@ai-ecoverse/mcpcat 0.14.5 → 0.14.7

package/dist/host/mcpcat.mjs

@@ -52,7 +52,9 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 // src/config/lock.ts
 var lock_exports = {};
 __export(lock_exports, {
-  acquireLock: () => acquireLock
+  acquireLock: () => acquireLock,
+  releaseAllLocks: () => releaseAllLocks,
+  releaseAllLocksSync: () => releaseAllLocksSync
 });
 function isEexist(err) {
   if (err instanceof Error && "code" in err)
@@ -88,6 +90,35 @@ async function removeStaleLockFile(fs, lockPath) {
   }
   return false;
 }
+function releaseAllLocksSync() {
+  for (const lock of heldLocks) {
+    try {
+      if (lock.useFile && lock.fs.unlink) {
+        void lock.fs.unlink(lock.path).catch(() => {
+        });
+      } else {
+        void lock.fs.rmdir(lock.path).catch(() => {
+        });
+      }
+    } catch {
+    }
+  }
+  heldLocks.clear();
+}
+async function releaseAllLocks() {
+  const locks = [...heldLocks];
+  heldLocks.clear();
+  for (const lock of locks) {
+    try {
+      if (lock.useFile && lock.fs.unlink) {
+        await lock.fs.unlink(lock.path);
+      } else {
+        await lock.fs.rmdir(lock.path);
+      }
+    } catch {
+    }
+  }
+}
 async function acquireLock(fs, configPath) {
   const useFile = typeof fs.createExclusive === "function";
   const lockPath = `${configPath}.lock`;
@@ -120,10 +151,13 @@ async function acquireLock(fs, configPath) {
     }
     await new Promise((r) => setTimeout(r, LOCK_POLL_MS));
   }
+  const entry = { path: lockPath, useFile, fs };
+  heldLocks.add(entry);
   let released = false;
   return async () => {
     if (released) return;
     released = true;
+    heldLocks.delete(entry);
     try {
       if (useFile && fs.unlink) {
         await fs.unlink(lockPath);
@@ -134,13 +168,14 @@ async function acquireLock(fs, configPath) {
     }
   };
 }
-var LOCK_STALE_MS, LOCK_POLL_MS, LOCK_MAX_WAIT_MS;
+var LOCK_STALE_MS, LOCK_POLL_MS, LOCK_MAX_WAIT_MS, heldLocks;
 var init_lock = __esm({
   "src/config/lock.ts"() {
     "use strict";
     LOCK_STALE_MS = 1e4;
     LOCK_POLL_MS = 50;
     LOCK_MAX_WAIT_MS = 5e3;
+    heldLocks = /* @__PURE__ */ new Set();
   }
 });
 
@@ -6758,7 +6793,13 @@ var CLIENT_NAME = "mcpcat";
 var CALLBACK_HOST = "127.0.0.1";
 var CALLBACK_PATH = "/callback";
 var REQUEST_TIMEOUT_MS = 15e3;
-var REFRESH_SKEW_MS = 3e4;
+var MAX_REFRESH_SKEW_MS = 3e4;
+function computeSkew(state) {
+  const expiresIn = state?.tokens?.expires_in;
+  if (typeof expiresIn !== "number" || expiresIn <= 0) return MAX_REFRESH_SKEW_MS;
+  const ttlMs = expiresIn * 1e3;
+  return Math.min(MAX_REFRESH_SKEW_MS, Math.floor(ttlMs / 2));
+}
 var FALLBACK_REDIRECT_URL = `http://${CALLBACK_HOST}${CALLBACK_PATH}`;
 function timedFetch(fetchImpl) {
   return (input, init) => {
@@ -6825,7 +6866,9 @@ function createMcpAuthProvider(options) {
 function createJerkAuthProvider(options) {
   const { name, serverUrl, source } = options;
   let currentToken;
-  const _fetched = false;
+  function registerCredential(token) {
+    if (token && options.onCredentialObtained) options.onCredentialObtained(token);
+  }
   return {
     async token() {
       return currentToken;
@@ -6837,6 +6880,7 @@ function createJerkAuthProvider(options) {
           const result2 = await source.getToken(name, serverUrl, challenge.scope);
           if (result2) {
             currentToken = result2.accessToken;
+            registerCredential(currentToken);
             return;
           }
