omitly-mcp 5.4.0 → 5.5.0

package/README.md

@@ -11,7 +11,7 @@ is unchanged since it was sealed. It does not show that nothing else sensitive
 remains in the document — the opposite of pasting a confidential file into a
 chat model.
 
-**Five of the eleven tools (`find_sensitive_regions`, `locate_text`,
+**Five of the eighteen tools (`find_sensitive_regions`, `locate_text`,
 `check_redaction`, `verify_redaction`, `extract_pdf_text`) work out of the
 box — `npm install`, no Rust toolchain, no native binary, no desktop app.**
 They run on a wasm-bindgen build of the same detector that powers the web
@@ -103,6 +103,26 @@ prompt is read from the shipped `skill/SKILL.md`, so the two never differ.
 | `check_license` | Reports the current licence or trial state — tier, trial days left, the vendor-signed licensee name, which resolution step supplied the licence, and whether it is bound to this machine. Free, takes no arguments, reads no document, and is re-resolved on every call so buy → save licence → call again works without a restart. **Never returns the device fingerprint or the licence file's contents** — device binding is a yes/no. Requires a native engine: the wasm free tier has no licence concept. |
 | `propose_redactions` | omitly#1643, bring your own AI: proposes regions for a PERSON to accept in the Omitly desktop app. Writes nothing. Requires the desktop app to be running on this computer; on acceptance the desktop removes, verifies and seals, and the record shows a person decided (`human-desktop`). |
 | `get_proposal_status` | Follows a queued proposal: pending, accepted, rejected, applied (with output path and verdict), failed or expired. Free; reads no document. |
+| `pdf_info` | omitly#1841, free page tool: page count, each page's size and rotation (first 500), and flags for encryption, forms, signatures, comments, XFA and layers. Counts and flags only, never text. Works on encrypted files. Page numbers start at 1. |
+| `merge_pdfs` | omitly#1841, free page tool: joins 2 to 50 PDFs, in order, into one NEW PDF. Keeps every page and the forms; bookmarks, metadata, page labels and layers are not carried over (listed in `lost`). Digital signatures are removed. |
+| `extract_pages` | omitly#1841, free page tool: copies chosen pages (numbers and ranges, 1-based, in the order listed) into one NEW PDF. |
+| `split_pdf` | omitly#1841, free page tool: splits a PDF into one NEW PDF per range, named `<prefix>-p<first>-<last>.pdf`, all or none. |
+| `edit_pages` | omitly#1841, free page tool: reorders, deletes, rotates and inserts blank pages in one step from the FINAL page list. Writes a NEW PDF. |
+
+### Page tools (omitly#1841)
+
+`pdf_info`, `merge_pdfs`, `extract_pages`, `split_pdf` and `edit_pages` are free and uncapped. They run inside this
+package with no desktop app and no licence, never go through the accept-in-app queue, and are not counted toward the
+10-a-month check cap. Each writes a NEW `.pdf` inside the allowed folder (never overwriting, never into a hidden
+folder or `.git`) and reports what it could not carry over in `lost` and `warnings`. Page numbers start at 1; the
+check tools return 0-based `page` values, so add 1.
+
+All PDF parsing for these five tools happens in a child process (killed after 120 seconds, started with an empty
+environment; on Windows the system adds a few variables such as `PATH` and `SystemRoot`, and none of them reaches the agent), so a damaged or hostile PDF cannot hang or crash the server. They are **not redaction** and do not
+sanitise a document: pages you leave out are not copied, but document metadata, bookmark titles and anything a kept
+page shares with a left-out page can remain. Digital signatures are removed from the output (it is a new, unsigned
+document). The four tools that write refuse encrypted PDFs and dynamic XFA forms; `pdf_info` answers for an encrypted PDF (`encrypted: true`). When `OMITLY_ALLOWED_DIR` is not set and the working
+directory is your home folder or the filesystem root, these tools refuse and ask you to set it.
 
 ### Accept-in-app (omitly#1643)
 
@@ -150,7 +170,7 @@ See [DEMO.md](./DEMO.md) for a full Claude Code walkthrough.
 
 ## Status
 
-The MCP surface (eleven tools, schemas, transport), the native engine binary
+The MCP surface (eighteen tools, schemas, transport), the native engine binary
 (`crates/omitly-cli`, built as `omitly-redact`), and the bundled wasm engine
 (`crates/leakcheck-wasm`, covering the five free tools without a native
 binary) are all implemented and pass end-to-end tests. `find_sensitive_regions`
@@ -308,6 +328,13 @@ reads and writes to one allowed directory:
   outside it is refused.
 - Outputs **never overwrite an existing file** (or its `.audit.json` sidecar);
   the agent is asked to pick a fresh name instead.
+- The five page tools re-check, immediately before and after each write, that the output
+  folder still resolves to the folder that was confined, and remove what they placed if it
+  does not. A hostile local user who swaps that folder for a symlink in the instant between a
+  check and the system call that creates the file can still redirect one write: that window
+  is not closed, and hostile local users are outside this server's threat model (below). Likewise,
+  if another process renames the output folder mid-call, the call fails but files already placed,
+  and a temp file, can remain under the renamed folder.
 - **`OMITLY_ENGINE_TIMEOUT_MS`** (default 120000) — a wedged engine process is
   killed at the deadline instead of hanging the agent's tool call.
 

package/THIRD-PARTY-NOTICES.md

@@ -546,7 +546,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 The following npm packages may be included in this product:
 
- - body-parser@2.3.0
+ - body-parser@2.4.0
  - type-is@2.1.0
 
 These packages each contain the following license:
@@ -645,7 +645,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 The following npm packages may be included in this product:
 
