mcp-google-multi 6.0.1 → 6.1.0-alpha.1

package/dist/tools/drive.js

@@ -4,8 +4,8 @@ import { drive as driveClient } from '@googleapis/drive';
 import { accountArgLive } from '../accounts.js';
 import { getClient } from '../client.js';
 import { handleGoogleApiError, invalidParams, safeMessage, stringifyEnvelope } from './_errors.js';
-import { hostFilesRefused, openLocalReadStream, prepareLocalDest } from './_local-files.js';
-import { checkOutbound, outboundDeniedEnvelope, resolveOutboundAllowlist } from '../outbound-allowlist.js';
+import { hostFilesRefused, openLocalReadStream, openInternalReadStream, prepareLocalDest, cleanupPartialWrite, localFileErrorResult, LocalFileError } from './_local-files.js';
+import { checkOutbound, checkOutboundGrantee, driveGranteeFromAccessProposal, driveGranteeFromPermission, outboundDeniedEnvelope, resolveOutboundAllowlist } from '../outbound-allowlist.js';
 import { isAllowed, writeDisabledResult } from '../write-control.js';
 import { capText, listResult } from '../trim.js';
 import * as fs from 'fs';
@@ -351,7 +351,7 @@ export function registerDriveTools(server, deps = {}) {
             contentBase64: z.string().optional().describe(`Base64-encoded file content. Exactly one of contentBase64${localFiles ? ' or localPath' : ''} is required. Decoded size is capped at ${MAX_UPLOAD_BASE64_BYTES / (1024 * 1024)} MB.`),
             ...(localFiles
                 ? {
-                    localPath: z.string().min(1).optional().describe('Absolute path of the SOURCE file on disk to upload (on the machine running the server; this is not savePath). Exactly one of contentBase64 or localPath is required.'),
+                    localPath: z.string().min(1).optional().describe('Path of the SOURCE file to upload, on the machine running the server (this is not savePath): confined to GOOGLE_LOCAL_FILES_DIR (default <home>/Downloads/mcp-google-multi); a relative path resolves inside it, an absolute path must already be inside it. Exactly one of contentBase64 or localPath is required.'),
                 }
                 : {}),
             mimeType: z.string().optional().describe('Source MIME type of the content (inferred from filename if omitted). With `convertTo`, this is the format Drive imports from.'),
@@ -408,6 +408,8 @@ export function registerDriveTools(server, deps = {}) {
             };
         }
         catch (error) {
+            if (error instanceof LocalFileError)
+                return localFileErrorResult(error, account);
             return handleDriveError(error, account);
         }
     });
@@ -416,7 +418,7 @@ export function registerDriveTools(server, deps = {}) {
         inputSchema: {
             account: accountEnum.describe('Google account alias'),
             fileId: z.string().min(1).describe('Google Drive file ID'),
-            savePath: z.string().min(1).describe('Absolute DIRECTORY path to save into (created if missing, on the machine running the server); the file name comes from `filename`'),
+            savePath: z.string().min(1).describe('Destination folder to save into, on the machine running the server: confined to GOOGLE_LOCAL_FILES_DIR (default <home>/Downloads/mcp-google-multi), created if missing; a relative path resolves inside it, an absolute path must already be inside it. The file name comes from `filename`.'),
             filename: z.string().optional().describe('Filename to save as (defaults to the file name in Drive)'),
         },
     }, async ({ account, fileId, savePath, filename }) => {
@@ -426,16 +428,31 @@ export function registerDriveTools(server, deps = {}) {
             const name = filename
                 ?? (await drive.files.get({ fileId, fields: 'name', supportsAllDrives: true })).data.name
                 ?? fileId;
-            const dest = prepareLocalDest(savePath, name);
+            const dest = await prepareLocalDest(savePath, name);
             const res = await drive.files.get({ fileId, alt: 'media', supportsAllDrives: true }, { responseType: 'stream' });
-            // pipeline destroys both streams on source/sink error; raw .pipe leaks the partial file.
-            await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600 }));
+            // pipeline destroys both streams on source/sink error; raw .pipe leaks the
+            // partial file. wx: prepareLocalDest already checked existence, this is
+            // the belt-and-suspenders race guard, never silently clobber.
