@superdoc/mcp 1.10.0-next.14 → 1.10.0-next.15

package/dist/index.js

@@ -31630,7 +31630,7 @@ var init_host = __esm(() => {
 });
 
 // ../../packages/sdk/langs/node/src/runtime/sdk-version.generated.ts
-var SDK_VERSION = "2.23.0-next.14";
+var SDK_VERSION = "2.23.0-next.15";
 
 // ../../packages/sdk/langs/node/src/runtime/embedded-platform.ts
 import { accessSync, chmodSync, constants, existsSync, statSync } from "node:fs";
@@ -89618,9 +89618,9 @@ class ExecutionContext {
               { ...options, expectedRevision: options?.expectedRevision ?? revision }
             ] : [args, options]);
             this.executedOperations.push({ operationId, result });
-            if (result?.success === false)
+            if (isRecord(result) && result.success === false)
               throw new SuperDocCliError("Document operation did not apply.", {
-                code: result.failure?.code ?? "APPLY_FAILED",
+                code: isRecord(result.failure) && typeof result.failure.code === "string" ? result.failure.code : "APPLY_FAILED",
                 details: result
               });
             if (supportsDocumentFacts(this.source)) {
@@ -327442,6 +327442,50 @@ function paragraphStyleId(xml) {
   const attrs = directChildElementAttrs(pPrXml, "pStyle");
   return attrs == null ? null : xmlAttribute2(attrs, "val");
 }
+function readPartParagraphStyleReferences(context, partUri) {
+  const bytes = getSDDocumentSessionInternalPartBytes(context.session, partUri);
+  if (!bytes)
+    return null;
+  const xml = TD91.decode(bytes);
+  const parsed = collectXmlElementRanges(xml);
+  if (parsed.errors.length)
+    return null;
+  const ranges = parsed.ranges.sort((left, right) => left.start - right.start);
+  const references = [];
+  const paragraphs2 = [];
+  const wordNamespaces = new Set([
+    "http://schemas.openxmlformats.org/wordprocessingml/2006/main",
+    "http://purl.oclc.org/ooxml/wordprocessingml/main"
+  ]);
+  for (const range of ranges) {
+    while (paragraphs2.length && range.start >= paragraphs2.at(-1).range.end)
+      paragraphs2.pop();
+    if (!wordNamespaces.has(range.tag.namespaceUri))
+      continue;
+    if (range.tag.localName === "p") {
+      const reference = {
+        xmlStart: range.start,
+        rawXml: xml.slice(range.start, range.end),
+        namespaceBindings: range.namespaceBindings,
+        styleIds: new Set,
+        unresolved: false
+      };
+      references.push(reference);
+      paragraphs2.push({ range, reference });
+    } else if (range.tag.localName === "pStyle") {
+      const paragraph2 = paragraphs2.at(-1);
+      if (!paragraph2)
+        return null;
+      const values = range.tag.attributes.filter((attribute2) => attribute2.localName === "val");
+      if (range.tag.namespaceUri !== paragraph2.range.tag.namespaceUri || values.length !== 1 || values[0].namespaceUri !== range.tag.namespaceUri || !values[0].value) {
+        paragraph2.reference.unresolved = true;
+      } else {
+        paragraph2.reference.styleIds.add(values[0].value);
+      }
+    }
+  }
+  return references;
+}
 function currentRevisionString(context) {
   return context.currentPublicRevision();
 }
@@ -337139,6 +337183,41 @@ var init_adapter5 = __esm(() => {
 });
 
 // ../../../v2/document-api-v2-adapter/dist/protection/mutation-guard.js
+function isDocumentProtectionEnforced(context) {
+  return new V2ProtectionAdapter(context).get().editingRestriction.runtimeEnforced;
+}
+function paragraphProtectionAllows(context, snapshot2) {
+  if (!isDocumentProtectionEnforced(context))
+    return true;
+  const bytes = getSDDocumentSessionInternalPartBytes(context.session, snapshot2.partUri);
+  if (!bytes || new TextDecoder().decode(bytes.subarray(snapshot2.byteStart, snapshot2.byteEnd)) !== snapshot2.rawXml)
+    return false;
+  const start = new TextDecoder().decode(bytes.subarray(0, snapshot2.byteStart)).length;
+  return paragraphXmlProtectionAllows(context, snapshot2.partUri, start, snapshot2.rawXml, snapshot2.namespaceBindings);
+}
+function paragraphXmlProtectionAllows(context, partUri, start, rawXml, namespaceBindings) {
+  if (documentProtectionAllowsXmlRange(context, partUri, start, start + rawXml.length))
+    return true;
+  const parsed = collectXmlElementRanges(rawXml, { fragment: true, additionalNamespaces: namespaceBindings });
+  if (parsed.errors.length)
+    return false;
+  const root = parsed.ranges.find((range) => range.start === 0 && range.end === rawXml.length);
