@rulvar/core 1.168.0 → 1.169.0

package/dist/index.d.ts

@@ -10809,6 +10809,36 @@ interface McpConfig {
   approval?: boolean | Record<string, boolean>;
   /** Host-supplied risk labels for imported tools. */
   risk?: Record<string, ToolRisk>;
+  /**
+  * Cap on WIRE tools accepted from the tools/list sweep (RV1515),
+  * checked after each page, PRE-filter: the sweep itself is the
+  * resource being bounded, so allow/deny cannot admit past it. A
+  * server that streams more refuses typed. Positive integer; absent =
+  * unbounded (today's behavior).
+  */
+  maxTools?: number;
+  /**
+  * Per ADMITTED tool (allow/deny filter first): the UTF-8 byte length
+  * of the serialized inputSchema plus outputSchema when present
+  * (RV1515). An oversized tool refuses the resolution typed, naming
+  * the tool and its measured bytes; deny the tool or raise the cap.
+  * Positive integer; absent = unbounded.
+  */
+  maxSchemaBytes?: number;
+  /**
+  * Per-source latency bounds (RV1515). connectMs races the transport
+  * handshake (on expiry the client, and for stdio its child, is
+  * released and the refusal is typed). listMs and callMs ride the SDK
+  * request timeout per tools/list page and per tools/call; without
+  * them the SDK's own 60s default request timeout applies. A call
+  * timeout surfaces as the tool's error result, never past policy.
+  * Each a positive finite number of milliseconds.
+  */
+  timeouts?: {
+    connectMs?: number;
+    listMs?: number;
+    callMs?: number;
+  };
 }
 /**
 * The ToolSource returned by {@link mcp}: the frozen ToolSource seam

package/dist/index.js

@@ -3879,7 +3879,24 @@ function buildToolContext(seed) {
 *
 * Docs: https://docs.rulvar.com/guide/mcp.
 */
+function validateBounds(cfg) {
+	const positiveInt = (key) => {
+		const value = cfg[key];
+		if (value !== void 0 && (!Number.isInteger(value) || value <= 0)) throw new ConfigError(`mcp: '${key}' must be a positive integer, got ${String(value)}`);
+	};
+	positiveInt("maxTools");
+	positiveInt("maxSchemaBytes");
+	for (const key of [
+		"connectMs",
+		"listMs",
+		"callMs"
+	]) {
+		const value = cfg.timeouts?.[key];
+		if (value !== void 0 && (!Number.isFinite(value) || value <= 0)) throw new ConfigError(`mcp: 'timeouts.${key}' must be a positive finite number of milliseconds, got ${String(value)}`);
+	}
+}
 function validateConfig(cfg) {
+	validateBounds(cfg);
 	const forbid = (key) => {
 		if (cfg[key] !== void 0) throw new ConfigError(`mcp: '${key}' is not a config key of the '${cfg.transport}' transport (exactly the keys matching the chosen transport)`);
 	};
@@ -3947,7 +3964,7 @@ function mcp(cfg) {
 			name: "rulvar",
 			version: "1.0.0"
 		});
-		try {
+		const attach = async () => {
 			if (cfg.transport === "stdio") {
 				const transport = new StdioClientTransport({
 					command: cfg.command ?? "",
@@ -3962,6 +3979,23 @@ function mcp(cfg) {
 				await cfg.server.connect(serverTransport);
 				await client.connect(clientTransport);
 			}
+		};
+		try {
+			const budgetMs = cfg.timeouts?.connectMs;
+			if (budgetMs === void 0) await attach();
+			else {
+				let timer;
+				const expired = new Promise((_resolve, reject) => {
+					timer = setTimeout(() => {
+						reject(new ConfigError(`mcp: connect to '${sourceIdOf(cfg)}' timed out after ${budgetMs}ms`));
+					}, budgetMs);
+				});
+				try {
+					await Promise.race([attach(), expired]);
+				} finally {
+					clearTimeout(timer);
+				}
+			}
 		} catch (error) {
 			await client.close().catch(() => void 0);
 			throw error;
@@ -3975,13 +4009,20 @@ function mcp(cfg) {
 	const listAll = async (client) => {
 		const tools = [];
 		let cursor;
+		const listOptions = cfg.timeouts?.listMs === void 0 ? void 0 : { timeout: cfg.timeouts.listMs };
 		do {
-			const page = await client.listTools(cursor === void 0 ? {} : { cursor });
+			const page = await client.listTools(cursor === void 0 ? {} : { cursor }, listOptions);
 			tools.push(...page.tools);
+			if (cfg.maxTools !== void 0 && tools.length > cfg.maxTools) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' returned at least ${tools.length} wire tools, over the declared maxTools ${cfg.maxTools}; raise the cap or trim the server`);
 			cursor = page.nextCursor;
 		} while (cursor !== void 0 && cursor !== "");
 		return tools;
 	};
+	const enforceSchemaBytes = (wire) => {
+		if (cfg.maxSchemaBytes === void 0) return;
+		const bytes = Buffer.byteLength(JSON.stringify(wire.inputSchema) + (wire.outputSchema === void 0 ? "" : JSON.stringify(wire.outputSchema)), "utf8");
+		if (bytes > cfg.maxSchemaBytes) throw new ConfigError(`mcp: tool '${wire.name}' declares ${bytes} bytes of schema, over the declared maxSchemaBytes ${cfg.maxSchemaBytes}; deny the tool or raise the cap`);
+	};
 	const needsApprovalFor = (originalName) => {
 		if (cfg.approval === void 0) return false;
 		if (typeof cfg.approval === "boolean") return cfg.approval;
@@ -4001,7 +4042,7 @@ function mcp(cfg) {
 				const result = await client.callTool({
 					name: wire.name,
 					arguments: input ?? {}
-				});
+				}, void 0, cfg.timeouts?.callMs === void 0 ? void 0 : { timeout: cfg.timeouts.callMs });
 				if (result.isError === true) throw new Error(errorText(result));
 				if (result.structuredContent !== void 0) {
 					if (wire.outputSchema !== void 0) {
@@ -4026,7 +4067,9 @@ function mcp(cfg) {
 				const wireTools = await listAll(client);
 				const denySet = new Set(cfg.deny ?? []);
 				const allowSet = cfg.allow === void 0 ? void 0 : new Set(cfg.allow);
-				const defs = wireTools.filter((wire) => !denySet.has(wire.name) && (allowSet === void 0 || allowSet.has(wire.name))).map((wire) => toDef(client, wire));
+				const admitted = wireTools.filter((wire) => !denySet.has(wire.name) && (allowSet === void 0 || allowSet.has(wire.name)));
+				for (const wire of admitted) enforceSchemaBytes(wire);
+				const defs = admitted.map((wire) => toDef(client, wire));
 				if (generation === fetchedAt) cache = defs;
 				return defs;
 			})();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.168.0",
+  "version": "1.169.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",