+            try {
+                await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600, flags: 'wx' }));
+            }
+            catch (err) {
+                // A failed download must not leave a partial file behind blocking
+                // a retry with local_path_exists; best-effort, original error wins.
+                // EEXIST means wx itself refused to open: the TOCTOU race lost to
+                // another call that already owns dest, so this call never wrote
+                // anything there and must not delete that other call's file.
+                await cleanupPartialWrite(dest, err);
+                throw err;
+            }
             const { size } = fs.statSync(dest);
             return {
                 content: [{ type: 'text', text: JSON.stringify({ savedPath: dest, bytes: size }, null, 2) }],
             };
         }
         catch (error) {
+            if (error instanceof LocalFileError)
+                return localFileErrorResult(error, account);
             return handleDriveError(error, account);
         }
     });
@@ -445,7 +462,7 @@ export function registerDriveTools(server, deps = {}) {
             account: accountEnum.describe('Google account alias'),
             fileId: z.string().min(1).describe('Google Drive file ID'),
             mimeType: z.string().describe('Target export MIME type (e.g. "application/pdf", "text/markdown", "application/vnd.openxmlformats-officedocument.wordprocessingml.document")'),
-            savePath: z.string().min(1).describe('Absolute DIRECTORY path to save into (created if missing, on the machine running the server); the file name comes from `filename`'),
+            savePath: z.string().min(1).describe('Destination folder to save into, on the machine running the server: confined to GOOGLE_LOCAL_FILES_DIR (default <home>/Downloads/mcp-google-multi), created if missing; a relative path resolves inside it, an absolute path must already be inside it. The file name comes from `filename`.'),
             filename: z.string().optional().describe('Filename to save as (defaults to the Drive name plus the extension implied by mimeType)'),
         },
     }, async ({ account, fileId, mimeType: exportMime, savePath, filename }) => {
@@ -458,16 +475,31 @@ export function registerDriveTools(server, deps = {}) {
                 const ext = mime.extension(exportMime);
                 name = `${meta.data.name ?? fileId}${ext ? `.${ext}` : ''}`;
             }
-            const dest = prepareLocalDest(savePath, name);
+            const dest = await prepareLocalDest(savePath, name);
             const res = await drive.files.export({ fileId, mimeType: exportMime }, { responseType: 'stream' });
-            // pipeline destroys both streams on source/sink error; raw .pipe leaks the partial file.
-            await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600 }));
+            // pipeline destroys both streams on source/sink error; raw .pipe leaks the
+            // partial file. wx: prepareLocalDest already checked existence, this is
+            // the belt-and-suspenders race guard, never silently clobber.
+            try {
+                await pipeline(res.data, fs.createWriteStream(dest, { mode: 0o600, flags: 'wx' }));
+            }
+            catch (err) {
+                // A failed download must not leave a partial file behind blocking
+                // a retry with local_path_exists; best-effort, original error wins.
+                // EEXIST means wx itself refused to open: the TOCTOU race lost to
+                // another call that already owns dest, so this call never wrote
+                // anything there and must not delete that other call's file.
+                await cleanupPartialWrite(dest, err);
+                throw err;
+            }
             const { size } = fs.statSync(dest);
             return {
                 content: [{ type: 'text', text: JSON.stringify({ savedPath: dest, bytes: size }, null, 2) }],
             };
         }
         catch (error) {
+            if (error instanceof LocalFileError)
+                return localFileErrorResult(error, account);
             return handleDriveError(error, account);
         }
     });
@@ -508,7 +540,7 @@ export function registerDriveTools(server, deps = {}) {
             newParentFolderId: z.string().optional().describe('Move to this folder, named newParentFolderId here, not parentFolderId'),
             ...(localFiles
                 ? {
-                    localPath: z.string().optional().describe('Replace file content with this local file (path on the machine running the server)'),
+                    localPath: z.string().optional().describe('Replace file content with this local file, on the machine running the server: confined to GOOGLE_LOCAL_FILES_DIR (default <home>/Downloads/mcp-google-multi); a relative path resolves inside it, an absolute path must already be inside it.'),
                     mimeType: z.string().optional().describe('MIME type of the replacement file (required if localPath is provided)'),
                     convertTo: z.enum(CONVERT_TO_VALUES).optional().describe('When replacing content via localPath, convert the new content into this native Google Workspace type on import: "document" | "spreadsheet" | "presentation" | "drawing" (full application/vnd.google-apps.* ids also accepted).'),
                 }
@@ -551,6 +583,8 @@ export function registerDriveTools(server, deps = {}) {
             };
         }
         catch (error) {
+            if (error instanceof LocalFileError)
+                return localFileErrorResult(error, account);
             return handleDriveError(error, account);
         }
     });
@@ -802,6 +836,20 @@ export function registerDriveTools(server, deps = {}) {
         try {
             const auth = await getClientFn(account);
             const drive = driveClient({ version: 'v3', auth });
+            // This call's own body never carries the grantee (only role/
+            // expiration): look the real grantee up by permissionId rather than
+            // trust anything the caller claims it is.
