mcp-use-compat 0.3.0

package/dist/run.js

@@ -0,0 +1,163 @@
+import { appendFileSync, writeFileSync } from "node:fs";
+import { ALL_CHECKS } from "./checks/index.js";
+import { UsageError } from "./cli.js";
+import { CredentialStore, describeCredentials, oauthLogin, StoredOAuthProvider } from "./oauth.js";
+import { connect } from "./connect/index.js";
+import { evaluate } from "./evaluate.js";
+import { EXIT, exitCode, failures, parsePolicy, PolicyError } from "./policy.js";
+import { ALL_PROFILES, selectProfiles, UnknownClientError } from "./profiles/index.js";
+import { markdownReporter, REPORTERS } from "./reporters/index.js";
+import { cell } from "./reporters/escape.js";
+import { loadSnapshot, saveSnapshot } from "./snapshot.js";
+const AREAS = [...new Set(ALL_CHECKS.map((c) => c.area))];
+/** Runs the check command. Returns the process exit code. */
+export async function run(options) {
+    if (options.listChecks)
+        return listChecks();
+    if (options.listClients)
+        return listClients();
+    let profiles, policy;
+    try {
+        profiles = selectProfiles(options.clients);
+        policy = parsePolicy(options.failOn, ALL_CHECKS.map((c) => c.id), AREAS);
+    }
+    catch (err) {
+        if (err instanceof UnknownClientError || err instanceof PolicyError)
+            throw new UsageError(err.message);
+        throw err;
+    }
+    const snapshot = await getSnapshot(options);
+    if (options.saveSnapshot)
+        saveSnapshot(options.saveSnapshot, snapshot);
+    const report = evaluate(snapshot, ALL_CHECKS, profiles);
+    const output = REPORTERS[options.format](report);
+    if (options.out)
+        writeFileSync(options.out, output);
+    else
+        process.stdout.write(output);
+    if (options.format === "github" && process.env.GITHUB_STEP_SUMMARY) {
+        appendFileSync(process.env.GITHUB_STEP_SUMMARY, markdownReporter(report));
+    }
+    const connectFailed = report.checks.some((c) => c.id === "TRANSPORT_CONNECT_FAILED" && c.ran) && !snapshot.connect.ok;
+    const code = exitCode(report, policy, connectFailed);
+    if (code === EXIT.connectFailed) {
+        console.error(`\n✖ Could not connect to the server: ${snapshot.connect.error ?? "unknown error"}`);
+    }
+    else if (code === EXIT.failed) {
+        const failed = failures(report, policy);
+        console.error(`\n✖ ${failed.length} check result(s) failed --fail-on=${options.failOn}: ${failed.slice(0, 10).join(", ")}${failed.length > 10 ? ", …" : ""}`);
+    }
+    else {
+        console.error(`\n✔ No results matched --fail-on=${options.failOn}.`);
+    }
+    return code;
+}
+export async function getSnapshot(options) {
+    if (options.fromSnapshot)
+        return loadSnapshot(options.fromSnapshot);
+    let target = options.target;
+    if (options.oauth && target.kind === "http") {
+        target = { ...target, authProvider: new StoredOAuthProvider(target.url, new CredentialStore()) };
+    }
+    return connect({
+        target,
+        timeoutMs: options.timeoutMs,
+        authProbe: options.authProbe,
+        versionMatrix: options.versionMatrix,
+        probeCalls: options.probeCalls,
+        calls: options.calls,
+        offline: options.offline,
+    });
+}
+/** Calls one tool, prints its result and any call findings. */
+export async function runCall(options) {
+    if (options.fromSnapshot)
+        throw new UsageError("call needs a live server (-- <command> or --url), not a snapshot");
+    const snapshot = await getSnapshot({ ...options, calls: [{ tool: options.tool, args: options.args }] });
+    if (!snapshot.connect.ok) {
+        console.error(`✖ Could not connect to the server: ${snapshot.connect.error ?? "unknown error"}`);
+        return EXIT.connectFailed;
+    }
+    const probe = snapshot.calls?.[0];
+    const report = evaluate(snapshot, ALL_CHECKS.filter((c) => c.area === "calls"), []);
+    const known = snapshot.lists.tools?.items.some((t) => t.name === options.tool);
+    if (options.format === "json") {
+        process.stdout.write(JSON.stringify({ call: probe, findings: report.findings }, null, 2) + "\n");
+    }
+    else {
+        const lines = [`# ${options.tool}(${JSON.stringify(options.args)})`, ""];
+        if (!known)
+            lines.push(`_Note: "${options.tool}" is not in the server's tools/list._`, "");
+        lines.push(`${probe?.durationMs ?? "?"} ms${probe?.resultChars !== undefined ? ` · ${probe.resultChars} characters` : ""}`, "");
+        lines.push("```json", JSON.stringify(probe?.result ?? { error: probe?.error }, null, 2), "```", "");
+        if (report.findings.length) {
+            lines.push("| Severity | Check | Message |", "|---|---|---|");
+            for (const f of report.findings)
+                lines.push(`| ${f.severity} | \`${f.checkId}\` | ${cell(f.message)} |`);
+        }
+        else {
+            lines.push("_No problems found in the result._");
+        }
+        process.stdout.write(lines.join("\n") + "\n");
+    }
+    const failed = report.findings.some((f) => f.severity === "error") || !!probe?.error;
+    return failed ? EXIT.failed : EXIT.ok;
+}
+export async function runOAuthLogin(options) {
+    const steps = await oauthLogin({
+        ...options,
+        log: (m) => console.error(m),
+        verify: async (provider) => {
+            const snapshot = await connect({
+                target: { kind: "http", url: options.url, headers: {}, authProvider: provider },
+                timeoutMs: 15000,
