@loop_ouroboros/mcp-hub-lite 1.2.7 → 1.2.8

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.2.8] - 2026-05-09
+
+### Gateway
+
+- prevent concurrent request counter drift from SSE timeout causing 503 for new clients
+- add GET /health/connections diagnostic endpoint for connection stats
+
 ## [1.2.7] - 2026-05-09
 
 ### Gateway

package/dist/server/src/api/web/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../src/api/web/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE1C;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,eAAe,iBAK7D"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../src/api/web/health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG1C;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,eAAe,iBAU7D"}

package/dist/server/src/api/web/health.js

@@ -1,3 +1,4 @@
+import { getConnectionStats } from '../../app.js';
 /**
  * Health Check API Routes
  *
@@ -21,4 +22,8 @@ export async function webHealthRoutes(fastify) {
     fastify.get('/web/health', async () => {
         return { status: 'ok', timestamp: new Date().toISOString() };
     });
+    // GET /health/connections - diagnostic endpoint for connection counters
+    fastify.get('/health/connections', async () => {
+        return getConnectionStats();
+    });
 }

package/dist/server/src/app.d.ts

@@ -1,3 +1,10 @@
+/** Expose connection stats for diagnostic endpoints */
+export declare function getConnectionStats(): {
+    currentConnections: number;
+    currentConcurrentRequests: number;
+    maxConnections: number;
+    maxConcurrentConnections: number;
+};
 /**
  * Creates and configures a Fastify application instance for the MCP Hub Lite service.
  *

package/dist/server/src/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/app.ts"],"names":[],"mappings":"AAgCA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,QAAQ,mWAmH7B"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/app.ts"],"names":[],"mappings":"AAmCA,uDAAuD;AACvD,wBAAgB,kBAAkB;;;;;EAQjC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,QAAQ,mWAyJ7B"}

package/dist/server/src/app.js

@@ -5,6 +5,7 @@ import { fileURLToPath } from 'url';
 import { configManager } from './config/config-manager.js';
 import { setJsonPrettyConfigGetter } from './utils/json-utils.js';
 import { isIpAllowed } from './utils/network-security.js';
+import { logger, LOG_MODULES } from './utils/logger.js';
 // MCP Protocol Routes
 import { mcpGatewayRoutes } from './api/mcp/gateway.js';
 // Web API Routes
@@ -24,6 +25,17 @@ const __dirname = path.dirname(__filename);
 // Connection tracking counters (module-scoped, shared across all requests)
 let currentConnections = 0;
 let currentConcurrentRequests = 0;
+const CONCURRENT_DECREMENTED = Symbol('concurrentDecremented');
+/** Expose connection stats for diagnostic endpoints */
+export function getConnectionStats() {
+    const cfg = configManager.getConfig().security;
+    return {
+        currentConnections,
+        currentConcurrentRequests,
+        maxConnections: cfg.maxConnections,
+        maxConcurrentConnections: cfg.maxConcurrentConnections
+    };
+}
 /**
  * Creates and configures a Fastify application instance for the MCP Hub Lite service.
  *
@@ -69,6 +81,9 @@ export async function buildApp() {
         socket.on('close', () => {
             currentConnections--;
         });
+        socket.on('error', (err) => {
+            logger.debug(`Socket error (will be closed): ${err.message}`, LOG_MODULES.SERVER);
+        });
         if (currentConnections > config.security.maxConnections) {
             socket.destroy();
         }
@@ -95,10 +110,36 @@ export async function buildApp() {
             return;
         }
         currentConcurrentRequests++;
+        // Safety net: decrement on premature connection close (e.g. SSE timeout).
+        // Prevents counter drift for hijacked long-lived connections whose
+        // onResponse hook may not fire when the socket is destroyed by timeout.
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        reply.raw[CONCURRENT_DECREMENTED] = false;
+        reply.raw.on('close', () => {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            if (!reply.raw[CONCURRENT_DECREMENTED]) {
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                reply.raw[CONCURRENT_DECREMENTED] = true;
+                currentConcurrentRequests--;
+            }
+        });
+        // Warn when approaching the configured limit
+        if (currentConcurrentRequests > config.security.maxConcurrentConnections * 0.8) {
+            logger.warn(`High concurrent requests: ${currentConcurrentRequests}/${config.security.maxConcurrentConnections}`, LOG_MODULES.SERVER);
+        }
         done();
     });
-    fastify.addHook('onResponse', (_request, _reply, done) => {
-        currentConcurrentRequests = Math.max(0, currentConcurrentRequests - 1);
+    fastify.addHook('onResponse', (_request, reply, done) => {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        if (!reply.raw[CONCURRENT_DECREMENTED]) {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            reply.raw[CONCURRENT_DECREMENTED] = true;
+            currentConcurrentRequests--;
+            if (currentConcurrentRequests < 0) {
+                logger.warn('currentConcurrentRequests went negative in onResponse, resetting to 0', LOG_MODULES.SERVER);
+                currentConcurrentRequests = 0;
+            }
+        }
         done();
     });
     // Simple CORS for dev

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loop_ouroboros/mcp-hub-lite",
-  "version": "1.2.7",
+  "version": "1.2.8",
   "description": "A lightweight MCP management platform designed for independent developers",
   "license": "MIT",
   "author": "loop_ouroboros",