@databrainhq/mcp-server 0.3.0-rc.13 → 0.3.0-rc.15

package/dist/{chunk-AEQTEE5C.js → chunk-4E57ZRZO.js}

@@ -3,7 +3,7 @@ import {
   isId,
   readTemplateFiles,
   validateManifest
-} from "./chunk-Q5EYDKSA.js";
+} from "./chunk-2F7V6RZR.js";
 
 // src/utils/errors.ts
 var DatabrainApiError = class extends Error {
@@ -36,9 +36,19 @@ var DatabrainApiError = class extends Error {
   formatDetails() {
     if (this.status < 400 || this.status >= 500) return "";
     if (!this.details || typeof this.details !== "object") return "";
-    const skipKeys = /* @__PURE__ */ new Set(["message", "detail", "error", "code", "data", "hint", "retryable"]);
+    const skipKeys = /* @__PURE__ */ new Set([
+      "message",
+      "detail",
+      "error",
+      "code",
+      "data",
+      "hint",
+      "retryable"
+    ]);
     const extra = {};
-    for (const [k, v] of Object.entries(this.details)) {
+    for (const [k, v] of Object.entries(
+      this.details
+    )) {
       if (skipKeys.has(k)) continue;
       if (v === null || v === void 0) continue;
       extra[k] = v;
@@ -143,7 +153,8 @@ var logger = {
 var package_default = {
   name: "@databrainhq/mcp-server",
   mcpName: "com.usedatabrain/mcp-server",
-  version: "0.3.0-rc.13",
+  version: "0.3.0-rc.15",
+  packageManager: "pnpm@12.3.4",
   description: "MCP server for Databrain embedded analytics - connect databases, create datamarts, configure embeds, and generate frontend code",
   type: "module",
   bin: {
@@ -161,13 +172,16 @@ var package_default = {
     ".mcp.json"
   ],
   scripts: {
-    build: "tsup && node scripts/copy-custom-chart-assets.mjs",
+    build: "tsup && node scripts/build-declarations.mjs && node scripts/copy-custom-chart-assets.mjs",
     dev: "tsx src/index.ts",
     test: "vitest run",
     "test:watch": "vitest",
     "test:live": "vitest run tests/integration/prompt-flows.test.ts",
-    lint: "tsc --noEmit",
-    prepublishOnly: "npm run build"
+    lint: "biome check .",
+    "lint:fix": "biome check --write .",
+    format: "biome format --write .",
+    typecheck: "tsc --noEmit",
+    prepublishOnly: "pnpm run build"
   },
   keywords: [
     "mcp",
@@ -182,16 +196,23 @@ var package_default = {
     "@posthog/mcp": "^0.10.7",
     esbuild: "0.27.3",
     fflate: "0.8.3",
-    "posthog-node": "^5.21.2",
+    "posthog-node": "5.60.1",
     yaml: "^2.9.1",
-    zod: "^3.24.0"
+    zod: "^4.1.12"
   },
   devDependencies: {
+    "@biomejs/biome": "2.5.15",
+    "@microsoft/api-extractor": "7.59.4",
     "@types/node": "^25.3.5",
     tsup: "^8.4.0",
     tsx: "^4.19.0",
-    typescript: "^5.7.0",
-    vitest: "^3.0.0"
+    typescript: "7.0.2",
+    vitest: "^4.1.12"
+  },
+  overrides: {
+    "@posthog/core": "1.61.2",
+    "@posthog/types": "1.418.0",
+    rollup: "4.66.0"
   },
   publishConfig: {
     access: "public"
@@ -201,27 +222,175 @@ var package_default = {
     url: "git+https://github.com/databrainhq/mcp-server.git"
   },
   engines: {
-    node: ">=18.0.0"
+    node: ">=20.0.0"
   }
 };
 
 // src/version.ts
 var MCP_SERVER_VERSION = package_default.version;
 
+// src/bryn/catalogueCache.ts
+var RateLimitedError = class extends Error {
+  constructor(retryAfterMs) {
+    super("rate_limited");
+    this.retryAfterMs = retryAfterMs;
+    this.name = "RateLimitedError";
+  }
+};
+function parseRetryAfter(header, now = Date.now()) {
+  const value = header?.trim();
+  if (!value) return void 0;
+  if (/^\d{1,9}$/.test(value)) return Number(value) * 1e3;
+  if (!/^[A-Za-z]{3},/.test(value)) return void 0;
+  const at = Date.parse(value);
+  return Number.isNaN(at) ? void 0 : Math.max(0, at - now);
+}
+var BrynCatalogueCache = class {
+  entries = /* @__PURE__ */ new Map();
+  ttlMs;
+  defaultBackoffMs;
+  maxBackoffMs;
+  maxKeys;
+  now;
