@dpesch/mantisbt-mcp-server 1.8.1 → 1.8.3

package/CHANGELOG.md

@@ -11,6 +11,23 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ---
 
+## [1.8.3] – 2026-03-28
+
+### Added
+- New optional env var `MCP_TEST_ENVIRONMENT=true`. When set, `resources/list` skips live API calls and returns only static resources. Intended for automated inspection environments (e.g. Glama Docker builds) that start the server with placeholder credentials and restricted network access.
+
+### Fixed
+- All `MantisClient` fetch calls now use a 30-second timeout via `AbortSignal.timeout()`. Previously, a slow or unreachable MantisBT instance would cause fetch calls to hang indefinitely.
+
+---
+
+## [1.8.2] – 2026-03-27
+
+### Fixed
+- HTTP transport (`TRANSPORT=http`): race condition when multiple sequential requests arrive quickly (e.g. `initialize` followed immediately by `ping`). The `res.on('close')` handler that calls `transport.close()` fires asynchronously, so the next request could arrive while the previous transport was still registered — causing `connect()` to throw "Already connected". Fixed by calling `await server.close()` before each `server.connect()` call (a no-op when not connected). Also added a `res.headersSent` guard in the error handler to prevent a secondary "Cannot set headers after they are sent" error from closing the socket without a response.
+
+---
+
 ## [1.8.1] – 2026-03-27
 
 ### Fixed

package/dist/client.js

@@ -96,10 +96,12 @@ export class MantisClient {
     // ---------------------------------------------------------------------------
     // Public API methods
     // ---------------------------------------------------------------------------
+    static TIMEOUT_MS = 30_000;
     async get(path, params) {
         const response = await fetch(await this.buildUrl(path, params), {
             method: 'GET',
             headers: await this.headers(),
+            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
         });
         return this.handleResponse(response);
     }
@@ -108,6 +110,7 @@ export class MantisClient {
             method: 'POST',
             headers: await this.headers(),
             body: JSON.stringify(body),
+            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
         });
         return this.handleResponse(response);
     }
@@ -116,6 +119,7 @@ export class MantisClient {
             method: 'PATCH',
             headers: await this.headers(),
             body: JSON.stringify(body),
+            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
         });
         return this.handleResponse(response);
     }
@@ -123,6 +127,7 @@ export class MantisClient {
         const response = await fetch(await this.buildUrl(path), {
             method: 'DELETE',
             headers: await this.headers(),
+            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
         });
         return this.handleResponse(response);
     }
@@ -137,6 +142,7 @@ export class MantisClient {
                 'Accept': 'application/json',
             },
             body: formData,
+            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
         });
         return this.handleResponse(response);
     }
@@ -144,6 +150,7 @@ export class MantisClient {
         const response = await fetch(await this.buildUrl('users/me'), {
             method: 'GET',
             headers: await this.headers(),
+            signal: AbortSignal.timeout(MantisClient.TIMEOUT_MS),
         });
         if (!response.ok) {
             throw new MantisApiError(response.status, response.statusText);

package/dist/config.js

@@ -54,6 +54,7 @@ function readNonCredentialConfig() {
             modelName: searchModelName,
             numThreads: searchNumThreads,
         },
+        testEnvironment: process.env.MCP_TEST_ENVIRONMENT === 'true',
     };
 }
 /**

package/dist/index.js

@@ -63,7 +63,7 @@ async function createMcpServer() {
     registerTagTools(server, client);
     registerVersionTools(server, client, versionHint, version);
     registerPrompts(server);
-    registerResources(server, client, cache);
+    registerResources(server, client, cache, startupConfig.testEnvironment);
     // Optional: Semantic search module
     if (startupConfig.search.enabled) {
         const { initializeSearchModule } = await import('./search/index.js');
@@ -107,13 +107,20 @@ async function runHttp() {
                         sessionIdGenerator: undefined,
                         enableJsonResponse: true,
                     });
-                    res.on('close', () => transport.close());
+                    res.on('close', () => { void transport.close(); });
+                    // Disconnect from any previous transport before connecting the new one.
+                    // The res.on('close') handler above closes the transport asynchronously,
+                    // but the next request may arrive before it fires — causing connect() to
+                    // throw "Already connected". Explicitly closing first avoids that race.
+                    await server.close();
                     await server.connect(transport);
                     await transport.handleRequest(req, res, body);
                 }
                 catch {
-                    res.writeHead(400, { 'Content-Type': 'application/json' });
-                    res.end(JSON.stringify({ error: 'Bad Request' }));
+                    if (!res.headersSent) {
+                        res.writeHead(400, { 'Content-Type': 'application/json' });
+                        res.end(JSON.stringify({ error: 'Bad Request' }));
+                    }
                 }
             });
         }