+  if (!root || root.tag.localName !== "p" || !["http://schemas.openxmlformats.org/wordprocessingml/2006/main", "http://purl.oclc.org/ooxml/wordprocessingml/main"].includes(root.tag.namespaceUri))
+    return false;
+  const children2 = [];
+  let cursor = root.openEnd;
+  for (const range of parsed.ranges.sort((a, b) => a.start - b.start)) {
+    if (range === root || range.start < cursor || range.end > root.closeStart)
+      continue;
+    children2.push(range);
+    cursor = range.end;
+  }
+  const content = children2.filter((range) => range.tag.namespaceUri !== root.tag.namespaceUri || !["pPr", "permStart", "permEnd", "bookmarkStart", "bookmarkEnd", "proofErr", "commentRangeStart", "commentRangeEnd"].includes(range.tag.localName));
+  if (!content.length) {
+    return children2.some((range) => range.tag.namespaceUri === root.tag.namespaceUri && range.tag.localName === "permStart" && documentProtectionAllowsXmlRange(context, partUri, start + range.end, start + range.end));
+  }
+  return documentProtectionAllowsXmlRange(context, partUri, start + content[0].start, start + content.at(-1).end);
+}
 function permissionRangeAllowsCurrentUser(context, range) {
   if (range.malformed || !range.principalSupported)
     return false;
@@ -337151,7 +337230,7 @@ function permissionRangeAllowsCurrentUser(context, range) {
   return typeof user.id === "string" && user.id.length > 0 && principal === user.id || typeof user.email === "string" && user.email.trim().length > 0 && principal.toLowerCase() === user.email.trim().toLowerCase();
 }
 function documentProtectionAllowsXmlRange(context, partUri, start, end) {
-  if (!new V2ProtectionAdapter(context).get().editingRestriction.runtimeEnforced)
+  if (!isDocumentProtectionEnforced(context))
     return true;
   if (start < 0 || end < start)
     return false;
@@ -337167,7 +337246,7 @@ function requireDocumentProtectionXmlRange(context, partUri, start, end) {
   }
 }
 function documentProtectionAllowsXmlRewrite(context, partUri, before, after) {
-  if (!new V2ProtectionAdapter(context).get().editingRestriction.runtimeEnforced || before === after)
+  if (!isDocumentProtectionEnforced(context) || before === after)
     return true;
   let start = 0;
   while (start < before.length && start < after.length && before[start] === after[start])
@@ -337182,6 +337261,7 @@ function documentProtectionAllowsXmlRewrite(context, partUri, before, after) {
 }
 var DOCUMENT_PROTECTION_MESSAGE = "document protection permits edits only within a permission range granted to the current user or everyone.";
 var init_mutation_guard = __esm(() => {
+  init_sd_document_session_internal();
   init_shared();
   init_adapter4();
   init_adapter5();
@@ -394279,6 +394359,9 @@ class V2SectionsAdapter {
     return this.commitSectionMutation(input.target.sectionId, "sections-title-page", options, (xml) => setToggleChildXml(xml, "titlePg", input.enabled));
   }
   setOddEvenHeadersFooters(input, options) {
+    const protectionFailure = sectionProtectionFailure(this.context);
+    if (protectionFailure)
+      return documentFailure(protectionFailure.message, protectionFailure.code);
     const trackedFailure = sectionTrackedModeFailure(options);
     if (trackedFailure)
       return documentFailure(trackedFailure.message, trackedFailure.code);
@@ -394303,6 +394386,9 @@ class V2SectionsAdapter {
     return this.commitSectionMutation(input.target.sectionId, "sections-clear-header-footer-ref", options, (xml) => removeHeaderFooterRefXml(xml, input.kind, input.variant), { reportChangeMode: false });
   }
   setLinkToPrevious(input, options) {
+    const protectionFailure = sectionProtectionFailure(this.context);
+    if (protectionFailure)
+      return sectionFailure(protectionFailure.message, protectionFailure.code);
     if (input.linked) {
       const currentRefId = readExplicitHeaderFooterRefId(this.context, {
         kind: "headerFooterSlot",
@@ -394340,6 +394426,9 @@ class V2SectionsAdapter {
     });
   }
   commitSetHeaderFooterRef(input, options) {
+    const protectionFailure = sectionProtectionFailure(this.context);
+    if (protectionFailure)
+      return sectionFailure(protectionFailure.message, protectionFailure.code);
     const resolution = createHeaderFooterPartRefExists(this.context, input.refId, input.kind);
     if (!resolution.ok)
       return sectionFailure(resolution.failure.message, resolution.failure.code);
