@ai-ecoverse/mcpcat 0.31.15 → 0.31.17

package/dist/host/mcpcat.mjs

@@ -14287,10 +14287,30 @@ var HOLDER_RESTART_MAX_MS = 3e4;
 var HOLDER_STABLE_MS = 3e4;
 var HOLDER_STOP_GRACE_MS = 2e3;
 var HOLDER_READY_MS = 2e4;
+var FALLBACK_UNVERIFIED = "webmcp: other-extension fallback could not verify the reloaded document; tools are unavailable";
 var LABEL = "mcpcat serve --webmcp";
-var GUARD_REFUSAL_RE = /^(?:(?:playwright-cli )?webmcp-polyfill: )?[A-Z][A-Za-z]*\.[a-z][A-Za-z]*: slicc: refused: \S/;
+var TERMINAL_REFUSALS = /* @__PURE__ */ new Set([
+  "slicc: refused: target is on seven's origin",
+  "slicc: refused: seven\u2019s own pages and the vault are out of reach of browser automation",
+  "slicc: refused: breakpoints could run in seven\u2019s pages or the vault, so the guard doesn\u2019t offer the Debugger domains",
+  "slicc: refused: update the browser guard and client",
+  "slicc: refused: WebMCP installation could not verify the document; update the browser guard and client",
+  "slicc: refused: WebMCP installation could not verify a usable guard and document; update the browser guard and client",
+  "slicc: refused: WebMCP instrumentation is unavailable; update the browser guard and client",
+  "webmcp: no tools are available through the other-extension fallback; page startup or parse-time checks may have happened before installation"
+]);
+var FALLBACK_REFUSALS = /* @__PURE__ */ new Set([
+  "other-extension fallback could not verify the reloaded document; tools are unavailable",
+  "other-extension fallback could not verify the document"
+]);
+function holderReason(line) {
+  return line.trim().replace(/^playwright-cli webmcp-polyfill: /, "").replace(/^webmcp-polyfill: /, "").replace(/^[A-Z][A-Za-z]*\.[a-z][A-Za-z]*: /, "");
+}
+function isFallbackUnavailable(line) {
+  return FALLBACK_REFUSALS.has(holderReason(line));
+}
 function isGuardRefusal(line) {
-  return GUARD_REFUSAL_RE.test(line.trim());
+  return TERMINAL_REFUSALS.has(holderReason(line)) || isFallbackUnavailable(line);
 }
 function compareVersions(a, b) {
   const pa = a.split(".").map(Number);
@@ -14418,6 +14438,9 @@ function startHolder(platform2, options) {
       return;
     }
     proc = child;
+    state.fallbackUnavailable = false;
+    if (Number.isSafeInteger(child.pid) && child.pid > 0)
+      report(`holder-pid ${child.pid} tab ${options.tab}`);
     writer = child.stdin.getWriter();
     let lastError;
     const out = drain(child.stdout, onEvent);
@@ -14425,7 +14448,8 @@ function startHolder(platform2, options) {
       const text = line.trim();
       if (!text) return;
       lastError = text;
-      if (readyAt === void 0 && isGuardRefusal(text)) refusal ??= text;
+      if (isFallbackUnavailable(text)) state.fallbackUnavailable = true;
+      if (isGuardRefusal(text)) refusal ??= text;
       else relay(text);
     });
     exited = Promise.all([out, err, child.wait()]).then(([, , result]) => {
@@ -14749,6 +14773,12 @@ function startDialogHolder(platform2, options) {
 
 // src/serve/webmcp.ts
 var UNAVAILABLE_RE = /WebMCP is unavailable on this page/;
+function emptyFallbackOrError(error, holderHint) {
+  const hint = error.trim();
+  if (hint === "webmcp: unverified isolated context" && holderHint === FALLBACK_UNVERIFIED)
+    return { tools: [], hint: holderHint };
+  return hint === "webmcp: no tools are available through the other-extension fallback; page startup or parse-time checks may have happened before installation" ? { tools: [], hint } : { tools: [], error };
+}
 function buildBaseArgs(options) {
   const args2 = [];
   if (options.cdp) {
@@ -15317,7 +15347,7 @@ function createWebMcpHandler(platform2, options) {
   async function getRpcTools() {
     const { tools, error, notFound, unavailable } = await listRaw();
     if (notFound) return null;
-    if (error) return { tools: [], error };
+    if (error) return emptyFallbackOrError(error, options.emptyHint?.(false));
     const late = options.late?.() ?? false;
     const rpcTools = [];
     const hidden = {};
@@ -16479,6 +16509,7 @@ function emptyToolsHint(options, polyfill, unavailable) {
     return `the page shows no WebMCP tools, and the WebMCP polyfill needs playwright-cli ${POLYFILL_MIN_VERSION} or newer (found ${polyfill.oldVersion})`;
   }
   const status = polyfill.holder?.status();
+  if (status?.refused && status.fallbackUnavailable) return FALLBACK_UNVERIFIED;
   if (isLate(polyfill.holder)) {
     return "the page may check for WebMCP only when it loads, before the polyfill was injected; reload the tab, or restart with --webmcp-reload (it reloads the tab)";
   }
@@ -22284,5 +22315,5 @@ try {
   });
 } catch {
 }
-var code = await run(platform, "0.31.15", args);
+var code = await run(platform, "0.31.17", args);
 process.exit(code);

