@cat-factory/server 0.217.0 → 0.218.0

package/dist/modules/toolServers/mcpProbe.js

@@ -0,0 +1,611 @@
+import { isAllowedMcpHttpUrl, redactSecrets } from '@cat-factory/kernel';
+import { MCP_PROBE_MAX_PAGES, MCP_PROBE_TIMEOUT_MS } from '@cat-factory/contracts';
+// ---------------------------------------------------------------------------
+// A minimal Streamable-HTTP MCP CLIENT, for one purpose: ask a declared `http` tool server whether
+// it is there. `initialize`, `notifications/initialized`, then `tools/list` until the pages run out.
+//
+// Hand-rolled over `fetch` rather than built on `@modelcontextprotocol/sdk`'s client, and the reason
+// is the one slice 3 already recorded about the SERVING side: the backend's HTTP layer is typed
+// against the Web platform alone so it cannot break on workerd, and the SDK's client transport
+// carries an OAuth provider, a reconnecting SSE stream, resumption tokens and a zod-validated
+// message layer — every one of which this needs to NOT do. Three POSTs and a JSON reader is smaller
+// than the adapter that would hold that machinery back, and it keeps the SDK out of a module every
+// facade bundles.
+//
+// What it deliberately keeps from the real client, because a probe that behaves differently from the
+// agent's own CLI answers about the wrong thing:
+//
+//   - `accept: application/json, text/event-stream` and a reader for BOTH. A stateless server
+//     answers with JSON; a stream-first one answers the same frame as one SSE event. A client that
+//     accepted only JSON would report a working server as a protocol error.
+//   - the `mcp-session-id` a server may mint on `initialize`, echoed on every later request, and the
+//     negotiated `mcp-protocol-version` beside it. Without them a session-keeping server answers
+//     the handshake and then 400s the `tools/list` that follows.
+//   - redirects, followed by hand up to {@link MAX_REDIRECTS} hops with every hop re-validated
+//     against `isAllowedMcpHttpUrl` (the same rule the declared url is held to, re-checked per hop
+//     exactly as the local-runner fetch does) — and, when the request carries a credential, held to
+//     the SAME ORIGIN as well. That is not extra caution beyond what a real client does, it is what
+//     a real client does: the Web platform REMOVES `Authorization` when a redirect crosses origins
+//     (fetch's CORS non-wildcard request-header rule), so an agent's own MCP client reaches such a
+//     hop unauthenticated. Forwarding a resolved credential there would make the probe the one path
+//     that hands a workspace's token to whatever a hijacked or expired vendor host redirects to,
+//     and it would answer about a request no run will ever make. Refused BY NAME instead, because
+//     "your declared url redirects off its origin" is the fix, where a silently credential-less
+//     401 is a wrong cause.
+//   - a POST on every hop, deliberately NOT the spec's 301/302/303 method rewrite. A GET to an MCP
+//     endpoint means "open the SSE stream", so degrading to one asks a different question.
+//
+// It never throws. Every failure is a discriminated outcome, because the whole point is to hand the
+// operator a CAUSE, and "the probe blew up" is not one.
+// ---------------------------------------------------------------------------
+/**
+ * The protocol version the probe asks for.
+ *
+ * A literal rather than a read of the SDK's `LATEST_PROTOCOL_VERSION`, and drift is benign by the
+ * protocol's own design: negotiation belongs to the SERVER, which answers with the requested version
+ * when it speaks it and with one of its own when it does not. So a probe advertising something older
+ * than the spec's latest still completes a handshake with a newer server, and the version this
+ * reports is always the one the server chose rather than the one we asked for.
+ */
+const PROBE_PROTOCOL_VERSION = '2025-11-25';
+/** Redirect hops one probe follows. Bounded because a redirect loop is the server's to author. */
+const MAX_REDIRECTS = 3;
+/**
+ * Bytes read from one response before the reader gives up.
+ *
+ * An SSE body has no length and a server decides when it ends, so a reader with no ceiling hands a
+ * remote server the ability to hold this request open until the timeout with a stream of padding.
+ * Sized well past any real `tools/list` page (the biggest tool tables in the wild are tens of KB).
+ */
+const MAX_RESPONSE_BYTES = 4_000_000;
+/**
+ * Speak MCP to `target` and report what happened.
+ *
+ * The caller owns the DECISION to probe at all (a stdio server has no url; a loopback one is not
+ * ours to reach) and the credential resolution that fills `headers`. This owns only the protocol.