         } catch (err) {
@@ -6850,6 +6894,7 @@ function createJerkAuthProvider(options) {
       const result = await source.getToken(name, serverUrl);
       if (result) {
         currentToken = result.accessToken;
+        registerCredential(currentToken);
         return;
       }
       throw new McpOAuthAuthorizationRequiredError();
@@ -6860,6 +6905,9 @@ function createPiAuthProvider(options) {
   const { name, serverUrl, source, oauth, platform: platform2 } = options;
   const store = new SourceBackedStore(source, name, serverUrl, platform2);
   let refreshing;
+  function registerCredential(token) {
+    if (token && options.onCredentialObtained) options.onCredentialObtained(token);
+  }
   const refresh = async (staleToken) => {
     refreshing ??= store.withRefreshLock(async () => {
       const state = await store.load();
@@ -6889,15 +6937,28 @@ function createPiAuthProvider(options) {
     });
     return refreshing;
   };
+  let cachedToken;
+  let tokenLoaded = false;
   return {
     async token() {
       await refreshing?.catch(() => void 0);
+      if (tokenLoaded) return cachedToken;
       const state = await store.load();
-      const token = state?.tokens?.access_token;
-      const expired = state?.tokensExpireAt !== void 0 && state.tokensExpireAt - REFRESH_SKEW_MS <= Date.now();
-      if (!expired || !state?.tokens?.refresh_token) return token;
-      await refresh(token).catch(() => void 0);
-      return (await store.load())?.tokens?.access_token;
+      cachedToken = state?.tokens?.access_token;
+      registerCredential(cachedToken);
+      if (state?.tokens?.refresh_token) registerCredential(state.tokens.refresh_token);
+      const skew = computeSkew(state);
+      const expired = state?.tokensExpireAt !== void 0 && state.tokensExpireAt - skew <= Date.now();
+      if (expired && state?.tokens?.refresh_token) {
+        await refresh(cachedToken).catch(() => void 0);
+        const refreshedState = await store.load();
+        cachedToken = refreshedState?.tokens?.access_token;
+        registerCredential(cachedToken);
+        if (refreshedState?.tokens?.refresh_token)
+          registerCredential(refreshedState.tokens.refresh_token);
+      }
+      tokenLoaded = true;
+      return cachedToken;
     },
     async onUnauthorized(context) {
       const challenge = parseWwwAuthenticate(context.response.headers.get("www-authenticate"));
@@ -6905,6 +6966,11 @@ function createPiAuthProvider(options) {
         throw new AuthStepUpError(challenge.scope, options.name);
       }
       await refresh(context.token);
+      const state = await store.load();
+      cachedToken = state?.tokens?.access_token;
+      tokenLoaded = true;
+      registerCredential(cachedToken);
+      if (state?.tokens?.refresh_token) registerCredential(state.tokens.refresh_token);
     }
   };
 }
@@ -9972,6 +10038,9 @@ var MergedConfigSource = class _MergedConfigSource {
   }
 };
 
+// src/cli/main.ts
+init_lock();
+
 // src/config/edit.ts
 init_lock();
 function isRecord2(value) {
@@ -15343,6 +15412,8 @@ async function dispatchMultiTarget(platform2, parsed, version) {
       await Promise.race([killAllStdio(), new Promise((r) => setTimeout(r, 3e3))]);
     } catch {
     }
+    await releaseAllLocks().catch(() => {
+    });
     platform2.exit(exitCode);
   }
   platform2.onSignal?.("SIGTERM", () => void killTreeAndExit(143));
@@ -15575,25 +15646,28 @@ function classifyError(err) {
   }
   return { code: EXIT_RPC_ERROR, kind: "rpc_error", msg };
