@modelcontextprotocol/server-pdf 1.2.1 → 1.3.0

package/dist/server.js

@@ -24040,7 +24040,6 @@ function date4(params) {
 
 // ../../node_modules/zod/v4/classic/external.js
 config(en_default2());
-
 // ../../node_modules/@modelcontextprotocol/sdk/dist/esm/types.js
 var LATEST_PROTOCOL_VERSION = "2025-11-25";
 var SUPPORTED_PROTOCOL_VERSIONS = [LATEST_PROTOCOL_VERSION, "2025-06-18", "2025-03-26", "2024-11-05", "2024-10-07"];
@@ -28267,8 +28266,8 @@ class j {
   sessionId;
   setProtocolVersion;
 }
-var b = exports_external.union([exports_external.literal("light"), exports_external.literal("dark")]).describe("Color theme preference for the host environment.");
-var L = exports_external.union([exports_external.literal("inline"), exports_external.literal("fullscreen"), exports_external.literal("pip")]).describe("Display mode for UI presentation.");
+var g = exports_external.union([exports_external.literal("light"), exports_external.literal("dark")]).describe("Color theme preference for the host environment.");
+var G = exports_external.union([exports_external.literal("inline"), exports_external.literal("fullscreen"), exports_external.literal("pip")]).describe("Display mode for UI presentation.");
 var i = exports_external.union([exports_external.literal("--color-background-primary"), exports_external.literal("--color-background-secondary"), exports_external.literal("--color-background-tertiary"), exports_external.literal("--color-background-inverse"), exports_external.literal("--color-background-ghost"), exports_external.literal("--color-background-info"), exports_external.literal("--color-background-danger"), exports_external.literal("--color-background-success"), exports_external.literal("--color-background-warning"), exports_external.literal("--color-background-disabled"), exports_external.literal("--color-text-primary"), exports_external.literal("--color-text-secondary"), exports_external.literal("--color-text-tertiary"), exports_external.literal("--color-text-inverse"), exports_external.literal("--color-text-ghost"), exports_external.literal("--color-text-info"), exports_external.literal("--color-text-danger"), exports_external.literal("--color-text-success"), exports_external.literal("--color-text-warning"), exports_external.literal("--color-text-disabled"), exports_external.literal("--color-border-primary"), exports_external.literal("--color-border-secondary"), exports_external.literal("--color-border-tertiary"), exports_external.literal("--color-border-inverse"), exports_external.literal("--color-border-ghost"), exports_external.literal("--color-border-info"), exports_external.literal("--color-border-danger"), exports_external.literal("--color-border-success"), exports_external.literal("--color-border-warning"), exports_external.literal("--color-border-disabled"), exports_external.literal("--color-ring-primary"), exports_external.literal("--color-ring-secondary"), exports_external.literal("--color-ring-inverse"), exports_external.literal("--color-ring-info"), exports_external.literal("--color-ring-danger"), exports_external.literal("--color-ring-success"), exports_external.literal("--color-ring-warning"), exports_external.literal("--font-sans"), exports_external.literal("--font-mono"), exports_external.literal("--font-weight-normal"), exports_external.literal("--font-weight-medium"), exports_external.literal("--font-weight-semibold"), exports_external.literal("--font-weight-bold"), exports_external.literal("--font-text-xs-size"), exports_external.literal("--font-text-sm-size"), exports_external.literal("--font-text-md-size"), exports_external.literal("--font-text-lg-size"), exports_external.literal("--font-heading-xs-size"), exports_external.literal("--font-heading-sm-size"), exports_external.literal("--font-heading-md-size"), exports_external.literal("--font-heading-lg-size"), exports_external.literal("--font-heading-xl-size"), exports_external.literal("--font-heading-2xl-size"), exports_external.literal("--font-heading-3xl-size"), exports_external.literal("--font-text-xs-line-height"), exports_external.literal("--font-text-sm-line-height"), exports_external.literal("--font-text-md-line-height"), exports_external.literal("--font-text-lg-line-height"), exports_external.literal("--font-heading-xs-line-height"), exports_external.literal("--font-heading-sm-line-height"), exports_external.literal("--font-heading-md-line-height"), exports_external.literal("--font-heading-lg-line-height"), exports_external.literal("--font-heading-xl-line-height"), exports_external.literal("--font-heading-2xl-line-height"), exports_external.literal("--font-heading-3xl-line-height"), exports_external.literal("--border-radius-xs"), exports_external.literal("--border-radius-sm"), exports_external.literal("--border-radius-md"), exports_external.literal("--border-radius-lg"), exports_external.literal("--border-radius-xl"), exports_external.literal("--border-radius-full"), exports_external.literal("--border-width-regular"), exports_external.literal("--shadow-hairline"), exports_external.literal("--shadow-sm"), exports_external.literal("--shadow-md"), exports_external.literal("--shadow-lg")]).describe("CSS variable keys available to MCP apps for theming.");
 var o = exports_external.record(i.describe(`Style variables for theming MCP apps.
 
@@ -28303,15 +28302,16 @@ var t = exports_external.object({ method: exports_external.literal("ui/notificat
 var A = exports_external.object({ method: exports_external.literal("ui/notifications/tool-input"), params: exports_external.object({ arguments: exports_external.record(exports_external.string(), exports_external.unknown().describe("Complete tool call arguments as key-value pairs.")).optional().describe("Complete tool call arguments as key-value pairs.") }) });
 var P = exports_external.object({ method: exports_external.literal("ui/notifications/tool-input-partial"), params: exports_external.object({ arguments: exports_external.record(exports_external.string(), exports_external.unknown().describe("Partial tool call arguments (incomplete, may change).")).optional().describe("Partial tool call arguments (incomplete, may change).") }) });
 var H = exports_external.object({ method: exports_external.literal("ui/notifications/tool-cancelled"), params: exports_external.object({ reason: exports_external.string().optional().describe('Optional reason for the cancellation (e.g., "user action", "timeout").') }) });
-var g = exports_external.object({ fonts: exports_external.string().optional() });
-var C = exports_external.object({ variables: o.optional().describe("CSS variables for theming the app."), css: g.optional().describe("CSS blocks that apps can inject.") });
+var S = exports_external.object({ fonts: exports_external.string().optional() });
+var y = exports_external.object({ variables: o.optional().describe("CSS variables for theming the app."), css: S.optional().describe("CSS blocks that apps can inject.") });
 var _ = exports_external.object({ method: exports_external.literal("ui/resource-teardown"), params: exports_external.object({}) });
 var e = exports_external.record(exports_external.string(), exports_external.unknown());
 var q = exports_external.object({ text: exports_external.object({}).optional().describe("Host supports text content blocks."), image: exports_external.object({}).optional().describe("Host supports image content blocks."), audio: exports_external.object({}).optional().describe("Host supports audio content blocks."), resource: exports_external.object({}).optional().describe("Host supports resource content blocks."), resourceLink: exports_external.object({}).optional().describe("Host supports resource link content blocks."), structuredContent: exports_external.object({}).optional().describe("Host supports structured content.") });
-var y = exports_external.object({ experimental: exports_external.object({}).optional().describe("Experimental features (structure TBD)."), openLinks: exports_external.object({}).optional().describe("Host supports opening external URLs."), downloadFile: exports_external.object({}).optional().describe("Host supports file downloads via ui/download-file."), serverTools: exports_external.object({ listChanged: exports_external.boolean().optional().describe("Host supports tools/list_changed notifications.") }).optional().describe("Host can proxy tool calls to the MCP server."), serverResources: exports_external.object({ listChanged: exports_external.boolean().optional().describe("Host supports resources/list_changed notifications.") }).optional().describe("Host can proxy resource reads to the MCP server."), logging: exports_external.object({}).optional().describe("Host accepts log messages."), sandbox: exports_external.object({ permissions: K.optional().describe("Permissions granted by the host (camera, microphone, geolocation)."), csp: B.optional().describe("CSP domains approved by the host.") }).optional().describe("Sandbox configuration applied by the host."), updateModelContext: q.optional().describe("Host accepts context updates (ui/update-model-context) to be included in the model's context for future turns."), message: q.optional().describe("Host supports receiving content messages (ui/message) from the view.") });
-var u = exports_external.object({ experimental: exports_external.object({}).optional().describe("Experimental features (structure TBD)."), tools: exports_external.object({ listChanged: exports_external.boolean().optional().describe("App supports tools/list_changed notifications.") }).optional().describe("App exposes MCP-style tools that the host can call."), availableDisplayModes: exports_external.array(L).optional().describe("Display modes the app supports.") });
-var QQ = exports_external.object({ method: exports_external.literal("ui/notifications/initialized"), params: exports_external.object({}).optional() });
-var ZQ = exports_external.object({ csp: B.optional().describe("Content Security Policy configuration for UI resources."), permissions: K.optional().describe("Sandbox permissions requested by the UI resource."), domain: exports_external.string().optional().describe(`Dedicated origin for view sandbox.
