kassinao-mcp 1.0.4 → 1.0.5

package/README.md

@@ -16,7 +16,7 @@ The connector runs **on your machine** and is a **thin** HTTP client: it does **
 
 - **The bot admin must have enabled MCP** (`MCP_SECRET` set on the server). Without it, `/app/conectar-ia` and `/mcp` don't exist (404 / missing command).
 - **Node.js 20+** on your machine.
-- **The connector.** `npx -y kassinao-mcp@1.0.4` downloads and runs the pinned published release — nothing to install manually (you just need Node). Prefer running from source? `git clone` the repo, `cd mcp && npm ci --userconfig ../.npmrc.security && npm run build`; in the config, replace `"command": "npx"` / `"args": ["-y","kassinao-mcp@1.0.4"]` with `"command": "node"`, `"args": ["/absolute/path/to/repo/mcp/dist/index.js"]`.
+- **The connector.** `npx -y kassinao-mcp@1.0.5` downloads and runs the pinned published release — nothing to install manually (you just need Node). Prefer running from source? `git clone` the repo, `cd mcp && npm ci --userconfig ../.npmrc.security && npm run build`; in the config, replace `"command": "npx"` / `"args": ["-y","kassinao-mcp@1.0.5"]` with `"command": "node"`, `"args": ["/absolute/path/to/repo/mcp/dist/index.js"]`.
 
 ## Setup
 
@@ -31,7 +31,7 @@ The connector runs **on your machine** and is a **thin** HTTP client: it does **
   "mcpServers": {
     "kassinao": {
       "command": "npx",
-      "args": ["-y", "kassinao-mcp@1.0.4"],
+      "args": ["-y", "kassinao-mcp@1.0.5"],
       "env": {
         "KASSINAO_URL": "https://mcp.kassinao.cloud",
         "KASSINAO_PROFILE": "PROFILE_PRINTED_BY_THE_COMMAND"
@@ -50,7 +50,7 @@ For a self-hosted instance, open `APP_URL/app/conectar-ia`; the generated comman
 On Discord, the owner runs **`/mcp new`** (shown as **`/mcp novo`** on pt-BR clients) — ephemeral reply with a single-use code valid for ~5 min. Then:
 
 ```bash
-npx -y kassinao-mcp@1.0.4 exchange --stdin --url https://mcp.kassinao.cloud
+npx -y kassinao-mcp@1.0.5 exchange --stdin --url https://mcp.kassinao.cloud
 ```
 
 Paste the one-time code when prompted. Input is hidden so the code does not enter shell history or process arguments. The command stores the token locally and prints a copy-ready config containing a non-secret `KASSINAO_PROFILE` id. Use that block as printed; it selects this connection's own token file without placing the refresh token in your client config. Replace the URL with your instance's `MCP_URL` when self-hosting.

package/dist/apiResponse.js

@@ -1,13 +1,48 @@
+const DEFAULT_MAX_JSON_BYTES = 32 * 1024 * 1024;
 /**
  * Parses a successful API response without ever copying an upstream response
- * body into an MCP-visible error. Meeting content may itself be adversarial.
+ * body into an MCP-visible error. The stream is bounded before concatenation or
+ * JSON.parse so a hostile origin cannot turn a small token response into OOM.
  */
-export async function readApiJson(response) {
+export async function readApiJson(response, maxBytes = DEFAULT_MAX_JSON_BYTES) {
     if (!response.ok) {
         throw new Error(`Kassinão request failed (HTTP ${response.status}). Try again in a moment.`);
     }
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) {
+        throw new Error('Kassinão returned an invalid JSON response.');
+    }
     try {
-        return await response.json();
+        const declaredLength = Number(response.headers.get('content-length'));
+        if (Number.isFinite(declaredLength) && declaredLength > maxBytes)
+            throw new Error('oversized');
+        if (!response.body)
+            return JSON.parse(await response.text());
+        const reader = response.body.getReader();
+        const chunks = [];
+        let total = 0;
+        try {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                total += value.byteLength;
+                if (total > maxBytes) {
+                    await reader.cancel();
+                    throw new Error('oversized');
+                }
+                chunks.push(value);
+            }
+        }
+        finally {
+            reader.releaseLock();
+        }
+        const payload = new Uint8Array(total);
+        let offset = 0;
+        for (const chunk of chunks) {
+            payload.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        return JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(payload));
     }
     catch {
         throw new Error('Kassinão returned an invalid JSON response.');

