tiny-stdio-mcp-server 0.1.8 → 0.1.9

package/dist/content/audio.d.ts

@@ -1,3 +1,4 @@
+import { type FromUrlOptions } from "./remote.js";
 export interface AudioContent {
     type: "audio";
     data: string;
@@ -7,7 +8,7 @@ export declare class Audio {
     private readonly base64Data;
     private readonly mimeType;
     private constructor();
-    static fromUrl(url: string): Promise<Audio>;
+    static fromUrl(url: string, options?: FromUrlOptions): Promise<Audio>;
     static fromBytes(data: Uint8Array, format?: string): Audio;
     static fromBase64(base64: string, mimeType: string): Audio;
     toContentBlock(): AudioContent;

package/dist/content/audio.js

@@ -1,4 +1,5 @@
 import { assertBase64, fileTypeFromBuffer, parseContentType, safeRemoteLabel } from "./mime.js";
+import { readRemoteBytes } from "./remote.js";
 const SUPPORTED_AUDIO_MIMES = new Set([
     "audio/mpeg",
     "audio/wav",
@@ -19,13 +20,12 @@ export class Audio {
         this.base64Data = base64Data;
         this.mimeType = mimeType;
     }
-    static async fromUrl(url) {
+    static async fromUrl(url, options) {
         const response = await fetch(url);
         if (!response.ok) {
             throw new Error(`Failed to fetch audio from ${safeRemoteLabel(url)}: ${response.status} ${response.statusText}`);
         }
-        const arrayBuffer = await response.arrayBuffer();
-        const data = new Uint8Array(arrayBuffer);
+        const data = await readRemoteBytes(response, "audio", url, options);
         const detected = fileTypeFromBuffer(data);
         let mimeType;
         if (detected && SUPPORTED_AUDIO_MIMES.has(detected.mime)) {

package/dist/content/file.d.ts

@@ -1,3 +1,4 @@
+import { type FromUrlOptions } from "./remote.js";
 export interface TextResourceContents {
     uri: string;
     mimeType: string;
@@ -19,7 +20,7 @@ export declare class File {
     private readonly name?;
     private readonly charset;
     private constructor();
-    static fromUrl(url: string): Promise<File>;
+    static fromUrl(url: string, options?: FromUrlOptions): Promise<File>;
     static fromBytes(data: Uint8Array, mimeType: string): File;
     static fromText(text: string, mimeType?: string): File;
     static fromBase64(base64: string, mimeType: string): File;

package/dist/content/file.js

@@ -1,4 +1,5 @@
 import { assertBase64, fileTypeFromBuffer, parseContentType, safeRemoteLabel } from "./mime.js";
+import { readRemoteBytes } from "./remote.js";
 function isTextMimeType(mimeType) {
     const normalizedMimeType = mimeType.toLowerCase();
     return (normalizedMimeType.startsWith("text/") ||
@@ -22,13 +23,12 @@ export class File {
         this.name = name;
         this.charset = charset;
     }
-    static async fromUrl(url) {
+    static async fromUrl(url, options) {
         const response = await fetch(url);
         if (!response.ok) {
             throw new Error(`Failed to fetch file from ${safeRemoteLabel(url)}: ${response.status} ${response.statusText}`);
         }
-        const arrayBuffer = await response.arrayBuffer();
-        const data = new Uint8Array(arrayBuffer);
+        const data = await readRemoteBytes(response, "file", url, options);
         const detected = fileTypeFromBuffer(data);
         let mimeType;
         if (detected) {

package/dist/content/image.d.ts

@@ -1,3 +1,4 @@
+import { type FromUrlOptions } from "./remote.js";
 export interface ImageContent {
     type: "image";
     data: string;
@@ -7,7 +8,7 @@ export declare class Image {
     private readonly base64Data;
     private readonly mimeType;
     private constructor();
-    static fromUrl(url: string): Promise<Image>;
+    static fromUrl(url: string, options?: FromUrlOptions): Promise<Image>;
     static fromBytes(data: Uint8Array, format?: string): Image;
     static fromBase64(base64: string, mimeType: string): Image;
     toContentBlock(): ImageContent;

package/dist/content/image.js

@@ -1,4 +1,5 @@
 import { assertBase64, fileTypeFromBuffer, parseContentType, safeRemoteLabel } from "./mime.js";
+import { readRemoteBytes } from "./remote.js";
 const SUPPORTED_IMAGE_MIMES = new Set([
     "image/png",
     "image/jpeg",
@@ -12,13 +13,12 @@ export class Image {
         this.base64Data = base64Data;
         this.mimeType = mimeType;
     }
-    static async fromUrl(url) {
+    static async fromUrl(url, options) {
         const response = await fetch(url);
         if (!response.ok) {
             throw new Error(`Failed to fetch image from ${safeRemoteLabel(url)}: ${response.status} ${response.statusText}`);
         }
-        const arrayBuffer = await response.arrayBuffer();
-        const data = new Uint8Array(arrayBuffer);
+        const data = await readRemoteBytes(response, "image", url, options);
         const detected = fileTypeFromBuffer(data);
         let mimeType;
         if (detected && SUPPORTED_IMAGE_MIMES.has(detected.mime)) {

package/dist/content/index.d.ts

@@ -1,4 +1,6 @@
 export { fileTypeFromBuffer, type FileTypeResult } from "./mime.js";
+export { DEFAULT_FROM_URL_MAX_BYTES } from "./remote.js";
+export type { FromUrlOptions } from "./remote.js";
 export { Image, type ImageContent } from "./image.js";
 export { Audio, type AudioContent } from "./audio.js";
 export { File, type EmbeddedResource, type TextResourceContents, type BlobResourceContents, } from "./file.js";

