@creatornader/agent-bridge 0.6.5 → 0.7.2

package/CHANGELOG.md

@@ -4,6 +4,34 @@ All notable changes to agent-bridge are documented in this file.
 
 The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.2] - 2026-07-30
+
+### Fixed
+
+- Use a dedicated release verification credential. The release gate no longer shares
+  the manual production-proof sender credential.
+
+## [0.7.1] - 2026-07-30
+
+### Fixed
+
+- Keep a long-lived edge client available after a remote protocol mismatch. The
+  affected publication remains blocked, while background synchronization re-probes
+  the gateway without replaying that publication.
+- Deploy and verify the exact gateway revision before npm publication. A release now
+  stops when the production gateway and package release do not match.
+
+## [0.7.0] - 2026-07-29
+
+### Added
+
+- Let exact managed Codex and Claude Code registrations move from stdio to a
+  profile-local MCP Streamable HTTP endpoint. Claude Desktop can record an exact
+  stdio proxy command and arguments for the same topology. The update keeps the
+  existing private backend and credentials, rejects non-loopback or credential-shaped
+  URLs, upgrades v1 managed metadata to a versioned target contract, and retains the
+  existing journal, resume, and rollback guarantees.
+
 ## [0.6.5] - 2026-07-27
 
 ### Fixed

package/README.md

@@ -120,8 +120,11 @@ The authenticated check compares the running package and Git revision with the
 intended release. It also requires protocol 2.1, request authority, and row isolation.
 It prints no credential. A missing or different revision stops the rollout.
 
-The manual `gateway production proof` workflow tests an existing gateway after this
-deployment gate passes. GitHub must run it from `main` in the protected
+Release tags run this deployment gate before npm publication. The release environment
+must define `AGENT_BRIDGE_FLY_APP` and `AGENT_BRIDGE_GATEWAY_ORIGIN`, and keep
+`FLY_API_TOKEN` plus `RELEASE_VERIFY_TOKEN` as protected secrets. The manual `gateway
+production proof` workflow tests the deployed gateway after this gate passes. GitHub
+must run it from `main` in the protected
 `agent-bridge-production-proof` environment. Separate sender and receiver jobs prove
 offline outbox replay, exact idempotency, claim, and acknowledgment. The workflow then
 restarts the single Fly machine, requires a later successful machine start event, and
@@ -530,6 +533,15 @@ agent-bridge clients repair codex --identity codex --instance <stable-key>
 agent-bridge clients repair codex --identity codex --instance <stable-key> --apply
 agent-bridge clients update codex --identity codex --instance <stable-key> \
   --command agent-bridge-mcp --apply
+agent-bridge clients update codex --identity codex --instance <stable-key> \
+  --mcp-url http://127.0.0.1:8794/mcp --apply
+agent-bridge clients update claude-code --identity claude-code --instance <stable-key> \
+  --mcp-url http://127.0.0.1:8793/mcp --apply
+agent-bridge clients update claude-desktop --identity claude-desktop --instance <stable-key> \
+  --mcp-url http://127.0.0.1:8791/mcp \
+  --proxy-command /absolute/path/to/node \
+  --proxy-args-json '["/absolute/path/to/stdio-http-proxy.js","--transport","stdio-http-proxy","--endpoint","http://127.0.0.1:8791/mcp"]' \
+  --apply
 agent-bridge clients repair codex --identity codex --instance <stable-key> \
   --apply --resume <operation-uuid>
 agent-bridge clients uninstall codex --identity codex --instance <stable-key> --apply
@@ -549,7 +561,16 @@ launch contract. Update validates and records a new credential-free launch contr
 before it creates a journal. A native `--command` is one executable contract. Bare
 commands cannot contain arguments or URL-like selectors. Absolute paths must resolve
 to executable files. Native adapters remove, verify absence, add, and verify
-the target registration. Claude Desktop replaces only `mcpServers.agent-bridge`,
+the target registration. `--mcp-url` selects a managed profile-local Streamable HTTP
+target for Codex or Claude Code. It accepts only an explicit `http://` loopback host,
+port, and `/mcp` path, with no user information, query, or fragment. The backend file
+stays in place because it remains lifecycle and rollback authority even though the
+native HTTP registration does not receive backend environment variables.
+
+Claude Desktop represents the endpoint as stdio. For that runtime, `--mcp-url`
+requires an existing absolute `--proxy-command`. `--proxy-args-json` must be a JSON
+array of strings. The arguments must contain the exact endpoint and cannot contain
+credential-like flags or values. Claude Desktop replaces only `mcpServers.agent-bridge`,
 preserves unrelated JSON values in memory, publishes through a private operation-scoped
 temporary file, and verifies the new entry. Node cannot provide an OS transaction with
 an uncooperative same-user Desktop writer. The pre-rename identity checks make this an

