glasspane-mcp 1.22.0 → 1.24.0

package/dist/dispatch.d.ts

@@ -26,7 +26,7 @@ export declare const MCP_PROTOCOL_VERSION: "2025-06-18";
 export declare const SUPPORTED_PROTOCOL_VERSIONS: readonly string[];
 export declare const SERVER_INFO: {
     readonly name: "glasspane-mcp";
-    readonly version: "1.22.0";
+    readonly version: "1.24.0";
 };
 export declare const PARSE_ERROR = -32700;
 export declare const INVALID_REQUEST = -32600;

package/dist/engine-client.d.ts

@@ -590,6 +590,7 @@ export declare class EngineJsonRpcClient {
     private verifyIdentity;
 }
 export declare function truncate(text: string): string;
+export declare function lateReplyBodyNote(serializedBody: string, operationId?: unknown): string;
 /** How a transport stream is opened; injectable so tests need no socket. */
 export type EngineTransportOpener = (socketPath: string) => Duplex;
 /**

package/dist/http-gateway-cli.js

@@ -8,6 +8,7 @@ import net from "node:net";
 import os from "node:os";
 import path from "node:path";
 import fs2 from "node:fs";
+import { createHash } from "node:crypto";
 import { fileURLToPath } from "node:url";
 
 // src/io.ts
@@ -800,9 +801,9 @@ var EngineJsonRpcClient = class {
       );
       return;
     }
-    const bodyBytes = Buffer.byteLength(jsonOrString(frame.result), "utf8");
+    const bodyJson = jsonOrString(frame.result);
     this.report(
-      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, with a ${bodyBytes}-byte body that is raw engine content (an accessibility tree whose title/value fields are on-screen data), so its text is not written to this log${byOrder}`
+      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, ${lateReplyBodyNote(bodyJson, operationIdOf(frame.result))}${byOrder}`
     );
     if (frame.result === void 0) {
       return;
@@ -957,6 +958,13 @@ function attribute(error, entry, inferred = true) {
 function truncate(text) {
   return text.length <= LOG_BODY_CHARS ? text : `${text.slice(0, LOG_BODY_CHARS)}\u2026 [+${text.length - LOG_BODY_CHARS} chars not logged]`;
 }
+var ARCHIVE_OPERATION_ID = /^op_[0-9A-HJKMNP-TV-Z]{26}$/;
+function lateReplyBodyNote(serializedBody, operationId) {
+  const bytes = Buffer.byteLength(serializedBody, "utf8");
+  const digest = createHash("sha256").update(serializedBody, "utf8").digest("hex").slice(0, 12);
+  const named2 = typeof operationId === "string" && ARCHIVE_OPERATION_ID.test(operationId) ? `, for ${operationId}` : "";
+  return `with a ${bytes}-byte body (sha256 ${digest})${named2} that is on-screen accessibility content \u2014 element titles and values, sometimes a document's text \u2014 so its text is not written to this log; the reply itself is in the daemon's evidence archive under the state root, read it back with gp_last_evidence {operationId} or gp_export_evidence {operationId}`;
+}
 function nonBlankOr(value, fallback) {
   if (value === void 0 || value === null) {
     return fallback;
@@ -967,6 +975,9 @@ function nonBlankOr(value, fallback) {
 function jsonOrString(value) {
   return String(JSON.stringify(value));
 }
+function operationIdOf(result) {
+  return typeof result === "object" && result !== null ? result.operationId : void 0;
+}
 var ReconnectingSocketIo = class {
   constructor(socketPath, open) {
     this.socketPath = socketPath;
@@ -1050,7 +1061,7 @@ function unixSocketEngineClient(socketPath, options = {}) {
 
 // src/http-gateway.ts
 import http from "node:http";
-import { createHash as createHash2, timingSafeEqual } from "node:crypto";
+import { createHash as createHash3, timingSafeEqual } from "node:crypto";
 import { isIP } from "node:net";
 import { URL } from "node:url";
 
@@ -1140,6 +1151,9 @@ function engineBody(params) {
   const { dimension: _dimension, ...rest } = params;
   return rest;
 }
+function dimensionAttributionLine(dimension) {
+  return `dimension: ${dimension} | declared by this call; this shell records no decision, so the ledger gains an attribution only where a decision is written for this operation`;
+}
 
