@ai-ecoverse/mcpcat 0.15.4 → 0.15.6

package/dist/host/mcpcat.mjs

@@ -5329,8 +5329,8 @@ function parseCodemodeSource(input) {
     throw new CodemodeSourceError(`The ${CODEMODE_OPTIONS_PREFIX} line must be the first line of the input; found one on line ${misplaced + 1}`);
   }
   const newline = input.indexOf("\n");
-  const firstLine = lines[0].replace(/\r$/, "");
-  const trimmed = firstLine.trimStart();
+  const firstLine2 = lines[0].replace(/\r$/, "");
+  const trimmed = firstLine2.trimStart();
   if (!trimmed.startsWith(CODEMODE_OPTIONS_PREFIX))
     return { code: input, options: {} };
   const code2 = newline === -1 ? "" : input.slice(newline);
@@ -8369,8 +8369,9 @@ var McpTimeoutError2 = class extends Error {
 var McpAuthError = class extends Error {
   status;
   target;
-  constructor(status, target) {
-    super(`HTTP ${status}: authentication required. Run: mcpcat login ${target}`);
+  constructor(status, target, reason) {
+    const why = reason ? ` (${reason})` : "";
+    super(`HTTP ${status}: authentication required${why}. Run: mcpcat login ${target}`);
     this.name = "McpAuthError";
     this.status = status;
     this.target = target;
@@ -8388,12 +8389,23 @@ var TransportRefusalError = class extends Error {
 };
 var AuthRetryableError = class extends Error {
   response;
-  constructor(response) {
+  reason;
+  constructor(response, reason) {
     super(`HTTP ${response.status}: auth retry`);
     this.name = "AuthRetryableError";
     this.response = response;
+    this.reason = reason;
   }
 };
+var KERNEL_REFUSAL = "nodeTransport refuses ";
+function firstLine(text) {
+  return text.trim().split("\n")[0].trim().slice(0, 200);
+}
+async function authReason(res) {
+  const type = res.headers.get("content-type") ?? "";
+  if (!type.toLowerCase().startsWith("text/plain")) return void 0;
+  return firstLine(await res.text()) || void 0;
+}
 function selectSseFrame(body, targetId) {
   const text = new TextDecoder().decode(body);
   const blocks = text.replace(/\r\n/g, "\n").split(/\n\n/);
@@ -8510,7 +8522,8 @@ async function createStatelessConnection(options) {
     clientInfo = { name: "mcpcat", version: "0.0.0" },
     signal: externalSignal,
     verbose,
-    authProvider
+    authProvider,
+    transportRefusals
   } = options;
   let nextId2 = 1;
   let negotiatedVersion;
@@ -8528,18 +8541,14 @@ async function createStatelessConnection(options) {
     return h;
   }
   async function handleErrorStatus(res, method) {
-    if (res.status === 403) {
-      const wwwAuth = res.headers.get("www-authenticate") ?? "";
-      if (!wwwAuth) {
-        const body = await res.text();
-        if (body && !body.includes("insufficient_scope")) {
-          throw new TransportRefusalError(403, body.split("\n")[0].slice(0, 200));
-        }
+    if (res.status === 401 || res.status === 403) {
+      const reason = await authReason(res);
+      if (transportRefusals && res.status === 403 && !res.headers.has("www-authenticate") && reason?.startsWith(KERNEL_REFUSAL)) {
+        throw new TransportRefusalError(403, reason);
       }
+      if (authProvider) throw new AuthRetryableError(res, reason);
+      throw new McpAuthError(res.status, url, reason);
     }
-    if ((res.status === 401 || res.status === 403) && authProvider)
-      throw new AuthRetryableError(res);
-    if (res.status === 401 || res.status === 403) throw new McpAuthError(res.status, url);
     const text = await res.text();
     let rpc;
     try {
@@ -8594,7 +8603,7 @@ async function createStatelessConnection(options) {
     return frame.result;
   }
   async function handleAuthError(err, token) {
-    if (!authProvider?.onUnauthorized) throw new McpAuthError(err.response.status, url);
+    if (!authProvider?.onUnauthorized) throw new McpAuthError(err.response.status, url, err.reason);
     try {
       await authProvider.onUnauthorized({
         response: err.response,
@@ -8604,7 +8613,7 @@ async function createStatelessConnection(options) {
       });
     } catch (authErr) {
       if (authErr instanceof AuthStepUpError || authErr instanceof JerkTimeoutError) throw authErr;
-      throw new McpAuthError(err.response.status, url);
+      throw new McpAuthError(err.response.status, url, err.reason);
     }
   }
   async function request(method, params) {
@@ -9065,7 +9074,8 @@ async function connect(platform2, options) {
       timeoutMs: options.timeoutMs,
       signal: options.signal,
       verbose: options.verbose,
-      authProvider: options.authProvider
+      authProvider: options.authProvider,
+      transportRefusals: platform2.kind === "kernel"
     });
   } catch (err) {
