writedock-mcp 0.4.4 → 0.4.6

package/index.cjs

@@ -6820,14 +6820,14 @@ var require_utils = __commonJS({
         BYTE_HEX[i] = "%" + HEX_DIGITS[i >> 4] + HEX_DIGITS[i & 15];
       }
     }
-    function percentEncodeNonAscii(cp) {
-      if (cp < 2048) {
-        return BYTE_HEX[192 | cp >> 6] + BYTE_HEX[128 | cp & 63];
+    function percentEncodeNonAscii(cp2) {
+      if (cp2 < 2048) {
+        return BYTE_HEX[192 | cp2 >> 6] + BYTE_HEX[128 | cp2 & 63];
       }
-      if (cp < 65536) {
-        return BYTE_HEX[224 | cp >> 12] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      if (cp2 < 65536) {
+        return BYTE_HEX[224 | cp2 >> 12] + BYTE_HEX[128 | cp2 >> 6 & 63] + BYTE_HEX[128 | cp2 & 63];
       }
-      return BYTE_HEX[240 | cp >> 18] + BYTE_HEX[128 | cp >> 12 & 63] + BYTE_HEX[128 | cp >> 6 & 63] + BYTE_HEX[128 | cp & 63];
+      return BYTE_HEX[240 | cp2 >> 18] + BYTE_HEX[128 | cp2 >> 12 & 63] + BYTE_HEX[128 | cp2 >> 6 & 63] + BYTE_HEX[128 | cp2 & 63];
     }
     function stringArrayToHexStripped(input) {
       let acc = "";
@@ -7222,8 +7222,8 @@ var require_utils = __commonJS({
     function encodeFragment(input) {
       return encodeComponent(input, isQueryFragmentCharacter);
     }
-    function isEscapeSafe(cp) {
-      return cp >= 48 && cp <= 57 || cp >= 65 && cp <= 90 || cp >= 97 && cp <= 122 || cp === 42 || cp === 43 || cp === 45 || cp === 46 || cp === 47 || cp === 64 || cp === 95;
+    function isEscapeSafe(cp2) {
+      return cp2 >= 48 && cp2 <= 57 || cp2 >= 65 && cp2 <= 90 || cp2 >= 97 && cp2 <= 122 || cp2 === 42 || cp2 === 43 || cp2 === 45 || cp2 === 46 || cp2 === 47 || cp2 === 64 || cp2 === 95;
     }
     function normalizeQueryFragmentEncoding(input) {
       let output = "";
@@ -29739,7 +29739,7 @@ var MediaStore = class {
 // package.json
 var package_default = {
   name: "@writedock/mcp-server",
-  version: "0.4.4",
+  version: "0.4.6",
   private: true,
   type: "module",
   description: "WriteDock local MCP server for the browser extension",
@@ -29772,6 +29772,91 @@ var distribution_default = {
   registry: "https://registry.npmjs.org/"
 };
 
+// src/extension-update.ts
+var import_node_fs = require("fs");
+var import_promises2 = require("fs/promises");
+var import_node_os = require("os");
+var import_node_path2 = require("path");
+
+// src/extension-id.ts
+var EXTENSION_ORIGIN = "chrome-extension://himncajjeipncfpoajkcmfieonfpjfhb";
+
+// src/extension-update.ts
+var EXTENSION_ID = EXTENSION_ORIGIN.replace("chrome-extension://", "");
+var readManifest = async (directory) => JSON.parse(await (0, import_promises2.readFile)((0, import_node_path2.join)(directory, "manifest.json"), "utf8"));
+var isWriteDock = (manifest) => manifest.name === "\u5199\u4F5C\u53F0 WriteDock";
+function bundledExtension(base = __dirname) {
+  try {
+    const directory = (0, import_node_path2.join)(base, "extension");
+    const manifest = JSON.parse((0, import_node_fs.readFileSync)((0, import_node_path2.join)(directory, "manifest.json"), "utf8"));
+    return typeof manifest.version === "string" ? { directory, version: manifest.version } : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var defaultExtensionDirectory = (home = (0, import_node_os.homedir)()) => (0, import_node_path2.join)(home, "WriteDock", "extension");
+function browserRoots(user = (0, import_node_os.homedir)()) {
+  const names = process.platform === "win32" ? ["Google/Chrome/User Data", "Microsoft/Edge/User Data", "Chromium/User Data", "BraveSoftware/Brave-Browser/User Data"].map((name) => (0, import_node_path2.join)(process.env.LOCALAPPDATA || (0, import_node_path2.join)(user, "AppData/Local"), name)) : process.platform === "darwin" ? ["Google/Chrome", "Microsoft Edge", "Chromium", "BraveSoftware/Brave-Browser"].map((name) => (0, import_node_path2.join)(user, "Library/Application Support", name)) : ["google-chrome", "microsoft-edge", "chromium", "BraveSoftware/Brave-Browser"].map((name) => (0, import_node_path2.join)(process.env.XDG_CONFIG_HOME || (0, import_node_path2.join)(user, ".config"), name));
+  return names;
+}
+async function findInstalledExtension(roots = browserRoots(), id = EXTENSION_ID) {
+  for (const root of roots) {
+    let profiles;
+    try {
+      profiles = await (0, import_promises2.readdir)(root, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const profile of profiles.filter((item) => item.isDirectory() && /^(Default|Profile \d+)$/.test(item.name))) {
+      for (const filename of ["Secure Preferences", "Preferences"]) {
+        try {
+          const preferences = JSON.parse(await (0, import_promises2.readFile)((0, import_node_path2.join)(root, profile.name, filename), "utf8"));
+          const path = preferences.extensions?.settings?.[id]?.path;
+          if (typeof path === "string" && (0, import_node_path2.isAbsolute)(path) && isWriteDock(await readManifest(path))) return (0, import_promises2.realpath)(path);
+        } catch {
+        }
+      }
+    }
+  }
+  return void 0;
+}
+async function installExtensionFiles(source2, target) {
+  const next = await readManifest(source2);
+  if (!isWriteDock(next)) throw new Error("\u5185\u7F6E\u6269\u5C55\u6587\u4EF6\u4E0D\u6B63\u786E");
+  let previous;
+  try {
+    previous = await readManifest(target);
+  } catch {
+  }
+  if (previous) {
+    if (!isWriteDock(previous)) throw new Error("\u76EE\u6807\u76EE\u5F55\u4E0D\u662F WriteDock \u6269\u5C55\uFF0C\u672A\u8986\u76D6");
+    if (previous.key !== next.key) throw new Error("\u65E7\u7248\u6269\u5C55\u7684\u8EAB\u4EFD\u4E0D\u540C\uFF0C\u65E0\u6CD5\u539F\u4F4D\u66F4\u65B0\uFF0C\u8BF7\u91CD\u65B0\u52A0\u8F7D\u4E00\u6B21\u65B0\u7248");
+  }
+  await (0, import_promises2.mkdir)(target, { recursive: true });
+  const backup = previous ? await (0, import_promises2.mkdtemp)((0, import_node_path2.join)((0, import_node_os.tmpdir)(), "writedock-extension-backup-")) : void 0;
+  if (backup) await (0, import_promises2.cp)(target, backup, { recursive: true, force: true });
+  try {
+    await (0, import_promises2.cp)(source2, target, { recursive: true, force: true, filter: (path) => path !== (0, import_node_path2.join)(source2, "manifest.json") });
