@pinepaper.studio/mcp-server 1.6.26 → 1.6.28

package/dist/utils/asset-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"asset-paths.d.ts","sourceRoot":"","sources":["../../src/utils/asset-paths.ts"],"names":[],"mappings":"AAyBA,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAK3D;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBlG"}
+{"version":3,"file":"asset-paths.d.ts","sourceRoot":"","sources":["../../src/utils/asset-paths.ts"],"names":[],"mappings":"AAgCA,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAM3D;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBlG"}

package/dist/utils/asset-paths.js

@@ -13,11 +13,18 @@
  * The export folder is allowed because the server's own results point into
  * it: brand_kit from_url saves the logo there and says to import it with
  * pinepaper_import_image. Refusing that would break the tool's own advice.
+ *
+ * OFF BY DEFAULT OUTSIDE THE EXPORT FOLDER (1.6.28): reading the working
+ * directory or PINEPAPER_ASSET_DIRS needs PINEPAPER_ALLOW_LOCAL_FILES=1
+ * (utils/capabilities.ts). The export folder holds the server's own results
+ * (a saved scene, a brand_kit logo), so it is read without the switch, and a
+ * save / restore round trip keeps working.
  */
 import { realpath } from 'node:fs/promises';
 import { basename, delimiter, dirname, join, resolve, sep } from 'node:path';
 import { env } from './env.js';
 import { getExportDir } from './export-dir.js';
+import { capabilityAllowed, capabilityRefusal } from './capabilities.js';
 async function real(p) {
     try {
         return await realpath(p);
@@ -28,6 +35,8 @@ async function real(p) {
 }
 export async function allowedAssetRoots() {
     const exportDir = getExportDir();
+    if (!capabilityAllowed('localFiles'))
+        return [...new Set([await real(resolve(exportDir))].filter((r) => r !== null))];
     const entries = [process.cwd(), exportDir, ...(env('PINEPAPER_ASSET_DIRS') ?? '').split(delimiter).filter(Boolean)];
     const roots = await Promise.all(entries.map((e) => real(resolve(e))));
     return [...new Set(roots.filter((r) => r !== null))];
@@ -59,6 +68,8 @@ export async function confineAssetPath(path) {
     return outside(path, dirname(target));
 }
 function outside(path, folder) {
+    if (!capabilityAllowed('localFiles'))
+        return { error: capabilityRefusal('localFiles', `Importing "${path}"`) + ` (Files in the export folder, ${getExportDir()}, are read without it.)` };
     return {
         error: `"${path}" is outside the allowed folders (cwd, the export folder, PINEPAPER_ASSET_DIRS). `
             + `Add its folder (${folder}) to PINEPAPER_ASSET_DIRS to import it.`,

package/dist/utils/asset-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"asset-paths.js","sourceRoot":"","sources":["../../src/utils/asset-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,KAAK,UAAU,IAAI,CAAC,CAAS;IAC3B,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACvH,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,mBAAmB,IAAI,MAAM,GAAG,iGAAiG,EAAE,CAAC;IACtJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC3C,OAAO;QACL,KAAK,EAAE,IAAI,IAAI,mFAAmF;cAC9F,mBAAmB,MAAM,yCAAyC;KACvE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"asset-paths.js","sourceRoot":"","sources":["../../src/utils/asset-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,KAAK,UAAU,IAAI,CAAC,CAAS;IAC3B,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IACnI,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,KAAK,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;IACvH,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClG,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,mBAAmB,IAAI,MAAM,GAAG,iGAAiG,EAAE,CAAC;IACtJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC5C,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,MAAc;IAC3C,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,YAAY,EAAE,cAAc,IAAI,GAAG,CAAC,GAAG,iCAAiC,YAAY,EAAE,yBAAyB,EAAE,CAAC;IAC1L,OAAO;QACL,KAAK,EAAE,IAAI,IAAI,mFAAmF;cAC9F,mBAAmB,MAAM,yCAAyC;KACvE,CAAC;AACJ,CAAC"}

