mcp-lint 0.6.0 → 0.7.0

package/dist/installed/format.js

@@ -0,0 +1,72 @@
+import chalk from 'chalk';
+import { formatMarkdown } from '../cli/formatters/markdown.js';
+import { formatTerminal } from '../cli/formatters/terminal.js';
+export function formatInstalled(reports, format, noColor = false) {
+    if (format === 'json')
+        return formatInstalledJson(reports);
+    if (format === 'markdown')
+        return formatInstalledMarkdown(reports);
+    return formatInstalledTerminal(reports, noColor);
+}
+function formatInstalledTerminal(reports, noColor) {
+    if (noColor)
+        chalk.level = 0;
+    const lines = [];
+    for (const report of reports) {
+        const where = `${report.server.sourceLabel}  ${report.server.sourcePath}`;
+        lines.push(chalk.bold(where));
+        lines.push(chalk.bold(`  ${report.server.name}`));
+        if (report.status === 'skipped-remote') {
+            lines.push(chalk.dim('  skipped remote URL. Pass --remote to connect.'));
+            lines.push('');
+            continue;
+        }
+        if (report.status === 'failed') {
+            lines.push(chalk.red(`  failed to start: ${report.error ?? 'unknown error'}`));
+            lines.push('');
+            continue;
+        }
+        lines.push(chalk.dim(`  ${report.tools.length} tool${report.tools.length === 1 ? '' : 's'}`));
+        lines.push(indent(formatTerminal(report.diagnostics, noColor)));
+    }
+    return `${lines.join('\n').replace(/\n+$/, '')}\n`;
+}
+function formatInstalledMarkdown(reports) {
+    const lines = [];
+    for (const report of reports) {
+        lines.push(`## ${report.server.name}`);
+        lines.push('');
+        lines.push(`Source: \`${report.server.sourcePath}\``);
+        lines.push('');
+        if (report.status === 'skipped-remote') {
+            lines.push('_Skipped remote URL. Pass `--remote` to connect._');
+            lines.push('');
+            continue;
+        }
+        if (report.status === 'failed') {
+            lines.push(`Failed to start: ${report.error ?? 'unknown error'}`);
+            lines.push('');
+            continue;
+        }
+        lines.push(formatMarkdown(report.diagnostics).trimEnd());
+        lines.push('');
+    }
+    return `${lines.join('\n').trimEnd()}\n`;
+}
+function formatInstalledJson(reports) {
+    return `${JSON.stringify({
+        servers: reports.map((report) => ({
+            source: report.server.sourcePath,
+            label: report.server.sourceLabel,
+            name: report.server.name,
+            status: report.status,
+            toolCount: report.tools.length,
+            ...(report.error ? { error: report.error } : {}),
+            diagnostics: report.diagnostics.map(({ fix: _fix, ...diagnostic }) => diagnostic),
+        })),
+    }, null, 2)}\n`;
+}
+function indent(text) {
+    return text.split('\n').map((line) => (line.length > 0 ? `  ${line}` : line)).join('\n');
+}
+//# sourceMappingURL=format.js.map

package/dist/installed/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/installed/format.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAG/D,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE,MAAc,EAAE,OAAO,GAAG,KAAK;IACtF,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACnE,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAuB,EAAE,OAAgB;IACxE,IAAI,OAAO;QAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC;YAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAuB;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAuB;IAClD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QACvB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;YAChC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;YAChC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;YAC9B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC;SAClF,CAAC,CAAC;KACJ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC"}

package/dist/installed/lint.d.ts

@@ -0,0 +1,19 @@
+import type { Diagnostic } from '../core/diagnostic.js';
+import type { MCPTool } from '../core/rule.js';
+import { loadRemote } from '../loaders/remote-loader.js';
+import { loadStdio } from '../loaders/stdio-loader.js';
+import type { InstalledServer } from './config.js';
+export interface ServerReport {
+    server: InstalledServer;
+    status: 'linted' | 'skipped-remote' | 'failed';
+    tools: MCPTool[];
+    diagnostics: Diagnostic[];
+    error?: string;
+}
+export declare function lintInstalledServers(servers: InstalledServer[], options: {
+    remote: boolean;
+    timeoutMs: number;
+    lint: (tools: MCPTool[]) => Diagnostic[];
+    loadStdio?: typeof loadStdio;
+    loadRemote?: typeof loadRemote;
+}): Promise<ServerReport[]>;

