@abide/abide 0.125.1 → 0.126.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @abide/abide
 
+## 0.126.0
+
+### Minor Changes
+
+- 5eb1a76: `claudeCode`'s `tools` asks for the visitor's own MCP tools as well as built-in ones — `mcp__calendar__meetings`, or `mcp__calendar` for all of a server's — granted the same way, through the command or the link (44.29). A `BridgeStatus` now always carries a command and a link, paired or not, and pairing with one replaces the bridge already paired, so a page can offer a reconnect (44.59). It also carries `missing`: the tools the pairing asked for that the visitor's bridge cannot give (44.60). `/__abide/bridge` names who a code was minted for, without spending it, for a bridge that always allows a site (44.63).
+
+### Patch Changes
+
+- d61b26b: An abort (a `DOMException` named `AbortError`: a superseded call's, a stopped stream's) reaches no `onError`, the browser's or the server's — 37.28, as 37.25 keeps an aborted call from `onRefusal`. The server still writes it to its log, and under `abide start` an abort nothing handled no longer stops the app (37.10).
+
+## 0.125.2
+
+### Patch Changes
+
+- d1029ab: A `Middleware` whose `Extra` asks for `args` fits a keyed handler again — 16.86. 0.125.1's plain rung array inferred the handler's `Args` off the rung's `args: () => unknown` as well as off the `Keyed`, and refused the handler.
+
 ## 0.125.1
 
 ### Patch Changes

package/docs/REGISTRY.md

@@ -268,7 +268,7 @@ type Reached = { readonly [REACHED]: true }
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `description` | `string` | The human description carried onto every generated surface. | 16.28 |
-| `middleware` | `{ [At in keyof Answers]: (next: (ctx?: { request: Request; args: () => Args }) => Promise<Reached>, ctx: { request: Request; args: () => Args }) => Answers[At] \| Promise<Answers[At]> } \| readonly ((next: (ctx?: { request: Request; args: () => Args }) => Promise<Reached>, ctx: { request: Request; args: () => Args }) => unknown)[]` | The rungs run per call. | 16.8, 16.11, 16.12, 16.16, 16.17, 16.18, 16.19, 16.20, 16.86 |
+| `middleware` | `{ [At in keyof Answers]: (next: (ctx?: { request: Request; args: () => Args }) => Promise<Reached>, ctx: { request: Request; args: () => Args }) => Answers[At] \| Promise<Answers[At]> } \| readonly ((next: (ctx?: { request: Request; args: () => NoInfer<Args> }) => Promise<Reached>, ctx: { request: Request; args: () => NoInfer<Args> }) => unknown)[]` | The rungs run per call. | 16.8, 16.11, 16.12, 16.16, 16.17, 16.18, 16.19, 16.20, 16.86 |
 | `timeout` | `number` | How long the call may go without progress. | 16.22, 16.58, 16.59, 16.60, 16.61, 16.77 |
 | `clients` | `Clients` | Which surfaces carry this handler. | 16.37, 20.3 |
 | `crossOrigin` | `boolean \| string[]` | Whether other origins may call it, or follow it over the mux. | 16.24, 18.2, 21.19 |
@@ -382,11 +382,11 @@ type Reached = { readonly [REACHED]: true }
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.33 |
-| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | 44.16, 44.29 |
-| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; install: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the built-in tools it is given, and the command that installs the app the link opens. | 44.14, 44.32, 44.33, 44.40, 44.56 |
-| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22, 44.32, 44.33, 44.34, 44.40 |
-| `BridgeStatus` | `{ paired: boolean; command: string \| undefined; link: string \| undefined; install: string \| undefined }` | Whether a bridge is paired, and the command and the link that pair one where none is, with the command that installs the app the link opens. | 44.20, 44.40, 44.56 |
-| `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | 36.7, 44.14, 44.15, 44.19, 44.23, 44.26, 16.57, 16.78 |
+| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the tools of the visitor's machine it asks for. | 44.15, 44.16, 44.29, 44.58 |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; install: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the tools it is given, and the command that installs what opens the link. | 44.14, 44.32, 44.33, 44.40, 44.56 |
+| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22, 44.32, 44.33, 44.34, 44.40, 44.59, 44.60 |
+| `BridgeStatus` | `{ paired: boolean; missing: string[]; command: string; link: string; install: string }` | Whether a bridge is paired, the tools it cannot make available, and the command and the link that pair one, with the command that installs what opens the link. | 44.20, 44.40, 44.56, 44.59, 44.60 |
+| `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | 36.7, 44.14, 44.15, 44.19, 44.23, 44.26, 44.61, 44.63, 16.57, 16.78 |
 
 # Ambient values
 
@@ -753,7 +753,7 @@ type Reached = { readonly [REACHED]: true }
 | `Lane` | `'page' \| 'handler' \| 'file' \| 'openapi' \| 'mcp' \| 'bridge' \| 'socket' \| 'abide'` | What answers a request a `middleware` rung is handed. | 37.19 |
 | `onStart` | `(fn: (start: () => Promise<void>) => void \| Promise<void>) => () => void` | Wraps the boot. | 37.4, 37.6, 37.13 |
 | `onStop` | `(fn: (stop: () => Promise<void>) => void \| Promise<void>) => () => void` | Mirrors it for teardown. | 37.4, 37.6, 37.13 |
-| `onError` | `(fn: (error: unknown) => unknown) => () => void` | Runs on an unexpected error at the calling file's route, or in the browser below the calling component. | 37.5, 37.8, 37.13, 37.16, 37.17, 37.18, 37.21, 12.6 |
+| `onError` | `(fn: (error: unknown) => unknown) => () => void` | Runs on an unexpected error at the calling file's route, or in the browser below the calling component. | 37.5, 37.8, 37.13, 37.16, 37.17, 37.18, 37.21, 37.28, 12.6 |
 | `onRefusal` | `(fn: (refusal: Failed<string, unknown>, call: { method: 'GET' \| 'POST' \| 'PUT' \| 'PATCH' \| 'DELETE'; url: string }) => unknown) => () => void` | What the browser hands each refusal a call over http is answered with, below the calling component. | 37.13, 37.22, 37.23, 37.24, 37.25, 37.26, 37.27 |
 | `onConfig` | `(fn: ConfigDefaults \| null, options?: ConfigOptions) => () => void` | The app's config defaults. | 27.6, 37.7, 37.13 |
 | `onHealth` | `(report: () => unknown \| Promise<unknown>) => () => void` | The app's health reporter. | 25.2, 37.7, 37.13 |
@@ -933,6 +933,7 @@ site's `claudeCode`.
 