+  constructor(options = {}) {
+    this.ttlMs = options.ttlMs ?? 6e4;
+    this.defaultBackoffMs = options.defaultBackoffMs ?? 5e3;
+    this.maxBackoffMs = options.maxBackoffMs ?? 12e4;
+    this.maxKeys = options.maxKeys ?? 512;
+    this.now = options.now ?? Date.now;
+  }
+  async get(key, load) {
+    let entry = this.entries.get(key);
+    if (!entry) {
+      entry = { fetchedAt: 0, blockedUntil: 0 };
+      this.entries.set(key, entry);
+      this.evict();
+    } else {
+      this.entries.delete(key);
+      this.entries.set(key, entry);
+    }
+    const now = this.now();
+    if (entry.value && now - entry.fetchedAt < this.ttlMs)
+      return { catalogue: entry.value, degraded: false };
+    if (now < entry.blockedUntil) return this.degraded(entry, now);
+    entry.inflight ??= this.refresh(entry, load);
+    await entry.inflight;
+    return entry.blockedUntil > this.now() || !entry.value ? this.degraded(entry, this.now()) : { catalogue: entry.value, degraded: false };
+  }
+  async refresh(entry, load) {
+    try {
+      entry.value = await load();
+      entry.fetchedAt = this.now();
+      entry.blockedUntil = 0;
+    } catch (error) {
+      const wait = error instanceof RateLimitedError && error.retryAfterMs !== void 0 ? error.retryAfterMs : this.defaultBackoffMs;
+      entry.blockedUntil = this.now() + Math.min(Math.max(wait, 1e3), this.maxBackoffMs);
+    } finally {
+      entry.inflight = void 0;
+    }
+  }
+  degraded(entry, now) {
+    return {
+      catalogue: entry.value ?? { tools: [], turns: [] },
+      degraded: true,
+      retryAfterSeconds: Math.max(
+        1,
+        Math.ceil((entry.blockedUntil - now) / 1e3)
+      )
+    };
+  }
+  evict() {
+    while (this.entries.size > this.maxKeys) {
+      const oldest = this.entries.keys().next().value;
+      if (oldest === void 0) return;
+      this.entries.delete(oldest);
+    }
+  }
+};
+
+// src/bryn/stream.ts
+var MAX_BRYN_STREAM_BYTES = 8 * 1024 * 1024;
+async function readBrynStream(response) {
+  if (!response.body) throw new Error("Bryn stream is empty");
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  let size = 0;
+  let text = "";
+  try {
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      size += value.byteLength;
+      if (size > MAX_BRYN_STREAM_BYTES)
+        throw new Error("Bryn stream too large");
+      text += decoder.decode(value, { stream: true });
+    }
+    return text + decoder.decode();
+  } finally {
+    await reader.cancel().catch(() => void 0);
+    reader.releaseLock();
+  }
+}
+function parseBrynStream(text) {
+  if (text.length > MAX_BRYN_STREAM_BYTES)
+    throw new Error("Bryn stream too large");
+  let sessionId;
+  let final;
+  let failed = false;
+  const results = [];
+  for (const frame of text.split(/\r?\n\r?\n/)) {
+    const line = frame.split(/\r?\n/).filter((part) => part.startsWith("data:")).map((part) => part.slice(5).trimStart()).join("\n");
+    if (!line || line === "[DONE]") continue;
+    const event = JSON.parse(line);
+    if (event.v !== 2) continue;
+    if (event.type === "session" && typeof event.sessionId === "string")
+      sessionId = event.sessionId;
+    if (event.type === "error" || event.type === "aborted") failed = true;
+    if (event.type === "final" && event.data && typeof event.data === "object")
+      final = event.data;
+    if (event.type === "tool_execution_end" && typeof event.name === "string") {
+      results.push({
+        name: event.name,
+        status: typeof event.status === "string" ? event.status : "unknown",
+        ...typeof event.summary === "string" ? { summary: event.summary } : {},
+        // The signed-in caller may review draft effects. Results are never
+        // persisted by MCP, and the 4 MiB frame budget bounds this projection.