package/dist/utils/capabilities.d.ts

@@ -0,0 +1,15 @@
+export type Capability = 'code' | 'localFiles';
+export declare const CAPABILITY_SWITCH: Readonly<Record<Capability, string>>;
+/** Turn a capability on or off for this process; undefined goes back to the environment. */
+export declare function setCapability(capability: Capability, on: boolean | undefined): void;
+export declare function capabilityAllowed(capability: Capability): boolean;
+/** The tools behind PINEPAPER_ALLOW_CODE, as the notice and the docs name them. */
+export declare const CODE_GATED_TOOLS: readonly string[];
+/** The refusal for a call that needs a capability that is off: what was refused, and the switch that allows it. */
+export declare function capabilityRefusal(capability: Capability, what: string): string;
+/**
+ * What an agent reads on connect (the server's instructions), so it knows before its first call which tools are
+ * behind a switch, whether this server has them on, and that turning them on is the user's decision, not a tool's.
+ */
+export declare function securityBoundaryNotice(): string;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/utils/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/utils/capabilities.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,YAAY,CAAC;AAE/C,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAGjE,CAAC;AAIH,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAGnF;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAKjE;AAED,mFAAmF;AACnF,eAAO,MAAM,gBAAgB,mBAM3B,CAAC;AAIH,mHAAmH;AACnH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAK9E;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAM/C"}

package/dist/utils/capabilities.js

@@ -0,0 +1,63 @@
+/**
+ * The high-impact capabilities, OFF unless the person running the server turns them on.
+ *
+ * - code: run JavaScript the caller wrote, in the studio page. pinepaper_execute_custom_code, pinepaper_p5_draw,
+ *   pinepaper_render_hook (register), pinepaper_register_custom_relation (its compute / apply are JS), and
+ *   pinepaper_import_scene's registerCustomRelations (a file's saved compute / apply). PINEPAPER_ALLOW_CODE=1.
+ * - localFiles: read a file from this machine's disk for an import (image, audio / video, a saved scene), inside
+ *   the allowed folders (cwd, the export folder, PINEPAPER_ASSET_DIRS). PINEPAPER_ALLOW_LOCAL_FILES=1. The server's
+ *   own exports stay readable without it, and URL imports are not affected (they go through safe-fetch).
+ *
+ * WHY OFF. An MCP server takes its arguments from a model, and a model takes its instructions from whatever it reads:
+ * a web page, a document, a scene file. Each of these turns such text into code running in the studio, or into the
+ * contents of a file on disk. The person who starts the server decides whether that is wanted; a refusal names the
+ * switch, so it is one step to turn on. An embedder (a Worker with no environment) sets them with setCapability.
+ */
+import { env } from './env.js';
+export const CAPABILITY_SWITCH = Object.freeze({
+    code: 'PINEPAPER_ALLOW_CODE',
+    localFiles: 'PINEPAPER_ALLOW_LOCAL_FILES',
+});
+const overrides = {};
+/** Turn a capability on or off for this process; undefined goes back to the environment. */
+export function setCapability(capability, on) {
+    if (on === undefined)
+        delete overrides[capability];
+    else
+        overrides[capability] = on;
+}
+export function capabilityAllowed(capability) {
+    const set = overrides[capability];
+    if (set !== undefined)
+        return set;
+    const v = (env(CAPABILITY_SWITCH[capability]) ?? '').trim().toLowerCase();
+    return v === '1' || v === 'true' || v === 'yes' || v === 'on';
+}
+/** The tools behind PINEPAPER_ALLOW_CODE, as the notice and the docs name them. */
+export const CODE_GATED_TOOLS = Object.freeze([
+    'pinepaper_execute_custom_code',
+    'pinepaper_p5_draw',
+    'pinepaper_render_hook (register)',
+    'pinepaper_register_custom_relation',
+    'pinepaper_import_scene (registerCustomRelations)',
+]);
+const HOW_TO_ENABLE = 'The person running the server enables it: add it to this server\'s "env" in their MCP client config, or tick the setting in the Claude Desktop extension, then restart the server. No tool call can change it.';
+/** The refusal for a call that needs a capability that is off: what was refused, and the switch that allows it. */
+export function capabilityRefusal(capability, what) {
+    const name = CAPABILITY_SWITCH[capability];
+    return capability === 'code'
+        ? `SECURITY BOUNDARY: ${what} runs JavaScript in the studio, which is off unless the server is started with ${name}=1. Nothing was run. ${HOW_TO_ENABLE} Until then, use the built-in tools (shapes, keyframes, relations such as time_expression, generators, patterns).`
+        : `SECURITY BOUNDARY: ${what} reads a file from this machine's disk, which is off unless the server is started with ${name}=1. ${HOW_TO_ENABLE} Until then, pass an http(s) URL, or a file in the export folder.`;
+}
+/**
+ * What an agent reads on connect (the server's instructions), so it knows before its first call which tools are
+ * behind a switch, whether this server has them on, and that turning them on is the user's decision, not a tool's.
+ */
+export function securityBoundaryNotice() {
+    const on = (c) => (capabilityAllowed(c) ? 'ON' : 'OFF');
+    return `SECURITY BOUNDARY (set by the person running this server; no tool call can change it):
+- Running JavaScript you write is ${on('code')} on this server (${CAPABILITY_SWITCH.code}=1 turns it on): ${CODE_GATED_TOOLS.join(', ')}.
+- Reading files from disk outside the export folder is ${on('localFiles')} (${CAPABILITY_SWITCH.localFiles}=1 turns it on). URLs and the export folder always work.
+When a switch is OFF, build with the other tools. If the user needs one of these, tell them which switch to set in their MCP client config (or the Claude Desktop extension's settings) and to restart the server; do not retry the call.`;
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/utils/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/utils/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAI/B,MAAM,CAAC,MAAM,iBAAiB,GAAyC,MAAM,CAAC,MAAM,CAAC;IACnF,IAAI,EAAE,sBAAsB;IAC5B,UAAU,EAAE,6BAA6B;CAC1C,CAAC,CAAC;AAEH,MAAM,SAAS,GAAyC,EAAE,CAAC;AAE3D,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,UAAsB,EAAE,EAAuB;IAC3E,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;;QAC9C,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,UAAsB;IACtD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1E,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,+BAA+B;IAC/B,mBAAmB;IACnB,kCAAkC;IAClC,oCAAoC;IACpC,kDAAkD;CACnD,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,gNAAgN,CAAC;AAEvO,mHAAmH;AACnH,MAAM,UAAU,iBAAiB,CAAC,UAAsB,EAAE,IAAY;IACpE,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO,UAAU,KAAK,MAAM;QAC1B,CAAC,CAAC,sBAAsB,IAAI,kFAAkF,IAAI,wBAAwB,aAAa,mHAAmH;QAC1Q,CAAC,CAAC,sBAAsB,IAAI,0FAA0F,IAAI,OAAO,aAAa,mEAAmE,CAAC;AACtN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,EAAE,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO;oCAC2B,EAAE,CAAC,MAAM,CAAC,oBAAoB,iBAAiB,CAAC,IAAI,oBAAoB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;yDAC9E,EAAE,CAAC,YAAY,CAAC,KAAK,iBAAiB,CAAC,UAAU;0OACgI,CAAC;AAC3O,CAAC"}

