@creatornader/agent-bridge 0.7.2 → 0.7.4

package/dist/dr.js

@@ -39,7 +39,7 @@ import {
   verifyNativeDrBundle,
   verifyPostgresNativeDrArtifacts,
   writeNativeDrBundle
-} from "./chunk-SHJGICQ5.js";
+} from "./chunk-KT2NNGDR.js";
 import {
   EDGE_SQLITE_APPLICATION_ID,
   EDGE_SQLITE_SCHEMA_CONTRACTS,

package/dist/loopback-host.d.ts

@@ -0,0 +1,32 @@
+interface LoopbackHostOptions {
+    host?: string;
+    port?: number;
+    path?: string;
+    sessionIdleMs?: number;
+}
+interface LoopbackHost {
+    endpoint: string;
+    healthEndpoint: string;
+    close(): Promise<void>;
+}
+interface LaunchdInstallOptions extends Required<LoopbackHostOptions> {
+    serviceName: string;
+    configPath: string;
+    agent: string;
+    instance: string;
+    home?: string;
+    executablePath?: string;
+}
+declare function startLoopbackHost(options?: LoopbackHostOptions): Promise<LoopbackHost>;
+declare function launchdPlist(options: LaunchdInstallOptions): string;
+declare function installLaunchdHost(options: LaunchdInstallOptions): Promise<{
+    label: string;
+    plistPath: string;
+    healthEndpoint: string;
+}>;
+declare function uninstallLaunchdHost(serviceName: string, port: number, host?: string, home?: string): Promise<{
+    label: string;
+    plistPath: string;
+}>;
+
+export { type LaunchdInstallOptions, type LoopbackHost, type LoopbackHostOptions, installLaunchdHost, launchdPlist, startLoopbackHost, uninstallLaunchdHost };

package/dist/loopback-host.js

@@ -0,0 +1,421 @@
+#!/usr/bin/env node
+import {
+  configFromEnv,
+  createAgentBridgeServer
+} from "./chunk-W2TBIICO.js";
+import "./chunk-23UDQZMT.js";
+import "./chunk-UKFRCP6X.js";
+import "./chunk-CQZHYEXW.js";
+import "./chunk-6ZOLE3E3.js";
+import "./chunk-7EQXQVPD.js";
+import "./chunk-SBVZVXGK.js";
+import {
+  verifyPrivatePathAccess
+} from "./chunk-GTK4KOED.js";
+import "./chunk-VOQIDTCJ.js";
+import "./chunk-4V2PFJEF.js";
+import "./chunk-63JKCBC6.js";
+import "./chunk-BZLMF5O5.js";
+
+// src/loopback-host.ts
+import { randomUUID } from "crypto";
+import { chmodSync, existsSync, mkdirSync, realpathSync, rmSync, writeFileSync } from "fs";
+import { createServer } from "http";
+import { connect } from "net";
+import { homedir } from "os";
+import { isAbsolute, join } from "path";
+import { spawnSync } from "child_process";
+import { fileURLToPath, pathToFileURL } from "url";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
+var DEFAULT_HOST = "127.0.0.1";
+var DEFAULT_PORT = 8794;
+var DEFAULT_PATH = "/mcp";
+var DEFAULT_SESSION_IDLE_MS = 12 * 60 * 60 * 1e3;
+var MAX_BODY_BYTES = 1024 * 1024;
+function normalizePath(raw) {
+  const path = raw.startsWith("/") ? raw : `/${raw}`;
+  return path.length > 1 ? path.replace(/\/+$/, "") : path;
+}
+function isLoopback(host) {
+  return host === "127.0.0.1" || host === "::1" || host === "localhost";
+}
+function endpoint(host, port, path) {
+  return `http://${host.includes(":") ? `[${host}]` : host}:${port}${path}`;
+}
+function requestPath(req) {
+  try {
+    return new URL(req.url ?? "/", "http://localhost").pathname;
+  } catch {
+    return "/";
+  }
+}
+function sessionId(req) {
+  const value = req.headers["mcp-session-id"];
+  return Array.isArray(value) ? value[0] : value;
+}
+function reply(res, status, body) {
+  const bytes = Buffer.from(JSON.stringify(body));
+  res.writeHead(status, {
+    "content-type": "application/json; charset=utf-8",
+    "content-length": bytes.length
+  });
+  res.end(bytes);
+}
+function jsonRpcError(res, status, code, message) {
+  reply(res, status, { jsonrpc: "2.0", error: { code, message }, id: null });
+}
+async function readBody(req) {
+  const chunks = [];
+  let length = 0;
+  for await (const chunk of req) {
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    length += bytes.length;
+    if (length > MAX_BODY_BYTES) throw new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`);
+    chunks.push(bytes);
+  }
+  const value = Buffer.concat(chunks).toString("utf8").trim();
