@chrischall/myatriumhealth-mcp 0.4.0 → 0.4.2

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Angi — find home-service pros by trade and city, read ratings, reviews and pro profiles. Angi serves its pages only to a real browser, so requests route through the user's own angi.com tab via the fetchproxy browser extension, reusing their existing session. The trade/city taxonomy is read from Angi's public sitemaps directly.",
-    "version": "0.4.0"
+    "version": "0.4.2"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "MyAtriumHealth",
       "source": "./",
       "description": "Read MyAtriumHealth (Epic MyChart) records — test results, medications, allergies, immunizations, health issues, visits — by relaying requests through the user's signed-in browser tab via the fetchproxy bridge.",
-      "version": "0.4.0",
+      "version": "0.4.2",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "myatriumhealth-mcp",
   "displayName": "MyAtriumHealth",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "MyAtriumHealth (Epic MyChart) access for Claude — test results, medications, allergies, immunizations, visits",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -41541,6 +41541,11 @@ function validateInnerRequest(raw) {
     if (raw.init.inPage !== void 0) {
       assertBoolean(raw.init.inPage, "inner.init.inPage");
     }
+    if (raw.init.credentials !== void 0) {
+      if (raw.init.credentials !== "include" && raw.init.credentials !== "omit") {
+        throw new ProtocolError("inner.init.credentials: must be 'include' or 'omit'");
+      }
+    }
     return raw;
   }
   if (raw.op === "read_cookies") {
@@ -43819,9 +43824,9 @@ var FetchproxyServer = class {
   async _fetchOnceWithTimeout(init) {
     const id = this.nextRequestId++;
     const inner = { type: "request", id, op: "fetch", init };
-    const pending = new Promise((resolve2) => {
+    const pending = this.guardPending(new Promise((resolve2) => {
       this.pending.set(id, resolve2);
-    });
+    }));
     await this.sendInnerFrame(inner);
     const timeoutMs = this.opts.fetchTimeoutMs;
     if (timeoutMs === void 0 || timeoutMs <= 0)
@@ -43868,6 +43873,34 @@ var FetchproxyServer = class {
    * already surface for fetch timeouts). `0`/unset opts out (unbounded),
    * matching the fetch path.
    */
+  /**
+   * Register a verb's pending promise and keep an early rejection from being
+   * fatal.
+   *
+   * Every verb stores its resolver, then AWAITS `sendInnerFrame` before the
+   * caller attaches a handler — and that send does real work (sealing, a
+   * socket write), so it yields across event-loop turns. Anything that drains
+   * the pending maps inside that window rejects a promise nothing is
+   * listening to yet: a refused pairing (`rejectAllPending(pairingErrorMessage
+   * (code))`), an extension disconnect, a `close()`. Under Node's default
+   * `--unhandled-rejections=throw` that ends the PROCESS, so an MCP that
+   * should have reported "approve pair code NNN-NN" dies instead, and each
+   * respawn mints a fresh code nobody can approve (#329).
+   *
+   * The no-op catch is a listener, not a swallow. `.catch()` derives a NEW
+   * promise and leaves this one's rejection intact, so `_withVerbTimeout` and
+   * the caller still see it — the only thing that changes is that the
+   * rejection is never unhandled.
+   *
+   * This is the same hazard `_withVerbTimeout`'s timer already guards against
+   * from the other side, where it drops the resolver "so a late bridge
+   * response doesn't become an unhandled promise that crashes the host".
+   */
+  guardPending(pending) {
+    pending.catch(() => {
+    });
+    return pending;
+  }
   async _withVerbTimeout(pending, pendingMap, id, url2, requestedTimeoutMs) {
     const timeoutMs = this.opts.fetchTimeoutMs;
     if (timeoutMs === void 0 || timeoutMs <= 0)
@@ -43979,7 +44012,11 @@ var FetchproxyServer = class {
       // Spread rather than `inPage: opts.inPage`: the wire's validator treats
       // the key's PRESENCE as the request, and a literal `undefined` would
       // both serialize away inconsistently and read as "asked for" here.
-      ...opts.inPage === true ? { inPage: true } : {}
+      ...opts.inPage === true ? { inPage: true } : {},
+      // Spread for the reason `inPage` is: only a deliberate 'omit' goes on
+      // the wire, so an untouched request serialises byte-identically to