+            if (resolveOutboundAllowlist()) {
+                const current = await drive.permissions.get({
+                    fileId,
+                    permissionId,
+                    supportsAllDrives: true,
+                    fields: 'type,domain,emailAddress',
+                });
+                const outbound = checkOutboundGrantee('drive_permission_update', driveGranteeFromPermission(current.data), String(account));
+                if (outbound)
+                    return outbound;
+            }
             const requestBody = {};
             if (role)
                 requestBody.role = role;
@@ -1131,6 +1179,12 @@ export function registerDriveTools(server, deps = {}) {
             publishedOutsideDomain: coerceBoolean.optional().describe('Allow publish outside domain'),
         },
     }, async ({ account, fileId, revisionId, keepForever, published, publishAuto, publishedOutsideDomain }) => {
+        // Publishing makes the revision reachable without an invite (the
+        // allowlist cannot scope that to specific recipients the way a
+        // share/grant can), so it is refused outright while the allowlist is active.
+        if ((published || publishedOutsideDomain) && resolveOutboundAllowlist()) {
+            return outboundDeniedEnvelope('drive_revision_update publish', ['(publishing exposes it beyond any addressable recipient)'], String(account));
+        }
         try {
             const auth = await getClientFn(account);
             const drive = driveClient({ version: 'v3', auth });
@@ -1220,6 +1274,15 @@ export function registerDriveTools(server, deps = {}) {
         try {
             const auth = await getClientFn(account);
             const drive = driveClient({ version: 'v3', auth });
+            // ACCEPT grants access to whoever the proposal names; DENY/other
+            // actions grant nothing and need no check. The real recipient is a
+            // property of the proposal itself, not of this call's own body.
+            if (action === 'ACCEPT' && resolveOutboundAllowlist()) {
+                const proposal = await drive.accessproposals.get({ fileId, proposalId });
+                const outbound = checkOutboundGrantee('drive_access_proposal_resolve', driveGranteeFromAccessProposal(proposal.data), String(account));
+                if (outbound)
+                    return outbound;
+            }
             const requestBody = { action };
             if (role)
                 requestBody.role = role;
@@ -1592,7 +1655,11 @@ async function downloadAndUpload(sourceDrive, targetDrive, fileId, sourceMime, p
             },
             media: {
                 mimeType: plan.kind === 'native' ? plan.exportMime : (sourceMime ?? 'application/octet-stream'),
-                body: await openLocalReadStream(tmp),
+                // tmp is the server's own staging file, not a caller argument: it
+                // must not go through the GOOGLE_LOCAL_FILES_DIR guard (which would
+                // refuse it outright once that root differs from os.tmpdir(), and
+                // would create the root as an unwanted side effect even then).
+                body: await openInternalReadStream(tmp),
             },
             supportsAllDrives: true,
             fields: 'id,name,mimeType,webViewLink',

package/dist/tools/generated/_shared.js

@@ -1,5 +1,8 @@
 import { accountAliasSchema, accountAliasSchemaFor, accountArgLive } from '../../accounts.js';
 import { executeApiMethod } from '../../executor.js';
+import { serviceOf } from '../../registry.js';
+import { escapeHatchNames } from '../google-api.js';
+import { escapeHatchGate } from '../_escape-hatch.js';
 export function accountField(aliases) {
     // Generated code passes a getter over registry.accountAliases(), so the field
     // validates against the registry's CURRENT set, as curated tools do. An
@@ -11,12 +14,17 @@ export function registerGeneratedTool(registry, def, deps = {}) {
     // Widened locally: `cud` is a registry extension the SDK config type doesn't
     // carry; the registry reads it before handing the config to the SDK.
     const register = registry.registerTool;
+    const service = serviceOf(def.name);
     register(def.name, {
         description: def.description,
         inputSchema: def.shape,
         cud: def.cud,
         annotations: { openWorldHint: true },
         requiredScopes: def.method.scopes,
+        // Every generated per-method tool IS the escape hatch (same as
+        // google_api_call): write-control for a write runs inside the
+        // handler below, not the registry's own name-based gate.