 // src/evidence-report.ts
 var PLACEHOLDER = "\u2014";
@@ -2007,14 +2021,21 @@ function attributeCapability(engineMethod, query = {}) {
     };
   } catch (error) {
     if (error instanceof KernelProviderError) {
-      return { status: "refused", error: { code: error.code, message: error.message, remedy: error.remedy } };
+      return {
+        status: "refused",
+        error: {
+          code: GP_E_INTERNAL,
+          message: `provider registration refused (${error.code}): ${error.message}`,
+          remedy: error.remedy
+        }
+      };
     }
     if (error instanceof KernelSchemaError) {
       return {
         status: "refused",
         error: {
-          code: error.code,
-          message: `${error.message} \u2014 the kernel refused a registration this product writes itself, built with the version from ${registrationVersionSource(measured, usable(own))}`,
+          code: GP_E_INTERNAL,
+          message: `the kernel refused a registration this product writes itself (${error.code}): ${error.message} \u2014 built with the version from ${registrationVersionSource(measured, usable(own))}`,
           remedy: "fix shellProviderDrafts in mcp-shell/src/providers.ts; it is the contract both harnesses read, so it cannot be relaxed at a call site \u2014 run node scripts/check-kernel-corpus.mjs and compare against kernel/fixtures/provider-registration.ok-01.json"
         }
       };
@@ -2065,7 +2086,7 @@ var TRAIL_PROVENANCE_NOTES = {
 import fs4 from "node:fs";
 import os2 from "node:os";
 import path3 from "node:path";
-import { createHash, randomBytes } from "node:crypto";
+import { createHash as createHash2, randomBytes } from "node:crypto";
 import { z as z9 } from "zod";
 var CROCKFORD_BODY_RE = "[0-9A-HJKMNP-TV-Z]{26}";
 var PROJECT_ID_RE = new RegExp(`^prj_${CROCKFORD_BODY_RE}$`);
@@ -2369,7 +2390,7 @@ function registryDigest(filePath) {
   return registryBytesDigest(bytes);
 }
 function registryBytesDigest(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
+  return createHash2("sha256").update(bytes).digest("hex");
 }
 function registryDriftReason(filePath, openedAs, now) {
   if (now === openedAs) {
@@ -3848,6 +3869,7 @@ var HTTP_NOT_FOUND = "GP_HTTP_NOT_FOUND";
 var HTTP_BAD_REQUEST = "GP_HTTP_BAD_REQUEST";
 var HTTP_PAYLOAD_TOO_LARGE = "GP_HTTP_PAYLOAD_TOO_LARGE";
 var HTTP_NOT_PROVIDED = "GP_HTTP_NOT_PROVIDED";
+var HTTP_BODY_UNREAD = "GP_HTTP_BODY_UNREAD";
 var FORWARDABLE_TOOLS = new Map(
   TOOL_SPECS.filter((spec) => spec.execute === void 0).map((spec) => [spec.engineMethod, spec])
 );
@@ -3895,11 +3917,12 @@ function createHttpGateway(options) {
   const client = options.connectController !== void 0 ? options.connectController(options.socketPath) : unixSocketEngineClient(options.socketPath, { surface: "http" });
   client.onEngineNote?.((note) => report(`engine: ${note}`));
   client.onLateReply?.(({ method, result }) => {
-    report(`late engine reply to '${method}' (reply body below, raw engine content and not redacted): ${truncate(stringifyReply(result))}`);
+    report(`late engine reply to '${method}': the engine did answer, ${lateReplyBodyNote(stringifyReply(result), result?.operationId)}`);
   });
   const expectedToken = Buffer.from(options.token, "utf8");
+  const bodyReadTimeoutMs = options.bodyReadTimeoutMs ?? DEFAULT_BODY_READ_TIMEOUT_MS;
   const server = http.createServer((req, res) => {
-    handleHttp(req, res, client, expectedToken).catch((error) => {
+    handleHttp(req, res, client, expectedToken, bodyReadTimeoutMs).catch((error) => {
       fail(res, 500, GP_E_INTERNAL, `internal gateway error: ${String(error)}`, gatewayFaultAdvice());
     });
   });
@@ -3979,7 +4002,7 @@ function stringifyReply(result) {
     return String(result);
   }
 }
-async function handleHttp(req, res, client, expectedToken) {
+async function handleHttp(req, res, client, expectedToken, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   if (!authorized(req, expectedToken)) {
     fail(
       res,
@@ -3996,7 +4019,7 @@ async function handleHttp(req, res, client, expectedToken) {
     return;
   }
   const segments = url.pathname.split("/").filter((part) => part !== "");
-  await dispatch(req, res, url, segments, client);
+  await dispatch(req, res, url, segments, client, bodyReadTimeoutMs);
 }
 function parseRequestUrl(raw) {
   if (typeof raw !== "string" || raw === "") {
@@ -4008,7 +4031,7 @@ function parseRequestUrl(raw) {
     return null;
   }
 }
-async function dispatch(req, res, url, segments, client) {
+async function dispatch(req, res, url, segments, client, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   const [v1, resource, id] = segments;
   if (v1 !== "v1") {
     NotFound(res, url.pathname);
@@ -4033,11 +4056,11 @@ async function dispatch(req, res, url, segments, client) {
     }
   } else if (req.method === "POST") {
     if (resource === "tools" && segments.length === 3 && id !== void 0) {
-      await handleToolForward(id, req, client, res);
+      await handleToolForward(id, req, client, res, bodyReadTimeoutMs);
       return;
     }
     if (resource === "recipes" && id === "validate" && segments.length === 3) {
-      await handleRecipeValidate(req, res);
+      await handleRecipeValidate(req, res, bodyReadTimeoutMs);
       return;
     }
   }
@@ -4254,7 +4277,7 @@ async function handleEvidenceAggregate(url, client, res) {
     report: sections2.join("\n")
   });
 }
-async function handleToolForward(name, req, client, res) {
