@mmerterden/multi-agent-toolkit-mcp 3.9.0 → 3.12.0

package/index.js

@@ -29,6 +29,15 @@ import {
   validateApp,
 } from "./tools/ios-testflight/index.js";
 import { DESIGN_TOOLS, handleDesign } from "./tools/design-check/index.js";
+import {
+  CODE_TOOLS,
+  handleCode,
+  CODE_READ_ONLY,
+  CODE_IDEMPOTENT,
+  CODE_OUTPUT_SCHEMAS,
+  shutdownAllLsp,
+} from "./tools/code-intel/index.js";
+import { PASS_TOOLS, handlePass, PASS_READ_ONLY, PASS_OUTPUT_SCHEMAS } from "./tools/pass-kit/index.js";
 import { parseLaunchOutput } from "./tools/launch-time/index.js";
 import { parseLeaksOutput, parseMeminfoOutput, diffMeminfo } from "./tools/memory/index.js";
 import { auditIosTree, auditAndroidDump, parseAuditResults } from "./tools/a11y/index.js";
@@ -475,7 +484,7 @@ const IOS_TOOLS = [
   { name: "ios_export_ipa", description: "Export a .xcarchive to a signed .ipa via xcodebuild -exportArchive. Generates the exportOptions.plist from the arguments (method defaults to app-store-connect), so callers do not have to hand-maintain one. Returns the .ipa path plus parsed errors; a run that exits 0 without producing an .ipa is reported as a failure. Pair with ios_testflight_validate for the pre-submission gate.", inputSchema: { type: "object", properties: { archive_path: { type: "string", description: "Absolute path to the .xcarchive" }, output_dir: { type: "string", description: "Directory to write the .ipa into" }, method: { type: "string", description: "Export method: app-store-connect (default) | release-testing | enterprise | development" }, team_id: { type: "string", description: "Apple Developer team ID" }, provisioning_profiles: { type: "object", description: "Map of bundleId -> provisioning profile name (manual signing)" }, signing_style: { type: "string", description: "automatic | manual" }, upload_symbols: { type: "boolean", description: "Include symbols (default true)" }, allow_provisioning_updates: { type: "boolean", description: "Off by default. Lets xcodebuild register devices and create/modify provisioning profiles in the developer account - a change on Apple's side, so it is opt-in" }, timeout_sec: { type: "number", description: "Default 900" } }, required: ["archive_path", "output_dir"] } },
   { name: "ios_testflight_validate", description: "Run Apple's own pre-submission validation on an .ipa via `xcrun altool --validate-app`, then map returned ITMS error codes onto the App Store rule each one implies. This is the authoritative gate: unlike the static ios_app_store_audit it can catch an unregistered bundle ID, a profile that does not match the App Store Connect app record, a version+build pair already used, and entitlements not provisioned for the app ID. Auth is a 3-tier chain: ASC API key (api_key_id + api_issuer_id), else Apple ID + app-specific password referenced indirectly through a keychain item or env var (never passed by value), else the gate returns verdict SKIPPED with a reason. SKIPPED is not a pass - it means Apple was never asked. Set list_providers=true for a pre-flight that reports which teams the credentials can deliver for (needed when a corporate Apple ID belongs to several).", inputSchema: { type: "object", properties: { ipa_path: { type: "string", description: "Absolute path to the .ipa" }, platform: { type: "string", description: "ios (default) | appletvos | visionos | macos" }, api_key_id: { type: "string", description: "App Store Connect API key ID (tier 1)" }, api_issuer_id: { type: "string", description: "App Store Connect issuer ID (tier 1)" }, p8_path: { type: "string", description: "Explicit path to AuthKey_<id>.p8; otherwise altool's search dirs are used" }, apple_id: { type: "string", description: "Apple ID (tier 2)" }, keychain_item: { type: "string", description: "Keychain item holding the app-specific password (tier 2, preferred)" }, password_env_var: { type: "string", description: "Env var holding the app-specific password (tier 2 fallback)" }, provider_public_id: { type: "string", description: "Required when the account belongs to multiple providers" }, list_providers: { type: "boolean", description: "Pre-flight only: list deliverable providers and return" }, timeout_sec: { type: "number", description: "Default 900" } }, required: [] } },
   { name: "ios_app_store_audit", description: "Deep App Store Review compliance audit for .xcarchive bundles. 18-rule catalog covering privacy manifest, code signing, embedded SDKs, entitlements, asset hygiene, IPv6 compliance, debug-tool leak detection, Swift ABI compatibility, SDK floor (ITMS-90725), and more. Returns structured JSON with severity-ranked violations and ITMS error code mappings. Replaces ios_archive_audit (deprecated). Pass rules='core' for the 6 baseline checks (code-signing, entitlements, info-plist, privacy-manifest, binary-size, sdk-floor); 'all'|'deep' for the full 18-rule scan; CSV like 'binary-size,ipv6-compliance' for an explicit subset.", inputSchema: { type: "object", properties: { archive_path: { type: "string", description: "Absolute path to the .xcarchive bundle" }, rules: { type: "string", description: "'all' (default) | 'core' | 'deep' | comma-separated ruleIDs" } }, required: ["archive_path"] } },
