@chrischall/myatriumhealth-mcp 0.4.3 → 0.4.4

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Angi — find home-service pros by trade and city, read ratings, reviews and pro profiles. Angi serves its pages only to a real browser, so requests route through the user's own angi.com tab via the fetchproxy browser extension, reusing their existing session. The trade/city taxonomy is read from Angi's public sitemaps directly.",
-    "version": "0.4.3"
+    "version": "0.4.4"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "MyAtriumHealth",
       "source": "./",
       "description": "Read MyAtriumHealth (Epic MyChart) records — test results, medications, allergies, immunizations, health issues, visits — by relaying requests through the user's signed-in browser tab via the fetchproxy bridge.",
-      "version": "0.4.3",
+      "version": "0.4.4",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "myatriumhealth-mcp",
   "displayName": "MyAtriumHealth",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "MyAtriumHealth (Epic MyChart) access for Claude — test results, medications, allergies, immunizations, visits",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -9763,7 +9763,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net = __require("net");
     var tls = __require("tls");
-    var { randomBytes: randomBytes2, createHash } = __require("crypto");
+    var { randomBytes: randomBytes3, createHash } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -10301,7 +10301,7 @@ var require_websocket = __commonJS({
         }
       }
       const defaultPort = isSecure ? 443 : 80;
-      const key = randomBytes2(16).toString("base64");
+      const key = randomBytes3(16).toString("base64");
       const request = isSecure ? https.request : http.request;
       const protocolSet = /* @__PURE__ */ new Set();
       let perMessageDeflate;
@@ -40115,7 +40115,7 @@ function parseChallengeContext(html) {
   if (flag("AllowSMS", tfs)) channels.push("sms");
   if (flag("AllowEmail", tfs)) channels.push("email");
   if (flag("AllowTotp", tfs)) channels.push("totp");
-  const rm = /RememberMeSettings\s*:\s*\{([\s\S]{0,300}?)\}/.exec(html)?.[1] ?? "";
+  const rm2 = /RememberMeSettings\s*:\s*\{([\s\S]{0,300}?)\}/.exec(html)?.[1] ?? "";
   const workflow = /Workflow\s*:\s*(\d+)/.exec(tfs)?.[1];
   const email3 = str("DisplayEmail");
   const phone = str("DisplayPhone");
@@ -40124,8 +40124,8 @@ function parseChallengeContext(html) {
     ...email3 !== void 0 ? { displayEmail: email3 } : {},
     ...phone !== void 0 ? { displayPhone: phone } : {},
     ...workflow !== void 0 ? { workflow: Number(workflow) } : {},
-    rememberMeEnabled: flag("Enabled", rm),
-    enrollDeviceTracking: flag("EnrollDeviceTracking", rm)
+    rememberMeEnabled: flag("Enabled", rm2),
+    enrollDeviceTracking: flag("EnrollDeviceTracking", rm2)
   };
 }
 var b64 = (s) => Buffer.from(s, "utf8").toString("base64");
@@ -42534,9 +42534,29 @@ var SessionState = class {
   outboundSeq = 0;
   lastInboundSeq = 0;
   inflightInbound = /* @__PURE__ */ new Set();
+  saturationWarned = false;
   constructor(sessionKey) {
     this.sessionKey = sessionKey;
   }
+  /**
+   * Whether the caller holding this claim verdict should log saturation now.
+   * True only on the TRANSITION into it: a line per dropped frame turned a
+   * flood — or a set that never drains — into a log flood amplifying the very
+   * condition it reported (#376). An `'ok'` claim re-arms the latch, since it
+   * is the one signal every caller sees that the set has drained below the
+   * bound; a replay needs no capacity and leaves it alone. Latched per
+   * session, so a renegotiated one starts armed. A set hovering at the bound
+   * can still alternate ok/saturated, but that logs at the rate frames finish
+   * opening, not the rate they arrive.
+   */
+  saturationWarningDue(claim2) {
+    if (claim2 === "ok")
+      this.saturationWarned = false;
+    if (claim2 !== "saturated" || this.saturationWarned)
+      return false;
+    this.saturationWarned = true;
+    return true;
+  }
   nextOutboundSeq() {
     this.outboundSeq += 1;
     return this.outboundSeq;
@@ -42547,19 +42567,21 @@ var SessionState = class {
    * the first `await` of the receive path, or a duplicate frame read in the
    * same pass will be judged against a counter neither frame has moved yet.
    *
-   * Answering false means "not this frame's to process" — replayed, or a
-   * duplicate of one still in flight. Every true MUST be answered by exactly
-   * one {@link commitInboundSeq} or {@link releaseInboundSeq}.
+   * Anything but `'ok'` means "not this frame's to process": `'replay'` for
+   * a spent seq or a duplicate of one still in flight, `'saturated'` when the
+   * in-flight bound is full. Replay is checked first, since refusing a stale
+   * seq needs no capacity. Every `'ok'` MUST be answered by exactly one
+   * {@link commitInboundSeq} or {@link releaseInboundSeq}.
    */
   claimInboundSeq(seq) {
     if (seq <= this.lastInboundSeq)
-      return false;
+      return "replay";
     if (this.inflightInbound.has(seq))
-      return false;
+      return "replay";
     if (this.inflightInbound.size >= MAX_INFLIGHT_INBOUND_SEQS)
-      return false;
+      return "saturated";
     this.inflightInbound.add(seq);
-    return true;
+    return "ok";
   }
   /**
    * Give a claim back without spending the seq — for a frame that did not
@@ -42654,11 +42676,12 @@ async function awaitSessionReady(ready, opts) {
 }
 
