@kryptosai/mcp-observatory 1.28.2 → 1.29.1

package/dist/src/tools/lock-verify.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const name = "lock_verify";
+export declare const description = "Verify that live MCP servers still match a previously saved lock file. Detects schema drift, added/removed tools, and breaking changes.";
+export declare const schema: {
+    config: z.ZodOptional<z.ZodString>;
+};
+export declare function handler({ config }: {
+    config?: string;
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/src/tools/lock-verify.js

@@ -0,0 +1,47 @@
+import { z } from "zod";
+import { scanForTargets } from "../discovery.js";
+import { readLockFile, verifyAgainstLock } from "../lockfile.js";
+import { runTarget } from "../runner.js";
+import { logRequest } from "./helpers.js";
+export const name = "lock_verify";
+export const description = "Verify that live MCP servers still match a previously saved lock file. Detects schema drift, added/removed tools, and breaking changes.";
+export const schema = {
+    config: z.string().optional().describe("Path to MCP config file."),
+};
+export async function handler({ config }) {
+    const startMs = Date.now();
+    try {
+        const lockFile = await readLockFile();
+        const targets = await scanForTargets(config);
+        const results = [];
+        let anyFailed = false;
+        for (const t of targets) {
+            const lockEntry = lockFile.servers.find(s => s.targetId === t.config.targetId);
+            if (!lockEntry)
+                continue;
+            const artifact = await runTarget(t.config);
+            const result = verifyAgainstLock(lockEntry, artifact);
+            if (result.passed) {
+                results.push(`\u2713 ${t.config.targetId}: no drift`);
+            }
+            else {
+                anyFailed = true;
+                results.push(`\u2717 ${t.config.targetId}: ${result.drift.length} changes`);
+                for (const d of result.drift) {
+                    results.push(`  - ${d.category}: ${d.name} \u2014 ${d.change}`);
+                }
+            }
+        }
+        if (results.length === 0) {
+            results.push("No servers in lock file match discovered targets.");
+        }
+        logRequest("lock_verify", startMs, anyFailed);
+        return { content: [{ type: "text", text: results.join("\n") }] };
+    }
+    catch (error) {
+        const msg = error instanceof Error ? error.message : String(error);
+        logRequest("lock_verify", startMs, true);
+        return { content: [{ type: "text", text: `Lock verify failed: ${msg}` }], isError: true };
+    }
+}
+//# sourceMappingURL=lock-verify.js.map

package/dist/src/tools/lock-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-verify.js","sourceRoot":"","sources":["../../../src/tools/lock-verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAC;AAClC,MAAM,CAAC,MAAM,WAAW,GAAG,yIAAyI,CAAC;AACrK,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;CACnE,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,MAAM,EAAuB;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/E,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,YAAY,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC,CAAC;gBAC5E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC7B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACpE,CAAC;QAED,UAAU,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,UAAU,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACrG,CAAC;AACH,CAAC"}

