@aiwerk/mcp-bridge 3.0.1 → 3.0.2

package/dist/src/catalog-client.d.ts

@@ -64,7 +64,12 @@ export interface CatalogRecipe {
         [key: string]: unknown;
     };
     signature?: RecipeSignature;
-    localOnly?: boolean;
+    /**
+     * Local-only marker. Boolean form (true) blocks hosted install entirely;
+     * string[] form lists tool names the hosted bridge hides from tools/list
+     * (standalone ignores the array — all tools run locally).
+     */
+    localOnly?: boolean | string[];
     [key: string]: unknown;
 }
 export declare class CatalogError extends Error {

package/dist/src/validate-recipe.js

@@ -280,10 +280,30 @@ export function validateRecipe(recipe) {
     // hosted bridge use them; the standalone runtime mostly informs the user
     // and does not enforce hosted-only semantics (e.g. localOnly is not a
     // gate locally — every recipe runs on the user's machine anyway).
-    // localOnly: top-level boolean. Hosted bridge refuses these recipes;
-    // standalone accepts them and lets the user spawn locally.
-    if (recipe.localOnly !== undefined && typeof recipe.localOnly !== "boolean") {
-        errors.push(`localOnly must be boolean, got ${typeof recipe.localOnly}`);
+    // localOnly: two accepted forms.
+    //   - boolean true  → hosted bridge refuses install entirely (chrome-devtools);
+    //                     standalone accepts and spawns locally
+    //   - string[]      → per-tool hosted-bridge filter (the listed names are
+    //                     stripped from tools/list on hosted); standalone IGNORES
+    //                     the array — every tool runs locally regardless.
+    // Standalone runtime accepts both forms; we only validate the shape here so
+    // a typo (`"yes"`, number, object) is caught at recipe-load time.
+    if (recipe.localOnly !== undefined) {
+        const lo = recipe.localOnly;
+        if (typeof lo === "boolean") {
+            // OK
+        }
+        else if (Array.isArray(lo)) {
+            if (lo.length === 0) {
+                errors.push("localOnly array must be non-empty (use false or omit instead)");
+            }
+            else if (lo.some((t) => typeof t !== "string" || t.trim().length === 0)) {
+                errors.push("localOnly array must contain only non-empty tool-name strings");
+            }
+        }
+        else {
+            errors.push(`localOnly must be boolean or string[], got ${typeof lo}`);
+        }
     }
     // multiInstance + instanceNameHint: hosted-only semantics today. Standalone
     // accepts the fields without enforcing multi-instance install behavior.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiwerk/mcp-bridge",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "description": "Standalone MCP server that multiplexes multiple MCP servers into one interface",
   "type": "module",
   "main": "./dist/src/index.js",