-  { name: "ios_xcodebuild", description: "Build / test / clean an Xcode project with progressive disclosure. Returns one-line summary plus xcresult ID; drill in via ios_xcresult. Token-efficient - full log stays out of context unless requested.", inputSchema: { type: "object", properties: { project: { type: "string", description: "Path to .xcodeproj (mutually exclusive with workspace)" }, workspace: { type: "string", description: "Path to .xcworkspace (mutually exclusive with project)" }, scheme: { type: "string" }, configuration: { type: "string", description: "Debug / Release (default: Release)" }, destination: { type: "string", description: "Xcode destination string. Default: generic iOS Simulator; for action test, the booted simulator (xcodebuild refuses a generic destination for test)" }, action: { type: "string", enum: ["build", "test", "clean", "archive", "clean-build"], description: "Default: build" }, derived_data_path: { type: "string" }, extra_args: { type: "string", description: "Additional raw xcodebuild args appended verbatim" }, timeout_sec: { type: "number", description: "Build timeout in seconds (default 600)" } }, required: ["scheme"] } },
+  { name: "ios_xcodebuild", description: "Build / test / clean an Xcode project with progressive disclosure. Returns one-line summary plus xcresult ID; drill in via ios_xcresult. Token-efficient - full log stays out of context unless requested.", inputSchema: { type: "object", properties: { project: { type: "string", description: "Path to .xcodeproj (mutually exclusive with workspace)" }, workspace: { type: "string", description: "Path to .xcworkspace (mutually exclusive with project)" }, scheme: { type: "string" }, configuration: { type: "string", description: "Debug / Release (default: Release)" }, destination: { type: "string", description: "Xcode destination string. Default: generic iOS Simulator; for action test, the booted simulator (xcodebuild refuses a generic destination for test)" }, action: { type: "string", enum: ["build", "test", "clean", "archive", "clean-build"], description: "Default: build" }, derived_data_path: { type: "string" }, extra_args: { type: "string", description: "Additional raw xcodebuild args appended verbatim. Plain flags and values only - shell metacharacters are refused.", pattern: "^[^;&|`$(){}<>\\\\\\n]*$", patternHint: "may contain only plain flags and values (no shell metacharacters ; & | ` $ ( ) { } < > \\\\)" }, timeout_sec: { type: "number", description: "Build timeout in seconds (default 600)" } }, required: ["scheme"] } },
   { name: "ios_xcresult", description: "Drill into a previous ios_xcodebuild result by xcresult ID. Modes: summary (counts), errors (file:line + message), warnings, log (last N lines), tests (failed), metrics (XCTMetric performance results as JSON). Use this instead of dumping the whole build log into context.", inputSchema: { type: "object", properties: { id: { type: "string", description: "xcresult ID returned by ios_xcodebuild" }, mode: { type: "string", enum: ["summary", "errors", "warnings", "log", "tests", "metrics"], description: "Default: summary" }, log_lines: { type: "number", description: "Lines of raw log to return when mode=log (default 200)" }, test_id: { type: "string", description: "mode=metrics only: scope to one test case or suite instead of every measured test" } }, required: ["id"] } },
   { name: "ios_visual_diff", description: "Compare two PNG screenshots. Returns JSON with diff_pct, pass/fail vs threshold, and an optional diff image. Use for snapshot regression checks across light/dark, locale, dynamic type variants.", inputSchema: { type: "object", properties: { baseline: { type: "string", description: "Path to baseline PNG" }, current: { type: "string", description: "Path to current PNG" }, threshold: { type: "number", description: "Per-pixel color threshold 0..1 (default 0.1, lower = stricter)" }, max_diff_pct: { type: "number", description: "Fail if diff exceeds this percent (default 1.0)" }, output: { type: "string", description: "Path to write diff PNG (optional)" } }, required: ["baseline", "current"] } },
   { name: "ios_leaks", description: "Look for leaked memory in a running simulator (or host) process with /usr/bin/leaks. mode=snapshot reports the current leak count and bytes; mode=diff reports only leaks new since a saved memory graph, which is the shape a regression gate wants. Reports measurable:false when the target lacks get-task-allow rather than reporting it as clean - leaks exits 0 in that case, so an unmeasurable target and a clean one are indistinguishable by exit status. Debug builds are debuggable; Apple-signed apps are not.", inputSchema: { type: "object", properties: { pid: { type: "number", description: "Process id. Either this or bundle_id." }, bundle_id: { type: "string", description: "Bundle id of an app running on the booted simulator; its pid is resolved for you." }, device_id: { type: "string" }, mode: { type: "string", enum: ["snapshot", "diff"], description: "Default: snapshot" }, baseline_graph: { type: "string", description: "mode=diff: path to the memory graph saved by an earlier call" }, output_graph: { type: "string", description: "Save a memory graph here to use as a later baseline" } }, required: [] } },
@@ -487,7 +496,38 @@ const IOS_TOOLS = [
 // reports needs no simulator, so a missing Xcode must not refuse them.
 const IOS_TOOLS_WITHOUT_XCRUN = new Set(["ios_visual_diff", "ios_list_crashes", "ios_xcresult"]);
 
