@creatornader/agent-bridge 0.5.2 → 0.6.0

package/dist/client-config.d.ts

@@ -1,6 +1,6 @@
 import { c as BridgePrincipal } from './bridge-domain-CBX3IVqC.js';
 
-type ClientProvider = "local" | "gateway" | "legacy-supabase";
+type ClientProvider = "local" | "gateway";
 interface ClientEnvironment extends NodeJS.ProcessEnv {
     AGENT_BRIDGE_PROVIDER?: string;
     AGENT_BRIDGE_URL?: string;

package/dist/client-config.js

@@ -2,7 +2,7 @@
 import {
   readClientConfigFile,
   resolveClientConfig
-} from "./chunk-2EVLG3YA.js";
+} from "./chunk-UKFRCP6X.js";
 export {
   readClientConfigFile,
   resolveClientConfig

package/dist/client-runtime.d.ts

@@ -1,6 +1,6 @@
-import { B as BridgeService } from './bridge-service-CNBKdYXh.js';
-import { a as BridgeStore } from './bridge-store-ByJ6CaJk.js';
-import { a as EdgeDrainLease } from './sqlite-edge-store-CdMIOrho.js';
+import { B as BridgeService } from './bridge-service-DjSYfjKt.js';
+import { a as BridgeStore } from './bridge-store-Bi_LCX8e.js';
+import { a as EdgeDrainLease } from './sqlite-edge-store-BAFUeysk.js';
 import { ClientConfig } from './client-config.js';
 import './bridge-domain-CBX3IVqC.js';
 

package/dist/client-runtime.js

@@ -2,14 +2,14 @@
 import {
   createClientRuntime,
   createStore
-} from "./chunk-QPC6JHA3.js";
-import "./chunk-Z6JP6MYD.js";
-import "./chunk-SN7PIVDF.js";
+} from "./chunk-IMJ47WO4.js";
+import "./chunk-WQ4I5XGF.js";
+import "./chunk-ZUZ7TCIH.js";
 import "./chunk-IVG4XWWS.js";
 import "./chunk-GTK4KOED.js";
 import "./chunk-VOQIDTCJ.js";
-import "./chunk-AWE3DFZV.js";
-import "./chunk-E4OWHGUE.js";
+import "./chunk-4V2PFJEF.js";
+import "./chunk-62C63PIE.js";
 import "./chunk-BZLMF5O5.js";
 export {
   createClientRuntime,

package/dist/contracts/generate.js

@@ -11,7 +11,7 @@ import {
   SUPPORTED_PROTOCOL_VERSIONS,
   capabilityDocument,
   operations
-} from "../chunk-E4OWHGUE.js";
+} from "../chunk-62C63PIE.js";
 
 // src/contracts/generate.ts
 import { mkdirSync, readFileSync, writeFileSync } from "fs";
@@ -43,8 +43,7 @@ function objectWithout(schema, excluded) {
 }
 var scopeEnforcementByProvider = {
   local: false,
-  gateway: SCOPE_ENFORCEMENT,
-  "legacy-supabase": false
+  gateway: SCOPE_ENFORCEMENT
 };
 var schemas = {
   $schema: "https://json-schema.org/draft/2020-12/schema",

