@fruggr/zendesk-mcp-server 2.20.0 → 2.20.2

package/dist/index.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import "zod/compile";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { createServer } from "node:http";
@@ -128,6 +129,11 @@ const CHARACTER_LIMIT = positiveIntEnv("ZENDESK_CHARACTER_LIMIT", 25e3);
 const ARTICLE_RESOURCES_SCAN_MAX_PAGES = positiveIntEnv("ZENDESK_ARTICLE_RESOURCES_SCAN_MAX_PAGES", 20);
 const MAX_ATTACHMENT_BYTES = positiveIntEnv("ZENDESK_MAX_ATTACHMENT_BYTES", 5242880);
 const MAX_EMBEDDED_IMAGE_COUNT = positiveIntEnv("ZENDESK_MAX_EMBEDDED_IMAGES", 10);
+const STDIO_MAX_MESSAGE_BYTES = 10485760;
+const MESSAGE_CONTENT_BUDGET_BYTES = 10420224;
+const MAX_RESPONSE_BYTES = Math.min(positiveIntEnv("ZENDESK_MAX_RESPONSE_BYTES", MESSAGE_CONTENT_BUDGET_BYTES), MESSAGE_CONTENT_BUDGET_BYTES);
+const MAX_BASE64_INPUT_CHARS = MESSAGE_CONTENT_BUDGET_BYTES;
+const MAX_BASE64_INPUT_MB = Number.parseFloat((MAX_BASE64_INPUT_CHARS / 4 * 3 / 1048576).toFixed(2));
 const MAX_COMMENT_PAGES = positiveIntEnv("ZENDESK_MAX_COMMENT_PAGES", 10);
 const REORDER_CONFIRM_THRESHOLD = positiveIntEnv("ZENDESK_REORDER_CONFIRM_THRESHOLD", 20);
 const getBaseUrl = (subdomain) => `https://${subdomain}.zendesk.com/api/v2`;
@@ -3082,7 +3088,10 @@ const createHelpCenterTools = (ctx) => {
 			inputSchema: z.object({
 				article_id: z.number().int().describe(ARTICLE_ID_DESC),
 				file_name: z.string().min(1).describe("Name to store the file under, including its extension (e.g. \"screenshot.png\"); used as the download name."),
-				file_base64: z.string().min(1).describe("The file's raw bytes as a base64-encoded string; the server decodes them before upload."),
+				file_base64: z.string().min(1).max(MAX_BASE64_INPUT_CHARS, {
+					abort: true,
+					error: (issue) => `File too large: ${issue.input.length} base64 characters, limit ${MAX_BASE64_INPUT_CHARS}. Downscale the file, split it, or host it elsewhere and link to it.`
+				}).describe(`The file's raw bytes as a base64-encoded string; the server decodes them before upload. At most ${MAX_BASE64_INPUT_CHARS} characters (about ${MAX_BASE64_INPUT_MB} MB of file); the HTTP transport additionally caps request bodies at 4 MB.`),
 				content_type: z.string().default("application/octet-stream").describe("MIME type of the file, e.g. \"image/png\" or \"application/pdf\". Defaults to application/octet-stream when omitted.")
 			}),
 			annotations: {
@@ -3162,6 +3171,28 @@ const createSearchTools = (ctx) => {
 //#endregion
 //#region src/tools/tickets.ts
 const MAX_ATTACHMENT_MB = Number.parseFloat((MAX_ATTACHMENT_BYTES / 1048576).toFixed(2));
+const MAX_RESPONSE_MB = Number.parseFloat((MAX_RESPONSE_BYTES / 1048576).toFixed(2));
+const blockCost = (block) => block.type === "image" ? Buffer.byteLength(JSON.stringify({
+	...block,
+	data: ""
+}), "utf8") + block.data.length + 1 : Buffer.byteLength(JSON.stringify(block), "utf8") + 1;
+const embeddedCost = (attachment, reference) => blockCost({
+	type: "image",
+	data: "",
+	mimeType: attachment.content_type
+}) + 4 * Math.ceil(attachment.size / 3) + blockCost({
+	type: "text",
+	text: reference
+});
+const BUDGET_REACHED = `skipped: response budget of ${MAX_RESPONSE_MB} MB reached`;
+const referenceBlock = (reference, skipReason) => ({
+	type: "text",
+	text: skipReason ? `${reference} — ${skipReason}` : reference
+});
+const truncationNotice = (omitted) => ({
+	type: "text",
+	text: `${omitted} further attachments omitted: response budget of ${MAX_RESPONSE_MB} MB reached`
+});
 const formatReference = (attachment) => `**${attachment.file_name}** (id ${attachment.id}, ${attachment.content_type}, ${attachment.size} bytes) — ${attachment.content_url}`;
 const buildEmbeddedImageBlocks = async (subdomain, token, attachment, reference) => {
 	const { data, contentType } = await fetchZendeskBinary(subdomain, token, attachment.content_url);
@@ -3210,38 +3241,52 @@ const fetchAttachmentsByIds = async (subdomain, token, ids) => {
 	}
 	return attachments;
 };
-const collectAttachmentBlocks = async (subdomain, token, attachments) => {
+const imageSkipReason = (attachment, embeddedCount, reference, fits) => {