+  return value ? JSON.parse(value) : void 0;
+}
+function listen(server, host, port) {
+  return new Promise((resolve, reject) => {
+    const onError = (error) => {
+      server.off("listening", onListening);
+      reject(error);
+    };
+    const onListening = () => {
+      server.off("error", onError);
+      resolve();
+    };
+    server.once("error", onError);
+    server.once("listening", onListening);
+    server.listen(port, host);
+  });
+}
+function closeServer(server) {
+  return new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+}
+function boundPort(server) {
+  const address = server.address();
+  if (!address || typeof address === "string") throw new Error("loopback host did not bind a TCP port");
+  return address.port;
+}
+async function startLoopbackHost(options = {}) {
+  const host = options.host ?? DEFAULT_HOST;
+  const port = options.port ?? DEFAULT_PORT;
+  const mcpPath = normalizePath(options.path ?? DEFAULT_PATH);
+  const healthPath = `${mcpPath}/health`;
+  const sessionIdleMs = options.sessionIdleMs ?? DEFAULT_SESSION_IDLE_MS;
+  if (!isLoopback(host)) throw new Error("--host must be 127.0.0.1, ::1, or localhost");
+  if (!Number.isInteger(port) || port < 0 || port > 65535) throw new Error("--port must be an integer from 0 to 65535");
+  if (!Number.isInteger(sessionIdleMs) || sessionIdleMs <= 0) throw new Error("--session-idle-ms must be a positive integer");
+  const sessions = /* @__PURE__ */ new Map();
+  let openedSessions = 0;
+  let closedSessions = 0;
+  let closing = false;
+  const closeSession = async (session) => {
+    if (session.closing) return;
+    session.closing = true;
+    if (session.id) sessions.delete(session.id);
+    closedSessions += 1;
+    await Promise.allSettled([session.transport.close(), session.bridge.close()]);
+  };
+  const sweep = () => {
+    const cutoff = Date.now() - sessionIdleMs;
+    for (const session of sessions.values()) {
+      if (session.lastSeenAt < cutoff) void closeSession(session);
+    }
+  };
+  const sweepTimer = setInterval(sweep, Math.min(sessionIdleMs, 6e4));
+  sweepTimer.unref();
+  const server = createServer(async (req, res) => {
+    const path = requestPath(req);
+    if (path === healthPath || path === "/health") {
+      reply(res, 200, {
+        status: "healthy",
+        report: {
+          bridgeRuntime: "agent-bridge",
+          transport: "streamable-http",
+          sessions: { active: sessions.size, opened: openedSessions, closed: closedSessions, idleTimeoutMs: sessionIdleMs }
+        }
+      });
+      return;
+    }
+    if (path !== mcpPath) return jsonRpcError(res, 404, -32e3, "Not Found");
+    if (!["POST", "GET", "DELETE"].includes(req.method ?? "")) {
+      return jsonRpcError(res, 405, -32e3, "Method Not Allowed");
+    }
+    sweep();
+    try {
+      const body = req.method === "POST" ? await readBody(req) : void 0;
+      const existingId = sessionId(req);
+      if (existingId) {
+        const session2 = sessions.get(existingId);
+        if (!session2) return jsonRpcError(res, 404, -32e3, "Session not found");
+        session2.lastSeenAt = Date.now();
+        await session2.transport.handleRequest(req, res, body);
+        return;
+      }
+      if (req.method !== "POST" || !isInitializeRequest(body)) {
+        return jsonRpcError(res, 400, -32e3, "initialize first or provide mcp-session-id");
+      }
+      let session;
+      try {
+        const bridge = createAgentBridgeServer(configFromEnv());
+        session = {
+          bridge,
+          transport: new StreamableHTTPServerTransport({
+            sessionIdGenerator: randomUUID,
+            onsessioninitialized: (id) => {
+              if (!session) return;
+              session.id = id;
+              session.lastSeenAt = Date.now();
+              sessions.set(id, session);
+            }
+          }),
+          lastSeenAt: Date.now(),
+          closing: false
+        };