+var QQ = exports_external.object({ method: exports_external.literal("ui/notifications/request-teardown"), params: exports_external.object({}).optional() });
+var C = exports_external.object({ experimental: exports_external.object({}).optional().describe("Experimental features (structure TBD)."), openLinks: exports_external.object({}).optional().describe("Host supports opening external URLs."), downloadFile: exports_external.object({}).optional().describe("Host supports file downloads via ui/download-file."), serverTools: exports_external.object({ listChanged: exports_external.boolean().optional().describe("Host supports tools/list_changed notifications.") }).optional().describe("Host can proxy tool calls to the MCP server."), serverResources: exports_external.object({ listChanged: exports_external.boolean().optional().describe("Host supports resources/list_changed notifications.") }).optional().describe("Host can proxy resource reads to the MCP server."), logging: exports_external.object({}).optional().describe("Host accepts log messages."), sandbox: exports_external.object({ permissions: K.optional().describe("Permissions granted by the host (camera, microphone, geolocation)."), csp: B.optional().describe("CSP domains approved by the host.") }).optional().describe("Sandbox configuration applied by the host."), updateModelContext: q.optional().describe("Host accepts context updates (ui/update-model-context) to be included in the model's context for future turns."), message: q.optional().describe("Host supports receiving content messages (ui/message) from the view.") });
+var f = exports_external.object({ experimental: exports_external.object({}).optional().describe("Experimental features (structure TBD)."), tools: exports_external.object({ listChanged: exports_external.boolean().optional().describe("App supports tools/list_changed notifications.") }).optional().describe("App exposes MCP-style tools that the host can call."), availableDisplayModes: exports_external.array(G).optional().describe("Display modes the app supports.") });
+var ZQ = exports_external.object({ method: exports_external.literal("ui/notifications/initialized"), params: exports_external.object({}).optional() });
+var $Q = exports_external.object({ csp: B.optional().describe("Content Security Policy configuration for UI resources."), permissions: K.optional().describe("Sandbox permissions requested by the UI resource."), domain: exports_external.string().optional().describe(`Dedicated origin for view sandbox.
 
 Useful when views need stable, dedicated origins for OAuth callbacks, CORS policies, or API key allowlists.
 
@@ -28326,27 +28326,27 @@ Boolean requesting whether a visible border and background is provided by the ho
 - \`true\`: request visible border + background
 - \`false\`: request no visible border + background
 - omitted: host decides border`) });
-var $Q = exports_external.object({ method: exports_external.literal("ui/request-display-mode"), params: exports_external.object({ mode: L.describe("The display mode being requested.") }) });
-var T = exports_external.object({ mode: L.describe("The display mode that was actually set. May differ from requested if not supported.") }).passthrough();
-var f = exports_external.union([exports_external.literal("model"), exports_external.literal("app")]).describe("Tool visibility scope - who can access the tool.");
-var JQ = exports_external.object({ resourceUri: exports_external.string().optional(), visibility: exports_external.array(f).optional().describe(`Who can access this tool. Default: ["model", "app"]
+var JQ = exports_external.object({ method: exports_external.literal("ui/request-display-mode"), params: exports_external.object({ mode: G.describe("The display mode being requested.") }) });
+var T = exports_external.object({ mode: G.describe("The display mode that was actually set. May differ from requested if not supported.") }).passthrough();
+var u = exports_external.union([exports_external.literal("model"), exports_external.literal("app")]).describe("Tool visibility scope - who can access the tool.");
+var XQ = exports_external.object({ resourceUri: exports_external.string().optional(), visibility: exports_external.array(u).optional().describe(`Who can access this tool. Default: ["model", "app"]
 - "model": Tool visible to and callable by the agent
 - "app": Tool callable by the app from this server only`) });
-var kQ = exports_external.object({ mimeTypes: exports_external.array(exports_external.string()).optional().describe('Array of supported MIME types for UI resources.\nMust include `"text/html;profile=mcp-app"` for MCP Apps support.') });
-var XQ = exports_external.object({ method: exports_external.literal("ui/download-file"), params: exports_external.object({ contents: exports_external.array(exports_external.union([EmbeddedResourceSchema, ResourceLinkSchema])).describe("Resource contents to download — embedded (inline data) or linked (host fetches). Uses standard MCP resource types.") }) });
-var VQ = exports_external.object({ method: exports_external.literal("ui/message"), params: exports_external.object({ role: exports_external.literal("user").describe('Message role, currently only "user" is supported.'), content: exports_external.array(ContentBlockSchema).describe("Message content blocks (text, image, etc.).") }) });
-var DQ = exports_external.object({ method: exports_external.literal("ui/notifications/sandbox-resource-ready"), params: exports_external.object({ html: exports_external.string().describe("HTML content to load into the inner iframe."), sandbox: exports_external.string().optional().describe("Optional override for the inner iframe's sandbox attribute."), csp: B.optional().describe("CSP configuration from resource metadata."), permissions: K.optional().describe("Sandbox permissions from resource metadata.") }) });
-var U = exports_external.object({ method: exports_external.literal("ui/notifications/tool-result"), params: CallToolResultSchema.describe("Standard MCP tool execution result.") });
-var k = exports_external.object({ toolInfo: exports_external.object({ id: RequestIdSchema.optional().describe("JSON-RPC id of the tools/call request."), tool: ToolSchema.describe("Tool definition including name, inputSchema, etc.") }).optional().describe("Metadata of the tool call that instantiated this App."), theme: b.optional().describe("Current color theme preference."), styles: C.optional().describe("Style configuration for theming the app."), displayMode: L.optional().describe("How the UI is currently displayed."), availableDisplayModes: exports_external.array(L).optional().describe("Display modes the host supports."), containerDimensions: exports_external.union([exports_external.object({ height: exports_external.number().describe("Fixed container height in pixels.") }), exports_external.object({ maxHeight: exports_external.union([exports_external.number(), exports_external.undefined()]).optional().describe("Maximum container height in pixels.") })]).and(exports_external.union([exports_external.object({ width: exports_external.number().describe("Fixed container width in pixels.") }), exports_external.object({ maxWidth: exports_external.union([exports_external.number(), exports_external.undefined()]).optional().describe("Maximum container width in pixels.") })])).optional().describe(`Container dimensions. Represents the dimensions of the iframe or other
+var RQ = exports_external.object({ mimeTypes: exports_external.array(exports_external.string()).optional().describe('Array of supported MIME types for UI resources.\nMust include `"text/html;profile=mcp-app"` for MCP Apps support.') });
+var VQ = exports_external.object({ method: exports_external.literal("ui/download-file"), params: exports_external.object({ contents: exports_external.array(exports_external.union([EmbeddedResourceSchema, ResourceLinkSchema])).describe("Resource contents to download — embedded (inline data) or linked (host fetches). Uses standard MCP resource types.") }) });
+var DQ = exports_external.object({ method: exports_external.literal("ui/message"), params: exports_external.object({ role: exports_external.literal("user").describe('Message role, currently only "user" is supported.'), content: exports_external.array(ContentBlockSchema).describe("Message content blocks (text, image, etc.).") }) });
+var GQ = exports_external.object({ method: exports_external.literal("ui/notifications/sandbox-resource-ready"), params: exports_external.object({ html: exports_external.string().describe("HTML content to load into the inner iframe."), sandbox: exports_external.string().optional().describe("Optional override for the inner iframe's sandbox attribute."), csp: B.optional().describe("CSP configuration from resource metadata."), permissions: K.optional().describe("Sandbox permissions from resource metadata.") }) });
+var E = exports_external.object({ method: exports_external.literal("ui/notifications/tool-result"), params: CallToolResultSchema.describe("Standard MCP tool execution result.") });
