gogcli-mcp-slides 4.7.0 → 4.8.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "Extended Google Slides for Claude via gogcli — auth + full Slides support (create, edit, export, templates, markdown)",
-    "version": "4.7.0"
+    "version": "4.8.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "gogcli (Slides)",
       "source": "./",
       "description": "Extended Google Slides for Claude via gogcli — auth + full Slides support (create, edit, export, templates, markdown)",
-      "version": "4.7.0",
+      "version": "4.8.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "gogcli-mcp-slides",
   "displayName": "gogcli (Slides)",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "description": "Extended Google Slides for Claude via gogcli — auth + full Slides support (create, edit, export, templates, markdown)",
   "author": {
     "name": "Chris Hall",
@@ -21,6 +21,6 @@
     "pdf",
     "pptx"
   ],
-  "skills": "./SKILL.md",
-  "mcp": "./.mcp.json"
+  "skills": ".",
+  "mcpServers": "./.mcp.json"
 }

package/dist/index.js

@@ -19763,7 +19763,7 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
-// ../../node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs
+// ../../node_modules/@modelcontextprotocol/server/node_modules/@modelcontextprotocol/core/dist/auth-BNDyLTqp.mjs
 var LATEST_PROTOCOL_VERSION = "2025-11-25";
 var SUPPORTED_PROTOCOL_VERSIONS = [
   LATEST_PROTOCOL_VERSION,
@@ -34479,11 +34479,19 @@ var DEFAULT_MAX_REQUEST_BODY_SIZE = 4 * 1024 * 1024;
 var McpToolError = class extends Error {
   /** Actionable remediation text, when one applies. */
   hint;
+  /** The upstream HTTP status this failure came from, when known. */
+  status;
+  /** What kind of failure this is, when the thrower knows. */
+  kind;
   constructor(message, opts) {
     super(message, opts?.cause !== void 0 ? { cause: opts.cause } : void 0);
     this.name = "McpToolError";
     if (opts?.hint !== void 0)
       this.hint = opts.hint;
+    if (opts?.status !== void 0)
+      this.status = opts.status;
+    if (opts?.kind !== void 0)
+      this.kind = opts.kind;
     Object.setPrototypeOf(this, new.target.prototype);
   }
 };
@@ -34508,7 +34516,7 @@ var API_KEY_RE = new RegExp([
   // webhook signing secret (Stripe-style)
 ].map((p) => `\\b${p}`).join("|"), "g");
 var GOOGLE_OAUTH_TOKEN_RE = /(?<![A-Za-z0-9+/])(?:ya29\.|1\/\/)[A-Za-z0-9._-]{8,}/g;
-var QUERY_SECRET_RE = new RegExp(`([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig|(?:php|j)?sess(?:ion)?[_-]?id|sid|x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN})=)[^&#\\s"'<>\`]+`, "gi");
+var QUERY_SECRET_RE = new RegExp(`([?&](?:(?:access|refresh|id|auth|session|csrf|xsrf)[_-]?token|client[_-]?secret|api[_-]?secret|api[_-]?key|password|passwd|signature|token|key|sig|(?:code[_-]?)?verifier|(?:php|j)?sess(?:ion)?[_-]?id|sid|x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN})=)[^&#\\s"'<>\`]+`, "gi");
 var OAUTH_CODE_RE = /([?&]code=)(?=[^&#\s"'<>`]{16,})[^&#\s"'<>`]+/gi;
 var FORM_PASSWORD_RE = /((?:^|[\s,;:"'(\[{])(?:password|passwd)=)[^&#\s"'<>`]+/gim;
 var HEADER_SECRET_RE = new RegExp(`(\\b(?:x[-_]${HEADER_NAME_RUN}?(?:api[-_]?key|token|secret|auth)${HEADER_NAME_RUN}|api[-_]?key)\\s*:\\s*)[^\\s,;"'<>\`]+`, "gi");
@@ -34519,6 +34527,8 @@ var JSON_SECRET_KEYS = [
   "api[_-]?secret",
   "(?:x[_-])?api[_-]?key",
   "private[_-]?key",
+  "code[_-]?verifier",
+  // PKCE; a bare `verifier` key is too generic for JSON
   `x[_-]${HEADER_NAME_RUN}?(?:api[_-]?key|token|secret|auth)${HEADER_NAME_RUN}`,
   // bounded like HEADER_SECRET_RE
   "(?:proxy-)?authorization",
@@ -34549,6 +34559,11 @@ function redactSecrets(text) {
   return text.replace(BEARER_RE, "$1[REDACTED]").replace(BASIC_AUTH_RE, "$1[REDACTED]").replace(SET_COOKIE_RE, "$1$2=[REDACTED]").replace(COOKIE_HEADER_RE, (_m, prefix, pairs) => `${prefix}${pairs.replace(/=[^;,\s]*/g, "=[REDACTED]")}`).replace(API_KEY_RE, "[REDACTED]").replace(GOOGLE_OAUTH_TOKEN_RE, "[REDACTED]").replace(HEADER_SECRET_RE, "$1[REDACTED]").replace(QUERY_SECRET_RE, "$1[REDACTED]").replace(OAUTH_CODE_RE, "$1[REDACTED]").replace(FORM_PASSWORD_RE, "$1[REDACTED]").replace(AWS_SIGV4_RE, "$1[REDACTED]").replace(JSON_COOKIE_DQ_RE, redactJsonCookie('"')).replace(JSON_COOKIE_SQ_RE, redactJsonCookie("'")).replace(JSON_SECRET_DQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_SQ_RE, "$1[REDACTED]$2").replace(JSON_SECRET_NUM_RE, "$1[REDACTED]").replace(JWT_RE, "[REDACTED]");
 }
 var ERROR_REDACTION_INPUT_MAX = 64 * 1024;
+function messageOf(err) {
+  if (err instanceof Error)
+    return err.message;
+  return String(err);
+}
 