package/dist/credentialRefresh.js

@@ -1,6 +1,9 @@
 import crypto from 'node:crypto';
 import { withCredentialStoreLock } from './credentialLock.js';
 import { selectBootstrapRefreshToken } from './tokenAuth.js';
+const MAX_ACCESS_TOKEN_CHARS = 8_192;
+const MAX_REFRESH_TOKEN_CHARS = 4_096;
+const MAX_EXPIRY_CHARS = 64;
 export function parseCredentialTokenResponse(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value)) {
         throw new Error('Kassinão returned an invalid token response.');
@@ -8,9 +11,13 @@ export function parseCredentialTokenResponse(value) {
     const response = value;
     if (typeof response.access_token !== 'string' ||
         response.access_token.length === 0 ||
+        response.access_token.length > MAX_ACCESS_TOKEN_CHARS ||
         typeof response.refresh_token !== 'string' ||
         response.refresh_token.length === 0 ||
+        response.refresh_token.length > MAX_REFRESH_TOKEN_CHARS ||
         typeof response.access_expires_at !== 'string' ||
+        response.access_expires_at.length === 0 ||
+        response.access_expires_at.length > MAX_EXPIRY_CHARS ||
         !Number.isFinite(Date.parse(response.access_expires_at))) {
         throw new Error('Kassinão returned an invalid token response.');
     }

package/dist/credentialStore.js

@@ -1,6 +1,9 @@
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
+const MAX_CREDENTIAL_STORE_BYTES = 64 * 1024;
+const MAX_STORED_URL_CHARS = 2_048;
+const MAX_STORED_REFRESH_TOKEN_CHARS = 4_096;
 function parseCredentials(raw) {
     try {
         const parsed = JSON.parse(raw);
@@ -8,8 +11,10 @@ function parseCredentials(raw) {
             return {};
         const value = parsed;
         return {
-            url: typeof value.url === 'string' ? value.url : undefined,
-            refreshToken: typeof value.refreshToken === 'string' ? value.refreshToken : undefined,
+            url: typeof value.url === 'string' && value.url.length <= MAX_STORED_URL_CHARS ? value.url : undefined,
+            refreshToken: typeof value.refreshToken === 'string' && value.refreshToken.length <= MAX_STORED_REFRESH_TOKEN_CHARS
+                ? value.refreshToken
+                : undefined,
             refreshAttempt: typeof value.refreshAttempt === 'string' && /^[a-f0-9]{32}$/.test(value.refreshAttempt)
                 ? value.refreshAttempt
                 : undefined,
@@ -73,6 +78,8 @@ export function loadCredentialStore(directory, file) {
         if (!openedStats.isFile())
             throw unsafeStore('the token path is not a regular file.');
         assertOwnedByCurrentUser(openedStats, 'the token file');
+        if (openedStats.size > MAX_CREDENTIAL_STORE_BYTES)
+            throw unsafeStore('the token file is too large.');
         if (process.platform !== 'win32')
             fs.fchmodSync(fd, 0o600);
         return parseCredentials(fs.readFileSync(fd, 'utf8'));
@@ -84,6 +91,10 @@ export function loadCredentialStore(directory, file) {
 /** Grava o cofre por rename atômico e só retorna depois de fsync no arquivo/diretório. */
 export function saveCredentialStore(directory, file, credentials) {
     protectDirectory(directory);
+    const payload = JSON.stringify(credentials);
+    if (Buffer.byteLength(payload, 'utf8') > MAX_CREDENTIAL_STORE_BYTES) {
+        throw unsafeStore('the token payload is too large.');
+    }
     const temporary = `${file}.${process.pid}.${crypto.randomBytes(8).toString('hex')}.tmp`;
     const noFollow = process.platform === 'win32' ? 0 : fs.constants.O_NOFOLLOW;
     try {
@@ -91,7 +102,7 @@ export function saveCredentialStore(directory, file, credentials) {
         try {
             if (process.platform !== 'win32')
                 fs.fchmodSync(fd, 0o600);
-            fs.writeFileSync(fd, JSON.stringify(credentials));
+            fs.writeFileSync(fd, payload);
             fs.fsyncSync(fd);
         }
         finally {

