@ai-ecoverse/mcpcat 0.15.0 → 0.15.1

package/dist/host/mcpcat.mjs

@@ -8343,6 +8343,16 @@ var McpAuthError = class extends Error {
     this.target = target;
   }
 };
+var TransportRefusalError = class extends Error {
+  status;
+  reason;
+  constructor(status, reason) {
+    super(reason);
+    this.name = "TransportRefusalError";
+    this.status = status;
+    this.reason = reason;
+  }
+};
 var AuthRetryableError = class extends Error {
   response;
   constructor(response) {
@@ -8485,6 +8495,15 @@ async function createStatelessConnection(options) {
     return h;
   }
   async function handleErrorStatus(res, method) {
+    if (res.status === 403) {
+      const wwwAuth = res.headers.get("www-authenticate") ?? "";
+      if (!wwwAuth) {
+        const body = await res.text();
+        if (body && !body.includes("insufficient_scope")) {
+          throw new TransportRefusalError(403, body.split("\n")[0].slice(0, 200));
+        }
+      }
+    }
     if ((res.status === 401 || res.status === 403) && authProvider)
       throw new AuthRetryableError(res);
     if (res.status === 401 || res.status === 403) throw new McpAuthError(res.status, url);
@@ -9018,6 +9037,7 @@ async function connect(platform2, options) {
     const isMethodNotFound = err instanceof StatelessRpcError && err.code === -32601 || err instanceof StatelessHttpError && err.status >= 400 && err.status < 500;
     if (options.protocolVersion?.startsWith("2026")) throw err;
     if (err instanceof McpAuthError || err instanceof AuthStepUpError) throw err;
+    if (err instanceof TransportRefusalError) throw err;
     if (err.name === "McpOAuthAuthorizationRequiredError") throw err;
     if (isMethodNotFound) {
       return createPiConnection({
@@ -14449,7 +14469,10 @@ async function sealSecret(platform2, name, value, options) {
   }
   const response = JSON.parse(responseText);
   if (response.error) {
-    throw Object.assign(new Error(response.error), { sealErrno: response.errno ?? "EACCES" });
+    const isStructured = typeof response.error === "object" && response.error !== null && response.error.code;
+    const errno = isStructured ? response.error.code : response.errno ?? "EACCES";
+    const message = isStructured ? response.error.message : response.error;
+    throw Object.assign(new Error(String(message)), { sealErrno: errno });
   }
   return { placeholder: response.placeholder };
 }
@@ -14461,6 +14484,7 @@ function sealErrorMessage(errno, name) {
   if (errno === "EEXIST") return `a non-bridge secret named ${name} already exists`;
   if (errno === "ENOTCONN") return "no vault available; use --bearer '${VAR}' or --no-auth";
   if (errno === "EACCES") return "vault locked; use --bearer '${VAR}' or --no-auth";
+  if (errno === "ETIMEDOUT") return "vault did not respond in time";
   return `vault error: ${errno}`;
 }
 