+// Argument rules a JSON Schema cannot state, because they relate two fields
+// rather than constrain one. They ran inside each handler, which put them
+// BEHIND the "Xcode not installed" gate: on a host without Xcode every
+// malformed call got the same answer as a well-formed one, and the tests that
+// prove these rules could not run there at all. That is how the Linux CI leg
+// found them. They answer from the arguments alone, so they belong in front of
+// the capability gate - a caller learns their call is wrong whether or not this
+// machine could have run it.
+const IOS_ARG_RULES = {
+  ios_leaks: (a) => {
+    if (!a.pid && !a.bundle_id) return "pass pid or bundle_id";
+    if ((a.mode || "snapshot") === "diff" && !a.baseline_graph) {
+      return "mode=diff needs baseline_graph, the memory graph saved by an earlier call";
+    }
+    return null;
+  },
+  ios_xcodebuild: (a) => {
+    if (!a.project && !a.workspace) return "project or workspace required";
+    if (a.project && a.workspace) return "pass project OR workspace, not both";
+    return null;
+  },
+  ios_accessibility_audit_deep: (a) => (!a.project && !a.workspace ? "pass project or workspace" : null),
+  ios_testflight_validate: (a) =>
+    !a.list_providers && !a.ipa_path ? "ipa_path is required (or pass list_providers=true)" : null,
+};
+
 async function handleIOS(name, args, ctx = {}) {
+  const argRule = IOS_ARG_RULES[name];
+  if (argRule) {
+    const bad = argRule(args);
+    if (bad) return `${ERROR_PREFIX}${bad}`;
+  }
   if (!HAS_XCRUN && !IOS_TOOLS_WITHOUT_XCRUN.has(name)) return `${ERROR_PREFIX}Xcode not installed - iOS tools unavailable. Install Xcode and run: xcode-select --install`;
   const did = (n) => { try { return iosDevice(n); } catch (e) { return null; } };
 