+var k = exports_external.object({ toolInfo: exports_external.object({ id: RequestIdSchema.optional().describe("JSON-RPC id of the tools/call request."), tool: ToolSchema.describe("Tool definition including name, inputSchema, etc.") }).optional().describe("Metadata of the tool call that instantiated this App."), theme: g.optional().describe("Current color theme preference."), styles: y.optional().describe("Style configuration for theming the app."), displayMode: G.optional().describe("How the UI is currently displayed."), availableDisplayModes: exports_external.array(G).optional().describe("Display modes the host supports."), containerDimensions: exports_external.union([exports_external.object({ height: exports_external.number().describe("Fixed container height in pixels.") }), exports_external.object({ maxHeight: exports_external.union([exports_external.number(), exports_external.undefined()]).optional().describe("Maximum container height in pixels.") })]).and(exports_external.union([exports_external.object({ width: exports_external.number().describe("Fixed container width in pixels.") }), exports_external.object({ maxWidth: exports_external.union([exports_external.number(), exports_external.undefined()]).optional().describe("Maximum container width in pixels.") })])).optional().describe(`Container dimensions. Represents the dimensions of the iframe or other
 container holding the app. Specify either width or maxWidth, and either height or maxHeight.`), locale: exports_external.string().optional().describe("User's language and region preference in BCP 47 format."), timeZone: exports_external.string().optional().describe("User's timezone in IANA format."), userAgent: exports_external.string().optional().describe("Host application identifier."), platform: exports_external.union([exports_external.literal("web"), exports_external.literal("desktop"), exports_external.literal("mobile")]).optional().describe("Platform type for responsive design decisions."), deviceCapabilities: exports_external.object({ touch: exports_external.boolean().optional().describe("Whether the device supports touch input."), hover: exports_external.boolean().optional().describe("Whether the device supports hover interactions.") }).optional().describe("Device input capabilities."), safeAreaInsets: exports_external.object({ top: exports_external.number().describe("Top safe area inset in pixels."), right: exports_external.number().describe("Right safe area inset in pixels."), bottom: exports_external.number().describe("Bottom safe area inset in pixels."), left: exports_external.number().describe("Left safe area inset in pixels.") }).optional().describe("Mobile safe area boundaries in pixels.") }).passthrough();
-var E = exports_external.object({ method: exports_external.literal("ui/notifications/host-context-changed"), params: k.describe("Partial context update containing only changed fields.") });
+var R = exports_external.object({ method: exports_external.literal("ui/notifications/host-context-changed"), params: k.describe("Partial context update containing only changed fields.") });
 var LQ = exports_external.object({ method: exports_external.literal("ui/update-model-context"), params: exports_external.object({ content: exports_external.array(ContentBlockSchema).optional().describe("Context content blocks (text, image, etc.)."), structuredContent: exports_external.record(exports_external.string(), exports_external.unknown().describe("Structured content for machine-readable context data.")).optional().describe("Structured content for machine-readable context data.") }) });
-var GQ = exports_external.object({ method: exports_external.literal("ui/initialize"), params: exports_external.object({ appInfo: ImplementationSchema.describe("App identification (name and version)."), appCapabilities: u.describe("Features and capabilities this app provides."), protocolVersion: exports_external.string().describe("Protocol version this app supports.") }) });
-var R = exports_external.object({ protocolVersion: exports_external.string().describe('Negotiated protocol version string (e.g., "2025-11-21").'), hostInfo: ImplementationSchema.describe("Host application identification and version."), hostCapabilities: y.describe("Features and capabilities provided by the host."), hostContext: k.describe("Rich context about the host environment.") }).passthrough();
+var WQ = exports_external.object({ method: exports_external.literal("ui/initialize"), params: exports_external.object({ appInfo: ImplementationSchema.describe("App identification (name and version)."), appCapabilities: f.describe("Features and capabilities this app provides."), protocolVersion: exports_external.string().describe("Protocol version this app supports.") }) });
+var U = exports_external.object({ protocolVersion: exports_external.string().describe('Negotiated protocol version string (e.g., "2025-11-21").'), hostInfo: ImplementationSchema.describe("Host application identification and version."), hostCapabilities: C.describe("Features and capabilities provided by the host."), hostContext: k.describe("Rich context about the host environment.") }).passthrough();
 var v = "ui/resourceUri";
 var d = "text/html;profile=mcp-app";
 
-class qQ extends Protocol {
+class OQ extends Protocol {
   _appInfo;
   _capabilities;
   options;
@@ -28378,13 +28378,13 @@ class qQ extends Protocol {
     this.setNotificationHandler(P, ($) => Z($.params));
   }
   set ontoolresult(Z) {
-    this.setNotificationHandler(U, ($) => Z($.params));
+    this.setNotificationHandler(E, ($) => Z($.params));
   }
   set ontoolcancelled(Z) {
     this.setNotificationHandler(H, ($) => Z($.params));
   }
   set onhostcontextchanged(Z) {
-    this.setNotificationHandler(E, ($) => {
+    this.setNotificationHandler(R, ($) => {
       this._hostContext = { ...this._hostContext, ...$.params }, Z($.params);
     });
   }
@@ -28446,6 +28446,9 @@ class qQ extends Protocol {
   downloadFile(Z, $) {
     return this.request({ method: "ui/download-file", params: Z }, I, $);
   }
+  requestTeardown(Z = {}) {
+    return this.notification({ method: "ui/notifications/request-teardown", params: Z });
+  }
   requestDisplayMode(Z, $) {
     return this.request({ method: "ui/request-display-mode", params: Z }, T, $);
   }
@@ -28458,11 +28461,11 @@ class qQ extends Protocol {
         return;
       Z = true, requestAnimationFrame(() => {
         Z = false;
-        let V = document.documentElement, G = V.style.width, W = V.style.height;
+        let V = document.documentElement, L = V.style.width, W = V.style.height;
         V.style.width = "fit-content", V.style.height = "max-content";
-        let M = V.getBoundingClientRect();
-        V.style.width = G, V.style.height = W;
-        let h = window.innerWidth - V.clientWidth, N = Math.ceil(M.width + h), Y = Math.ceil(M.height);
+        let x = V.getBoundingClientRect();
+        V.style.width = L, V.style.height = W;
+        let h = window.innerWidth - V.clientWidth, N = Math.ceil(x.width + h), Y = Math.ceil(x.height);
         if (N !== $ || Y !== J)
           $ = N, J = Y, this.sendSizeChanged({ width: N, height: Y });
       });
@@ -28476,7 +28479,7 @@ class qQ extends Protocol {
       throw Error("App is already connected. Call close() before connecting again.");
     await super.connect(Z);
     try {
-      let J = await this.request({ method: "ui/initialize", params: { appCapabilities: this._capabilities, appInfo: this._appInfo, protocolVersion: F } }, R, $);
+      let J = await this.request({ method: "ui/initialize", params: { appCapabilities: this._capabilities, appInfo: this._appInfo, protocolVersion: F } }, U, $);
       if (J === undefined)
         throw Error(`Server sent invalid initialize result: ${J}`);
       if (this._hostCapabilities = J.hostCapabilities, this._hostInfo = J.hostInfo, this._hostContext = J.hostContext, await this.notification({ method: "ui/notifications/initialized" }), this.options?.autoResize)
@@ -28486,19 +28489,42 @@ class qQ extends Protocol {
     }
   }
 }
-function uZ(Z, $, J, X) {
-  let D = J._meta, V = D.ui, G = D[v], W = D;
-  if (V?.resourceUri && !G)
+function hZ(Z, $, J, X) {
+  let D = J._meta, V = D.ui, L = D[v], W = D;
+  if (V?.resourceUri && !L)
     W = { ...D, [v]: V.resourceUri };
-  else if (G && !V?.resourceUri)
-    W = { ...D, ui: { ...V, resourceUri: G } };
+  else if (L && !V?.resourceUri)
+    W = { ...D, ui: { ...V, resourceUri: L } };
   return Z.registerTool($, { ...J, _meta: W }, X);
 }
-function fZ(Z, $, J, X, D) {
+function mZ(Z, $, J, X, D) {
   return Z.registerResource($, J, { mimeType: d, ...X }, D);
 }
 
 // server.ts
+import {
+  getDocument,
+  VerbosityLevel,
+  version as PDFJS_VERSION
+} from "pdfjs-dist/legacy/build/pdf.mjs";
+var STANDARD_FONT_DATA_URL = `https://unpkg.com/pdfjs-dist@${PDFJS_VERSION}/standard_fonts/`;
+var STANDARD_FONT_ORIGIN = "https://unpkg.com";
+
+class FetchStandardFontDataFactory {
+  baseUrl;
+  constructor({ baseUrl = null }) {
+    this.baseUrl = baseUrl;
+  }
+  async fetch({ filename }) {
+    if (!this.baseUrl)
+      throw new Error("standardFontDataUrl not provided");
+    const url2 = `${this.baseUrl}${filename}`;
+    const res = await globalThis.fetch(url2);
+    if (!res.ok)
+      throw new Error(`Failed to fetch ${url2}: ${res.status}`);
+    return new Uint8Array(await res.arrayBuffer());
+  }
+}
 var DEFAULT_PDF = "https://arxiv.org/pdf/1706.03762";
 var MAX_CHUNK_BYTES = 512 * 1024;
 var RESOURCE_URI = "ui://pdf-viewer/mcp-app.html";
@@ -28507,7 +28533,158 @@ var CACHE_MAX_LIFETIME_MS = 60000;
 var CACHE_MAX_PDF_SIZE_BYTES = 50 * 1024 * 1024;
 var allowedLocalFiles = new Set;
 var allowedLocalDirs = new Set;
