@cueai/omni-reader-mcp 1.3.0 → 1.3.2

package/README.md

@@ -60,7 +60,7 @@ differ from the numbers above, report the live values.
 Always use an audited exact version, never an implicit `latest`:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.3.0 setup
+npx -y @cueai/omni-reader-mcp@1.3.2 setup
 ```
 
 The interactive setup supports Hermes, Cursor, Claude Desktop, and generic stdio
@@ -68,9 +68,9 @@ configuration. Non-interactive installation uses the same argument parsing and w
 logic:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.3.0 setup --client hermes --allowed-root /absolute/minimum/root --yes --json
-npx -y @cueai/omni-reader-mcp@1.3.0 setup --client cursor --add-root /absolute/minimum/root --yes --json
-npx -y @cueai/omni-reader-mcp@1.3.0 setup --client claude-desktop --allowed-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.3.2 setup --client hermes --allowed-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.3.2 setup --client cursor --add-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.3.2 setup --client claude-desktop --allowed-root /absolute/minimum/root --yes --json
 ```
 
 When an agent or script runs under a pty (stdin is still a TTY), declare non-interactive
@@ -78,7 +78,7 @@ mode explicitly with `--headless` (alias `--non-interactive`): no `--yes` is req
 stdin is never read:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.3.0 setup --client cursor --allowed-root /absolute/minimum/root --headless --json
+npx -y @cueai/omni-reader-mcp@1.3.2 setup --client cursor --allowed-root /absolute/minimum/root --headless --json
 ```
 
 ## Cache and journal isolation
@@ -205,16 +205,16 @@ new source that satisfies the constraints.
 ## Commands
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.3.0 doctor
-npx -y @cueai/omni-reader-mcp@1.3.0 doctor --json
-npx -y @cueai/omni-reader-mcp@1.3.0 clean
-npx -y @cueai/omni-reader-mcp@1.3.0 uninstall --yes --json
+npx -y @cueai/omni-reader-mcp@1.3.2 doctor
+npx -y @cueai/omni-reader-mcp@1.3.2 doctor --json
+npx -y @cueai/omni-reader-mcp@1.3.2 clean
+npx -y @cueai/omni-reader-mcp@1.3.2 uninstall --yes --json
 ```
 
 Running the pinned version without a command starts the stdio MCP server:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.3.0
+npx -y @cueai/omni-reader-mcp@1.3.2
 ```
 
 `doctor --json` returns package/npm/client adapter, Key present/absent, allowed-root
@@ -223,12 +223,12 @@ status; it never prints the Key, private source paths, or content.
 
 ## Uninstall and rollback
 
-`uninstall --yes --json` removes only a trusted 1.2.2 or 1.3.0 Bridge entry; when a
+`uninstall --yes --json` removes only a trusted 1.3.1 or 1.3.2 Bridge entry; when a
 matching trusted backup exists, it restores the original URL-only `omni-reader` entry.
 Uninstall never deletes user source files and never silently removes unexpired local
 results.
