Both handlers accepted a user-supplied output_path without boundary
validation, allowing MCP clients to write files to arbitrary filesystem
locations. A new safe_output_path() helper canonicalizes the parent
directory and asserts the resolved path stays within the allowed base
directory before any fs::write() call.
Also fixes pre-existing unused-import/dead-code warnings that blocked
the -D warnings release build.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Devid HW
2b136b845b