Add durable profile and proxy MCP contract parity

[IlyaasK]

Summary

• make profile setup use exact-name filtering and reject ambiguity
• add profile and proxy rename actions
• preserve stable API error codes in MCP failures
• bind profile setup browsers to the resolved profile ID

Why

Durable MCP operations should resolve stable identities and surface actionable API failures. Search-style profile matching and name reuse could otherwise select the wrong durable profile.

Implementation

Profile setup filters by exact name, rejects duplicate exact matches with an executable recovery path, and uses the resolved ID when opening the setup browser. Rename guidance warns before invocation about active profile sessions. Rename responses retain their direct SDK resource shape.

Verification

• bun test (95 tests)
• bunx tsc --noEmit
• Prettier and git diff --check
• 20 focused scenario tests covering exact lookup, ambiguity, missing resources, rename guards, stable profile identity, and coded API errors
• targeted Stryker: profile/proxy rename and exact-lookup core paths reached 100%; expanded setup/error run killed 84/106 mutants, with remaining survivors in pre-existing presentation branches and equivalent API-error guards
• crap4ts: changed registration paths 1.1; API error-code helper 5.0

---

Note

Medium Risk
Changes how durable profiles are resolved during setup (ID binding and ambiguity handling), which could alter agent behavior if duplicate names existed; production wiring stays on default dependencies.

Overview
Introduces McpDependencies so MCP registration and tools can inject createKernelClient (defaults unchanged in production), enabling contract tests without hitting the real API.

Profile setup now lists by exact name, fails on duplicate exact matches with recovery guidance, rejects update_existing when the profile is missing, and opens the setup browser with profile.id instead of name. manage_profiles gains a rename action (by name or ID) with shared identifier validation; tool docs warn against renaming while a browser session is attached.

manage_proxies gains rename via proxies.update. MCP throwToolError messages append [code: …] when the Kernel SDK returns a string API error code.

Adds durable-contracts.test.ts and extends responses.test.ts for coded errors and rename/schema behavior at the MCP boundary.

^{Reviewed by Cursor Bugbot for commit c7fa9aa. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mcp	Ready	Preview	Aug 7, 2026 6:50pm

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 9c3e730. Configure here.}

[masnwilliams]

The production behavior is correct and worth landing: exact profile resolution, ID-bound setup sessions, rename parity, and stable API error codes all close real gaps. I'm requesting changes for the test architecture, which introduces global/import-order coupling and does not exercise the MCP contract it claims to cover. Once the tests use an isolated client dependency and validate the real MCP boundary, this should be good to merge. As a smaller follow-up while touching this code, please also consider centralizing the repeated profile_name/profile_id XOR validation used by get, rename, and delete.

[vercel]

Additional Suggestion:

fill_rate_per_minute schema gained an .int() constraint that wrongly rejects the fractional percentage values the Kernel API accepts.

[IlyaasK]

Also completed the optional cleanup from the review summary in c7fa9aa: get, rename, and delete now share one profile identifier validator while preserving their existing action-specific diagnostics. Focused regressions cover both conflicting and missing identifiers for get and delete. Full suite: 109 tests passed; typecheck, managed-auth bundle check, and changed-file formatting passed.

[IlyaasK]

Additional Suggestion:

fill_rate_per_minute schema gained an .int() constraint that wrongly rejects the fractional percentage values the Kernel API accepts.

experimentally invalidated

[masnwilliams]

Rechecked c7fa9aa. Both requested structural changes are addressed: profile/proxy registrations now receive an isolated Kernel client dependency, and rename behavior is covered through a real MCP server/client boundary including discovery, validation, authentication propagation, SDK calls, and serialization. The repeated profile selector validation is also centralized. Local verification passes: 109 tests, TypeScript, changed-file Prettier, and diff checks. Approved.