+async function handleToolForward(name, req, client, res, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   const spec = FORWARDABLE_TOOLS.get(name);
   if (spec === void 0) {
     fail(
@@ -4268,7 +4291,7 @@ async function handleToolForward(name, req, client, res) {
   }
   let body;
   try {
-    const text = await readBody(req, MAX_REQUEST_BODY_BYTES);
+    const text = await readBody(req, MAX_REQUEST_BODY_BYTES, bodyReadTimeoutMs);
     body = JSON.parse(text);
   } catch (error) {
     if (error instanceof HTTPPayloadTooLargeError) {
@@ -4281,6 +4304,16 @@ async function handleToolForward(name, req, client, res) {
       );
       return;
     }
+    if (error instanceof HTTPBodyUnreadError) {
+      fail(
+        res,
+        408,
+        HTTP_BODY_UNREAD,
+        `request body never completed: ${error.message}`,
+        `send the whole body in one request (Content-Length must match what you write) and retry; this gateway waits ${bodyReadTimeoutMs}ms for one body before it answers this way`
+      );
+      return;
+    }
     fail(
       res,
       400,
@@ -4334,7 +4367,7 @@ async function handleToolForward(name, req, client, res) {
         return;
       }
     }
-    ok(res, result, attribution);
+    ok(res, result, attribution, declared.dimension);
   } catch (error) {
     await failEngine(res, error, spec, engineBody(checked.value));
   }
@@ -4348,9 +4381,9 @@ function handleEvidenceStats(res) {
     "run `glasspaned --evidence-stats` against the same --state-dir this socket serves to get count/totalBytes/listFailure/dir"
   );
 }
-async function handleRecipeValidate(req, res) {
+async function handleRecipeValidate(req, res, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   try {
-    await readBody(req, MAX_REQUEST_BODY_BYTES);
+    await readBody(req, MAX_REQUEST_BODY_BYTES, bodyReadTimeoutMs);
   } catch (error) {
     if (error instanceof HTTPPayloadTooLargeError) {
       fail(
@@ -4362,6 +4395,16 @@ async function handleRecipeValidate(req, res) {
       );
       return;
     }
+    if (error instanceof HTTPBodyUnreadError) {
+      fail(
+        res,
+        408,
+        HTTP_BODY_UNREAD,
+        `request body never completed: ${error.message}`,
+        `send the whole body in one request and retry; this gateway waits ${bodyReadTimeoutMs}ms for one body before it answers this way`
+      );
+      return;
+    }
     fail(res, 400, HTTP_BAD_REQUEST, "could not read the request body", "resend the request");
     return;
   }
@@ -4394,7 +4437,7 @@ function tokenMatches(expected, received) {
   return timingSafeEqual(expectedDigest, receivedDigest);
 }
 function sha256(data) {
-  return createHash2("sha256").update(data).digest();
+  return createHash3("sha256").update(data).digest();
 }
 function parseOperationId(value) {
   if (typeof value !== "string") {
@@ -4468,8 +4511,11 @@ function makeHardFailureNote(failure, format) {
   const sentence = `incomplete: ${failure.operationId} failed with ${failure.line} \u2014 the fan-out stopped there, so the packs above are what this request read, not the whole list`;
   return format === "html" ? `<p class="gp-incomplete">${escapeHTML(sentence)}</p>` : `> ${sentence}`;
 }
-function ok(res, result, attribution) {
-  writeJson(res, 200, attribution === void 0 ? { ok: true, result } : { ok: true, result, attribution });
+function ok(res, result, attribution, dimension) {
+  const body = { ok: true, result };
+  if (attribution !== void 0) body.attribution = attribution;
+  if (dimension !== void 0) body.dimension = dimensionAttributionLine(dimension);
+  writeJson(res, 200, body);
 }
 function fail(res, status, code, message, remedy) {
   writeJson(res, status, { ok: false, error: { code, message: forHttpCaller(message), remedy: forHttpCaller(remedy) } });
@@ -4601,22 +4647,50 @@ var HTTPPayloadTooLargeError = class extends Error {
     this.name = "HTTPPayloadTooLargeError";
   }
 };
-function readBody(req, limit) {
+var HTTPBodyUnreadError = class extends Error {
+  constructor(reason, timeoutMs) {
+    super(`request body did not arrive (${reason}; ceiling ${timeoutMs}ms)`);
+    this.name = "HTTPBodyUnreadError";
+  }
+};
+var DEFAULT_BODY_READ_TIMEOUT_MS = 15e3;
+function readBody(req, limit, timeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   return new Promise((resolve, reject) => {
     let size = 0;
     const chunks = [];
+    let settled = false;
+    const finish = (action) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      action();
+    };
+    const timer = setTimeout(() => {
+      finish(() => {
+        chunks.length = 0;
+        req.pause();
+        reject(new HTTPBodyUnreadError("no complete body within the read ceiling", timeoutMs));
+      });
+    }, timeoutMs);
+    timer.unref?.();
     req.on("data", (chunk) => {
       size += chunk.length;
       if (size > limit) {
-        chunks.length = 0;
-        req.pause();
-        reject(new HTTPPayloadTooLargeError(limit));
+        finish(() => {
+          chunks.length = 0;
+          req.pause();
+          reject(new HTTPPayloadTooLargeError(limit));
+        });
         return;
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
-    req.on("error", (error) => reject(error));
+    req.on("end", () => finish(() => resolve(Buffer.concat(chunks).toString("utf8"))));
+    req.on("close", () => finish(() => {
+      chunks.length = 0;
+      reject(new HTTPBodyUnreadError("the connection closed before the body ended", timeoutMs));
+    }));
+    req.on("error", (error) => finish(() => reject(error)));
   });
 }
 

