@remnic/core 10.0.84 → 10.0.85

package/dist/verified-recall.js

@@ -1,44 +1,44 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-2IW5PT7U.js";
+} from "./chunk-6KFFRMPQ.js";
 import "./chunk-B7RWBZXW.js";
-import "./chunk-WAD32CZG.js";
+import "./chunk-ELWI2R6H.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-QGVCFVX6.js";
 import "./chunk-IGOW4TJE.js";
 import "./chunk-G6OFEGUR.js";
-import "./chunk-7PMOCQOL.js";
-import "./chunk-LU66I56Q.js";
-import "./chunk-VKDAJJQP.js";
+import "./chunk-3ODZLCHC.js";
+import "./chunk-H34INI3P.js";
+import "./chunk-DI5ET2IE.js";
+import "./chunk-DLZGSZVC.js";
 import "./chunk-OVZIYLBZ.js";
 import "./chunk-EXYT52NR.js";
 import "./chunk-DOJBV6WR.js";
 import "./chunk-PFUXPTBT.js";
-import "./chunk-CYEPCZN5.js";
-import "./chunk-DLZGSZVC.js";
 import "./chunk-WNEVEMJ3.js";
 import "./chunk-Y5NLBXPV.js";
-import "./chunk-TFA6HPOA.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-QCP75JGO.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-F4TWWUMP.js";
 import "./chunk-72A4L5JJ.js";
-import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-PPUNC7UX.js";
 import "./chunk-X3724WL4.js";
-import "./chunk-MRPOZBJC.js";
 import "./chunk-S2HLHAZ4.js";
+import "./chunk-MRPOZBJC.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-FF6N7BXC.js";
+import "./chunk-S45INSV3.js";
 import "./chunk-QFEDITXM.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-BV2BRHD4.js";
+import "./chunk-FHGWKODN.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-3ONXXHQO.js";
-import "./chunk-YXZG5TVN.js";
 import "./chunk-3OUGSOJP.js";
 import "./chunk-SCU65EZI.js";
+import "./chunk-3ONXXHQO.js";
+import "./chunk-YXZG5TVN.js";
 import "./chunk-P4GUQSK3.js";
 import "./chunk-4LZ7SVKM.js";
 import "./chunk-YHTG64XV.js";
@@ -51,6 +51,12 @@ import "./chunk-IAYUTGF2.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-7CT3AI52.js";
+import "./chunk-ZU5JDLOH.js";
+import "./chunk-I55KAVET.js";
+import "./chunk-L2EXJQJP.js";
+import "./chunk-45GF7Y3V.js";
+import "./chunk-ZU3NJNO7.js";
+import "./chunk-E2AWJ7KQ.js";
 import "./chunk-7VLBZKNB.js";
 import "./chunk-Y33KJ556.js";
 import "./chunk-WBN66HPI.js";
@@ -62,24 +68,18 @@ import "./chunk-IUM3VSHI.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-23G5P7TA.js";
-import "./chunk-4KLQI3L2.js";
-import "./chunk-ZU5JDLOH.js";
-import "./chunk-I55KAVET.js";
-import "./chunk-L2EXJQJP.js";
-import "./chunk-45GF7Y3V.js";
-import "./chunk-ZU3NJNO7.js";
-import "./chunk-E2AWJ7KQ.js";
+import "./chunk-WLNWFHX3.js";
+import "./chunk-PJKTFXE2.js";
 import "./chunk-W5BIQOAJ.js";
 import "./chunk-HADD45AR.js";
 import "./chunk-RNFMFC37.js";
 import "./chunk-YCVB7X56.js";
 import "./chunk-PQVCH2AE.js";
-import "./chunk-PJKTFXE2.js";
 import "./chunk-V4XE263I.js";
 import "./chunk-YBA52OKG.js";
-import "./chunk-JRVMCZE3.js";
+import "./chunk-QEYTRFR3.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-IZJQNDGI.js";
+import "./chunk-R6HMAIKM.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
@@ -91,7 +91,7 @@ import "./chunk-AL3UYZ5N.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-YET735EZ.js";
 import "./chunk-PWPIERBM.js";
-import "./chunk-KQUSP6LB.js";
+import "./chunk-UDKWFDV2.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-BTNNL7ZW.js";
 import "./chunk-JDSVLVCG.js";

