dsh-mcp-panel 0.4.0 → 0.4.2

package/README.zh.md

@@ -1,26 +1,56 @@
+<div align="center">
+
 # dsh-mcp-panel
 
 **官方 DeepSeek Harness MCP client 的 MCP 管理控制台 —— 在设置页可视化增删改 MCP 服务器、试用工具调用，配以诚实的连接状态、健康诊断与安全可逆的 profile 写入。**
 
-[English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
+*官方 client = 桥接，本插件 = 控制台：经 `mcp/status` seam 读取状态，只写入只追加、走审批的 profile patch。*
 
 [![License](https://img.shields.io/badge/license-Apache%202.0-blue.svg)](LICENSE)
-[![npm](https://img.shields.io/npm/v/dsh-mcp-panel)](https://www.npmjs.com/package/dsh-mcp-panel)
-[![downloads](https://img.shields.io/npm/dm/dsh-mcp-panel)](https://www.npmjs.com/package/dsh-mcp-panel)
-[![CI](https://github.com/PerryLink/dsh-mcp-panel/actions/workflows/ci.yml/badge.svg)](https://github.com/PerryLink/dsh-mcp-panel/actions/workflows/ci.yml)
-[![dsh-plugin](https://img.shields.io/badge/ecosystem-dsh--plugin-8b5cf6)](https://github.com/topics/dsh-plugin)
-[![deepseek-harness](https://img.shields.io/badge/runtime-deepseek--harness-4f46e5)](https://github.com/deepseek-ai/deepseek-harness)
+[![DSH plugin](https://img.shields.io/badge/dsh-plugin-✅-green)](https://github.com/topics/dsh-plugin)
+[![Node](https://img.shields.io/badge/node-%5E22.19%20%7C%7C%20%3E%3D24-brightgreen.svg)](#)
+[![CI](https://img.shields.io/github/actions/workflow/status/PerryLink/dsh-mcp-panel/ci.yml?branch=main&label=CI)](https://github.com/PerryLink/dsh-mcp-panel/actions)
+[![Version](https://img.shields.io/github/v/tag/PerryLink/dsh-mcp-panel?label=version)](https://github.com/PerryLink/dsh-mcp-panel/releases)
+[![npm version](https://img.shields.io/npm/v/dsh-mcp-panel)](https://www.npmjs.com/package/dsh-mcp-panel)
+[![npm downloads](https://img.shields.io/npm/dm/dsh-mcp-panel)](https://www.npmjs.com/package/dsh-mcp-panel)
 
-## 架构：官方 client 负责桥接，本插件是完整体验层
+[English](README.md) · [简体中文](README.zh.md) · [Español](README.es.md) · [Português](README.pt.md) · [हिन्दी](README.hi.md)
 
-[`@deepseek-ai/dsh-mcp-client`](https://github.com/deepseek-ai/deepseek-harness/tree/master/packages/mcp/mcp-client) 是**唯一的桥接层**：每个 MCP server 一个插件实例，以手写 `cordis.yml` 行的形式配置，负责连接传输、同步工具并注册 `mcp__<server>__<tool>` 工具名。本插件从不取代它 —— 而是构建其上的**体验层**：
+</div>
 
-```
+---
+
+## Compatibility
+
+| 维度 | 状态 |
+|---|---|
+| Harness | DeepSeek Harness `0.1.0-rc.8`–`0.2.0` |
+| Node | `^22.19.0 \|\| >=24.0.0` |
+| 平台 | Web GUI（双面：Host + 浏览器） |
+| 模型 | 任意（面板只读；仅 `/mcp` 输出对模型可见） |
+
+## What you get
+
+`dsh-mcp-panel` 是官方 MCP client 之上的体验层：只读运行时视图加上安全可逆的 profile 写入。
+
+- **`/mcp` 命令** —— 每 server 一行：transport、目标、工具数、连接状态（来自上游 seam；未观测时如实显示 `unknown`）、最近错误、重连计数——模型可读、会话日志可重建、五种输出语言。
+- **`/mcp <server> tools`** —— 模型可见的 `mcp__*` 工具名与描述。
+- **`/mcp <server> health`** —— 派生自愈建议（ENOENT → 依赖缺失、ECONNREFUSED、超时、401/403/404、DNS、限流、重连耗尽…）；退出码 / stderr 尾部如实标注*待官方支持*。
+- **`/mcp <server> call <tool> [json]`** —— 经**官方工具管线**（`ctx.tools.execute()`）试用调用；pre-execute 权限策略、审批、guard、post-execute 全部生效。
+- **设置 → 插件 → MCP 页** —— 状态卡片（徽章、诊断、探测），加 server CRUD 与工具试用台。
+- **Server CRUD** —— 增删改表单 → `insert`/`set`/`set disabled` 片段 → 剪贴板复制或审批写入，自动备份。
+- **工具试用台** —— 选 server → 选 `mcp__*` 工具 → JSON 填参 → 规范 JSON 结果 + render 内容；按 `trialMaxResultChars` 截断；仅面板可见、永不进入模型上下文。
+
+## Architecture: official client = bridge, this plugin = console
+
+[`@deepseek-ai/dsh-mcp-client`](https://github.com/deepseek-ai/deepseek-harness/tree/master/packages/mcp/mcp-client) 是**唯一的桥接层**：每个 MCP server 一个插件实例，以手写 `cordis.yml` 行的形式配置，负责连接传输、同步工具并注册 `mcp__<server>__<tool>` 工具名。本插件从不取代它——而是构建其上的**体验层**：
