@wrongstack/mcp 1.0.26 → 1.0.27

package/dist/client.d.ts

@@ -26,7 +26,15 @@ export declare class MCPClient {
      * (stdio child exit, `close()`) so callers don't hang forever.
      */
     private readonly pending;
-    private rxBuffer;
+    /**
+     * The unterminated tail of stdout, as the chunks it arrived in; joined only
+     * when its newline arrives. Kept as one string (`+=` then `indexOf`), every
+     * chunk flattened and re-scanned everything buffered so far — O(n²) for a
+     * multi-MiB tools/call result.
+     */
+    private rxParts;
+    private get rxBuffer();
+    private set rxBuffer(value);
     private rxBufferBytes;
     /**
      * Incremental UTF-8 decoder for the stdio rx path. A pipe read boundary can

package/dist/index.js

@@ -1543,27 +1543,8 @@ var SSEReader = class {
     };
   }
   feed(chunk) {
-    if (chunk.length > SSE_READER_MAX_BUFFER) {
-      throw new ToolError({
-        message: `SSE: chunk size ${chunk.length} exceeds max buffer ${SSE_READER_MAX_BUFFER} \u2014 refusing to accumulate`,
-        code: "TOOL_EXECUTION_FAILED",
-        toolName: "mcp_transport_sse_reader",
-        context: { phase: "feed", chunkLength: chunk.length, maxBuffer: SSE_READER_MAX_BUFFER }
-      });
-    }
+    const carried = this.buffer.length;
     this.buffer += chunk;
-    if (this.buffer.length > SSE_READER_MAX_BUFFER) {
-      throw new ToolError({
-        message: `SSE: pending line exceeds ${SSE_READER_MAX_BUFFER} bytes \u2014 upstream is not framing events`,
-        code: "TOOL_EXECUTION_FAILED",
-        toolName: "mcp_transport_sse_reader",
-        context: {
-          phase: "feed",
-          bufferLength: this.buffer.length,
-          maxBuffer: SSE_READER_MAX_BUFFER
-        }
-      });
-    }
     let start = 0;
     let idx = this.buffer.indexOf("\n", start);
     while (idx !== -1) {
@@ -1574,6 +1555,25 @@ var SSEReader = class {
       idx = this.buffer.indexOf("\n", start);
     }
     if (start > 0) this.buffer = this.buffer.slice(start);
+    if (this.buffer.length <= SSE_READER_MAX_BUFFER) return;
+    if (start >= carried) {
+      throw new ToolError({
+        message: `SSE: chunk size ${chunk.length} exceeds max buffer ${SSE_READER_MAX_BUFFER} \u2014 refusing to accumulate`,
+        code: "TOOL_EXECUTION_FAILED",
+        toolName: "mcp_transport_sse_reader",
+        context: { phase: "feed", chunkLength: chunk.length, maxBuffer: SSE_READER_MAX_BUFFER }
+      });
+    }
+    throw new ToolError({
+      message: `SSE: pending line exceeds ${SSE_READER_MAX_BUFFER} bytes \u2014 upstream is not framing events`,
+      code: "TOOL_EXECUTION_FAILED",
+      toolName: "mcp_transport_sse_reader",
+      context: {
+        phase: "feed",
+        bufferLength: this.buffer.length,
+        maxBuffer: SSE_READER_MAX_BUFFER
+      }
+    });
   }
   processLine(line) {
     if (line === "") {
@@ -1649,6 +1649,7 @@ import * as https2 from "node:https";
 import { ConfigError as ConfigError2 } from "@wrongstack/core/types";
 
