@mafdet/mcp 1.5.1 → 1.7.0

package/README.md

@@ -17,7 +17,7 @@ OpenAI API works by pointing its base URL and key at Mafdet AI.
 - Base URL: `https://api.mafdet.ai/v1`
 - Endpoints: `/chat/completions`, `/embeddings`, `/audio/speech`
 - Providers: Google (Gemini), Kimi (Moonshot), Qwen, DeepSeek
-- 30 models as of August 2026. The catalogue changes, so the authoritative list
+- The catalogue changes; the authoritative model list
   with current prices is [`models.json`](https://docs.mafdet.ai/models.json)
 - Docs: <https://docs.mafdet.ai>
 
@@ -25,7 +25,7 @@ OpenAI API works by pointing its base URL and key at Mafdet AI.
 
 | Tool | Needs a key | What it does |
 | --- | --- | --- |
-| `list_models` | no | List Mafdet AI models with provider, tier, per-1M-token pricing, and a `[preview]` / `[beta]` marker for models the provider has not declared generally available |
+| `list_models` | no | List Mafdet AI models with provider, tier, pricing per dimension (tokens, images, or seconds), and a `[preview]` / `[beta]` marker for models the provider has not declared generally available |
 | `search_docs` | no | Search the Mafdet AI documentation (titles, URLs, summaries) |
 | `get_balance` | yes | Your organization's wallet: balance, bonus, frozen, available |
 | `get_usage_summary` | yes | Requests, tokens, and charge over the last N days (1–90) |
@@ -100,7 +100,7 @@ Omit `MAFDET_API_KEY` to use only the public tools (`list_models`,
 
 ## Notes
 
-- Pin a major version (`@mafdet/mcp@0`) in automated setups to avoid surprise
+- Pin a major version (`@mafdet/mcp@1`) in automated setups to avoid surprise
   upgrades.
 - The server writes only JSON-RPC to stdout; diagnostics go to stderr and never
   include your key.

package/dist/client.js

@@ -1,4 +1,4 @@
-import { redact } from "./logger.js";
+import { redact, logError } from "./logger.js";
 // MCP-002B: the single HTTP client for every Mafdet call. It enforces a total
 // timeout, a response-body size cap, and JSON validation; attaches the Bearer
 // key ONLY on account requests; and maps every failure to a stable, actionable
@@ -16,37 +16,54 @@ export class MafdetClientError extends Error {
 export async function getJson(options) {
     const url = buildUrl(options.baseUrl, options.path, options.query);
     const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
-    let response;
-    try {
-        const headers = { Accept: "application/json" };
-        if (options.authKey) {
-            headers.Authorization = `Bearer ${options.authKey}`;
-        }
-        response = await fetch(url, {
-            method: "GET",
-            headers,
-            signal: controller.signal,
-            redirect: "error",
-        });
-        if (!response.ok)
-            throw mapStatus(response.status);
-        const contentType = response.headers.get("content-type") ?? "";
-        if (!contentType.includes("application/json")) {
-            throw new MafdetClientError("bad_response", "Mafdet AI returned an unexpected (non-JSON) response");
-        }
-        const text = await readBounded(response);
+    let reader;
+    let timer;
+    const deadline = new Promise((_resolve, reject) => {
+        timer = setTimeout(() => {
+            reject(new MafdetClientError("network", "could not reach Mafdet AI (timed out)"));
+            void reader
+                ?.cancel()
+                .catch(() => logError("response cleanup failed after timeout"));
+            controller.abort();
+        }, options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    });
+    const request = async () => {
+        let response;
         try {
-            return JSON.parse(text);
+            const headers = { Accept: "application/json" };
+            if (options.authKey) {
+                headers.Authorization = `Bearer ${options.authKey}`;
+            }
+            response = await fetch(url, {
+                method: "GET",
+                headers,
+                signal: controller.signal,
+                redirect: "error",
+            });
+            if (!response.ok)
+                throw mapStatus(response.status);
+            const contentType = response.headers.get("content-type") ?? "";
+            if (!contentType.includes("application/json")) {
+                throw new MafdetClientError("bad_response", "Mafdet AI returned an unexpected (non-JSON) response");
+            }
+            const text = await readBounded(response, (value) => {
+                reader = value;
+            });
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                throw new MafdetClientError("bad_response", "Mafdet AI returned malformed JSON");
+            }
         }
-        catch {
-            throw new MafdetClientError("bad_response", "Mafdet AI returned malformed JSON");
+        catch (error) {
+            if (error instanceof MafdetClientError)
+                throw error;
+            throw new MafdetClientError("network", `could not reach Mafdet AI (${describeNetworkError(error)})`);
         }
-    }
-    catch (error) {
-        if (error instanceof MafdetClientError)
-            throw error;
-        throw new MafdetClientError("network", `could not reach Mafdet AI (${describeNetworkError(error)})`);
+    };
+    try {
+        return await Promise.race([request(), deadline]);
     }
     finally {
         clearTimeout(timer);
@@ -76,11 +93,12 @@ function mapStatus(status) {
     return new MafdetClientError("unavailable", `Mafdet AI is temporarily unavailable (HTTP ${status})`);
 }
 // Read the response body but never buffer more than the cap.
-async function readBounded(response) {
+async function readBounded(response, onReader) {
     const reader = response.body?.getReader();
     if (!reader) {
         return "";
     }
+    onReader(reader);
     const decoder = new TextDecoder();
     let total = 0;
     let out = "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mafdet/mcp",
-  "version": "1.5.1",
+  "version": "1.7.0",
   "description": "Mafdet AI MCP server — read-only account tools (models, balance, usage, subscription, docs) for Claude Code, Cursor, Codex, OpenCode, and Claude Desktop.",
   "type": "module",
   "license": "MIT",