+
+```text
                     ┌────────────────────────────────────────────┐
  profile            │  cordis.yml / cordis.patch.yml             │
  组合（每个         │   - id: mcp-github                          │
- server 一行，      │     name: '@deepseek-ai/dsh-mcp-client'     │
- 手写）             │     config: { serverName, transport, … }    │
+  server 一行，     │     name: '@deepseek-ai/dsh-mcp-client'     │
+  手写）            │     config: { serverName, transport, … }    │
                     │   - id: mcp-panel                           │
                     │     name: dsh-mcp-panel   ◄── 本插件        │
                     └───────────────┬────────────────────────────┘
@@ -33,13 +63,14 @@
    │ • 传输连接        │        │ • /mcp 命令               │    │
    │ • 工具同步        │        │ • 设置 → 插件 → MCP 页：  │    │
    │ • mcp__* 工具     │◄──────►│   CRUD、工具试用台        │    │
-   │ • mcp/status seam │ 状态   │ • 健康诊断、探测、能力一览 │    │
-   └───────────────────┘        └───────────────────────────┘    │
+   │ • mcp/status seam │ 状态   │ • 健康诊断                │    │
+   └───────────────────┘        │ • 探测、能力一览          │    │
+                                └───────────────────────────┘    │
 ```
 
-控制台通过官方 client 已落地的 `mcp/status` 可观测 seam（事件 + `mcpStatus` 查询服务）、工具注册表与 loader **读取**事实；**写入**只发生在 profile 的 patch 层 —— 只追加、走审批、自动备份。传输、OAuth 与协议完全不动。
+控制台通过官方 client 已落地的 `mcp/status` 可观测 seam（事件 + `mcpStatus` 查询服务）、工具注册表与 loader **读取**事实；**写入**只发生在 profile 的 patch 层——只追加、走审批、自动备份。传输、OAuth 与协议完全不动。
 
-## 控制台 vs. 手写 cordis.yml
+## Console vs. hand-written cordis.yml
 
 | | 手写 cordis.yml | dsh-mcp-panel 控制台 |
 |---|---|---|
@@ -51,33 +82,22 @@
 | 排查故障 | grep 日志 | `/mcp <server> health` 派生自愈建议 |
 | 误操作 | 手动回滚 | 每次写入只追加、留时间戳备份 |
 
-控制台的输出就是 `cordis.patch.yml` 的词汇表 —— 你手写的那几行，由它生成、预览并安全落地。
+控制台的输出就是 `cordis.patch.yml` 的词汇表——你手写的那几行，由它生成、预览并安全落地。
 
-## 功能一览
-
-| 界面 | 功能 |
-|---|---|
-| **`/mcp` 命令** | 每 server 一行：transport、目标、工具数、连接状态（来自上游 seam；未观测时如实显示 `unknown`）、最近错误、重连计数——模型可读、会话日志可重建、五种输出语言 |
-| **`/mcp <server> tools`** | 模型可见的 `mcp__*` 工具名与描述 |
-| **`/mcp <server> health`** | 派生自愈建议（ENOENT → 依赖缺失、ECONNREFUSED、超时、401/403/404、DNS、限流、重连耗尽…）；退出码 / stderr 尾部如实标注"待官方支持" |
-| **`/mcp <server> call <tool> [json]`** | 经**官方工具管线**试用调用——pre-execute 权限策略、审批（经命令所属 agent 路由）、guard、post-execute 全部生效 |
-| **`/mcp <server> disable\|enable`** | 精确的 `set` patch 行（同旧版） |
-| **设置 → 插件 → MCP 页** | 状态卡片（徽章、诊断、探测），加以下三块控制台 |
-| **Server CRUD** | 增删改表单 → `insert`/`set`/`set disabled` 片段 → 剪贴板复制或审批写入，自动备份（`cordis.patch.yml.bak-<ts>`，保留最新 `backupCount` 份） |
-| **工具试用台** | 选 server → 选 `mcp__*` 工具 → JSON 填参 → 规范 JSON 结果 + render 内容；按 `trialMaxResultChars` 截断；仅面板可见、永不进入模型上下文 |
-| **能力一览** | Resources / Prompts 可用性（特征探测）；目前二者均如实标注"待官方支持"（官方 client 仅桥接工具） |
-| **探测** | 一键 / 被动 Streamable HTTP 连通性探测（结果仅面板可见） |
-
-## 快速开始
+## Quick start
 
 ```sh
-# git 渠道（由包的 prepare 脚本构建）
-dsh plugin --profile web add github:PerryLink/dsh-mcp-panel#v0.4.0
-# npm 渠道（已发布 tarball，无需构建审批）
-dsh plugin --profile web add dsh-mcp-panel@0.4.0
+# 1. 把 bundle 安装进 profile
+dsh plugin --profile web add "github:PerryLink/dsh-mcp-panel#main"
+
+# 或从 npm（发布版本）
+dsh plugin --profile web add dsh-mcp-panel
+
+# 2. 重启并校验该行
+dsh --profile web --dump-config | grep -A3 'id: mcp-panel'
 ```
 
-随后重启（或让 web 面板热重载 `cordis.patch.yml`），打开 **设置 → 插件 → MCP**，或运行：
+随后打开 **设置 → 插件 → MCP**，或运行：
 
 ```text
 /mcp
