vibo-mcp 2.1.0 → 2.2.0

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Vibo (vibodj.com) — plan & manage event music, song requests, ideas, guests, and playlists via natural language",
-    "version": "2.1.0"
+    "version": "2.2.0"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Vibo",
       "source": "./",
       "description": "MCP server for Vibo — browse & manage events, timeline, songs, the DJ song ideas/questions, guests, and exports to Spotify/Apple Music",
-      "version": "2.1.0",
+      "version": "2.2.0",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "vibo-mcp",
   "displayName": "Vibo",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "MCP server for Vibo (vibodj.com) — plan & manage event music, song requests, ideas, guests, and playlists via natural language",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -5,6 +5,24 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// node_modules/@chrischall/mcp-utils/dist/cancel/index.js
+import { AsyncLocalStorage } from "node:async_hooks";
+var storage = new AsyncLocalStorage();
+function withCallSignal(signal, fn) {
+  return signal ? storage.run({ signal }, fn) : fn();
+}
+function currentCallSignal() {
+  return storage.getStore()?.signal;
+}
+function withAmbientCancellation(own2) {
+  const ambient = currentCallSignal();
+  if (!ambient)
+    return own2;
+  if (!own2)
+    return ambient;
+  return AbortSignal.any([own2, ambient]);
+}
+
 // node_modules/@modelcontextprotocol/server/dist/chunk-Br0eD_fh.mjs
 var __create = Object.create;
 var __defProp2 = Object.defineProperty;
@@ -34474,17 +34492,41 @@ Hint: ${err.hint}`);
   }
   throw err;
 }
+function callSignalFrom(args) {
+  const ctx = args.at(-1);
+  if (typeof ctx !== "object" || ctx === null)
+    return void 0;
+  const req = ctx.mcpReq;
+  if (typeof req !== "object" || req === null)
+    return void 0;
+  const signal = req.signal;
+  return signal instanceof AbortSignal ? signal : void 0;
+}
 function surfaceToolHints(server) {
   const register2 = server.registerTool.bind(server);
-  server.registerTool = (name, config2, cb) => register2(name, config2, (...args) => {
-    let result;
-    try {
-      result = cb(...args);
-    } catch (err) {
-      return hintResultOrRethrow(err);
-    }
-    return result instanceof Promise ? result.catch(hintResultOrRethrow) : result;
-  });
+  server.registerTool = (name, config2, cb) => register2(name, config2, (...args) => (
+    // THE CALLER'S CANCELLATION, made ambient for the whole handler
+    // (`cancel/index.ts`). The SDK delivers it and the fleet ignored it:
+    // measured against @modelcontextprotocol/server 2.0.0, a cancelled
+    // call aborts `ctx.mcpReq.signal` with the caller's reason and the
+    // handler runs to completion regardless — so the HTTP request stays
+    // in flight, the child keeps burning metered CPU, and the upstream
+    // keeps being hit for somebody who has gone. claude.ai sent 101
+    // cancellations in the week to 2026-09-20.
+    //
+    // Here because this is the one wrapper every tool already passes
+    // through: threading the signal by hand would mean editing several
+    // hundred handlers and missing exactly the ones nobody edits.
+    withCallSignal(callSignalFrom(args), () => {
+      let result;
+      try {
+        result = cb(...args);
+      } catch (err) {
+        return hintResultOrRethrow(err);
+      }
+      return result instanceof Promise ? result.catch(hintResultOrRethrow) : result;
+    })
+  ));
 }
 async function createMcpServer(opts) {
   const server = new McpServer({ name: opts.name, version: opts.version }, { supportedProtocolVersions: [...SERVER_PROTOCOL_VERSIONS] });
@@ -34602,7 +34644,7 @@ function toolAnnotations(opts = {}) {
 }
 
 // src/version.ts
-var VERSION = "2.1.0";
+var VERSION = "2.2.0";
 