package/ROADMAP.md

@@ -10,6 +10,14 @@ published and the supported clients pass a fresh end-to-end check.
 
 ## Status
 
+### Implemented, awaiting release
+
+- Managed Codex and Claude Code registrations can move from stdio to one loopback MCP
+  Streamable HTTP endpoint per profile. Claude Desktop can use an exact managed stdio
+  proxy launch for its loopback endpoint. The update preserves backend credentials,
+  upgrades v1 managed metadata to a versioned target contract, and keeps restart and
+  rollback classification intact.
+
 ### Released by 0.3.1
 
 - Local SQLite and shared PostgreSQL storage behind provider-neutral interfaces.

package/SKILL.md

@@ -93,7 +93,13 @@ For a managed registration, use `clients repair <runtime> --identity <name> --in
 only after reviewing the plan. Use `clients update` with the same metadata-selected
 runtime and instance to validate a replacement launch contract. The same identity must
 match the stored metadata and the immutable request. Native commands are one executable
-contract. Do not pass arguments, URLs, or credential selectors in `--command`. Repair, update, and uninstall reject
+contract. Do not pass arguments, URLs, or credential selectors in `--command`.
+Use `--mcp-url http://127.0.0.1:<port>/mcp` for a managed Codex or Claude Code
+Streamable HTTP target. The URL must stay on loopback and cannot contain user
+information, a query, or a fragment. For Claude Desktop, pair `--mcp-url` with an
+absolute `--proxy-command` and a `--proxy-args-json` string array that contains the
+exact endpoint. Review the plan before applying it. The existing private backend remains
+unchanged and continues to anchor lifecycle recovery. Repair, update, and uninstall reject
 `--backend-config`, `--scope`, and `--config-path`; `--identity` is an assertion, not a
 locator. A no-op exact registration creates no journal. Native updates remove, prove
 absence, add, and prove the target before metadata changes. Desktop updates replace only

package/dist/bridge.js

@@ -15,7 +15,7 @@ import {
   inspectEdgeScopeReadOnly,
   isRetryableSyncError,
   stableIdempotency
-} from "./chunk-J6GHXVHC.js";
+} from "./chunk-7EQXQVPD.js";
 import {
   SQLiteBridgeStore
 } from "./chunk-SBVZVXGK.js";

package/dist/{chunk-J6GHXVHC.js → chunk-7EQXQVPD.js}

@@ -1053,12 +1053,10 @@ var SyncingBridgeStore = class {
         continue;
       }
       if (report.failureRetryable === false) {
-        this.backgroundError = Object.assign(
-          new Error(`gateway synchronization failed permanently: ${report.lastError ?? "sync_error"}`),
-          { code: report.lastError ?? "sync_error" }
-        );
-        this.loopState = "failed";
-        return;
+        failures = Math.min(failures + 1, 20);
+        this.loopState = "backoff";
+        await this.wait(this.idleDelayMs);
+        continue;
       }
       failures = report.online ? 0 : Math.min(failures + 1, 20);
       this.loopState = report.online ? "idle" : "backoff";
@@ -1521,4 +1519,4 @@ export {
   isRetryableSyncError,
   SyncingBridgeStore
 };
-//# sourceMappingURL=chunk-J6GHXVHC.js.map
+//# sourceMappingURL=chunk-7EQXQVPD.js.map