@@ -86,66 +106,106 @@ dsh plugin --profile web add dsh-mcp-panel@0.4.0
 /mcp everything call echo '{"message": "hi"}'
 ```
 
-手动安装：把 `dsh-mcp-panel` 放进 profile 的 `node_modules`（或共享的 `$DSH_HOME/profiles/node_modules` 回退目录），并在 `cordis.patch.yml` 加一行：
-
-```yaml
-- insert:
-    - id: mcp-panel
-      name: dsh-mcp-panel
-      config:
-        probeEnabled: true
-```
-
-### 卸载
+## Install & uninstall
 
-1. 从 `cordis.patch.yml` 移除 `mcp-panel` 行（web 面板热重载；其他面板重启生效）。
-2. 从 profile 的 `node_modules`（或共享 `profiles/node_modules` 回退目录）删除本包。
-3. 用 `dsh web --dump-config` 确认没有残留的 `mcp-panel` 行。
+- **git 通道**（最新 `main`）：`dsh plugin --profile web add "github:PerryLink/dsh-mcp-panel#main"` —— `prepare` 脚本只用生产依赖构建。
+- **npm 通道**（发布版本）：`dsh plugin --profile web add dsh-mcp-panel`。
+- **tarball 通道**：在本仓库 `pnpm pack`，再 `dsh plugin --profile web add ./dsh-mcp-panel-<version>.tgz`。
+- **卸载**：从 `cordis.patch.yml` 移除 `mcp-panel` 行（web 面板热重载），从 profile 的 `node_modules` 删除本包，并用 `dsh web --dump-config` 确认没有残留的 `mcp-panel` 行。
 
-## 诚实契约
+## Configuration
 
-- **桥接层仍是桥接层。** 不改传输、OAuth、协议；每个 server 一行 mcp-client，与你手写完全一致。
-- **不伪造状态。** 无上游观测时连接字段显示 `unknown` / `—`，并标注 `statusSource: 'derived'`；退出码与 stderr 尾部绝不臆造。
-- **展示全程脱敏。** URL 查询凭据、userinfo 密码、header 值、Bearer token、JWT 在渲染前一律打码；配置的 `headers` 从不进入任何快照；env/header 的**值**绝不出 host（编辑器只见 key）。
-- **写入只追加、走审批、先备份。** 控制台从不改写 `cordis.patch.yml`：只追加生成的操作。存在审批服务且调用方会话的 agent 处于开启轮次时，写入走 `ctx.approval`（仅 `allowed-once` 放行）；否则以界面显式确认为审批通道。`writeEnabled: false` 是硬性总开关。
-- **零提示词注入。** 本插件不注册任何提示词段落；对模型可见的文本只有两个工具/命令描述，沿用官方 client 的 Minimal 风格。
+所有可调项都是 Schemastery `Config` 字段（可从 cordis.yml 覆盖）。`cordis.patch.yml` 逐键内联注释。
 
-## 配置
-
-| 键 | 默认值 | 说明 |
+| 键 | 默认值 | 含义 |
 |---|---|---|
 | `probeEnabled` | `true` | 注册 `mcp_probe` 后台任务工具（结果仅面板可见） |
 | `probeTimeoutMs` | `10000` | 单次探测超时（ms） |
 | `maxProbes` | `10` | 面板展示的探测记录数 |
 | `refreshIntervalMs` | `0` | 建议的面板刷新间隔（ms）；`0` = 按需 |
-| `outputLanguage` | `en` | `/mcp` 输出语言：`en\|zh\|es\|pt\|hi` |
+| `outputLanguage` | `en` | `/mcp` 输出语言：`en \| zh \| es \| pt \| hi` |
 | `passiveProbeEnabled` | `false` | 周期性探测 streamable-http 服务器 |
 | `passiveProbeIntervalMs` | `60000` | 被动探测间隔（ms） |
 | `trialEnabled` | `true` | 工具试用台（设置页 + `/mcp call`） |
-| `trialTimeoutMs` | `120000` | 每次试用调用的面板侧截止时间 |
+| `trialTimeoutMs` | `120000` | 每次试用调用的面板侧截止时间（ms） |
 | `trialMaxResultChars` | `60000` | 试用结果载荷上限（字符） |
 | `writeEnabled` | `true` | 总开关：`false` 拒绝一切 profile 写入（仍可复制片段） |
 | `backupCount` | `5` | 每次写入保留的 `cordis.patch.yml` 备份数 |
 
-## Resources 与 Prompts
+## Tools & surfaces
+
+| 表面 | 类型 | 说明 |
+|---|---|---|
+| `/mcp` | command | 每 server 状态行；模型可读、日志可重建 |
+| `/mcp <server> tools` | command | 模型可见的 `mcp__*` 工具名与描述 |
+| `/mcp <server> health` | command | 由脱敏错误文本派生的自愈建议 |
+| `/mcp <server> call <tool> [json]` | command | 经官方工具管线试用调用 |
+| `mcp_probe` | tool | 可选 Streamable HTTP 连通性探测（后台任务） |
+| 设置 → 插件 → MCP 页 | UI 槽位 | 状态卡片、server CRUD 与工具试用台 |
+| `mcpPanel` Typert Remote | service | 只读快照通道（Host → client） |
+
+## Resources & Prompts
+
+官方 client 明确记载 *"Tools 是当前唯一桥接的 MCP 能力"*——Resources 与 Prompts 处于 deferred 状态。控制台特征探测了上游提案中的 catalog seam，一旦落地即可只读展示列表；在此之前，能力一览中二者均标注**待官方支持**。
 
-官方 client 明确记载"Tools 是当前唯一桥接的 MCP 能力"——Resources 与 Prompts 处于 deferred 状态。控制台特征探测了上游提案中的 catalog seam，一旦落地即可只读展示列表；在此之前，能力一览中二者均标注**待官方支持**（详见 deepseek-harness `docs/upstream-proposal.md` 的补充提案）。
+## Permissions & data
 
-## 开发
+- **权限**：`dshWorkshop` manifest 声明 `network:outbound` 与 `native-code:none`。
