@samanhappy/mcphub 1.0.30 → 1.0.32

package/dist/services/mcpService.js

@@ -11,6 +11,7 @@ import { StreamableHTTPClientTransport, } from '@modelcontextprotocol/sdk/client
 import { normalizeHeaders } from '@modelcontextprotocol/sdk/shared/transport.js';
 import { createFetchWithProxy, getProxyConfigFromEnv } from './proxy.js';
 import { assertSafeUrl, createRedirectValidatingFetch } from '../utils/ssrf.js';
+import { createAbortIsolatingFetch } from '../utils/abortIsolatingFetch.js';
 import { ResilientJsonSchemaValidator } from '../utils/jsonSchemaValidator.js';
 import { getUserDao } from '../dao/index.js';
 import { expandEnvVars, replaceEnvVars, getNameSeparator } from '../config/index.js';
@@ -34,6 +35,7 @@ import { MCP_APPS_CAPABILITIES, filterModelVisibleTools, hasMcpAppsCapability, i
 import { supportsCacheRefresh, injectRefreshFlag, clearRunnerCache } from '../utils/cacheUtils.js';
 const servers = {};
 import { setupClientKeepAlive } from './keepAliveService.js';
+import { logger } from '../utils/logger.js';
 /**
  * Check if proxychains4 is available on the system (Linux/macOS only).
  * Returns the path to proxychains4 if found, null otherwise.
@@ -76,12 +78,12 @@ const generateProxychainsConfig = (serverName, proxyConfig) => {
         if (fs.existsSync(proxyConfig.configPath)) {
             return proxyConfig.configPath;
         }
-        console.warn(`[${serverName}] Custom proxychains config not found: ${proxyConfig.configPath}`);
+        logger.warn(`[${serverName}] Custom proxychains config not found: ${proxyConfig.configPath}`);
         return null;
     }
     // Validate required fields
     if (!proxyConfig.host || !proxyConfig.port) {
-        console.warn(`[${serverName}] Proxy host and port are required for proxychains4`);
+        logger.warn(`[${serverName}] Proxy host and port are required for proxychains4`);
         return null;
     }
     const proxyType = proxyConfig.type || 'socks5';
@@ -113,7 +115,7 @@ ${proxyLine}
     // Write config file
     const configPath = path.join(tempDir, `${serverName.replace(/[^a-zA-Z0-9-_]/g, '_')}.conf`);
     fs.writeFileSync(configPath, configContent, 'utf-8');
-    console.log(`[${serverName}] Generated proxychains4 config: ${configPath}`);
+    logger.log(`[${serverName}] Generated proxychains4 config: ${configPath}`);
     return configPath;
 };
 /**
@@ -123,9 +125,20 @@ ${proxyLine}
 const isSafeCommand = (command) => {
     // Block shell builtins that could be used for command injection
     const blockedCommands = new Set([
-        'sh', 'bash', 'zsh', 'fish', 'csh', 'ksh', 'tcsh',
-        'cmd', 'powershell', 'pwsh',
-        'eval', 'exec', 'source', '.',
+        'sh',
+        'bash',
+        'zsh',
+        'fish',
+        'csh',
+        'ksh',
+        'tcsh',
+        'cmd',
+        'powershell',
+        'pwsh',
+        'eval',
+        'exec',
+        'source',
+        '.',
     ]);
     const basename = command.split('/').pop()?.split('\\').pop()?.toLowerCase() || '';
     if (blockedCommands.has(basename)) {
@@ -142,7 +155,7 @@ const isSafeCommand = (command) => {
  * Removes shell metacharacters and dangerous patterns.
  */
 const sanitizeArgs = (args) => {
-    return args.map(arg => {
+    return args.map((arg) => {
         // Remove shell metacharacters that could be used for injection
         // Allow common flags (-f, --flag, -vvv) and paths
         if (/^[a-zA-Z0-9._/\\:@=+,-]+$/.test(arg)) {
@@ -150,7 +163,7 @@ const sanitizeArgs = (args) => {
         }
         // For arguments with special characters, log a warning
         // Also block redirection operators (>, <, >>) and newlines
-        console.warn(`[proxychains] Potentially unsafe argument blocked: ${arg}`);
+        logger.warn(`[proxychains] Potentially unsafe argument blocked: ${arg}`);
         return arg.replace(/[;&|`$(){}[\]!><\n\r]/g, '');
     });
 };
@@ -165,30 +178,30 @@ const wrapWithProxychains = (serverName, command, args, proxyConfig) => {
     }
     // Check platform - Windows is not supported
     if (process.platform === 'win32') {
-        console.warn(`[${serverName}] proxychains4 proxy is not supported on Windows, ignoring proxy configuration`);
+        logger.warn(`[${serverName}] proxychains4 proxy is not supported on Windows, ignoring proxy configuration`);
         return { command, args };
     }
     // SECURITY: Validate command is safe
     if (!isSafeCommand(command)) {
-        console.error(`[${serverName}] Blocked unsafe command for proxychains4 wrapping: ${command}`);
+        logger.error(`[${serverName}] Blocked unsafe command for proxychains4 wrapping: ${command}`);
         throw new Error(`[${serverName}] Unsafe command blocked: ${command}. Shell builtins and metacharacters are not allowed.`);
     }
     // Find proxychains4 binary
     const proxychains4Path = findProxychains4();
     if (!proxychains4Path) {
-        console.warn(`[${serverName}] proxychains4 not found on system, install it with: apt install proxychains4 (Debian/Ubuntu) or brew install proxychains-ng (macOS)`);
+        logger.warn(`[${serverName}] proxychains4 not found on system, install it with: apt install proxychains4 (Debian/Ubuntu) or brew install proxychains-ng (macOS)`);
         return { command, args };
     }
     // Generate or get config file
     const configPath = generateProxychainsConfig(serverName, proxyConfig);
     if (!configPath) {
-        console.warn(`[${serverName}] Failed to setup proxychains4 configuration, skipping proxy`);
+        logger.warn(`[${serverName}] Failed to setup proxychains4 configuration, skipping proxy`);
         return { command, args };
     }
     // SECURITY: Sanitize arguments
     const sanitizedArgs = sanitizeArgs(args);
     // Wrap command with proxychains4
-    console.log(`[${serverName}] Using proxychains4 proxy: ${proxyConfig.type || 'socks5'}://${proxyConfig.host}:${proxyConfig.port}`);
+    logger.log(`[${serverName}] Using proxychains4 proxy: ${proxyConfig.type || 'socks5'}://${proxyConfig.host}:${proxyConfig.port}`);
     return {
         command: proxychains4Path,
         args: ['-f', configPath, command, ...sanitizedArgs],
@@ -236,7 +249,7 @@ export const getMcpServer = async (sessionId, group) => {
