@ai-ecoverse/mcpcat 0.18.1 → 0.19.0

package/README.md

@@ -22,13 +22,11 @@ Or via npm:
 npm install -g @ai-ecoverse/mcpcat
 ```
 
-mcpcat runs natively on macOS, Linux and Windows (Node ≥ 24), and inside Sliccy Seven as a kernel program, with the same flags, the same output and the same config file in both places. Orphan-free shutdown of stdio server trees in the kernel needs slicc-kernel ≥ 1.74.0; on older kernels only the direct child is signalled. A SIGKILLed mcpcat runs no handler. On slicc-kernel ≥ 1.88.0, mcpcat spawns stdio servers and served commands with a parent death signal (like Linux `PR_SET_PDEATHSIG`), so the kernel SIGKILLs each server's process group when mcpcat dies. On older kernels, and on the host, where there is no portable equivalent, servers that exit on stdin EOF (most MCP servers) still stop, but servers that ignore it keep running.
+mcpcat runs natively on macOS, Linux and Windows (Node ≥ 26), and inside Sliccy Seven as a kernel program, with the same flags, the same output and the same config file in both places. Orphan-free shutdown of stdio server trees in the kernel needs slicc-kernel ≥ 1.74.0; on older kernels only the direct child is signalled. A SIGKILLed mcpcat runs no handler. On slicc-kernel ≥ 1.88.0, mcpcat spawns stdio servers and served commands with a parent death signal (like Linux `PR_SET_PDEATHSIG`), so the kernel SIGKILLs each server's process group when mcpcat dies. On older kernels, and on the host, where there is no portable equivalent, servers that exit on stdin EOF (most MCP servers) still stop, but servers that ignore it keep running.
 
-## Releases: certified = latest
+## CI and releases
 
-Every change that alters what mcpcat ships is certified before it reaches `main`. A pull request that touches `src/`, the build, the dependencies or the release workflows gets mcpcat's cert-review on a pack of its head, and again in the merge queue on the exact tree that lands on `main`; a FAIL blocks the merge. Docs-, test- and CI-only changes skip it as "not behaviour". A draft pull request is not reviewed: its `cert-review` is red with `draft: not reviewed, mark it ready for review`, and marking it ready starts the review (converted_to_draft cancels a running one). Mark ready = reviewed, and merges on green; a pull request held for anything stays a draft. For a PR that needs the coordinator's security read, the order is: the coordinator reads the draft, it is marked ready, the cert runs, then the queue. Each merge to `main` is then released to npm as `latest` in one step by semantic-release, with provenance, so `npm install @ai-ecoverse/mcpcat` and the installer always get certified code. The verdict line is a comment on the pull request and the `cert-review` commit status. It reads `certified …`, `cert-ci: FAIL …` when the reviewer or a check in code found a defect (status `failure`), or `cert-ci: INCOMPLETE …` when the review couldn't decide: the review job didn't succeed or was skipped, no verdict could be read, or the artifact or the runner's own `gh` was missing (status `error`). A fork's change to shipped behaviour also reads INCOMPLETE, since it gets no review. INCOMPLETE never certifies; re-run the failed jobs. A run that ends without `record` posting its status (a crashed plan, record or verdict job) still posts one on the head: `error` with its INCOMPLETE line, or `failure` for a FAIL. So the required `cert-review` check never waits forever. The reviewer's verdict can add defects but never clear one found in code: `record` re-reads the suites' evidence (`stage.json`, `suites.json`), uploaded before the reviewer runs and bound by the artifact id and digest the review job output. A suite or security row that failed on the host or a pinned kernel, a changed test that fails on the head, an import in the kernel bundle or an unexplained rebuild difference is a FAIL. Missing suites, kernels or rows are INCOMPLETE. The NEGATIVE runs each changed test on the base's code: the subject's tests, helpers and fixtures with the base's `dist`, `scripts/` and `.github/workflows/`, all from the base sha, so a test of the cert tooling runs against main's tooling. The record names both shas. A changed test that also passes on the base is named in the line as `gaps: no-negative <file>`. Every artifact a later job reads (the tarball, the verdict, the suites' evidence) is downloaded by the artifact id its producer output, after `bind.mjs` checks the artifact's name, run and digest against that producer's outputs. Any other artifact from this attempt of the run under `mcpcat-tarball-`, `mcpcat-npm-tarball-` or `cert-review-` makes the line INCOMPLETE. An earlier attempt's leftovers, created before this attempt started, are never read.