+- **数据**：面板只读；只写入只追加的 `cordis.patch.yml` 片段（走审批、先备份）。URL 查询凭据、userinfo 密码、header 值、Bearer token、JWT 在渲染前一律打码；配置的 `headers` 从不进入任何快照，env/header 的**值**绝不出 Host（编辑器只见 key）。
+
+## Security boundaries
+
+- **桥接层仍是桥接层。** 不改传输、OAuth、协议；每个 server 一行 mcp-client，与你手写完全一致。
+- **不伪造状态。** 无上游观测时连接字段显示 `unknown` / `—` 并标注 `statusSource: 'derived'`；退出码与 stderr 尾部绝不臆造。
+- **写入只追加、走审批、先备份。** 控制台从不改写 `cordis.patch.yml`：只追加生成的操作，并保留最新 `backupCount` 份备份。
+- **零提示词注入。** 本插件不注册任何提示词段落；对模型可见的文本只有两个工具/命令描述。
+
+## Known limitations
+
+- **Resources 与 Prompts** 待官方支持——官方 client 仅桥接工具。
+- **退出码 / stderr 尾部** 在 client 暴露前如实标注*待官方支持*。
+- **只读面板** —— 控制台从不伪造连接状态；不可观测字段显示 `unknown` / `-1` / `—`。
+
+## Development
 
 ```sh
 pnpm run typecheck && pnpm run typecheck:ci && pnpm test && pnpm run build && pnpm run verify:self-contained && pnpm run verify:artifacts && pnpm pack
 ```
 
-- `src/patch.ts` — 校验、保留语义合并、YAML 片段渲染（纯函数）。
-- `src/write.ts` — 备份 + 追加 + 保留策略（唯一写文件模块）。
-- `src/trial.ts` — 经 `ctx.tools.execute()` 的官方管线试用调用。
-- `src/diagnostics.ts` — 错误模式 → 建议映射（纯函数）。
-- `src/client/` — 设置页控制台（服务器编辑器、试用台、诊断）。
-- `scripts/verify-headless.mjs` 启动真实 web profile 并打印 `/mcp` 实际输出。
+`scripts/verify-headless.mjs` 启动真实 web profile 并打印 `/mcp` 实际输出。发布：`node scripts/release.mjs <x.y.z>` 跑全量门禁、提交并本地打 `v<x.y.z>` 标签（绝不推送）。
+
+## Topics
 
-发布：`node scripts/release.mjs <x.y.z>` 跑全量门禁、提交并本地打 `v<x.y.z>` 标签（绝不推送）。
+`dsh`, `dsh-plugin`, `deepseek-harness`, `deepseek`, `cordis`, `mcp`, `mcp-client`, `observability`, `panel`
 
-## 许可证
+## Contributors
 
-Apache-2.0 —— 见 [LICENSE](LICENSE)。
+- [@PerryLink](https://github.com/PerryLink) —— 创建者与维护者。
+- [@xiaoyuyu6420](https://github.com/xiaoyuyu6420) —— 诊断出干净 checkout 构建失败背后缺失的 client devDependencies（PR #5）。
+
+## PerryLink DSH Plugin Family
+
+本项目是 [PerryLink](https://github.com/PerryLink) 维护的 [DeepSeek Harness 插件](https://github.com/PerryLink)之一。如果你觉得这个插件有用，其余的很可能同样有用：
+
+| 插件 | 一句话说明 |
+|---|---|
+| [dsh-mask](https://github.com/PerryLink/dsh-mask) | PII 脱敏中间件：模型边界匿名化、展示层还原 |
+| **[dsh-mcp-panel](https://github.com/PerryLink/dsh-mcp-panel)** | 只读 MCP 运行时面板：/mcp 命令 + 设置页，状态/工具/错误一览 |
+| [dsh-doublecheck](https://github.com/PerryLink/dsh-doublecheck) | 工程纪律守门：需求审讯、测试证据门、对抗评审 |
+| [dsh-background-agents](https://github.com/PerryLink/dsh-background-agents) | 持久化后台子代理：Web 侧边栏进度、随时留言与打断 |
+| [dsh-lsp-actions](https://github.com/PerryLink/dsh-lsp-actions) | 基于语言服务器的诊断/格式化/补全/代码动作/重命名 |
+| [dsh-output-styles](https://github.com/PerryLink/dsh-output-styles) | 对标 Claude Code outputStyles 的运行时风格切换 |
+| [dsh-checkpoint-rewind](https://github.com/PerryLink/dsh-checkpoint-rewind) | 对标 Claude Code /rewind：快照、会话 fork、一键回退 |
+| [dsh-permission-rules](https://github.com/PerryLink/dsh-permission-rules) | Claude Code 风格声明式 allow/deny/ask 权限规则，带审计 |
+| [dsh-auto-review](https://github.com/PerryLink/dsh-auto-review) | 审批链上的第二模型自动审查，默认 fail-closed |
+| [dsh-memento](https://github.com/PerryLink/dsh-memento) | 带审批门的跨会话记忆：ctx.memory + SQLite + memory 工具 |
+| [dsh-skill-pack-security](https://github.com/PerryLink/dsh-skill-pack-security) | 安全审计技能包：密钥扫描、依赖与供应链审查 |
+| [dsh-session-pin](https://github.com/PerryLink/dsh-session-pin) | 在 Web 侧边栏置顶会话，持久排序 |
+| [dsh-composer-history](https://github.com/PerryLink/dsh-composer-history) | Web 作曲器终端式输入历史：方向键、Ctrl+R 搜索 |
+| [dsh-github](https://github.com/PerryLink/dsh-github) | DSH 的 GitHub PR/issue 集成，所有写操作经审批门 |