+ */
+export async function probeMcpHttpServer(target, deps = {}) {
+    // ONE deadline for the whole exchange rather than a timeout per request. Three round trips each
+    // allowed the full budget is three times the wait an operator was told to expect, and the thing
+    // being bounded is how long this endpoint holds a request open.
+    const timeoutMs = deps.timeoutMs ?? MCP_PROBE_TIMEOUT_MS;
+    const ctx = {
+        doFetch: deps.fetch ?? fetch,
+        target,
+        session: new SessionHeaders(),
+        signal: AbortSignal.timeout(timeoutMs),
+        timeoutMs,
+    };
+    const outcome = await handshakeAndList(ctx, deps.maxPages ?? MCP_PROBE_MAX_PAGES);
+    // A session the server minted is ENDED before answering, whatever the outcome was. The spec's own
+    // termination path, and without it every press of the Test button leaves a session on the server
+    // to expire on its own clock. Best effort by construction: it cannot change the verdict, so a
+    // server that refuses or ignores the DELETE costs nothing.
+    await endSession(ctx);
+    return outcome;
+}
+/** The exchange itself: handshake, the required notification, then every page of `tools/list`. */
+async function handshakeAndList(ctx, maxPages) {
+    const handshake = await exchange(ctx, {
+        id: 1,
+        method: 'initialize',
+        params: initializeParams(),
+    });
+    if (!handshake.ok)
+        return handshake.failure;
+    const negotiated = readHandshake(handshake.result);
+    if (!negotiated) {
+        return {
+            status: 'protocol_error',
+            error: 'the endpoint answered the handshake without a protocolVersion or serverInfo, so it is ' +
+                'answering JSON-RPC but is not an MCP server',
+        };
+    }
+    ctx.session.protocolVersion = negotiated.protocolVersion;
+    // The spec REQUIRES this notification before any other request, and a strict server rejects
+    // `tools/list` without it. It carries no id and expects no body (a `202` is the normal answer), so
+    // its outcome is only interesting when the transport itself failed.
+    const notified = await notify(ctx, 'notifications/initialized');
+    if (notified)
+        return notified;
+    const listed = await listTools(ctx, maxPages);
+    if (!listed.ok)
+        return listed.failure;
+    return { status: 'ok', ...negotiated, tools: listed.tools, toolsComplete: listed.complete };
+}
+/**
+ * What the probe says it is.
+ *
+ * `capabilities: {}` is honest and load-bearing: this client implements no roots, no sampling and no
+ * elicitation, and a server that saw a capability declared here could legitimately try to use it
+ * mid-handshake. `tools/list` needs none of them.
+ */
+function initializeParams() {
+    return {
+        protocolVersion: PROBE_PROTOCOL_VERSION,
+        capabilities: {},
+        clientInfo: { name: 'cat-factory-tool-server-probe', version: '1' },
+    };
+}
+/** The negotiated handshake facts, or undefined when the answer was not an MCP one. */
+function readHandshake(result) {
+    const protocolVersion = typeof result.protocolVersion === 'string' ? result.protocolVersion : '';
+    const info = isRecord(result.serverInfo) ? result.serverInfo : undefined;
+    if (!protocolVersion || !info)
+        return undefined;
+    return {
+        protocolVersion,
+        serverName: typeof info.name === 'string' ? info.name : '',
+        // A server that omits its version is odd, not broken: the field is what the surface renders
+        // beside the name, so an empty string there beats refusing an otherwise complete handshake.
+        serverVersion: typeof info.version === 'string' ? info.version : '',
+    };
+}
+/**
+ * The per-session headers a Streamable-HTTP client must echo once it has them.
+ *
+ * A class rather than two locals because both are minted by the FIRST response and must reach every
+ * later request; threading them by hand is exactly how a session-keeping server ends up 400ing the
+ * request after the handshake with nothing naming why.
+ */
+class SessionHeaders {
+    sessionId;
+    protocolVersion;
+    /**
+     * The url the session was minted at, which a redirect may have moved off the declared one. The
+     * DELETE that ends the session has to reach the endpoint that owns it, not the url we asked for.