@@ -394390,6 +394479,9 @@ class V2SectionsAdapter {
     return result;
   }
   commitSectionMutation(sectionId, txIdPrefix, options, mutate, mutationOptions) {
+    const protectionFailure = sectionProtectionFailure(this.context);
+    if (protectionFailure)
+      return sectionFailure(protectionFailure.message, protectionFailure.code);
     const begun = this.context.beginMutation({ expectedRevision: options?.expectedRevision });
     if ("failure" in begun)
       return sectionFailure(begun.failure.message, begun.failure.code);
@@ -394420,6 +394512,9 @@ class V2SectionsAdapter {
     };
   }
 }
+function sectionProtectionFailure(context) {
+  return isDocumentProtectionEnforced(context) ? { code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE } : null;
+}
 function materializeTrailingFinalSectionInheritedRef(context, input, options) {
   const sections = readLiveSectionSignals(context);
   const targetIndex = sections.findIndex((section) => section.sectionId === input.target.sectionId);
@@ -394739,6 +394834,8 @@ function documentFailure(message, code2 = "CAPABILITY_UNAVAILABLE") {
 }
 var VALID_BREAK_TYPES, VALID_PAGE_NUMBER_FORMATS, VALID_LINE_NUMBER_RESTARTS, VALID_VERTICAL_ALIGNS, VALID_PAGE_BORDER_DISPLAYS, VALID_PAGE_BORDER_OFFSETS, VALID_PAGE_BORDER_Z_ORDERS;
 var init_adapter13 = __esm(() => {
+  init_mutation_guard();
+  init_mutation_guard();
   init_src3();
   init_sd_document_session_internal();
   init_document_reader();
@@ -395083,6 +395180,8 @@ class V2CreateAdapter {
     const invalid4 = this.context.validateMutation(options);
     if (invalid4)
       return createFailure(invalid4.code, invalid4.message);
+    if (isDocumentProtectionEnforced(this.context))
+      return createFailure("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE);
     const publicSectionId = "(dry-run)";
     const begun = this.context.beginMutation({ expectedRevision: options?.expectedRevision });
     if ("failure" in begun)
@@ -395981,6 +396080,7 @@ function storyErrorMessage2(error48) {
 var VALUED_TOC_SWITCHES;
 var init_adapter14 = __esm(() => {
   init_sd_document_session_internal();
+  init_mutation_guard();
   init_sd_document_session_internal();
   init_materialize_slot();
   init_adapter10();
@@ -405412,6 +405512,9 @@ class V2ListsAdapter {
     const adjacentReuse = compatibleAdjacentListReuse(this.context, storyId, input.reuseNumId == null ? findImmediatelyAdjacentCompatibleListReuse(this.context, storyId, [target.nodeId], input.seed, input.ilvl) : undefined, options);
     const reuseNumId = input.reuseNumId ?? adjacentReuse?.numId;
     const mergeParaIds = adjacentReuse?.mergeParaIds ?? [];
+    const protectionFailure = listParagraphProtectionFailure(this.context, storyId, [target.nodeId, ...mergeParaIds]);
+    if (protectionFailure)
+      return protectionFailure;
     const existingTrackedListFormattingIds = readTrackedListFormattingIdsForTrackedMutation(this.context, options);
     const begun = this.context.beginMutation({
       expectedRevision: options?.expectedRevision
@@ -406094,6 +406197,19 @@ class V2ListsAdapter {
     if (!storyId) {
       return failure8("TARGET_NOT_FOUND", `paragraph ${paraIds[0]} was not found.`);
     }
+    if (mode === "empty" && isDocumentProtectionEnforced(this.context)) {
+      const anchor = readStoryParagraphByBlockId(this.context, storyId, paraIds[0]);
+      const bytes = anchor && getSDDocumentSessionInternalPartBytes(this.context.session, anchor.partUri);
+      if (!anchor || !bytes)
+        return failure8("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE);
+      const point3 = new TextDecoder().decode(bytes.subarray(0, anchor.byteEnd)).length;
+      if (!documentProtectionAllowsXmlRange(this.context, anchor.partUri, point3, point3)) {
+        return failure8("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE);
+      }
+    }
+    const protectionFailure = mode === "empty" ? null : listParagraphProtectionFailure(this.context, storyId, paraIds);
+    if (protectionFailure)
+      return protectionFailure;
     if (mode === "fromParagraphs" && compatibleMergeParaIds(this.context, storyId, paraIds, options).length !== paraIds.length) {
       return failure8("CAPABILITY_UNAVAILABLE", "List creation cannot overwrite an existing paragraph-property proposal.");
     }
@@ -406234,6 +406350,9 @@ class V2ListsAdapter {
       reuseNumId = adjacentReuse?.numId;
       mergeParaIds = adjacentReuse?.mergeParaIds ?? [];
     }