+                authProbe: false,
+            });
+            if (!snapshot.connect.ok)
+                throw new Error(snapshot.connect.error ?? "connect failed");
+            return `initialize + tools/list OK (${snapshot.lists.tools?.items.length ?? 0} tools)`;
+        },
+    });
+    const ok = steps.length > 0 && steps.every((s) => s.ok);
+    console.error(ok ? `\n✔ Logged in. Use --oauth with check/call to reuse these credentials.` : `\n✖ Login did not complete.`);
+    return ok ? EXIT.ok : EXIT.failed;
+}
+export function runOAuthStatus() {
+    const all = new CredentialStore().all();
+    const urls = Object.keys(all);
+    if (urls.length === 0)
+        console.log("No stored credentials.");
+    for (const url of urls)
+        console.log(describeCredentials(url, all[url]));
+    return EXIT.ok;
+}
+export function runOAuthLogout(url) {
+    const store = new CredentialStore();
+    const had = url in store.all();
+    store.update(url, () => undefined);
+    console.error(had ? `Removed credentials for ${url}.` : `No credentials stored for ${url}.`);
+    return EXIT.ok;
+}
+export function listChecks() {
+    for (const area of AREAS) {
+        console.log(`\n${area}`);
+        for (const c of ALL_CHECKS.filter((c) => c.area === area))
+            console.log(`  ${c.id.padEnd(36)} ${c.description}`);
+    }
+    return EXIT.ok;
+}
+export function listClients() {
+    if (ALL_PROFILES.length === 0)
+        console.log("No client profiles yet.");
+    for (const p of ALL_PROFILES) {
+        const dates = [
+            ...Object.values(p.supports).map((s) => s.verifiedOn),
+            ...Object.values(p.limits).map((l) => l.verifiedOn),
+        ].sort();
+        const oldest = dates[0];
+        const stale = oldest && Date.now() - Date.parse(oldest) > 90 * 86_400_000 ? "  (stale: re-verify)" : "";
+        console.log(`${p.id.padEnd(16)} ${p.displayName.padEnd(28)} facts: ${dates.length}, oldest verified ${oldest ?? "-"}${stale}`);
+    }
+    return EXIT.ok;
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAiF,MAAM,UAAU,CAAC;AACrH,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACnG,OAAO,EAAE,OAAO,EAAuB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAuB,MAAM,eAAe,CAAC;AAEhF,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAgB,CAAC;AAEzE,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,UAAU,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,WAAW;QAAE,OAAO,WAAW,EAAE,CAAC;IAE9C,IAAI,QAAQ,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,kBAAkB,IAAI,GAAG,YAAY,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvG,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,YAAY;QAAE,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,GAAG;QAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;;QAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAElC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QACnE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,0BAA0B,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACtH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,wCAAwC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;IACrG,CAAC;SAAM,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,MAAM,qCAAqC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChK,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAuF;IAEvF,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpE,IAAI,MAAM,GAAG,OAAO,CAAC,MAAO,CAAC;IAC7B,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5C,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,IAAI,mBAAmB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,eAAe,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,OAAO,CAAC;QACb,MAAM;QACN,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;AACL,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAoB;IAChD,IAAI,OAAO,CAAC,YAAY;QAAE,MAAM,IAAI,UAAU,CAAC,kEAAkE,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,sCAAsC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/E,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,IAAI,uCAAuC,EAAE,EAAE,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,UAAU,IAAI,GAAG,MAAM,KAAK,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACpG,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,gCAAgC,EAAE,eAAe,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3G,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC;IACrF,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA0B;IAC5D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC;QAC7B,GAAG,OAAO;QACV,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;gBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;gBAC/E,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;aACjB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAAC;YACtF,OAAO,+BAA+B,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC;QACzF,CAAC;KACF,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,wEAAwE,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAC7H,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;IAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,GAAG,GAAG,CAAC,CAAC,CAAC,6BAA6B,GAAG,GAAG,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG;YACZ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAAC,UAAU,CAAC;YACtD,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,CAAC,UAAU,CAAC;SACrD,CAAC,IAAI,EAAE,CAAC;QACT,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,KAAK,CAAC,MAAM,qBAAqB,MAAM,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,CAAC;AACjB,CAAC"}

