@usejunior/docx-mcp 0.9.0 → 0.10.0

package/dist/tools/path_policy.js

@@ -9,7 +9,7 @@ function expandPath(inputPath) {
 function normalizePath(inputPath) {
     return path.resolve(expandPath(inputPath));
 }
-async function canonicalizePath(inputPath) {
+export async function canonicalizePath(inputPath) {
     const normalized = normalizePath(inputPath);
     try {
         return await fs.realpath(normalized);
@@ -18,6 +18,28 @@ async function canonicalizePath(inputPath) {
         return normalized;
     }
 }
+/**
+ * True when two paths resolve to the same filesystem location. Canonicalizes both via realpath (with a
+ * lexical fallback for paths that do not exist yet) so a symlink can't disguise a clobber of an input
+ * document behind a different-looking output path. Shared source-clobber guard for the write tools
+ * (issue #313); folded out of the export-local guard so all write tools enforce it identically.
+ */
+export async function resolvesToSamePath(a, b) {
+    return (await canonicalizePath(a)) === (await canonicalizePath(b));
+}
+// On Linux `/private/tmp` does not exist by default. If we listed it as a root,
+// `canonicalizePath`'s realpath-fallback would leave it as a ghost entry whose
+// subpaths `resolveWritePathWithExistingAncestor` would still match (walking up
+// to `/` as the existing ancestor), silently allowing writes the user never
+// opted into. Restrict `/private/tmp` to darwin where it is the canonical form
+// of `/tmp`. Windows already covers `%TEMP%/%TMP%` via `os.tmpdir()`.
+export function getPlatformTempDefaults(platform = process.platform) {
+    if (platform === 'darwin')
+        return ['/tmp', '/private/tmp'];
+    if (platform === 'win32')
+        return [];
+    return ['/tmp'];
+}
 async function resolveAllowedRoots() {
     const configured = process.env.SAFE_DOCX_ALLOWED_ROOTS;
     const fromEnv = configured
@@ -28,7 +50,7 @@ async function resolveAllowedRoots() {
         : [];
     const defaults = fromEnv.length > 0
         ? fromEnv
-        : [process.env.HOME ?? '', os.tmpdir()].filter((entry) => entry.length > 0);
+        : [process.env.HOME ?? '', os.tmpdir(), ...getPlatformTempDefaults()].filter((entry) => entry.length > 0);
     const out = [];
     const seen = new Set();
     for (const rawRoot of defaults) {
@@ -45,9 +67,48 @@ function isWithinRoot(targetPath, rootPath) {
     return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
 }
 function policyError(type, inputPath, resolvedPath, allowedRoots) {
-    return err('PATH_NOT_ALLOWED', `Refusing to ${type} path outside allowed roots: ${inputPath} -> ${resolvedPath}`, `Allowed roots: ${allowedRoots.join(', ')}. Configure SAFE_DOCX_ALLOWED_ROOTS if needed.`);
+    const suggestedRoot = path.dirname(resolvedPath);
+    const exampleEnv = process.env.SAFE_DOCX_ALLOWED_ROOTS
+        ? `SAFE_DOCX_ALLOWED_ROOTS="$SAFE_DOCX_ALLOWED_ROOTS${path.delimiter}${suggestedRoot}"`
+        : `SAFE_DOCX_ALLOWED_ROOTS="${suggestedRoot}"`;
+    return err('PATH_NOT_ALLOWED', `Refusing to ${type} path outside allowed roots: ${inputPath} -> ${resolvedPath}`, [
+        `Allowed roots: ${allowedRoots.join(', ')}.`,
+        `To allow this path, restart the MCP server with ${exampleEnv}.`,
+    ].join(' '));
 }
-async function resolveWritePathWithExistingAncestor(normalizedPath) {
+// Canonicalize a *write* target. Unlike a read, the final component may not exist yet, so we cannot
+// simply `realpath` the whole path. The crux of the symlink-escape fix (issue #313) is that we must
+// still resolve the final component when it *does* exist — including a dangling symlink — so the policy
+// check judges where `fs.writeFile` will actually write, not where the link happens to live.
+async function resolveWritePathCanonical(normalizedPath, seen = new Set()) {
+    // 1. Final component exists (regular file, directory, or symlink to an existing target): realpath
+    //    resolves it fully — symmetric with enforceReadPathPolicy.
+    try {
+        return await fs.realpath(normalizedPath);
+    }
+    catch {
+        // Fall through: the final component does not currently resolve.
+    }
+    // 2. Dangling final component that is itself a symlink. `realpath` throws here, but `fs.writeFile`
+    //    would happily follow the broken link and create its target. Follow it ourselves so the policy
+    //    check lands on the real write destination rather than the link's (in-root) location.
+    let linkStat = null;
+    try {
+        linkStat = await fs.lstat(normalizedPath);
+    }
+    catch {
+        // Genuinely missing (not even a link): fall through to ancestor resolution.
+    }
+    if (linkStat?.isSymbolicLink()) {
+        if (seen.has(normalizedPath)) {
+            throw new Error(`Symlink cycle detected resolving: ${normalizedPath}`);
+        }
+        seen.add(normalizedPath);
+        const target = path.resolve(path.dirname(normalizedPath), await fs.readlink(normalizedPath));
+        return resolveWritePathCanonical(target, seen);
+    }
+    // 3. Genuinely-missing new file: resolve against the first existing ancestor (this also follows a
+    //    symlinked parent directory via `realpath`). Preserves writing new files into existing dirs.
     let probe = path.dirname(normalizedPath);
     while (true) {
         try {
@@ -89,7 +150,7 @@ export async function enforceWritePathPolicy(inputPath) {
     const normalizedPath = normalizePath(inputPath);
     let resolvedPath;
     try {
-        resolvedPath = await resolveWritePathWithExistingAncestor(normalizedPath);
+        resolvedPath = await resolveWritePathCanonical(normalizedPath);
     }
     catch (e) {
         return {