package/dist/http-gateway.d.ts

@@ -109,6 +109,16 @@ export interface HttpGatewayOptions {
      * stderr* — a promise that has to have a writer behind it (R8-高3).
      */
     report?: (note: string) => void;
+    /**
+     * Ceiling on how long one request body may take to arrive (finding B1,
+     * 2026-10-27). `readBody` had a byte cap and no *time* cap, and the server set
+     * no `requestTimeout`, so a caller that sent headers and then stalled the body
+     * held a handler open until Node's own default fired and destroyed the socket —
+     * which answers the caller with an unstructured `ECONNRESET`, the exact shape
+     * this file already refuses for oversized bodies. Tests may shorten it; it is
+     * never allowed to be absent.
+     */
+    bodyReadTimeoutMs?: number;
 }
 export interface HttpGateway {
     /**
@@ -152,4 +162,6 @@ export declare function isLoopbackHost(value: string): boolean;
 export declare function assertLoopbackHost(host: string): string;
 /** Refuse an empty token, and one too short or too uniform to be a credential. */
 export declare function assertTokenPolicy(token: string): void;
+/** How long one request body may take, when the caller did not choose (see {@link HttpGatewayOptions.bodyReadTimeoutMs}). */
+export declare const DEFAULT_BODY_READ_TIMEOUT_MS = 15000;
 //# sourceMappingURL=http-gateway.d.ts.map

package/dist/http-gateway.js

@@ -1,6 +1,6 @@
 // src/http-gateway.ts
 import http from "node:http";
-import { createHash as createHash2, timingSafeEqual } from "node:crypto";
+import { createHash as createHash3, timingSafeEqual } from "node:crypto";
 import { isIP } from "node:net";
 import { URL } from "node:url";
 
@@ -8,6 +8,7 @@ import { URL } from "node:url";
 import net from "node:net";
 import path from "node:path";
 import fs from "node:fs";
+import { createHash } from "node:crypto";
 import { fileURLToPath } from "node:url";
 
 // src/io.ts
@@ -752,9 +753,9 @@ var EngineJsonRpcClient = class {
       );
       return;
     }
-    const bodyBytes = Buffer.byteLength(jsonOrString(frame.result), "utf8");
+    const bodyJson = jsonOrString(frame.result);
     this.report(
-      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, with a ${bodyBytes}-byte body that is raw engine content (an accessibility tree whose title/value fields are on-screen data), so its text is not written to this log${byOrder}`
+      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, ${lateReplyBodyNote(bodyJson, operationIdOf(frame.result))}${byOrder}`
     );
     if (frame.result === void 0) {
       return;
@@ -909,6 +910,13 @@ function attribute(error, entry, inferred = true) {
 function truncate(text) {
   return text.length <= LOG_BODY_CHARS ? text : `${text.slice(0, LOG_BODY_CHARS)}\u2026 [+${text.length - LOG_BODY_CHARS} chars not logged]`;
 }
+var ARCHIVE_OPERATION_ID = /^op_[0-9A-HJKMNP-TV-Z]{26}$/;
+function lateReplyBodyNote(serializedBody, operationId) {
+  const bytes = Buffer.byteLength(serializedBody, "utf8");
+  const digest = createHash("sha256").update(serializedBody, "utf8").digest("hex").slice(0, 12);
+  const named2 = typeof operationId === "string" && ARCHIVE_OPERATION_ID.test(operationId) ? `, for ${operationId}` : "";
+  return `with a ${bytes}-byte body (sha256 ${digest})${named2} that is on-screen accessibility content \u2014 element titles and values, sometimes a document's text \u2014 so its text is not written to this log; the reply itself is in the daemon's evidence archive under the state root, read it back with gp_last_evidence {operationId} or gp_export_evidence {operationId}`;
+}
 function nonBlankOr(value, fallback) {
   if (value === void 0 || value === null) {
     return fallback;
@@ -919,6 +927,9 @@ function nonBlankOr(value, fallback) {
 function jsonOrString(value) {
   return String(JSON.stringify(value));
 }
+function operationIdOf(result) {
+  return typeof result === "object" && result !== null ? result.operationId : void 0;
+}
 var ReconnectingSocketIo = class {
   constructor(socketPath, open) {
     this.socketPath = socketPath;
@@ -1086,6 +1097,9 @@ function engineBody(params) {
   const { dimension: _dimension, ...rest } = params;
   return rest;
 }
+function dimensionAttributionLine(dimension) {
+  return `dimension: ${dimension} | declared by this call; this shell records no decision, so the ledger gains an attribution only where a decision is written for this operation`;
+}
 
