@ferrlabs/mcp-core 6.5.0 → 6.5.5

package/dist/__tests__/http.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http.test.d.ts.map

package/dist/__tests__/http.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/http.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/http.test.js

@@ -0,0 +1,43 @@
+import { describe, it, expect, vi, afterEach } from 'vitest';
+import { fetchWithTimeout, fetchTimeoutMs } from '../http.js';
+afterEach(() => {
+    vi.unstubAllGlobals();
+    delete process.env.FERRLABS_MCP_HTTP_TIMEOUT_MS;
+});
+describe('fetchTimeoutMs', () => {
+    it('defaults to 15000ms', () => {
+        expect(fetchTimeoutMs()).toBe(15_000);
+    });
+    it('honours a valid override', () => {
+        process.env.FERRLABS_MCP_HTTP_TIMEOUT_MS = '500';
+        expect(fetchTimeoutMs()).toBe(500);
+    });
+    it('ignores a non-positive or non-numeric override', () => {
+        process.env.FERRLABS_MCP_HTTP_TIMEOUT_MS = 'nope';
+        expect(fetchTimeoutMs()).toBe(15_000);
+        process.env.FERRLABS_MCP_HTTP_TIMEOUT_MS = '0';
+        expect(fetchTimeoutMs()).toBe(15_000);
+    });
+});
+describe('fetchWithTimeout', () => {
+    it('aborts and throws a timeout error when the upstream hangs', async () => {
+        vi.stubGlobal('fetch', (_url, init) => {
+            return new Promise((_resolve, reject) => {
+                init.signal?.addEventListener('abort', () => {
+                    reject(Object.assign(new Error('aborted'), { name: 'AbortError' }));
+                });
+            });
+        });
+        await expect(fetchWithTimeout('https://example.test', {}, 10)).rejects.toThrow(/timed out/);
+    });
+    it('passes the signal through and returns the response on success', async () => {
+        const ok = { ok: true };
+        const seen = {};
+        vi.stubGlobal('fetch', (_url, init) => {
+            seen.signal = init.signal ?? undefined;
+            return Promise.resolve(ok);
+        });
+        await expect(fetchWithTimeout('https://example.test')).resolves.toBe(ok);
+        expect(seen.signal).toBeInstanceOf(AbortSignal);
+    });
+});

package/dist/__tests__/version.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=version.test.d.ts.map

package/dist/__tests__/version.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/version.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/version.test.js

@@ -0,0 +1,20 @@
+import { describe, it, expect } from 'vitest';
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { readPackageVersion } from '../version.js';
+describe('readPackageVersion', () => {
+    it('reads the version from the parent-directory package.json of an entry module', () => {
+        const dir = mkdtempSync(join(tmpdir(), 'mcp-version-'));
+        writeFileSync(join(dir, 'package.json'), JSON.stringify({ version: '9.9.9' }), 'utf8');
+        const entryUrl = pathToFileURL(join(dir, 'dist', 'index.js')).href;
+        expect(readPackageVersion(entryUrl)).toBe('9.9.9');
+    });
+    it('throws when the package.json has no version field', () => {
+        const dir = mkdtempSync(join(tmpdir(), 'mcp-version-'));
+        writeFileSync(join(dir, 'package.json'), JSON.stringify({ name: 'x' }), 'utf8');
+        const entryUrl = pathToFileURL(join(dir, 'dist', 'index.js')).href;
+        expect(() => readPackageVersion(entryUrl)).toThrow(/no version field/);
+    });
+});

package/dist/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAKA,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC,CAmD1F"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AAMA,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,wBAAsB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC,CAmD1F"}