package/dist/sdk-facts.d.ts

@@ -0,0 +1,27 @@
+import { type DetectedSdk } from "./project.js";
+/** What we verified (by reading the SDK's source) about protocol support. */
+export interface SdkFact {
+    /** First version that speaks the stateless 2026-07-28 protocol, or false if this package never will. */
+    modernFrom: string | false;
+    /** What to do when modernFrom is false. */
+    migrateTo?: string;
+    note?: string;
+    source: string;
+}
+export declare const SDK_FACTS: Record<string, SdkFact>;
+export { SAFE_VERSION } from "./project.js";
+export type UpgradeKind = "current" | "minor" | "major" | "migrate" | "unknown";
+export interface UpgradeAdvice {
+    sdk: DetectedSdk;
+    kind: UpgradeKind;
+    /** Command to run, when an upgrade applies. */
+    command?: string;
+    /** One-line human summary. */
+    summary: string;
+    /** Upgrading adds protocol 2026-07-28. */
+    addsModern: boolean;
+    /** A requirements file pinning the old version with ==, which must be edited too. */
+    pinnedFile?: string;
+}
+export declare function adviseUpgrade(sdk: DetectedSdk): UpgradeAdvice;
+//# sourceMappingURL=sdk-facts.d.ts.map

package/dist/sdk-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-facts.d.ts","sourceRoot":"","sources":["../src/sdk-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0D,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAExG,6EAA6E;AAC7E,MAAM,WAAW,OAAO;IACtB,wGAAwG;IACxG,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC;IAC3B,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAiB7C,CAAC;AAEF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,WAAW,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,aAAa,CAqC7D"}

