@aipermission/mcp 0.2.49 → 0.2.50

package/README.md

@@ -98,6 +98,10 @@ Local input-validation failures do not imply that execution occurred.
 Malformed or incomplete JSON responses are not treated as success. Invalid
 local headers are rejected before dispatch without echoing the API token;
 transport errors never echo raw response fragments or header values.
+Connector-action capacity errors retain HTTP `429`, the gateway error code,
+and `Retry-After`. Respect that delay; immediate retry loops cannot bypass the
+gateway's per-workspace/token rate, persisted-running concurrency, input, or
+atomic projected-storage limits.
 
 - `list_connector_targets`
 - `get_connector_help`

package/dist/init.js

@@ -614,7 +614,7 @@ function scanTOMLHeader(line, state) {
     return null;
   }
   const trimmed = line.trimStart();
-  if (trimmed.startsWith("[") && !trimmed.startsWith("[[")) {
+  if (trimmed.startsWith("[")) {
     try {
       return findMarkerPath(parseTOML(`${line}\n__aipermission_header_marker = true\n`));
     } catch {

package/dist/local-url.js

@@ -13,6 +13,9 @@ export function normalizeLocalAPIURL(value = DEFAULT_API_URL) {
   if (parsed.protocol !== "http:") {
     throw new Error("AIPERMISSION_API_URL must use http:// for the local gateway.");
   }
+  if (parsed.username || parsed.password) {
+    throw new Error("AIPERMISSION_API_URL must not contain URL credentials.");
+  }
   let hostname = parsed.hostname.toLowerCase();
   if (hostname === "[::1]") {
     hostname = "::1";

package/dist/server.js

@@ -17,7 +17,13 @@ import { normalizeLocalAPIURL } from "./local-url.js";
 import { jsonToolResult } from "./results.js";
 
 const packageMetadata = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
-const apiUrl = normalizeLocalAPIURL(process.env.AIPERMISSION_API_URL);
+let apiUrl = "";
+let apiURLConfigurationError = null;
+try {
+  apiUrl = normalizeLocalAPIURL(process.env.AIPERMISSION_API_URL);
+} catch (error) {
+  apiURLConfigurationError = new Error("Invalid local gateway URL configuration; update AIPERMISSION_API_URL.", { cause: error });
+}
 const apiToken = process.env.AIPERMISSION_API_TOKEN || "";
 const apiTimeoutMs = Number.parseInt(process.env.AIPERMISSION_HTTP_TIMEOUT_MS || "60000", 10);
 
@@ -177,6 +183,9 @@ async function apiPost(path, body) {
 }
 
 async function apiRequest(path, options, idempotencyKey) {
+  if (apiURLConfigurationError) {
+    throw apiURLConfigurationError;
+  }
   if (!apiToken) {
     throw new Error("AIPERMISSION_API_TOKEN is required.");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aipermission/mcp",
-  "version": "0.2.49",
+  "version": "0.2.50",
   "mcpName": "io.github.aipermission/aipermission-mcp",
   "description": "Local-first MCP bridge for the aipermission gateway.",
   "license": "AGPL-3.0-only",

package/server.json

@@ -3,12 +3,12 @@
   "name": "io.github.aipermission/aipermission-mcp",
   "title": "AIPermission",
   "description": "Local-first MCP bridge for the AIPermission gateway.",
-  "version": "0.2.49",
+  "version": "0.2.50",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@aipermission/mcp",
-      "version": "0.2.49",
+      "version": "0.2.50",
       "transport": {
         "type": "stdio"
       }