+     */
+    endpoint;
+    apply(headers) {
+        if (this.sessionId)
+            headers['mcp-session-id'] = this.sessionId;
+        if (this.protocolVersion)
+            headers['mcp-protocol-version'] = this.protocolVersion;
+    }
+    adopt(response, url) {
+        const minted = response.headers.get('mcp-session-id');
+        if (!minted)
+            return;
+        this.sessionId = minted;
+        this.endpoint = url;
+    }
+}
+/** Read every page of `tools/list`, up to `maxPages`. */
+async function listTools(exchangeCtx, maxPages) {
+    const tools = [];
+    let cursor;
+    for (let page = 0; page < maxPages; page++) {
+        const answer = await exchange(exchangeCtx, {
+            id: page + 2,
+            method: 'tools/list',
+            ...(cursor ? { params: { cursor } } : {}),
+        });
+        if (!answer.ok)
+            return { ok: false, failure: answer.failure };
+        const listed = answer.result.tools;
+        if (!Array.isArray(listed)) {
+            return {
+                ok: false,
+                failure: {
+                    status: 'protocol_error',
+                    error: 'the server answered tools/list without a tools array',
+                },
+            };
+        }
+        for (const tool of listed) {
+            if (isRecord(tool) && typeof tool.name === 'string' && tool.name)
+                tools.push(tool.name);
+        }
+        const next = answer.result.nextCursor;
+        cursor = typeof next === 'string' && next ? next : undefined;
+        if (!cursor)
+            return { ok: true, tools, complete: true };
+    }
+    // A cursor survived the page bound: the list is a PREFIX, and saying so is what stops the caller
+    // reporting a narrowed `allowedTools` entry as missing on the strength of a partial read.
+    return { ok: true, tools, complete: false };
+}
+/** One JSON-RPC REQUEST and its response. */
+async function exchange(ctx, message) {
+    const sent = await post(ctx, { jsonrpc: '2.0', ...message });
+    if (!sent.ok)
+        return { ok: false, failure: sent.failure };
+    const body = await readFrame(ctx, sent.response);
+    if (!body.ok)
+        return { ok: false, failure: body.failure };
+    const frame = body.frame;
+    if (isRecord(frame.error)) {
+        const detail = typeof frame.error.message === 'string' ? frame.error.message : 'no message';
+        return {
+            ok: false,
+            failure: {
+                status: 'protocol_error',
+                error: `${message.method} was refused by the server: ${redact(detail)}`,
+            },
+        };
+    }
+    if (!isRecord(frame.result)) {
+        return {
+            ok: false,
+            failure: {
+                status: 'protocol_error',
+                error: `${message.method} answered without a JSON-RPC result object`,
+            },
+        };
+    }
+    return { ok: true, result: frame.result };
+}
+/**
+ * One JSON-RPC NOTIFICATION. Returns a failure only when the transport itself did — a notification
+ * has no response to inspect, and a server that answers it with a body is within its rights.
+ */
+async function notify(ctx, method) {
+    const sent = await post(ctx, { jsonrpc: '2.0', method });
+    if (!sent.ok)
+        return sent.failure;
+    // Drain rather than parse: an unread body on a keep-alive connection is a leaked stream on Node,
+    // and there is nothing in it this cares about.
+    // silent-catch-ok: cancelling a body we never read has no failure worth a line, and this module
+    // holds no logger on purpose (it is a pure protocol client the caller reports for).
+    await sent.response.body?.cancel().catch(() => { });
+    return undefined;
+}
+/**
+ * End the session the server minted, if it minted one. The spec's own termination path.
+ *
+ * Best effort in the strict sense: it runs AFTER the verdict is decided and cannot change it, so
+ * every failure is dropped here rather than reported. A server may answer `405` (termination not
+ * allowed) and be entirely correct, the deadline may already have passed, and neither is news. What
+ * it buys is that pressing Test repeatedly does not leave a session per press on the server to age
+ * out on its own clock.
+ */
+async function endSession(ctx) {
+    const { sessionId, endpoint } = ctx.session;
+    if (!sessionId || !endpoint)
+        return;
+    try {
+        const response = await ctx.doFetch(endpoint, {
+            method: 'DELETE',
+            headers: requestHeaders(ctx),
+            redirect: 'manual',
+            signal: ctx.signal,
+        });
+        // silent-catch-ok: as above — a body we never read, on a request whose outcome is already
+        // irrelevant to the caller.
+        await response.body?.cancel().catch(() => { });
+    }
+    catch {
+        // Nothing to report and nowhere to report it: the verdict is already computed, and a failed
+        // courtesy DELETE says nothing about the server an operator asked about.
