@ainecto/cli 0.12.0 → 0.12.1

package/dist/bin/mcp.js

@@ -169,6 +169,252 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/core/http/rateLimit.ts
+var RATE_LIMITED = "RATE_LIMITED";
+function parseRetryAfter(value, now = Date.now()) {
+  if (value === null || value === void 0) return void 0;
+  const trimmed = value.trim();
+  if (/^\d+$/.test(trimmed)) return representable(Number(trimmed), now);
+  if (!/[a-z]/i.test(trimmed)) return void 0;
+  const at = Date.parse(trimmed);
+  if (Number.isNaN(at)) return void 0;
+  return Math.max(0, Math.ceil((at - now) / 1e3));
+}
+function representable(seconds, now) {
+  return Number.isNaN(new Date(now + seconds * 1e3).getTime()) ? void 0 : seconds;
+}
+function rateLimitDetails(headerValue, body, now = Date.now()) {
+  const fields = isRecord2(body) ? body : {};
+  const fromBody = typeof fields.retryAfterSeconds === "number" && Number.isFinite(fields.retryAfterSeconds) && fields.retryAfterSeconds >= 0 ? representable(Math.ceil(fields.retryAfterSeconds), now) : void 0;
+  const retryAfterSeconds = fromBody ?? parseRetryAfter(headerValue, now);
+  return {
+    status: 429,
+    ...retryAfterSeconds !== void 0 ? { retryAfterSeconds, retryAt: new Date(now + retryAfterSeconds * 1e3).toISOString() } : {},
+    ...typeof fields.scope === "string" ? { scope: fields.scope } : {},
+    ...typeof fields.policyId === "string" ? { policyId: fields.policyId } : {}
+  };
+}
+function isRateLimitedRpcError(error) {
+  return isRecord2(error) && error.code === 429 && isRecord2(error.data) && error.data.code === RATE_LIMITED;
+}
+function rateLimitMessage(where, details) {
+  return details.retryAfterSeconds === void 0 ? `${where} was rate limited (HTTP 429). Wait before trying again.` : `${where} was rate limited (HTTP 429). Retry after ${details.retryAfterSeconds} seconds (${details.retryAt}).`;
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/core/harness/legacyRole.ts
+var LEGACY_ROLE_HEADER = "X-AiNecto-Role";
+var LEGACY_ROLE_ENV_VAR = "AINECTO_ROLE";
+var LEGACY_ROLE_NOTICE = "AiNecto session roles were removed; access follows your AiNecto permissions. Re-run `ainecto init` to tidy this repository.";
+function legacyRoleInput(flag, envVars = process.env) {
+  const value = flag ?? envVars[LEGACY_ROLE_ENV_VAR];
+  return value !== void 0 && value.trim() ? value.trim() : void 0;
+}
+
+// src/core/version.ts
+var CLI_VERSION = true ? "0.12.1" : UNBUNDLED_VERSION;
+var PACKAGE_NAME = "@ainecto/mcp";
+var CLI_USER_AGENT = `${PACKAGE_NAME} ${CLI_VERSION}`;
+
+// src/core/mcp/rpcClient.ts
+var CHANNEL_HEADER = "X-AiNecto-Channel";
+var AGENT_HEADER = "X-AiNecto-Agent";
+var AGENT_NAME_HEADER = "X-AiNecto-Agent-Name";
+var MAX_AGENT_NAME_LENGTH = 100;
+var McpRpcError = class extends Error {
+  constructor(message, code, details) {
+    super(message);
+    this.code = code;
+    this.details = details;
+  }
+  code;
+  details;
+};
+var RateLimitedError = class extends McpRpcError {
+  constructor(message, rateLimit) {
+    super(message, RATE_LIMITED, rateLimit);
+    this.rateLimit = rateLimit;
+    this.name = "RateLimitedError";
+  }
+  rateLimit;
+};
+var McpRpcClient = class {
+  constructor(options) {
+    this.options = options;
+    this.fetchImpl = options.fetchImpl ?? fetch;
+  }
+  options;
+  fetchImpl;
+  nextId = 1;
+  agent;
+  /**
+   * 브리지 전용 — 호스트 에이전트가 보낸 {@code initialize} 의 {@code clientInfo.name}(프로그램 고정 이름).