 // src/evidence-report.ts
 var PLACEHOLDER = "\u2014";
@@ -1953,14 +1967,21 @@ function attributeCapability(engineMethod, query = {}) {
     };
   } catch (error) {
     if (error instanceof KernelProviderError) {
-      return { status: "refused", error: { code: error.code, message: error.message, remedy: error.remedy } };
+      return {
+        status: "refused",
+        error: {
+          code: GP_E_INTERNAL,
+          message: `provider registration refused (${error.code}): ${error.message}`,
+          remedy: error.remedy
+        }
+      };
     }
     if (error instanceof KernelSchemaError) {
       return {
         status: "refused",
         error: {
-          code: error.code,
-          message: `${error.message} \u2014 the kernel refused a registration this product writes itself, built with the version from ${registrationVersionSource(measured, usable(own))}`,
+          code: GP_E_INTERNAL,
+          message: `the kernel refused a registration this product writes itself (${error.code}): ${error.message} \u2014 built with the version from ${registrationVersionSource(measured, usable(own))}`,
           remedy: "fix shellProviderDrafts in mcp-shell/src/providers.ts; it is the contract both harnesses read, so it cannot be relaxed at a call site \u2014 run node scripts/check-kernel-corpus.mjs and compare against kernel/fixtures/provider-registration.ok-01.json"
         }
       };
@@ -2011,7 +2032,7 @@ var TRAIL_PROVENANCE_NOTES = {
 import fs3 from "node:fs";
 import os from "node:os";
 import path3 from "node:path";
-import { createHash, randomBytes } from "node:crypto";
+import { createHash as createHash2, randomBytes } from "node:crypto";
 import { z as z9 } from "zod";
 var CROCKFORD_BODY_RE = "[0-9A-HJKMNP-TV-Z]{26}";
 var PROJECT_ID_RE = new RegExp(`^prj_${CROCKFORD_BODY_RE}$`);
@@ -2315,7 +2336,7 @@ function registryDigest(filePath) {
   return registryBytesDigest(bytes);
 }
 function registryBytesDigest(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
+  return createHash2("sha256").update(bytes).digest("hex");
 }
 function registryDriftReason(filePath, openedAs, now) {
   if (now === openedAs) {
@@ -3794,6 +3815,7 @@ var HTTP_NOT_FOUND = "GP_HTTP_NOT_FOUND";
 var HTTP_BAD_REQUEST = "GP_HTTP_BAD_REQUEST";
 var HTTP_PAYLOAD_TOO_LARGE = "GP_HTTP_PAYLOAD_TOO_LARGE";
 var HTTP_NOT_PROVIDED = "GP_HTTP_NOT_PROVIDED";
+var HTTP_BODY_UNREAD = "GP_HTTP_BODY_UNREAD";
 var FORWARDABLE_TOOLS = new Map(
   TOOL_SPECS.filter((spec) => spec.execute === void 0).map((spec) => [spec.engineMethod, spec])
 );
@@ -3841,11 +3863,12 @@ function createHttpGateway(options) {
   const client = options.connectController !== void 0 ? options.connectController(options.socketPath) : unixSocketEngineClient(options.socketPath, { surface: "http" });
   client.onEngineNote?.((note) => report(`engine: ${note}`));
   client.onLateReply?.(({ method, result }) => {
-    report(`late engine reply to '${method}' (reply body below, raw engine content and not redacted): ${truncate(stringifyReply(result))}`);
+    report(`late engine reply to '${method}': the engine did answer, ${lateReplyBodyNote(stringifyReply(result), result?.operationId)}`);
   });
   const expectedToken = Buffer.from(options.token, "utf8");
+  const bodyReadTimeoutMs = options.bodyReadTimeoutMs ?? DEFAULT_BODY_READ_TIMEOUT_MS;
   const server = http.createServer((req, res) => {
-    handleHttp(req, res, client, expectedToken).catch((error) => {
+    handleHttp(req, res, client, expectedToken, bodyReadTimeoutMs).catch((error) => {
       fail(res, 500, GP_E_INTERNAL, `internal gateway error: ${String(error)}`, gatewayFaultAdvice());
     });
   });
@@ -3925,7 +3948,7 @@ function stringifyReply(result) {
     return String(result);
   }
 }
-async function handleHttp(req, res, client, expectedToken) {
+async function handleHttp(req, res, client, expectedToken, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   if (!authorized(req, expectedToken)) {
     fail(
       res,
@@ -3942,7 +3965,7 @@ async function handleHttp(req, res, client, expectedToken) {
     return;
   }
   const segments = url.pathname.split("/").filter((part) => part !== "");
-  await dispatch(req, res, url, segments, client);
+  await dispatch(req, res, url, segments, client, bodyReadTimeoutMs);
 }
 function parseRequestUrl(raw) {
   if (typeof raw !== "string" || raw === "") {
@@ -3954,7 +3977,7 @@ function parseRequestUrl(raw) {
     return null;
   }
 }
-async function dispatch(req, res, url, segments, client) {
+async function dispatch(req, res, url, segments, client, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   const [v1, resource, id] = segments;
   if (v1 !== "v1") {
     NotFound(res, url.pathname);
@@ -3979,11 +4002,11 @@ async function dispatch(req, res, url, segments, client) {
     }
   } else if (req.method === "POST") {
     if (resource === "tools" && segments.length === 3 && id !== void 0) {
-      await handleToolForward(id, req, client, res);
+      await handleToolForward(id, req, client, res, bodyReadTimeoutMs);
       return;
     }
     if (resource === "recipes" && id === "validate" && segments.length === 3) {
-      await handleRecipeValidate(req, res);
+      await handleRecipeValidate(req, res, bodyReadTimeoutMs);
       return;
     }
   }
@@ -4200,7 +4223,7 @@ async function handleEvidenceAggregate(url, client, res) {
     report: sections2.join("\n")
   });
 }
-async function handleToolForward(name, req, client, res) {
+async function handleToolForward(name, req, client, res, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   const spec = FORWARDABLE_TOOLS.get(name);
