gogcli-mcp-slides 4.2.4 → 4.3.0

package/dist/index.js

@@ -2092,8 +2092,8 @@ function emoji() {
 }
 var ipv4 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
 var ipv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
-var mac = (delimiter2) => {
-  const escapedDelim = escapeRegex(delimiter2 ?? ":");
+var mac = (delimiter3) => {
+  const escapedDelim = escapeRegex(delimiter3 ?? ":");
   return new RegExp(`^(?:[0-9A-F]{2}${escapedDelim}){5}[0-9A-F]{2}$|^(?:[0-9a-f]{2}${escapedDelim}){5}[0-9a-f]{2}$`);
 };
 var cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
@@ -5121,7 +5121,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve) {
+function isRecursive(inst, stack, resolve4) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -5131,7 +5131,7 @@ function isRecursive(inst, stack, resolve) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve);
+      const answer = isRecursive(child, stack, resolve4);
       if (answer > result)
         result = answer;
     }
@@ -5142,7 +5142,7 @@ function isRecursive(inst, stack, resolve) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve4) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -5206,7 +5206,7 @@ function isRecursive(inst, stack, resolve) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve4 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -24106,14 +24106,14 @@ function inputRequiredRoundsExceededMessage(method, maxRounds) {
   return `Multi-round-trip request '${method}' still required input after ${maxRounds} rounds (inputRequired.maxRounds)`;
 }
 function sleep(ms, signal) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve4, reject) => {
     if (signal?.aborted) {
       reject(signal.reason instanceof SdkError ? signal.reason : new SdkError(SdkErrorCode.RequestTimeout, String(signal.reason)));
       return;
     }
     const timer = setTimeout(() => {
       signal?.removeEventListener("abort", onAbort);
-      resolve();
+      resolve4();
     }, ms);
     const onAbort = () => {
       clearTimeout(timer);
@@ -24907,7 +24907,7 @@ var Protocol = class {
     const flowStartedAt = Date.now();
     let onAbort;
     let cleanupMessageId;
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve4, reject) => {
       const earlyReject = (error62) => {
         reject(error62);
       };
@@ -24975,7 +24975,7 @@ var Protocol = class {
         }
         if (decoded.kind === "invalid") return reject(decoded.error);
         if (decoded.kind === "input_required") {
-          if (options?.allowInputRequired === true) return resolve(manualInputRequiredValue(decoded));
+          if (options?.allowInputRequired === true) return resolve4(manualInputRequiredValue(decoded));
           const flow = {
             codec: codec2,
             request,
@@ -24987,11 +24987,11 @@ var Protocol = class {
               params
             }, resultSchema, legOptions)
           };
-          return resolve(this._resolveNonCompleteResult(decoded, flow));
+          return resolve4(this._resolveNonCompleteResult(decoded, flow));
         }
         const result = decoded.result;
         validateStandardSchema(resultSchema, result).then((parseResult) => {
-          if (parseResult.success) resolve(parseResult.data);
+          if (parseResult.success) resolve4(parseResult.data);
           else reject(new SdkError(SdkErrorCode.InvalidResult, `Invalid result for ${request.method}: ${parseResult.error}`));
         }, reject);
       });
@@ -27903,7 +27903,7 @@ var require_compile = /* @__PURE__ */ __commonJSMin(((exports) => {
     ref = (0, resolve_1.resolveUrl)(this.opts.uriResolver, baseId, ref);
     const schOrFunc = root.refs[ref];
     if (schOrFunc) return schOrFunc;
-    let _sch = resolve.call(this, root, ref);
+    let _sch = resolve4.call(this, root, ref);
     if (_sch === void 0) {
       const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
       const { schemaId } = this.opts;
@@ -27929,7 +27929,7 @@ var require_compile = /* @__PURE__ */ __commonJSMin(((exports) => {
   function sameSchemaEnv(s1, s2) {
     return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
   }
-  function resolve(root, ref) {
+  function resolve4(root, ref) {
     let sch;
     while (typeof (sch = this.refs[ref]) == "string") ref = sch;
     return sch || this.schemas[ref] || resolveSchema.call(this, root, ref);
@@ -28379,47 +28379,47 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
     else if (typeof uri === "object") uri = parse3(serialize(uri, options), options);
     return uri;
   }
-  function resolve(baseURI, relativeURI, options) {
+  function resolve4(baseURI, relativeURI, options) {
     const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
     const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
     schemelessOptions.skipEscape = true;
     return serialize(resolved, schemelessOptions);
   }
-  function resolveComponent(base, relative, options, skipNormalization) {
+  function resolveComponent(base, relative3, options, skipNormalization) {
     const target = {};
     if (!skipNormalization) {
       base = parse3(serialize(base, options), options);
-      relative = parse3(serialize(relative, options), options);
+      relative3 = parse3(serialize(relative3, options), options);
     }
     options = options || {};
-    if (!options.tolerant && relative.scheme) {
-      target.scheme = relative.scheme;
-      target.userinfo = relative.userinfo;
-      target.host = relative.host;
-      target.port = relative.port;
-      target.path = removeDotSegments(relative.path || "");
-      target.query = relative.query;
+    if (!options.tolerant && relative3.scheme) {
+      target.scheme = relative3.scheme;
+      target.userinfo = relative3.userinfo;
+      target.host = relative3.host;
+      target.port = relative3.port;
+      target.path = removeDotSegments(relative3.path || "");
+      target.query = relative3.query;
     } else {
-      if (relative.userinfo !== void 0 || relative.host !== void 0 || relative.port !== void 0) {
-        target.userinfo = relative.userinfo;
-        target.host = relative.host;
-        target.port = relative.port;
-        target.path = removeDotSegments(relative.path || "");
-        target.query = relative.query;
+      if (relative3.userinfo !== void 0 || relative3.host !== void 0 || relative3.port !== void 0) {
+        target.userinfo = relative3.userinfo;
+        target.host = relative3.host;
+        target.port = relative3.port;
+        target.path = removeDotSegments(relative3.path || "");
+        target.query = relative3.query;
       } else {
-        if (!relative.path) {
+        if (!relative3.path) {
           target.path = base.path;
-          if (relative.query !== void 0) target.query = relative.query;
+          if (relative3.query !== void 0) target.query = relative3.query;
           else target.query = base.query;
         } else {
-          if (relative.path[0] === "/") target.path = removeDotSegments(relative.path);
+          if (relative3.path[0] === "/") target.path = removeDotSegments(relative3.path);
           else {
-            if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) target.path = "/" + relative.path;
-            else if (!base.path) target.path = relative.path;
-            else target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative.path;
+            if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) target.path = "/" + relative3.path;