 // ../../node_modules/@chrischall/mcp-utils/dist/response/view.js
 function minifiedResult(data) {
@@ -34651,7 +34666,7 @@ function readEnvVar(key, opts = {}) {
   if (typeof raw === "string") {
     const trimmed = raw.trim();
     if (trimmed.length > 0 && trimmed !== "undefined" && trimmed !== "null" && !PLACEHOLDER_RE.test(trimmed)) {
-      return trimmed;
+      return opts.trim === false ? raw : trimmed;
     }
   }
   return opts.default;
@@ -34689,12 +34704,14 @@ var SERVER_PROTOCOL_VERSIONS = Object.freeze([
   ...SUPPORTED_PROTOCOL_VERSIONS
 ]);
 function hintResultOrRethrow(err) {
+  if (err instanceof ProtocolError && err.code === ProtocolErrorCode.UrlElicitationRequired)
+    throw err;
   if (err instanceof McpToolError && err.hint) {
     return errorResult(`${err.message}
 
 Hint: ${err.hint}`);
   }
-  throw err;
+  return errorResult(messageOf(err));
 }
 function mcpRequestFrom(args) {
   const ctx = args.at(-1);
@@ -34928,7 +34945,7 @@ var PositiveInt = external_exports.number().int().positive();
 var NonNegInt = external_exports.number().int().nonnegative();
 var NonEmptyString = external_exports.string().min(1);
 var IsoDate = external_exports.iso.date();
-var IsoTime = external_exports.string().regex(/^([01]?\d|2[0-3]):[0-5]\d$/, "must be HH:MM (24h), e.g. 19:30");
+var IsoTime = external_exports.string().regex(/^([01]?\d|2[0-3]):[0-5]\d$/, "must be HH:MM (24h), e.g. 19:30").overwrite((v) => v.padStart(5, "0"));
 var NumericIdString = external_exports.string().regex(/^\d+$/, "must be a numeric id (digits only)").describe("A numeric id string (digits only), safe to interpolate into a URL path.");
 var SafePathSegment = external_exports.string().min(1).regex(/^[^/?#\s]+$/, 'must not contain "/", "?", "#", or whitespace').refine((v) => !v.includes(".."), 'must not contain ".."').describe('A single URL path segment, safe to interpolate: no "/", "..", "?", "#", or whitespace.');
 var schemaOrigin = external_exports.string().optional().describe("Portal origin (e.g. https://<vendor>.example.co) selecting which active session to use. Optional when only one session is active.");
@@ -35619,7 +35636,7 @@ function registerRunTool(server, options) {
   }
   server.registerTool(`gog_${service}_run`, {
     description,
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object(inputSchema)
   }, async (rawArgs) => {
     const { subcommand, args, account } = rawArgs;
@@ -35765,13 +35782,13 @@ function formatAuthHealth(raw, now) {
 var spent = createSpentTokenStore();
 