package/dist/tools/path_policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"path_policy.js","sourceRoot":"","sources":["../../src/tools/path_policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAa,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAqB,MAAM,YAAY,CAAC;AAcpD,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvG,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,UAAU;aACT,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;aACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE9E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAClB,IAAsB,EACtB,SAAiB,EACjB,YAAoB,EACpB,YAAsB;IAEtB,OAAO,GAAG,CACR,kBAAkB,EAClB,eAAe,IAAI,gCAAgC,SAAS,OAAO,YAAY,EAAE,EACjF,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD,CAC1F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oCAAoC,CAAC,cAAsB;IACxE,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,cAAc,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,GAAG,CAAC,uBAAuB,EAAE,2BAA2B,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC;SACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IAC5D,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,GAAG,CAAC,uBAAuB,EAAE,kCAAkC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAClE,CAAC"}
+{"version":3,"file":"path_policy.js","sourceRoot":"","sources":["../../src/tools/path_policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAqB,MAAM,YAAY,CAAC;AAcpD,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvG,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC3D,OAAO,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,sEAAsE;AACtE,MAAM,UAAU,uBAAuB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAClF,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACvD,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,UAAU;aACT,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;aACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE5G,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChD,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAClB,IAAsB,EACtB,SAAiB,EACjB,YAAoB,EACpB,YAAsB;IAEtB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB;QACpD,CAAC,CAAC,oDAAoD,IAAI,CAAC,SAAS,GAAG,aAAa,GAAG;QACvF,CAAC,CAAC,4BAA4B,aAAa,GAAG,CAAC;IACjD,OAAO,GAAG,CACR,kBAAkB,EAClB,eAAe,IAAI,gCAAgC,SAAS,OAAO,YAAY,EAAE,EACjF;QACE,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC5C,mDAAmD,UAAU,GAAG;KACjE,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,oGAAoG;AACpG,wGAAwG;AACxG,6FAA6F;AAC7F,KAAK,UAAU,yBAAyB,CAAC,cAAsB,EAAE,OAAO,IAAI,GAAG,EAAU;IACvF,kGAAkG;IAClG,+DAA+D;IAC/D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IAED,mGAAmG;IACnG,mGAAmG;IACnG,0FAA0F;IAC1F,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IACD,IAAI,QAAQ,EAAE,cAAc,EAAE,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7F,OAAO,yBAAyB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,kGAAkG;IAClG,iGAAiG;IACjG,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,cAAc,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAC3D,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,GAAG,CAAC,uBAAuB,EAAE,2BAA2B,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC;SACrE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IAC5D,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,yBAAyB,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,GAAG,CAAC,uBAAuB,EAAE,kCAAkC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC;SACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;AAClE,CAAC"}