@@ -789,7 +829,6 @@ async function handleIOS(name, args, ctx = {}) {
         const res = await listProviders(auth, ctx.signal);
         return JSON.stringify({ authTier: auth.tier, authMethod: auth.method, ...res }, null, 2);
       }
-      if (!args.ipa_path) return "ERROR: ipa_path is required (or pass list_providers=true)";
       // Same finally rationale as ios_export_ipa: never leak the heartbeat.
       const stopHeartbeat = startHeartbeat(ctx, "altool --validate-app");
       let res;
@@ -822,8 +861,6 @@ async function handleIOS(name, args, ctx = {}) {
     }
     case "ios_xcodebuild": {
       if (!HAS_XCRUN) return "ERROR: xcrun not available - Xcode Command Line Tools required";
-      if (!args.project && !args.workspace) return "ERROR: project or workspace required";
-      if (args.project && args.workspace) return "ERROR: pass project OR workspace, not both";
       const action = args.action || "build";
       const config = args.configuration || "Release";
       let dest = args.destination;
@@ -843,9 +880,13 @@ async function handleIOS(name, args, ctx = {}) {
       const derivedFlag = args.derived_data_path ? `-derivedDataPath ${shq(args.derived_data_path)}` : "";
       const actionMap = { "clean-build": "clean build", build: "build", test: "test", clean: "clean", archive: "archive" };
       // extra_args is appended verbatim (multiple flags, so it can't be a single
-      // shq'd token), which makes it a shell passthrough. Reject the metacharacters
-      // that enable command chaining or substitution so it stays "extra xcodebuild
-      // flags" and cannot become an arbitrary-command tool.
+      // shq'd token), which makes it a shell passthrough. The same character class
+      // is declared as `pattern` on the tool schema, so the CallTool boundary
+      // refuses the payload before dispatch; this is the second line, kept because
+      // the string is one concatenation away from a shell. It lived only here
+      // until the Linux CI run showed why that was not enough: handleIOS returns
+      // "Xcode not installed" first, so on any host without Xcode the guard was
+      // never reached and the test that proves it works could not run.
       const extra = args.extra_args || "";
       if (/[;&|`$(){}<>\n\\]/.test(extra)) {
         return "ERROR: extra_args may contain only plain flags and values (no shell metacharacters ; & | ` $ ( ) { } < > \\).";
@@ -971,7 +1012,6 @@ async function handleIOS(name, args, ctx = {}) {
       const mode = args.mode || "snapshot";
       const graphOut = args.output_graph ? ` --outputGraph=${shq(args.output_graph)}` : "";
       if (mode === "diff") {
-        if (!args.baseline_graph) return "ERROR: mode=diff needs baseline_graph, the memory graph saved by an earlier call";
         if (!existsSync(args.baseline_graph)) return `ERROR: baseline graph not found at ${args.baseline_graph}`;
       }
       const diffArg = mode === "diff" ? ` --diffFrom=${shq(args.baseline_graph)}` : "";
@@ -998,7 +1038,6 @@ async function handleIOS(name, args, ctx = {}) {
       }, null, 2);
     }
     case "ios_accessibility_audit_deep": {
-      if (!args.project && !args.workspace) return "ERROR: pass project or workspace";
       const container = args.workspace ? `-workspace ${shq(args.workspace)}` : `-project ${shq(args.project)}`;
       const d = iosDevice(args.device_id);
       const bundle = join(SCREENSHOT_DIR, `a11ydeep_${Date.now()}.xcresult`);
@@ -1345,17 +1384,29 @@ async function handleAndroid(name, args, ctx = {}) {
       }
       // 2. Signing check. apksigner exits 1 on a failed verification with the
       // verdict on stdout, so the output is captured whatever the status.
+      //
+      // "signed" needs positive evidence - apksigner's own `Verifies` line or a
+      // printed certificate. The branch used to be the else of three negative
+      // tests, so ANY output it did not recognise became "APK is signed": on a
+      // host with apksigner installed, 1KB of zero bytes audited as a correctly
+      // signed APK. It read as correct on a Mac only because apksigner is not
+      // there, and "command not found" is one of the strings it did recognise.
       const signingInfo = runCapture(`apksigner verify --print-certs ${shq(p)} 2>&1`);
+      const verifies = /^Verifies\b/m.test(signingInfo) || /Signer #\d+ certificate DN:/.test(signingInfo);
       if (/DOES NOT VERIFY/.test(signingInfo)) {
         findings.push({ check: "signing", status: "critical", detail: signingInfo.slice(0, 500) });
       } else if (isFailure(signingInfo) || /command not found|No such file or directory/i.test(signingInfo)) {
         findings.push({ check: "signing", status: "warning", detail: "apksigner not found - install Android SDK Build-Tools to verify the signature" });
-      } else if (/^(ERROR|Exception)/m.test(signingInfo)) {
-        findings.push({ check: "signing", status: "warning", detail: signingInfo.slice(0, 500) });
-      } else {
+      } else if (verifies) {
         const hasV2 = signingInfo.includes("v2 scheme") || (runOrNull(`apksigner verify -v ${shq(p)} 2>&1`) || "").includes("Verified using v2");
         findings.push({ check: "signing", status: "pass", detail: "APK is signed" });
         findings.push({ check: "signing_v2", status: hasV2 ? "pass" : "warning", detail: hasV2 ? "v2+ signature present" : "Only v1 signature - consider v2+ for tamper protection" });
+      } else {
+        findings.push({
+          check: "signing",
+          status: "warning",
+          detail: `apksigner did not report a verified signature; treat this as unverified, not as signed: ${signingInfo.slice(0, 400) || "(no output)"}`,
+        });
       }
       // 3. File size
       try {
@@ -1574,6 +1625,8 @@ async function dispatchStep(tool, stepArgs) {
   else if (tool.startsWith("android_")) result = await handleAndroid(tool, stepArgs);
   else if (tool.startsWith("web_")) result = await handleWeb(tool, stepArgs);
   else if (tool.startsWith("design_")) result = await handleDesign(tool, stepArgs, designCtx);
+  else if (tool.startsWith("code_")) result = await handleCode(tool, stepArgs, {});
+  else if (tool.startsWith("pass_")) result = await handlePass(tool, stepArgs);
   else throw new Error(`Unknown tool: ${tool}`);
   // Every handler's `default:` arm returns null, and that is its only source of
   // null, so null means "I do not recognise this tool". The throw below used to
@@ -1652,7 +1705,15 @@ async function handleAgent(name, args) {
 