         servers[sessionId] = createMcpServer(descriptor.name, descriptor.version, descriptor);
     }
     else {
-        console.log(`MCP server already exists for sessionId: ${sessionId}`);
+        logger.log(`MCP server already exists for sessionId: ${sessionId}`);
     }
     return servers[sessionId];
 };
@@ -254,7 +267,7 @@ const closeIsolatedClient = (serverName, client, transport) => {
         client.close();
     }
     catch (e) {
-        console.warn(`[${serverName}] Error closing isolated client:`, e);
+        logger.warn(`[${serverName}] Error closing isolated client:`, e);
     }
     const candidateTransport = transport;
     const stdioPid = typeof candidateTransport.pid === 'number' ? candidateTransport.pid : null;
@@ -262,7 +275,7 @@ const closeIsolatedClient = (serverName, client, transport) => {
         transport.close();
     }
     catch (e) {
-        console.warn(`[${serverName}] Error closing isolated transport:`, e);
+        logger.warn(`[${serverName}] Error closing isolated transport:`, e);
     }
     // For stdio transports, kill the whole process tree to avoid orphans
     if (stdioPid) {
@@ -286,7 +299,7 @@ const cleanupIsolatedSession = (sessionId) => {
                 isolatedClientCreationLocks.delete(key);
             }
         }
-        console.log(`Cleaned up isolated clients for session: ${sessionId}`);
+        logger.log(`Cleaned up isolated clients for session: ${sessionId}`);
     }
     // Drop per-session OpenAPI cookie jars so authenticated state does not
     // outlive the downstream session.
@@ -354,12 +367,12 @@ const getOrCreateIsolatedClient = async (sessionId, serverInfo) => {
         // Guard: the session was cleaned up during the async connect if its map was
         // deleted (identity no longer matches) — close the just-created connection.
         if (sessionIsolatedClients.get(sessionId) !== reservedClients) {
-            console.warn(`Session ${sessionId} was deleted during isolated client creation for ${serverInfo.name}, closing new client`);
+            logger.warn(`Session ${sessionId} was deleted during isolated client creation for ${serverInfo.name}, closing new client`);
             closeIsolatedClient(serverInfo.name, client, transport);
             throw new Error(`Session ${sessionId} no longer exists`);
         }
         setSessionIsolatedClient(sessionId, serverInfo.name, client, transport);
-        console.log(`Created isolated client for session ${sessionId} -> ${serverInfo.name}`);
+        logger.log(`Created isolated client for session ${sessionId} -> ${serverInfo.name}`);
         return { client, transport };
     })();
     isolatedClientCreationLocks.set(lockKey, createPromise);
@@ -381,10 +394,10 @@ const broadcastListChanged = (listType, sendNotification) => {
     Object.values(servers).forEach((server) => {
         sendNotification(server)
             .then(() => {
-            console.log(`${listType} list changed notification sent successfully`);
+            logger.log(`${listType} list changed notification sent successfully`);
         })
             .catch((error) => {
-            console.warn(`Failed to send ${listType} list changed notification:`, error.message);
+            logger.warn(`Failed to send ${listType} list changed notification:`, error.message);
         });
     });
 };
@@ -415,12 +428,12 @@ export const updateServerInfoVisibility = (serverName, visibility, sharedWithUse
 export const syncToolEmbedding = async (serverName, toolName) => {
     const serverInfo = getServerByName(serverName);
     if (!serverInfo) {
-        console.warn(`Server not found: ${serverName}`);
+        logger.warn(`Server not found: ${serverName}`);
         return;
     }
     const tool = serverInfo.tools.find((t) => t.name === toolName);
     if (!tool) {
-        console.warn(`Tool not found: ${toolName} on server: ${serverName}`);
+        logger.warn(`Tool not found: ${toolName} on server: ${serverName}`);
         return;
     }
     if (isAppOnlyTool(tool)) {
@@ -428,8 +441,8 @@ export const syncToolEmbedding = async (serverName, toolName) => {
     }
     // Save tool as vector embedding for search
     syncToolsAsVectorEmbeddings(serverName, [tool]).catch((error) => {
-        console.warn(`[EMBED_SYNC_ERROR] Failed to sync embedding for tool "${toolName}" on server "${serverName}"`);
-        console.error('Error syncing single tool embedding', { serverName, toolName, error });
+        logger.warn(`[EMBED_SYNC_ERROR] Failed to sync embedding for tool "${toolName}" on server "${serverName}"`);
+        logger.error('Error syncing single tool embedding', { serverName, toolName, error });
     });
 };
 // Helper function to clean $schema field from inputSchema
@@ -539,7 +552,7 @@ export const updateServerToolsCache = (serverInfo, tools, options) => {
     syncToolsAsVectorEmbeddings(serverInfo.name, serverInfo.tools, {
         reportProgress: options?.reportEmbeddingProgress === true,
     }).catch(() => {
-        console.warn('[EMBED_SYNC_ERROR] Failed to sync tool embeddings');
+        logger.warn('[EMBED_SYNC_ERROR] Failed to sync tool embeddings');
     });
 };
 const updateServerPromptsCache = (serverInfo, prompts) => {
@@ -549,7 +562,7 @@ const updateServerResourcesCache = (serverInfo, resources) => {
     serverInfo.resources = resources.map(normalizeResourceForCache);
 };
 const logListChangedRefreshError = (listType) => {
-    console.warn(`Failed to refresh ${listType} list after upstream notification`);
+    logger.warn(`Failed to refresh ${listType} list after upstream notification`);
 };
 const createUpstreamMcpClient = (name, getServerInfo) => {
     return new Client({
@@ -660,7 +673,7 @@ export const cleanupAllServers = () => {
             }
         }
         catch (error) {
-            console.warn('Error closing server', { serverName: serverInfo.name, error });
+            logger.warn('Error closing server', { serverName: serverInfo.name, error });
         }
     }
     serverInfos = [];
@@ -919,9 +932,7 @@ export const createTransportFromConfig = async (name, conf) => {
     // Admin-owned servers may legitimately target internal services, so they
     // skip the internal-IP blocklist. allowInternal also governs per-hop
     // redirect validation in createRedirectValidatingFetch below.