+        session.transport.onclose = () => {
+          if (session) void closeSession(session);
+        };
+        await bridge.connect(session.transport);
+        openedSessions += 1;
+        await session.transport.handleRequest(req, res, body);
+      } finally {
+        if (session && !session.id && !session.closing) await closeSession(session);
+      }
+    } catch (error) {
+      if (!res.headersSent) {
+        const message = error instanceof Error ? error.message : String(error);
+        jsonRpcError(res, 500, -32603, `Internal server error: ${message}`);
+      }
+    }
+  });
+  await listen(server, host, port);
+  const actualPort = boundPort(server);
+  const mcpEndpoint = endpoint(host, actualPort, mcpPath);
+  const healthEndpoint = endpoint(host, actualPort, healthPath);
+  process.stdout.write(`${JSON.stringify({ status: "ready", endpoint: mcpEndpoint, healthEndpoint })}
+`);
+  return {
+    endpoint: mcpEndpoint,
+    healthEndpoint,
+    close: async () => {
+      if (closing) return;
+      closing = true;
+      clearInterval(sweepTimer);
+      await Promise.allSettled([...sessions.values()].map(closeSession));
+      await closeServer(server);
+    }
+  };
+}
+function option(args, name, fallback) {
+  const index = args.indexOf(name);
+  if (index < 0) return fallback;
+  return args[index + 1] ?? (() => {
+    throw new Error(`${name} requires a value`);
+  })();
+}
+function usage() {
+  return `Usage:
+  agent-bridge-loopback-host [--host 127.0.0.1] [--port 8794] [--path /mcp] [--session-idle-ms 43200000]
+  agent-bridge-loopback-host --install-launchd --service-name <name> --config <private-backend> --agent <identity> --instance <stable-key> [host options]
+  agent-bridge-loopback-host --uninstall-launchd --service-name <name> --port <port>
+`;
+}
+function required(args, name) {
+  const value = option(args, name, "");
+  if (!value) throw new Error(`${name} requires a value`);
+  return value;
+}
+function serviceLabel(name) {
+  if (!/^[A-Za-z0-9_-]+$/.test(name)) throw new Error("--service-name must contain only letters, numbers, _ or -");
+  return `com.creatornader.agent-bridge.${name}`;
+}
+function launchctl(args) {
+  const result = spawnSync("launchctl", args, { encoding: "utf8" });
+  if (result.status !== 0 && result.status !== 3 && result.status !== 113) {
+    throw new Error(`launchctl ${args[0]} failed: ${(result.stderr || result.stdout || "unknown error").trim()}`);
+  }
+}
+function currentUserId() {
+  if (!process.getuid) throw new Error("launchd requires a POSIX user identity");
+  return process.getuid();
+}
+function launchdPlist(options) {
+  const executable = options.executablePath ?? fileURLToPath(import.meta.url);
+  const label = serviceLabel(options.serviceName);
+  const environment = {
+    AGENT_BRIDGE_CONFIG: options.configPath,
+    AGENT_BRIDGE_AGENT: options.agent,
+    AGENT_BRIDGE_INSTANCE: options.instance
+  };
+  const encode = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  const strings = (values) => values.map((value) => `    <string>${encode(value)}</string>`).join("\n");
+  const env = Object.entries(environment).map(([key, value]) => `    <key>${key}</key>
+    <string>${encode(value)}</string>`).join("\n");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${label}</string>
+  <key>ProgramArguments</key>
+  <array>
+${strings([process.execPath, executable, "--host", options.host, "--port", String(options.port), "--path", options.path, "--session-idle-ms", String(options.sessionIdleMs)])}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+${env}
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${encode(join(options.home ?? homedir(), ".agent-bridge", "logs", `${options.serviceName}.out.log`))}</string>
+  <key>StandardErrorPath</key>
+  <string>${encode(join(options.home ?? homedir(), ".agent-bridge", "logs", `${options.serviceName}.err.log`))}</string>
+</dict>
+</plist>
+`;
+}
+async function waitForHealth(healthEndpoint) {