-
-Silence never passes: every gate in the workflows prints a verdict line, and its caller requires that line, not just an exit code. These are `all-green: PASS|FAIL …`, the cert job's `cert: kernel <v> — N kernel tests passed`, shipped.mjs's `behaviour:`/`not behaviour:`, and the installer tests' `All installer tests passed.`. A gate that exits 0 without its line fails.
+`.github/workflows/ci.yml` is the only workflow. It calls [slicc-shared-web's pipeline](https://github.com/ai-ecoverse/slicc-shared-web#pipeline): lint (Biome, tsc and the shared rules) on every event; on pull requests and in the merge queue the integration suite (`npm test`, every `test/integration/*.test.mjs` on Node 26, split over Linux shards); on pull requests a Claude and a Codex review. The checks to require are `ci / integration` and `ci / review`. Every merge to `main` is released to npm as `latest` by semantic-release, with provenance, through trusted publishing bound to `ci.yml`. When a merge releases (a new `v*` tag at the commit), the `binaries` job packs the published tarball, runs the installer tests on Ubuntu (with and without Node) and Alpine, and attaches the tarball, `install.sh` and `SHA256SUMS` to the GitHub release. `kernel-floor.test.mjs` runs the kernel tests on the `engines.slicc-kernel` floor; `MCPCAT_KERNEL_DIR` points the kernel tests at any installed `@ai-ecoverse/slicc-kernel`.
 
 ## Quick start
 
@@ -40,7 +38,7 @@ mcpcat serve --http 8808 ./scripts/jira.jsh
 
 ## Agent skill
 
-The package ships an [Agent Skill](https://agentskills.io/specification) that teaches an agent mcpcat in one file: `dist/skills/mcpcat/SKILL.md`, built from [`src/skill/SKILL.txt`](src/skill/SKILL.txt) (the repo keeps no Markdown besides README.md and AGENTS.md). It covers targets, listing and calling tools, `mcp.json`, exit codes, and the secrets rule: `${NAME}` placeholders in single quotes, never a value in a command, a file or the conversation, and never a token in `mcp.json`. `mcpcat help --skill` prints the copy that matches the installed version. `package.json` declares it as a pi package skill (`"pi": { "skills": ["dist/skills"] }`). In seven, bios links it into `/usr/share/skills` for the certified catalog install. It is shipped behaviour under `src/`, so a change to it gets a cert review.
+The package ships an [Agent Skill](https://agentskills.io/specification) that teaches an agent mcpcat in one file: `dist/skills/mcpcat/SKILL.md`, built from [`src/skill/SKILL.txt`](src/skill/SKILL.txt) (the repo keeps no Markdown besides README.md and AGENTS.md). It covers targets, listing and calling tools, `mcp.json`, exit codes, and the secrets rule: `${NAME}` placeholders in single quotes, never a value in a command, a file or the conversation, and never a token in `mcp.json`. `mcpcat help --skill` prints the copy that matches the installed version. `package.json` declares it as a pi package skill (`"pi": { "skills": ["dist/skills"] }`). In seven, bios links it into `/usr/share/skills` for the catalog install.