+var cliLocalFiles = new Set;
+var writeFlags = {
+  allowUploadsRoot: false
+};
+function isWritablePath(resolved) {
+  if (cliLocalFiles.has(resolved))
+    return true;
+  if (allowedLocalFiles.has(resolved))
+    return false;
+  return [...allowedLocalDirs].some((dir) => {
+    if (!isAncestorDir(dir, resolved))
+      return false;
+    if (!writeFlags.allowUploadsRoot && path.basename(dir) === "uploads") {
+      return false;
+    }
+    return true;
+  });
+}
 var DIST_DIR = import.meta.filename.endsWith(".ts") ? path.join(import.meta.dirname, "dist") : import.meta.dirname;
+var COMMAND_TTL_MS = 60000;
+var SWEEP_INTERVAL_MS = 30000;
+var POLL_BATCH_WAIT_MS = 200;
+var LONG_POLL_TIMEOUT_MS = 30000;
+var FormField = exports_external.object({
+  name: exports_external.string(),
+  value: exports_external.union([exports_external.string(), exports_external.boolean()])
+});
+var PageInterval = exports_external.object({
+  start: exports_external.number().min(1).optional(),
+  end: exports_external.number().min(1).optional()
+});
+var GET_PAGES_TIMEOUT_MS = 45000;
+var pendingPageRequests = new Map;
+function waitForPageData(requestId, signal) {
+  return new Promise((resolve, reject) => {
+    const settle = (v2) => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      pendingPageRequests.delete(requestId);
+      v2 instanceof Error ? reject(v2) : resolve(v2);
+    };
+    const onAbort = () => settle(new Error("interact request cancelled"));
+    const timer = setTimeout(() => settle(new Error("Timeout waiting for page data from viewer")), GET_PAGES_TIMEOUT_MS);
+    signal?.addEventListener("abort", onAbort);
+    pendingPageRequests.set(requestId, settle);
+  });
+}
+var commandQueues = new Map;
+var pollWaiters = new Map;
+var viewFieldNames = new Map;
+var viewFieldInfo = new Map;
+var viewFileWatches = new Map;
+var viewLastActivity = new Map;
+function touchView(uuid3) {
+  viewLastActivity.set(uuid3, Date.now());
+}
+function pruneStaleQueues() {
+  const now = Date.now();
+  for (const [uuid3, lastActivity] of viewLastActivity) {
+    if (now - lastActivity > COMMAND_TTL_MS) {
+      viewLastActivity.delete(uuid3);
+      commandQueues.delete(uuid3);
+      viewFieldNames.delete(uuid3);
+      viewFieldInfo.delete(uuid3);
+      stopFileWatch(uuid3);
+    }
+  }
+}
+setInterval(pruneStaleQueues, SWEEP_INTERVAL_MS).unref();
+function enqueueCommand(viewUUID, command) {
+  let entry = commandQueues.get(viewUUID);
+  if (!entry) {
+    entry = { commands: [], lastActivity: Date.now() };
+    commandQueues.set(viewUUID, entry);
+  }
+  entry.commands.push(command);
+  entry.lastActivity = Date.now();
+  touchView(viewUUID);
+  const waiter = pollWaiters.get(viewUUID);
+  if (waiter) {
+    pollWaiters.delete(viewUUID);
+    waiter();
+  }
+}
+function dequeueCommands(viewUUID) {
+  touchView(viewUUID);
+  const entry = commandQueues.get(viewUUID);
+  if (!entry)
+    return [];
+  const commands = entry.commands;
+  commandQueues.delete(viewUUID);
+  return commands;
+}
+var FILE_WATCH_DEBOUNCE_MS = 150;
+function startFileWatch(viewUUID, filePath) {
+  const resolved = path.resolve(filePath);
+  let stat;
+  try {
+    stat = fs.statSync(resolved);
+  } catch {
+    return;
+  }
+  stopFileWatch(viewUUID);
+  const entry = {
+    filePath: resolved,
+    watcher: null,
+    lastMtimeMs: stat.mtimeMs,
+    debounce: null
+  };
+  const onEvent = (eventType) => {
+    if (entry.debounce)
+      clearTimeout(entry.debounce);
+    entry.debounce = setTimeout(() => {
+      entry.debounce = null;
+      let s2;
+      try {
+        s2 = fs.statSync(resolved);
+      } catch {
+        return;
+      }
+      if (s2.mtimeMs === entry.lastMtimeMs)
+        return;
+      entry.lastMtimeMs = s2.mtimeMs;
+      enqueueCommand(viewUUID, { type: "file_changed", mtimeMs: s2.mtimeMs });
+    }, FILE_WATCH_DEBOUNCE_MS);
+    if (eventType === "rename") {
+      try {
+        entry.watcher.close();
+      } catch {}
+      try {
+        entry.watcher = fs.watch(resolved, onEvent);
+      } catch {}
+    }
+  };
+  try {
+    entry.watcher = fs.watch(resolved, onEvent);
+  } catch {
+    return;
+  }
+  viewFileWatches.set(viewUUID, entry);
+}
+function stopFileWatch(viewUUID) {
+  const entry = viewFileWatches.get(viewUUID);
+  if (!entry)
+    return;
+  if (entry.debounce)
+    clearTimeout(entry.debounce);
+  try {
+    entry.watcher.close();
+  } catch {}
+  viewFileWatches.delete(viewUUID);
+}
 function isFileUrl(url2) {
   return url2.startsWith("file://") || url2.startsWith("computer://");
 }
@@ -28718,8 +28895,133 @@ async function refreshRoots(server) {
     console.error(`[pdf-server] Failed to list roots: ${err instanceof Error ? err.message : err}`);
   }
 }
+async function extractFormFieldInfo(url2, readRange) {
+  const { totalBytes } = await readRange(url2, 0, 1);
+  const { data } = await readRange(url2, 0, totalBytes);
+  const loadingTask = getDocument({
+    data,
+    standardFontDataUrl: STANDARD_FONT_DATA_URL,
+    StandardFontDataFactory: FetchStandardFontDataFactory,
+    verbosity: VerbosityLevel.ERRORS
+  });
+  const pdfDoc = await loadingTask.promise;
+  const fields = [];
+  try {
+    for (let i2 = 1;i2 <= pdfDoc.numPages; i2++) {
+      const page = await pdfDoc.getPage(i2);
+      const pageHeight = page.getViewport({ scale: 1 }).height;
+      const annotations = await page.getAnnotations();
+      for (const ann of annotations) {
+        if (ann.annotationType !== 20)
+          continue;
+        if (!ann.rect)
+          continue;
+        const fieldName = ann.fieldName || "";
+        const fieldType = ann.fieldType || "unknown";
+        const x1 = Math.min(ann.rect[0], ann.rect[2]);
+        const y1 = Math.min(ann.rect[1], ann.rect[3]);
+        const x2 = Math.max(ann.rect[0], ann.rect[2]);
+        const y2 = Math.max(ann.rect[1], ann.rect[3]);
+        const width = x2 - x1;
+        const height = y2 - y1;
+        const modelY = pageHeight - y2;
+        fields.push({
+          name: fieldName,
+          type: fieldType,
+          page: i2,
+          x: Math.round(x1),
+          y: Math.round(modelY),
+          width: Math.round(width),
+          height: Math.round(height),
+          ...ann.alternativeText ? { label: ann.alternativeText } : undefined
+        });
+      }
+    }
+  } finally {
+    pdfDoc.destroy();
+  }
+  return fields;
+}
+async function extractFormSchema(url2, readRange) {
+  const { totalBytes } = await readRange(url2, 0, 1);
+  const { data } = await readRange(url2, 0, totalBytes);
+  const loadingTask = getDocument({
+    data,
+    standardFontDataUrl: STANDARD_FONT_DATA_URL,
+    StandardFontDataFactory: FetchStandardFontDataFactory,
+    verbosity: VerbosityLevel.ERRORS
+  });
+  const pdfDoc = await loadingTask.promise;
+  let fieldObjects;
+  try {
+    fieldObjects = await pdfDoc.getFieldObjects();
+  } catch {
+    pdfDoc.destroy();
+    return null;
+  }
+  if (!fieldObjects || Object.keys(fieldObjects).length === 0) {
+    pdfDoc.destroy();
+    return null;
+  }
+  const properties = {};
+  for (const [name, fields] of Object.entries(fieldObjects)) {
+    const field = fields[0];
+    if (!field.editable)
+      continue;
+    switch (field.type) {
+      case "text":
+        properties[name] = { type: "string", title: name };
+        break;
+      case "checkbox":
+        properties[name] = { type: "boolean", title: name };
+        break;
+      case "radiobutton": {
+        const options = fields.map((f2) => f2.exportValues).filter((v2) => !!v2 && v2 !== "Off");
+        properties[name] = options.length > 0 ? { type: "string", title: name, enum: options } : { type: "string", title: name };
+        break;
+      }
+      case "combobox":
+      case "listbox": {
+        const items = field.items?.map((i2) => i2.exportValue).filter(Boolean);
+        properties[name] = items && items.length > 0 ? { type: "string", title: name, enum: items } : { type: "string", title: name };
+        break;
+      }
+    }
+  }
+  const fieldLabels = new Map;
+  try {
+    for (let i2 = 1;i2 <= pdfDoc.numPages; i2++) {
+      const page = await pdfDoc.getPage(i2);
+      const annotations = await page.getAnnotations();
+      for (const ann of annotations) {
+        if (ann.fieldName && ann.alternativeText) {
+          fieldLabels.set(ann.fieldName, ann.alternativeText);
+        }
+      }
+    }
+  } catch {}
+  for (const [name, prop] of Object.entries(properties)) {
+    const label = fieldLabels.get(name);
+    if (label) {
+      prop.title = label;
+    }
+  }
+  const hasMechanicalNames = Object.keys(properties).some((name) => {
+    if (fieldLabels.has(name))
+      return false;
+    return /[[\]().]/.test(name) || /^[A-Z0-9_]+$/.test(name);
+  });
+  pdfDoc.destroy();
+  if (Object.keys(properties).length === 0)
+    return null;
+  if (hasMechanicalNames)
+    return null;
+  return { type: "object", properties };
+}
 function createServer(options = {}) {
-  const { useClientRoots = false } = options;
+  const { enableInteract = false, useClientRoots = false } = options;
+  const debug = options.debug ?? false;
+  const disableInteract = !enableInteract;
   const server = new McpServer({ name: "PDF Server", version: "2.0.0" });
   if (useClientRoots) {
     server.server.oninitialized = () => {
@@ -28728,23 +29030,60 @@ function createServer(options = {}) {