+    }
+}
+/** POST one frame, following redirects by hand and turning transport faults into outcomes. */
+async function post(ctx, frame) {
+    let url = ctx.target.url;
+    const carriesCredential = Object.keys(ctx.target.credentialHeaders).length > 0;
+    for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+        const sent = await send(ctx, url, frame);
+        if (!sent.ok)
+            return sent;
+        ctx.session.adopt(sent.response, url);
+        if (!isRedirect(sent.response))
+            return sent;
+        const hopTo = nextHop(ctx, url, sent.response, carriesCredential);
+        if (!hopTo.ok)
+            return hopTo;
+        url = hopTo.url;
+    }
+    return {
+        ok: false,
+        failure: {
+            status: 'protocol_error',
+            error: `the endpoint redirected more than ${MAX_REDIRECTS} times`,
+        },
+    };
+}
+/** One request, with every transport fault turned into an outcome rather than a throw. */
+async function send(ctx, url, frame) {
+    try {
+        return {
+            ok: true,
+            response: await ctx.doFetch(url, {
+                method: 'POST',
+                headers: requestHeaders(ctx),
+                body: JSON.stringify(frame),
+                redirect: 'manual',
+                signal: ctx.signal,
+            }),
+        };
+    }
+    catch (error) {
+        // Everything that never produced a status: DNS, TLS, connection refused, and the deadline. One
+        // outcome for all of them because they share a fix (the endpoint, or the network) and the prose
+        // carries which — while a 4xx/5xx is a DIFFERENT fix and gets its own member.
+        return {
+            ok: false,
+            failure: { status: 'unreachable', error: redact(errorText(error, ctx.timeoutMs)) },
+        };
+    }
+}
+/**
+ * The headers one request carries: the declaration's own, the resolved credential, the session pair,
+ * and this client's content negotiation.
+ *
+ * Lower-cased before the probe's own values are written, which is load-bearing rather than tidy:
+ * `Headers` APPENDS as it fills from a record, so a declaration spelling `Accept` plus this
+ * function's `accept` arrives at the server as ONE combined value, and a stream-first server then
+ * negotiates against something neither side offered.
+ */
+function requestHeaders(ctx) {
+    const headers = lowerCasedKeys({ ...ctx.target.headers, ...ctx.target.credentialHeaders });
+    headers['content-type'] = 'application/json';
+    headers.accept = 'application/json, text/event-stream';
+    ctx.session.apply(headers);
+    return headers;
+}
+function lowerCasedKeys(headers) {
+    const out = {};
+    for (const [name, value] of Object.entries(headers))
+        out[name.toLowerCase()] = value;
+    return out;
+}
+/** Where a redirect points, or the reason the probe will not follow it. */
+function nextHop(ctx, from, response, carriesCredential) {
+    const location = response.headers.get('location');
+    const next = location ? resolveHop(from, location) : undefined;
+    if (!next) {
+        return {
+            ok: false,
+            failure: {
+                status: 'protocol_error',
+                error: `the endpoint answered ${response.status} with no usable Location header`,
+            },
+        };
+    }
+    // The hop is held to the SAME rule the declared url is: an https endpoint that redirects a
+    // credential-bearing request onto cleartext is the one thing that rule exists to stop, and a
+    // redirect is the way a declaration that passed boot validation still gets there.
+    if (!isAllowedMcpHttpUrl(next)) {
+        return {
+            ok: false,
+            failure: {
+                status: 'protocol_error',
+                error: `the endpoint redirected to ${redact(next)}, which an MCP tool server may not be ` +
+                    `reached at (https, or plain http on loopback)`,
+            },
+        };
+    }
+    // A credential-bearing request stops at its own ORIGIN, matching the Web platform rather than
+    // exceeding it: fetch removes `Authorization` when a redirect crosses origins, so the agent's own
+    // MCP client reaches this hop unauthenticated and a probe that forwarded the token would both
+    // answer about a request no run makes and hand a workspace's credential to whatever the redirect
+    // names. Refused rather than followed credential-less, because the FIX is the declaration naming
+    // the final url, and a 401 from a stripped hop would name the token instead.
+    if (carriesCredential && !sameOrigin(ctx.target.url, next)) {
+        return {
+            ok: false,
+            failure: {
+                status: 'protocol_error',
+                error: `the endpoint redirected to ${redact(next)}, a different origin from the declared url, ` +
+                    `and the request carries a credential — declare the final url, because an agent's own ` +
+                    `MCP client reaches a cross-origin hop with the credential removed`,
+            },
+        };
+    }
+    return { ok: true, url: next };
+}
+function isRedirect(response) {
+    return response.status >= 300 && response.status < 400;
+}
+/**
+ * Whether two urls share an origin. An UNPARSEABLE url is never same-origin with anything, so the
+ * caller's refusal is what an unreadable hop reaches rather than a comparison of two undefineds.
+ */
+function sameOrigin(a, b) {
+    const left = originOf(a);
+    return left !== undefined && left === originOf(b);
+}
+function originOf(raw) {
+    try {
+        return new URL(raw).origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Absolutise a `Location` against the url it came from, or undefined when it is unparseable. */
+function resolveHop(from, location) {
+    try {
+        return new URL(location, from).toString();
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Read one JSON-RPC response frame out of whichever body shape arrived.