   if (spec === void 0) {
     fail(
@@ -4214,7 +4237,7 @@ async function handleToolForward(name, req, client, res) {
   }
   let body;
   try {
-    const text = await readBody(req, MAX_REQUEST_BODY_BYTES);
+    const text = await readBody(req, MAX_REQUEST_BODY_BYTES, bodyReadTimeoutMs);
     body = JSON.parse(text);
   } catch (error) {
     if (error instanceof HTTPPayloadTooLargeError) {
@@ -4227,6 +4250,16 @@ async function handleToolForward(name, req, client, res) {
       );
       return;
     }
+    if (error instanceof HTTPBodyUnreadError) {
+      fail(
+        res,
+        408,
+        HTTP_BODY_UNREAD,
+        `request body never completed: ${error.message}`,
+        `send the whole body in one request (Content-Length must match what you write) and retry; this gateway waits ${bodyReadTimeoutMs}ms for one body before it answers this way`
+      );
+      return;
+    }
     fail(
       res,
       400,
@@ -4280,7 +4313,7 @@ async function handleToolForward(name, req, client, res) {
         return;
       }
     }
-    ok(res, result, attribution);
+    ok(res, result, attribution, declared.dimension);
   } catch (error) {
     await failEngine(res, error, spec, engineBody(checked.value));
   }
@@ -4294,9 +4327,9 @@ function handleEvidenceStats(res) {
     "run `glasspaned --evidence-stats` against the same --state-dir this socket serves to get count/totalBytes/listFailure/dir"
   );
 }
-async function handleRecipeValidate(req, res) {
+async function handleRecipeValidate(req, res, bodyReadTimeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   try {
-    await readBody(req, MAX_REQUEST_BODY_BYTES);
+    await readBody(req, MAX_REQUEST_BODY_BYTES, bodyReadTimeoutMs);
   } catch (error) {
     if (error instanceof HTTPPayloadTooLargeError) {
       fail(
@@ -4308,6 +4341,16 @@ async function handleRecipeValidate(req, res) {
       );
       return;
     }
+    if (error instanceof HTTPBodyUnreadError) {
+      fail(
+        res,
+        408,
+        HTTP_BODY_UNREAD,
+        `request body never completed: ${error.message}`,
+        `send the whole body in one request and retry; this gateway waits ${bodyReadTimeoutMs}ms for one body before it answers this way`
+      );
+      return;
+    }
     fail(res, 400, HTTP_BAD_REQUEST, "could not read the request body", "resend the request");
     return;
   }
@@ -4340,7 +4383,7 @@ function tokenMatches(expected, received) {
   return timingSafeEqual(expectedDigest, receivedDigest);
 }
 function sha256(data) {
-  return createHash2("sha256").update(data).digest();
+  return createHash3("sha256").update(data).digest();
 }
 function parseOperationId(value) {
   if (typeof value !== "string") {
@@ -4414,8 +4457,11 @@ function makeHardFailureNote(failure, format) {
   const sentence = `incomplete: ${failure.operationId} failed with ${failure.line} \u2014 the fan-out stopped there, so the packs above are what this request read, not the whole list`;
   return format === "html" ? `<p class="gp-incomplete">${escapeHTML(sentence)}</p>` : `> ${sentence}`;
 }
-function ok(res, result, attribution) {
-  writeJson(res, 200, attribution === void 0 ? { ok: true, result } : { ok: true, result, attribution });
+function ok(res, result, attribution, dimension) {
+  const body = { ok: true, result };
+  if (attribution !== void 0) body.attribution = attribution;
+  if (dimension !== void 0) body.dimension = dimensionAttributionLine(dimension);
+  writeJson(res, 200, body);
 }
 function fail(res, status, code, message, remedy) {
   writeJson(res, status, { ok: false, error: { code, message: forHttpCaller(message), remedy: forHttpCaller(remedy) } });
@@ -4547,25 +4593,54 @@ var HTTPPayloadTooLargeError = class extends Error {
     this.name = "HTTPPayloadTooLargeError";
   }
 };
-function readBody(req, limit) {
+var HTTPBodyUnreadError = class extends Error {
+  constructor(reason, timeoutMs) {
+    super(`request body did not arrive (${reason}; ceiling ${timeoutMs}ms)`);
+    this.name = "HTTPBodyUnreadError";
+  }
+};
+var DEFAULT_BODY_READ_TIMEOUT_MS = 15e3;
+function readBody(req, limit, timeoutMs = DEFAULT_BODY_READ_TIMEOUT_MS) {
   return new Promise((resolve, reject) => {
     let size = 0;
     const chunks = [];
+    let settled = false;
+    const finish = (action) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      action();
+    };
+    const timer = setTimeout(() => {
+      finish(() => {
+        chunks.length = 0;
+        req.pause();
+        reject(new HTTPBodyUnreadError("no complete body within the read ceiling", timeoutMs));
+      });
+    }, timeoutMs);
+    timer.unref?.();
     req.on("data", (chunk) => {
       size += chunk.length;
       if (size > limit) {
-        chunks.length = 0;
-        req.pause();
-        reject(new HTTPPayloadTooLargeError(limit));
+        finish(() => {
+          chunks.length = 0;
+          req.pause();
+          reject(new HTTPPayloadTooLargeError(limit));
+        });
         return;
       }
       chunks.push(chunk);
     });
-    req.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
-    req.on("error", (error) => reject(error));
+    req.on("end", () => finish(() => resolve(Buffer.concat(chunks).toString("utf8"))));
+    req.on("close", () => finish(() => {
+      chunks.length = 0;
+      reject(new HTTPBodyUnreadError("the connection closed before the body ended", timeoutMs));
+    }));
+    req.on("error", (error) => finish(() => reject(error)));
   });
 }
 export {
+  DEFAULT_BODY_READ_TIMEOUT_MS,
   DEFAULT_GATEWAY_HOST,
   DEFAULT_GATEWAY_PORT,
   EVIDENCE_FANOUT_BUDGET_MS,

