reformat

tomassurin · tomassurin · commit e4e638245e3b · 2026-03-11T19:34:57.000+01:00
diff --git a/README.md b/README.md
@@ -16,20 +16,20 @@ A Model Context Protocol (MCP) server that connects AI assistants to the [Nutrie
 
 Once configured, you (or your AI agent) can process documents through natural language:
 
-**You:** *"Merge report-q1.pdf and report-q2.pdf into a single document"*
-**AI:** *"Done! I've merged both reports into combined-report.pdf (24 pages total)."*
+**You:** _"Merge report-q1.pdf and report-q2.pdf into a single document"_
+**AI:** _"Done! I've merged both reports into combined-report.pdf (24 pages total)."_
 
-**You:** *"Redact all social security numbers and email addresses from application.pdf"*
-**AI:** *"I found and redacted 5 SSNs and 3 email addresses. The redacted version is saved as application-redacted.pdf."*
+**You:** _"Redact all social security numbers and email addresses from application.pdf"_
+**AI:** _"I found and redacted 5 SSNs and 3 email addresses. The redacted version is saved as application-redacted.pdf."_
 
-**You:** *"Digitally sign this contract with a visible signature on page 3"*
-**AI:** *"I've applied a PAdES-compliant digital signature to contract.pdf. The signed document is saved as contract-signed.pdf."*
+**You:** _"Digitally sign this contract with a visible signature on page 3"_
+**AI:** _"I've applied a PAdES-compliant digital signature to contract.pdf. The signed document is saved as contract-signed.pdf."_
 
-**You:** *"Convert this PDF to markdown"*
-**AI:** *"Here's the markdown content extracted from your document..."*
+**You:** _"Convert this PDF to markdown"_
+**AI:** _"Here's the markdown content extracted from your document..."_
 
-**You:** *"OCR this scanned document in German and extract the text"*
-**AI:** *"I've processed the scan with German OCR. Here's the extracted text..."*
+**You:** _"OCR this scanned document in German and extract the text"_
+**AI:** _"I've processed the scan with German OCR. Here's the extracted text..."_
 
 ## Quick Start
 
@@ -57,11 +57,11 @@ Open Settings → Developer → Edit Config, then add:
       "args": ["-y", "@nutrient-sdk/dws-mcp-server"],
       "env": {
         "NUTRIENT_DWS_API_KEY": "YOUR_API_KEY_HERE",
-        "SANDBOX_PATH": "/your/sandbox/directory"
+        "SANDBOX_PATH": "/your/sandbox/directory",
         // "C:\\your\\sandbox\\directory" for Windows
-      }
-    }
-  }
+      },
+    },
+  },
 }
 ```
 
@@ -80,13 +80,14 @@ Create `.cursor/mcp.json` in your project root:
       "args": ["-y", "@nutrient-sdk/dws-mcp-server"],
       "env": {
         "NUTRIENT_DWS_API_KEY": "YOUR_API_KEY_HERE",
-        "SANDBOX_PATH": "/your/project/documents"
+        "SANDBOX_PATH": "/your/project/documents",
         // "C:\\your\\project\\documents" for Windows
-      }
-    }
-  }
+      },
+    },
+  },
 }
 ```
+
 </details>
 
 <details>
@@ -102,13 +103,14 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
       "args": ["-y", "@nutrient-sdk/dws-mcp-server"],
       "env": {
         "NUTRIENT_DWS_API_KEY": "YOUR_API_KEY_HERE",
-        "SANDBOX_PATH": "/your/sandbox/directory"
+        "SANDBOX_PATH": "/your/sandbox/directory",
         // "C:\\your\\sandbox\\directory" for Windows
-      }
-    }
-  }
+      },
+    },
+  },
 }
 ```
+
 </details>
 
 <details>
@@ -132,6 +134,7 @@ Add to `.vscode/settings.json` in your project:
   }
 }
 ```
+
 </details>
 
 <details>
@@ -142,6 +145,7 @@ Any MCP-compatible client can connect using stdio transport:
 ```bash
 NUTRIENT_DWS_API_KEY=your_key SANDBOX_PATH=/your/path npx @nutrient-sdk/dws-mcp-server
 ```
+
 </details>
 
 ### 3. Restart Your AI Client
@@ -154,26 +158,26 @@ Drop documents into your sandbox directory and start giving instructions!
 