+ *
+ * A non-2xx is settled FIRST and as its own outcome. An MCP server refusing a call answers 200 with
+ * a JSON-RPC error, so a status outside 2xx means something other than the MCP layer answered — a
+ * gateway, an auth proxy, a wrong path — and reporting it as a protocol error would send the
+ * operator to look at the server's tool table instead of at the status.
+ */
+async function readFrame(ctx, response) {
+    if (!response.ok) {
+        const body = await bodyText(response);
+        return {
+            ok: false,
+            failure: {
+                status: 'http_error',
+                httpStatus: response.status,
+                // PREVIEWED, like every other quoted body: an auth proxy or a load balancer answers a 4xx
+                // with an HTML page, and this string is both rendered in a browser and logged. The status is
+                // the diagnosis; the body is a hint about which proxy answered.
+                error: redact(body ? `HTTP ${response.status}: ${preview(body)}` : `HTTP ${response.status}`),
+            },
+        };
+    }
+    const contentType = response.headers.get('content-type') ?? '';
+    const raw = contentType.includes('text/event-stream')
+        ? await firstSseData(response)
+        : await bodyText(response);
+    // An EMPTY body counts as unreadable rather than as JSON that fails to parse, so the prose names
+    // the missing body instead of quoting nothing.
+    if (raw === undefined || !raw.trim()) {
+        return {
+            ok: false,
+            failure: bodyFailure(ctx, 'the endpoint answered 200 with no readable body'),
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return {
+            ok: false,
+            failure: bodyFailure(ctx, `the endpoint answered 200 with a body that is not JSON: ${redact(preview(raw))}`),
+        };
+    }
+    // A BATCH response is a legal JSON-RPC shape and every request here is single, so a server that
+    // wraps its answer in an array is answering the one call we made. Unwrapped rather than refused.
+    const frame = Array.isArray(parsed) ? parsed[0] : parsed;
+    if (!isRecord(frame)) {
+        return {
+            ok: false,
+            failure: {
+                status: 'protocol_error',
+                error: 'the endpoint answered JSON that is not a frame',
+            },
+        };
+    }
+    return { ok: true, frame };
+}
+/**
+ * The failure to report for a body that yielded no frame.
+ *
+ * The DEADLINE is checked FIRST, because the one signal aborts the response stream as well as the
+ * request: a server that answers 200 and then stalls (an SSE stream that never completes an event, a
+ * body that stops mid-way) leaves a partial buffer behind, and calling that a `protocol_error` tells
+ * the operator "the url names something else" for what is a slow endpoint — the exact cause
+ * `unreachable` is documented to cover. A cause is the whole product here, so the two are kept
+ * apart even though the code reaches them through the same branch.
+ */
+function bodyFailure(ctx, protocolError) {
+    if (ctx.signal.aborted)
+        return { status: 'unreachable', error: timeoutText(ctx.timeoutMs) };
+    return { status: 'protocol_error', error: protocolError };
+}
+/** A whole body as text, bounded, or undefined when there was no body to read at all. */
+async function bodyText(response) {
+    const stream = response.body;
+    if (!stream) {
+        // A bodyless response is legitimate for a notification and a protocol fault for a request; the
+        // caller distinguishes, so this stays apart from an EMPTY body, which read fine and said nothing.
+        return undefined;
+    }
+    return readBounded(stream, () => false);
+}
+/**
+ * The first SSE `data:` payload in the stream.
+ *
+ * Read INCREMENTALLY and stopped at the first complete event rather than draining to the end,
+ * because a stream-first server keeps the stream open after answering: `.text()` on it waits for the
+ * deadline to close a connection that has already delivered what was asked for.
+ */
+async function firstSseData(response) {
+    const stream = response.body;
+    if (!stream)
+        return undefined;
+    return extractSseData(await readBounded(stream, (buffered) => extractSseData(buffered) !== undefined));
+}
+/**
+ * Read `stream` until `done(buffered)` says enough arrived, the stream ends, or the character ceiling
+ * is hit. Cancels what it did not read, so a stream held open costs no connection past this point.
+ *
+ * Always a string, never undefined: a read that failed part-way still returns what arrived, and
+ * whether that is usable is the caller's question (`bodyFailure` turns an empty one into the right
+ * cause, deadline included).