+  let lastError = "no response";
+  for (let attempt = 0; attempt < 30; attempt += 1) {
+    try {
+      const response = await fetch(healthEndpoint, { signal: AbortSignal.timeout(1e3) });
+      const body = await response.json();
+      if (response.ok && body.status === "healthy") return;
+      lastError = `HTTP ${response.status}`;
+    } catch (error) {
+      lastError = error instanceof Error ? error.message : String(error);
+    }
+    await new Promise((resolve) => setTimeout(resolve, 200));
+  }
+  throw new Error(`launchd started but ${healthEndpoint} did not become healthy: ${lastError}`);
+}
+async function installLaunchdHost(options) {
+  if (process.platform !== "darwin") throw new Error("--install-launchd is supported only on macOS");
+  if (!isLoopback(options.host)) throw new Error("--host must be 127.0.0.1, ::1, or localhost");
+  if (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535) throw new Error("--port must be an integer from 1 to 65535 for launchd");
+  if (!isAbsolute(options.configPath) || !existsSync(options.configPath)) throw new Error(`--config must be an existing absolute path: ${options.configPath}`);
+  verifyPrivatePathAccess(options.configPath, "file");
+  const home = options.home ?? homedir();
+  const label = serviceLabel(options.serviceName);
+  const agents = join(home, "Library", "LaunchAgents");
+  const logs = join(home, ".agent-bridge", "logs");
+  const plistPath = join(agents, `${label}.plist`);
+  mkdirSync(agents, { recursive: true, mode: 448 });
+  mkdirSync(logs, { recursive: true, mode: 448 });
+  chmodSync(agents, 448);
+  chmodSync(logs, 448);
+  launchctl(["bootout", `gui/${currentUserId()}/${label}`]);
+  writeFileSync(plistPath, launchdPlist({ ...options, home }), { mode: 384 });
+  chmodSync(plistPath, 384);
+  launchctl(["bootstrap", `gui/${currentUserId()}`, plistPath]);
+  const healthEndpoint = endpoint(options.host, options.port, `${normalizePath(options.path)}/health`);
+  await waitForHealth(healthEndpoint);
+  return { label, plistPath, healthEndpoint };
+}
+async function portIsOpen(host, port) {
+  return await new Promise((resolve) => {
+    const socket = connect({ host, port });
+    const finish = (open) => {
+      socket.destroy();
+      resolve(open);
+    };
+    socket.once("connect", () => finish(true));
+    socket.once("error", () => finish(false));
+    socket.setTimeout(1e3, () => finish(false));
+  });
+}
+async function waitForPortClosed(host, port) {
+  for (let attempt = 0; attempt < 30; attempt += 1) {
+    if (!await portIsOpen(host, port)) return;
+    await new Promise((resolve) => setTimeout(resolve, 200));
+  }
+  throw new Error(`launchd unloaded but ${host}:${port} is still accepting connections`);
+}
+async function uninstallLaunchdHost(serviceName, port, host = DEFAULT_HOST, home = homedir()) {
+  if (process.platform !== "darwin") throw new Error("--uninstall-launchd is supported only on macOS");
+  if (!isLoopback(host)) throw new Error("--host must be 127.0.0.1, ::1, or localhost");
+  if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error("--port must be an integer from 1 to 65535 for launchd");
+  const label = serviceLabel(serviceName);
+  const plistPath = join(home, "Library", "LaunchAgents", `${label}.plist`);
+  launchctl(["bootout", `gui/${currentUserId()}/${label}`]);
+  rmSync(plistPath, { force: true });
+  await waitForPortClosed(host, port);
+  return { label, plistPath };
+}
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  try {
+    return import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href;
+  } catch {
+    return false;
+  }
+}
+if (isMainModule()) {
+  const args = process.argv.slice(2);
+  if (args.includes("--help") || args.includes("-h")) process.stdout.write(usage());
+  else if (args.includes("--install-launchd")) {
+    void (async () => {
+      try {
+        const result = await installLaunchdHost({
+          serviceName: required(args, "--service-name"),
