@kolbo/mcp 1.14.0 → 1.14.1

package/README.md

@@ -4,20 +4,7 @@ Use [Kolbo AI](https://kolbo.ai) as native tools in Claude Code and Claude Deskt
 
 Generate images, videos, music, speech, sound effects, multi-scene campaigns, and conversational chat — all from natural language in your coding environment. 100+ AI models behind Smart Select routing, with reusable Visual DNA profiles for character/style consistency.
 
-## Recommended install: the Kolbo Claude Code plugin
-
-The easiest way to use this MCP from Claude Code is the official **Kolbo plugin**, which bundles this server + the routing skill + a first-run API-key prompt — no `settings.json` editing required:
-
-```bash
-claude plugin marketplace add Zoharvan12/kolbo-claude-plugin
-claude plugin install kolbo@kolbo
-```
-
-You'll be prompted for your API key once and it's stored in your OS keychain. The plugin lives in its own tiny repo at [`kolbo-claude-plugin`](https://github.com/Zoharvan12/kolbo-claude-plugin); the routing skill it ships is auto-synced from the canonical source in [`kolbo-code`](https://github.com/Zoharvan12/kolbo-code), so the Claude Code plugin and the Kolbo Code CLI always carry the same skill.
-
-Continue below if you'd rather wire the MCP in by hand (Claude Desktop, Cursor, custom setups).
-
-## Manual setup
+## Quick Setup
 
 ### 1. Get an API Key
 
@@ -128,11 +115,6 @@ Every generation tool also accepts an optional `resolution` arg. Images use `"1K
 | `move_folder_contents` | Move every item in a folder to a project |
 | `get_media_stats` | Counts + storage bytes per type (optionally per project) |
 
-**Artifacts**
-| Tool | Description |
-|------|-------------|
-| `publish_html_artifact` | Publish an HTML page, SVG, or Mermaid diagram and get a public shareable URL on `sites.kolbo.ai`. Pass `share_token` from a prior publish to update the same URL in place (old content kept in version history). |
-
 **Discovery & Account**
 | Tool | Description |
 |------|-------------|

package/bin/kolbo-mcp.js

@@ -1,2 +1,2 @@
-#!/usr/bin/env node
+#!/usr/bin/env node
 require('../src/index.js');

package/package.json

@@ -1,55 +1,56 @@
-{
-  "name": "@kolbo/mcp",
-  "version": "1.14.0",
-  "description": "Kolbo AI MCP Server - Generate images, videos, music, speech, and sound effects from Claude Code",
-  "main": "src/index.js",
-  "bin": {
-    "kolbo-mcp": "./bin/kolbo-mcp.js"
-  },
-  "scripts": {
-    "start": "node src/index.js",
-    "smoke": "node scripts/smoke.js",
-    "check-parity": "node scripts/check-parity.js",
-    "prepublishOnly": "node scripts/smoke.js && node scripts/check-parity.js"
-  },
-  "keywords": [
-    "kolbo",
-    "mcp",
-    "ai",
-    "image-generation",
-    "video-generation",
-    "music-generation",
-    "text-to-speech",
-    "claude-code",
-    "claude-desktop",
-    "model-context-protocol"
-  ],
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/Zoharvan12/kolbo-mcp"
-  },
-  "homepage": "https://docs.kolbo.ai/developer-api/claude-code-skill",
-  "author": "Kolbo AI <support@kolbo.ai>",
-  "publishConfig": {
-    "access": "public"
-  },
-  "files": [
-    "src/",
-    "bin/",
-    "README.md"
-  ],
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "1.29.0",
-    "form-data": "^4.0.5",
-    "zod": "^3.25.0"
-  },
-  "overrides": {
-    "hono": "^4.12.12",
-    "@hono/node-server": "^1.19.13",
-    "path-to-regexp": "^8.4.2"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  }
-}
+{
+  "name": "@kolbo/mcp",
+  "version": "1.14.1",
+  "description": "Kolbo AI MCP Server - Generate images, videos, music, speech, and sound effects from Claude Code",
+  "main": "src/index.js",
+  "bin": {
+    "kolbo-mcp": "./bin/kolbo-mcp.js"
+  },
+  "scripts": {
+    "start": "node src/index.js",
+    "smoke": "node scripts/smoke.js",
+    "check-parity": "node scripts/check-parity.js",
+    "prepublishOnly": "node scripts/smoke.js && node scripts/check-parity.js"
+  },
+  "keywords": [
+    "kolbo",
+    "mcp",
+    "ai",
+    "image-generation",
+    "video-generation",
+    "music-generation",
+    "text-to-speech",
+    "claude-code",
+    "claude-desktop",
+    "model-context-protocol"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Zoharvan12/kolbo-code",
+    "directory": "packages/kolbo-mcp"
+  },
+  "homepage": "https://docs.kolbo.ai/developer-api/claude-code-skill",
+  "author": "Kolbo AI <support@kolbo.ai>",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "src/",
+    "bin/",
+    "README.md"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "form-data": "^4.0.5",
+    "zod": "^3.25.0"
+  },
+  "overrides": {
+    "hono": "^4.12.12",
+    "@hono/node-server": "^1.19.13",
+    "path-to-regexp": "^8.4.2"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/src/client.js