+    const staged = (0, import_node_path2.join)(target, ".writedock-manifest-update.tmp");
+    await (0, import_promises2.writeFile)(staged, await (0, import_promises2.readFile)((0, import_node_path2.join)(source2, "manifest.json")));
+    await (0, import_promises2.rename)(staged, (0, import_node_path2.join)(target, "manifest.json"));
+  } catch (error2) {
+    if (backup) await (0, import_promises2.cp)(backup, target, { recursive: true, force: true });
+    throw error2;
+  } finally {
+    if (backup) await (0, import_promises2.rm)(backup, { recursive: true, force: true }).catch(() => {
+    });
+  }
+  return { directory: target, version: next.version };
+}
+async function updateInstalledExtension() {
+  const bundle = bundledExtension();
+  if (!bundle) throw new Error("\u5F53\u524D\u670D\u52A1\u6CA1\u6709\u5185\u7F6E\u6269\u5C55\uFF0C\u8BF7\u91CD\u542F agent \u540E\u518D\u8BD5");
+  const target = await findInstalledExtension();
+  if (!target) throw new Error("\u6CA1\u6709\u627E\u5230\u5DF2\u52A0\u8F7D\u7684\u6269\u5C55\u76EE\u5F55\uFF0C\u8BF7\u624B\u52A8\u66F4\u65B0");
+  return installExtensionFiles(bundle.directory, target);
+}
+
 // src/release-info.ts
 var CHECK_INTERVAL = 6 * 60 * 6e4;
 var RETRY_INTERVAL = 10 * 6e4;
@@ -29827,8 +29912,10 @@ function refresh() {
 }
 function mcpReleaseInfo() {
   refresh();
+  const bundle = bundledExtension();
   return {
     mcp_version: package_default.version,
+    ...bundle ? { extension_bundle_version: bundle.version } : {},
     ...latestVersion ? { latest_version: latestVersion } : {},
     update_available: !!latestVersion && newerVersion(latestVersion, package_default.version),
     ...checkedAt ? { update_checked_at: checkedAt } : {},
@@ -29895,13 +29982,14 @@ var LocalBridge = class {
     server.on("upgrade", (req, socket, head) => {
       const origin = req.headers.origin;
       const extensionOrigin = typeof origin === "string" && /^chrome-extension:\/\/[a-p]{32}$/.test(origin);
-      if (!this.validHost(req.headers.host) || !["/extension", "/pair"].includes(req.url || "") || origin && !extensionOrigin || req.url === "/pair" && !extensionOrigin) {
+      if (!this.validHost(req.headers.host) || !["/extension", "/pair", "/connect"].includes(req.url || "") || origin && !extensionOrigin || req.url === "/pair" && !extensionOrigin || req.url === "/connect" && origin !== EXTENSION_ORIGIN) {
         socket.write("HTTP/1.1 403 Forbidden\r\n\r\n");
         socket.destroy();
         return;
       }
       sockets.handleUpgrade(req, socket, head, (ws) => {
         if (req.url === "/pair") this.acceptPairing(ws);
+        else if (req.url === "/connect") void this.acceptConnect(ws);
         else this.accept(ws);
       });
     });
@@ -29933,6 +30021,32 @@ var LocalBridge = class {
     this.pairing = { code, expiresAt, attempts: 0 };
     return { pairing_code: code, expires_at: new Date(expiresAt).toISOString(), expires_in_seconds: 180, instructions: "\u5C06\u6B64\u4E00\u6B21\u6027\u914D\u5BF9\u7801\u7C98\u8D34\u5230\u6269\u5C55\u7684\u300CMCP \u8FDE\u63A5 \u2192 \u8F93\u5165\u4E00\u6B21\u6027\u914D\u5BF9\u7801\u300D\u3002\u6709\u6548\u671F 3 \u5206\u949F\uFF0C\u4F7F\u7528\u4E00\u6B21\u540E\u5931\u6548\u3002\u65E0\u9700\u91CD\u65B0\u5B89\u88C5 MCP \u6216\u4FEE\u6539 agent \u914D\u7F6E\u3002\u786E\u8BA4\u7528\u6237\u8981\u8FDE\u63A5\u5F53\u524D\u6269\u5C55\u540E\u518D\u751F\u6210\u3002" };
   }
+  /** Replaces the extension credential and drops whatever was using the old one. */
+  async replaceExtensionToken(reason) {
+    const token = (0, import_node_crypto2.randomBytes)(32).toString("hex");
+    await this.options.credentials?.setExtensionToken(token);
+    this.extensionToken = token;
+    const previousClient = this.client;
+    this.client = void 0;
+    this.extensionId = void 0;
+    for (const value of this.pending.values()) {
+      clearTimeout(value.timer);
+      value.reject(new Error(reason));
+    }
+    this.pending.clear();
+    previousClient?.close(1e3, "Extension pairing replaced");
+    return token;
+  }
+  /** One-click connection: only this extension's fixed origin can reach here, and the user has just clicked 连接. */
+  async acceptConnect(ws) {
+    try {
+      const token = await this.replaceExtensionToken("\u6269\u5C55\u8FDE\u63A5\u5DF2\u66F4\u6362\uFF1B\u8BF7\u67E5\u8BE2\u539F\u540C\u6B65\u4EFB\u52A1\uFF0C\u4E0D\u8981\u81EA\u52A8\u91CD\u65B0\u63D0\u4EA4\u3002");
+      ws.send(JSON.stringify({ type: "connect_result", token, port: this.port, protocol: "writedock/1" }));
+      ws.close(1e3);
+    } catch {
+      ws.close(1011, "Connect failed");
+    }
+  }
   acceptPairing(ws) {
     const pairing = this.pairing;
     if (!pairing || Date.now() > pairing.expiresAt || pairing.attempts >= 8) {
@@ -29953,18 +30067,7 @@ var LocalBridge = class {
         const message = JSON.parse(body);
         if (this.pairing !== pairing || Date.now() > pairing.expiresAt || message.type !== "pairing_hello" || typeof message.proof !== "string" || !equal(message.proof, proof(pairing.code, "pairing-extension", nonce))) throw new Error("Pairing failed");
         this.pairing = void 0;
-        const token = (0, import_node_crypto2.randomBytes)(32).toString("hex");
-        await this.options.credentials?.setExtensionToken(token);
-        this.extensionToken = token;
-        const previousClient = this.client;
-        this.client = void 0;
-        this.extensionId = void 0;
-        for (const value of this.pending.values()) {
-          clearTimeout(value.timer);
-          value.reject(new Error("\u6269\u5C55\u914D\u5BF9\u5DF2\u66F4\u6362\uFF1B\u8BF7\u67E5\u8BE2\u539F\u540C\u6B65\u4EFB\u52A1\uFF0C\u4E0D\u8981\u81EA\u52A8\u91CD\u65B0\u63D0\u4EA4\u3002"));
-        }
-        this.pending.clear();
-        previousClient?.close(1e3, "Extension pairing replaced");
+        const token = await this.replaceExtensionToken("\u6269\u5C55\u914D\u5BF9\u5DF2\u66F4\u6362\uFF1B\u8BF7\u67E5\u8BE2\u539F\u540C\u6B65\u4EFB\u52A1\uFF0C\u4E0D\u8981\u81EA\u52A8\u91CD\u65B0\u63D0\u4EA4\u3002");
         const key2 = (0, import_node_crypto2.createHmac)("sha256", pairing.code).update(`writedock-pairing-key:${nonce}`).digest();