     const isMethodNotFound = err instanceof StatelessRpcError && err.code === -32601 || err instanceof StatelessHttpError && err.status >= 400 && err.status < 500;
@@ -12183,16 +12193,45 @@ function wrapUntrusted(content) {
 ${neutralised}
 ${closeTag}`;
 }
-async function runProcess(platform2, argv, stdin, timeoutMs) {
+var WEBMCP_LIST_FLOOR = 1048576;
+function capCollector(limit) {
+  const dec = new TextDecoder();
+  const half = Math.floor(limit / 2);
+  let head = "";
+  let tail = "";
+  let total = 0;
+  const take = (piece) => {
+    if (!piece) return;
+    total += piece.length;
+    if (head.length < limit) head += piece.slice(0, limit - head.length);
+    tail = half > 0 ? (tail + piece).slice(-half) : "";
+  };
+  return {
+    push(chunk) {
+      take(dec.decode(chunk, { stream: true }));
+    },
+    finish() {
+      take(dec.decode());
+      if (total <= limit) return { text: head, cut: false };
+      return {
+        text: `${head.slice(0, half)}
+\u2026 ${total - limit} characters cut \u2026
+${tail}`,
+        cut: true
+      };
+    }
+  };
+}
+async function runProcess(platform2, argv, stdin, timeoutMs, limit) {
   let proc;
   try {
     proc = await platform2.spawn({ argv });
-  } catch (err) {
-    const code2 = err.code;
+  } catch (err2) {
+    const code2 = err2.code;
     if (code2 === "ENOENT" || code2 === "EACCES") {
-      return { stdout: "", stderr: `command not found: ${argv[0]}`, exitCode: -1 };
+      return { stdout: "", stderr: `command not found: ${argv[0]}`, exitCode: -1, cut: false };
     }
-    throw err;
+    throw err2;
   }
   if (stdin !== void 0) {
     const writer = proc.stdin.getWriter();
@@ -12204,8 +12243,8 @@ async function runProcess(platform2, argv, stdin, timeoutMs) {
     } catch {
     }
   }
-  const stdoutChunks = [];
-  const stderrChunks = [];
+  const out = capCollector(limit);
+  const err = capCollector(limit);
   const readStream3 = async (stream, into) => {
     const r = stream.getReader();
     try {
@@ -12218,53 +12257,136 @@ async function runProcess(platform2, argv, stdin, timeoutMs) {
       r.releaseLock();
     }
   };
-  const timer = new Promise(
-    (resolve) => setTimeout(() => resolve("timeout"), timeoutMs ?? 3e4)
-  );
+  let timeoutId;
+  const timer = new Promise((resolve) => {
+    timeoutId = setTimeout(() => resolve("timeout"), timeoutMs);
+  });
   const work = Promise.all([
-    readStream3(proc.stdout, stdoutChunks),
-    readStream3(proc.stderr, stderrChunks),
+    readStream3(proc.stdout, out),
+    readStream3(proc.stderr, err),
     proc.wait()
   ]);
   const result = await Promise.race([work, timer]);
+  clearTimeout(timeoutId);
   if (result === "timeout") {
     await proc.kill("SIGTERM");
-    return { stdout: "", stderr: "timed out", exitCode: 124 };
+    return { stdout: "", stderr: "timed out", exitCode: 124, cut: false };
   }
   const [, , exitResult] = result;
-  const dec = new TextDecoder();
-  const concat2 = (chunks) => {
-    const total = chunks.reduce((s, c) => s + c.length, 0);
-    const out = new Uint8Array(total);
-    let offset = 0;
-    for (const c of chunks) {
-      out.set(c, offset);
-      offset += c.length;
-    }
-    return out;
+  const stdout = out.finish();
+  const stderr = err.finish();
+  return {
+    stdout: stdout.text,
+    stderr: stderr.text,
+    exitCode: exitResult.status,
+    cut: stdout.cut
   };
+}
+async function resolveWebMcpTab(platform2, options) {
+  const argv = [options.playwrightCli, "tab-list"];
+  if (options.cdp) argv.push("--cdp", options.cdp);
+  const result = await runProcess(
+    platform2,
+    argv,
+    void 0,
+    options.callTimeoutMs,
+    WEBMCP_LIST_FLOOR
+  );
+  if (result.exitCode === -1) return { error: result.stderr, notFound: true };
+  if (result.exitCode !== 0) {
+    return { error: result.stderr.trim() || `tab-list exited ${result.exitCode}` };
+  }
+  const rows = [];
+  for (const line of result.stdout.split("\n")) {
+    const match = /^(\d+): \[([^\]\s]+)\] /.exec(line);
+    if (!match) continue;
+    if (Number(match[1]) !== rows.length + 1) {
+      return { error: "could not read playwright-cli tab-list" };
+    }
+    rows.push({ id: match[2], active: line.endsWith('" (active)') });
+  }
+  const active = rows.filter((r) => r.active);
+  if (new Set(rows.map((r) => r.id)).size !== rows.length || active.length > 1) {
+    return { error: "could not read playwright-cli tab-list" };
+  }
+  if (active.length === 1) return { tab: active[0].id };
+  if (rows.length === 1) return { tab: rows[0].id };
   return {
-    stdout: dec.decode(concat2(stdoutChunks)),
-    stderr: dec.decode(concat2(stderrChunks)),