@@ -139,6 +139,63 @@ function readCliAuthKey() {
   return null;
 }
 
+// ---------------------------------------------------------------------------
+// Burst control
+// ---------------------------------------------------------------------------
+// Caps in-flight requests so multi-step tool calls (file upload + generate +
+// poll status) don't fan out past the kolbo-api global rate limit. The SDK
+// tier on the server is 5000 req/min per API key; 6 in-flight × typical 2s
+// latency keeps us at ~180/min — plenty of headroom.
+const MAX_CONCURRENT = 6;
+let inFlight = 0;
+const waiting = [];
+
+function acquireSlot() {
+  if (inFlight < MAX_CONCURRENT) {
+    inFlight++;
+    return Promise.resolve();
+  }
+  return new Promise((resolve) => waiting.push(resolve));
+}
+
+function releaseSlot() {
+  if (waiting.length > 0) {
+    waiting.shift()();
+  } else {
+    inFlight = Math.max(0, inFlight - 1);
+  }
+}
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+/**
+ * Parse retry hint from a 429 response. Honors (in order):
+ *   - body.retryAfter (kolbo-api shape)
+ *   - Retry-After header (RFC, seconds)
+ *   - RateLimit-Reset header (seconds until reset)
+ * Falls back to 5s. Caps at 60s so we don't hang the tool call forever.
+ */
+function parseRetryAfter(response, body) {
+  let seconds = null;
+  if (body && typeof body.retryAfter === 'number') seconds = body.retryAfter;
+  if (seconds == null) {
+    const ra = response.headers.get('retry-after');
+    if (ra) {
+      const n = Number(ra);
+      if (Number.isFinite(n)) seconds = n;
+    }
+  }
+  if (seconds == null) {
+    const reset = response.headers.get('ratelimit-reset');
+    if (reset) {
+      const n = Number(reset);
+      if (Number.isFinite(n)) seconds = n;
+    }
+  }
+  if (seconds == null || !Number.isFinite(seconds) || seconds <= 0) seconds = 5;
+  return Math.min(seconds, 60) * 1000;
+}
+
 // ---------------------------------------------------------------------------
 // HTTP client
 // ---------------------------------------------------------------------------
@@ -189,13 +246,31 @@ class KolboClient {
   }
 
   async request(method, reqPath, body = null) {
-    const result = await this._doRequest(method, reqPath, body);
+    await acquireSlot();
+    try {
+      const result = await this._doRequestWithRetry(method, reqPath, body);
 
-    // On 401, try re-reading auth store and retry once
-    if (result._status === 401 && this._tryRefreshKey()) {
-      return this._doRequest(method, reqPath, body);
+      // On 401, try re-reading auth store and retry once
+      if (result._status === 401 && this._tryRefreshKey()) {
+        return this._doRequestWithRetry(method, reqPath, body);
+      }
+      return result;
+    } finally {
+      releaseSlot();
+    }
+  }
+
+  async _doRequestWithRetry(method, reqPath, body = null) {
+    try {
+      return await this._doRequest(method, reqPath, body);
+    } catch (err) {
+      if (err instanceof KolboApiError && err.status === 429) {
+        const delay = err.data?._kolboRetryAfterMs ?? 5000;
+        await sleep(delay);
+        return this._doRequest(method, reqPath, body);
+      }
+      throw err;
     }
-    return result;
   }
 
   async _doRequest(method, reqPath, body = null) {
@@ -232,6 +307,13 @@ class KolboClient {
       });
     }
 