-    const ownerUser = conf.owner
-        ? await getUserDao().findByUsername(conf.owner)
-        : null;
+    const ownerUser = conf.owner ? await getUserDao().findByUsername(conf.owner) : null;
     const allowInternal = !!ownerUser?.isAdmin;
     if (conf.url) {
         await assertSafeUrl(conf.url, { allowInternal });
@@ -929,7 +940,7 @@ export const createTransportFromConfig = async (name, conf) => {
     if (conf.type === 'streamable-http') {
         const options = {};
         let headers = conf.headers ? replaceEnvVars(conf.headers, env) : {};
-        const baseFetch = createFetchWithProxy(getProxyConfigFromEnv(env));
+        const baseFetch = createAbortIsolatingFetch(createFetchWithProxy(getProxyConfigFromEnv(env)));
         const requestAwareFetch = createRedirectValidatingFetch(createRequestContextAwareFetch(baseFetch, conf.passthroughHeaders), allowInternal);
         // Create OAuth provider if configured - SDK will handle authentication automatically
         const authProvider = await createOAuthProvider(name, conf);
@@ -942,7 +953,7 @@ export const createTransportFromConfig = async (name, conf) => {
             // Authorization value would override the valid access token and cause
             // 401 re-authorization loops.
             headers = stripAuthorizationHeader(headers);
-            console.log(`OAuth provider configured for server: ${name}`);
+            logger.log(`OAuth provider configured for server: ${name}`);
         }
         if (Object.keys(headers).length > 0) {
             options.requestInit = {
@@ -956,7 +967,7 @@ export const createTransportFromConfig = async (name, conf) => {
         // SSE transport
         const options = {};
         let headers = conf.headers ? replaceEnvVars(conf.headers, env) : {};
-        const baseFetch = createFetchWithProxy(getProxyConfigFromEnv(env));
+        const baseFetch = createAbortIsolatingFetch(createFetchWithProxy(getProxyConfigFromEnv(env)));
         const requestAwareFetch = createRedirectValidatingFetch(createRequestContextAwareFetch(baseFetch, conf.passthroughHeaders), allowInternal);
         // Create OAuth provider if configured - SDK will handle authentication automatically
         const authProvider = await createOAuthProvider(name, conf);
@@ -964,7 +975,7 @@ export const createTransportFromConfig = async (name, conf) => {
             options.authProvider = authProvider;
             // Drop static Authorization header when OAuth manages auth (see above).
             headers = stripAuthorizationHeader(headers);
-            console.log(`OAuth provider configured for server: ${name}`);
+            logger.log(`OAuth provider configured for server: ${name}`);
         }
         if (Object.keys(headers).length > 0) {
             options.eventSourceInit = {
@@ -1008,7 +1019,7 @@ export const createTransportFromConfig = async (name, conf) => {
         if (pendingReinstalls.has(name)) {
             resolvedArgs = injectRefreshFlag(conf.command, resolvedArgs);
             pendingReinstalls.delete(name);
-            console.log(`[${name}] Injected cache refresh flags for reinstall`);
+            logger.log(`[${name}] Injected cache refresh flags for reinstall`);
         }
         const { command: finalCommand, args: finalArgs } = wrapWithProxychains(name, conf.command, resolvedArgs, conf.proxy);
         // Create STDIO transport with potentially wrapped command
@@ -1021,10 +1032,10 @@ export const createTransportFromConfig = async (name, conf) => {
         });
         if (transport.stderr) {
             observeStdioStderr(transport, transport.stderr, (message) => {
-                console.log('Upstream server stderr', {
+                logger.log('Upstream server stderr', JSON.stringify({
                     serverName: name,
                     message,
-                });
+                }));
             });
         }
     }
@@ -1056,7 +1067,7 @@ const callToolWithReconnect = async (serverInfo, toolParams, options, maxRetries
             const isStreamableHttp = transport instanceof StreamableHTTPClientTransport;
             const isSSE = transport instanceof SSEClientTransport;
             if (attempt < maxRetries && transport && ((isStreamableHttp && isHttp40xError) || isSSE)) {
-                console.warn(`${isHttp40xError ? 'HTTP 40x error' : 'error'} detected for ${isStreamableHttp ? 'StreamableHTTP' : 'SSE'} server ${serverInfo.name}${isolated ? ` (isolated session ${isolated.sessionId})` : ''}, attempting reconnection (attempt ${attempt + 1}/${maxRetries + 1})`);
+                logger.warn(`${isHttp40xError ? 'HTTP 40x error' : 'error'} detected for ${isStreamableHttp ? 'StreamableHTTP' : 'SSE'} server ${serverInfo.name}${isolated ? ` (isolated session ${isolated.sessionId})` : ''}, attempting reconnection (attempt ${attempt + 1}/${maxRetries + 1})`);
                 try {
                     const server = await getServerDao().findById(serverInfo.name);
                     if (!server) {
@@ -1073,11 +1084,15 @@ const callToolWithReconnect = async (serverInfo, toolParams, options, maxRetries
                         try {
                             client.close();
                         }
-                        catch { /* empty */ }
+                        catch {
+                            /* empty */
+                        }
                         try {
                             transport.close();
                         }
-                        catch { /* empty */ }
+                        catch {
+                            /* empty */
+                        }
                         setSessionIsolatedClient(isolated.sessionId, serverInfo.name, newClient, newTransport);
                     }
                     else {
@@ -1089,11 +1104,15 @@ const callToolWithReconnect = async (serverInfo, toolParams, options, maxRetries
                         try {
                             serverInfo.client?.close();
                         }
-                        catch { /* empty */ }
+                        catch {
+                            /* empty */
