@openfairygui/mcp 0.5.0-alpha.2 → 0.5.0-alpha.4

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_stdio = require("./stdio-D33c37mD.cjs");
+const require_stdio = require("./stdio-BRrNOeUP.cjs");
 let _openfairygui_backend_docs = require("@openfairygui/backend/docs");
 exports.OPENFAIRYGUI_BACKEND_CAPABILITIES_RESOURCE_URI = require_stdio.OPENFAIRYGUI_BACKEND_CAPABILITIES_RESOURCE_URI;
 exports.OPENFAIRYGUI_BACKEND_PROMPT_DEFINITIONS = require_stdio.OPENFAIRYGUI_BACKEND_PROMPT_DEFINITIONS;

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { a as OPENFAIRYGUI_BACKEND_TOOL_NAMES, c as OPENFAIRYGUI_BACKEND_RESOURCE_TEMPLATES, d as getOpenFairyGuiOperationCatalog, f as getOpenFairyGuiOperationSchema, i as OPENFAIRYGUI_BACKEND_TOOL_DEFINITIONS, l as OPENFAIRYGUI_OPERATION_CATALOG_URI, m as OPENFAIRYGUI_BACKEND_PROMPT_NAMES, n as createOpenFairyGuiMcpServer, o as OPENFAIRYGUI_BACKEND_TOOL_PREFIX, p as OPENFAIRYGUI_BACKEND_PROMPT_DEFINITIONS, r as callOpenFairyGuiBackendTool, s as OPENFAIRYGUI_BACKEND_CAPABILITIES_RESOURCE_URI, t as connectOpenFairyGuiMcpStdio, u as OPENFAIRYGUI_OPERATION_SCHEMA_TEMPLATE } from "./stdio--4YykL4s.mjs";
+import { a as OPENFAIRYGUI_BACKEND_TOOL_NAMES, c as OPENFAIRYGUI_BACKEND_RESOURCE_TEMPLATES, d as getOpenFairyGuiOperationCatalog, f as getOpenFairyGuiOperationSchema, i as OPENFAIRYGUI_BACKEND_TOOL_DEFINITIONS, l as OPENFAIRYGUI_OPERATION_CATALOG_URI, m as OPENFAIRYGUI_BACKEND_PROMPT_NAMES, n as createOpenFairyGuiMcpServer, o as OPENFAIRYGUI_BACKEND_TOOL_PREFIX, p as OPENFAIRYGUI_BACKEND_PROMPT_DEFINITIONS, r as callOpenFairyGuiBackendTool, s as OPENFAIRYGUI_BACKEND_CAPABILITIES_RESOURCE_URI, t as connectOpenFairyGuiMcpStdio, u as OPENFAIRYGUI_OPERATION_SCHEMA_TEMPLATE } from "./stdio-t-TXHfJJ.mjs";
 export { OPENFAIRYGUI_BACKEND_CAPABILITIES_RESOURCE_URI, OPENFAIRYGUI_BACKEND_PROMPT_DEFINITIONS, OPENFAIRYGUI_BACKEND_PROMPT_NAMES, OPENFAIRYGUI_BACKEND_RESOURCE_TEMPLATES, OPENFAIRYGUI_BACKEND_TOOL_DEFINITIONS, OPENFAIRYGUI_BACKEND_TOOL_NAMES, OPENFAIRYGUI_BACKEND_TOOL_PREFIX, OPENFAIRYGUI_OPERATION_CATALOG_URI, OPENFAIRYGUI_OPERATION_SCHEMA_TEMPLATE, callOpenFairyGuiBackendTool, connectOpenFairyGuiMcpStdio, createOpenFairyGuiMcpServer, getOpenFairyGuiOperationCatalog, getOpenFairyGuiOperationSchema };