 // src/elicitation.ts
+import { sanitizeTerminalText } from "@wrongstack/core/utils";
 var ELICITATION_MAX_WAIT_MS = 10 * 6e4;
 var MAX_FIELDS = 32;
 var MAX_MESSAGE_CHARS = 4e3;
@@ -1659,6 +1660,13 @@ function isRecord(v) {
 function optionalString3(v) {
   return typeof v === "string" && v.trim() ? v : void 0;
 }
+function displayText(v) {
+  return sanitizeTerminalText(v);
+}
+function optionalDisplayString(v) {
+  const text = optionalString3(v);
+  return text === void 0 ? void 0 : optionalString3(displayText(text));
+}
 function optionalNumber(v) {
   return typeof v === "number" && Number.isFinite(v) ? v : void 0;
 }
@@ -1672,7 +1680,7 @@ function parseOptions(schema) {
     const names = Array.isArray(schema["enumNames"]) ? schema["enumNames"] : [];
     return values.map((value, i) => ({
       value,
-      label: typeof names[i] === "string" && names[i] ? names[i] : value
+      label: displayText(typeof names[i] === "string" && names[i] ? names[i] : value)
     }));
   }
   const titled = Array.isArray(schema["oneOf"]) ? schema["oneOf"] : Array.isArray(schema["anyOf"]) ? schema["anyOf"] : void 0;
@@ -1682,7 +1690,7 @@ function parseOptions(schema) {
     if (!isRecord(entry) || typeof entry["const"] !== "string") return void 0;
     options.push({
       value: entry["const"],
-      label: optionalString3(entry["title"]) ?? entry["const"]
+      label: optionalDisplayString(entry["title"]) ?? displayText(entry["const"])
     });
   }
   return options;
@@ -1691,8 +1699,8 @@ function parseField(name, schema, required) {
   if (!isRecord(schema)) return { ok: false, error: `property "${name}" is not a schema object` };
   const base = {
     name,
-    title: optionalString3(schema["title"]),
-    description: optionalString3(schema["description"]),
+    title: optionalDisplayString(schema["title"]),
+    description: optionalDisplayString(schema["description"]),
     required
   };
   const type = schema["type"];
@@ -1789,7 +1797,7 @@ function parseUrlElicitation(params) {
     ok: true,
     value: {
       mode: "url",
-      message: message.slice(0, MAX_MESSAGE_CHARS),
+      message: displayText(message).slice(0, MAX_MESSAGE_CHARS),
       url: url.href,
       elicitationId
     }
@@ -1822,10 +1830,10 @@ function parseElicitationParams(params) {
     if (!parsed.ok) return parsed;
     fields.push(parsed.value);
   }
-  return { ok: true, value: { message: message.slice(0, MAX_MESSAGE_CHARS), fields } };
+  return { ok: true, value: { message: displayText(message).slice(0, MAX_MESSAGE_CHARS), fields } };
 }
 function label(field) {
-  return field.title ?? field.name;
+  return field.title ?? displayText(field.name);
 }
 function checkValue(field, raw) {
   const name = label(field);
@@ -2191,6 +2199,14 @@ if (!pinnedAgentsCleanupRegistered) {
     pinnedAgents.clear();
   });
 }
+function urlOriginForLog(raw) {
+  try {
+    const url = new URL(raw);
+    return `${url.protocol}//${url.host}`;
+  } catch {
+    return "<invalid url>";
+  }
+}
 function makeAbortError(method) {
   const err = new Error(`MCP request "${method}" aborted by client`);
   err.name = "AbortError";
@@ -2262,15 +2278,16 @@ var BaseHTTPTransport = class {
     this.requestTimeout = opts.requestTimeoutMs ?? 6e4;
     if (opts.tls) {
       if (opts.tls.rejectUnauthorized === false) {
+        const where = urlOriginForLog(this.url);
         if (!isTlsUnsafeAllowed()) {
           throw new ConfigError2({
-            message: `[mcp:${transportName}] TLS verification disabled \u2014 set WRONGSTACK_UNSAFE_MCP_TLS=1 to allow. Rejecting insecure configuration for ${this.url}.`,
+            message: `[mcp:${transportName}] TLS verification disabled \u2014 set WRONGSTACK_UNSAFE_MCP_TLS=1 to allow. Rejecting insecure configuration for ${where}.`,
             code: "CONFIG_INVALID",
-            context: { field: "tls.rejectUnauthorized", transportName, url: this.url }
+            context: { field: "tls.rejectUnauthorized", transportName, url: where }
           });
         }
         console.error(
-          `[mcp:${transportName}] \u26A0\uFE0F TLS verification DISABLED for ${this.url}. Network attacks are possible \u2014 only use on localhost.`
+          `[mcp:${transportName}] \u26A0\uFE0F TLS verification DISABLED for ${where}. Network attacks are possible \u2014 only use on localhost.`
         );
       }
       this.tlsAgent = new https2.Agent({