package/dist/index.js

@@ -769,14 +769,21 @@ function attributeCapability(engineMethod, query = {}) {
     };
   } catch (error) {
     if (error instanceof KernelProviderError) {
-      return { status: "refused", error: { code: error.code, message: error.message, remedy: error.remedy } };
+      return {
+        status: "refused",
+        error: {
+          code: GP_E_INTERNAL,
+          message: `provider registration refused (${error.code}): ${error.message}`,
+          remedy: error.remedy
+        }
+      };
     }
     if (error instanceof KernelSchemaError) {
       return {
         status: "refused",
         error: {
-          code: error.code,
-          message: `${error.message} \u2014 the kernel refused a registration this product writes itself, built with the version from ${registrationVersionSource(measured, usable(own))}`,
+          code: GP_E_INTERNAL,
+          message: `the kernel refused a registration this product writes itself (${error.code}): ${error.message} \u2014 built with the version from ${registrationVersionSource(measured, usable(own))}`,
           remedy: "fix shellProviderDrafts in mcp-shell/src/providers.ts; it is the contract both harnesses read, so it cannot be relaxed at a call site \u2014 run node scripts/check-kernel-corpus.mjs and compare against kernel/fixtures/provider-registration.ok-01.json"
         }
       };
@@ -1449,6 +1456,7 @@ import net from "node:net";
 import os2 from "node:os";
 import path3 from "node:path";
 import fs4 from "node:fs";
+import { createHash } from "node:crypto";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function daemonRestoreCommand() {
   const here = path3.dirname(fileURLToPath3(import.meta.url));
@@ -2053,9 +2061,9 @@ var EngineJsonRpcClient = class {
       );
       return;
     }
-    const bodyBytes = Buffer.byteLength(jsonOrString(frame.result), "utf8");
+    const bodyJson = jsonOrString(frame.result);
     this.report(
-      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, with a ${bodyBytes}-byte body that is raw engine content (an accessibility tree whose title/value fields are on-screen data), so its text is not written to this log${byOrder}`
+      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, ${lateReplyBodyNote(bodyJson, operationIdOf(frame.result))}${byOrder}`
     );
     if (frame.result === void 0) {
       return;
@@ -2210,6 +2218,13 @@ function attribute(error, entry, inferred = true) {
 function truncate(text) {
   return text.length <= LOG_BODY_CHARS ? text : `${text.slice(0, LOG_BODY_CHARS)}\u2026 [+${text.length - LOG_BODY_CHARS} chars not logged]`;
 }
+var ARCHIVE_OPERATION_ID = /^op_[0-9A-HJKMNP-TV-Z]{26}$/;
+function lateReplyBodyNote(serializedBody, operationId) {
+  const bytes = Buffer.byteLength(serializedBody, "utf8");
+  const digest = createHash("sha256").update(serializedBody, "utf8").digest("hex").slice(0, 12);
+  const named2 = typeof operationId === "string" && ARCHIVE_OPERATION_ID.test(operationId) ? `, for ${operationId}` : "";
+  return `with a ${bytes}-byte body (sha256 ${digest})${named2} that is on-screen accessibility content \u2014 element titles and values, sometimes a document's text \u2014 so its text is not written to this log; the reply itself is in the daemon's evidence archive under the state root, read it back with gp_last_evidence {operationId} or gp_export_evidence {operationId}`;
+}
 function nonBlankOr(value, fallback) {
   if (value === void 0 || value === null) {
     return fallback;
@@ -2220,6 +2235,9 @@ function nonBlankOr(value, fallback) {
 function jsonOrString(value) {
   return String(JSON.stringify(value));
 }
+function operationIdOf(result) {
+  return typeof result === "object" && result !== null ? result.operationId : void 0;
+}
 var ReconnectingSocketIo = class {
   constructor(socketPath, open) {
     this.socketPath = socketPath;
@@ -2764,7 +2782,7 @@ function exponentialFromDigits(digits, power) {
 import fs5 from "node:fs";
 import os3 from "node:os";
 import path4 from "node:path";
-import { createHash, randomBytes } from "node:crypto";
+import { createHash as createHash2, randomBytes } from "node:crypto";
 import { z as z9 } from "zod";
 var CROCKFORD_BODY_RE = "[0-9A-HJKMNP-TV-Z]{26}";
 var PROJECT_ID_RE = new RegExp(`^prj_${CROCKFORD_BODY_RE}$`);
@@ -3068,7 +3086,7 @@ function registryDigest(filePath) {
   return registryBytesDigest(bytes);
 }
 function registryBytesDigest(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
+  return createHash2("sha256").update(bytes).digest("hex");
 }
 function registryDriftReason(filePath, openedAs, now) {
   if (now === openedAs) {
@@ -4819,7 +4837,7 @@ var SUPPORTED_PROTOCOL_VERSIONS = [
   "2025-03-26",
   MCP_PROTOCOL_VERSION
 ];
-var SERVER_INFO = { name: "glasspane-mcp", version: "1.22.0" };
+var SERVER_INFO = { name: "glasspane-mcp", version: "1.24.0" };
 var PARSE_ERROR = -32700;
 var INVALID_REQUEST = -32600;
 var METHOD_NOT_FOUND = -32601;