package/dist/src/tools/record.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+export declare const name = "record";
+export declare const description = "Use this to capture a baseline of a working MCP server. Records all JSON-RPC traffic to a cassette file that can be replayed offline (no server needed) or used to verify future versions haven't broken anything. Like VCR for MCP.";
+export declare const schema: {
+    command: z.ZodString;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+export declare function handler({ command, args }: {
+    command: string;
+    args?: string[];
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/src/tools/record.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+import { defaultCassettesDirectory, saveCassette } from "../cassette.js";
+import { runTargetRecording } from "../runner.js";
+import { errorMessage } from "../utils/errors.js";
+import { validateArgs, validateCommand } from "../utils/security.js";
+import { formatRun, logRequest } from "./helpers.js";
+export const name = "record";
+export const description = "Use this to capture a baseline of a working MCP server. Records all JSON-RPC traffic to a cassette file that can be replayed offline (no server needed) or used to verify future versions haven't broken anything. Like VCR for MCP.";
+export const schema = {
+    command: z.string().describe("The command to launch the MCP server."),
+    args: z.array(z.string()).optional().describe("Additional arguments for the command."),
+};
+export async function handler({ command, args }) {
+    const startMs = Date.now();
+    try {
+        validateCommand(command);
+        validateArgs(args ?? []);
+        const target = {
+            targetId: command,
+            adapter: "local-process",
+            command,
+            args: args ?? [],
+            timeoutMs: 15_000,
+        };
+        const { artifact, cassetteEntries } = await runTargetRecording(target, { invokeTools: true });
+        if (!cassetteEntries || cassetteEntries.length === 0) {
+            return { content: [{ type: "text", text: "No traffic recorded." }], isError: true };
+        }
+        const cassette = {
+            version: 1,
+            targetId: target.targetId,
+            recordedAt: new Date().toISOString(),
+            transport: "stdio",
+            entries: cassetteEntries,
+        };
+        const cassettePath = await saveCassette(cassette, defaultCassettesDirectory());
+        logRequest("record", startMs);
+        return {
+            content: [{ type: "text", text: `${formatRun(artifact)}\n\nCassette saved: ${cassettePath}\n${cassetteEntries.length} entries recorded.\n\nReplay offline: replay({ cassette: "${cassettePath}" })\nVerify live: verify({ cassette: "${cassettePath}", command: "${command}" })` }],
+        };
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        logRequest("record", startMs, true);
+        return { content: [{ type: "text", text: `Error recording: ${msg}` }], isError: true };
+    }
+}
+//# sourceMappingURL=record.js.map

package/dist/src/tools/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../../../src/tools/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,sOAAsO,CAAC;AAClQ,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACvF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAwC;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,eAAwB;YACjC,OAAO;YACP,IAAI,EAAE,IAAI,IAAI,EAAE;YAChB,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9F,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC/F,CAAC;QAED,MAAM,QAAQ,GAAa;YACzB,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,eAAe;SACzB,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,uBAAuB,YAAY,KAAK,eAAe,CAAC,MAAM,6DAA6D,YAAY,0CAA0C,YAAY,gBAAgB,OAAO,MAAM,EAAE,CAAC;SAC7R,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/src/tools/replay.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const name = "replay";
+export declare const description = "Use this to test a server without running it. Replays a previously recorded cassette offline and runs all checks against the recorded responses. Useful in CI or when the live server is unavailable.";
+export declare const schema: {
+    cassette: z.ZodString;
+};
+export declare function handler({ cassette: cassettePath }: {
+    cassette: string;
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/src/tools/replay.js

@@ -0,0 +1,54 @@
+import { z } from "zod";
+import { defaultCassettesDirectory, loadCassette } from "../cassette.js";
+import { TOOL_VERSION } from "../version.js";
+import { errorMessage } from "../utils/errors.js";
+import { validatePath } from "../utils/security.js";
+import { logRequest } from "./helpers.js";
+export const name = "replay";
+export const description = "Use this to test a server without running it. Replays a previously recorded cassette offline and runs all checks against the recorded responses. Useful in CI or when the live server is unavailable.";
+export const schema = {
+    cassette: z.string().describe("Path to a cassette JSON file."),
+};
+export async function handler({ cassette: cassettePath }) {
+    const startMs = Date.now();
+    try {
+        const cassettesDir = defaultCassettesDirectory();
+        validatePath(cassettePath, cassettesDir);
+        const { ReplayTransport } = await import("../transport/replay-transport.js");
+        const { Client } = await import("@modelcontextprotocol/sdk/client/index.js");
+        const { runToolsCheck } = await import("../checks/tools.js");
+        const { runPromptsCheck } = await import("../checks/prompts.js");
+        const { runResourcesCheck } = await import("../checks/resources.js");
+        const { runToolsInvokeCheck } = await import("../checks/tools-invoke.js");
+        const cassette = await loadCassette(cassettePath);
+        const replayTransport = new ReplayTransport(cassette.entries);
+        const client = new Client({ name: "mcp-observatory", version: TOOL_VERSION }, { capabilities: {} });
+        await client.connect(replayTransport);
+        const checkContext = {
+            client,
+            serverCapabilities: client.getServerCapabilities(),
+            target: { targetId: cassette.targetId, adapter: "local-process", command: "replay", args: [] },
+            timeoutMs: 10_000,
+            stderrLines: [],
+        };
+        const checks = [
+            (await runToolsCheck(checkContext)).result,
+            (await runPromptsCheck(checkContext)).result,
+            (await runResourcesCheck(checkContext)).result,
+            (await runToolsInvokeCheck(checkContext)).result,
+        ];
+        await client.close();
+        const lines = [`Replay of ${cassette.targetId} (${cassette.entries.length} entries):\n`];
+        for (const check of checks) {
+            lines.push(`  [${check.status}] ${check.id}: ${check.message}`);
+        }
+        logRequest("replay", startMs);
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        logRequest("replay", startMs, true);
+        return { content: [{ type: "text", text: `Error replaying: ${msg}` }], isError: true };
+    }
+}
+//# sourceMappingURL=replay.js.map

