@aalis/plugin-mcp-client 0.15.0 → 0.15.2

package/README.md

@@ -38,7 +38,7 @@ plugins:
 
 ## 注意
 
-- `env` 声明了 `secret: true`：每个 server 的整份 `env` 算一个密钥，Node 宿主把它移进家目录的 `secrets.yaml`，配置文件里只留引用；WebUI 不回显，要改就整份重填。token 放进 `env`，不要写进 `args`（连接成功时的日志会写出全部 `args`）
+- `env` 声明了 `secret: true`：每个 server 的整份 `env` 算一个密钥，Node 宿主把它移进数据目录的 `secrets.yaml`，配置文件里只留引用；WebUI 不回显，要改就整份重填。token 放进 `env`，不要写进 `args`（连接成功时的日志会写出全部 `args`）
 - `args` 必须是字符串数组、`env` 必须是映射；缺省时分别补 `[]` / `{}`。显式形态错误或任一成员不能转为字符串时，该 server 记录警告且不启动，其他 server 不受影响；合法的空字符串参数会原样传递
 - 缺少 `id` 或 `command` 的条目记录警告并跳过，其它 server 不受影响
 - `enabled` 不是布尔值、`visibility` 不在四档选项中时，同样跳过该 server

package/dist/index.d.ts

@@ -106,7 +106,7 @@ interface ToolMeta {
     };
 }
 /**
- * 从 MCP 工具注解推导默认档位（用户裁定 2026-08-23：按"是否可能破坏"分档）：
+ * 从 MCP 工具注解推导默认档位，按"是否可能破坏"分档：
  * - 自称只读且无破坏提示 → `risk:'sensitive'`（等级 1，挡 level-0）；
  * - 有破坏提示或未声明 → `visibility:'restricted'`（等级 2）——未知按可破坏算，失败关闭。
  *

package/dist/index.js

@@ -84,7 +84,7 @@ const configSchema = defineConfig({
     },
 });
 /**
- * 从 MCP 工具注解推导默认档位（用户裁定 2026-08-23：按"是否可能破坏"分档）：
+ * 从 MCP 工具注解推导默认档位，按"是否可能破坏"分档：
  * - 自称只读且无破坏提示 → `risk:'sensitive'`（等级 1，挡 level-0）；
  * - 有破坏提示或未声明 → `visibility:'restricted'`（等级 2）——未知按可破坏算，失败关闭。
  *

package/dist/locales/en.d.ts

@@ -9,11 +9,11 @@ declare const _default: {
     readonly argsLabel: "Command arguments";
     readonly argsDescription: "Arguments passed to the command in order, one per item (may contain spaces). Write file paths in arguments as absolute paths.";
     readonly envLabel: "Environment variables";
-    readonly envDescription: "Extra environment variables passed to the child process (KEY → VALUE). The whole map is stored in secrets.yaml as one secret; the WebUI does not show it back, and changing it means re-entering all of it. Put credentials such as tokens here, not in the command arguments (arguments are written to the logs).";
+    readonly envDescription: "Extra environment variables passed to the server process (KEY → VALUE), stored as one secret; changing it means re-entering all of it. Put credentials such as tokens here, not in the command arguments.";
     readonly enabledLabel: "Enabled";
     readonly enabledDescription: "Turn off to skip this server for now without deleting the whole entry.";
     readonly visibilityLabel: "Tool level";
-    readonly visibilityDescription: "Level of all tools of this server. auto = by tool annotations: self-declared read-only → sensitive (level 1), destructive hints or nothing declared → restricted (level 2). public restores level 0, open to everyone (the old 0.x default).";
+    readonly visibilityDescription: "Level of all tools of this server. auto follows the annotations the tools declare: read-only ones are sensitive (level 1), the rest restricted (level 2).";
     readonly visibilityAuto: "auto (by annotations)";
     readonly visibilityPublic: "public (level 0, open to everyone)";
     readonly visibilitySensitive: "sensitive (level 1)";

