact)(filePath, stat);
+        }
+        catch {
+            // Cleanup failure never fails the tool call (UT-45) — bytes are safe.
+            console.warn(`[artifact-source] cleanup hook failed for '${path.basename(filePath)}'`);
+        }
+        return buffer;
     }
     catch {
         return null;
     }
 }
-function readLocalFileUri(uri) {
+function readLocalFileUri(uri, deps) {
     try {
-        return readLocalFile(fileURLToPath(uri));
+        return readLocalFile(fileURLToPath(uri), deps);
     }
     catch {
         return null;
     }
 }
+/**
+ * Default OI-14 cleanup: delete the artifact whose bytes were just inlined.
+ * F-06 TOCTOU guard — re-stat and verify identity (ino/size/mtimeMs) before
+ * unlink so a path swapped between read and delete is never removed.
+ */
+function deleteLocalArtifact(filePath, before) {
+    let now;
+    try {
+        now = fs.lstatSync(filePath);
+    }
+    catch {
+        return; // already gone — nothing to delete
+    }
+    if (now.ino !== before.ino || now.size !== before.size || now.mtimeMs !== before.mtimeMs)
+        return;
+    try {
+        fs.unlinkSync(filePath);
+    }
+    catch {
+        // I-3: basename only — never leak host paths into logs.
+        console.warn(`[artifact-source] could not delete local artifact '${path.basename(filePath)}'`);
+    }
+}
 /** Cross-platform file:// URI — a POSIX path stays POSIX even on a Windows host. */
 function toFileUri(location) {
     try {

package/dist/modules/orchestration/content-proxy/artifact-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-source.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/content-proxy/artifact-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAe9E,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAa,EAAE,IAAkB;IACrE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAElD,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAU,EAAE,IAAkB;IACtE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClH,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAkB;IACrE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;IAElF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,8EAA8E;QAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,IAAkB,EAAE,IAAa;IACjF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAmB,EAAE,IAAa;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC3F,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,CAAC;QACH,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QACtC,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAClE,IAAI,QAAQ,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAAiB;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"artifact-source.js","sourceRoot":"","sources":["../../../../src/modules/orchestration/content-proxy/artifact-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAsB9E,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAa,EAAE,IAAkB;IACrE,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5G,IAAI,MAAM;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAElD,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACrE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAU,EAAE,IAAkB;IACtE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClH,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAkB;IACrE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;IAElF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7E,8EAA8E;QAC9E,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,IAAkB,EAAE,IAAa;IACjF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAmB,EAAE,IAAa;IACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,QAAgB,EAAE,IAAkB;IACzD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC3F,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,CAAC;YACH,CAAC,IAAI,CAAC,OAAO,IAAI,mBAAmB,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,OAAO,CAAC,IAAI,CAAC,8CAA8C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,IAAkB;IACvD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,QAAgB,EAAE,MAAgB;IAC7D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,mCAAmC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO;IACjG,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,OAAO,CAAC,IAAI,CAAC,sDAAsD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,CAAC;QACH,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;QACtC,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAClE,IAAI,QAAQ,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAAiB;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sdlc-agent-4-enterprise-server",
-  "version": "1.55.7",
+  "version": "1.55.8",
   "description": "Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration",
   "main": "dist/index.js",
   "bin": {

package/src/config/ContentProxy.ts

@@ -12,7 +12,8 @@
  * Overrides exist only for tools that do not follow the convention.
  */
 
-import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
 /** Tool-name prefixes whose result is a file written by the child server. */
 export const FILE_TOOL_NAME_PREFIXES: readonly string[] = ['export_', 'render_', 'generate_'];
 
@@ -49,23 +50,50 @@ export interface ContentProxyOverride {
   enabled?: boolean;
 }
 