 | Command | Meaning | Rules |
 | --- | --- | --- |
-| `abide-bridge <site> <code> [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | This machine's Claude Code, paired with the browser a site minted the code for. | 44.15, 44.16, 44.24, 44.25, 44.27, 44.30, 44.44, 44.45, 44.46, 44.47 |
-| `abide-bridge install [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | The app that opens a site's `abide-bridge` links on this machine, registered. | 44.41, 44.42, 44.43, 44.44 |
+| `abide-bridge <site> <code> [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | This machine's Claude Code, paired with the browser a site minted the code for. | 44.15, 44.16, 44.24, 44.25, 44.27, 44.29, 44.30, 44.44, 44.45, 44.46, 44.47, 44.58, 44.61 |
+| `abide-bridge install [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | What opens a site's `abide-bridge` links on this machine, registered. | 44.41, 44.42, 44.43, 44.44, 44.62, 44.64, 44.65 |
 | `abide-bridge uninstall` | `abide-bridge install`, undone. | 44.43 |
+| `abide-bridge forget [<site>]` | The sites a link pairs with unasked, made to ask again. | 44.62, 44.66 |

package/docs/RULEBOOK.md

@@ -2539,7 +2539,8 @@ reach `onError` as 37.5's error does.
 process.
 
 37.10 Under `abide start` and the executable's `start`, a rejection nothing handled and a throw
-nothing caught MUST stop the app through `App.stop`, and the process MUST then exit with 1.
+nothing caught MUST stop the app through `App.stop`, and the process MUST then exit with 1 — save
+37.28's abort, which MUST NOT stop it.
 
 37.11 Under `abide start` and the executable's `start`, `SIGTERM` and `SIGINT` MUST stop the app
 through `App.stop`, and the process MUST then exit with 0.
@@ -2597,6 +2598,10 @@ and once, handed the call's method and URL beside it.
 37.27 An `onRefusal` MUST NOT change the `Failed` the call refuses with, nor keep the call from
 refusing with it.
 
+37.28 A `DOMException` named `AbortError` that 37.5, 37.8, 37.17 or 12.6 would hand `onError` MUST
+NOT reach it, on a server as in a browser: an abort is asked for, as 37.25's aborted call is, and is
+no failure.
+
 # 38. Commands
 
 ## The commands
@@ -3494,9 +3499,9 @@ and MUST refuse 409 where none is paired.
 44.14 A code `claudeCode.bridgeCommand` mints MUST pair one bridge with the browser that asked for
 it, once, and MUST NOT pair once it has expired.
 
-44.15 A bridge MUST run Claude Code with no MCP server but the bridge's own, in an empty directory
-removed when the run ends, and with no built-in tool and no setting source the visitor did not pass
-it after `--`.
+44.15 A bridge MUST run Claude Code with no MCP server but the bridge's own and the visitor's servers
+of the MCP tools 44.29 makes available to the turn, in an empty directory removed when the run ends,
+and with no built-in tool and no setting source the visitor did not pass it after `--`.
 
 44.16 A bridge MUST lay each option a site sets but `tools` (44.29) on as Claude Code's flag of that
 name, MUST fail a turn whose config sets any option `ClaudeCodeConfig` does not name, and MUST lay
@@ -3510,7 +3515,7 @@ was made in.
 44.19 `/__abide/bridge` MUST be closed until `claudeCode` has minted a pairing code in that process.
 
 44.20 `claudeCode.bridge` MUST yield a `BridgeStatus` whenever the asking browser's pairing changes,
-and MUST yield a fresh command where the standing one's code expires unpaired.
+and MUST yield a fresh command where the standing one's code expires or pairs.
 
 44.21 A failure the Messages API reports to `claudeApi`, or a bridge reports to `claudeCode`, MUST
 refuse 502.
@@ -3536,9 +3541,11 @@ redial it as 44.25 says.
 44.28 A `Provider` MUST yield a tool call's `tool` event when the model starts writing the call,
 and its `input` event, with the same `id`, once the call is written.
 
-44.29 A built-in tool MUST be available to a turn only where the site's `tools` names it and the
-visitor's `--tools` does, MUST be approved without asking unless the visitor passed `--allowedTools`,
-and the bridge MUST say once each tool the site asked for that the visitor did not grant.
+44.29 A tool of the visitor's machine — built-in by its name, or an MCP tool as `mcp__<server>__<tool>`
+— MUST be available to a turn only where the site's `tools` names it and the visitor's `--tools`
+names it or, for an MCP tool, `mcp__<server>`, and an MCP tool only where 44.58 finds its server; it
+MUST be approved without asking unless the visitor passed `--allowedTools`, and the bridge MUST say
+once each tool the site asked for that it cannot make available.
 
 44.30 A bridge stopped by `SIGTERM`, `SIGINT` or `SIGHUP` MUST end every Claude Code run it started
 before it exits.
@@ -3550,7 +3557,7 @@ signal 44.57 hands its provider aborted, else `failed` where its provider threw,
 line, else `stopped` where its caller stopped reading.
 
 44.32 A command `claudeCode.bridgeCommand` or `claudeCode.bridge` mints with `tools` MUST grant
-those built-in tools after its `--` as `--tools`, and one minted without `tools` MUST carry no `--`.
+those tools after its `--` as `--tools`, and one minted without `tools` MUST carry no `--`.
 
 44.33 A pairing MUST be to the claims the principal was sealed with (26.11), or to none, where its
 code was minted, and `claudeCode` and `claudeCode.bridge` MUST read it as absent to a request from
@@ -3578,22 +3585,24 @@ its type, in its place in its turn.
 as one text piece.
 
 44.40 A pairing `claudeCode.bridgeCommand` or `claudeCode.bridge` mints MUST carry, beside its command,
-a link in the `abide-bridge` scheme naming the same site, code, bridge release and built-in tools.
+a link in the `abide-bridge` scheme naming the same site, code, bridge release and tools.
 
 44.41 A bridge MUST open only a link of the `abide-bridge` scheme whose site is https or loopback and
 whose release is a version alone, and MUST run the release it names.
 
-44.42 A bridge opening an `abide-bridge` link MUST ask the visitor before it pairs, every time, naming
-the site, the built-in tools and the bridge release the link asks for, and the options and the names
-of the variables `abide-bridge install` kept (44.44).
+44.42 A bridge opening an `abide-bridge` link MUST ask the visitor before it pairs, save where 44.62
+pairs it unasked, naming the site, the tools and the bridge release the link asks for, and the
+options and the names of the variables `abide-bridge install` kept (44.44), and MUST offer to always
+allow the site only where `/__abide/bridge` named a holder for the link's code (44.63).
 