@@ -3581,7 +3598,19 @@ var MCPClient = class _MCPClient {
    * (stdio child exit, `close()`) so callers don't hang forever.
    */
   pending = /* @__PURE__ */ new Map();
-  rxBuffer = "";
+  /**
+   * The unterminated tail of stdout, as the chunks it arrived in; joined only
+   * when its newline arrives. Kept as one string (`+=` then `indexOf`), every
+   * chunk flattened and re-scanned everything buffered so far — O(n²) for a
+   * multi-MiB tools/call result.
+   */
+  rxParts = [];
+  get rxBuffer() {
+    return this.rxParts.join("");
+  }
+  set rxBuffer(value) {
+    this.rxParts = value ? [value] : [];
+  }
   rxBufferBytes = 0;
   /**
    * Incremental UTF-8 decoder for the stdio rx path. A pipe read boundary can
@@ -4063,11 +4092,10 @@ var MCPClient = class _MCPClient {
     }
   }
   onData(s) {
-    this.rxBuffer += s;
     this.rxBufferBytes += Buffer.byteLength(s, "utf8");
     if (this.rxBufferBytes > _MCPClient.MAX_RX_BUFFER_BYTES) {
       const truncated = this.rxBufferBytes;
-      this.rxBuffer = "";
+      this.rxParts = [];
       this.rxBufferBytes = 0;
       this.failPending(
         `MCP "${this.opts.name}" rx buffer overflow (${truncated} bytes without a newline) \u2014 closing connection`
@@ -4076,17 +4104,22 @@ var MCPClient = class _MCPClient {
       return;
     }
     let start = 0;
-    let idx = this.rxBuffer.indexOf("\n");
+    let idx = s.indexOf("\n");
+    if (idx === -1) {
+      this.rxParts.push(s);
+      return;
+    }
     while (idx !== -1) {
-      const line = this.rxBuffer.slice(start, idx).trim();
+      const head = this.rxParts.length > 0 ? this.rxParts.join("") : "";
+      this.rxParts = [];
+      const line = (head + s.slice(start, idx)).trim();
       start = idx + 1;
       if (line) this.onLine(line);
-      idx = this.rxBuffer.indexOf("\n", start);
-    }
-    if (start > 0) {
-      this.rxBufferBytes -= Buffer.byteLength(this.rxBuffer.slice(0, start), "utf8");
-      this.rxBuffer = this.rxBuffer.slice(start);
+      idx = s.indexOf("\n", start);
     }
+    const tail = s.slice(start);
+    this.rxBufferBytes = Buffer.byteLength(tail, "utf8");
+    if (tail) this.rxParts.push(tail);
   }
   onLine(line) {
     let msg;
@@ -4424,6 +4457,7 @@ function requireIdentity(value, label2) {
 // src/elicitation-form.ts
 import { randomUUID } from "node:crypto";
 import { hostname } from "node:os";
+import { sanitizeTerminalText as sanitizeTerminalText2 } from "@wrongstack/core/utils";
 var MAX_ATTEMPTS = 3;
 var CONFIRM_QUESTION = "confirm";
 var URL_QUESTION = "url";
@@ -4456,7 +4490,8 @@ function describe(field) {
 function toQuestion(field, index) {
   const base = {
     id: questionId(index),
-    prompt: field.title ?? field.name,
+    // Titles arrive sanitized from the parser; a bare field name does not.
+    prompt: field.title ?? sanitizeTerminalText2(field.name),
     description: describe(field),
     required: field.required
   };
@@ -4733,6 +4768,10 @@ function buildConfig(input, base) {
   if (allowedTools !== void 0) cfg.allowedTools = allowedTools;
   const permission = input.permission ?? base?.permission;
   if (permission !== void 0) cfg.permission = permission;
+  const startupTimeoutMs = input.startupTimeoutMs ?? base?.startupTimeoutMs;
+  if (startupTimeoutMs !== void 0) cfg.startupTimeoutMs = startupTimeoutMs;
+  const requestTimeoutMs = input.requestTimeoutMs ?? base?.requestTimeoutMs;
+  if (requestTimeoutMs !== void 0) cfg.requestTimeoutMs = requestTimeoutMs;
   const allowPrivateNetworks = input.allowPrivateNetworks ?? base?.allowPrivateNetworks;
   if (allowPrivateNetworks !== void 0) cfg.allowPrivateNetworks = allowPrivateNetworks;
   const enabled = input.enabled ?? base?.enabled;
@@ -5648,7 +5687,8 @@ async function attemptConnectSlot(ctx, slot) {
         slot.reconnectPending = false;
         ctx.events.emit("mcp.server.disconnected", {
           name: slot.cfg.name,
-          reason: err instanceof Error ? err.message : "unknown"
+          reason: err instanceof Error ? err.message : "unknown",
+          terminal: true
         });
         return;
       }
@@ -5869,7 +5909,8 @@ function scheduleRegistryReconnect({
     );
     events.emit("mcp.server.disconnected", {
       name: slot.cfg.name,
-      reason: `reconnect-exhausted:${slot.reconnectCycles}`
+      reason: `reconnect-exhausted:${slot.reconnectCycles}`,
+      terminal: true
     });
     return;
   }