+            else if (!base.path) target.path = relative3.path;
+            else target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative3.path;
             target.path = removeDotSegments(target.path);
           }
-          target.query = relative.query;
+          target.query = relative3.query;
         }
         target.userinfo = base.userinfo;
         target.host = base.host;
@@ -28427,7 +28427,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
       }
       target.scheme = base.scheme;
     }
-    target.fragment = relative.fragment;
+    target.fragment = relative3.fragment;
     return target;
   }
   function equal(uriA, uriB, options) {
@@ -28553,7 +28553,7 @@ var require_fast_uri = /* @__PURE__ */ __commonJSMin(((exports, module) => {
   const fastUri = {
     SCHEMES,
     normalize,
-    resolve,
+    resolve: resolve4,
     resolveComponent,
     equal,
     serialize,
@@ -29335,14 +29335,14 @@ var require_ucs2length = /* @__PURE__ */ __commonJSMin(((exports) => {
   function ucs2length(str) {
     const len = str.length;
     let length = 0;
-    let pos = 0;
+    let pos2 = 0;
     let value;
-    while (pos < len) {
+    while (pos2 < len) {
       length++;
-      value = str.charCodeAt(pos++);
-      if (value >= 55296 && value <= 56319 && pos < len) {
-        value = str.charCodeAt(pos);
-        if ((value & 64512) === 56320) pos++;
+      value = str.charCodeAt(pos2++);
+      if (value >= 55296 && value <= 56319 && pos2 < len) {
+        value = str.charCodeAt(pos2);
+        if ((value & 64512) === 56320) pos2++;
       }
     }
     return length;
@@ -33926,7 +33926,7 @@ var StdioServerTransport = class {
   }
   send(message) {
     if (this._closed) return Promise.reject(/* @__PURE__ */ new Error("StdioServerTransport is closed"));
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve4, reject) => {
       const json2 = serializeMessage(message);
       let settled = false;
       const onError = (error62) => {
@@ -33941,14 +33941,14 @@ var StdioServerTransport = class {
         settled = true;
         this._stdout.off("error", onError);
         this._stdout.off("drain", onDrain);
-        resolve();
+        resolve4();
       };
       this._stdout.once("error", onError);
       if (this._stdout.write(json2)) {
         if (settled) return;
         settled = true;
         this._stdout.off("error", onError);
-        resolve();
+        resolve4();
       } else if (!settled) this._stdout.once("drain", onDrain);
     });
   }
@@ -34002,14 +34002,14 @@ var StdioConnectionChannel = class {
   */
   async whenRequestsAnswered(timeoutMs) {
     if (this._closed || this._pendingRequests.size === 0) return true;
-    return await new Promise((resolve) => {
+    return await new Promise((resolve4) => {
       const waiter = () => {
         clearTimeout(timer);
-        resolve(true);
+        resolve4(true);
       };
       const timer = setTimeout(() => {
         this._drainWaiters = this._drainWaiters.filter((pending) => pending !== waiter);
-        resolve(false);
+        resolve4(false);
       }, timeoutMs);
       this._drainWaiters.push(waiter);
     });
@@ -34379,13 +34379,28 @@ var API_KEY_RE = new RegExp([
   "whsec_[A-Za-z0-9]{16,}\\b"
   // webhook signing secret (Stripe-style)
 ].map((p) => `\\b${p}`).join("|"), "g");
-var QUERY_SECRET_RE = /([?&](?:access_token|refresh_token|client_secret|api_?key|signature|token|key|sig)=)[^&#\s"'<>`]+/gi;
+var QUERY_SECRET_RE = /([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig)=)[^&#\s"'<>`]+/gi;
+var OAUTH_CODE_RE = /([?&]code=)(?=[^&#\s"'<>`]{16,})[^&#\s"'<>`]+/gi;
+var FORM_PASSWORD_RE = /((?:^|[\s,;:"'(\[{])(?:password|passwd)=)[^&#\s"'<>`]+/gim;
+var HEADER_SECRET_RE = /(\b(?:x[-_][a-z0-9_-]*?(?:api[-_]?key|token|secret|auth)[a-z0-9_-]*|api[-_]?key)\s*:\s*)[^\s,;"'<>`]+/gi;
 var AWS_SIGV4_RE = /([?&]X-Amz-(?:Signature|Security-Token|Credential)=)[^&#\s"'<>`]+/gi;
-var JSON_SECRET_KEYS = "access_token|refresh_token|client_secret|api_?key|password|passwd|secret|token";
-var JSON_SECRET_DQ_RE = new RegExp(`("(?:${JSON_SECRET_KEYS})"\\s*:\\s*")[^"]*(")`, "gi");
-var JSON_SECRET_SQ_RE = new RegExp(`('(?:${JSON_SECRET_KEYS})'\\s*:\\s*')[^']*(')`, "gi");
+var JSON_SECRET_KEYS = [
+  "(?:access|refresh|id|auth|session|bearer|csrf|xsrf)[_-]?token",
+  "client[_-]?secret",
+  "api[_-]?secret",
+  "(?:x[_-])?api[_-]?key",
+  "private[_-]?key",
+  "x[_-][a-z0-9_-]*?(?:api[_-]?key|token|secret|auth)[a-z0-9_-]*",
+  "(?:proxy-)?authorization",
+  "password",
+  "passwd",
+  "secret",
+  "token"
+].join("|");
+var JSON_SECRET_DQ_RE = new RegExp(`("(?:${JSON_SECRET_KEYS})"\\s*:\\s*")(?:[^"\\\\]|\\\\.)*(")`, "gi");
+var JSON_SECRET_SQ_RE = new RegExp(`('(?:${JSON_SECRET_KEYS})'\\s*:\\s*')(?:[^'\\\\]|\\\\.)*(')`, "gi");
 function redactSecrets(text) {
-  return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JWT_RE, "[REDACTED]");
+  return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(HEADER_SECRET_RE, "$1[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(OAUTH_CODE_RE, "$1[REDACTED]").replace(FORM_PASSWORD_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JWT_RE, "[REDACTED]");
 }
 
 // ../../node_modules/@chrischall/mcp-utils/dist/response/view.js
@@ -34547,13 +34562,47 @@ async function createMcpServer(opts) {
   }
   return server;
 }
+var DEFAULT_SHUTDOWN_TIMEOUT_MS = 5e3;
+var DEFAULT_REPEAT_SIGNAL_GRACE_MS = 500;
 function withGracefulShutdown(target, opts = {}) {
   const shouldExit = opts.exit ?? true;
+  if (opts.timeoutMs !== void 0 && !(Number.isFinite(opts.timeoutMs) && opts.timeoutMs > 0)) {
+    throw new RangeError("withGracefulShutdown: timeoutMs must be a finite number greater than 0.");
+  }
+  const timeoutMs = opts.timeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;
+  if (opts.repeatSignalGraceMs !== void 0 && !(Number.isFinite(opts.repeatSignalGraceMs) && opts.repeatSignalGraceMs >= 0)) {
+    throw new RangeError("withGracefulShutdown: repeatSignalGraceMs must be a finite number >= 0.");
+  }
+  const repeatGraceMs = opts.repeatSignalGraceMs ?? DEFAULT_REPEAT_SIGNAL_GRACE_MS;
   let shuttingDown = false;
+  let firstSignalAt = 0;
+  let exited = false;
+  const exitOnce = () => {
+    if (exited)
+      return;
+    exited = true;
+    process.exit(0);
+  };
   const handler = (signal) => {
-    if (shuttingDown)
+    if (shuttingDown) {
+      if (Date.now() - firstSignalAt < repeatGraceMs)
+        return;
+      if (shouldExit) {
+        console.error(`[mcp-utils] second ${signal} during shutdown \u2014 exiting now`);
+        exitOnce();
+      }
       return;
+    }
     shuttingDown = true;
+    firstSignalAt = Date.now();
+    let timer;
+    if (shouldExit) {
+      timer = setTimeout(() => {
+        console.error(`[mcp-utils] graceful shutdown on ${signal} did not finish in ${timeoutMs}ms \u2014 exiting`);
+        exitOnce();
+      }, timeoutMs);
+      timer.unref?.();
+    }
     void (async () => {
       try {
         if (opts.onSignal)
@@ -34562,8 +34611,10 @@ function withGracefulShutdown(target, opts = {}) {
       } catch (err) {
         console.error(`[mcp-utils] error during graceful shutdown on ${signal}: ${err instanceof Error ? err.message : String(err)}`);
       } finally {
+        if (timer !== void 0)
+          clearTimeout(timer);
         if (shouldExit)
-          process.exit(0);
+          exitOnce();
