The MCP server's upstream call has no deadline and no error handling
I maintainer di solito rispondono entro 1 giorno
Valutazione
Questa issue non è ancora stata valutata.
Descrizione
Background
src/mcp/server.ts:83 fetches an endpoint with no timeout and no status check.
MCP tools are called by agents, which typically have their own timeout and will
retry — so a hung call here becomes repeated hung calls, each holding a
connection, with no upper bound.
An agent is also the caller least able to interpret a malformed response: it
will take whatever shape comes back and reason over it, so a 502 HTML error page
parsed as JSON becomes a confident wrong answer in a conversation.
What to build
- A deadline on the call, using the same helper as L162 if that has landed, or
AbortSignal.timeoutdirectly if not. - Check the response status and content type before parsing.
- Return a structured MCP error on failure — a tool error the agent can act on,
not a thrown exception or a half-parsed body. - Make the failure message say which upstream failed and why.
Acceptance criteria
- The call cannot hang indefinitely
- Non-2xx and non-JSON responses are rejected before parsing
- Failures surface as structured MCP tool errors
- The error names the upstream and the reason
- Tests cover timeout, non-2xx and non-JSON responses
Drips Wave · Complexity: Easy · 100 points
Repo: Divinity-Labs/Lens. Node + TypeScript, Fastify, Prisma on Postgres,
Redis for queues, Prometheus via prom-client.
Run the tests: npm test. The tests are vitest, not jest. Running jest
against this repo reports "66 suites, 0 tests" and means nothing. A single file
is npx vitest run src/__tests__/yourfile.test.ts.
Load test (prices) is already failing on main and has been for some
time. It is not your PR that broke it. Every other check should be green.
This service prices real assets on Stellar mainnet. A number that is wrong
is worse than a number that is missing, because a caller cannot tell the
difference. Prefer failing loudly over returning a plausible value.
Never elide an address, a contract id or a key in code, a comment or a test
fixture. A previous batch wrote a shortened contract id in an issue text and
five contributors invented plausible-looking ids to fill the gap. Write the
whole thing or do not write it at all.
The house pattern for an outbound deadline already exists — see
src/alerts/delivery.ts, which passes signal: AbortSignal.timeout(10_000) to
fetch. Where an issue below asks for a timeout, copy that, do not invent a
second convention.
Required: Before submitting, join the contributor Telegram so your work can be tracked and counted toward the Stellar Wave: https://t.me/+fxHXq8f1SwlkZDBk
- Lingua principale
- TypeScript
- Stelle
- 4
- Fork
- 71
- Merge medio
- 1g 6h
- PR unite (30g)
- 58
Preparare l'ambiente
- Include un Dockerfile o un file Docker Compose
- Ha un modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di Divinity-Labs/Lens
-
Webhook retries have no jitter, so failures synchroniseForse già presa @Richard-tobi l’ha presa 3 giorni fa. Apertaarea:reliability difficulty:easy help wanted points:100 Stellar Wave
Difficoltà 2/5 1-3 ore Idoneità per principianti 80/100
Divinity-Labs/Lens#341 · 2 commenti · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
-
SSRF guard re-resolves DNS at connect time, so rebinding is still possibleForse già presa @sparkysolutions10-pixel l’ha presa oggi. Apertaarea:security help wanted
Difficoltà 4/5 3-5 giorni Idoneità per principianti 48/100
Divinity-Labs/Lens#515 ·
I maintainer di solito rispondono entro 1 giorno
-
Admin routes are public and that is load-bearingForse già presa @sparkysolutions10-pixel l’ha presa oggi. Apertaarea:security difficulty:easy help wanted points:100
Difficoltà 4/5 3-5 giorni Idoneità per principianti 58/100
Divinity-Labs/Lens#514 · 2 commenti ·
I maintainer di solito rispondono entro 1 giorno
-
A caller cannot see their own usageForse già presa @sparkysolutions10-pixel l’ha presa oggi. Apertaarea:api-quality difficulty:intermediate help wanted points:150
Difficoltà 4/5 3-5 giorni Idoneità per principianti 55/100
Divinity-Labs/Lens#513 · 2 commenti ·
I maintainer di solito rispondono entro 1 giorno
-
The key is accepted only as a bearer token, and nothing says soForse già presa @krsnak l’ha presa 2 giorni fa. Apertaarea:docs difficulty:easy help wanted points:100 Stellar Wave
Divinity-Labs/Lens#512 · 3 commenti · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di Divinity-Labs/Lens
Issue simili
-
DQ assisgnment closing at CRApertaenhancement
Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100
equinor/prisma-decision-web#919 ·
I maintainer di solito rispondono entro 1 giorno
-
[DC] OneLogin sync imports a partial user list when an API request failsForse già presa @RaphaelFakhri l’ha presa oggi. Aperta
Difficoltà 2/5 1-3 ore Idoneità per principianti 84/100
bitwarden/directory-connector#1276 · 1 commento ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 62/100
home-assistant/installer#324 ·
I maintainer di solito rispondono entro 1 giorno
-
Mondriaan
Difficoltà 2/5 1-3 ore Idoneità per principianti 65/100
knaw-huc/textannoviz#733 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
I maintainer di solito rispondono entro 1 giorno