@adeu/mcp-server 1.18.5 → 1.19.1

package/dist/index.js

@@ -1334,8 +1334,8 @@ var READ_DOCX_TAIL = "Modes:\n- 'full' (default): paginated body content. Use pa
 var PROCESS_BATCH_COMMON_DESC = "Applies a batch of edits and review actions to a DOCX.\n\nAll changes evaluate against the ORIGINAL document state \u2014 do not chain dependent edits within one batch (e.g. rename X to Y, then modify Y). Apply the rename first, then send a second batch.\n\n";
 var PROCESS_BATCH_OPERATIONS_DESC = "Each item in `changes` must specify a `type`:\n1. 'modify': Search-and-replace. By default `target_text` must match uniquely (`match_mode`:'strict') \u2014 add surrounding context to disambiguate, or set `match_mode`:'first'/'all' to edit the first or every occurrence. Set `regex`:true to treat `target_text` as a regular expression (capture groups available in `new_text` as $1, $2\u2026). `new_text` supports Markdown: '# Heading 1' through '###### Heading 6', '**bold**', '_italic_', and '\\n\\n' to split into multiple paragraphs. Empty `new_text` deletes. Do NOT write CriticMarkup tags ({++, {--, {>>) manually \u2014 use the `comment` parameter for comments.\n   \u2022 EMPTY/FORM TABLE CELLS: a blank cell has no text to match. `read_docx` renders each cell with a trailing `{#cell:<id>}` anchor \u2014 to fill a blank cell, set `target_text` to that exact anchor (e.g. '{#cell:0000005E}') and put the value in `new_text`. Do NOT try to match the pipe layout ('Date |  |  |'); the pipes are display separators, not editable text.\n2. 'accept' / 'reject': Finalize or revert a tracked change by `target_id` (e.g. 'Chg:12').\n3. 'reply': Reply to a comment by `target_id` (e.g. 'Com:5') with `text`.\n4. 'insert_row' / 'delete_row': Table edits. Disk mode only \u2014 not supported on Live Word canvas.\n\nID VOLATILITY: 'Chg:N' and 'Com:N' shift between document states. Always call `read_docx` immediately before any accept/reject/reply \u2014 do not reuse IDs from earlier in the conversation. The `{#cell:<id>}` anchors are stable (Word-assigned) and safe to reuse across reads.\n\n`author_name` is used for attribution on all tracked changes and comments, in both disk and Live Word modes.";
 var DIFF_DOCX_DESC = "Compares two DOCX files and returns a compact `@@ Word Patch @@` diff \u2014 Adeu's token-level, sub-word patch format \u2014 of their text content. Useful for analyzing differences between versions before editing.";
-var gitSha = "ffa5978";
-var packageVersion = "1.18.5";
+var gitSha = "1aea2a8";
+var packageVersion = "1.19.1";
 var buildTag = ` [Adeu v${packageVersion}+${gitSha}]`;
 var args = process.argv.slice(2);
 var scopeIdx = args.indexOf("--scope");
@@ -2018,8 +2018,8 @@ ${stats.skipped_details.join("\n")}`;
 async function main() {
   const transport = new StdioServerTransport();
   await server.connect(transport);
-  const gitSha2 = "ffa5978";
-  const buildTs = "2026-07-07T14:01:12.607Z";
+  const gitSha2 = "1aea2a8";
+  const buildTs = "2026-07-13T10:32:41.788Z";
   console.error(
     `Adeu MCP Server (Node.js Engine: ${identifyEngine()}) running on stdio build=${gitSha2}@${buildTs}`
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adeu/mcp-server",
-  "version": "1.18.5",
+  "version": "1.19.1",
   "description": "",
   "mcpName": "ai.adeu/adeu",
   "main": "./dist/index.js",
@@ -31,7 +31,7 @@
   "license": "MIT",
   "type": "module",
   "dependencies": {
-    "@adeu/core": "^1.18.5",
+    "@adeu/core": "^1.19.1",
     "@modelcontextprotocol/sdk": "^1.0.0",
     "@modelcontextprotocol/ext-apps": "^1.0.0",
     "zod": "^3.23.8"

package/src/index.test.ts

@@ -1,10 +1,22 @@
 import { describe, it, expect } from 'vitest';
-import { readFileSync, existsSync } from 'node:fs';
-import { resolve } from 'node:path';
+import { readFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { resolve, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __dirname = fileURLToPath(new URL('.', import.meta.url));
 
+function walkDir(dir: string, callback: (filepath: string) => void) {
+  const files = readdirSync(dir);
+  for (const file of files) {
+    const filepath = join(dir, file);
+    if (statSync(filepath).isDirectory()) {
+      walkDir(filepath, callback);
+    } else {
+      callback(filepath);
+    }
+  }
+}
+
 describe('MCP Server', () => {
   it('guarantees that @adeu/core dependency version is aligned with the core package version', () => {
     const mcpPackageJsonPath = resolve(__dirname, '../package.json');
@@ -23,4 +35,26 @@ describe('MCP Server', () => {
     // to prevent resolving stale/cached core versions that lack newly added exports.
     expect(coreDependencyRange).toBe(`^${coreWorkspaceVersion}`);
   });
+
+  it('should not contain console.log in production code (MCP stdio safety)', () => {
+    const violations: string[] = [];
+    
+    const coreSrc = resolve(__dirname, '../../core/src');
+    const mcpSrc = resolve(__dirname, '../src');
+
+    [coreSrc, mcpSrc].forEach(srcDir => {
+      walkDir(srcDir, (filepath) => {
+        if (!filepath.endsWith('.ts') || filepath.endsWith('.test.ts') || filepath.endsWith('test-utils.ts')) return;
+        
+        const lines = readFileSync(filepath, 'utf-8').split('\n');
+        lines.forEach((line, i) => {
+          if (line.includes('console.log') && !line.trim().startsWith('//')) {
+            violations.push(`${filepath.split(/packages[\\/]/)[1]}:${i + 1}`);
+          }
+        });
+      });
+    });
+    
+    expect(violations, 'Found console.log in production code. This corrupts MCP stdio streams! Use console.error instead.').toEqual([]);
+  });
 });