package/dist/utils/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEpD"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpD"}

package/dist/utils/env.js

@@ -6,6 +6,7 @@
  * reader: it is bundled on its own and takes no relative imports.
  */
 export function env(name) {
-    return process.env[name];
+    // A Worker build (mcp-cloud) may have no process at all.
+    return typeof process !== 'undefined' && process.env ? process.env[name] : undefined;
 }
 //# sourceMappingURL=env.js.map

package/dist/utils/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,IAAY;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/utils/env.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,IAAY;IAC9B,yDAAyD;IACzD,OAAO,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC"}

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": "0.3",
   "name": "pinepaper-mcp",
-  "version": "1.6.26",
+  "version": "1.6.28",
   "display_name": "PinePaper",
   "icon": "icon.png",
   "description": "Create animated graphics with AI using PinePaper Studio",
@@ -40,7 +40,9 @@
       "env": {
         "PINEPAPER_CHROME_PATH": "${user_config.chrome_path}",
         "PINEPAPER_EXPORT_DIR": "${user_config.export_dir}",
-        "PINEPAPER_TOOLKIT": "${user_config.toolkit}"
+        "PINEPAPER_TOOLKIT": "${user_config.toolkit}",
+        "PINEPAPER_ALLOW_CODE": "${user_config.allow_code}",
+        "PINEPAPER_ALLOW_LOCAL_FILES": "${user_config.allow_local_files}"
       }
     }
   },
@@ -62,6 +64,20 @@
       "title": "Tool list",
       "description": "Optional. Empty or \"core\" starts with the core tools and loads more on demand; \"agent\" or \"full\" lists everything up front (much more context).",
       "required": false
+    },
+    "allow_code": {
+      "type": "boolean",
+      "title": "Allow custom code",
+      "description": "Security switch, off by default. Lets the assistant run JavaScript it writes in the canvas: custom code, p5-style drawing, render hooks, custom relations, and the custom relations saved in a scene file. Turn on only if you trust what the assistant reads.",
+      "default": false,
+      "required": false
+    },
+    "allow_local_files": {
+      "type": "boolean",
+      "title": "Allow local files",
+      "description": "Security switch, off by default. Lets the assistant import images, audio, video and scenes from your disk (the working folder and PINEPAPER_ASSET_DIRS). Files in the export folder are always readable.",
+      "default": false,
+      "required": false
     }
   },
   "compatibility": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pinepaper.studio/mcp-server",
-  "version": "1.6.26",
+  "version": "1.6.28",
   "mcpName": "io.github.pinepaper/mcp-server",
   "description": "MCP Server for PinePaper Studio - Create animated graphics with AI",
   "type": "module",