-    exitCode: exitResult.status
+    error: rows.length === 0 ? "no browser tab is open; open one or pass --tab <targetId>" : "no current playwright-cli tab; pass --tab <targetId> (see playwright-cli tab-list)"
   };
 }
+function mapDescriptionAnnotations(ann) {
+  const mapped = { openWorldHint: true };
+  if (!ann) return mapped;
+  if (ann.readOnlyHint !== void 0) mapped.readOnlyHint = ann.readOnlyHint;
+  if (ann.consequentialHint) mapped.destructiveHint = true;
+  return mapped;
+}
+function originPrefix(tools) {
+  const origins = new Set(tools.map((t) => t.origin));
+  return origins.size > 1;
+}
+function hostFromOrigin(origin) {
+  try {
+    return new URL(origin).host;
+  } catch {
+    return origin;
+  }
+}
+function buildDescription(tool) {
+  const parts = [];
+  if (tool.description) parts.push(tool.description);
+  parts.push(`[origin: ${tool.origin}]`);
+  return parts.join("\n");
+}
+function buildToolName(tool, prefix) {
+  const base = tool.name;
+  if (!prefix) return base;
+  const host = hostFromOrigin(tool.origin).replace(/[^a-zA-Z0-9_]/g, "_");
+  return `${host}__${base}`;
+}
+function exposedTools(tools) {
+  const needPrefix = originPrefix(tools);
+  const byBase = /* @__PURE__ */ new Map();
+  const byName = /* @__PURE__ */ new Map();
+  for (const tool of tools) {
+    const name = buildToolName(tool, needPrefix);
+    byBase.set(tool.name, [...byBase.get(tool.name) ?? [], tool]);
+    byName.set(name, [...byName.get(name) ?? [], tool]);
+  }
+  return tools.map((tool) => {
+    const name = buildToolName(tool, needPrefix);
+    const sameBase = byBase.get(tool.name);
+    const sameName = byName.get(name);
+    return { name, tool, peers: sameBase.length > 1 ? sameBase : sameName };
+  });
+}
+function ambiguityError(name, peers) {
+  const origins = [...new Set(peers.map((t) => String(t.origin)))].join(", ");
+  return new Error(
+    `tool "${name}" is ambiguous: ${peers.length} tools on the page match it (${origins}), and playwright-cli runs the first tool by name and cannot select one by origin, so mcpcat refuses the call`
+  );
+}
 function createWebMcpHandler(platform2, options) {
   let cache;
   const baseArgs = buildBaseArgs(options);
-  async function listRaw() {
+  const listLimit = Math.max(options.maxOutput, WEBMCP_LIST_FLOOR);
+  async function listRaw(fresh = false) {
     const now = Date.now();
-    if (cache && now < cache.expiresAt) {
+    if (!fresh && cache && now < cache.expiresAt) {
       return { tools: cache.tools };
     }
     const argv = [options.playwrightCli, "webmcp-list", "--json", ...baseArgs];
-    const result = await runProcess(platform2, argv, void 0, options.callTimeoutMs);
+    const result = await runProcess(platform2, argv, void 0, options.callTimeoutMs, listLimit);
     if (result.exitCode === -1) {
       return { tools: [], error: result.stderr, notFound: true };
     }
     if (result.exitCode !== 0) {
       return { tools: [], error: result.stderr || `webmcp-list exited ${result.exitCode}` };
     }
+    if (result.cut) {
+      return { tools: [], error: `webmcp-list output exceeds ${listLimit} characters` };
+    }
     let parsed;
     try {
       parsed = JSON.parse(result.stdout);
@@ -12278,49 +12400,19 @@ function createWebMcpHandler(platform2, options) {
     cache = { tools, expiresAt: now + options.ttlMs };
     return { tools };
   }
-  function mapDescriptionAnnotations(ann) {
-    const mapped = { openWorldHint: true };
-    if (!ann) return mapped;
-    if (ann.readOnlyHint !== void 0) mapped.readOnlyHint = ann.readOnlyHint;
-    if (ann.consequentialHint) mapped.destructiveHint = true;
-    return mapped;
-  }
-  function originPrefix(tools) {
-    const origins = new Set(tools.map((t) => t.origin));
-    return origins.size > 1;
-  }
-  function hostFromOrigin(origin) {
-    try {
-      return new URL(origin).host;
-    } catch {
-      return origin;
-    }
-  }
-  function buildDescription(tool) {
-    const parts = [];
-    if (tool.description) parts.push(tool.description);
-    parts.push(`[origin: ${tool.origin}]`);
-    return parts.join("\n");
-  }
-  function buildToolName(tool, prefix) {
-    const base = tool.name;
-    if (!prefix) return base;
-    const host = hostFromOrigin(tool.origin).replace(/[^a-zA-Z0-9_]/g, "_");
-    return `${host}__${base}`;
-  }
   async function getRpcTools() {
     const { tools, error, notFound } = await listRaw();
     if (notFound) return null;
     if (error) return [];
-    const needPrefix = originPrefix(tools);
     const rpcTools = [];
-    for (const tool of tools) {
+    for (const { name, tool, peers } of exposedTools(tools)) {