+        escapeHatch: true,
     }, async (args) => {
         const pathParams = {};
         const queryParams = {};
@@ -39,6 +47,20 @@ export function registerGeneratedTool(registry, def, deps = {}) {
             }
             body = assembled;
         }
+        if (def.cud !== 'read') {
+            const names = escapeHatchNames(service, def.method.id);
+            const gate = await escapeHatchGate(registry, names.deny, names.primary, { service, cud: def.cud, scopes: def.method.scopes }, registry.policy, {
+                account: args.account,
+                accountEmail: registry.accountSet().configs[args.account]?.email,
+                methodId: def.method.id,
+                httpMethod: def.method.httpMethod,
+                pathParams,
+                queryParams,
+                body,
+            });
+            if (gate)
+                return gate;
+        }
         return executeApiMethod(def.method, {
             account: args.account,
             pathParams,

package/dist/tools/generated/admin.js

@@ -128,7 +128,7 @@ export function registerAdminGeneratedTools(registry, deps = {}) {
     }, deps);
     registerGeneratedTool(registry, {
         name: "admin_customer_devices_chromeos_batch_change_status",
-        cud: "update",
+        cud: "delete",
         description: "Changes the status of a batch of ChromeOS devices. For more information about changing a ChromeOS device state [Repair, repurpose, or retire ChromeOS devices](h",
         method: { id: "admin.customer.devices.chromeos.batchChangeStatus", httpMethod: "POST", path: "admin/directory/v1/customer/{customerId}/devices/chromeos:batchChangeStatus", baseUrl: "https://admin.googleapis.com/", requiredParams: ["customerId"], scopes: S_admin_directory_v1[1] },
         params: [{ "field": "customerId", "api": "customerId", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],
@@ -176,7 +176,7 @@ export function registerAdminGeneratedTools(registry, deps = {}) {
     }, deps);
     registerGeneratedTool(registry, {
         name: "admin_customer_devices_chromeos_issue_command",
-        cud: "create",
+        cud: "delete",
         description: "Issues a command for the device to execute.",
         method: { id: "admin.customer.devices.chromeos.issueCommand", httpMethod: "POST", path: "admin/directory/v1/customer/{customerId}/devices/chromeos/{deviceId}:issueCommand", baseUrl: "https://admin.googleapis.com/", requiredParams: ["customerId", "deviceId"], scopes: S_admin_directory_v1[1] },
         params: [{ "field": "customerId", "api": "customerId", "location": "path" }, { "field": "deviceId", "api": "deviceId", "location": "path" }, { "field": "fields", "api": "fields", "location": "query" }],

package/dist/tools/generated/method-map.d.ts

@@ -1,2 +1,5 @@
+import type { Cud } from '../../registry.js';
 export declare const GENERATED_METHOD_TOOLS: Record<string, string>;
 export declare const CURATED_METHOD_IDS: readonly string[];
+export declare const CURATED_METHOD_TOOLS: Record<string, string[]>;
+export declare const CUD_OVERRIDES: Record<string, Cud>;

package/dist/tools/generated/method-map.js

@@ -1,4 +1,3 @@
-// GENERATED by scripts/gen-tools.ts — do not edit. Regenerate: npm run gen:tools
 export const GENERATED_METHOD_TOOLS = {
     "admin.channels.stop": "admin_channels_stop",
     "admin.customer.devices.chromeos.batchChangeStatus": "admin_customer_devices_chromeos_batch_change_status",
@@ -892,3 +891,159 @@ export const CURATED_METHOD_IDS = [
     "webmasters.sites.get",
     "webmasters.sites.list",
 ];
+// Every curated tool name registered on each curated method id (see
+// gen-config.ts: derived from the curated registrations themselves).