+          configPath: required(args, "--config"),
+          agent: required(args, "--agent"),
+          instance: required(args, "--instance"),
+          host: option(args, "--host", DEFAULT_HOST),
+          port: Number(option(args, "--port", String(DEFAULT_PORT))),
+          path: option(args, "--path", DEFAULT_PATH),
+          sessionIdleMs: Number(option(args, "--session-idle-ms", String(DEFAULT_SESSION_IDLE_MS)))
+        });
+        process.stdout.write(`${JSON.stringify({ status: "installed", ...result })}
+`);
+      } catch (error) {
+        process.stderr.write(`agent-bridge-loopback-host: ${error instanceof Error ? error.message : String(error)}
+`);
+        process.exitCode = 1;
+      }
+    })();
+  } else if (args.includes("--uninstall-launchd")) {
+    void (async () => {
+      try {
+        const result = await uninstallLaunchdHost(
+          required(args, "--service-name"),
+          Number(required(args, "--port")),
+          option(args, "--host", DEFAULT_HOST)
+        );
+        process.stdout.write(`${JSON.stringify({ status: "uninstalled", ...result })}
+`);
+      } catch (error) {
+        process.stderr.write(`agent-bridge-loopback-host: ${error instanceof Error ? error.message : String(error)}
+`);
+        process.exitCode = 1;
+      }
+    })();
+  } else void startLoopbackHost({
+    host: option(args, "--host", DEFAULT_HOST),
+    port: Number(option(args, "--port", String(DEFAULT_PORT))),
+    path: option(args, "--path", DEFAULT_PATH),
+    sessionIdleMs: Number(option(args, "--session-idle-ms", String(DEFAULT_SESSION_IDLE_MS)))
+  }).then((host) => {
+    const shutdown = () => void host.close().finally(() => process.exit(0));
+    process.once("SIGINT", shutdown);
+    process.once("SIGTERM", shutdown);
+  }).catch((error) => {
+    process.stderr.write(`agent-bridge-loopback-host: ${error instanceof Error ? error.message : String(error)}
+`);
+    process.exitCode = 1;
+  });
+}
+export {
+  installLaunchdHost,
+  launchdPlist,
+  startLoopbackHost,
+  uninstallLaunchdHost
+};
+//# sourceMappingURL=loopback-host.js.map

package/dist/loopback-host.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/loopback-host.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { chmodSync, existsSync, mkdirSync, realpathSync, rmSync, writeFileSync } from \"node:fs\";\nimport { createServer, type IncomingMessage, type Server as HttpServer, type ServerResponse } from \"node:http\";\nimport { connect, type AddressInfo } from \"node:net\";\nimport { homedir } from \"node:os\";\nimport { dirname, isAbsolute, join } from \"node:path\";\nimport { spawnSync } from \"node:child_process\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\nimport { StreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/streamableHttp.js\";\nimport { isInitializeRequest } from \"@modelcontextprotocol/sdk/types.js\";\nimport { configFromEnv, createAgentBridgeServer } from \"./server.js\";\nimport { verifyPrivatePathAccess } from \"./private-path.js\";\n\nconst DEFAULT_HOST = \"127.0.0.1\";\nconst DEFAULT_PORT = 8794;\nconst DEFAULT_PATH = \"/mcp\";\nconst DEFAULT_SESSION_IDLE_MS = 12 * 60 * 60 * 1000;\nconst MAX_BODY_BYTES = 1024 * 1024;\n\nexport interface LoopbackHostOptions {\n  host?: string;\n  port?: number;\n  path?: string;\n  sessionIdleMs?: number;\n}\n\nexport interface LoopbackHost {\n  endpoint: string;\n  healthEndpoint: string;\n  close(): Promise<void>;\n}\n\nexport interface LaunchdInstallOptions extends Required<LoopbackHostOptions> {\n  serviceName: string;\n  configPath: string;\n  agent: string;\n  instance: string;\n  home?: string;\n  executablePath?: string;\n}\n\ninterface Session {\n  bridge: ReturnType<typeof createAgentBridgeServer>;\n  transport: StreamableHTTPServerTransport;\n  id?: string;\n  lastSeenAt: number;\n  closing: boolean;\n}\n\nfunction normalizePath(raw: string): string {\n  const path = raw.startsWith(\"/\") ? raw : `/${raw}`;\n  return path.length > 1 ? path.replace(/\\/+$/, \"\") : path;\n}\n\nfunction