package/dist/installed/lint.js

@@ -0,0 +1,49 @@
+import { loadRemote } from '../loaders/remote-loader.js';
+import { loadStdio } from '../loaders/stdio-loader.js';
+export async function lintInstalledServers(servers, options) {
+    const loadLocal = options.loadStdio ?? loadStdio;
+    const loadUrl = options.loadRemote ?? loadRemote;
+    const reports = [];
+    for (const server of servers) {
+        if (server.kind === 'invalid') {
+            reports.push(failed(server, server.detail ?? 'Server entry is incomplete'));
+            continue;
+        }
+        if (server.kind === 'remote') {
+            if (!options.remote) {
+                reports.push({
+                    server,
+                    status: 'skipped-remote',
+                    tools: [],
+                    diagnostics: [],
+                });
+                continue;
+            }
+            try {
+                const tools = await loadUrl(server.url ?? '', server.remoteType ?? 'http', options.timeoutMs);
+                reports.push({ server, status: 'linted', tools, diagnostics: options.lint(tools) });
+            }
+            catch (err) {
+                reports.push(failed(server, err.message));
+            }
+            continue;
+        }
+        try {
+            const tools = await loadLocal(server.command ?? '', server.args, {
+                env: server.env,
+                cwd: server.cwd,
+                timeoutMs: options.timeoutMs,
+                inheritProcessEnv: true,
+            });
+            reports.push({ server, status: 'linted', tools, diagnostics: options.lint(tools) });
+        }
+        catch (err) {
+            reports.push(failed(server, err.message));
+        }
+    }
+    return reports;
+}
+function failed(server, error) {
+    return { server, status: 'failed', tools: [], diagnostics: [], error };
+}
+//# sourceMappingURL=lint.js.map

package/dist/installed/lint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lint.js","sourceRoot":"","sources":["../../src/installed/lint.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAWvD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA0B,EAC1B,OAMC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC;IACjD,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,4BAA4B,CAAC,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE,EAAE;oBACT,WAAW,EAAE,EAAE;iBAChB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE;gBAC/D,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,iBAAiB,EAAE,IAAI;aACxB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,MAAM,CAAC,MAAuB,EAAE,KAAa;IACpD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC"}

package/dist/loaders/index.d.ts

@@ -1,3 +1,4 @@
 export { loadFile } from './file-loader.js';
+export { loadRemote } from './remote-loader.js';
 export { loadSSE } from './sse-loader.js';
 export { loadStdio } from './stdio-loader.js';

package/dist/loaders/index.js

@@ -1,4 +1,5 @@
 export { loadFile } from './file-loader.js';
+export { loadRemote } from './remote-loader.js';
 export { loadSSE } from './sse-loader.js';
 export { loadStdio } from './stdio-loader.js';
 //# sourceMappingURL=index.js.map

package/dist/loaders/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/loaders/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/loaders/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/loaders/map-tools.d.ts

@@ -0,0 +1,16 @@
+import type { MCPTool } from '../core/rule.js';
+interface ListedTool {
+    name: string;
+    title?: string;
+    description?: string;
+    inputSchema?: object;
+    annotations?: {
+        title?: string;
+        readOnlyHint?: boolean;
+        destructiveHint?: boolean;
+        idempotentHint?: boolean;
+        openWorldHint?: boolean;
+    };
+}
+export declare function mapListedTools(tools: ListedTool[]): MCPTool[];
+export {};

package/dist/loaders/map-tools.js

@@ -0,0 +1,33 @@
+export function mapListedTools(tools) {
+    return tools.map((tool) => {
+        const mapped = {
+            name: tool.name,
+            inputSchema: tool.inputSchema ?? { type: 'object' },
+        };
+        if (tool.title)
+            mapped.title = tool.title;
+        if (tool.description)
+            mapped.description = tool.description;
+        const annotations = pickAnnotations(tool.annotations);
+        if (annotations)
+            mapped.annotations = annotations;
+        return mapped;
+    });
+}
+function pickAnnotations(annotations) {
+    if (!annotations)
+        return undefined;
+    const picked = {};
+    if (annotations.title !== undefined)
+        picked.title = annotations.title;
+    if (annotations.readOnlyHint !== undefined)
+        picked.readOnlyHint = annotations.readOnlyHint;
+    if (annotations.destructiveHint !== undefined)
+        picked.destructiveHint = annotations.destructiveHint;
+    if (annotations.idempotentHint !== undefined)
+        picked.idempotentHint = annotations.idempotentHint;
+    if (annotations.openWorldHint !== undefined)
+        picked.openWorldHint = annotations.openWorldHint;
+    return Object.keys(picked).length > 0 ? picked : undefined;
+}
+//# sourceMappingURL=map-tools.js.map