         const iv = (0, import_node_crypto2.randomBytes)(12);
         const cipher = (0, import_node_crypto2.createCipheriv)("aes-256-gcm", key2, iv);
@@ -30007,6 +30110,13 @@ var LocalBridge = class {
           return;
         }
         if (message.type === "pong") return;
+        if (message.type === "update_extension") {
+          void updateInstalledExtension().then(
+            (result) => ws.send(JSON.stringify({ type: "update_extension_result", ok: true, version: result.version })),
+            (error2) => ws.send(JSON.stringify({ type: "update_extension_result", ok: false, error: messageOf(error2) }))
+          );
+          return;
+        }
         const pending2 = this.pending.get(message.id);
         if (!pending2) return;
         this.pending.delete(message.id);
@@ -30041,6 +30151,10 @@ var LocalBridge = class {
       res.writeHead(status);
       res.end(body);
     };
+    if (req.url === "/hello" && req.method === "GET" && this.validHost(req.headers.host) && (!req.headers.origin || req.headers.origin === EXTENSION_ORIGIN)) {
+      send(200, { service: "writedock-mcp", protocol: "writedock/1", version: mcpReleaseInfo().mcp_version });
+      return;
+    }
     const assetPath = /^\/assets\/([a-f0-9-]{36})$/.exec(req.url || "");
     if (assetPath && this.validHost(req.headers.host) && (!req.headers.origin || /^chrome-extension:\/\/[a-p]{32}$/.test(req.headers.origin))) {
       await this.media.serve(req, res, assetPath[1]);
@@ -30144,7 +30258,7 @@ var LocalBridge = class {
     return await this.httpCall("/assets/register", { path, kind });
   }
   async requestConnected(method, params) {
-    if (this.client?.readyState !== import_websocket.default.OPEN) throw new Error("\u6269\u5C55\u672A\u8FDE\u63A5\u3002\u8BF7\u8C03\u7528 begin_pairing\uFF0C\u5C06\u4E00\u6B21\u6027\u914D\u5BF9\u7801\u7C98\u8D34\u5230\u6269\u5C55\u7684 MCP \u8FDE\u63A5\u9875\uFF1B\u65E0\u9700\u91CD\u88C5 MCP\u3002");
+    if (this.client?.readyState !== import_websocket.default.OPEN) throw new Error("\u6269\u5C55\u672A\u8FDE\u63A5\u3002\u8BF7\u8BA9\u7528\u6237\u6253\u5F00\u6D4F\u89C8\u5668\u7684 WriteDock \u6269\u5C55\uFF0C\u5728\u300C\u8FDE\u63A5\u300D\u9875\u70B9\u201C\u8FDE\u63A5\u201D\u3002\u65E0\u9700\u91CD\u88C5 MCP\u3002");
     const id = (0, import_node_crypto2.randomUUID)();
     return new Promise((resolve4, reject) => {
       const timer = setTimeout(() => {
@@ -38347,8 +38461,8 @@ var EMPTY_COMPLETION_RESULT = {
 };
 
 // src/article.ts
-var import_promises2 = require("fs/promises");
-var import_node_path2 = require("path");
+var import_promises3 = require("fs/promises");
+var import_node_path3 = require("path");
 var import_node_url = require("url");
 
 // ../../node_modules/.pnpm/marked@17.0.6/node_modules/marked/lib/marked.esm.js
@@ -40186,7 +40300,7 @@ var Tokenizer = class {
     this.sequenceIndex = 0;
     this.xmlMode = xmlMode;
     this.decodeEntities = decodeEntities;
-    this.entityDecoder = new EntityDecoder(xmlMode ? xmlDecodeTree : htmlDecodeTree, (cp, consumed) => this.emitCodePoint(cp, consumed));
+    this.entityDecoder = new EntityDecoder(xmlMode ? xmlDecodeTree : htmlDecodeTree, (cp2, consumed) => this.emitCodePoint(cp2, consumed));
   }
   reset() {
     this.state = State.Text;
@@ -40751,21 +40865,21 @@ var Tokenizer = class {
       this.cbs.ontext(this.sectionStart, endIndex);
     }
   }
-  emitCodePoint(cp, consumed) {
+  emitCodePoint(cp2, consumed) {
     if (this.baseState !== State.Text && this.baseState !== State.InSpecialTag) {
       if (this.sectionStart < this.entityStart) {
         this.cbs.onattribdata(this.sectionStart, this.entityStart);
       }
       this.sectionStart = this.entityStart + consumed;
       this.index = this.sectionStart - 1;
-      this.cbs.onattribentity(cp);
+      this.cbs.onattribentity(cp2);
     } else {
       if (this.sectionStart < this.entityStart) {
         this.cbs.ontext(this.sectionStart, this.entityStart);
       }
       this.sectionStart = this.entityStart + consumed;
       this.index = this.sectionStart - 1;
-      this.cbs.ontextentity(cp, this.sectionStart);
+      this.cbs.ontextentity(cp2, this.sectionStart);
     }
   }
 };
@@ -40902,10 +41016,10 @@ var Parser = class {
     this.startIndex = endIndex;
   }
   /** @internal */
-  ontextentity(cp, endIndex) {
+  ontextentity(cp2, endIndex) {
     var _a3, _b;
     this.endIndex = endIndex - 1;
-    (_b = (_a3 = this.cbs).ontext) === null || _b === void 0 ? void 0 : _b.call(_a3, fromCodePoint(cp));
+    (_b = (_a3 = this.cbs).ontext) === null || _b === void 0 ? void 0 : _b.call(_a3, fromCodePoint(cp2));
     this.startIndex = endIndex;
   }
   /**
@@ -41026,8 +41140,8 @@ var Parser = class {
     this.attribvalue += this.getSlice(start, endIndex);
   }
   /** @internal */
-  onattribentity(cp) {
-    this.attribvalue += fromCodePoint(cp);
+  onattribentity(cp2) {
+    this.attribvalue += fromCodePoint(cp2);
   }
   /** @internal */
   onattribend(quote, endIndex) {
@@ -44916,9 +45030,9 @@ function encodeXML2(input) {
       last = index += 1;
       continue;
     }
-    const cp = input.codePointAt(index);
-    out += `&#x${cp.toString(16)};`;
-    if (cp !== char)
+    const cp2 = input.codePointAt(index);
+    out += `&#x${cp2.toString(16)};`;
+    if (cp2 !== char)
       index++;
     last = index += 1;
   }
@@ -50136,17 +50250,17 @@ async function prepareSource(source2, registerVideo) {
   let markdown = source2.markdown;
   let html = source2.html;
   let title = source2.title?.trim() || "";
-  let baseDirectory = source2.base_directory ? await (0, import_promises2.realpath)(source2.base_directory) : void 0;
+  let baseDirectory = source2.base_directory ? await (0, import_promises3.realpath)(source2.base_directory) : void 0;
   if (source2.file_path) {
-    if (!(0, import_node_path2.isAbsolute)(source2.file_path)) throw new Error("file_path \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
-    const filename = await (0, import_promises2.realpath)(source2.file_path);
-    const info = await (0, import_promises2.stat)(filename);