package/dist/http.js

@@ -0,0 +1,64 @@
+export const DEFAULT_HTTP_TIMEOUT_MS = 20_000;
+function abortReason(signal) {
+    if (signal.reason instanceof Error && signal.reason.name === 'TimeoutError') {
+        const error = new Error('Kassinão request timed out. Try again in a moment.');
+        error.name = 'TimeoutError';
+        return error;
+    }
+    if (signal.reason instanceof Error)
+        return signal.reason;
+    const error = new Error('Kassinão request was cancelled.');
+    error.name = 'AbortError';
+    return error;
+}
+function waitWithSignal(operation, signal) {
+    if (signal.aborted) {
+        void Promise.resolve(operation).catch(() => undefined);
+        return Promise.reject(abortReason(signal));
+    }
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(abortReason(signal));
+        signal.addEventListener('abort', onAbort, { once: true });
+        Promise.resolve(operation).then((value) => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(value);
+        }, (error) => {
+            signal.removeEventListener('abort', onAbort);
+            reject(error);
+        });
+    });
+}
+/**
+ * Nunca permite redirects nem espera indefinida. O consumidor precisa terminar
+ * de ler o body dentro do callback, para o mesmo deadline cobrir headers + body.
+ */
+export async function strictFetch(input, init, consume) {
+    const explicitSignal = init.signal ?? undefined;
+    const controller = new AbortController();
+    const signal = controller.signal;
+    const forwardExplicitAbort = () => controller.abort(explicitSignal?.reason);
+    let response;
+    if (explicitSignal?.aborted)
+        forwardExplicitAbort();
+    else
+        explicitSignal?.addEventListener('abort', forwardExplicitAbort, { once: true });
+    const timeout = setTimeout(() => {
+        controller.abort(new DOMException('Kassinão request timed out.', 'TimeoutError'));
+    }, DEFAULT_HTTP_TIMEOUT_MS);
+    timeout.unref();
+    try {
+        response = await waitWithSignal(fetch(input, { ...init, redirect: 'error', signal }), signal);
+        return await waitWithSignal(Promise.resolve(consume(response)), signal);
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw abortReason(signal);
+        throw error;
+    }
+    finally {
+        clearTimeout(timeout);
+        explicitSignal?.removeEventListener('abort', forwardExplicitAbort);
+        if (response?.body && !response.bodyUsed)
+            void response.body.cancel().catch(() => undefined);
+    }
+}