+    const protectionFailure = listParagraphProtectionFailure(this.context, storyId, [...paraIds, ...mergeParaIds]);
+    if (protectionFailure)
+      return protectionFailure;
     const begun = this.context.beginMutation({
       expectedRevision: options?.expectedRevision
     });
@@ -408140,10 +408259,23 @@ function readCreatedParagraphRefId(createdRefs, provisionalToFinal) {
   }
   return null;
 }
+function listParagraphProtectionFailure(context, storyId, paraIds) {
+  if (!isDocumentProtectionEnforced(context))
+    return null;
+  for (const paraId of paraIds) {
+    const snapshot2 = readStoryParagraphByBlockId(context, storyId, paraId);
+    if (!snapshot2 || !paragraphProtectionAllows(context, snapshot2)) {
+      return failure8("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE);
+    }
+  }
+  return null;
+}
 var LISTS_XML_DECODER, BULLET_GLYPH_BY_LEVEL;
 var init_adapter16 = __esm(() => {
   init_src3();
   init_sd_document_session_internal();
+  init_document_reader();
+  init_mutation_guard();
   init_adapter();
   init_composite();
   init_stories();
@@ -408177,17 +408309,12 @@ class V2ParagraphsAdapter {
     if (!input.paraIds.length || !["indent", "outdent"].includes(input.direction)) {
       return fail6("INVALID_INPUT", "A nonempty paragraph range and indent direction are required.");
     }
-    if (new V2ProtectionAdapter(this.context).get().editingRestriction.runtimeEnforced) {
+    if (isDocumentProtectionEnforced(this.context)) {
       for (const nodeId of new Set(input.paraIds)) {
         const resolved = resolveParagraphSnapshot(this.context, { kind: "block", nodeType: "paragraph", nodeId });
         if ("failure" in resolved)
           return fail6(resolved.failure.code, resolved.failure.message);
-        const snapshot2 = resolved.snapshot;
-        const bytes = getSDDocumentSessionInternalPartBytes(this.context.session, snapshot2.partUri);
-        if (!bytes)
-          return fail6("PRECONDITION_FAILED", `Part bytes are unavailable for ${snapshot2.partUri}.`);
-        const start = TD112.decode(bytes.subarray(0, snapshot2.byteStart)).length;
-        if (!documentProtectionAllowsXmlRange(this.context, snapshot2.partUri, start, start + snapshot2.rawXml.length)) {
+        if (!paragraphProtectionAllows(this.context, resolved.snapshot)) {
           return fail6("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE);
         }
       }
@@ -408510,6 +408637,14 @@ class V2ParagraphsAdapter {
     return this.commitParagraphRewrite(snapshot2, target, options, txIdPrefix, nextParagraphXml, currentBytes, undefined, mutation.extraPerPart, mutation.semanticStyleDependencies, mutation.renderImpact, mutation.trackedProperty);
   }
   commitParagraphRewrite(snapshot2, target, options, txIdPrefix, nextParagraphXml, currentBytes = getSDDocumentSessionInternalPartBytes(this.context.session, snapshot2.partUri), trackedOverride, extraPerPart, semanticStyleDependencies, renderImpact, trackedProperty) {
+    if (isDocumentProtectionEnforced(this.context)) {
+      if (!currentBytes) {
+        return paragraphFailure("PRECONDITION_FAILED", `Part bytes are unavailable for ${snapshot2.partUri}.`, target);
+      }
+      if (Object.keys(extraPerPart ?? {}).length > 0 && !semanticStyleDependencies?.length || !paragraphProtectionAllows(this.context, snapshot2)) {
+        return paragraphFailure("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE, target);
+      }
+    }
     if (nextParagraphXml === snapshot2.rawXml && Object.keys(extraPerPart ?? {}).length === 0) {
       return options?.dryRun ? paragraphSuccess(target) : paragraphNoOp(`${txIdPrefixToOperation(txIdPrefix)} produced no changes.`, target);
     }
@@ -408687,6 +408822,29 @@ function resolveParagraphStylePlan(context, input, currentStyleId) {
       message: "semantic-style-resolution-drift"
     };
   }
+  if (compiled.value.changedStylesPart && isDocumentProtectionEnforced(context)) {
+    const styles = Object.entries(compileWordStyleModel({
+      stylesXml: readStyleDefinitionsPartBytes(context)
+    }).translatedLinkedStyles.styles);
+    const dependentStyleIds = new Set([styleId]);
+    const pendingStyleIds = [styleId];
+    while (pendingStyleIds.length) {
+      const parentStyleId = pendingStyleIds.pop();
+      for (const [id, definition2] of styles) {
+        if (definition2.basedOn === parentStyleId && !dependentStyleIds.has(id)) {
+          dependentStyleIds.add(id);