+        ...event.name === "update_theme" || event.name === "update_custom_chart" ? { result: event.result } : {}
+      });
+    }
+  }
+  if (!final || failed) throw new Error("Bryn turn did not complete");
+  const stopReason = typeof final.stopReason === "string" ? final.stopReason : typeof final.reason === "string" ? final.reason : void 0;
+  return {
+    ...sessionId ? { sessionId } : {},
+    message: typeof final.message === "string" ? final.message : "",
+    ...stopReason ? { stopReason } : {},
+    completed: stopReason === "end_turn" || stopReason === "goal_complete" || stopReason === "awaiting_user",
+    results
+  };
+}
+
 // src/custom-chart/studio.ts
 import { z } from "zod";
-var studioCell = z.union([z.string().max(4096), z.number().finite(), z.boolean(), z.null()]);
+var studioCell = z.union([
+  z.string().max(4096),
+  z.number().finite(),
+  z.boolean(),
+  z.null()
+]);
 var studioDraftSchema = z.object({
   code: z.string().max(64e3),
   css: z.string().max(32e3),
-  manifest: z.record(z.unknown()),
+  manifest: z.record(z.string(), z.unknown()),
   sampleData: z.object({
-    columns: z.array(z.object({
-      id: z.string(),
-      label: z.string(),
-      type: z.enum(["string", "number", "boolean"]),
-      slotId: z.string().optional()
-    }).strict()).max(64),
+    columns: z.array(
+      z.object({
+        id: z.string(),
+        label: z.string(),
+        type: z.enum(["string", "number", "boolean"]),
+        slotId: z.string().optional()
+      }).strict()
+    ).max(64),
     rows: z.array(z.array(studioCell)).max(200)
   }).strict(),
   name: z.string().max(256),
@@ -237,7 +406,8 @@ function parseStudioStream(text) {
     const line = frame.split(/\r?\n/).filter((l) => l.startsWith("data:")).map((l) => l.slice(5).trimStart()).join("\n");
     if (!line || line === "[DONE]") continue;
     const event = JSON.parse(line);
-    if (event.type === "session" && typeof event.sessionId === "string") sessionId = event.sessionId;
+    if (event.type === "session" && typeof event.sessionId === "string")
+      sessionId = event.sessionId;
     if (event.type === "error") failure = true;
     if (event.type === "tool_execution_end" && event.name === "update_custom_chart" && event.status === "completed" && event.result?.kind === "applied") {
       draft = studioDraftSchema.parse(event.result.draft);
@@ -247,7 +417,8 @@ function parseStudioStream(text) {
   return { draft, sessionId, applied: !!draft };
 }
 async function editWithBryn(client, input) {
-  if (!client.isHosted()) return { available: false, draft: input.draft, applied: false };
+  if (!client.isHosted())
+    return { available: false, draft: input.draft, applied: false };
   try {
     const result = await client.request({
       method: "POST",
@@ -265,7 +436,12 @@ async function editWithBryn(client, input) {
       timeoutMs: 18e4,
       noRetryOnTimeout: true
     });
-    return { available: true, draft: result.draft ?? input.draft, applied: result.applied, sessionId: result.sessionId };
+    return {
+      available: true,
+      draft: result.draft ?? input.draft,
+      applied: result.applied,
+      sessionId: result.sessionId
+    };
   } catch (error) {
     if (error instanceof DatabrainApiError && error.status === 404) {
       return { available: false, draft: input.draft, applied: false };
@@ -301,6 +477,10 @@ var TtlCache = class {
   }
 };
 
+// src/utils/tool-context.ts
+import { AsyncLocalStorage } from "async_hooks";
+var toolContext = new AsyncLocalStorage();
+
 // src/client/error-body.ts
 var isRecord = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var str = (v) => typeof v === "string" && v.trim() ? v : void 0;
@@ -324,10 +504,6 @@ function parseErrorBody(body) {
   return { message: str(body.error) };
 }
 
-// src/utils/tool-context.ts
-import { AsyncLocalStorage } from "async_hooks";
-var toolContext = new AsyncLocalStorage();
-
 // src/client/oauth-client-credentials.ts
 import { z as z2 } from "zod";
 var oauthHttpsUrl = z2.string().refine((value) => {
@@ -367,7 +543,9 @@ var TOKEN_TIMEOUT_MS = 1e4;
 var FAILURE_COOLDOWN_MS = 3e4;
 var MAX_REFRESH_SKEW_MS = 6e4;
 function authError() {
-  return new Error("OAuth token acquisition failed. Check the configured issuer, client credentials, resource and scopes.");
+  return new Error(
+    "OAuth token acquisition failed. Check the configured issuer, client credentials, resource and scopes."
