@ethisyscore/extension-runtime 1.137.0 → 1.138.0

package/dist/{MockPluginStorage-BndTX2RR.d.ts → MockPluginStorage-DF3DL1dI.d.ts}

@@ -7,6 +7,20 @@ interface MockStoredFile {
     readonly contentType: string;
     readonly bytes: Uint8Array;
 }
+/** Optional per-user request rate limit for {@link MockPluginStorage}, mirroring the kernel route's 429. */
+interface MockPluginStorageRateLimit {
+    /** Requests allowed per window. The kernel default is 60. */
+    readonly maxRequests: number;
+    /** Window length in seconds. Defaults to 60, the kernel default. */
+    readonly windowSeconds?: number;
+}
+/** Options for {@link MockPluginStorage}. Everything is off by default. */
+interface MockPluginStorageOptions {
+    /** Refuse uploads past this rate with 429 `rate_limited`. Off when omitted. */
+    readonly rateLimit?: MockPluginStorageRateLimit;
+    /** Clock in epoch milliseconds, for tests. Defaults to `Date.now`. */
+    readonly now?: () => number;
+}
 /**
  * In-memory stand-in for an app's plugin storage, answering the `uploadToStorage` request kind for
  * `dev:mock` and tests.
@@ -18,12 +32,22 @@ interface MockStoredFile {
  * - the path is server-chosen, `{prefix}/{32 hex}{ext}` with the kernel's extension rule, so two
  *   uploads never share a path.
  *
+ * - with `rateLimit` set, a request over the rate rejects with 429 and `retryAfterSeconds` (off by
+ *   default; a fixed window like the kernel's, counting every request, accepted or not).
+ *
  * It does not model quota (507), the storage lock or upload slots (503), or the deadline (408).
  */
 declare class MockPluginStorage {
     private readonly files;
+    private readonly rateLimit?;
+    private readonly now;
+    private windowStartMs;
+    private windowCount;
+    constructor(options?: MockPluginStorageOptions);
     /** Store `buffer` under a new path below `meta.pathPrefix`. */
     store(meta: UploadToStorageMeta, buffer: ArrayBuffer): UploadToStorageResult;
+    /** The kernel refuses before the handler runs, so this is checked before anything else. */
+    private enforceRateLimit;
     /** The stored file at `path`, or `undefined`. */
     get(path: string): MockStoredFile | undefined;
     /** Every stored file, in upload order. */
@@ -32,4 +56,4 @@ declare class MockPluginStorage {
     clear(): void;
 }
 
-export { MockPluginStorage as M, type MockStoredFile as a };
+export { MockPluginStorage as M, type MockPluginStorageOptions as a, type MockPluginStorageRateLimit as b, type MockStoredFile as c };

package/dist/{MockPluginStorage-BM3bq99B.d.cts → MockPluginStorage-QKfz8CMt.d.cts}

@@ -7,6 +7,20 @@ interface MockStoredFile {
     readonly contentType: string;
     readonly bytes: Uint8Array;
 }
+/** Optional per-user request rate limit for {@link MockPluginStorage}, mirroring the kernel route's 429. */
+interface MockPluginStorageRateLimit {
+    /** Requests allowed per window. The kernel default is 60. */
+    readonly maxRequests: number;
+    /** Window length in seconds. Defaults to 60, the kernel default. */
+    readonly windowSeconds?: number;
+}
+/** Options for {@link MockPluginStorage}. Everything is off by default. */
+interface MockPluginStorageOptions {
+    /** Refuse uploads past this rate with 429 `rate_limited`. Off when omitted. */
+    readonly rateLimit?: MockPluginStorageRateLimit;
+    /** Clock in epoch milliseconds, for tests. Defaults to `Date.now`. */
+    readonly now?: () => number;
+}
 /**
  * In-memory stand-in for an app's plugin storage, answering the `uploadToStorage` request kind for
  * `dev:mock` and tests.
@@ -18,12 +32,22 @@ interface MockStoredFile {
  * - the path is server-chosen, `{prefix}/{32 hex}{ext}` with the kernel's extension rule, so two
  *   uploads never share a path.
  *
+ * - with `rateLimit` set, a request over the rate rejects with 429 and `retryAfterSeconds` (off by
+ *   default; a fixed window like the kernel's, counting every request, accepted or not).
+ *
  * It does not model quota (507), the storage lock or upload slots (503), or the deadline (408).
  */
 declare class MockPluginStorage {
     private readonly files;
+    private readonly rateLimit?;
+    private readonly now;
+    private windowStartMs;
+    private windowCount;
+    constructor(options?: MockPluginStorageOptions);
     /** Store `buffer` under a new path below `meta.pathPrefix`. */
     store(meta: UploadToStorageMeta, buffer: ArrayBuffer): UploadToStorageResult;
+    /** The kernel refuses before the handler runs, so this is checked before anything else. */
+    private enforceRateLimit;
     /** The stored file at `path`, or `undefined`. */
     get(path: string): MockStoredFile | undefined;
     /** Every stored file, in upload order. */
@@ -32,4 +56,4 @@ declare class MockPluginStorage {
     clear(): void;
 }
 