+| [dsh-plugin-guide](https://github.com/PerryLink/dsh-plugin-guide) | 插件开发知识库，随 bundle 安装的按需 agent 技能 |
+| [dsh-claude-move](https://github.com/PerryLink/dsh-claude-move) | 把 Claude Code 会话、记忆、技能和 CLAUDE.md 迁入 DSH |
+
+## License
+
+[Apache License 2.0](LICENSE) © 2026 dsh-mcp-panel contributors

package/lib/index.js

@@ -600,7 +600,7 @@ const INITIALIZE_PROTOCOL_VERSION = "2024-11-05";
 * advertised version tracks the package version. */
 const PROBE_CLIENT_INFO = {
 	name: "dsh-mcp-panel",
-	version: "0.4.0"
+	version: "0.4.2"
 };
 /** Display cap for server-reported name/version fields in probe details. */
 const DISPLAY_LIMIT = 80;
@@ -1664,8 +1664,6 @@ async function pruneBackups(filePath, keep) {
 //#region src/trial.ts
 /** Panel-owned marker prefix so trial callIds can never collide with model calls. */
 const TRIAL_CALL_PREFIX = "mcp-panel-trial";
-/** Trial callId counter per service instance. */
-let trialCounter = 0;
 /**
 * Validate one trial request structurally; returns an English error string
 * or null. Never throws on untrusted input.
@@ -1684,46 +1682,55 @@ function validateTrialRequest(request) {
 	return null;
 }
 /**
-* Run one trial call through the official tool pipeline.
-*
-* @param tools - the registry the call executes through.
-* @param agents - optional live agent registry for approval routing.
-* @param sessionId - optional current session id from the client.
-* @param request - the validated trial request.
-* @param limits - panel-side deadline and result cap.
-* @returns the wire result.
+* Create the trial caller: one callId sequence per service instance, so a
+* plugin reload never carries counter state across mounts.
+* @returns the trial caller bound to its own sequence.
 */
-async function runTrialCall(tools, agents, sessionId, request, limits) {
-	const { serverName, toolName } = request;
-	const prefix = `mcp__${serverName}__`;
-	if (!toolName.startsWith(prefix)) throw new Error(`tool "${toolName}" does not belong to server "${serverName}" (expected the ${prefix}… namespace)`);
-	if (tools.get(toolName) === void 0) throw new Error(`tool "${toolName}" is not registered — the server may be down or its sync failed`);
-	let argumentsValue;
-	try {
-		argumentsValue = JSON.parse(request.argsJson);
-	} catch {
-		throw new Error("argsJson is not valid JSON");
-	}
-	const agent = sessionId === void 0 || sessionId === "" ? void 0 : agents?.get(sessionId);
-	const callId = `${TRIAL_CALL_PREFIX}-${++trialCounter}`;
-	const started = Date.now();
-	const execution = {
-		callId,
-		name: toolName,
-		arguments: argumentsValue,
-		...agent === void 0 ? {} : { agent },
-		signal: AbortSignal.timeout(limits.timeoutMs)
-	};
-	const result = await tools.execute(execution);
-	const durationMs = Date.now() - started;
-	const { json, truncated } = projectTrialResult(result, limits.maxResultChars);
-	return {
-		callId: String(callId),
-		isError: result.isError,
-		truncated,
-		durationMs,
-		resultJson: json
-	};
+function createTrialCaller() {
+	let trialCounter = 0;
+	return { 
+	/**
+	* Run one trial call through the official tool pipeline.
+	*
+	* @param tools - the registry the call executes through.
+	* @param agents - optional live agent registry for approval routing.
+	* @param sessionId - optional current session id from the client.
+	* @param request - the validated trial request.
+	* @param limits - panel-side deadline and result cap.
+	* @returns the wire result.