 ## Available Tools
 
-| Tool | Description |
-|------|-------------|
+| Tool                   | Description                                                                                                                                                           |
+| ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | **document_processor** | All-in-one document processing: merge PDFs, convert formats, apply OCR, watermark, rotate, redact, flatten annotations, extract text/tables/key-value pairs, and more |
-| **document_signer** | Digitally sign PDFs with PAdES-compliant CMS or CAdES signatures, with customizable visible/invisible signature appearances |
-| **sandbox_file_tree** | Browse files in the sandbox directory (when sandbox mode is enabled) |
-| **directory_tree** | Browse directory contents (when sandbox mode is disabled) |
+| **document_signer**    | Digitally sign PDFs with PAdES-compliant CMS or CAdES signatures, with customizable visible/invisible signature appearances                                           |
+| **sandbox_file_tree**  | Browse files in the sandbox directory (when sandbox mode is enabled)                                                                                                  |
+| **directory_tree**     | Browse directory contents (when sandbox mode is disabled)                                                                                                             |
 
 ### Document Processor Capabilities
 
-| Feature | Description |
-|---------|-------------|
-| Document Creation | Merge PDFs, Office docs (DOCX, XLSX, PPTX), and images into a single document |
-| Format Conversion | PDF ↔ DOCX, images (PNG, JPEG, WebP), PDF/A, PDF/UA, HTML, Markdown |
-| Editing | Watermark (text/image), rotate pages, flatten annotations |
-| Security | Redact sensitive data (SSNs, credit cards, emails, etc.), password protection, permission control |
-| Data Extraction | Extract text, tables, or key-value pairs as structured JSON |
-| OCR | Multi-language optical character recognition for scanned documents |
-| Optimization | Compress and linearize PDFs without quality loss |
-| Annotations | Import XFDF annotations, flatten annotations |
-| Digital Signing | PAdES-compliant CMS and CAdES digital signatures (via document_signer tool) |
+| Feature           | Description                                                                                       |
+| ----------------- | ------------------------------------------------------------------------------------------------- |
+| Document Creation | Merge PDFs, Office docs (DOCX, XLSX, PPTX), and images into a single document                     |
+| Format Conversion | PDF ↔ DOCX, images (PNG, JPEG, WebP), PDF/A, PDF/UA, HTML, Markdown                               |
+| Editing           | Watermark (text/image), rotate pages, flatten annotations                                         |
+| Security          | Redact sensitive data (SSNs, credit cards, emails, etc.), password protection, permission control |
+| Data Extraction   | Extract text, tables, or key-value pairs as structured JSON                                       |
+| OCR               | Multi-language optical character recognition for scanned documents                                |
+| Optimization      | Compress and linearize PDFs without quality loss                                                  |
+| Annotations       | Import XFDF annotations, flatten annotations                                                      |
+| Digital Signing   | PAdES-compliant CMS and CAdES digital signatures (via document_signer tool)                       |
 
