@ai-ecoverse/mcpcat 0.15.8 → 0.16.3

package/README.md

@@ -24,6 +24,10 @@ npm install -g @ai-ecoverse/mcpcat
 
 mcpcat runs natively on macOS, Linux and Windows (Node ≥ 24), and inside Sliccy Seven as a kernel program, with the same flags, the same output and the same config file in both places. Orphan-free shutdown of stdio server trees in the kernel needs slicc-kernel ≥ 1.74.0; on older kernels only the direct child is signalled. A SIGKILLed mcpcat runs no handler. On slicc-kernel ≥ 1.88.0, mcpcat spawns stdio servers and served commands with a parent death signal (like Linux `PR_SET_PDEATHSIG`), so the kernel SIGKILLs each server's process group when mcpcat dies. On older kernels, and on the host, where there is no portable equivalent, servers that exit on stdin EOF (most MCP servers) still stop, but servers that ignore it keep running.
 
+## Releases: certified = latest
+
+Every change that alters what mcpcat ships is certified before it reaches `main`. A pull request that touches `src/`, the build, the dependencies or the release workflows gets mcpcat's cert-review on a pack of its head, and again in the merge queue on the exact tree that lands on `main`; a FAIL blocks the merge. Docs-, test- and CI-only changes skip it as "not behaviour". Each merge to `main` is then released to npm as `latest` in one step by semantic-release, with provenance, so `npm install @ai-ecoverse/mcpcat` and the installer always get certified code. The verdict line is a comment on the pull request and the `cert-review` commit status.
+
 ## Quick start
 
 ```sh

package/dist/host/mcpcat.mjs

@@ -9113,6 +9113,12 @@ async function connect(platform2, options) {
   }
 }
 
+// src/render/sanitize.ts
+var CONTROL_RE = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g;
+function sanitizeTerminal(text) {
+  return text.replace(CONTROL_RE, (c) => `\\x${c.charCodeAt(0).toString(16).padStart(2, "0")}`);
+}
+
 // src/client/elicit.ts
 function readLine(platform2) {
   return new Promise((resolve, reject) => {
@@ -9164,7 +9170,7 @@ async function promptForSchema(platform2, schema) {
     const desc = prop.description ? ` - ${prop.description}` : "";
     const def = prop.default !== void 0 ? ` [${String(prop.default)}]` : "";
     const choices = prop.enum ? ` (${prop.enum.join("|")})` : "";
-    await platform2.write(2, `${key}${req}${desc}${choices}${def}: `);
+    await platform2.write(2, sanitizeTerminal(`${key}${req}${desc}${choices}${def}: `));
     const line = await readLine(platform2);
     const value = line.trim();
     if (value === "" && prop.default !== void 0) {
@@ -9186,8 +9192,8 @@ function parseInputRequest(result) {
 async function handleElicitation(platform2, inputRequest, isTty, respondData) {
   if (inputRequest.url) {
     if (isTty) {
-      await platform2.write(2, `Open this URL to continue: ${inputRequest.url}
-`);
+      await platform2.write(2, sanitizeTerminal(`Open this URL to continue: ${inputRequest.url}
+`));
       await platform2.write(2, "Press Enter when done...");
       await readLine(platform2);
       return { answers: {} };
@@ -9202,8 +9208,8 @@ async function handleElicitation(platform2, inputRequest, isTty, respondData) {
   }
   const schema = inputRequest.schema ?? { type: "object", properties: {} };
   if (inputRequest.message) {
-    await platform2.write(2, `${inputRequest.message}
-`);
+    await platform2.write(2, sanitizeTerminal(`${inputRequest.message}
+`));
   }
   const answers = await promptForSchema(platform2, schema);
   return { answers };
@@ -9724,8 +9730,11 @@ async function formatOutput(platform2, result, json) {
