mcp-word-bridge 3.2.0 → 3.2.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Leonid Mokrushin
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -12,14 +12,16 @@ Single process. The MCP client spawns `index.js`, which starts both the HTTPS br
 
 ## Setup
 
-### 1. Sideload the add-in manifest
-
-Copy the manifest to Word's sideload directory:
+### 1. Install and sideload the add-in
 
 ```bash
-cp manifest.xml ~/Library/Containers/com.microsoft.Word/Data/Documents/wef/
+npx mcp-word-bridge-install
 ```
 
+This copies the manifest into Word's sideload directory. On macOS it's automatic; on Windows it attempts the standard location and prints manual steps if needed.
+
+Restart Word → Home → Add-ins → **MCP Word Bridge**
+
 ### 2. Add MCP config
 
 Add to your MCP client configuration (e.g. `.kiro/settings/mcp.json`):
@@ -28,8 +30,8 @@ Add to your MCP client configuration (e.g. `.kiro/settings/mcp.json`):
 {
   "mcpServers": {
     "word-bridge": {
-      "command": "node",
-      "args": ["/path/to/word-addin/index.js"],
+      "command": "npx",
+      "args": ["-y", "mcp-word-bridge"],
       "disabled": false
     }
   }
@@ -51,15 +53,16 @@ That's it. The MCP server starts automatically when your MCP client loads the co
 ## File Layout
 
 ```
-word-addin/
-├── index.js           # Single entry point (MCP + bridge server)
-├── taskpane.html      # Served to Word add-in
-├── taskpane-app.js    # Client-side Word JS API logic
+mcp-word-bridge/
+├── index.js              # Single entry point (MCP + bridge server)
+├── install-manifest.js   # Manifest sideloader (npx mcp-word-bridge-install)
+├── taskpane.html         # Served to Word add-in
+├── taskpane-app.js       # Client-side Word JS API logic
 ├── certs/
-│   ├── cert.pem       # Self-signed TLS cert
-│   └── key.pem        # TLS private key
-├── manifest.xml       # Office add-in manifest (sideloaded)
-├── cert.conf          # OpenSSL config for cert regeneration
+│   ├── cert.pem          # Self-signed TLS cert
+│   ├── key.pem           # TLS private key
+│   └── cert.conf         # OpenSSL config for cert regeneration
+├── manifest.xml          # Office add-in manifest
 ├── package.json
 └── README.md
 ```
@@ -111,13 +114,20 @@ word-addin/
 
 ## Regenerating TLS Certificates
 
-The self-signed cert is required for the HTTPS connection to the taskpane. To regenerate:
+A self-signed localhost certificate is **auto-generated on first run** if `certs/cert.pem` and `certs/key.pem` don't exist. No manual step needed.
 
+To trust the cert (required for Word to connect without warnings):
+
+**macOS:**
 ```bash
-openssl req -x509 -newkey rsa:2048 -keyout certs/key.pem -out certs/cert.pem -days 3650 -nodes -config cert.conf
+sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain node_modules/mcp-word-bridge/certs/cert.pem
 ```
 
-Then trust the cert in Keychain Access (macOS) to avoid browser warnings.
+**To regenerate manually:**
+```bash
+rm certs/cert.pem certs/key.pem
+node index.js  # will regenerate on startup
+```
 
 ## Known Limitations & Word API Behavior
 

package/index.js

@@ -21,6 +21,31 @@ const CERTS_DIR = path.join(__dirname, 'certs');
 // PART 1: HTTPS + WebSocket Bridge Server
 // ═══════════════════════════════════════════════════════════════════════════════
 
+// Generate self-signed certs if they don't exist
+function ensureCerts() {
+  const certPath = path.join(CERTS_DIR, 'cert.pem');
+  const keyPath = path.join(CERTS_DIR, 'key.pem');
+  if (fs.existsSync(certPath) && fs.existsSync(keyPath)) return;
+  process.stderr.write('[mcp-word-bridge] Generating self-signed TLS certificate for localhost...\n');
+  if (!fs.existsSync(CERTS_DIR)) fs.mkdirSync(CERTS_DIR, { recursive: true });
+  const { execSync } = require('child_process');
+  const confPath = path.join(CERTS_DIR, 'cert.conf');
+  if (!fs.existsSync(confPath)) {
+    fs.writeFileSync(confPath, [
+      '[req]', 'default_bits = 2048', 'prompt = no', 'default_md = sha256',
+      'distinguished_name = dn', 'x509_extensions = v3_req', '',
+      '[dn]', 'CN = localhost', '',
+      '[v3_req]', 'basicConstraints = CA:TRUE', 'subjectAltName = @alt_names', '',
+      '[alt_names]', 'DNS.1 = localhost', 'IP.1 = 127.0.0.1', ''
+    ].join('\n'));
+  }
+  execSync('openssl req -x509 -newkey rsa:2048 -keyout "' + keyPath + '" -out "' + certPath + '" -days 3650 -nodes -config "' + confPath + '"', { stdio: 'pipe' });
+  process.stderr.write('[mcp-word-bridge] Certificate generated at ' + CERTS_DIR + '\n');
+  process.stderr.write('[mcp-word-bridge] NOTE: You may need to trust this cert in your OS keychain for Word to connect.\n');
+}
+
+ensureCerts();
+
 const sslOptions = {
   key: fs.readFileSync(path.join(CERTS_DIR, 'key.pem')),
   cert: fs.readFileSync(path.join(CERTS_DIR, 'cert.pem'))