-/** Artifact output roots — dedicated sinks for orphaned artifact files. */
-export function artifactOutputRoots(): readonly string[] {
-  // Convention: ARTIFACT_OUTPUT_ROOTS env var, or default per-workspace roots
-  const env = process.env.ARTIFACT_OUTPUT_ROOTS;
-  if (env) return env.split(':').map((s) => s.trim()).filter(Boolean);
-  // Default: no roots configured → sweep will find nothing (safe no-op)
-  return [];
+/**
+ * Artifact output roots — the dedicated sinks for orphaned artifact files
+ * (SA4E-380 F-01/F-05). Shared single source for OI-14 (immediate cleanup +
+ * read confinement) and OI-15 (periodic sweep). The raw OS temp root and the
+ * agent workspace are NEVER roots.
+ *
+ * Resolution order:
+ *  1. `ARTIFACT_OUTPUT_ROOTS` env override — `path.delimiter`-separated list
+ *     (operator trust; see SA-08 for the recommended defense-in-depth checks).
+ *  2. Defaults: the dedicated `%TEMP%/sa4e-artifacts` sink, the workspace
+ *     `tmp/artifacts` directory, and the markdown-exporter child's own
+ *     artifact home (F-01: without it every local-path read fails confinement).
+ */
+export function artifactOutputRoots(env: NodeJS.ProcessEnv = process.env): readonly string[] {
+  const override = parseArtifactRootsEnv(env.ARTIFACT_OUTPUT_ROOTS);
+  if (override) return override;
+  const workspace = path.resolve(process.cwd());
+  const childHome =
+    process.platform === 'win32'
+      ? path.join(process.env.LOCALAPPDATA ?? '', 'markdown-exporter-mcp', 'artifacts')
+      : path.join(process.env.HOME ?? os.homedir(), '.cache', 'markdown-exporter-mcp', 'artifacts');
+  return [
+    path.join(os.tmpdir(), 'sa4e-artifacts'),
+    path.join(workspace, 'tmp', 'artifacts'),
+    path.resolve(childHome),
+  ];
 }
 
-/** Check whether a real path falls inside one of the artifact roots. */
+/** SA-08 surface: parse the env override; empty/garbage → fall back to defaults. */
+function parseArtifactRootsEnv(raw: string | undefined): readonly string[] | undefined {
+  if (!raw) return undefined;
+  const roots = raw.split(path.delimiter).map((s) => s.trim()).filter(Boolean);
+  return roots.length ? roots : undefined;
+}
+
+/**
+ * F-01 containment: is `candidate` (already realpath-canonicalised by the
+ * caller) located inside `root`? Compares with `path.relative` — case-folded
+ * on win32, cross-device resolves to an absolute path → rejected. Separator
+ * boundary is honoured (`<root>-evil` is NOT inside `<root>`).
+ */
 export function isPathWithinRoot(root: string, candidate: string): boolean {
-  try {
-    const real = fs.realpathSync(candidate);
-    return artifactOutputRoots().some((r) => real.startsWith(r));
-  } catch {
-    return false;
-  }
+  const rel = path.relative(path.resolve(root), path.resolve(candidate));
+  return rel === '' || (rel !== '..' && !rel.startsWith(`..${path.sep}`) && !path.isAbsolute(rel));
 }
 
 /** Per-tool escape hatch for tools that defy the naming/description convention. */

package/src/modules/orchestration/__tests__/McpClientManager.content-proxy.test.ts

@@ -11,7 +11,12 @@ import type { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { McpClientManager } from '../McpClientManager.js';
 import { silentLogger } from '../../../__tests__/sa4e-testkit.js';
 