 // ── Server ──
 
-const ALL_TOOLS = [...IOS_TOOLS, ...ANDROID_TOOLS, ...WEB_TOOLS, ...AGENT_TOOLS, ...DESIGN_TOOLS];
+const ALL_TOOLS = [
+  ...IOS_TOOLS,
+  ...ANDROID_TOOLS,
+  ...WEB_TOOLS,
+  ...AGENT_TOOLS,
+  ...DESIGN_TOOLS,
+  ...CODE_TOOLS,
+  ...PASS_TOOLS,
+];
 
 // Name -> inputSchema, so the CallTool boundary can enforce the declared shape.
 const TOOL_SCHEMAS = new Map(ALL_TOOLS.map((t) => [t.name, t.inputSchema || {}]));
@@ -1682,6 +1743,74 @@ function schemaTypeOk(value, type) {
   }
 }
 
+// Constraint keywords beyond type/required/enum. A schema that declares
+// `pattern` or `maximum` and has nobody enforcing it is worse than one that
+// declares nothing: the host shows the caller a contract the server does not
+// keep. Everything a tool literal is allowed to write is checked here.
+//
+// `patternHint` is ours, not JSON Schema. A regex in an error message tells a
+// human nothing; the hint says what the rule is in words. Hosts ignore unknown
+// keywords, so it rides along in inputSchema harmlessly.
+function checkConstraints(key, value, spec) {
+  if (spec.type && !schemaTypeOk(value, spec.type)) {
+    return `argument '${key}' must be ${spec.type}, got ${Array.isArray(value) ? "array" : typeof value}`;
+  }
+  if (Array.isArray(spec.enum) && !spec.enum.includes(value)) {
+    return `argument '${key}' must be one of ${JSON.stringify(spec.enum)}`;
+  }
+  if (typeof spec.pattern === "string" && !new RegExp(spec.pattern).test(String(value))) {
+    return spec.patternHint
+      ? `argument '${key}' ${spec.patternHint}`
+      : `argument '${key}' must match ${spec.pattern}`;
+  }
+  if (typeof value === "string" || typeof value === "number") {
+    const str = String(value);
+    if (Number.isFinite(spec.minLength) && str.length < spec.minLength) {
+      return `argument '${key}' must be at least ${spec.minLength} characters`;
+    }
+    if (Number.isFinite(spec.maxLength) && str.length > spec.maxLength) {
+      return `argument '${key}' must be at most ${spec.maxLength} characters`;
+    }
+  }
+  if (spec.type === "number" || spec.type === "integer") {
+    const num = Number(value);
+    if (Number.isFinite(spec.minimum) && num < spec.minimum) {
+      return `argument '${key}' must be >= ${spec.minimum}`;
+    }
+    if (Number.isFinite(spec.maximum) && num > spec.maximum) {
+      return `argument '${key}' must be <= ${spec.maximum}`;
+    }
+  }
+  if (Array.isArray(value)) {
+    if (Number.isFinite(spec.minItems) && value.length < spec.minItems) {
+      return `argument '${key}' must have at least ${spec.minItems} item(s)`;
+    }
+    if (Number.isFinite(spec.maxItems) && value.length > spec.maxItems) {
+      return `argument '${key}' must have at most ${spec.maxItems} item(s)`;
+    }
+    if (spec.items) {
+      for (let i = 0; i < value.length; i++) {