package/dist/api-client.js

@@ -1,5 +1,6 @@
 import { clearPersistedToken } from './auth/persistence.js';
 import { clearTokenCache } from './auth/index.js';
+import { fetchWithTimeout } from './http.js';
 const DEFAULT_API_URL = process.env.API_URL ?? 'https://api.ferrlabs.com';
 export class UnauthorizedError extends Error {
     constructor(message) {
@@ -18,7 +19,7 @@ export async function apiRequest(path, options = {}) {
         headers['x-api-token'] = token;
         headers['Authorization'] = `Bearer ${token}`;
     }
-    const res = await fetch(`${base}${path}`, {
+    const res = await fetchWithTimeout(`${base}${path}`, {
         method,
         headers,
         body: body ? JSON.stringify(body) : undefined,

package/dist/auth/__tests__/persistence.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=persistence.test.d.ts.map

package/dist/auth/__tests__/persistence.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.test.d.ts","sourceRoot":"","sources":["../../../src/auth/__tests__/persistence.test.ts"],"names":[],"mappings":""}

package/dist/auth/__tests__/persistence.test.js

@@ -0,0 +1,39 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdtempSync, rmSync, statSync } from 'node:fs';
+import { tmpdir, platform } from 'node:os';
+import { join } from 'node:path';
+const isPosix = platform() !== 'win32';
+describe('writePersistedToken', () => {
+    const originalEnv = process.env;
+    let dir;
+    beforeEach(() => {
+        process.env = { ...originalEnv };
+        delete process.env.FERRLABS_MCP_NO_PERSIST;
+        dir = mkdtempSync(join(tmpdir(), 'mcp-persist-'));
+        process.env.FERRLABS_MCP_TOKEN_PATH = join(dir, 'nested', 'token.json');
+    });
+    afterEach(() => {
+        process.env = originalEnv;
+        rmSync(dir, { recursive: true, force: true });
+    });
+    it('round-trips the persisted token', async () => {
+        const { writePersistedToken, readPersistedToken } = await import('../persistence.js');
+        await writePersistedToken('fl_secret', ['read']);
+        expect(await readPersistedToken()).toBe('fl_secret');
+    });
+    it.runIf(isPosix)('writes the token file with mode no broader than 0600', async () => {
+        const { writePersistedToken } = await import('../persistence.js');
+        const path = process.env.FERRLABS_MCP_TOKEN_PATH;
+        await writePersistedToken('fl_secret');
+        const mode = statSync(path).mode & 0o777;
+        expect(mode & 0o177).toBe(0);
+        expect(mode).toBe(0o600);
+    });
+    it.runIf(isPosix)('creates the parent directory with mode 0700', async () => {
+        const { writePersistedToken } = await import('../persistence.js');
+        const path = process.env.FERRLABS_MCP_TOKEN_PATH;
+        await writePersistedToken('fl_secret');
+        const dirMode = statSync(join(path, '..')).mode & 0o777;
+        expect(dirMode & 0o077).toBe(0);
+    });
+});

package/dist/auth/context.d.ts

@@ -1,8 +1,6 @@
-import { AsyncLocalStorage } from 'node:async_hooks';
 interface AuthContext {
     bearerToken?: string;
 }
-export declare const authContext: AsyncLocalStorage<AuthContext>;
 export declare function runWithAuthContext<T>(ctx: AuthContext, fn: () => Promise<T>): Promise<T>;
 export declare function getRequestBearerToken(): string | undefined;
 export {};

package/dist/auth/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/auth/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,UAAU,WAAW;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,WAAW,gCAAuC,CAAC;AAEhE,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAExF;AAED,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/auth/context.ts"],"names":[],"mappings":"AAEA,UAAU,WAAW;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAExF;AAED,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D"}

package/dist/auth/context.js

@@ -1,5 +1,5 @@
 import { AsyncLocalStorage } from 'node:async_hooks';
-export const authContext = new AsyncLocalStorage();
+const authContext = new AsyncLocalStorage();
 export function runWithAuthContext(ctx, fn) {
     return authContext.run(ctx, fn);
 }

package/dist/auth/index.d.ts

@@ -1,4 +1,3 @@
 export declare function getToken(): Promise<string>;
 export declare function clearTokenCache(): void;
-export declare const resetTokenCacheForTesting: typeof clearTokenCache;
 //# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAOA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAuChD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAGtC;AAED,eAAO,MAAM,yBAAyB,wBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAOA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,CAuChD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAGtC"}