 
 ## License
 

package/dist/host/mcpcat.mjs

@@ -11905,7 +11905,40 @@ function parseRequestLine(buf, endPos) {
   return { method, target, headers, headerEnd: endPos + 4 };
 }
 async function handleConnection(readable, writable, handler) {
-  const reader = readable.getReader();
+  const raw = readable.getReader();
+  let ahead = null;
+  const parked = [];
+  const reader = {
+    read() {
+      const queued = parked.shift();
+      if (queued) return Promise.resolve(queued);
+      const next = ahead ?? raw.read();
+      ahead = null;
+      return next;
+    }
+  };
+  const watch = async (live, disconnect) => {
+    let held = 0;
+    while (held <= MAX_HEADER_SIZE + MAX_BODY_SIZE) {
+      const pending = ahead ?? raw.read();
+      ahead = pending;
+      let result;
+      try {
+        result = await pending;
+      } catch {
+        if (live.on) disconnect.abort();
+        return;
+      }
+      if (!live.on) return;
+      ahead = null;
+      parked.push(result);
+      if (result.done) {
+        disconnect.abort();
+        return;
+      }
+      held += result.value.length;
+    }
+  };
   const writer = writable.getWriter();
   let buf = new Uint8Array(4096);
   let bufLen = 0;
@@ -11951,7 +11984,16 @@ async function handleConnection(readable, writable, handler) {
         headers: parsed.headers,
         body
       };
-      const response = await handler(request);
+      const disconnect = new AbortController();
+      const live = { on: true };
+      void watch(live, disconnect);
+      let response;
+      try {
+        response = await handler(request, disconnect.signal);
+      } finally {
+        live.on = false;
+      }
+      if (disconnect.signal.aborted) break;
       await writeResponse(writer, response);
       const connectionHeader = (parsed.headers.connection ?? "").toLowerCase();
       if (connectionHeader === "close") break;
@@ -11968,7 +12010,7 @@ async function handleConnection(readable, writable, handler) {
       }
     }
   } finally {
-    reader.releaseLock();
+    raw.releaseLock();
     try {
       await writer.close();
     } catch {
@@ -12821,7 +12863,8 @@ function capOutput(value, limit) {
 ${value.slice(value.length - half)}`;
 }
 var inflightProcs = /* @__PURE__ */ new Set();
-async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs, maxOutput, cwd, signal) {
+async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs, maxOutput, cwd, signal, cancel) {
+  if (cancel?.aborted) return { stdout: "", stderr: "cancelled", exitCode: 124 };
   let proc;
   try {
     proc = await platform2.spawn({
@@ -12834,16 +12877,14 @@ async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs,
     return { stdout: "", stderr: `spawn failed: ${err.message}`, exitCode: 127 };
   }
   inflightProcs.add(proc);
-  if (stdin !== void 0) {
+  const feedStdin = async () => {
     const writer = proc.stdin.getWriter();
-    await writer.write(new TextEncoder().encode(stdin));
-    await writer.close();
-  } else {
     try {
-      await proc.stdin.getWriter().close();
+      if (stdin !== void 0) await writer.write(new TextEncoder().encode(stdin));
+      await writer.close();
     } catch {
     }
-  }
+  };
   const stdoutChunks = [];
   const stderrChunks = [];
   const readStream3 = async (stream, into) => {
@@ -12860,6 +12901,7 @@ async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs,
   };
   let timerId;
   let onAbort;
+  let onCancel;
   const timer = new Promise((resolve) => {
     timerId = setTimeout(() => resolve("timeout"), timeoutMs);
   });
@@ -12871,34 +12913,40 @@ async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs,
     onAbort = () => resolve("timeout");
     signal.addEventListener("abort", onAbort, { once: true });
   }) : null;
+  const cancelPromise = cancel ? new Promise((resolve) => {
+    if (cancel.aborted) {
+      resolve("cancel");
+      return;
+    }
+    onCancel = () => resolve("cancel");
+    cancel.addEventListener("abort", onCancel, { once: true });
+  }) : null;
   const work = Promise.all([
     readStream3(proc.stdout, stdoutChunks),
     readStream3(proc.stderr, stderrChunks),
