@creatornader/agent-bridge 0.6.5 → 0.7.0

package/CHANGELOG.md

@@ -4,6 +4,17 @@ All notable changes to agent-bridge are documented in this file.
 
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.0] - 2026-07-29
+
+### Added
+
+- Let exact managed Codex and Claude Code registrations move from stdio to a
+  profile-local MCP Streamable HTTP endpoint. Claude Desktop can record an exact
+  stdio proxy command and arguments for the same topology. The update keeps the
+  existing private backend and credentials, rejects non-loopback or credential-shaped
+  URLs, upgrades v1 managed metadata to a versioned target contract, and retains the
+  existing journal, resume, and rollback guarantees.
+
 ## [0.6.5] - 2026-07-27
 
 ### Fixed

package/README.md

@@ -530,6 +530,15 @@ agent-bridge clients repair codex --identity codex --instance <stable-key>
 agent-bridge clients repair codex --identity codex --instance <stable-key> --apply
 agent-bridge clients update codex --identity codex --instance <stable-key> \
   --command agent-bridge-mcp --apply
+agent-bridge clients update codex --identity codex --instance <stable-key> \
+  --mcp-url http://127.0.0.1:8794/mcp --apply
+agent-bridge clients update claude-code --identity claude-code --instance <stable-key> \
+  --mcp-url http://127.0.0.1:8793/mcp --apply
+agent-bridge clients update claude-desktop --identity claude-desktop --instance <stable-key> \
+  --mcp-url http://127.0.0.1:8791/mcp \
+  --proxy-command /absolute/path/to/node \
+  --proxy-args-json '["/absolute/path/to/stdio-http-proxy.js","--transport","stdio-http-proxy","--endpoint","http://127.0.0.1:8791/mcp"]' \
+  --apply
 agent-bridge clients repair codex --identity codex --instance <stable-key> \
   --apply --resume <operation-uuid>
 agent-bridge clients uninstall codex --identity codex --instance <stable-key> --apply
@@ -549,7 +558,16 @@ launch contract. Update validates and records a new credential-free launch contr
 before it creates a journal. A native `--command` is one executable contract. Bare
 commands cannot contain arguments or URL-like selectors. Absolute paths must resolve
 to executable files. Native adapters remove, verify absence, add, and verify
-the target registration. Claude Desktop replaces only `mcpServers.agent-bridge`,
+the target registration. `--mcp-url` selects a managed profile-local Streamable HTTP
+target for Codex or Claude Code. It accepts only an explicit `http://` loopback host,
+port, and `/mcp` path, with no user information, query, or fragment. The backend file
+stays in place because it remains lifecycle and rollback authority even though the
+native HTTP registration does not receive backend environment variables.
+
+Claude Desktop represents the endpoint as stdio. For that runtime, `--mcp-url`
+requires an existing absolute `--proxy-command`. `--proxy-args-json` must be a JSON
+array of strings. The arguments must contain the exact endpoint and cannot contain
+credential-like flags or values. Claude Desktop replaces only `mcpServers.agent-bridge`,
 preserves unrelated JSON values in memory, publishes through a private operation-scoped
 temporary file, and verifies the new entry. Node cannot provide an OS transaction with
 an uncooperative same-user Desktop writer. The pre-rename identity checks make this an

package/ROADMAP.md

@@ -10,6 +10,14 @@ published and the supported clients pass a fresh end-to-end check.
 
 ## Status
 
+### Implemented, awaiting release
+
+- Managed Codex and Claude Code registrations can move from stdio to one loopback MCP
+  Streamable HTTP endpoint per profile. Claude Desktop can use an exact managed stdio
+  proxy launch for its loopback endpoint. The update preserves backend credentials,
+  upgrades v1 managed metadata to a versioned target contract, and keeps restart and
+  rollback classification intact.
+
 ### Released by 0.3.1
 
 - Local SQLite and shared PostgreSQL storage behind provider-neutral interfaces.

package/SKILL.md

@@ -93,7 +93,13 @@ For a managed registration, use `clients repair <runtime> --identity <name> --in
 only after reviewing the plan. Use `clients update` with the same metadata-selected
 runtime and instance to validate a replacement launch contract. The same identity must
 match the stored metadata and the immutable request. Native commands are one executable
-contract. Do not pass arguments, URLs, or credential selectors in `--command`. Repair, update, and uninstall reject
+contract. Do not pass arguments, URLs, or credential selectors in `--command`.
+Use `--mcp-url http://127.0.0.1:<port>/mcp` for a managed Codex or Claude Code
+Streamable HTTP target. The URL must stay on loopback and cannot contain user
+information, a query, or a fragment. For Claude Desktop, pair `--mcp-url` with an
+absolute `--proxy-command` and a `--proxy-args-json` string array that contains the
+exact endpoint. Review the plan before applying it. The existing private backend remains
+unchanged and continues to anchor lifecycle recovery. Repair, update, and uninstall reject
 `--backend-config`, `--scope`, and `--config-path`; `--identity` is an assertion, not a
 locator. A no-op exact registration creates no journal. Native updates remove, prove
 absence, add, and prove the target before metadata changes. Desktop updates replace only