gogcli-mcp-docs 4.6.3 → 4.7.1

package/dist/index.js

@@ -34537,11 +34537,19 @@ var DEFAULT_MAX_REQUEST_BODY_SIZE = 4 * 1024 * 1024;
 var McpToolError = class extends Error {
   /** Actionable remediation text, when one applies. */
   hint;
+  /** The upstream HTTP status this failure came from, when known. */
+  status;
+  /** What kind of failure this is, when the thrower knows. */
+  kind;
   constructor(message, opts) {
     super(message, opts?.cause !== void 0 ? { cause: opts.cause } : void 0);
     this.name = "McpToolError";
     if (opts?.hint !== void 0)
       this.hint = opts.hint;
+    if (opts?.status !== void 0)
+      this.status = opts.status;
+    if (opts?.kind !== void 0)
+      this.kind = opts.kind;
     Object.setPrototypeOf(this, new.target.prototype);
   }
 };
@@ -34566,7 +34574,7 @@ var API_KEY_RE = new RegExp([
   // webhook signing secret (Stripe-style)
 ].map((p) => `\\b${p}`).join("|"), "g");
 var GOOGLE_OAUTH_TOKEN_RE = /(?<![A-Za-z0-9+/])(?:ya29\.|1\/\/)[A-Za-z0-9._-]{8,}/g;
-var QUERY_SECRET_RE = new RegExp(`([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig|(?:php|j)?sess(?:ion)?[_-]?id|sid|x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN})=)[^&#\\s"'<>\`]+`, "gi");
+var QUERY_SECRET_RE = new RegExp(`([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig|(?:code[_-]?)?verifier|(?:php|j)?sess(?:ion)?[_-]?id|sid|x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN})=)[^&#\\s"'<>\`]+`, "gi");
 var OAUTH_CODE_RE = /([?&]code=)(?=[^&#\s"'<>`]{16,})[^&#\s"'<>`]+/gi;
 var FORM_PASSWORD_RE = /((?:^|[\s,;:"'(\[{])(?:password|passwd)=)[^&#\s"'<>`]+/gim;
 var HEADER_SECRET_RE = new RegExp(`(\\b(?:x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN}|api[-_]?key)\\s*:\\s*)[^\\s,;"'<>\`]+`, "gi");
@@ -34577,6 +34585,8 @@ var JSON_SECRET_KEYS = [
   "api[_-]?secret",
   "(?:x[_-])?api[_-]?key",
   "private[_-]?key",
+  "code[_-]?verifier",
+  // PKCE; a bare `verifier` key is too generic for JSON
   `x[_-]${HEADER_NAME_RUN}?(?:api[_-]?key|token|secret|auth)${HEADER_NAME_RUN}`,
   // bounded like HEADER_SECRET_RE
   "(?:proxy-)?authorization",
@@ -34607,6 +34617,11 @@ function redactSecrets(text) {
   return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(GOOGLE_OAUTH_TOKEN_RE, "[REDACTED]").replace(HEADER_SECRET_RE, "$1[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(OAUTH_CODE_RE, "$1[REDACTED]").replace(FORM_PASSWORD_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_COOKIE_DQ_RE, redactJsonCookie('"')).replace(JSON_COOKIE_SQ_RE, redactJsonCookie("'")).replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_NUM_RE, "$1[REDACTED]").replace(JWT_RE, "[REDACTED]");
 }
 var ERROR_REDACTION_INPUT_MAX = 64 * 1024;
+function messageOf(err) {
+  if (err instanceof Error)
+    return err.message;
+  return String(err);
+}
 
 // ../../node_modules/@chrischall/mcp-utils/dist/response/view.js
 function minifiedResult(data) {
@@ -34731,6 +34746,7 @@ function escapeKey(key) {
 var DEFAULT_REQUEST_KEY = "confirmation";
 var DEFAULT_CONFIRMATION_LABEL = "Confirm this action should proceed.";
 var UNSUPPORTED_NOTE = "Nothing was done because this client cannot show a confirmation prompt (it declares no MCP elicitation capability), and this action is never taken without one";
+var DISABLED_NOTE = "Nothing was done because confirmation prompts are turned off for this server, and this action is never taken without one";
 var STATE_PREFIX = "mcpu.confirm.v1.";
 function bindingKey(binding) {
   if (binding.ttlSeconds !== void 0 && !(Number.isFinite(binding.ttlSeconds) && binding.ttlSeconds > 0)) {
@@ -34803,6 +34819,15 @@ ${JSON.stringify(preview, null, 2)}`,
   };
   const response = inputResponse(ctx.mcpReq.inputResponses, requestKey);
   const accepted = acceptedContent(ctx.mcpReq.inputResponses, requestKey, confirmationSchema);
+  if (options.elicitation === false) {
+    return textResult({
+      confirmed: false,
+      dispatched: false,
+      action: options.action,
+      reason: "confirmation-unsupported",
+      note: options.unsupportedNote ? `${DISABLED_NOTE}. ${options.unsupportedNote}` : `${DISABLED_NOTE}.`
+    });
+  }
   if (response.kind === "missing") {
     if (callerAcceptsFormElicitation(ctx) === false) {
       return textResult({
@@ -34997,7 +35022,7 @@ async function tokenConfirmation(action, fb) {
 }
 async function requireConfirmationWithFallback(ctx, options) {
   const { tokenFallback, ...confirmation } = options;
-  if (tokenFallback && callerAcceptsFormElicitation(ctx) === false) {
+  if (tokenFallback && (options.elicitation === false || callerAcceptsFormElicitation(ctx) === false)) {
     return tokenConfirmation(options.action, tokenFallback);
   }
   return requireConfirmation(ctx, confirmation);
@@ -35017,7 +35042,7 @@ function readEnvVar(key, opts = {}) {
   if (typeof raw === "string") {
     const trimmed = raw.trim();
     if (trimmed.length > 0 && trimmed !== "undefined" && trimmed !== "null" && !PLACEHOLDER_RE.test(trimmed)) {
-      return trimmed;
+      return opts.trim === false ? raw : trimmed;
     }
   }
   return opts.default;
@@ -35143,6 +35168,20 @@ function readConfirmMode(env = process.env) {
   }
   return "refuse";
 }
+function readConfirmElicitation(env = process.env) {
+  const raw = readEnvVar("MCP_CONFIRM_ELICITATION", { env })?.trim().toLowerCase();
+  if (!raw || raw === "on")
+    return "on";
+  if (raw === "off")
+    return "off";
+  const key = `elicitation:${raw}`;
+  if (!warned.has(key)) {
+    warned.add(key);
+    process.stderr.write(`MCP_CONFIRM_ELICITATION="${raw}" is not one of on, off; treating it as on.