+        const err = checkConstraints(`${key}[${i}]`, value[i], spec.items);
+        if (err) return err;
+        for (const req of spec.items.required || []) {
+          const el = value[i];
+          if (el === null || typeof el !== "object" || el[req] === undefined || el[req] === null) {
+            return `argument '${key}[${i}]' is missing required field: ${req}`;
+          }
+        }
+        for (const [k, sub] of Object.entries(spec.items.properties || {})) {
+          const el = value[i];
+          if (el === null || typeof el !== "object") continue;
+          if (el[k] === undefined || el[k] === null) continue;
+          const subErr = checkConstraints(`${key}[${i}].${k}`, el[k], sub);
+          if (subErr) return subErr;
+        }
+      }
+    }
+  }
+  return null;
+}
+
 function validateArgs(name, args) {
   const schema = TOOL_SCHEMAS.get(name);
   if (!schema || schema.type !== "object") return null;
@@ -1693,12 +1822,8 @@ function validateArgs(name, args) {
   }
   for (const [key, spec] of Object.entries(props)) {
     if (args[key] === undefined || args[key] === null) continue;
-    if (spec.type && !schemaTypeOk(args[key], spec.type)) {
-      return `argument '${key}' must be ${spec.type}, got ${Array.isArray(args[key]) ? "array" : typeof args[key]}`;
-    }
-    if (Array.isArray(spec.enum) && !spec.enum.includes(args[key])) {
-      return `argument '${key}' must be one of ${JSON.stringify(spec.enum)}`;
-    }
+    const err = checkConstraints(key, args[key], spec);
+    if (err) return err;
   }
   return null;
 }
@@ -1716,6 +1841,11 @@ const READ_ONLY_TOOLS = new Set([
   "android_list_crashes",
   "web_screenshot", "web_get_text",
   "design_mock_detect", "design_scenario_inventory", "design_ui_geometry", "design_visual_compare",
+  // Seven of the eight. Every code_* tool reads source and answers; the one
+  // that is not here stops a cached server.
+  ...CODE_READ_ONLY,
+  // pass_build writes a file the caller named; the other three only read.
+  ...PASS_READ_ONLY,
 ]);
 
 // Irreversible on the target device: data loss the caller cannot undo.
@@ -1737,6 +1867,7 @@ const IDEMPOTENT_TOOLS = new Set([
   "android_set_locale", "android_set_location", "android_grant_permission", "android_revoke_permission",
   "android_set_orientation",
   "web_close",
+  ...CODE_IDEMPOTENT,
 ]);
 
 // Web tools reach arbitrary sites; everything else talks to a local simulator,
@@ -1840,6 +1971,10 @@ const bundleAuditSchema = (pathKey) => ({
 });
 
 const OUTPUT_SCHEMAS = {
+  // Every code_* root is an object. A `{type:"array"}` root on ONE tool once
+  // made all 78 unavailable in Claude Code - see the note further down.
+  ...CODE_OUTPUT_SCHEMAS,
+  ...PASS_OUTPUT_SCHEMAS,
   ios_accessibility_audit: ACCESSIBILITY_AUDIT_SCHEMA,
   android_accessibility_audit: ACCESSIBILITY_AUDIT_SCHEMA,
 