-44.43 `abide-bridge install` MUST write the app that opens links under the visitor's own Application
-Support and register it there, and `abide-bridge uninstall` MUST unregister it and remove all
-install wrote.
+44.43 `abide-bridge install` MUST write what opens links under the visitor's own home — Application
+Support on macOS, `XDG_DATA_HOME` on Linux, `LOCALAPPDATA` on Windows — and register it with that
+desktop for the visitor alone, and `abide-bridge uninstall` MUST unregister it and remove all install
+wrote.
 
 44.44 `abide-bridge install` MUST keep the Claude Code options after its `--` and each `--env
 NAME=VALUE` it is given, and a bridge opening an `abide-bridge` link MUST run Claude Code with those
-options ahead of the link's built-in tools and with those variables set, and a link MUST NOT set either.
+options ahead of the link's tools and with those variables set, and a link MUST NOT set either.
 
 44.45 A bridge MUST say that `/__abide/bridge` did not take a report once, and not again until a
 report is taken, and MUST NOT say it while it redials per 44.25.
@@ -3634,6 +3643,35 @@ names, reading its `items` where its `files` hold none.
 aborts or once the `signal` its caller passed does, and once that signal aborts MUST end the
 conversation without waiting for the provider to, refused with `aborted` at status 499.
 
+44.58 A bridge MUST find the visitor's MCP servers, at each turn, in each `--mcp-config` the visitor
+passed after `--`, or where they passed none, in the user scope of their Claude Code configuration,
+and MUST NOT find the bridge's own server's name there.
+
+44.59 A `BridgeStatus` MUST carry a command and a link whether or not a bridge is paired, and a bridge
+pairing by its code MUST take the place of the one paired.
+
+44.60 A `BridgeStatus` MUST carry as `missing` each tool its pairing's code asked for that the paired
+bridge last reported it cannot make available (44.29), and none while no bridge is paired.
+
+44.61 A bridge MUST report to `/__abide/bridge` the tools its pairing's code asked for that it cannot
+make available once it pairs, and again before a turn wherever they changed.
+
+44.62 A bridge opening an `abide-bridge` link MUST pair without asking only where the visitor chose to
+always allow its site for the holder `/__abide/bridge` names for its code (44.63), and the link asks
+for no tool beyond those allowed when they chose.
+
+44.63 `/__abide/bridge` MUST name, for a code minted and unspent, a holder without spending the code —
+the same for every code minted to one sign-in, or signed out to one browser, and different for any
+other — and MUST refuse 403 any other code.
+
+44.64 A bridge opening an `abide-bridge` link on a desktop it cannot ask on MUST NOT pair.
+
+44.65 A bridge opening an `abide-bridge` link MUST name, in the question 44.42 asks, each MCP tool the
+link asks for whose server 44.58 does not find.
+
+44.66 `abide-bridge forget` MUST stop always allowing the site it names, or every site where it names
+none.
+
 # 45. Offline
 
 45.1 Where `ABIDE_OFFLINE` is on, a page `abide build` built MUST register the worker

package/docs/abide.md

@@ -6493,12 +6493,15 @@ const answer = reactive(() => {
     <ul class="fields">
         <li><span>your claude code</span><strong>paired</strong></li>
     </ul>
+    <div class="row">
+        <a href={pairing.at(-1)?.link}>Reconnect</a>
+    </div>
 {:else if pairing.at(-1)}
     <pre class="rounded-md border border-rule bg-raised p-snug
         text-chrome">{pairing.at(-1)?.command}</pre>
     <div class="row">
         <a href={pairing.at(-1)?.link}>Open in abide bridge</a>
-        <span class="status">on macOS, after
+        <span class="status">after
             <code>bunx @abide/bridge install</code></span>
     </div>
 {:else}
@@ -6610,25 +6613,31 @@ test('unpaired: refused, with a command and a link', async () => {
 
 `claudeCode` sends the conversation to Claude Code on the asker's machine, on their own sign-in and plan. Its config, `ClaudeCodeConfig`, is Claude Code's own option names, each passed as its flag: `model`, `fallbackModel`, `systemPrompt`, `appendSystemPrompt`, `effort`, `maxBudgetUsd`, `betas` and `disallowedTools`. Permissions, directories and settings are not the site's to set.
 
-`tools` asks for Claude Code's built-in tools, and the visitor decides. A tool runs only where they granted it after the command's `--`, and the bridge tells them about any it was asked for and not given. Anything else after `--` goes to Claude Code as written, and overrides what the site set.
+`tools` asks for tools of the visitor's machine, and the visitor decides. Name a built-in tool, such as `WebSearch`, or a tool of an MCP server the visitor configured, as Claude Code names it: `mcp__calendar__meetings`, or `mcp__calendar` for all of that server's. A tool runs only where they granted it after the command's `--`, and the bridge tells them about any it was asked for and not given. Anything else after `--` goes to Claude Code as written, and overrides what the site set.
 
 ```
-bunx @abide/bridge <site> <code> -- --tools WebSearch,WebFetch
+bunx @abide/bridge <site> <code> -- --tools WebSearch,mcp__calendar__meetings
 ```
 
+The site names tools, never servers: a server is a command that runs on the visitor's machine. The bridge finds it in their own Claude Code configuration, the user scope `claude mcp add --scope user` writes, or in each `--mcp-config` they pass instead. It reads them again at every turn, so a server added mid-visit is used at the next question, and a turn gets only the servers of the tools it was given.
+
 `bunx @abide/bridge` runs `abide-bridge <site> <code>`. `--claude <path>` names the Claude Code to run where `claude` is not on the `PATH`, and each `--env NAME=VALUE` sets a variable for it, such as a proxy or an API key of the visitor's own.
 
 Pass the same `tools` to `claudeCode.bridge` or `claudeCode.bridgeCommand` and the command it mints carries that grant, so a visitor who runs it as shown gives the tools. One minted without them grants none.
 
-The visitor pairs once per visit by running a command, which dials out to the site. Asking with nothing paired is refused 409.
+The visitor pairs once per visit by running a command, which dials out to the site. Asking with nothing paired is refused 409. Every status carries a command, paired or not, and a bridge paired with it takes the place of the one paired, so a page can offer a reconnect without waiting for the old bridge to go.
 