 ## Use with AI Agent Frameworks
 
@@ -212,6 +216,7 @@ npx @nutrient-sdk/dws-mcp-server
 ```
 
 When sandbox mode is enabled:
+
 - Relative paths resolve relative to the sandbox directory
 - All input file paths are validated to ensure they reside in the sandbox
 - Processed files are saved within the sandbox
@@ -224,25 +229,25 @@ Processed files are saved to a location determined by the AI. To guide output pl
 
 ### Environment Variables
 
-| Variable | Required | Description |
-|----------|----------|-------------|
-| `NUTRIENT_DWS_API_KEY` | Yes (stdio/static) | Your Nutrient DWS API key ([get one free](https://dashboard.nutrient.io/sign_up/)) |
-| `SANDBOX_PATH` | Recommended | Directory to restrict file operations to |
-| `MCP_TRANSPORT` | No | `stdio` (default) or `http` |
-| `AUTH_MODE` | No | `static` (default) or `jwt` (HTTP mode only) |
-| `PORT` | No | HTTP port (default `3000`) |
-| `MCP_HOST` | No | HTTP bind host (default `127.0.0.1`) |
-| `MCP_ALLOWED_HOSTS` | No | Comma/space-separated allowed hostnames |
-| `MCP_DEBUG_LOGGING` | No | Enable HTTP request/response logging (`true`/`1`/`on`) |
-| `LOG_LEVEL` | No | Console log level for Winston logger (`debug` default) |
-| `MCP_BEARER_TOKEN` | Yes (HTTP+static) | Single bearer token for static auth |
-| `MCP_BEARER_TOKENS_JSON` | Optional | JSON map/array of static bearer principals |
-| `RESOURCE_URL` | No | Protected resource URL advertised to OAuth clients |
-| `AUTH_SERVER_URL` | No | Authorization server base URL |
-| `JWKS_URL` | Yes (HTTP+jwt) | JWKS endpoint for JWT signature validation |
-| `ISSUER` | No | JWT issuer (defaults to `AUTH_SERVER_URL`) |
-| `CLIENT_ID` | Yes (HTTP+jwt) | OAuth client ID used for token exchange |
-| `CLIENT_SECRET` | Yes (HTTP+jwt) | OAuth client secret used for token exchange |
+| Variable                 | Required           | Description                                                                        |
+| ------------------------ | ------------------ | ---------------------------------------------------------------------------------- |
+| `NUTRIENT_DWS_API_KEY`   | Yes (stdio/static) | Your Nutrient DWS API key ([get one free](https://dashboard.nutrient.io/sign_up/)) |
+| `SANDBOX_PATH`           | Recommended        | Directory to restrict file operations to                                           |
+| `MCP_TRANSPORT`          | No                 | `stdio` (default) or `http`                                                        |
+| `AUTH_MODE`              | No                 | `static` (default) or `jwt` (HTTP mode only)                                       |
+| `PORT`                   | No                 | HTTP port (default `3000`)                                                         |
+| `MCP_HOST`               | No                 | HTTP bind host (default `127.0.0.1`)                                               |
+| `MCP_ALLOWED_HOSTS`      | No                 | Comma/space-separated allowed hostnames                                            |
+| `MCP_DEBUG_LOGGING`      | No                 | Enable HTTP request/response logging (`true`/`1`/`on`)                             |
+| `LOG_LEVEL`              | No                 | Console log level for Winston logger (`debug` default)                             |
+| `MCP_BEARER_TOKEN`       | Yes (HTTP+static)  | Single bearer token for static auth                                                |
+| `MCP_BEARER_TOKENS_JSON` | Optional           | JSON map/array of static bearer principals                                         |
+| `RESOURCE_URL`           | No                 | Protected resource URL advertised to OAuth clients                                 |
+| `AUTH_SERVER_URL`        | No                 | Authorization server base URL                                                      |
+| `JWKS_URL`               | Yes (HTTP+jwt)     | JWKS endpoint for JWT signature validation                                         |
+| `ISSUER`                 | No                 | JWT issuer (defaults to `AUTH_SERVER_URL`)                                         |
+| `CLIENT_ID`              | Yes (HTTP+jwt)     | OAuth client ID used for token exchange                                            |
+| `CLIENT_SECRET`          | Yes (HTTP+jwt)     | OAuth client secret used for token exchange                                        |
 
 ### HTTP Transport
 
@@ -257,6 +262,7 @@ npx @nutrient-sdk/dws-mcp-server
 ```
 
 Endpoints:
+
 - `POST /mcp` (MCP Streamable HTTP)
 - `GET /mcp` (SSE stream)
 - `DELETE /mcp` (session termination)
@@ -268,15 +274,18 @@ Unauthenticated HTTP requests receive `401` and a `WWW-Authenticate` header with
 ## Troubleshooting
 
 **Server not appearing in Claude Desktop?**
+
 - Ensure Node.js 18+ is installed (`node --version`)
 - Check the config file path is correct for your OS
 - Restart Claude Desktop completely (check Task Manager/Activity Monitor)
 
 **"API key invalid" errors?**
+
 - Verify your API key at [dashboard.nutrient.io](https://dashboard.nutrient.io)
 - Ensure the key is set correctly in the `env` section (no extra spaces)
 
 **Files not found?**
+
 - Check that `SANDBOX_PATH` points to an existing directory
 - Ensure your documents are inside the sandbox directory
 - Use the `sandbox_file_tree` tool to verify visible files
diff --git a/src/dws/ai-redact.ts b/src/dws/ai-redact.ts
@@ -30,9 +30,7 @@ export async function performAiRedactCall(
 
     // Guard against output overwriting input
     if (resolvedInputPath === resolvedOutputPath) {
-      return createErrorResponse(
-        'Error: Output path must be different from input path to prevent data corruption.',
-      )
+      return createErrorResponse('Error: Output path must be different from input path to prevent data corruption.')
     }
 
     const fileBuffer = await fs.promises.readFile(resolvedInputPath)
@@ -53,7 +51,9 @@ export async function performAiRedactCall(
     formData.append('file1', fileBuffer, { filename: fileName })
     formData.append('data', JSON.stringify(dataPayload))
 