package/dist/stdio-session.js

@@ -764,14 +764,21 @@ function attributeCapability(engineMethod, query = {}) {
     };
   } catch (error) {
     if (error instanceof KernelProviderError) {
-      return { status: "refused", error: { code: error.code, message: error.message, remedy: error.remedy } };
+      return {
+        status: "refused",
+        error: {
+          code: GP_E_INTERNAL,
+          message: `provider registration refused (${error.code}): ${error.message}`,
+          remedy: error.remedy
+        }
+      };
     }
     if (error instanceof KernelSchemaError) {
       return {
         status: "refused",
         error: {
-          code: error.code,
-          message: `${error.message} \u2014 the kernel refused a registration this product writes itself, built with the version from ${registrationVersionSource(measured, usable(own))}`,
+          code: GP_E_INTERNAL,
+          message: `the kernel refused a registration this product writes itself (${error.code}): ${error.message} \u2014 built with the version from ${registrationVersionSource(measured, usable(own))}`,
           remedy: "fix shellProviderDrafts in mcp-shell/src/providers.ts; it is the contract both harnesses read, so it cannot be relaxed at a call site \u2014 run node scripts/check-kernel-corpus.mjs and compare against kernel/fixtures/provider-registration.ok-01.json"
         }
       };
@@ -1444,6 +1451,7 @@ import net from "node:net";
 import os2 from "node:os";
 import path3 from "node:path";
 import fs4 from "node:fs";
+import { createHash } from "node:crypto";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 function daemonRestoreCommand() {
   const here = path3.dirname(fileURLToPath3(import.meta.url));
@@ -2048,9 +2056,9 @@ var EngineJsonRpcClient = class {
       );
       return;
     }
-    const bodyBytes = Buffer.byteLength(jsonOrString(frame.result), "utf8");
+    const bodyJson = jsonOrString(frame.result);
     this.report(
-      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, with a ${bodyBytes}-byte body that is raw engine content (an accessibility tree whose title/value fields are on-screen data), so its text is not written to this log${byOrder}`
+      `late engine reply for '${entry.method}' (id ${entry.id}), ${entry.deadlineMs}ms deadline already reported: the engine did answer, ${lateReplyBodyNote(bodyJson, operationIdOf(frame.result))}${byOrder}`
     );
     if (frame.result === void 0) {
       return;
@@ -2205,6 +2213,13 @@ function attribute(error, entry, inferred = true) {
 function truncate(text) {
   return text.length <= LOG_BODY_CHARS ? text : `${text.slice(0, LOG_BODY_CHARS)}\u2026 [+${text.length - LOG_BODY_CHARS} chars not logged]`;
 }
+var ARCHIVE_OPERATION_ID = /^op_[0-9A-HJKMNP-TV-Z]{26}$/;
+function lateReplyBodyNote(serializedBody, operationId) {
+  const bytes = Buffer.byteLength(serializedBody, "utf8");
+  const digest = createHash("sha256").update(serializedBody, "utf8").digest("hex").slice(0, 12);
+  const named2 = typeof operationId === "string" && ARCHIVE_OPERATION_ID.test(operationId) ? `, for ${operationId}` : "";
+  return `with a ${bytes}-byte body (sha256 ${digest})${named2} that is on-screen accessibility content \u2014 element titles and values, sometimes a document's text \u2014 so its text is not written to this log; the reply itself is in the daemon's evidence archive under the state root, read it back with gp_last_evidence {operationId} or gp_export_evidence {operationId}`;
+}
 function nonBlankOr(value, fallback) {
   if (value === void 0 || value === null) {
     return fallback;
@@ -2215,6 +2230,9 @@ function nonBlankOr(value, fallback) {
 function jsonOrString(value) {
   return String(JSON.stringify(value));
 }
+function operationIdOf(result) {
+  return typeof result === "object" && result !== null ? result.operationId : void 0;
+}
 var ReconnectingSocketIo = class {
   constructor(socketPath, open) {
     this.socketPath = socketPath;
@@ -2759,7 +2777,7 @@ function exponentialFromDigits(digits, power) {
 import fs5 from "node:fs";
 import os3 from "node:os";
 import path4 from "node:path";
-import { createHash, randomBytes } from "node:crypto";
+import { createHash as createHash2, randomBytes } from "node:crypto";
 import { z as z9 } from "zod";
 var CROCKFORD_BODY_RE = "[0-9A-HJKMNP-TV-Z]{26}";
 var PROJECT_ID_RE = new RegExp(`^prj_${CROCKFORD_BODY_RE}$`);
@@ -3063,7 +3081,7 @@ function registryDigest(filePath) {
   return registryBytesDigest(bytes);
 }
 function registryBytesDigest(bytes) {
-  return createHash("sha256").update(bytes).digest("hex");
+  return createHash2("sha256").update(bytes).digest("hex");
 }
 function registryDriftReason(filePath, openedAs, now) {
   if (now === openedAs) {
@@ -4814,7 +4832,7 @@ var SUPPORTED_PROTOCOL_VERSIONS = [
   "2025-03-26",
   MCP_PROTOCOL_VERSION
 ];
-var SERVER_INFO = { name: "glasspane-mcp", version: "1.22.0" };
+var SERVER_INFO = { name: "glasspane-mcp", version: "1.24.0" };
 var PARSE_ERROR = -32700;
 var INVALID_REQUEST = -32600;
 var METHOD_NOT_FOUND = -32601;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "glasspane-mcp",
-  "version": "1.22.0",
+  "version": "1.24.0",
   "description": "GlassPane MCP stdio shell: JSON-RPC 2.0 over stdio bridging an AI agent to the glasspane engine daemon",
   "type": "module",
   "main": "./dist/index.js",