+      if (peers.length > 1) continue;
       if (tool.annotations?.consequentialHint && !options.allowConsequential) {
         continue;
       }
       const mapped = mapDescriptionAnnotations(tool.annotations);
       rpcTools.push({
-        name: buildToolName(tool, needPrefix),
+        name,
         description: buildDescription(tool),
         inputSchema: tool.inputSchema,
         annotations: mapped
@@ -12329,21 +12421,30 @@ function createWebMcpHandler(platform2, options) {
     return rpcTools;
   }
   async function callTool(name, args2) {
-    const { tools, error } = await listRaw();
+    const { tools, error } = await listRaw(true);
     if (error) {
       return { stdout: "", stderr: error, exitCode: 2 };
     }
-    const needPrefix = originPrefix(tools);
-    const tool = tools.find((t) => buildToolName(t, needPrefix) === name);
-    if (!tool) {
+    const match = exposedTools(tools).find((t) => t.name === name);
+    if (!match) {
       return { stdout: "", stderr: `unknown tool: ${name}`, exitCode: 2 };
     }
+    if (match.peers.length > 1) {
+      throw ambiguityError(name, match.peers);
+    }
+    const { tool } = match;
     const argv = [options.playwrightCli, "webmcp-call", tool.name, "-", ...baseArgs];
     if (options.allowConsequential) {
       argv.push("--allow-consequential");
     }
     const stdinData = JSON.stringify(args2 ?? {});
-    const result = await runProcess(platform2, argv, stdinData, options.callTimeoutMs);
+    const result = await runProcess(
+      platform2,
+      argv,
+      stdinData,
+      options.callTimeoutMs,
+      options.maxOutput
+    );
     if (result.exitCode === -1) {
       throw new Error(result.stderr || "playwright-cli not found");
     }
@@ -13094,9 +13195,30 @@ async function runWebMcpServe(platform2, options, version, resolvedBearer, gener
     return 3;
   }
   const cdp = options.webmcpCdp ?? platform2.env.SLICC_CDP_URL;
+  let tab = options.webmcpTab;
+  if (!tab) {
+    const resolved = await resolveWebMcpTab(platform2, {
+      playwrightCli: cliPath,
+      cdp,
+      callTimeoutMs: options.callTimeout
+    });
+    if (resolved.notFound) {
+      await platform2.write(
+        2,
+        "mcpcat serve --webmcp: playwright-cli not found. Install it with: curl -fsSL https://get.sliccy.ai/playwright-cli | sh\n"
+      );
+      return 3;
+    }
+    if (!resolved.tab) {
+      await platform2.write(2, `mcpcat serve --webmcp: ${resolved.error}
+`);
+      return 3;
+    }
+    tab = resolved.tab;
+  }
   const handler = createWebMcpHandler(platform2, {
     playwrightCli: cliPath,
-    tab: options.webmcpTab,
+    tab,
     cdp,
     allowConsequential: options.webmcpAllowConsequential,
     ttlMs: options.webmcpTtl,
@@ -16734,5 +16856,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.15.4", args);
+var code = await run(platform, "0.15.6", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -4950,8 +4950,8 @@ function parseCodemodeSource(input) {
     throw new CodemodeSourceError(`The ${CODEMODE_OPTIONS_PREFIX} line must be the first line of the input; found one on line ${misplaced + 1}`);
   }
   const newline = input.indexOf("\n");
-  const firstLine = lines[0].replace(/\r$/, "");
-  const trimmed = firstLine.trimStart();
+  const firstLine2 = lines[0].replace(/\r$/, "");
+  const trimmed = firstLine2.trimStart();
   if (!trimmed.startsWith(CODEMODE_OPTIONS_PREFIX))
     return { code: input, options: {} };
   const code = newline === -1 ? "" : input.slice(newline);
@@ -7990,8 +7990,9 @@ var McpTimeoutError2 = class extends Error {
 var McpAuthError = class extends Error {
   status;
   target;
-  constructor(status, target) {
-    super(`HTTP ${status}: authentication required. Run: mcpcat login ${target}`);
+  constructor(status, target, reason) {
+    const why = reason ? ` (${reason})` : "";
+    super(`HTTP ${status}: authentication required${why}. Run: mcpcat login ${target}`);
     this.name = "McpAuthError";
     this.status = status;
     this.target = target;
@@ -8009,12 +8010,23 @@ var TransportRefusalError = class extends Error {
 };
 var AuthRetryableError = class extends Error {
   response;
-  constructor(response) {
+  reason;
+  constructor(response, reason) {
     super(`HTTP ${response.status}: auth retry`);
     this.name = "AuthRetryableError";
     this.response = response;
+    this.reason = reason;
   }
 };
+var KERNEL_REFUSAL = "nodeTransport refuses ";
+function firstLine(text) {
+  return text.trim().split("\n")[0].trim().slice(0, 200);
+}
+async function authReason(res) {
+  const type = res.headers.get("content-type") ?? "";
+  if (!type.toLowerCase().startsWith("text/plain")) return void 0;