+                        }
                         try {
                             transport.close();
                         }
-                        catch { /* empty */ }
+                        catch {
+                            /* empty */
+                        }
                         serverInfo.client = newClient;
                         serverInfo.transport = newTransport;
                         serverInfo.status = 'connected';
@@ -1107,18 +1126,18 @@ const callToolWithReconnect = async (serverInfo, toolParams, options, maxRetries
                         updateServerToolsCache(serverInfo, tools.tools);
                     }
                     catch (listToolsError) {
-                        console.warn('Failed to reload tools after reconnection', {
+                        logger.warn('Failed to reload tools after reconnection', {
                             serverName: serverInfo.name,
                             error: summarizeErrorForLogging(listToolsError),
                         });
                         // Continue anyway, as the connection might still work for the current tool
                     }
-                    console.log(`Successfully reconnected to server: ${serverInfo.name}`);
+                    logger.log(`Successfully reconnected to server: ${serverInfo.name}`);
                     // Continue to next attempt
                     continue;
                 }
                 catch (reconnectError) {
-                    console.error('Failed to reconnect to server', {
+                    logger.error('Failed to reconnect to server', {
                         serverName: serverInfo.name,
                         error: summarizeErrorForLogging(reconnectError),
                     });
@@ -1152,7 +1171,7 @@ const setupServerKeepAlive = (serverInfo, serverConfig) => {
                 throw error;
             }
         },
-    }).catch((error) => console.warn('Keepalive setup failed', {
+    }).catch((error) => logger.warn('Keepalive setup failed', {
         serverName: serverInfo.name,
         error: summarizeErrorForLogging(error),
     }));
@@ -1169,7 +1188,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
             const expandedConf = replaceEnvVars(conf);
             // Skip disabled servers
             if (expandedConf.enabled === false) {
-                console.log(`Skipping disabled server: ${name}`);
+                logger.log(`Skipping disabled server: ${name}`);
                 nextServerInfos.push({
                     name,
                     owner: expandedConf.owner,
@@ -1209,7 +1228,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     enabled: true,
                     config: expandedConf,
                 });
-                console.log(`Skipping startup connect for on-demand server: ${name}`);
+                logger.log(`Skipping startup connect for on-demand server: ${name}`);
                 continue;
             }
             // Reuse this server's existing runtime state instead of reconnecting when:
@@ -1225,8 +1244,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
             const existingServer = existingServerInfos.find((s) => s.name === name);
             const isDifferentServer = Boolean(serverName) && serverName !== name;
             const hasInflightOAuthAuthorization = existingServer?.status === 'oauth_required' &&
-                Boolean(expandedConf.oauth?.pendingAuthorization?.state ||
-                    existingServer.oauth?.state);
+                Boolean(expandedConf.oauth?.pendingAuthorization?.state || existingServer.oauth?.state);
             if (existingServer &&
                 (isDifferentServer ||
                     (!serverName && (existingServer.status === 'connected' || hasInflightOAuthAuthorization)))) {
@@ -1237,7 +1255,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     sharedWithUsers: expandedConf.sharedWithUsers,
                     enabled: expandedConf.enabled === undefined ? true : expandedConf.enabled,
                 });
-                console.log(hasInflightOAuthAuthorization
+                logger.log(hasInflightOAuthAuthorization
                     ? `Server '${name}' has an in-flight OAuth authorization; preserving existing state.`
                     : `Server '${name}' is already connected.`);
                 continue;
@@ -1247,7 +1265,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
             if (expandedConf.type === 'openapi') {
                 // Handle OpenAPI type servers
                 if (!expandedConf.openapi?.url && !expandedConf.openapi?.schema) {
-                    console.warn(`Skipping OpenAPI server '${name}': missing OpenAPI specification URL or schema`);
+                    logger.warn(`Skipping OpenAPI server '${name}': missing OpenAPI specification URL or schema`);
                     nextServerInfos.push({
                         name,
                         owner: expandedConf.owner,
@@ -1300,7 +1318,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                             });
                         },
                     });
-                    console.log(`Initializing OpenAPI server: ${name}...`);
+                    logger.log(`Initializing OpenAPI server: ${name}...`);
                     // Perform async initialization
                     await openApiClient.initialize();
                     // Convert OpenAPI tools to MCP tool format
@@ -1314,7 +1332,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     serverInfo.status = 'connected';
                     serverInfo.tools = mcpTools;
                     serverInfo.openApiClient = openApiClient;
-                    console.log(`Successfully initialized OpenAPI server: ${name} with ${mcpTools.length} tools`);
+                    logger.log(`Successfully initialized OpenAPI server: ${name} with ${mcpTools.length} tools`);
                     // Broadcast now that tools are loaded. OpenAPI servers expose tools
                     // only (no prompts/resources). See the standard-path note above.
