@mafdet/mcp 1.6.0 → 1.7.0

package/dist/client.js

@@ -1,4 +1,4 @@
-import { redact } from "./logger.js";
+import { redact, logError } from "./logger.js";
 // MCP-002B: the single HTTP client for every Mafdet call. It enforces a total
 // timeout, a response-body size cap, and JSON validation; attaches the Bearer
 // key ONLY on account requests; and maps every failure to a stable, actionable
@@ -16,37 +16,54 @@ export class MafdetClientError extends Error {
 export async function getJson(options) {
     const url = buildUrl(options.baseUrl, options.path, options.query);
     const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
-    let response;
-    try {
-        const headers = { Accept: "application/json" };
-        if (options.authKey) {
-            headers.Authorization = `Bearer ${options.authKey}`;
-        }
-        response = await fetch(url, {
-            method: "GET",
-            headers,
-            signal: controller.signal,
-            redirect: "error",
-        });
-        if (!response.ok)
-            throw mapStatus(response.status);
-        const contentType = response.headers.get("content-type") ?? "";
-        if (!contentType.includes("application/json")) {
-            throw new MafdetClientError("bad_response", "Mafdet AI returned an unexpected (non-JSON) response");
-        }
-        const text = await readBounded(response);
+    let reader;
+    let timer;
+    const deadline = new Promise((_resolve, reject) => {
+        timer = setTimeout(() => {
+            reject(new MafdetClientError("network", "could not reach Mafdet AI (timed out)"));
+            void reader
+                ?.cancel()
+                .catch(() => logError("response cleanup failed after timeout"));
+            controller.abort();
+        }, options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+    });
+    const request = async () => {
+        let response;
         try {
-            return JSON.parse(text);
+            const headers = { Accept: "application/json" };
+            if (options.authKey) {
+                headers.Authorization = `Bearer ${options.authKey}`;
+            }
+            response = await fetch(url, {
+                method: "GET",
+                headers,
+                signal: controller.signal,
+                redirect: "error",
+            });
+            if (!response.ok)
+                throw mapStatus(response.status);
+            const contentType = response.headers.get("content-type") ?? "";
+            if (!contentType.includes("application/json")) {
+                throw new MafdetClientError("bad_response", "Mafdet AI returned an unexpected (non-JSON) response");
+            }
+            const text = await readBounded(response, (value) => {
+                reader = value;
+            });
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                throw new MafdetClientError("bad_response", "Mafdet AI returned malformed JSON");
+            }
         }
-        catch {
-            throw new MafdetClientError("bad_response", "Mafdet AI returned malformed JSON");
+        catch (error) {
+            if (error instanceof MafdetClientError)
+                throw error;
+            throw new MafdetClientError("network", `could not reach Mafdet AI (${describeNetworkError(error)})`);
         }
-    }
-    catch (error) {
-        if (error instanceof MafdetClientError)
-            throw error;
-        throw new MafdetClientError("network", `could not reach Mafdet AI (${describeNetworkError(error)})`);
+    };
+    try {
+        return await Promise.race([request(), deadline]);
     }
     finally {
         clearTimeout(timer);
@@ -76,11 +93,12 @@ function mapStatus(status) {
     return new MafdetClientError("unavailable", `Mafdet AI is temporarily unavailable (HTTP ${status})`);
 }
 // Read the response body but never buffer more than the cap.
-async function readBounded(response) {
+async function readBounded(response, onReader) {
     const reader = response.body?.getReader();
     if (!reader) {
         return "";
     }
+    onReader(reader);
     const decoder = new TextDecoder();
     let total = 0;
     let out = "";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mafdet/mcp",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "Mafdet AI MCP server — read-only account tools (models, balance, usage, subscription, docs) for Claude Code, Cursor, Codex, OpenCode, and Claude Desktop.",
   "type": "module",
   "license": "MIT",
@@ -33,12 +33,6 @@
     "dist",
     "README.md"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.json",
-    "lint": "prettier --check \"src/**/*.ts\" \"test/**/*.mjs\" package.json tsconfig.json",
-    "test": "pnpm run build && node --test \"test/**/*.test.mjs\"",
-    "typecheck": "tsc --noEmit -p tsconfig.json"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.32.2",
     "zod": "^4.6.7"
@@ -49,5 +43,11 @@
   },
   "engines": {
     "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "prettier --check \"src/**/*.ts\" \"test/**/*.mjs\" package.json tsconfig.json",
+    "test": "pnpm run build && node --test \"test/**/*.test.mjs\"",
+    "typecheck": "tsc --noEmit -p tsconfig.json"
   }
-}
+}