 
-To roll back from 1.3.0:
+To roll back from 1.3.2:
 
 1. stop recommending or installing that version;
 2. run `uninstall --yes --json` to restore the trusted URL-only entry;

package/dist/cli/agent-config.js

@@ -4,7 +4,7 @@ import { chmod, lstat, mkdir, open, realpath, rename, unlink, } from "node:fs/pr
 import path from "node:path";
 import { BRIDGE_RELEASE_VERSION, REMOTE_OMNI_MCP_URL, } from "../constants.js";
 const PACKAGE_SPEC = `@cueai/omni-reader-mcp@${BRIDGE_RELEASE_VERSION}`;
-const PREVIOUS_PACKAGE_SPEC = "@cueai/omni-reader-mcp@1.2.2";
+const PREVIOUS_PACKAGE_SPEC = "@cueai/omni-reader-mcp@1.3.1";
 const LEGACY_PACKAGE_SPEC = "@cueai/omni-reader-mcp";
 const TRUSTED_EXACT_PACKAGE_SPECS = new Set([PREVIOUS_PACKAGE_SPEC, PACKAGE_SPEC]);
 function isRecord(value) {
@@ -586,7 +586,7 @@ function expectedBridgeVersion(target, value) {
     if (!isExpectedOmniEntry(target, value))
         return undefined;
     const packageSpec = value.args[1];
-    return packageSpec === PREVIOUS_PACKAGE_SPEC ? "1.2.2" : BRIDGE_RELEASE_VERSION;
+    return packageSpec === PREVIOUS_PACKAGE_SPEC ? "1.3.1" : BRIDGE_RELEASE_VERSION;
 }
 function isLegacyBridgeEntry(target, value) {
     if (!isRecord(value) || value.command !== "npx")

package/dist/constants.d.ts

@@ -6,7 +6,7 @@ export declare const CUBE_GRANT_PROTOCOL_VERSION = "omni.parse_grant.v1";
 export declare const GRANTED_STREAM_PROTOCOL_VERSION = "omni.granted_parse_stream.v1";
 export declare const DEFAULT_CUBE_BASE_URL = "https://mcp.cuecue.cn";
 export declare const DEFAULT_IIIS_GRANTED_BASE_URL = "https://cubefile.ai.iiis.co:9443/omni/granted/";
-export declare const BRIDGE_RELEASE_VERSION = "1.3.0";
+export declare const BRIDGE_RELEASE_VERSION = "1.3.2";
 export declare const REMOTE_OMNI_MCP_URL = "https://mcp.cuecue.cn/api/omni-reader/mcp/";
 export declare const FOREGROUND_BUDGET_MS = 15000;
 export declare const STATUS_LONG_POLL_MAX_MS = 20000;

package/dist/constants.js

@@ -6,7 +6,7 @@ export const CUBE_GRANT_PROTOCOL_VERSION = "omni.parse_grant.v1";
 export const GRANTED_STREAM_PROTOCOL_VERSION = "omni.granted_parse_stream.v1";
 export const DEFAULT_CUBE_BASE_URL = "https://mcp.cuecue.cn";
 export const DEFAULT_IIIS_GRANTED_BASE_URL = "https://cubefile.ai.iiis.co:9443/omni/granted/";
-export const BRIDGE_RELEASE_VERSION = "1.3.0";
+export const BRIDGE_RELEASE_VERSION = "1.3.2";
 export const REMOTE_OMNI_MCP_URL = "https://mcp.cuecue.cn/api/omni-reader/mcp/";
 export const FOREGROUND_BUDGET_MS = 15_000;
 export const STATUS_LONG_POLL_MAX_MS = 20_000;

package/dist/cube-client.js

@@ -5,6 +5,11 @@ import { parseReaderCapabilities, selectDirectProfile, } from "./capabilities.js
 import { OmniBridgeError } from "./errors.js";
 const GRANT_PATH = "/api/omni-reader/direct-upload/v1/parse-grants";
 const BRIDGE_PACKAGE = "@cueai/omni-reader-mcp";
+// Legacy grant response for UNPROFILED (detail-less) requests. cube-mcp serves
+// omni.parse_grant.v1, and since the v2 metering writer rollout (writer_v2)
+// also omni.parse_grant.v2. The v2 tuple is field-identical for the Bridge's
+// purposes: the parse_grant token is opaque and passed through to the
+// granted-stream endpoint untouched, so both protocol versions are accepted.
 const grantResponseSchema = z
     .object({
     grant_id: z.string().min(1),
@@ -17,7 +22,7 @@ const grantResponseSchema = z
         .refine((value) => new URL(value).protocol === "https:"),
     expires_at: z.string().datetime({ offset: true }),
     max_bytes: z.literal(MAX_FILE_BYTES),
-    protocol_version: z.literal(CUBE_GRANT_PROTOCOL_VERSION),
+    protocol_version: z.enum([CUBE_GRANT_PROTOCOL_VERSION, "omni.parse_grant.v2"]),
 })
     .strict();
 // Closed v3 grant response: the exact tuple of the selected direct profile is

package/dist/remote-client.js

@@ -174,7 +174,57 @@ function jsonFromSse(body, requestId) {
     }
     throw protocolError();
 }
-function decodeEnvelope(value, requestId) {
+// Real repro (2026-08-18): cube-mcp's `parse` tool returns a BARE `{ok:false, code, ...}` object —
+// no `status` field — for a pre-operation source-classification rejection. `parseResultSchema` is
+// a discriminated union keyed on `status`, so this can never match it; the resulting parse failure
+// was masked as a generic REMOTE_PROTOCOL_ERROR, hiding the server's own actionable error
+// (UNSUPPORTED_SOURCE) from the caller. Verified end-to-end against the real remote endpoint.