 // ../gogcli-mcp/src/tools/auth.ts
-var AUTH_RUN_SUBCOMMANDS = ["list", "status", "services", "remove", "alias"];
+var AUTH_RUN_SUBCOMMANDS = ["list", "status", "services", "alias"];
 function registerAuthToolsWith(server, defaultServices) {
   const servicesDescribe = `Services to authorize: "all" or comma-separated list (e.g. "sheets,gmail,calendar"). Default: "${defaultServices}". Prefer the narrowest set you need \u2014 requesting a service whose Google API is not enabled on the OAuth client's project makes Google reject the WHOLE request with invalid_scope.`;
   const extraScopesDescribe = "Additional raw OAuth scope URIs to request, comma-separated, on top of the ones `services` implies. Use for scopes no service covers \u2014 e.g. https://www.googleapis.com/auth/bigquery.readonly, required before gog_sheets_datasource_* can read BigQuery-backed Connected Sheets. Leave unset otherwise: an extra scope whose API is not enabled on the OAuth client project makes Google reject the WHOLE authorization with invalid_scope.";
   server.registerTool("gog_auth_list", {
     description: "List the Google accounts stored in gogcli, with their scopes. This reads local configuration only \u2014 it does not contact Google and does NOT tell you whether an account still works: a signed-out account whose refresh token expired or was revoked is listed here exactly like a healthy one, scopes and all. Use gog_auth_health to check whether an account can actually authenticate.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -35782,7 +35799,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_status", {
     description: "Show gogcli auth CONFIGURATION: keyring backend, credential files, and auth setup. Despite the name this is not a health check \u2014 it reads local setup and does not contact Google, so it says nothing about whether an account can still authenticate. Use gog_auth_health for that.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -35793,7 +35810,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_health", {
     description: `Check the LIVE health of each stored Google account. Unlike gog_auth_status (which only reports keyring/config setup), this performs a real token refresh against Google, so it detects expired or revoked (invalid_grant) refresh tokens \u2014 the account-wide sign-out that blocks every service. Reports per account: whether the token is currently valid, the mapped cause when it is not, how long ago it was authorized, and a warning as it approaches the 7-day refresh-token limit that applies to OAuth apps whose consent screen is still in "Testing" mode. Run it proactively to re-authorize on your own schedule instead of mid-task. On a hosted deployment this is the ONLY check that measures Google: a connector showing "connected" or "refreshed" has verified the client's connection to the MCP host, and nothing else \u2014 the Google credential lives in gog's keyring on that host and can be dead while the connection looks perfectly healthy.`,
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -35804,7 +35821,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_services", {
     description: "List all Google services supported by gogcli and the OAuth scopes each requires.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({})
   }, async () => {
     try {
@@ -35815,7 +35832,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_add", {
     description: "Authorize a Google account via browser-based OAuth. Opens a browser window where the user must sign in and grant access. Blocks for up to 5 minutes waiting for the user to complete authorization. If the browser does not open automatically, a fallback URL is included in the response. Use gog_auth_list to check which accounts are already configured.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       email: external_exports.string().describe("Google account email to authorize"),
       services: external_exports.string().optional().default(defaultServices).describe(servicesDescribe),
@@ -35835,7 +35852,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_add_url", {
     description: "Begin REMOTE/headless Google authorization (step 1 of 2). Returns a sign-in URL to open in any browser \u2014 no local server or terminal on the gogcli host is needed, so this works on a hosted deployment where the interactive gog_auth_add cannot. Hand the URL to the user; after they sign in, the browser is redirected to a localhost URL that fails to load \u2014 that is expected. They copy that full redirected URL (from the address bar) and you pass it to gog_auth_add_complete. The link is valid for 10 minutes. If you pass a custom `services` here, pass the SAME value to gog_auth_add_complete or the second step will not match this one.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: false },
     inputSchema: external_exports.object({
       email: external_exports.string().describe("Google account email to authorize"),
       services: external_exports.string().optional().default(defaultServices).describe(servicesDescribe),
@@ -35852,7 +35869,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   server.registerTool("gog_auth_add_complete", {
     description: "Complete REMOTE/headless Google authorization (step 2 of 2). Takes the full redirected localhost URL the user copied after finishing gog_auth_add_url, exchanges it for a refresh token, and stores it. Use the SAME `services` value you passed to gog_auth_add_url. Must run within 10 minutes of step 1 and against the same gogcli host.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       email: external_exports.string().describe("Google account email being authorized (same as step 1)"),
       redirectUrl: external_exports.string().describe(
@@ -35888,7 +35905,7 @@ function registerAuthToolsWith(server, defaultServices) {
   });
   registerRunTool(server, {
     service: "auth",
-    examples: '"remove", "alias", "list"',
+    examples: '"alias", "list", "status"',
     omitAccount: true,
     allowedSubcommands: AUTH_RUN_SUBCOMMANDS,
     note: "For browser-based authorization, use gog_auth_add instead."
@@ -35950,6 +35967,11 @@ var attachInlineParam = external_exports.array(inlineAttachmentSchema).optional(
 );
 