+          pendingStyleIds.push(id);
+        }
+      }
+    }
+    const partUris = new Set(listSDDocumentSessionInternalStories(context.session).map((story) => story.partUri));
+    for (const partUri of partUris) {
+      const paragraphs2 = readPartParagraphStyleReferences(context, partUri);
+      if (!paragraphs2 || paragraphs2.some((paragraph4) => (paragraph4.unresolved || role === "default-paragraph" || [...paragraph4.styleIds].some((id) => dependentStyleIds.has(id))) && !paragraphXmlProtectionAllows(context, partUri, paragraph4.xmlStart, paragraph4.rawXml, paragraph4.namespaceBindings))) {
+        return { ok: false, code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE };
+      }
+    }
+  }
   return {
     ok: true,
     styleId,
@@ -408714,6 +408872,9 @@ function resolveParagraphSnapshot(context, target) {
     if ("error" in initial) {
       return { failure: { code: storyErrorCode3(initial.error), message: storyErrorMessage3(initial.error) } };
     }
+    if (initial.materialization && isDocumentProtectionEnforced(context)) {
+      return { failure: { code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE } };
+    }
     const materialized = materializeHeaderFooterSlotIfInherited(context, initial, target.story);
     if (!materialized.ok)
       return { failure: materialized.failure };
@@ -408873,7 +409034,6 @@ var init_adapter17 = __esm(() => {
   init_composite();
   init_stories();
   init_text_range_shifts();
-  init_adapter5();
   init_mutation_guard();
   TD112 = new TextDecoder;
   TE63 = new TextEncoder;
@@ -422153,7 +422313,7 @@ class V2ImagesAdapter {
     const blocked = guardCanonicalMutation2(this.context, options, "create.image");
     if (blocked)
       return blocked;
-    if (new V2ProtectionAdapter(this.context).get().editingRestriction.runtimeEnforced) {
+    if (isDocumentProtectionEnforced(this.context)) {
       const at = input.at;
       const locator = (at && "target" in at ? at.target.story : undefined) ?? input.in ?? { kind: "story", storyType: "body" };
       const story = this.context.resolveFullStoryLocator(locator);
@@ -422309,10 +422469,10 @@ class V2ImagesAdapter {
   }
   delete(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.delete");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.delete", { id: input.imageId, entry, ownership: "carrier" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.delete: image "${input.imageId}" was not found.`);
     const unsupported5 = validateImageDeleteTarget(this.context, entry);
@@ -422859,10 +423019,10 @@ class V2ImagesAdapter {
   }
   move(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.move");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.move", { id: input.imageId, entry, ownership: "closed" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.move: image "${input.imageId}" was not found.`);
     if (!entry.paragraph) {
@@ -423157,10 +423317,10 @@ class V2ImagesAdapter {
   }
   convertToInline(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.convertToInline");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.convertToInline", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.convertToInline: image "${input.imageId}" was not found.`);
     if (entry.properties.placement === "inline") {
@@ -423186,10 +423346,10 @@ class V2ImagesAdapter {
   }
   convertToFloating(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.convertToFloating");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.convertToFloating", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.convertToFloating: image "${input.imageId}" was not found.`);
     if (entry.properties.placement === "floating") {
@@ -423214,10 +423374,10 @@ class V2ImagesAdapter {
   }
   setSize(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setSize");
+    const entry = readBodyImageMutationEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setSize", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageMutationEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setSize: image "${input.imageId}" was not found.`);
     const size = sizeToPx(input.size);
@@ -423239,10 +423399,10 @@ class V2ImagesAdapter {
     if (input.type === "Inline") {
       return this.convertToInline({ imageId: input.imageId }, options);
     }
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setWrapType");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setWrapType", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setWrapType: image "${input.imageId}" was not found.`);