+`);
+  }
+  return "on";
+}
 function readConfirmTtl(env) {
   const raw = readEnvVar("MCP_CONFIRM_TTL_SECONDS", { env })?.trim();
   if (!raw)
@@ -35187,6 +35226,7 @@ function spentTokenStoreFromEnv(env = process.env) {
 }
 var CONFIRM_TOKEN_AUTO_INSTRUCTION = "Nothing has been done yet. Review this preview; if it is what was intended, call again with the same arguments plus confirmToken. (This server runs with MCP_CONFIRM_MODE=auto, so the user's approval in chat is not required.)";
 var REFUSE_HINT = "Set MCP_CONFIRM_MODE=ask-user on the server to allow two-step confirmation instead.";
+var ELICITATION_OFF_HINT = "MCP_CONFIRM_ELICITATION=off on the server turns confirmation prompts off.";
 var BAD_TTL_HINT = "MCP_CONFIRM_TTL_SECONDS on the server is not a positive whole number of seconds; fix it to allow two-step confirmation.";
 function boundArgs(args) {
   if (args === null || typeof args !== "object" || Array.isArray(args) || !("confirmToken" in args))
@@ -35197,19 +35237,29 @@ function boundArgs(args) {
 }
 function confirmationFromEnv(options) {
   const { tool, account, confirmToken, subject, instruction, args, env = process.env, spent: callerSpent, ...rest } = options;
+  if (args === void 0 || args === null) {
+    throw new TypeError(`confirmationFromEnv: ${tool} passed no args; pass the tool's validated arguments ({} for a tool with none).`);
+  }
   const spent2 = callerSpent ?? spentTokenStoreFromEnv(env);
   const mode = readConfirmMode(env);
   const ttlSeconds = readConfirmTtl(env);
-  const bound = args === void 0 ? void 0 : boundArgs(args);
-  const confirmation = bound === void 0 || rest.binding ? rest : { ...rest, binding: { key: confirmKeyFromEnv(env), args: bound, ttlSeconds: ttlSeconds ?? DEFAULT_TTL_SECONDS2 } };
+  const elicitationOff = readConfirmElicitation(env) === "off";
+  const bound = boundArgs(args);
+  const elicitationBound = account === void 0 ? { args: bound } : { account, args: bound };
+  const bindingAdded = rest.binding ? rest : {
+    ...rest,
+    binding: { key: confirmKeyFromEnv(env), args: elicitationBound, ttlSeconds: ttlSeconds ?? DEFAULT_TTL_SECONDS2 }
+  };
+  const confirmation = elicitationOff ? { ...bindingAdded, elicitation: false } : bindingAdded;
   if (mode === "refuse" || ttlSeconds === void 0) {
-    const hint = mode === "refuse" ? REFUSE_HINT : BAD_TTL_HINT;
+    const reason = mode === "refuse" ? REFUSE_HINT : BAD_TTL_HINT;
+    const hint = elicitationOff ? `${ELICITATION_OFF_HINT} ${reason}` : reason;
     return {
       ...confirmation,
       unsupportedNote: confirmation.unsupportedNote ? `${confirmation.unsupportedNote} ${hint}` : hint
     };
   }
-  const boundSubject = bound === void 0 ? subject : async () => {
+  const boundSubject = async () => {
     const read = await subject();
     if ("content" in read)
       return read;
@@ -35236,12 +35286,14 @@ var SERVER_PROTOCOL_VERSIONS = Object.freeze([
   ...SUPPORTED_PROTOCOL_VERSIONS
 ]);
 function hintResultOrRethrow(err) {
+  if (err instanceof ProtocolError && err.code === ProtocolErrorCode.UrlElicitationRequired)
+    throw err;
   if (err instanceof McpToolError && err.hint) {
     return errorResult(`${err.message}
 
 Hint: ${err.hint}`);
   }
-  throw err;
+  return errorResult(messageOf(err));
 }
 function mcpRequestFrom(args) {
   const ctx = args.at(-1);
@@ -35475,7 +35527,7 @@ var PositiveInt = external_exports.number().int().positive();
 var NonNegInt = external_exports.number().int().nonnegative();
 var NonEmptyString = external_exports.string().min(1);
 var IsoDate = external_exports.iso.date();
-var IsoTime = external_exports.string().regex(/^([01]?\d|2[0-3]):[0-5]\d$/, "must be HH:MM (24h), e.g. 19:30");
+var IsoTime = external_exports.string().regex(/^([01]?\d|2[0-3]):[0-5]\d$/, "must be HH:MM (24h), e.g. 19:30").overwrite((v) => v.padStart(5, "0"));
 var NumericIdString = external_exports.string().regex(/^\d+$/, "must be a numeric id (digits only)").describe("A numeric id string (digits only), safe to interpolate into a URL path.");
 var SafePathSegment = external_exports.string().min(1).regex(/^[^/?#\s]+$/, 'must not contain "/", "?", "#", or whitespace').refine((v) => !v.includes(".."), 'must not contain ".."').describe('A single URL path segment, safe to interpolate: no "/", "..", "?", "#", or whitespace.');
 var schemaOrigin = external_exports.string().optional().describe("Portal origin (e.g. https://<vendor>.example.co) selecting which active session to use. Optional when only one session is active.");
@@ -36175,7 +36227,7 @@ function registerRunTool(server, options) {
   }
   server.registerTool(`gog_${service}_run`, {
     description,
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object(inputSchema)
   }, async (rawArgs) => {
     const { subcommand, args, account } = rawArgs;
@@ -36371,11 +36423,20 @@ async function requireDispatchConfirmation(ctx, options) {
     confirmationLabel: options.confirmationLabel,
     ...options.unsupportedNote ? { unsupportedNote: options.unsupportedNote } : {}
   };
-  if (!fallback) return requireConfirmationWithFallback(ctx, confirmation);
+  if (!fallback) {
+    if (readConfirmElicitation() !== "off") return requireConfirmationWithFallback(ctx, confirmation);
+    const offNote = "MCP_CONFIRM_ELICITATION=off on the server turns confirmation prompts off.";
+    return requireConfirmationWithFallback(ctx, {
+      ...confirmation,
+      elicitation: false,
+      unsupportedNote: confirmation.unsupportedNote ? `${offNote} ${confirmation.unsupportedNote}` : offNote
+    });
+  }
   return requireConfirmationWithFallback(ctx, confirmationFromEnv({
     ...confirmation,
     tool: fallback.tool,
     account: fallback.account ?? readEnvVar("GOG_ACCOUNT") ?? "",
+    args: fallback.args,
     confirmToken: fallback.confirmToken,
     subject: fallback.subject,