package/dist/locales/en.js

@@ -10,11 +10,11 @@ export default defineLocale()({
     argsLabel: 'Command arguments',
     argsDescription: 'Arguments passed to the command in order, one per item (may contain spaces). Write file paths in arguments as absolute paths.',
     envLabel: 'Environment variables',
-    envDescription: 'Extra environment variables passed to the child process (KEY → VALUE). The whole map is stored in secrets.yaml as one secret; the WebUI does not show it back, and changing it means re-entering all of it. Put credentials such as tokens here, not in the command arguments (arguments are written to the logs).',
+    envDescription: 'Extra environment variables passed to the server process (KEY → VALUE), stored as one secret; changing it means re-entering all of it. Put credentials such as tokens here, not in the command arguments.',
     enabledLabel: 'Enabled',
     enabledDescription: 'Turn off to skip this server for now without deleting the whole entry.',
     visibilityLabel: 'Tool level',
-    visibilityDescription: 'Level of all tools of this server. auto = by tool annotations: self-declared read-only → sensitive (level 1), destructive hints or nothing declared → restricted (level 2). public restores level 0, open to everyone (the old 0.x default).',
+    visibilityDescription: 'Level of all tools of this server. auto follows the annotations the tools declare: read-only ones are sensitive (level 1), the rest restricted (level 2).',
     visibilityAuto: 'auto (by annotations)',
     visibilityPublic: 'public (level 0, open to everyone)',
     visibilitySensitive: 'sensitive (level 1)',

package/dist/locales/en.js.map

@@ -1 +1 @@
-{"version":3,"file":"en.js","sourceRoot":"","sources":["../../src/locales/en.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,eAAe,YAAY,EAAU,CAAC;IACpC,WAAW,EAAE,YAAY;IACzB,YAAY,EAAE,aAAa;IAC3B,kBAAkB,EAChB,kHAAkH;IACpH,OAAO,EAAE,WAAW;IACpB,aAAa,EACX,wIAAwI;IAC1I,YAAY,EAAE,oBAAoB;IAClC,kBAAkB,EAAE,sFAAsF;IAC1G,SAAS,EAAE,mBAAmB;IAC9B,eAAe,EACb,+HAA+H;IACjI,QAAQ,EAAE,uBAAuB;IACjC,cAAc,EACZ,oTAAoT;IACtT,YAAY,EAAE,SAAS;IACvB,kBAAkB,EAAE,wEAAwE;IAC5F,eAAe,EAAE,YAAY;IAC7B,qBAAqB,EACnB,8OAA8O;IAChP,cAAc,EAAE,uBAAuB;IACvC,gBAAgB,EAAE,oCAAoC;IACtD,mBAAmB,EAAE,qBAAqB;IAC1C,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,qCAAqC;IACzD,mBAAmB,EACjB,4JAA4J;IAC9J,kBAAkB,EAAE,uDAAuD;IAC3E,SAAS,EAAE,gBAAgB;IAC3B,gBAAgB,EACd,wGAAwG;CAC3G,CAAC,CAAC"}
+{"version":3,"file":"en.js","sourceRoot":"","sources":["../../src/locales/en.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,eAAe,YAAY,EAAU,CAAC;IACpC,WAAW,EAAE,YAAY;IACzB,YAAY,EAAE,aAAa;IAC3B,kBAAkB,EAChB,kHAAkH;IACpH,OAAO,EAAE,WAAW;IACpB,aAAa,EACX,wIAAwI;IAC1I,YAAY,EAAE,oBAAoB;IAClC,kBAAkB,EAAE,sFAAsF;IAC1G,SAAS,EAAE,mBAAmB;IAC9B,eAAe,EACb,+HAA+H;IACjI,QAAQ,EAAE,uBAAuB;IACjC,cAAc,EACZ,2MAA2M;IAC7M,YAAY,EAAE,SAAS;IACvB,kBAAkB,EAAE,wEAAwE;IAC5F,eAAe,EAAE,YAAY;IAC7B,qBAAqB,EACnB,2JAA2J;IAC7J,cAAc,EAAE,uBAAuB;IACvC,gBAAgB,EAAE,oCAAoC;IACtD,mBAAmB,EAAE,qBAAqB;IAC1C,oBAAoB,EAAE,sBAAsB;IAC5C,kBAAkB,EAAE,qCAAqC;IACzD,mBAAmB,EACjB,4JAA4J;IAC9J,kBAAkB,EAAE,uDAAuD;IAC3E,SAAS,EAAE,gBAAgB;IAC3B,gBAAgB,EACd,wGAAwG;CAC3G,CAAC,CAAC"}