@@ -16088,6 +16112,9 @@ function classifyError(err) {
   if (err instanceof InputRequiredError) {
     return { code: EXIT_INPUT_REQUIRED, kind: "input_required", msg: err.requestJson };
   }
+  if (err instanceof TransportRefusalError) {
+    return { code: EXIT_CONNECTION, kind: "connection", msg: err.reason };
+  }
   if (err instanceof McpTimeoutError2) {
     return { code: EXIT_TIMEOUT, kind: "timeout", msg: err.message };
   }
@@ -16144,6 +16171,14 @@ async function resolveAuthProvider(platform2, hasAuthHeader, url, target, config
   return { provider, credentialSecrets };
 }
 function classifyConnectionError(err, target, interrupted) {
+  if (err instanceof TransportRefusalError) {
+    const hint = "in seven, reach the host via http://host.slicc.internal:<port>; in tests, enable the transport's hostLoopback";
+    return {
+      code: EXIT_CONNECTION,
+      kind: "connection",
+      msg: `${err.reason} (${hint})`
+    };
+  }
   if (err instanceof McpAuthError || err instanceof AuthStepUpError || err instanceof JerkSignInRequiredError) {
     return classifyError(err);
   }
@@ -16649,5 +16684,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.15.0", args);
+var code = await run(platform, "0.15.1", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -7964,6 +7964,16 @@ var McpAuthError = class extends Error {
     this.target = target;
   }
 };
+var TransportRefusalError = class extends Error {
+  status;
+  reason;
+  constructor(status, reason) {
+    super(reason);
+    this.name = "TransportRefusalError";
+    this.status = status;
+    this.reason = reason;
+  }
+};
 var AuthRetryableError = class extends Error {
   response;
   constructor(response) {
@@ -8106,6 +8116,15 @@ async function createStatelessConnection(options) {
     return h;
   }
   async function handleErrorStatus(res, method) {
+    if (res.status === 403) {
+      const wwwAuth = res.headers.get("www-authenticate") ?? "";
+      if (!wwwAuth) {
+        const body = await res.text();
+        if (body && !body.includes("insufficient_scope")) {
+          throw new TransportRefusalError(403, body.split("\n")[0].slice(0, 200));
+        }
+      }
+    }
     if ((res.status === 401 || res.status === 403) && authProvider)
       throw new AuthRetryableError(res);
     if (res.status === 401 || res.status === 403) throw new McpAuthError(res.status, url);
@@ -8639,6 +8658,7 @@ async function connect(platform2, options) {
     const isMethodNotFound = err instanceof StatelessRpcError && err.code === -32601 || err instanceof StatelessHttpError && err.status >= 400 && err.status < 500;
     if (options.protocolVersion?.startsWith("2026")) throw err;
     if (err instanceof McpAuthError || err instanceof AuthStepUpError) throw err;
+    if (err instanceof TransportRefusalError) throw err;
     if (err.name === "McpOAuthAuthorizationRequiredError") throw err;
     if (isMethodNotFound) {
       return createPiConnection({
@@ -14070,7 +14090,10 @@ async function sealSecret(platform2, name, value, options) {
   }
   const response = JSON.parse(responseText);
   if (response.error) {
-    throw Object.assign(new Error(response.error), { sealErrno: response.errno ?? "EACCES" });
+    const isStructured = typeof response.error === "object" && response.error !== null && response.error.code;
+    const errno = isStructured ? response.error.code : response.errno ?? "EACCES";
+    const message = isStructured ? response.error.message : response.error;
+    throw Object.assign(new Error(String(message)), { sealErrno: errno });
   }
   return { placeholder: response.placeholder };
 }
@@ -14082,6 +14105,7 @@ function sealErrorMessage(errno, name) {
   if (errno === "EEXIST") return `a non-bridge secret named ${name} already exists`;
   if (errno === "ENOTCONN") return "no vault available; use --bearer '${VAR}' or --no-auth";
   if (errno === "EACCES") return "vault locked; use --bearer '${VAR}' or --no-auth";
+  if (errno === "ETIMEDOUT") return "vault did not respond in time";
   return `vault error: ${errno}`;
 }
 
@@ -15709,6 +15733,9 @@ function classifyError(err) {
   if (err instanceof InputRequiredError) {
     return { code: EXIT_INPUT_REQUIRED, kind: "input_required", msg: err.requestJson };
   }
+  if (err instanceof TransportRefusalError) {
+    return { code: EXIT_CONNECTION, kind: "connection", msg: err.reason };
+  }
   if (err instanceof McpTimeoutError2) {
     return { code: EXIT_TIMEOUT, kind: "timeout", msg: err.message };
   }
@@ -15765,6 +15792,14 @@ async function resolveAuthProvider(platform2, hasAuthHeader, url, target, config
   return { provider, credentialSecrets };
 }
 function classifyConnectionError(err, target, interrupted) {
+  if (err instanceof TransportRefusalError) {
+    const hint = "in seven, reach the host via http://host.slicc.internal:<port>; in tests, enable the transport's hostLoopback";
+    return {
+      code: EXIT_CONNECTION,
+      kind: "connection",
+      msg: `${err.reason} (${hint})`
+    };
+  }
   if (err instanceof McpAuthError || err instanceof AuthStepUpError || err instanceof JerkSignInRequiredError) {
     return classifyError(err);
   }
@@ -16313,7 +16348,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.15.0", args);
+  return run(platform2, "0.15.1", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -56,7 +56,7 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.83.0",
+    "@ai-ecoverse/slicc-kernel": "1.85.0",
     "@ai-ecoverse/slicc-shared-web": "1.13.1",
     "@biomejs/biome": "2.5.15",
     "@earendil-works/pi-codemode": "1.2.0",