+	*/
+async runTrialCall(tools, agents, sessionId, request, limits) {
+		const { serverName, toolName } = request;
+		const prefix = `mcp__${serverName}__`;
+		if (!toolName.startsWith(prefix)) throw new Error(`tool "${toolName}" does not belong to server "${serverName}" (expected the ${prefix}… namespace)`);
+		if (tools.get(toolName) === void 0) throw new Error(`tool "${toolName}" is not registered — the server may be down or its sync failed`);
+		let argumentsValue;
+		try {
+			argumentsValue = JSON.parse(request.argsJson);
+		} catch {
+			throw new Error("argsJson is not valid JSON");
+		}
+		const agent = sessionId === void 0 || sessionId === "" ? void 0 : agents?.get(sessionId);
+		const callId = `${TRIAL_CALL_PREFIX}-${++trialCounter}`;
+		const started = Date.now();
+		const execution = {
+			callId,
+			name: toolName,
+			arguments: argumentsValue,
+			...agent === void 0 ? {} : { agent },
+			signal: AbortSignal.timeout(limits.timeoutMs)
+		};
+		const result = await tools.execute(execution);
+		const durationMs = Date.now() - started;
+		const { json, truncated } = projectTrialResult(result, limits.maxResultChars);
+		return {
+			callId: String(callId),
+			isError: result.isError,
+			truncated,
+			durationMs,
+			resultJson: json
+		};
+	} };
 }
 /** Project the registry outcome onto the lossless JSON the client renders. */
 function projectTrialResult(result, budget) {
@@ -1919,6 +1926,8 @@ var McpPanelService = class extends TypertRemoteService {
 	observedAt = /* @__PURE__ */ new Map();
 	/** Latest passive-probe reachability per server namespace. */
 	probeStates = /* @__PURE__ */ new Map();
+	/** The trial caller with this instance's own callId sequence. */
+	trialCaller = createTrialCaller();
 	/** Passive-probe loop guard: one sweep at a time. */
 	passiveRunning = false;
 	/**
@@ -2137,7 +2146,7 @@ var McpPanelService = class extends TypertRemoteService {
 		}
 		const problem = validateTrialRequest(request);
 		if (problem !== null) throw new Error(`dsh-mcp-panel: ${problem}`);
-		return runTrialCall(this.ctx.tools, agentsOf(this.ctx), sessionId, request, {
+		return this.trialCaller.runTrialCall(this.ctx.tools, agentsOf(this.ctx), sessionId, request, {
 			timeoutMs: this.config.trialTimeoutMs,
 			maxResultChars: this.config.trialMaxResultChars
 		});
@@ -2289,4 +2298,4 @@ async function apply(ctx, config) {
 	});
 }
 //#endregion
-export { Config, MCP_STATUS_EVENT, McpPanelService, aggregateServerView, aggregateSnapshot, appendPatchFragment, apply, configViewOf, countServerTools, defaultEntryId, deriveTarget, diagnoseServer, groupMcpTools, inject, mcpCommand, mcpProbeTool, mergeServerConfig, name, nextEntryId, parseMcpArgs, probeEndpoint, probeJob, renderHealth, renderList, renderPatchFragment, renderPatchSuggestion, renderServer, renderTools, renderTrialCall, resolveConfig, resolvePatchOp, runTrialCall, sanitizeError, sanitizeText, sanitizeUrl, serverNameOf, validateServerConfig, validateTrialRequest, yamlScalar };
+export { Config, MCP_STATUS_EVENT, McpPanelService, aggregateServerView, aggregateSnapshot, appendPatchFragment, apply, configViewOf, countServerTools, createTrialCaller, defaultEntryId, deriveTarget, diagnoseServer, groupMcpTools, inject, mcpCommand, mcpProbeTool, mergeServerConfig, name, nextEntryId, parseMcpArgs, probeEndpoint, probeJob, renderHealth, renderList, renderPatchFragment, renderPatchSuggestion, renderServer, renderTools, renderTrialCall, resolveConfig, resolvePatchOp, sanitizeError, sanitizeText, sanitizeUrl, serverNameOf, validateServerConfig, validateTrialRequest, yamlScalar };

package/lib/types/aggregate.d.ts

@@ -14,9 +14,9 @@
  *
  * @module dsh-mcp-panel/aggregate
  */
-import { type McpToolGroup } from './grouping.ts';
-import type { McpServerStatus } from './upstream.ts';
-import type { McpFiberPhase, McpPanelSnapshot, McpServerConfigView, McpServerView, McpTransport } from './wire.ts';
+import { type McpToolGroup } from './grouping.js';
+import type { McpServerStatus } from './upstream.js';
+import type { McpFiberPhase, McpPanelSnapshot, McpServerConfigView, McpServerView, McpTransport } from './wire.js';
 /** One loader-derived mcp-client row (config is raw serialized data). */
 export interface McpLoaderRow {
     /** Loader entry id (the patch row id). */

package/lib/types/client/McpPanelTab.d.ts

@@ -1,7 +1,7 @@
 /** The MCP management console tab: server cards, CRUD editor, trial console, capabilities, probes. */
 import { type ReactNode } from 'react';
 import type { InjectFace, PropsLocale, PropsRuntime } from '@deepseek-ai/dsh-client-ui-slots';
-import type { McpPanelSnapshot, McpTrialResultWire, PatchPreview, PatchWriteResult, ProbeStarted } from '../wire.ts';
+import type { McpPanelSnapshot, McpTrialResultWire, PatchPreview, PatchWriteResult, ProbeStarted } from '../wire.js';
 /** Registration-side injected face: the console RPCs (RemoteResult already unwrapped). */
 export interface McpPanelTabInjected {