-On a Mac the visitor can pair with a click instead. Each status carries a `link` beside its command, the same pairing in the `abide-bridge` scheme, and a visitor who has run this once opens it from the page:
+Each status also carries `missing`: the tools the pairing asked for that the paired bridge reports it cannot give, because the visitor did not grant one or has no server for it. Show the visitor what to add from it.
+
+On macOS, Linux and Windows the visitor can pair with a click instead. Each status carries a `link` beside its command, the same pairing in the `abide-bridge` scheme, and a visitor who has run this once opens it from the page:
 
 ```
 bunx @abide/bridge install
 ```
 
-That builds a small app under their own Application Support folder, nowhere in Applications, and registers it for the scheme. `abide-bridge install` takes the same `--claude`, `--env` and options after `--` as the command, and keeps them: every link it opens runs Claude Code with them, and no link can set either. Opening a link asks them every time, naming the site, the tools and the bridge release it asks for, and the options and variable names install kept, and then runs that release, as the command would. A link only proves the site minted its code, never that this visitor asked for it, so no answer is kept for a site. `abide-bridge uninstall` takes away everything install wrote.
+That registers a handler for the scheme under the visitor's own home: a small app in Application Support on macOS, a desktop entry on Linux, the visitor's own registry classes on Windows. `abide-bridge install` takes the same `--claude`, `--env` and options after `--` as the command, and keeps them: every link it opens runs Claude Code with them, and no link can set either. Opening a link asks first, naming the site, the tools and the bridge release it asks for, any tool whose server they lack, and the options and variable names install kept, and then runs that release, as the command would. A Linux desktop with neither `zenity` nor `kdialog` cannot ask, so it pairs nothing from a link.
+
+The visitor can answer Always Allow. A link only proves the site minted its code, never that this visitor asked for it, so the bridge keeps the answer for the site and for whom the code was minted: the signed-in member, or the browser when nobody is. A later link pairs unasked only where its code was minted for the same one and asks for no new tool. A code someone else minted and put in front of them is asked about. `abide-bridge forget` asks again for one site, or every one, and `abide-bridge uninstall` takes away everything install wrote.
 
 A bridge that loses the site says so once, and not again until the site takes a report. A turn whose report the site did not take is ended, and reported failed.
 
@@ -6636,8 +6645,8 @@ The tools the conversation calls run as the visitor, on the sign-in their ask ca
 
 | Name | What it does for the CRM |
 | --- | --- |
-| `claudeCode.bridge` | Streams this browser's pairing: unpaired with the command to run and the link to open, then paired. |
-| `BridgeStatus` | One status in that stream, `{ paired, command, link, install }`. `install` is the command that installs the app the link opens, at the release the command runs. |
+| `claudeCode.bridge` | Streams this browser's pairing: unpaired, then paired, each with the command to run and the link to open. |
+| `BridgeStatus` | One status in that stream, `{ paired, missing, command, link, install }`. `install` is the command that installs what opens the link, at the release the command runs. |
 | `claudeCode.bridgeCommand` | Mints the command and the link alone, for a page that wants them without the stream. Its code expires unused after ten minutes. |
 | `/__abide/bridge` | Where the visitor's bridge connects. It opens the first time a command is minted. |
 
@@ -8528,7 +8537,7 @@ Reactive primitives: what is written in place rather than imported.
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `description` | `string` | The human description carried onto every generated surface. | [16.28](/rulebook#16.28) |
-| `middleware` | `{ [At in keyof Answers]: (next: (ctx?: { request: Request; args: () => Args }) => Promise<Reached>, ctx: { request: Request; args: () => Args }) => Answers[At] \| Promise<Answers[At]> } \| readonly ((next: (ctx?: { request: Request; args: () => Args }) => Promise<Reached>, ctx: { request: Request; args: () => Args }) => unknown)[]` | The rungs run per call. | [16.8](/rulebook#16.8), [16.11](/rulebook#16.11), [16.12](/rulebook#16.12), [16.16](/rulebook#16.16), [16.17](/rulebook#16.17), [16.18](/rulebook#16.18), [16.19](/rulebook#16.19), [16.20](/rulebook#16.20), [16.86](/rulebook#16.86) |
+| `middleware` | `{ [At in keyof Answers]: (next: (ctx?: { request: Request; args: () => Args }) => Promise<Reached>, ctx: { request: Request; args: () => Args }) => Answers[At] \| Promise<Answers[At]> } \| readonly ((next: (ctx?: { request: Request; args: () => NoInfer<Args> }) => Promise<Reached>, ctx: { request: Request; args: () => NoInfer<Args> }) => unknown)[]` | The rungs run per call. | [16.8](/rulebook#16.8), [16.11](/rulebook#16.11), [16.12](/rulebook#16.12), [16.16](/rulebook#16.16), [16.17](/rulebook#16.17), [16.18](/rulebook#16.18), [16.19](/rulebook#16.19), [16.20](/rulebook#16.20), [16.86](/rulebook#16.86) |
 | `timeout` | `number` | How long the call may go without progress. | [16.22](/rulebook#16.22), [16.58](/rulebook#16.58), [16.59](/rulebook#16.59), [16.60](/rulebook#16.60), [16.61](/rulebook#16.61), [16.77](/rulebook#16.77) |
 | `clients` | `Clients` | Which surfaces carry this handler. | [16.37](/rulebook#16.37), [20.3](/rulebook#20.3) |
 | `crossOrigin` | `boolean \| string[]` | Whether other origins may call it, or follow it over the mux. | [16.24](/rulebook#16.24), [18.2](/rulebook#18.2), [21.19](/rulebook#21.19) |
@@ -9168,9 +9177,9 @@ Generated surfaces: what is written in place rather than imported.
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.33](/rulebook#44.33) |
-| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; install: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the built-in tools it is given, and the command that installs the app the link opens. | [44.14](/rulebook#44.14), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.40](/rulebook#44.40), [44.56](/rulebook#44.56) |
-| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.34](/rulebook#44.34), [44.40](/rulebook#44.40) |
-| `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | [36.7](/rulebook#36.7), [44.14](/rulebook#44.14), [44.15](/rulebook#44.15), [44.19](/rulebook#44.19), [44.23](/rulebook#44.23), [44.26](/rulebook#44.26), [16.57](/rulebook#16.57), [16.78](/rulebook#16.78) |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; install: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the tools it is given, and the command that installs what opens the link. | [44.14](/rulebook#44.14), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.40](/rulebook#44.40), [44.56](/rulebook#44.56) |
+| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.34](/rulebook#44.34), [44.40](/rulebook#44.40), [44.59](/rulebook#44.59), [44.60](/rulebook#44.60) |
+| `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | [36.7](/rulebook#36.7), [44.14](/rulebook#44.14), [44.15](/rulebook#44.15), [44.19](/rulebook#44.19), [44.23](/rulebook#44.23), [44.26](/rulebook#44.26), [44.61](/rulebook#44.61), [44.63](/rulebook#44.63), [16.57](/rulebook#16.57), [16.78](/rulebook#16.78) |
 