package/dist/index.js

@@ -28,6 +28,7 @@ import path from 'node:path';
 import { readApiJson } from './apiResponse.js';
 import { parseCredentialTokenResponse, refreshCredential } from './credentialRefresh.js';
 import { loadCredentialStore, saveCredentialStore } from './credentialStore.js';
+import { DEFAULT_HTTP_TIMEOUT_MS, strictFetch } from './http.js';
 import { createTokenProfileId, mayFallbackToEnvToken, normalizeKassinaoUrl, selectBootstrapRefreshToken, singleFlight, tokenStoreFileName, } from './tokenAuth.js';
 import { createToolErrorResponse, createToolResponse, MCP_UNTRUSTED_DESCRIPTION } from './toolOutput.js';
 function configuredUrl() {
@@ -114,18 +115,21 @@ function saveStore(s, file = STORE_FILE) {
 }
 let accessToken = '';
 let accessExpMs = 0;
+const MAX_TOKEN_RESPONSE_BYTES = 32 * 1024;
 async function tryRefresh(token, attemptId) {
-    const r = await fetch(`${URL_BASE}/api/mcp/refresh`, {
+    return strictFetch(`${URL_BASE}/api/mcp/refresh`, {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify({ refresh_token: token, attempt_id: attemptId }),
-        signal: AbortSignal.timeout(20_000),
+        signal: AbortSignal.timeout(DEFAULT_HTTP_TIMEOUT_MS),
+    }, async (response) => {
+        if (mayFallbackToEnvToken(response.status))
+            return undefined;
+        if (!response.ok) {
+            throw new Error(`Could not refresh the token (HTTP ${response.status}). Try again in a moment.`);
+        }
+        return readApiJson(response, MAX_TOKEN_RESPONSE_BYTES);
     });
-    if (mayFallbackToEnvToken(r.status))
-        return undefined;
-    if (!r.ok)
-        throw new Error(`Could not refresh the token (HTTP ${r.status}). Try again in a moment.`);
-    return readApiJson(r);
 }
 async function refreshTokens() {
     if (!URL_BASE)
@@ -156,20 +160,28 @@ async function apiGet(pathname, params) {
         if (v !== undefined && v !== null && v !== '')
             url.searchParams.set(k, String(v));
     }
+    const request = (token) => strictFetch(url, { headers: { authorization: `Bearer ${token}` } }, async (response) => {
+        if (response.status === 401)
+            return { unauthorized: true };
+        if (response.status === 503) {
+            throw new Error('Kassinão is starting or Discord is unavailable. Try again in a moment.');
+        }
+        return { unauthorized: false, data: await readApiJson(response) };
+    });
     let token = await getAccess();
-    let r = await fetch(url, { headers: { authorization: `Bearer ${token}` } });
-    if (r.status === 401) {
+    let result = await request(token);
+    if (result.unauthorized) {
         // Another tool may have refreshed while this request still used the previous
         // access token. Reuse the new token and refresh only if the current one failed.
         if (token === accessToken)
             await refreshOnce();
         token = accessToken;
-        r = await fetch(url, { headers: { authorization: `Bearer ${token}` } });
+        result = await request(token);
     }
-    if (r.status === 503) {
-        throw new Error('Kassinão is starting or Discord is unavailable. Try again in a moment.');
+    if (result.unauthorized) {
+        throw new Error('Kassinão request failed (HTTP 401). Try again in a moment.');
     }
-    return readApiJson(r);
+    return result.data;
 }
 // ---------- tool definitions ----------
 const rangeProps = {
@@ -184,7 +196,7 @@ const rangeProps = {
 const TOOLS = [
     {
         name: 'list_meetings',
-        description: 'List recorded meetings in a time window (defaults to the last 30 days). Only meetings the user can access are returned. Each item carries transcriptStatus ("partial" = some speakers not transcribed yet), presentSilent (people in the call who never spoke) and audioDeleted (tiered retention: audio expired, text remains). Use for "what meetings happened between X and Y" / "list this week\'s calls".',
+        description: 'List recorded meetings in a time window (defaults to the last 30 days). Only meetings the user can access are returned. Each item carries transcriptStatus ("partial" = some speakers not transcribed yet), presentSilent (people in the call who never spoke) and audioDeleted (tiered retention: audio expired, text remains). Follow nextCursor until null; only then continue with nextScanCursor. Use for "what meetings happened between X and Y" / "list this week\'s calls".',
         inputSchema: {
             type: 'object',
             properties: {
@@ -194,14 +206,21 @@ const TOOLS = [
                 participantId: { type: 'string' },
                 status: { type: 'string', enum: ['done', 'recording'] },
                 limit: { type: 'number' },
-                cursor: { type: 'string' },
+                cursor: {
+                    type: 'string',
+                    description: 'opaque nextCursor; continue result pagination before using nextScanCursor',
+                },
+                scanCursor: {
+                    type: 'string',
+                    description: 'opaque nextScanCursor; use only when nextCursor is null',
+                },
             },
         },
         call: (a) => apiGet('/api/meetings', a),
     },
     {
         name: 'pending_actions',
-        description: 'Aggregate action items (task + owner + deadline) across meetings, bucketed by deadline: overdue, dueSoon, later, noDeadline, unparseable. Items include transcriptStatus — minutes built from a partial transcript may be missing actions. Use for "what is pending this week" / "my open action items". assignee="me" matches the token owner.',
+        description: 'Aggregate action items (task + owner + deadline) across meetings, bucketed by deadline: overdue, dueSoon, later, noDeadline, unparseable. Items include transcriptStatus — minutes built from a partial transcript may be missing actions. Follow nextCursor until null; only then continue with nextScanCursor. Use for "what is pending this week" / "my open action items". assignee="me" matches the token owner.',
         inputSchema: {
             type: 'object',
             properties: {
@@ -209,13 +228,22 @@ const TOOLS = [
                 assignee: { type: 'string', description: '"me" or part of the assignee name' },