-    const response = apiClient ? await apiClient.post('ai/redact', formData) : await callNutrientApi('ai/redact', formData)
+    const response = apiClient
+      ? await apiClient.post('ai/redact', formData)
+      : await callNutrientApi('ai/redact', formData)
 
     return handleFileResponse(response, resolvedOutputPath, 'AI redaction completed successfully. Output saved to')
   } catch (e: unknown) {
diff --git a/src/http/requestLogger.ts b/src/http/requestLogger.ts
@@ -57,8 +57,7 @@ export function createRequestLoggerMiddleware(options?: { logger?: HttpLogger })
 
   return (req, res, next) => {
     const requestIdHeader = req.headers['x-request-id']
-    const requestId =
-      (typeof requestIdHeader === 'string' ? requestIdHeader : requestIdHeader?.[0]) ?? randomUUID()
+    const requestId = (typeof requestIdHeader === 'string' ? requestIdHeader : requestIdHeader?.[0]) ?? randomUUID()
 
     setRequestId(requestId)
     res.setHeader('x-request-id', requestId)
diff --git a/src/http/tokenExchange.ts b/src/http/tokenExchange.ts
@@ -87,9 +87,7 @@ export class TokenExchangeClient {
       if (axios.isAxiosError(error)) {
         if (error.response?.data) {
           const message =
-            typeof error.response.data === 'string'
-              ? error.response.data
-              : JSON.stringify(error.response.data)
+            typeof error.response.data === 'string' ? error.response.data : JSON.stringify(error.response.data)
           throw new Error(`Token exchange failed: ${message}`)
         }
 
diff --git a/src/index.ts b/src/index.ts
@@ -510,7 +510,10 @@ async function prepareSandbox(sandboxDir: string | null) {
   )
 }
 
-async function runStdioServer(options: { sandboxEnabled: boolean; environment: Environment }): Promise<RunServerResult> {
+async function runStdioServer(options: {
+  sandboxEnabled: boolean
+  environment: Environment
+}): Promise<RunServerResult> {
   const { sandboxEnabled, environment } = options
 
   if (!environment.nutrientApiKey) {
diff --git a/tests/protectedResource.test.ts b/tests/protectedResource.test.ts
@@ -30,8 +30,6 @@ describe('protected resource metadata', () => {
       resourceMetadataUrl: 'https://mcp.nutrient.io/.well-known/oauth-protected-resource',
     })
 
-    expect(header).toBe(
-      'Bearer resource_metadata="https://mcp.nutrient.io/.well-known/oauth-protected-resource"',
-    )
+    expect(header).toBe('Bearer resource_metadata="https://mcp.nutrient.io/.well-known/oauth-protected-resource"')
   })
 })
diff --git a/tests/unit.test.ts b/tests/unit.test.ts
@@ -384,7 +384,13 @@ describe('API Functions', () => {
       vi.spyOn(sandbox, 'resolveReadFilePath').mockResolvedValueOnce('/input.pdf')
       vi.spyOn(sandbox, 'resolveWriteFilePath').mockResolvedValueOnce('/output.pdf')
 
-      const result = await performAiRedactCall('/input.pdf', 'All personally identifiable information', '/output.pdf', true, true)
+      const result = await performAiRedactCall(
+        '/input.pdf',
+        'All personally identifiable information',
+        '/output.pdf',
+        true,
+        true,
+      )
 
       expect(result.isError).toBe(true)
       expect(getTextContent(result)).toBe('Error: stage and apply cannot both be true. Choose one mode.')
@@ -415,11 +421,7 @@ describe('API Functions', () => {
         config: {} as InternalAxiosRequestConfig,
       })
 
-      const result = await performAiRedactCall(
-        '/input.pdf',
-        'All personally identifiable information',
-        '/redacted.pdf',
-      )
+      const result = await performAiRedactCall('/input.pdf', 'All personally identifiable information', '/redacted.pdf')
 
       expect(result.isError).toBe(false)
       expect(getTextContent(result)).toContain('AI redaction completed successfully')

Original file line number	Diff line number	Diff line change
`@@ -510,7 +510,10 @@ async function prepareSandbox(sandboxDir: string \| null) {`
`510`	`510`	`)`
`511`	`511`	`}`
`512`	`512`
`513`		`-async function runStdioServer(options: { sandboxEnabled: boolean; environment: Environment }): Promise<RunServerResult> {`
	`513`	`+async function runStdioServer(options: {`
	`514`	`+ sandboxEnabled: boolean`
	`515`	`+ environment: Environment`
	`516`	`+}): Promise<RunServerResult> {`
`514`	`517`	`const { sandboxEnabled, environment } = options`
`515`	`518`
`516`	`519`	`if (!environment.nutrientApiKey) {`