package/dist/sdk-facts.js

@@ -0,0 +1,63 @@
+import { compareVersions, majorOf, SAFE_VERSION, upgradeCommand } from "./project.js";
+export const SDK_FACTS = {
+    "@modelcontextprotocol/sdk": {
+        modernFrom: false,
+        migrateTo: "@modelcontextprotocol/server",
+        note: "v1 supports protocol versions up to 2025-11-25; 2026-07-28 is only in the v2 packages (@modelcontextprotocol/server), which is a migration, not an update.",
+        source: "https://unpkg.com/@modelcontextprotocol/sdk@1.30.1/dist/esm/types.js",
+    },
+    "@modelcontextprotocol/server": {
+        modernFrom: "2.0.0",
+        note: "v2 implements server/discover and the 2026-07-28 request envelope.",
+        source: "https://unpkg.com/@modelcontextprotocol/server@2.1.0/",
+    },
+    mcp: {
+        modernFrom: "2.0.0",
+        note: "mcp 1.x supports up to 2025-11-25; mcp 2.x adds 2026-07-28 (see mcp_types.version).",
+        source: "https://pypi.org/project/mcp-types/2.2.0/",
+    },
+};
+export { SAFE_VERSION } from "./project.js";
+export function adviseUpgrade(sdk) {
+    const fact = SDK_FACTS[sdk.name];
+    const current = sdk.installed ?? cleanDeclared(sdk.declared);
+    const latest = sdk.latest && SAFE_VERSION.test(sdk.latest) ? sdk.latest : undefined;
+    const hasModern = (v) => !!v && !!fact?.modernFrom && compareVersions(v, fact.modernFrom) >= 0;
+    if (!current || !latest) {
+        return {
+            sdk,
+            kind: "unknown",
+            command: upgradeCommand(sdk, latest),
+            summary: `${sdk.name}${current ? ` ${current}` : ""}: couldn't compare with the latest release${latest ? "" : " (offline?)"}.`,
+            addsModern: false,
+        };
+    }
+    if (compareVersions(current, latest) >= 0) {
+        const migrate = fact?.modernFrom === false && fact.migrateTo;
+        return {
+            sdk,
+            kind: migrate ? "migrate" : "current",
+            summary: migrate
+                ? `${sdk.name} ${current} is the latest, but ${fact.note}`
+                : `${sdk.name} ${current} is the latest release.`,
+            addsModern: false,
+        };
+    }
+    const major = majorOf(current) !== majorOf(latest);
+    const addsModern = !hasModern(current) && hasModern(latest);
+    const pinnedFile = sdk.manager === "pip" && sdk.declared?.startsWith("==") ? sdk.manifest : undefined;
+    return {
+        sdk,
+        kind: major ? "major" : "minor",
+        command: upgradeCommand(sdk, latest),
+        summary: `${sdk.name} ${current} → ${latest}${major ? " (major version: check the changelog for breaking changes)" : ""}${addsModern ? "; adds protocol 2026-07-28" : ""}.${pinnedFile ? ` Also change the pin in ${pinnedFile} to ${sdk.name}==${latest}.` : ""}`,
+        addsModern,
+        pinnedFile,
+    };
+}
+/** "^1.29.0" → "1.29.0"; ranges we can't reduce to one version → undefined. */
+function cleanDeclared(declared) {
+    const m = declared ? /^[\^~=>v]*\s*([0-9][0-9.]*)/.exec(declared.trim()) : null;
+    return m?.[1];
+}
+//# sourceMappingURL=sdk-facts.js.map

package/dist/sdk-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-facts.js","sourceRoot":"","sources":["../src/sdk-facts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAoB,MAAM,cAAc,CAAC;AAYxG,MAAM,CAAC,MAAM,SAAS,GAA4B;IAChD,2BAA2B,EAAE;QAC3B,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,8BAA8B;QACzC,IAAI,EAAE,4JAA4J;QAClK,MAAM,EAAE,sEAAsE;KAC/E;IACD,8BAA8B,EAAE;QAC9B,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,oEAAoE;QAC1E,MAAM,EAAE,uDAAuD;KAChE;IACD,GAAG,EAAE;QACH,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,qFAAqF;QAC3F,MAAM,EAAE,2CAA2C;KACpD;CACF,CAAC;AAEF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAiB5C,MAAM,UAAU,aAAa,CAAC,GAAgB;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,IAAI,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAExG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,OAAO;YACL,GAAG;YACH,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC;YACpC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,6CAA6C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,GAAG;YAC9H,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,EAAE,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC;QAC7D,OAAO;YACL,GAAG;YACH,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACrC,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,uBAAuB,IAAK,CAAC,IAAI,EAAE;gBAC3D,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,yBAAyB;YACnD,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,OAAO;QACL,GAAG;QACH,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QAC/B,OAAO,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC;QACpC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,4DAA4D,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,2BAA2B,UAAU,OAAO,GAAG,CAAC,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClQ,UAAU;QACV,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,QAAiB;IACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/dist/snapshot.d.ts