 // ../gogcli-mcp/src/tools/gmail.ts
+var signatureSchema = {
+  signature: external_exports.boolean().optional().describe("Append the Gmail signature from the active send-as address"),
+  signatureFrom: external_exports.string().optional().describe("Append the Gmail signature from this send-as email address"),
+  signatureFile: external_exports.string().optional().describe("Append a local signature file (plain text or HTML), read on the gog server. Must be inside GOG_FILE_ROOTS. Cannot be combined with signature/signatureFrom.")
+};
 var replySchema = {
   messageId: external_exports.string().describe("Gmail message ID to reply to \u2014 the short hex `id` from gog_gmail_get / _search (or gog_gmail_messages_search, gogcli-mcp-gmail only). NOT the threadId, NOT the RFC822 `<\u2026@host>` Message-Id header."),
   body: external_exports.string().optional().describe("Reply body (plain text; required unless bodyHtml or bodyHtmlFile is set). Any size \u2014 a large body is written to a temp file on the gog server rather than inlined into the command line. Note gog strips trailing newlines from a file-delivered body."),
@@ -35965,9 +35987,7 @@ var replySchema = {
   attachInline: attachInlineParam,
   from: external_exports.string().optional().describe("Send from this email address (must be a verified send-as alias)"),
   autoFromAddressedAlias: external_exports.boolean().optional().describe("When from is omitted, send from the verified send-as alias the original message was addressed TO, instead of the account's primary address \u2014 so a reply to mail sent to an alias goes back out from that alias. Ignored when from is set."),
-  signature: external_exports.boolean().optional().describe("Append the Gmail signature from the active send-as address"),
-  signatureFrom: external_exports.string().optional().describe("Append the Gmail signature from this send-as email address"),
-  signatureFile: external_exports.string().optional().describe("Append a local signature file (plain text or HTML), read on the gog server"),
+  ...signatureSchema,
   account: accountParam
 };
 var sendReplySchema = external_exports.object({ ...replySchema, confirmToken: confirmTokenParam });
@@ -35986,7 +36006,7 @@ function registerSlidesTools(server) {
   server.registerTool("gog_slides_export", {
     description: "Export a Google Slides presentation to a local file (pdf or pptx). The out path must be inside the server's GOG_FILE_ROOTS directories.",
     // Writes a file on the gog host and can overwrite one: not read-only.
-    annotations: { readOnlyHint: false, destructiveHint: true },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       out: external_exports.string().optional().describe("Output file path"),
@@ -36004,7 +36024,7 @@ function registerSlidesTools(server) {
   });
   server.registerTool("gog_slides_info", {
     description: "Get metadata for a Google Slides presentation (title, ID, slide count, etc.).",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       account: accountParam
@@ -36014,7 +36034,7 @@ function registerSlidesTools(server) {
   });
   server.registerTool("gog_slides_create", {
     description: "Create a new Google Slides presentation, optionally in a folder or copying from a template.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       title: external_exports.string().describe("Presentation title"),
       parent: external_exports.string().optional().describe("Destination folder ID"),
@@ -36029,7 +36049,7 @@ function registerSlidesTools(server) {
   });
   server.registerTool("gog_slides_copy", {
     description: "Copy a Google Slides presentation to a new presentation with the given title.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID to copy"),
       title: external_exports.string().describe("Title for the new copy"),
@@ -36043,7 +36063,7 @@ function registerSlidesTools(server) {
   });
   server.registerTool("gog_slides_list_slides", {
     description: "List slides in a Google Slides presentation.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       account: accountParam
@@ -36053,7 +36073,7 @@ function registerSlidesTools(server) {
   });
   server.registerTool("gog_slides_read_slide", {
     description: "Read the content of a slide (text, shapes, speaker notes). Set detail=true to also include normalized element geometry, styled text runs, paragraphs, table-cell content, and image source URLs.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID to read"),
@@ -36069,7 +36089,7 @@ function registerSlidesTools(server) {
 }
 
 // ../gogcli-mcp/src/server.ts
-var VERSION = true ? "4.7.0" : "0.0.0";
+var VERSION = true ? "4.8.0" : "0.0.0";
 