     if (entry.properties.placement !== "floating") {
@@ -423262,10 +423422,10 @@ class V2ImagesAdapter {
   }
   setWrapSide(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setWrapSide");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setWrapSide", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setWrapSide: image "${input.imageId}" was not found.`);
     if (entry.properties.placement !== "floating") {
@@ -423293,10 +423453,10 @@ class V2ImagesAdapter {
   }
   setWrapDistances(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setWrapDistances");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setWrapDistances", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setWrapDistances: image "${input.imageId}" was not found.`);
     if (entry.properties.placement !== "floating") {
@@ -423320,10 +423480,10 @@ class V2ImagesAdapter {
   }
   setPosition(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setPosition");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setPosition", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setPosition: image "${input.imageId}" was not found.`);
     if (entry.properties.placement !== "floating") {
@@ -423346,10 +423506,10 @@ class V2ImagesAdapter {
   }
   setAnchorOptions(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setAnchorOptions");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setAnchorOptions", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setAnchorOptions: image "${input.imageId}" was not found.`);
     if (entry.properties.placement !== "floating") {
@@ -423369,10 +423529,10 @@ class V2ImagesAdapter {
   }
   setZOrder(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setZOrder");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setZOrder", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setZOrder: image "${input.imageId}" was not found.`);
     if (entry.properties.placement !== "floating") {
@@ -423394,10 +423554,10 @@ class V2ImagesAdapter {
   }
   scale(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.scale");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.scale", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.scale: image "${input.imageId}" was not found.`);
     const currentWidth = entry.properties.size?.width;
@@ -423421,10 +423581,10 @@ class V2ImagesAdapter {
   }
   setLockAspectRatio(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setLockAspectRatio");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setLockAspectRatio", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry) {
       return mutationFailure4("TARGET_NOT_FOUND", `images.setLockAspectRatio: image "${input.imageId}" was not found.`);
     }
@@ -423442,10 +423602,10 @@ class V2ImagesAdapter {
   }
   rotate(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.rotate");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.rotate", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.rotate: image "${input.imageId}" was not found.`);
     const nextDrawingXml = rewriteTransform(entry.drawingXml, {
@@ -423466,10 +423626,10 @@ class V2ImagesAdapter {
   }
   flip(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.flip");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.flip", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.flip: image "${input.imageId}" was not found.`);
     const nextDrawingXml = rewriteTransform(entry.drawingXml, {
@@ -423490,10 +423650,10 @@ class V2ImagesAdapter {
   }
   crop(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.crop");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.crop", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.crop: image "${input.imageId}" was not found.`);
     const nextDrawingXml = rewriteCrop(entry.drawingXml, input.crop);
@@ -423510,10 +423670,10 @@ class V2ImagesAdapter {
   }
   resetCrop(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.resetCrop");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.resetCrop", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.resetCrop: image "${input.imageId}" was not found.`);
     const nextDrawingXml = clearCrop(entry.drawingXml);
@@ -423528,10 +423688,10 @@ class V2ImagesAdapter {
   }
   replaceSource(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.replaceSource");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.replaceSource", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.replaceSource: image "${input.imageId}" was not found.`);