package/dist/src/tools/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../../src/tools/replay.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,uMAAuM,CAAC;AACnO,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CAC/D,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAwB;IAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;QACjD,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;QAC7E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC7E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC7D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACrE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAE1E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACpG,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAG;YACnB,MAAM;YACN,kBAAkB,EAAE,MAAM,CAAC,qBAAqB,EAAE;YAClD,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAc,EAAE;YACnH,SAAS,EAAE,MAAM;YACjB,WAAW,EAAE,EAAc;SAC5B,CAAC;QAEF,MAAM,MAAM,GAAG;YACb,CAAC,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YAC1C,CAAC,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YAC5C,CAAC,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;YAC9C,CAAC,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM;SACjD,CAAC;QACF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,KAAK,GAAG,CAAC,aAAa,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,CAAC;QACzF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/src/tools/scan.d.ts

@@ -0,0 +1,18 @@
+import { z } from "zod";
+export declare const name = "scan";
+export declare const description = "Use this to check if all your MCP servers are healthy. Auto-discovers servers from Claude config files, connects to each one, and verifies tools/prompts/resources respond correctly. Use with deep=true to also invoke tools and confirm they actually execute. Returns pass/fail status for every server.";
+export declare const schema: {
+    config: z.ZodOptional<z.ZodString>;
+    deep: z.ZodOptional<z.ZodBoolean>;
+    security: z.ZodOptional<z.ZodBoolean>;
+};
+export declare function handler({ config, deep, security }: {
+    config?: string;
+    deep?: boolean;
+    security?: boolean;
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+}>;

package/dist/src/tools/scan.js

@@ -0,0 +1,43 @@
+import { z } from "zod";
+import { scanForTargets } from "../discovery.js";
+import { runTarget } from "../runner.js";
+import { errorMessage } from "../utils/errors.js";
+import { formatRun, logRequest } from "./helpers.js";
+export const name = "scan";
+export const description = "Use this to check if all your MCP servers are healthy. Auto-discovers servers from Claude config files, connects to each one, and verifies tools/prompts/resources respond correctly. Use with deep=true to also invoke tools and confirm they actually execute. Returns pass/fail status for every server.";
+export const schema = {
+    config: z.string().optional().describe("Path to a specific MCP config file. If omitted, scans default locations."),
+    deep: z.boolean().optional().describe("Also invoke safe tools to verify they execute."),
+    security: z.boolean().optional().describe("Run security analysis on tool schemas."),
+};
+export async function handler({ config, deep, security }) {
+    const startMs = Date.now();
+    const targets = await scanForTargets(config);
+    if (targets.length === 0) {
+        logRequest("scan", startMs);
+        return { content: [{ type: "text", text: "No MCP server configs found." }] };
+    }
+    const opts = {};
+    if (deep)
+        opts.invokeTools = true;
+    if (security)
+        opts.securityCheck = true;
+    const lines = [`Discovered ${targets.length} server(s):\n`];
+    for (const t of targets) {
+        if (t.config.targetId === "mcp-observatory")
+            continue;
+        lines.push(`--- ${t.config.targetId} (from ${t.source}) ---`);
+        try {
+            const artifact = await runTarget(t.config, opts);
+            lines.push(formatRun(artifact));
+        }
+        catch (error) {
+            const msg = errorMessage(error);
+            lines.push(`  Error: ${msg}`);
+        }
+        lines.push("");
+    }
+    logRequest("scan", startMs);
+    return { content: [{ type: "text", text: lines.join("\n") }] };
+}
+//# sourceMappingURL=scan.js.map