 // node_modules/@fetchproxy/server/dist/extension-trust.js
-import { readFile as readFile2, writeFile as writeFile2, rename, unlink, mkdir as mkdir2, chmod as chmod2 } from "node:fs/promises";
+import { readFile as readFile2, writeFile as writeFile2, rename as rename2, unlink as unlink2, mkdir as mkdir2, chmod as chmod2 } from "node:fs/promises";
 import { isAbsolute as isAbsolute2, join as join3 } from "node:path";
 
 // node_modules/@fetchproxy/server/dist/identity.js
-import { readFile, writeFile, mkdir, chmod } from "node:fs/promises";
+import { readFile, readdir, writeFile, mkdir, chmod, rename, rm, unlink } from "node:fs/promises";
+import { randomBytes as randomBytes2 } from "node:crypto";
 import { isAbsolute, join as join2 } from "node:path";
 import { homedir as homedir2 } from "node:os";
 var SAFE_PLAIN = /^[A-Za-z0-9._-]+$/;
@@ -42714,16 +42737,46 @@ function parseIdentity(text2) {
     createdAt: j.createdAt
   };
 }
+async function openIdentityDir(dir) {
+  await mkdir(dir, { recursive: true, mode: 448 });
+  try {
+    await chmod(dir, 448);
+  } catch (e) {
+    const code = e.code;
+    if (code !== "EROFS" && code !== "EPERM")
+      throw e;
+  }
+}
+var STAGING_BYTES = 6;
+async function sweepStagingFiles(dir, serverName) {
+  const base = safeIdentityFileBase(serverName).replace(/[.]/g, "\\.");
+  const staging = new RegExp(`^${base}\\.json\\.[0-9a-f]{${STAGING_BYTES * 2}}\\.tmp$`);
+  let names;
+  try {
+    names = await readdir(dir);
+  } catch {
+    return;
+  }
+  await Promise.all(names.filter((name) => staging.test(name)).map((name) => unlink(join2(dir, name)).catch(() => void 0)));
+}
 async function writeIdentityFile(dir, serverName, id) {
   const path = identityFilePath(dir, serverName);
-  await mkdir(dir, { recursive: true, mode: 448 });
-  await writeFile(path, serializeIdentity(id), { mode: 384 });
-  await chmod(path, 384);
+  await openIdentityDir(dir);
+  await sweepStagingFiles(dir, serverName);
+  const tmp = `${path}.${randomBytes2(STAGING_BYTES).toString("hex")}.tmp`;
+  try {
+    await writeFile(tmp, serializeIdentity(id), { mode: 384, flag: "wx" });
+    await chmod(tmp, 384);
+    await rename(tmp, path);
+  } catch (e) {
+    await rm(tmp, { force: true });
+    throw e;
+  }
   return path;
 }
 async function loadOrCreateIdentity(serverName, dir = defaultIdentityDir()) {
   const path = identityFilePath(dir, serverName);
-  await mkdir(dir, { recursive: true, mode: 448 });
+  await openIdentityDir(dir);
   try {
     return parseIdentity(await readFile(path, "utf8"));
   } catch (e) {
@@ -42836,7 +42889,7 @@ async function writeExtensionPin(serverName, pin, dir = defaultTrustDir()) {
   const tmp = `${path}.tmp`;
   await writeFile2(tmp, JSON.stringify(pin, null, 2), { mode: 384 });
   await chmod2(tmp, 384);
-  await rename(tmp, path);
+  await rename2(tmp, path);
 }
 
