Skip to content

PDF Tools v0.12.1 — folder access without setup

Choose a tag to compare

View all tags
@silverstein silverstein released this 01 Sep 23:57
v0.12.1
7a774ac
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

PDF Tools v0.12.1

This patch publishes the folder-scope correction requested during Lumin's
ChatGPT Agent Plugin testing.

Folder access that is useful and honest

A fresh Agent Plugin install no longer requires a folder allowlist before PDF
Tools can do anything. It starts with a private plugin workspace where the host
can place a file the user selected.

Optional direct-folder access is still available. When configured, it replaces
the default workspace and continues to reject direct access outside the chosen
folders, malformed settings, self-configuration attempts, and symlink escapes.

The product copy now distinguishes two different permissions:

  • ChatGPT Full Access controls what the ChatGPT host may read or import.
  • PDF Tools folder scope controls which paths PDF Tools tools may open directly.

That means PDF Tools no longer presents its folder list as a confidentiality
boundary against a host that the user has already given Full Access.

Compatibility

Existing configured folders continue to work. The MCP surface remains 44 tools
and 14 prompts. This patch does not include the later verified-extraction
workspace feature.

Verification

The exact release candidate passed:

  • 2,511 Vitest assertions and 62 node-native assertions on macOS arm64, with
    only declared platform skips;
  • the online release golden set, 4/4;
  • two byte-identical MCPB builds and packed native smoke;
  • two byte-identical share ZIP builds plus clean-install/share-contract smoke;
  • independent exact-commit review with no P0-P3 findings.

The folder-scope behavior itself was tested in an installed Agent Plugin: an
outside PDF was refused, the host-imported byte-identical copy was accepted,
and an existing configured Desktop folder remained compatible.

The QPDF runtime and viewer bytes are unchanged from v0.12.0 and retain that
release's platform and host qualification.

Artifacts

Artifact SHA-256
pdf-toolkit-mcp.mcpb cad257f6522cb95bc0c1257536df43a0f277ac2e4ff0b92441f24fe6bc1687fc
pdf-toolkit-mcp.zip 891e0c1f1d4a86a90894616a7e9cef47cbade8b2e998323681e44e14fc6e7bf6

The current dependency audit reports four low and two high findings inherited
from the existing locked dependency graph. No automatic dependency rewrite was
mixed into this patch release.

Assets 4
Loading