@rulvar/core 1.189.0 → 1.190.0

package/dist/index.d.ts

@@ -11238,14 +11238,31 @@ interface McpConfig {
   * request timeout per tools/list page and per tools/call; without
   * them the SDK's own 60s default request timeout applies. A call
   * timeout surfaces as the tool's error result, never past policy.
-  * Each a positive finite number of milliseconds.
+  * discoveryMs (RV1808) is the WALL-CLOCK cap over one whole
+  * tools/list sweep, all pages included: per-page listMs cannot bound
+  * a server that answers every page promptly and paginates forever
+  * with unique cursors under maxPages' radar only when maxPages is
+  * set, and cannot bound a slow-but-under-listMs page crawl at all.
+  * On expiry the sweep refuses typed. Each a positive finite number
+  * of milliseconds.
   */
   timeouts?: {
     connectMs?: number;
     listMs?: number;
     callMs?: number;
+    discoveryMs?: number;
   };
   /**
+  * Demand the discovery bounds (RV1808): with `requireBounds: true`
+  * the source refuses at construction unless maxTools, maxPages,
+  * maxSchemaBytes, and timeouts.discoveryMs are ALL declared. The
+  * production posture: an unbounded discovery sweep against a remote
+  * registry is an availability decision someone should have made on
+  * purpose, so the flag turns the four absences into one typed error
+  * naming what is missing instead of four silent unboundeds.
+  */
+  requireBounds?: boolean;
+  /**
   * streamable-http only (RV1516): headers injected into EVERY wire
   * request through a wrapped fetch. The hook form is awaited before
   * each send, so it IS the refresh point: rotate a token in the hook

package/dist/index.js

@@ -4055,11 +4055,21 @@ function validateBounds(cfg) {
 	for (const key of [
 		"connectMs",
 		"listMs",
-		"callMs"
+		"callMs",
+		"discoveryMs"
 	]) {
 		const value = cfg.timeouts?.[key];
 		if (value !== void 0 && (!Number.isFinite(value) || value <= 0)) throw new ConfigError(`mcp: 'timeouts.${key}' must be a positive finite number of milliseconds, got ${String(value)}`);
 	}
+	if (cfg.requireBounds === true) {
+		const missing = [
+			...cfg.maxTools === void 0 ? ["maxTools"] : [],
+			...cfg.maxPages === void 0 ? ["maxPages"] : [],
+			...cfg.maxSchemaBytes === void 0 ? ["maxSchemaBytes"] : [],
+			...cfg.timeouts?.discoveryMs === void 0 ? ["timeouts.discoveryMs"] : []
+		];
+		if (missing.length > 0) throw new ConfigError(`mcp: requireBounds demands every discovery bound; missing ${missing.join(", ")}`);
+	}
 	if (cfg.drift !== void 0 && cfg.drift !== "rekey" && cfg.drift !== "refuse") throw new ConfigError(`mcp: 'drift' must be 'rekey' or 'refuse', got '${String(cfg.drift)}'`);
 	const headers = cfg.http?.headers;
 	if (headers !== void 0 && typeof headers !== "function" && typeof headers !== "object") throw new ConfigError("mcp: 'http.headers' must be a record of header values or a (possibly async) function returning one");
@@ -4201,13 +4211,19 @@ function mcp(cfg) {
 		const tools = [];
 		let cursor;
 		let pages = 0;
+		const visited = /* @__PURE__ */ new Set();
+		const startedAt = Date.now();
+		const discoveryMs = cfg.timeouts?.discoveryMs;
 		const listOptions = cfg.timeouts?.listMs === void 0 ? void 0 : { timeout: cfg.timeouts.listMs };
 		do {
+			if (discoveryMs !== void 0 && Date.now() - startedAt > discoveryMs) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' exceeded the discovery deadline (timeouts.discoveryMs ${discoveryMs}) after ${pages} page(s)`);
+			if (cursor !== void 0) visited.add(cursor);
 			const page = await client.listTools(cursor === void 0 ? {} : { cursor }, listOptions);
 			pages += 1;
 			tools.push(...page.tools);
 			if (cfg.maxTools !== void 0 && tools.length > cfg.maxTools) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' returned at least ${tools.length} wire tools, over the declared maxTools ${cfg.maxTools}; raise the cap or trim the server`);
 			if (page.nextCursor !== void 0 && page.nextCursor !== "" && page.nextCursor === cursor) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' returned the cursor it was queried with ('${page.nextCursor}') on page ${pages}: the pagination makes no progress`);
+			if (page.nextCursor !== void 0 && page.nextCursor !== "" && visited.has(page.nextCursor)) throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' returned a cursor this sweep already visited ('${page.nextCursor}') on page ${pages}: the pagination cycles`);
 			cursor = page.nextCursor;
 			if (cfg.maxPages !== void 0 && pages >= cfg.maxPages && cursor !== void 0 && cursor !== "") throw new ConfigError(`mcp: tools/list of '${sourceIdOf(cfg)}' still reports another page after ${pages} page(s), over the declared maxPages ${cfg.maxPages}; raise the cap or trim the server`);
 		} while (cursor !== void 0 && cursor !== "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/core",
-  "version": "1.189.0",
+  "version": "1.190.0",
   "description": "Rulvar core: L0 contracts, journal kernel, ctx primitives, agent runtime, model router, tool system, dynamic orchestrator, InMemory and JSONL stores, event stream.",
   "type": "module",
   "license": "Apache-2.0",