+  return firstLine(await res.text()) || void 0;
+}
 function selectSseFrame(body, targetId) {
   const text = new TextDecoder().decode(body);
   const blocks = text.replace(/\r\n/g, "\n").split(/\n\n/);
@@ -8131,7 +8143,8 @@ async function createStatelessConnection(options) {
     clientInfo = { name: "mcpcat", version: "0.0.0" },
     signal: externalSignal,
     verbose,
-    authProvider
+    authProvider,
+    transportRefusals
   } = options;
   let nextId2 = 1;
   let negotiatedVersion;
@@ -8149,18 +8162,14 @@ async function createStatelessConnection(options) {
     return h;
   }
   async function handleErrorStatus(res, method) {
-    if (res.status === 403) {
-      const wwwAuth = res.headers.get("www-authenticate") ?? "";
-      if (!wwwAuth) {
-        const body = await res.text();
-        if (body && !body.includes("insufficient_scope")) {
-          throw new TransportRefusalError(403, body.split("\n")[0].slice(0, 200));
-        }
+    if (res.status === 401 || res.status === 403) {
+      const reason = await authReason(res);
+      if (transportRefusals && res.status === 403 && !res.headers.has("www-authenticate") && reason?.startsWith(KERNEL_REFUSAL)) {
+        throw new TransportRefusalError(403, reason);
       }
+      if (authProvider) throw new AuthRetryableError(res, reason);
+      throw new McpAuthError(res.status, url, reason);
     }
-    if ((res.status === 401 || res.status === 403) && authProvider)
-      throw new AuthRetryableError(res);
-    if (res.status === 401 || res.status === 403) throw new McpAuthError(res.status, url);
     const text = await res.text();
     let rpc;
     try {
@@ -8215,7 +8224,7 @@ async function createStatelessConnection(options) {
     return frame.result;
   }
   async function handleAuthError(err, token) {
-    if (!authProvider?.onUnauthorized) throw new McpAuthError(err.response.status, url);
+    if (!authProvider?.onUnauthorized) throw new McpAuthError(err.response.status, url, err.reason);
     try {
       await authProvider.onUnauthorized({
         response: err.response,
@@ -8225,7 +8234,7 @@ async function createStatelessConnection(options) {
       });
     } catch (authErr) {
       if (authErr instanceof AuthStepUpError || authErr instanceof JerkTimeoutError) throw authErr;
-      throw new McpAuthError(err.response.status, url);
+      throw new McpAuthError(err.response.status, url, err.reason);
     }
   }
   async function request(method, params) {
@@ -8686,7 +8695,8 @@ async function connect(platform2, options) {
       timeoutMs: options.timeoutMs,
       signal: options.signal,
       verbose: options.verbose,
-      authProvider: options.authProvider
+      authProvider: options.authProvider,
+      transportRefusals: platform2.kind === "kernel"
     });
   } catch (err) {
     const isMethodNotFound = err instanceof StatelessRpcError && err.code === -32601 || err instanceof StatelessHttpError && err.status >= 400 && err.status < 500;
@@ -11804,16 +11814,45 @@ function wrapUntrusted(content) {
 ${neutralised}
 ${closeTag}`;
 }
-async function runProcess(platform2, argv, stdin, timeoutMs) {
+var WEBMCP_LIST_FLOOR = 1048576;
+function capCollector(limit) {
+  const dec = new TextDecoder();
+  const half = Math.floor(limit / 2);
+  let head = "";
+  let tail = "";
+  let total = 0;
+  const take = (piece) => {
+    if (!piece) return;
+    total += piece.length;
+    if (head.length < limit) head += piece.slice(0, limit - head.length);
+    tail = half > 0 ? (tail + piece).slice(-half) : "";
+  };
+  return {
+    push(chunk) {
+      take(dec.decode(chunk, { stream: true }));
+    },
+    finish() {
+      take(dec.decode());
+      if (total <= limit) return { text: head, cut: false };
+      return {
+        text: `${head.slice(0, half)}
+\u2026 ${total - limit} characters cut \u2026
+${tail}`,
+        cut: true
+      };
+    }
+  };
+}
+async function runProcess(platform2, argv, stdin, timeoutMs, limit) {
   let proc;
   try {
     proc = await platform2.spawn({ argv });
-  } catch (err) {
-    const code = err.code;
+  } catch (err2) {
+    const code = err2.code;
     if (code === "ENOENT" || code === "EACCES") {
-      return { stdout: "", stderr: `command not found: ${argv[0]}`, exitCode: -1 };
+      return { stdout: "", stderr: `command not found: ${argv[0]}`, exitCode: -1, cut: false };
     }
-    throw err;
+    throw err2;
   }
   if (stdin !== void 0) {
     const writer = proc.stdin.getWriter();
@@ -11825,8 +11864,8 @@ async function runProcess(platform2, argv, stdin, timeoutMs) {
     } catch {
     }
   }
-  const stdoutChunks = [];
-  const stderrChunks = [];