isLoopback(host: string): boolean {\n  return host === \"127.0.0.1\" || host === \"::1\" || host === \"localhost\";\n}\n\nfunction endpoint(host: string, port: number, path: string): string {\n  return `http://${host.includes(\":\") ? `[${host}]` : host}:${port}${path}`;\n}\n\nfunction requestPath(req: IncomingMessage): string {\n  try {\n    return new URL(req.url ?? \"/\", \"http://localhost\").pathname;\n  } catch {\n    return \"/\";\n  }\n}\n\nfunction sessionId(req: IncomingMessage): string | undefined {\n  const value = req.headers[\"mcp-session-id\"];\n  return Array.isArray(value) ? value[0] : value;\n}\n\nfunction reply(res: ServerResponse, status: number, body: unknown): void {\n  const bytes = Buffer.from(JSON.stringify(body));\n  res.writeHead(status, {\n    \"content-type\": \"application/json; charset=utf-8\",\n    \"content-length\": bytes.length,\n  });\n  res.end(bytes);\n}\n\nfunction jsonRpcError(res: ServerResponse, status: number, code: number, message: string): void {\n  reply(res, status, { jsonrpc: \"2.0\", error: { code, message }, id: null });\n}\n\nasync function readBody(req: IncomingMessage): Promise<unknown> {\n  const chunks: Buffer[] = [];\n  let length = 0;\n  for await (const chunk of req) {\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n    length += bytes.length;\n    if (length > MAX_BODY_BYTES) throw new Error(`request body exceeds ${MAX_BODY_BYTES} bytes`);\n    chunks.push(bytes);\n  }\n  const value = Buffer.concat(chunks).toString(\"utf8\").trim();\n  return value ? JSON.parse(value) : undefined;\n}\n\nfunction listen(server: HttpServer, host: string, port: number): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const onError = (error: Error) => {\n      server.off(\"listening\", onListening);\n      reject(error);\n    };\n    const onListening = () => {\n      server.off(\"error\", onError);\n      resolve();\n    };\n    server.once(\"error\", onError);\n    server.once(\"listening\", onListening);\n    server.listen(port, host);\n  });\n}\n\nfunction closeServer(server: HttpServer): Promise<void> {\n  return new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));\n}\n\nfunction boundPort(server: HttpServer): number {\n  const address = server.address();\n  if (!address || typeof address === \"string\") throw new Error(\"loopback host did not bind a TCP port\");\n  return (address as AddressInfo).port;\n}\n\nexport async function startLoopbackHost(options: LoopbackHostOptions = {}): Promise<LoopbackHost> {\n  const host = options.host ?? DEFAULT_HOST;\n  const port = options.port ?? DEFAULT_PORT;\n  const mcpPath = normalizePath(options.path ?? DEFAULT_PATH);\n  const healthPath = `${mcpPath}/health`;\n  const sessionIdleMs = options.sessionIdleMs ?? DEFAULT_SESSION_IDLE_MS;\n  if (!isLoopback(host)) throw new Error(\"--host must be 127.0.0.1, ::1, or localhost\");\n  if (!Number.isInteger(port) || port < 0 || port > 65535) throw new Error(\"--port must be an integer from 0 to 65535\");\n  if (!Number.isInteger(sessionIdleMs) || sessionIdleMs <= 0) throw new Error(\"--session-idle-ms must be a positive integer\");\n\n  const sessions = new Map<string, Session>();\n  let openedSessions = 0;\n  let closedSessions = 0;\n  let closing = false;\n  const closeSession = async (session: Session): Promise<void> => {\n    if (session.closing) return;\n    session.closing = true;\n    if (session.id) sessions.delete(session.id);\n    closedSessions += 1;\n    await Promise.allSettled([session.transport.close(), session.bridge.close()]);\n  };\n  const sweep = (): void => {\n    const cutoff = Date.now() - sessionIdleMs;\n    for (const session of sessions.values()) {\n      if (session.lastSeenAt < cutoff) void closeSession(session);\n    }\n  };\n  const sweepTimer = setInterval(sweep, Math.min(sessionIdleMs, 60_000));\n  sweepTimer.unref();\n\n  const server = createServer(async (req, res) => {\n    const path = requestPath(req);\n    if (path === healthPath || path === \"/health\") {\n      reply(res, 200, {\n        status: \"healthy\",\n        report: {\n          bridgeRuntime: \"agent-bridge\",\n          transport: \"streamable-http\",\n          sessions: { active: sessions.size, opened: openedSessions, closed: closedSessions, idleTimeoutMs: sessionIdleMs },\n        },\n      });\n      return;\n    }\n    if (path !