     instruction: fallback.instruction ?? CONFIRM_ACTION_INSTRUCTION,
@@ -36388,13 +36449,13 @@ function resultText(result) {
 }
 
 // ../gogcli-mcp/src/tools/auth.ts
-var AUTH_RUN_SUBCOMMANDS = ["list", "status", "services", "remove", "alias"];
+var AUTH_RUN_SUBCOMMANDS = ["list", "status", "services", "alias"];
 function registerAuthToolsWith(server, defaultServices) {
   const servicesDescribe = `Services to authorize: "all" or comma-separated list (e.g. "sheets,gmail,calendar"). Default: "${defaultServices}". Prefer the narrowest set you need \u2014 requesting a service whose Google API is not enabled on the OAuth client's project makes Google reject the WHOLE request with invalid_scope.`;
   const extraScopesDescribe = "Additional raw OAuth scope URIs to request, comma-separated, on top of the ones `services` implies. Use for scopes no service covers \u2014 e.g. https://www.googleapis.com/auth/bigquery.readonly, required before gog_sheets_datasource_* can read BigQuery-backed Connected Sheets. Leave unset otherwise: an extra scope whose API is not enabled on the OAuth client project makes Google reject the WHOLE authorization with invalid_scope.";
   server.registerTool("gog_auth_list", {
     description: "List the Google accounts stored in gogcli, with their scopes. This reads local configuration only \u2014 it does not contact Google and does NOT tell you whether an account still works: a signed-out account whose refresh token expired or was revoked is listed here exactly like a healthy one, scopes and all. Use gog_auth_health to check whether an account can actually authenticate.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -36405,7 +36466,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_status", {
     description: "Show gogcli auth CONFIGURATION: keyring backend, credential files, and auth setup. Despite the name this is not a health check \u2014 it reads local setup and does not contact Google, so it says nothing about whether an account can still authenticate. Use gog_auth_health for that.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -36416,7 +36477,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_health", {
     description: `Check the LIVE health of each stored Google account. Unlike gog_auth_status (which only reports keyring/config setup), this performs a real token refresh against Google, so it detects expired or revoked (invalid_grant) refresh tokens \u2014 the account-wide sign-out that blocks every service. Reports per account: whether the token is currently valid, the mapped cause when it is not, how long ago it was authorized, and a warning as it approaches the 7-day refresh-token limit that applies to OAuth apps whose consent screen is still in "Testing" mode. Run it proactively to re-authorize on your own schedule instead of mid-task. On a hosted deployment this is the ONLY check that measures Google: a connector showing "connected" or "refreshed" has verified the client's connection to the MCP host, and nothing else \u2014 the Google credential lives in gog's keyring on that host and can be dead while the connection looks perfectly healthy.`,
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -36427,7 +36488,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_services", {
     description: "List all Google services supported by gogcli and the OAuth scopes each requires.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -36438,7 +36499,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_add", {
     description: "Authorize a Google account via browser-based OAuth. Opens a browser window where the user must sign in and grant access. Blocks for up to 5 minutes waiting for the user to complete authorization. If the browser does not open automatically, a fallback URL is included in the response. Use gog_auth_list to check which accounts are already configured.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       email: external_exports.string().describe("Google account email to authorize"),
       services: external_exports.string().optional().default(defaultServices).describe(servicesDescribe),
@@ -36458,7 +36519,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_add_url", {
     description: "Begin REMOTE/headless Google authorization (step 1 of 2). Returns a sign-in URL to open in any browser \u2014 no local server or terminal on the gogcli host is needed, so this works on a hosted deployment where the interactive gog_auth_add cannot. Hand the URL to the user; after they sign in, the browser is redirected to a localhost URL that fails to load \u2014 that is expected. They copy that full redirected URL (from the address bar) and you pass it to gog_auth_add_complete. The link is valid for 10 minutes. If you pass a custom `services` here, pass the SAME value to gog_auth_add_complete or the second step will not match this one.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({
       email: external_exports.string().describe("Google account email to authorize"),
       services: external_exports.string().optional().default(defaultServices).describe(servicesDescribe),
@@ -36475,7 +36536,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_add_complete", {
     description: "Complete REMOTE/headless Google authorization (step 2 of 2). Takes the full redirected localhost URL the user copied after finishing gog_auth_add_url, exchanges it for a refresh token, and stores it. Use the SAME `services` value you passed to gog_auth_add_url. Must run within 10 minutes of step 1 and against the same gogcli host.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       email: external_exports.string().describe("Google account email being authorized (same as step 1)"),
       redirectUrl: external_exports.string().describe(
@@ -36511,7 +36572,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   registerRunTool(server, {
     service: "auth",