     /** Read the current Host snapshot. */

package/lib/types/client/ServerEditor.d.ts

@@ -1,7 +1,7 @@
 /** Server CRUD editor: form → patch fragment → copy or approval-gated write. */
 import { type ReactNode } from 'react';
 import type { PropsLocale } from '@deepseek-ai/dsh-client-ui-slots';
-import type { McpServerConfigView, PatchPreview, PatchWriteResult } from '../wire.ts';
+import type { McpServerConfigView, PatchPreview, PatchWriteResult } from '../wire.js';
 /** Editor callbacks supplied by the tab. */
 export interface ServerEditorActions {
     previewPatch: (opJson: string) => Promise<PatchPreview>;

package/lib/types/client/TrialConsole.d.ts

@@ -1,7 +1,7 @@
 /** Tool trial console: server → registered mcp__* tool → JSON args → official pipeline. */
 import { type ReactNode } from 'react';
 import type { PropsLocale } from '@deepseek-ai/dsh-client-ui-slots';
-import type { McpServerView, McpTrialResultWire } from '../wire.ts';
+import type { McpServerView, McpTrialResultWire } from '../wire.js';
 /** Trial console props supplied by the tab. */
 export interface TrialConsoleProps {
     t: PropsLocale<'settings.mcpPanel'>['t'];

package/lib/types/client/index.d.ts

@@ -10,11 +10,11 @@
  * @module dsh-mcp-panel/client
  */
 import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
-import { type McpPanelLocaleKey } from './locales.ts';
-export type { McpPanelTabInjected, McpPanelTabProps } from './McpPanelTab.tsx';
-export type { McpPanelLocaleKey } from './locales.ts';
-export { presentMcpPanel, connectionBadge, probeBadge } from './present.ts';
-export type { PresentedMcpPanel, PresentedProbeRow, PresentedServerRow, BadgeTone } from './present.ts';
+import { type McpPanelLocaleKey } from './locales.js';
+export type { McpPanelTabInjected, McpPanelTabProps } from './McpPanelTab.js';
+export type { McpPanelLocaleKey } from './locales.js';
+export { presentMcpPanel, connectionBadge, probeBadge } from './present.js';
+export type { PresentedMcpPanel, PresentedProbeRow, PresentedServerRow, BadgeTone } from './present.js';
 declare module '@deepseek-ai/dsh-client-ui-slots' {
     interface LocaleNamespaceMap {
         /** MCP management console copy. */

package/lib/types/client/present.d.ts

@@ -7,7 +7,7 @@
  *
  * @module dsh-mcp-panel/client/present
  */
-import type { McpPanelSnapshot, McpServerView, McpProbeView } from '../wire.ts';
+import type { McpPanelSnapshot, McpServerView, McpProbeView } from '../wire.js';
 /** Badge tones the stylesheet understands. */
 export type BadgeTone = 'ok' | 'warn' | 'error' | 'muted';
 /** Render-ready server row plus derived badge facts. */

package/lib/types/client/remote.d.ts

@@ -8,7 +8,7 @@
  * @module dsh-mcp-panel/client/remote
  */
 import type { RemoteResult } from '@deepseek-ai/dsh-typert-protocol';
-import type { McpPanelSnapshot, McpTrialResultWire, PatchPreview, PatchWriteResult, ProbeStarted } from '../wire.ts';
+import type { McpPanelSnapshot, McpTrialResultWire, PatchPreview, PatchWriteResult, ProbeStarted } from '../wire.js';
 declare module '@deepseek-ai/dsh-typert-protocol' {
     interface TypertRemoteNamespace$mcpPanel {
         /** Read the current console snapshot. */

package/lib/types/command.d.ts

@@ -20,8 +20,8 @@
  * @module dsh-mcp-panel/command
  */
 import type { CommandDefinition } from '@deepseek-ai/dsh-commands';
-import type { McpPanelService } from './service.ts';
-import type { McpPanelSnapshot, McpServerView } from './wire.ts';
+import type { McpPanelService } from './service.js';
+import type { McpPanelSnapshot, McpServerView } from './wire.js';
 /** Display language for the `/mcp` output. */
 export type CommandLanguage = 'en' | 'zh' | 'es' | 'pt' | 'hi';
 /** Every display string the renderers emit, per language. */

package/lib/types/diagnostics.d.ts

@@ -14,7 +14,7 @@
  *
  * @module dsh-mcp-panel/diagnostics
  */
-import type { McpFiberPhase, McpTransport } from './wire.ts';
+import type { McpFiberPhase, McpTransport } from './wire.js';
 /** Stable suggestion codes; every surface localizes them by key. */
 export type McpSuggestionCode = 'command-not-found' | 'command-spawn-failed' | 'connection-refused' | 'connection-dropped' | 'timeout' | 'dns' | 'auth-401' | 'auth-403' | 'path-404' | 'rate-limit' | 'permission' | 'reconnect-exhausted' | 'reconnect-waiting' | 'entry-failed';
 /** One derived health suggestion. */

package/lib/types/grouping.d.ts

@@ -10,7 +10,7 @@
  *
  * @module dsh-mcp-panel/grouping
  */
-import type { McpToolView } from './wire.ts';
+import type { McpToolView } from './wire.js';
 /** The `mcp__` namespace prefix every bridged MCP tool name starts with. */
 export declare const MCP_TOOL_PREFIX = "mcp__";
 /** One tool group: a server namespace with its model-visible tools. */

package/lib/types/index.d.ts

@@ -29,23 +29,23 @@
  * @module dsh-mcp-panel
  */
 import type { Context } from '@deepseek-ai/cordis';
-import { Config } from './config.ts';
+import { Config } from './config.js';