package/dist/content/index.js

@@ -1,5 +1,6 @@
 // MIME detection
 export { fileTypeFromBuffer } from "./mime.js";
+export { DEFAULT_FROM_URL_MAX_BYTES } from "./remote.js";
 // Content helpers
 export { Image } from "./image.js";
 export { Audio } from "./audio.js";

package/dist/content/remote.d.ts

@@ -0,0 +1,5 @@
+export declare const DEFAULT_FROM_URL_MAX_BYTES: number;
+export interface FromUrlOptions {
+    maxBytes?: number;
+}
+export declare function readRemoteBytes(response: Response, kind: string, url: string, options?: FromUrlOptions): Promise<Uint8Array>;

package/dist/content/remote.js

@@ -0,0 +1,69 @@
+import { safeRemoteLabel } from "./mime.js";
+export const DEFAULT_FROM_URL_MAX_BYTES = 5 * 1024 * 1024;
+function resolveMaxBytes(options) {
+    const maxBytes = options?.maxBytes ?? DEFAULT_FROM_URL_MAX_BYTES;
+    if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0) {
+        throw new Error("maxBytes must be a positive integer");
+    }
+    return maxBytes;
+}
+function createSizeError(kind, url, maxBytes) {
+    return new Error(`Remote ${kind} from ${safeRemoteLabel(url)} exceeds maximum size of ${maxBytes} bytes`);
+}
+function readContentLength(response) {
+    const rawContentLength = response.headers.get("content-length");
+    if (typeof rawContentLength !== "string") {
+        return undefined;
+    }
+    const contentLength = Number(rawContentLength.trim());
+    if (!Number.isSafeInteger(contentLength) || contentLength < 0) {
+        return undefined;
+    }
+    return contentLength;
+}
+function combineChunks(chunks, totalBytes) {
+    const combined = new Uint8Array(totalBytes);
+    let offset = 0;
+    for (const chunk of chunks) {
+        combined.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return combined;
+}
+async function readStreamBytes(body, kind, url, maxBytes) {
+    const reader = body.getReader();
+    const chunks = [];
+    let totalBytes = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done) {
+                return combineChunks(chunks, totalBytes);
+            }
+            totalBytes += value.byteLength;
+            if (totalBytes > maxBytes) {
+                await reader.cancel().catch(() => undefined);
+                throw createSizeError(kind, url, maxBytes);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+export async function readRemoteBytes(response, kind, url, options) {
+    const maxBytes = resolveMaxBytes(options);
+    const contentLength = readContentLength(response);
+    if (contentLength !== undefined && contentLength > maxBytes) {
+        throw createSizeError(kind, url, maxBytes);
+    }
+    if (response.body) {
+        return readStreamBytes(response.body, kind, url, maxBytes);
+    }
+    const arrayBuffer = await response.arrayBuffer();
+    if (arrayBuffer.byteLength > maxBytes) {
+        throw createSizeError(kind, url, maxBytes);
+    }
+    return new Uint8Array(arrayBuffer);
+}

package/dist/index.d.ts

@@ -2,8 +2,8 @@ export { createServer } from "./server.js";
 export type { MessageHandler, MessageSession, Server } from "./server.js";
 export { defineSchema } from "./schema.js";
 export type { TypedSchema } from "./schema.js";
-export { Image, Audio, File, toContentBlocks, fileTypeFromBuffer, } from "./content/index.js";
-export type { ImageContent, AudioContent, EmbeddedResource, TextResourceContents, BlobResourceContents, ContentBlock, TextContent, FileTypeResult, } from "./content/index.js";
+export { Image, Audio, File, toContentBlocks, fileTypeFromBuffer, DEFAULT_FROM_URL_MAX_BYTES, } from "./content/index.js";
+export type { ImageContent, AudioContent, EmbeddedResource, TextResourceContents, BlobResourceContents, ContentBlock, TextContent, FileTypeResult, FromUrlOptions, } from "./content/index.js";
 export type { ToolReturn } from "./content/index.js";
 export type { ServerOptions, ToolHandler, ToolDefinition, Tool, ToolAnnotations, ToolExecution, Icon, ContentAnnotations, ResourceLink, CallToolResult, PromptContentItem, PromptArgument, Prompt, PromptMessage, GetPromptResult, PromptHandler, PromptDefinition, Resource, ResourceTemplate, ResourceContents, ReadResourceResult, ResourceHandler, ResourceDefinition, ResourceTemplateDefinition, HandleResult, ContentItem, JSONSchema, JSONSchemaProperty, Transport, SDKTransport, JSONRPCRequest, JSONRPCResponse, JSONRPCError, JSONRPCMessage, JSONRPCNotification, InitializeResult, } from "./types.js";
 export { JSON_RPC_ERROR_CODES, ToolError } from "./types.js";

package/dist/index.js

@@ -3,5 +3,5 @@ export { createServer } from "./server.js";
 // Schema
 export { defineSchema } from "./schema.js";
 // Content helpers
-export { Image, Audio, File, toContentBlocks, fileTypeFromBuffer, } from "./content/index.js";
+export { Image, Audio, File, toContentBlocks, fileTypeFromBuffer, DEFAULT_FROM_URL_MAX_BYTES, } from "./content/index.js";
 export { JSON_RPC_ERROR_CODES, ToolError } from "./types.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tiny-stdio-mcp-server",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "bugs": {
     "url": "https://github.com/poe-platform/poe-code/issues"
   },