-    examples: '"remove", "alias", "list"',
+    examples: '"alias", "list", "status"',
     omitAccount: true,
     allowedSubcommands: AUTH_RUN_SUBCOMMANDS,
     note: "For browser-based authorization, use gog_auth_add instead."
@@ -36579,7 +36640,7 @@ function vetDocsRun(subcommand, args) {
 function registerDocsTools(server) {
   server.registerTool("gog_docs_info", {
     description: "Get Google Doc metadata: title, ID, and other properties.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       account: accountParam
@@ -36589,7 +36650,7 @@ function registerDocsTools(server) {
   });
   server.registerTool("gog_docs_cat", {
     description: "Read a Google Doc as plain text.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       chips: external_exports.boolean().optional().describe("Render Google Docs smart chips (people, dates, rich links) inline in the text output"),
@@ -36602,7 +36663,7 @@ function registerDocsTools(server) {
   });
   server.registerTool("gog_docs_create", {
     description: "Create a new Google Doc. Returns JSON with the new docId and URL.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       title: external_exports.string().describe("Title for the new document"),
       account: accountParam
@@ -36612,7 +36673,7 @@ function registerDocsTools(server) {
   });
   server.registerTool("gog_docs_write", {
     description: "Write text content to a Google Doc, replacing existing body content by default. Set append=true to add after existing content.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().describe("Text content to write"),
@@ -36652,7 +36713,7 @@ function registerDocsTools(server) {
   });
   server.registerTool("gog_docs_find_replace", {
     description: "Find and replace text in a Google Doc.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       find: external_exports.string().describe("Text to find"),
@@ -36664,7 +36725,7 @@ function registerDocsTools(server) {
   });
   server.registerTool("gog_docs_structure", {
     description: "Show a Google Doc's structure with numbered paragraphs. Useful for understanding the document layout before making index-based edits.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       account: accountParam
@@ -36730,7 +36791,7 @@ var failIfNotEmptyParam = external_exports.boolean().optional().describe(
 );
 
 // ../gogcli-mcp/src/server.ts
-var VERSION = true ? "4.6.3" : "0.0.0";
+var VERSION = true ? "4.7.1" : "0.0.0";
 
 // ../gogcli-mcp/src/bootstrap-auth.ts
 import { join as join7 } from "node:path";
@@ -36817,7 +36878,7 @@ function docTitle(raw) {
 function registerExtraDocsTools(server) {
   server.registerTool("gog_docs_copy", {
     description: "Copy a Google Doc to a new document with the given title.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       title: external_exports.string().describe("Title for the new copy"),
@@ -36831,7 +36892,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_delete", {
     description: "Delete content within a Google Doc by character index range. To remove the entire document (move to Drive trash), use gog_docs_trash.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       start: external_exports.number().optional().describe("Start index (character position, 1-based). Required unless `at` is set."),
@@ -36859,7 +36920,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_trash", {
     description: "Move an entire Google Doc to Drive trash. Convenience wrapper around `gog drive delete` so docs-only users can clean up without installing gogcli-mcp-drive. The doc remains recoverable from Drive trash for ~30 days.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID to move to trash"),
       account: accountParam
@@ -36869,7 +36930,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_edit", {
     description: "Edit a Google Doc by finding and replacing text (stream-edit style).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       find: external_exports.string().describe("Text to find"),
@@ -36884,7 +36945,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_read", {
     description: 'Read the content of a Google Doc. Default: plain text body. Use format="json" for the raw Google Docs API response (lossless, includes character indices needed for index-based gog_docs_insert / gog_docs_delete calls). For markdown output, use gog_docs_export with format="md" \u2014 it writes to a file. Use gog_docs_structure to see paragraph-by-paragraph layout with indices.',
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       format: external_exports.enum(["text", "json"]).optional().describe("Output format (default: text)"),
@@ -36910,7 +36971,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_format", {
     description: "Apply text or paragraph formatting to a Google Doc. Use `match` to format a specific text occurrence, `matchAll` to format every occurrence, or omit both to format the whole doc. Boolean flags (bold/italic/etc.) set the attribute; negated flags (noBold/noItalic/etc.) clear it.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       match: external_exports.string().optional().describe("Format only the first text match"),
@@ -36996,7 +37057,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_suggestions_list", {
     description: "List pending suggestions (suggested text insertions and deletions) in a Google Doc, with exact UTF-16 ranges and segment context. Read-only; does not accept or reject suggestions.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().optional().describe("Tab title or ID (omit for the first tab)"),
@@ -37010,7 +37071,7 @@ function registerExtraDocsTools(server) {
   server.registerTool("gog_docs_export", {
     description: "Export a Google Doc as PDF, plain text, HTML, DOCX, or other format.",
     // Writes a file on the gog host and can overwrite one: not read-only (audit SEC-4).