+    if (response.status === 429) {
+      throw new KolboApiError('Rate limited by Kolbo API. Retrying after backoff.', {
+        status: 429,
+        data: { ...(data || {}), _kolboRetryAfterMs: parseRetryAfter(response, data) },
+      });
+    }
+
     if (!response.ok || data.success === false) {
       const message = data.error || data.message || `API error: ${response.status}`;
       const code = data.code || null;
@@ -278,11 +360,29 @@ class KolboClient {
   }
 
   async postMultipart(reqPath, formData) {
-    const result = await this._doMultipart(reqPath, formData);
-    if (result._status === 401 && this._tryRefreshKey()) {
-      return this._doMultipart(reqPath, formData);
+    await acquireSlot();
+    try {
+      const result = await this._doMultipartWithRetry(reqPath, formData);
+      if (result._status === 401 && this._tryRefreshKey()) {
+        return this._doMultipartWithRetry(reqPath, formData);
+      }
+      return result;
+    } finally {
+      releaseSlot();
+    }
+  }
+
+  async _doMultipartWithRetry(reqPath, formData) {
+    try {
+      return await this._doMultipart(reqPath, formData);
+    } catch (err) {
+      if (err instanceof KolboApiError && err.status === 429) {
+        const delay = err.data?._kolboRetryAfterMs ?? 5000;
+        await sleep(delay);
+        return this._doMultipart(reqPath, formData);
+      }
+      throw err;
     }
-    return result;
   }
 
   async _doMultipart(reqPath, formData) {
@@ -319,6 +419,13 @@ class KolboClient {
       });
     }
 
+    if (response.status === 429) {
+      throw new KolboApiError('Rate limited by Kolbo API. Retrying after backoff.', {
+        status: 429,
+        data: { ...(data || {}), _kolboRetryAfterMs: parseRetryAfter(response, data) },
+      });
+    }
+
     if (!response.ok || data.success === false) {
       const message = data.error || data.message || `API error: ${response.status}`;
       const code = data.code || null;

package/src/tools/artifacts.js

@@ -9,29 +9,23 @@ function registerArtifactTools(server, client) {
   // ─── publish_html_artifact ─────────────────────────────────────
   server.tool(
     'publish_html_artifact',
-    'Publish an HTML page (or SVG / Mermaid diagram) to kolbo.ai and return a public shareable URL. Use this when the user explicitly asks to share, publish, or deploy a built artifact so they can send the URL to someone. The content is hosted at https://sites.kolbo.ai/<slug>; the page is served with restrictive CSP (no fetch/XHR/form-action) so it cannot exfiltrate data. Identical content uploaded twice returns the same URL (server dedup). To update a previously-published page in place (keeping the same URL), pass the `share_token` returned from the prior publish — the old content is preserved in version history.',
+    'Publish an HTML page (or SVG / Mermaid diagram) to kolbo.ai and return a public shareable URL. Use this when the user explicitly asks to share, publish, or deploy a built artifact so they can send the URL to someone. The content is hosted at https://sites.kolbo.ai/<slug>; the page is served with restrictive CSP (no fetch/XHR/form-action) so it cannot exfiltrate data. Identical content uploaded twice returns the same URL (server dedup).',
     {
       title: z.string().describe('Human-friendly title for the page (also used to generate the SEO slug). Keep under ~60 chars.'),
       content: z.string().describe('The raw artifact body. For type="html" this is a full HTML document (DOCTYPE + html/head/body). For "svg" it is an <svg> document. For "mermaid" it is the Mermaid source text.'),
       type: z.enum(['html', 'svg', 'mermaid']).optional().describe('Artifact type. Default: "html".'),
       allow_js: z.boolean().optional().describe('Allow inline <script> execution on the published page. Default: false. Required for Tailwind JIT, Chart.js, Three.js, React-from-CDN etc.'),
-      share_token: z.string().optional().describe('Optional. Pass the `shareToken` returned from a previous publish to update that artifact in place. The public URL stays the same and the old content is moved into version history. Omit this on the first publish.'),
     },
-    async ({ title, content, type, allow_js, share_token }) => {
+    async ({ title, content, type, allow_js }) => {
       if (!title || !title.trim()) throw new Error('title is required');
       if (typeof content !== 'string' || !content.length) throw new Error('content is required');
 