+ */
+async function readBounded(stream, done) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let buffered = '';
+    try {
+        for (;;) {
+            const chunk = await reader.read();
+            if (chunk.done)
+                break;
+            buffered += decoder.decode(chunk.value, { stream: true });
+            if (buffered.length > MAX_RESPONSE_BYTES || done(buffered))
+                break;
+        }
+    }
+    catch {
+        // A body that failed mid-read: whatever arrived is what the caller gets to parse, and an empty
+        // buffer becomes its own "no readable body" outcome above.
+    }
+    finally {
+        // silent-catch-ok: cancelling a reader that has already ended or errored is the normal path
+        // here, and a throw out of `finally` would replace the outcome the caller needs with noise.
+        await reader.cancel().catch(() => { });
+    }
+    // Flush the decoder's pending bytes, so a multi-byte character split across the LAST chunk lands
+    // in the buffer (as itself, or as the replacement character a truncated sequence deserves) rather
+    // than being dropped silently.
+    return buffered + decoder.decode();
+}
+/**
+ * The `data:` payload of the first COMPLETE event in an SSE buffer, or undefined while none has
+ * arrived yet. An event ends at a blank line, which is what makes "complete" decidable mid-stream;
+ * a `data:` line with nothing after it may still be half a payload.
+ */
+function extractSseData(buffered) {
+    const normalised = buffered.replaceAll('\r\n', '\n');
+    const terminator = /\n\n/.exec(normalised);
+    if (!terminator)
+        return undefined;
+    const event = normalised.slice(0, terminator.index);
+    // Multi-line `data:` fields concatenate with newlines, per the SSE spec.
+    const data = event
+        .split('\n')
+        .filter((line) => line.startsWith('data:'))
+        .map((line) => line.slice('data:'.length).replace(/^ /, ''));
+    return data.length ? data.join('\n') : undefined;
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** A thrown value as prose. `AbortSignal.timeout` rejects with a bare `TimeoutError`, so name it. */
+function errorText(error, timeoutMs) {
+    if (error instanceof Error) {
+        return error.name === 'TimeoutError'
+            ? timeoutText(timeoutMs)
+            : `${error.name}: ${error.message}`;
+    }
+    return String(error);
+}
+/**
+ * The deadline in prose, authored ONCE: the same expiry is reachable as a rejected request and as an
+ * aborted body read, and two spellings of one cause read like two causes.
+ */
+function timeoutText(timeoutMs) {
+    return `the endpoint did not answer within ${timeoutMs / 1000}s`;
+}
+/** First line and a bounded prefix, for prose that quotes an unexpected body. */
+function preview(raw) {
+    const oneLine = raw.replaceAll(/\s+/g, ' ').trim();
+    return oneLine.length > 200 ? `${oneLine.slice(0, 200)}…` : oneLine;
+}
+/**
+ * Every string this module returns goes through here.
+ *
+ * A fetch failure routinely echoes the request url, and this request's url may carry userinfo while
+ * its headers carry a resolved credential; a 4xx body from an auth proxy echoes tokens as a matter
+ * of routine. The result is rendered in a browser and logged, so the scrub happens at the emit site
+ * rather than being left to whoever consumes it.
+ */
+function redact(text) {
+    return redactSecrets(text) ?? '';
+}
+//# sourceMappingURL=mcpProbe.js.map

package/dist/modules/toolServers/mcpProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpProbe.js","sourceRoot":"","sources":["../../../src/modules/toolServers/mcpProbe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAElF,8EAA8E;AAC9E,mGAAmG;AACnG,qGAAqG;AACrG,EAAE;AACF,qGAAqG;AACrG,gGAAgG;AAChG,+FAA+F;AAC/F,8FAA8F;AAC9F,oGAAoG;AACpG,mGAAmG;AACnG,kBAAkB;AAClB,EAAE;AACF,qGAAqG;AACrG,iDAAiD;AACjD,EAAE;AACF,8FAA8F;AAC9F,mGAAmG;AACnG,4EAA4E;AAC5E,qGAAqG;AACrG,iGAAiG;AACjG,iEAAiE;AACjE,+FAA+F;AAC/F,mGAAmG;AACnG,oGAAoG;AACpG,oGAAoG;AACpG,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,iGAAiG;AACjG,kGAAkG;AAClG,gGAAgG;AAChG,4BAA4B;AAC5B,mGAAmG;AACnG,2FAA2F;AAC3F,EAAE;AACF,oGAAoG;AACpG,wDAAwD;AACxD,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAG,YAAY,CAAA;AAE3C,kGAAkG;AAClG,MAAM,aAAa,GAAG,CAAC,CAAA;AAEvB;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,SAAS,CAAA;AA+CpC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAsB,EACtB,IAAI,GAAiB,EAAE;IAEvB,gGAAgG;IAChG,gGAAgG;IAChG,gEAAgE;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,oBAAoB,CAAA;IACxD,MAAM,GAAG,GAAa;QACpB,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK;QAC5B,MAAM;QACN,OAAO,EAAE,IAAI,cAAc,EAAE;QAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,SAAS;KACV,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC,CAAA;IACjF,kGAAkG;IAClG,iGAAiG;IACjG,8FAA8F;IAC9F,2DAA2D;IAC3D,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;IACrB,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,gBAAgB,CAAC,GAAa,EAAE,QAAgB;IAC7D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE;QACpC,EAAE,EAAE,CAAC;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