xlsx-for-ai 2.0.0-beta.2 → 2.0.0

package/README.md

@@ -251,6 +251,19 @@ xlsx-for-ai --disable-telemetry
 xlsx-for-ai --telemetry-status
 ```
 
+**Privacy strict mode** — prevents error-triggered capture of your workbook bytes (see [PRIVACY.md](PRIVACY.md)):
+
+```bash
+# Per-session flag (applies to all tool calls in the CLI invocation)
+xlsx-for-ai --privacy=strict myfile.xlsx
+
+# Environment variable (applies globally to all requests in the process)
+XFA_PRIVACY=strict xlsx-for-ai myfile.xlsx
+
+# In MCP server config (applies to all tool calls from the MCP server):
+# Set XFA_PRIVACY=strict in your MCP server's env block
+```
+
 Delete the config to reset your client ID and API key:
 
 ```bash

package/index.js

@@ -31,7 +31,8 @@ const {
 
 function parseArgs(argv) {
   const opts = { file: null, format: 'text', sheet: null, evaluate: false,
-    telemetryStatus: false, enableTelemetry: false, disableTelemetry: false };
+    telemetryStatus: false, enableTelemetry: false, disableTelemetry: false,
+    privacyStrict: false };
   let i = 0;
   while (i < argv.length) {
     const a = argv[i];
@@ -42,6 +43,7 @@ function parseArgs(argv) {
     else if (a === '--telemetry-status')   opts.telemetryStatus = true;
     else if (a === '--enable-telemetry')   opts.enableTelemetry = true;
     else if (a === '--disable-telemetry')  opts.disableTelemetry = true;
+    else if (a === '--privacy=strict')     opts.privacyStrict = true;
     else if (!a.startsWith('--'))          opts.file = a;
     i++;
   }
@@ -72,6 +74,12 @@ async function main() {
 
   await ensureRegistered();
 
+  // Privacy strict: --privacy=strict flag sets the env var for this process
+  // so callTool() (which reads XFA_PRIVACY) adds the header automatically.
+  if (opts.privacyStrict) {
+    process.env.XFA_PRIVACY = 'strict';
+  }
+
   const fileB64 = fs.readFileSync(absPath).toString('base64');
   // Server format enum is 'md' | 'json' | 'sql'. The legacy CLI default 'text'
   // maps to the server's default (md). Don't send 'text' — server rejects it.

package/lib/client.js

@@ -39,6 +39,12 @@ async function post(path, body, opts = {}) {
     if (cfg && cfg.api_key) headers['Authorization'] = `Bearer ${cfg.api_key}`;
   }
 
+  // Privacy opt-out: XFA_PRIVACY=strict env var (or per-call override) adds
+  // X-XFA-Privacy: strict to every request, preventing error-triggered capture.
+  if (process.env.XFA_PRIVACY === 'strict' || opts.privacyStrict) {
+    headers['X-XFA-Privacy'] = 'strict';
+  }
+
   let res;
   try {
     res = await fetchWithTimeout(url, {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "xlsx-for-ai",
   "mcpName": "io.github.senoff/xlsx-for-ai",
-  "version": "2.0.0-beta.2",
+  "version": "2.0.0",
   "description": "The MCP server that makes LLMs reliable on real-world Excel spreadsheets. Thin npm client over a hosted API — read, write, diff, redact, and supervise .xlsx files from any MCP-aware agent.",
   "main": "index.js",
   "bin": {