+  const out = capCollector(limit);
+  const err = capCollector(limit);
   const readStream3 = async (stream, into) => {
     const r = stream.getReader();
     try {
@@ -11839,53 +11878,136 @@ async function runProcess(platform2, argv, stdin, timeoutMs) {
       r.releaseLock();
     }
   };
-  const timer = new Promise(
-    (resolve2) => setTimeout(() => resolve2("timeout"), timeoutMs ?? 3e4)
-  );
+  let timeoutId;
+  const timer = new Promise((resolve2) => {
+    timeoutId = setTimeout(() => resolve2("timeout"), timeoutMs);
+  });
   const work = Promise.all([
-    readStream3(proc.stdout, stdoutChunks),
-    readStream3(proc.stderr, stderrChunks),
+    readStream3(proc.stdout, out),
+    readStream3(proc.stderr, err),
     proc.wait()
   ]);
   const result = await Promise.race([work, timer]);
+  clearTimeout(timeoutId);
   if (result === "timeout") {
     await proc.kill("SIGTERM");
-    return { stdout: "", stderr: "timed out", exitCode: 124 };
+    return { stdout: "", stderr: "timed out", exitCode: 124, cut: false };
   }
   const [, , exitResult] = result;
-  const dec = new TextDecoder();
-  const concat2 = (chunks) => {
-    const total = chunks.reduce((s, c) => s + c.length, 0);
-    const out = new Uint8Array(total);
-    let offset = 0;
-    for (const c of chunks) {
-      out.set(c, offset);
-      offset += c.length;
-    }
-    return out;
+  const stdout = out.finish();
+  const stderr = err.finish();
+  return {
+    stdout: stdout.text,
+    stderr: stderr.text,
+    exitCode: exitResult.status,
+    cut: stdout.cut
   };
+}
+async function resolveWebMcpTab(platform2, options) {
+  const argv = [options.playwrightCli, "tab-list"];
+  if (options.cdp) argv.push("--cdp", options.cdp);
+  const result = await runProcess(
+    platform2,
+    argv,
+    void 0,
+    options.callTimeoutMs,
+    WEBMCP_LIST_FLOOR
+  );
+  if (result.exitCode === -1) return { error: result.stderr, notFound: true };
+  if (result.exitCode !== 0) {
+    return { error: result.stderr.trim() || `tab-list exited ${result.exitCode}` };
+  }
+  const rows = [];
+  for (const line of result.stdout.split("\n")) {
+    const match = /^(\d+): \[([^\]\s]+)\] /.exec(line);
+    if (!match) continue;
+    if (Number(match[1]) !== rows.length + 1) {
+      return { error: "could not read playwright-cli tab-list" };
+    }
+    rows.push({ id: match[2], active: line.endsWith('" (active)') });
+  }
+  const active = rows.filter((r) => r.active);
+  if (new Set(rows.map((r) => r.id)).size !== rows.length || active.length > 1) {
+    return { error: "could not read playwright-cli tab-list" };
+  }
+  if (active.length === 1) return { tab: active[0].id };
+  if (rows.length === 1) return { tab: rows[0].id };
   return {
-    stdout: dec.decode(concat2(stdoutChunks)),
-    stderr: dec.decode(concat2(stderrChunks)),
-    exitCode: exitResult.status
+    error: rows.length === 0 ? "no browser tab is open; open one or pass --tab <targetId>" : "no current playwright-cli tab; pass --tab <targetId> (see playwright-cli tab-list)"
   };
 }
+function mapDescriptionAnnotations(ann) {
+  const mapped = { openWorldHint: true };
+  if (!ann) return mapped;
+  if (ann.readOnlyHint !== void 0) mapped.readOnlyHint = ann.readOnlyHint;
+  if (ann.consequentialHint) mapped.destructiveHint = true;
+  return mapped;
+}
+function originPrefix(tools) {
+  const origins = new Set(tools.map((t) => t.origin));
+  return origins.size > 1;
+}
+function hostFromOrigin(origin) {
+  try {
+    return new URL(origin).host;
+  } catch {
+    return origin;
+  }
+}
+function buildDescription(tool) {
+  const parts = [];
+  if (tool.description) parts.push(tool.description);
+  parts.push(`[origin: ${tool.origin}]`);
+  return parts.join("\n");
+}
+function buildToolName(tool, prefix) {
+  const base = tool.name;
+  if (!prefix) return base;
+  const host = hostFromOrigin(tool.origin).replace(/[^a-zA-Z0-9_]/g, "_");
+  return `${host}__${base}`;
+}
+function exposedTools(tools) {
+  const needPrefix = originPrefix(tools);
+  const byBase = /* @__PURE__ */ new Map();
+  const byName = /* @__PURE__ */ new Map();
+  for (const tool of tools) {
+    const name = buildToolName(tool, needPrefix);
+    byBase.set(tool.name, [...byBase.get(tool.name) ?? [], tool]);
+    byName.set(name, [...byName.get(name) ?? [], tool]);
+  }
+  return tools.map((tool) => {
+    const name = buildToolName(tool, needPrefix);
+    const sameBase = byBase.get(tool.name);
+    const sameName = byName.get(name);
+    return { name, tool, peers: sameBase.length > 1 ? sameBase : sameName };
+  });
+}
+function ambiguityError(name, peers) {