+   * 이후 모든 요청의 {@code X-AiNecto-Agent} 헤더로 싣는다. 직접 명령은 부르지 않는다(누가 셸을 돌렸는지 모른다).
+   */
+  useAgent(clientName) {
+    this.agent = agentHeaderValue(clientName);
+  }
+  initialize() {
+    return this.request("initialize", {
+      protocolVersion: "2024-11-05",
+      capabilities: {},
+      clientInfo: { name: PACKAGE_NAME, version: CLI_VERSION }
+    });
+  }
+  async toolsList() {
+    const result = await this.request("tools/list", {});
+    if (!isRecord3(result) || !Array.isArray(result.tools)) {
+      throw new McpRpcError("tools/list response did not include a tools array.", "MCP_PROTOCOL_ERROR", result);
+    }
+    return result.tools;
+  }
+  async toolsCall(name, args) {
+    return this.request("tools/call", { name, arguments: args ?? {} });
+  }
+  async request(method, params) {
+    const response = await this.sendRaw({
+      jsonrpc: "2.0",
+      id: this.nextId++,
+      method,
+      params
+    });
+    if (!response) {
+      return void 0;
+    }
+    if ("error" in response) {
+      if (isRateLimitedRpcError(response.error)) {
+        const details = rateLimitDetails(void 0, response.error.data);
+        throw new RateLimitedError(rateLimitMessage(`MCP ${method}`, details), details);
+      }
+      throw new McpRpcError(response.error.message, "MCP_ERROR", response.error);
+    }
+    return response.result;
+  }
+  async sendRaw(request) {
+    const token = await this.options.tokenProvider?.getAccessToken();
+    let response = await this.postJson(request, token);
+    if (response.status === 401 && this.options.tokenProvider) {
+      const refreshed = await this.options.tokenProvider.refreshAfterUnauthorized();
+      if (refreshed) {
+        response = await this.postJson(request, refreshed);
+      }
+    }
+    if (response.status === 204 || response.status === 202) {
+      return void 0;
+    }
+    const text = await response.text();
+    if (response.status === 429) {
+      return rateLimitedResponse(text, response.headers.get("retry-after"));
+    }
+    if (!response.ok) {
+      const serverError = parseServerError(text);
+      throw new McpRpcError(
+        `MCP HTTP request failed with HTTP ${response.status}${serverError ? ` \u2014 ${describeServerError(serverError)}` : "."}`,
+        "MCP_HTTP_ERROR",
+        { ...httpErrorDetails(response.status, text, this.options.envVars ?? process.env), ...serverError ? { error: serverError.error } : {} }
+      );
+    }
+    if (!text.trim()) {
+      return void 0;
+    }
+    const parsed = JSON.parse(text);
+    if (!isJsonRpcResponse(parsed)) {
+      throw new McpRpcError("MCP response was not a JSON-RPC response.", "MCP_PROTOCOL_ERROR", parsed);
+    }
+    return parsed;
+  }
+  postJson(request, token) {
+    const headers = {
+      "content-type": "application/json",
+      accept: "application/json"
+    };
+    if (token) {
+      headers.authorization = `Bearer ${token}`;
+    }
+    const legacyRole = printableHeaderValue(this.options.legacyRole);
+    if (legacyRole) {
+      headers[LEGACY_ROLE_HEADER.toLowerCase()] = legacyRole;
+    }
+    headers[CHANNEL_HEADER.toLowerCase()] = this.options.channel;
+    if (this.agent) {
+      headers[AGENT_HEADER.toLowerCase()] = this.agent;
+    }
+    if (this.options.agentName) {
+      headers[AGENT_NAME_HEADER.toLowerCase()] = this.options.agentName;
+    }
+    return this.fetchImpl(this.options.endpoint, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(request)
+    });
+  }
+};
+function rateLimitedResponse(text, retryAfter) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch {
+    parsed = void 0;
+  }