package/dist/who-knows-cli.js

@@ -4,44 +4,44 @@ import {
   renderWhoKnows,
   renderWhoKnowsJson,
   renderWhoKnowsText
-} from "./chunk-KJCL2FZO.js";
-import "./chunk-FUOAIJKQ.js";
-import "./chunk-WAD32CZG.js";
+} from "./chunk-MNYQVYJ4.js";
+import "./chunk-Y43X3E24.js";
+import "./chunk-ELWI2R6H.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-QGVCFVX6.js";
 import "./chunk-IGOW4TJE.js";
 import "./chunk-G6OFEGUR.js";
-import "./chunk-7PMOCQOL.js";
-import "./chunk-LU66I56Q.js";
-import "./chunk-VKDAJJQP.js";
+import "./chunk-3ODZLCHC.js";
+import "./chunk-H34INI3P.js";
+import "./chunk-DI5ET2IE.js";
+import "./chunk-DLZGSZVC.js";
 import "./chunk-OVZIYLBZ.js";
 import "./chunk-EXYT52NR.js";
 import "./chunk-DOJBV6WR.js";
 import "./chunk-PFUXPTBT.js";
-import "./chunk-CYEPCZN5.js";
-import "./chunk-DLZGSZVC.js";
 import "./chunk-WNEVEMJ3.js";
 import "./chunk-Y5NLBXPV.js";
-import "./chunk-TFA6HPOA.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-QCP75JGO.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-F4TWWUMP.js";
 import "./chunk-72A4L5JJ.js";
-import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-PPUNC7UX.js";
 import "./chunk-X3724WL4.js";
-import "./chunk-MRPOZBJC.js";
 import "./chunk-S2HLHAZ4.js";
+import "./chunk-MRPOZBJC.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-FF6N7BXC.js";
+import "./chunk-S45INSV3.js";
 import "./chunk-QFEDITXM.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-BV2BRHD4.js";
+import "./chunk-FHGWKODN.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-3ONXXHQO.js";
-import "./chunk-YXZG5TVN.js";
 import "./chunk-3OUGSOJP.js";
 import "./chunk-SCU65EZI.js";
+import "./chunk-3ONXXHQO.js";
+import "./chunk-YXZG5TVN.js";
 import "./chunk-P4GUQSK3.js";
 import "./chunk-4LZ7SVKM.js";
 import "./chunk-YHTG64XV.js";
@@ -54,6 +54,12 @@ import "./chunk-IAYUTGF2.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-7CT3AI52.js";
+import "./chunk-ZU5JDLOH.js";
+import "./chunk-I55KAVET.js";
+import "./chunk-L2EXJQJP.js";
+import "./chunk-45GF7Y3V.js";
+import "./chunk-ZU3NJNO7.js";
+import "./chunk-E2AWJ7KQ.js";
 import "./chunk-7VLBZKNB.js";
 import "./chunk-Y33KJ556.js";
 import "./chunk-WBN66HPI.js";
@@ -65,24 +71,18 @@ import "./chunk-IUM3VSHI.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-23G5P7TA.js";
-import "./chunk-4KLQI3L2.js";
-import "./chunk-ZU5JDLOH.js";
-import "./chunk-I55KAVET.js";
-import "./chunk-L2EXJQJP.js";
-import "./chunk-45GF7Y3V.js";
-import "./chunk-ZU3NJNO7.js";
-import "./chunk-E2AWJ7KQ.js";
+import "./chunk-WLNWFHX3.js";
+import "./chunk-PJKTFXE2.js";
 import "./chunk-W5BIQOAJ.js";
 import "./chunk-HADD45AR.js";
 import "./chunk-RNFMFC37.js";
 import "./chunk-YCVB7X56.js";
 import "./chunk-PQVCH2AE.js";
-import "./chunk-PJKTFXE2.js";
 import "./chunk-V4XE263I.js";
 import "./chunk-YBA52OKG.js";
-import "./chunk-JRVMCZE3.js";
+import "./chunk-QEYTRFR3.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-IZJQNDGI.js";
+import "./chunk-R6HMAIKM.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
@@ -94,7 +94,7 @@ import "./chunk-AL3UYZ5N.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-YET735EZ.js";
 import "./chunk-PWPIERBM.js";
-import "./chunk-KQUSP6LB.js";
+import "./chunk-UDKWFDV2.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-BTNNL7ZW.js";
 import "./chunk-JDSVLVCG.js";