 `);
     }
     if (!result.ok) {
-      await platform2.write(2, `mcpcat: script failed: ${result.error.message}
-`);
+      await platform2.write(
+        2,
+        sanitizeTerminal(`mcpcat: script failed: ${result.error.message}
+`)
+      );
     }
   }
   const isTimeout = !result.ok && result.error && result.error.kind === "timeout";
@@ -11187,8 +11196,8 @@ async function renderCallResult(platform2, result, options) {
   }
   const text = renderCallResultText(result, options);
   if (result.isError) {
-    await platform2.write(2, r(`${text || "(tool reported error)"}
-`));
+    await platform2.write(2, sanitizeTerminal(r(`${text || "(tool reported error)"}
+`)));
     return 1;
   }
   if (text) {
@@ -12828,9 +12837,12 @@ function concat(chunks) {
   return out;
 }
 var KILL_GRACE_MS = 2e3;
+var SIGNAL_EXIT = { SIGINT: 130, SIGTERM: 143, SIGHUP: 129 };
 async function trapShutdown(platform2, handler) {
   await Promise.all(
-    ["SIGINT", "SIGTERM", "SIGHUP"].map((sig) => platform2.onSignal?.(sig, handler))
+    ["SIGINT", "SIGTERM", "SIGHUP"].map(
+      (sig) => platform2.onSignal?.(sig, () => handler(sig))
+    )
   );
 }
 async function killInflight() {
@@ -13042,10 +13054,13 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
 async function discoverWithSignal(platform2, commands, childEnv, cwd) {
   const clis = [];
   let earlyShutdown = false;
+  let shutdownExit = SIGNAL_EXIT.SIGTERM;
   let inflightDone;
   const earlyAbort = new AbortController();
-  const onShutdown = () => {
+  const onShutdown = (sig) => {
+    if (earlyShutdown) return;
     earlyShutdown = true;
+    shutdownExit = SIGNAL_EXIT[sig];
     earlyAbort.abort();
     inflightDone = killInflight();
   };
@@ -13055,13 +13070,13 @@ async function discoverWithSignal(platform2, commands, childEnv, cwd) {
       const cli = await discoverCli(platform2, cmd.path, cmd.name, childEnv, cwd, earlyAbort.signal);
       clis.push(cli);
     } catch (err) {
-      if (earlyShutdown) return { exitCode: 143, inflightDone };
+      if (earlyShutdown) return { exitCode: shutdownExit, inflightDone };
       await platform2.write(2, `mcpcat serve: ${err.message}
 `);
       return { exitCode: 2 };
     }
   }
-  if (earlyShutdown) return { exitCode: 143, inflightDone };
+  if (earlyShutdown) return { exitCode: shutdownExit, inflightDone };
   return { clis };
 }
 async function resolveBearer(platform2, options) {
@@ -13290,8 +13305,8 @@ async function runWebMcpServe(platform2, options, version, resolvedBearer, gener
       return 3;
     }
     if (!resolved.tab) {
-      await platform2.write(2, `mcpcat serve --webmcp: ${resolved.error}
-`);
+      await platform2.write(2, sanitizeTerminal(`mcpcat serve --webmcp: ${resolved.error}
+`));
       return 3;
     }
     tab = resolved.tab;
@@ -14294,8 +14309,8 @@ ${url.href}
       await platform2.write(2, "mcpcat: sign-in cancelled\n");
       return 1;
     }
-    await platform2.write(2, `mcpcat: login failed: ${err.message}
-`);
+    await platform2.write(2, sanitizeTerminal(`mcpcat: login failed: ${err.message}
+`));
     return 4;
   }
 }
@@ -14928,8 +14943,8 @@ async function runAdd(platform2, args2, probe) {
   if (!flags.noProbe && probe) {
     const reason = await probe(name, config, platform2);
     if (reason) {
-      await platform2.write(2, `mcpcat add: probe failed: ${reason}
-`);
+      await platform2.write(2, sanitizeTerminal(`mcpcat add: probe failed: ${reason}
+`));
       return 3;
     }
   }
@@ -15310,7 +15325,7 @@ function redact(text, secrets) {