+export const CURATED_METHOD_TOOLS = {
+    "analyticsadmin.accountSummaries.list": ["analytics_account_summaries"],
+    "analyticsdata.properties.getMetadata": ["analytics_get_metadata"],
+    "analyticsdata.properties.runRealtimeReport": ["analytics_run_realtime_report"],
+    "analyticsdata.properties.runReport": ["analytics_run_report"],
+    "calendar.calendarList.list": ["calendar_list_calendars"],
+    "calendar.calendars.insert": ["calendar_create_calendar"],
+    "calendar.events.delete": ["calendar_delete_event"],
+    "calendar.events.get": ["calendar_get_event", "calendar_respond_event", "calendar_update_event"],
+    "calendar.events.insert": ["calendar_create_event"],
+    "calendar.events.instances": ["calendar_list_instances"],
+    "calendar.events.list": ["calendar_list_events"],
+    "calendar.events.move": ["calendar_move_event"],
+    "calendar.events.patch": ["calendar_respond_event", "calendar_update_event"],
+    "calendar.events.quickAdd": ["calendar_quick_add"],
+    "calendar.freebusy.query": ["calendar_get_freebusy"],
+    "chat.spaces.get": ["chat_spaces_get"],
+    "chat.spaces.list": ["chat_spaces_list"],
+    "chat.spaces.messages.create": ["chat_messages_create"],
+    "chat.spaces.messages.list": ["chat_messages_list"],
+    "directory.groups.list": ["admin_groups_list"],
+    "directory.members.list": ["admin_group_members_list"],
+    "directory.users.get": ["admin_users_get"],
+    "directory.users.list": ["admin_users_list"],
+    "directory.users.patch": ["admin_users_update"],
+    "docs.documents.batchUpdate": ["docs_add_tab", "docs_batch_update", "docs_create_footer", "docs_create_header", "docs_create_named_range", "docs_create_paragraph_bullets", "docs_delete_footer", "docs_delete_header", "docs_delete_named_range", "docs_delete_paragraph_bullets", "docs_delete_range", "docs_delete_tab", "docs_insert_inline_image", "docs_insert_page_break", "docs_insert_section_break", "docs_insert_table", "docs_insert_text", "docs_modify_table", "docs_replace_named_range_content", "docs_replace_text", "docs_update_document_style", "docs_update_paragraph_style", "docs_update_style", "docs_update_tab_properties"],
+    "docs.documents.create": ["docs_create"],
+    "docs.documents.get": ["docs_get", "docs_read"],
+    "drive.about.get": ["drive_get_about"],
+    "drive.accessproposals.list": ["drive_access_proposal_list"],
+    "drive.accessproposals.resolve": ["drive_access_proposal_resolve"],
+    "drive.comments.create": ["drive_comment_create"],
+    "drive.comments.delete": ["drive_comment_delete"],
+    "drive.comments.get": ["drive_comment_get"],
+    "drive.comments.list": ["drive_comment_list"],
+    "drive.comments.update": ["drive_comment_update"],
+    "drive.drives.get": ["drive_shared_drive_get"],
+    "drive.drives.list": ["drive_shared_drives_list"],
+    "drive.files.copy": ["drive_copy", "drive_transfer"],
+    "drive.files.create": ["drive_create_folder", "drive_transfer", "drive_upload"],
+    "drive.files.delete": ["drive_delete"],
+    "drive.files.emptyTrash": ["drive_empty_trash"],
+    "drive.files.export": ["drive_export", "drive_read", "drive_transfer"],
+    "drive.files.get": ["drive_download", "drive_export", "drive_move", "drive_read", "drive_transfer", "drive_update"],
+    "drive.files.list": ["drive_list", "drive_search"],
+    "drive.files.update": ["drive_move", "drive_transfer", "drive_trash", "drive_untrash", "drive_update"],
+    "drive.permissions.create": ["drive_share", "drive_transfer"],
+    "drive.permissions.delete": ["drive_remove_permission", "drive_transfer"],
+    "drive.permissions.list": ["drive_list_permissions"],
+    "drive.permissions.update": ["drive_permission_update"],
+    "drive.replies.create": ["drive_reply_create"],