 }
-async function resolveAuthProvider(platform2, hasAuthHeader, url, target, config) {
+async function resolveAuthProvider(platform2, hasAuthHeader, url, target, config, onCredentialObtained) {
   if (hasAuthHeader || !url) return void 0;
-  const piSource = new PiFileTokenSource(platform2);
+  const source = await createTokenSource(platform2);
   const entry = config.entry(target);
   const oauth = entry && "url" in entry.config ? entry.config.oauth : void 0;
   const name = entry ? target : `url:${new URL(url).origin}${new URL(url).pathname}`;
   const provider = createMcpAuthProvider({
     name,
     serverUrl: url,
-    source: piSource,
+    source,
     oauth,
-    platform: platform2
+    platform: platform2,
+    onCredentialObtained
   });
   const credentialSecrets = [];
-  const state = await piSource.loadWithoutLock(name, url);
-  if (state?.tokens?.access_token) credentialSecrets.push(state.tokens.access_token);
-  if (state?.tokens?.refresh_token) credentialSecrets.push(state.tokens.refresh_token);
-  if (state?.clientInformation && "client_secret" in state.clientInformation && state.clientInformation.client_secret) {
-    credentialSecrets.push(state.clientInformation.client_secret);
+  if (source instanceof PiFileTokenSource) {
+    const state = await source.loadWithoutLock(name, url);
+    if (state?.tokens?.access_token) credentialSecrets.push(state.tokens.access_token);
+    if (state?.tokens?.refresh_token) credentialSecrets.push(state.tokens.refresh_token);
+    if (state?.clientInformation && "client_secret" in state.clientInformation && state.clientInformation.client_secret) {
+      credentialSecrets.push(state.clientInformation.client_secret);
+    }
   }
   return { provider, credentialSecrets };
 }
@@ -15641,7 +15715,7 @@ async function handleInputRequired(platform2, conn, err, respondData, json) {
 `);
     return EXIT_INPUT_REQUIRED;
   }
-  const isTty = platform2.isatty(0) && platform2.isatty(2);
+  const isTty = platform2.kind === "host" && platform2.isatty(0) && platform2.isatty(2);
   const elicitResult = await handleElicitation(platform2, inputReq, isTty, respondData);
   if ("exitCode" in elicitResult) {
     await platform2.write(2, `${err.requestJson}
@@ -15691,6 +15765,8 @@ async function runClientVerb(platform2, version, parsed) {
       await Promise.race([killAllStdio(), new Promise((r) => setTimeout(r, 3e3))]);
     } catch {
     }
+    await releaseAllLocks().catch(() => {
+    });
     platform2.exit(exitCode);
   }
   platform2.onSignal?.("SIGINT", () => {
@@ -15743,7 +15819,11 @@ async function runClientVerb(platform2, version, parsed) {
     hasAuthHeader,
     resolved.url,
     target,
-    config
+    config,
+    (secret) => {
+      allSecrets.add(secret);
+      verbose.secrets.add(secret);
+    }
   );
   const authProvider = authResolved?.provider;
   if (authResolved?.credentialSecrets) {
@@ -15823,6 +15903,8 @@ async function closeAndKillStdio(conn) {
     await killAllStdio();
   } catch {
   }
+  await releaseAllLocks().catch(() => {
+  });
 }
 async function writeErr(p, json, kind, msg) {
   if (json) await renderErrorJson(p, kind, msg);
@@ -16095,5 +16177,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.14.5", args);
+var code = await run(platform, "0.14.7", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -170,7 +170,9 @@ var init_node_stub = __esm({
 // src/config/lock.ts
 var lock_exports = {};