+    if (!(0, import_node_path3.isAbsolute)(source2.file_path)) throw new Error("file_path \u5FC5\u987B\u662F\u7EDD\u5BF9\u8DEF\u5F84");
+    const filename = await (0, import_promises3.realpath)(source2.file_path);
+    const info = await (0, import_promises3.stat)(filename);
     if (!info.isFile() || info.size > TEXT_LIMIT) throw new Error("\u7A3F\u4EF6\u5FC5\u987B\u662F 2 MB \u4EE5\u5185\u7684 Markdown \u6216 HTML \u6587\u4EF6");
-    const text = (await (0, import_promises2.readFile)(filename, "utf8")).replace(/^\uFEFF/, "");
+    const text = (await (0, import_promises3.readFile)(filename, "utf8")).replace(/^\uFEFF/, "");
     if (/\.(md|markdown|mdown)$/i.test(filename)) markdown = text;
     else if (/\.html?$/i.test(filename)) html = text;
     else throw new Error("\u7A3F\u4EF6\u6587\u4EF6\u4EC5\u652F\u6301 .md\u3001.markdown\u3001.html\u3001.htm");
-    baseDirectory ??= (0, import_node_path2.dirname)(filename);
+    baseDirectory ??= (0, import_node_path3.dirname)(filename);
   }
   const embedded = /* @__PURE__ */ new Map();
   let imageBytes = 0;
@@ -50164,13 +50278,13 @@ async function prepareSource(source2, registerVideo) {
     } else {
       if (!baseDirectory) throw new Error("\u7A3F\u4EF6\u5305\u542B\u672C\u5730\u56FE\u7247\uFF0C\u8BF7\u63D0\u4F9B base_directory \u6216\u4F7F\u7528 file_path");
       const path = src.startsWith("file:") ? (0, import_node_url.fileURLToPath)(src) : decodeURIComponent(src);
-      if (/^[a-z][a-z0-9+.-]*:/i.test(path) && !(0, import_node_path2.isAbsolute)(path)) throw new Error("\u56FE\u7247\u5730\u5740\u53EA\u652F\u6301 HTTP(S)\u3001\u672C\u5730\u56FE\u7247\u6216 data URI");
-      const filename = await (0, import_promises2.realpath)((0, import_node_path2.resolve)(baseDirectory, path));
-      const inside = (0, import_node_path2.relative)(baseDirectory, filename);
-      if (inside === ".." || inside.startsWith("../") || inside.startsWith("..\\") || (0, import_node_path2.isAbsolute)(inside)) throw new Error("\u672C\u5730\u56FE\u7247\u5FC5\u987B\u4F4D\u4E8E\u7A3F\u4EF6\u76EE\u5F55\u6216\u660E\u786E\u6307\u5B9A\u7684 base_directory \u5185");
-      const info = await (0, import_promises2.stat)(filename);
+      if (/^[a-z][a-z0-9+.-]*:/i.test(path) && !(0, import_node_path3.isAbsolute)(path)) throw new Error("\u56FE\u7247\u5730\u5740\u53EA\u652F\u6301 HTTP(S)\u3001\u672C\u5730\u56FE\u7247\u6216 data URI");
+      const filename = await (0, import_promises3.realpath)((0, import_node_path3.resolve)(baseDirectory, path));
+      const inside = (0, import_node_path3.relative)(baseDirectory, filename);
+      if (inside === ".." || inside.startsWith("../") || inside.startsWith("..\\") || (0, import_node_path3.isAbsolute)(inside)) throw new Error("\u672C\u5730\u56FE\u7247\u5FC5\u987B\u4F4D\u4E8E\u7A3F\u4EF6\u76EE\u5F55\u6216\u660E\u786E\u6307\u5B9A\u7684 base_directory \u5185");
+      const info = await (0, import_promises3.stat)(filename);
       if (!info.isFile() || info.size > IMAGE_LIMIT) throw new Error("\u5355\u5F20\u672C\u5730\u56FE\u7247\u4E0D\u80FD\u8D85\u8FC7 8 MB");
-      bytes = await (0, import_promises2.readFile)(filename);
+      bytes = await (0, import_promises3.readFile)(filename);
     }
     if (!bytes.length || bytes.length > IMAGE_LIMIT) throw new Error("\u5355\u5F20\u56FE\u7247\u5FC5\u987B\u5728 8 MB \u4EE5\u5185");
     const mime = imageMime(bytes);
@@ -50271,19 +50385,19 @@ var postSource = {
 var agentWorkflow = "Agent \u53EA\u901A\u8FC7 WriteDock MCP \u6295\u7A3F\u548C\u67E5\u8BE2\u56DE\u6267\uFF0C\u4E0D\u4F9D\u8D56\u4E5F\u4E0D\u8981\u8C03\u7528\u6D4F\u89C8\u5668\u3001Playwright \u6216\u5176\u4ED6\u7F51\u9875\u5DE5\u5177\u3002\u6309\u7ED3\u679C\u7684 next_action \u64CD\u4F5C\uFF1Apoll_task \u7528\u539F task_id/request_id \u67E5\u8BE2 get_sync_task\uFF1Breport_result \u76F4\u63A5\u5411\u7528\u6237\u6C47\u62A5\u9010\u5E73\u53F0\u72B6\u6001\u548C\u94FE\u63A5\u3002submitted/published \u5DF2\u6709\u6269\u5C55\u786E\u8BA4\uFF0C\u4E0D\u518D\u6253\u5F00\u7F51\u9875\u9A8C\u8BC1\uFF1B\u9A8C\u8BC1\u7801\u3001\u56FE\u5F62\u9A8C\u8BC1\u3001\u534F\u8BAE\u3001\u53D1\u5E03\u8BBE\u7F6E\u6216 unknown/interrupted \u90FD\u5C06\u539F\u56E0\u548C\u94FE\u63A5\u4EA4\u7ED9\u7528\u6237\u81EA\u884C\u70B9\u51FB\u5904\u7406\uFF0C\u4E0D\u81EA\u52A8\u91CD\u53D1\u3001\u4E0D\u6362 request_id\u3002\u4EBA\u5DE5\u63A5\u7BA1\u4E0D\u4EE3\u8868\u5DF2\u7ECF\u53D1\u5E03\u3002";
 function createMcpServer(bridge) {
   const server = new McpServer({ name: "writedock", version: package_default.version }, {
-    instructions: agentWorkflow + 'WriteDock \u901A\u8FC7\u672C\u673A\u6269\u5C55\u6267\u884C\u6295\u7A3F\u3002\u5148\u68C0\u67E5\u8FDE\u63A5\u548C\u5E73\u53F0\u767B\u5F55\u3002\u5B9E\u9645\u5E73\u53F0\u80FD\u529B\u4EE5 list_platforms \u8FD4\u56DE\u7684 action\u3001publishModes\u3001tools\u3001modeOptions\u3001confirmation\u3001capabilities\u3001coverRequired \u4E3A\u51C6\uFF0C\u6269\u5C55\u66F4\u65B0\u540E\u4F18\u5148\u6309\u8BE5\u5143\u4FE1\u606F\u9009\u62E9\u5DE5\u5177\u3002\u77E5\u4E4E\u3001\u767E\u5BB6\u53F7\u3001\u5FAE\u535A\u957F\u6587\u7AE0\u3001B\u7AD9\u4E13\u680F\u3001\u5C0F\u7EA2\u4E66\u957F\u6587\u4F7F\u7528 publish_article\uFF0CAgent \u76F4\u63A5\u63D0\u4F9B Markdown/HTML \u6216\u6587\u4EF6\u8DEF\u5F84\u5373\u53EF\u53D1\u5E03\uFF0C\u65E0\u9700\u7528\u6237\u5728\u6269\u5C55\u7F16\u8F91\u3002\u767E\u5BB6\u53F7\u5FC5\u987B\u63D0\u4F9B cover \u5C01\u9762\uFF1B\u77E5\u4E4E\u53E6\u652F\u6301 <video src="\u672C\u5730MP4\u8DEF\u5F84"></video> \u6587\u7AE0\u5185\u89C6\u9891\uFF0C\u72EC\u7ACB\u5C01\u9762\u6682\u672A\u63A5\u5165\u3002prepare_article \u4EC5\u4F9B\u53EF\u9009\u672C\u673A\u9884\u89C8\uFF0C\u4E0D\u662F\u53D1\u5E03\u7684\u524D\u7F6E\u8981\u6C42\u3002\u5C0F\u7EA2\u4E66 ID \u4E3A xiaohongshu\uFF0C\u4E09\u79CD\u6A21\u5F0F\u5171\u7528\u6B64\u5E73\u53F0\uFF1A\u5199\u957F\u6587\u7528 publish_article\uFF0C\u652F\u6301\u6B63\u6587\u56FE\u7247\u3001\u539F\u751F\u81EA\u52A8\u6392\u7248\u540E\u53D1\u5E03\uFF0C\u6807\u9898\u6700\u591A 64 \u5B57\u3001\u6B63\u6587\u6700\u591A 10000 \u5B57\uFF0C\u4E0D\u63A5\u72EC\u7ACB cover \u6216\u6587\u7AE0\u5185\u89C6\u9891\uFF1B\u666E\u901A\u56FE\u6587\u7528 publish_post(kind=image)\uFF0C\u72EC\u7ACB\u89C6\u9891\u7528 