package/dist/contracts/generate.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/contracts/generate.ts","../../src/contracts/artifact-format.ts"],"sourcesContent":["import { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { formatContractArtifact, normalizeContractArtifact } from \"./artifact-format.js\";\nimport {\n  capabilityDocument,\n  ErrorEnvelopeSchema,\n  LegacyDeliverySchema,\n  LegacyMessageDraftSchema,\n  LegacyMessageSchema,\n  LEGACY_PROTOCOL_VERSION,\n  operations,\n  PROTOCOL_HEADER,\n  PROTOCOL_VERSION,\n  SCOPE_ENFORCEMENT,\n  SUPPORTED_PROTOCOL_HEADER,\n  SUPPORTED_PROTOCOL_VERSIONS,\n} from \"./registry.js\";\n\nfunction clone<T>(value: T): T {\n  return JSON.parse(JSON.stringify(value)) as T;\n}\n\nfunction objectWithout(schema: Record<string, any>, excluded: ReadonlySet<string>): Record<string, any> {\n  const result = clone(schema);\n  if (!result.properties) return result;\n  result.properties = Object.fromEntries(Object.entries(result.properties).filter(([name]) => !excluded.has(name)));\n  if (Array.isArray(result.required)) {\n    result.required = result.required.filter((name: string) => !excluded.has(name));\n    if (!result.required.length) delete result.required;\n  }\n  return result;\n}\n\nconst scopeEnforcementByProvider = {\n  local: false,\n  gateway: SCOPE_ENFORCEMENT,\n  \"legacy-supabase\": false,\n};\n\nconst schemas = {\n  $schema: \"https://json-schema.org/draft/2020-12/schema\",\n  $id: \"https://agent-bridge.dev/schemas/v2/operations.json\",\n  title: \"Agent Bridge v2 operation contracts\",\n  protocolVersion: PROTOCOL_VERSION,\n  scopeEnforcementByProvider,\n  $defs: {\n    ErrorEnvelope: ErrorEnvelopeSchema,\n    legacy20MessageDraft: LegacyMessageDraftSchema,\n    legacy20Message: LegacyMessageSchema,\n    legacy20Delivery: LegacyDeliverySchema,\n    ...Object.fromEntries(operations.flatMap((operation) => [\n      [`${operation.id}Request`, operation.request],\n      [`${operation.id}Response`, operation.response],\n      ...(operation.cli ? [[`${operation.id}CliResponse`, operation.cli.response ?? operation.response] as const] : []),\n      ...(operation.cli?.variants?.map((variant) => [\n        `${operation.id}CliVariant${variant.command.replace(/(^|[-_])(\\w)/g, (_match, _separator, character: string) => character.toUpperCase())}Response`,\n        variant.response,\n      ] as const) ?? []),\n    ])),\n  },\n};\n\nconst protocolHeaders = {\n  [PROTOCOL_HEADER]: {\n    description: \"Selected Agent Bridge protocol version.\",\n    required: true,\n    schema: { type: \"string\", enum: [...SUPPORTED_PROTOCOL_VERSIONS] },\n  },\n  [SUPPORTED_PROTOCOL_HEADER]: {\n    description: \"Comma-separated protocol versions supported by this gateway.\",\n    required: true,\n    schema: { type: \"string\" },\n  },\n};\n\nfunction errorResponse(description: string) {\n  return {\n    description,\n    headers: protocolHeaders,\n    content: { \"application/json\": { schema: { $ref: \"#/components/schemas/ErrorEnvelope\" } } },\n  };\n}\n\nconst canonicalErrors = {\n  \"400\": errorResponse(\"The request does not match the operation contract.\"),\n  \"401\": errorResponse(\"The bearer credential is missing or invalid.\"),\n  \"403\": errorResponse(\"The credential cannot access the requested principal or origin.\"),\n  \"404\": errorResponse(\"The route or requested resource does not exist.\"),\n  \"409\": errorResponse(\"The request conflicts with current delivery or idempotency state.\"),\n  \"413\": errorResponse(\"The request body exceeds the configured limit.\"),\n  \"415\": errorResponse(\"The request content type is not application/json.\"),\n  \"426\": errorResponse(\"The requested protocol version is unsupported.\"),\n  \"429\": errorResponse(\"The gateway has rate-limited the request.\"),\n  \"500\": errorResponse(\"The gateway could not complete the request.\"),\n  \"502\": errorResponse(\"The upstream response does not match the selected protocol contract.\"),\n  \"503\": errorResponse(\"The backing service is unavailable.\"),\n  \"504\": errorResponse(\"The request exceeded the gateway deadline.\"),\n};\n\nconst paths: Record<string, Record<string, unknown>> = {};\nfor (const operation of operations.filter((entry) => entry.http)) {\n  const http = operation.http!;\n  const pathItem = paths[http.path] ??= {};\n  const pathNames = [...http.path.matchAll(/\\{([^}]+)\\}/g)].map((match) => match[1]!);\n  const pathSet = new Set(pathNames);\n  const request = clone(operation.request as Record<string, any>);\n  const parameters: Array<Record<string, unknown>> = [{\n    name: PROTOCOL_HEADER,\n    in: \"header\",\n    required: true,\n    description: \"This OpenAPI operation describes protocol 2.1. Headerless protocol 2.0 uses the separate schemas named by x-agent-bridge-protocol-2.0.\",\n    schema: { type: \"string\", enum: [PROTOCOL_VERSION] },\n  }, ...pathNames.map((name) => ({\n    name,\n    in: \"path\",\n    required: true,\n    schema: request.properties?.[name] ?? { type: \"string\" },\n  }))];\n\n  if (http.method === \"GET\" && request.properties) {\n    for (const [propertyName, propertySchema] of Object.entries(request.properties) as Array<[string, Record<string, any>]>) {\n      if (pathSet.has(propertyName)) continue;\n      const queryName = propertyName === \"types\" ? \"type\" : propertyName === \"states\" ? \"state\" : propertyName;\n      const repeated = propertySchema.type === \"array\";\n      parameters.push({\n        name: queryName,\n        in: \"query\",\n        required: request.required?.includes(propertyName) ?? false,\n        ...(repeated ? { style: \"form\", explode: true } : {}),\n        schema: propertySchema,\n      });\n      for (const alias of http.queryAliases?.[propertyName] ?? []) {\n        parameters.push({\n          name: alias,\n          in: \"query\",\n          required: false,\n          deprecated: true,\n          description: `Compatibility alias for ${queryName}.`,\n          schema: propertySchema,\n        });\n      }\n    }\n  }\n\n  const contentType = http.responseContentType ?? \"application/json\";\n  const successStatus = String(http.successStatus ?? 200);\n  const successResponse = {\n    description: \"Successful response.\",\n    headers: protocolHeaders,\n    content: { [contentType]: { schema: clone(operation.response) } },\n  };\n  const bodySchema = objectWithout(request, pathSet);\n  const hasBodyFields = Object.keys(bodySchema.properties ?? {}).length > 0;\n  const hasRequiredBodyFields = Array.isArray(bodySchema.required) && bodySchema.required.length > 0;\n  pathItem[http.method.toLowerCase()] = {\n    operationId: operation.id,\n    summary: operation.summary,\n    security: [{ bearerAuth: [] }],\n    \"x-agent-bridge-required-scopes\": [...operation.scopes],\n    \"x-agent-bridge-scope-enforcement\": SCOPE_ENFORCEMENT,\n    ...(parameters.length ? { parameters } : {}),\n    ...(http.method === \"POST\" && hasBodyFields ? {\n      requestBody: {\n        required: hasRequiredBodyFields,\n        content: { \"application/json\": { schema: bodySchema } },\n      },\n    } : {}),\n    responses: { [successStatus]: successResponse, ...canonicalErrors },\n  };\n}\n\nconst openapi = {\n  openapi: \"3.1.2\",\n  info: {\n    title: \"Agent Bridge Gateway\",\n    version: PROTOCOL_VERSION,\n    license: { name: \"Apache-2.0\", identifier: \"Apache-2.0\" },\n  },\n  servers: [{ url: \"/\" }],\n  \"x-agent-bridge-protocol-versions\": [...SUPPORTED_PROTOCOL_VERSIONS],\n  \"x-agent-bridge-openapi-protocol-version\": PROTOCOL_VERSION,\n  \"x-agent-bridge-protocol-2.0\": {\n    description: \"Limited schema metadata for the released headerless 0.2.0 compatibility contract derived from d8184fe. This is not a complete OpenAPI route description. It does not support project, deliveryPolicy, delivery management/listing, or current delivery bookkeeping fields.