       }
     })();
   };
@@ -34593,6 +34644,8 @@ function runMcp(opts) {
 }
 
 // ../../node_modules/@chrischall/mcp-utils/dist/config/index.js
+import { homedir } from "node:os";
+import { isAbsolute, join, resolve } from "node:path";
 var PLACEHOLDER_RE = /^\$\{[^}]*\}$/;
 function readEnvVar(key, opts = {}) {
   const env = opts.env ?? process.env;
@@ -34619,6 +34672,50 @@ function parseBoolEnv(key, opts = {}) {
     return false;
   return fallback;
 }
+function expandPath(p) {
+  let expanded = p;
+  if (p === "~") {
+    expanded = homedir();
+  } else if (p.startsWith("~/")) {
+    expanded = join(homedir(), p.slice(2));
+  }
+  return isAbsolute(expanded) ? expanded : resolve(expanded);
+}
+
+// ../../node_modules/@chrischall/mcp-utils/dist/fs/confine.js
+import { existsSync, realpathSync } from "node:fs";
+import { dirname, isAbsolute as isAbsolute2, relative, resolve as resolve2, sep } from "node:path";
+function isInside(root, target) {
+  const rel = relative(root, target);
+  return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute2(rel);
+}
+function realPathAllowingMissing(p) {
+  const abs = resolve2(p);
+  let existing = abs;
+  const tail = [];
+  while (!existsSync(existing)) {
+    const parent = dirname(existing);
+    if (parent === existing)
+      break;
+    tail.unshift(existing.slice(parent.length).replace(/^[/\\]+/, ""));
+    existing = parent;
+  }
+  let real;
+  try {
+    real = realpathSync(existing);
+  } catch {
+    real = existing;
+  }
+  return tail.length > 0 ? resolve2(real, ...tail) : real;
+}
+function assertPathWithinRoots(path, roots) {
+  const target = realPathAllowingMissing(expandPath(path));
+  for (const root of roots) {
+    if (isInside(realPathAllowingMissing(expandPath(root)), target))
+      return target;
+  }
+  throw new Error(`Path is outside the allowed directories: ${path}`);
+}
 
 // ../../node_modules/@chrischall/mcp-utils/dist/zod/index.js
 var PositiveInt = external_exports.number().int().positive();
@@ -34640,7 +34737,7 @@ var pageSchema = {
 };
 
 // ../gogcli-mcp/src/runner.ts
-import { delimiter, join } from "node:path";
+import { delimiter, join as join2 } from "node:path";
 
 // ../gogcli-mcp/src/timestamps.ts
 var DEFAULT_DISPLAY_TZ = "America/New_York";
@@ -34841,9 +34938,48 @@ function normalizeTimestamps(text, tz = displayTimeZone(), naiveTz = naiveSource
   return JSON.stringify(parsed, null, detectIndent(text));
 }
 
+// ../gogcli-mcp/src/arg-guard.ts
+var FORBIDDEN_LONG_FLAG = /^--(readonly|enable-commands|enable-commands-exact|disable-commands|access-token|home|account|acct|client|gmail-no-send|no-input|non-interactive|noninteractive)(=|$)/i;
+var SHORT_ACCOUNT_CLUSTER = /^-(?!-)[A-Za-z]*a/;
+function forbiddenArgReason(arg) {
+  if (arg === "--") {
+    return 'The argument "--" is not allowed: it ends flag parsing and would disable safety flags appended after it.';
+  }
+  const match = FORBIDDEN_LONG_FLAG.exec(arg);
+  if (match) {
+    return `The flag ${arg} is not allowed here: --${match[1].toLowerCase()} is a safety/credential control set by the server operator, not a per-call option.`;
+  }
+  if (SHORT_ACCOUNT_CLUSTER.test(arg)) {
+    return `The flag ${arg} is not allowed here: -a selects the account. Use the tool's account parameter instead.`;
+  }
+  return void 0;
+}
+function assertSafeForwardedArgs(args) {
+  for (const arg of args) {
+    const reason = forbiddenArgReason(arg);
+    if (reason) throw new Error(reason);
+  }
+}
+var SUBCOMMAND_SHAPE = /^[a-z][a-z0-9-]*$/;
+function assertSafeSubcommand(subcommand) {
+  if (!SUBCOMMAND_SHAPE.test(subcommand)) {
+    throw new Error(
+      `Invalid subcommand ${JSON.stringify(subcommand)}: pass a single gog subcommand name such as "list" or "mark-read", and put its arguments in args.`
+    );
+  }
+}
+
+// ../gogcli-mcp/src/argv.ts
+function pos(value) {
+  return { kind: "positional", value };
+}
+function isGogPositional(arg) {
+  return typeof arg === "object" && arg !== null && arg.kind === "positional";
+}
+
 // ../gogcli-mcp/src/runner.ts
 function isGogFileArg(arg) {
-  return typeof arg !== "string";
+  return typeof arg !== "string" && arg.kind === "file";
 }
 var TIMEOUT_MS = 3e4;
 function readonlyEnvEnabled() {
@@ -34927,8 +35063,8 @@ function formatTimeout(ms) {
 }
 async function spawnWithTempFiles(args, opts) {
   const { mkdtemp, mkdir, writeFile, rm } = await import("node:fs/promises");
-  const { tmpdir } = await import("node:os");
-  const dir = await mkdtemp(join(tmpdir(), "gogcli-mcp-"));
+  const { tmpdir: tmpdir2 } = await import("node:os");
+  const dir = await mkdtemp(join2(tmpdir2(), "gogcli-mcp-"));
   try {
     const argv = [];
     let seq = 0;
@@ -34937,10 +35073,10 @@ async function spawnWithTempFiles(args, opts) {
         argv.push(arg);
         continue;
       }
-      const sub = join(dir, String(seq));
+      const sub = join2(dir, String(seq));
       seq += 1;
       await mkdir(sub, { recursive: true, mode: 448 });
-      const path = join(sub, arg.filename ?? `${arg.flag}.${arg.ext ?? "txt"}`);
+      const path = join2(sub, arg.filename ?? `${arg.flag}.${arg.ext ?? "txt"}`);
       const data = arg.encoding === "base64" ? Buffer.from(arg.contents, "base64") : Buffer.from(arg.contents, "utf8");
       await writeFile(path, data, { mode: 384 });
       argv.push(arg.positional ? path : `--${arg.flag}=${path}`);
@@ -34958,10 +35094,10 @@ function spawnExecutor(args, opts) {
   return spawnGog(args, opts);
 }
 async function spawnGog(fullArgs, opts) {
-  const { timeout, interactive = false, spawner, binary = false } = opts;
+  const { timeout, interactive = false, spawner, binary = false, maxOutputBytes } = opts;
   const spawn = spawner ?? (await import("node:child_process")).spawn;
   const effectiveTimeout = timeout ?? TIMEOUT_MS;
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve4, reject) => {
     const childEnv = { ...sanitizedEnv(), GOG_TIMEZONE: naiveSourceTimeZone(), PATH: augmentedPath() };
     const child = spawn(readEnvVar("GOG_PATH") ?? "gog", fullArgs, { env: childEnv });
     const stdoutChunks = [];
@@ -34979,7 +35115,17 @@ async function spawnGog(fullArgs, opts) {
       child.kill();
       reject(new Error(`gog timed out after ${formatTimeout(effectiveTimeout)}`));
     }, effectiveTimeout);
+    let stdoutBytes = 0;
     child.stdout.on("data", (chunk) => {
+      if (settled) return;
+      stdoutBytes += chunk.length;
+      if (maxOutputBytes !== void 0 && stdoutBytes > maxOutputBytes) {
+        settled = true;
+        stopWatching();
+        child.kill();
+        reject(new Error(`gog output exceeded the limit: more than ${maxOutputBytes} bytes`));
+        return;
+      }
       stdoutChunks.push(chunk);
     });
     child.stderr.on("data", (chunk) => {
@@ -34996,14 +35142,14 @@ async function spawnGog(fullArgs, opts) {
       const stderr = Buffer.concat(stderrChunks).toString().trim();
       if (code === 0) {
         if (binary) {
-          resolve(Buffer.concat(stdoutChunks).toString("base64"));
+          resolve4(Buffer.concat(stdoutChunks).toString("base64"));
           return;
         }
         const stdout = Buffer.concat(stdoutChunks).toString();
         if (interactive && stderr) {
-          resolve(stdout + "\n" + stderr);
+          resolve4(stdout + "\n" + stderr);
         } else {
-          resolve(stdout);
+          resolve4(stdout);
         }
       } else {