                     broadcastToolListChanged();
@@ -1322,8 +1340,8 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     syncToolsAsVectorEmbeddings(name, mcpTools, {
                         reportProgress: options?.reportEmbeddingProgress === true && serverName === name,
                     }).catch((error) => {
-                        console.warn(`[EMBED_SYNC_ERROR] Failed to sync OpenAPI embeddings for server "${name}"`);
-                        console.error('Error syncing OpenAPI tool embeddings', {
+                        logger.warn(`[EMBED_SYNC_ERROR] Failed to sync OpenAPI embeddings for server "${name}"`);
+                        logger.error('Error syncing OpenAPI tool embeddings', {
                             serverName: name,
                             error: summarizeErrorForLogging(error),
                         });
@@ -1331,7 +1349,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     continue;
                 }
                 catch (error) {
-                    console.error('Failed to initialize OpenAPI server', {
+                    logger.error('Failed to initialize OpenAPI server', {
                         serverName: name,
                         error: summarizeErrorForLogging(error),
                     });
@@ -1390,18 +1408,18 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
             nextServerInfos.push(serverInfo);
             connectClientWithDiagnostics(client, transport, initRequestOptions || requestOptions)
                 .then(() => {
-                console.log(`Successfully connected client for server: ${name}`);
+                logger.log(`Successfully connected client for server: ${name}`);
                 const serverVersion = client.getServerVersion?.();
                 serverInfo.version = serverVersion?.version;
                 serverInfo.instructions = client.getInstructions?.();
                 const capabilities = client.getServerCapabilities();
-                console.log('Server capabilities', JSON.stringify(capabilities));
+                logger.log('Server capabilities', JSON.stringify(capabilities));
                 let dataError = null;
                 if (capabilities?.tools) {
                     client
                         .listTools({}, initRequestOptions || requestOptions)
                         .then((tools) => {
-                        console.log(`Successfully listed ${tools.tools.length} tools for server: ${name}`);
+                        logger.log(`Successfully listed ${tools.tools.length} tools for server: ${name}`);
                         updateServerToolsCache(serverInfo, tools.tools, {
                             reportEmbeddingProgress: options?.reportEmbeddingProgress === true && serverName === name,
                         });
@@ -1412,7 +1430,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                         broadcastToolListChanged();
                     })
                         .catch((error) => {
-                        console.error('Failed to list tools for server', {
+                        logger.error('Failed to list tools for server', {
                             serverName: name,
                             error: summarizeErrorForLogging(error),
                         });
@@ -1423,12 +1441,12 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     client
                         .listPrompts({}, initRequestOptions || requestOptions)
                         .then((prompts) => {
-                        console.log(`Successfully listed ${prompts.prompts.length} prompts for server: ${name}`);
+                        logger.log(`Successfully listed ${prompts.prompts.length} prompts for server: ${name}`);
                         updateServerPromptsCache(serverInfo, prompts.prompts);
                         broadcastPromptListChanged();
                     })
                         .catch((error) => {
-                        console.error('Failed to list prompts for server', {
+                        logger.error('Failed to list prompts for server', {
                             serverName: name,
                             error: summarizeErrorForLogging(error),
                         });
@@ -1439,12 +1457,12 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     client
                         .listResources({}, initRequestOptions || requestOptions)
                         .then((resources) => {
-                        console.log(`Successfully listed ${resources.resources.length} resources for server: ${name}`);
+                        logger.log(`Successfully listed ${resources.resources.length} resources for server: ${name}`);
                         updateServerResourcesCache(serverInfo, resources.resources);
                         broadcastResourceListChanged();
                     })
                         .catch((error) => {
-                        console.error('Failed to list resources for server', {
+                        logger.error('Failed to list resources for server', {
                             serverName: name,
                             error: summarizeErrorForLogging(error),
                         });
@@ -1470,7 +1488,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                 if (isOAuthError) {
                     // OAuth provider should have already set the status to 'oauth_required'
                     // and stored the authorization URL in serverInfo.oauth
-                    console.log(`OAuth authorization required for server ${name}. Status should be set to 'oauth_required'.`);
+                    logger.log(`OAuth authorization required for server ${name}. Status should be set to 'oauth_required'.`);
                     // Make sure status is set correctly
                     if (serverInfo.status !== 'oauth_required') {
                         serverInfo.status = 'oauth_required';
@@ -1478,7 +1496,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     serverInfo.error = null;
                 }
                 else {
-                    console.error('Failed to connect client for server', {
+                    logger.error('Failed to connect client for server', {
                         serverName: name,
                         error: summarizeErrorForLogging(error),
                     });
@@ -1488,7 +1506,7 @@ export const initializeClientsFromSettings = async (isInit, serverName, options)
                     setupServerKeepAlive(serverInfo, expandedConf);
                 }
             });
-            console.log(`Initialized client for server: ${name}`);
+            logger.log(`Initialized client for server: ${name}`);
         }
     }
     catch (error) {
@@ -1649,14 +1667,14 @@ export const getServerByOAuthState = (state) => {
  * This will close the existing connection and reinitialize the server
  */
 export const reconnectServer = async (serverName) => {
-    console.log(`Reconnecting server: ${serverName}`);
+    logger.log(`Reconnecting server: ${serverName}`);
     const serverInfo = getServerByName(serverName);
     if (!serverInfo) {
         throw new Error(`Server not found: ${serverName}`);
     }
     const serverConfig = await getServerDao().findById(serverName);
     if (serverConfig?.enabled === false) {
-        console.log(`Skipping reconnect for disabled server: ${serverName}`);
+        logger.log(`Skipping reconnect for disabled server: ${serverName}`);
         return;
     }
     // Close existing connection if any
@@ -1665,7 +1683,7 @@ export const reconnectServer = async (serverName) => {
             serverInfo.client.close();
         }
         catch (error) {
-            console.warn('Error closing client for server', { serverName, error });
+            logger.warn('Error closing client for server', { serverName, error });
         }
     }
     if (serverInfo.transport) {
@@ -1673,7 +1691,7 @@ export const reconnectServer = async (serverName) => {
             serverInfo.transport.close();
         }
         catch (error) {
-            console.warn('Error closing transport for server', { serverName, error });
+            logger.warn('Error closing transport for server', { serverName, error });
         }
     }
     if (serverInfo.keepAliveIntervalId) {
@@ -1682,13 +1700,13 @@ export const reconnectServer = async (serverName) => {
     }
     // Reinitialize the server
     await initializeClientsFromSettings(false, serverName);
-    console.log(`Successfully reconnected server: ${serverName}`);
+    logger.log(`Successfully reconnected server: ${serverName}`);
 };
 // Reinstall server: clear package cache and reconnect.
 // For npx: deletes ~/.npm/_npx before reconnect (--ignore-existing removed in npm 7+).