-      const body = {
+      const result = await client.post('/artifact/quick-share', {
         title: title.trim(),
         content,
         type: type || 'html',
         allowJs: allow_js === true,
-      };
-      if (typeof share_token === 'string' && share_token.trim()) {
-        body.shareToken = share_token.trim();
-      }
-
-      const result = await client.post('/artifact/quick-share', body);
+      });
 
       const artifact = result?.data || {};
       const slug = artifact.shareableSlug || artifact.shareToken;
@@ -55,7 +49,6 @@ function registerArtifactTools(server, client) {
             shareToken: artifact.shareToken,
             shareableSlug: slug,
             duplicate: result?.duplicate === true,
-            updated: result?.updated === true,
             title: artifact.title,
           }),
         }],

package/src/tools/generate.js

@@ -5,7 +5,7 @@
 
 const { z } = require('zod');
 const FormData = require('form-data');
-const { pollUntilDone } = require('../polling');
+const { pollUntilDone, PollingTimeoutError } = require('../polling');
 const { resolveToBuffer, creditFields } = require('./_shared');
 
 function registerGenerateTools(server, client) {
@@ -383,13 +383,38 @@ function registerGenerateTools(server, client) {
   // ─── get_generation_status ─────────────────────────────────
   server.tool(
     'get_generation_status',
-    'Check the status of a generation. Use this as a FALLBACK when a generation tool returned a timeout error — the generation is probably still running on the server. Pass the generation_id from the timeout error (or from any prior generation response).',
+    'Resume polling a generation after a timeout. Pass the generation_id from a prior generation tool that timed out. This call BLOCKS server-side, polling internally — you do NOT need to call it again in a loop. Defaults to a 10-minute internal poll which covers most image edits and short videos; pass `wait_seconds` up to 1700 (~28 min) for long video / 3D / batch generations. If it returns with `still_pending: true`, the generation is genuinely slow — STOP calling this tool, tell the user the generation is still running, and resume on the next user turn. Never call this tool more than ONCE per generation_id consecutively.',
     {
-      generation_id: z.string().describe('The generation ID to check')
+      generation_id: z.string().describe('The generation ID to check'),
+      wait_seconds: z.number().int().min(10).max(1700).optional().describe('How long to block-poll internally before giving up (10–1700 seconds, default 600). Use higher values for video / 3D / large batches that can legitimately take 15+ minutes.'),
     },
-    async ({ generation_id }) => {
-      const result = await client.get(`/v1/generate/${encodeURIComponent(generation_id)}/status`);
-
+    async ({ generation_id, wait_seconds }) => {
+      const timeoutMs = (wait_seconds ?? 600) * 1000;
+      let result;
+      try {
+        result = await pollUntilDone(client, generation_id, {
+          interval: 5000,
+          timeout: timeoutMs,
+        });
+      } catch (err) {
+        if (err instanceof PollingTimeoutError) {
+          const current = await client.get(`/v1/generate/${encodeURIComponent(generation_id)}/status`).catch(() => null);
+          const minutes = Math.round(timeoutMs / 60000);
+          return {
+            content: [{
+              type: 'text',
+              text: JSON.stringify({
+                generation_id,
+                state: current?.state ?? 'unknown',
+                still_pending: true,
+                waited_seconds: Math.round(timeoutMs / 1000),
+                _note: `Polled for ${minutes} minute(s) — generation is taking longer than usual. STOP calling get_generation_status now. Tell the user the generation is still running and ask them to prompt you to check again later. Do NOT loop.`,
+              }, null, 2),
+            }],
+          };
+        }
+        throw err;
+      }
       return {
         content: [{
           type: 'text',