 function createVerboseLogger(platform2, enabled) {
   const secrets = /* @__PURE__ */ new Set();
   function write(line) {
-    const safe = redact(line, secrets);
+    const safe = sanitizeTerminal(redact(line, secrets));
     platform2.write(2, `${safe}
 `).catch(() => {
     });
@@ -16129,8 +16144,11 @@ async function connectTargets(platform2, names, config, parsed, version) {
       const info = await conn.info();
       targets.push({ name, conn, instructions: info.instructions });
     } catch (err) {
-      await platform2.write(2, `mcpcat: connection to ${name} failed: ${err.message}
-`);
+      await platform2.write(
+        2,
+        sanitizeTerminal(`mcpcat: connection to ${name} failed: ${err.message}
+`)
+      );
     }
   }
   return {
@@ -16549,8 +16567,8 @@ async function runClientVerb(platform2, version, parsed) {
     if (!showProgress) return;
     const pct = total ? ` ${Math.round(progress / total * 100)}%` : "";
     const msg = message ? ` ${message}` : "";
-    platform2.write(2, `* progress:${pct}${msg}
-`).catch(() => {
+    platform2.write(2, sanitizeTerminal(`* progress:${pct}${msg}
+`)).catch(() => {
     });
   };
   const config = await MergedConfigSource.load(platform2);
@@ -16678,13 +16696,13 @@ async function closeAndKillStdio(conn) {
 }
 async function writeErr(p, json, kind, msg) {
   if (json) await renderErrorJson(p, kind, msg);
-  else await p.write(2, `mcpcat: ${msg}
-`);
+  else await p.write(2, sanitizeTerminal(`mcpcat: ${msg}
+`));
 }
 async function writeErrRedacted(p, json, kind, msg, redact2) {
   if (json) await renderErrorJson(p, kind, msg, void 0, void 0, redact2);
-  else await p.write(2, `mcpcat: ${redact2(msg)}
-`);
+  else await p.write(2, sanitizeTerminal(`mcpcat: ${redact2(msg)}
+`));
 }
 function collectConfigSecrets(headers, env) {
   if (!headers) return [];
@@ -16957,5 +16975,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.15.8", args);
+var code = await run(platform, "0.16.3", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -8734,6 +8734,12 @@ async function connect(platform2, options) {
   }
 }
 
+// src/render/sanitize.ts
+var CONTROL_RE = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g;
+function sanitizeTerminal(text) {
+  return text.replace(CONTROL_RE, (c) => `\\x${c.charCodeAt(0).toString(16).padStart(2, "0")}`);
+}
+
 // src/client/elicit.ts
 function readLine(platform2) {
   return new Promise((resolve2, reject) => {
@@ -8785,7 +8791,7 @@ async function promptForSchema(platform2, schema) {
     const desc = prop.description ? ` - ${prop.description}` : "";
     const def = prop.default !== void 0 ? ` [${String(prop.default)}]` : "";
     const choices = prop.enum ? ` (${prop.enum.join("|")})` : "";
-    await platform2.write(2, `${key}${req}${desc}${choices}${def}: `);
+    await platform2.write(2, sanitizeTerminal(`${key}${req}${desc}${choices}${def}: `));
     const line = await readLine(platform2);
     const value = line.trim();
     if (value === "" && prop.default !== void 0) {
@@ -8807,8 +8813,8 @@ function parseInputRequest(result) {
 async function handleElicitation(platform2, inputRequest, isTty, respondData) {
   if (inputRequest.url) {
     if (isTty) {
-      await platform2.write(2, `Open this URL to continue: ${inputRequest.url}
-`);
+      await platform2.write(2, sanitizeTerminal(`Open this URL to continue: ${inputRequest.url}
+`));
       await platform2.write(2, "Press Enter when done...");
       await readLine(platform2);
       return { answers: {} };
@@ -8823,8 +8829,8 @@ async function handleElicitation(platform2, inputRequest, isTty, respondData) {