-    annotations: { readOnlyHint: false, destructiveHint: true },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       format: external_exports.string().optional().describe("Export format: pdf, txt, html, docx, rtf, odt, epub (default: pdf)"),
@@ -37028,7 +37089,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert", {
     description: "Insert text at a specific character index in a Google Doc. When `index` is omitted, gog defaults to 1 (the very beginning), NOT the end \u2014 sequential inserts without an explicit index produce reversed output. To append at the end of the doc, use gog_docs_append (which uses `gog docs write --append` and is the right tool for iterative document construction). To find a valid index for mid-document inserts, call gog_docs_structure or gog_docs_read first.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       content: external_exports.string().optional().describe("Text content to insert"),
@@ -37058,7 +37119,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_append", {
     description: "Append text to the end of a Google Doc. This is the right tool for iterative document construction \u2014 multiple sequential calls produce content in the order they were called. Use gog_docs_insert only when you need to insert at a specific character position. Known markdown=true limitations (tracked upstream): (a) 3+ tables in one call reorders the trailing punctuation of the paragraph before the 3rd table \u2014 split into multiple calls with \u22642 tables each (openclaw/gogcli#607); (b) inline **bold** / *italic* / `code` inside table cells renders as literal characters \u2014 pre-format cell text separately or apply formatting after the append via gog_docs_format (openclaw/gogcli#608); (c) tables with an empty header row leak the last data row as literal pipe text \u2014 always supply a non-empty header (openclaw/gogcli#609).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().optional().describe("Text content to append"),
@@ -37078,7 +37139,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_list_tabs", {
     description: "List all tabs in a Google Doc.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       account: accountParam
@@ -37088,7 +37149,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_sed", {
     description: "Stream-edit a Google Doc with sed-like regex expressions (s/find/replace/ syntax).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       expression: external_exports.string().optional().describe('Single sed expression (e.g. "s/old/new/g")'),
@@ -37112,7 +37173,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_update", {
     description: "Update a Google Doc \u2014 insert or replace text at a specific position.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().optional().describe("Text content to write"),
@@ -37148,7 +37209,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_list", {
     description: "List comments on a Google Doc. Returns open comments by default; set includeResolved=true to include resolved comments. Set locate=true (or pass tab) to attach each comment's tab and Docs index ranges as location.matches[] plus location.orphaned \u2014 that costs one extra document fetch, but only one for the whole listing, where gog_docs_comments_locate costs one per comment. Either flag additionally requires the Docs scope; the plain listing needs only Drive. matches[] always spans every tab, so a quote appearing in two tabs is visible as an ambiguity rather than silently resolved. tab keeps only comments with a match in that tab, which drops orphaned comments and comments that quote nothing.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       includeResolved: external_exports.boolean().optional().describe("Include resolved comments (default: false, open only)"),
@@ -37169,7 +37230,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_get", {
     description: "Get a single comment by ID, including its replies.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       commentId: external_exports.string().describe("Comment ID"),
@@ -37180,7 +37241,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_add", {
     description: "Add a comment to a Google Doc. Optionally attach quoted text that appears as the highlighted passage in the Google Docs UI. The Doc's owner and everyone the text +mentions are notified, so this reads the Doc and asks the MCP host to show the user a confirmation prompt with the Doc, the text and who is mentioned first; nothing is posted unless they accept." + CONFIRM_FALLBACK_DESCRIPTION,
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       content: external_exports.string().describe("Comment text"),
@@ -37203,6 +37264,7 @@ function registerExtraDocsTools(server) {
       details: { doc, textPreview: bodyPreview(content), quoted, mentions },
       unsupportedNote: "Ask the user to comment from Google Docs.",
       fallback: {
+        args: { docId, content, quoted, account },
         tool: "gog_docs_comments_add",
         account,
         confirmToken,
@@ -37217,7 +37279,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_reply", {
     description: "Reply to an existing comment on a Google Doc. Everyone on the thread and anyone the reply +mentions is notified, so this reads the Doc and the comment and asks the MCP host to show the user a confirmation prompt with both and the reply first; nothing is posted unless they accept." + CONFIRM_FALLBACK_DESCRIPTION,
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       commentId: external_exports.string().describe("Comment ID to reply to"),
@@ -37241,6 +37303,7 @@ function registerExtraDocsTools(server) {
       details: { doc, replyingTo, textPreview: bodyPreview(content), mentions },
       unsupportedNote: "Ask the user to reply from Google Docs.",
       fallback: {
+        args: { docId, commentId, content, account },
         tool: "gog_docs_comments_reply",
         account,
         confirmToken,
@@ -37255,7 +37318,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_resolve", {
     description: "Resolve a comment (mark as done). Optionally include a closing message.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       commentId: external_exports.string().describe("Comment ID to resolve"),
@@ -37269,7 +37332,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_delete", {
     description: "Delete a comment from a Google Doc. This action is permanent.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       commentId: external_exports.string().describe("Comment ID to delete"),
@@ -37280,7 +37343,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_reopen", {
     description: "Reopen a previously resolved comment (flip resolved \u2192 open).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       commentId: external_exports.string().describe("Comment ID to reopen"),
@@ -37291,7 +37354,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_comments_locate", {