+  if (isJsonRpcResponse(parsed) && "error" in parsed) {
+    const data = isRecord3(parsed.error.data) ? parsed.error.data : {};
+    const seconds = parseRetryAfter(retryAfter);
+    if (data.retryAfterSeconds === void 0 && seconds !== void 0) {
+      parsed.error.data = { ...data, retryAfterSeconds: seconds };
+    }
+    return parsed;
+  }
+  const details = rateLimitDetails(retryAfter, parsed);
+  throw new RateLimitedError(rateLimitMessage("MCP HTTP request", details), details);
+}
+function agentHeaderValue(clientName) {
+  return printableHeaderValue(clientName);
+}
+function printableHeaderValue(value) {
+  if (typeof value !== "string") {
+    return void 0;
+  }
+  const printable = value.replace(/[^\x20-\x7E]/g, "").trim().slice(0, MAX_AGENT_NAME_LENGTH).trim();
+  return printable || void 0;
+}
+function parseServerError(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return void 0;
+  }
+  if (!isRecord3(parsed) || typeof parsed.error !== "string" || !parsed.error.trim()) {
+    return void 0;
+  }
+  return {
+    error: parsed.error.trim(),
+    description: typeof parsed.error_description === "string" && parsed.error_description.trim() ? parsed.error_description : void 0
+  };
+}
+function describeServerError(serverError) {
+  const line = serverError.description ? `${serverError.error}: ${serverError.description}` : serverError.error;
+  return line.replace(/\s+/g, " ").trim();
+}
+function isJsonRpcResponse(value) {
+  return isRecord3(value) && value.jsonrpc === "2.0" && ("result" in value || "error" in value);
+}
+function isRecord3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function httpErrorDetails(status, body, envVars) {
+  const details = { status };
+  if (envVars.AINECTO_CLI_DEBUG === "1" || envVars.AINECTO_DEBUG === "1") {
+    details.body = safeBodyPreview(body);
+  }
+  return details;
+}
+function safeBodyPreview(body) {
+  return body.length > 500 ? `${body.slice(0, 500)}...` : body;
+}
+
 // src/core/auth/oauth.ts
 var DEFAULT_LOGIN_TIMEOUT_MS = 3e5;
 var OAuthLoginError = class extends Error {
@@ -382,6 +628,10 @@ async function exchangeToken(tokenEndpoint, params, fetchImpl) {
     headers: { "content-type": "application/x-www-form-urlencoded" },
     body: new URLSearchParams(params)
   });
+  if (response.status === 429) {
+    const details = rateLimitDetails(response.headers.get("retry-after"), await readJsonObject(response));
+    throw new RateLimitedError(rateLimitMessage("OAuth token request", details), details);
+  }
   if (!response.ok) {
     const oauthError = await readOAuthErrorCode(response);
     if (params.grant_type === "refresh_token" && oauthError !== void 0 && REAUTH_REQUIRED_ERRORS.has(oauthError)) {
@@ -391,6 +641,13 @@ async function exchangeToken(tokenEndpoint, params, fetchImpl) {
   }
   return response.json();
 }
+async function readJsonObject(response) {
+  try {
+    return await response.json();
+  } catch {
+    return void 0;
+  }
+}
 async function readOAuthErrorCode(response) {
   try {
     const body = await response.json();
@@ -537,184 +794,6 @@ function assertEnvTokenEndpointAllowed(endpoint, envVars) {
   throw new Error("AINECTO_TOKEN can only be used with the default prod/dev endpoints. Set AINECTO_ALLOW_CUSTOM_ENDPOINT_TOKEN=1 only when you intentionally trust the custom endpoint.");
 }
 
-// src/core/harness/legacyRole.ts
-var LEGACY_ROLE_HEADER = "X-AiNecto-Role";
-var LEGACY_ROLE_ENV_VAR = "AINECTO_ROLE";
-var LEGACY_ROLE_NOTICE = "AiNecto session roles were removed; access follows your AiNecto permissions. Re-run `ainecto init` to tidy this repository.";
-function legacyRoleInput(flag, envVars = process.env) {