 // ../gogcli-mcp/src/bootstrap-auth.ts
 import { join as join5 } from "node:path";
@@ -36147,7 +36167,7 @@ var MAX_BLOB_UPLOAD_BYTES = 100 * 1024 * 1024;
 function registerExtraSlidesTools(server) {
   server.registerTool("gog_slides_create_from_markdown", {
     description: "Create a new Google Slides presentation from markdown content (inline or from a file).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       title: external_exports.string().describe("Presentation title"),
       content: external_exports.string().optional().describe("Inline markdown content"),
@@ -36167,7 +36187,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_create_from_template", {
     description: "Create a new Google Slides presentation from a template, with optional placeholder replacements.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       templateId: external_exports.string().describe("Template presentation ID"),
       title: external_exports.string().describe("New presentation title"),
@@ -36192,7 +36212,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_add_slide", {
     description: "Add a new slide to a presentation from a local image, with optional speaker notes.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       image: external_exports.string().describe("Path to the local image file"),
@@ -36212,7 +36232,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_insert_image", {
     description: "Place an image on an existing slide at a given size and position, from a local file (image) or a public HTTPS URL (url \u2014 no Drive upload or sharing required). Unlike gog_slides_add_slide (which creates a new full-bleed image slide), this inserts onto a slide you already have. width is required; omit height to keep aspect ratio when using a local file (gog requires both width and height when using url).",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID (object ID of the target slide)"),
@@ -36239,7 +36259,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_delete_slide", {
     description: "Delete a slide from a Google Slides presentation.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID to delete"),
@@ -36250,7 +36270,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_skip_slide", {
     description: "Skip a slide during presentation \u2014 it stays in the deck at its current position but is not shown when presenting (and is left out of a PDF export). Use this instead of gog_slides_delete_slide when a slide should be omitted from a talk without losing it. Reverse with gog_slides_unskip_slide; gog_slides_list_slides reports which slides are skipped.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID to skip (from gog_slides_list_slides)"),
@@ -36261,7 +36281,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_unskip_slide", {
     description: "Include a previously skipped slide again when the deck is presented. Safe to call on a slide that was never skipped.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID to unskip (from gog_slides_list_slides)"),
@@ -36272,7 +36292,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_update_notes", {
     description: "Update the speaker notes on a slide (inline text or from a file).",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID"),
@@ -36289,7 +36309,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_replace_slide", {
     description: "Replace the image content of an existing slide, from a local file (image) or a public HTTPS URL (url \u2014 no Drive upload or sharing required), with optional speaker notes.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide ID to replace"),
@@ -36311,7 +36331,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_raw", {
     description: "Dump the raw Google Slides API response (Presentations.Get) as JSON \u2014 lossless presentation metadata including every page, element, and style. Use gog_slides_read_slide for a friendlier per-slide view.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       pretty: external_exports.boolean().optional().describe("Pretty-print the JSON (default: compact single line)"),
@@ -36324,7 +36344,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_locate", {
     description: "Locate literal text in a presentation's shapes and table cells, returning the containing element object IDs and UTF-16 ranges needed for gog_slides_style_text / gog_slides_link / gog_slides_bullets / gog_slides_insert_text. Read-only.",
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       text: external_exports.string().describe("Literal text to locate"),
@@ -36347,7 +36367,7 @@ function registerExtraSlidesTools(server) {
   server.registerTool("gog_slides_thumbnail", {
     description: "Get or download a rendered thumbnail image for a single slide.",
     // Writes a file on the gog host and can overwrite one: not read-only (audit SEC-4).
-    annotations: { readOnlyHint: false, destructiveHint: true },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID"),
@@ -36368,7 +36388,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_new_slide", {
     description: "Create a new native themed slide with a predefined layout (default BLANK) or an exact presentation layout object ID, at a zero-based insertion index.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       layout: external_exports.enum(["BIG_NUMBER", "BLANK", "CAPTION_ONLY", "MAIN_POINT", "ONE_COLUMN_TEXT", "SECTION_HEADER", "SECTION_TITLE_AND_DESCRIPTION", "TITLE", "TITLE_AND_BODY", "TITLE_AND_TWO_COLUMNS", "TITLE_ONLY"]).optional().describe("Predefined slide layout (default: BLANK). Mutually exclusive with layoutId."),
@@ -36385,7 +36405,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_duplicate_slide", {
     description: "Duplicate a slide by object ID, optionally placing the copy at a zero-based insertion index.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID to duplicate"),
@@ -36399,7 +36419,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_move_slide", {
     description: "Move a slide to a zero-based insertion index within the presentation.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID to move"),
@@ -36411,7 +36431,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_insert_text", {
     description: "Insert text into an existing page element (shape or table cell) by object ID. Target a table cell with zero-based row + col. Use replace=true to clear the element's existing text first.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the target shape or table"),
@@ -36432,7 +36452,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_style_text", {
     description: "Apply range-scoped text styling to one page element. range is a UTF-16 start:end span (use gog_slides_locate to find it). Boolean flags set the attribute; the no* flags clear it.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the shape or table cell containing the text"),
@@ -36463,7 +36483,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_link", {
     description: "Apply or clear a hyperlink on a UTF-16 text range in one page element. Provide url to set the link, or clear=true to remove it.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the shape or table cell containing the text"),
@@ -36480,7 +36500,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_bullets", {
     description: "Turn paragraph bullets on or off for a UTF-16 paragraph range in one page element. Use on (optionally with a preset glyph) or off.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the shape or table cell containing the paragraphs"),
@@ -36499,7 +36519,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_replace_text", {
     description: "Find-and-replace text within an explicit scope. You MUST choose a scope \u2014 restrict to a single shape (object), one or more slides (pages), or the entire presentation (all=true). There is no whole-deck default; gog rejects the call if no scope is given.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       find: external_exports.string().describe("Text to find"),
@@ -36520,7 +36540,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_create_shape", {
     description: "Create a native shape on a slide. type is a Slides shape type (e.g. RECTANGLE, TEXT_BOX, ELLIPSE, ROUND_RECTANGLE). Position/size are in unit (default PT).",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID to create the shape on"),
@@ -36546,7 +36566,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_create_line", {
     description: "Create a native line on a slide. category is the connector routing (STRAIGHT, BENT, CURVED). Start position and extent are in unit (default PT).",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID to create the line on"),
@@ -36572,7 +36592,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_style", {
     description: "Style a shape fill/outline or a line. Set kind to shape or line. Colors are #RGB or #RRGGBB.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the shape or line"),
@@ -36598,7 +36618,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_transform", {
     description: "Move, resize, rotate, or shear a page element. apply-mode RELATIVE (default) composes with the existing transform; ABSOLUTE replaces it. Translation is in unit (default PT).",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the element to transform"),
@@ -36628,7 +36648,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_z_order", {
     description: "Change a page element's stacking order.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the element to restack"),
@@ -36640,7 +36660,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_group", {
     description: "Group two or more page elements into a single group.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectIds: external_exports.array(external_exports.string()).min(2).describe("Two or more element object IDs to group"),
@@ -36654,7 +36674,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_ungroup", {
     description: "Ungroup one or more element groups back into their constituent elements.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       groupIds: external_exports.array(external_exports.string()).min(1).describe("One or more group object IDs to ungroup"),
@@ -36665,7 +36685,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_alt_text", {
     description: "Set or clear a page element's accessibility title and/or description. Pass an empty string to clear a field.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the element"),
@@ -36681,7 +36701,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_element_delete", {
     description: "Delete one page element by object ID.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       objectId: external_exports.string().describe("Object ID of the element to delete"),
@@ -36692,7 +36712,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_create", {
     description: "Create an auto-sized native table on a slide with the given row and column counts.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       slideId: external_exports.string().describe("Slide object ID to create the table on"),
@@ -36708,7 +36728,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_cell_style", {
     description: "Style one zero-based table cell: background fill, vertical content alignment, and inline text styling (optionally scoped to a UTF-16 range within the cell). Boolean flags set the attribute; the no* flags clear it.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36748,7 +36768,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_border_style", {
     description: "Style borders around or within a zero-based table cell range. position selects which borders are affected; dash sets the line style.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36776,7 +36796,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_column_insert", {
     description: "Insert one or more columns relative to a zero-based table column. Inserts to the left by default, or to the right with right=true.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36793,7 +36813,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_column_delete", {
     description: "Delete the column containing a zero-based table cell.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36805,7 +36825,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_column_size", {
     description: "Set the width of a zero-based table column.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36818,7 +36838,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_row_insert", {
     description: "Insert one or more rows relative to a zero-based table row. Inserts above by default, or below with below=true.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36835,7 +36855,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_row_delete", {
     description: "Delete the row containing a zero-based table cell.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36847,7 +36867,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_row_size", {
     description: "Set the minimum height of a zero-based table row.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36860,7 +36880,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_merge", {
     description: "Merge a rectangular table cell range starting at a zero-based cell. Content of non-anchor cells is absorbed by the merge; use gog_slides_table_unmerge to split back.",
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),
@@ -36878,7 +36898,7 @@ function registerExtraSlidesTools(server) {
   });
   server.registerTool("gog_slides_table_unmerge", {
     description: "Unmerge (split) a rectangular range of previously merged cells, starting at a zero-based cell.",
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: external_exports.object({
       presentationId: external_exports.string().describe("Presentation ID"),
       tableObjectId: external_exports.string().describe("Table object ID"),