package/dist/auth/index.js

@@ -41,4 +41,3 @@ export function clearTokenCache() {
     cached = null;
     inFlight = null;
 }
-export const resetTokenCacheForTesting = clearTokenCache;

package/dist/auth/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAWA,UAAU,QAAQ;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAI3C;AAwBD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACnC;AAED;;;;;;;;;GASG;AACH,iBAAS,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAwDzF;AA4BD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAoD3E"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAYA,UAAU,QAAQ;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAI3C;AAwBD,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACnC;AAED;;;;;;;;;GASG;AACH,iBAAS,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAwDzF;AA4BD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAoD3E"}

package/dist/auth/oauth.js

@@ -2,6 +2,7 @@ import { createHash, randomBytes } from 'node:crypto';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
 import { platform } from 'node:os';
+import { fetchWithTimeout } from '../http.js';
 const AUTH_BASE = process.env.FERRLABS_AUTH_URL ?? 'https://auth.ferrlabs.com';
 const API_BASE = process.env.API_URL ?? 'https://api.ferrlabs.com';
 const CLIENT_ID = 'mcp';
@@ -96,7 +97,7 @@ function bindCallbackListener(port, expectedState) {
     });
 }
 async function exchangeCodeForToken(code, codeVerifier, redirectUri) {
-    const res = await fetch(`${API_BASE}/v1/auth/exchange`, {
+    const res = await fetchWithTimeout(`${API_BASE}/v1/auth/exchange`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json', 'User-Agent': 'ferrlabs-mcp/oauth' },
         body: JSON.stringify({

package/dist/auth/persistence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/auth/persistence.ts"],"names":[],"mappings":"AAmCA,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYjE;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBzF;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOzD"}
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/auth/persistence.ts"],"names":[],"mappings":"AAmCA,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAYjE;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBzF;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMzD"}

package/dist/auth/persistence.js

@@ -1,4 +1,4 @@
-import { mkdir, readFile, writeFile, chmod } from 'node:fs/promises';
+import { mkdir, readFile, writeFile, chmod, rename, unlink } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
 import { homedir, platform } from 'node:os';
 function defaultTokenPath() {
@@ -34,24 +34,27 @@ export async function writePersistedToken(token, scopes) {
     if (process.env.FERRLABS_MCP_NO_PERSIST === '1')
         return;
     const path = defaultTokenPath();
-    await mkdir(dirname(path), { recursive: true });
+    const isPosix = platform() !== 'win32';
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
     const payload = {
         token,
         obtained_at: new Date().toISOString(),
         scopes,
     };
-    await writeFile(path, JSON.stringify(payload, null, 2), 'utf8');
-    if (platform() !== 'win32') {
-        try {
-            await chmod(path, 0o600);
-        }
-        catch {
-            // ignore — best effort on platforms that don't support POSIX modes
+    const tmpPath = `${path}.${process.pid}.tmp`;
+    await writeFile(tmpPath, JSON.stringify(payload, null, 2), { encoding: 'utf8', mode: 0o600 });
+    try {
+        if (isPosix) {
+            await chmod(tmpPath, 0o600);
         }
+        await rename(tmpPath, path);
+    }
+    catch (err) {
+        await unlink(tmpPath).catch(() => undefined);
+        throw err;
     }
 }
 export async function clearPersistedToken() {
-    const { unlink } = await import('node:fs/promises');
     try {
         await unlink(defaultTokenPath());
     }

package/dist/http.d.ts

@@ -0,0 +1,3 @@
+export declare function fetchTimeoutMs(): number;
+export declare function fetchWithTimeout(url: string, init?: RequestInit, timeoutMs?: number): Promise<Response>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,IAAI,MAAM,CAKvC;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,WAAgB,EACtB,SAAS,GAAE,MAAyB,GACnC,OAAO,CAAC,QAAQ,CAAC,CAanB"}