package/dist/{stdio-D33c37mD.cjs → stdio-BRrNOeUP.cjs}

@@ -501,16 +501,16 @@ const OPENFAIRYGUI_BACKEND_TOOL_METADATA = [
 //#region src/tool-definitions.ts
 const OPENFAIRYGUI_BACKEND_TOOL_PREFIX = "openfairygui_backend_";
 const OPENFAIRYGUI_BACKEND_TOOL_NAMES = OPENFAIRYGUI_BACKEND_TOOL_METADATA.map((entry) => entry.name);
-function isOpenFairyGuiMcpPayloadWithinBudget(root) {
+function isOpenFairyGuiMcpPayloadWithinBudget(root, bytePaths = []) {
 	const pending = [{
 		value: root,
-		depth: 0
+		path: []
 	}];
-	let nodes = 0;
+	let nodes = 0, binaryBytes = 0;
 	while (pending.length > 0) {
-		const { value, depth } = pending.pop();
+		const { value, path } = pending.pop();
 		nodes += 1;
-		if (nodes > 1e5 || depth > 32) return false;
+		if (nodes > 1e5 || path.length > 32) return false;
 		if (value === null || typeof value === "boolean") continue;
 		if (typeof value === "number") {
 			if (!Number.isFinite(value)) return false;
@@ -521,23 +521,29 @@ function isOpenFairyGuiMcpPayloadWithinBudget(root) {
 			continue;
 		}
 		if (value instanceof Uint8Array) {
-			if (value.byteLength > 8 * 1024 * 1024) return false;
+			binaryBytes += value.byteLength;
+			if (binaryBytes > 8 * 1024 * 1024) return false;
 			continue;
 		}
 		if (Array.isArray(value)) {
+			if (bytePaths.some((parts) => parts.length === path.length && parts.every((part, index) => part === "*" || part === path[index]))) {
+				binaryBytes += value.length;
+				if (binaryBytes > 8 * 1024 * 1024 || !value.every((byte) => Number.isInteger(byte) && byte >= 0 && byte <= 255)) return false;
+				continue;
+			}
 			if (value.length > 1e4) return false;
-			for (const child of value) pending.push({
+			for (const [index, child] of value.entries()) pending.push({
 				value: child,
-				depth: depth + 1
+				path: [...path, String(index)]
 			});
 			continue;
 		}
 		if (typeof value !== "object") return false;
 		const entries = Object.entries(value);
 		if (entries.length > 1e4 || entries.some(([key]) => key.length > 256)) return false;
-		for (const [, child] of entries) pending.push({
+		for (const [key, child] of entries) pending.push({
 			value: child,
-			depth: depth + 1
+			path: [...path, key]
 		});
 	}
 	return true;
@@ -586,11 +592,12 @@ function unhandledBackendFailure(startedAt) {
 	};
 }
 async function callOpenFairyGuiBackendTool(runtime, name, input, policy) {
-	if (!isOpenFairyGuiMcpPayloadWithinBudget(input)) throw new RangeError("MCP input exceeds the depth, node, key, string, or byte budget.");
 	const definition = OPENFAIRYGUI_BACKEND_TOOL_DEFINITIONS.find((entry) => entry.name === name);
 	if (!definition) throw new RangeError(`Unknown OpenFairyGUI backend MCP tool: ${name}`);
+	const bytePaths = CONTRACT_SNAPSHOT.tools[definition.backendMethod].bytePaths;
+	if (!isOpenFairyGuiMcpPayloadWithinBudget(input, bytePaths)) throw new RangeError("MCP input exceeds the depth, node, key, string, or byte budget.");
 	const parsed = definition.inputSchema.parse(input);
-	const decoded = decodeToolBytes(parsed, CONTRACT_SNAPSHOT.tools[definition.backendMethod].bytePaths);
+	const decoded = decodeToolBytes(parsed, bytePaths);
 	const startedAt = Date.now();
 	try {
 		let hostFailure = await policy?.beforeCall(structuredClone(parsed));
@@ -622,7 +629,7 @@ async function callOpenFairyGuiBackendTool(runtime, name, input, policy) {
 //#region src/server.ts
 const require$1 = (0, node_module.createRequire)(require("url").pathToFileURL(__filename).href);
 function getInjectedPackageVersion() {
-	const version = "0.5.0-alpha.2";
+	const version = "0.5.0-alpha.4";
 	return typeof version === "string" && true ? version : null;
 }
 function readPackageVersion() {