,gBAAgB,EAAE;KAC3B,CAAC,CAAA;IACF,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,OAAO,CAAA;IAE3C,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,KAAK,EACH,wFAAwF;gBACxF,6CAA6C;SAChD,CAAA;IACH,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAA;IAExD,4FAA4F;IAC5F,mGAAmG;IACnG,oEAAoE;IACpE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAA;IAC/D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAE7B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,OAAO,CAAA;IACrC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,eAAe,EAAE,sBAAsB;QACvC,YAAY,EAAE,EAAE;QAChB,UAAU,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,GAAG,EAAE;KACpE,CAAA;AACH,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CACpB,MAA+B;IAE/B,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAA;IAChG,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACxE,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC/C,OAAO;QACL,eAAe;QACf,UAAU,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC1D,4FAA4F;QAC5F,4FAA4F;QAC5F,aAAa,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;KACpE,CAAA;AACH,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,cAAc;IAClB,SAAS,CAAS;IAClB,eAAe,CAAS;IACxB;;;OAGG;IACH,QAAQ,CAAS;IAEjB,KAAK,CAAC,OAA+B;QACnC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,SAAS,CAAA;QAC9D,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,eAAe,CAAA;IAClF,CAAC;IAED,KAAK,CAAC,QAAkB,EAAE,GAAW;QACnC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACrD,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAA;QACvB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAA;IACrB,CAAC;CACF;AAED,yDAAyD;AACzD,KAAK,UAAU,SAAS,CACtB,WAAqB,EACrB,QAAgB;IAIhB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,MAA0B,CAAA;IAC9B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE;YACzC,EAAE,EAAE,IAAI,GAAG,CAAC;YACZ,MAAM,EAAE,YAAY;YACpB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAA;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE;oBACP,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE,sDAAsD;iBAC9D;aACF,CAAA;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAA;QACrC,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;QAC5D,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACzD,CAAC;IACD,iGAAiG;IACjG,0FAA0F;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAC7C,CAAC;AAED,6CAA6C;AAC7C,KAAK,UAAU,QAAQ,CACrB,GAAa,EACb,OAAyE;IAEzE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACzD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACxB,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAA;QAC3F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,+BAA+B,MAAM,CAAC,MAAM,CAAC,EAAE;aACxE;SACF,CAAA;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,4CAA4C;aACrE;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;AAC3C,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,MAAM,CAAC,GAAa,EAAE,MAAc;IACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACxD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,CAAA;IACjC,iGAAiG;IACjG,+CAA+C;IAC/C,gGAAgG;IAChG,oFAAoF;IACpF,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAClD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CAAC,GAAa;IACrC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,OAAO,CAAA;IAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAM;IACnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC3C,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;YAC5B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAA;QACF,0FAA0F;QAC1F,4BAA4B;QAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,4FAA4F;QAC5F,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,IAAI,CACjB,GAAa,EACb,KAA8B;IAE9B,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAA;IACxB,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9E,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QACxC,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACzB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAA;QACjE,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAA;QAC3B,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACjB,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE;YACP,MAAM,EAAE,gBAAgB;YACxB,KAAK,EAAE,qCAAqC,aAAa,QAAQ;SAClE;KACF,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,IAAI,CACjB,GAAa,EACb,GAAW,EACX,KAA8B;IAE9B,IAAI,CAAC;QACH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC3B,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC;SACH,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+FAA+F;QAC/F,gGAAgG;QAChG,8EAA8E;QAC9E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE;SACnF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,GAAa;IACnC,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAC1F,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;IAC5C,OAAO,CAAC,MAAM,GAAG,qCAAqC,CAAA;IACtD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1B,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,OAA+B;IACrD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAA;IACpF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,2EAA2E;AAC3E,SAAS,OAAO,CACd,GAAa,EACb,IAAY,EACZ,QAAkB,EAClB,iBAA0B;IAE1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,yBAAyB