     server.server.setNotificationHandler(RootsListChangedNotificationSchema, async () => {
       await refreshRoots(server.server);
     });
-  } else {
-    console.error("[pdf-server] Client roots are ignored (default for remote transports). " + "Pass --use-client-roots to allow the client to expose local directories.");
   }
   const { readPdfRange } = createPdfCache();
   server.tool("list_pdfs", "List available PDFs that can be displayed", {}, async () => {
-    const pdfs = [];
-    for (const filePath of allowedLocalFiles) {
-      pdfs.push({ url: pathToFileUrl(filePath), type: "local" });
-    }
+    const seen = new Set;
+    const localFiles = [];
+    const addLocal = (filePath) => {
+      const url2 = pathToFileUrl(filePath);
+      if (seen.has(url2))
+        return;
+      seen.add(url2);
+      localFiles.push(url2);
+    };
+    for (const filePath of allowedLocalFiles)
+      addLocal(filePath);
+    const WALK_MAX_DEPTH = 8;
+    const WALK_MAX_FILES = 500;
+    let truncated = false;
+    const walk = async (dir, depth) => {
+      if (depth > WALK_MAX_DEPTH || localFiles.length >= WALK_MAX_FILES) {
+        truncated ||= localFiles.length >= WALK_MAX_FILES;
+        return;
+      }
+      let entries;
+      try {
+        entries = await fs.promises.readdir(dir, { withFileTypes: true });
+      } catch {
+        return;
+      }
+      for (const e2 of entries) {
+        if (localFiles.length >= WALK_MAX_FILES) {
+          truncated = true;
+          return;
+        }
+        if (e2.name.startsWith(".") || e2.name === "node_modules")
+          continue;
+        const full = path.join(dir, e2.name);
+        if (e2.isDirectory()) {
+          await walk(full, depth + 1);
+        } else if (e2.isFile() && /\.pdf$/i.test(e2.name)) {
+          addLocal(full);
+        }
+      }
+    };
+    for (const dir of allowedLocalDirs)
+      await walk(dir, 0);
     const parts = [];
-    if (pdfs.length > 0) {
-      parts.push(`Available PDFs:
-${pdfs.map((p) => `- ${p.url} (${p.type})`).join(`
+    if (localFiles.length > 0) {
+      const header = truncated ? `Available PDFs (showing first ${WALK_MAX_FILES}):` : `Available PDFs:`;
+      parts.push(`${header}
+${localFiles.map((u2) => `- ${u2}`).join(`
 `)}`);
     }
     if (allowedLocalDirs.size > 0) {
-      parts.push(`Allowed local directories (from client roots):
+      parts.push(`Allowed local directories:
 ${[...allowedLocalDirs].map((d2) => `- ${d2}`).join(`
 `)}
 Any PDF file under these directories can be displayed.`);
@@ -28755,12 +29094,13 @@ Any PDF file under these directories can be displayed.`);
 
 `) }],
       structuredContent: {
-        localFiles: pdfs.filter((p) => p.type === "local").map((p) => p.url),
-        allowedDirectories: [...allowedLocalDirs]
+        localFiles,
+        allowedDirectories: [...allowedLocalDirs],
+        truncated
       }
     };
   });
-  uZ(server, "read_pdf_bytes", {
+  hZ(server, "read_pdf_bytes", {
     title: "Read PDF Bytes",
     description: "Read a range of bytes from a PDF (max 512KB per request)",
     inputSchema: {
@@ -28818,25 +29158,50 @@ Any PDF file under these directories can be displayed.`);
       };
     }
   });
-  uZ(server, "display_pdf", {
+  hZ(server, "display_pdf", {
     title: "Display PDF",
-    description: `Display an interactive PDF viewer.
+    description: disableInteract ? `Show and render a PDF in a read-only viewer.
+
+Use this tool when the user wants to view or read a PDF. The renderer displays the document for viewing.
+
+Accepts local files (use list_pdfs), client MCP root directories, or any HTTPS URL.` : `Open a PDF in an interactive viewer. Call this ONCE per PDF.
+
+**All follow-up actions go through the \`interact\` tool** with the returned viewUUID — annotating, signing, stamping, filling forms, navigating, searching, extracting text/screenshots. Calling display_pdf again creates a SEPARATE viewer with a different viewUUID — interact calls using the new UUID will not reach the viewer the user already sees.
+
+Returns a viewUUID in structuredContent. Pass it to \`interact\`:
+- add_annotations, update_annotations, remove_annotations, highlight_text
+- fill_form (fill PDF form fields)
+- navigate, search, find, search_navigate, zoom
+- get_text, get_screenshot (extract content)
 
-Accepts:
-- Local files explicitly added to the server (use list_pdfs to see available files)
-- Local files under directories provided by the client as MCP roots
-- Any remote PDF accessible via HTTPS`,
+Accepts local files (use list_pdfs), client MCP root directories, or any HTTPS URL.
+Set \`elicit_form_inputs\` to true to prompt the user to fill form fields before display.`,
     inputSchema: {
       url: exports_external.string().default(DEFAULT_PDF).describe("PDF URL or local file path"),
-      page: exports_external.number().min(1).default(1).describe("Initial page")
+      page: exports_external.number().min(1).default(1).describe("Initial page"),
+      ...disableInteract ? {} : {
+        elicit_form_inputs: exports_external.boolean().default(false).describe("If true and the PDF has form fields, prompt the user to fill them before displaying")
+      }
     },
     outputSchema: exports_external.object({
+      viewUUID: exports_external.string().describe("UUID for this viewer instance" + (disableInteract ? "" : " — pass to interact tool")),
       url: exports_external.string(),
       initialPage: exports_external.number(),
-      totalBytes: exports_external.number()
+      totalBytes: exports_external.number(),
+      formFieldValues: exports_external.record(exports_external.string(), exports_external.union([exports_external.string(), exports_external.boolean()])).optional().describe("Form field values filled by the user via elicitation"),
+      formFields: exports_external.array(exports_external.object({
+        name: exports_external.string(),
+        type: exports_external.string(),
+        page: exports_external.number(),
+        label: exports_external.string().optional(),
+        x: exports_external.number(),
+        y: exports_external.number(),
+        width: exports_external.number(),
+        height: exports_external.number()
+      })).optional().describe("Form fields with bounding boxes in model coordinates (top-left origin)")
     }),
     _meta: { ui: { resourceUri: RESOURCE_URI } }
-  }, async ({ url: url2, page }) => {
+  }, async ({ url: url2, page, elicit_form_inputs }) => {
     const normalized = isArxivUrl(url2) ? normalizeArxivUrl(url2) : url2;
     const validation = validateUrl(normalized);
     if (!validation.valid) {
@@ -28846,40 +29211,834 @@ Accepts:
       };
     }
     const { totalBytes } = await readPdfRange(normalized, 0, 1);
+    const uuid3 = randomUUID();
+    if (!disableInteract)
+      touchView(uuid3);
+    let writable = false;
+    let debugResolved;
+    if (isFileUrl(normalized) || isLocalPath(normalized)) {
+      const localPath = isFileUrl(normalized) ? fileUrlToPath(normalized) : decodeURIComponent(normalized);
+      const resolved = path.resolve(localPath);
+      debugResolved = resolved;
+      if (isWritablePath(resolved)) {
+        try {
+          await fs.promises.access(resolved, fs.constants.W_OK);
+          writable = true;
+        } catch {}
+      }
+      if (!disableInteract) {
+        startFileWatch(uuid3, localPath);
+      }
+    }
+    let formSchema = null;
+    try {
+      formSchema = await extractFormSchema(normalized, readPdfRange);
+    } catch {}
+    if (formSchema) {
+      viewFieldNames.set(uuid3, new Set(Object.keys(formSchema.properties)));
+    }
+    let fieldInfo = [];
+    try {
+      fieldInfo = await extractFormFieldInfo(normalized, readPdfRange);
+      if (fieldInfo.length > 0) {
+        viewFieldInfo.set(uuid3, fieldInfo);
+        if (!viewFieldNames.has(uuid3)) {
+          viewFieldNames.set(uuid3, new Set(fieldInfo.map((f2) => f2.name).filter(Boolean)));
+        }
+      }
+    } catch {}
+    let formFieldValues;
+    let elicitResult;
+    if (elicit_form_inputs && formSchema) {
+      const clientCaps = server.server.getClientCapabilities();
+      if (clientCaps?.elicitation?.form) {
+        try {
+          elicitResult = await server.server.elicitInput({
+            message: `Please fill in the PDF form fields for "${normalized.split("/").pop() || normalized}":`,
+            requestedSchema: formSchema
+          });
+          if (elicitResult.action === "accept" && elicitResult.content) {
+            formFieldValues = {};
+            for (const [k2, v2] of Object.entries(elicitResult.content)) {
+              if (typeof v2 === "string" || typeof v2 === "boolean") {
+                formFieldValues[k2] = v2;
+              }
+            }
+            enqueueCommand(uuid3, {
+              type: "fill_form",
+              fields: Object.entries(formFieldValues).map(([name, value]) => ({ name, value }))
+            });
+          }
+        } catch (err) {
+          console.error("[pdf-server] Form elicitation failed:", err);
+        }
+      }
+    }
+    const contentParts = [
+      {
+        type: "text",
+        text: disableInteract ? `Displaying PDF: ${normalized}` : `PDF opened. viewUUID: ${uuid3}
+
+→ To annotate, sign, stamp, fill forms, navigate, or extract: call \`interact\` with this viewUUID.