 // For uvx: schedules --refresh flag injection on next spawn via pendingReinstalls Set.
 export const reinstallServer = async (serverName) => {
-    console.log(`Reinstalling server: ${serverName}`);
+    logger.log(`Reinstalling server: ${serverName}`);
     const serverInfo = getServerByName(serverName);
     if (!serverInfo) {
         throw new Error(`Server not found: ${serverName}`);
@@ -1712,7 +1730,7 @@ export const reinstallServer = async (serverName) => {
         await clearRunnerCache(command);
         // Close and reconnect (will pick up pendingReinstalls flag for uvx)
         await reconnectServer(serverName);
-        console.log(`Successfully initiated reinstall for server: ${serverName}`);
+        logger.log(`Successfully initiated reinstall for server: ${serverName}`);
     }
     catch (error) {
         // Clean up pendingReinstalls on failure to avoid stale entries
@@ -1763,7 +1781,7 @@ export const removeServer = async (name) => {
         await removeServerToolEmbeddings(name);
     }
     catch (error) {
-        console.warn('Failed to remove embeddings for server', { serverName: name, error });
+        logger.warn('Failed to remove embeddings for server', { serverName: name, error });
     }
     serverInfos = serverInfos.filter((serverInfo) => serverInfo.name !== name);
     return { success: true, message: 'Server removed successfully' };
@@ -1792,7 +1810,7 @@ export const addOrUpdateServer = async (name, config, allowOverride = false) =>
         return { success: true, message: `Server ${action} successfully` };
     }
     catch (error) {
-        console.error('Failed to add/update server', { serverName: name, error });
+        logger.error('Failed to add/update server', { serverName: name, error });
         return { success: false, message: 'Failed to add/update server' };
     }
 };
@@ -1822,7 +1840,7 @@ const closeServerRuntime = (serverInfo) => {
     if (serverInfo.keepAliveIntervalId) {
         clearInterval(serverInfo.keepAliveIntervalId);
         serverInfo.keepAliveIntervalId = undefined;
-        console.log('Cleared MCP server keep-alive interval');
+        logger.log('Cleared MCP server keep-alive interval');
     }
     const candidateTransport = serverInfo.transport;
     const stdioPid = typeof candidateTransport?.pid === 'number' ? candidateTransport.pid : null;
@@ -1831,7 +1849,7 @@ const closeServerRuntime = (serverInfo) => {
             serverInfo.client.close();
         }
         catch {
-            console.warn('Error closing MCP client during runtime shutdown');
+            logger.warn('Error closing MCP client during runtime shutdown');
         }
         serverInfo.client = undefined;
     }
@@ -1840,14 +1858,14 @@ const closeServerRuntime = (serverInfo) => {
             serverInfo.transport.close();
         }
         catch {
-            console.warn('Error closing MCP transport during runtime shutdown');
+            logger.warn('Error closing MCP transport during runtime shutdown');
         }
         serverInfo.transport = undefined;
     }
     if (stdioPid) {
         killStdioProcessTree(serverInfo.name, stdioPid);
     }
-    console.log('Closed MCP server client and transport');
+    logger.log('Closed MCP server client and transport');
 };
 // Close server client and transport (keeps the entry in serverInfos; the next
 // initializeClientsFromSettings rebuild drops it if it is no longer configured).
@@ -1873,7 +1891,7 @@ const shutdownOnDemandServer = (serverInfo) => {
     // Close runtime (kills process) but intentionally keep tools/prompts/resources
     closeServerRuntime(serverInfo);
     serverInfo.status = 'disconnected';
-    console.log(`[${serverInfo.name}] On-demand server shut down after idle; ` +
+    logger.log(`[${serverInfo.name}] On-demand server shut down after idle; ` +
         `${serverInfo.tools.length} tools cached for next wake-up`);
 };
 /**
@@ -1931,7 +1949,7 @@ const ensureServerReady = async (serverInfo) => {
             return;
         }
         const name = rawConfig.name;
-        console.log(`[${name}] Cold-starting on-demand server…`);
+        logger.log(`[${name}] Cold-starting on-demand server…`);
         const transport = await createTransportFromConfig(name, expandedConf);
         const client = createUpstreamMcpClient(name, () => serverInfo);
         const serverRequestOptions = expandedConf.options || {};
@@ -1964,7 +1982,7 @@ const ensureServerReady = async (serverInfo) => {
                 broadcastToolListChanged();
             }
             catch (error) {
-                console.warn(`[${name}] Failed to list tools during wake`, {
+                logger.warn(`[${name}] Failed to list tools during wake`, {
                     error: summarizeErrorForLogging(error),
                 });
             }
@@ -1976,7 +1994,7 @@ const ensureServerReady = async (serverInfo) => {
                 updateServerPromptsCache(serverInfo, prompts.prompts);
             }
             catch (error) {
-                console.warn(`[${name}] Failed to list prompts during wake`, {
+                logger.warn(`[${name}] Failed to list prompts during wake`, {
                     error: summarizeErrorForLogging(error),
                 });
             }
@@ -1988,14 +2006,14 @@ const ensureServerReady = async (serverInfo) => {
                 updateServerResourcesCache(serverInfo, resources.resources);
             }
             catch (error) {
-                console.warn(`[${name}] Failed to list resources during wake`, {
+                logger.warn(`[${name}] Failed to list resources during wake`, {
                     error: summarizeErrorForLogging(error),
                 });
             }
         }
         // No-op for stdio transports; only SSE/streamable-http opt in via enableKeepAlive.
         setupServerKeepAlive(serverInfo, expandedConf);
-        console.log(`[${name}] On-demand server ready in ${Date.now() - spawnStart}ms` +
+        logger.log(`[${name}] On-demand server ready in ${Date.now() - spawnStart}ms` +
             ` (${toolCount} tools, ${promptCount} prompts, ${resourceCount} resources)`);
     })();
     serverInfo.spawningPromise = spawnPromise;
@@ -2034,16 +2052,16 @@ const primeOnDemandServers = () => {
         si.enabled !== false);
     if (targets.length === 0)
         return Promise.resolve();
-    console.log(`Priming ${targets.length} on-demand server(s) for tool discovery…`);
+    logger.log(`Priming ${targets.length} on-demand server(s) for tool discovery…`);
     return Promise.allSettled(targets.map(async (si) => {
         try {
             await ensureServerReady(si);
             // Sleep the child but keep the cached tool list visible to agents.
             shutdownOnDemandServer(si);
-            console.log('On-demand server primed and asleep');
+            logger.log('On-demand server primed and asleep');
         }
         catch (error) {
-            console.warn('Failed to prime on-demand server', {
+            logger.warn('Failed to prime on-demand server', {
                 error: summarizeErrorForLogging(error),
             });
         }
@@ -2084,7 +2102,7 @@ function killStdioProcessTree(name, pid) {
                         // Pass the user-controlled `name` as a separate argument so a
                         // server named e.g. "%s" cannot inject format specifiers into the
                         // log line (CodeQL: use-of-externally-controlled-format-string).