 ## Taught in
 
@@ -9188,7 +9197,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | [44.16](/rulebook#44.16), [44.29](/rulebook#44.29) |
+| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the tools of the visitor's machine it asks for. | [44.15](/rulebook#44.15), [44.16](/rulebook#44.16), [44.29](/rulebook#44.29), [44.58](/rulebook#44.58) |
 
 ## Taught in
 
@@ -9206,7 +9215,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `BridgeStatus` | `{ paired: boolean; command: string \| undefined; link: string \| undefined; install: string \| undefined }` | Whether a bridge is paired, and the command and the link that pair one where none is, with the command that installs the app the link opens. | [44.20](/rulebook#44.20), [44.40](/rulebook#44.40), [44.56](/rulebook#44.56) |
+| `BridgeStatus` | `{ paired: boolean; missing: string[]; command: string; link: string; install: string }` | Whether a bridge is paired, the tools it cannot make available, and the command and the link that pair one, with the command that installs what opens the link. | [44.20](/rulebook#44.20), [44.40](/rulebook#44.40), [44.56](/rulebook#44.56), [44.59](/rulebook#44.59), [44.60](/rulebook#44.60) |
 
 ## Taught in
 
@@ -10405,7 +10414,7 @@ Configuration: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `onError` | `(fn: (error: unknown) => unknown) => () => void` | Runs on an unexpected error at the calling file's route, or in the browser below the calling component. | [37.5](/rulebook#37.5), [37.8](/rulebook#37.8), [37.13](/rulebook#37.13), [37.16](/rulebook#37.16), [37.17](/rulebook#37.17), [37.18](/rulebook#37.18), [37.21](/rulebook#37.21), [12.6](/rulebook#12.6) |
+| `onError` | `(fn: (error: unknown) => unknown) => () => void` | Runs on an unexpected error at the calling file's route, or in the browser below the calling component. | [37.5](/rulebook#37.5), [37.8](/rulebook#37.8), [37.13](/rulebook#37.13), [37.16](/rulebook#37.16), [37.17](/rulebook#37.17), [37.18](/rulebook#37.18), [37.21](/rulebook#37.21), [37.28](/rulebook#37.28), [12.6](/rulebook#12.6) |
 
 ## Taught in
 
@@ -11617,9 +11626,10 @@ CLI: what is written in place rather than imported.
 
 | Command | Meaning | Rules |
 | --- | --- | --- |
-| `abide-bridge <site> <code> [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | This machine's Claude Code, paired with the browser a site minted the code for. | [44.15](/rulebook#44.15), [44.16](/rulebook#44.16), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.27](/rulebook#44.27), [44.30](/rulebook#44.30), [44.44](/rulebook#44.44), [44.45](/rulebook#44.45), [44.46](/rulebook#44.46), [44.47](/rulebook#44.47) |
-| `abide-bridge install [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | The app that opens a site's `abide-bridge` links on this machine, registered. | [44.41](/rulebook#44.41), [44.42](/rulebook#44.42), [44.43](/rulebook#44.43), [44.44](/rulebook#44.44) |
+| `abide-bridge <site> <code> [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | This machine's Claude Code, paired with the browser a site minted the code for. | [44.15](/rulebook#44.15), [44.16](/rulebook#44.16), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.27](/rulebook#44.27), [44.29](/rulebook#44.29), [44.30](/rulebook#44.30), [44.44](/rulebook#44.44), [44.45](/rulebook#44.45), [44.46](/rulebook#44.46), [44.47](/rulebook#44.47), [44.58](/rulebook#44.58), [44.61](/rulebook#44.61) |
+| `abide-bridge install [--claude <path>] [--env NAME=VALUE]… [-- <options>]` | What opens a site's `abide-bridge` links on this machine, registered. | [44.41](/rulebook#44.41), [44.42](/rulebook#44.42), [44.43](/rulebook#44.43), [44.44](/rulebook#44.44), [44.62](/rulebook#44.62), [44.64](/rulebook#44.64), [44.65](/rulebook#44.65) |
 | `abide-bridge uninstall` | `abide-bridge install`, undone. | [44.43](/rulebook#44.43) |
+| `abide-bridge forget [<site>]` | The sites a link pairs with unasked, made to ask again. | [44.62](/rulebook#44.62), [44.66](/rulebook#44.66) |
 
 ## Taught in
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.125.1",
+    "version": "0.126.0",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/server/BRIDGE_VERSION.ts

@@ -1,3 +1,3 @@
 // The `abide-bridge` release a pairing command names, so a visitor's `bunx` runs the relay this
 // server speaks. `packages/abide/tests/claudeCode.test.ts` holds it to the bridge package's own.
-export const BRIDGE_VERSION = '0.5.2'
+export const BRIDGE_VERSION = '0.6.0'

package/src/server/bridgeRelay.ts

@@ -4,9 +4,12 @@
 //
 //   GET  /__abide/bridge?code=…   the pairing, answered by a server-sent stream of what the bridge is
 //                                 to do: the token it posts with, each turn, each tool reply, a cancel.
+//   GET  /__abide/bridge?holder=… who a code was minted for, as an opaque string, without spending it
+//                                 (44.63): what a bridge always allowing a site checks a link against.
 //   GET  /__abide/bridge          the same stream, resumed by the token after it dropped (44.26).
 //   POST /__abide/bridge          what the bridge reports, one frame per line: a turn's events, the
-//                                 MCP requests its Claude Code made, the turn's end or failure.
+//                                 MCP requests its Claude Code made, the turn's end or failure, and
+//                                 the tools the pairing asked for that it cannot give (44.61).
 //
 // A PAIRING IS TO A BROWSER — the `abide-caller` its page carries (26.5) — and to whoever was signed
 // in there when its code was minted (44.33), for as long as the bridge's stream is open, or
@@ -24,6 +27,7 @@ import { bodyWithin } from './answerRpc.ts'
 import { framed } from './answerValue.ts'
 import type { ProviderEvent } from './assistant.ts'
 import { Inbox } from './Inbox.ts'
+import { holderOf } from './principal.ts'
 import { randomToken } from './randomToken.ts'
 import { RESUME_MILLISECONDS } from './RESUME_MILLISECONDS.ts'
 import { onSignInChanged } from './signInChanged.ts'
@@ -53,14 +57,24 @@ type Bridge = {
     idle: ReturnType<typeof setTimeout> | undefined
     // Set while the stream is dropped and the pairing waits to be resumed (44.26).
     held: ReturnType<typeof setTimeout> | undefined
+    // What its code asked for of the visitor's machine, and of that what it reported it cannot give.
+    asked: string[]
+    missing: string[]
 }
 