         reject(new Error(stderr || `gog exited with code ${code}`));
@@ -35023,7 +35169,33 @@ async function spawnGog(fullArgs, opts) {
     });
   });
 }
+function placePositionals(args) {
+  const flags = [];
+  const positionals = [];
+  let afterSeparator = false;
+  for (const arg of args) {
+    if (arg === "--") {
+      afterSeparator = true;
+    } else if (isGogPositional(arg)) {
+      positionals.push(arg.value);
+    } else if (afterSeparator || isGogFileArg(arg) && arg.positional) {
+      positionals.push(arg);
+    } else {
+      flags.push(arg);
+    }
+  }
+  return { flags, positionals };
+}
+function assertNoSafetyOverrides(flags) {
+  for (const arg of flags) {
+    if (typeof arg !== "string") continue;
+    const reason = forbiddenArgReason(arg);
+    if (reason) throw new Error(reason);
+  }
+}
 function assembleArgs(args, opts) {
+  const { flags, positionals } = placePositionals(args);
+  assertNoSafetyOverrides(flags);
   const effectiveAccount = opts.account ?? readEnvVar("GOG_ACCOUNT");
   const fullArgs = ["--json", "--color=never"];
   if (!opts.interactive) {
@@ -35032,17 +35204,21 @@ function assembleArgs(args, opts) {
   if (opts.readonly || readonlyEnvEnabled()) {
     fullArgs.push("--readonly");
   }
+  if (opts.gmailNoSend) {
+    fullArgs.push("--gmail-no-send");
+  }
   if (effectiveAccount) {
     fullArgs.push("--account", effectiveAccount);
   }
-  fullArgs.push(...args);
+  fullArgs.push(...flags);
+  if (positionals.length > 0) fullArgs.push("--", ...positionals);
   return fullArgs;
 }
 async function run(args, options = {}) {
-  const { account, spawner, interactive = false, timeout, readonly: readonly2 = false, redactMode = "full", opaqueFields } = options;
+  const { account, spawner, interactive = false, timeout, readonly: readonly2 = false, redactMode = "full", opaqueFields, gmailNoSend = false } = options;
   const base = redactMode === "tokens" ? redactGoogleTokens : redactSecrets2;
   const redact = opaqueFields?.length ? (text) => redactPreservingOpaqueFields(text, opaqueFields, base) : base;
-  const fullArgs = assembleArgs(args, { account, interactive, readonly: readonly2 });
+  const fullArgs = assembleArgs(args, { account, interactive, readonly: readonly2, gmailNoSend });
   try {
     return redact(await spawnExecutor(fullArgs, { timeout, interactive, spawner }));
   } catch (err) {
@@ -35070,6 +35246,107 @@ function stripConsumedPageToken(text) {
   return JSON.stringify(obj, null, detectIndent2(text));
 }
 
+// ../gogcli-mcp/src/file-roots.ts
+import { homedir as homedir2 } from "node:os";
+import { delimiter as delimiter2, join as join4 } from "node:path";
+
+// ../gogcli-mcp/src/attachment-root.ts
+import { tmpdir, userInfo } from "node:os";
+import { dirname as dirname2, join as join3, relative as relative2, resolve as resolve3, isAbsolute as isAbsolute3, sep as sep2 } from "node:path";
+var ATTACHMENT_DOWNLOAD_ROOT = join3(tmpdir(), `gogcli-mcp-attachments-${userInfo().uid}`);
+var ATTACHMENT_TTL_MS = 24 * 60 * 60 * 1e3;
+
+// ../gogcli-mcp/src/file-roots.ts
+var FILE_ROOTS_ENV = "GOG_FILE_ROOTS";
+function defaultFileRoot() {
+  return join4(homedir2(), "gogcli-mcp-files");
+}
+function fileRoots() {
+  const raw = readEnvVar(FILE_ROOTS_ENV);
+  const roots = (raw ?? "").split(delimiter2).map((r) => r.trim()).filter(Boolean);
+  return roots.length > 0 ? roots : [defaultFileRoot()];
+}
+function confinePath(path, param, opts = {}) {
+  if (opts.allowDash && path === "-") return path;
+  const roots = [...fileRoots(), ATTACHMENT_DOWNLOAD_ROOT];
+  try {
+    assertPathWithinRoots(path, roots);
+  } catch {
+    throw new Error(
+      `${param} ${JSON.stringify(path)} is outside the directories this server may read or write (${roots.join(", ")}). Put the file in one of them, or ask the server operator to widen ${FILE_ROOTS_ENV}.`
+    );
+  }
+  return path;
+}
+
+// ../gogcli-mcp/src/run-path-guard.ts
+var POSITIONAL_PATH_SUBCOMMANDS = {
+  appscript: { pull: "gog_appscript_pull" },
+  drive: { upload: "gog_drive_upload", sync: "gog_drive_sync_push" },
+  gmail: { import: "gog_gmail_import" },
+  slides: {
+    "add-slide": "gog_slides_add_slide",
+    "insert-image": "gog_slides_insert_image",
+    "replace-slide": "gog_slides_replace_slide"
+  }
+};
+var PATH_FLAGS = /* @__PURE__ */ new Set(["out", "output", "out-dir", "output-dir", "dir", "worker-dir", "attach", "file", "key", "cert", "replacements"]);
+var ID_FLAGS = {
+  drive: /* @__PURE__ */ new Set(["file", "filter-file"])
+};
+var EXEC_FLAGS = /* @__PURE__ */ new Set(["on-change", "on-new", "mmdc"]);
+var SHORT_PATH_CLUSTER = /^-(?!-)[A-Za-z]*[of]/;
+var LONG_FLAG = /^--([A-Za-z0-9][A-Za-z0-9-]*)(?:=([\s\S]*))?$/;
+function isPathFlag(service, name) {
+  if (ID_FLAGS[service]?.has(name)) return false;
+  return PATH_FLAGS.has(name) || name.endsWith("-file");
+}
+function confineFlagValue(flag, value) {
+  if (value === "-") return;
+  confinePath(value, flag);
+  for (const part of value.split(",")) {
+    if (part !== "" && part !== "-") confinePath(part, flag);
+  }
+}
+function positionalPathTool(service, subcommand) {
+  return POSITIONAL_PATH_SUBCOMMANDS[service]?.[subcommand];
+}
+function assertRunPathsConfined(service, subcommand, args) {
+  const dedicated = positionalPathTool(service, subcommand);
+  if (dedicated) {
+    throw new Error(
+      `gog ${service} ${subcommand} reads or writes a local path given as a positional argument, so it is not available through gog_${service}_run. Use ${dedicated}, which confines the path to GOG_FILE_ROOTS.`
+    );
+  }
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (SHORT_PATH_CLUSTER.test(arg)) {
+      throw new Error(
+        `The flag ${arg} is not allowed here: spell a path flag out as --out or --file (e.g. --out=<path>) so its path can be checked against GOG_FILE_ROOTS.`
+      );
+    }
+    const match = LONG_FLAG.exec(arg);
+    if (!match) continue;
+    const name = match[1].toLowerCase();
+    if (EXEC_FLAGS.has(name)) {
+      throw new Error(`The flag --${name} is not allowed here: it runs a local program chosen by the caller.`);
+    }
+    const isJson = name.endsWith("-json");
+    if (!isJson && !isPathFlag(service, name)) continue;
+    let value = match[2];
+    if (value === void 0) {
+      value = args[i + 1];
+      if (value === void 0) continue;
+      i++;
+    }
+    if (isJson) {
+      if (value.startsWith("@")) confineFlagValue(`--${name}`, value.slice(1));
+      continue;
+    }
+    confineFlagValue(`--${name}`, value);
+  }
+}
+
 // ../gogcli-mcp/src/tools/utils.ts
 var PAYLOAD_INLINE_MAX = 4096;
 function payloadArg(inlineFlag, fileFlag, value, ext) {
@@ -35118,9 +35395,17 @@ var paginationParams = {
   all: external_exports.boolean().optional().describe("Fetch all pages")
 };
 function registerRunTool(server, options) {
-  const { service, examples, omitAccount = false, note } = options;
+  const { service, examples, omitAccount = false, note, allowedSubcommands, vet, gmailNoSend = false } = options;
+  for (const [, example] of examples.matchAll(/"([^"]+)"/g)) {
+    const refused = allowedSubcommands && !allowedSubcommands.includes(example) || vet?.(example, []) || positionalPathTool(service, example);
+    if (refused) {
+      throw new Error(`gog_${service}_run example "${example}" is refused by the tool itself; list a subcommand it runs.`);
+    }
+  }