+    "drive.replies.delete": ["drive_reply_delete"],
+    "drive.replies.list": ["drive_reply_list"],
+    "drive.replies.update": ["drive_reply_update"],
+    "drive.revisions.delete": ["drive_revision_delete"],
+    "drive.revisions.list": ["drive_revision_list"],
+    "drive.revisions.update": ["drive_revision_update"],
+    "forms.forms.batchUpdate": ["forms_batch_update"],
+    "forms.forms.create": ["forms_create"],
+    "forms.forms.get": ["forms_get"],
+    "forms.forms.responses.get": ["forms_response_get"],
+    "forms.forms.responses.list": ["forms_responses_list"],
+    "forms.forms.setPublishSettings": ["forms_set_publish_settings"],
+    "forms.forms.watches.list": ["forms_watches_list"],
+    "gmail.users.drafts.create": ["gmail_create_draft"],
+    "gmail.users.drafts.delete": ["gmail_delete_draft"],
+    "gmail.users.drafts.get": ["gmail_get_draft", "gmail_send_draft"],
+    "gmail.users.drafts.list": ["gmail_list_drafts"],
+    "gmail.users.drafts.send": ["gmail_send_draft"],
+    "gmail.users.getProfile": ["gmail_get_profile"],
+    "gmail.users.history.list": ["gmail_list_history"],
+    "gmail.users.labels.create": ["gmail_create_label"],
+    "gmail.users.labels.delete": ["gmail_delete_label"],
+    "gmail.users.labels.list": ["gmail_list_labels"],
+    "gmail.users.messages.attachments.get": ["gmail_download_attachment"],
+    "gmail.users.messages.batchDelete": ["gmail_batch_delete"],
+    "gmail.users.messages.batchModify": ["gmail_batch_modify"],
+    "gmail.users.messages.delete": ["gmail_delete"],
+    "gmail.users.messages.get": ["gmail_create_draft", "gmail_read", "gmail_read_batch", "gmail_search", "gmail_send"],
+    "gmail.users.messages.list": ["gmail_search"],
+    "gmail.users.messages.modify": ["gmail_modify_labels"],
+    "gmail.users.messages.send": ["gmail_send"],
+    "gmail.users.messages.trash": ["gmail_trash"],
+    "gmail.users.settings.getVacation": ["gmail_get_vacation"],
+    "gmail.users.settings.updateVacation": ["gmail_set_vacation"],
+    "gmail.users.threads.get": ["gmail_read_thread"],
+    "meet.conferenceRecords.get": ["meet_conference_record_get"],
+    "meet.conferenceRecords.list": ["meet_conference_records_list"],
+    "meet.conferenceRecords.recordings.list": ["meet_recordings_list"],
+    "meet.conferenceRecords.transcripts.entries.list": ["meet_transcript_entries_list"],
+    "meet.conferenceRecords.transcripts.list": ["meet_transcripts_list"],
+    "people.contactGroups.create": ["contacts_group_create"],
+    "people.contactGroups.get": ["contacts_group_members"],
+    "people.contactGroups.list": ["contacts_groups_list"],
+    "people.people.connections.list": ["contacts_list"],
+    "people.people.createContact": ["contacts_create"],
+    "people.people.deleteContact": ["contacts_delete"],
+    "people.people.get": ["contacts_get", "contacts_update"],
+    "people.people.getBatchGet": ["contacts_group_members"],
+    "people.people.searchContacts": ["contacts_resolve", "contacts_search"],
+    "people.people.updateContact": ["contacts_update"],
+    "reports.activities.list": ["reports_activities_list"],
+    "searchconsole.urlInspection.index.inspect": ["searchconsole_url_inspect"],
+    "sheets.spreadsheets.batchUpdate": ["sheets_add_conditional_format_rule", "sheets_add_named_range", "sheets_add_sheet", "sheets_auto_resize_dimensions", "sheets_batch_update", "sheets_clear_basic_filter", "sheets_delete_dimension", "sheets_delete_named_range", "sheets_delete_sheet", "sheets_duplicate_sheet", "sheets_find_replace", "sheets_format_cells", "sheets_insert_dimension", "sheets_merge_cells", "sheets_set_basic_filter", "sheets_set_data_validation", "sheets_sort_range", "sheets_unmerge_cells", "sheets_update_borders", "sheets_update_sheet_properties"],
+    "sheets.spreadsheets.create": ["sheets_create"],