publish_post(kind=video)\uFF0C\u672A\u4F20 cover_path \u65F6\u4FDD\u7559\u5E73\u53F0\u81EA\u52A8\u751F\u6210\u7684\u7B2C\u4E00\u5E27\u5C01\u9762\u3002\u5C0F\u7EA2\u4E66\u6700\u7EC8\u5747\u987B\u5339\u914D POST /web_api/sns/v2/note \u7684 success=true\u3001result=0 \u548C\u7B14\u8BB0 ID \u56DE\u6267\u624D\u786E\u8BA4 submitted\u3002\u6296\u97F3\u5E73\u53F0 ID \u4E3A douyin\uFF0C\u56FE\u6587\u548C\u89C6\u9891\u540C\u6837\u7528 publish_post(kind=image|video)\uFF0C\u53EF\u9009 cover_path\uFF1B\u56FE\u6587\u8BDD\u9898\u6700\u591A 4 \u4E2A\u3001\u89C6\u9891\u6700\u591A 5 \u4E2A\uFF0C\u5F53\u524D\u53EA\u63A5\u5373\u65F6\u53D1\u5E03\u3002\u6296\u97F3 confirmation=native_page_message\uFF0C\u4EE5\u672C\u6B21\u64CD\u4F5C\u65B0\u589E\u7684\u539F\u751F\u6210\u529F\u63D0\u793A\u786E\u8BA4 submitted\uFF0C\u672A\u6838\u5BF9\u6700\u7EC8 HTTP \u4E1A\u52A1\u56DE\u6267\uFF1B\u4EC5\u8DF3\u8F6C\u4F5C\u54C1\u7BA1\u7406\u65F6\u4ECD\u4E3A unknown\uFF0CAgent \u4E0D\u81EA\u52A8\u91CD\u53D1\u3002\u5C0F\u7EA2\u4E66\u3001\u6296\u97F3\u3001\u5FAE\u535A\u666E\u901A\u56FE\u6587\u4E0E\u72EC\u7ACB\u89C6\u9891\u4F7F\u7528 prepare_post / publish_post\uFF0C\u5FAE\u535A\u5E73\u53F0 ID \u4ECD\u4E3A weibo\uFF0C\u4E0D\u53E6\u5EFA\u5E73\u53F0\u3002\u5FAE\u535A\u56FE\u6587\u6807\u9898\u653E\u5165\u6B63\u6587\u9996\u884C\uFF0C\u6700\u591A 18 \u5F20\u56FE\u7247\uFF1B\u72EC\u7ACB\u89C6\u9891\u6807\u9898\u6700\u591A 30 \u4E2A\u6C49\u5B57\uFF0860 \u4E2A\u534A\u89D2\u5B57\u7B26\uFF09\uFF0Cweibo_video_creation \u5FC5\u586B\uFF0C\u987B\u4F9D\u636E\u7528\u6237\u5B9E\u9645\u5185\u5BB9\u4F20 original\u3001secondary \u6216 repost\uFF0C\u4E0D\u80FD\u9ED8\u8BA4\u539F\u521B\u3002\u5FAE\u535A\u540C\u4E00\u6B21\u53EA\u80FD\u9009\u56FE\u6587\u6216\u89C6\u9891\uFF0C\u957F\u6587\u7AE0\u7EE7\u7EED\u7528 publish_article\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8981\u6C42\u53D1\u5E03\u5E76\u6307\u5B9A\u5E73\u53F0\u65F6\u624D\u8C03\u7528\u53D1\u5E03\u5DE5\u5177\u3002\u5FAE\u4FE1\u516C\u4F17\u53F7\u3001\u641C\u72D0\u53F7\u76EE\u524D\u7528 sync_article \u4FDD\u5B58\u6587\u7AE0\u8349\u7A3F\u3002B\u7AD9\u4E13\u680F ID \u4E3A bilibili\uFF0C\u4F7F\u7528 publish_article \u76F4\u63A5\u53D1\u5E03\u6587\u5B57\u548C\u6B63\u6587\u56FE\u7247\uFF0C\u4E0D\u63A5\u89C6\u9891\u3001\u97F3\u9891\u3001\u9644\u52A0\u5185\u5BB9\u5361\u7247\u6216\u72EC\u7ACB\u5C01\u9762\uFF1B\u901A\u8FC7\u65B0\u7248\u539F\u751F\u7F16\u8F91\u5668\u4E0A\u4F20\u5E76\u53D1\u5E03\uFF0Ccode=-352 \u65F6\u505C\u6B62\u81EA\u52A8\u63D0\u4EA4\u5E76\u8F6C\u4EBA\u5DE5\u9A8C\u8BC1\u3002\u9047\u5230 needs_user_action \u6216 requires_user_action \u65F6\uFF0C\u628A user_actions \u4E2D\u7684\u539F\u56E0\u548C\u7A3F\u4EF6\u94FE\u63A5\u544A\u8BC9\u7528\u6237\uFF0C\u4F18\u5148\u8BA9\u7528\u6237\u5207\u6362\u5230\u6269\u5C55\u5DF2\u6253\u5F00\u7684\u9875\u9762\u5904\u7406\u9A8C\u8BC1\u7801\u3001\u5C01\u9762\u3001\u5185\u5BB9\u58F0\u660E\u3001\u6765\u6E90\u3001\u539F\u521B\u534F\u8BAE\u6216\u53D1\u5E03\u8BBE\u7F6E\uFF0C\u5E76\u624B\u52A8\u53D1\u5E03\uFF1B\u4E0D\u5F97\u81EA\u52A8\u89E3\u51B3\u9A8C\u8BC1\u7801\u3001\u91CD\u65B0\u63D0\u4EA4\u6216\u6362 request_id\u3002\u8BE5\u72B6\u6001\u53EA\u8BB0\u5F55\u4EBA\u5DE5\u63A5\u7BA1\uFF0C\u4E0D\u4EE3\u8868\u7528\u6237\u4E4B\u540E\u7684\u64CD\u4F5C\u7ED3\u679C\u5DF2\u88AB\u786E\u8BA4\u3002\u6269\u5C55\u66F4\u65B0\u590D\u7528\u5DF2\u6709 MCP\uFF1B\u9700\u8981\u6062\u590D\u8FDE\u63A5\u65F6\u8C03\u7528 begin_pairing\uFF0C\u8BA9\u7528\u6237\u5728\u6269\u5C55\u8F93\u5165\u914D\u5BF9\u7801\u3002\u63D0\u4EA4\u8FD4\u56DE\u4EFB\u52A1 ID\uFF0C\u968F\u540E\u7528 get_sync_task \u67E5\u8BE2\u7ED3\u679C\u3002\u4FDD\u6301\u540C\u4E00\u64CD\u4F5C\u7684 request_id \u4E0D\u53D8\u3002publicationState=unknown \u6216\u4EFB\u52A1\u4E2D\u65AD\u65F6\uFF0C\u5411\u7528\u6237\u7ED9\u51FA\u94FE\u63A5\u8BA9\u5176\u81EA\u884C\u6838\u5BF9\u5E73\u53F0\uFF0CAgent \u4E0D\u6253\u5F00\u7F51\u9875\uFF0C\u4E0D\u8981\u81EA\u52A8\u751F\u6210\u65B0 request_id \u91CD\u53D1\u3002\u76F4\u63A5\u53D1\u5E03\u6210\u529F\u8868\u793A\u5E73\u53F0\u5DF2\u63A5\u53D7\u63D0\u4EA4\uFF0C\u662F\u5426\u516C\u5F00\u5C55\u793A\u4EE5\u5E73\u53F0\u4E3A\u51C6\u3002'
+    instructions: agentWorkflow + 'WriteDock \u901A\u8FC7\u672C\u673A\u6269\u5C55\u6267\u884C\u6295\u7A3F\u3002\u5148\u68C0\u67E5\u8FDE\u63A5\u548C\u5E73\u53F0\u767B\u5F55\u3002\u5B9E\u9645\u5E73\u53F0\u80FD\u529B\u4EE5 list_platforms \u8FD4\u56DE\u7684 action\u3001publishModes\u3001tools\u3001modeOptions\u3001confirmation\u3001capabilities\u3001coverRequired \u4E3A\u51C6\uFF0C\u6269\u5C55\u66F4\u65B0\u540E\u4F18\u5148\u6309\u8BE5\u5143\u4FE1\u606F\u9009\u62E9\u5DE5\u5177\u3002\u77E5\u4E4E\u3001\u767E\u5BB6\u53F7\u3001\u5FAE\u535A\u957F\u6587\u7AE0\u3001B\u7AD9\u4E13\u680F\u3001\u5C0F\u7EA2\u4E66\u957F\u6587\u4F7F\u7528 publish_article\uFF0CAgent \u76F4\u63A5\u63D0\u4F9B Markdown/HTML \u6216\u6587\u4EF6\u8DEF\u5F84\u5373\u53EF\u53D1\u5E03\uFF0C\u65E0\u9700\u7528\u6237\u5728\u6269\u5C55\u7F16\u8F91\u3002\u767E\u5BB6\u53F7\u5FC5\u987B\u63D0\u4F9B cover \u5C01\u9762\uFF1B\u77E5\u4E4E\u53E6\u652F\u6301 <video src="\u672C\u5730MP4\u8DEF\u5F84"></video> \u6587\u7AE0\u5185\u89C6\u9891\uFF0C\u72EC\u7ACB\u5C01\u9762\u6682\u672A\u63A5\u5165\u3002prepare_article \u4EC5\u4F9B\u53EF\u9009\u672C\u673A\u9884\u89C8\uFF0C\u4E0D\u662F\u53D1\u5E03\u7684\u524D\u7F6E\u8981\u6C42\u3002\u5C0F\u7EA2\u4E66 ID \u4E3A xiaohongshu\uFF0C\u4E09\u79CD\u6A21\u5F0F\u5171\u7528\u6B64\u5E73\u53F0\uFF1A\u5199\u957F\u6587\u7528 publish_article\uFF0C\u652F\u6301\u6B63\u6587\u56FE\u7247\u3001\u539F\u751F\u81EA\u52A8\u6392\u7248\u540E\u53D1\u5E03\uFF0C\u6807\u9898\u6700\u591A 64 \u5B57\u3001\u6B63\u6587\u6700\u591A 10000 \u5B57\uFF0C\u4E0D\u63A5\u72EC\u7ACB cover \u6216\u6587\u7AE0\u5185\u89C6\u9891\uFF1B\u666E\u901A\u56FE\u6587\u7528 publish_post(kind=image)\uFF0C\u72EC\u7ACB\u89C6\u9891\u7528 publish_post(kind=video)\uFF0C\u672A\u4F20 cover_path \u65F6\u4FDD\u7559\u5E73\u53F0\u81EA\u52A8\u751F\u6210\u7684\u7B2C\u4E00\u5E27\u5C01\u9762\u3002\u5C0F\u7EA2\u4E66\u6700\u7EC8\u5747\u987B\u5339\u914D POST /web_api/sns/v2/note \u7684 success=true\u3001result=0 \u548C\u7B14\u8BB0 ID \u56DE\u6267\u624D\u786E\u8BA4 submitted\u3002\u6296\u97F3\u5E73\u53F0 ID \u4E3A