     description: "Locate a comment's anchor in a Google Doc \u2014 resolves the comment's quoted text to its current Docs API index range, or reports the comment as orphaned if the quote can no longer be found (e.g. the anchored text was edited away). Read-only; useful before an index-based edit near a comment.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       commentId: external_exports.string().describe("Comment ID to locate"),
@@ -37309,7 +37372,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_find_range", {
     description: "Map literal text in a Google Doc to its Docs API UTF-16 index range(s). Read-only helper for computing the start/end indices that index-based tools (gog_docs_delete, gog_docs_update --replace-range) need. Returns the first match by default; use occurrence to pick a specific one or all to return every match.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().describe("Literal text to locate"),
@@ -37335,7 +37398,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_batch_begin", {
     description: "Open a persisted, revision-locked request batch for a Google Doc. Subsequent docs mutation tools called with batch=<batchId> append their requests locally instead of applying them; gog_batch_end submits everything atomically. Returns the batchId.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: false },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Google Doc ID the batch is locked to"),
       name: external_exports.string().optional().describe("Optional batch label"),
@@ -37348,7 +37411,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_batch_end", {
     description: "Submit a persisted batch: applies every composed request to the doc in one atomic batchUpdate against the locked revision. Atomic by default \u2014 set autoSplit to submit >500-request batches as ordered chunks (non-atomic), or continueOnError to retry individually after an atomic validation failure, retaining failures in the batch.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       batchId: external_exports.string().describe("Batch ID (from gog_batch_begin)"),
       autoSplit: external_exports.boolean().optional().describe("Submit batches over 500 requests as ordered chunks (non-atomic)"),
@@ -37363,7 +37426,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_batch_abort", {
     description: "Discard a persisted batch and its composed requests without applying anything to the doc.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: false },
     inputSchema: external_exports.object({
       batchId: external_exports.string().describe("Batch ID to discard"),
       account: accountParam
@@ -37373,7 +37436,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_batch_list", {
     description: "List persisted Docs request batches (id, doc, label, request count, status).",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({
       account: accountParam
     })
@@ -37382,7 +37445,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_batch_show", {
     description: "Show one persisted batch: its doc, locked revision, and the composed requests awaiting submission.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({
       batchId: external_exports.string().describe("Batch ID"),
       account: accountParam
@@ -37392,7 +37455,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_batch_prune", {
     description: "Delete stale persisted batches (not updated within olderThan).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: false },
     inputSchema: external_exports.object({
       olderThan: external_exports.string().optional().describe("Delete batches not updated within this duration (e.g. 72h, 7d)"),
       account: accountParam
@@ -37404,7 +37467,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_column_width", {
     description: "Set a fixed width (in points) for a table column, or reset columns to Docs-managed even distribution. Target the table by 1-based index in document order (negative counts from the end) and the column by 1-based number. Pass evenlyDistributed without col to reset every column in the table.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       col: external_exports.number().int().optional().describe("1-based column number. Omit with evenlyDistributed to reset all columns."),
@@ -37428,7 +37491,7 @@ function registerExtraDocsTools(server) {
   const tableSelectorParam = external_exports.string().optional().describe("Table selector: 1-based index (negative from the end), exact first-cell text, * for the only table, or text:VALUE for numeric/syntax-looking first-cell text (default: 1)");
   server.registerTool("gog_docs_table_row_insert", {
     description: 'Insert a row into a native Google Docs table, optionally populated from a JSON string array. Inserts before the 1-based position given by `at` (negative counts from the end; "end" appends \u2014 the default).',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       table: tableSelectorParam,
@@ -37447,7 +37510,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_row_delete", {
     description: "Delete a row from a native Google Docs table by 1-based row number (negative counts from the end). The row's cell content is lost.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       row: external_exports.number().int().describe("1-based row number; negative indexes count from the end"),
@@ -37463,7 +37526,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_column_insert", {
     description: 'Insert a column into a native Google Docs table. Inserts before the 1-based position given by `at` (negative counts from the end; "end" appends \u2014 the default).',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       table: tableSelectorParam,
@@ -37480,7 +37543,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_column_delete", {
     description: "Delete a column from a native Google Docs table by 1-based column number (negative counts from the end). The column's cell content is lost.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       col: external_exports.number().int().describe("1-based column number; negative indexes count from the end"),
@@ -37496,7 +37559,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_merge", {
     description: "Merge a rectangular cell range in a native Google Docs table. Content of non-first cells in the range is absorbed/discarded by the merge \u2014 use gog_docs_table_unmerge to split back.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       range: external_exports.string().describe('1-based cell range r1,c1:r2,c2 (e.g. "1,1:2,3")'),
@@ -37512,7 +37575,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_unmerge", {
     description: "Unmerge (split) the merged region containing a given cell in a native Google Docs table.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       cell: external_exports.string().describe('1-based cell r,c inside the merged region (e.g. "1,1")'),
@@ -37528,7 +37591,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_named_range_create", {