+→ DO NOT call display_pdf again — that spawns a separate viewer with a different viewUUID; your interact calls would target the new empty one, not the one the user is looking at.
+
+URL: ${normalized}`
+      }
+    ];
+    if (formFieldValues && Object.keys(formFieldValues).length > 0) {
+      const fieldSummary = Object.entries(formFieldValues).map(([name, value]) => `  ${name}: ${typeof value === "boolean" ? value ? "checked" : "unchecked" : value}`).join(`
+`);
+      contentParts.push({
+        type: "text",
+        text: `
+User-provided form field values:
+${fieldSummary}`
+      });
+    } else if (elicit_form_inputs && elicitResult && elicitResult.action !== "accept") {
+      contentParts.push({
+        type: "text",
+        text: `
+Form elicitation was ${elicitResult.action}d by the user.`
+      });
+    }
+    if (fieldInfo.length > 0) {
+      const byPage = new Map;
+      for (const f2 of fieldInfo) {
+        let list = byPage.get(f2.page);
+        if (!list) {
+          list = [];
+          byPage.set(f2.page, list);
+        }
+        list.push(f2);
+      }
+      const lines = [
+        `
+Form fields (${fieldInfo.length})${disableInteract ? "" : " — use fill_form with {name, value}"}:`
+      ];
+      for (const [pg, fields] of [...byPage.entries()].sort((a2, b) => a2[0] - b[0])) {
+        lines.push(`  Page ${pg}:`);
+        for (const f2 of fields) {
+          const label = f2.label ? ` "${f2.label}"` : "";
+          const nameStr = f2.name || "(unnamed)";
+          lines.push(`    ${nameStr}${label} [${f2.type}] at (${f2.x},${f2.y}) ${f2.width}×${f2.height}`);
+        }
+      }
+      contentParts.push({ type: "text", text: lines.join(`
+`) });
+    } else {
+      const fieldNames = viewFieldNames.get(uuid3);
+      if (fieldNames && fieldNames.size > 0) {
+        contentParts.push({
+          type: "text",
+          text: `
+Form fields${disableInteract ? "" : " available for fill_form"}: ${[...fieldNames].join(", ")}`
+        });
+      }
+    }
     return {
-      content: [{ type: "text", text: `Displaying PDF: ${normalized}` }],
+      content: contentParts,
       structuredContent: {
+        viewUUID: uuid3,
         url: normalized,
         initialPage: page,
-        totalBytes
+        totalBytes,
+        ...formFieldValues ? { formFieldValues } : {},
+        ...fieldInfo.length > 0 ? { formFields: fieldInfo } : {}
       },
       _meta: {
-        viewUUID: randomUUID()
+        viewUUID: uuid3,
+        interactEnabled: !disableInteract,
+        writable,
+        ...debug ? {
+          _debug: {
+            resolved: debugResolved,
+            writable,
+            isWritablePath: debugResolved ? isWritablePath(debugResolved) : undefined,
+            cliLocalFiles: [...cliLocalFiles],
+            allowedLocalFiles: [...allowedLocalFiles],
+            allowedLocalDirs: [...allowedLocalDirs]
+          }
+        } : {}
+      }
+    };
+  });
+  if (!disableInteract) {
+    let detectImageDimensions = function(bytes) {
+      if (bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78 && bytes[3] === 71) {
+        if (bytes.length >= 24) {
+          const width = bytes.readUInt32BE(16);
+          const height = bytes.readUInt32BE(20);
+          return { width, height };
+        }
+      }
+      if (bytes[0] === 255 && bytes[1] === 216) {
+        let offset = 2;
+        while (offset < bytes.length - 8) {
+          if (bytes[offset] !== 255)
+            break;
+          const marker = bytes[offset + 1];
+          if (marker === 192 || marker === 194) {
+            const height = bytes.readUInt16BE(offset + 5);
+            const width = bytes.readUInt16BE(offset + 7);
+            return { width, height };
+          }
+          const segLen = bytes.readUInt16BE(offset + 2);
+          offset += 2 + segLen;
+        }
       }
+      return null;
     };
+    const InteractCommandSchema = exports_external.object({
+      action: exports_external.enum([
+        "navigate",
+        "search",
+        "find",
+        "search_navigate",
+        "zoom",
+        "add_annotations",
+        "update_annotations",
+        "remove_annotations",
+        "highlight_text",
+        "fill_form",
+        "get_text",
+        "get_screenshot"
+      ]).describe("Action to perform"),
+      page: exports_external.number().min(1).optional().describe("Page number (for navigate, highlight_text, get_screenshot, get_text)"),
+      query: exports_external.string().optional().describe("Search text (for search / find / highlight_text)"),
+      matchIndex: exports_external.number().min(0).optional().describe("Match index (for search_navigate)"),
+      scale: exports_external.number().min(0.5).max(3).optional().describe("Zoom scale, 1.0 = 100% (for zoom)"),
+      annotations: exports_external.array(exports_external.record(exports_external.string(), exports_external.any())).optional().describe("Annotation objects (see types in description). Each needs: id, type, page. For update_annotations only id+type are required."),
+      ids: exports_external.array(exports_external.string()).optional().describe("Annotation IDs (for remove_annotations)"),
+      color: exports_external.string().optional().describe("Color override (for highlight_text)"),
+      content: exports_external.string().optional().describe("Tooltip/note content (for highlight_text)"),
+      fields: exports_external.array(FormField).optional().describe("Form fields to fill (for fill_form): { name, value } where value is string or boolean"),
+      intervals: exports_external.array(PageInterval).optional().describe("Page ranges for get_text. Each has optional start/end. [{start:1,end:5}], [{}] = all pages. Max 20 pages.")