package/dist/src/tools/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../../src/tools/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC;AAC3B,MAAM,CAAC,MAAM,WAAW,GAAG,6SAA6S,CAAC;AACzU,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0EAA0E,CAAC;IAClH,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACvF,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;CACpF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAA2D;IAC/G,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,EAAE,CAAC;IACxF,CAAC;IAED,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,IAAI;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAClC,IAAI,QAAQ;QAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAExC,MAAM,KAAK,GAAa,CAAC,cAAc,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,iBAAiB;YAAE,SAAS;QAEtD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,UAAU,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC"}

package/dist/src/tools/score-server.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+export declare const name = "score_server";
+export declare const description = "Use this to get a quick health grade for an MCP server. Runs all checks (capabilities, tool invocation, security) and returns a 0-100 score with A-F grade and detailed breakdown across protocol compliance, schema quality, security, reliability, and performance.";
+export declare const schema: {
+    command: z.ZodString;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+export declare function handler({ command, args }: {
+    command: string;
+    args?: string[];
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+}>;

package/dist/src/tools/score-server.js

@@ -0,0 +1,53 @@
+import { z } from "zod";
+import { runTarget } from "../runner.js";
+import { defaultRunsDirectory, writeRunArtifact } from "../storage.js";
+import { errorMessage } from "../utils/errors.js";
+import { validateArgs, validateCommand } from "../utils/security.js";
+import { formatRun, logRequest } from "./helpers.js";
+export const name = "score_server";
+export const description = "Use this to get a quick health grade for an MCP server. Runs all checks (capabilities, tool invocation, security) and returns a 0-100 score with A-F grade and detailed breakdown across protocol compliance, schema quality, security, reliability, and performance.";
+export const schema = {
+    command: z.string().describe("The command to launch the MCP server."),
+    args: z.array(z.string()).optional().describe("Additional arguments for the command."),
+};
+export async function handler({ command, args }) {
+    const startMs = Date.now();
+    try {
+        validateCommand(command);
+        validateArgs(args ?? []);
+        const target = {
+            targetId: command,
+            adapter: "local-process",
+            command,
+            args: args ?? [],
+            timeoutMs: 15_000,
+        };
+        const artifact = await runTarget(target, { invokeTools: true, securityCheck: true });
+        const outDir = defaultRunsDirectory();
+        await writeRunArtifact(artifact, outDir);
+        const score = artifact.healthScore;
+        if (!score) {
+            logRequest("score_server", startMs);
+            return { content: [{ type: "text", text: `${formatRun(artifact)}\n\nCould not compute health score.` }] };
+        }
+        const lines = [
+            `MCP Health Score: ${score.overall}/100 (${score.grade})`,
+            "",
+        ];
+        for (const dim of score.dimensions) {
+            lines.push(`  ${dim.name}: ${dim.score}/100 (weight: ${Math.round(dim.weight * 100)}%)`);
+            for (const detail of dim.details) {
+                lines.push(`    → ${detail}`);
+            }
+        }
+        lines.push("", formatRun(artifact));
+        logRequest("score_server", startMs);
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        logRequest("score_server", startMs, true);
+        return { content: [{ type: "text", text: `Error scoring server: ${msg}` }], isError: true };
+    }
+}
+//# sourceMappingURL=score-server.js.map