douyin\uFF0C\u56FE\u6587\u548C\u89C6\u9891\u540C\u6837\u7528 publish_post(kind=image|video)\uFF0C\u53EF\u9009 cover_path\uFF1B\u56FE\u6587\u8BDD\u9898\u6700\u591A 4 \u4E2A\u3001\u89C6\u9891\u6700\u591A 5 \u4E2A\uFF0C\u5F53\u524D\u53EA\u63A5\u5373\u65F6\u53D1\u5E03\u3002\u6296\u97F3 confirmation=native_page_message\uFF0C\u4EE5\u672C\u6B21\u64CD\u4F5C\u65B0\u589E\u7684\u539F\u751F\u6210\u529F\u63D0\u793A\u786E\u8BA4 submitted\uFF0C\u672A\u6838\u5BF9\u6700\u7EC8 HTTP \u4E1A\u52A1\u56DE\u6267\uFF1B\u4EC5\u8DF3\u8F6C\u4F5C\u54C1\u7BA1\u7406\u65F6\u4ECD\u4E3A unknown\uFF0CAgent \u4E0D\u81EA\u52A8\u91CD\u53D1\u3002\u5C0F\u7EA2\u4E66\u3001\u6296\u97F3\u3001\u5FAE\u535A\u666E\u901A\u56FE\u6587\u4E0E\u72EC\u7ACB\u89C6\u9891\u4F7F\u7528 prepare_post / publish_post\uFF0C\u5FAE\u535A\u5E73\u53F0 ID \u4ECD\u4E3A weibo\uFF0C\u4E0D\u53E6\u5EFA\u5E73\u53F0\u3002\u5FAE\u535A\u56FE\u6587\u6807\u9898\u653E\u5165\u6B63\u6587\u9996\u884C\uFF0C\u6700\u591A 18 \u5F20\u56FE\u7247\uFF1B\u72EC\u7ACB\u89C6\u9891\u6807\u9898\u6700\u591A 30 \u4E2A\u6C49\u5B57\uFF0860 \u4E2A\u534A\u89D2\u5B57\u7B26\uFF09\uFF0Cweibo_video_creation \u5FC5\u586B\uFF0C\u987B\u4F9D\u636E\u7528\u6237\u5B9E\u9645\u5185\u5BB9\u4F20 original\u3001secondary \u6216 repost\uFF0C\u4E0D\u80FD\u9ED8\u8BA4\u539F\u521B\u3002\u5FAE\u535A\u540C\u4E00\u6B21\u53EA\u80FD\u9009\u56FE\u6587\u6216\u89C6\u9891\uFF0C\u957F\u6587\u7AE0\u7EE7\u7EED\u7528 publish_article\u3002\u53EA\u6709\u7528\u6237\u660E\u786E\u8981\u6C42\u53D1\u5E03\u5E76\u6307\u5B9A\u5E73\u53F0\u65F6\u624D\u8C03\u7528\u53D1\u5E03\u5DE5\u5177\u3002\u5FAE\u4FE1\u516C\u4F17\u53F7\u3001\u641C\u72D0\u53F7\u76EE\u524D\u7528 sync_article \u4FDD\u5B58\u6587\u7AE0\u8349\u7A3F\u3002B\u7AD9\u4E13\u680F ID \u4E3A bilibili\uFF0C\u4F7F\u7528 publish_article \u76F4\u63A5\u53D1\u5E03\u6587\u5B57\u548C\u6B63\u6587\u56FE\u7247\uFF0C\u4E0D\u63A5\u89C6\u9891\u3001\u97F3\u9891\u3001\u9644\u52A0\u5185\u5BB9\u5361\u7247\u6216\u72EC\u7ACB\u5C01\u9762\uFF1B\u901A\u8FC7\u65B0\u7248\u539F\u751F\u7F16\u8F91\u5668\u4E0A\u4F20\u5E76\u53D1\u5E03\uFF0Ccode=-352 \u65F6\u505C\u6B62\u81EA\u52A8\u63D0\u4EA4\u5E76\u8F6C\u4EBA\u5DE5\u9A8C\u8BC1\u3002\u9047\u5230 needs_user_action \u6216 requires_user_action \u65F6\uFF0C\u628A user_actions \u4E2D\u7684\u539F\u56E0\u548C\u7A3F\u4EF6\u94FE\u63A5\u544A\u8BC9\u7528\u6237\uFF0C\u4F18\u5148\u8BA9\u7528\u6237\u5207\u6362\u5230\u6269\u5C55\u5DF2\u6253\u5F00\u7684\u9875\u9762\u5904\u7406\u9A8C\u8BC1\u7801\u3001\u5C01\u9762\u3001\u5185\u5BB9\u58F0\u660E\u3001\u6765\u6E90\u3001\u539F\u521B\u534F\u8BAE\u6216\u53D1\u5E03\u8BBE\u7F6E\uFF0C\u5E76\u624B\u52A8\u53D1\u5E03\uFF1B\u4E0D\u5F97\u81EA\u52A8\u89E3\u51B3\u9A8C\u8BC1\u7801\u3001\u91CD\u65B0\u63D0\u4EA4\u6216\u6362 request_id\u3002\u8BE5\u72B6\u6001\u53EA\u8BB0\u5F55\u4EBA\u5DE5\u63A5\u7BA1\uFF0C\u4E0D\u4EE3\u8868\u7528\u6237\u4E4B\u540E\u7684\u64CD\u4F5C\u7ED3\u679C\u5DF2\u88AB\u786E\u8BA4\u3002\u6269\u5C55\u66F4\u65B0\u590D\u7528\u5DF2\u6709 MCP\uFF1B\u672A\u8FDE\u63A5\u65F6\uFF0C\u8BA9\u7528\u6237\u6253\u5F00 WriteDock \u6269\u5C55\u7684\u300C\u8FDE\u63A5\u300D\u9875\u70B9\u201C\u8FDE\u63A5\u201D\u3002\u63D0\u4EA4\u8FD4\u56DE\u4EFB\u52A1 ID\uFF0C\u968F\u540E\u7528 get_sync_task \u67E5\u8BE2\u7ED3\u679C\u3002\u4FDD\u6301\u540C\u4E00\u64CD\u4F5C\u7684 request_id \u4E0D\u53D8\u3002publicationState=unknown \u6216\u4EFB\u52A1\u4E2D\u65AD\u65F6\uFF0C\u5411\u7528\u6237\u7ED9\u51FA\u94FE\u63A5\u8BA9\u5176\u81EA\u884C\u6838\u5BF9\u5E73\u53F0\uFF0CAgent \u4E0D\u6253\u5F00\u7F51\u9875\uFF0C\u4E0D\u8981\u81EA\u52A8\u751F\u6210\u65B0 request_id \u91CD\u53D1\u3002\u76F4\u63A5\u53D1\u5E03\u6210\u529F\u8868\u793A\u5E73\u53F0\u5DF2\u63A5\u53D7\u63D0\u4EA4\uFF0C\u662F\u5426\u516C\u5F00\u5C55\u793A\u4EE5\u5E73\u53F0\u4E3A\u51C6\u3002'
   });
   const wrap = (operation) => operation().then((result) => ({
     content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
   })).catch((error2) => ({ content: [{ type: "text", text: error2 instanceof Error ? error2.message : String(error2) }], isError: true }));
   const readOnly = { readOnlyHint: true, destructiveHint: false, openWorldHint: false };
   server.registerTool("get_connection_status", {
-    description: "\u68C0\u67E5\u672C\u673A MCP \u4E0E\u6269\u5C55\u7684\u8FDE\u63A5\u3001\u8FD0\u884C\u7248\u672C\u548C npm \u66F4\u65B0\u63D0\u793A\u3002update_available=true \u65F6\u544A\u77E5\u7528\u6237\u91CD\u65B0\u542F\u52A8 WriteDock MCP\uFF0C\u4FDD\u7559\u914D\u7F6E\u548C\u914D\u5BF9\uFF1B\u53D1\u5E03\u4EFB\u52A1\u8FDB\u884C\u4E2D\u4E0D\u8981\u81EA\u52A8\u91CD\u542F\u3002\u65E7\u7248\u670D\u52A1\u53EF\u80FD\u4E0D\u8FD4\u56DE\u7248\u672C\u5B57\u6BB5\uFF1Blatest_version \u7F3A\u5931\u6216 update_checking=true \u65F6\uFF0C\u4E0D\u5F97\u58F0\u79F0\u5DF2\u662F\u6700\u65B0\u7248\u3002",
+    description: "\u68C0\u67E5\u672C\u673A MCP \u4E0E\u6269\u5C55\u7684\u8FDE\u63A5\u3001\u8FD0\u884C\u7248\u672C\u548C npm \u66F4\u65B0\u63D0\u793A\u3002update_available=true \u65F6\u544A\u77E5\u7528\u6237\u91CD\u65B0\u542F\u52A8 WriteDock MCP\uFF0C\u4FDD\u7559\u914D\u7F6E\uFF1B\u53D1\u5E03\u4EFB\u52A1\u8FDB\u884C\u4E2D\u4E0D\u8981\u81EA\u52A8\u91CD\u542F\u3002\u65E7\u7248\u670D\u52A1\u53EF\u80FD\u4E0D\u8FD4\u56DE\u7248\u672C\u5B57\u6BB5\uFF1Blatest_version \u7F3A\u5931\u6216 update_checking=true \u65F6\uFF0C\u4E0D\u5F97\u58F0\u79F0\u5DF2\u662F\u6700\u65B0\u7248\u3002",
     inputSchema: {},
     annotations: { ...readOnly, openWorldHint: true }
   }, () => wrap(() => bridge.status()));
   server.registerTool("begin_pairing", {
-    description: "\u9996\u6B21\u8FDE\u63A5\u6216\u6269\u5C55\u5378\u8F7D\u91CD\u88C5\u540E\uFF0C\u751F\u6210 3 \u5206\u949F\u6709\u6548\u7684\u4E00\u6B21\u6027\u914D\u5BF9\u7801\u3002\u8BA9\u7528\u6237\u7C98\u8D34\u5230\u6269\u5C55\u7684 MCP \u8FDE\u63A5\u9875\u5373\u53EF\uFF0C\u590D\u7528\u5DF2\u6709 MCP \u548C agent \u914D\u7F6E\u3002\u65B0\u914D\u5BF9\u4F1A\u66FF\u6362\u6B64\u524D\u6D4F\u89C8\u5668\u7684\u8FDE\u63A5\u6388\u6743\uFF0C\u8BF7\u5728\u7528\u6237\u8981\u6C42\u8FDE\u63A5\u6269\u5C55\u65F6\u8C03\u7528\u3002",