+/** A pairing as a status stream says it: whether a bridge is paired, the code that pairs one, and what it cannot give. */
+export type PairingState = { paired: boolean; code: string; missing: string[] }
+
 /** How long a pairing code stands unused. */
 const CODE_LIFETIME = 10 * 60_000
 // How long a bridge outlives the last page watching it, so a reload does not end it.
 const IDLE_GRACE = 30_000
 
-const CODES = new Map<string, { key: string; expires: number }>()
+// Each code minted and unspent: the pairing it is for, who it was minted for, and what it asks.
+const CODES = new Map<
+    string,
+    { key: string; expires: number; holder: string; tools: string[] }
+>()
 const BY_KEY = new Map<string, Bridge>()
 const BY_TOKEN = new Map<string, Bridge>()
 const WATCHERS = new Map<string, Set<() => void>>()
@@ -89,17 +103,26 @@ function pairingKey(caller: string, signedIn: string): string {
 // 44.19 — the relay answers once the app has handed out a pairing code, and never before.
 let minted = false
 
-/** A single-use pairing code for `caller` signed in as `signedIn`, and when it stops standing. 44.14. */
+/**
+ * A single-use pairing code for `caller` signed in as `signedIn`, asking for `tools` of the visitor's
+ * machine, and when it stops standing. 44.14.
+ */
 export function mintCode(
     caller: string,
     signedIn: string,
+    tools: readonly string[] = [],
 ): { code: string; expires: number } {
     const now = Date.now()
     for (const [code, pairing] of CODES)
         if (pairing.expires <= now) CODES.delete(code)
     const code = randomToken(12, 'base64url')
     const expires = now + CODE_LIFETIME
-    CODES.set(code, { key: pairingKey(caller, signedIn), expires })
+    CODES.set(code, {
+        key: pairingKey(caller, signedIn),
+        expires,
+        holder: holderOf(caller, signedIn),
+        tools: [...tools],
+    })
     minted = true
     return { code, expires }
 }
@@ -167,9 +190,10 @@ export async function* runTurn({
 }
 
 /**
- * The pairing of `caller` signed in as `signedIn` as it changes, until `signal` aborts: the code that
- * pairs it while unpaired, then `undefined` the moment a bridge connects, and a code again if it goes. A
- * code that expires while nothing is paired is replaced with a fresh one. 44.20.
+ * The pairing of `caller` signed in as `signedIn` as it changes, until `signal` aborts: whether a bridge
+ * is paired, what it reported it cannot give of `tools`, and always a code asking for `tools` that pairs
+ * one — in place of the one paired, where one is (44.59). A code that expires or is spent is replaced
+ * with a fresh one. 44.20.
  *
  * 44.34 — IT FOLLOWS WHOEVER SIGNS IN AT THE BROWSER: a sign-in or a sign-out made since is the
  * pairing it watches from then on, and the code it offers is that sign-in's.
@@ -177,8 +201,9 @@ export async function* runTurn({
 export async function* pairingStatus(
     caller: string,
     signedIn: string,
+    tools: readonly string[],
     signal: AbortSignal,
-): AsyncGenerator<string | undefined> {
+): AsyncGenerator<PairingState> {
     // A change landing while the loop was not waiting — paused at its `yield` — stays queued, so it
     // looks again; a look that finds nothing new yields nothing.
     const changes = new Inbox<undefined>()
@@ -193,8 +218,8 @@ export async function* pairingStatus(
     let unwatch = (): void => {}
     let unfollow = (): void => {}
     let pairing: { code: string; expires: number } | undefined
-    // `null` until the first is said; `undefined` says paired.
-    let said: string | undefined | null = null
+    // `undefined` until the first is said.
+    let said: string | undefined
     signal.addEventListener('abort', rouse)
     try {
         while (!signal.aborted) {
@@ -207,20 +232,28 @@ export async function* pairingStatus(
                 watchingKey = key
                 pairing = undefined
             }
-            const paired = BY_KEY.has(key)
+            const bridge = BY_KEY.get(key)
             if (
-                !paired &&
-                (pairing === undefined || pairing.expires <= Date.now())
+                pairing === undefined ||
+                pairing.expires <= Date.now() ||
+                !CODES.has(pairing.code)
             )
-                pairing = mintCode(caller, signedIn)
-            const code = paired ? undefined : pairing?.code
-            if (code !== said) {
-                said = code
-                yield code
+                pairing = mintCode(caller, signedIn, tools)
+            const state: PairingState = {
+                paired: bridge !== undefined,
+                code: pairing.code,
+                // 44.60 — of what this stream's code asks for: two on one page may ask for different tools.
+                missing:
+                    bridge === undefined
+                        ? []
+                        : missingOf(tools, bridge.missing),
             }
-            const renew = paired
-                ? undefined
-                : setTimeout(rouse, (pairing?.expires ?? 0) - Date.now())
+            const saying = `${state.paired} ${state.code} ${state.missing.join(',')}`
+            if (saying !== said) {
+                said = saying
+                yield state
+            }
+            const renew = setTimeout(rouse, pairing.expires - Date.now())
             await waiting.next()
             clearTimeout(renew)
         }
@@ -338,18 +371,15 @@ export async function answerBridge(request: Request): Promise<unknown> {
 }
 
 function pair(request: Request): Response {
-    const code = new URL(request.url).searchParams.get('code')
+    const query = new URL(request.url).searchParams
+    const holder = query.get('holder')
+    if (holder !== null) return holderAnswer(holder)
+    const code = query.get('code')
     if (code === null) return resume(request)
-    const pairing = CODES.get(code)
+    const pairing = standingCode(code)
     // 44.14 — a code pairs once.
     CODES.delete(code)
-    if (pairing === undefined || pairing.expires <= Date.now())
-        return answered(
-            refuse(
-                403,
-                'This pairing code was not issued here, or it has been used, or it has expired.',
-            ),
-        )
+    if (pairing === undefined) return unknownCode()
     const standing = BY_KEY.get(pairing.key)
     if (standing !== undefined) {
         standing.frames.push({ type: 'bye' })
@@ -363,14 +393,45 @@ function pair(request: Request): Response {
         watched: WATCHERS.has(pairing.key),
         idle: undefined,
         held: undefined,
+        asked: pairing.tools,
+        missing: [],
     }
     BY_KEY.set(bridge.key, bridge)
     BY_TOKEN.set(bridge.token, bridge)
-    bridge.frames.push({ type: 'paired', token: bridge.token })
+    bridge.frames.push({
+        type: 'paired',
+        token: bridge.token,
+        tools: pairing.tools,
+    })
     wakeWatchers(bridge.key)
     return attach(bridge, request)
 }
 