package/dist/src/tools/score-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"score-server.js","sourceRoot":"","sources":["../../../src/tools/score-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,CAAC,MAAM,IAAI,GAAG,cAAc,CAAC;AACnC,MAAM,CAAC,MAAM,WAAW,GAAG,uQAAuQ,CAAC;AACnS,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACvF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAwC;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,eAAwB;YACjC,OAAO;YACP,IAAI,EAAE,IAAI,IAAI,EAAE;YAChB,SAAS,EAAE,MAAM;SAClB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACtC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,qCAAqC,EAAE,CAAC,EAAE,CAAC;QACrH,CAAC;QAED,MAAM,KAAK,GAAa;YACtB,qBAAqB,KAAK,CAAC,OAAO,SAAS,KAAK,CAAC,KAAK,GAAG;YACzD,EAAE;SACH,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YACzF,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEpC,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,UAAU,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yBAAyB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvG,CAAC;AACH,CAAC"}

package/dist/src/tools/suggest-servers.d.ts

@@ -0,0 +1,21 @@
+import { z } from "zod";
+export declare const name = "suggest_servers";
+export declare const description = "Use this when setting up a project or wondering what MCP servers to add. Scans the working directory for languages, frameworks, databases, and cloud providers, lists currently configured servers, and cross-references the MCP registry to recommend servers you're missing.";
+export declare const schema: {
+    cwd: z.ZodOptional<z.ZodString>;
+};
+export declare function handler({ cwd }: {
+    cwd?: string;
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/src/tools/suggest-servers.js