package/install-manifest.js

@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+/**
+ * Sideload the Word add-in manifest.
+ * Run manually: npx mcp-word-bridge-install
+ * Or: node node_modules/mcp-word-bridge/install-manifest.js
+ */
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const manifestSrc = path.join(__dirname, 'manifest.xml');
+
+if (process.platform === 'darwin') {
+  const wefDir = path.join(os.homedir(), 'Library/Containers/com.microsoft.Word/Data/Documents/wef');
+  const dest = path.join(wefDir, 'manifest.xml');
+
+  if (!fs.existsSync(wefDir)) {
+    fs.mkdirSync(wefDir, { recursive: true });
+  }
+  fs.copyFileSync(manifestSrc, dest);
+  console.log('✓ Manifest installed to: ' + dest);
+  console.log('  Restart Word, then: Home → Add-ins → MCP Word Bridge');
+} else if (process.platform === 'win32') {
+  const wefDir = path.join(os.homedir(), 'AppData', 'Local', 'Microsoft', 'Office', '16.0', 'Wef');
+  try {
+    if (!fs.existsSync(wefDir)) {
+      fs.mkdirSync(wefDir, { recursive: true });
+    }
+    const dest = path.join(wefDir, 'manifest.xml');
+    fs.copyFileSync(manifestSrc, dest);
+    console.log('✓ Manifest installed to: ' + dest);
+    console.log('  Restart Word, then: Insert → My Add-ins → Developer Add-ins');
+  } catch (e) {
+    console.log('Could not auto-install manifest on Windows.');
+    console.log('Manual steps:');
+    console.log('  1. Copy this file to a local folder: ' + manifestSrc);
+    console.log('  2. In Word: File → Options → Trust Center → Trusted Add-in Catalogs');
+    console.log('  3. Add the folder path as a catalog');
+    console.log('  4. Insert → My Add-ins → Shared Folder → MCP Word Bridge');
+  }
+} else {
+  console.log('Platform not supported for local sideloading.');
+  console.log('For Word on the Web, upload the manifest via the admin center.');
+  console.log('Manifest location: ' + manifestSrc);
+}

package/package.json

@@ -1,15 +1,21 @@
 {
   "name": "mcp-word-bridge",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "description": "MCP server for live Word document editing via Office Add-in",
   "main": "index.js",
   "bin": {
-    "mcp-word-bridge": "index.js"
+    "mcp-word-bridge": "index.js",
+    "mcp-word-bridge-install": "install-manifest.js"
   },
   "scripts": {
-    "start": "node index.js"
+    "start": "node index.js",
+    "install-manifest": "node install-manifest.js"
   },
   "keywords": ["mcp", "word", "office", "add-in", "document", "editing"],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/likelion/mcp-word-bridge.git"
+  },
   "author": "Leonid Mokrushin <likelion@gmail.com>",
   "license": "MIT",
   "dependencies": {

package/certs/cert.pem

@@ -1,19 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDATCCAemgAwIBAgIUXHIdF3kFBwDnYn+HtAfpiihdkx4wDQYJKoZIhvcNAQEL
-BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTI2MDYwMTEzMDQxMFoXDTI3MDYw
-MTEzMDQxMFowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEA30z83NusMTz0TTHfQN2lb7vQsBR+RcI6fNMEu9Diz2lO
-+NyvMhCY44esfr/h/LaT2t49HcuQF/1BN0UlbtKxRHU7Ex8lu6cPwYrYZgwcL+0p
-jyYdHeCb10kzGagOn86PLt6Q6TG+Rmiqi1P4Q6+bfsXGRj6tQkR5SxgMZFC4claM
-O7o9h1IibstyN+FP/5jZoVJOa0/qPe76292PwFYJXAen0J9ho2PLrTL78hVegG3v
-B0IqBtvf4fARnNbT+VLZMf+zYTmYh3rVEh2FHg9FejO1LWQpab4b6kA9HN4Uj7f6
-Fgjf/quIihLoMNGkZ5FrKpOy+UnTS5w0ZrBUmxhvpwIDAQABo0swSTAMBgNVHRME
-BTADAQH/MBoGA1UdEQQTMBGCCWxvY2FsaG9zdIcEfwAAATAdBgNVHQ4EFgQUHGnT
-m6TAtBX/3kEcyqsP1MjY8+AwDQYJKoZIhvcNAQELBQADggEBAFXEtaUBwTxp/nfs
-4r6L7xpbTERLx+/4R/8RNP09m9W31SsGHoTcVmqTZz9QtKzWdFUH5xxREOEvHnGA
-a6VAljMo6PYYcZlZH83CWwDbdlKdm7PVxEbtPWtz8B43lUVnBaRU6+RORTVSjvnU
-KfRtsLP30qctT8/ZjPWEcT2+5gOczYzECYtH5bVJdmr+rWJRVORwnEBVUnxWKJ0h
-1vK9yQ3dfJlMV6aHDmkSncyYwHvbV6rTn4aiaNW148ehF++NQ7/6bX2M4w6rcHfi
-tfRjoOnyCvN6km0PYbd7pKQzUVhJPUFMYPELiJpD8KxjjIL9fbjf+nQz069HgLYW
-vyKVAvE=
------END CERTIFICATE-----