@@ -2037,6 +2172,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request, extra) => {
     else if (name.startsWith("web_")) result = await handleWeb(name, args || {});
     else if (name.startsWith("agent_")) result = await handleAgent(name, args || {});
     else if (name.startsWith("design_")) result = await handleDesign(name, args || {}, designCtx);
+    // ...ctx, unlike the design_ line above: code-intel needs `signal` so an
+    // aborted call cancels the in-flight LSP request instead of orphaning it.
+    else if (name.startsWith("code_")) result = await handleCode(name, args || {}, ctx);
+    else if (name.startsWith("pass_")) result = await handlePass(name, args || {});
     else return { content: [{ type: "text", text: `Unknown tool: ${name}` }], isError: true };
     // Same reason as dispatchStep: a handler returns null only from its
     // `default:` arm, so an unrecognised name that happens to carry a known
@@ -2107,8 +2246,8 @@ function stopRecorders() {
   }
 }
 
-process.on("SIGTERM", async () => { stopRecorders(); await closeBrowser(); process.exit(0); });
-process.on("SIGINT", async () => { stopRecorders(); await closeBrowser(); process.exit(0); });
+process.on("SIGTERM", async () => { stopRecorders(); shutdownAllLsp(); await closeBrowser(); process.exit(0); });
+process.on("SIGINT", async () => { stopRecorders(); shutdownAllLsp(); await closeBrowser(); process.exit(0); });
 
 const transport = new StdioServerTransport();
 await server.connect(transport);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@mmerterden/multi-agent-toolkit-mcp",
-  "version": "3.9.0",
-  "description": "MCP server for iOS Simulator, Android Emulator and headless web control. 87 tools: device automation (tap/swipe/type), accessibility audits, visual diff, crash logs, App Store / Play Store pre-submission compliance. Runs standalone over stdio with any MCP client.",
+  "version": "3.12.0",
+  "description": "MCP server for iOS Simulator, Android Emulator and headless web control. 99 tools: device automation (tap/swipe/type), accessibility audits, visual diff, crash logs, App Store / Play Store pre-submission compliance. Runs standalone over stdio with any MCP client.",
   "type": "module",
   "main": "index.js",
   "bin": {
@@ -10,7 +10,7 @@
   },
   "scripts": {
     "start": "node index.js",
-    "test": "node --test tools/design-check/__tests__/design-check.test.mjs tools/design-check/__tests__/plan-determinism.test.mjs tools/ios-app-store-audit/__tests__/app-store-audit.test.mjs tools/ios-testflight/__tests__/testflight.test.mjs tools/ui-inspect/__tests__/ui-inspect.test.mjs tools/crash-logs/__tests__/crash-logs.test.mjs tools/a11y/__tests__/a11y.test.mjs tools/launch-time/__tests__/launch-time.test.mjs tools/memory/__tests__/memory.test.mjs tools/offload/__tests__/offload.test.mjs __tests__/server-tools.test.mjs __tests__/injection.test.mjs",
+    "test": "node --test tools/design-check/__tests__/design-check.test.mjs tools/design-check/__tests__/plan-determinism.test.mjs tools/ios-app-store-audit/__tests__/app-store-audit.test.mjs tools/ios-testflight/__tests__/testflight.test.mjs tools/ui-inspect/__tests__/ui-inspect.test.mjs tools/code-intel/__tests__/code-intel.test.mjs tools/pass-kit/__tests__/pass-kit.test.mjs tools/crash-logs/__tests__/crash-logs.test.mjs tools/a11y/__tests__/a11y.test.mjs tools/launch-time/__tests__/launch-time.test.mjs tools/memory/__tests__/memory.test.mjs tools/offload/__tests__/offload.test.mjs __tests__/server-tools.test.mjs __tests__/injection.test.mjs",
     "gates": "bash scripts/gates.sh"
   },
   "keywords": [
@@ -73,6 +73,12 @@
     "CHANGELOG.md",
     "LICENSE"
   ],
+  "_overridesReadme": "Three advisories reach this tree only through @modelcontextprotocol/sdk, and all three are fixed inside the major their consumer already depends on. The upper bound on fast-uri is load-bearing: ajv@8 declares ^3, and an unbounded >=3.1.6 resolves to 4.x, which is a different major under a dependency that never asked for it.",
+  "overrides": {
+    "fast-uri": ">=3.1.6 <4",
+    "hono": ">=4.13.5 <5",
+    "qs": ">=6.16.0 <7"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "pixelmatch": "^7.2.0",