package/dist/who-knows.js

@@ -9,43 +9,43 @@ import {
   loadWhoKnowsEntities,
   tokenizeTopic,
   validateWhoKnowsInput
-} from "./chunk-FUOAIJKQ.js";
-import "./chunk-WAD32CZG.js";
+} from "./chunk-Y43X3E24.js";
+import "./chunk-ELWI2R6H.js";
 import "./chunk-UHVXE24Y.js";
 import "./chunk-QGVCFVX6.js";
 import "./chunk-IGOW4TJE.js";
 import "./chunk-G6OFEGUR.js";
-import "./chunk-7PMOCQOL.js";
-import "./chunk-LU66I56Q.js";
-import "./chunk-VKDAJJQP.js";
+import "./chunk-3ODZLCHC.js";
+import "./chunk-H34INI3P.js";
+import "./chunk-DI5ET2IE.js";
+import "./chunk-DLZGSZVC.js";
 import "./chunk-OVZIYLBZ.js";
 import "./chunk-EXYT52NR.js";
 import "./chunk-DOJBV6WR.js";
 import "./chunk-PFUXPTBT.js";
-import "./chunk-CYEPCZN5.js";
-import "./chunk-DLZGSZVC.js";
 import "./chunk-WNEVEMJ3.js";
 import "./chunk-Y5NLBXPV.js";
-import "./chunk-TFA6HPOA.js";
+import "./chunk-CYEPCZN5.js";
+import "./chunk-QCP75JGO.js";
+import "./chunk-A7Q43EUZ.js";
 import "./chunk-F4TWWUMP.js";
 import "./chunk-72A4L5JJ.js";
-import "./chunk-A7Q43EUZ.js";
 import "./chunk-S2V7RUCL.js";
 import "./chunk-PPUNC7UX.js";
 import "./chunk-X3724WL4.js";
-import "./chunk-MRPOZBJC.js";
 import "./chunk-S2HLHAZ4.js";
+import "./chunk-MRPOZBJC.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-FF6N7BXC.js";
+import "./chunk-S45INSV3.js";
 import "./chunk-QFEDITXM.js";
 import "./chunk-AAD2ZS6P.js";
-import "./chunk-BV2BRHD4.js";
+import "./chunk-FHGWKODN.js";
 import "./chunk-ZIKENA2C.js";
-import "./chunk-3ONXXHQO.js";
-import "./chunk-YXZG5TVN.js";
 import "./chunk-3OUGSOJP.js";
 import "./chunk-SCU65EZI.js";
+import "./chunk-3ONXXHQO.js";
+import "./chunk-YXZG5TVN.js";
 import "./chunk-P4GUQSK3.js";
 import "./chunk-4LZ7SVKM.js";
 import "./chunk-YHTG64XV.js";
@@ -58,6 +58,12 @@ import "./chunk-IAYUTGF2.js";
 import "./chunk-5WITETWU.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-7CT3AI52.js";
+import "./chunk-ZU5JDLOH.js";
+import "./chunk-I55KAVET.js";
+import "./chunk-L2EXJQJP.js";
+import "./chunk-45GF7Y3V.js";
+import "./chunk-ZU3NJNO7.js";
+import "./chunk-E2AWJ7KQ.js";
 import "./chunk-7VLBZKNB.js";
 import "./chunk-Y33KJ556.js";
 import "./chunk-WBN66HPI.js";
@@ -69,24 +75,18 @@ import "./chunk-IUM3VSHI.js";
 import "./chunk-C64XATK7.js";
 import "./chunk-42JKGUFJ.js";
 import "./chunk-23G5P7TA.js";
-import "./chunk-4KLQI3L2.js";
-import "./chunk-ZU5JDLOH.js";
-import "./chunk-I55KAVET.js";
-import "./chunk-L2EXJQJP.js";
-import "./chunk-45GF7Y3V.js";
-import "./chunk-ZU3NJNO7.js";
-import "./chunk-E2AWJ7KQ.js";
+import "./chunk-WLNWFHX3.js";
+import "./chunk-PJKTFXE2.js";
 import "./chunk-W5BIQOAJ.js";
 import "./chunk-HADD45AR.js";
 import "./chunk-RNFMFC37.js";
 import "./chunk-YCVB7X56.js";
 import "./chunk-PQVCH2AE.js";
-import "./chunk-PJKTFXE2.js";
 import "./chunk-V4XE263I.js";
 import "./chunk-YBA52OKG.js";
-import "./chunk-JRVMCZE3.js";
+import "./chunk-QEYTRFR3.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-IZJQNDGI.js";
+import "./chunk-R6HMAIKM.js";
 import "./chunk-BJMBJZ2Y.js";
 import "./chunk-UKJAGEXH.js";
 import "./chunk-FP2373TW.js";
@@ -98,7 +98,7 @@ import "./chunk-AL3UYZ5N.js";
 import "./chunk-RL6NEVXT.js";
 import "./chunk-YET735EZ.js";
 import "./chunk-PWPIERBM.js";
-import "./chunk-KQUSP6LB.js";
+import "./chunk-UDKWFDV2.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-BTNNL7ZW.js";
 import "./chunk-JDSVLVCG.js";