     description: "Create a named range \u2014 a durable, tab-aware anchor over a span of document text that survives subsequent edits (unlike raw indices). Anchor by literal text (`at`) or explicit UTF-16 start/end indices. Pair with gog_docs_named_range_replace for repeatable templated updates.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       name: external_exports.string().describe("Unique named range name"),
@@ -37552,7 +37615,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_named_range_list", {
     description: "List named ranges in a Google Doc, optionally filtered by name.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       name: external_exports.string().optional().describe("Only return ranges with this name"),
@@ -37567,7 +37630,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_named_range_delete", {
     description: "Delete a named range (the anchor only \u2014 the underlying document text is untouched).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       nameOrId: external_exports.string().describe("Named range name or ID"),
@@ -37581,7 +37644,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_named_range_replace", {
     description: "Replace the text inside a named range with new content (inline or from a file), keeping the anchor for future updates \u2014 the templated-update workhorse.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       nameOrId: external_exports.string().describe("Named range name or ID"),
@@ -37600,7 +37663,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_tables_list", {
     description: "Enumerate the native tables in a Google Doc (dimensions, position) \u2014 the index/first-cell-text it reports feeds the `table` selector on the table-row/column/merge tools.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().optional().describe("Tab title or ID (omit for default)"),
@@ -37613,7 +37676,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_images_list", {
     description: "Enumerate inline/positioned images in a Google Doc.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().optional().describe("Tab title or ID (omit for default)"),
@@ -37626,7 +37689,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_headings_list", {
     description: "Enumerate headings in a Google Doc (a lightweight outline view), optionally filtered to one heading level.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       level: external_exports.number().int().optional().describe("Only return this heading level (1-6)"),
@@ -37641,7 +37704,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_paragraphs_list", {
     description: "Enumerate paragraphs in a Google Doc with emptiness, text-run ranges, styles, and links \u2014 richer than gog_docs_structure when you need per-run detail. Optionally filter to one named style.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       style: external_exports.string().optional().describe("Only return this named style (e.g. NORMAL_TEXT or HEADING_2)"),
@@ -37656,7 +37719,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_page_break", {
     description: "Insert a Google Docs page break via InsertPageBreakRequest \u2014 the only path for multi-page deliverables (markdown has no page-break construct). Specify `index` for a precise character position, or `atEnd` for end-of-doc.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       index: external_exports.number().int().optional().describe("Character index to insert at (1 = beginning). Omit or use atEnd for end-of-doc."),
@@ -37681,7 +37744,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_page_layout", {
     description: "Toggle the page layout (pageless | pages) of an existing Google Doc. Sibling to the --pageless flag on docs create/write/update for docs that were already created (e.g. by Drive markdown conversion) without the desired layout.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       layout: external_exports.enum(["pageless", "pages"]).optional().describe("Page layout (default: pageless)"),
@@ -37708,7 +37771,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_table", {
     description: "Insert a native Google Docs table via InsertTableRequest, bypassing the markdown writer. Use this instead of writing a markdown table when you need precise dimensions or to avoid the markdown writer's table limitations. `valuesJson` is a JSON 2D string array whose dimensions must match rows x cols.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       rows: external_exports.number().int().min(1).describe("Number of rows (>=1)"),
@@ -37729,7 +37792,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_cell_update", {
     description: "Replace (or append to) the content of a single table cell, addressed by table / row / column \u2014 non-destructive to the rest of the table, unlike index-based edits that shift on every change. Provide content inline or read it from contentFile. Note: row/col/tableIndex are 1-based here; the sibling gog_docs_cell_style uses 0-based addressing.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       row: external_exports.number().int().describe("1-based row number"),
@@ -37760,7 +37823,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_cell_style", {
     description: "Apply background color and/or inline text styling (bold, italic, underline, colors) to one or more table cells, addressed by 0-based row/column with optional spans. Sibling to gog_docs_cell_update, which changes cell content rather than styling. Note: row/col/tableIndex are 0-based here; gog_docs_cell_update uses 1-based addressing.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       row: external_exports.number().int().describe("0-based row number"),
@@ -37815,7 +37878,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_image", {
     description: "Insert an image into a Google Doc from a local file or a public HTTPS URL. file: uploaded to Drive, temporarily shared so Docs can fetch it, inserted, then the public permission is revoked. url: inserted directly with no Drive upload or temporary sharing. Replaces placeholder text (at) or appends at end-of-doc.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       file: external_exports.string().optional().describe("Local PNG, JPEG, or GIF image to upload and insert (exactly one of file or url)"),
@@ -37850,7 +37913,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_person", {
     description: "Insert a native Google Docs person smart chip (the interactive @-mention chip) for an email address, at a character index or end-of-doc.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       email: external_exports.string().describe("Email address for the person chip"),
@@ -37876,7 +37939,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_date_chip", {
     description: "Insert a native Google Docs date smart chip, at a character index or end-of-doc.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       date: external_exports.string().optional().describe("Date to insert as YYYY-MM-DD (default: today)"),