package/dist/loaders/map-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"map-tools.js","sourceRoot":"","sources":["../../src/loaders/map-tools.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,MAAM,MAAM,GAAY;YACtB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAG,IAAI,CAAC,WAAkD,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC5F,CAAC;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5D,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,WAAsC;IAC7D,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;IACtE,IAAI,WAAW,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC;IAC3F,IAAI,WAAW,CAAC,eAAe,KAAK,SAAS;QAAE,MAAM,CAAC,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;IACpG,IAAI,WAAW,CAAC,cAAc,KAAK,SAAS;QAAE,MAAM,CAAC,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;IACjG,IAAI,WAAW,CAAC,aAAa,KAAK,SAAS;QAAE,MAAM,CAAC,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;IAC9F,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC"}

package/dist/loaders/remote-loader.d.ts

@@ -0,0 +1,2 @@
+import type { MCPTool } from '../core/rule.js';
+export declare function loadRemote(url: string, remoteType?: string, timeoutMs?: number): Promise<MCPTool[]>;

package/dist/loaders/remote-loader.js

@@ -0,0 +1,37 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+import { mapListedTools } from './map-tools.js';
+export async function loadRemote(url, remoteType = 'http', timeoutMs) {
+    const target = new URL(url);
+    const transport = remoteType === 'sse'
+        ? new SSEClientTransport(target)
+        : new StreamableHTTPClientTransport(target);
+    const client = new Client({ name: 'mcp-lint', version: '0.7.0' }, { capabilities: {} });
+    let timer;
+    try {
+        const connect = async () => {
+            await client.connect(transport);
+            const result = await client.listTools();
+            return mapListedTools(result.tools);
+        };
+        if (!timeoutMs || timeoutMs < 1)
+            return await connect();
+        return await Promise.race([
+            connect(),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => {
+                    void transport.close();
+                    reject(new Error(`Timed out after ${timeoutMs}ms waiting for ${url}`));
+                }, timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        await client.close().catch(() => { });
+        await transport.close().catch(() => { });
+    }
+}
+//# sourceMappingURL=remote-loader.js.map

package/dist/loaders/remote-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-loader.js","sourceRoot":"","sources":["../../src/loaders/remote-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,UAAU,GAAG,MAAM,EAAE,SAAkB;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,UAAU,KAAK,KAAK;QACpC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC;QAChC,CAAC,CAAC,IAAI,6BAA6B,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IAExF,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,IAAI,CAAC,SAAS,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,MAAM,OAAO,EAAE,CAAC;QACxD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE;YACT,IAAI,OAAO,CAAY,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACnC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;oBACvB,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,SAAS,kBAAkB,GAAG,EAAE,CAAC,CAAC,CAAC;gBACzE,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/loaders/sse-loader.d.ts

@@ -1,2 +1,2 @@
 import type { MCPTool } from '../core/rule.js';
-export declare function loadSSE(url: string): Promise<MCPTool[]>;
+export declare function loadSSE(url: string, timeoutMs?: number): Promise<MCPTool[]>;

package/dist/loaders/sse-loader.js

@@ -1,19 +1,5 @@
-import { Client } from '@modelcontextprotocol/sdk/client/index.js';
-import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';
-export async function loadSSE(url) {
-    const transport = new SSEClientTransport(new URL(url));
-    const client = new Client({ name: 'mcp-lint', version: '0.1.0' }, { capabilities: {} });
-    await client.connect(transport);
-    try {
-        const result = await client.listTools();
-        return result.tools.map((t) => ({
-            name: t.name,
-            description: t.description,
-            inputSchema: t.inputSchema,
-        }));
-    }
-    finally {
-        await client.close();
-    }
+import { loadRemote } from './remote-loader.js';
+export async function loadSSE(url, timeoutMs) {
+    return loadRemote(url, 'sse', timeoutMs);
 }
 //# sourceMappingURL=sse-loader.js.map

package/dist/loaders/sse-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"sse-loader.js","sourceRoot":"","sources":["../../src/loaders/sse-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAG7E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW;IACvC,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAqC;SACrD,CAAC,CAAC,CAAC;IACN,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"sse-loader.js","sourceRoot":"","sources":["../../src/loaders/sse-loader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,SAAkB;IAC3D,OAAO,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAC3C,CAAC"}