package/dist/{stdio--4YykL4s.mjs → stdio-t-TXHfJJ.mjs}

@@ -478,16 +478,16 @@ const OPENFAIRYGUI_BACKEND_TOOL_METADATA = [
 //#region src/tool-definitions.ts
 const OPENFAIRYGUI_BACKEND_TOOL_PREFIX = "openfairygui_backend_";
 const OPENFAIRYGUI_BACKEND_TOOL_NAMES = OPENFAIRYGUI_BACKEND_TOOL_METADATA.map((entry) => entry.name);
-function isOpenFairyGuiMcpPayloadWithinBudget(root) {
+function isOpenFairyGuiMcpPayloadWithinBudget(root, bytePaths = []) {
 	const pending = [{
 		value: root,
-		depth: 0
+		path: []
 	}];
-	let nodes = 0;
+	let nodes = 0, binaryBytes = 0;
 	while (pending.length > 0) {
-		const { value, depth } = pending.pop();
+		const { value, path } = pending.pop();
 		nodes += 1;
-		if (nodes > 1e5 || depth > 32) return false;
+		if (nodes > 1e5 || path.length > 32) return false;
 		if (value === null || typeof value === "boolean") continue;
 		if (typeof value === "number") {
 			if (!Number.isFinite(value)) return false;
@@ -498,23 +498,29 @@ function isOpenFairyGuiMcpPayloadWithinBudget(root) {
 			continue;
 		}
 		if (value instanceof Uint8Array) {
-			if (value.byteLength > 8 * 1024 * 1024) return false;
+			binaryBytes += value.byteLength;
+			if (binaryBytes > 8 * 1024 * 1024) return false;
 			continue;
 		}
 		if (Array.isArray(value)) {
+			if (bytePaths.some((parts) => parts.length === path.length && parts.every((part, index) => part === "*" || part === path[index]))) {
+				binaryBytes += value.length;
+				if (binaryBytes > 8 * 1024 * 1024 || !value.every((byte) => Number.isInteger(byte) && byte >= 0 && byte <= 255)) return false;
+				continue;
+			}
 			if (value.length > 1e4) return false;
-			for (const child of value) pending.push({
+			for (const [index, child] of value.entries()) pending.push({
 				value: child,
-				depth: depth + 1
+				path: [...path, String(index)]
 			});
 			continue;
 		}
 		if (typeof value !== "object") return false;
 		const entries = Object.entries(value);
 		if (entries.length > 1e4 || entries.some(([key]) => key.length > 256)) return false;
-		for (const [, child] of entries) pending.push({
+		for (const [key, child] of entries) pending.push({
 			value: child,
-			depth: depth + 1
+			path: [...path, key]
 		});
 	}
 	return true;
@@ -563,11 +569,12 @@ function unhandledBackendFailure(startedAt) {
 	};
 }
 async function callOpenFairyGuiBackendTool(runtime, name, input, policy) {
-	if (!isOpenFairyGuiMcpPayloadWithinBudget(input)) throw new RangeError("MCP input exceeds the depth, node, key, string, or byte budget.");
 	const definition = OPENFAIRYGUI_BACKEND_TOOL_DEFINITIONS.find((entry) => entry.name === name);
 	if (!definition) throw new RangeError(`Unknown OpenFairyGUI backend MCP tool: ${name}`);
+	const bytePaths = CONTRACT_SNAPSHOT.tools[definition.backendMethod].bytePaths;
+	if (!isOpenFairyGuiMcpPayloadWithinBudget(input, bytePaths)) throw new RangeError("MCP input exceeds the depth, node, key, string, or byte budget.");
 	const parsed = definition.inputSchema.parse(input);
-	const decoded = decodeToolBytes(parsed, CONTRACT_SNAPSHOT.tools[definition.backendMethod].bytePaths);
+	const decoded = decodeToolBytes(parsed, bytePaths);
 	const startedAt = Date.now();
 	try {
 		let hostFailure = await policy?.beforeCall(structuredClone(parsed));
@@ -599,7 +606,7 @@ async function callOpenFairyGuiBackendTool(runtime, name, input, policy) {
 //#region src/server.ts
 const require = createRequire(import.meta.url);
 function getInjectedPackageVersion() {
-	const version = "0.5.0-alpha.2";
+	const version = "0.5.0-alpha.4";
 	return typeof version === "string" && true ? version : null;
 }
 function readPackageVersion() {

package/dist/stdio.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_stdio = require("./stdio-D33c37mD.cjs");
+const require_stdio = require("./stdio-BRrNOeUP.cjs");
 exports.connectOpenFairyGuiMcpStdio = require_stdio.connectOpenFairyGuiMcpStdio;

package/dist/stdio.mjs

@@ -1,2 +1,2 @@
-import { t as connectOpenFairyGuiMcpStdio } from "./stdio--4YykL4s.mjs";
+import { t as connectOpenFairyGuiMcpStdio } from "./stdio-t-TXHfJJ.mjs";
 export { connectOpenFairyGuiMcpStdio };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openfairygui/mcp",
-  "version": "0.5.0-alpha.2",
+  "version": "0.5.0-alpha.4",
   "description": "FairyGUI Headless Authoring SDK - MCP server adapter for the backend runtime.",
   "author": "OpenFairyGUI Contributors",
   "license": "MIT",
@@ -61,13 +61,13 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6",
-    "@openfairygui/backend": "0.5.0-alpha.2"
+    "@openfairygui/backend": "0.5.0-alpha.4"
   },
   "devDependencies": {
     "ava": "^7.0.0",
     "tsx": "^4.0.0",
-    "@openfairygui/test-utils": "0.3.0",
-    "@openfairygui/core": "0.5.0-alpha.2"
+    "@openfairygui/core": "0.5.0-alpha.4",
+    "@openfairygui/test-utils": "0.3.0"
   },
   "ava": {
     "extensions": {