+// 44.63 — WHO A CODE WAS MINTED FOR, read without spending it: a code minted for someone else names
+// someone else, which is what a bridge always allowing a site refuses to pair unasked.
+function holderAnswer(code: string): Response {
+    const pairing = standingCode(code)
+    if (pairing === undefined) return unknownCode()
+    return Response.json({ holder: pairing.holder })
+}
+
+/** What `code` was minted with, while it is unspent and unexpired. */
+function standingCode(code: string) {
+    const pairing = CODES.get(code)
+    return pairing === undefined || pairing.expires <= Date.now()
+        ? undefined
+        : pairing
+}
+
+function unknownCode(): Response {
+    return answered(
+        refuse(
+            403,
+            'This pairing code was not issued here, or it has been used, or it has expired.',
+        ),
+    )
+}
+
 /** The bridge the request's bearer token was handed when it paired. */
 function pairedBy(request: Request): Bridge | undefined {
     return BY_TOKEN.get(
@@ -404,8 +465,9 @@ function attach(bridge: Bridge, request: Request): Response {
 }
 
 type BridgeReport = {
-    type: 'event' | 'mcp' | 'end' | 'fail'
+    type: 'event' | 'mcp' | 'end' | 'fail' | 'missing'
     turn: string
+    tools?: string[]
     event?: unknown
     id?: number
     method?: string
@@ -413,6 +475,15 @@ type BridgeReport = {
     message?: string
 }
 
+/** The tools of `asked` that `reported` names: a bridge says what it cannot give of no other. */
+function missingOf(asked: readonly string[], reported: unknown): string[] {
+    const missing: string[] = []
+    if (Array.isArray(reported))
+        for (const tool of asked)
+            if (reported.includes(tool)) missing.push(tool)
+    return missing
+}
+
 async function relay(request: Request): Promise<Response> {
     const bridge = pairedBy(request)
     if (bridge === undefined)
@@ -432,9 +503,15 @@ async function relay(request: Request): Promise<Response> {
         }
     }
     for (const report of reports) {
+        // 44.60 — what the pairing asked for and the bridge cannot give, as the page's status says it.
+        if (report.type === 'missing') {
+            bridge.missing = missingOf(bridge.asked, report.tools)
+            wakeWatchers(bridge.key)
+            continue
+        }
         const turn = bridge.turns.get(report.turn)
         if (turn === undefined) continue
-        turn.push(item(report.type, report))
+        turn.push(item(report.type as TurnItem['kind'], report))
     }
     return new Response(null, { status: 204 })
 }

package/src/server/claudeCode.ts

@@ -5,8 +5,9 @@
 //
 // CONFIGURED BY CLAUDE CODE'S OWN OPTION NAMES, which the bridge lays on as their flags, and only the ones
 // that shape the answer. What would give a site power over the visitor's machine — permissions,
-// directory, settings — is not an option here at all, and its built-in `tools` are a request the visitor
-// grants or does not: the bridge decides (44.15, 44.16, 44.29).
+// directory, settings, an MCP server — is not an option here at all, and its `tools`, built-in or of
+// the visitor's own MCP servers, are a request the visitor grants or does not: the bridge decides
+// (44.15, 44.16, 44.29).
 
 import type {
     AssistantContent,
@@ -25,7 +26,10 @@ import { mcpFailure } from './generatedSurfaces.ts'
 import { signedInAs } from './principal.ts'
 import { request } from './requestScope.ts'
 
-/** The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. */
+/**
+ * The Claude Code options a site may set for a turn, and the tools of the visitor's machine it asks
+ * for: built-in by name, or of the visitor's own MCP servers as `mcp__<server>__<tool>`.
+ */
 export type ClaudeCodeConfig = {
     model?: string
     fallbackModel?: string
@@ -38,18 +42,20 @@ export type ClaudeCodeConfig = {
     tools?: string[]
 }
 
-/** The built-in tools a pairing command grants, as the visitor would after its `--`. 44.32. */
+/** The tools a pairing command grants, as the visitor would after its `--`. 44.32. */
 type PairingOptions = Pick<ClaudeCodeConfig, 'tools'>
 
 /**
- * Whether this browser's bridge is connected, and the command and the link that pair one where it is
- * not, with the command that installs the app the link opens.
+ * Whether this browser's bridge is connected, the tools it asked for that the bridge cannot give, and
+ * the command and the link that pair one — in place of the one connected, where one is — with the
+ * command that installs what opens the link.
  */
 export type BridgeStatus = {
     paired: boolean
-    command: string | undefined
-    link: string | undefined
-    install: string | undefined
+    missing: string[]
+    command: string
+    link: string
+    install: string
 }
 
 /** The visitor's own Claude Code, reached through the bridge paired to their browser. */
@@ -125,7 +131,11 @@ function bridgeCommand(options: PairingOptions = {}): {
     install: string
     expires: number
 } {
-    const { code, expires } = mintCode(askingCaller(), signedInAs())
+    const { code, expires } = mintCode(
+        askingCaller(),
+        signedInAs(),
+        options.tools,
+    )
     return { ...commandFor(code, options), expires }
 }
 
@@ -150,26 +160,20 @@ function commandFor(
 }
 
 /**
- * This browser's pairing as it changes: unpaired with the command to run and the link to open, then
- * paired the moment a bridge connects, and unpaired again if it goes — following whoever signs in at
- * the browser since. 44.20, 44.34.
+ * This browser's pairing as it changes: unpaired, then paired the moment a bridge connects, and
+ * unpaired again if it goes — following whoever signs in at the browser since — each status with the
+ * command to run and the link to open. 44.20, 44.34, 44.59, 44.60.
  */
 async function* bridge(
     options: PairingOptions = {},
 ): AsyncGenerator<BridgeStatus> {
-    for await (const code of pairingStatus(
+    for await (const { paired, code, missing } of pairingStatus(
         askingCaller(),
         signedInAs(),
+        options.tools ?? [],
         request().signal,
     ))
-        yield code === undefined
-            ? {
-                  paired: true,
-                  command: undefined,
-                  link: undefined,
-                  install: undefined,
-              }
-            : { paired: false, ...commandFor(code, options) }
+        yield { paired, missing, ...commandFor(code, options) }
 }
 
 /** The visitor's own Claude Code as a provider, with the pairing that reaches it. */

package/src/server/faultPolicy.ts

@@ -2,6 +2,8 @@
 // per command that serves. `createApp` installs neither, so a test or a script keeps bun's default of
 // failing loudly.
 