package/dist/loaders/stdio-loader.d.ts

@@ -1,2 +1,9 @@
 import type { MCPTool } from '../core/rule.js';
-export declare function loadStdio(command: string, args: string[]): Promise<MCPTool[]>;
+export interface StdioLoadOptions {
+    env?: Record<string, string>;
+    cwd?: string;
+    timeoutMs?: number;
+    inheritProcessEnv?: boolean;
+}
+export declare function loadStdio(command: string, args: string[], options?: StdioLoadOptions): Promise<MCPTool[]>;
+export declare function childEnvironment(extra?: Record<string, string>, inheritProcessEnv?: boolean): Record<string, string>;

package/dist/loaders/stdio-loader.js

@@ -1,19 +1,65 @@
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
-import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
-export async function loadStdio(command, args) {
-    const transport = new StdioClientTransport({ command, args });
-    const client = new Client({ name: 'mcp-lint', version: '0.1.0' }, { capabilities: {} });
-    await client.connect(transport);
+import { StdioClientTransport, getDefaultEnvironment } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { mapListedTools } from './map-tools.js';
+export async function loadStdio(command, args, options = {}) {
+    const transport = new StdioClientTransport({
+        command,
+        args,
+        env: options.env || options.inheritProcessEnv
+            ? childEnvironment(options.env, Boolean(options.inheritProcessEnv))
+            : undefined,
+        stderr: 'pipe',
+        cwd: options.cwd,
+    });
+    drain(transport.stderr);
+    const client = new Client({ name: 'mcp-lint', version: '0.7.0' }, { capabilities: {} });
     try {
-        const result = await client.listTools();
-        return result.tools.map((t) => ({
-            name: t.name,
-            description: t.description,
-            inputSchema: t.inputSchema,
-        }));
+        return await withTimeout(options.timeoutMs, command, async () => {
+            await client.connect(transport);
+            const result = await client.listTools();
+            return mapListedTools(result.tools);
+        }, async () => {
+            await transport.close();
+        });
     }
     finally {
-        await client.close();
+        await client.close().catch(() => { });
+        await transport.close().catch(() => { });
     }
 }
+export function childEnvironment(extra, inheritProcessEnv = false) {
+    const env = { ...getDefaultEnvironment() };
+    if (inheritProcessEnv) {
+        for (const [key, value] of Object.entries(process.env)) {
+            if (typeof value === 'string')
+                env[key] = value;
+        }
+    }
+    if (extra)
+        Object.assign(env, extra);
+    return env;
+}
+async function withTimeout(timeoutMs, label, run, cancel) {
+    if (!timeoutMs || timeoutMs < 1)
+        return run();
+    let timer;
+    try {
+        return await Promise.race([
+            run(),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => {
+                    void cancel();
+                    reject(new Error(`Timed out after ${timeoutMs}ms waiting for ${label}`));
+                }, timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+function drain(stream) {
+    stream?.on('data', () => { });
+}
 //# sourceMappingURL=stdio-loader.js.map

package/dist/loaders/stdio-loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio-loader.js","sourceRoot":"","sources":["../../src/loaders/stdio-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAGjF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe,EAAE,IAAc;IAC7D,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,WAAqC;SACrD,CAAC,CAAC,CAAC;IACN,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"stdio-loader.js","sourceRoot":"","sources":["../../src/loaders/stdio-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAExG,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAShD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,IAAc,EACd,UAA4B,EAAE;IAE9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;QACzC,OAAO;QACP,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,iBAAiB;YAC3C,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACnE,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IAExF,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;YACxC,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,EAAE,KAAK,IAAI,EAAE;YACZ,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAA8B,EAC9B,iBAAiB,GAAG,KAAK;IAEzB,MAAM,GAAG,GAA2B,EAAE,GAAG,qBAAqB,EAAE,EAAE,CAAC;IACnE,IAAI,iBAAiB,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAA6B,EAC7B,KAAa,EACb,GAAqB,EACrB,MAA2B;IAE3B,IAAI,CAAC,SAAS,IAAI,SAAS,GAAG,CAAC;QAAE,OAAO,GAAG,EAAE,CAAC;IAC9C,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,GAAG,EAAE;YACL,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC3B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,KAAK,MAAM,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,SAAS,kBAAkB,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,MAAmE;IAChF,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/mcp-server.js