 __export(lock_exports, {
-  acquireLock: () => acquireLock
+  acquireLock: () => acquireLock,
+  releaseAllLocks: () => releaseAllLocks,
+  releaseAllLocksSync: () => releaseAllLocksSync
 });
 function isEexist(err) {
   if (err instanceof Error && "code" in err)
@@ -206,6 +208,35 @@ async function removeStaleLockFile(fs, lockPath) {
   }
   return false;
 }
+function releaseAllLocksSync() {
+  for (const lock of heldLocks) {
+    try {
+      if (lock.useFile && lock.fs.unlink) {
+        void lock.fs.unlink(lock.path).catch(() => {
+        });
+      } else {
+        void lock.fs.rmdir(lock.path).catch(() => {
+        });
+      }
+    } catch {
+    }
+  }
+  heldLocks.clear();
+}
+async function releaseAllLocks() {
+  const locks = [...heldLocks];
+  heldLocks.clear();
+  for (const lock of locks) {
+    try {
+      if (lock.useFile && lock.fs.unlink) {
+        await lock.fs.unlink(lock.path);
+      } else {
+        await lock.fs.rmdir(lock.path);
+      }
+    } catch {
+    }
+  }
+}
 async function acquireLock(fs, configPath) {
   const useFile = typeof fs.createExclusive === "function";
   const lockPath = `${configPath}.lock`;
@@ -238,10 +269,13 @@ async function acquireLock(fs, configPath) {
     }
     await new Promise((r) => setTimeout(r, LOCK_POLL_MS));
   }
+  const entry = { path: lockPath, useFile, fs };
+  heldLocks.add(entry);
   let released = false;
   return async () => {
     if (released) return;
     released = true;
+    heldLocks.delete(entry);
     try {
       if (useFile && fs.unlink) {
         await fs.unlink(lockPath);
@@ -252,13 +286,14 @@ async function acquireLock(fs, configPath) {
     }
   };
 }
-var LOCK_STALE_MS, LOCK_POLL_MS, LOCK_MAX_WAIT_MS;
+var LOCK_STALE_MS, LOCK_POLL_MS, LOCK_MAX_WAIT_MS, heldLocks;
 var init_lock = __esm({
   "src/config/lock.ts"() {
     "use strict";
     LOCK_STALE_MS = 1e4;
     LOCK_POLL_MS = 50;
     LOCK_MAX_WAIT_MS = 5e3;
+    heldLocks = /* @__PURE__ */ new Set();
   }
 });
 
@@ -6379,7 +6414,13 @@ var CLIENT_NAME = "mcpcat";
 var CALLBACK_HOST = "127.0.0.1";
 var CALLBACK_PATH = "/callback";
 var REQUEST_TIMEOUT_MS = 15e3;
-var REFRESH_SKEW_MS = 3e4;
+var MAX_REFRESH_SKEW_MS = 3e4;
+function computeSkew(state) {
+  const expiresIn = state?.tokens?.expires_in;
+  if (typeof expiresIn !== "number" || expiresIn <= 0) return MAX_REFRESH_SKEW_MS;
+  const ttlMs = expiresIn * 1e3;
+  return Math.min(MAX_REFRESH_SKEW_MS, Math.floor(ttlMs / 2));
+}
 var FALLBACK_REDIRECT_URL = `http://${CALLBACK_HOST}${CALLBACK_PATH}`;
 function timedFetch(fetchImpl) {
   return (input, init) => {
@@ -6446,7 +6487,9 @@ function createMcpAuthProvider(options) {
 function createJerkAuthProvider(options) {
   const { name, serverUrl, source } = options;
   let currentToken;
-  const _fetched = false;
+  function registerCredential(token) {
+    if (token && options.onCredentialObtained) options.onCredentialObtained(token);
+  }
   return {
     async token() {
       return currentToken;
@@ -6458,6 +6501,7 @@ function createJerkAuthProvider(options) {
           const result2 = await source.getToken(name, serverUrl, challenge.scope);
           if (result2) {
             currentToken = result2.accessToken;
+            registerCredential(currentToken);
             return;
           }
         } catch (err) {
@@ -6471,6 +6515,7 @@ function createJerkAuthProvider(options) {
       const result = await source.getToken(name, serverUrl);
       if (result) {
         currentToken = result.accessToken;