-    proc.wait()
+    proc.wait(),
+    feedStdin()
   ]);
-  const racers = [
-    work,
-    timer
-  ];
+  const racers = [work, timer];
   if (abortPromise !== null) racers.push(abortPromise);
+  if (cancelPromise !== null) racers.push(cancelPromise);
   let result;
   try {
     result = await Promise.race(racers);
   } finally {
     clearTimeout(timerId);
     if (onAbort) signal?.removeEventListener("abort", onAbort);
+    if (onCancel) cancel?.removeEventListener("abort", onCancel);
   }
-  if (result === "timeout") {
-    await proc.kill("SIGTERM");
-    if (!signal?.aborted) {
-      await new Promise((resolve) => setTimeout(resolve, 5e3));
-      try {
-        await proc.kill("SIGKILL");
-      } catch {
-      }
+  if (result === "timeout" || result === "cancel") {
+    if (signal?.aborted) {
+      await proc.kill("SIGTERM");
+    } else {
+      await terminate(proc, CALL_KILL_GRACE_MS);
     }
     inflightProcs.delete(proc);
-    return { stdout: "", stderr: "timed out", exitCode: 124 };
+    const stderr = result === "cancel" ? "cancelled" : "timed out";
+    return { stdout: "", stderr, exitCode: 124 };
   }
   inflightProcs.delete(proc);
   try {
@@ -12924,6 +12972,31 @@ function concat(chunks) {
   return out;
 }
 var KILL_GRACE_MS = 2e3;
+var CALL_KILL_GRACE_MS = 5e3;
+async function terminate(proc, graceMs) {
+  try {
+    await proc.kill("SIGTERM");
+  } catch {
+  }
+  let graceId;
+  let exited;
+  try {
+    exited = await Promise.race([
+      proc.wait().then(() => true),
+      new Promise((r) => {
+        graceId = setTimeout(() => r(false), graceMs);
+      })
+    ]);
+  } finally {
+    clearTimeout(graceId);
+  }
+  if (!exited) {
+    try {
+      await proc.kill("SIGKILL");
+    } catch {
+    }
+  }
+}
 var SIGNAL_EXIT = { SIGINT: 130, SIGTERM: 143, SIGHUP: 129 };
 async function trapShutdown(platform2, handler) {
   await Promise.all(
@@ -12935,24 +13008,7 @@ async function trapShutdown(platform2, handler) {
 async function killInflight() {
   const procs = [...inflightProcs];
   if (procs.length === 0) return;
-  await Promise.all(
-    procs.map(async (proc) => {
-      try {
-        await proc.kill("SIGTERM");
-      } catch {
-      }
-      const exited = await Promise.race([
-        proc.wait().then(() => true),
-        new Promise((r) => setTimeout(() => r(false), KILL_GRACE_MS))
-      ]);
-      if (!exited) {
-        try {
-          await proc.kill("SIGKILL");
-        } catch {
-        }
-      }
-    })
-  );
+  await Promise.all(procs.map((proc) => terminate(proc, KILL_GRACE_MS)));
   inflightProcs.clear();
 }
 async function runHelpForCli(platform2, filePath, childEnv, cwd, signal) {
@@ -13049,7 +13105,7 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
     );
     return run2;
   }
-  function invokeTemplateTool(tool, args2) {
+  function invokeTemplateTool(tool, args2, cancel) {
     const templateArgs = {};
     if (args2 && typeof args2 === "object") {
       for (const [k, v] of Object.entries(args2)) {
@@ -13067,11 +13123,13 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         void 0,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       )
     );
   }
-  async function executeTool(tool, cli, args2) {
+  async function executeTool(tool, cli, args2, cancel) {
     if (tool.kind === "help") {
       const result = await runCommand(
         platform2,
@@ -13081,7 +13139,9 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         void 0,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       );
       if (result.exitCode === 0) return result;
       return runCommand(
@@ -13092,7 +13152,9 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         void 0,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       );
     }
     if (tool.kind === "invoke") {
@@ -13107,7 +13169,9 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         parsed2.stdin,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       );
     }
     const parsed = readToolArguments(args2 ?? {});
@@ -13123,18 +13187,20 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