   }
   const schema = inputRequest.schema ?? { type: "object", properties: {} };
   if (inputRequest.message) {
-    await platform2.write(2, `${inputRequest.message}
-`);
+    await platform2.write(2, sanitizeTerminal(`${inputRequest.message}
+`));
   }
   const answers = await promptForSchema(platform2, schema);
   return { answers };
@@ -9345,8 +9351,11 @@ async function formatOutput(platform2, result, json) {
 `);
     }
     if (!result.ok) {
-      await platform2.write(2, `mcpcat: script failed: ${result.error.message}
-`);
+      await platform2.write(
+        2,
+        sanitizeTerminal(`mcpcat: script failed: ${result.error.message}
+`)
+      );
     }
   }
   const isTimeout = !result.ok && result.error && result.error.kind === "timeout";
@@ -10808,8 +10817,8 @@ async function renderCallResult(platform2, result, options) {
   }
   const text = renderCallResultText(result, options);
   if (result.isError) {
-    await platform2.write(2, r(`${text || "(tool reported error)"}
-`));
+    await platform2.write(2, sanitizeTerminal(r(`${text || "(tool reported error)"}
+`)));
     return 1;
   }
   if (text) {
@@ -12449,9 +12458,12 @@ function concat(chunks) {
   return out;
 }
 var KILL_GRACE_MS = 2e3;
+var SIGNAL_EXIT = { SIGINT: 130, SIGTERM: 143, SIGHUP: 129 };
 async function trapShutdown(platform2, handler) {
   await Promise.all(
-    ["SIGINT", "SIGTERM", "SIGHUP"].map((sig) => platform2.onSignal?.(sig, handler))
+    ["SIGINT", "SIGTERM", "SIGHUP"].map(
+      (sig) => platform2.onSignal?.(sig, () => handler(sig))
+    )
   );
 }
 async function killInflight() {
@@ -12663,10 +12675,13 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
 async function discoverWithSignal(platform2, commands, childEnv, cwd) {
   const clis = [];
   let earlyShutdown = false;
+  let shutdownExit = SIGNAL_EXIT.SIGTERM;
   let inflightDone;
   const earlyAbort = new AbortController();
-  const onShutdown = () => {
+  const onShutdown = (sig) => {
+    if (earlyShutdown) return;
     earlyShutdown = true;
+    shutdownExit = SIGNAL_EXIT[sig];
     earlyAbort.abort();
     inflightDone = killInflight();
   };
@@ -12676,13 +12691,13 @@ async function discoverWithSignal(platform2, commands, childEnv, cwd) {
       const cli = await discoverCli(platform2, cmd.path, cmd.name, childEnv, cwd, earlyAbort.signal);
       clis.push(cli);
     } catch (err) {
-      if (earlyShutdown) return { exitCode: 143, inflightDone };
+      if (earlyShutdown) return { exitCode: shutdownExit, inflightDone };
       await platform2.write(2, `mcpcat serve: ${err.message}
 `);
       return { exitCode: 2 };
     }
   }
-  if (earlyShutdown) return { exitCode: 143, inflightDone };
+  if (earlyShutdown) return { exitCode: shutdownExit, inflightDone };
   return { clis };
 }
 async function resolveBearer(platform2, options) {
@@ -12911,8 +12926,8 @@ async function runWebMcpServe(platform2, options, version, resolvedBearer, gener
       return 3;
     }
     if (!resolved.tab) {
-      await platform2.write(2, `mcpcat serve --webmcp: ${resolved.error}
-`);
+      await platform2.write(2, sanitizeTerminal(`mcpcat serve --webmcp: ${resolved.error}
+`));
       return 3;
     }
     tab = resolved.tab;
@@ -13915,8 +13930,8 @@ ${url.href}
       await platform2.write(2, "mcpcat: sign-in cancelled\n");
       return 1;
     }
-    await platform2.write(2, `mcpcat: login failed: ${err.message}
-`);
+    await platform2.write(2, sanitizeTerminal(`mcpcat: login failed: ${err.message}
+`));
     return 4;
   }
 }