   const baseDescription = `Run any gog ${service} subcommand not covered by the other tools. Run \`gog ${service} --help\` for the full list of subcommands, or \`gog ${service} <subcommand> --help\` for flags on a specific subcommand.`;
-  const description = note ? `${baseDescription} ${note}` : baseDescription;
+  const restriction = allowedSubcommands ? ` Only these subcommands are available: ${allowedSubcommands.join(", ")}.` : "";
+  const safety = ' Flags that override server safety controls (--readonly, --enable-commands, --disable-commands, --account, --access-token, --home, --client, --gmail-no-send, --no-input) and a bare "--" are refused. Local file paths (--out, --out-dir, --attach, --file, --*-file, @file JSON) must be inside GOG_FILE_ROOTS; subcommands that take a local path positionally (e.g. drive upload) are refused in favour of their dedicated tools.';
+  const description = `${baseDescription}${restriction}${safety}${note ? ` ${note}` : ""}`;
   const inputSchema = {
     subcommand: external_exports.string().describe(`The gog ${service} subcommand to run, e.g. ${examples}`),
     args: external_exports.array(external_exports.string()).describe("Additional positional args and flags")
@@ -35134,7 +35419,21 @@ function registerRunTool(server, options) {
     inputSchema: external_exports.object(inputSchema)
   }, async (rawArgs) => {
     const { subcommand, args, account } = rawArgs;
-    return runOrDiagnose([service, subcommand, ...args], { account });
+    try {
+      assertSafeSubcommand(subcommand);
+      assertSafeForwardedArgs(args);
+      if (allowedSubcommands && !allowedSubcommands.includes(subcommand)) {
+        throw new Error(
+          `gog ${service} ${subcommand} is not available through gog_${service}_run. Allowed: ${allowedSubcommands.join(", ")}.`
+        );
+      }
+      const refusal = vet?.(subcommand, args);
+      if (refusal) throw new Error(refusal);
+      assertRunPathsConfined(service, subcommand, args);
+    } catch (err) {
+      return errorResult(errorText(err));
+    }
+    return runOrDiagnose([service, subcommand, ...args], gmailNoSend ? { account, gmailNoSend } : { account });
   });
 }
 function errorText(err) {
@@ -35256,6 +35555,7 @@ function formatAuthHealth(raw, now) {
 }
 
 // ../gogcli-mcp/src/tools/auth.ts
+var AUTH_RUN_SUBCOMMANDS = ["list", "status", "services", "remove", "alias"];
 function registerAuthToolsWith(server, defaultServices) {
   const servicesDescribe = `Services to authorize: "all" or comma-separated list (e.g. "sheets,gmail,calendar"). Default: "${defaultServices}". Prefer the narrowest set you need \u2014 requesting a service whose Google API is not enabled on the OAuth client's project makes Google reject the WHOLE request with invalid_scope.`;
   const extraScopesDescribe = "Additional raw OAuth scope URIs to request, comma-separated, on top of the ones `services` implies. Use for scopes no service covers \u2014 e.g. https://www.googleapis.com/auth/bigquery.readonly, required before gog_sheets_datasource_* can read BigQuery-backed Connected Sheets. Leave unset otherwise: an extra scope whose API is not enabled on the OAuth client project makes Google reject the WHOLE authorization with invalid_scope.";
@@ -35313,7 +35613,7 @@ function registerAuthToolsWith(server, defaultServices) {
     })
   }, async ({ email: email3, services = defaultServices, extraScopes }) => {
     try {
-      const args = ["auth", "add", email3, "--services", services];
+      const args = ["auth", "add", pos(email3), "--services", services];
       if (extraScopes) args.push(`--extra-scopes=${extraScopes}`, "--force-consent");
       return rawTextResult(await run(args, {
         interactive: true,
@@ -35333,7 +35633,7 @@ function registerAuthToolsWith(server, defaultServices) {
     })
   }, async ({ email: email3, services = defaultServices, extraScopes }) => {
     try {
-      const args = ["auth", "add", email3, "--remote", "--step", "1", "--services", services, "--force-consent"];
+      const args = ["auth", "add", pos(email3), "--remote", "--step", "1", "--services", services, "--force-consent"];
       if (extraScopes) args.push(`--extra-scopes=${extraScopes}`);
       return rawTextResult(await run(args, { redactMode: "tokens" }));
     } catch (err) {
@@ -35360,7 +35660,7 @@ function registerAuthToolsWith(server, defaultServices) {
       const args = [
         "auth",
         "add",
-        email3,
+        pos(email3),
         "--remote",
         "--step",
         "2",
@@ -35380,6 +35680,7 @@ function registerAuthToolsWith(server, defaultServices) {
     service: "auth",
     examples: '"remove", "alias", "list"',
     omitAccount: true,
+    allowedSubcommands: AUTH_RUN_SUBCOMMANDS,
     note: "For browser-based authorization, use gog_auth_add instead."
   });
 }
@@ -35429,7 +35730,7 @@ var replySchema = {
   remove: external_exports.array(external_exports.string()).optional().describe("Remove these recipients from all fields (repeatable) \u2014 e.g. to drop someone from a reply-all."),
   subject: external_exports.string().optional().describe('Override reply subject (default: "Re: <original>"). A changed subject starts a NEW Gmail thread.'),
   noQuote: external_exports.boolean().optional().describe("Do not include the original message quoted below the reply (default: the original is quoted)"),
-  attach: external_exports.array(external_exports.string()).optional().describe(`File paths to attach (repeatable), resolved ON THE GOG SERVER's filesystem \u2014 NOT this client's. Only usable when gog runs on the same machine you do (local stdio); on a hosted deployment (e.g. mcp-host) these paths do not exist and the call fails with "no such file or directory" \u2014 use attachInline there. Read on the server, base64-encoded with a MIME type inferred from the extension.`),
+  attach: external_exports.array(external_exports.string()).optional().describe(`File paths to attach (repeatable), resolved ON THE GOG SERVER's filesystem \u2014 NOT this client's. Only usable when gog runs on the same machine you do (local stdio); on a hosted deployment (e.g. mcp-host) these paths do not exist and the call fails with "no such file or directory" \u2014 use attachInline there. Read on the server, base64-encoded with a MIME type inferred from the extension. Must be inside the server's GOG_FILE_ROOTS directories (default ~/gogcli-mcp-files).`),
   attachInline: attachInlineParam,
   from: external_exports.string().optional().describe("Send from this email address (must be a verified send-as alias)"),
   autoFromAddressedAlias: external_exports.boolean().optional().describe("When from is omitted, send from the verified send-as alias the original message was addressed TO, instead of the account's primary address \u2014 so a reply to mail sent to an alias goes back out from that alias. Ignored when from is set."),
@@ -35452,8 +35753,9 @@ var failIfNotEmptyParam = external_exports.boolean().optional().describe(
 // ../gogcli-mcp/src/tools/slides.ts
 function registerSlidesTools(server) {
   server.registerTool("gog_slides_export", {
-    description: "Export a Google Slides presentation to a local file (pdf or pptx).",
-    annotations: { readOnlyHint: true },
+    description: "Export a Google Slides presentation to a local file (pdf or pptx). The out path must be inside the server's GOG_FILE_ROOTS directories.",
+    // Writes a file on the gog host and can overwrite one: not read-only.