-const TMP = fs.mkdtempSync(path.join(os.tmpdir(), 'content-proxy-mgr-'));
+// SA4E-380 F-01: a local artifact is only inlined when it lives inside a
+// dedicated artifact root. The default root is `<os.tmpdir()>/sa4e-artifacts`,
+// so the DOCX fixture must be created there for the containment check to pass.
+const ARTIFACT_ROOT = path.join(os.tmpdir(), 'sa4e-artifacts');
+fs.mkdirSync(ARTIFACT_ROOT, { recursive: true });
+const TMP = fs.mkdtempSync(path.join(ARTIFACT_ROOT, 'content-proxy-mgr-'));
 afterAll(() => fs.rmSync(TMP, { recursive: true, force: true }));
 
 const EXPORT_DOCX_TOOL = {

package/src/modules/orchestration/content-proxy/__tests__/content-proxy.test.ts

@@ -13,7 +13,12 @@ import { adaptInvocation } from '../invocation-adapter.js';
 import { adaptResult } from '../result-adapter.js';
 import type { ToolDefinition } from '../../../../types/tool.js';
 
-const TMP = fs.mkdtempSync(path.join(os.tmpdir(), 'content-proxy-'));
+// SA4E-380 F-01: local artifacts are only inlined when they live inside a
+// dedicated artifact root. The default root is `<os.tmpdir()>/sa4e-artifacts`,
+// so fixtures must be created there for the containment check to pass.
+const ARTIFACT_ROOT = path.join(os.tmpdir(), 'sa4e-artifacts');
+fs.mkdirSync(ARTIFACT_ROOT, { recursive: true });
+const TMP = fs.mkdtempSync(path.join(ARTIFACT_ROOT, 'content-proxy-'));
 afterAll(() => fs.rmSync(TMP, { recursive: true, force: true }));
 
 const EXPORT_DOCX: ToolDefinition = {

package/src/modules/orchestration/content-proxy/artifact-source.ts

@@ -16,6 +16,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { MAX_ARTIFACT_BYTES } from '../../../config/ContentProxy.js';
+import { isWithinArtifactRoots } from '../artifact-cleanup/artifact-roots.js';
 import { nameFromLocation, nameFromMime, safeName } from './artifact-name.js';
 
 export interface ArtifactDeps {
@@ -23,6 +24,13 @@ export interface ArtifactDeps {
   readResource?: (uri: string) => Promise<Buffer | null>;
   /** Fetch an http(s) URL. Overridable for tests; defaults to global fetch. */
   fetchUrl?: (url: string) => Promise<Buffer | null>;
+  /**
+   * OI-14 local-read cleanup hook. Receives the absolute path and the
+   * pre-read stat; the default (no hook) deletes the artifact after its
+   * bytes are inlined. Only local reads invoke it — resource/URL/blob
+   * resolutions never do (UT-46).
+   */
+  cleanup?: (filePath: string, stat: fs.Stats) => void;
 }
 
 export interface FetchedArtifact {
@@ -81,7 +89,7 @@ export async function readLocation(location: string, deps: ArtifactDeps): Promis
 
   const fileUri = location.startsWith('file:') ? location : toFileUri(location);
   if (location.startsWith('file:')) {
-    const local = readLocalFileUri(location);
+    const local = readLocalFileUri(location, deps);
     if (local) return local;
     return deps.readResource ? deps.readResource(location) : null;
   }
@@ -91,7 +99,7 @@ export async function readLocation(location: string, deps: ArtifactDeps): Promis
     return deps.readResource ? deps.readResource(location) : null;
   }
 
-  const local = readLocalFile(path.resolve(location));
+  const local = readLocalFile(path.resolve(location), deps);
   if (local) return local;
   return deps.readResource && fileUri ? deps.readResource(fileUri) : null;
 }
@@ -109,26 +117,65 @@ function fromBase64(value: string, name: string | null, mime?: string): FetchedA
   return { buffer, file_name: name ?? nameFromMime(mime), mime_type: mime };
 }
 