       planned.stdin,
       options.callTimeout,
       options.maxOutput,
-      serveCwd
+      serveCwd,
+      void 0,
+      cancel
     );
   }
-  async function invoke(name, args2) {
+  async function invoke(name, args2, cancel) {
     const tool = allTools.find((t) => t.name === name);
     if (!tool) return { stdout: "", stderr: `unknown tool ${name}`, exitCode: 1 };
     if (tool.cli === "" && tool.commandPath.length === 0) {
-      return invokeTemplateTool(tool, args2);
+      return invokeTemplateTool(tool, args2, cancel);
     }
     const cli = clis.find((c) => c.name === tool.cli);
     if (!cli) return { stdout: "", stderr: `unknown cli ${tool.cli}`, exitCode: 1 };
-    return enqueue(cli.name, () => executeTool(tool, cli, args2));
+    return enqueue(cli.name, () => executeTool(tool, cli, args2, cancel));
   }
   return { invoke, rpcTools };
 }
@@ -13878,10 +13944,13 @@ async function runHttpServer(platform2, options, tools, call, serverName, versio
   let tokenFilePath;
   let shutdownRequested = false;
   let inflightDone;
+  const stopCalls = new AbortController();
+  const activeCalls = /* @__PURE__ */ new Set();
   const shutdown = () => {
     if (shutdownRequested) return;
     shutdownRequested = true;
     listener.close();
+    stopCalls.abort();
     inflightDone = killInflight();
     if (tokenFilePath) {
       platform2.fs.unlink?.(tokenFilePath).catch(() => {
@@ -13911,17 +13980,30 @@ async function runHttpServer(platform2, options, tools, call, serverName, versio
     await platform2.write(2, `mcpcat serve: listening on ${listenUrl}
 `);
   }
-  const handler = (request) => handleMcpRequest(
-    request,
-    tools,
-    call,
-    serverName,
-    version,
-    serverOrigins,
-    allowedOrigins,
-    allowedHosts,
-    resolvedBearer
-  );
+  const handler = (request, signal) => {
+    const cancel = new AbortController();
+    const relay = () => cancel.abort();
+    signal.addEventListener("abort", relay, { once: true });
+    stopCalls.signal.addEventListener("abort", relay, { once: true });
+    if (signal.aborted || stopCalls.signal.aborted) relay();
+    const pending = handleMcpRequest(
+      request,
+      tools,
+      (name, args2) => call(name, args2, cancel.signal),
+      serverName,
+      version,
+      serverOrigins,
+      allowedOrigins,
+      allowedHosts,
+      resolvedBearer
+    ).finally(() => {
+      signal.removeEventListener("abort", relay);
+      stopCalls.signal.removeEventListener("abort", relay);
+      activeCalls.delete(pending);
+    });
+    activeCalls.add(pending);
+    return pending;
+  };
   try {
     for await (const connection of listener) {
       if (shutdownRequested) break;
@@ -13943,6 +14025,7 @@ async function runHttpServer(platform2, options, tools, call, serverName, versio
     } catch {
     }
   }
+  await Promise.allSettled([...activeCalls]);
   return 0;
 }
 async function handleMcpRequest(request, tools, call, serverName, version, serverOrigins, allowedOrigins, allowedHosts, resolvedBearer) {
@@ -17105,5 +17188,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.18.1", args);
+var code = await run(platform, "0.19.0", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -11526,7 +11526,40 @@ function parseRequestLine(buf, endPos) {
   return { method, target, headers, headerEnd: endPos + 4 };
 }
 async function handleConnection(readable, writable, handler) {
-  const reader = readable.getReader();
+  const raw = readable.getReader();
+  let ahead = null;
+  const parked = [];
+  const reader = {
+    read() {
+      const queued = parked.shift();
+      if (queued) return Promise.resolve(queued);
+      const next = ahead ?? raw.read();
+      ahead = null;
+      return next;
+    }
+  };
+  const watch = async (live, disconnect) => {
+    let held = 0;
+    while (held <= MAX_HEADER_SIZE + MAX_BODY_SIZE) {
+      const pending = ahead ?? raw.read();
+      ahead = pending;
+      let result;
+      try {
+        result = await pending;
+      } catch {
+        if (live.on) disconnect.abort();
+        return;
+      }
+      if (!live.on) return;
+      ahead = null;