+        registerCredential(currentToken);
         return;
       }
       throw new McpOAuthAuthorizationRequiredError();
@@ -6481,6 +6526,9 @@ function createPiAuthProvider(options) {
   const { name, serverUrl, source, oauth, platform: platform2 } = options;
   const store = new SourceBackedStore(source, name, serverUrl, platform2);
   let refreshing;
+  function registerCredential(token) {
+    if (token && options.onCredentialObtained) options.onCredentialObtained(token);
+  }
   const refresh = async (staleToken) => {
     refreshing ??= store.withRefreshLock(async () => {
       const state = await store.load();
@@ -6510,15 +6558,28 @@ function createPiAuthProvider(options) {
     });
     return refreshing;
   };
+  let cachedToken;
+  let tokenLoaded = false;
   return {
     async token() {
       await refreshing?.catch(() => void 0);
+      if (tokenLoaded) return cachedToken;
       const state = await store.load();
-      const token = state?.tokens?.access_token;
-      const expired = state?.tokensExpireAt !== void 0 && state.tokensExpireAt - REFRESH_SKEW_MS <= Date.now();
-      if (!expired || !state?.tokens?.refresh_token) return token;
-      await refresh(token).catch(() => void 0);
-      return (await store.load())?.tokens?.access_token;
+      cachedToken = state?.tokens?.access_token;
+      registerCredential(cachedToken);
+      if (state?.tokens?.refresh_token) registerCredential(state.tokens.refresh_token);
+      const skew = computeSkew(state);
+      const expired = state?.tokensExpireAt !== void 0 && state.tokensExpireAt - skew <= Date.now();
+      if (expired && state?.tokens?.refresh_token) {
+        await refresh(cachedToken).catch(() => void 0);
+        const refreshedState = await store.load();
+        cachedToken = refreshedState?.tokens?.access_token;
+        registerCredential(cachedToken);
+        if (refreshedState?.tokens?.refresh_token)
+          registerCredential(refreshedState.tokens.refresh_token);
+      }
+      tokenLoaded = true;
+      return cachedToken;
     },
     async onUnauthorized(context) {
       const challenge = parseWwwAuthenticate(context.response.headers.get("www-authenticate"));
@@ -6526,6 +6587,11 @@ function createPiAuthProvider(options) {
         throw new AuthStepUpError(challenge.scope, options.name);
       }
       await refresh(context.token);
+      const state = await store.load();
+      cachedToken = state?.tokens?.access_token;
+      tokenLoaded = true;
+      registerCredential(cachedToken);
+      if (state?.tokens?.refresh_token) registerCredential(state.tokens.refresh_token);
     }
   };
 }
@@ -9593,6 +9659,9 @@ var MergedConfigSource = class _MergedConfigSource {
   }
 };
 
+// src/cli/main.ts
+init_lock();
+
 // src/config/edit.ts
 init_lock();
 function isRecord2(value) {
@@ -14964,6 +15033,8 @@ async function dispatchMultiTarget(platform2, parsed, version) {
       await Promise.race([killAllStdio(), new Promise((r) => setTimeout(r, 3e3))]);
     } catch {
     }
+    await releaseAllLocks().catch(() => {
+    });
     platform2.exit(exitCode);
   }
   platform2.onSignal?.("SIGTERM", () => void killTreeAndExit(143));
@@ -15196,25 +15267,28 @@ function classifyError(err) {
   }
   return { code: EXIT_RPC_ERROR, kind: "rpc_error", msg };
 }
-async function resolveAuthProvider(platform2, hasAuthHeader, url, target, config) {
+async function resolveAuthProvider(platform2, hasAuthHeader, url, target, config, onCredentialObtained) {