package/dist/manage.d.ts

@@ -17,6 +17,10 @@ export interface McpServerInput {
     bearerTokenEnv?: string | undefined;
     allowedTools?: string[] | undefined;
     permission?: Permission | undefined;
+    /** Connect/startup timeout in ms. Defaults to 10s when omitted. */
+    startupTimeoutMs?: number | undefined;
+    /** Per-request JSON-RPC timeout in ms. Defaults to 60s when omitted. */
+    requestTimeoutMs?: number | undefined;
     /** Lazy connect — spawn the process only on first tool call (see config). */
     lazy?: boolean | undefined;
     /** Env var names to forward from parent process at spawn time. */

package/dist/transport-base.d.ts

@@ -51,6 +51,11 @@ export interface HttpTransportOptions {
  * Abort error whose `name` is `'AbortError'` so the core executor's
  * classifyToolError maps it to FATAL / not-retryable (user cancellation).
  */
+/**
+ * `scheme://host:port` of a server URL, for log lines. The path and query can
+ * hold an expanded `${SECRET}` (config-env), and userinfo is a credential.
+ */
+export declare function urlOriginForLog(raw: string): string;
 export declare function makeAbortError(method: string): Error;
 /** Advance a JSON-RPC number id without leaving JavaScript's safe-integer range. */
 export declare function nextJsonRpcId(id: number): number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/mcp",
-  "version": "1.0.26",
+  "version": "1.0.27",
   "license": "MIT",
   "description": "WrongStack Model Context Protocol client and registry: stdio, SSE, and streamable HTTP transports.",
   "repository": {
@@ -26,7 +26,7 @@
     "!dist/**/*.map"
   ],
   "dependencies": {
-    "@wrongstack/core": "1.0.26",
+    "@wrongstack/core": "1.0.27",
     "undici": "^8.10.2"
   },
   "devDependencies": {