@socketsecurity/mcp 0.0.9 → 0.0.10

package/index.js

@@ -3,7 +3,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { z } from 'zod';
-import { pino } from 'pino';
+import pino from 'pino';
 import readline from 'readline';
 import { join } from 'path';
 import { readFileSync } from 'fs';
@@ -237,7 +237,20 @@ if (useHttp) {
             res.end();
             return;
         }
-        const url = new URL(req.url, `http://localhost:${port}`);
+        let url;
+        try {
+            url = new URL(req.url, `http://localhost:${port}`);
+        }
+        catch (error) {
+            logger.warn(`Invalid URL in request: ${req.url} - ${error}`);
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({
+                jsonrpc: '2.0',
+                error: { code: -32000, message: 'Bad Request: Invalid URL' },
+                id: null
+            }));
+            return;
+        }
         if (url.pathname === '/health') {
             res.writeHead(200, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({
@@ -400,7 +413,7 @@ if (useHttp) {
                                 res.write(': heartbeat\n\n');
                             }
                             catch (error) {
-                                logger.error(`Heartbeat error for session ${sessionId}:`, error);
+                                logger.error(error, `Heartbeat error for session ${sessionId}:`);
                                 clearInterval(heartbeat);
                             }
                         }, 30000);
@@ -409,7 +422,7 @@ if (useHttp) {
                     }
                 }
                 catch (error) {
-                    logger.error(`SSE transport error for session ${sessionId}:`, error);
+                    logger.error(error, `SSE transport error for session ${sessionId}:`);
                 }
             }
             else if (req.method === 'DELETE') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/mcp",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "type": "module",
   "main": "./index.js",
   "bin": {
@@ -21,7 +21,9 @@
     "build:types": "tsc -p tsconfig.declaration.json",
     "build:permissions": "chmod +x ./index.js && (chmod +x ./mock-client/*.js 2>/dev/null || true)",
     "build-dtx": "run-s build build-dtx:*",
-    "build-dtx:dtx-pack": "dtx-pack ./build/index.js",
+    "build-dtx:versions_match": "node --experimental-strip-types scripts/check-versions.ts",
+    "build-dtx:validate": "npx dxt validate ./",
+    "build-dtx:dtx-pack": "npx dxt pack ./",
     "clean": "./scripts/clean.sh",
     "debug-stdio": "node --experimental-strip-types ./mock-client/debug-client.ts",
     "debug-sdk": "node --experimental-strip-types ./mock-client/stdio-client.ts",
@@ -58,6 +60,6 @@
     "@types/triple-beam": "^1.3.5",
     "c8": "^10.0.0",
     "npm-run-all2": "^8.0.1",
-    "typescript": "~5.8.2"
+    "typescript": "~5.9.2"
   }
 }