-                        console.warn('Failed to send signal to process tree', {
+                        logger.warn('Failed to send signal to process tree', {
                             serverName: name,
                             pid,
                             signal,
@@ -2095,7 +2113,7 @@ function killStdioProcessTree(name, pid) {
             });
         }
         catch (err) {
-            console.warn('Failed to send signal to process tree', {
+            logger.warn('Failed to send signal to process tree', {
                 serverName: name,
                 pid,
                 signal,
@@ -2142,10 +2160,10 @@ export const toggleServerStatus = async (name, enabled) => {
             // Remove tool embeddings when server is disabled (for smart routing consistency)
             try {
                 await removeServerToolEmbeddings(name);
-                console.log(`Removed tool embeddings for disabled server: ${name}`);
+                logger.log(`Removed tool embeddings for disabled server: ${name}`);
             }
             catch (embeddingError) {
-                console.warn('Failed to remove embeddings for server', {
+                logger.warn('Failed to remove embeddings for server', {
                     serverName: name,
                     error: summarizeErrorForLogging(embeddingError),
                 });
@@ -2155,10 +2173,10 @@ export const toggleServerStatus = async (name, enabled) => {
             // If enabling, reconnect the server to restore connection and sync tool embeddings
             try {
                 await initializeClientsFromSettings(false, name);
-                console.log(`Re-enabled server ${name} and triggered tool embedding sync`);
+                logger.log(`Re-enabled server ${name} and triggered tool embedding sync`);
             }
             catch (reconnectError) {
-                console.warn('Failed to reconnect server during enable', {
+                logger.warn('Failed to reconnect server during enable', {
                     serverName: name,
                     error: summarizeErrorForLogging(reconnectError),
                 });
@@ -2167,7 +2185,7 @@ export const toggleServerStatus = async (name, enabled) => {
         return { success: true, message: `Server ${enabled ? 'enabled' : 'disabled'} successfully` };
     }
     catch (error) {
-        console.error('Failed to toggle server status', { serverName: name, error });
+        logger.error('Failed to toggle server status', { serverName: name, error });
         return { success: false, message: 'Failed to toggle server status' };
     }
 };
@@ -2309,7 +2327,7 @@ const projectToolForDownstream = (serverName, tool, appsRouteContext, serverConf
 export const handleListToolsRequest = async (_, extra) => {
     const sessionId = extra.sessionId || '';
     const group = getGroup(sessionId);
-    console.log(`Handling ListToolsRequest for group: ${group}`);
+    logger.log(`Handling ListToolsRequest for group: ${group}`);
     // Special handling for $smart group to return smart routing tools
     // Support both $smart and $smart/{group} patterns
     if (isSmartRoutingGroup(group)) {
@@ -2321,9 +2339,7 @@ export const handleListToolsRequest = async (_, extra) => {
     // so this list reflects the freshly cached tools instead of returning empty.
     // No wake is triggered from list itself; the prime handles that. See #1029.
     await Promise.allSettled(filteredServerInfos
-        .filter((si) => si.config?.startOnDemand === true &&
-        si.tools.length === 0 &&
-        si.spawningPromise)
+        .filter((si) => si.config?.startOnDemand === true && si.tools.length === 0 && si.spawningPromise)
         .map((si) => si.spawningPromise));
     const allTools = [];
     for (const serverInfo of filteredServerInfos) {
@@ -2353,7 +2369,7 @@ export const handleListToolsRequest = async (_, extra) => {
     };
 };
 export const handleCallToolRequest = async (request, extra) => {
-    console.log('Handling CallToolRequest for tool', summarizeToolRequestForLogging(request.params));
+    logger.log('Handling CallToolRequest for tool', summarizeToolRequestForLogging(request.params));
     const startTime = Date.now();
     const activityLogger = getActivityLoggingService();
     // Get request context for activity logging
@@ -2475,7 +2491,7 @@ export const handleCallToolRequest = async (request, extra) => {
                 const openApiClient = targetServerInfo.openApiClient;
                 // Use toolArgs if it has properties, otherwise fallback to request.params.arguments
                 const finalArgs = toolArgs && typeof toolArgs === 'object' ? toolArgs : {};
-                console.log('Invoking OpenAPI tool', {
+                logger.log('Invoking OpenAPI tool', {
                     toolName: targetToolName,
                     serverName: targetServerInfo.name,
                     arguments: summarizeArgumentsForLogging(finalArgs),
@@ -2513,7 +2529,7 @@ export const handleCallToolRequest = async (request, extra) => {
                     requestContent: finalArgs,
                     responseContent: result,
                 });
-                console.log('OpenAPI tool invocation result', {
+                logger.log('OpenAPI tool invocation result', {
                     serverName: targetServerInfo.name,
                     toolName: cleanToolName,
                     result: summarizeToolResultForLogging(result),
@@ -2558,7 +2574,7 @@ export const handleCallToolRequest = async (request, extra) => {
             }
             // Use toolArgs if it has properties, otherwise fallback to request.params.arguments
             const finalArgs = toolArgs && typeof toolArgs === 'object' ? toolArgs : {};
-            console.log('Invoking tool', {
+            logger.log('Invoking tool', {
                 toolName: targetToolName,
                 serverName: targetServerInfo.name,
                 arguments: summarizeArgumentsForLogging(finalArgs),
@@ -2575,7 +2591,7 @@ export const handleCallToolRequest = async (request, extra) => {
                 requestContent: finalArgs,
                 responseContent: result,
             });
-            console.log('Tool invocation result', {
+            logger.log('Tool invocation result', {
                 serverName: targetServerInfo.name,
                 toolName: cleanToolName,
                 result: summarizeToolResultForLogging(result),
@@ -2618,13 +2634,10 @@ export const handleCallToolRequest = async (request, extra) => {
             : undefined;
         const serverInfo = singleServerAppsRoute
             ? appsRouteContext.serverInfo
-            : (groupTool?.serverInfo ??