     if (!entry.descriptor.rId)
@@ -423732,10 +423892,10 @@ class V2ImagesAdapter {
   }
   setAltText(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setAltText");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setAltText", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setAltText: image "${input.imageId}" was not found.`);
     const nextDrawingXml = rewriteMetadata(entry.drawingXml, {
@@ -423755,10 +423915,10 @@ class V2ImagesAdapter {
   }
   setDecorative(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setDecorative");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setDecorative", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setDecorative: image "${input.imageId}" was not found.`);
     const nextDrawingXml = rewriteMetadata(entry.drawingXml, {
@@ -423782,10 +423942,10 @@ class V2ImagesAdapter {
   }
   setName(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setName");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setName", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setName: image "${input.imageId}" was not found.`);
     const nextDrawingXml = rewriteMetadata(entry.drawingXml, {
@@ -423804,10 +423964,10 @@ class V2ImagesAdapter {
   }
   setHyperlink(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.setHyperlink");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.setHyperlink", { id: input.imageId, entry, ownership: "drawing" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.setHyperlink: image "${input.imageId}" was not found.`);
     const partXml = readPartXml2(this.context, entry.partUri);
@@ -423864,10 +424024,10 @@ class V2ImagesAdapter {
   }
   insertCaption(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.insertCaption");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.insertCaption", { id: input.imageId, entry, ownership: "closed" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.insertCaption: image "${input.imageId}" was not found.`);
     if (!entry.paragraph) {
@@ -423915,10 +424075,10 @@ class V2ImagesAdapter {
   }
   updateCaption(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.updateCaption");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.updateCaption", { id: input.imageId, entry, ownership: "closed" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.updateCaption: image "${input.imageId}" was not found.`);
     if (!entry.paragraph) {
@@ -423966,10 +424126,10 @@ class V2ImagesAdapter {
   }
   removeCaption(input, options = {}) {
     options = mergeInputDryRun(input, options);
-    const blocked = guardCanonicalMutation2(this.context, options, "images.removeCaption");
+    const entry = readBodyImageEntryById(this.context, input.imageId);
+    const blocked = guardCanonicalMutation2(this.context, options, "images.removeCaption", { id: input.imageId, entry, ownership: "closed" });
     if (blocked)
       return blocked;
-    const entry = readBodyImageEntryById(this.context, input.imageId);
     if (!entry)
       return mutationFailure4("TARGET_NOT_FOUND", `images.removeCaption: image "${input.imageId}" was not found.`);
     if (!entry.paragraph) {
@@ -424092,6 +424252,9 @@ class V2ImagesAdapter {
         attachSDRenderCommitEnvelope(result, renderCommit);
       return result;
     }
+    if (isDocumentProtectionEnforced(this.context)) {
+      return projectReceiptFailure2({ code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE });
+    }
     if (options.changeMode === "tracked") {
       return projectReceiptFailure2({ code: "TARGET_NOT_FOUND", message: "image-target-not-found" });
     }
@@ -424121,6 +424284,14 @@ class V2ImagesAdapter {
     options = narrowImageMutationOptions(input, options);
     if (!validNarrowImageMutationOptions(options))
       return projectReceiptFailure2({ code: "INVALID_INPUT", message: "Invalid image mutation options." });
+    if (isDocumentProtectionEnforced(this.context)) {
+      const entry = readBodyImageEntries(this.context).find((candidate2) => candidate2.storyId === input.storyId && candidate2.descriptor.imageNodeId === input.imageNodeId);
+      if (!entry)
+        return projectReceiptFailure2({ code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE });
+      const failure11 = imageProtectionFailure(this.context, entry, true);
+      if (failure11)
+        return projectReceiptFailure2(failure11);
+    }
     const begun = this.context.beginMutation({