\",\n    requestSchemas: { publish_message: \"#/x-agent-bridge-schemas-2.0/MessageDraft\" },\n    responseSchemas: { message: \"#/x-agent-bridge-schemas-2.0/Message\", delivery: \"#/x-agent-bridge-schemas-2.0/Delivery\" },\n  },\n  \"x-agent-bridge-schemas-2.0\": {\n    MessageDraft: LegacyMessageDraftSchema,\n    Message: LegacyMessageSchema,\n    Delivery: LegacyDeliverySchema,\n  },\n  \"x-agent-bridge-scope-enforcement\": SCOPE_ENFORCEMENT,\n  paths,\n  components: {\n    schemas: { ErrorEnvelope: ErrorEnvelopeSchema },\n    securitySchemes: { bearerAuth: { type: \"http\", scheme: \"bearer\" } },\n  },\n};\n\nconst mcp = {\n  schemaVersion: \"agent-bridge-mcp-manifest-v1\",\n  protocolVersion: PROTOCOL_VERSION,\n  scopeEnforcementByProvider,\n  tools: operations.filter((entry) => entry.mcp).map((entry) => ({\n    name: entry.mcp!.name,\n    description: entry.summary,\n    inputSchema: entry.request,\n    outputSchema: entry.response,\n    requiredScopes: entry.scopes,\n    providers: entry.providers,\n  })),\n};\n\nconst root = resolve(dirname(fileURLToPath(import.meta.url)), \"../..\");\nconst outputs = new Map([\n  [resolve(root, \"schemas/agent-bridge-v2.schema.json\"), formatContractArtifact(schemas)],\n  [resolve(root, \"openapi/agent-bridge-v2.openapi.json\"), formatContractArtifact(openapi)],\n  [resolve(root, \"schemas/agent-bridge-v2.mcp.json\"), formatContractArtifact(mcp)],\n  [resolve(root, \"schemas/agent-bridge-v2.capabilities.json\"), formatContractArtifact(capabilityDocument())],\n]);\nconst check = process.argv.includes(\"--check\");\nconst drift: string[] = [];\nfor (const [path, contents] of outputs) {\n  if (check) {\n    let current = \"\";\n    try { current = readFileSync(path, \"utf8\"); } catch {}\n    if (normalizeContractArtifact(current) !== normalizeContractArtifact(contents)) {\n      drift.push(path.slice(root.length + 1));\n    }\n  } else {\n    mkdirSync(dirname(path), { recursive: true });\n    writeFileSync(path, contents);\n  }\n}\nif (drift.length) {\n  for (const path of drift) process.stderr.write(`ERROR contract artifact drift: ${path}\\n`);\n  process.exitCode = 1;\n} else {\n  process.stdout.write(`contracts ${check ? \"match\" : \"generated\"}: ${outputs.size} artifacts, ${operations.length} operations\\n`);\n}\n","export function formatContractArtifact(value: unknown): string {\n  return `${JSON.stringify(value, null, 2)}\\n`;\n}\n\nexport function normalizeContractArtifact(contents: string): string {\n  return contents.replace(/\\r\\n?/g, \"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW,cAAc,qBAAqB;AACvD,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;;;ACFvB,SAAS,uBAAuB,OAAwB;AAC7D,SAAO,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA;AAC1C;AAEO,SAAS,0BAA0B,UAA0B;AAClE,SAAO,SAAS,QAAQ,UAAU,IAAI;AACxC;;;ADaA,SAAS,MAAS,OAAa;AAC7B,SAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAEA,SAAS,cAAc,QAA6B,UAAoD;AACtG,QAAM,SAAS,MAAM,MAAM;AAC3B,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,SAAO,aAAa,OAAO,YAAY,OAAO,QAAQ,OAAO,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AAChH,MAAI,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAClC,WAAO,WAAW,OAAO,SAAS,OAAO,CAAC,SAAiB,CAAC,SAAS,IAAI,IAAI,CAAC;AAC9E,QAAI,CAAC,OAAO,SAAS,OAAQ,QAAO,OAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,IAAM,6BAA6B;AAAA,EACjC,OAAO;AAAA,EACP,SAAS;AAAA,EACT,mBAAmB;AACrB;AAEA,IAAM,UAAU;AAAA,EACd,SAAS;AAAA,EACT,KAAK;AAAA,EACL,OAAO;AAAA,EACP,iBAAiB;AAAA,EACjB;AAAA,EACA,OAAO;AAAA,IACL,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,iBAAiB;AAAA,IACjB,kBAAkB;AAAA,IAClB,GAAG,OAAO,YAAY,WAAW,QAAQ,CAAC,cAAc;AAAA,MACtD,CAAC,GAAG,UAAU,EAAE,WAAW,UAAU,OAAO;AAAA,MAC5C,CAAC,GAAG,UAAU,EAAE,YAAY,UAAU,QAAQ;AAAA,MAC9C,GAAI,UAAU,MAAM,CAAC,CAAC,GAAG,UAAU,EAAE,eAAe,UAAU,IAAI,YAAY,UAAU,QAAQ,CAAU,IAAI,CAAC;AAAA,MAC/G,GAAI,UAAU,KAAK,UAAU,IAAI,CAAC,YAAY;AAAA,QAC5C,GAAG,UAAU,EAAE,aAAa,QAAQ,QAAQ,QAAQ,iBAAiB,CAAC,QAAQ,YAAY,cAAsB,UAAU,YAAY,CAAC,CAAC;AAAA,QACxI,QAAQ;AAAA,MACV,CAAU,KAAK,CAAC;AAAA,IAClB,CAAC,CAAC;AAAA,EACJ;AACF;AAEA,IAAM,kBAAkB;AAAA,EACtB,CAAC,eAAe,GAAG;AAAA,IACjB,aAAa;AAAA,IACb,UAAU;AAAA,IACV,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,GAAG,2BAA2B,EAAE;AAAA,EACnE;AAAA,EACA,CAAC,yBAAyB,GAAG;AAAA,IAC3B,aAAa;AAAA,IACb,UAAU;AAAA,IACV,QAAQ,EAAE,MAAM,SAAS;AAAA,EAC3B;AACF;AAEA,SAAS,cAAc,aAAqB;AAC1C,SAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,qCAAqC,EAAE,EAAE;AAAA,EAC5F;AACF;AAEA,IAAM,kBAAkB;AAAA,EACtB,OAAO,cAAc,oDAAoD;AAAA,EACzE,OAAO,cAAc,8CAA8C;AAAA,EACnE,OAAO,cAAc,iEAAiE;AAAA,EACtF,OAAO,cAAc,iDAAiD;AAAA,EACtE,OAAO,cAAc,mEAAmE;AAAA,EACxF,OAAO,cAAc,gDAAgD;AAAA,EACrE,OAAO,cAAc,mDAAmD;AAAA,EACxE,OAAO,cAAc,gDAAgD;AAAA,EACrE,OAAO,cAAc,2CAA2C;AAAA,EAChE,OAAO,cAAc,6CAA6C;AAAA,EAClE,OAAO,cAAc,sEAAsE;AAAA,EAC3F,OAAO,cAAc,qCAAqC;AAAA,EAC1D,OAAO,cAAc,4CAA4C;AACnE;AAEA,IAAM,QAAiD,CAAC;AApGxD;AAqGA,WAAW,aAAa,WAAW,OAAO,CAAC,UAAU,MAAM,IAAI,GAAG;AAChE,QAAM,OAAO,UAAU;AACvB,QAAM,WAAW,WAAM,KAAK,UAAX,YAAqB,CAAC;AACvC,QAAM,YAAY,CAAC,GAAG,KAAK,KAAK,SAAS,cAAc,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,CAAC,CAAE;AAClF,QAAM,UAAU,IAAI,IAAI,SAAS;AACjC,QAAM,UAAU,MAAM,UAAU,OAA8B;AAC9D,QAAM,aAA6C,CAAC;AAAA,IAClD,MAAM;AAAA,IACN,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,aAAa;AAAA,IACb,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,gBAAgB,EAAE;AAAA,EACrD,GAAG,GAAG,UAAU,IAAI,CAAC,UAAU;AAAA,IAC7B;AAAA,IACA,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,QAAQ,QAAQ,aAAa,IAAI,KAAK,EAAE,MAAM,SAAS;AAAA,EACzD,EAAE,CAAC;AAEH,MAAI,KAAK,WAAW,SAAS,QAAQ,YAAY;AAC/C,eAAW,CAAC,cAAc,cAAc,KAAK,OAAO,QAAQ,QAAQ,UAAU,GAA2C;AACvH,UAAI,QAAQ,IAAI,YAAY,EAAG;AAC/B,YAAM,YAAY,iBAAiB,UAAU,SAAS,iBAAiB,WAAW,UAAU;AAC5F,YAAM,WAAW,eAAe,SAAS;AACzC,iBAAW,KAAK;AAAA,QACd,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,UAAU,QAAQ,UAAU,SAAS,YAAY,KAAK;AAAA,QACtD,GAAI,WAAW,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,CAAC;AAAA,QACnD,QAAQ;AAAA,MACV,CAAC;AACD,iBAAW,SAAS,KAAK,eAAe,YAAY,KAAK,CAAC,GAAG;AAC3D,mBAAW,KAAK;AAAA,UACd,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,aAAa,2BAA2B,SAAS;AAAA,UACjD,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,KAAK,uBAAuB;AAChD,QAAM,gBAAgB,OAAO,KAAK,iBAAiB,GAAG;AACtD,QAAM,kBAAkB;AAAA,IACtB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,SAAS,EAAE,CAAC,WAAW,GAAG,EAAE,QAAQ,MAAM,UAAU,QAAQ,EAAE,EAAE;AAAA,EAClE;AACA,QAAM,aAAa,cAAc,SAAS,OAAO;AACjD,QAAM,gBAAgB,OAAO,KAAK,WAAW,cAAc,CAAC,CAAC,EAAE,SAAS;AACxE,QAAM,wBAAwB,MAAM,QAAQ,WAAW,QAAQ,KAAK,WAAW,SAAS,SAAS;AACjG,WAAS,KAAK,OAAO,YAAY,CAAC,IAAI;AAAA,IACpC,aAAa,UAAU;AAAA,IACvB,SAAS,UAAU;AAAA,IACnB,UAAU,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;AAAA,IAC7B,kCAAkC,CAAC,GAAG,UAAU,MAAM;AAAA,IACtD,oCAAoC;AAAA,IACpC,GAAI,WAAW,SAAS,EAAE,WAAW,IAAI,CAAC;AAAA,IAC1C,GAAI,KAAK,WAAW,UAAU,gBAAgB;AAAA,MAC5C,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS,EAAE,oBAAoB,EAAE,QAAQ,WAAW,EAAE;AAAA,MACxD;AAAA,IACF,IAAI,CAAC;AAAA,IACL,WAAW,EAAE,CAAC,aAAa,GAAG,iBAAiB,GAAG,gBAAgB;AAAA,EACpE;AACF;AAEA,IAAM,UAAU;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,SAAS,EAAE,MAAM,cAAc,YAAY,aAAa;AAAA,EAC1D;AAAA,EACA,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,EACtB,oCAAoC,CAAC,GAAG,2BAA2B;AAAA,EACnE,2CAA2C;AAAA,EAC3C,+BAA+B;AAAA,IAC7B,aAAa;AAAA,IACb,gBAAgB,EAAE,iBAAiB,4CAA4C;AAAA,IAC/E,iBAAiB,EAAE,SAAS,wCAAwC,UAAU,wCAAwC;AAAA,EACxH;AAAA,EACA,8BAA8B;AAAA,IAC5B,cAAc;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,oCAAoC;AAAA,EACpC;AAAA,EACA,YAAY;AAAA,IACV,SAAS,EAAE,eAAe,oBAAoB;AAAA,IAC9C,iBAAiB,EAAE,YAAY,EAAE,MAAM,QAAQ,QAAQ,SAAS,EAAE;AAAA,EACpE;AACF;AAEA,IAAM,MAAM;AAAA,EACV,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB;AAAA,EACA,OAAO,WAAW,OAAO,CAAC,UAAU,MAAM,GAAG,EAAE,IAAI,CAAC,WAAW;AAAA,IAC7D,MAAM,MAAM,IAAK;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,aAAa,MAAM;AAAA,IACnB,cAAc,MAAM;AAAA,IACpB,gBAAgB,MAAM;AAAA,IACtB,WAAW,MAAM;AAAA,EACnB,EAAE;AACJ;AAEA,IAAM,OAAO,QAAQ,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,OAAO;AACrE,IAAM,UAAU,oBAAI,IAAI;AAAA,EACtB,CAAC,QAAQ,MAAM,qCAAqC,GAAG,uBAAuB,OAAO,CAAC;AAAA,EACtF,CAAC,QAAQ,MAAM,sCAAsC,GAAG,uBAAuB,OAAO,CAAC;AAAA,EACvF,CAAC,QAAQ,MAAM,kCAAkC,GAAG,uBAAuB,GAAG,CAAC;AAAA,EAC/E,CAAC,QAAQ,MAAM,2CAA2C,GAAG,uBAAuB,mBAAmB,CAAC,CAAC;AAC3G,CAAC;AACD,IAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS;AAC7C,IAAM,QAAkB,CAAC;AACzB,WAAW,CAAC,MAAM,QAAQ,KAAK,SAAS;AACtC,MAAI,OAAO;AACT,QAAI,UAAU;AACd,QAAI;AAAE,gBAAU,aAAa,MAAM,MAAM;AAAA,IAAG,QAAQ;AAAA,IAAC;AACrD,QAAI,0BAA0B,OAAO,MAAM,0BAA0B,QAAQ,GAAG;AAC9E,YAAM,KAAK,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC;AAAA,IACxC;AAAA,EACF,OAAO;AACL,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,kBAAc,MAAM,QAAQ;AAAA,EAC9B;AACF;AACA,IAAI,MAAM,QAAQ;AAChB,aAAW,QAAQ,MAAO,SAAQ,OAAO,MAAM,kCAAkC,IAAI;AAAA,CAAI;AACzF,UAAQ,WAAW;AACrB,OAAO;AACL,UAAQ,OAAO,MAAM,aAAa,QAAQ,UAAU,WAAW,KAAK,QAAQ,IAAI,eAAe,WAAW,MAAM;AAAA,CAAe;AACjI;","names":[]}