@@ -13,7 +13,7 @@ import { preflight } from './preflight/engine.js';
 import { parsePolicy } from './preflight/policy.js';
 import { scoreRecovery } from './recover/score.js';
 import { FAILURE_KINDS } from './recover/types.js';
-const VERSION = '0.6.0';
+const VERSION = '0.7.0';
 const ClientIdSchema = z.enum([
     'claude',
     'cursor',

package/dist/recover/probe.js

@@ -47,7 +47,7 @@ export async function probeClient(client, options = {}) {
 }
 export async function probeStdio(command, args, options = {}) {
     const transport = new StdioClientTransport({ command, args });
-    const client = new Client({ name: 'mcp-lint-recover', version: '0.6.0' }, { capabilities: {} });
+    const client = new Client({ name: 'mcp-lint-recover', version: '0.7.0' }, { capabilities: {} });
     await client.connect(transport);
     try {
         return await probeClient(client, options);

package/dist/rules/index.js

@@ -16,6 +16,7 @@ import { clineDescriptionMaxLength } from './client-specific/cline.js';
 import { openaiNoAdditionalProperties, openaiStrictTypes } from './client-specific/openai.js';
 import { noUnreachableInstruction } from './agent-unreachable.js';
 import { destructiveUnmarked, readonlyConflict } from './destructive-hint.js';
+import { toolNameClientSafe } from './tool-name.js';
 export const allRules = [
     noRequiredFalse,
     noContentEncoding,
@@ -39,5 +40,6 @@ export const allRules = [
     noUnreachableInstruction,
     destructiveUnmarked,
     readonlyConflict,
+    toolNameClientSafe,
 ];
 //# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,MAAM,CAAC,MAAM,QAAQ,GAAW;IAC9B,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,WAAW;IACX,QAAQ;IACR,eAAe;IACf,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,8BAA8B;IAC9B,qBAAqB;IACrB,eAAe;IACf,oBAAoB;IACpB,yBAAyB;IACzB,4BAA4B;IAC5B,iBAAiB;IACjB,wBAAwB;IACxB,mBAAmB;IACnB,gBAAgB;CACjB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,CAAC,MAAM,QAAQ,GAAW;IAC9B,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,WAAW;IACX,QAAQ;IACR,eAAe;IACf,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;IACjB,uBAAuB;IACvB,0BAA0B;IAC1B,oBAAoB;IACpB,8BAA8B;IAC9B,qBAAqB;IACrB,eAAe;IACf,oBAAoB;IACpB,yBAAyB;IACzB,4BAA4B;IAC5B,iBAAiB;IACjB,wBAAwB;IACxB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC"}

package/dist/rules/tool-name.d.ts

@@ -0,0 +1,2 @@
+import type { Rule } from '../core/rule.js';
+export declare const toolNameClientSafe: Rule;

package/dist/rules/tool-name.js

@@ -0,0 +1,44 @@
+const CLIENTS = [
+    'claude', 'cursor', 'gemini', 'vscode', 'windsurf', 'cline', 'openai', 'continue',
+];
+// OpenAI and Azure: ^[A-Za-z0-9_-]{1,64}$
+// Gemini also requires the first character to be a letter or underscore.
+const SAFE_NAME = /^[A-Za-z0-9_-]{1,64}$/;
+const LEADING_DIGIT = /^[0-9]/;
+export const toolNameClientSafe = {
+    id: 'tool-name/client-safe',
+    severity: 'error',
+    description: 'Tool names must be 1–64 characters of letters, digits, underscores, or hyphens, and should not start with a digit.',
+    clients: CLIENTS,
+    docs: {
+        why: 'OpenAI and Azure reject a tool name outside ^[A-Za-z0-9_-]{1,64}$. A space, slash, or dot makes the tool disappear. Gemini also refuses a name that starts with a digit.',
+        badExample: { name: 'search files' },
+        goodExample: { name: 'search_files' },
+        fixNote: 'Rename the tool. Use letters, digits, underscores, or hyphens, start with a letter or underscore, and stay within 64 characters.',
+    },
+    check(tool, _context) {
+        const name = tool.name ?? '';
+        if (!SAFE_NAME.test(name)) {
+            return [{
+                    ruleId: 'tool-name/client-safe',
+                    severity: 'error',
+                    message: `Tool name "${name}" is not safe across clients. Use 1–64 characters: letters, digits, underscore, or hyphen.`,
+                    toolName: name || '(unnamed)',
+                    path: 'name',
+                    clients: ['claude', 'openai', 'gemini'],
+                }];
+        }
+        if (LEADING_DIGIT.test(name)) {
+            return [{
+                    ruleId: 'tool-name/client-safe',
+                    severity: 'warning',
+                    message: `Tool name "${name}" starts with a digit. Gemini requires a letter or an underscore first.`,
+                    toolName: name,
+                    path: 'name',
+                    clients: ['gemini'],
+                }];
+        }
+        return [];
+    },
+};
+//# sourceMappingURL=tool-name.js.map

