@rulvar/core 1.171.0 → 1.172.0

package/dist/index.d.ts

@@ -10855,6 +10855,18 @@ interface McpConfig {
   */
   maxTools?: number;
   /**
+  * Cap on tools/list PAGES fetched in one sweep (RV1602): a server
+  * paginating past it refuses typed, fail closed like maxTools (a
+  * truncated import would silently admit a subset of the declared
+  * surface). Bounds the sweep's WIRE CALL count where maxTools bounds
+  * its volume: unique cursors over empty pages grow neither the tool
+  * count nor any timeout (each page answers inside listMs), so only a
+  * page bound stops them. Positive integer; absent = unbounded.
+  * Independent of the unconditional cursor-echo cycle guard, which
+  * needs no configuration.
+  */
+  maxPages?: number;
+  /**
   * Per ADMITTED tool (allow/deny filter first): the UTF-8 byte length
   * of the serialized inputSchema plus outputSchema when present
   * (RV1515). An oversized tool refuses the resolution typed, naming

package/dist/index.js

@@ -3885,6 +3885,7 @@ function validateBounds(cfg) {
 		if (value !== void 0 && (!Number.isInteger(value) || value <= 0)) throw new ConfigError(`mcp: '${key}' must be a positive integer, got ${String(value)}`);
 	};
 	positiveInt("maxTools");
+	positiveInt("maxPages");
 	positiveInt("maxSchemaBytes");
 	for (const key of [
 		"connectMs",
@@ -4034,12 +4035,16 @@ function mcp(cfg) {
 	const listAll = async (client) => {
 		const tools = [];
 		let cursor;
+		let pages = 0;
 		const listOptions = cfg.timeouts?.listMs === void 0 ? void 0 : { timeout: cfg.timeouts.listMs };
 		do {
 			const page = await client.listTools(cursor === void 0 ? {} : { cursor }, listOptions);
+			pages += 1;
 			tools.push(...page.tools);
 			if (cfg.maxTools !== void 0 && tools.length > cfg.maxTools) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' returned at least ${tools.length} wire tools, over the declared maxTools ${cfg.maxTools}; raise the cap or trim the server`);
+			if (page.nextCursor !== void 0 && page.nextCursor !== "" && page.nextCursor === cursor) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' returned the cursor it was queried with ('${page.nextCursor}') on page ${pages}: the pagination makes no progress`);
 			cursor = page.nextCursor;
+			if (cfg.maxPages !== void 0 && pages >= cfg.maxPages && cursor !== void 0 && cursor !== "") throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' still reports another page after ${pages} page(s), over the declared maxPages ${cfg.maxPages}; raise the cap or trim the server`);
 		} while (cursor !== void 0 && cursor !== "");
 		return tools;
 	};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.171.0",
+  "version": "1.172.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",