-export { MockPluginStorage as M, type MockStoredFile as a };
+export { MockPluginStorage as M, type MockPluginStorageOptions as a, type MockPluginStorageRateLimit as b, type MockStoredFile as c };

package/dist/host/index.cjs

@@ -380,6 +380,20 @@ function classifyHostError(err) {
   }
   return "internal";
 }
+function parsePluginStorageRetryAfter(raw, nowMs = Date.now()) {
+  if (typeof raw === "number") {
+    return Number.isFinite(raw) && raw >= 0 ? Math.ceil(raw) : void 0;
+  }
+  if (typeof raw !== "string" || raw.trim().length === 0) {
+    return void 0;
+  }
+  const text = raw.trim();
+  if (/^\d+$/.test(text)) {
+    return Number(text);
+  }
+  const at = /[A-Za-z]/.test(text) ? Date.parse(text) : Number.NaN;
+  return Number.isNaN(at) ? void 0 : Math.max(0, Math.ceil((at - nowMs) / 1e3));
+}
 
 // src/host/version-skew.ts
 var EXTENSION_VERSION_HEADER = "x-extension-version";
@@ -965,7 +979,10 @@ var WorkerRemoteDomTransport = class {
         // The HTTP status, on failure only. A bare number carries no host internals, and it
         // is the only way the plugin can tell 413 (file too large) from 507 (quota) from 503
         // (storage lock busy): the closed MCP code folds all three into `internal`/`unavailable`.
-        ...!result.ok && typeof result.status === "number" ? { status: result.status } : {}
+        ...!result.ok && typeof result.status === "number" ? { status: result.status } : {},
+        // The server's `Retry-After` (429), as whole seconds, so a plugin can show how long
+        // to wait. Never acted on here: an upload is not retried automatically.
+        ...retryAfterField(result)
       });
     } catch (err) {
       this.replyError(message.id, resultType, err, true);
@@ -974,16 +991,26 @@ var WorkerRemoteDomTransport = class {
   replyError(id, type, err, includeStatus = false) {
     const message = err instanceof Error ? err.message : "MCP request failed";
     const status = includeStatus ? statusOf(err) : void 0;
+    const retryAfterSeconds = includeStatus && err !== null && typeof err === "object" ? parsePluginStorageRetryAfter(err.retryAfterSeconds) : void 0;
     this.safePostMessage({
       id,
       type,
       ok: false,
       error: message,
       code: classifyHostError(err),
-      ...status !== void 0 ? { status } : {}
+      ...status !== void 0 ? { status } : {},
+      ...retryAfterSeconds !== void 0 ? { retryAfterSeconds } : {}
     });
   }
 };
+function retryAfterField(result) {
+  if (result.ok || !result.headers) {
+    return {};
+  }
+  const key = Object.keys(result.headers).find((k) => k.toLowerCase() === "retry-after");
+  const seconds = key === void 0 ? void 0 : parsePluginStorageRetryAfter(result.headers[key]);
+  return seconds === void 0 ? {} : { retryAfterSeconds: seconds };
+}
 function statusOf(err) {
   if (err === null || typeof err !== "object") {
     return void 0;