package/dist/rules/tool-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-name.js","sourceRoot":"","sources":["../../src/rules/tool-name.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,GAAe;IAC1B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU;CAClF,CAAC;AAEF,0CAA0C;AAC1C,yEAAyE;AACzE,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,MAAM,CAAC,MAAM,kBAAkB,GAAS;IACtC,EAAE,EAAE,uBAAuB;IAC3B,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,oHAAoH;IACjI,OAAO,EAAE,OAAO;IAChB,IAAI,EAAE;QACJ,GAAG,EAAE,0KAA0K;QAC/K,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;QACpC,WAAW,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;QACrC,OAAO,EAAE,kIAAkI;KAC5I;IAED,KAAK,CAAC,IAAa,EAAE,QAAqB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC;oBACN,MAAM,EAAE,uBAAuB;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,cAAc,IAAI,4FAA4F;oBACvH,QAAQ,EAAE,IAAI,IAAI,WAAW;oBAC7B,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;iBACxC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC;oBACN,MAAM,EAAE,uBAAuB;oBAC/B,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,cAAc,IAAI,yEAAyE;oBACpG,QAAQ,EAAE,IAAI;oBACd,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,CAAC,QAAQ,CAAC;iBACpB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/snapshot/serialize.d.ts

@@ -0,0 +1,2 @@
+import type { MCPTool } from '../core/rule.js';
+export declare function serializeTools(tools: MCPTool[]): string;

package/dist/snapshot/serialize.js

@@ -0,0 +1,17 @@
+export function serializeTools(tools) {
+    const sorted = [...tools].sort((left, right) => left.name.localeCompare(right.name));
+    const shaped = sorted.map((tool) => {
+        const record = { name: tool.name };
+        if (tool.title)
+            record.title = tool.title;
+        if (tool.description)
+            record.description = tool.description;
+        record.inputSchema = tool.inputSchema ?? {};
+        if (tool.annotations && Object.keys(tool.annotations).length > 0) {
+            record.annotations = tool.annotations;
+        }
+        return record;
+    });
+    return `${JSON.stringify(shaped, null, 2)}\n`;
+}
+//# sourceMappingURL=serialize.js.map

package/dist/snapshot/serialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialize.js","sourceRoot":"","sources":["../../src/snapshot/serialize.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAC5D,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACxC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC"}

package/examples/github-action.yml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Lint MCP tool schemas
-        uses: robert19001-cmyk/mcp-lint@v0.6.0
+        uses: robert19001-cmyk/mcp-lint@v0.7.0
         with:
           input: tools.json
           severity: warning

package/examples/names/unsafe.json

@@ -0,0 +1,22 @@
+[
+  {
+    "name": "search files",
+    "description": "Search the workspace.",
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "q": { "type": "string", "description": "Text to find" }
+      }
+    }
+  },
+  {
+    "name": "repo/read",
+    "description": "Read one file.",
+    "inputSchema": { "type": "object", "properties": {} }
+  },
+  {
+    "name": "9tools",
+    "description": "List tools.",
+    "inputSchema": { "type": "object", "properties": {} }
+  }
+]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-lint",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "mcpName": "io.github.robert19001-cmyk/mcp-lint",
   "description": "Lint MCP server tool schemas for cross-client compatibility, runtime preflight, and agent recovery from tool failures",
   "type": "module",
@@ -11,7 +11,7 @@
   "bugs": {
     "url": "https://github.com/robert19001-cmyk/mcp-lint/issues"
   },
-  "homepage": "https://github.com/robert19001-cmyk/mcp-lint#readme",
+  "homepage": "https://mcp-lint-alpha.vercel.app/",
   "bin": {
     "mcp-lint": "dist/index.js",
     "mcp-lint-server": "dist/mcp-server.js"