,QAAQ,CAAC,MAAM,iCAAiC;aACjF;SACF,CAAA;IACH,CAAC;IACD,2FAA2F;IAC3F,6FAA6F;IAC7F,kFAAkF;IAClF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EACH,8BAA8B,MAAM,CAAC,IAAI,CAAC,wCAAwC;oBAClF,+CAA+C;aAClD;SACF,CAAA;IACH,CAAC;IACD,8FAA8F;IAC9F,kGAAkG;IAClG,8FAA8F;IAC9F,iGAAiG;IACjG,iGAAiG;IACjG,6EAA6E;IAC7E,IAAI,iBAAiB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EACH,8BAA8B,MAAM,CAAC,IAAI,CAAC,8CAA8C;oBACxF,uFAAuF;oBACvF,mEAAmE;aACtE;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB;IACpC,OAAO,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IACxB,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,SAAS,UAAU,CAAC,IAAY,EAAE,QAAgB;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,SAAS,CACtB,GAAa,EACb,QAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY;gBACpB,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,0FAA0F;gBAC1F,6FAA6F;gBAC7F,gEAAgE;gBAChE,KAAK,EAAE,MAAM,CACX,IAAI,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAC/E;aACF;SACF,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IAC9D,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnD,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC;QAC9B,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC5B,iGAAiG;IACjG,+CAA+C;IAC/C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,iDAAiD,CAAC;SAC7E,CAAA;IACH,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,WAAW,CAClB,GAAG,EACH,2DAA2D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAClF;SACF,CAAA;IACH,CAAC;IACD,gGAAgG;IAChG,iGAAiG;IACjG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IACxD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,gDAAgD;aACxD;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,WAAW,CAAC,GAAa,EAAE,aAAqB;IACvD,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAA;IAC3F,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,aAAa,EAAE,CAAA;AAC3D,CAAC;AAED,yFAAyF;AACzF,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAA;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,+FAA+F;QAC/F,kGAAkG;QAClG,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAA;IAC5B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,cAAc,CACnB,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,CAChF,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,WAAW,CACxB,MAAkC,EAClC,IAAmC;IAEnC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;IACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YACjC,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAK;YACrB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,kBAAkB,IAAI,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAK;QACnE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+FAA+F;QAC/F,2DAA2D;IAC7D,CAAC;YAAS,CAAC;QACT,4FAA4F;QAC5F,4FAA4F;QAC5F,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACvC,CAAC;IACD,iGAAiG;IACjG,kGAAkG;IAClG,+BAA+B;IAC/B,OAAO,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAA;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IACnD,yEAAyE;IACzE,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,qGAAqG;AACrG,SAAS,SAAS,CAAC,KAAc,EAAE,SAAiB;IAClD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,IAAI,KAAK,cAAc;YAClC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;YACxB,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAA;IACvC,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,sCAAsC,SAAS,GAAG,IAAI,GAAG,CAAA;AAClE,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAClD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;AAClC,CAAC"}

package/dist/modules/toolServers/probeToolServer.d.ts

@@ -0,0 +1,30 @@
+import type { Logger, ToolSecretResolver } from '@cat-factory/kernel';
+import type { ToolServerProbeResult } from '@cat-factory/contracts';
+import type { AgentKindRegistry } from '@cat-factory/agents';
+import { type McpProbeDeps } from './mcpProbe.js';
+export interface ProbeToolServerInput {
+    agentKindRegistry: AgentKindRegistry;
+    workspaceId: string;
+    /** The server id, from the request path. */
+    serverId: string;
+    /**
+     * The facade's composed capability-credential chain — the SAME resolver the container executor
+     * dispatches with. Absent ⇒ the facade wired none, so a server declaring a required credential is
+     * reported as `credentials_missing` rather than probed blind, which is the disposition the dispatch
+     * path already applies to the same state.
+     */
+    resolveToolSecrets?: ToolSecretResolver;
+    logger?: Logger;
+    /** Injected for tests; forwarded to the protocol client. */
+    probe?: McpProbeDeps;
+}
+/**
+ * Probe one server. Never throws for a PROBE outcome — a failure is data, because the operator is
+ * asking a diagnostic question and an exception answers it with nothing.
+ *
+ * It does throw for a REFUSAL: an id no kind declares and nothing registered is a 404, not a status.
+ * A verdict would be a lie there ("unreachable" for a server that does not exist), and the SPA's
+ * list came from the same registry, so a 404 means the deployment changed under the operator.
+ */
+export declare function probeToolServer(input: ProbeToolServerInput): Promise<ToolServerProbeResult>;
+//# sourceMappingURL=probeToolServer.d.ts.map