+    "sheets.spreadsheets.get": ["sheets_format_cells", "sheets_get"],
+    "sheets.spreadsheets.values.append": ["sheets_append_rows"],
+    "sheets.spreadsheets.values.batchClear": ["sheets_batch_clear"],
+    "sheets.spreadsheets.values.batchGet": ["sheets_batch_read"],
+    "sheets.spreadsheets.values.batchUpdate": ["sheets_batch_write"],
+    "sheets.spreadsheets.values.clear": ["sheets_clear_range"],
+    "sheets.spreadsheets.values.get": ["sheets_read_range"],
+    "sheets.spreadsheets.values.update": ["sheets_write_range"],
+    "slides.presentations.batchUpdate": ["slides_batch_update"],
+    "slides.presentations.create": ["slides_create"],
+    "slides.presentations.get": ["slides_get"],
+    "slides.presentations.pages.get": ["slides_page_get"],
+    "slides.presentations.pages.getThumbnail": ["slides_page_thumbnail"],
+    "tasks.tasklists.delete": ["tasks_list_delete"],
+    "tasks.tasklists.get": ["tasks_list_get"],
+    "tasks.tasklists.insert": ["tasks_list_insert"],
+    "tasks.tasklists.list": ["tasks_lists_list"],
+    "tasks.tasklists.patch": ["tasks_list_update"],
+    "tasks.tasks.clear": ["tasks_clear"],
+    "tasks.tasks.delete": ["tasks_delete"],
+    "tasks.tasks.get": ["tasks_get"],
+    "tasks.tasks.insert": ["tasks_insert"],
+    "tasks.tasks.list": ["tasks_list"],
+    "tasks.tasks.move": ["tasks_move"],
+    "tasks.tasks.patch": ["tasks_update"],
+    "webmasters.searchanalytics.query": ["searchconsole_searchanalytics_query"],
+    "webmasters.sitemaps.delete": ["searchconsole_sitemaps_delete"],
+    "webmasters.sitemaps.get": ["searchconsole_sitemaps_get"],
+    "webmasters.sitemaps.list": ["searchconsole_sitemaps_list"],
+    "webmasters.sitemaps.submit": ["searchconsole_sitemaps_submit"],
+    "webmasters.sites.add": ["searchconsole_sites_add"],
+    "webmasters.sites.delete": ["searchconsole_sites_delete"],
+    "webmasters.sites.get": ["searchconsole_sites_get"],
+    "webmasters.sites.list": ["searchconsole_sites_list"],
+};
+// A runtime copy of scripts/gen-config.ts's own CUD_OVERRIDES (scripts/ and
+// src/ are separate compilation roots, so src/ code cannot import the build
+// script directly). google-api.ts applies this the same way gen-tools.ts
+// does when generating a method's twin (CUD_OVERRIDES[id] ?? cudFromMethod),
+// so the escape hatch and a method's generated twin always agree on its
+// write class, including for the methods HTTP-verb inference misreads.
+export const CUD_OVERRIDES = {
+    "admin.customer.devices.chromeos.batchChangeStatus": "delete",
+    "admin.customer.devices.chromeos.issueCommand": "delete",
+    "analyticsadmin.properties.acknowledgeUserDataCollection": "update",
+    "directory.chromeosdevices.action": "delete",
+    "directory.mobiledevices.action": "delete",
+    "searchconsole.urlTestingTools.mobileFriendlyTest.run": "read",
+};

package/dist/tools/gmail.d.ts

@@ -18,6 +18,12 @@ interface ReplyDerivation {
  * to/cc/subject. On any fetch failure, degrade to the API id for threading and
  * report sourceFound:false so the caller can decide. */
 export declare function resolveReply(gmail: any, account: string, primaryEmail: string, replyToMessageId: string, replyAll: boolean): Promise<ReplyDerivation>;
+/** Reads attachment files into buffers (THIS server reads them, never
+ * MailComposer), enforces absolute-path + total-size guards, and derives the
+ * MIME filename via basename so a caller name can't inject path separators.
+ * The absolute-path + config/token-dir confinement rule itself lives in
+ * assertLocalPathAllowed (src/tools/_local-files.ts), shared with Drive's
+ * upload/update/download/export so the two surfaces cannot drift apart. */
 export declare function readAttachments(raw: Array<{
     path: string;
     filename?: string;