+    description: "\u901A\u5E38\u4E0D\u9700\u8981\uFF1A\u672A\u8FDE\u63A5\u65F6\uFF0C\u8BA9\u7528\u6237\u6253\u5F00 WriteDock \u6269\u5C55\u7684\u300C\u8FDE\u63A5\u300D\u9875\u70B9\u201C\u8FDE\u63A5\u201D\u5373\u53EF\u3002\u53EA\u6709\u7528\u6237\u4F7F\u7528\u65E7\u7248\u6269\u5C55\u65F6\u624D\u751F\u6210 3 \u5206\u949F\u6709\u6548\u7684\u4E00\u6B21\u6027\u914D\u5BF9\u7801\u3002",
     inputSchema: {},
     annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
   }, () => wrap(() => bridge.beginPairing()));
@@ -50397,24 +50511,24 @@ function createMcpServer(bridge) {
 }
 
 // src/identity.ts
-var import_promises3 = require("fs/promises");
+var import_promises4 = require("fs/promises");
 var import_node_crypto3 = require("crypto");
-var import_node_os = require("os");
-var import_node_path3 = require("path");
+var import_node_os2 = require("os");
+var import_node_path4 = require("path");
 var validToken = (value) => typeof value === "string" && /^[A-Za-z0-9_-]{24,128}$/.test(value);
 function dataDirectory() {
-  if (process.env.WRITEDOCK_DATA_DIR) return (0, import_node_path3.resolve)(process.env.WRITEDOCK_DATA_DIR);
-  if (process.platform === "darwin") return (0, import_node_path3.join)((0, import_node_os.homedir)(), "Library/Application Support/WriteDock/mcp");
-  if (process.platform === "win32") return (0, import_node_path3.join)(process.env.LOCALAPPDATA || (0, import_node_path3.join)((0, import_node_os.homedir)(), "AppData/Local"), "WriteDock/mcp");
-  return (0, import_node_path3.join)(process.env.XDG_DATA_HOME || (0, import_node_path3.join)((0, import_node_os.homedir)(), ".local/share"), "writedock/mcp");
+  if (process.env.WRITEDOCK_DATA_DIR) return (0, import_node_path4.resolve)(process.env.WRITEDOCK_DATA_DIR);
+  if (process.platform === "darwin") return (0, import_node_path4.join)((0, import_node_os2.homedir)(), "Library/Application Support/WriteDock/mcp");
+  if (process.platform === "win32") return (0, import_node_path4.join)(process.env.LOCALAPPDATA || (0, import_node_path4.join)((0, import_node_os2.homedir)(), "AppData/Local"), "WriteDock/mcp");
+  return (0, import_node_path4.join)(process.env.XDG_DATA_HOME || (0, import_node_path4.join)((0, import_node_os2.homedir)(), ".local/share"), "writedock/mcp");
 }
 async function loadIdentity(port, legacyToken) {
   if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error("WRITEDOCK_PORT \u5FC5\u987B\u662F 1024\u201365535 \u7684\u6574\u6570");
   const directory = dataDirectory();
-  await (0, import_promises3.mkdir)(directory, { recursive: true, mode: 448 });
-  const filename = (0, import_node_path3.join)(directory, `identity-${port}.json`);
+  await (0, import_promises4.mkdir)(directory, { recursive: true, mode: 448 });
+  const filename = (0, import_node_path4.join)(directory, `identity-${port}.json`);
   const read = async () => {
-    const value = JSON.parse(await (0, import_promises3.readFile)(filename, "utf8"));
+    const value = JSON.parse(await (0, import_promises4.readFile)(filename, "utf8"));
     if (value.version !== 1 || !validToken(value.token) || !validToken(value.extensionToken)) throw new Error("MCP \u914D\u5BF9\u8D44\u6599\u683C\u5F0F\u4E0D\u6B63\u786E\uFF1B\u8BF7\u4FDD\u7559\u539F\u6587\u4EF6\u5E76\u68C0\u67E5\u5907\u4EFD\uFF0C\u4E0D\u4F1A\u81EA\u52A8\u8986\u76D6");
     return value;
   };
@@ -50426,16 +50540,16 @@ async function loadIdentity(port, legacyToken) {
     if (legacyToken && !validToken(legacyToken)) throw new Error("\u65E7 WRITEDOCK_TOKEN \u683C\u5F0F\u4E0D\u6B63\u786E\uFF0C\u8BF7\u68C0\u67E5\u539F MCP \u914D\u7F6E");
     const token = legacyToken || (0, import_node_crypto3.randomBytes)(32).toString("hex");
     const initial = { version: 1, token, extensionToken: token };
-    const temporary = (0, import_node_path3.join)(directory, `.identity-${(0, import_node_crypto3.randomUUID)()}.tmp`);
-    await (0, import_promises3.writeFile)(temporary, JSON.stringify(initial), { flag: "wx", mode: 384 });
+    const temporary = (0, import_node_path4.join)(directory, `.identity-${(0, import_node_crypto3.randomUUID)()}.tmp`);
+    await (0, import_promises4.writeFile)(temporary, JSON.stringify(initial), { flag: "wx", mode: 384 });
     try {
       try {
-        await (0, import_promises3.link)(temporary, filename);
+        await (0, import_promises4.link)(temporary, filename);
       } catch (cause) {
         if (cause.code !== "EEXIST") throw cause;
       }
     } finally {
-      await (0, import_promises3.unlink)(temporary);
+      await (0, import_promises4.unlink)(temporary);
     }
     identity = await read();
   }
@@ -50446,18 +50560,117 @@ async function loadIdentity(port, legacyToken) {
       if (!validToken(extensionToken)) throw new Error("\u6269\u5C55\u914D\u5BF9\u5BC6\u94A5\u683C\u5F0F\u4E0D\u6B63\u786E");
       const current = await read();
       if (current.token !== identity.token) throw new Error("MCP \u8EAB\u4EFD\u5DF2\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u542F\u52A8\u670D\u52A1");
-      const temporary = (0, import_node_path3.join)(directory, `.identity-${(0, import_node_crypto3.randomUUID)()}.tmp`);
+      const temporary = (0, import_node_path4.join)(directory, `.identity-${(0, import_node_crypto3.randomUUID)()}.tmp`);
       try {
-        await (0, import_promises3.writeFile)(temporary, JSON.stringify({ ...current, extensionToken }), { flag: "wx", mode: 384 });
-        await (0, import_promises3.rename)(temporary, filename);
+        await (0, import_promises4.writeFile)(temporary, JSON.stringify({ ...current, extensionToken }), { flag: "wx", mode: 384 });
+        await (0, import_promises4.rename)(temporary, filename);
       } finally {
-        await (0, import_promises3.unlink)(temporary).catch(() => {
+        await (0, import_promises4.unlink)(temporary).catch(() => {
         });
       }
     }
   };
 }
 
+// src/setup.ts
+var import_node_child_process = require("child_process");
+var import_promises5 = require("fs/promises");
+var import_node_os3 = require("os");
+var import_node_path5 = require("path");
+var COMMAND = "npx";
+var ARGS = ["-y", "--prefer-online", "writedock-mcp@latest"];
+async function readIfPresent(path) {
+  try {
+    return await (0, import_promises5.readFile)(path, "utf8");
+  } catch (error2) {
+    if (error2.code === "ENOENT") return void 0;
+    throw error2;