+{"version":3,"sources":["../../src/contracts/generate.ts","../../src/contracts/artifact-format.ts"],"sourcesContent":["import { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { formatContractArtifact, normalizeContractArtifact } from \"./artifact-format.js\";\nimport {\n  capabilityDocument,\n  ErrorEnvelopeSchema,\n  LegacyDeliverySchema,\n  LegacyMessageDraftSchema,\n  LegacyMessageSchema,\n  LEGACY_PROTOCOL_VERSION,\n  operations,\n  PROTOCOL_HEADER,\n  PROTOCOL_VERSION,\n  SCOPE_ENFORCEMENT,\n  SUPPORTED_PROTOCOL_HEADER,\n  SUPPORTED_PROTOCOL_VERSIONS,\n} from \"./registry.js\";\n\nfunction clone<T>(value: T): T {\n  return JSON.parse(JSON.stringify(value)) as T;\n}\n\nfunction objectWithout(schema: Record<string, any>, excluded: ReadonlySet<string>): Record<string, any> {\n  const result = clone(schema);\n  if (!result.properties) return result;\n  result.properties = Object.fromEntries(Object.entries(result.properties).filter(([name]) => !excluded.has(name)));\n  if (Array.isArray(result.required)) {\n    result.required = result.required.filter((name: string) => !excluded.has(name));\n    if (!result.required.length) delete result.required;\n  }\n  return result;\n}\n\nconst scopeEnforcementByProvider = {\n  local: false,\n  gateway: SCOPE_ENFORCEMENT,\n};\n\nconst schemas = {\n  $schema: \"https://json-schema.org/draft/2020-12/schema\",\n  $id: \"https://agent-bridge.dev/schemas/v2/operations.json\",\n  title: \"Agent Bridge v2 operation contracts\",\n  protocolVersion: PROTOCOL_VERSION,\n  scopeEnforcementByProvider,\n  $defs: {\n    ErrorEnvelope: ErrorEnvelopeSchema,\n    legacy20MessageDraft: LegacyMessageDraftSchema,\n    legacy20Message: LegacyMessageSchema,\n    legacy20Delivery: LegacyDeliverySchema,\n    ...Object.fromEntries(operations.flatMap((operation) => [\n      [`${operation.id}Request`, operation.request],\n      [`${operation.id}Response`, operation.response],\n      ...(operation.cli ? [[`${operation.id}CliResponse`, operation.cli.response ?? operation.response] as const] : []),\n      ...(operation.cli?.variants?.map((variant) => [\n        `${operation.id}CliVariant${variant.command.replace(/(^|[-_])(\\w)/g, (_match, _separator, character: string) => character.toUpperCase())}Response`,\n        variant.response,\n      ] as const) ?? []),\n    ])),\n  },\n};\n\nconst protocolHeaders = {\n  [PROTOCOL_HEADER]: {\n    description: \"Selected Agent Bridge protocol version.\",\n    required: true,\n    schema: { type: \"string\", enum: [...SUPPORTED_PROTOCOL_VERSIONS] },\n  },\n  [SUPPORTED_PROTOCOL_HEADER]: {\n    description: \"Comma-separated protocol versions supported by this gateway.\",\n    required: true,\n    schema: { type: \"string\" },\n  },\n};\n\nfunction errorResponse(description: string) {\n  return {\n    description,\n    headers: protocolHeaders,\n    content: { \"application/json\": { schema: { $ref: \"#/components/schemas/ErrorEnvelope\" } } },\n  };\n}\n\nconst canonicalErrors = {\n  \"400\": errorResponse(\"The request does not match the operation contract.\"),\n  \"401\": errorResponse(\"The bearer credential is missing or invalid.\"),\n  \"403\": errorResponse(\"The credential cannot access the requested principal or origin.\"),\n  \"404\": errorResponse(\"The route or requested resource does not exist.\"),\n  \"409\": errorResponse(\"The request conflicts with current delivery or idempotency state.\"),\n  \"413\": errorResponse(\"The request body exceeds the configured limit.\"),\n  \"415\": errorResponse(\"The request content type is not application/json.\"),\n  \"426\": errorResponse(\"The requested protocol version is unsupported.\"),\n  \"429\": errorResponse(\"The gateway has rate-limited the request.\"),\n  \"500\": errorResponse(\"The gateway could not complete the request.\"),\n  \"502\": errorResponse(\"The upstream response does not match the selected protocol contract.\"),\n  \"503\": errorResponse(\"The backing service is unavailable.\"),\n  \"504\": errorResponse(\"The request exceeded the gateway deadline.\"),\n};\n\nconst paths: Record<string, Record<string, unknown>> = {};\nfor (const operation of operations.filter((entry) => entry.http)) {\n  const http = operation.http!;\n  const pathItem = paths[http.path] ??= {};\n  const pathNames = [...http.path.matchAll(/\\{([^}]+)\\}/g)].map((match) => match[1]!);\n  const pathSet = new Set(pathNames);\n  const request = clone(operation.request as Record<string, any>);\n  const parameters: Array<Record<string, unknown>> = [{\n    name: PROTOCOL_HEADER,\n    in: \"header\",\n    required: true,\n    description: \"This OpenAPI operation describes protocol 2.1. Headerless protocol 2.0 uses the separate schemas named by x-agent-bridge-protocol-2.0.\",\n    schema: { type: \"string\", enum: [PROTOCOL_VERSION] },\n  }, ...pathNames.map((name) => ({\n    name,\n    in: \"path\",\n    required: true,\n    schema: request.properties?.[name] ?? { type: \"string\" },\n  }))];\n\n  if (http.method === \"GET\" && request.properties) {\n    for (const [propertyName, propertySchema] of Object.entries(request.properties) as Array<[string, Record<string, any>]>) {\n      if (pathSet.has(propertyName)) continue;\n      const queryName = propertyName === \"types\" ? \"type\" : propertyName === \"states\" ? \"state\" : propertyName;\n      const repeated = propertySchema.type === \"array\";\n      parameters.push({\n        name: queryName,\n        in: \"query\",\n        required: request.required?.includes(propertyName) ?? false,\n        ...(repeated ? { style: \"form\", explode: true } : {}),\n        schema: propertySchema,\n      });\n      for (const alias of http.queryAliases?.[propertyName] ?? []) {\n        parameters.push({\n          name: alias,\n          in: \"query\",\n          required: false,\n          deprecated: true,\n          description: `Compatibility alias for ${queryName}.`,\n          schema: propertySchema,\n        });\n      }\n    }\n  }\n\n  const contentType = http.responseContentType ?? \"application/json\";\n  const successStatus = String(http.successStatus ?? 200);\n  const successResponse = {\n    description: \"Successful response.\",\n    headers: protocolHeaders,\n    content: { [contentType]: { schema: clone(operation.response) } },\n  };\n  const bodySchema = objectWithout(request, pathSet);\n  const hasBodyFields = Object.keys(bodySchema.properties ?? {}).length > 0;\n  const hasRequiredBodyFields = Array.isArray(bodySchema.required) && bodySchema.required.length > 0;\n  pathItem[http.method.toLowerCase()] = {\n    operationId: operation.id,\n    summary: operation.summary,\n    security: [{ bearerAuth: [] }],\n    \"x-agent-bridge-required-scopes\": [...operation.scopes],\n    \"x-agent-bridge-scope-enforcement\": SCOPE_ENFORCEMENT,\n    ...(parameters.length ? { parameters } : {}),\n    ...(http.method === \"POST\" && hasBodyFields ? {\n      requestBody: {\n        required: hasRequiredBodyFields,\n        content: { \"application/json\": { schema: bodySchema } },\n      },\n    } : {}),\n    responses: { [successStatus]: successResponse, ...canonicalErrors },\n  };\n}\n\nconst openapi = {\n  openapi: \"3.1.2\",\n  info: {\n    title: \"Agent Bridge Gateway\",\n    version: PROTOCOL_VERSION,\n    license: { name: \"Apache-2.0\", identifier: \"Apache-2.0\" },\n  },\n  servers: [{ url: \"/\" }],\n  \"x-agent-bridge-protocol-versions\": [...SUPPORTED_PROTOCOL_VERSIONS],\n  \"x-agent-bridge-openapi-protocol-version\": PROTOCOL_VERSION,\n  \"x-agent-bridge-protocol-2.0\": {\n    description: \"Limited schema metadata for the released headerless 0.2.0 compatibility contract derived from d8184fe. This is not a complete OpenAPI route description. It does not support project, deliveryPolicy, delivery management/listing, or current delivery bookkeeping fields.