+	if (attachment.size > MAX_ATTACHMENT_BYTES) return `skipped: exceeds ${MAX_ATTACHMENT_MB} MB per-image limit`;
+	if (embeddedCount >= MAX_EMBEDDED_IMAGE_COUNT) return `skipped: max ${MAX_EMBEDDED_IMAGE_COUNT} embedded images reached`;
+	if (!fits(embeddedCost(attachment, reference))) return BUDGET_REACHED;
+	return null;
+};
+const overflowFallback = (produced, reference, fits) => {
+	if (!produced.some((block) => block.type === "image")) return null;
+	const fallback = referenceBlock(reference, BUDGET_REACHED);
+	return fits(blockCost(fallback)) ? fallback : null;
+};
+const embedOrExplain = async (subdomain, token, attachment, reference) => {
+	try {
+		return await buildEmbeddedImageBlocks(subdomain, token, attachment, reference);
+	} catch (error) {
+		return [{
+			type: "text",
+			text: `${reference} — ${error instanceof ZendeskApiError ? `download failed: ${error.status} ${error.statusText}` : "download failed"}`
+		}];
+	}
+};
+const collectAttachmentBlocks = async (subdomain, token, attachments, consumedBytes = 0) => {
 	const blocks = [];
 	let embeddedCount = 0;
-	for (const attachment of attachments) {
+	let responseBytes = consumedBytes;
+	const noticeReserve = blockCost(truncationNotice(attachments.length));
+	const fits = (cost) => responseBytes + cost + noticeReserve <= MAX_RESPONSE_BYTES;
+	for (const [index, attachment] of attachments.entries()) {
 		const reference = formatReference(attachment);
-		if (!attachment.content_type.startsWith("image/")) {
-			blocks.push({
-				type: "text",
-				text: reference
-			});
-			continue;
-		}
-		let skipReason = null;
-		if (attachment.size > MAX_ATTACHMENT_BYTES) skipReason = `skipped: exceeds ${MAX_ATTACHMENT_MB} MB per-image limit`;
-		else if (embeddedCount >= MAX_EMBEDDED_IMAGE_COUNT) skipReason = `skipped: max ${MAX_EMBEDDED_IMAGE_COUNT} embedded images reached`;
-		if (skipReason) {
-			blocks.push({
-				type: "text",
-				text: `${reference} — ${skipReason}`
-			});
-			continue;
-		}
-		try {
-			blocks.push(...await buildEmbeddedImageBlocks(subdomain, token, attachment, reference));
-			embeddedCount += 1;
-		} catch (error) {
-			const reason = error instanceof ZendeskApiError ? `download failed: ${error.status} ${error.statusText}` : "download failed";
-			blocks.push({
-				type: "text",
-				text: `${reference} — ${reason}`
-			});
+		const isImage = attachment.content_type.startsWith("image/");
+		const skipReason = isImage ? imageSkipReason(attachment, embeddedCount, reference, fits) : null;
+		const produced = isImage && !skipReason ? await embedOrExplain(subdomain, token, attachment, reference) : [referenceBlock(reference, skipReason)];
+		const cost = produced.reduce((total, block) => total + blockCost(block), 0);
+		if (!fits(cost)) {
+			const fallback = overflowFallback(produced, reference, fits);
+			if (fallback) {
+				blocks.push(fallback);
+				responseBytes += blockCost(fallback);
+				continue;
+			}
+			blocks.push(truncationNotice(attachments.length - index));
+			break;
 		}
+		blocks.push(...produced);
+		responseBytes += cost;
+		if (produced.some((block) => block.type === "image")) embeddedCount += 1;
 	}
 	return blocks;
 };
@@ -3436,9 +3481,19 @@ const createTicketTools = (ctx) => {
 	const { subdomain, getToken } = ctx;
 	const attachmentSchema = z.object({
 		file_name: z.string().min(1).describe("File name, e.g. \"app.log\" or \"screenshot.png\"."),
-		file_base64: z.string().min(1).base64().describe("File content encoded as base64."),
+		file_base64: z.string().min(1).max(MAX_BASE64_INPUT_CHARS, {
+			abort: true,
+			error: (issue) => `Attachment too large: ${issue.input.length} base64 characters, limit ${MAX_BASE64_INPUT_CHARS}. Downscale the file, split the upload, or link to it instead of uploading.`
+		}).base64().describe(`File content encoded as base64. At most ${MAX_BASE64_INPUT_CHARS} characters (about ${MAX_BASE64_INPUT_MB} MB of file), and the attachments of one call must stay under that total; the HTTP transport additionally caps request bodies at 4 MB.`),
 		content_type: z.string().min(1).default("application/octet-stream").describe("MIME type, e.g. \"text/plain\", \"image/png\", \"application/pdf\".")