package/dist/kernel/mcpcat.mjs

@@ -6571,7 +6571,17 @@ var SETTINGS_SIGN_IN = "Sign in under Settings \u203A MCP servers.";
 var HEADER_REJECTED = "The server rejected the explicit Authorization header.";
 var PLACEHOLDER_NOT_ACCEPTED = "The request carried the signed-in credential's placeholder and the server still answered 401. Seven's vault fills the placeholder in when the request is forwarded, so either that forwarding is not active in this seven yet or the server rejected the credential. Try again from the Settings page's Connect, or ask whoever runs seven.";
 var VAULT_NO_ANSWER = "Seven's vault did not answer, so the request carried no credential. Try again, or ask whoever runs seven.";
+var PLACEHOLDER_REFUSED = "Seven's vault fills a placeholder in when the request is forwarded, so either that forwarding is not active in this seven yet or it failed. Try again, or ask whoever runs seven.";
+var CAUSED = /\brefused \([a-z][a-z-]*\): \S/;
 var NO_PLACEHOLDER = `This user gets no placeholder for this server. With no sign-in yet: ${SETTINGS_SIGN_IN} After a sign-in, the agent already has this server's tools, because a Settings sign-in gives it the server as native tools, and a human can use the server from a panel terminal as root.`;
+function placeholderRefusal(err) {
+  if (!(err instanceof TypeError)) return void 0;
+  const { code, detail } = err.cause ?? {};
+  if (code !== "EACCES" || typeof detail !== "string") return void 0;
+  if (!detail.includes("sealed placeholder")) return void 0;
+  const reason = detail.replace(/fnox_proxy_[0-9a-f]{24}/g, "[placeholder]");
+  return authError(CAUSED.test(reason) ? `${reason}.` : `${reason}. ${PLACEHOLDER_REFUSED}`);
+}
 var SettingsSignInError = class extends McpcatError {
   advice;
   constructor(status, advice = SETTINGS_SIGN_IN) {
@@ -13908,10 +13918,30 @@ var HOLDER_RESTART_MAX_MS = 3e4;
 var HOLDER_STABLE_MS = 3e4;
 var HOLDER_STOP_GRACE_MS = 2e3;
 var HOLDER_READY_MS = 2e4;
+var FALLBACK_UNVERIFIED = "webmcp: other-extension fallback could not verify the reloaded document; tools are unavailable";
 var LABEL = "mcpcat serve --webmcp";
-var GUARD_REFUSAL_RE = /^(?:(?:playwright-cli )?webmcp-polyfill: )?[A-Z][A-Za-z]*\.[a-z][A-Za-z]*: slicc: refused: \S/;
+var TERMINAL_REFUSALS = /* @__PURE__ */ new Set([
+  "slicc: refused: target is on seven's origin",
+  "slicc: refused: seven\u2019s own pages and the vault are out of reach of browser automation",
+  "slicc: refused: breakpoints could run in seven\u2019s pages or the vault, so the guard doesn\u2019t offer the Debugger domains",
+  "slicc: refused: update the browser guard and client",
+  "slicc: refused: WebMCP installation could not verify the document; update the browser guard and client",
+  "slicc: refused: WebMCP installation could not verify a usable guard and document; update the browser guard and client",
+  "slicc: refused: WebMCP instrumentation is unavailable; update the browser guard and client",
+  "webmcp: no tools are available through the other-extension fallback; page startup or parse-time checks may have happened before installation"
+]);
+var FALLBACK_REFUSALS = /* @__PURE__ */ new Set([
+  "other-extension fallback could not verify the reloaded document; tools are unavailable",
+  "other-extension fallback could not verify the document"
+]);
+function holderReason(line) {
+  return line.trim().replace(/^playwright-cli webmcp-polyfill: /, "").replace(/^webmcp-polyfill: /, "").replace(/^[A-Z][A-Za-z]*\.[a-z][A-Za-z]*: /, "");
+}
+function isFallbackUnavailable(line) {
+  return FALLBACK_REFUSALS.has(holderReason(line));
+}
 function isGuardRefusal(line) {
-  return GUARD_REFUSAL_RE.test(line.trim());
+  return TERMINAL_REFUSALS.has(holderReason(line)) || isFallbackUnavailable(line);
 }
 function compareVersions(a, b) {
   const pa = a.split(".").map(Number);
@@ -14039,6 +14069,9 @@ function startHolder(platform2, options) {
       return;
     }
     proc = child;
+    state.fallbackUnavailable = false;
+    if (Number.isSafeInteger(child.pid) && child.pid > 0)
+      report(`holder-pid ${child.pid} tab ${options.tab}`);
     writer = child.stdin.getWriter();
     let lastError;
     const out = drain(child.stdout, onEvent);
@@ -14046,7 +14079,8 @@ function startHolder(platform2, options) {
       const text = line.trim();
       if (!text) return;
       lastError = text;
-      if (readyAt === void 0 && isGuardRefusal(text)) refusal ??= text;
+      if (isFallbackUnavailable(text)) state.fallbackUnavailable = true;
+      if (isGuardRefusal(text)) refusal ??= text;
       else relay(text);
     });
     exited = Promise.all([out, err, child.wait()]).then(([, , result]) => {
@@ -14370,6 +14404,12 @@ function startDialogHolder(platform2, options) {
 