+    annotations: { readOnlyHint: false, destructiveHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       out: external_exports.string().optional().describe("Output file path"),
@@ -35462,7 +35764,8 @@ function registerSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, out, format, overwrite, account }) => {
-    const args = ["slides", "export", presentationId];
+    if (out) confinePath(out, "out");
+    const args = ["slides", "export", pos(presentationId)];
     if (out) args.push(`--out=${out}`);
     if (format) args.push(`--format=${format}`);
     if (overwrite) args.push("--overwrite");
@@ -35476,7 +35779,7 @@ function registerSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, account }) => {
-    return runOrDiagnose(["slides", "info", presentationId], { account });
+    return runOrDiagnose(["slides", "info", pos(presentationId)], { account });
   });
   server.registerTool("gog_slides_create", {
     description: "Create a new Google Slides presentation, optionally in a folder or copying from a template.",
@@ -35488,7 +35791,7 @@ function registerSlidesTools(server) {
       account: accountParam
     })
   }, async ({ title, parent, template, account }) => {
-    const args = ["slides", "create", title];
+    const args = ["slides", "create", pos(title)];
     if (parent) args.push(`--parent=${parent}`);
     if (template) args.push(`--template=${template}`);
     return runOrDiagnose(args, { account });
@@ -35503,7 +35806,7 @@ function registerSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, title, parent, account }) => {
-    const args = ["slides", "copy", presentationId, title];
+    const args = ["slides", "copy", pos(presentationId), pos(title)];
     if (parent) args.push(`--parent=${parent}`);
     return runOrDiagnose(args, { account });
   });
@@ -35515,7 +35818,7 @@ function registerSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, account }) => {
-    return runOrDiagnose(["slides", "list-slides", presentationId], { account });
+    return runOrDiagnose(["slides", "list-slides", pos(presentationId)], { account });
   });
   server.registerTool("gog_slides_read_slide", {
     description: "Read the content of a slide (text, shapes, speaker notes). Set detail=true to also include normalized element geometry, styled text runs, paragraphs, table-cell content, and image source URLs.",
@@ -35527,18 +35830,18 @@ function registerSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, detail, account }) => {
-    const args = ["slides", "read-slide", presentationId, slideId];
+    const args = ["slides", "read-slide", pos(presentationId), pos(slideId)];
     if (detail) args.push("--detail");
     return runOrDiagnose(args, { account });
   });
-  registerRunTool(server, { service: "slides", examples: '"add-slide", "delete-slide", "update-notes"' });
+  registerRunTool(server, { service: "slides", examples: '"delete-slide", "update-notes"' });
 }
 
 // ../gogcli-mcp/src/server.ts
-var VERSION = true ? "4.2.4" : "0.0.0";
+var VERSION = true ? "4.3.0" : "0.0.0";
 
 // ../gogcli-mcp/src/bootstrap-auth.ts
-import { join as join2 } from "node:path";
+import { join as join5 } from "node:path";
 var AUTH_BOOTSTRAP_MARKER = "auth-bootstrap.sha256";
 var VARS = ["GOG_CLIENT_ID", "GOG_CLIENT_SECRET", "GOG_REFRESH_TOKEN", "GOG_ACCOUNT"];
 var log = (line) => {
@@ -35575,8 +35878,8 @@ async function bootstrapGogAuth(env = process.env, options = {}) {
     const { createHash } = await import("node:crypto");
     const { mkdir, readFile, writeFile, chmod } = await import("node:fs/promises");
     const home = options.home ?? (await import("node:os")).homedir();
-    const dir = join2(home, ".gogcli-mcp");
-    const marker = join2(dir, AUTH_BOOTSTRAP_MARKER);
+    const dir = join5(home, ".gogcli-mcp");
+    const marker = join5(dir, AUTH_BOOTSTRAP_MARKER);
     const fingerprint = createHash("sha256").update(values.join("\0")).digest("hex");
     const previous = await readFile(marker, "utf8").catch(() => void 0);
     if (previous === fingerprint && await accountListed(account, spawner)) return "present";
@@ -35623,7 +35926,8 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ title, content, contentFile, parent, debug, account }) => {
-    const args = ["slides", "create-from-markdown", title];
+    if (contentFile) confinePath(contentFile, "contentFile");
+    const args = ["slides", "create-from-markdown", pos(title)];
     if (content) args.push(payloadArg("content", "content-file", content, "md"));
     if (contentFile) args.push(`--content-file=${contentFile}`);
     if (parent) args.push(`--parent=${parent}`);
@@ -35643,7 +35947,8 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ templateId, title, replacements, replacementsFile, parent, exact, account }) => {
-    const args = ["slides", "create-from-template", templateId, title];
+    if (replacementsFile) confinePath(replacementsFile, "replacementsFile");
+    const args = ["slides", "create-from-template", pos(templateId), pos(title)];
     if (replacements) {
       for (const [k, v] of Object.entries(replacements)) {
         args.push(`--replace=${k}=${v}`);
@@ -35666,7 +35971,9 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, image, notes, notesFile, before, account }) => {
-    const args = ["slides", "add-slide", presentationId, image];
+    confinePath(image, "image");
+    if (notesFile) confinePath(notesFile, "notesFile");
+    const args = ["slides", "add-slide", pos(presentationId), pos(image)];
     if (notes) args.push(payloadArg("notes", "notes-file", notes));
     if (notesFile) args.push(`--notes-file=${notesFile}`);
     if (before) args.push(`--before=${before}`);
@@ -35688,8 +35995,9 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, image, url: url2, width, height, x, y, unit, account }) => {
-    const args = ["slides", "insert-image", presentationId, slideId];
-    if (image) args.push(image);
+    if (image) confinePath(image, "image");
+    const args = ["slides", "insert-image", pos(presentationId), pos(slideId)];
+    if (image) args.push(pos(image));
     args.push(`--width=${width}`);
     if (url2) args.push(`--url=${url2}`);
     if (height !== void 0) args.push(`--height=${height}`);
@@ -35707,7 +36015,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, account }) => {
-    return runOrDiagnose(["slides", "delete-slide", presentationId, slideId, "--force"], { account });
+    return runOrDiagnose(["slides", "delete-slide", pos(presentationId), pos(slideId), "--force"], { account });
   });
   server.registerTool("gog_slides_skip_slide", {
     description: "Skip a slide during presentation \u2014 it stays in the deck at its current position but is not shown when presenting (and is left out of a PDF export). Use this instead of gog_slides_delete_slide when a slide should be omitted from a talk without losing it. Reverse with gog_slides_unskip_slide; gog_slides_list_slides reports which slides are skipped.",
@@ -35718,7 +36026,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, account }) => {
-    return runOrDiagnose(["slides", "skip-slide", presentationId, slideId], { account });
+    return runOrDiagnose(["slides", "skip-slide", pos(presentationId), pos(slideId)], { account });
   });
   server.registerTool("gog_slides_unskip_slide", {
     description: "Include a previously skipped slide again when the deck is presented. Safe to call on a slide that was never skipped.",
@@ -35729,7 +36037,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, account }) => {
-    return runOrDiagnose(["slides", "unskip-slide", presentationId, slideId], { account });
+    return runOrDiagnose(["slides", "unskip-slide", pos(presentationId), pos(slideId)], { account });
   });
   server.registerTool("gog_slides_update_notes", {
     description: "Update the speaker notes on a slide (inline text or from a file).",
@@ -35742,7 +36050,8 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, notes, notesFile, account }) => {
-    const args = ["slides", "update-notes", presentationId, slideId];
+    if (notesFile) confinePath(notesFile, "notesFile");
+    const args = ["slides", "update-notes", pos(presentationId), pos(slideId)];
     if (notes) args.push(payloadArg("notes", "notes-file", notes));
     if (notesFile) args.push(`--notes-file=${notesFile}`);
     return runOrDiagnose(args, { account });
@@ -35760,8 +36069,10 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, image, url: url2, notes, notesFile, account }) => {
-    const args = ["slides", "replace-slide", presentationId, slideId];
-    if (image) args.push(image);
+    if (image) confinePath(image, "image");
+    if (notesFile) confinePath(notesFile, "notesFile");
+    const args = ["slides", "replace-slide", pos(presentationId), pos(slideId)];
+    if (image) args.push(pos(image));
     if (url2) args.push(`--url=${url2}`);
     if (notes) args.push(payloadArg("notes", "notes-file", notes));
     if (notesFile) args.push(`--notes-file=${notesFile}`);
@@ -35776,7 +36087,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, pretty, account }) => {
-    const args = ["slides", "raw", presentationId];
+    const args = ["slides", "raw", pos(presentationId)];
     if (pretty) args.push("--pretty");
     return runOrDiagnose(args, { account, lossless: true });
   });
@@ -35794,7 +36105,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, text, page, occurrence, all, matchCase, failEmpty, account }) => {
-    const args = ["slides", "locate", presentationId, text];
+    const args = ["slides", "locate", pos(presentationId), pos(text)];
     if (page) args.push(`--page=${page}`);
     if (occurrence !== void 0) args.push(`--occurrence=${occurrence}`);
     if (all) args.push("--all");
@@ -35804,7 +36115,8 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_thumbnail", {
     description: "Get or download a rendered thumbnail image for a single slide.",
-    annotations: { readOnlyHint: true },
+    // Writes a file on the gog host and can overwrite one: not read-only (audit SEC-4).