-/** Read a file on the backend host: regular file only, size-capped, no symlinks. */
-function readLocalFile(filePath: string): Buffer | null {
+/**
+ * Read a file on the backend host: regular file only, size-capped, no symlinks.
+ *
+ * SA4E-380 F-01 (binding): the path's real location (symlinks/junctions/`..`
+ * resolved) must fall inside the dedicated ARTIFACT_OUTPUT_ROOTS BEFORE any
+ * filesystem access — an out-of-root path is never read and never deleted.
+ *
+ * SA4E-380 OI-14: once the bytes are inlined the local artifact is garbage —
+ * the cleanup hook (default: delete with F-06 stat-identity re-verification)
+ * runs after the successful read. A failed read never deletes anything.
+ */
+function readLocalFile(filePath: string, deps: ArtifactDeps): Buffer | null {
+  if (!isWithinArtifactRoots(filePath)) return null;
   try {
     const stat = fs.lstatSync(filePath);
     if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_ARTIFACT_BYTES) return null;
     const buffer = fs.readFileSync(filePath);
-    return buffer.length <= MAX_ARTIFACT_BYTES ? buffer : null;
+    if (buffer.length > MAX_ARTIFACT_BYTES) return null;
+    try {
+      (deps.cleanup ?? deleteLocalArtifact)(filePath, stat);
+    } catch {
+      // Cleanup failure never fails the tool call (UT-45) — bytes are safe.
+      console.warn(`[artifact-source] cleanup hook failed for '${path.basename(filePath)}'`);
+    }
+    return buffer;
   } catch {
     return null;
   }
 }
 
-function readLocalFileUri(uri: string): Buffer | null {
+function readLocalFileUri(uri: string, deps: ArtifactDeps): Buffer | null {
   try {
-    return readLocalFile(fileURLToPath(uri));
+    return readLocalFile(fileURLToPath(uri), deps);
   } catch {
     return null;
   }
 }
 
+/**
+ * Default OI-14 cleanup: delete the artifact whose bytes were just inlined.
+ * F-06 TOCTOU guard — re-stat and verify identity (ino/size/mtimeMs) before
+ * unlink so a path swapped between read and delete is never removed.
+ */
+function deleteLocalArtifact(filePath: string, before: fs.Stats): void {
+  let now: fs.Stats;
+  try {
+    now = fs.lstatSync(filePath);
+  } catch {
+    return; // already gone — nothing to delete
+  }
+  if (now.ino !== before.ino || now.size !== before.size || now.mtimeMs !== before.mtimeMs) return;
+  try {
+    fs.unlinkSync(filePath);
+  } catch {
+    // I-3: basename only — never leak host paths into logs.
+    console.warn(`[artifact-source] could not delete local artifact '${path.basename(filePath)}'`);
+  }
+}
+
 /** Cross-platform file:// URI — a POSIX path stays POSIX even on a Windows host. */
 function toFileUri(location: string): string | null {
   try {

package/tests/integration/sandbox.it.test.ts

@@ -125,11 +125,14 @@ describe.skipIf(!dockerAvailable)('Sandbox module — Docker integration (TC-01,
     const createParsed = JSON.parse(create.content[0].text);
     const sessionId = createParsed.sessionId;
 
-    const res = await handlers.get('sandbox_exec')!({ command: 'curl -s -m 5 https://google.com || true', sessionId });
+    // No `|| true` here: that would force the shell to exit 0 and mask the very
+    // failure we assert. In network:none mode curl cannot resolve/connect, so it
+    // exits non-zero (6/7/28) and returns no body — both prove isolation holds.
+    const res = await handlers.get('sandbox_exec')!({ command: 'curl -s -m 5 https://google.com', sessionId });
     const parsed = JSON.parse(res.content[0].text);
-    // In network:none mode, curl should fail (non-zero exit code) or return empty if it exists.
-    // Since we are asserting isolation, an exit code of 0 means it reached the internet.
+    // An exit code of 0 with a response body would mean the container reached the internet.
     expect(parsed.exitCode).not.toBe(0);
+    expect(parsed.stdout.trim()).toBe('');
     await handlers.get('sandbox_session')!({ action: 'destroy', sessionId });
   }, 30000);