+    });
+    async function resolveImageAnnotation(ann) {
+      if (!ann.imageData && ann.imageUrl) {
+        const url2 = String(ann.imageUrl);
+        const check2 = validateUrl(url2);
+        if (!check2.valid) {
+          throw new Error(`imageUrl rejected by validateUrl: ${check2.error ?? url2}`);
+        }
+        let imgBytes;
+        if (url2.startsWith("https://")) {
+          const resp = await fetch(url2);
+          if (!resp.ok)
+            throw new Error(`HTTP ${resp.status} for ${url2}`);
+          imgBytes = new Uint8Array(await resp.arrayBuffer());
+        } else {
+          const filePath = isFileUrl(url2) ? fileUrlToPath(url2) : decodeURIComponent(url2);
+          imgBytes = await fs.promises.readFile(path.resolve(filePath));
+        }
+        ann.imageData = Buffer.from(imgBytes).toString("base64");
+      }
+      if (ann.imageData && !ann.mimeType) {
+        const bytes = Buffer.from(ann.imageData, "base64");
+        if (bytes[0] === 137 && bytes[1] === 80 && bytes[2] === 78 && bytes[3] === 71) {
+          ann.mimeType = "image/png";
+        } else {
+          ann.mimeType = "image/jpeg";
+        }
+      }
+      if (ann.imageData && (ann.width == null || ann.height == null)) {
+        const dims = detectImageDimensions(Buffer.from(ann.imageData, "base64"));
+        if (dims) {
+          const maxWidth = 200;
+          const aspectRatio = dims.height / dims.width;
+          ann.width = ann.width ?? Math.min(dims.width, maxWidth);
+          ann.height = ann.height ?? ann.width * aspectRatio;
+        } else {
+          ann.width = ann.width ?? 200;
+          ann.height = ann.height ?? 200;
+        }
+      }
+      ann.x = ann.x ?? 72;
+      ann.y = ann.y ?? 72;
+    }
+    async function processInteractCommand(uuid3, cmd, signal) {
+      const {
+        action,
+        page,
+        query,
+        matchIndex,
+        scale,
+        annotations,
+        ids,
+        color,
+        content,
+        fields,
+        intervals
+      } = cmd;
+      let description;
+      switch (action) {
+        case "navigate":
+          if (page == null)
+            return {
+              content: [{ type: "text", text: "navigate requires `page`" }],
+              isError: true
+            };
+          enqueueCommand(uuid3, { type: "navigate", page });
+          description = `navigate to page ${page}`;
+          break;
+        case "search":
+          if (!query)
+            return {
+              content: [{ type: "text", text: "search requires `query`" }],
+              isError: true
+            };
+          enqueueCommand(uuid3, { type: "search", query });
+          description = `search for "${query}"`;
+          break;
+        case "find":
+          if (!query)
+            return {
+              content: [{ type: "text", text: "find requires `query`" }],
+              isError: true
+            };
+          enqueueCommand(uuid3, { type: "find", query });
+          description = `find "${query}" (silent)`;
+          break;
+        case "search_navigate":
+          if (matchIndex == null)
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: "search_navigate requires `matchIndex`"
+                }
+              ],
+              isError: true
+            };
+          enqueueCommand(uuid3, { type: "search_navigate", matchIndex });
+          description = `go to match #${matchIndex}`;
+          break;
+        case "zoom":
+          if (scale == null)
+            return {
+              content: [{ type: "text", text: "zoom requires `scale`" }],
+              isError: true
+            };
+          enqueueCommand(uuid3, { type: "zoom", scale });
+          description = `zoom to ${Math.round(scale * 100)}%`;
+          break;
+        case "add_annotations":
+          if (!annotations || annotations.length === 0)
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: "add_annotations requires `annotations` array"
+                }
+              ],
+              isError: true
+            };
+          try {
+            for (const ann of annotations) {
+              if (ann.type === "image") {
+                await resolveImageAnnotation(ann);
+              }
+            }
+          } catch (err) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `add_annotations: ${err instanceof Error ? err.message : String(err)}`
+                }
+              ],
+              isError: true
+            };
+          }
+          enqueueCommand(uuid3, {
+            type: "add_annotations",
+            annotations
+          });
+          description = `add ${annotations.length} annotation(s)`;
+          break;
+        case "update_annotations":
+          if (!annotations || annotations.length === 0)
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: "update_annotations requires `annotations` array"
+                }
+              ],
+              isError: true
+            };
+          enqueueCommand(uuid3, {
+            type: "update_annotations",
+            annotations
+          });
+          description = `update ${annotations.length} annotation(s)`;
+          break;
+        case "remove_annotations":
+          if (!ids || ids.length === 0)
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: "remove_annotations requires `ids` array"
+                }
+              ],
+              isError: true
+            };
+          enqueueCommand(uuid3, { type: "remove_annotations", ids });
+          description = `remove ${ids.length} annotation(s)`;
+          break;
+        case "highlight_text": {
+          if (!query)
+            return {
+              content: [
+                { type: "text", text: "highlight_text requires `query`" }
+              ],
+              isError: true
+            };
+          const id = `ht_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
+          enqueueCommand(uuid3, {
+            type: "highlight_text",
+            id,
+            query,
+            page,
+            color,
+            content
+          });
+          description = `highlight text "${query}"${page ? ` on page ${page}` : ""}`;
+          break;
+        }
+        case "fill_form": {
+          if (!fields || fields.length === 0)
+            return {
+              content: [
+                { type: "text", text: "fill_form requires `fields` array" }
+              ],
+              isError: true
+            };
+          const knownFields = viewFieldNames.get(uuid3);
+          const validFields = [];
+          const unknownNames = [];
+          for (const f2 of fields) {
+            if (knownFields && !knownFields.has(f2.name)) {
+              unknownNames.push(f2.name);
+            } else {
+              validFields.push(f2);
+            }
+          }
+          if (validFields.length > 0) {
+            enqueueCommand(uuid3, { type: "fill_form", fields: validFields });
+          }
+          const parts = [];
+          if (validFields.length > 0) {
+            parts.push(`Filled ${validFields.length} field(s): ${validFields.map((f2) => f2.name).join(", ")}`);
+          }
+          if (unknownNames.length > 0) {
+            parts.push(`Unknown field(s) skipped: ${unknownNames.join(", ")}`);
+            if (knownFields && knownFields.size > 0) {
+              parts.push(`Valid field names: ${[...knownFields].join(", ")}`);
+            }
+          }
+          description = parts.join(". ");
+          if (unknownNames.length > 0 && validFields.length === 0) {
+            return {
+              content: [{ type: "text", text: description }],
+              isError: true
+            };
+          }
+          break;
+        }
+        case "get_text": {
+          const resolvedIntervals = intervals ?? (page ? [{ start: page, end: page }] : [{}]);
+          const requestId = randomUUID();
+          enqueueCommand(uuid3, {
+            type: "get_pages",
+            requestId,
+            intervals: resolvedIntervals,
+            getText: true,
+            getScreenshots: false
+          });
+          let pageData;
+          try {
+            pageData = await waitForPageData(requestId, signal);
+          } catch (err) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `Error: ${err instanceof Error ? err.message : String(err)}`
+                }
+              ],
+              isError: true
+            };
+          }
+          const textParts = [];
+          for (const entry of pageData) {
+            if (entry.text != null) {
+              textParts.push({
+                type: "text",
+                text: `--- Page ${entry.page} ---
+${entry.text}`
+              });
+            }
+          }
+          if (textParts.length === 0) {
+            textParts.push({ type: "text", text: "No text content returned" });
+          }
+          return { content: textParts };
+        }
+        case "get_screenshot": {
+          if (page == null)
+            return {
+              content: [
+                { type: "text", text: "get_screenshot requires `page`" }
+              ],
+              isError: true
+            };
+          const requestId = randomUUID();
+          enqueueCommand(uuid3, {
+            type: "get_pages",
+            requestId,
+            intervals: [{ start: page, end: page }],
+            getText: false,
+            getScreenshots: true
+          });
+          let pageData;
+          try {
+            pageData = await waitForPageData(requestId, signal);
+          } catch (err) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `Error: ${err instanceof Error ? err.message : String(err)}`
+                }
+              ],
+              isError: true
+            };
+          }
+          const entry = pageData[0];
+          if (entry?.image) {
+            return {
+              content: [
+                {
+                  type: "image",
+                  data: entry.image,
+                  mimeType: "image/jpeg"
+                }
+              ]
+            };
+          }
+          return {
+            content: [{ type: "text", text: "No screenshot returned" }],
+            isError: true
+          };
+        }
+        default:
+          return {
+            content: [{ type: "text", text: `Unknown action: ${action}` }],
+            isError: true
+          };
+      }
+      return {
+        content: [{ type: "text", text: `Queued: ${description}` }]
+      };
+    }
+    server.registerTool("interact", {
+      title: "Interact with PDF",
+      description: `Interact with a PDF viewer: annotate, navigate, search, extract text/screenshots, fill forms.
+IMPORTANT: viewUUID must be the exact UUID returned by display_pdf (e.g. "a1b2c3d4-..."). Do NOT use arbitrary strings.
+
+**BATCHING**: Send multiple commands in one call via \`commands\` array. Commands run sequentially. TIP: End with \`get_screenshot\` to verify your changes.
+
+**ANNOTATION** — add_annotations with array of annotation objects. Each needs: id (unique string), type, page (1-indexed).
+
+**COORDINATE SYSTEM**: PDF points (1pt = 1/72in), origin at page TOP-LEFT corner. X increases rightward, Y increases downward.
+- US Letter = 612×792pt. Margins: top≈y=50, bottom≈y=742, left≈x=72, right≈x=540, center≈(306, 396).
+- Rectangle/circle/stamp x,y is the TOP-LEFT corner. To place a 200×30 box at the TOP of the page: x=72, y=50, width=200, height=30.
+- For highlights/underlines, each rect's y is the TOP of the highlighted region.
+
+Annotation types:
+• highlight: rects:[{x,y,width,height}], color?, content? • underline: rects:[{x,y,w,h}], color?
+• strikethrough: rects:[{x,y,w,h}], color? • note: x, y, content, color?
+• rectangle: x, y, width, height, color?, fillColor?, rotation? • circle: x, y, width, height, color?, fillColor?
+• line: x1, y1, x2, y2, color? • freetext: x, y, content, fontSize?, color?
+• stamp: x, y, label (any text, e.g. APPROVED, DRAFT, CONFIDENTIAL), color?, rotation?
+• image: imageUrl (required), x?, y?, width?, height?, mimeType?, rotation?, aspect? — places an image (signature, logo, etc.) on the page. Pass a local file path or HTTPS URL (NO data: URIs, NO base64). Width/height auto-detected if omitted. Users can also drag & drop images directly onto the viewer.
+
+TIP: For text annotations, prefer highlight_text (auto-finds text) over manual rects.
+
+Example — add a signature image and a stamp, then screenshot to verify:
+\`\`\`json
+{"viewUUID":"…","commands":[
+  {"action":"add_annotations","annotations":[
+    {"id":"sig1","type":"image","page":1,"x":72,"y":700,"imageUrl":"/path/to/signature.png"},
+    {"id":"s1","type":"stamp","page":1,"x":300,"y":400,"label":"APPROVED"}
+  ]},
+  {"action":"get_screenshot","page":1}
+]}
+\`\`\`
+
+• highlight_text: auto-find and highlight text (query, page?, color?, content?)
