fix(cliclient): percent-encode server name in daemon logs URL

Third read site for the namespaced-name log fix (Codex review round 2 on
PR #604): the daemon-backed CLI logs client built /servers/%s/logs with the
raw name, so 'mcpproxy upstream logs io.github.x/name' missed the chi route.
PathEscape the name (matching the registry client) + regression test.

Related #598

Author: Dumbris

internal/cliclient/client.go

@@ -415,8 +415,11 @@ func (c *Client) GetServers(ctx context.Context) ([]map[string]interface{}, erro
 
 // GetServerLogs retrieves logs for a specific server.
 func (c *Client) GetServerLogs(ctx context.Context, serverName string, tail int) ([]contracts.LogEntry, error) {
-	url := fmt.Sprintf("%s/api/v1/servers/%s/logs?tail=%d", c.baseURL, serverName, tail)
-	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
+	// PathEscape the server name: official-registry names are namespace/name and
+	// contain "/", which would otherwise inject extra path segments and miss the
+	// chi /servers/{id}/logs route (MCP-1111 / #598).
+	reqURL := fmt.Sprintf("%s/api/v1/servers/%s/logs?tail=%d", c.baseURL, url.PathEscape(serverName), tail)
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, reqURL, nil)
 	if err != nil {
 		return nil, fmt.Errorf("failed to create request: %w", err)
 	}

internal/cliclient/client_logs_test.go

@@ -0,0 +1,41 @@
+package cliclient
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"go.uber.org/zap"
+)
+
+// Regression for MCP-1111 / #598: the daemon logs client must percent-encode a
+// namespaced (slash-bearing) official-registry server name so the request matches
+// the chi /servers/{id}/logs route instead of injecting extra path segments.
+func TestClient_GetServerLogs_EscapesSlashName(t *testing.T) {
+	const serverName = "io.github.evidai/polymarket-guard"
+	var gotEscaped string
+	ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		gotEscaped = r.URL.EscapedPath()
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		_ = json.NewEncoder(w).Encode(map[string]interface{}{
+			"success": true,
+			"data":    map[string]interface{}{"logs": []interface{}{}},
+		})
+	}))
+	defer ts.Close()
+
+	client := NewClient(ts.URL, zap.NewNop().Sugar())
+	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+	defer cancel()
+
+	_, err := client.GetServerLogs(ctx, serverName, 50)
+	require.NoError(t, err)
+	assert.Equal(t, "/api/v1/servers/io.github.evidai%2Fpolymarket-guard/logs", gotEscaped,
+		"server name must be percent-encoded in the daemon logs URL")
+}