+  const origins = [...new Set(peers.map((t) => String(t.origin)))].join(", ");
+  return new Error(
+    `tool "${name}" is ambiguous: ${peers.length} tools on the page match it (${origins}), and playwright-cli runs the first tool by name and cannot select one by origin, so mcpcat refuses the call`
+  );
+}
 function createWebMcpHandler(platform2, options) {
   let cache;
   const baseArgs = buildBaseArgs(options);
-  async function listRaw() {
+  const listLimit = Math.max(options.maxOutput, WEBMCP_LIST_FLOOR);
+  async function listRaw(fresh = false) {
     const now = Date.now();
-    if (cache && now < cache.expiresAt) {
+    if (!fresh && cache && now < cache.expiresAt) {
       return { tools: cache.tools };
     }
     const argv = [options.playwrightCli, "webmcp-list", "--json", ...baseArgs];
-    const result = await runProcess(platform2, argv, void 0, options.callTimeoutMs);
+    const result = await runProcess(platform2, argv, void 0, options.callTimeoutMs, listLimit);
     if (result.exitCode === -1) {
       return { tools: [], error: result.stderr, notFound: true };
     }
     if (result.exitCode !== 0) {
       return { tools: [], error: result.stderr || `webmcp-list exited ${result.exitCode}` };
     }
+    if (result.cut) {
+      return { tools: [], error: `webmcp-list output exceeds ${listLimit} characters` };
+    }
     let parsed;
     try {
       parsed = JSON.parse(result.stdout);
@@ -11899,49 +12021,19 @@ function createWebMcpHandler(platform2, options) {
     cache = { tools, expiresAt: now + options.ttlMs };
     return { tools };
   }
-  function mapDescriptionAnnotations(ann) {
-    const mapped = { openWorldHint: true };
-    if (!ann) return mapped;
-    if (ann.readOnlyHint !== void 0) mapped.readOnlyHint = ann.readOnlyHint;
-    if (ann.consequentialHint) mapped.destructiveHint = true;
-    return mapped;
-  }
-  function originPrefix(tools) {
-    const origins = new Set(tools.map((t) => t.origin));
-    return origins.size > 1;
-  }
-  function hostFromOrigin(origin) {
-    try {
-      return new URL(origin).host;
-    } catch {
-      return origin;
-    }
-  }
-  function buildDescription(tool) {
-    const parts = [];
-    if (tool.description) parts.push(tool.description);
-    parts.push(`[origin: ${tool.origin}]`);
-    return parts.join("\n");
-  }
-  function buildToolName(tool, prefix) {
-    const base = tool.name;
-    if (!prefix) return base;
-    const host = hostFromOrigin(tool.origin).replace(/[^a-zA-Z0-9_]/g, "_");
-    return `${host}__${base}`;
-  }
   async function getRpcTools() {
     const { tools, error, notFound } = await listRaw();
     if (notFound) return null;
     if (error) return [];
-    const needPrefix = originPrefix(tools);
     const rpcTools = [];
-    for (const tool of tools) {
+    for (const { name, tool, peers } of exposedTools(tools)) {
+      if (peers.length > 1) continue;
       if (tool.annotations?.consequentialHint && !options.allowConsequential) {
         continue;
       }
       const mapped = mapDescriptionAnnotations(tool.annotations);
       rpcTools.push({
-        name: buildToolName(tool, needPrefix),
+        name,
         description: buildDescription(tool),
         inputSchema: tool.inputSchema,
         annotations: mapped
@@ -11950,21 +12042,30 @@ function createWebMcpHandler(platform2, options) {
     return rpcTools;
   }
   async function callTool(name, args) {
-    const { tools, error } = await listRaw();
+    const { tools, error } = await listRaw(true);
     if (error) {
       return { stdout: "", stderr: error, exitCode: 2 };
     }
-    const needPrefix = originPrefix(tools);
-    const tool = tools.find((t) => buildToolName(t, needPrefix) === name);
-    if (!tool) {
+    const match = exposedTools(tools).find((t) => t.name === name);
+    if (!match) {
       return { stdout: "", stderr: `unknown tool: ${name}`, exitCode: 2 };
     }
+    if (match.peers.length > 1) {
+      throw ambiguityError(name, match.peers);
+    }
+    const { tool } = match;
     const argv = [options.playwrightCli, "webmcp-call", tool.name, "-", ...baseArgs];
     if (options.allowConsequential) {
       argv.push("--allow-consequential");
     }
     const stdinData = JSON.stringify(args ?? {});
-    const result = await runProcess(platform2, argv, stdinData, options.callTimeoutMs);
+    const result = await runProcess(
+      platform2,
+      argv,
+      stdinData,
+      options.callTimeoutMs,
+      options.maxOutput
+    );
     if (result.exitCode === -1) {
       throw new Error(result.stderr || "playwright-cli not found");
     }
@@ -12715,9 +12816,30 @@ async function runWebMcpServe(platform2, options, version, resolvedBearer, gener