+import { isAbort } from '#shared/isAbort.ts'
+
 import type { App } from './createApp.ts'
 import { reportUnexpected } from './hooks.ts'
 
@@ -27,7 +29,8 @@ export function keepServing(): void {
  *
  * A FAULT NOBODY AWAITED stops it too, after `onError` has it: the app's state is no longer one
  * anything vouched for, and a supervisor restarting a clean process is the recovery. The exit code
- * is what tells the supervisor which of the two it was.
+ * is what tells the supervisor which of the two it was. An abort was asked for and vouches for the
+ * state as it found it, so it is written and the app serves on (37.28).
  *
  * 37.12 — A SECOND SIGNAL WHILE STOPPING ENDS THE PROCESS AT ONCE, so a drain that never finishes
  * is still one keystroke from over.
@@ -52,7 +55,7 @@ export function stopOnSignalOrFault(app: App): void {
         })
     const fault = (error: unknown): void => {
         reportUnexpected(error)
-        if (!stopping) stopThenExit(1)
+        if (!stopping && !isAbort(error)) stopThenExit(1)
     }
     process.on('unhandledRejection', fault)
     process.on('uncaughtException', fault)

package/src/server/hooks.ts

@@ -12,6 +12,7 @@
 // `App` in it boots under the same hooks (42.12's sharing, from the other side).
 
 import { type Failed, isFailed } from '#shared/Failed.ts'
+import { isAbort } from '#shared/isAbort.ts'
 import { namedLogger } from '#shared/log.ts'
 import type { Rung } from '#shared/Middleware.ts'
 import { aborted, refuse } from '#shared/refuse.ts'
@@ -313,9 +314,11 @@ export function reportUnexpected(error: unknown): void {
 /**
  * Hands an error to every `onError` hook, writing nothing of its own.
  *
- * 12.6 — the half of 37.5 a failure already warned on its own namespace is owed.
+ * 12.6 — the half of 37.5 a failure already warned on its own namespace is owed. An abort is
+ * written and handed to none (37.28).
  */
 export function handOnError(error: unknown): void {
+    if (isAbort(error)) return
     // 37.5 — NEAREST ROUTE FIRST, over the route the request matched; outside every request, or
     // before one matched, the root's alone.
     const route = currentRequestScope()?.route

package/src/server/principal.ts

@@ -241,6 +241,18 @@ export function signedInAs(): string {
     return identityOf(openedSeal(within('claudeCode')))
 }
 
+/**
+ * Who a pairing code minted for `caller` signed in as `signedIn` is minted for, as a bridge is told it
+ * (44.63): one string per sign-in — signed by the principal secret, so no claim is read off it — or,
+ * signed out, one per browser, and never the same for two.
+ */
+export function holderOf(caller: string, signedIn: string): string {
+    const [secret] = secrets()
+    return signedIn === 'null' || secret === undefined
+        ? `browser.${new Bun.CryptoHasher('sha256').update(caller).digest('base64url')}`
+        : `account.${signature(secret, signedIn)}`
+}
+
 /**
  * Signs this caller in with `claims`, sealing them into the cookie.
  *

package/src/shared/isAbort.ts

@@ -0,0 +1,4 @@
+/** Whether `error` is an abort, which was asked for — a superseded call's, a stopped stream's. 37.28. */
+export function isAbort(error: unknown): boolean {
+    return error instanceof DOMException && error.name === 'AbortError'
+}

package/src/shared/onError.ts

@@ -7,9 +7,10 @@
 // WHAT NOTHING CAUGHT IS THE BROWSER'S OWN ACCOUNT: the window's `error` event and its
 // `unhandledrejection`, which a call's refusal no handler awaited or caught arrives as. 12.6's
 // throws are handed through `UNEXPECTED` as they are on a server, and the one of them that then
-// surfaces as uncaught (12.7) is not handed a second time.
+// surfaces as uncaught (12.7) is not handed a second time. An abort is handed to none (37.28).
 
 import { BrowserHooks } from './BrowserHooks.ts'
+import { isAbort } from './isAbort.ts'
 import { UNEXPECTED } from './UNEXPECTED.ts'
 
 const HOOKS = new BrowserHooks<[error: unknown]>(
@@ -38,7 +39,7 @@ function listen(): void {
 function handedUnexpected(error: unknown): void {
     if (SURFACING.length === 0) setTimeout(() => (SURFACING.length = 0))
     SURFACING.push(error)
-    HOOKS.hand(error)
+    hand(error)
 }
 
 function surfaced(error: unknown): void {
@@ -47,5 +48,10 @@ function surfaced(error: unknown): void {
         SURFACING.splice(at, 1)
         return
     }
-    HOOKS.hand(error)
+    hand(error)
+}
+
+// 37.28 — every browser route to the hooks passes here, so an abort reaches none of them.
+function hand(error: unknown): void {
+    if (!isAbort(error)) HOOKS.hand(error)
 }

package/src/shared/rpc.ts

@@ -223,11 +223,13 @@ export type RpcOptions<
      *
      * The plain array arm is the context a list built by a GENERIC helper is typed in: the mapped
      * arm is over `Answers`, still being inferred, so the helper's own `Args` read nothing there and
-     * are `unknown`. It adds no refusal of its own — `Answers` is still read off the list.
+     * are `unknown`. It adds no refusal of its own — `Answers` is still read off the list — and
+     * no `Args` either: a `Middleware` asking `args: () => unknown` of its context would otherwise
+     * widen a keyed handler's to `unknown`, which its `Keyed` then refuses.
      */
     middleware?:
         | { [At in keyof Answers]: HandlerRung<Args, Answers[At]> }
-        | readonly HandlerRung<Args, unknown>[]
+        | readonly HandlerRung<NoInfer<Args>, unknown>[]
     timeout?: number
     clients?: Clients
     crossOrigin?: boolean | string[]