package/dist/http.js

@@ -0,0 +1,24 @@
+const DEFAULT_TIMEOUT_MS = 15_000;
+export function fetchTimeoutMs() {
+    const raw = process.env.FERRLABS_MCP_HTTP_TIMEOUT_MS;
+    if (!raw)
+        return DEFAULT_TIMEOUT_MS;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_TIMEOUT_MS;
+}
+export async function fetchWithTimeout(url, init = {}, timeoutMs = fetchTimeoutMs()) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(url, { ...init, signal: controller.signal });
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === 'AbortError') {
+            throw new Error(`Request to ${url} timed out after ${timeoutMs}ms`);
+        }
+        throw err;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}

package/dist/index.d.ts

@@ -2,5 +2,7 @@ export { runMcp, type RunMcpOptions } from './runner.js';
 export { apiRequest, UnauthorizedError } from './api-client.js';
 export { getToken, clearTokenCache } from './auth/index.js';
 export { runWithAuthContext, getRequestBearerToken } from './auth/context.js';
+export { readPackageVersion } from './version.js';
 export type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export { fetchWithTimeout, fetchTimeoutMs } from './http.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,YAAY,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -2,3 +2,5 @@ export { runMcp } from './runner.js';
 export { apiRequest, UnauthorizedError } from './api-client.js';
 export { getToken, clearTokenCache } from './auth/index.js';
 export { runWithAuthContext, getRequestBearerToken } from './auth/context.js';
+export { readPackageVersion } from './version.js';
+export { fetchWithTimeout, fetchTimeoutMs } from './http.js';

package/dist/transports/__tests__/http.test.js

@@ -1,5 +1,5 @@
 import { describe, it, expect } from 'vitest';
-import { unauthorizedChallenge } from '../http.js';
+import { unauthorizedChallenge, resolveAllowedOrigin, isHostAllowed, defaultBindHost, parseList, } from '../http.js';
 describe('unauthorizedChallenge', () => {
     const metadataUrl = 'https://mcp.ferrvault.com/.well-known/oauth-protected-resource';
     it('returns an RFC 6749 §5.2 error body where `error` is a string', () => {
@@ -22,3 +22,51 @@ describe('unauthorizedChallenge', () => {
         expect(wwwAuthenticate).toContain(`resource_metadata="${metadataUrl}"`);
     });
 });
+describe('resolveAllowedOrigin', () => {
+    const allowlist = ['https://app.ferrlabs.com', 'http://localhost:5173'];
+    it('echoes an origin that is on the allowlist', () => {
+        expect(resolveAllowedOrigin('https://app.ferrlabs.com', allowlist)).toBe('https://app.ferrlabs.com');
+    });
+    it('refuses to reflect an origin that is not allowlisted', () => {
+        expect(resolveAllowedOrigin('https://evil.test', allowlist)).toBeUndefined();
+    });
+    it('returns undefined when no origin header is present', () => {
+        expect(resolveAllowedOrigin(undefined, allowlist)).toBeUndefined();
+    });
+    it('never falls back to a wildcard when the allowlist is empty', () => {
+        expect(resolveAllowedOrigin('https://app.ferrlabs.com', [])).toBeUndefined();
+    });
+});
+describe('isHostAllowed', () => {
+    it('allows any host when no allowlist is configured', () => {
+        expect(isHostAllowed('anything.test', [])).toBe(true);
+    });
+    it('matches the host ignoring port and case', () => {
+        expect(isHostAllowed('MCP.ferrlabs.com:3000', ['mcp.ferrlabs.com'])).toBe(true);
+    });
+    it('rejects a host outside the allowlist (DNS-rebinding guard)', () => {
+        expect(isHostAllowed('attacker.test', ['mcp.ferrlabs.com'])).toBe(false);
+    });
+    it('rejects a missing host header when an allowlist is set', () => {
+        expect(isHostAllowed(undefined, ['mcp.ferrlabs.com'])).toBe(false);
+    });
+});
+describe('defaultBindHost', () => {
+    it('defaults to loopback', () => {
+        expect(defaultBindHost(undefined, false)).toBe('127.0.0.1');
+    });
+    it('binds all interfaces only when explicitly opted in', () => {
+        expect(defaultBindHost(undefined, true)).toBe('0.0.0.0');
+    });
+    it('honours an explicit host over the opt-in flag', () => {
+        expect(defaultBindHost('10.0.0.5', true)).toBe('10.0.0.5');
+    });
+});
+describe('parseList', () => {
+    it('splits, trims, and drops empties', () => {
+        expect(parseList(' a , b ,, c ')).toEqual(['a', 'b', 'c']);
+    });
+    it('returns an empty array for undefined', () => {
+        expect(parseList(undefined)).toEqual([]);
+    });
+});