package/src/tool-definitions.ts

@@ -14,13 +14,13 @@ export interface OpenFairyGuiBackendToolDefinition extends BackendToolMetadata {
 	outputSchema: z.ZodObject;
 }
 
-export function isOpenFairyGuiMcpPayloadWithinBudget(root: unknown): boolean {
-	const pending: Array<{ value: unknown; depth: number }> = [{ value: root, depth: 0 }];
-	let nodes = 0;
+export function isOpenFairyGuiMcpPayloadWithinBudget(root: unknown, bytePaths: readonly string[][] = []): boolean {
+	const pending: Array<{ value: unknown; path: string[] }> = [{ value: root, path: [] }];
+	let nodes = 0, binaryBytes = 0;
 	while (pending.length > 0) {
-		const { value, depth } = pending.pop()!;
+		const { value, path } = pending.pop()!;
 		nodes += 1;
-		if (nodes > 100_000 || depth > 32) return false;
+		if (nodes > 100_000 || path.length > 32) return false;
 		if (value === null || typeof value === 'boolean') continue;
 		if (typeof value === 'number') {
 			if (!Number.isFinite(value)) return false;
@@ -31,18 +31,24 @@ export function isOpenFairyGuiMcpPayloadWithinBudget(root: unknown): boolean {
 			continue;
 		}
 		if (value instanceof Uint8Array) {
-			if (value.byteLength > 8 * 1024 * 1024) return false;
+			binaryBytes += value.byteLength;
+			if (binaryBytes > 8 * 1024 * 1024) return false;
 			continue;
 		}
 		if (Array.isArray(value)) {
+			if (bytePaths.some((parts) => parts.length === path.length && parts.every((part, index) => part === '*' || part === path[index]))) {
+				binaryBytes += value.length;
+				if (binaryBytes > 8 * 1024 * 1024 || !value.every((byte) => Number.isInteger(byte) && byte >= 0 && byte <= 255)) return false;
+				continue;
+			}
 			if (value.length > 10_000) return false;
-			for (const child of value) pending.push({ value: child, depth: depth + 1 });
+			for (const [index, child] of value.entries()) pending.push({ value: child, path: [...path, String(index)] });
 			continue;
 		}
 		if (typeof value !== 'object') return false;
 		const entries = Object.entries(value);
 		if (entries.length > 10_000 || entries.some(([key]) => key.length > 256)) return false;
-		for (const [, child] of entries) pending.push({ value: child, depth: depth + 1 });
+		for (const [key, child] of entries) pending.push({ value: child, path: [...path, key] });
 	}
 	return true;
 }

package/src/tool-handler.ts

@@ -74,13 +74,14 @@ export async function callOpenFairyGuiBackendTool(
 	input: Record<string, unknown>,
 	policy?: OpenFairyGuiMcpToolPolicy,
 ): Promise<CallToolResult> {
-	if (!isOpenFairyGuiMcpPayloadWithinBudget(input)) {
-		throw new RangeError('MCP input exceeds the depth, node, key, string, or byte budget.');
-	}
 	const definition = OPENFAIRYGUI_BACKEND_TOOL_DEFINITIONS.find((entry) => entry.name === name);
 	if (!definition) throw new RangeError(`Unknown OpenFairyGUI backend MCP tool: ${name}`);
+	const bytePaths = CONTRACT_SNAPSHOT.tools[definition.backendMethod].bytePaths;
+	if (!isOpenFairyGuiMcpPayloadWithinBudget(input, bytePaths)) {
+		throw new RangeError('MCP input exceeds the depth, node, key, string, or byte budget.');
+	}
 	const parsed = definition.inputSchema.parse(input) as Record<string, unknown>;
-	const decoded = decodeToolBytes(parsed, CONTRACT_SNAPSHOT.tools[definition.backendMethod].bytePaths);
+	const decoded = decodeToolBytes(parsed, bytePaths);
 	const startedAt = Date.now();
 	try {
 		let hostFailure = await policy?.beforeCall(structuredClone(parsed));