+      // every version before this option existed.
+      ...opts.credentials === "omit" ? { credentials: "omit" } : {}
     };
     const result = await this.fetch(init);
     if (!result.ok) {
@@ -44207,9 +44244,9 @@ var FetchproxyServer = class {
       const tabUrl = `https://${host}/`;
       inner = { type: "request", id, op: "read_cookies", init: { tabUrl } };
     }
-    const pending = new Promise((resolve2) => {
+    const pending = this.guardPending(new Promise((resolve2) => {
       this.pendingReadCookies.set(id, resolve2);
-    });
+    }));
     await this.sendInnerFrame(inner);
     const result = await this._withVerbTimeout(pending, this.pendingReadCookies, id, `https://${host}`);
     if (!result.ok) {
@@ -44266,9 +44303,9 @@ var FetchproxyServer = class {
         ...cookiePath !== void 0 ? { path: cookiePath } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingWriteCookies.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingWriteCookies, id, `https://${host}`);
   }
@@ -44329,9 +44366,9 @@ var FetchproxyServer = class {
         ...opts.pointers ? { pointers: { ...opts.pointers } } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingStorage.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingStorage, id, `https://${host}`);
   }
@@ -44434,9 +44471,9 @@ var FetchproxyServer = class {
         ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingCapture.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(
       pending,
@@ -44527,9 +44564,9 @@ var FetchproxyServer = class {
         ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingRedirect.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(
       pending,
@@ -44617,9 +44654,9 @@ var FetchproxyServer = class {
         ...opts.timeoutMs !== void 0 ? { timeoutMs: opts.timeoutMs } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingDownload.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(
       pending,
@@ -44675,9 +44712,9 @@ var FetchproxyServer = class {
         keys: [...opts.keys]
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingIdb.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingIdb, id, origin);
   }
@@ -44715,9 +44752,9 @@ var FetchproxyServer = class {
       op: "read_dom",
       init: { origin, names: [...opts.names] }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingStorage.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingStorage, id, origin);
   }
@@ -44761,9 +44798,9 @@ var FetchproxyServer = class {
         ...opts.tabUrl !== void 0 ? { tabUrl: opts.tabUrl } : {}
       }
     };
-    const pending = new Promise((resolve2, reject) => {
+    const pending = this.guardPending(new Promise((resolve2, reject) => {
       this.pendingGraphql.set(id, { resolve: resolve2, reject });
-    });
+    }));
     await this.sendInnerFrame(inner);
     return this._withVerbTimeout(pending, this.pendingGraphql, id, opts.name);
   }
@@ -45166,6 +45203,7 @@ async function runCredentialHealthcheck(args) {
       kind = custom2.kind;
       customHint = custom2.hint;
       detail = custom2.detail;
+      arm = isArm(kind) ? kind : "unknown";
     }
     error61 = {
       kind,
@@ -50462,7 +50500,7 @@ function registerVisitTools(server, client2, patients2) {
 }
 
 // src/version.ts
-var VERSION = "0.4.0";
+var VERSION = "0.4.2";
 
 // src/index.ts
 var dotenvCandidates = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/myatriumhealth-mcp",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "MCP server for MyAtriumHealth (Atrium Health's Epic MyChart patient portal) via the fetchproxy browser bridge.",
   "type": "module",
   "bin": {
@@ -42,12 +42,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^0.26.0",
-    "@fetchproxy/server": "^2.9.0",
-    "@modelcontextprotocol/sdk": "^1.22.0",
+    "@chrischall/mcp-utils": "^0.26.1",
+    "@fetchproxy/server": "^2.10.0",
+    "@modelcontextprotocol/sdk": "^1.30.0",
     "dotenv": "^17.4.2",
     "node-html-parser": "^9.0.3",
-    "zod": "^4.4.0"
+    "zod": "^4.5.4"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/myatriumhealth-mcp",
     "source": "github"
   },
-  "version": "0.4.0",
+  "version": "0.4.2",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/myatriumhealth-mcp",
-      "version": "0.4.0",
+      "version": "0.4.2",
       "transport": {
         "type": "stdio"
       },