                 meetingsWithin: { type: 'string', description: 'how far back to scan meetings (for example, "60d")' },
                 guildId: { type: 'string' },
+                limit: { type: 'number' },
+                cursor: {
+                    type: 'string',
+                    description: 'opaque nextCursor; continue actions before using nextScanCursor',
+                },
+                scanCursor: {
+                    type: 'string',
+                    description: 'opaque nextScanCursor; use only when nextCursor is null',
+                },
             },
         },
         call: (a) => apiGet('/api/actions', a),
     },
     {
         name: 'search_meetings',
-        description: 'Full-text search across transcripts, minutes and notes of accessible meetings, accent-insensitive, with deep links to the exact second. Use for "find where we discussed X".',
+        description: 'Full-text search across transcripts, minutes and notes of accessible meetings, accent-insensitive, with deep links to the exact second. Follow nextCursor until null; only then continue with nextScanCursor. Use for "find where we discussed X".',
         inputSchema: {
             type: 'object',
             properties: {
@@ -225,6 +253,14 @@ const TOOLS = [
                 ...rangeProps,
                 guildId: { type: 'string' },
                 limit: { type: 'number' },
+                cursor: {
+                    type: 'string',
+                    description: 'opaque nextCursor; continue matches before using nextScanCursor',
+                },
+                scanCursor: {
+                    type: 'string',
+                    description: 'opaque nextScanCursor; use only when nextCursor is null',
+                },
             },
             required: ['query'],
         },
@@ -232,7 +268,7 @@ const TOOLS = [
     },
     {
         name: 'who_said',
-        description: 'Find transcript segments matching a query (accent-insensitive), with speaker, timestamp, surrounding context and a deep link. transcriptStatus="partial" means some speakers are not transcribed yet — absence of a match is not proof nobody said it. Use for "when did Ana talk about budget".',
+        description: 'Find transcript segments matching a query (accent-insensitive), with speaker, timestamp, surrounding context and a deep link. transcriptStatus="partial" means some speakers are not transcribed yet — absence of a match is not proof nobody said it. Follow nextCursor until null; only then continue with nextScanCursor. Use for "when did Ana talk about budget".',
         inputSchema: {
             type: 'object',
             properties: {
@@ -243,6 +279,14 @@ const TOOLS = [
                 ...rangeProps,
                 guildId: { type: 'string' },
                 limit: { type: 'number' },
+                cursor: {
+                    type: 'string',
+                    description: 'opaque nextCursor; continue transcript matches before using nextScanCursor',
+                },
+                scanCursor: {
+                    type: 'string',
+                    description: 'opaque nextScanCursor; use only when nextCursor is null',
+                },
             },
             required: ['query'],
         },
@@ -274,16 +318,17 @@ async function runExchange(code) {
         console.error('Set KASSINAO_URL first (for example, KASSINAO_URL=https://kassinao.example.com).');
         process.exit(1);
     }
-    const r = await fetch(`${URL_BASE}/api/mcp/exchange`, {
+    const data = await strictFetch(`${URL_BASE}/api/mcp/exchange`, {
         method: 'POST',
         headers: { 'content-type': 'application/json' },
         body: JSON.stringify({ code }),
+    }, async (response) => {
+        if (!response.ok) {
+            console.error(`Could not exchange the code (HTTP ${response.status}). Codes expire in about 5 minutes and can only be used once. Generate another with /mcp new.`);
+            process.exit(1);
+        }
+        return parseCredentialTokenResponse(await readApiJson(response, MAX_TOKEN_RESPONSE_BYTES));
     });
-    if (!r.ok) {
-        console.error(`Could not exchange the code (HTTP ${r.status}). Codes expire in about 5 minutes and can only be used once. Generate another with /mcp new.`);
-        process.exit(1);
-    }
-    const data = parseCredentialTokenResponse(await readApiJson(r));
     const profile = createTokenProfileId();
     const profileStoreFile = path.join(STORE_DIR, tokenStoreFileName(URL_BASE, '', profile));
     saveStore({ url: URL_BASE, refreshToken: data.refresh_token }, profileStoreFile);
@@ -307,10 +352,20 @@ function isExchangeCode(value) {
 }
 async function readExchangeCode() {
     if (!process.stdin.isTTY || typeof process.stdin.setRawMode !== 'function') {
-        const input = fs.readFileSync(0, 'utf8').trim();
-        if (input.length > 256)
-            throw new Error('Invalid one-time connection code.');
-        return input;
+        const maxBytes = 256;
+        const buffer = Buffer.allocUnsafe(maxBytes + 1);
+        const chunks = [];
+        let total = 0;
+        while (true) {
+            const read = fs.readSync(0, buffer, 0, Math.min(buffer.length, maxBytes + 1 - total), null);
+            if (read === 0)
+                break;
+            total += read;
+            if (total > maxBytes)
+                throw new Error('Invalid one-time connection code.');
+            chunks.push(Buffer.from(buffer.subarray(0, read)));
+        }
+        return Buffer.concat(chunks, total).toString('utf8').trim();
     }
     return new Promise((resolve, reject) => {
         const input = process.stdin;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "kassinao-mcp",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "kassinao-mcp",
-      "version": "1.0.4",
+      "version": "1.0.5",
       "bundleDependencies": ["@modelcontextprotocol/sdk"],
       "license": "AGPL-3.0-or-later",
       "dependencies": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kassinao-mcp",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "MCP connector for Kassinão — ask your Discord meeting recordings (transcripts, minutes, action items) from Claude Desktop, Cursor and other MCP clients.",
   "author": "Mauro Marques",
   "homepage": "https://mcp.kassinao.cloud",