package/dist/write-envelope.js

@@ -12,10 +12,10 @@ import {
   isMemoryCategory,
   isSealedMemoryEnvelope,
   sealedWriteToLegacyArgs
-} from "./chunk-JRVMCZE3.js";
+} from "./chunk-QEYTRFR3.js";
 import "./chunk-BT7NVCML.js";
-import "./chunk-IZJQNDGI.js";
-import "./chunk-KQUSP6LB.js";
+import "./chunk-R6HMAIKM.js";
+import "./chunk-UDKWFDV2.js";
 import "./chunk-5FVVY2EB.js";
 import "./chunk-JDSVLVCG.js";
 import "./chunk-5GKPFL3S.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "10.0.84",
+  "version": "10.0.85",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -3386,7 +3386,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^10.0.84"
+    "@remnic/coding-graph": "^10.0.85"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/access-mcp-frames.test.ts

@@ -0,0 +1,47 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { MCP_STDIO_MAX_FRAME_BYTES, McpFrameReader } from "./access-mcp-frames.js";
+
+function frame(body: string): Buffer {
+  return Buffer.from(`Content-Length: ${Buffer.byteLength(body, "utf-8")}\r\n\r\n${body}`, "utf-8");
+}
+
+test("a frame that arrives in two reads is returned once, without re-reading the partial buffer", () => {
+  const reader = new McpFrameReader();
+  const whole = frame('{"id":1}');
+  reader.push(whole.subarray(0, 10));
+  assert.equal(reader.next(), null);
+  assert.equal(reader.hasUnread(), false);
+
+  reader.push(whole.subarray(10));
+  assert.equal(reader.hasUnread(), true);
+  assert.deepEqual(reader.next(), { kind: "body", text: '{"id":1}' });
+  assert.equal(reader.next(), null);
+});
+
+test("bytes that arrive after the reader stopped on an empty buffer are unread", () => {
+  const reader = new McpFrameReader();
+  reader.push(frame("first"));
+  assert.deepEqual(reader.next(), { kind: "body", text: "first" });
+  assert.equal(reader.next(), null);
+  assert.equal(reader.hasUnread(), false);
+
+  reader.push(frame("second"));
+  assert.equal(reader.hasUnread(), true);
+  assert.deepEqual(reader.next(), { kind: "body", text: "second" });
+});
+
+test("the body of an oversized frame is dropped across reads and the next frame is read", () => {
+  const reader = new McpFrameReader();
+  const declared = MCP_STDIO_MAX_FRAME_BYTES + 5;
+  reader.push(Buffer.from(`Content-Length: ${declared}\r\n\r\n${"A".repeat(100)}`, "utf-8"));
+  assert.deepEqual(reader.next(), { kind: "too-large" });
+  assert.equal(reader.next(), null);
+
+  reader.push(Buffer.from("B".repeat(declared - 100), "utf-8"));
+  assert.equal(reader.hasUnread(), false);
+
+  reader.push(frame("after"));
+  assert.deepEqual(reader.next(), { kind: "body", text: "after" });
+});

package/src/access-mcp-frames.ts

@@ -0,0 +1,74 @@
+/**
+ * Content-Length framing for the MCP stdio transport.
+ *