package/dist/transports/http.d.ts

@@ -1,4 +1,8 @@
 import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function parseList(raw: string | undefined): string[];
+export declare function resolveAllowedOrigin(requestOrigin: string | undefined, allowlist: string[]): string | undefined;
+export declare function isHostAllowed(hostHeader: string | undefined, allowedHosts: string[]): boolean;
+export declare function defaultBindHost(envHost: string | undefined, bindAll: boolean): string;
 export declare function unauthorizedChallenge(metadataUrl: string): {
     wwwAuthenticate: string;
     body: string;

package/dist/transports/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAoBzE,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd,CAQA;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,SAAS,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAoBD,wBAAsB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqI5E"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/transports/http.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAYzE,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAM3D;AAED,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,EAAE,GAClB,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAK7F;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAGrF;AAYD,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd,CAQA;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,SAAS,CAAC;IAC9B;;;;;;;;;;;;OAYG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAoCD,wBAAsB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiJ5E"}

package/dist/transports/http.js

@@ -2,6 +2,7 @@ import { createServer as createHttpServer, } from 'node:http';
 import { randomUUID } from 'node:crypto';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { runWithAuthContext } from '../auth/context.js';
+const MAX_BODY_BYTES = 1_000_000;
 function extractBearer(req) {
     const header = req.headers['authorization'];
     if (typeof header !== 'string')
@@ -9,6 +10,32 @@ function extractBearer(req) {
     const match = /^Bearer\s+(.+)$/i.exec(header);
     return match?.[1];
 }
+export function parseList(raw) {
+    if (!raw)
+        return [];
+    return raw
+        .split(',')
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+export function resolveAllowedOrigin(requestOrigin, allowlist) {
+    if (requestOrigin === undefined)
+        return undefined;
+    return allowlist.includes(requestOrigin) ? requestOrigin : undefined;
+}
+export function isHostAllowed(hostHeader, allowedHosts) {
+    if (allowedHosts.length === 0)
+        return true;
+    if (!hostHeader)
+        return false;
+    const host = hostHeader.split(':')[0].toLowerCase();
+    return allowedHosts.some((allowed) => allowed.split(':')[0].toLowerCase() === host);
+}
+export function defaultBindHost(envHost, bindAll) {
+    if (envHost)
+        return envHost;
+    return bindAll ? '0.0.0.0' : '127.0.0.1';
+}
 function publicOrigin(req) {
     const proto = req.headers['x-forwarded-proto']?.split(',')[0]?.trim() ?? 'https';
     const host = req.headers['x-forwarded-host'] ?? req.headers.host ?? '';
@@ -24,12 +51,27 @@ export function unauthorizedChallenge(metadataUrl) {
         }),
     };
 }
+class PayloadTooLargeError extends Error {
+    constructor() {
+        super(`Request body exceeds the ${MAX_BODY_BYTES}-byte limit`);
+        this.name = 'PayloadTooLargeError';
+    }
+}
 async function readJsonBody(req) {
     if (req.method !== 'POST')
         return undefined;
     return new Promise((resolve, reject) => {
         const chunks = [];
-        req.on('data', (c) => chunks.push(c));
+        let total = 0;
+        req.on('data', (c) => {
+            total += c.length;
+            if (total > MAX_BODY_BYTES) {
+                req.destroy();
+                reject(new PayloadTooLargeError());
+                return;
+            }
+            chunks.push(c);
+        });
         req.on('end', () => {
             const raw = Buffer.concat(chunks).toString('utf8');