+      parked.push(result);
+      if (result.done) {
+        disconnect.abort();
+        return;
+      }
+      held += result.value.length;
+    }
+  };
   const writer = writable.getWriter();
   let buf = new Uint8Array(4096);
   let bufLen = 0;
@@ -11572,7 +11605,16 @@ async function handleConnection(readable, writable, handler) {
         headers: parsed.headers,
         body
       };
-      const response = await handler(request);
+      const disconnect = new AbortController();
+      const live = { on: true };
+      void watch(live, disconnect);
+      let response;
+      try {
+        response = await handler(request, disconnect.signal);
+      } finally {
+        live.on = false;
+      }
+      if (disconnect.signal.aborted) break;
       await writeResponse(writer, response);
       const connectionHeader = (parsed.headers.connection ?? "").toLowerCase();
       if (connectionHeader === "close") break;
@@ -11589,7 +11631,7 @@ async function handleConnection(readable, writable, handler) {
       }
     }
   } finally {
-    reader.releaseLock();
+    raw.releaseLock();
     try {
       await writer.close();
     } catch {
@@ -12442,7 +12484,8 @@ function capOutput(value, limit) {
 ${value.slice(value.length - half)}`;
 }
 var inflightProcs = /* @__PURE__ */ new Set();
-async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs, maxOutput, cwd, signal) {
+async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs, maxOutput, cwd, signal, cancel) {
+  if (cancel?.aborted) return { stdout: "", stderr: "cancelled", exitCode: 124 };
   let proc;
   try {
     proc = await platform2.spawn({
@@ -12455,16 +12498,14 @@ async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs,
     return { stdout: "", stderr: `spawn failed: ${err.message}`, exitCode: 127 };
   }
   inflightProcs.add(proc);
-  if (stdin !== void 0) {
+  const feedStdin = async () => {
     const writer = proc.stdin.getWriter();
-    await writer.write(new TextEncoder().encode(stdin));
-    await writer.close();
-  } else {
     try {
-      await proc.stdin.getWriter().close();
+      if (stdin !== void 0) await writer.write(new TextEncoder().encode(stdin));
+      await writer.close();
     } catch {
     }
-  }
+  };
   const stdoutChunks = [];
   const stderrChunks = [];
   const readStream3 = async (stream, into) => {
@@ -12481,6 +12522,7 @@ async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs,
   };
   let timerId;
   let onAbort;
+  let onCancel;
   const timer = new Promise((resolve2) => {
     timerId = setTimeout(() => resolve2("timeout"), timeoutMs);
   });
@@ -12492,34 +12534,40 @@ async function runCommand(platform2, cmdPath, argv, childEnv, stdin, timeoutMs,
     onAbort = () => resolve2("timeout");
     signal.addEventListener("abort", onAbort, { once: true });
   }) : null;
+  const cancelPromise = cancel ? new Promise((resolve2) => {
+    if (cancel.aborted) {
+      resolve2("cancel");
+      return;
+    }
+    onCancel = () => resolve2("cancel");
+    cancel.addEventListener("abort", onCancel, { once: true });
+  }) : null;
   const work = Promise.all([
     readStream3(proc.stdout, stdoutChunks),
     readStream3(proc.stderr, stderrChunks),
-    proc.wait()
+    proc.wait(),
+    feedStdin()
   ]);
-  const racers = [
-    work,
-    timer
-  ];
+  const racers = [work, timer];
   if (abortPromise !== null) racers.push(abortPromise);
+  if (cancelPromise !== null) racers.push(cancelPromise);
   let result;
   try {
     result = await Promise.race(racers);
   } finally {
     clearTimeout(timerId);
     if (onAbort) signal?.removeEventListener("abort", onAbort);
+    if (onCancel) cancel?.removeEventListener("abort", onCancel);
   }
-  if (result === "timeout") {
-    await proc.kill("SIGTERM");
-    if (!signal?.aborted) {
-      await new Promise((resolve2) => setTimeout(resolve2, 5e3));
-      try {
-        await proc.kill("SIGKILL");
-      } catch {
-      }
+  if (result === "timeout" || result === "cancel") {
+    if (signal?.aborted) {
+      await proc.kill("SIGTERM");
+    } else {
+      await terminate(proc, CALL_KILL_GRACE_MS);