@@ -0,0 +1,189 @@
+import type { ProjectInfo } from "./project.js";
+/**
+ * Everything we observed about a server in one session. Plain JSON so it can be
+ * saved, attached to bug reports, and re-checked offline.
+ *
+ * List items are stored exactly as the server sent them (not SDK-validated), so
+ * checks can see malformed data such as `description: null`.
+ */
+export interface ServerSnapshot {
+    snapshotVersion: 1;
+    /**
+     * Which protocol generation the checks ran over: "legacy" (initialize handshake),
+     * "modern" (2026-07-28 only; lists come from the modern probe) or "both".
+     * Absent in snapshots from older versions = "legacy".
+     */
+    era?: "legacy" | "modern" | "both";
+    target: Target;
+    connectedAt: string;
+    connect: {
+        ok: boolean;
+        error?: string;
+        /** For era "modern": why the initialize handshake failed. */
+        legacyError?: string;
+        /** Transport start → initialize response. */
+        startupMs?: number;
+    };
+    initialize?: {
+        requestedProtocolVersion: string;
+        negotiatedProtocolVersion?: string;
+        serverInfo?: Record<string, unknown>;
+        capabilities: Record<string, unknown>;
+        instructions?: string;
+    };
+    lists: {
+        tools?: ListResult;
+        resources?: ListResult;
+        resourceTemplates?: ListResult;
+        prompts?: ListResult;
+    };
+    io: {
+        /** stdio only: lines on stdout that were not JSON-RPC messages. Capped. */
+        stdoutNonJsonLines: string[];
+        /** Last lines of stderr. Capped. */
+        stderrTail: string[];
+    };
+    http?: HttpProbe;
+    /** server/discover (protocol revision 2026-07-28 and later). */
+    discover?: DiscoverProbe;
+    /** Everything learned over protocol 2026-07-28. */
+    modern?: ModernProbe;
+    /** resources/read results for UI resources that tools link to, keyed by URI. */
+    uiReads?: Record<string, UiRead>;
+    /** One initialize per protocol version (--version-matrix). */
+    versionMatrix?: VersionProbe[];
+    /** tools/call results (--probe-calls or the call command). */
+    calls?: CallProbe[];
+    /** The stdio server's project and the MCP SDKs it uses. */
+    project?: ProjectInfo;
+}
+export interface CallProbe {
+    tool: string;
+    args: Record<string, unknown>;
+    /** "probe" = picked automatically (readOnlyHint), "explicit" = named by the user. */
+    origin: "probe" | "explicit";
+    durationMs: number;
+    /** Set when the server answered with a JSON-RPC error or the call failed. */
+    error?: {
+        code?: number;
+        message: string;
+    };
+    /** Raw result, with large text truncated. */
+    result?: Record<string, unknown>;
+    /** Size of the full JSON result before truncation, in characters. */
+    resultChars?: number;
+}
+export interface VersionProbe {
+    requested: string;
+    ok: boolean;
+    negotiated?: string;
+    error?: string;
+    /** Sorted tool names listed in that session. */
+    tools?: string[];
+}
+export interface UiRead {
+    ok: boolean;
+    mimeType?: string;
+    error?: string;
+}
+export interface ModernPageMeta {
+    resultType?: unknown;
+    ttlMs?: unknown;
+    cacheScope?: unknown;
+    /** _meta["io.modelcontextprotocol/serverInfo"] from the result. */
+    serverInfo?: Record<string, unknown>;
+}
+export interface ModernProbe {
+    version: string;
+    /** The server answered like a 2026-07-28 server. */
+    supported: boolean;
+    discover: DiscoverProbe;
+    /** Result metadata of server/discover. */
+    discoverMeta?: ModernPageMeta;
+    startupMs?: number;
+    lists?: Partial<Record<ListKind, ListResult>>;
+    /** Result metadata per list page. */
+    pagesMeta?: Partial<Record<ListKind, ModernPageMeta[]>>;
+    uiReads?: Record<string, UiRead>;
+    /** What the server did with a request carrying an unsupported protocol version. */
+    unsupportedVersion?: {
+        answered: boolean;
+        code?: number;
+        message?: string;
+        data?: unknown;
+    };
+    stderrTail?: string[];
+}
+export interface DiscoverProbe {
+    ok: boolean;
+    /** Raw result when ok. */
+    result?: Record<string, unknown>;
+    error?: {
+        code?: number;
+        message: string;
+    };
+}
+export type Target = {
+    kind: "stdio";
+    command: string;
+    args: string[];
+    cwd: string;
+} | {
+    kind: "http";
+    url: string;
+};
+export type RawItem = Record<string, unknown>;
+export interface ListResult {
+    ok: boolean;
+    items: RawItem[];
+    pages: number;
+    durationMs: number;
+    error?: {
+        code?: number;
+        message: string;
+    };
+    /** Set when pagination stopped because a cursor repeated. */
+    cursorLoop?: boolean;
+}
+export interface HttpResponseProbe {
+    url: string;
+    status?: number;
+    error?: string;
+    headers?: Record<string, string>;
+    /** Parsed JSON body, when the response was JSON. */
+    json?: unknown;
+}
+export interface HttpProbe {
+    /** Unauthenticated initialize POST. */
+    unauthenticated: HttpResponseProbe;
+    /** Protected resource metadata fetches, in the order tried. */
+    protectedResource: HttpResponseProbe[];
+    /** Authorization server metadata fetches, in the order tried. */
+    authorizationServer: HttpResponseProbe[];
+}
+export declare const LIST_KINDS: {
+    readonly tools: {
+        readonly method: "tools/list";
+        readonly key: "tools";
+        readonly capability: "tools";
+    };
+    readonly resources: {
+        readonly method: "resources/list";
+        readonly key: "resources";
+        readonly capability: "resources";
+    };
+    readonly resourceTemplates: {
+        readonly method: "resources/templates/list";
+        readonly key: "resourceTemplates";
+        readonly capability: "resources";
+    };
+    readonly prompts: {
+        readonly method: "prompts/list";
+        readonly key: "prompts";
+        readonly capability: "prompts";
+    };
+};
+export type ListKind = keyof typeof LIST_KINDS;
+export declare function saveSnapshot(path: string, snapshot: ServerSnapshot): void;
+export declare function loadSnapshot(path: string): ServerSnapshot;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../src/snapshot.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,CAAC,CAAC;IACnB;;;;OAIG;IACH,GAAG,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,6DAA6D;QAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,6CAA6C;QAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,UAAU,CAAC,EAAE;QACX,wBAAwB,EAAE,MAAM,CAAC;QACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,KAAK,EAAE;QACL,KAAK,CAAC,EAAE,UAAU,CAAC;QACnB,SAAS,CAAC,EAAE,UAAU,CAAC;QACvB,iBAAiB,CAAC,EAAE,UAAU,CAAC;QAC/B,OAAO,CAAC,EAAE,UAAU,CAAC;KACtB,CAAC;IACF,EAAE,EAAE;QACF,2EAA2E;QAC3E,kBAAkB,EAAE,MAAM,EAAE,CAAC;QAC7B,oCAAoC;QACpC,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,gEAAgE;IAChE,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,mDAAmD;IACnD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,8DAA8D;IAC9D,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,8DAA8D;IAC9D,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,qFAAqF;IACrF,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,0CAA0C;IAC1C,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9C,qCAAqC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mFAAmF;IACnF,kBAAkB,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC5F,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED,MAAM,MAAM,MAAM,GACd;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE9C,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,6DAA6D;IAC7D,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,oDAAoD;IACpD,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,uCAAuC;IACvC,eAAe,EAAE,iBAAiB,CAAC;IACnC,+DAA+D;IAC/D,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IACvC,iEAAiE;IACjE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC;CAC1C;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;CASb,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,UAAU,CAAC;AAE/C,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAEzE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAMzD"}

