@ai-ecoverse/mcpcat 0.31.15 → 0.31.16

package/dist/host/mcpcat.mjs

@@ -22284,5 +22284,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.31.15", args);
+var code = await run(platform, "0.31.16", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -6571,7 +6571,16 @@ var SETTINGS_SIGN_IN = "Sign in under Settings \u203A MCP servers.";
 var HEADER_REJECTED = "The server rejected the explicit Authorization header.";
 var PLACEHOLDER_NOT_ACCEPTED = "The request carried the signed-in credential's placeholder and the server still answered 401. Seven's vault fills the placeholder in when the request is forwarded, so either that forwarding is not active in this seven yet or the server rejected the credential. Try again from the Settings page's Connect, or ask whoever runs seven.";
 var VAULT_NO_ANSWER = "Seven's vault did not answer, so the request carried no credential. Try again, or ask whoever runs seven.";
+var PLACEHOLDER_REFUSED = "Seven's vault fills a placeholder in when the request is forwarded, so either that forwarding is not active in this seven yet or it failed. Try again, or ask whoever runs seven.";
 var NO_PLACEHOLDER = `This user gets no placeholder for this server. With no sign-in yet: ${SETTINGS_SIGN_IN} After a sign-in, the agent already has this server's tools, because a Settings sign-in gives it the server as native tools, and a human can use the server from a panel terminal as root.`;
+function placeholderRefusal(err) {
+  if (!(err instanceof TypeError)) return void 0;
+  const { code, detail } = err.cause ?? {};
+  if (code !== "EACCES" || typeof detail !== "string") return void 0;
+  if (!detail.includes("sealed placeholder")) return void 0;
+  const reason = detail.replace(/fnox_proxy_[0-9a-f]{24}/g, "[placeholder]");
+  return authError(`${reason}. ${PLACEHOLDER_REFUSED}`);
+}
 var SettingsSignInError = class extends McpcatError {
   advice;
   constructor(status, advice = SETTINGS_SIGN_IN) {
@@ -21577,6 +21586,11 @@ function createKernelFetch(ctx) {
     return ctx.fetch(input, init);
   };
 }
+function reportingRefusals(fetch) {
+  return (input, init) => fetch(input, init).catch((err) => {
+    throw placeholderRefusal(err) ?? err;
+  });
+}
 async function kernelSeal(ctx, request) {
   const f = await ctx.open("/dev/sealed", { read: true, write: true });
   try {
@@ -21597,7 +21611,7 @@ function createKernelPlatform(ctx, options) {
   return {
     kind: "kernel",
     uid: ctx.sync?.cred?.().euid,
-    fetch: createKernelFetch(ctx),
+    fetch: reportingRefusals(createKernelFetch(ctx)),
     spawn: (options2) => kernelSpawn(ctx, options2),
     listen: (options2) => kernelListen(ctx, options2),
     ...ctx.websocket ? { websocket: (url) => ctx.websocket(url) } : {},
@@ -21637,7 +21651,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.31.15", args);
+  return run(platform2, "0.31.16", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.31.15",
+  "version": "0.31.16",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -58,9 +58,10 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.170.3",
+    "@ai-ecoverse/slicc-kernel": "1.172.0",
     "@ai-ecoverse/slicc-shared-web": "2.13.7",
-    "@biomejs/biome": "2.6.2",
+    "@ai-ecoverse/slicc-vault": "1.19.0",
+    "@biomejs/biome": "2.6.3",
     "@earendil-works/pi-codemode": "1.4.0",
     "@earendil-works/pi-mcp": "1.4.0",
     "@types/node": "26.6.5",