-  const value = flag ?? envVars[LEGACY_ROLE_ENV_VAR];
-  return value !== void 0 && value.trim() ? value.trim() : void 0;
-}
-
-// src/core/version.ts
-var CLI_VERSION = true ? "0.12.0" : UNBUNDLED_VERSION;
-var PACKAGE_NAME = "@ainecto/mcp";
-var CLI_USER_AGENT = `${PACKAGE_NAME} ${CLI_VERSION}`;
-
-// src/core/mcp/rpcClient.ts
-var CHANNEL_HEADER = "X-AiNecto-Channel";
-var AGENT_HEADER = "X-AiNecto-Agent";
-var AGENT_NAME_HEADER = "X-AiNecto-Agent-Name";
-var MAX_AGENT_NAME_LENGTH = 100;
-var McpRpcError = class extends Error {
-  constructor(message, code, details) {
-    super(message);
-    this.code = code;
-    this.details = details;
-  }
-  code;
-  details;
-};
-var McpRpcClient = class {
-  constructor(options) {
-    this.options = options;
-    this.fetchImpl = options.fetchImpl ?? fetch;
-  }
-  options;
-  fetchImpl;
-  nextId = 1;
-  agent;
-  /**
-   * 브리지 전용 — 호스트 에이전트가 보낸 {@code initialize} 의 {@code clientInfo.name}(프로그램 고정 이름).
-   * 이후 모든 요청의 {@code X-AiNecto-Agent} 헤더로 싣는다. 직접 명령은 부르지 않는다(누가 셸을 돌렸는지 모른다).
-   */
-  useAgent(clientName) {
-    this.agent = agentHeaderValue(clientName);
-  }
-  initialize() {
-    return this.request("initialize", {
-      protocolVersion: "2024-11-05",
-      capabilities: {},
-      clientInfo: { name: PACKAGE_NAME, version: CLI_VERSION }
-    });
-  }
-  async toolsList() {
-    const result = await this.request("tools/list", {});
-    if (!isRecord2(result) || !Array.isArray(result.tools)) {
-      throw new McpRpcError("tools/list response did not include a tools array.", "MCP_PROTOCOL_ERROR", result);
-    }
-    return result.tools;
-  }
-  async toolsCall(name, args) {
-    return this.request("tools/call", { name, arguments: args ?? {} });
-  }
-  async request(method, params) {
-    const response = await this.sendRaw({
-      jsonrpc: "2.0",
-      id: this.nextId++,
-      method,
-      params
-    });
-    if (!response) {
-      return void 0;
-    }
-    if ("error" in response) {
-      throw new McpRpcError(response.error.message, "MCP_ERROR", response.error);
-    }
-    return response.result;
-  }
-  async sendRaw(request) {
-    const token = await this.options.tokenProvider?.getAccessToken();
-    let response = await this.postJson(request, token);
-    if (response.status === 401 && this.options.tokenProvider) {
-      const refreshed = await this.options.tokenProvider.refreshAfterUnauthorized();
-      if (refreshed) {
-        response = await this.postJson(request, refreshed);
-      }
-    }
-    if (response.status === 204 || response.status === 202) {
-      return void 0;
-    }
-    const text = await response.text();
-    if (!response.ok) {
-      const serverError = parseServerError(text);
-      throw new McpRpcError(
-        `MCP HTTP request failed with HTTP ${response.status}${serverError ? ` \u2014 ${describeServerError(serverError)}` : "."}`,
-        "MCP_HTTP_ERROR",
-        { ...httpErrorDetails(response.status, text, this.options.envVars ?? process.env), ...serverError ? { error: serverError.error } : {} }
-      );
-    }
-    if (!text.trim()) {
-      return void 0;
-    }
-    const parsed = JSON.parse(text);
-    if (!isJsonRpcResponse(parsed)) {
-      throw new McpRpcError("MCP response was not a JSON-RPC response.", "MCP_PROTOCOL_ERROR", parsed);
-    }
-    return parsed;
-  }
-  postJson(request, token) {
-    const headers = {
-      "content-type": "application/json",
-      accept: "application/json"
-    };
-    if (token) {
-      headers.authorization = `Bearer ${token}`;
-    }
-    const legacyRole = printableHeaderValue(this.options.legacyRole);