package/dist/snapshot.js

@@ -0,0 +1,22 @@
+import { readFileSync, writeFileSync } from "node:fs";
+export const LIST_KINDS = {
+    tools: { method: "tools/list", key: "tools", capability: "tools" },
+    resources: { method: "resources/list", key: "resources", capability: "resources" },
+    resourceTemplates: {
+        method: "resources/templates/list",
+        key: "resourceTemplates",
+        capability: "resources",
+    },
+    prompts: { method: "prompts/list", key: "prompts", capability: "prompts" },
+};
+export function saveSnapshot(path, snapshot) {
+    writeFileSync(path, JSON.stringify(snapshot, null, 2) + "\n");
+}
+export function loadSnapshot(path) {
+    const data = JSON.parse(readFileSync(path, "utf8"));
+    if (data?.snapshotVersion !== 1) {
+        throw new Error(`${path}: unsupported snapshot version ${String(data?.snapshotVersion)}`);
+    }
+    return data;
+}
+//# sourceMappingURL=snapshot.js.map

package/dist/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../src/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AA6JtD,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;IAClE,SAAS,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE;IAClF,iBAAiB,EAAE;QACjB,MAAM,EAAE,0BAA0B;QAClC,GAAG,EAAE,mBAAmB;QACxB,UAAU,EAAE,WAAW;KACxB;IACD,OAAO,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE;CAClE,CAAC;AAIX,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,QAAwB;IACjE,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;IACtE,IAAI,IAAI,EAAE,eAAe,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/ui.d.ts

