Contentrain/ai

v@contentrain/[email protected] Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 13d Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents claude-code content-governance contentrain cursor developer-tools

+8 more

git i18n mcp mcp-server model-context-protocol sdk typescript windsurf

Affected surfaces

auth rbac rce_ssrf

Summary

AI summary

Updates Minor Changes, f5c70eb, and mcp across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds optional `media?: MediaProvider` facet to `RepoProvider`. Adds optional `media?: MediaProvider` facet to `RepoProvider`. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Low	Introduces five new MCP tools: `contentrain_media_list`, `contentrain_media_get`, `contentrain_media_ingest`, `contentrain_media_update`, `contentrain_media_delete`. Introduces five new MCP tools: `contentrain_media_list`, `contentrain_media_get`, `contentrain_media_ingest`, `contentrain_media_update`, `contentrain_media_delete`. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Low	Updates `MCP_TOOLS` in @contentrain/rules to list 24 tools (19 core + 5 media). Updates `MCP_TOOLS` in @contentrain/rules to list 24 tools (19 core + 5 media). Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Low	Adds Media Tools section to @contentrain/skills `references/mcp-tools.md`. Adds Media Tools section to @contentrain/skills `references/mcp-tools.md`. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Low	Adds new @contentrain/types `MediaProvider` contract and related types. Adds new @contentrain/types `MediaProvider` contract and related types. Source: llm_adapter@2026-07-13 Confidence: low	—
Feature	Low	Adds new @contentrain/types `MediaProvider` contract with list, get, ingest, update, delete methods. Adds new @contentrain/types `MediaProvider` contract with list, get, ingest, update, delete methods. Source: granite4.1:30b@2026-07-14-audit Confidence: low	—
Feature	Low	Introduces related types: MediaAsset, MediaListOptions, MediaListResult, MediaIngestInput, MediaUpdateInput in @contentrain/types. Introduces related types: MediaAsset, MediaListOptions, MediaListResult, MediaIngestInput, MediaUpdateInput in @contentrain/types. Source: granite4.1:30b@2026-07-14-audit Confidence: low	—
Feature	Low	Marks `contentrain_media_ingest` with openWorldHint: true for URL‑based ingest. Marks `contentrain_media_ingest` with openWorldHint: true for URL‑based ingest. Source: granite4.1:30b@2026-07-14-audit Confidence: low	—
Feature	Low	Marks `contentrain_media_delete` as destructive (destructiveHint: true) and requires confirm: true. Marks `contentrain_media_delete` as destructive (destructiveHint: true) and requires confirm: true. Source: granite4.1:30b@2026-07-14-audit Confidence: low	—

Full changelog

Minor Changes

f5c70eb: feat(mcp): media tools over an optional provider media facet

@contentrain/types: new MediaProvider contract (list/get/ingest/update/delete) plus MediaAsset, MediaListOptions, MediaListResult, MediaIngestInput, MediaUpdateInput. RepoProvider gains an optional media?: MediaProvider facet — implemented by hosted providers (Studio MCP Cloud), absent on Local/GitHub/GitLab.

@contentrain/mcp: five new tools — contentrain_media_list, contentrain_media_get, contentrain_media_ingest, contentrain_media_update, contentrain_media_delete — as a deterministic passthrough to the provider's media facet.
- Capability-aware: registered only when RepoProvider.media is present (new media requirement in TOOL_REQUIREMENTS). Local stdio servers keep listing exactly the 19 core tools; nothing changes for existing embeddings.
- URL-based ingest. MCP has no binary channel; the provider fetches the source URL server-side and owns SSRF/MIME/size policy. contentrain_media_ingest is the only tool with openWorldHint: true.
- Safety: media_delete is destructiveHint: true and requires confirm: true; content references are never rewritten by MCP.
- Closes the discovery loop for external agents: list assets → pick a media/... path → reference it via contentrain_content_save (absolute delivery URLs via mediaBaseUrl).
@contentrain/rules: MCP_TOOLS now lists 24 tools (19 core + 5 media); essential guardrails document the media flow.

@contentrain/skills: references/mcp-tools.md gains a Media Tools section covering all five tools (parity-tested against the MCP registry).

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Contentrain/ai

Get notified when new releases ship.

About Contentrain/ai

Local-first MCP server for AI content governance — 13 tools for model/content CRUD, validation, normalization, and i18n across any framework.

All releases →

Related context

Related tools

Earlier breaking changes

v@contentrain/[email protected] `validateModelDefinition` now returns `{ errors, warnings }` instead of a string array.
v@contentrain/[email protected] `model_save` rejects models with unknown keys, `min > max`, invalid constraints, and `unique` on singletons.
v@contentrain/[email protected] `content_save` now validates before committing and rejects invalid content.
v@contentrain/[email protected] `validateModelDefinition` now returns `{ errors, warnings }` instead of a string array.
v@contentrain/[email protected] `model_save` rejects models with unknown keys, `min > max`, invalid constraints, and `unique` on singletons.