\",\n    requestSchemas: { publish_message: \"#/x-agent-bridge-schemas-2.0/MessageDraft\" },\n    responseSchemas: { message: \"#/x-agent-bridge-schemas-2.0/Message\", delivery: \"#/x-agent-bridge-schemas-2.0/Delivery\" },\n  },\n  \"x-agent-bridge-schemas-2.0\": {\n    MessageDraft: LegacyMessageDraftSchema,\n    Message: LegacyMessageSchema,\n    Delivery: LegacyDeliverySchema,\n  },\n  \"x-agent-bridge-scope-enforcement\": SCOPE_ENFORCEMENT,\n  paths,\n  components: {\n    schemas: { ErrorEnvelope: ErrorEnvelopeSchema },\n    securitySchemes: { bearerAuth: { type: \"http\", scheme: \"bearer\" } },\n  },\n};\n\nconst mcp = {\n  schemaVersion: \"agent-bridge-mcp-manifest-v1\",\n  protocolVersion: PROTOCOL_VERSION,\n  scopeEnforcementByProvider,\n  tools: operations.filter((entry) => entry.mcp).map((entry) => ({\n    name: entry.mcp!.name,\n    description: entry.summary,\n    inputSchema: entry.request,\n    outputSchema: entry.response,\n    requiredScopes: entry.scopes,\n    providers: entry.providers,\n  })),\n};\n\nconst root = resolve(dirname(fileURLToPath(import.meta.url)), \"../..\");\nconst outputs = new Map([\n  [resolve(root, \"schemas/agent-bridge-v2.schema.json\"), formatContractArtifact(schemas)],\n  [resolve(root, \"openapi/agent-bridge-v2.openapi.json\"), formatContractArtifact(openapi)],\n  [resolve(root, \"schemas/agent-bridge-v2.mcp.json\"), formatContractArtifact(mcp)],\n  [resolve(root, \"schemas/agent-bridge-v2.capabilities.json\"), formatContractArtifact(capabilityDocument())],\n]);\nconst check = process.argv.includes(\"--check\");\nconst drift: string[] = [];\nfor (const [path, contents] of outputs) {\n  if (check) {\n    let current = \"\";\n    try { current = readFileSync(path, \"utf8\"); } catch {}\n    if (normalizeContractArtifact(current) !== normalizeContractArtifact(contents)) {\n      drift.push(path.slice(root.length + 1));\n    }\n  } else {\n    mkdirSync(dirname(path), { recursive: true });\n    writeFileSync(path, contents);\n  }\n}\nif (drift.length) {\n  for (const path of drift) process.stderr.write(`ERROR contract artifact drift: ${path}\\n`);\n  process.exitCode = 1;\n} else {\n  process.stdout.write(`contracts ${check ? \"match\" : \"generated\"}: ${outputs.size} artifacts, ${operations.length} operations\\n`);\n}\n","export function formatContractArtifact(value: unknown): string {\n  return `${JSON.stringify(value, null, 2)}\\n`;\n}\n\nexport function normalizeContractArtifact(contents: string): string {\n  return contents.replace(/\\r\\n?/g, \"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW,cAAc,qBAAqB;AACvD,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;;;ACFvB,SAAS,uBAAuB,OAAwB;AAC7D,SAAO,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA;AAC1C;AAEO,SAAS,0BAA0B,UAA0B;AAClE,SAAO,SAAS,QAAQ,UAAU,IAAI;AACxC;;;ADaA,SAAS,MAAS,OAAa;AAC7B,SAAO,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AACzC;AAEA,SAAS,cAAc,QAA6B,UAAoD;AACtG,QAAM,SAAS,MAAM,MAAM;AAC3B,MAAI,CAAC,OAAO,WAAY,QAAO;AAC/B,SAAO,aAAa,OAAO,YAAY,OAAO,QAAQ,OAAO,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AAChH,MAAI,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAClC,WAAO,WAAW,OAAO,SAAS,OAAO,CAAC,SAAiB,CAAC,SAAS,IAAI,IAAI,CAAC;AAC9E,QAAI,CAAC,OAAO,SAAS,OAAQ,QAAO,OAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,IAAM,6BAA6B;AAAA,EACjC,OAAO;AAAA,EACP,SAAS;AACX;AAEA,IAAM,UAAU;AAAA,EACd,SAAS;AAAA,EACT,KAAK;AAAA,EACL,OAAO;AAAA,EACP,iBAAiB;AAAA,EACjB;AAAA,EACA,OAAO;AAAA,IACL,eAAe;AAAA,IACf,sBAAsB;AAAA,IACtB,iBAAiB;AAAA,IACjB,kBAAkB;AAAA,IAClB,GAAG,OAAO,YAAY,WAAW,QAAQ,CAAC,cAAc;AAAA,MACtD,CAAC,GAAG,UAAU,EAAE,WAAW,UAAU,OAAO;AAAA,MAC5C,CAAC,GAAG,UAAU,EAAE,YAAY,UAAU,QAAQ;AAAA,MAC9C,GAAI,UAAU,MAAM,CAAC,CAAC,GAAG,UAAU,EAAE,eAAe,UAAU,IAAI,YAAY,UAAU,QAAQ,CAAU,IAAI,CAAC;AAAA,MAC/G,GAAI,UAAU,KAAK,UAAU,IAAI,CAAC,YAAY;AAAA,QAC5C,GAAG,UAAU,EAAE,aAAa,QAAQ,QAAQ,QAAQ,iBAAiB,CAAC,QAAQ,YAAY,cAAsB,UAAU,YAAY,CAAC,CAAC;AAAA,QACxI,QAAQ;AAAA,MACV,CAAU,KAAK,CAAC;AAAA,IAClB,CAAC,CAAC;AAAA,EACJ;AACF;AAEA,IAAM,kBAAkB;AAAA,EACtB,CAAC,eAAe,GAAG;AAAA,IACjB,aAAa;AAAA,IACb,UAAU;AAAA,IACV,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,GAAG,2BAA2B,EAAE;AAAA,EACnE;AAAA,EACA,CAAC,yBAAyB,GAAG;AAAA,IAC3B,aAAa;AAAA,IACb,UAAU;AAAA,IACV,QAAQ,EAAE,MAAM,SAAS;AAAA,EAC3B;AACF;AAEA,SAAS,cAAc,aAAqB;AAC1C,SAAO;AAAA,IACL;AAAA,IACA,SAAS;AAAA,IACT,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,qCAAqC,EAAE,EAAE;AAAA,EAC5F;AACF;AAEA,IAAM,kBAAkB;AAAA,EACtB,OAAO,cAAc,oDAAoD;AAAA,EACzE,OAAO,cAAc,8CAA8C;AAAA,EACnE,OAAO,cAAc,iEAAiE;AAAA,EACtF,OAAO,cAAc,iDAAiD;AAAA,EACtE,OAAO,cAAc,mEAAmE;AAAA,EACxF,OAAO,cAAc,gDAAgD;AAAA,EACrE,OAAO,cAAc,mDAAmD;AAAA,EACxE,OAAO,cAAc,gDAAgD;AAAA,EACrE,OAAO,cAAc,2CAA2C;AAAA,EAChE,OAAO,cAAc,6CAA6C;AAAA,EAClE,OAAO,cAAc,sEAAsE;AAAA,EAC3F,OAAO,cAAc,qCAAqC;AAAA,EAC1D,OAAO,cAAc,4CAA4C;AACnE;AAEA,IAAM,QAAiD,CAAC;AAnGxD;AAoGA,WAAW,aAAa,WAAW,OAAO,CAAC,UAAU,MAAM,IAAI,GAAG;AAChE,QAAM,OAAO,UAAU;AACvB,QAAM,WAAW,WAAM,KAAK,UAAX,YAAqB,CAAC;AACvC,QAAM,YAAY,CAAC,GAAG,KAAK,KAAK,SAAS,cAAc,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,CAAC,CAAE;AAClF,QAAM,UAAU,IAAI,IAAI,SAAS;AACjC,QAAM,UAAU,MAAM,UAAU,OAA8B;AAC9D,QAAM,aAA6C,CAAC;AAAA,IAClD,MAAM;AAAA,IACN,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,aAAa;AAAA,IACb,QAAQ,EAAE,MAAM,UAAU,MAAM,CAAC,gBAAgB,EAAE;AAAA,EACrD,GAAG,GAAG,UAAU,IAAI,CAAC,UAAU;AAAA,IAC7B;AAAA,IACA,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,QAAQ,QAAQ,aAAa,IAAI,KAAK,EAAE,MAAM,SAAS;AAAA,EACzD,EAAE,CAAC;AAEH,MAAI,KAAK,WAAW,SAAS,QAAQ,YAAY;AAC/C,eAAW,CAAC,cAAc,cAAc,KAAK,OAAO,QAAQ,QAAQ,UAAU,GAA2C;AACvH,UAAI,QAAQ,IAAI,YAAY,EAAG;AAC/B,YAAM,YAAY,iBAAiB,UAAU,SAAS,iBAAiB,WAAW,UAAU;AAC5F,YAAM,WAAW,eAAe,SAAS;AACzC,iBAAW,KAAK;AAAA,QACd,MAAM;AAAA,QACN,IAAI;AAAA,QACJ,UAAU,QAAQ,UAAU,SAAS,YAAY,KAAK;AAAA,QACtD,GAAI,WAAW,EAAE,OAAO,QAAQ,SAAS,KAAK,IAAI,CAAC;AAAA,QACnD,QAAQ;AAAA,MACV,CAAC;AACD,iBAAW,SAAS,KAAK,eAAe,YAAY,KAAK,CAAC,GAAG;AAC3D,mBAAW,KAAK;AAAA,UACd,MAAM;AAAA,UACN,IAAI;AAAA,UACJ,UAAU;AAAA,UACV,YAAY;AAAA,UACZ,aAAa,2BAA2B,SAAS;AAAA,UACjD,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,KAAK,uBAAuB;AAChD,QAAM,gBAAgB,OAAO,KAAK,iBAAiB,GAAG;AACtD,QAAM,kBAAkB;AAAA,IACtB,aAAa;AAAA,IACb,SAAS;AAAA,IACT,SAAS,EAAE,CAAC,WAAW,GAAG,EAAE,QAAQ,MAAM,UAAU,QAAQ,EAAE,EAAE;AAAA,EAClE;AACA,QAAM,aAAa,cAAc,SAAS,OAAO;AACjD,QAAM,gBAAgB,OAAO,KAAK,WAAW,cAAc,CAAC,CAAC,EAAE,SAAS;AACxE,QAAM,wBAAwB,MAAM,QAAQ,WAAW,QAAQ,KAAK,WAAW,SAAS,SAAS;AACjG,WAAS,KAAK,OAAO,YAAY,CAAC,IAAI;AAAA,IACpC,aAAa,UAAU;AAAA,IACvB,SAAS,UAAU;AAAA,IACnB,UAAU,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;AAAA,IAC7B,kCAAkC,CAAC,GAAG,UAAU,MAAM;AAAA,IACtD,oCAAoC;AAAA,IACpC,GAAI,WAAW,SAAS,EAAE,WAAW,IAAI,CAAC;AAAA,IAC1C,GAAI,KAAK,WAAW,UAAU,gBAAgB;AAAA,MAC5C,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS,EAAE,oBAAoB,EAAE,QAAQ,WAAW,EAAE;AAAA,MACxD;AAAA,IACF,IAAI,CAAC;AAAA,IACL,WAAW,EAAE,CAAC,aAAa,GAAG,iBAAiB,GAAG,gBAAgB;AAAA,EACpE;AACF;AAEA,IAAM,UAAU;AAAA,EACd,SAAS;AAAA,EACT,MAAM;AAAA,IACJ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,SAAS,EAAE,MAAM,cAAc,YAAY,aAAa;AAAA,EAC1D;AAAA,EACA,SAAS,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,EACtB,oCAAoC,CAAC,GAAG,2BAA2B;AAAA,EACnE,2CAA2C;AAAA,EAC3C,+BAA+B;AAAA,IAC7B,aAAa;AAAA,IACb,gBAAgB,EAAE,iBAAiB,4CAA4C;AAAA,IAC/E,iBAAiB,EAAE,SAAS,wCAAwC,UAAU,wCAAwC;AAAA,EACxH;AAAA,EACA,8BAA8B;AAAA,IAC5B,cAAc;AAAA,IACd,SAAS;AAAA,IACT,UAAU;AAAA,EACZ;AAAA,EACA,oCAAoC;AAAA,EACpC;AAAA,EACA,YAAY;AAAA,IACV,SAAS,EAAE,eAAe,oBAAoB;AAAA,IAC9C,iBAAiB,EAAE,YAAY,EAAE,MAAM,QAAQ,QAAQ,SAAS,EAAE;AAAA,EACpE;AACF;AAEA,IAAM,MAAM;AAAA,EACV,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB;AAAA,EACA,OAAO,WAAW,OAAO,CAAC,UAAU,MAAM,GAAG,EAAE,IAAI,CAAC,WAAW;AAAA,IAC7D,MAAM,MAAM,IAAK;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,aAAa,MAAM;AAAA,IACnB,cAAc,MAAM;AAAA,IACpB,gBAAgB,MAAM;AAAA,IACtB,WAAW,MAAM;AAAA,EACnB,EAAE;AACJ;AAEA,IAAM,OAAO,QAAQ,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,OAAO;AACrE,IAAM,UAAU,oBAAI,IAAI;AAAA,EACtB,CAAC,QAAQ,MAAM,qCAAqC,GAAG,uBAAuB,OAAO,CAAC;AAAA,EACtF,CAAC,QAAQ,MAAM,sCAAsC,GAAG,uBAAuB,OAAO,CAAC;AAAA,EACvF,CAAC,QAAQ,MAAM,kCAAkC,GAAG,uBAAuB,GAAG,CAAC;AAAA,EAC/E,CAAC,QAAQ,MAAM,2CAA2C,GAAG,uBAAuB,mBAAmB,CAAC,CAAC;AAC3G,CAAC;AACD,IAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS;AAC7C,IAAM,QAAkB,CAAC;AACzB,WAAW,CAAC,MAAM,QAAQ,KAAK,SAAS;AACtC,MAAI,OAAO;AACT,QAAI,UAAU;AACd,QAAI;AAAE,gBAAU,aAAa,MAAM,MAAM;AAAA,IAAG,QAAQ;AAAA,IAAC;AACrD,QAAI,0BAA0B,OAAO,MAAM,0BAA0B,QAAQ,GAAG;AAC9E,YAAM,KAAK,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC;AAAA,IACxC;AAAA,EACF,OAAO;AACL,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,kBAAc,MAAM,QAAQ;AAAA,EAC9B;AACF;AACA,IAAI,MAAM,QAAQ;AAChB,aAAW,QAAQ,MAAO,SAAQ,OAAO,MAAM,kCAAkC,IAAI;AAAA,CAAI;AACzF,UAAQ,WAAW;AACrB,OAAO;AACL,UAAQ,OAAO,MAAM,aAAa,QAAQ,UAAU,WAAW,KAAK,QAAQ,IAAI,eAAe,WAAW,MAAM;AAAA,CAAe;AACjI;","names":[]}