@@ -0,0 +1,18 @@
+import type { RawItem } from "./snapshot.js";
+/** MCP Apps (io.modelcontextprotocol/ui, stable 2026-01-26). */
+export declare const MCP_APP_MIME = "text/html;profile=mcp-app";
+/** Legacy OpenAI Apps SDK widget type, still emitted by some mcp-ui adapters. */
+export declare const SKYBRIDGE_MIME = "text/html+skybridge";
+export interface UiLinks {
+    /** `_meta.ui.resourceUri`, the current MCP Apps key. */
+    current?: string;
+    /** `_meta["ui/resourceUri"]`, deprecated flat key. */
+    flat?: string;
+    /** `_meta["openai/outputTemplate"]`, ChatGPT compatibility alias. */
+    openai?: string;
+}
+export declare function uiLinks(tool: RawItem): UiLinks;
+export declare function linkedUiUris(tool: RawItem): string[];
+/** Normalises a MIME type for comparison: lowercase, no spaces around parameters. */
+export declare function normalizeMime(mime: string): string;
+//# sourceMappingURL=ui.d.ts.map

package/dist/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../src/ui.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,gEAAgE;AAChE,eAAO,MAAM,YAAY,8BAA8B,CAAC;AACxD,iFAAiF;AACjF,eAAO,MAAM,cAAc,wBAAwB,CAAC;AAEpD,MAAM,WAAW,OAAO;IACtB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAO9C;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAGpD;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/ui.js

@@ -0,0 +1,22 @@
+/** MCP Apps (io.modelcontextprotocol/ui, stable 2026-01-26). */
+export const MCP_APP_MIME = "text/html;profile=mcp-app";
+/** Legacy OpenAI Apps SDK widget type, still emitted by some mcp-ui adapters. */
+export const SKYBRIDGE_MIME = "text/html+skybridge";
+export function uiLinks(tool) {
+    const meta = tool._meta;
+    if (typeof meta !== "object" || meta === null)
+        return {};
+    const m = meta;
+    const ui = typeof m.ui === "object" && m.ui !== null ? m.ui : {};
+    const s = (v) => (typeof v === "string" ? v : undefined);
+    return { current: s(ui.resourceUri), flat: s(m["ui/resourceUri"]), openai: s(m["openai/outputTemplate"]) };
+}
+export function linkedUiUris(tool) {
+    const links = uiLinks(tool);
+    return [...new Set([links.current, links.flat, links.openai].filter((u) => !!u))];
+}
+/** Normalises a MIME type for comparison: lowercase, no spaces around parameters. */
+export function normalizeMime(mime) {
+    return mime.toLowerCase().replace(/\s*;\s*/g, ";").trim();
+}
+//# sourceMappingURL=ui.js.map

package/dist/ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../src/ui.ts"],"names":[],"mappings":"AAEA,gEAAgE;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACxD,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAWpD,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACzD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,EAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,CAAC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC"}

package/dist/upgrade.d.ts

@@ -0,0 +1,12 @@
+import type { UpgradeOptions } from "./cli.js";
+import { type ProjectInfo } from "./project.js";
+import { type UpgradeAdvice } from "./sdk-facts.js";
+export declare function renderAdvice(project: ProjectInfo, advice: UpgradeAdvice[]): string;
+/** Which upgrades --apply runs: minor always, major only with --major, never migrations. */
+export declare function planUpgrades(advice: UpgradeAdvice[], allowMajor: boolean): UpgradeAdvice[];
+/** Rewrites `name==old` to `name==new` in a pinned requirements file. */
+export declare function bumpPin(file: string, name: string, version: string): boolean;
+/** Runs each upgrade in order and bumps == pins; stops at the first failure. */
+export declare function applyPlan(plan: UpgradeAdvice[], dir: string, run: (command: string, cwd: string) => Promise<number>, log: (m: string) => void): Promise<boolean>;
+export declare function runUpgrade(options: UpgradeOptions, log?: (m: string) => void): Promise<number>;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,OAAO,EAA+B,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAE7E,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG9E,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAclF;AAED,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,UAAU,EAAE,OAAO,GAAG,aAAa,EAAE,CAE1F;AAED,yEAAyE;AACzE,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAM5E;AAED,gFAAgF;AAChF,wBAAsB,SAAS,CAC7B,IAAI,EAAE,aAAa,EAAE,EACrB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACtD,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GACvB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAgBD,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAA8B,GAAG,OAAO,CAAC,MAAM,CAAC,CAmD7H"}