 // node_modules/@fetchproxy/server/dist/host.js
@@ -43191,7 +43244,11 @@ async function startHost(opts) {
               const session = ownSession;
               if (!session)
                 return;
-              if (!session.claimInboundSeq(frame.seq))
+              const claim2 = session.claimInboundSeq(frame.seq);
+              if (session.saturationWarningDue(claim2)) {
+                console.warn(`[fetchproxy] ${opts.ownServerName}: dropped an inbound frame (seq ${frame.seq}) unread \u2014 too many frames from the extension are still being opened (inbound claims saturated). Not a replay. Further drops are not logged until the in-flight set drains.`);
+              }
+              if (claim2 !== "ok")
                 return;
               let inner;
               try {
@@ -43320,7 +43377,9 @@ async function startHost(opts) {
 // node_modules/@fetchproxy/server/dist/peer.js
 var enc5 = new TextEncoder();
 async function startPeer(opts) {
-  const ws = new import_websocket.default(`ws://${opts.host}:${opts.port}`);
+  const ws = new import_websocket.default(`ws://${opts.host}:${opts.port}`, {
+    maxPayload: opts.maxPayloadBytes ?? MAX_PAYLOAD_BYTES
+  });
   await new Promise((resolve2, reject) => {
     const onOpen = () => {
       cleanup();
@@ -43558,7 +43617,11 @@ async function startPeer(opts) {
         const inboundSession = session;
         if (!inboundSession)
           return;
-        if (!inboundSession.claimInboundSeq(frame.seq))
+        const claim2 = inboundSession.claimInboundSeq(frame.seq);
+        if (inboundSession.saturationWarningDue(claim2)) {
+          console.warn(`[fetchproxy] ${opts.serverName}: dropped an inbound frame (seq ${frame.seq}) unread \u2014 too many frames from the extension are still being opened (inbound claims saturated). Not a replay. Further drops are not logged until the in-flight set drains.`);
+        }
+        if (claim2 !== "ok")
           return;
         let result;
         try {
@@ -51138,7 +51201,7 @@ function registerVisitTools(server, client2, patients2) {
 }
 
 // src/version.ts
-var VERSION = "0.4.3";
+var VERSION = "0.4.4";
 
 // src/index.ts
 var dotenvCandidates = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrischall/myatriumhealth-mcp",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "MCP server for MyAtriumHealth (Atrium Health's Epic MyChart patient portal) via the fetchproxy browser bridge.",
   "type": "module",
   "bin": {
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@chrischall/mcp-utils": "^0.26.1",
-    "@fetchproxy/server": "^3.0.0",
+    "@fetchproxy/server": "^3.0.1",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "dotenv": "^17.4.2",
     "node-html-parser": "^9.0.3",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/myatriumhealth-mcp",
     "source": "github"
   },
-  "version": "0.4.3",
+  "version": "0.4.4",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@chrischall/myatriumhealth-mcp",
-      "version": "0.4.3",
+      "version": "0.4.4",
       "transport": {
         "type": "stdio"
       },