  - etag@1.8.1
- - proxy-addr@2.0.7
+ - proxy-addr@2.0.8
 
 These packages each contain the following license:
 
@@ -802,6 +802,7 @@ The following npm packages may be included in this product:
 
  - content-type@1.0.5
  - content-type@2.0.0
+ - content-type@2.1.0
 
 These packages each contain the following license:
 
@@ -989,7 +990,7 @@ SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 The following npm package may be included in this product:
 
- - qs@6.15.3
+ - qs@6.16.1
 
 This package contains the following license:
 
@@ -1027,7 +1028,7 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 The following npm package may be included in this product:
 
- - iconv-lite@0.7.2
+ - iconv-lite@0.7.3
 
 This package contains the following license:
 
@@ -1056,7 +1057,7 @@ WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 The following npm package may be included in this product:
 
- - ip-address@10.2.0
+ - ip-address@10.7.3
 
 This package contains the following license:
 
@@ -1112,7 +1113,7 @@ THE SOFTWARE.
 
 The following npm package may be included in this product:
 
- - fast-uri@3.1.2
+ - fast-uri@3.1.8
 
 This package contains the following license:
 
@@ -1227,6 +1228,27 @@ CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
 -----------
 
+The following npm package may be included in this product:
+
+ - tslib@1.14.1
+
+This package contains the following license:
+
+Copyright (c) Microsoft Corporation.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+PERFORMANCE OF THIS SOFTWARE.
+
+-----------
+
 The following npm package may be included in this product:
 
  - zod-to-json-schema@3.25.2
@@ -1372,6 +1394,66 @@ SOFTWARE.
 
 -----------
 
+The following npm package may be included in this product:
+
+ - @pdf-lib/upng@1.0.1
+
+This package contains the following license:
+
+MIT License
+
+Copyright (c) 2017 Photopea
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+-----------
+
+The following npm package may be included in this product:
+
+ - @pdf-lib/standard-fonts@1.0.0
+
+This package contains the following license:
+
+MIT License
+
+Copyright (c) 2018 Andrew Dillon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+-----------
+
 The following npm package may be included in this product:
 
  - safer-buffer@2.1.2
@@ -1432,6 +1514,36 @@ SOFTWARE.
 
 -----------
 
+The following npm package may be included in this product:
+
+ - pdf-lib@1.17.1
+
+This package contains the following license:
+
+MIT License
+
+Copyright (c) 2019 Andrew Dillon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+-----------
+
 The following npm packages may be included in this product:
 
  - side-channel-weakmap@1.0.2
@@ -1525,7 +1637,7 @@ SOFTWARE.
 
 The following npm package may be included in this product:
 
- - hono@4.12.27
+ - hono@4.13.13
 
 This package contains the following license:
 
@@ -1555,7 +1667,7 @@ SOFTWARE.
 
 The following npm package may be included in this product:
 
- - @hono/node-server@1.19.14
+ - @hono/node-server@2.0.12
 
 This package contains the following license:
 
@@ -1615,7 +1727,7 @@ SOFTWARE.
 
 The following npm package may be included in this product:
 
- - @modelcontextprotocol/sdk@1.29.0
+ - @modelcontextprotocol/sdk@1.32.1
 
 This package contains the following license:
 
@@ -1712,7 +1824,7 @@ SOFTWARE.
 
 The following npm package may be included in this product:
 
- - zod@3.25.76
+ - zod@4.6.7
 
 This package contains the following license:
 
@@ -1887,6 +1999,59 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 -----------
 
+The following npm package may be included in this product:
+
+ - pako@1.0.11
+
+This package contains the following license:
+
+pako 1.0.11 is declared (MIT AND Zlib). Its own MIT licence is reproduced first (node_modules/pako/LICENSE, identical to github.com/nodeca/pako@1.0.11 LICENSE), then the zlib notice carried in the headers of pako's ported zlib sources (github.com/nodeca/pako@1.0.11 lib/zlib/*.js, fetched 2026-11-09).
+
+(The MIT License)
+
+Copyright (C) 2014-2017 by Vitaly Puzrin and Andrei Tuputcyn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+-----
+
+(C) 1995-2013 Jean-loup Gailly and Mark Adler
+(C) 2014-2017 Vitaly Puzrin and Andrey Tupitsin
+
+This software is provided 'as-is', without any express or implied
+warranty. In no event will the authors be held liable for any damages
+arising from the use of this software.
+
+Permission is granted to anyone to use this software for any purpose,
+including commercial applications, and to alter it and redistribute it
+freely, subject to the following restrictions:
+
+1. The origin of this software must not be misrepresented; you must not
+  claim that you wrote the original software. If you use this software
+  in a product, an acknowledgment in the product documentation would be
+  appreciated but is not required.
+2. Altered source versions must be plainly marked as such, and must not be
+  misrepresented as being the original software.
+3. This notice may not be removed or altered from any source distribution.
+
+-----------
+
 The following npm package may be included in this product:
 
  - inherits@2.0.4

package/dist/annotations.js

@@ -0,0 +1,8 @@
+export const annotations = (title, readOnly, idempotent = false) => ({
+    title,
+    readOnlyHint: readOnly,
+    destructiveHint: false,
+    idempotentHint: idempotent,
+    openWorldHint: false,
+});
+//# sourceMappingURL=annotations.js.map

package/dist/annotations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"annotations.js","sourceRoot":"","sources":["../src/annotations.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,QAAiB,EAAE,UAAU,GAAG,KAAK,EAAmB,EAAE,CAAC,CAAC;IACrG,KAAK;IACL,YAAY,EAAE,QAAQ;IACtB,eAAe,EAAE,KAAK;IACtB,cAAc,EAAE,UAAU;IAC1B,aAAa,EAAE,KAAK;CACrB,CAAC,CAAC"}