 // src/serve/webmcp.ts
 var UNAVAILABLE_RE = /WebMCP is unavailable on this page/;
+function emptyFallbackOrError(error, holderHint) {
+  const hint = error.trim();
+  if (hint === "webmcp: unverified isolated context" && holderHint === FALLBACK_UNVERIFIED)
+    return { tools: [], hint: holderHint };
+  return hint === "webmcp: no tools are available through the other-extension fallback; page startup or parse-time checks may have happened before installation" ? { tools: [], hint } : { tools: [], error };
+}
 function buildBaseArgs(options) {
   const args = [];
   if (options.cdp) {
@@ -14938,7 +14978,7 @@ function createWebMcpHandler(platform2, options) {
   async function getRpcTools() {
     const { tools, error, notFound, unavailable } = await listRaw();
     if (notFound) return null;
-    if (error) return { tools: [], error };
+    if (error) return emptyFallbackOrError(error, options.emptyHint?.(false));
     const late = options.late?.() ?? false;
     const rpcTools = [];
     const hidden = {};
@@ -16100,6 +16140,7 @@ function emptyToolsHint(options, polyfill, unavailable) {
     return `the page shows no WebMCP tools, and the WebMCP polyfill needs playwright-cli ${POLYFILL_MIN_VERSION} or newer (found ${polyfill.oldVersion})`;
   }
   const status = polyfill.holder?.status();
+  if (status?.refused && status.fallbackUnavailable) return FALLBACK_UNVERIFIED;
   if (isLate(polyfill.holder)) {
     return "the page may check for WebMCP only when it loads, before the polyfill was injected; reload the tab, or restart with --webmcp-reload (it reloads the tab)";
   }
@@ -21229,6 +21270,7 @@ async function kernelSpawn(ctx, options) {
   const useGroupKill = groupSpawnSupported;
   let waited;
   return {
+    pid: childPid,
     stdin: result.stdin ?? new WritableStream(),
     stdout: result.stdout,
     stderr: result.stderr,
@@ -21577,6 +21619,11 @@ function createKernelFetch(ctx) {
     return ctx.fetch(input, init);
   };
 }
+function reportingRefusals(fetch) {
+  return (input, init) => fetch(input, init).catch((err) => {
+    throw placeholderRefusal(err) ?? err;
+  });
+}
 async function kernelSeal(ctx, request) {
   const f = await ctx.open("/dev/sealed", { read: true, write: true });
   try {
@@ -21597,7 +21644,7 @@ function createKernelPlatform(ctx, options) {
   return {
     kind: "kernel",
     uid: ctx.sync?.cred?.().euid,
-    fetch: createKernelFetch(ctx),
+    fetch: reportingRefusals(createKernelFetch(ctx)),
     spawn: (options2) => kernelSpawn(ctx, options2),
     listen: (options2) => kernelListen(ctx, options2),
     ...ctx.websocket ? { websocket: (url) => ctx.websocket(url) } : {},
@@ -21637,7 +21684,7 @@ async function main(ctx) {
     packageDir: "/node_modules/@ai-ecoverse/mcpcat"
   });
   const args = ctx.argv.slice(1);
-  return run(platform2, "0.31.15", args);
+  return run(platform2, "0.31.17", args);
 }
 export {
   main as default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/mcpcat",
-  "version": "0.31.15",
+  "version": "0.31.17",
   "description": "A curl for the Model Context Protocol",
   "type": "module",
   "license": "Apache-2.0",
@@ -58,15 +58,16 @@
     "trust:dry": "npx fledgling sync --dry-run -y --skip-publish"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.170.3",
-    "@ai-ecoverse/slicc-shared-web": "2.13.7",
-    "@biomejs/biome": "2.6.2",
+    "@ai-ecoverse/slicc-kernel": "1.173.0",
+    "@ai-ecoverse/slicc-shared-web": "2.13.10",
+    "@ai-ecoverse/slicc-vault": "1.21.2",
+    "@biomejs/biome": "2.6.3",
     "@earendil-works/pi-codemode": "1.4.0",
     "@earendil-works/pi-mcp": "1.4.0",
     "@types/node": "26.6.5",
     "esbuild": "0.28.2",
     "lefthook": "2.2.2",
-    "monocart-coverage-reports": "2.13.2",
+    "monocart-coverage-reports": "3.1.0",
     "proper-lockfile": "4.1.2",
     "quickjs-wasi": "3.6.3",
     "semantic-release": "25.0.9",