package/dist/texts.d.ts

@@ -9,11 +9,11 @@ declare const SOURCE: {
     readonly argsLabel: "命令参数";
     readonly argsDescription: "按顺序传给命令的参数列表，每项一个参数（可含空格）。参数里的文件路径请写绝对路径。";
     readonly envLabel: "环境变量";
-    readonly envDescription: "额外传给子进程的环境变量（KEY → VALUE）。整份作为一个密钥存进 secrets.yaml，WebUI 不回显，改时整份重填。token 等凭据放这里，不要放进命令参数（参数会写进日志）。";
+    readonly envDescription: "额外传给服务器进程的环境变量（KEY → VALUE），整份作为一个密钥保存，改时整份重填。token 等凭据放这里，不要放进命令参数。";
     readonly enabledLabel: "启用";
     readonly enabledDescription: "关闭可临时跳过该 server 而不删除整条配置。";
     readonly visibilityLabel: "工具档位";
-    readonly visibilityDescription: "该 server 全部工具的档位。auto=按工具注解分档：自称只读→sensitive（等级 1），有破坏提示或未声明→restricted（等级 2）。public 恢复等级 0 全开（0.x 旧默认）。";
+    readonly visibilityDescription: "这个服务器全部工具的档位。auto 按工具自报的注解定：只读的为 sensitive（等级 1），其余为 restricted（等级 2）。";
     readonly visibilityAuto: "auto（按注解分档）";
     readonly visibilityPublic: "public（等级 0 全开）";
     readonly visibilitySensitive: "sensitive（等级 1）";
@@ -36,11 +36,11 @@ export declare const t: import("@aalis/schema-i18n").TextFactory<{
     readonly argsLabel: "命令参数";
     readonly argsDescription: "按顺序传给命令的参数列表，每项一个参数（可含空格）。参数里的文件路径请写绝对路径。";
     readonly envLabel: "环境变量";
-    readonly envDescription: "额外传给子进程的环境变量（KEY → VALUE）。整份作为一个密钥存进 secrets.yaml，WebUI 不回显，改时整份重填。token 等凭据放这里，不要放进命令参数（参数会写进日志）。";
+    readonly envDescription: "额外传给服务器进程的环境变量（KEY → VALUE），整份作为一个密钥保存，改时整份重填。token 等凭据放这里，不要放进命令参数。";
     readonly enabledLabel: "启用";
     readonly enabledDescription: "关闭可临时跳过该 server 而不删除整条配置。";
     readonly visibilityLabel: "工具档位";
-    readonly visibilityDescription: "该 server 全部工具的档位。auto=按工具注解分档：自称只读→sensitive（等级 1），有破坏提示或未声明→restricted（等级 2）。public 恢复等级 0 全开（0.x 旧默认）。";
+    readonly visibilityDescription: "这个服务器全部工具的档位。auto 按工具自报的注解定：只读的为 sensitive（等级 1），其余为 restricted（等级 2）。";
     readonly visibilityAuto: "auto（按注解分档）";
     readonly visibilityPublic: "public（等级 0 全开）";
     readonly visibilitySensitive: "sensitive（等级 1）";