== mcpPath) return jsonRpcError(res, 404, -32000, \"Not Found\");\n    if (![\"POST\", \"GET\", \"DELETE\"].includes(req.method ?? \"\")) {\n      return jsonRpcError(res, 405, -32000, \"Method Not Allowed\");\n    }\n    sweep();\n    try {\n      const body = req.method === \"POST\" ? await readBody(req) : undefined;\n      const existingId = sessionId(req);\n      if (existingId) {\n        const session = sessions.get(existingId);\n        if (!session) return jsonRpcError(res, 404, -32000, \"Session not found\");\n        session.lastSeenAt = Date.now();\n        await session.transport.handleRequest(req, res, body);\n        return;\n      }\n      if (req.method !== \"POST\" || !isInitializeRequest(body)) {\n        return jsonRpcError(res, 400, -32000, \"initialize first or provide mcp-session-id\");\n      }\n      let session: Session | undefined;\n      try {\n        const bridge = createAgentBridgeServer(configFromEnv());\n        session = {\n          bridge,\n          transport: new StreamableHTTPServerTransport({\n            sessionIdGenerator: randomUUID,\n            onsessioninitialized: (id) => {\n              if (!session) return;\n              session.id = id;\n              session.lastSeenAt = Date.now();\n              sessions.set(id, session);\n            },\n          }),\n          lastSeenAt: Date.now(),\n          closing: false,\n        };\n        session.transport.onclose = () => { if (session) void closeSession(session); };\n        await bridge.connect(session.transport);\n        openedSessions += 1;\n        await session.transport.handleRequest(req, res, body);\n      } finally {\n        if (session && !session.id && !session.closing) await closeSession(session);\n      }\n    } catch (error) {\n      if (!res.headersSent) {\n        const message = error instanceof Error ? error.message : String(error);\n        jsonRpcError(res, 500, -32603, `Internal server error: ${message}`);\n      }\n    }\n  });\n  await listen(server, host, port);\n  const actualPort = boundPort(server);\n  const mcpEndpoint = endpoint(host, actualPort, mcpPath);\n  const healthEndpoint = endpoint(host, actualPort, healthPath);\n  process.stdout.write(`${JSON.stringify({ status: \"ready\", endpoint: mcpEndpoint, healthEndpoint })}\\n`);\n\n  return {\n    endpoint: mcpEndpoint,\n    healthEndpoint,\n    close: async () => {\n      if (closing) return;\n      closing = true;\n      clearInterval(sweepTimer);\n      await Promise.allSettled([...sessions.values()].map(closeSession));\n      await closeServer(server);\n    },\n  };\n}\n\nfunction option(args: string[], name: string, fallback: string): string {\n  const index = args.indexOf(name);\n  if (index < 0) return fallback;\n  return args[index + 1] ?? (() => { throw new Error(`${name} requires a value`); })();\n}\n\nfunction usage(): string {\n  return `Usage:\n  agent-bridge-loopback-host [--host 127.0.0.1] [--port 8794] [--path /mcp] [--session-idle-ms 43200000]\n  agent-bridge-loopback-host --install-launchd --service-name <name> --config <private-backend> --agent <identity> --instance <stable-key> [host options]\n  agent-bridge-loopback-host --uninstall-launchd --service-name <name> --port <port>\n`;\n}\n\nfunction required(args: string[], name: string): string {\n  const value = option(args, name, \"\");\n  if (!value) throw new Error(`${name} requires a value`);\n  return value;\n}\n\nfunction serviceLabel(name: string): string {\n  if (!/^[A-Za-z0-9_-]+$/.test(name)) throw new Error(\"--service-name must contain only letters, numbers, _ or -\");\n  return `com.creatornader.agent-bridge.