praxis-agent 0.50.0 → 0.52.0

package/README.md

@@ -215,7 +215,13 @@ troubleshooting. Run `praxis --help` for the authoritative command surface.
   disconnect recovery that never replays an already-dispatched call. Default
   tool selection defers `mcp__*` schemas behind a turn-scoped `ToolSearch`;
   each query activates at most eight deterministic matches for the next model
-  request. Explicit concrete `--tools` selections load selected tools directly, while
+  request, and published MCP tool descriptions are capped at 2,048 Unicode
+  code points. Text-only MCP results above 100,000 UTF-8 bytes are redacted
+  into mode-`0600` `.txt` files under the session-scoped `tool-results`
+  directory; providers and transcripts receive only a bounded instruction with
+  the absolute file path. Results at or below the limit remain inline, while
+  structured, mixed-media, and binary-resource handling is unchanged. Explicit
+  concrete `--tools` selections load selected tools directly, while
   `--disallowedTools ToolSearch` restores the complete tool list.
 - **Provider-neutral models** — native Provider Registry/Vault routing, API
   adapters, an experimental Codex OAuth adapter, explicit capability checks,

package/dist/mcp/claude-mcp-tools.js

@@ -1,7 +1,7 @@
 import { randomBytes } from 'node:crypto';
 import { mkdir, mkdtemp, open, rm } from 'node:fs/promises';
 import { homedir, tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { join, resolve as resolvePath } from 'node:path';
 import { SSEClientTransport } from '@modelcontextprotocol/sdk/client/sse.js';
 import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
 import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
@@ -21,7 +21,12 @@ function sanitizeMcpUnicode(value) {
         .replace(/[\p{Cf}\p{Co}\p{Cn}]/gu, '')
         .replace(/[\u200B-\u200F\u202A-\u202E\u2066-\u2069\uFEFF\uE000-\uF8FF]/gu, '');
 }
+const MAX_MCP_TOOL_DESCRIPTION_CODE_POINTS = 2_048;
+function capMcpToolDescription(value) {
+    return [...value].slice(0, MAX_MCP_TOOL_DESCRIPTION_CODE_POINTS).join('');
+}
 const MAX_RESOURCE_BYTES = 25 * 1024 * 1024;
+const MAX_INLINE_MCP_TEXT_RESULT_BYTES = 100_000;
 const NO_MCP_RESOURCES = 'No resources found. MCP servers may still provide tools even if they have no resources.';
 const MCP_RESOURCE_TOOL_DEFINITIONS = [
     {
@@ -454,11 +459,21 @@ async function mcpBinaryText(options, sensitiveValues, createdFiles) {
         : `Resource from ${options.serverName} at ${options.uri}`;
     return mcpTextBlock(`[${origin}] Binary content (${options.mimeType}, ${options.bytes.length} bytes) saved to ${filePath}`, sensitiveValues);
 }
+async function externalizeMcpTextResult(serverName, content, context, sensitiveValues, createdFiles) {
+    if (!context.toolResultDirectory) {
+        throw new Error('MCP large text tool result output directory is unavailable');
+    }
+    const bytes = Buffer.from(content, 'utf8');
+    const filePath = await writeToolBlob(resolvePath(context.cwd, context.toolResultDirectory), serverName, bytes, '.txt');
+    createdFiles.push(filePath);
+    return mcpTextBlock(`[MCP tool result from ${serverName}] Text content (${bytes.length} bytes) saved to ${filePath}`, sensitiveValues);
+}
 async function mcpToolResultUnchecked(serverName, result, context, sensitiveValues, createdFiles) {
     if (!Array.isArray(result.content)) {
         throw new Error('MCP tool result content must be an array');
     }
     const blocks = [];
+    let textOnly = result.structuredContent === undefined;
     let resultBytes = 0;
     const consumeBytes = (bytes) => {
         resultBytes += bytes;
@@ -483,6 +498,7 @@ async function mcpToolResultUnchecked(serverName, result, context, sensitiveValu
             }
             continue;
         }
+        textOnly = false;
         if (item.type === 'image') {
             if (typeof item.mimeType !== 'string' ||
                 !MCP_IMAGE_MEDIA_TYPES.has(item.mimeType) ||
@@ -569,6 +585,15 @@ async function mcpToolResultUnchecked(serverName, result, context, sensitiveValu
     if (Buffer.byteLength(content) > MAX_RESOURCE_BYTES) {
         throw new Error(`MCP tool result exceeded ${MAX_RESOURCE_BYTES} bytes`);
     }
+    if (textOnly &&
+        Buffer.byteLength(content) > MAX_INLINE_MCP_TEXT_RESULT_BYTES) {
+        const pointerBlock = await externalizeMcpTextResult(serverName, content, context, sensitiveValues, createdFiles);
+        return {
+            content: pointerBlock.text,
+            contentBlocks: [pointerBlock],
+            isError: result.isError === true,
+        };
+    }
     const images = blocks.filter((block) => block.type === 'image');
     return {
         content,
@@ -1250,7 +1275,7 @@ export class ClaudeMcpToolRegistry {
                 sensitiveValues,
                 definition: {
                     name,
-                    description: redactSensitiveText(tool.description ?? `MCP tool ${tool.name} from ${serverName}`, sensitiveValues),
+                    description: capMcpToolDescription(redactSensitiveText(tool.description ?? `MCP tool ${tool.name} from ${serverName}`, sensitiveValues)),
                     inputSchema: redactSensitiveValue(tool.inputSchema, sensitiveValues),
                 },
             };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "praxis-agent",
-  "version": "0.50.0",
+  "version": "0.52.0",
   "description": "Local-first, single-user general agent for the command line.",
   "license": "MIT",
   "author": "wuqisen",