+  );
 }
 var OAuthClientCredentials = class {
   config;
@@ -386,7 +564,8 @@ var OAuthClientCredentials = class {
     return "configured";
   }
   async getToken() {
-    if (this.cached && Date.now() < this.cached.renewAt) return this.cached.value;
+    if (this.cached && Date.now() < this.cached.renewAt)
+      return this.cached.value;
     if (this.pending) return this.pending;
     if (Date.now() < this.retryAt) throw authError();
     this.cached = void 0;
@@ -402,11 +581,13 @@ var OAuthClientCredentials = class {
     if (this.tokenEndpoint) return this.tokenEndpoint;
     const issuer = new URL(this.config.issuer);
     const path = issuer.pathname.replace(/\/$/, "");
-    const candidates = [.../* @__PURE__ */ new Set([
-      `${issuer.origin}/.well-known/oauth-authorization-server${path}`,
-      `${issuer.origin}/.well-known/openid-configuration${path}`,
-      `${issuer.origin}${path}/.well-known/openid-configuration`
-    ])];
+    const candidates = [
+      .../* @__PURE__ */ new Set([
+        `${issuer.origin}/.well-known/oauth-authorization-server${path}`,
+        `${issuer.origin}/.well-known/openid-configuration${path}`,
+        `${issuer.origin}${path}/.well-known/openid-configuration`
+      ])
+    ];
     for (const url of candidates) {
       const response = await fetch(url, {
         headers: { Accept: "application/json" },
@@ -417,7 +598,9 @@ var OAuthClientCredentials = class {
       if (!response.ok) throw authError();
       const metadata = metadataSchema.parse(await response.json());
       if (metadata.issuer !== this.config.issuer) throw authError();
-      const methods = metadata.token_endpoint_auth_methods_supported ?? ["client_secret_basic"];
+      const methods = metadata.token_endpoint_auth_methods_supported ?? [
+        "client_secret_basic"
+      ];
       if (!methods.includes(this.config.authMethod)) throw authError();
       if (metadata.grant_types_supported && !metadata.grant_types_supported.includes("client_credentials")) {
         throw authError();
@@ -459,7 +642,8 @@ var OAuthClientCredentials = class {
     if (token.expires_in !== void 0) {
       const lifetimeMs = token.expires_in * 1e3;
       const expiresAt = startedAt + lifetimeMs;
-      if (!Number.isFinite(expiresAt) || Date.now() >= expiresAt) throw authError();
+      if (!Number.isFinite(expiresAt) || Date.now() >= expiresAt)
+        throw authError();
       this.cached = {
         value: token.access_token,
         renewAt: expiresAt - Math.min(MAX_REFRESH_SKEW_MS, lifetimeMs * 0.1)
@@ -491,7 +675,9 @@ var DatabrainClient = class {
     registerSecret(config.apiToken);
     if (config.oauth) {
       if (!oauthHttpsUrl.safeParse(config.apiUrl).success) {
-        throw new Error("OAuth requires an HTTPS Databrain API URL without userinfo or fragments.");
+        throw new Error(
+          "OAuth requires an HTTPS Databrain API URL without userinfo or fragments."