+//
+// codex review 2026-08-18 (2 rounds, cube-mcp source inspection): an earlier version keyed off
+// `failure_scope` alone ("source"/"local_capability"), reasoning those were inherently
+// pre-operation — WRONG: `failure_scope` names a failure DOMAIN, not a lifecycle stage. cube-mcp's
+// own `url_operations/service.py` can emit a LATE error (e.g. SOURCE_TOO_LARGE) with
+// `failure_scope:"source"` while retrieving an ALREADY-CREATED operation's result — defaulting
+// that case's booleans to false would fabricate "nothing happened" over a real fact. Separately,
+// the claimed LOCAL_BRIDGE_REQUIRED coverage was itself wrong: cube-mcp's actual
+// `local_bridge_required()` payload is missing the required `message` field and carries extra keys
+// `stableErrorSchema.strict()` rejects — it was never going to validate through this fallback
+// regardless. Narrowed to EXACTLY the one call (`parse`, not `status`/`cancel` — an operation
+// necessarily already exists for those) and EXACTLY the one evidenced code (`UNSUPPORTED_SOURCE`)
+// this fix actually verified end-to-end. Any field the server DID provide still wins over the
+// default (spread order). Anything outside this exact, evidenced case is left unchanged and still
+// fails loudly as REMOTE_PROTOCOL_ERROR.
+//
+// review 2026-08-18 (subagent, standing in for codex — quota exhausted): a SECOND server-side
+// producer of this exact code exists — cube-mcp's `url_operations/service.py` falls back to
+// `code="UNSUPPORTED_SOURCE"` for any unmapped-400 from the L1 create call, AFTER metering
+// admission. Traced: that path always runs `fail_reservation`/`_release_metering_lease` before
+// returning (the code's own `_PUBLIC_ERROR_FACTS` hardcodes `retryable=False` for it), so
+// operation_created/billed:false IS accurate there too — not a live bug — but this fix only ever
+// verified the FIRST (pre-flight classify_source) producer end-to-end, not this one.
+function bareStableErrorFallback(candidate, toolName) {
+    if (toolName !== "parse"
+        || candidate === null
+        || typeof candidate !== "object"
+        || Array.isArray(candidate)
+        || candidate.status !== undefined
+        || candidate.ok !== false
+        || candidate.code !== "UNSUPPORTED_SOURCE") {
+        return candidate;
+    }
+    return {
+        status: "failed",
+        error: {
+            operation_created: false,
+            file_uploaded: false,
+            parser_started: false,
+            billed: false,
+            content_released: false,
+            ...candidate,
+        },
+    };
+}
+function decodeEnvelope(value, requestId, toolName) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
         throw protocolError();
     }
@@ -208,7 +258,7 @@ function decodeEnvelope(value, requestId) {
         }
     }
     try {
-        return parseResultSchema.parse(candidate);
+        return parseResultSchema.parse(bareStableErrorFallback(candidate, toolName));
     }
     catch {
         throw protocolError();
@@ -395,6 +445,6 @@ export class HttpRemoteOmniClient {
                 throw error;
             throw protocolError();
         }
-        return decodeEnvelope(envelope, requestId);
+        return decodeEnvelope(envelope, requestId, name);
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cueai/omni-reader-mcp",
-  "version": "1.3.0",
+  "version": "1.3.2",
   "description": "Local stdio MCP bridge for direct Omni document parsing",
   "type": "module",
   "license": "UNLICENSED",