-                (lookupGroup ? undefined : getServerByTool(request.params.name)));
+            : (groupTool?.serverInfo ?? (lookupGroup ? undefined : getServerByTool(request.params.name)));
         const routeToolName = groupTool?.toolName ?? request.params.name;
         const tool = groupTool?.tool ??
-            (serverInfo
-                ? findToolOnServer(serverInfo, routeToolName, singleServerAppsRoute)
-                : undefined);
+            (serverInfo ? findToolOnServer(serverInfo, routeToolName, singleServerAppsRoute) : undefined);
         if (!serverInfo || !tool) {
             throw new Error(`Server not found: ${request.params.name}`);
         }
@@ -2642,7 +2655,7 @@ export const handleCallToolRequest = async (request, extra) => {
             const openApiClient = serverInfo.openApiClient;
             // Remove server prefix from tool name if present
             const cleanToolName = normalizeToolNameForServer(serverInfo.name, routeToolName);
-            console.log('Invoking OpenAPI tool', {
+            logger.log('Invoking OpenAPI tool', {
                 toolName: cleanToolName,
                 serverName: serverInfo.name,
                 arguments: summarizeArgumentsForLogging(request.params.arguments),
@@ -2679,7 +2692,7 @@ export const handleCallToolRequest = async (request, extra) => {
                 requestContent: finalArgs,
                 responseContent: result,
             });
-            console.log('OpenAPI tool invocation result', {
+            logger.log('OpenAPI tool invocation result', {
                 serverName: serverInfo.name,
                 toolName: cleanToolName,
                 result: summarizeToolResultForLogging(result),
@@ -2730,7 +2743,7 @@ export const handleCallToolRequest = async (request, extra) => {
             requestContent: request.params.arguments,
             responseContent: result,
         });
-        console.log('Tool call result', {
+        logger.log('Tool call result', {
             serverName: serverInfo.name,
             toolName: cleanToolName,
             result: summarizeToolResultForLogging(result),
@@ -2760,7 +2773,7 @@ export const handleCallToolRequest = async (request, extra) => {
         });
     }
     catch (error) {
-        console.error('Error handling CallToolRequest', summarizeErrorForLogging(error));
+        logger.error('Error handling CallToolRequest', summarizeErrorForLogging(error));
         // Log error activity
         const duration = Date.now() - startTime;
         await settleHostedIfNeeded({
@@ -2854,19 +2867,19 @@ export const handleGetPromptRequest = async (request, extra) => {
             arguments: promptArgs,
         };
         // Log the final promptParams
-        console.log('Calling getPrompt with params', {
+        logger.log('Calling getPrompt with params', {
             name: cleanPromptName || '',
             arguments: summarizeArgumentsForLogging(promptArgs),
         });
         const prompt = await server.client?.getPrompt(promptParams);
-        console.log('Received prompt', summarizePromptForLogging(prompt));
+        logger.log('Received prompt', summarizePromptForLogging(prompt));
         if (!prompt) {
             throw new Error(`Prompt not found: ${cleanPromptName}`);
         }
         return prompt;
     }
     catch (error) {
-        console.error('Error handling GetPromptRequest', summarizeErrorForLogging(error));
+        logger.error('Error handling GetPromptRequest', summarizeErrorForLogging(error));
         const safeErrorText = formatErrorForLogging(error);
         return {
             content: [
@@ -2883,7 +2896,7 @@ export const handleListPromptsRequest = async (_, extra) => {
     const sessionId = extra.sessionId || '';
     const group = getGroup(sessionId);
     const lookupGroup = getGroupLookupName(group);
-    console.log(`Handling ListPromptsRequest for group: ${group}`);
+    logger.log(`Handling ListPromptsRequest for group: ${group}`);
     // Start with built-in prompts (only enabled ones)
     const builtinPrompts = await getBuiltinPromptDao().findEnabled();
     const allPrompts = builtinPrompts.map((bp) => normalizePromptForList({
@@ -2927,7 +2940,7 @@ export const handleListResourcesRequest = async (_, extra) => {
     const sessionId = extra.sessionId || '';
     const group = getGroup(sessionId);
     const lookupGroup = getGroupLookupName(group);
-    console.log(`Handling ListResourcesRequest for group: ${group}`);
+    logger.log(`Handling ListResourcesRequest for group: ${group}`);
     const appsRouteContext = await getMcpAppsRouteContext(sessionId, group);
     // Start with built-in resources (only enabled ones)
     const builtinResources = await getBuiltinResourceDao().findEnabled();
@@ -2972,7 +2985,7 @@ export const handleListResourceTemplatesRequest = async (_, extra) => {
     const sessionId = extra.sessionId || '';
     const group = getGroup(sessionId);
     const lookupGroup = getGroupLookupName(group);
-    console.log(`Handling ListResourceTemplatesRequest for group: ${group}`);
+    logger.log(`Handling ListResourceTemplatesRequest for group: ${group}`);
     const appsRouteContext = await getMcpAppsRouteContext(sessionId, group);
     const { filteredServerInfos, serverConfigsByName } = await getFilteredServerInfosForGroup(lookupGroup, {
         requireClient: true,
@@ -3075,7 +3088,7 @@ export const handleReadResourceRequest = async (request, extra) => {
             };
     }
     catch (error) {
-        console.error('Error handling ReadResourceRequest', summarizeErrorForLogging(error));
+        logger.error('Error handling ReadResourceRequest', summarizeErrorForLogging(error));
         const safeErrorText = formatErrorForLogging(error);
         return {
             contents: [