+    annotations: { readOnlyHint: false, destructiveHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID"),
@@ -35815,7 +36127,8 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, format, size, out, overwrite, account }) => {
-    const args = ["slides", "thumbnail", presentationId, slideId];
+    if (out) confinePath(out, "out");
+    const args = ["slides", "thumbnail", pos(presentationId), pos(slideId)];
     if (format) args.push(`--format=${format}`);
     if (size) args.push(`--size=${size}`);
     if (out) args.push(`--out=${out}`);
@@ -35833,7 +36146,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, layout, layoutId, index, account }) => {
-    const args = ["slides", "new-slide", presentationId];
+    const args = ["slides", "new-slide", pos(presentationId)];
     if (layout) args.push(`--layout=${layout}`);
     if (layoutId) args.push(`--layout-id=${layoutId}`);
     if (index !== void 0) args.push(`--index=${index}`);
@@ -35849,7 +36162,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, toIndex, account }) => {
-    const args = ["slides", "duplicate-slide", presentationId, slideId];
+    const args = ["slides", "duplicate-slide", pos(presentationId), pos(slideId)];
     if (toIndex !== void 0) args.push(`--to-index=${toIndex}`);
     return runOrDiagnose(args, { account });
   });
@@ -35863,7 +36176,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, toIndex, account }) => {
-    return runOrDiagnose(["slides", "move-slide", presentationId, slideId, `--to-index=${toIndex}`], { account });
+    return runOrDiagnose(["slides", "move-slide", pos(presentationId), pos(slideId), `--to-index=${toIndex}`], { account });
   });
   server.registerTool("gog_slides_insert_text", {
     description: "Insert text into an existing page element (shape or table cell) by object ID. Target a table cell with zero-based row + col. Use replace=true to clear the element's existing text first.",
@@ -35879,7 +36192,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, text, row, col, insertionIndex, replace, account }) => {
-    const args = ["slides", "insert-text", presentationId, objectId, text];
+    const args = ["slides", "insert-text", pos(presentationId), pos(objectId), pos(text)];
     if (row !== void 0) args.push(`--row=${row}`);
     if (col !== void 0) args.push(`--col=${col}`);
     if (insertionIndex !== void 0) args.push(`--insertion-index=${insertionIndex}`);
@@ -35905,7 +36218,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, range, font, size, textColor, bold, noBold, italic, noItalic, underline, noUnderline, account }) => {
-    const args = ["slides", "style-text", presentationId, objectId, `--range=${range}`];
+    const args = ["slides", "style-text", pos(presentationId), pos(objectId), `--range=${range}`];
     if (font) args.push(`--font=${font}`);
     if (size !== void 0) args.push(`--size=${size}`);
     if (textColor) args.push(`--text-color=${textColor}`);
@@ -35929,7 +36242,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, range, url: url2, clear, account }) => {
-    const args = ["slides", "link", presentationId, objectId, `--range=${range}`];
+    const args = ["slides", "link", pos(presentationId), pos(objectId), `--range=${range}`];
     if (url2) args.push(`--url=${url2}`);
     if (clear) args.push("--clear");
     return runOrDiagnose(args, { account });
@@ -35947,7 +36260,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, range, on, off, preset, account }) => {
-    const args = ["slides", "bullets", presentationId, objectId, `--range=${range}`];
+    const args = ["slides", "bullets", pos(presentationId), pos(objectId), `--range=${range}`];
     if (on) args.push("--on");
     if (off) args.push("--off");
     if (preset) args.push(`--preset=${preset}`);
@@ -35967,7 +36280,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, find, replacement, object: object2, pages, all, matchCase, account }) => {
-    const args = ["slides", "replace-text", presentationId, find, replacement];
+    const args = ["slides", "replace-text", pos(presentationId), pos(find), pos(replacement)];
     if (object2) args.push(`--object=${object2}`);
     if (pages) for (const p of pages) args.push(`--page=${p}`);
     if (all) args.push("--all");
@@ -35990,7 +36303,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, type, x, y, width, height, unit, objectId, account }) => {
-    const args = ["slides", "element", "create-shape", presentationId, slideId];
+    const args = ["slides", "element", "create-shape", pos(presentationId), pos(slideId)];
     if (type) args.push(`--type=${type}`);
     if (x !== void 0) args.push(`--x=${x}`);
     if (y !== void 0) args.push(`--y=${y}`);
@@ -36016,7 +36329,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, category, x, y, width, height, unit, objectId, account }) => {
-    const args = ["slides", "element", "create-line", presentationId, slideId];
+    const args = ["slides", "element", "create-line", pos(presentationId), pos(slideId)];
     if (category) args.push(`--category=${category}`);
     if (x !== void 0) args.push(`--x=${x}`);
     if (y !== void 0) args.push(`--y=${y}`);
@@ -36042,7 +36355,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, kind, fillColor, fillTransparent, outlineColor, outlineWeight, outlineDash, outlineTransparent, account }) => {
-    const args = ["slides", "element", "style", presentationId, objectId];
+    const args = ["slides", "element", "style", pos(presentationId), pos(objectId)];
     if (kind) args.push(`--kind=${kind}`);
     if (fillColor) args.push(`--fill-color=${fillColor}`);
     if (fillTransparent) args.push("--fill-transparent");
@@ -36070,7 +36383,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, translateX, translateY, scaleX, scaleY, shearX, shearY, rotate, applyMode, unit, account }) => {
-    const args = ["slides", "element", "transform", presentationId, objectId];
+    const args = ["slides", "element", "transform", pos(presentationId), pos(objectId)];
     if (translateX !== void 0) args.push(`--translate-x=${translateX}`);
     if (translateY !== void 0) args.push(`--translate-y=${translateY}`);
     if (scaleX !== void 0) args.push(`--scale-x=${scaleX}`);
@@ -36092,7 +36405,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, operation, account }) => {
-    return runOrDiagnose(["slides", "element", "z-order", presentationId, objectId, `--operation=${operation}`], { account });
+    return runOrDiagnose(["slides", "element", "z-order", pos(presentationId), pos(objectId), `--operation=${operation}`], { account });
   });
   server.registerTool("gog_slides_element_group", {
     description: "Group two or more page elements into a single group.",
@@ -36104,7 +36417,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectIds, groupId, account }) => {
-    const args = ["slides", "element", "group", presentationId, ...objectIds];
+    const args = ["slides", "element", "group", pos(presentationId), ...objectIds.map(pos)];
     if (groupId) args.push(`--group-id=${groupId}`);
     return runOrDiagnose(args, { account });
   });
@@ -36117,7 +36430,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, groupIds, account }) => {
-    return runOrDiagnose(["slides", "element", "ungroup", presentationId, ...groupIds], { account });