package/dist/dr.d.ts

@@ -299,6 +299,10 @@ declare class PostgresNativeDrError extends Error {
         restoreCompleted?: boolean;
         recoveryPaths?: string[];
         causeCode?: string;
+        roleMemberships?: Array<{
+            role: string;
+            member: string;
+        }>;
     };
     constructor(code: string, message: string, details?: {
         residualRoleShells?: string[];
@@ -307,6 +311,10 @@ declare class PostgresNativeDrError extends Error {
         restoreCompleted?: boolean;
         recoveryPaths?: string[];
         causeCode?: string;
+        roleMemberships?: Array<{
+            role: string;
+            member: string;
+        }>;
     });
 }
 declare function createPostgresDrLibpqFiles(connectionUrl: string, directory: string): PostgresDrLibpqFiles;

package/dist/dr.js

@@ -39,7 +39,7 @@ import {
   verifyNativeDrBundle,
   verifyPostgresNativeDrArtifacts,
   writeNativeDrBundle
-} from "./chunk-7VJI2MXI.js";
+} from "./chunk-IF5OKPBK.js";
 import {
   EDGE_SQLITE_APPLICATION_ID,
   EDGE_SQLITE_SCHEMA_CONTRACTS,

package/dist/{gateway-CW-61lvs.d.ts → gateway-BqmcKam8.d.ts}

@@ -1,8 +1,8 @@
 import * as node_http from 'node:http';
 import { IncomingMessage, ServerResponse } from 'node:http';
-import { a as BridgeStore } from './bridge-store-ByJ6CaJk.js';
+import { a as BridgeStore } from './bridge-store-Bi_LCX8e.js';
 import { c as BridgePrincipal } from './bridge-domain-CBX3IVqC.js';
-import { P as PgQueryable, b as PostgresBridgeStore } from './postgres-bridge-store-C9KG9Z69.js';
+import { P as PgQueryable, b as PostgresBridgeStore } from './postgres-bridge-store-ChoOuFEY.js';
 
 declare const AUTHORIZATION_SCOPES: readonly ["deliveries:claim", "deliveries:manage", "deliveries:read", "deliveries:settle", "gateway:metrics", "messages:read", "messages:write", "presence:read", "presence:write", "receipts:write", "status:read"];
 type AuthorizationScope = typeof AUTHORIZATION_SCOPES[number];

package/dist/gateway-main.js

@@ -12,9 +12,9 @@ import "./chunk-VOQIDTCJ.js";
 import {
   PostgresCredentialResolver,
   createGateway
-} from "./chunk-JUTJRAMA.js";
-import "./chunk-AWE3DFZV.js";
-import "./chunk-E4OWHGUE.js";
+} from "./chunk-FGERNG4X.js";
+import "./chunk-4V2PFJEF.js";
+import "./chunk-62C63PIE.js";
 import "./chunk-BZLMF5O5.js";
 
 // src/gateway-main.ts

package/dist/gateway.d.ts

@@ -1,5 +1,5 @@
 import 'node:http';
-import './bridge-store-ByJ6CaJk.js';
-export { G as GatewayOptions, c as createGateway } from './gateway-CW-61lvs.js';
+import './bridge-store-Bi_LCX8e.js';
+export { G as GatewayOptions, c as createGateway } from './gateway-BqmcKam8.js';
 import './bridge-domain-CBX3IVqC.js';
-import './postgres-bridge-store-C9KG9Z69.js';
+import './postgres-bridge-store-ChoOuFEY.js';

package/dist/gateway.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   createGateway
-} from "./chunk-JUTJRAMA.js";
-import "./chunk-AWE3DFZV.js";
-import "./chunk-E4OWHGUE.js";
+} from "./chunk-FGERNG4X.js";
+import "./chunk-4V2PFJEF.js";
+import "./chunk-62C63PIE.js";
 import "./chunk-BZLMF5O5.js";
 export {
   createGateway

package/dist/index.js

@@ -1,16 +1,17 @@
 #!/usr/bin/env node
 import {
   startServer
-} from "./chunk-HUHG7XTB.js";
-import "./chunk-2EVLG3YA.js";
-import "./chunk-QPC6JHA3.js";
-import "./chunk-Z6JP6MYD.js";
-import "./chunk-SN7PIVDF.js";
+} from "./chunk-AIALYLGQ.js";
+import "./chunk-23UDQZMT.js";
+import "./chunk-UKFRCP6X.js";
+import "./chunk-IMJ47WO4.js";
+import "./chunk-WQ4I5XGF.js";
+import "./chunk-ZUZ7TCIH.js";
 import "./chunk-IVG4XWWS.js";
 import "./chunk-GTK4KOED.js";
 import "./chunk-VOQIDTCJ.js";
-import "./chunk-AWE3DFZV.js";
-import "./chunk-E4OWHGUE.js";
+import "./chunk-4V2PFJEF.js";
+import "./chunk-62C63PIE.js";
 import "./chunk-BZLMF5O5.js";
 
 // src/index.ts

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { startServer } from \"./server.js\";\n\nstartServer().catch((err) => {\n  console.error(\"Failed to start agent-bridge MCP server:\", err);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;AAEA,YAAY,EAAE,MAAM,CAAC,QAAQ;AAC3B,UAAQ,MAAM,4CAA4C,GAAG;AAC7D,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { startServer } from \"./server.js\";\n\nstartServer().catch((err) => {\n  console.error(\"Failed to start agent-bridge MCP server:\", err);\n  process.exit(1);\n});\n"],"mappings":";;;;;;;;;;;;;;;;;AAEA,YAAY,EAAE,MAAM,CAAC,QAAQ;AAC3B,UAAQ,MAAM,4CAA4C,GAAG;AAC7D,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}

package/dist/{postgres-bridge-store-C9KG9Z69.d.ts → postgres-bridge-store-ChoOuFEY.d.ts}

@@ -1,5 +1,5 @@
 import { b as BridgeMessage, c as BridgePrincipal, B as BridgeDelivery, R as RetryPolicy, a as BridgeDeliveryEvent, A as AgentPresence } from './bridge-domain-CBX3IVqC.js';
-import { a as BridgeStore, I as InsertMessageResult, d as MessageQuery, M as MessagePage, C as ClaimOptions, c as DeliveryQuery, B as BridgeDiagnostics } from './bridge-store-ByJ6CaJk.js';
+import { a as BridgeStore, I as InsertMessageResult, d as MessageQuery, M as MessagePage, C as ClaimOptions, c as DeliveryQuery, B as BridgeDiagnostics } from './bridge-store-Bi_LCX8e.js';
 
 interface PgQueryable {
     query<T extends Record<string, unknown> = Record<string, unknown>>(sql: string, values?: unknown[]): Promise<{

package/dist/server.d.ts

@@ -3,8 +3,6 @@ import { ClientProvider } from './client-config.js';
 import './bridge-domain-CBX3IVqC.js';
 
 interface AgentBridgeServerConfig {
-    supabaseUrl?: string;
-    supabaseKey?: string;
     agent?: string;
     provider?: ClientProvider;
     workspace?: string;

package/dist/server.js

@@ -4,16 +4,17 @@ import {
   configFromEnv,
   createAgentBridgeServer,
   startServer
-} from "./chunk-HUHG7XTB.js";
-import "./chunk-2EVLG3YA.js";
-import "./chunk-QPC6JHA3.js";
-import "./chunk-Z6JP6MYD.js";
-import "./chunk-SN7PIVDF.js";
+} from "./chunk-AIALYLGQ.js";
+import "./chunk-23UDQZMT.js";
+import "./chunk-UKFRCP6X.js";
+import "./chunk-IMJ47WO4.js";
+import "./chunk-WQ4I5XGF.js";
+import "./chunk-ZUZ7TCIH.js";
 import "./chunk-IVG4XWWS.js";
 import "./chunk-GTK4KOED.js";
 import "./chunk-VOQIDTCJ.js";
-import "./chunk-AWE3DFZV.js";
-import "./chunk-E4OWHGUE.js";
+import "./chunk-4V2PFJEF.js";
+import "./chunk-62C63PIE.js";
 import "./chunk-BZLMF5O5.js";
 export {
   MCP_IMPLEMENTATION_VERSION,

package/dist/{sqlite-edge-store-CdMIOrho.d.ts → sqlite-edge-store-BAFUeysk.d.ts}

@@ -1,5 +1,5 @@
 import { b as BridgeMessage, c as BridgePrincipal } from './bridge-domain-CBX3IVqC.js';
-import { d as MessageQuery, M as MessagePage } from './bridge-store-ByJ6CaJk.js';
+import { d as MessageQuery, M as MessagePage } from './bridge-store-Bi_LCX8e.js';
 
 type PendingMessage = Omit<BridgeMessage, "sequence" | "createdAt">;
 interface EdgeScope {