package/dist/resources/index.js

@@ -7,7 +7,7 @@ function jsonResource(uri, data) {
         contents: [{ uri: uri.href, mimeType: 'application/json', text: JSON.stringify(data) }],
     };
 }
-export function registerResources(server, client, cache) {
+export function registerResources(server, client, cache, testEnvironment = false) {
     async function loadProjects() {
         const cached = await cache.loadIfValid();
         return cached?.projects
@@ -25,12 +25,19 @@ export function registerResources(server, client, cache) {
         mimeType: 'application/json',
     }, async (uri) => jsonResource(uri, await loadProjects()));
     server.registerResource('project-detail', new ResourceTemplate('mantis://projects/{id}', {
-        list: async () => ({
-            resources: (await loadProjects()).map((p) => ({
-                uri: `mantis://projects/${p.id}`,
-                name: p.name,
-            })),
-        }),
+        list: async () => {
+            // In test environments (MCP_TEST_ENVIRONMENT=true, e.g. Glama inspection
+            // with placeholder credentials) skip the live API call and return an
+            // empty list so resources/list responds immediately without timing out.
+            if (testEnvironment)
+                return { resources: [] };
+            return {
+                resources: (await loadProjects()).map((p) => ({
+                    uri: `mantis://projects/${p.id}`,
+                    name: p.name,
+                })),
+            };
+        },
     }), {
         title: 'Project Detail',
         description: 'Combined project view: fields (status, view_state, access_level, description) plus all associated users, versions, and categories. Served from local cache when fresh; falls back to live API fetch. Refresh via the sync_metadata tool.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dpesch/mantisbt-mcp-server",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "mcpName": "io.github.dpesch/mantisbt-mcp-server",
   "description": "MCP server for MantisBT REST API – read and manage bug tracker issues",
   "author": "Dominik Pesch",

package/scripts/hooks/pre-push.mjs

@@ -111,6 +111,16 @@ rl.on('close', () => {
   const branches = lines.filter(l => l.split(' ')[2]?.startsWith('refs/heads/'));
   const others   = lines.filter(l => !l.split(' ')[2]?.startsWith('refs/heads/'));
 
+  // Batch-fetch all tags from Codeberg (single ls-remote call, ref → sha).
+  const remoteTagsRaw = gitOptional(`ls-remote --tags "${remoteUrl}"`);
+  const remoteTagMap = new Map(
+    remoteTagsRaw
+      ? remoteTagsRaw.split('\n').filter(Boolean)
+          .map(l => { const [sha, ref] = l.split(/\s+/); return [ref, sha]; })
+          .filter(([ref]) => ref)
+      : []
+  );
+
   // localSha → filteredSha, accumulated across all refs in this push.
   const shaMap = {};
   let pushed = 0;
@@ -124,6 +134,17 @@ rl.on('close', () => {
 
     const label = remoteRef.replace('refs/heads/', '').replace('refs/tags/', '');
 
+    if (remoteRef.startsWith('refs/tags/')) {
+      if (remoteTagMap.has(remoteRef)) {
+        console.log(`  ↷ ${label} already on Codeberg — skipping`);
+        continue;
+      }
+      if (!gitOptional(`rev-parse --verify "${localSha}"`)) {
+        console.warn(`  ⚠ ${label} — commit ${localSha.slice(0, 8)} not found locally, skipping`);
+        continue;
+      }
+    }
+
     // If this commit was already filtered as part of a branch push, reuse it.
     if (localSha in shaMap) {
       try {
@@ -137,9 +158,11 @@ rl.on('close', () => {
       continue;
     }
 
-    // Get the actual current SHA on Codeberg for this ref.
-    const lsOut = gitOptional(`ls-remote "${remoteUrl}" "${remoteRef}"`);
-    const actualRemoteSha = lsOut ? lsOut.split(/\s+/)[0] : '';
+    // Tags: existing ones were skipped above, so only new tags reach here — no remote anchor.
+    // Branches: query individually to find the incremental anchor for filtered chain building.
+    const actualRemoteSha = remoteRef.startsWith('refs/tags/')
+      ? ''
+      : (gitOptional(`ls-remote "${remoteUrl}" "${remoteRef}"`)?.split(/\s+/)[0] ?? '');
 
     if (!actualRemoteSha) {
       // New ref on Codeberg — filter the tip with no parent.
@@ -167,15 +190,8 @@ rl.on('close', () => {
           shaMap[sha] = makeFilteredCommit(sha, filteredTree, mappedParents);
         }
       } else {
-        // Fallback: anchor not found.
-        // If the remote SHA doesn't exist locally (filtered commit from a prior push),
-        // tags can be safely skipped (immutable — already correct on Codeberg).
-        // Branches fall back to orphan filtering (best effort).
+        // Fallback: anchor not found — branch only (tags exit early above).
         const remoteExists = !!gitOptional(`rev-parse --verify "${actualRemoteSha}"`);
-        if (!remoteExists && remoteRef.startsWith('refs/tags/')) {
-          console.log(`  ↷ ${label} already on Codeberg — skipping`);
-          continue;
-        }
         console.warn(`  ⚠ Could not find local base for ${label}, filtering tip only`);
         shaMap[localSha] = makeFilteredCommit(localSha, filterTree(localSha), remoteExists ? [actualRemoteSha] : []);
       }

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.dpesch/mantisbt-mcp-server",
   "title": "MantisBT MCP Server",
   "description": "MantisBT MCP server – manage issues, notes, files, tags, and relationships. With semantic search.",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@dpesch/mantisbt-mcp-server",
-      "version": "1.8.1",
+      "version": "1.8.3",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"