+    return runOrDiagnose(["slides", "element", "ungroup", pos(presentationId), ...groupIds.map(pos)], { account });
   });
   server.registerTool("gog_slides_element_alt_text", {
     description: "Set or clear a page element's accessibility title and/or description. Pass an empty string to clear a field.",
@@ -36130,7 +36443,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, title, description, account }) => {
-    const args = ["slides", "element", "alt-text", presentationId, objectId];
+    const args = ["slides", "element", "alt-text", pos(presentationId), pos(objectId)];
     if (title !== void 0) args.push(`--title=${title}`);
     if (description !== void 0) args.push(`--description=${description}`);
     return runOrDiagnose(args, { account });
@@ -36144,7 +36457,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, objectId, account }) => {
-    return runOrDiagnose(["slides", "element", "delete", presentationId, objectId, "--force"], { account });
+    return runOrDiagnose(["slides", "element", "delete", pos(presentationId), pos(objectId), "--force"], { account });
   });
   server.registerTool("gog_slides_table_create", {
     description: "Create an auto-sized native table on a slide with the given row and column counts.",
@@ -36158,7 +36471,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, slideId, rows, cols, objectId, account }) => {
-    const args = ["slides", "table", "create", presentationId, slideId, `--rows=${rows}`, `--cols=${cols}`];
+    const args = ["slides", "table", "create", pos(presentationId), pos(slideId), `--rows=${rows}`, `--cols=${cols}`];
     if (objectId) args.push(`--object-id=${objectId}`);
     return runOrDiagnose(args, { account });
   });
@@ -36186,7 +36499,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, col, range, fillColor, fillTransparent, contentAlign, font, size, textColor, bold, noBold, italic, noItalic, underline, noUnderline, account }) => {
-    const args = ["slides", "table", "cell", "style", presentationId, tableObjectId, `--row=${row}`, `--col=${col}`];
+    const args = ["slides", "table", "cell", "style", pos(presentationId), pos(tableObjectId), `--row=${row}`, `--col=${col}`];
     if (range) args.push(`--range=${range}`);
     if (fillColor) args.push(`--fill-color=${fillColor}`);
     if (fillTransparent) args.push("--fill-transparent");
@@ -36220,7 +36533,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, col, rowSpan, colSpan, position, borderColor, weight, dash, transparent, account }) => {
-    const args = ["slides", "table", "border", "style", presentationId, tableObjectId, `--row=${row}`, `--col=${col}`];
+    const args = ["slides", "table", "border", "style", pos(presentationId), pos(tableObjectId), `--row=${row}`, `--col=${col}`];
     if (rowSpan !== void 0) args.push(`--row-span=${rowSpan}`);
     if (colSpan !== void 0) args.push(`--col-span=${colSpan}`);
     if (position) args.push(`--position=${position}`);
@@ -36242,7 +36555,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, col, count, right, account }) => {
-    const args = ["slides", "table", "column", "insert", presentationId, tableObjectId, `--col=${col}`];
+    const args = ["slides", "table", "column", "insert", pos(presentationId), pos(tableObjectId), `--col=${col}`];
     if (count !== void 0) args.push(`--count=${count}`);
     if (right) args.push("--right");
     return runOrDiagnose(args, { account });
@@ -36257,7 +36570,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, col, account }) => {
-    return runOrDiagnose(["slides", "table", "column", "delete", presentationId, tableObjectId, `--col=${col}`, "--force"], { account });
+    return runOrDiagnose(["slides", "table", "column", "delete", pos(presentationId), pos(tableObjectId), `--col=${col}`, "--force"], { account });
   });
   server.registerTool("gog_slides_table_column_size", {
     description: "Set the width of a zero-based table column.",
@@ -36270,7 +36583,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, col, width, account }) => {
-    return runOrDiagnose(["slides", "table", "column", "size", presentationId, tableObjectId, `--col=${col}`, `--width=${width}`], { account });
+    return runOrDiagnose(["slides", "table", "column", "size", pos(presentationId), pos(tableObjectId), `--col=${col}`, `--width=${width}`], { account });
   });
   server.registerTool("gog_slides_table_row_insert", {
     description: "Insert one or more rows relative to a zero-based table row. Inserts above by default, or below with below=true.",
@@ -36284,7 +36597,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, count, below, account }) => {
-    const args = ["slides", "table", "row", "insert", presentationId, tableObjectId, `--row=${row}`];
+    const args = ["slides", "table", "row", "insert", pos(presentationId), pos(tableObjectId), `--row=${row}`];
     if (count !== void 0) args.push(`--count=${count}`);
     if (below) args.push("--below");
     return runOrDiagnose(args, { account });
@@ -36299,7 +36612,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, account }) => {
-    return runOrDiagnose(["slides", "table", "row", "delete", presentationId, tableObjectId, `--row=${row}`, "--force"], { account });
+    return runOrDiagnose(["slides", "table", "row", "delete", pos(presentationId), pos(tableObjectId), `--row=${row}`, "--force"], { account });
   });
   server.registerTool("gog_slides_table_row_size", {
     description: "Set the minimum height of a zero-based table row.",
@@ -36312,7 +36625,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, height, account }) => {
-    return runOrDiagnose(["slides", "table", "row", "size", presentationId, tableObjectId, `--row=${row}`, `--height=${height}`], { account });
+    return runOrDiagnose(["slides", "table", "row", "size", pos(presentationId), pos(tableObjectId), `--row=${row}`, `--height=${height}`], { account });
   });
   server.registerTool("gog_slides_table_merge", {
     description: "Merge a rectangular table cell range starting at a zero-based cell. Content of non-anchor cells is absorbed by the merge; use gog_slides_table_unmerge to split back.",
@@ -36327,7 +36640,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, col, rowSpan, colSpan, account }) => {
-    const args = ["slides", "table", "merge", presentationId, tableObjectId, `--row=${row}`, `--col=${col}`];
+    const args = ["slides", "table", "merge", pos(presentationId), pos(tableObjectId), `--row=${row}`, `--col=${col}`];
     if (rowSpan !== void 0) args.push(`--row-span=${rowSpan}`);
     if (colSpan !== void 0) args.push(`--col-span=${colSpan}`);
     return runOrDiagnose(args, { account });
@@ -36345,7 +36658,7 @@ function registerExtraSlidesTools(server) {
       account: accountParam
     })
   }, async ({ presentationId, tableObjectId, row, col, rowSpan, colSpan, account }) => {
-    const args = ["slides", "table", "unmerge", presentationId, tableObjectId, `--row=${row}`, `--col=${col}`];
+    const args = ["slides", "table", "unmerge", pos(presentationId), pos(tableObjectId), `--row=${row}`, `--col=${col}`];
     if (rowSpan !== void 0) args.push(`--row-span=${rowSpan}`);
     if (colSpan !== void 0) args.push(`--col-span=${colSpan}`);
     return runOrDiagnose(args, { account });