@@ -37899,7 +37962,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_add_tab", {
     description: "Add a tab to a Google Doc. Tabs partition a doc into independently-addressable sections (multi-tab docs). Optionally set the title, zero-based position, parent tab (for nesting), and an emoji icon.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       title: external_exports.string().optional().describe("User-visible tab title"),
@@ -37918,7 +37981,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_rename_tab", {
     description: "Rename a tab in a Google Doc. Identify the existing tab by title or ID and give it a new title.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().describe("Existing tab title or ID to rename"),
@@ -37931,7 +37994,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_delete_tab", {
     description: "Delete a tab (and its content) from a Google Doc. Identify the tab by title or ID. This permanently removes the tab and everything in it.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().describe("Existing tab title or ID to delete"),
@@ -37943,7 +38006,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_clear", {
     description: "Clear all content from a Google Doc, leaving an empty document. The doc itself is preserved (same ID/URL); only its body content is removed. To delete the whole doc instead, use gog_docs_trash.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       account: accountParam
@@ -37953,7 +38016,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_footnote", {
     description: "Insert a footnote at a character index (or end-of-doc) and populate its text. The footnote reference mark is placed in the body; the footnote content goes in the new footnote segment.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().optional().describe("Footnote text"),
@@ -37981,7 +38044,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_section_break", {
     description: "Insert a continuous or next-page section break at a character index (or end-of-doc). Section breaks enable per-section layout such as column counts (see gog_docs_section_columns).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       type: external_exports.enum(["next-page", "continuous"]).optional().describe("Section break type (default: next-page)"),
@@ -38008,7 +38071,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_insert_horizontal_rule", {
     description: "Insert a horizontal rule (paragraph border) at a character index (or end-of-doc).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       index: external_exports.number().int().optional().describe("Character index to insert at (1 = beginning). Omit or use atEnd for end-of-doc."),
@@ -38033,7 +38096,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_section_columns", {
     description: "Set the column count (1-3) for the document section containing the target position. Use count=1 to reset to a single column. Anchor by index, end-of-doc, or literal text.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       count: external_exports.number().int().min(1).max(3).describe("Number of columns (1-3; 1 resets to one column)"),
@@ -38061,7 +38124,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_header_list", {
     description: "List a Google Doc's headers and their segment IDs. Use a segment ID with the segment param on gog_docs_insert / gog_docs_update / gog_docs_delete / gog_docs_format / gog_docs_find_range to edit inside a header.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().optional().describe("Limit results to a tab title or ID"),
@@ -38074,7 +38137,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_header_create", {
     description: "Create a header in a Google Doc and optionally populate its initial text. Returns the new header segment ID.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().optional().describe("Initial header text"),
@@ -38102,7 +38165,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_header_delete", {
     description: "Delete a header from a Google Doc by its segment ID (from gog_docs_header_list).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       headerId: external_exports.string().describe("Header segment ID (from gog_docs_header_list)"),
@@ -38117,7 +38180,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_footer_list", {
     description: "List a Google Doc's footers and their segment IDs. Use a segment ID with the segment param on gog_docs_insert / gog_docs_update / gog_docs_delete / gog_docs_format / gog_docs_find_range to edit inside a footer.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       tab: external_exports.string().optional().describe("Limit results to a tab title or ID"),
@@ -38130,7 +38193,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_footer_create", {
     description: "Create a footer in a Google Doc and optionally populate its initial text. Returns the new footer segment ID.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       text: external_exports.string().optional().describe("Initial footer text"),
@@ -38158,7 +38221,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_footer_delete", {
     description: "Delete a footer from a Google Doc by its segment ID (from gog_docs_footer_list).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       footerId: external_exports.string().describe("Footer segment ID (from gog_docs_footer_list)"),
@@ -38173,7 +38236,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_replace_image", {
     description: "Replace an existing image in a Google Doc in place \u2014 keeping its position and bounds \u2014 with a new image from a local file or public HTTPS URL. Target the image by exact object ID (from gog_docs_images_list), by alt-text substring, or leave both off to replace the only image in the doc/tab.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       file: external_exports.string().optional().describe("Local PNG, JPEG, or GIF image to upload and use (exactly one of file or url)"),
@@ -38200,7 +38263,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_row_pin_header", {
     description: "Pin (or unpin) leading rows of a native Google Docs table as repeating header rows. rows=N pins the first N rows; rows=0 unpins all header rows.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       rows: external_exports.number().int().min(0).describe("Number of leading rows to pin as headers; 0 unpins all header rows"),
@@ -38216,7 +38279,7 @@ function registerExtraDocsTools(server) {
   });
   server.registerTool("gog_docs_table_row_style", {
     description: "Set native table row height and page-overflow behaviour. Target a 1-based row (negative counts from the end) or omit row to style every row in the table.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       docId: external_exports.string().describe("Doc ID (from the URL)"),
       row: external_exports.number().int().optional().describe("1-based row number; negative indexes count from the end; omit to style all rows"),