package/manifest.json

@@ -3,7 +3,7 @@
   "manifest_version": "0.3",
   "name": "gogcli-mcp-slides",
   "display_name": "gogcli (Slides)",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "description": "Extended Google Slides for Claude via gogcli — auth + full Slides support (create, edit, export, templates, markdown)",
   "author": {
     "name": "Chris Hall",
@@ -39,7 +39,10 @@
       "env": {
         "GOG_ACCOUNT": "${user_config.gog_account}",
         "GOG_PATH": "${user_config.gog_path}",
-        "GOG_FILE_ROOTS": "${user_config.gog_file_roots}"
+        "GOG_FILE_ROOTS": "${user_config.gog_file_roots}",
+        "DISPLAY_TZ": "${user_config.display_tz}",
+        "GOG_READONLY": "${user_config.gog_readonly}",
+        "GOG_TIMEZONE": "${user_config.gog_timezone}"
       }
     }
   },
@@ -61,6 +64,24 @@
       "title": "Allowed file directories",
       "description": "Directories tools may read files from (attachments, uploads) or write files to (exports, downloads), separated by ':' (';' on Windows). Optional — defaults to ~/gogcli-mcp-files",
       "required": false
+    },
+    "display_tz": {
+      "type": "string",
+      "title": "Display time zone",
+      "description": "zone for *Display fields and for interpreting naive gog values; defaults to America/New_York",
+      "required": false
+    },
+    "gog_readonly": {
+      "type": "string",
+      "title": "Read-only mode",
+      "description": "block all mutating gog API requests (injects gog's --readonly); set to 0/false/no/off (or unset) to allow writes",
+      "required": false
+    },
+    "gog_timezone": {
+      "type": "string",
+      "title": "gog time zone",
+      "description": "zone gog formats naive dates in; unset, runner.ts hands gog DISPLAY_TZ so the two cannot diverge",
+      "required": false
     }
   },
   "tools": [

package/mint.yaml

@@ -91,7 +91,7 @@ dependencies:
   # bumping these nine pins, and the pin stored on each mcp-host registration.
   - kind: github-release
     repo: openclaw/gogcli
-    tag: v0.43.0
+    tag: v0.44.0
     asset: "gogcli_*_linux_amd64.tar.gz"
     bin: [gog]
 state:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gogcli-mcp-slides",
-  "version": "4.7.0",
+  "version": "4.8.0",
   "mcpName": "io.github.chrischall/gogcli-mcp-slides",
   "description": "Extended Google Slides MCP server via gogcli — auth + full Slides support",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -24,8 +24,8 @@
     "test:coverage": "vitest run --coverage"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^2.15.0",
-    "@modelcontextprotocol/server": "^2.3.0",
+    "@chrischall/mcp-utils": "^3.0.0",
+    "@modelcontextprotocol/server": "^2.3.1",
     "zod": "^4.6.1"
   },
   "license": "MIT",

package/server.json

@@ -7,12 +7,12 @@
     "source": "github",
     "subfolder": "packages/gogcli-mcp-slides"
   },
-  "version": "4.7.0",
+  "version": "4.8.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "gogcli-mcp-slides",
-      "version": "4.7.0",
+      "version": "4.8.0",
       "transport": {
         "type": "stdio"
       },
@@ -28,6 +28,24 @@
           "description": "Override path to the gogcli binary (auto-discovered otherwise)",
           "isRequired": false,
           "format": "string"
+        },
+        {
+          "name": "DISPLAY_TZ",
+          "description": "zone for *Display fields and for interpreting naive gog values; defaults to America/New_York",
+          "isRequired": false,
+          "format": "string"
+        },
+        {
+          "name": "GOG_READONLY",
+          "description": "block all mutating gog API requests (injects gog's --readonly); set to 0/false/no/off (or unset) to allow writes",
+          "isRequired": false,
+          "format": "string"
+        },
+        {
+          "name": "GOG_TIMEZONE",
+          "description": "zone gog formats naive dates in; unset, runner.ts hands gog DISPLAY_TZ so the two cannot diverge",
+          "isRequired": false,
+          "format": "string"
         }
       ]
     }

