brightspace-mcp-server 3.7.3 → 3.7.5

package/build/api/client.js

@@ -8,7 +8,7 @@ import { TTLCache } from "./cache.js";
 import { TokenBucket } from "./rate-limiter.js";
 import { discoverVersions } from "./version-discovery.js";
 import { ApiError, RateLimitError, NetworkError } from "./errors.js";
-import { withRetry, isRetryableFailure, retryAfterMsFrom } from "./retry.js";
+import { withRetry, isRetryableFailure, retryAfterMsFrom, parseRetryAfter, } from "./retry.js";
 import { log } from "../utils/logger.js";
 import { AUTH_COMMAND } from "../utils/commands.js";
 /** An ordinary course HTML link to the login page is not an expired session. */
@@ -306,9 +306,7 @@ export class D2LApiClient {
             }
             // Handle 429 rate limiting
             if (response.status === 429) {
-                const retryAfter = response.headers.get("Retry-After");
-                const retryAfterSeconds = retryAfter ? parseInt(retryAfter, 10) : undefined;
-                throw new RateLimitError(path, retryAfterSeconds);
+                throw new RateLimitError(path, parseRetryAfter(response.headers.get("Retry-After")));
             }
             // Handle 403 (common for past-semester courses)
             if (response.status === 403) {
@@ -371,9 +369,7 @@ export class D2LApiClient {
             }
             // Handle 429 rate limiting
             if (response.status === 429) {
-                const retryAfter = response.headers.get("Retry-After");
-                const retryAfterSeconds = retryAfter ? parseInt(retryAfter, 10) : undefined;
-                throw new RateLimitError(path, retryAfterSeconds);
+                throw new RateLimitError(path, parseRetryAfter(response.headers.get("Retry-After")));
             }
             // Handle 403 (common for past-semester courses or no access)
             if (response.status === 403) {

package/build/api/retry.js

@@ -40,6 +40,28 @@ export function isRetryableFailure(error) {
         return error.status >= 500 && error.status <= 599;
     return error instanceof NetworkError;
 }
+/**
+ * Read a Retry-After header as whole seconds, or undefined when it asks for
+ * no wait. RFC 9110 allows delta-seconds ("120") or an HTTP-date; a date is
+ * measured from `now` and rounded up. Anything else is ignored so the normal
+ * backoff applies.
+ */
+export function parseRetryAfter(value, now = Date.now()) {
+    const trimmed = value?.trim();
+    if (!trimmed)
+        return undefined;
+    let seconds;
+    if (/^\d+$/.test(trimmed)) {
+        seconds = Number(trimmed);
+    }
+    else {
+        const at = Date.parse(trimmed);
+        if (Number.isNaN(at))
+            return undefined;
+        seconds = Math.ceil((at - now) / 1000);
+    }
+    return seconds > 0 ? seconds : undefined;
+}
 /** The Retry-After a 429 carried, in milliseconds, or undefined. */
 export function retryAfterMsFrom(error) {
     if (error instanceof RateLimitError && typeof error.retryAfter === "number" && error.retryAfter > 0) {

package/build/utils/config.js

@@ -30,9 +30,9 @@ export async function loadConfig() {
         ? process.env.D2L_HEADLESS !== "false"
         : store?.headless ?? true;
     // Resolve tokenTtl: env > store > default (3600)
-    const tokenTtl = process.env.D2L_TOKEN_TTL
-        ? parseInt(process.env.D2L_TOKEN_TTL, 10)
-        : store?.tokenTtl ?? 3600;
+    const tokenTtl = positiveSeconds(process.env.D2L_TOKEN_TTL, "D2L_TOKEN_TTL")
+        ?? positiveSeconds(store?.tokenTtl, "tokenTtl in config.json")
+        ?? 3600;
     // Resolve includeCourseIds: env > store > undefined
     const includeCourseIds = process.env.D2L_INCLUDE_COURSES
         ? process.env.D2L_INCLUDE_COURSES.split(',').map(s => parseInt(s.trim(), 10)).filter(n => !isNaN(n))
@@ -79,6 +79,20 @@ export function accountSessionDirectory(root, baseUrl, username) {
     const account = createHash("sha256").update(JSON.stringify([new URL(baseUrl).origin, username])).digest("hex");
     return path.join(root, "accounts", account);
 }
+/**
+ * A token lifetime must be a whole, positive number of seconds. NaN, zero, a
+ * negative number, or "1h" read as 1 second would all produce a token that is
+ * already inside the refresh buffer, so every tool call would mint again.
+ */
+function positiveSeconds(value, source) {
+    if (value === undefined || value === "")
+        return undefined;
+    const text = String(value).trim();
+    if (/^\d+$/.test(text) && Number(text) > 0)
+        return Number(text);
+    console.error(`[config] Ignoring ${source}=${JSON.stringify(value)}: expected a positive whole number of seconds`);
+    return undefined;
+}
 function expandTilde(filePath) {
     if (filePath.startsWith("~")) {
         return path.join(os.homedir(), filePath.slice(1));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brightspace-mcp-server",
-  "version": "3.7.3",
+  "version": "3.7.5",
   "mcpName": "io.github.rohanmuppa/brightspace",
   "description": "MCP server for Brightspace (D2L). Check grades, due dates, assignments, announcements, syllabus, rosters and more via Claude, ChatGPT, Cursor, Windsurf, or any MCP client.",
   "type": "module",