+  }
+}
+async function save(path, content, previous) {
+  await (0, import_promises5.mkdir)((0, import_node_path5.dirname)(path), { recursive: true });
+  if (previous !== void 0) await (0, import_promises5.copyFile)(path, `${path}.writedock-backup`);
+  await (0, import_promises5.writeFile)(path, content);
+}
+async function configureCodex(path) {
+  const previous = await readIfPresent(path);
+  if (previous !== void 0 && /^\s*\[mcp_servers\.writedock\]/m.test(previous)) return "present";
+  const entry = `[mcp_servers.writedock]
+command = "${COMMAND}"
+args = ${JSON.stringify(ARGS)}
+startup_timeout_sec = 120
+`;
+  await save(path, previous ? `${previous.replace(/\s*$/, "")}
+
+${entry}` : entry, previous);
+  return "added";
+}
+async function configureJsonClient(path) {
+  const previous = await readIfPresent(path);
+  const config2 = previous?.trim() ? JSON.parse(previous) : {};
+  if (config2.mcpServers?.writedock) return "present";
+  config2.mcpServers = { ...config2.mcpServers, writedock: { command: COMMAND, args: ARGS } };
+  await save(path, `${JSON.stringify(config2, null, 2)}
+`, previous);
+  return "added";
+}
+var exists = async (path) => await readIfPresent(path) !== void 0;
+function revealFolder(path) {
+  const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "explorer" : "xdg-open";
+  try {
+    const child = (0, import_node_child_process.spawn)(command, [path], { detached: true, stdio: "ignore" });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function runSetup(home = (0, import_node_os3.homedir)(), log = console.log) {
+  const clients = [
+    { name: "Codex", path: (0, import_node_path5.join)(home, ".codex/config.toml"), detect: (0, import_node_path5.join)(home, ".codex/config.toml"), configure: configureCodex },
+    { name: "Claude Code", path: (0, import_node_path5.join)(home, ".claude.json"), detect: (0, import_node_path5.join)(home, ".claude.json"), configure: configureJsonClient },
+    { name: "Cursor", path: (0, import_node_path5.join)(home, ".cursor/mcp.json"), detect: (0, import_node_path5.join)(home, ".cursor/mcp.json"), configure: configureJsonClient },
+    { name: "Claude Desktop", path: (0, import_node_path5.join)(home, "Library/Application Support/Claude/claude_desktop_config.json"), detect: (0, import_node_path5.join)(home, "Library/Application Support/Claude/claude_desktop_config.json"), configure: configureJsonClient }
+  ];
+  let found = 0;
+  for (const client of clients) {
+    if (!await exists(client.detect)) continue;
+    found++;
+    try {
+      const state = await client.configure(client.path);
+      log(state === "added" ? `\u2713 ${client.name}\uFF1A\u5DF2\u6DFB\u52A0 WriteDock\uFF08\u539F\u914D\u7F6E\u5907\u4EFD\u4E3A .writedock-backup\uFF09` : `\u2713 ${client.name}\uFF1A\u5DF2\u6709 WriteDock \u914D\u7F6E\uFF0C\u672A\u6539\u52A8`);
+    } catch (error2) {
+      log(`\u2717 ${client.name}\uFF1A\u914D\u7F6E\u5931\u8D25\uFF08${error2 instanceof Error ? error2.message : String(error2)}\uFF09\uFF0C\u539F\u6587\u4EF6\u672A\u6539\u52A8`);
+    }
+  }
+  if (!found) {
+    log("\u6CA1\u6709\u627E\u5230\u5DF2\u77E5\u7684 agent \u5BA2\u6237\u7AEF\u3002\u8BF7\u5728\u4F60\u7684\u5BA2\u6237\u7AEF\u91CC\u6DFB\u52A0\u8FD9\u4E2A MCP \u670D\u52A1\uFF1A");
+    log(JSON.stringify({ mcpServers: { writedock: { command: COMMAND, args: ARGS } } }, null, 2));
+  }
+  const bundle = bundledExtension();
+  const loaded = bundle ? await findInstalledExtension().catch(() => void 0) : void 0;
+  let extensionFolder;
+  if (bundle) {
+    try {
+      extensionFolder = (await installExtensionFiles(bundle.directory, loaded || defaultExtensionDirectory(home))).directory;
+    } catch (error2) {
+      log(`\u2717 \u6269\u5C55\uFF1A\u5B89\u88C5\u5931\u8D25\uFF08${error2 instanceof Error ? error2.message : String(error2)}\uFF09`);
+    }
+  }
+  log("");
+  log("\u63A5\u4E0B\u6765\uFF1A");
+  log("1. \u91CD\u542F\u4F60\u7684 agent \u5BA2\u6237\u7AEF\uFF0C\u8BA9\u5B83\u52A0\u8F7D WriteDock\u3002");
+  if (extensionFolder && !loaded) {
+    log("2. \u5728 Chrome \u6216 Edge \u6253\u5F00 chrome://extensions\uFF0C\u6253\u5F00\u53F3\u4E0A\u89D2\u7684\u201C\u5F00\u53D1\u8005\u6A21\u5F0F\u201D\uFF0C\u70B9\u201C\u52A0\u8F7D\u5DF2\u89E3\u538B\u7684\u6269\u5C55\u7A0B\u5E8F\u201D\uFF0C\u9009\u62E9\u8FD9\u4E2A\u6587\u4EF6\u5939\uFF1A");
+    log(`   ${extensionFolder}`);
+    revealFolder(extensionFolder);
+    log("3. \u6253\u5F00 WriteDock \u6269\u5C55\uFF0C\u70B9\u201C\u8FDE\u63A5\u201D\u3002");
+  } else if (extensionFolder) {
+    log(`2. \u6269\u5C55\u5DF2\u66F4\u65B0\u3002\u5728 chrome://extensions \u70B9\u4E00\u6B21 WriteDock \u7684\u5237\u65B0\u56FE\u6807\uFF0C\u7136\u540E\u70B9\u201C\u8FDE\u63A5\u201D\u3002`);
+  } else log("2. \u6253\u5F00\u6D4F\u89C8\u5668\u7684 WriteDock \u6269\u5C55\uFF0C\u70B9\u201C\u8FDE\u63A5\u201D\u3002");
+  return found;
+}
+
 // src/index.ts
 async function main() {
   const port = Number(process.env.WRITEDOCK_PORT || 9647);
@@ -50488,6 +50701,11 @@ async function main() {
 }
 if (process.argv.slice(2).some((argument) => argument === "--version" || argument === "-v")) {
   console.log(package_default.version);
+} else if (process.argv[2] === "setup") {
+  runSetup().catch((error2) => {
+    console.error("[WriteDock MCP]", error2 instanceof Error ? error2.message : String(error2));
+    process.exit(1);
+  });
 } else {
   main().catch((error2) => {
     console.error("[WriteDock MCP]", error2 instanceof Error ? error2.message : String(error2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "writedock-mcp",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "WriteDock local MCP server for the browser extension",
   "type": "commonjs",
   "license": "GPL-3.0-only",
@@ -17,7 +17,8 @@
     "LICENSE-MULTIPOST",
     "NOTICE.md",
     "THIRD_PARTY_NOTICES.txt",
-    "source"
+    "source",
+    "extension"
   ],
   "keywords": [
     "mcp",

package/source/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@writedock/mcp-server",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "private": true,
   "type": "module",
   "description": "WriteDock local MCP server for the browser extension",