@@ -0,0 +1,114 @@
+import path from "node:path";
+import { z } from "zod";
+import { scanForTargets } from "../discovery.js";
+import { detectEnvironment } from "../environment.js";
+import { errorMessage } from "../utils/errors.js";
+import { logRequest } from "./helpers.js";
+export const name = "suggest_servers";
+export const description = "Use this when setting up a project or wondering what MCP servers to add. Scans the working directory for languages, frameworks, databases, and cloud providers, lists currently configured servers, and cross-references the MCP registry to recommend servers you're missing.";
+export const schema = {
+    cwd: z.string().optional().describe("Working directory to scan for environment signals. Defaults to process.cwd()."),
+};
+export async function handler({ cwd }) {
+    const startMs = Date.now();
+    const workDir = cwd ?? process.cwd();
+    const resolvedDir = path.resolve(workDir);
+    const cwdRoot = path.resolve(process.cwd());
+    if (!resolvedDir.startsWith(cwdRoot + path.sep) && resolvedDir !== cwdRoot) {
+        logRequest("suggest_servers", startMs, true);
+        return { content: [{ type: "text", text: `Path "${cwd}" resolves outside the working directory.` }], isError: true };
+    }
+    const sections = [];
+    try {
+        const targets = await scanForTargets();
+        if (targets.length > 0) {
+            const serverLines = targets.map((t) => {
+                const id = t.config.targetId;
+                const detail = t.config.adapter === "http"
+                    ? `(HTTP: ${t.config.url})`
+                    : `(command: ${t.config.command} ${t.config.args.join(" ")})`;
+                return `  - ${id} ${detail} [source: ${t.source}]`;
+            });
+            sections.push(`## Currently Configured MCP Servers\n${serverLines.join("\n")}`);
+        }
+        else {
+            sections.push("## Currently Configured MCP Servers\nNone found.");
+        }
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        sections.push(`## Currently Configured MCP Servers\nError scanning: ${msg}`);
+    }
+    try {
+        const env = await detectEnvironment(workDir);
+        const envLines = [];
+        if (env.languages.length > 0)
+            envLines.push(`  Languages: ${env.languages.join(", ")}`);
+        if (env.frameworks.length > 0)
+            envLines.push(`  Frameworks: ${env.frameworks.join(", ")}`);
+        if (env.databases.length > 0)
+            envLines.push(`  Databases: ${env.databases.join(", ")}`);
+        if (env.cloud.length > 0)
+            envLines.push(`  Cloud: ${env.cloud.join(", ")}`);
+        if (env.cicd.length > 0)
+            envLines.push(`  CI/CD: ${env.cicd.join(", ")}`);
+        if (env.services.length > 0)
+            envLines.push(`  Services (detected from .env keys): ${env.services.join(", ")}`);
+        if (envLines.length > 0) {
+            sections.push(`## Detected Environment (${workDir})\n${envLines.join("\n")}`);
+        }
+        else {
+            sections.push(`## Detected Environment (${workDir})\nNo recognizable project signals found.`);
+        }
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        sections.push(`## Detected Environment\nError: ${msg}`);
+    }
+    try {
+        const registryUrl = "https://registry.modelcontextprotocol.io/v0/servers";
+        const response = await fetch(registryUrl, {
+            signal: AbortSignal.timeout(10_000),
+            headers: { "Accept": "application/json" },
+        });
+        if (response.ok) {
+            const data = await response.json();
+            function formatRegistryEntry(entry) {
+                const srv = (typeof entry["server"] === "object" && entry["server"] !== null
+                    ? entry["server"] : entry);
+                const rawName = srv["name"] ?? entry["name"] ?? entry["id"];
+                const name = typeof rawName === "string" ? rawName : "unknown";
+                const rawDesc = srv["description"] ?? entry["description"];
+                const desc = typeof rawDesc === "string" ? ` — ${rawDesc}` : "";
+                return `  - ${name}${desc}`;
+            }
+            if (Array.isArray(data)) {
+                const entries = data.slice(0, 50);
+                const registryLines = entries.map(formatRegistryEntry);
+                sections.push(`## MCP Registry (${String(entries.length)} of ${String(data.length)} servers shown)\n${registryLines.join("\n")}`);
+            }
+            else if (typeof data === "object" && data !== null) {
+                const obj = data;
+                const servers = obj["servers"] ?? obj["results"] ?? obj["items"];
+                if (Array.isArray(servers)) {
+                    const entries = servers.slice(0, 50);
+                    const registryLines = entries.map(formatRegistryEntry);
+                    sections.push(`## MCP Registry (${String(entries.length)} of ${String(servers.length)} servers shown)\n${registryLines.join("\n")}`);
+                }
+                else {
+                    sections.push(`## MCP Registry\nRegistry returned data but in an unexpected format. Keys: ${Object.keys(obj).join(", ")}`);
+                }
+            }
+        }
+        else {
+            sections.push(`## MCP Registry\nRegistry returned HTTP ${String(response.status)}. The listing endpoint may not be publicly available.`);
+        }
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        sections.push(`## MCP Registry\nCould not reach registry: ${msg}`);
+    }
+    logRequest("suggest_servers", startMs);
+    return { content: [{ type: "text", text: sections.join("\n\n") }] };
+}
+//# sourceMappingURL=suggest-servers.js.map

package/dist/src/tools/suggest-servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suggest-servers.js","sourceRoot":"","sources":["../../../src/tools/suggest-servers.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,CAAC,MAAM,IAAI,GAAG,iBAAiB,CAAC;AACtC,MAAM,CAAC,MAAM,WAAW,GAAG,gRAAgR,CAAC;AAC5S,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+EAA+E,CAAC;CACrH,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,GAAG,EAAoB;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC3E,UAAU,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,SAAS,GAAG,2CAA2C,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChI,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM;oBACxC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG;oBAC3B,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAChE,OAAO,OAAO,EAAE,IAAI,MAAM,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,wCAAwC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,wDAAwD,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3F,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,yCAAyC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/G,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,4BAA4B,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,4BAA4B,OAAO,2CAA2C,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,qDAAqD,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YACxC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;YACnC,OAAO,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;SAC1C,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE5C,SAAS,mBAAmB,CAAC,KAA8B;gBACzD,MAAM,GAAG,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI;oBAC1E,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAA4B,CAAC;gBACxD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;gBAC3D,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,OAAO,OAAO,IAAI,GAAG,IAAI,EAAE,CAAC;YAC9B,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAmC,CAAC;gBACpE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpI,CAAC;iBAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACrD,MAAM,GAAG,GAAG,IAA+B,CAAC;gBAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,MAAM,OAAO,GAAI,OAA0C,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACzE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBACvD,QAAQ,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvI,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,8EAA8E,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC7H,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,2CAA2C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,8CAA8C,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC"}