package/src/tools/slides-extra.ts

@@ -27,7 +27,7 @@ import type { GogArg } from '../../../gogcli-mcp/src/lib.js';
 export function registerExtraSlidesTools(server: McpServer): void {
   server.registerTool('gog_slides_create_from_markdown', {
     description: 'Create a new Google Slides presentation from markdown content (inline or from a file).',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       title: z.string().describe('Presentation title'),
       content: z.string().optional().describe('Inline markdown content'),
@@ -48,7 +48,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_create_from_template', {
     description: 'Create a new Google Slides presentation from a template, with optional placeholder replacements.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       templateId: z.string().describe('Template presentation ID'),
       title: z.string().describe('New presentation title'),
@@ -74,7 +74,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_add_slide', {
     description: 'Add a new slide to a presentation from a local image, with optional speaker notes.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       image: z.string().describe('Path to the local image file'),
@@ -95,7 +95,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_insert_image', {
     description: 'Place an image on an existing slide at a given size and position, from a local file (image) or a public HTTPS URL (url — no Drive upload or sharing required). Unlike gog_slides_add_slide (which creates a new full-bleed image slide), this inserts onto a slide you already have. width is required; omit height to keep aspect ratio when using a local file (gog requires both width and height when using url).',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide ID (object ID of the target slide)'),
@@ -123,7 +123,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_delete_slide', {
     description: 'Delete a slide from a Google Slides presentation.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide ID to delete'),
@@ -147,7 +147,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
       'Skip a slide during presentation — it stays in the deck at its current position but is not shown when presenting '
       + '(and is left out of a PDF export). Use this instead of gog_slides_delete_slide when a slide should be omitted from '
       + 'a talk without losing it. Reverse with gog_slides_unskip_slide; gog_slides_list_slides reports which slides are skipped.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide ID to skip (from gog_slides_list_slides)'),
@@ -160,7 +160,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
   server.registerTool('gog_slides_unskip_slide', {
     description:
       'Include a previously skipped slide again when the deck is presented. Safe to call on a slide that was never skipped.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide ID to unskip (from gog_slides_list_slides)'),
@@ -172,7 +172,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_update_notes', {
     description: 'Update the speaker notes on a slide (inline text or from a file).',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide ID'),
@@ -190,7 +190,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_replace_slide', {
     description: 'Replace the image content of an existing slide, from a local file (image) or a public HTTPS URL (url — no Drive upload or sharing required), with optional speaker notes.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide ID to replace'),
@@ -215,7 +215,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_raw', {
     description: 'Dump the raw Google Slides API response (Presentations.Get) as JSON — lossless presentation metadata including every page, element, and style. Use gog_slides_read_slide for a friendlier per-slide view.',
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       pretty: z.boolean().optional().describe('Pretty-print the JSON (default: compact single line)'),
@@ -230,7 +230,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_locate', {
     description: 'Locate literal text in a presentation\'s shapes and table cells, returning the containing element object IDs and UTF-16 ranges needed for gog_slides_style_text / gog_slides_link / gog_slides_bullets / gog_slides_insert_text. Read-only.',
-    annotations: { readOnlyHint: true },
+    annotations: { readOnlyHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       text: z.string().describe('Literal text to locate'),
@@ -254,7 +254,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
   server.registerTool('gog_slides_thumbnail', {
     description: 'Get or download a rendered thumbnail image for a single slide.',
     // Writes a file on the gog host and can overwrite one: not read-only (audit SEC-4).
-    annotations: { readOnlyHint: false, destructiveHint: true },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide object ID'),
@@ -278,7 +278,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_new_slide', {
     description: 'Create a new native themed slide with a predefined layout (default BLANK) or an exact presentation layout object ID, at a zero-based insertion index.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       layout: z.enum(['BIG_NUMBER', 'BLANK', 'CAPTION_ONLY', 'MAIN_POINT', 'ONE_COLUMN_TEXT', 'SECTION_HEADER', 'SECTION_TITLE_AND_DESCRIPTION', 'TITLE', 'TITLE_AND_BODY', 'TITLE_AND_TWO_COLUMNS', 'TITLE_ONLY']).optional().describe('Predefined slide layout (default: BLANK). Mutually exclusive with layoutId.'),
@@ -296,7 +296,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_duplicate_slide', {
     description: 'Duplicate a slide by object ID, optionally placing the copy at a zero-based insertion index.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide object ID to duplicate'),
@@ -311,7 +311,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_move_slide', {
     description: 'Move a slide to a zero-based insertion index within the presentation.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide object ID to move'),
@@ -326,7 +326,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_insert_text', {
     description: 'Insert text into an existing page element (shape or table cell) by object ID. Target a table cell with zero-based row + col. Use replace=true to clear the element\'s existing text first.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the target shape or table'),
@@ -348,7 +348,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_style_text', {
     description: 'Apply range-scoped text styling to one page element. range is a UTF-16 start:end span (use gog_slides_locate to find it). Boolean flags set the attribute; the no* flags clear it.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the shape or table cell containing the text'),
@@ -380,7 +380,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_link', {
     description: 'Apply or clear a hyperlink on a UTF-16 text range in one page element. Provide url to set the link, or clear=true to remove it.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the shape or table cell containing the text'),
@@ -398,7 +398,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_bullets', {
