Plugins that integrate an MCP service now call ctx.mcpServers.register()
for their own lifetime instead of writing the manager's Settings entry, so
two applications never overwrite each other's servers, a settings write
needs no namespace lookup or restart to take effect, and disabling or
uninstalling the plugin withdraws the server's tools.
- The manager is a Typert Remote service: watch streams the complete
server list, and restart and probe run the Host operations. The Web
application mounts one shared manager after the credentials provider.
- Credential templates replace every resolved value with [redacted] in
diagnostics, tool-call failures, and isError results instead of hiding
all upstream text, so the model can act on a server's error.
- Remove health checks, the ${env:NAME} template scheme that credential
references already cover, and the per-request credential re-check that
duplicated the rotation-driven reconnect.
- Client-safe status and probe types move to the ./types exports, and the
manager documentation moves from the tools reference to the MCP page.
gengruilin
6719b28294