+ * `push` appends raw bytes. `next` returns one frame at a time and `null` when
+ * the buffered bytes hold no complete frame yet. The header and the body are
+ * each bounded to MCP_STDIO_MAX_FRAME_BYTES, which matches the HTTP access
+ * default `maxBodyBytes`, so a peer cannot grow the buffer without limit.
+ */
+export const MCP_STDIO_MAX_FRAME_BYTES = 131072;
+
+export type McpFrame = { kind: "body"; text: string } | { kind: "too-large" };
+
+const TOO_LARGE: McpFrame = { kind: "too-large" };
+
+export class McpFrameReader {
+  private buffer = Buffer.alloc(0);
+  /** Body bytes of a refused oversized frame that have not arrived yet. */
+  private skipBytes = 0;
+  /** Buffer length when `next` last stopped on an incomplete frame. */
+  private waitingBytes = 0;
+
+  push(chunk: Buffer): void {
+    const dropped = Math.min(this.skipBytes, chunk.length);
+    this.skipBytes -= dropped;
+    const kept = chunk.subarray(dropped);
+    if (kept.length > 0) this.buffer = Buffer.concat([this.buffer, kept]);
+  }
+
+  /** True when bytes arrived after `next` last examined the buffer. */
+  hasUnread(): boolean {
+    return this.buffer.length > this.waitingBytes;
+  }
+
+  next(): McpFrame | null {
+    this.waitingBytes = 0;
+    const headerEnd = this.buffer.indexOf("\r\n\r\n");
+    if (headerEnd < 0) {
+      if (this.buffer.length <= MCP_STDIO_MAX_FRAME_BYTES) return this.wait();
+      return this.discardBuffer();
+    }
+    if (headerEnd > MCP_STDIO_MAX_FRAME_BYTES) return this.discardBuffer();
+
+    const headers = this.buffer.subarray(0, headerEnd).toString("utf-8").split("\r\n");
+    const lengthHeader = headers.find((line) => line.toLowerCase().startsWith("content-length:"));
+    const contentLength = lengthHeader ? Number.parseInt(lengthHeader.split(":")[1]?.trim() ?? "0", 10) : NaN;
+    if (!Number.isFinite(contentLength) || contentLength < 0) {
+      this.buffer = Buffer.alloc(0);
+      return null;
+    }
+
+    const bodyStart = headerEnd + 4;
+    if (contentLength > MCP_STDIO_MAX_FRAME_BYTES) {
+      const rest = this.buffer.subarray(bodyStart);
+      this.skipBytes = Math.max(0, contentLength - rest.length);
+      this.buffer = rest.subarray(Math.min(contentLength, rest.length));
+      return TOO_LARGE;
+    }
+    const bodyEnd = bodyStart + contentLength;
+    if (this.buffer.length < bodyEnd) return this.wait();
+    const text = this.buffer.subarray(bodyStart, bodyEnd).toString("utf-8");
+    this.buffer = this.buffer.subarray(bodyEnd);
+    return { kind: "body", text };
+  }
+
+  private wait(): null {
+    this.waitingBytes = this.buffer.length;
+    return null;
+  }
+
+  private discardBuffer(): McpFrame {
+    this.buffer = Buffer.alloc(0);
+    return TOO_LARGE;
+  }
+}