package/dist/tools/provider_guard.d.ts

@@ -1,3 +1,4 @@
 import { type ToolResponse } from './types.js';
 export declare function checkGDocsSupport(toolName: string): ToolResponse | null;
+export declare function checkOdfSupport(toolName: string): ToolResponse | null;
 //# sourceMappingURL=provider_guard.d.ts.map

package/dist/tools/provider_guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider_guard.d.ts","sourceRoot":"","sources":["../../src/tools/provider_guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAOpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CASvE"}
+{"version":3,"file":"provider_guard.d.ts","sourceRoot":"","sources":["../../src/tools/provider_guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAO,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAYpD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CASvE;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CASrE"}

package/dist/tools/provider_guard.js

@@ -3,10 +3,20 @@ const GDOCS_SUPPORTED_TOOLS = new Set([
     'read_file', 'replace_text', 'insert_paragraph', 'grep', 'save',
     'format_layout', 'get_file_status', 'close_file',
 ]);
+const ODF_SUPPORTED_TOOLS = new Set([
+    'read_file', 'replace_text', 'grep', 'insert_paragraph', 'add_comment', 'get_comments',
+    'compare_documents', 'save', 'get_file_status', 'close_file',
+]);
 export function checkGDocsSupport(toolName) {
     if (!GDOCS_SUPPORTED_TOOLS.has(toolName)) {
         return err('UNSUPPORTED_FOR_PROVIDER', `'${toolName}' is not supported for Google Docs.`, 'This tool is only available for DOCX files.');
     }
     return null;
 }
+export function checkOdfSupport(toolName) {
+    if (!ODF_SUPPORTED_TOOLS.has(toolName)) {
+        return err('UNSUPPORTED_FOR_ODF', `'${toolName}' is not supported for ODF (.odt) files.`, 'Use read_file, replace_text, grep, insert_paragraph, add_comment, get_comments, compare_documents, save, get_file_status, or close_file for .odt files.');
+    }
+    return null;
+}
 //# sourceMappingURL=provider_guard.js.map

package/dist/tools/provider_guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider_guard.js","sourceRoot":"","sources":["../../src/tools/provider_guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAqB,MAAM,YAAY,CAAC;AAEpD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM;IAC/D,eAAe,EAAE,iBAAiB,EAAE,YAAY;CACjD,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,CACR,0BAA0B,EAC1B,IAAI,QAAQ,qCAAqC,EACjD,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"provider_guard.js","sourceRoot":"","sources":["../../src/tools/provider_guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAqB,MAAM,YAAY,CAAC;AAEpD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM;IAC/D,eAAe,EAAE,iBAAiB,EAAE,YAAY;CACjD,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc;IACtF,mBAAmB,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY;CAC7D,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,CACR,0BAA0B,EAC1B,IAAI,QAAQ,qCAAqC,EACjD,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,CACR,qBAAqB,EACrB,IAAI,QAAQ,0CAA0C,EACtD,yJAAyJ,CAC1J,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tools/read_file.d.ts

@@ -7,5 +7,7 @@ export declare function readFile(manager: SessionManager, params: {
     node_ids?: string[];
     format?: string;
     show_formatting?: boolean;
+    comment_rendering?: string;
+    include_fingerprint?: boolean;
 }): Promise<ToolResponse>;
 //# sourceMappingURL=read_file.d.ts.map

package/dist/tools/read_file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read_file.d.ts","sourceRoot":"","sources":["../../src/tools/read_file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAW,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AA4BxD,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/H,OAAO,CAAC,YAAY,CAAC,CAiGvB"}
+{"version":3,"file":"read_file.d.ts","sourceRoot":"","sources":["../../src/tools/read_file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAW,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAwSxD,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE;IACN,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B,GACA,OAAO,CAAC,YAAY,CAAC,CAqLvB"}