package/dist/src/tools/verify-tool.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+export declare const name = "verify";
+export declare const description = "Use this after updating a server to confirm nothing broke. Connects to the live server, sends the same requests from a recorded cassette, and compares responses. Reports exactly what changed \u2014 added tools, removed parameters, different response shapes.";
+export declare const schema: {
+    cassette: z.ZodString;
+    command: z.ZodString;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+export declare function handler({ cassette: cassettePath, command, args }: {
+    cassette: string;
+    command: string;
+    args?: string[];
+}): Promise<{
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+} | {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError?: undefined;
+}>;

package/dist/src/tools/verify-tool.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+import { defaultCassettesDirectory, loadCassette } from "../cassette.js";
+import { runTargetRecording } from "../runner.js";
+import { compareResponses } from "../verify.js";
+import { errorMessage } from "../utils/errors.js";
+import { validateCommand, validatePath } from "../utils/security.js";
+import { logRequest } from "./helpers.js";
+export const name = "verify";
+export const description = "Use this after updating a server to confirm nothing broke. Connects to the live server, sends the same requests from a recorded cassette, and compares responses. Reports exactly what changed — added tools, removed parameters, different response shapes.";
+export const schema = {
+    cassette: z.string().describe("Path to a cassette JSON file."),
+    command: z.string().describe("The command to launch the MCP server."),
+    args: z.array(z.string()).optional().describe("Additional arguments for the command."),
+};
+export async function handler({ cassette: cassettePath, command, args }) {
+    const startMs = Date.now();
+    try {
+        validateCommand(command);
+        const cassettesDir = defaultCassettesDirectory();
+        validatePath(cassettePath, cassettesDir);
+        const cassette = await loadCassette(cassettePath);
+        const target = {
+            targetId: command,
+            adapter: "local-process",
+            command,
+            args: args ?? [],
+            timeoutMs: 15_000,
+        };
+        const { cassetteEntries } = await runTargetRecording(target, { invokeTools: true });
+        if (!cassetteEntries) {
+            return { content: [{ type: "text", text: "Failed to record live session for comparison." }], isError: true };
+        }
+        const result = compareResponses(cassette, cassetteEntries);
+        const lines = [`Verify: ${result.passed} passed, ${result.failed} changed, ${result.missing} missing\n`];
+        for (const entry of result.entries) {
+            const icon = entry.status === "pass" ? "\u2713" : entry.status === "fail" ? "\u2717" : "?";
+            lines.push(`  ${icon} ${entry.method}${entry.diff ? ` \u2014 ${entry.diff}` : ""}`);
+        }
+        logRequest("verify", startMs);
+        return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+    catch (error) {
+        const msg = errorMessage(error);
+        logRequest("verify", startMs, true);
+        return { content: [{ type: "text", text: `Error verifying: ${msg}` }], isError: true };
+    }
+}
+//# sourceMappingURL=verify-tool.js.map

package/dist/src/tools/verify-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-tool.js","sourceRoot":"","sources":["../../../src/tools/verify-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,CAAC,MAAM,IAAI,GAAG,QAAQ,CAAC;AAC7B,MAAM,CAAC,MAAM,WAAW,GAAG,8PAA8P,CAAC;AAC1R,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;CACvF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAA0D;IAC7H,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,YAAY,GAAG,yBAAyB,EAAE,CAAC;QACjD,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,eAAwB;YACjC,OAAO;YACP,IAAI,EAAE,IAAI,IAAI,EAAE;YAChB,SAAS,EAAE,MAAM;SAClB,CAAC;QAEF,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxH,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAa,CAAC,WAAW,MAAM,CAAC,MAAM,YAAY,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC;QACnH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3F,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,oBAAoB,GAAG,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClG,CAAC;AACH,CAAC"}