     description: 'Turn paragraph bullets on or off for a UTF-16 paragraph range in one page element. Use on (optionally with a preset glyph) or off.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the shape or table cell containing the paragraphs'),
@@ -418,7 +418,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_replace_text', {
     description: 'Find-and-replace text within an explicit scope. You MUST choose a scope — restrict to a single shape (object), one or more slides (pages), or the entire presentation (all=true). There is no whole-deck default; gog rejects the call if no scope is given.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       find: z.string().describe('Text to find'),
@@ -442,7 +442,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_create_shape', {
     description: 'Create a native shape on a slide. type is a Slides shape type (e.g. RECTANGLE, TEXT_BOX, ELLIPSE, ROUND_RECTANGLE). Position/size are in unit (default PT).',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide object ID to create the shape on'),
@@ -469,7 +469,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_create_line', {
     description: 'Create a native line on a slide. category is the connector routing (STRAIGHT, BENT, CURVED). Start position and extent are in unit (default PT).',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide object ID to create the line on'),
@@ -496,7 +496,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_style', {
     description: 'Style a shape fill/outline or a line. Set kind to shape or line. Colors are #RGB or #RRGGBB.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the shape or line'),
@@ -523,7 +523,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_transform', {
     description: 'Move, resize, rotate, or shear a page element. apply-mode RELATIVE (default) composes with the existing transform; ABSOLUTE replaces it. Translation is in unit (default PT).',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the element to transform'),
@@ -554,7 +554,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_z_order', {
     description: 'Change a page element\'s stacking order.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the element to restack'),
@@ -567,7 +567,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_group', {
     description: 'Group two or more page elements into a single group.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectIds: z.array(z.string()).min(2).describe('Two or more element object IDs to group'),
@@ -582,7 +582,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_ungroup', {
     description: 'Ungroup one or more element groups back into their constituent elements.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       groupIds: z.array(z.string()).min(1).describe('One or more group object IDs to ungroup'),
@@ -594,7 +594,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_alt_text', {
     description: 'Set or clear a page element\'s accessibility title and/or description. Pass an empty string to clear a field.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the element'),
@@ -611,7 +611,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_element_delete', {
     description: 'Delete one page element by object ID.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       objectId: z.string().describe('Object ID of the element to delete'),
@@ -626,7 +626,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_create', {
     description: 'Create an auto-sized native table on a slide with the given row and column counts.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       slideId: z.string().describe('Slide object ID to create the table on'),
@@ -643,7 +643,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_cell_style', {
     description: 'Style one zero-based table cell: background fill, vertical content alignment, and inline text styling (optionally scoped to a UTF-16 range within the cell). Boolean flags set the attribute; the no* flags clear it.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -684,7 +684,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_border_style', {
     description: 'Style borders around or within a zero-based table cell range. position selects which borders are affected; dash sets the line style.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -713,7 +713,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_column_insert', {
     description: 'Insert one or more columns relative to a zero-based table column. Inserts to the left by default, or to the right with right=true.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -731,7 +731,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_column_delete', {
     description: 'Delete the column containing a zero-based table cell.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -744,7 +744,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_column_size', {
     description: 'Set the width of a zero-based table column.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -758,7 +758,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_row_insert', {
     description: 'Insert one or more rows relative to a zero-based table row. Inserts above by default, or below with below=true.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -776,7 +776,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_row_delete', {
     description: 'Delete the row containing a zero-based table cell.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -789,7 +789,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_row_size', {
     description: 'Set the minimum height of a zero-based table row.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -803,7 +803,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_merge', {
     description: 'Merge a rectangular table cell range starting at a zero-based cell. Content of non-anchor cells is absorbed by the merge; use gog_slides_table_unmerge to split back.',
-    annotations: { destructiveHint: true },
+    annotations: { destructiveHint: true, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),
@@ -822,7 +822,7 @@ export function registerExtraSlidesTools(server: McpServer): void {
 
   server.registerTool('gog_slides_table_unmerge', {
     description: 'Unmerge (split) a rectangular range of previously merged cells, starting at a zero-based cell.',
-    annotations: { destructiveHint: false },
+    annotations: { destructiveHint: false, openWorldHint: true },
     inputSchema: z.object({
       presentationId: z.string().describe('Presentation ID'),
       tableObjectId: z.string().describe('Table object ID'),

package/tests/tool-annotations.test.ts

@@ -0,0 +1,10 @@
+import { authToolsFor, registerSlidesTools } from '../../gogcli-mcp/src/lib.js';
+import { registerExtraSlidesTools } from '../src/tools/slides-extra.js';
+import { describeToolAnnotations, LOCAL_AUTH_TOOLS } from '../../gogcli-mcp/tests/support/tool-annotations.js';
+
+// The same registrar list src/index.ts hands to runMcp.
+describeToolAnnotations([authToolsFor('slides'), registerSlidesTools, registerExtraSlidesTools] as never, {
+  tools: 55,
+  destructive: 20,
+  local: [...LOCAL_AUTH_TOOLS],
+});