package/certs/key.pem

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDfTPzc26wxPPRN
-Md9A3aVvu9CwFH5Fwjp80wS70OLPaU743K8yEJjjh6x+v+H8tpPa3j0dy5AX/UE3
-RSVu0rFEdTsTHyW7pw/BithmDBwv7SmPJh0d4JvXSTMZqA6fzo8u3pDpMb5GaKqL
-U/hDr5t+xcZGPq1CRHlLGAxkULhyVow7uj2HUiJuy3I34U//mNmhUk5rT+o97vrb
-3Y/AVglcB6fQn2GjY8utMvvyFV6Abe8HQioG29/h8BGc1tP5Utkx/7NhOZiHetUS
-HYUeD0V6M7UtZClpvhvqQD0c3hSPt/oWCN/+q4iKEugw0aRnkWsqk7L5SdNLnDRm
-sFSbGG+nAgMBAAECggEADoDBEZUg52fGlDbvgZaDtrCTmsQR+XTmeJH6BjrIaGE2
-FFq89Dr4uxpmPSs4QcIX80io3oUInE5CDJVsm3iKs+ALULAessPkdZUPff0+XWyB
-XP9EN9sNNBvYekuce4ueaBRjhAnLimYk4Xy4LKk8p6yvtoM+nIW2/QYYU/GcMSzH
-wuq6U1aX4RopFKlNDHHCQa6+kqdVs/qKICu9Xd74GDtJ3RnNuw0OjHE09KSIEL0W
-ifiE9tZ1yQhxWsDFnhYKVwd2yYARiy4afP7ieLwEoIN4vngsz7H5RUJhFmEiyzbn
-P3kaMeaExNBYOjMXmqsGhiY6NoWzG3Gz7GTofIU1hQKBgQD6NW8fH6pzWvWiQ08r
-+ATnrPtMaoFVRUCpwMlJnM02cPXPIatM5y25fIuWkxWHa8YUXDcDacN5/R3mEdfn
-qTV3NrraXHBwaZprqikgWRCTCMypmNuYH0n+yA9i1m2Te4PyK4z9uaHC96+li6U3
-woceGKixzg3f5Q8JQy8XO5MBdQKBgQDkeB2D+6R7tA35pTgIjzZwtcK9PEOhIa8f
-WsdwSuh74PkAYnid7ksVzHhHo6dbWYKy8KA4TevTDepLWNQjkChsaYX+dcYOgsIW
-4ixrSbOlgqCtVtTP98ytSHaJspgCCQE2SzvC0IcZqYk9BOcH45TcFIyWfV15D3mw
-pqhPXDtNKwKBgEMAuCcvhaeqfgjb2YG+wyF/UzRdeRDqoKxUshKCaPnhOhIjxAmu
-BrKbRY4nCSbgl4SwRRMm6W/rdmw77wNcbrLj9xmuk3Wm8fFO+gBtmWCmhJgOFRAh
-oOEXlfcz0NgjxWu+ed0gLs9VILZGNRI/h4tpsxMaSODiKCqk0SF5lJ5ZAoGBAJDR
-6rOsoTigi3NBXWFfljyfmk9lkeDjfyQ64My3TuKnWm75/Ebvs7yfnWabwAvRk11l
-1cma6u8flPIp3l6klFsUEJGZie/MxsbGmy1uzGcPhFYcAk3JX34/vpPOFzjDCHen
-/LuifuCvbIS3RNLlWYifpfYGhWelfZeSLIIRjq19AoGAUnDp4GFohF8/zExNj4lv
-dGD3GO6Qj401PbhBWjba22JD4V8yHFCPJOsdsiC/KCNeRirbupM+vivxXbNGuNr6
-g+H9sJrOJ4jKZBpjW3T/WVMpQhN498zKKqtUs0GYdDV9aFq4ywTDE0F3/QiWq6RM
-JD0eQifgAJsBmX+bcnej+ws=
------END PRIVATE KEY-----