     }
     inflightProcs.delete(proc);
-    return { stdout: "", stderr: "timed out", exitCode: 124 };
+    const stderr = result === "cancel" ? "cancelled" : "timed out";
+    return { stdout: "", stderr, exitCode: 124 };
   }
   inflightProcs.delete(proc);
   try {
@@ -12545,6 +12593,31 @@ function concat(chunks) {
   return out;
 }
 var KILL_GRACE_MS = 2e3;
+var CALL_KILL_GRACE_MS = 5e3;
+async function terminate(proc, graceMs) {
+  try {
+    await proc.kill("SIGTERM");
+  } catch {
+  }
+  let graceId;
+  let exited;
+  try {
+    exited = await Promise.race([
+      proc.wait().then(() => true),
+      new Promise((r) => {
+        graceId = setTimeout(() => r(false), graceMs);
+      })
+    ]);
+  } finally {
+    clearTimeout(graceId);
+  }
+  if (!exited) {
+    try {
+      await proc.kill("SIGKILL");
+    } catch {
+    }
+  }
+}
 var SIGNAL_EXIT = { SIGINT: 130, SIGTERM: 143, SIGHUP: 129 };
 async function trapShutdown(platform2, handler) {
   await Promise.all(
@@ -12556,24 +12629,7 @@ async function trapShutdown(platform2, handler) {
 async function killInflight() {
   const procs = [...inflightProcs];
   if (procs.length === 0) return;
-  await Promise.all(
-    procs.map(async (proc) => {
-      try {
-        await proc.kill("SIGTERM");
-      } catch {
-      }
-      const exited = await Promise.race([
-        proc.wait().then(() => true),
-        new Promise((r) => setTimeout(() => r(false), KILL_GRACE_MS))
-      ]);
-      if (!exited) {
-        try {
-          await proc.kill("SIGKILL");
-        } catch {
-        }
-      }
-    })
-  );
+  await Promise.all(procs.map((proc) => terminate(proc, KILL_GRACE_MS)));
   inflightProcs.clear();
 }
 async function runHelpForCli(platform2, filePath, childEnv, cwd, signal) {
@@ -12670,7 +12726,7 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
     );
     return run2;
   }
-  function invokeTemplateTool(tool, args) {
+  function invokeTemplateTool(tool, args, cancel) {
     const templateArgs = {};
     if (args && typeof args === "object") {
       for (const [k, v] of Object.entries(args)) {
@@ -12688,11 +12744,13 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         void 0,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       )
     );
   }
-  async function executeTool(tool, cli, args) {
+  async function executeTool(tool, cli, args, cancel) {
     if (tool.kind === "help") {
       const result = await runCommand(
         platform2,
@@ -12702,7 +12760,9 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         void 0,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       );
       if (result.exitCode === 0) return result;
       return runCommand(
@@ -12713,7 +12773,9 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         void 0,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       );
     }
     if (tool.kind === "invoke") {
@@ -12728,7 +12790,9 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
         parsed2.stdin,
         options.callTimeout,
         options.maxOutput,
-        serveCwd
+        serveCwd,
+        void 0,
+        cancel
       );
     }
     const parsed = readToolArguments(args ?? {});
@@ -12744,18 +12808,20 @@ function createToolExecutor(platform2, clis, allTools, childEnv, options, serveC
       planned.stdin,
       options.callTimeout,
       options.maxOutput,
-      serveCwd
+      serveCwd,
+      void 0,
+      cancel
     );
   }
-  async function invoke(name, args) {
+  async function invoke(name, args, cancel) {
     const tool = allTools.find((t) => t.name === name);
     if (!tool) return { stdout: "", stderr: `unknown tool ${name}`, exitCode: 1 };
     if (tool.cli === "" && tool.commandPath.length === 0) {
-      return invokeTemplateTool(tool, args);
+      return invokeTemplateTool(tool, args, cancel);
     }
     const cli = clis.find((c) => c.name === tool.cli);
     if (!cli) return { stdout: "", stderr: `unknown cli ${tool.cli}`, exitCode: 1 };
-    return enqueue(cli.name, () => executeTool(tool, cli, args));
+    return enqueue(cli.name, () => executeTool(tool, cli, args, cancel));
   }