 export declare const name = "mcp-panel";
 /** Hard services: the facts the console reads. `commands`/`jobs` are optional children. */
 export declare const inject: string[];
-export { Config, resolveConfig } from './config.ts';
-export { McpPanelService } from './service.ts';
-export { mcpCommand, parseMcpArgs, renderList, renderPatchSuggestion, renderServer, renderTools, renderTrialCall, renderHealth } from './command.ts';
-export { groupMcpTools, countServerTools } from './grouping.ts';
-export { aggregateServerView, aggregateSnapshot, configViewOf, deriveTarget, serverNameOf } from './aggregate.ts';
-export { sanitizeError, sanitizeText, sanitizeUrl } from './sanitize.ts';
-export { diagnoseServer, type McpDiagnostic, type McpSuggestionCode, type McpHealthFacts } from './diagnostics.ts';
-export { probeEndpoint, probeJob, mcpProbeTool } from './probe.ts';
-export { validateServerConfig, mergeServerConfig, renderPatchFragment, resolvePatchOp, nextEntryId, defaultEntryId, yamlScalar, type McpServerConfigInput, type McpPatchOp, type McpPatchResolution, } from './patch.ts';
-export { appendPatchFragment } from './write.ts';
-export { runTrialCall, validateTrialRequest, type McpTrialRequest, type McpTrialResult } from './trial.ts';
-export { MCP_STATUS_EVENT, type McpStatusPayload, type McpStatusQuery, type McpServerStatus } from './upstream.ts';
-export type * from './wire.ts';
+export { Config, resolveConfig } from './config.js';
+export { McpPanelService } from './service.js';
+export { mcpCommand, parseMcpArgs, renderList, renderPatchSuggestion, renderServer, renderTools, renderTrialCall, renderHealth } from './command.js';
+export { groupMcpTools, countServerTools } from './grouping.js';
+export { aggregateServerView, aggregateSnapshot, configViewOf, deriveTarget, serverNameOf } from './aggregate.js';
+export { sanitizeError, sanitizeText, sanitizeUrl } from './sanitize.js';
+export { diagnoseServer, type McpDiagnostic, type McpSuggestionCode, type McpHealthFacts } from './diagnostics.js';
+export { probeEndpoint, probeJob, mcpProbeTool } from './probe.js';
+export { validateServerConfig, mergeServerConfig, renderPatchFragment, resolvePatchOp, nextEntryId, defaultEntryId, yamlScalar, type McpServerConfigInput, type McpPatchOp, type McpPatchResolution, } from './patch.js';
+export { appendPatchFragment } from './write.js';
+export { createTrialCaller, validateTrialRequest, type McpTrialRequest, type McpTrialResult } from './trial.js';
+export { MCP_STATUS_EVENT, type McpStatusPayload, type McpStatusQuery, type McpServerStatus } from './upstream.js';
+export type * from './wire.js';
 /**
  * Mount the console: the snapshot/action service, the upstream status seam
  * consumer, the `/mcp` command (when commands exist), and the probe tool

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AAMnD,eAAO,MAAM,IAAI,cAAc,CAAA;AAE/B,2FAA2F;AAC3F,eAAO,MAAM,MAAM,UAAsB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,qBAAqB,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACpJ,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClH,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAClE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,WAAW,EACX,cAAc,EACd,UAAU,EACV,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAA;AAC1G,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAClH,mBAAmB,WAAW,CAAA;AAE9B;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuCvE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAIlD,OAAO,EAAE,MAAM,EAAiB,MAAM,aAAa,CAAA;AAMnD,eAAO,MAAM,IAAI,cAAc,CAAA;AAE/B,2FAA2F;AAC3F,eAAO,MAAM,MAAM,UAAsB,CAAA;AAEzC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,qBAAqB,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACpJ,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAClH,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAClE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,WAAW,EACX,cAAc,EACd,UAAU,EACV,KAAK,oBAAoB,EACzB,KAAK,UAAU,EACf,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAClH,mBAAmB,WAAW,CAAA;AAE9B;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAuCvE"}

package/lib/types/patch.d.ts

@@ -23,7 +23,7 @@
  * @module dsh-mcp-panel/patch
  */
 import { z } from 'zod';
-import type { McpServerConfigView } from './wire.ts';
+import type { McpServerConfigView } from './wire.js';
 /** The official bridge module every generated row names. */
 export declare const MCP_CLIENT_MODULE = "@deepseek-ai/dsh-mcp-client";
 /** Wire-shaped complete server config the editor submits (JSON only). */

package/lib/types/probe.d.ts

@@ -10,7 +10,7 @@
  */
 import type { JobHooks, JobRegistry } from '@deepseek-ai/dsh-jobs';
 import type { ToolDefinition } from '@deepseek-ai/dsh-tools';
-import type { McpPanelService } from './service.ts';
+import type { McpPanelService } from './service.js';
 /** Producer kind; also the job-id prefix. */
 export declare const PROBE_KIND = "mcp-probe";
 declare module '@deepseek-ai/dsh-jobs' {