package/dist/sqlite.d.ts

@@ -1,7 +1,7 @@
 import { c as BridgePrincipal, B as BridgeDelivery, g as DeliveryState, R as RetryPolicy, A as AgentPresence, b as BridgeMessage, a as BridgeDeliveryEvent } from './bridge-domain-CBX3IVqC.js';
-import { M as MessagePage, B as BridgeDiagnostics, I as InsertMessageResult, a as BridgeStore, d as MessageQuery, C as ClaimOptions, c as DeliveryQuery, b as DeliveryPage, D as DeliveryEventPage } from './bridge-store-ByJ6CaJk.js';
-import { e as EdgeMigrationGateState, S as SQLiteEdgeStore, a as EdgeDrainLease, P as PendingMessage } from './sqlite-edge-store-CdMIOrho.js';
-export { E as EdgeConflictError, b as EdgeEnqueueResult, c as EdgeMigrationDrainingError, d as EdgeMigrationGate, f as EdgeMigrationLeaseError, g as EdgeMigrationRetiredError, h as EdgeOutboxRecord, i as EdgeReadOnlyInspection, j as EdgeScope, k as EdgeStats, l as edgeMessageFingerprint, m as edgeScopeKey, n as inspectEdgeScopeReadOnly, s as stableIdempotency } from './sqlite-edge-store-CdMIOrho.js';
+import { M as MessagePage, B as BridgeDiagnostics, I as InsertMessageResult, a as BridgeStore, d as MessageQuery, C as ClaimOptions, c as DeliveryQuery, b as DeliveryPage, D as DeliveryEventPage } from './bridge-store-Bi_LCX8e.js';
+import { e as EdgeMigrationGateState, S as SQLiteEdgeStore, a as EdgeDrainLease, P as PendingMessage } from './sqlite-edge-store-BAFUeysk.js';
+export { E as EdgeConflictError, b as EdgeEnqueueResult, c as EdgeMigrationDrainingError, d as EdgeMigrationGate, f as EdgeMigrationLeaseError, g as EdgeMigrationRetiredError, h as EdgeOutboxRecord, i as EdgeReadOnlyInspection, j as EdgeScope, k as EdgeStats, l as edgeMessageFingerprint, m as edgeScopeKey, n as inspectEdgeScopeReadOnly, s as stableIdempotency } from './sqlite-edge-store-BAFUeysk.js';
 
 interface SyncInsertResult extends InsertMessageResult {
     disposition: "committed" | "queued";
@@ -110,6 +110,10 @@ declare class SyncingBridgeStore implements BridgeStore {
     private cancelled;
     private flushOne;
     insertMessage(message: PendingMessage): Promise<SyncInsertResult>;
+    enqueueMessage(message: PendingMessage): Promise<SyncInsertResult & {
+        disposition: "queued";
+        authoritative: false;
+    }>;
     private pull;
     sync(options?: {
         maxPush?: number;

package/dist/sqlite.js

@@ -11,7 +11,7 @@ import {
   inspectEdgeScopeReadOnly,
   isRetryableSyncError,
   stableIdempotency
-} from "./chunk-SN7PIVDF.js";
+} from "./chunk-ZUZ7TCIH.js";
 import {
   SQLiteBridgeStore
 } from "./chunk-IVG4XWWS.js";

package/docs/architecture-v2.md

@@ -1,14 +1,16 @@
 # Agent Bridge v2 architecture
 
-Status: living architecture for the 0.4.x package line.
+Status: living architecture for the 0.6.x package line.
 
 ## Product boundary
 
-Agent Bridge is the durable, pull-first mailbox and work-delivery control plane for agents that run in different clients, processes, sessions, and machines. It supports three operating modes: local SQLite, the authenticated PostgreSQL gateway, and the legacy Supabase adapter.
+Agent Bridge lets agents exchange messages and hand off work across clients, processes,
+sessions, and machines. It supports two operating modes: local SQLite and the
+authenticated PostgreSQL gateway.
 
 History visibility is caller-relative. `inbox` is the default and preserves broadcast-plus-targeted visibility; `sent` is source equal to the caller; `all` is their union. Receipt state (`any`, `unread`, `read`) is valid only for inbox and is always evaluated for the authenticated caller. Opaque v2 cursors bind workspace, caller, mailbox, and normalized filters. Readers temporarily accept v1 sequence cursors but emit only v2. After an edge cache contract upgrade, the gateway resets the authoritative pull cursor and replays `all` visibility; the publication outbox is never treated as sent history.
 
-These authorization guarantees apply to local v2 and the authenticated gateway. The legacy Supabase adapter can enforce them only cooperatively because its publishable key can call the underlying PostgREST table and receipt RPC directly.
+These authorization guarantees apply to local v2 and the authenticated gateway.
 
 - Local mode runs without an account or network connection.
 - Shared mode uses a remote service so agents on different machines see the same history and delivery state.
@@ -29,7 +31,10 @@ PostgreSQL stores shared messages, identities, receipts, deliveries, and migrati
 
 A standalone Agent Bridge API sits between remote clients and PostgreSQL. Clients authenticate to the API with scoped credentials. They do not receive a database password or rely on a shared Supabase publishable key for identity.
 
-Supabase can still host the database. Existing direct PostgREST deployments remain available through an explicitly named legacy adapter while they migrate.
+Supabase can host the database. Agent Bridge 0.6.0 removed the direct PostgREST runtime
+adapter. Historical deployments migrate through the checked-in schema and ordered
+PostgreSQL migrations described in
+[ADR-0005](decisions/0005-retire-direct-supabase-runtime.md).
 
 ### Deployment separates schema and request authority
 
@@ -237,7 +242,7 @@ The v2 envelope uses fields that can be mapped to CloudEvents without changing s
 
 A receipt records that a principal read a message.
 
-A publisher stores an immutable `deliveryPolicy` with each message. Untargeted messages default to mailbox mode. Targeted messages default to leased mode with `maxAttempts: 5`, `retryBaseDelayMs: 1000`, `retryMaxDelayMs: 60000`, and `retryJitterRatio: 0.2`. Leased policy may also set `notBefore`. Mailbox messages create no deliveries, and legacy mode rejects leased policy.
+A publisher stores an immutable `deliveryPolicy` with each message. Untargeted messages default to mailbox mode. Targeted messages default to leased mode with `maxAttempts: 5`, `retryBaseDelayMs: 1000`, `retryMaxDelayMs: 60000`, and `retryJitterRatio: 0.2`. Leased policy may also set `notBefore`. Mailbox messages create no deliveries.
 
 A leased delivery records executable work for a recipient. Its state is one of `pending`, `claimed`, `acked`, `retrying`, `dead`, or `cancelled`. `attempt` is lifetime-monotonic, while `cycleAttempt` resets on publisher requeue and `requeueCount` increments. Stored policy owns retry and exhaustion. Claims order due work by urgent, high, then info priority, followed by availability, message creation time, and the stable delivery ID tie-break. HTTP 2.1, MCP, and CLI may optionally identify one message. That form atomically selects only the eligible delivery for the authenticated recipient and scopes claim-time expiry and exhaustion maintenance to the same message. Omitting the filter preserves claim-next behavior. The frozen HTTP 2.0 request rejects the additive field.
 
@@ -253,7 +258,9 @@ The system promises at-least-once delivery. It does not promise exactly-once exe
 
 Project participates in the idempotency fingerprint. Reads without a project filter span labeled and unlabeled messages inside the credential-bound workspace. An exact filter narrows that same cursor authority. Migration 008 adds the PostgreSQL column and index. Existing local and edge SQLite databases add their project columns during initialization. Migration 006 is not rewritten. A schema-owner command dry-runs or reconciles its rows into workspace `agent-bridge` in one transaction. It preserves IDs, timestamps, receipts, and row counts, and it verifies that no delivery exists before or after the change.
 
-The legacy Supabase schema has no tenant workspace column. Its adapter reports workspace `*` and uses the legacy `project` column only as a message label. It rejects per-command workspace overrides because assigning a caller-selected workspace to global rows would create a false isolation boundary.
+The historical Supabase schema has no tenant workspace column. Migration 006 maps its
+global rows into canonical workspaces before gateway activation. A caller cannot use
+the retired runtime shape to assign a workspace to those rows.
 
 The delivery API supports:
 
@@ -274,9 +281,9 @@ Reads use an opaque cursor backed by the backend sequence number. UUIDv7 improve
 
 During gateway outages, normal inbox and pending reads return the locally cached candidate set with explicit degraded and stale metadata. Because receipt state is remote authority and is not mirrored, an offline `unacknowledgedBy` result reports acknowledgement state as unknown; it must not be interpreted as proof that every returned message is unread.
 
-Realtime, hooks, webhooks, and desktop notifications may wake a client. The client still pulls from its last durable cursor. This closes notification gaps and makes reconnect behavior testable.
-
-Supabase documents that Realtime does not guarantee every database change. Agent Bridge therefore treats it as an optional delivery hint, not a message log.
+Hooks, webhooks, and desktop notifications may wake a client. The client still pulls
+from its last durable cursor. This closes notification gaps and makes reconnect
+behavior testable.
 
 ### Identity is bound at the client boundary
 
@@ -311,7 +318,6 @@ Protocol logic depends on a `BridgeStore` interface, not a provider SDK. The ini
 
 - SQLite for local mode and edge state.
 - PostgreSQL for a standalone shared deployment.
-- Supabase legacy REST for v1 compatibility during migration.
 - Agent Bridge HTTP API for normal remote clients.
 
 Host and wakeup adapters are independent from storage. A client manifest declares identity injection, supported wake modes, config locations, health checks, and install actions for Codex, Claude Code, Claude Desktop, OpenClaw, or a generic MCP client. The v1 manifest key named `runtime` identifies an installation target for compatibility. It does not identify a unique running process. The `codex` adapter configures the profile shared by the Codex CLI and the Codex surface in the ChatGPT desktop app. Scripts, CI jobs, daemons, and application services may instead call the CLI or HTTPS API or embed the Node library without pretending to be a harness adapter.
@@ -503,11 +509,14 @@ because an immutable read could miss uncheckpointed outbox state.
 
 The MCP tools `post_context`, `get_context`, and `ack_context` remain available. Existing CLI verbs and flags remain accepted. Text responses remain present while v2 adds structured result data.
 
-Legacy Supabase rows remain readable as broadcast messages. A migration command checks schema state, backfills v2 records, and verifies counts before activation. Secure shared mode cannot silently inherit the old permissive RLS policies.
+Migration 006 checks the historical Supabase schema, imports v1 records, and verifies
+counts before activation. The reconciliation command can correct imported project
+labels without reopening the retired runtime adapter. Secure shared mode cannot
+silently inherit the old permissive RLS policies.
 