   return { invoke, rpcTools };
 }
@@ -13499,10 +13565,13 @@ async function runHttpServer(platform2, options, tools, call, serverName, versio
   let tokenFilePath;
   let shutdownRequested = false;
   let inflightDone;
+  const stopCalls = new AbortController();
+  const activeCalls = /* @__PURE__ */ new Set();
   const shutdown = () => {
     if (shutdownRequested) return;
     shutdownRequested = true;
     listener.close();
+    stopCalls.abort();
     inflightDone = killInflight();
     if (tokenFilePath) {
       platform2.fs.unlink?.(tokenFilePath).catch(() => {
@@ -13532,17 +13601,30 @@ async function runHttpServer(platform2, options, tools, call, serverName, versio
     await platform2.write(2, `mcpcat serve: listening on ${listenUrl}
 `);
   }
-  const handler = (request) => handleMcpRequest(
-    request,
-    tools,
-    call,
-    serverName,
-    version,
-    serverOrigins,
-    allowedOrigins,
-    allowedHosts,
-    resolvedBearer
-  );
+  const handler = (request, signal) => {
+    const cancel = new AbortController();
+    const relay = () => cancel.abort();
+    signal.addEventListener("abort", relay, { once: true });
+    stopCalls.signal.addEventListener("abort", relay, { once: true });
+    if (signal.aborted || stopCalls.signal.aborted) relay();
+    const pending = handleMcpRequest(
+      request,
+      tools,
+      (name, args) => call(name, args, cancel.signal),
+      serverName,
+      version,
+      serverOrigins,
+      allowedOrigins,
+      allowedHosts,
+      resolvedBearer
+    ).finally(() => {
+      signal.removeEventListener("abort", relay);
+      stopCalls.signal.removeEventListener("abort", relay);
+      activeCalls.delete(pending);
+    });
+    activeCalls.add(pending);
+    return pending;
+  };
   try {
     for await (const connection of listener) {
       if (shutdownRequested) break;
@@ -13564,6 +13646,7 @@ async function runHttpServer(platform2, options, tools, call, serverName, versio
     } catch {
     }
   }
+  await Promise.allSettled([...activeCalls]);
   return 0;
 }
 async function handleMcpRequest(request, tools, call, serverName, version, serverOrigins, allowedOrigins, allowedHosts, resolvedBearer) {
@@ -16827,7 +16910,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.18.1", args);
+  return run(platform2, "0.19.0", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.18.1",
+  "version": "0.19.0",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -16,7 +16,7 @@
     "mcpcat": "dist/host/mcpcat.mjs"
   },
   "engines": {
-    "node": ">=24",
+    "node": ">=26",
     "slicc-kernel": ">=1.65.2"
   },
   "publishConfig": {
@@ -25,7 +25,7 @@
   },
   "fledgling": {
     "provider": "github",
-    "workflow": "release.yml",
+    "workflow": "ci.yml",
     "repo": "ai-ecoverse/mcpcat",
     "publish": true
   },
@@ -51,25 +51,20 @@
     "build": "node scripts/build.mjs",
     "lint": "sh scripts/lint.sh",
     "typecheck": "tsc",
-    "test": "npm run test:unit && npm run test:integration && npm run test:kernel-min",
+    "test": "node --test --test-timeout=30000 'test/integration/*.test.mjs'",
     "test:unit": "mcr -c node_modules/@ai-ecoverse/slicc-shared-web/mcr.config.mjs node --test 'test/unit/**/*.test.mjs' 'test/unit/**/*.test.ts'",
-    "test:integration": "node --test --test-timeout=30000 test/integration/*.test.mjs",
-    "test:kernel-min": "node scripts/test-kernel-min.mjs",
-    "cert": "node scripts/cert.mjs",
     "release": "semantic-release",
     "trust": "npx fledgling sync -y --skip-publish",
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-bios": "1.38.0",
-    "@ai-ecoverse/slicc-kernel": "1.143.2",
-    "@ai-ecoverse/slicc-shared-web": "1.30.1",
+    "@ai-ecoverse/slicc-kernel": "1.146.2",
+    "@ai-ecoverse/slicc-shared-web": "2.8.5",
     "@biomejs/biome": "2.5.15",
     "@earendil-works/pi-codemode": "1.2.0",
     "@earendil-works/pi-mcp": "1.2.0",
     "@types/node": "26.6.5",
     "esbuild": "0.28.2",
-    "kernel-cert-new": "npm:@ai-ecoverse/slicc-kernel@1.143.2",
     "lefthook": "2.2.2",
     "monocart-coverage-reports": "2.13.2",
     "proper-lockfile": "4.1.2",