       expectedRevision: options.expectedRevision
     });
@@ -424774,10 +424945,36 @@ function replaceImageEmbedRelationshipId(drawingXml, nextRId) {
     xml: drawingXml.slice(0, match.index) + `r:embed="${escapeXmlAttribute3(nextRId)}"` + drawingXml.slice(match.index + match[0].length)
   };
 }
-function guardCanonicalMutation2(context, options, operationId) {
+function imageProtectionFailure(context, entry, ownsCarrier) {
+  const xml = readPartXml2(context, entry.partUri);
+  if (!xml)
+    return { code: "PRECONDITION_FAILED", message: `Part bytes are unavailable for ${entry.partUri}.` };
+  const offsets = buildUtf8OffsetMap5(xml);
+  const start = codeUnitIndexForByteOffset2(offsets, entry.descriptor.byteStart);
+  const end = codeUnitIndexForByteOffset2(offsets, entry.descriptor.byteEnd);
+  const denied = { code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE };
+  if (start >= end || offsets[start] !== entry.descriptor.byteStart || offsets[end] !== entry.descriptor.byteEnd) {
+    return denied;
+  }
+  const drawing = expandToEnclosingDrawingRange(xml, start, end);
+  if (!drawing || xml.slice(drawing.start, drawing.end) !== entry.drawingXml)
+    return denied;
+  const range = ownsCarrier ? expandToEnclosingRunIfSoleChild2(xml, drawing.start, drawing.end) : drawing;
+  return documentProtectionAllowsXmlRange(context, entry.partUri, range.start, range.end) ? null : denied;
+}
+function guardCanonicalMutation2(context, options, operationId, image) {
   const policy = context.getMutationPolicyFailure();
   if (policy)
     return mutationFailure4(policy.code, policy.message);
+  if (image && isDocumentProtectionEnforced(context)) {
+    if (image.ownership === "closed")
+      return mutationFailure4("PERMISSION_DENIED", DOCUMENT_PROTECTION_MESSAGE);
+    if (!image.entry)
+      return mutationFailure4("TARGET_NOT_FOUND", `${operationId}: image "${image.id}" was not found.`);
+    const failure11 = imageProtectionFailure(context, image.entry, image.ownership === "carrier" || options?.changeMode === "tracked");
+    if (failure11)
+      return mutationFailure4(failure11.code, failure11.message);
+  }
   if (options?.changeMode === "tracked") {
     if (!isV2TrackedOperation(context, operationId)) {
       return mutationFailure4("CAPABILITY_UNAVAILABLE", `${operationId} does not support tracked mode on v2 yet.`);
@@ -425746,6 +425943,8 @@ function buildUtf8OffsetMap5(xml) {
   for (const ch of xml) {
     codeUnitIndex += ch.length;
     const cp = ch.codePointAt(0);
+    if (ch.length === 2)
+      offsets[codeUnitIndex - 1] = byteOffset + 2;
     byteOffset += cp < 128 ? 1 : cp < 2048 ? 2 : cp < 65536 ? 3 : 4;
     offsets[codeUnitIndex] = byteOffset;
   }
@@ -426120,7 +426319,6 @@ var IMAGE_HYPERLINK_REL_TYPE = "http://schemas.openxmlformats.org/officeDocument
 var init_adapter22 = __esm(() => {
   init_mutation_guard();
   init_adapter4();
-  init_adapter5();
   init_pending_image_insertion();
   init_src3();
   init_sd_document_session_internal();
@@ -450635,6 +450833,9 @@ class V2StylesAdapter {
     if (policy) {
       return { success: false, resolution, failure: policy };
     }
+    if (isDocumentProtectionEnforced(this.context)) {
+      return { success: false, resolution, failure: { code: "PERMISSION_DENIED", message: DOCUMENT_PROTECTION_MESSAGE } };
+    }
     const bytes = readStyleDefinitionsPartBytes(this.context);
     if (!partUri || !bytes) {
       return {
@@ -450773,6 +450974,7 @@ function stylesMutationGuardFailure(context, options) {
 }
 var init_adapter39 = __esm(() => {
   init_src3();
+  init_mutation_guard();
   init_apply5();
   init_styles3();
   init_catalog5();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@superdoc/mcp",
-  "version": "1.10.0-next.14",
+  "version": "1.10.0-next.15",
   "description": "Model Context Protocol server for SuperDoc, giving an AI agent tools to read and edit .docx files.",
   "type": "module",
   "license": "AGPL-3.0",
@@ -24,13 +24,13 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
-    "@superdoc/sdk": "2.23.0-next.14",
+    "@superdoc/sdk": "2.23.0-next.15",
     "debug": "^4.4.3",
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "superdoc": "2.26.0-next.14",
-    "@superdoc/docx-engine": "0.25.0-next.14",
+    "superdoc": "2.26.0-next.15",
+    "@superdoc/docx-engine": "0.25.0-next.15",
     "@superdoc/document-api": "0.1.0-alpha.0",
     "@types/bun": "^1.3.8",
     "@types/node": "22.19.2",