+• update_annotations: partial update (id+type required) • remove_annotations: remove by ids
+
+**NAVIGATION**: navigate (page), search (query), find (query, silent), search_navigate (matchIndex), zoom (scale 0.5–3.0)
+
+**TEXT/SCREENSHOTS**:
+• get_text: extract text from pages. Optional \`page\` for single page, or \`intervals\` for ranges [{start?,end?}]. Max 20 pages.
+• get_screenshot: capture a single page as PNG image. Requires \`page\`.
+
+**FORMS** — fill_form: fill fields with \`fields\` array of {name, value}.`,
+      inputSchema: {
+        viewUUID: exports_external.string().describe("The viewUUID of the PDF viewer (from display_pdf result)"),
+        action: exports_external.enum([
+          "navigate",
+          "search",
+          "find",
+          "search_navigate",
+          "zoom",
+          "add_annotations",
+          "update_annotations",
+          "remove_annotations",
+          "highlight_text",
+          "fill_form",
+          "get_text",
+          "get_screenshot"
+        ]).optional().describe("Action to perform (for single command). Use `commands` array for batching."),
+        page: exports_external.number().min(1).optional().describe("Page number (for navigate, highlight_text, get_screenshot, get_text)"),
+        query: exports_external.string().optional().describe("Search text (for search / find / highlight_text)"),
+        matchIndex: exports_external.number().min(0).optional().describe("Match index (for search_navigate)"),
+        scale: exports_external.number().min(0.5).max(3).optional().describe("Zoom scale, 1.0 = 100% (for zoom)"),
+        annotations: exports_external.array(exports_external.record(exports_external.string(), exports_external.any())).optional().describe("Annotation objects (see types in description). Each needs: id, type, page. For update_annotations only id+type are required."),
+        ids: exports_external.array(exports_external.string()).optional().describe("Annotation IDs (for remove_annotations)"),
+        color: exports_external.string().optional().describe("Color override (for highlight_text)"),
+        content: exports_external.string().optional().describe("Tooltip/note content (for highlight_text)"),
+        fields: exports_external.array(FormField).optional().describe("Form fields to fill (for fill_form): { name, value } where value is string or boolean"),
+        intervals: exports_external.array(PageInterval).optional().describe("Page ranges for get_text. Each has optional start/end. [{start:1,end:5}], [{}] = all pages. Max 20 pages."),
+        commands: exports_external.array(InteractCommandSchema).optional().describe("Array of commands to execute sequentially. More efficient than separate calls. Tip: end with get_pages+getScreenshots to verify changes.")
+      }
+    }, async ({
+      viewUUID: uuid3,
+      action,
+      page,
+      query,
+      matchIndex,
+      scale,
+      annotations,
+      ids,
+      color,
+      content,
+      fields,
+      intervals,
+      commands
+    }, extra) => {
+      const commandList = commands ? commands : action ? [
+        {
+          action,
+          page,
+          query,
+          matchIndex,
+          scale,
+          annotations,
+          ids,
+          color,
+          content,
+          fields,
+          intervals
+        }
+      ] : [];
+      if (commandList.length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "No action or commands specified. Provide either `action` (single command) or `commands` (batch)."
+            }
+          ],
+          isError: true
+        };
+      }
+      const allContent = [];
+      let hasError = false;
+      for (let i2 = 0;i2 < commandList.length; i2++) {
+        const result = await processInteractCommand(uuid3, commandList[i2], extra.signal);
+        if (result.isError) {
+          hasError = true;
+        }
+        allContent.push(...result.content);
+        if (hasError)
+          break;
+      }
+      return {
+        content: allContent,
+        ...hasError ? { isError: true } : {}
+      };
+    });
+    hZ(server, "submit_page_data", {
+      title: "Submit Page Data",
+      description: "Submit rendered page data for a get_pages request (used by viewer)",
+      inputSchema: {
+        requestId: exports_external.string().describe("The request ID from the get_pages command"),
+        pages: exports_external.array(exports_external.object({
+          page: exports_external.number(),
+          text: exports_external.string().optional(),
+          image: exports_external.string().optional().describe("Base64 PNG image data")
+        })).describe("Page data entries")
+      },
+      _meta: { ui: { visibility: ["app"] } }
+    }, async ({ requestId, pages }) => {
+      const settle = pendingPageRequests.get(requestId);
+      if (settle) {
+        settle(pages);
+        return {
+          content: [
+            { type: "text", text: `Submitted ${pages.length} page(s)` }
+          ]
+        };
+      }
+      return {
+        content: [
+          { type: "text", text: `No pending request for ${requestId}` }
+        ],
+        isError: true
+      };
+    });
+    hZ(server, "poll_pdf_commands", {
+      title: "Poll PDF Commands",
+      description: "Poll for pending commands for a PDF viewer",
+      inputSchema: {
+        viewUUID: exports_external.string().describe("The viewUUID of the PDF viewer")
+      },
+      _meta: { ui: { visibility: ["app"] } }
+    }, async ({ viewUUID: uuid3 }) => {
+      if (commandQueues.has(uuid3)) {
+        await new Promise((r) => setTimeout(r, POLL_BATCH_WAIT_MS));
+      } else {
+        await new Promise((resolve) => {
+          const timer = setTimeout(() => {
+            pollWaiters.delete(uuid3);
+            resolve();
+          }, LONG_POLL_TIMEOUT_MS);
+          const prev = pollWaiters.get(uuid3);
+          if (prev)
+            prev();
+          pollWaiters.set(uuid3, () => {
+            clearTimeout(timer);
+            resolve();
+          });
+        });
+        if (commandQueues.has(uuid3)) {
+          await new Promise((r) => setTimeout(r, POLL_BATCH_WAIT_MS));
+        }
+      }
+      const commands = dequeueCommands(uuid3);
+      return {
+        content: [{ type: "text", text: `${commands.length} command(s)` }],
+        structuredContent: { commands }
+      };
+    });
+  }
+  hZ(server, "save_pdf", {
+    title: "Save PDF",
+    description: "Save annotated PDF bytes back to a local file",
+    inputSchema: {
+      url: exports_external.string().describe("Original PDF URL or local file path"),
+      data: exports_external.string().describe("Base64-encoded PDF bytes")
+    },
+    outputSchema: exports_external.object({
+      filePath: exports_external.string(),
+      mtimeMs: exports_external.number()
+    }),
+    _meta: { ui: { visibility: ["app"] } }
+  }, async ({ url: url2, data }) => {
+    const validation = validateUrl(url2);
+    if (!validation.valid) {
+      return {
+        content: [{ type: "text", text: validation.error }],
+        isError: true
+      };
+    }
+    const filePath = isFileUrl(url2) ? fileUrlToPath(url2) : isLocalPath(url2) ? decodeURIComponent(url2) : null;
+    if (!filePath) {
+      return {
+        content: [
+          { type: "text", text: "Save is only supported for local files" }
+        ],
+        isError: true
+      };
+    }
+    const resolved = path.resolve(filePath);
+    if (!isWritablePath(resolved)) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Save refused: file is not under a mounted directory root " + "and was not passed as a CLI argument. MCP file roots are " + "read-only (typically uploaded copies the client doesn't " + "expect to change)."
+          }
+        ],
+        isError: true
+      };
+    }
+    try {
+      const bytes = Buffer.from(data, "base64");
+      await fs.promises.writeFile(resolved, bytes);
+      const { mtimeMs } = await fs.promises.stat(resolved);
+      return {
+        content: [{ type: "text", text: `Saved to ${filePath}` }],
+        structuredContent: { filePath: resolved, mtimeMs }
+      };
+    } catch (err) {
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Failed to save: ${err instanceof Error ? err.message : String(err)}`
+          }
+        ],
+        isError: true
+      };
+    }
   });
-  fZ(server, RESOURCE_URI, RESOURCE_URI, { mimeType: d }, async () => {
+  mZ(server, RESOURCE_URI, RESOURCE_URI, { mimeType: d }, async () => {
     const html = await fs.promises.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");
     return {
       contents: [
-        { uri: RESOURCE_URI, mimeType: d, text: html }
+        {
+          uri: RESOURCE_URI,
+          mimeType: d,
+          text: html,
+          _meta: {
+            ui: {
+              permissions: { clipboardWrite: {} },
+              csp: {
+                connectDomains: [STANDARD_FONT_ORIGIN],
+                resourceDomains: [STANDARD_FONT_ORIGIN]
+              }
+            }
+          }
+        }
       ]
     };
   });
   return server;
 }
 export {
+  writeFlags,
   validateUrl,
+  stopFileWatch,
+  startFileWatch,
   pathToFileUrl,
   normalizeArxivUrl,
+  isWritablePath,
   isFileUrl,
   isArxivUrl,
   isAncestorDir,
   fileUrlToPath,
   createServer,
   createPdfCache,
+  cliLocalFiles,
   allowedLocalFiles,
   allowedLocalDirs,
+  STANDARD_FONT_DATA_URL,
   RESOURCE_URI,
   MAX_CHUNK_BYTES,
   DEFAULT_PDF,