 ## Security boundary
 
-Shared mode uses a token-authenticated API. The service stores only token hashes. Credentials bind a workspace and principal, carry canonical operation scopes, can expire, and can be revoked. Capabilities requires an active credential but no named scope. Local and legacy providers do not claim gateway scope enforcement.
+Shared mode uses a token-authenticated API. The service stores only token hashes. Credentials bind a workspace and principal, carry canonical operation scopes, can expire, and can be revoked. Capabilities requires an active credential but no named scope. Local mode does not claim gateway scope enforcement.
 
 Migration 011 grants every pre-migration credential the full compatibility scope set, including expired and revoked rows, without rewriting lifecycle metadata. Migration 014 preserves those rows but changes new raw inserts to empty scopes. Owner provisioning selects an immutable named scope set. Database constraints reject unknown, duplicated, or unsorted scopes.
 
@@ -640,7 +649,7 @@ The TypeBox 1.x registry validates closed requests before domain semantics. Resp
 
 Compatibility is asymmetric. An upgraded gateway serves released headerless and explicit 2.0 clients. A new 2.1 client probes before mutation and accepts the gateway only when complete, consistent response headers select 2.1 and advertise 2.1 support. A headerless response, selected 2.0 response, or partial negotiation means the gateway must be upgraded. The client rejects mutation instead of using the d8184fe 2.0 contract. Deploy the gateway before 2.1 clients.
 
-The OpenAPI paths describe protocol 2.1. Embedded 2.0 vendor extensions carry only the frozen compatibility schemas and metadata needed to document released clients; they do not form a second OpenAPI description. `npm run contracts:check` proves that JSON Schema 2020-12, OpenAPI 3.1.2, MCP manifest, and capability artifacts match the registry. All schema references are local. Protocol, npm package, MCP implementation, and migration versions are independent. Gateway scope enforcement comes from the registry. Provider-neutral artifacts report enforcement separately for gateway, local, and legacy modes.
+The OpenAPI paths describe protocol 2.1. Embedded 2.0 vendor extensions carry only the frozen compatibility schemas and metadata needed to document released clients; they do not form a second OpenAPI description. `npm run contracts:check` proves that JSON Schema 2020-12, OpenAPI 3.1.2, MCP manifest, and capability artifacts match the registry. All schema references are local. Protocol, npm package, MCP implementation, and migration versions are independent. Gateway scope enforcement comes from the registry. Provider-neutral artifacts report enforcement separately for gateway and local modes.
 
 The v2 implementation is not accepted until all of these checks pass:
 
@@ -670,7 +679,6 @@ End-to-end payload encryption needs a separate threat model and key-management d
 - SQLite WAL-reset bug: <https://sqlite.org/forum/forumpost/0b7fd7f028>
 - PostgreSQL row locking and `SKIP LOCKED`: <https://www.postgresql.org/docs/current/sql-select.html#SQL-FOR-UPDATE-SHARE>
 - Supabase self-hosting responsibilities: <https://supabase.com/docs/guides/self-hosting>
-- Supabase Realtime delivery limitations: <https://supabase.com/docs/reference/self-hosting-realtime>
 - MCP tools specification: <https://modelcontextprotocol.io/specification/2025-11-25/server/tools>
 - MCP transport specification: <https://modelcontextprotocol.io/specification/2025-11-25/basic/transports>
 - UUIDv7: <https://www.rfc-editor.org/rfc/rfc9562.html#name-uuid-version-7>

package/docs/decisions/0001-protocol-layers-and-acknowledgment-semantics.md

@@ -16,7 +16,8 @@ Agent Bridge needs to serve agents across clients, sessions, processes, and mach
 
 ## Decision
 
-Agent Bridge is the durable, pull-first mailbox and work-delivery control plane for intermittently connected agent runtimes.
+Agent Bridge provides messaging and work delivery for intermittently connected agent
+runtimes across tools, sessions, and machines.
 
 Its protocol owns:
 

package/docs/decisions/0002-canonical-operation-contract-registry.md

@@ -26,7 +26,11 @@ Compatibility runs in the other direction. An upgraded gateway continues to serv
 
 The OpenAPI paths require protocol 2.1. The `x-agent-bridge-protocol-2.0` and `x-agent-bridge-schemas-2.0` vendor extensions provide limited metadata and frozen schemas for the released compatibility contract. They do not define a second set of paths or a separate OpenAPI description.
 
-Capability documents are filtered by surface and provider. HTTP capability discovery requires a valid credential but has no named scope. The exact scope names are reserved metadata until a later security migration. Gateway credentials grant access as a whole, local mode uses process identity, and legacy mode uses its configured key. Capability documents and OpenAPI set `scopeEnforcement` to false.
+Capability documents are filtered by surface and provider. HTTP capability discovery
+requires a valid credential but no named scope. Gateway operations enforce the scopes
+declared by the registry, while local mode uses process identity and reports scope
+enforcement as false. [ADR-0005](0005-retire-direct-supabase-runtime.md) removed the
+legacy runtime provider from this contract.
 
 Package version, MCP implementation version, Agent Bridge protocol version, and migration version remain independent. The MCP server reports the explicit `MCP_IMPLEMENTATION_VERSION` constant instead of the npm package version.
 
@@ -42,5 +46,6 @@ Package version, MCP implementation version, Agent Bridge protocol version, and
 ## Related
 
 - [ADR-0001](0001-protocol-layers-and-acknowledgment-semantics.md) defines the protocol layers and acknowledgment meanings.
+- [ADR-0005](0005-retire-direct-supabase-runtime.md) removes the direct Supabase runtime provider.
 - [Architecture v2](../architecture-v2.md) describes the system that follows these decisions.
 - The [README](../../README.md) documents public setup and upgrade behavior.

package/docs/decisions/0005-retire-direct-supabase-runtime.md

@@ -0,0 +1,52 @@
+# ADR-0005: Retire the direct Supabase runtime
+
+Status: accepted
+
+Date: 2026-07-21
+
+## Context
+
+Early Agent Bridge releases could read and write `public.shared_context` through
+Supabase PostgREST with a publishable key. That adapter kept the first deployment
+working while the canonical protocol and gateway were built.
+
+The adapter could not provide the gateway's security or delivery model. Its shared key
+did not bind a principal or workspace. Its schema had no delivery leases, offline
+outbox, presence, scoped credentials, or transaction-bound request authority. Keeping
+it as a runtime provider also made every public contract describe a weaker third mode.
+
+Supabase remains a useful managed PostgreSQL host. The problem is the direct client API,
+not the database service.
+
+## Decision
+
+Agent Bridge 0.6.0 supports two runtime providers:
+
+- `local`, backed by SQLite.
+- `gateway`, backed by an authenticated Agent Bridge gateway with PostgreSQL authority
+  and a local SQLite edge store.
+
+The package no longer exports or constructs the direct Supabase store. It rejects
+`legacy`, `supabase`, `legacy-supabase`, and key-only configurations with an upgrade
+message.
+
+Historical migration support remains:
+
+- `sql/setup.sql` records the v1 schema shape.
+- Migration 006 imports `public.shared_context` rows and receipts.
+- `reconcile-legacy-projects` repairs the imported workspace and project mapping.
+- Released HTTP 2.0 and MCP compatibility tools remain independent protocol contracts.
+
+## Consequences
+
+Remote clients now use one authenticated boundary and one capability model. Supabase
+deployments can continue to host the canonical PostgreSQL database without exposing
+PostgREST to Agent Bridge clients.
+
+Operators upgrading an old direct deployment must preserve the source, run the
+historical import, provision principal-bound gateway credentials, and change client
+configuration before installing 0.6.0. A running direct client cannot upgrade in place
+without that provider change.
+
+The removed adapter is not a promise to delete historical migration code. Migration
+fixtures remain until the project adopts an explicit migration-support window.

package/docs/deployment.md

@@ -264,25 +264,30 @@ sender credential needs `messages:write` and `messages:read`. The receiver needs
 
 Run the workflow only when the Fly app has exactly one gateway machine. The cycle job
 restarts that machine and queries the Fly Machines API before and after. It fails
-unless the machine ID stays fixed, the runtime `instance_id` changes, the machine
-returns to `started`, and `/readyz` succeeds. This changes production compute and
-requires environment approval. It does not migrate the database or change secrets.
-
-The sender first uses an unreachable loopback origin to force a leased publication
-into its private SQLite outbox. It then synchronizes that row to the supplied gateway
-and repeats the publication with the same idempotency key. A separate host finds the
-exact message through `proof-receiver`, claims its delivery, and acknowledges it.
+unless the machine ID stays fixed, a later successful `start` event appears, the
+machine returns to `started`, and `/readyz` succeeds. Fly documents `instance_id` as a
+version changed by machine updates; a plain restart need not change it. This operation
+changes production compute and requires environment approval. It does not migrate the
+database or change secrets.
+
+The sender first writes a leased publication to its private SQLite outbox without a
+network request. It then synchronizes that row to the supplied gateway and repeats the
+publication with the same idempotency key. The gateway origin, workspace, and principal
+scope stay unchanged. A separate host finds the exact message through `proof-receiver`,
+claims its delivery, and acknowledges it.
 After the Fly machine cycle, the verifier uses a fresh instance key, edge database,
 and cursor. It reads the immutable message and confirms that the prior delivery is
-still `acked`.
+still `acked`. The sender and receiver host evidence must differ. GitHub may reuse the
+sender's hosted runner for the verifier, so the verifier proves fresh local state rather
+than requiring a third physical host.
 
 Each phase writes an `agent-bridge-production-proof-v1` receipt. The runner rejects
 unknown fields at the phase boundary and checks every receipt before use. Receipts may
 record IDs, timestamps, principal and workspace labels, the gateway origin, boolean
 checks, and salted SHA-256 host evidence. They never record bearer values, database
-URLs, environment values, message content, lease tokens, cursor files, or edge
-databases. Download all four workflow artifacts for the operator record. A passing
-repository test still does not replace a completed external workflow run.
+URLs, secret-bearing environment values, message content, lease tokens, cursor files,
+or edge databases. Download all four workflow artifacts for the operator record. A
+passing repository test still does not replace a completed external workflow run.
 
 ### Persistent data and backup