package/src/access-mcp.test.ts

@@ -10,12 +10,16 @@ import assert from "node:assert/strict";
 import { mkdir, mkdtemp, rm, writeFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
+import { PassThrough } from "node:stream";
 import test from "node:test";
 
 import { EngramMcpServer } from "./access-mcp.js";
+import { MCP_STDIO_MAX_FRAME_BYTES } from "./access-mcp-frames.js";
+import { EngramAccessForbiddenError } from "./access-errors.js";
 import { tokenCapabilityStore } from "./access-token-capabilities.js";
 import { EngramAccessInputError, type EngramAccessService } from "./access-service.js";
 import { parseConfig } from "./config.js";
+import { initLogger, resetLogger } from "./logger.js";
 import { readPair, writePair } from "./contradiction/contradiction-review.js";
 import type { StorageManager } from "./storage.js";
 
@@ -1451,3 +1455,145 @@ test("MCP external_wiki_search rejects an empty query before service dispatch",
   assert.equal(readMcpResult(response).isError, true);
   assert.equal(configRead, false);
 });
+
+// ===========================================================================
+// Issue #3225 C5 — tools/call catch-all must not leak unexpected Error.message
+// (paths from fs/backend). Intended typed access errors stay readable.
+// ===========================================================================
+
+function serviceWithRecallThrow(error: Error): EngramAccessService {
+  const service = makeMockService();
+  service.recall = async () => {
+    throw error;
+  };
+  return service;
+}
+
+test("MCP tools/call hides unexpected Error.message paths behind internal error", async () => {
+  const secretPath = "/home/secret/vault/token.pem";
+  const service = serviceWithRecallThrow(
+    new Error(`ENOENT: no such file or directory, open '${secretPath}'`),
+  );
+
+  const logLines: string[] = [];
+  initLogger(
+    {
+      info() {},
+      warn() {},
+      error(msg: string) {
+        logLines.push(msg);
+      },
+    },
+    false,
+    { timestamps: false },
+  );
+  try {
+    const server = new EngramMcpServer(service);
+    const outcome = readCallToolOutcome(
+      await server.handleRequest(makeToolRequest("engram.recall", { query: "anything" })),
+    );
+    assert.equal(outcome.isError, true);
+    assert.equal(outcome.text, "internal error");
+    assert.equal(outcome.text.includes(secretPath), false);
+    assert.ok(
+      logLines.some((line) => line.includes(secretPath)),
+      "server log must retain the unexpected detail",
+    );
+  } finally {
+    resetLogger();
+  }
+});
+
+test("MCP tools/call keeps intended EngramAccessInputError and ForbiddenError messages", async () => {
+  const inputOutcome = readCallToolOutcome(
+    await new EngramMcpServer(serviceWithRecallThrow(new EngramAccessInputError("memory not found: mem-42"))).handleRequest(
+      makeToolRequest("engram.recall", { query: "anything" }),
+    ),
+  );
+  assert.equal(inputOutcome.isError, true);
+  assert.equal(inputOutcome.text, "memory not found: mem-42");
+
+  const forbiddenOutcome = readCallToolOutcome(
+    await new EngramMcpServer(
+      serviceWithRecallThrow(new EngramAccessForbiddenError("token is not permitted to call operation: recall")),
+    ).handleRequest(makeToolRequest("engram.recall", { query: "anything" })),
+  );