+        );
       }
       this.oauth = new OAuthClientCredentials(config.oauth);
       this.config = Object.freeze({ ...config });
@@ -528,11 +714,16 @@ var DatabrainClient = class {
    */
   getActiveAuth() {
     if (this.oauth) {
-      if (this.oauthFallback) return { source: "service-token", oauthFallback: true };
-      return { source: "oauth-client-credentials", status: this.oauth.getStatus() };
+      if (this.oauthFallback)
+        return { source: "service-token", oauthFallback: true };
+      return {
+        source: "oauth-client-credentials",
+        status: this.oauth.getStatus()
+      };
     }
     if (this.config.serviceToken) return { source: "service-token" };
-    if (this.runtimeApiToken || this.config.apiToken) return { source: "api-token" };
+    if (this.runtimeApiToken || this.config.apiToken)
+      return { source: "api-token" };
     return { source: "none" };
   }
   async getToken(auth) {
@@ -551,7 +742,10 @@ var DatabrainClient = class {
               "OAuth token acquisition failed. Check the configured issuer, client credentials, resource and scopes."
             );
           }
-          if (!this.oauthFallback) logger.warn("OAuth unavailable; using the configured static service token.");
+          if (!this.oauthFallback)
+            logger.warn(
+              "OAuth unavailable; using the configured static service token."
+            );
           this.oauthFallback = true;
         }
       }
@@ -639,7 +833,9 @@ var DatabrainClient = class {
             );
           }
           const errorBody = await response.text();
-          logger.warn(`[API Error] ${options.method} ${options.path} status=${response.status} body=${errorBody.slice(0, 500)}`);
+          logger.warn(
+            `[API Error] ${options.method} ${options.path} status=${response.status} body=${errorBody.slice(0, 500)}`
+          );
           let parsed = {};
           try {
             parsed = JSON.parse(errorBody);
@@ -657,19 +853,23 @@ var DatabrainClient = class {
           );
           const isTransient = envelope.retryable !== void 0 ? envelope.retryable && (response.status === 429 || response.status >= 500) : response.status === 429 || response.status >= 500 && !NON_TRANSIENT_PATTERNS.some((p) => errorMsg.includes(p));
           if (isTransient && attempt < MAX_RETRIES) {
-            const delay = Math.min(1e3 * Math.pow(2, attempt - 1), 8e3);
-            logger.warn(`Retrying in ${delay}ms (attempt ${attempt}/${MAX_RETRIES})`, {
-              status: response.status,
-              path: options.path
-            });
+            const retryAfter = response.status === 429 ? parseRetryAfter(response.headers.get("retry-after")) : void 0;
+            const delay = retryAfter !== void 0 ? Math.min(Math.max(retryAfter, 1e3), 3e4) : Math.min(1e3 * 2 ** (attempt - 1), 8e3);
+            logger.warn(
+              `Retrying in ${delay}ms (attempt ${attempt}/${MAX_RETRIES})`,
+              {
+                status: response.status,
+                path: options.path
+              }
+            );
             await new Promise((r) => setTimeout(r, delay));
             lastError = error;
             continue;
           }
           throw error;
         }
-        const text = await response.text();
-        let data = options.responseFormat === "studio-sse" ? parseStudioStream(text) : text ? JSON.parse(text) : {};
+        const text = options.responseFormat === "bryn-sse" ? await readBrynStream(response) : await response.text();
+        let data = options.responseFormat === "studio-sse" ? parseStudioStream(text) : options.responseFormat === "bryn-sse" ? parseBrynStream(text) : text ? JSON.parse(text) : {};
         if (!options.skipDataUnwrap && data && typeof data === "object" && !Array.isArray(data) && "data" in data) {
           const inner = data.data;
           if (inner !== null && inner !== void 0) {
@@ -683,8 +883,10 @@ var DatabrainClient = class {
       } catch (err) {