 	});
+	const attachmentsParam = (description) => z.array(attachmentSchema).superRefine((files, refinement) => {
+		const total = files.reduce((sum, file) => sum + file.file_base64.length, 0);
+		if (total > 10420224) refinement.addIssue({
+			code: "custom",
+			message: `Attachments too large: ${total} base64 characters in total, limit ${MAX_BASE64_INPUT_CHARS}. Send fewer files per call.`
+		});
+	}).optional().describe(description);
 	const uploadAttachments = async (token, files) => {
 		let uploadToken;
 		for (const file of files) {
@@ -3601,11 +3656,11 @@ const createTicketTools = (ctx) => {
 					type: "text",
 					text: `No attachments found on ticket #${ticket_id}.`
 				}] };
-				const blocks = await collectAttachmentBlocks(subdomain, token, attachments);
-				return { content: [{
+				const header = {
 					type: "text",
 					text: `# Attachments for ticket #${ticket_id} (${attachments.length} total)`
-				}, ...blocks] };
+				};
+				return { content: [header, ...await collectAttachmentBlocks(subdomain, token, attachments, blockCost(header) + 1)] };
 			}
 		},
 		{
@@ -3751,7 +3806,7 @@ const createTicketTools = (ctx) => {
 			inputSchema: z.object({
 				ticket_id: z.number().int().describe("Ticket ID — the numeric id of the ticket to annotate. Obtain it from search_tickets or list_tickets."),
 				body: z.string().min(1).describe("Note text (internal, agent-only). Plain text or HTML; not shown to the requester."),
-				attachments: z.array(attachmentSchema).optional().describe("Files to attach to this note (base64-encoded content).")
+				attachments: attachmentsParam("Files to attach to this note (base64-encoded content).")
 			}),
 			annotations: {
 				readOnlyHint: false,
@@ -3783,7 +3838,7 @@ const createTicketTools = (ctx) => {
 			inputSchema: z.object({
 				ticket_id: z.number().int().describe("Ticket ID — the numeric id of the ticket to reply on. Obtain it from search_tickets or list_tickets."),
 				body: z.string().min(1).describe("Comment text sent to the requester. Plain text or HTML; visible in the ticket."),
-				attachments: z.array(attachmentSchema).optional().describe("Files to attach to this comment (base64-encoded content).")
+				attachments: attachmentsParam("Files to attach to this comment (base64-encoded content).")
 			}),
 			annotations: {
 				readOnlyHint: false,
@@ -4489,7 +4544,7 @@ const createMcpServer = (config, getToken, logger = silentLogger, onUnauthorized
 //#endregion
 //#region src/transports/stdio.ts
 const startStdioTransport = async (server, logger = silentLogger) => {
-	const transport = new StdioServerTransport();
+	const transport = new StdioServerTransport(void 0, void 0, { maxBufferSize: STDIO_MAX_MESSAGE_BYTES });
 	await server.connect(transport);
 	logger.info("stdio_transport_ready");
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fruggr/zendesk-mcp-server",
-  "version": "2.20.0",
+  "version": "2.20.2",
   "mcpName": "io.github.fruggr/zendesk-mcp-server",
   "description": "Deep Zendesk MCP server for your AI assistant: search, draft, update and translate Help Center articles and manage Support tickets end to end — comments, triage and image attachments.",
   "type": "module",
@@ -85,10 +85,10 @@
     "remark-rehype": "11.1.2",
     "remark-stringify": "11.0.0",
     "unified": "11.0.5",
-    "zod": "4.4.3"
+    "zod": "4.5.4"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.11",
+    "@biomejs/biome": "2.5.12",
     "@semantic-release/changelog": "^7.0.0",
     "@semantic-release/exec": "^7.1.0",
     "@semantic-release/git": "^11.0.0",
@@ -107,7 +107,7 @@
     "msw": "^2.12.13",
     "semantic-release": "^25.0.3",
     "shx": "^0.4.0",
-    "tsdown": "^0.22.0",
+    "tsdown": "^0.23.0",
     "tsx": "^4.21.0",
     "typescript": "^7.0.0",
     "typescript-legacy": "npm:typescript@6.0.3",