             if (!raw)
@@ -45,7 +87,11 @@ async function readJsonBody(req) {
     });
 }
 export async function startHttpServer(opts) {
-    const { port, host = '0.0.0.0', stateless = true } = opts;
+    const { port, stateless = true } = opts;
+    const bindAll = process.env.FERRLABS_MCP_BIND_ALL === '1';
+    const host = defaultBindHost(opts.host, bindAll);
+    const allowedOrigins = parseList(process.env.FERRLABS_MCP_ALLOWED_ORIGINS);
+    const allowedHosts = parseList(process.env.FERRLABS_MCP_ALLOWED_HOSTS);
     const authServer = opts.authorizationServer ?? process.env.FERRLABS_AUTH_URL ?? 'https://api.ferrlabs.com';
     const transports = new Map();
     function sendUnauthorized(req, res) {
@@ -110,14 +156,14 @@ export async function startHttpServer(opts) {
         await runWithAuthContext({ bearerToken }, () => transport.handleRequest(req, res, body));
     }
     function applyCorsHeaders(req, res) {
-        const origin = req.headers.origin ?? '*';
-        res.setHeader('Access-Control-Allow-Origin', origin);
         res.setHeader('Vary', 'Origin');
+        const allowed = resolveAllowedOrigin(req.headers.origin, allowedOrigins);
+        if (!allowed)
+            return;
+        res.setHeader('Access-Control-Allow-Origin', allowed);
         res.setHeader('Access-Control-Allow-Credentials', 'true');
         res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
-        const requested = req.headers['access-control-request-headers'] ??
-            'authorization, content-type, mcp-session-id, mcp-protocol-version';
-        res.setHeader('Access-Control-Allow-Headers', requested);
+        res.setHeader('Access-Control-Allow-Headers', 'authorization, content-type, mcp-session-id, mcp-protocol-version');
         res.setHeader('Access-Control-Expose-Headers', 'mcp-session-id, www-authenticate');
         res.setHeader('Access-Control-Max-Age', '86400');
     }
@@ -128,6 +174,11 @@ export async function startHttpServer(opts) {
             res.end();
             return;
         }
+        if (!isHostAllowed(req.headers.host, allowedHosts)) {
+            res.writeHead(421, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Host not allowed' }));
+            return;
+        }
         const url = req.url ?? '/';
         if (url === '/health' || url === '/livez' || url === '/readyz') {
             res.writeHead(200, { 'Content-Type': 'application/json' });
@@ -141,7 +192,8 @@ export async function startHttpServer(opts) {
         if (url === '/mcp' || url.startsWith('/mcp?')) {
             handleMcpRequest(req, res).catch((err) => {
                 if (!res.headersSent) {
-                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    const status = err instanceof PayloadTooLargeError ? 413 : 500;
+                    res.writeHead(status, { 'Content-Type': 'application/json' });
                     res.end(JSON.stringify({ error: err instanceof Error ? err.message : String(err) }));
                 }
                 else {

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare function readPackageVersion(entryUrl: string): string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAGA,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ3D"}

package/dist/version.js

@@ -0,0 +1,11 @@
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+export function readPackageVersion(entryUrl) {
+    const packageJsonUrl = new URL('../package.json', entryUrl);
+    const raw = readFileSync(fileURLToPath(packageJsonUrl), 'utf8');
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.version !== 'string' || parsed.version.length === 0) {
+        throw new Error(`package.json at ${packageJsonUrl.href} has no version field`);
+    }
+    return parsed.version;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ferrlabs/mcp-core",
-  "version": "6.5.0",
+  "version": "6.5.5",
   "description": "Shared core for FerrLabs MCP servers — auth, transports (stdio + Streamable HTTP), api-client, runner",
   "license": "MPL-2.0",
   "type": "module",