         if (err instanceof DatabrainApiError) throw err;
         if (attempt < MAX_RETRIES && err?.name === "TimeoutError" && !options.noRetryOnTimeout) {
-          const delay = Math.min(1e3 * Math.pow(2, attempt - 1), 8e3);
-          logger.warn(`Request timed out, retrying in ${delay}ms`, { path: options.path });
+          const delay = Math.min(1e3 * 2 ** (attempt - 1), 8e3);
+          logger.warn(`Request timed out, retrying in ${delay}ms`, {
+            path: options.path
+          });
           await new Promise((r) => setTimeout(r, delay));
           lastError = err;
           continue;
@@ -797,7 +999,12 @@ function apiProblems(err) {
 }
 function planUpload(key, existing, versionsKnown) {
   if (!existing) {
-    return { action: "create chart", key, nextVersionNumber: 1, summary: `will create chart custom:${key} (version 1, status private)` };
+    return {
+      action: "create chart",
+      key,
+      nextVersionNumber: 1,
+      summary: `will create chart custom:${key} (version 1, status private)`
+    };
   }
   const count = typeof versionsKnown === "number" ? versionsKnown : typeof existing.versionsCount === "number" ? existing.versionsCount : void 0;
   const next = count !== void 0 ? count + 1 : NaN;
@@ -813,9 +1020,28 @@ function planUpload(key, existing, versionsKnown) {
 
 // src/custom-chart/scaffold.ts
 var DEFAULT_SLOTS = [
-  { id: "category", label: "Category", role: "dimension", types: ["string"], required: true, description: "One bar per value." },
-  { id: "value", label: "Value", role: "measure", types: ["number"], required: true },
-  { id: "target", label: "Target", role: "measure", types: ["number"], required: false }
+  {
+    id: "category",
+    label: "Category",
+    role: "dimension",
+    types: ["string"],
+    required: true,
+    description: "One bar per value."
+  },
+  {
+    id: "value",
+    label: "Value",
+    role: "measure",
+    types: ["number"],
+    required: true
+  },
+  {
+    id: "target",
+    label: "Target",
+    role: "measure",
+    types: ["number"],
+    required: false
+  }
 ];
 function scaffoldProject(input) {
   const template = readTemplateFiles();
@@ -830,7 +1056,11 @@ function scaffoldProject(input) {
   }
   const name = typeof input.name === "string" ? input.name.trim() : "";
   if (name.length === 0 || name.length > 256) {
-    problems.push({ code: "manifest.name.invalid", path: "/name", message: "name must be 1 to 256 characters." });
+    problems.push({
+      code: "manifest.name.invalid",
+      path: "/name",
+      message: "name must be 1 to 256 characters."
+    });
   }
   const manifest = {
     schemaVersion: 2,
@@ -846,8 +1076,12 @@ function scaffoldProject(input) {
   packageJson.name = input.key;
   const files = {};
   for (const [file, content] of Object.entries(template)) {
-    if (file === "manifest.json") files[file] = JSON.stringify(manifest, null, 2) + "\n";
-    else if (file === "package.json") files[file] = JSON.stringify(packageJson, null, 2) + "\n";
+    if (file === "manifest.json")
+      files[file] = `${JSON.stringify(manifest, null, 2)}
+`;
+    else if (file === "package.json")
+      files[file] = `${JSON.stringify(packageJson, null, 2)}
+`;
     else files[file] = content;
   }
   return {
@@ -859,21 +1093,26 @@ function scaffoldProject(input) {
 }
 
 export {
-  oauthHttpsUrl,
-  oauthConfigSchema,
   DatabrainApiError,
   toolError,
   stringify,
   toolSuccess,
+  RateLimitedError,
+  parseRetryAfter,
+  BrynCatalogueCache,
+  readBrynStream,
+  parseBrynStream,
   studioDraftSchema,
   parseStudioStream,
   editWithBryn,
   registerSecret,
   redactSecrets,
   logger,
-  parseErrorBody,
-  MCP_SERVER_VERSION,
   toolContext,
+  MCP_SERVER_VERSION,
+  parseErrorBody,
+  oauthHttpsUrl,
+  oauthConfigSchema,
   DatabrainClient,
   CustomChartsApi,
   createCustomChartsApi,
@@ -881,4 +1120,4 @@ export {
   planUpload,
   scaffoldProject
 };
-//# sourceMappingURL=chunk-AEQTEE5C.js.map
+//# sourceMappingURL=chunk-4E57ZRZO.js.map