-    if (legacyRole) {
-      headers[LEGACY_ROLE_HEADER.toLowerCase()] = legacyRole;
-    }
-    headers[CHANNEL_HEADER.toLowerCase()] = this.options.channel;
-    if (this.agent) {
-      headers[AGENT_HEADER.toLowerCase()] = this.agent;
-    }
-    if (this.options.agentName) {
-      headers[AGENT_NAME_HEADER.toLowerCase()] = this.options.agentName;
-    }
-    return this.fetchImpl(this.options.endpoint, {
-      method: "POST",
-      headers,
-      body: JSON.stringify(request)
-    });
-  }
-};
-function agentHeaderValue(clientName) {
-  return printableHeaderValue(clientName);
-}
-function printableHeaderValue(value) {
-  if (typeof value !== "string") {
-    return void 0;
-  }
-  const printable = value.replace(/[^\x20-\x7E]/g, "").trim().slice(0, MAX_AGENT_NAME_LENGTH).trim();
-  return printable || void 0;
-}
-function parseServerError(body) {
-  let parsed;
-  try {
-    parsed = JSON.parse(body);
-  } catch {
-    return void 0;
-  }
-  if (!isRecord2(parsed) || typeof parsed.error !== "string" || !parsed.error.trim()) {
-    return void 0;
-  }
-  return {
-    error: parsed.error.trim(),
-    description: typeof parsed.error_description === "string" && parsed.error_description.trim() ? parsed.error_description : void 0
-  };
-}
-function describeServerError(serverError) {
-  const line = serverError.description ? `${serverError.error}: ${serverError.description}` : serverError.error;
-  return line.replace(/\s+/g, " ").trim();
-}
-function isJsonRpcResponse(value) {
-  return isRecord2(value) && value.jsonrpc === "2.0" && ("result" in value || "error" in value);
-}
-function isRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function httpErrorDetails(status, body, envVars) {
-  const details = { status };
-  if (envVars.AINECTO_CLI_DEBUG === "1" || envVars.AINECTO_DEBUG === "1") {
-    details.body = safeBodyPreview(body);
-  }
-  return details;
-}
-function safeBodyPreview(body) {
-  return body.length > 500 ? `${body.slice(0, 500)}...` : body;
-}
-
 // src/core/mcp/stdioBridge.ts
 import { createInterface } from "readline";
 async function runStdioBridge(options) {
@@ -744,15 +823,16 @@ async function runStdioBridge(options) {
 `);
         continue;
       }
-      writeLine(options.output, failure(request.id, INTERNAL_ERROR, error));
+      writeLine(options.output, failure(request.id, error instanceof RateLimitedError ? RATE_LIMITED_CODE : INTERNAL_ERROR, error));
     }
   }
 }
 var PARSE_ERROR = -32700;
 var INVALID_REQUEST = -32600;
 var INTERNAL_ERROR = -32603;
+var RATE_LIMITED_CODE = 429;
 function failure(id, code, error) {
-  const data = error instanceof McpRpcError ? { code: error.code, ...isRecord3(error.details) ? error.details : {} } : void 0;
+  const data = error instanceof McpRpcError ? { code: error.code, ...isRecord4(error.details) ? error.details : {} } : void 0;
   return {
     jsonrpc: "2.0",
     id,
@@ -768,7 +848,7 @@ function writeLine(output, message) {
 }
 function parseJsonRpcRequest(line) {
   const parsed = JSON.parse(line);
-  if (!isRecord3(parsed) || parsed.jsonrpc !== "2.0" || typeof parsed.method !== "string") {
+  if (!isRecord4(parsed) || parsed.jsonrpc !== "2.0" || typeof parsed.method !== "string") {
     throw new Error("Invalid JSON-RPC request.");
   }
   return {
@@ -779,9 +859,9 @@ function parseJsonRpcRequest(line) {
   };
 }
 function clientInfoName(params) {
-  return isRecord3(params) && isRecord3(params.clientInfo) ? params.clientInfo.name : void 0;
+  return isRecord4(params) && isRecord4(params.clientInfo) ? params.clientInfo.name : void 0;
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }