@cueai/omni-reader-mcp 1.7.0 → 1.7.2

package/README.md

@@ -47,9 +47,11 @@ agent workspace remains the default allowed scope.
 
 For a local file, Bridge requests a Cube parse grant and uses the returned controlled
 granted-data-plane URL to upload the file and stream the result. A `BRIDGE_UPGRADE_REQUIRED`
-error means the running Bridge release is not accepted for direct local-file parsing —
-install `@cueai/omni-reader-mcp@1.7.0` using the official setup instructions, then retry the
-same parse. Always run `doctor --json` first when diagnosing a parse failure.
+error means the service does not accept the running Bridge release for direct local-file
+parsing. Install the latest published `@cueai/omni-reader-mcp` release using the official
+setup instructions, then retry once. If you are already running the latest published release,
+do not reinstall or retry; run `doctor --json` and ask the service operator to verify Bridge
+admission.
 
 ## Billing and free credits
 
@@ -86,7 +88,7 @@ authoritative billing/policy facts rather than estimating a charge from copied a
 Always use an audited exact version, never an implicit `latest`:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.7.0 setup
+npx -y @cueai/omni-reader-mcp@1.7.2 setup
 ```
 
 The interactive setup supports Hermes, Cursor, Claude Desktop, and generic stdio
@@ -94,9 +96,9 @@ configuration. Non-interactive installation uses the same argument parsing and w
 logic:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.7.0 setup --client hermes --allowed-root /absolute/minimum/root --yes --json
-npx -y @cueai/omni-reader-mcp@1.7.0 setup --client cursor --add-root /absolute/minimum/root --yes --json
-npx -y @cueai/omni-reader-mcp@1.7.0 setup --client claude-desktop --allowed-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.7.2 setup --client hermes --allowed-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.7.2 setup --client cursor --add-root /absolute/minimum/root --yes --json
+npx -y @cueai/omni-reader-mcp@1.7.2 setup --client claude-desktop --allowed-root /absolute/minimum/root --yes --json
 ```
 
 When an agent or script runs under a pty (stdin is still a TTY), declare non-interactive
@@ -104,7 +106,7 @@ mode explicitly with `--headless` (alias `--non-interactive`): no `--yes` is req
 stdin is never read:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.7.0 setup --client cursor --allowed-root /absolute/minimum/root --headless --json
+npx -y @cueai/omni-reader-mcp@1.7.2 setup --client cursor --allowed-root /absolute/minimum/root --headless --json
 ```
 
 ## Windows configuration
@@ -123,14 +125,14 @@ automatically; the second is the most robust when you configure by hand.
 1. **`cmd` + `npx` (what `setup` writes on Windows)** — `cmd.exe` is a real executable,
    so a client's no-shell spawn works:
    ```json
-   { "command": "cmd", "args": ["/d", "/c", "npx", "-y", "@cueai/omni-reader-mcp@1.7.0"] }
+   { "command": "cmd", "args": ["/d", "/c", "npx", "-y", "@cueai/omni-reader-mcp@1.7.2"] }
    ```
 2. **`node` + the package entry (most robust)** — skips `npx` entirely; the absolute
    path must be a stable install you control:
    ```json
    { "command": "node", "args": ["C:\\path\\to\\node_modules\\@cueai\\omni-reader-mcp\\dist\\index.js"] }
    ```
-   A deliberate local `npm install @cueai/omni-reader-mcp@1.7.0` gives you that stable
+   A deliberate local `npm install @cueai/omni-reader-mcp@1.7.2` gives you that stable
    path. Do not point the entry at an `_npx` cache directory — its hash subdirectory
    changes between installs.
 3. **Never use a session/timestamp directory** — such paths are cleaned up, and the
@@ -304,16 +306,16 @@ satisfies the constraints.
 ## Commands
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.7.0 doctor
-npx -y @cueai/omni-reader-mcp@1.7.0 doctor --json
-npx -y @cueai/omni-reader-mcp@1.7.0 clean
-npx -y @cueai/omni-reader-mcp@1.7.0 uninstall --yes --json
+npx -y @cueai/omni-reader-mcp@1.7.2 doctor
+npx -y @cueai/omni-reader-mcp@1.7.2 doctor --json
+npx -y @cueai/omni-reader-mcp@1.7.2 clean
+npx -y @cueai/omni-reader-mcp@1.7.2 uninstall --yes --json
 ```
 
 Running the pinned version without a command starts the stdio MCP server:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.7.0
+npx -y @cueai/omni-reader-mcp@1.7.2
 ```
 
 Default `doctor --json` reports `inspection_scope: "current_process_env"`: its Key and
@@ -321,7 +323,7 @@ allowed-root facts describe the doctor process, not a separately running agent c
 inspect one caller-selected JSON entry without scanning or writing configuration, use:
 
 ```sh
-npx -y @cueai/omni-reader-mcp@1.7.0 doctor --json --config-path /absolute/client-config.json --server-name omni-reader
+npx -y @cueai/omni-reader-mcp@1.7.2 doctor --json --config-path /absolute/client-config.json --server-name omni-reader
 ```
 
 The optional `explicit_config` block reports only closed redacted facts: entry/transport
@@ -339,7 +341,7 @@ definitively "available" until a real local-file parse validates the route.
 
 ## Network diagnostics
 
-Run `npx -y @cueai/omni-reader-mcp@1.7.0 doctor --json` first. Diagnose failures by
+Run `npx -y @cueai/omni-reader-mcp@1.7.2 doctor --json` first. Diagnose failures by
 stage instead of guessing an endpoint:
 
 | Failure | Stage | Meaning |
@@ -349,7 +351,7 @@ stage instead of guessing an endpoint:
 | `DETAIL_CAPABILITIES_UNAVAILABLE` | before grant | this service does not currently advertise grounded/layout parsing; use text only when Markdown without grounding/layout sidecars is acceptable |
 | `UNSUPPORTED_DETAIL` | before upload | the requested parsing representation/profile is unavailable; do not retry unchanged or describe the account as text-only |
 | `PRINCIPAL_CONCURRENCY_LIMIT` | before upload | the principal already has the maximum active parses; wait for `retry_after`, then retry the same parse |
-| `BRIDGE_UPGRADE_REQUIRED` | before upload | this Bridge release is too old; install `@cueai/omni-reader-mcp@1.7.0` via the official setup, then retry the same parse |
+| `BRIDGE_UPGRADE_REQUIRED` | before upload | install the latest published `@cueai/omni-reader-mcp` release, then retry once; if already running latest, do not reinstall or retry—run `doctor --json` and ask the service operator to verify Bridge admission |
 | a secure upload-stage failure | after grant creation | the file was granted, but the secure upload stage did not complete |
 | `CUBE_PROTOCOL_ERROR` | control-plane response | the response did not match the required contract |
 | `MCP error -32000: Connection closed` | before Bridge starts | the client launcher shape is invalid; see Windows configuration |
@@ -368,16 +370,16 @@ the same way from every client.
 
 ## Uninstall and rollback
 
-`uninstall --yes --json` removes only a trusted 1.6.0 or 1.7.0 Bridge entry, plus
+`uninstall --yes --json` removes only a trusted 1.7.1 or 1.7.2 Bridge entry, plus
 the exact broken bare-`npx` Windows entry written by 1.5.1. When a matching trusted
 backup exists, it restores the original URL-only `omni-reader` entry. Uninstall never
 deletes user source files and never silently removes unexpired local results.
 
-To roll back from 1.7.0 to 1.6.0:
+To roll back from 1.7.2 to 1.7.1:
 
-1. stop recommending or installing 1.7.0;
+1. stop recommending or installing 1.7.2;
 2. run `uninstall --yes --json` to restore the trusted URL-only entry;
-3. if the local facade is still required, run `npx -y @cueai/omni-reader-mcp@1.6.0 setup`;
+3. if the local facade is still required, run `npx -y @cueai/omni-reader-mcp@1.7.1 setup`;
 4. for already-uploaded operations, continue using status recovery so settlement and
    cleanup complete;
 5. keep local results, or have the user explicitly run `discard_result` / `clean`.

package/dist/cli/agent-config.js

@@ -7,7 +7,7 @@ const PACKAGE_SPEC = `@cueai/omni-reader-mcp@${BRIDGE_RELEASE_VERSION}`;
 // The release that the current version is a trusted upgrade from: normal upgrade,
 // uninstall, and rollback recognize exactly {previous, current}. Bump this to the
 // version we just published when BRIDGE_RELEASE_VERSION advances.
-const PREVIOUS_RELEASE_VERSION = "1.6.0";
+const PREVIOUS_RELEASE_VERSION = "1.7.1";
 const PREVIOUS_PACKAGE_SPEC = `@cueai/omni-reader-mcp@${PREVIOUS_RELEASE_VERSION}`;
 // Preserve the one evidenced two-release migration exception: 1.5.1 setup wrote a
 // bare `npx` launcher on Windows, so later setup/uninstall versions must still be able
@@ -641,7 +641,7 @@ export function expectedBridgeVersion(target, value, platform) {
 }
 function isLegacyBridgeEntry(target, value, platform) {
     // Defer the entire invocation-shape decision to the single platform policy:
-    // exact pinned {1.6.0 previous, 1.7.0 current} plus the exact Windows 1.5.1
+    // exact pinned {1.7.0 previous, 1.7.1 current} plus the exact Windows 1.5.1
     // bare-npx migration source. The historical platform-agnostic acceptance of a
     // bare unpinned `npx -y @cueai/omni-reader-mcp` is removed: it widened the
     // frozen trust set to a floating latest on every OS, which expectedBridgeVersion

package/dist/constants.d.ts

@@ -6,7 +6,7 @@ export declare const CUBE_GRANT_PROTOCOL_VERSION = "omni.parse_grant.v1";
 export declare const GRANTED_STREAM_PROTOCOL_VERSION = "omni.granted_parse_stream.v1";
 export declare const DEFAULT_CUBE_BASE_URL = "https://mcp.cuecue.cn";
 export declare const DEFAULT_IIIS_GRANTED_BASE_URL = "https://omni-upload.cuecue.cn/omni/granted/";
-export declare const BRIDGE_RELEASE_VERSION = "1.7.0";
+export declare const BRIDGE_RELEASE_VERSION = "1.7.2";
 export declare const REMOTE_OMNI_MCP_URL = "https://mcp.cuecue.cn/api/omni-reader/mcp/";
 export declare const FOREGROUND_BUDGET_MS = 15000;
 export declare const STATUS_LONG_POLL_MAX_MS = 20000;

package/dist/constants.js

@@ -6,7 +6,7 @@ export const CUBE_GRANT_PROTOCOL_VERSION = "omni.parse_grant.v1";
 export const GRANTED_STREAM_PROTOCOL_VERSION = "omni.granted_parse_stream.v1";
 export const DEFAULT_CUBE_BASE_URL = "https://mcp.cuecue.cn";
 export const DEFAULT_IIIS_GRANTED_BASE_URL = "https://omni-upload.cuecue.cn/omni/granted/";
-export const BRIDGE_RELEASE_VERSION = "1.7.0";
+export const BRIDGE_RELEASE_VERSION = "1.7.2";
 export const REMOTE_OMNI_MCP_URL = "https://mcp.cuecue.cn/api/omni-reader/mcp/";
 export const FOREGROUND_BUDGET_MS = 15_000;
 export const STATUS_LONG_POLL_MAX_MS = 20_000;

package/dist/cube-client.js

@@ -371,7 +371,7 @@ async function grantResponseError(response) {
             return bridgeError("BRIDGE_UPGRADE_REQUIRED", "This Bridge release is not accepted for direct local-file parsing.", false, {
                 failureScope: "service",
                 sourceKind: "local",
-                userAction: `Upgrade to @cueai/omni-reader-mcp@${BRIDGE_RELEASE_VERSION} using the official Omni setup instructions, then retry the same local-file parse.`,
+                userAction: "Install the latest published @cueai/omni-reader-mcp release using the official Omni setup instructions, then retry once. If you are already running the latest published release, do not reinstall or retry; run doctor --json and ask the service operator to verify Bridge admission.",
             });
         }
     }

package/dist/path-security.js

@@ -15,6 +15,11 @@ const CONTENT_TYPES = {
     ".xls": "application/vnd.ms-excel",
     ".ppt": "application/vnd.ms-powerpoint",
     ".zip": "application/zip",
+    ".rar": "application/vnd.rar",
+    ".tar": "application/x-tar",
+    ".tgz": "application/gzip",
+    ".gz": "application/gzip",
+    ".bz2": "application/x-bzip2",
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
     ".png": "image/png",
@@ -40,8 +45,30 @@ const CONTENT_TYPES = {
     ".txt": "text/plain",
     ".md": "text/markdown",
     ".csv": "text/csv",
+    ".tsv": "text/tab-separated-values",
+    ".json": "application/json",
+    ".yaml": "application/yaml",
+    ".yml": "application/yaml",
+    ".toml": "application/toml",
+    ".xml": "application/xml",
+    ".ini": "text/plain",
+    ".cfg": "text/plain",
+    ".conf": "text/plain",
+    ".log": "text/plain",
+    ".rdf": "application/rdf+xml",
+    ".ttl": "text/turtle",
+    ".nt": "application/n-triples",
+    ".n3": "text/n3",
+    ".jsonld": "application/ld+json",
+    ".mm": "application/x-freemind",
     ".html": "text/html",
     ".htm": "text/html",
+    // Deliberately excluded: .parquet — not text, not any of the magic-byte formats above,
+    // so L1's detect_format() falls through to "other" and it is rejected as an unsupported
+    // media type either way. (deploy/k8s/omni-reader-deploy.yaml sets an OMNI_PARQUET_POLICY
+    // env var, but nothing in pipeline/ currently reads it — the actual rejection is the
+    // generic fallback, not that policy.) Accepting it here would only move the rejection
+    // from Bridge to the server.
 };
 const SUPPORTED_EXTENSIONS = [...new Set(Object.keys(CONTENT_TYPES).map((extension) => extension.slice(1)))].sort();
 const NODE_FILE_SYSTEM = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cueai/omni-reader-mcp",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "description": "Local stdio MCP bridge for direct Omni document parsing",
   "keywords": [
     "mcp",