package/dist/texts.js

@@ -12,11 +12,11 @@ const SOURCE = {
     argsLabel: '命令参数',
     argsDescription: '按顺序传给命令的参数列表，每项一个参数（可含空格）。参数里的文件路径请写绝对路径。',
     envLabel: '环境变量',
-    envDescription: '额外传给子进程的环境变量（KEY → VALUE）。整份作为一个密钥存进 secrets.yaml，WebUI 不回显，改时整份重填。token 等凭据放这里，不要放进命令参数（参数会写进日志）。',
+    envDescription: '额外传给服务器进程的环境变量（KEY → VALUE），整份作为一个密钥保存，改时整份重填。token 等凭据放这里，不要放进命令参数。',
     enabledLabel: '启用',
     enabledDescription: '关闭可临时跳过该 server 而不删除整条配置。',
     visibilityLabel: '工具档位',
-    visibilityDescription: '该 server 全部工具的档位。auto=按工具注解分档：自称只读→sensitive（等级 1），有破坏提示或未声明→restricted（等级 2）。public 恢复等级 0 全开（0.x 旧默认）。',
+    visibilityDescription: '这个服务器全部工具的档位。auto 按工具自报的注解定：只读的为 sensitive（等级 1），其余为 restricted（等级 2）。',
     visibilityAuto: 'auto（按注解分档）',
     visibilityPublic: 'public（等级 0 全开）',
     visibilitySensitive: 'sensitive（等级 1）',

package/dist/texts.js.map

@@ -1 +1 @@
-{"version":3,"file":"texts.js","sourceRoot":"","sources":["../src/texts.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEjC,MAAM,MAAM,GAAG;IACb,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,WAAW;IACzB,kBAAkB,EAAE,qDAAqD;IACzE,OAAO,EAAE,OAAO;IAChB,aAAa,EAAE,mDAAmD;IAClE,YAAY,EAAE,OAAO;IACrB,kBAAkB,EAAE,4CAA4C;IAChE,SAAS,EAAE,MAAM;IACjB,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,MAAM;IAChB,cAAc,EACZ,oGAAoG;IACtG,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,2BAA2B;IAC/C,eAAe,EAAE,MAAM;IACvB,qBAAqB,EACnB,0GAA0G;IAC5G,cAAc,EAAE,aAAa;IAC7B,gBAAgB,EAAE,iBAAiB;IACnC,mBAAmB,EAAE,iBAAiB;IACtC,oBAAoB,EAAE,kBAAkB;IACxC,kBAAkB,EAAE,kBAAkB;IACtC,mBAAmB,EAAE,6DAA6D;IAClF,kBAAkB,EAAE,2CAA2C;IAC/D,SAAS,EAAE,WAAW;IACtB,gBAAgB,EAAE,sCAAsC;CAChD,CAAC;AAGX,MAAM,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC;IAC3B,EAAE,EAAE,0BAA0B;IAC9B,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,EAAE,EAAE,EAAE;CAChB,CAAC,CAAC"}
+{"version":3,"file":"texts.js","sourceRoot":"","sources":["../src/texts.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEjC,MAAM,MAAM,GAAG;IACb,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,WAAW;IACzB,kBAAkB,EAAE,qDAAqD;IACzE,OAAO,EAAE,OAAO;IAChB,aAAa,EAAE,mDAAmD;IAClE,YAAY,EAAE,OAAO;IACrB,kBAAkB,EAAE,4CAA4C;IAChE,SAAS,EAAE,MAAM;IACjB,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,MAAM;IAChB,cAAc,EACZ,sEAAsE;IACxE,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,2BAA2B;IAC/C,eAAe,EAAE,MAAM;IACvB,qBAAqB,EACnB,wEAAwE;IAC1E,cAAc,EAAE,aAAa;IAC7B,gBAAgB,EAAE,iBAAiB;IACnC,mBAAmB,EAAE,iBAAiB;IACtC,oBAAoB,EAAE,kBAAkB;IACxC,kBAAkB,EAAE,kBAAkB;IACtC,mBAAmB,EAAE,6DAA6D;IAClF,kBAAkB,EAAE,2CAA2C;IAC/D,SAAS,EAAE,WAAW;IACtB,gBAAgB,EAAE,sCAAsC;CAChD,CAAC;AAGX,MAAM,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC;IAC3B,EAAE,EAAE,0BAA0B;IAC9B,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,EAAE,EAAE,EAAE;CAChB,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aalis/plugin-mcp-client",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
   "devDependencies": {
     "@types/node": "^22.0.0",
     "typescript": "^5.7.0",
-    "@aalis/core": "0.21.0"
+    "@aalis/core": "0.21.1"
   },
   "peerDependencies": {
     "@aalis/core": ">=0.21.0 <1.0.0"