 // src/client.ts
 import { dirname as dirname2, join as join3 } from "path";
@@ -34807,6 +34849,9 @@ var REFRESH = `
   }
 `;
 var AUTH_ERROR_CODES = /* @__PURE__ */ new Set(["UNAUTHORIZED", "UNAUTHENTICATED", "FORBIDDEN"]);
+function requestSignal() {
+  return withAmbientCancellation(AbortSignal.timeout(REQUEST_TIMEOUT_MS));
+}
 var ViboClient = class {
   apiUrl;
   email;
@@ -34931,7 +34976,7 @@ var ViboClient = class {
         headers,
         // NB: no content-type — fetch sets the multipart boundary
         body: form,
-        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+        signal: requestSignal()
       });
     } catch (err) {
       const reason = err instanceof Error && err.name === "TimeoutError" ? "timed out" : "failed";
@@ -35021,7 +35066,7 @@ var ViboClient = class {
         method: "POST",
         headers,
         body: JSON.stringify({ query, variables }),
-        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+        signal: requestSignal()
       });
     } catch (err) {
       const reason = err instanceof Error && err.name === "TimeoutError" ? "timed out" : "failed";

package/dist/client.js

@@ -1,6 +1,6 @@
 import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
-import { loadDotenvSafely, readEnvVar, McpToolError, SessionNotAuthenticatedError, truncateErrorMessage, } from '@chrischall/mcp-utils';
+import { loadDotenvSafely, readEnvVar, McpToolError, SessionNotAuthenticatedError, truncateErrorMessage, withAmbientCancellation, } from '@chrischall/mcp-utils';
 import { loadSession, saveSession } from './session-store.js';
 // Load .env for local dev; silently skip if dotenv is unavailable (e.g. the
 // mcpb bundle, which externalizes dotenv). `override: false` means a
@@ -40,6 +40,25 @@ const REFRESH = `
 // Error codes Vibo (and conventional GraphQL servers) use for an expired /
 // missing session — these should trigger a token refresh + replay.
 const AUTH_ERROR_CODES = new Set(['UNAUTHORIZED', 'UNAUTHENTICATED', 'FORBIDDEN']);
+/**
+ * The signal every Vibo request is made with: our timeout, and the caller's
+ * cancellation if there is one (mcp-utils `cancel`).
+ *
+ * Until this, only the timeout could stop a request — a cancelled tool call
+ * held it open for the full budget while the child burned the CPU mcp-host
+ * meters it on. Measured on that fleet: claude.ai sent 101 cancellations in
+ * the week to 2026-09-20.
+ *
+ * ONE definition for both request paths, which is not tidiness: the two are
+ * the multipart upload and the plain query, they had the same seven lines
+ * copied between them, and the next person to add a third path is the one
+ * this saves. The `TimeoutError` checks at both call sites still name a real
+ * timeout — an abort from the caller arrives as `AbortError` and falls
+ * through to 'failed'.
+ */
+function requestSignal() {
+    return withAmbientCancellation(AbortSignal.timeout(REQUEST_TIMEOUT_MS));
+}
 export class ViboClient {
     apiUrl;
     email;
@@ -172,7 +191,7 @@ export class ViboClient {
                 method: 'POST',
                 headers, // NB: no content-type — fetch sets the multipart boundary
                 body: form,
-                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+                signal: requestSignal(),
             });
         }
         catch (err) {
@@ -265,7 +284,7 @@ export class ViboClient {
                 method: 'POST',
                 headers,
                 body: JSON.stringify({ query, variables }),
-                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+                signal: requestSignal(),
             });
         }
         catch (err) {

package/dist/version.js

@@ -2,4 +2,4 @@
 // literal on the line carrying the release marker; every manifest and the MCP
 // server banner import VERSION from here, so there is exactly one place to keep
 // in sync (and one release-please extra-files entry).
-export const VERSION = '2.1.0'; // x-release-please-version
+export const VERSION = '2.2.0'; // x-release-please-version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibo-mcp",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "mcpName": "io.github.chrischall/vibo-mcp",
   "description": "Vibo (vibodj.com) MCP server for Claude — host/couple event music planning & management. Developed and maintained by AI (Claude Code).",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -46,7 +46,7 @@
     "typecheck": "tsc -p tsconfig.json --noEmit"
   },
   "dependencies": {
-    "@chrischall/mcp-utils": "^1.0.0",
+    "@chrischall/mcp-utils": "^2.0.0",
     "@fetchproxy/bootstrap": "^3.0.1",
     "@modelcontextprotocol/server": "^2.0.0",
     "dotenv": "^17.4.0",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/vibo-mcp",
     "source": "github"
   },
-  "version": "2.1.0",
+  "version": "2.2.0",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "vibo-mcp",
-      "version": "2.1.0",
+      "version": "2.2.0",
       "transport": {
         "type": "stdio"
       },