mcp-google-multi 5.2.0 → 5.2.1-alpha.1

package/dist/executor.js

@@ -30,6 +30,17 @@ export async function executeApiMethod(method, args, deps = {}) {
             account: args.account,
         }, true);
     }
+    // drive.files.export streams binary and, without alt=media, Google returns a confusing
+    // "Export requires alt=media" — either way the escape hatch can't surface the content.
+    if (method.id === 'drive.files.export') {
+        return jsonResult({
+            error: 'binary_unsupported',
+            message: 'drive.files.export returns binary content, not JSON, through this tool.',
+            hint: 'Use drive_export to export a Google Workspace file to disk.',
+            retriable: false,
+            account: args.account,
+        }, true);
+    }
     let url;
     try {
         url = method.baseUrl + expandPath(method.path, args.pathParams ?? {});

package/dist/tools/drive.d.ts

@@ -1,4 +1,11 @@
 import type { ToolRegistry } from '../registry.js';
+export declare function prepareLocalDest(savePath: string, filename: string): string;
+export declare function resolveShareNotification(opts: {
+    type: string;
+    role: string;
+    transferOwnership?: boolean;
+    sendNotification?: boolean;
+}): boolean | undefined;
 export declare function registerDriveTools(server: ToolRegistry): void;
 export type TransferPlan = {
     kind: 'binary';

package/dist/tools/drive.js

@@ -28,6 +28,23 @@ const COMMENT_FIELDS = `${COMMENT_BASE_FIELDS},replies(${REPLY_SUBFIELDS})`;
 const COMMENT_LIST_FIELDS = `nextPageToken,comments(${COMMENT_BASE_FIELDS},replies(${REPLY_SUBFIELDS}))`;
 const REPLY_FIELDS = `kind,htmlContent,${REPLY_SUBFIELDS}`;
 const REPLY_LIST_FIELDS = `nextPageToken,replies(${REPLY_FIELDS})`;
+// basename-sanitize the caller filename (never escapes savePath), create the destination
+// directory if missing (callers otherwise hit ENOENT on a non-existent savePath), and
+// return the absolute path to write.
+export function prepareLocalDest(savePath, filename) {
+    const dest = path.join(savePath, path.basename(filename));
+    fs.mkdirSync(savePath, { recursive: true });
+    return dest;
+}
+// sendNotificationEmail is only valid for user/group permissions, and Google forbids
+// disabling it on an ownership transfer. Returns undefined to omit the param entirely.
+export function resolveShareNotification(opts) {
+    if (opts.type !== 'user' && opts.type !== 'group')
+        return undefined;
+    if (opts.transferOwnership || opts.role === 'owner')
+        return true;
+    return opts.sendNotification ?? true;
+}
 export function registerDriveTools(server) {
     // ─── Read / search / list ──────────────────────────────────────────────
     server.registerTool('drive_search', {
@@ -243,7 +260,7 @@ export function registerDriveTools(server) {
         try {
             const auth = await getClient(account);
             const drive = google.drive({ version: 'v3', auth });
-            const dest = path.join(savePath, path.basename(filename));
+            const dest = prepareLocalDest(savePath, filename);
             const res = await drive.files.get({ fileId, alt: 'media', supportsAllDrives: true }, { responseType: 'stream' });
             // pipeline destroys both streams on source/sink error; raw .pipe leaks the partial file.
             await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600 }));
@@ -269,7 +286,7 @@ export function registerDriveTools(server) {
         try {
             const auth = await getClient(account);
             const drive = google.drive({ version: 'v3', auth });
-            const dest = path.join(savePath, path.basename(filename));
+            const dest = prepareLocalDest(savePath, filename);
             const res = await drive.files.export({ fileId, mimeType: exportMime }, { responseType: 'stream' });
             // pipeline destroys both streams on source/sink error; raw .pipe leaks the partial file.
             await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600 }));
@@ -525,9 +542,10 @@ export function registerDriveTools(server) {
             const requestBody = { type, role, emailAddress, domain };
             if (expirationTime)
                 requestBody.expirationTime = expirationTime;
+            const notify = resolveShareNotification({ type, role, transferOwnership, sendNotification });
             const res = await drive.permissions.create({
                 fileId,
-                sendNotificationEmail: sendNotification ?? true,
+                ...(notify === undefined ? {} : { sendNotificationEmail: notify }),
                 emailMessage,
                 transferOwnership: transferOwnership ?? false,
                 supportsAllDrives: true,

package/dist/tools/google-api.js

@@ -92,7 +92,8 @@ export function registerEscapeTools(registry, policy, deps = {}) {
     registry.registerMeta('google_api_call', {
         description: 'Invoke any Google Workspace REST method by Discovery id (escape hatch for operations without a ' +
             'dedicated tool). Find methods with google_api_search first. Subject to the same write-control ' +
-            'policy as named tools.',
+            'policy as named tools. Returns JSON only — for binary/file content (media downloads, ' +
+            'drive.files.export) use drive_download / drive_export instead.',
         inputSchema: {
             account: accountEnum.describe('Google account alias'),
             api: z.string().describe(`API alias: ${apiList}`),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-google-multi",
-  "version": "5.2.0",
+  "version": "5.2.1-alpha.1",
   "description": "Local MCP server for Google Workspace (Gmail, Drive, Calendar, Sheets, Docs, Contacts, Tasks, Meet, Search Console, +Forms/Chat/Admin) across multiple accounts — OAuth-only, encrypted token storage, deny-by-default writes.",
   "type": "module",
   "license": "MIT",