@@ -14549,8 +14564,8 @@ async function runAdd(platform2, args, probe) {
   if (!flags.noProbe && probe) {
     const reason = await probe(name, config, platform2);
     if (reason) {
-      await platform2.write(2, `mcpcat add: probe failed: ${reason}
-`);
+      await platform2.write(2, sanitizeTerminal(`mcpcat add: probe failed: ${reason}
+`));
       return 3;
     }
   }
@@ -14931,7 +14946,7 @@ function redact(text, secrets) {
 function createVerboseLogger(platform2, enabled) {
   const secrets = /* @__PURE__ */ new Set();
   function write(line) {
-    const safe = redact(line, secrets);
+    const safe = sanitizeTerminal(redact(line, secrets));
     platform2.write(2, `${safe}
 `).catch(() => {
     });
@@ -15750,8 +15765,11 @@ async function connectTargets(platform2, names, config, parsed, version) {
       const info = await conn.info();
       targets.push({ name, conn, instructions: info.instructions });
     } catch (err) {
-      await platform2.write(2, `mcpcat: connection to ${name} failed: ${err.message}
-`);
+      await platform2.write(
+        2,
+        sanitizeTerminal(`mcpcat: connection to ${name} failed: ${err.message}
+`)
+      );
     }
   }
   return {
@@ -16170,8 +16188,8 @@ async function runClientVerb(platform2, version, parsed) {
     if (!showProgress) return;
     const pct = total ? ` ${Math.round(progress / total * 100)}%` : "";
     const msg = message ? ` ${message}` : "";
-    platform2.write(2, `* progress:${pct}${msg}
-`).catch(() => {
+    platform2.write(2, sanitizeTerminal(`* progress:${pct}${msg}
+`)).catch(() => {
     });
   };
   const config = await MergedConfigSource.load(platform2);
@@ -16299,13 +16317,13 @@ async function closeAndKillStdio(conn) {
 }
 async function writeErr(p, json, kind, msg) {
   if (json) await renderErrorJson(p, kind, msg);
-  else await p.write(2, `mcpcat: ${msg}
-`);
+  else await p.write(2, sanitizeTerminal(`mcpcat: ${msg}
+`));
 }
 async function writeErrRedacted(p, json, kind, msg, redact2) {
   if (json) await renderErrorJson(p, kind, msg, void 0, void 0, redact2);
-  else await p.write(2, `mcpcat: ${redact2(msg)}
-`);
+  else await p.write(2, sanitizeTerminal(`mcpcat: ${redact2(msg)}
+`));
 }
 function collectConfigSecrets(headers, env2) {
   if (!headers) return [];
@@ -16396,11 +16414,12 @@ async function kernelSpawn(ctx, options) {
     }
   }
   const useGroupKill = groupSpawnSupported;
+  let waited;
   return {
     stdin: result.stdin ?? new WritableStream(),
     stdout: result.stdout,
     stderr: result.stderr,
-    wait: () => result.wait(),
+    wait: () => waited ??= result.wait(),
     kill: async (signal) => {
       if (useGroupKill) {
         try {
@@ -16678,7 +16697,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.15.8", args);
+  return run(platform2, "0.16.3", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.15.8",
+  "version": "0.16.3",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -56,14 +56,15 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-bios": "1.1.2",
-    "@ai-ecoverse/slicc-kernel": "1.94.4",
-    "@ai-ecoverse/slicc-shared-web": "1.20.0",
+    "@ai-ecoverse/slicc-bios": "1.5.2",
+    "@ai-ecoverse/slicc-kernel": "1.107.1",
+    "@ai-ecoverse/slicc-shared-web": "1.21.1",
     "@biomejs/biome": "2.5.15",
     "@earendil-works/pi-codemode": "1.2.0",
     "@earendil-works/pi-mcp": "1.2.0",
     "@types/node": "26.6.5",
     "esbuild": "0.28.2",
+    "kernel-cert-new": "npm:@ai-ecoverse/slicc-kernel@1.107.1",
     "monocart-coverage-reports": "2.13.2",
     "proper-lockfile": "4.1.2",
     "quickjs-wasi": "3.6.2",