   if (hasAuthHeader || !url) return void 0;
-  const piSource = new PiFileTokenSource(platform2);
+  const source = await createTokenSource(platform2);
   const entry = config.entry(target);
   const oauth = entry && "url" in entry.config ? entry.config.oauth : void 0;
   const name = entry ? target : `url:${new URL(url).origin}${new URL(url).pathname}`;
   const provider = createMcpAuthProvider({
     name,
     serverUrl: url,
-    source: piSource,
+    source,
     oauth,
-    platform: platform2
+    platform: platform2,
+    onCredentialObtained
   });
   const credentialSecrets = [];
-  const state = await piSource.loadWithoutLock(name, url);
-  if (state?.tokens?.access_token) credentialSecrets.push(state.tokens.access_token);
-  if (state?.tokens?.refresh_token) credentialSecrets.push(state.tokens.refresh_token);
-  if (state?.clientInformation && "client_secret" in state.clientInformation && state.clientInformation.client_secret) {
-    credentialSecrets.push(state.clientInformation.client_secret);
+  if (source instanceof PiFileTokenSource) {
+    const state = await source.loadWithoutLock(name, url);
+    if (state?.tokens?.access_token) credentialSecrets.push(state.tokens.access_token);
+    if (state?.tokens?.refresh_token) credentialSecrets.push(state.tokens.refresh_token);
+    if (state?.clientInformation && "client_secret" in state.clientInformation && state.clientInformation.client_secret) {
+      credentialSecrets.push(state.clientInformation.client_secret);
+    }
   }
   return { provider, credentialSecrets };
 }
@@ -15262,7 +15336,7 @@ async function handleInputRequired(platform2, conn, err, respondData, json) {
 `);
     return EXIT_INPUT_REQUIRED;
   }
-  const isTty = platform2.isatty(0) && platform2.isatty(2);
+  const isTty = platform2.kind === "host" && platform2.isatty(0) && platform2.isatty(2);
   const elicitResult = await handleElicitation(platform2, inputReq, isTty, respondData);
   if ("exitCode" in elicitResult) {
     await platform2.write(2, `${err.requestJson}
@@ -15312,6 +15386,8 @@ async function runClientVerb(platform2, version, parsed) {
       await Promise.race([killAllStdio(), new Promise((r) => setTimeout(r, 3e3))]);
     } catch {
     }
+    await releaseAllLocks().catch(() => {
+    });
     platform2.exit(exitCode);
   }
   platform2.onSignal?.("SIGINT", () => {
@@ -15364,7 +15440,11 @@ async function runClientVerb(platform2, version, parsed) {
     hasAuthHeader,
     resolved.url,
     target,
-    config
+    config,
+    (secret) => {
+      allSecrets.add(secret);
+      verbose.secrets.add(secret);
+    }
   );
   const authProvider = authResolved?.provider;
   if (authResolved?.credentialSecrets) {
@@ -15444,6 +15524,8 @@ async function closeAndKillStdio(conn) {
     await killAllStdio();
   } catch {
   }
+  await releaseAllLocks().catch(() => {
+  });
 }
 async function writeErr(p, json, kind, msg) {
   if (json) await renderErrorJson(p, kind, msg);
@@ -15759,7 +15841,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.14.5", args);
+  return run(platform2, "0.14.7", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.14.5",
+  "version": "0.14.7",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -56,7 +56,7 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.82.0",
+    "@ai-ecoverse/slicc-kernel": "1.83.0",
     "@ai-ecoverse/slicc-shared-web": "1.13.1",
     "@biomejs/biome": "2.5.15",
     "@earendil-works/pi-codemode": "1.2.0",