+  assert.equal(forbiddenOutcome.isError, true);
+  assert.equal(forbiddenOutcome.text, "token is not permitted to call operation: recall");
+});
+
+// ===========================================================================
+// Issue #3225 N1 — stdio framing is bounded, refuses an oversized frame,
+// and keeps answering the frames that follow it.
+// ===========================================================================
+
+type StdioMessage = { id?: number | null; result?: object; error?: { message: string } };
+type StdioRequest = { jsonrpc: "2.0"; id: number; method: string };
+
+function stdioFrame(payload: StdioRequest): string {
+  const body = JSON.stringify(payload);
+  return `Content-Length: ${Buffer.byteLength(body, "utf-8")}\r\n\r\n${body}`;
+}
+
+function readStdioMessages(raw: string): StdioMessage[] {
+  const messages: StdioMessage[] = [];
+  let rest = raw;
+  while (rest.length > 0) {
+    const headerEnd = rest.indexOf("\r\n\r\n");
+    assert.ok(headerEnd >= 0, "server output must be Content-Length framed");
+    const length = Number.parseInt(rest.slice(0, headerEnd).split(":")[1] ?? "", 10);
+    const message: StdioMessage = JSON.parse(rest.slice(headerEnd + 4, headerEnd + 4 + length));
+    messages.push(message);
+    rest = rest.slice(headerEnd + 4 + length);
+  }
+  return messages;
+}
+
+/** Feeds each chunk in its own tick so the server sees separate data events. */
+async function runStdioChunks(chunks: string[]): Promise<StdioMessage[]> {
+  const input = new PassThrough();
+  const output = new PassThrough();
+  output.setEncoding("utf8");
+  let raw = "";
+  output.on("data", (chunk: string) => {
+    raw += chunk;
+  });
+  const running = new EngramMcpServer(makeMockService()).runStdio(input, output);
+  for (const chunk of chunks) {
+    input.write(chunk);
+    await new Promise<void>((resolve) => setImmediate(resolve));
+  }
+  input.end();
+  await running;
+  return readStdioMessages(raw);
+}
+
+const stdioPing = (id: number) => stdioFrame({ jsonrpc: "2.0", id, method: "ping" });
+
+test("MCP stdio refuses an oversized Content-Length, discards its body, and answers the next frame", async () => {
+  const declared = MCP_STDIO_MAX_FRAME_BYTES + 1;
+  const messages = await runStdioChunks([
+    `Content-Length: ${declared}\r\n\r\n`,
+    "x".repeat(1000),
+    "x".repeat(declared - 1000),
+    stdioPing(7),
+  ]);
+  assert.equal(messages.length, 2);
+  assert.match(messages[0]?.error?.message ?? "", /frame too large/);
+  assert.equal(messages[1]?.id, 7);
+  assert.ok(messages[1]?.result, "the frame after the refused one is answered normally");
+});
+
+test("MCP stdio refuses a header that never terminates and answers the next frame", async () => {
+  const messages = await runStdioChunks(["A".repeat(MCP_STDIO_MAX_FRAME_BYTES + 1), stdioPing(8)]);
+  assert.equal(messages.length, 2);
+  assert.match(messages[0]?.error?.message ?? "", /frame too large/);
+  assert.equal(messages[1]?.id, 8);
+});
+
+test("MCP stdio reassembles a frame split inside its header and inside its body", async () => {
+  const frame = stdioPing(9);
+  const messages = await runStdioChunks([frame.slice(0, 6), frame.slice(6, frame.length - 4), frame.slice(frame.length - 4)]);
+  assert.equal(messages.length, 1);
+  assert.equal(messages[0]?.id, 9);
+});