     return 3;
   }
   const cdp = options.webmcpCdp ?? platform2.env.SLICC_CDP_URL;
+  let tab = options.webmcpTab;
+  if (!tab) {
+    const resolved = await resolveWebMcpTab(platform2, {
+      playwrightCli: cliPath,
+      cdp,
+      callTimeoutMs: options.callTimeout
+    });
+    if (resolved.notFound) {
+      await platform2.write(
+        2,
+        "mcpcat serve --webmcp: playwright-cli not found. Install it with: curl -fsSL https://get.sliccy.ai/playwright-cli | sh\n"
+      );
+      return 3;
+    }
+    if (!resolved.tab) {
+      await platform2.write(2, `mcpcat serve --webmcp: ${resolved.error}
+`);
+      return 3;
+    }
+    tab = resolved.tab;
+  }
   const handler = createWebMcpHandler(platform2, {
     playwrightCli: cliPath,
-    tab: options.webmcpTab,
+    tab,
     cdp,
     allowConsequential: options.webmcpAllowConsequential,
     ttlMs: options.webmcpTtl,
@@ -16251,6 +16373,15 @@ function isConnectionRefused(err) {
   if (e?.code === "ECONNREFUSED") return true;
   return typeof e?.message === "string" && e.message.includes("ECONNREFUSED");
 }
+function isFetchRefused(err) {
+  return err instanceof TypeError && isConnectionRefused(err.cause);
+}
+function loopbackRefused(url, port, err) {
+  return new TypeError(
+    `nothing listens on ${url.hostname}:${port} for a kernel program, whose loopback is the kernel's; reach a host server via http://host.slicc.internal:${port}`,
+    { cause: err.cause }
+  );
+}
 function collectHeaders(init) {
   const entries = [];
   if (!init?.headers) return entries;
@@ -16265,6 +16396,15 @@ function collectHeaders(init) {
   }
   return entries;
 }
+async function encodeBody(body, headerEntries) {
+  if (body == null) return new Uint8Array(0);
+  const encoded = new Response(body);
+  const type = encoded.headers.get("content-type");
+  if (type && !headerEntries.some(([k]) => k.toLowerCase() === "content-type")) {
+    headerEntries.push(["Content-Type", type]);
+  }
+  return new Uint8Array(await encoded.arrayBuffer());
+}
 function buildHttpRequest(method, url, headerEntries, bodyBytes) {
   const enc = new TextEncoder();
   const has = (n) => headerEntries.some(([k]) => k.toLowerCase() === n.toLowerCase());
@@ -16307,15 +16447,7 @@ function parseHttpResponse(buf, headerPos, bufLen) {
 }
 async function kernelLoopbackFetch(ctx, url, port, init, onRefused) {
   const method = (init?.method ?? "GET").toUpperCase();
-  const enc = new TextEncoder();
   const dec = new TextDecoder();
-  let bodyStr = "";
-  if (init?.body != null) {
-    bodyStr = typeof init.body === "string" ? init.body : dec.decode(init.body);
-  }
-  const bodyBytes = enc.encode(bodyStr);
-  const headerEntries = collectHeaders(init);
-  const reqBytes = buildHttpRequest(method, url, headerEntries, bodyBytes);
   let conn;
   try {
     conn = await ctx.net.connect({ host: "127.0.0.1", port });
@@ -16323,8 +16455,10 @@ async function kernelLoopbackFetch(ctx, url, port, init, onRefused) {
     if (onRefused && isConnectionRefused(err)) return onRefused();
     throw err;
   }
+  const headerEntries = collectHeaders(init);
+  const bodyBytes = await encodeBody(init?.body, headerEntries);
   const writer = conn.writable.getWriter();
-  await writer.write(reqBytes);
+  await writer.write(buildHttpRequest(method, url, headerEntries, bodyBytes));
   const reader = conn.readable.getReader();
   let buf = new Uint8Array(4096);
   let bufLen = 0;
@@ -16377,7 +16511,15 @@ function createKernelFetch(ctx) {
     if (port !== null) return kernelLoopbackFetch(ctx, url, port, init);
     const plainPort = extractPlainLoopbackPort(url);
     if (plainPort !== null) {
-      return kernelLoopbackFetch(ctx, url, plainPort, init, () => ctx.fetch(input, init));
+      return kernelLoopbackFetch(
+        ctx,
+        url,
+        plainPort,
+        init,
+        () => ctx.fetch(input, init).catch((err) => {
+          throw isFetchRefused(err) ? loopbackRefused(url, plainPort, err) : err;
+        })
+      );
     }
     return ctx.fetch(input, init);
   };
@@ -16435,7 +16577,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.15.4", args);
+  return run(platform2, "0.15.6", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.15.4",
+  "version": "0.15.6",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -56,8 +56,8 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.88.1",
-    "@ai-ecoverse/slicc-shared-web": "1.14.0",
+    "@ai-ecoverse/slicc-kernel": "1.94.1",
+    "@ai-ecoverse/slicc-shared-web": "1.17.0",
     "@biomejs/biome": "2.5.15",
     "@earendil-works/pi-codemode": "1.2.0",
     "@earendil-works/pi-mcp": "1.2.0",