${name}`;\n}\n\nfunction launchctl(args: string[]): void {\n  const result = spawnSync(\"launchctl\", args, { encoding: \"utf8\" });\n  if (result.status !== 0 && result.status !== 3 && result.status !== 113) {\n    throw new Error(`launchctl ${args[0]} failed: ${(result.stderr || result.stdout || \"unknown error\").trim()}`);\n  }\n}\n\nfunction currentUserId(): number {\n  if (!process.getuid) throw new Error(\"launchd requires a POSIX user identity\");\n  return process.getuid();\n}\n\nexport function launchdPlist(options: LaunchdInstallOptions): string {\n  const executable = options.executablePath ?? fileURLToPath(import.meta.url);\n  const label = serviceLabel(options.serviceName);\n  const environment = {\n    AGENT_BRIDGE_CONFIG: options.configPath,\n    AGENT_BRIDGE_AGENT: options.agent,\n    AGENT_BRIDGE_INSTANCE: options.instance,\n  };\n  const encode = (value: string): string => value.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\");\n  const strings = (values: string[]): string => values.map((value) => `    <string>${encode(value)}</string>`).join(\"\\n\");\n  const env = Object.entries(environment).map(([key, value]) => `    <key>${key}</key>\\n    <string>${encode(value)}</string>`).join(\"\\n\");\n  return `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key>\n  <string>${label}</string>\n  <key>ProgramArguments</key>\n  <array>\n${strings([process.execPath, executable, \"--host\", options.host, \"--port\", String(options.port), \"--path\", options.path, \"--session-idle-ms\", String(options.sessionIdleMs)])}\n  </array>\n  <key>EnvironmentVariables</key>\n  <dict>\n${env}\n  </dict>\n  <key>RunAtLoad</key>\n  <true/>\n  <key>KeepAlive</key>\n  <true/>\n  <key>StandardOutPath</key>\n  <string>${encode(join(options.home ?? homedir(), \".agent-bridge\", \"logs\", `${options.serviceName}.out.log`))}</string>\n  <key>StandardErrorPath</key>\n  <string>${encode(join(options.home ?? homedir(), \".agent-bridge\", \"logs\", `${options.serviceName}.err.log`))}</string>\n</dict>\n</plist>\n`;\n}\n\nasync function waitForHealth(healthEndpoint: string): Promise<void> {\n  let lastError = \"no response\";\n  for (let attempt = 0; attempt < 30; attempt += 1) {\n    try {\n      const response = await fetch(healthEndpoint, { signal: AbortSignal.timeout(1_000) });\n      const body = await response.json() as { status?: unknown };\n      if (response.ok && body.status === \"healthy\") return;\n      lastError = `HTTP ${response.status}`;\n    } catch (error) {\n      lastError = error instanceof Error ? error.message : String(error);\n    }\n    await new Promise((resolve) => setTimeout(resolve, 200));\n  }\n  throw new Error(`launchd started but ${healthEndpoint} did not become healthy: ${lastError}`);\n}\n\nexport async function installLaunchdHost(options: LaunchdInstallOptions): Promise<{ label: string; plistPath: string; healthEndpoint: string }> {\n  if (process.platform !== \"darwin\") throw new Error(\"--install-launchd is supported only on macOS\");\n  if (!isLoopback(options.host)) throw new Error(\"--host must be 127.0.0.1, ::1, or localhost\");\n  if (!Number.isInteger(options.port) || options.port < 1 || options.port > 65535) throw new Error(\"--port must be an integer from 1 to 65535 for launchd\");\n  if (!isAbsolute(options.configPath) || !existsSync(options.configPath)) throw new Error(`--config must be an existing absolute path: ${options.configPath}`);\n  verifyPrivatePathAccess(options.configPath, \"file\");\n  const home = options.home ?? homedir();\n  const label = serviceLabel(options.serviceName);\n  const agents = join(home, \"Library\", \"LaunchAgents\");\n  const logs = join(home, \".agent-bridge\", \"logs\");\n  const plistPath = join(agents, `${label}.plist`);\n  mkdirSync(agents, { recursive: true, mode: 0o700 });\n  mkdirSync(logs, { recursive: true, mode: 0o700 });\n  chmodSync(agents, 0o700);\n  chmodSync(logs, 0o700);\n  launchctl([\"bootout\", `gui/${currentUserId()}/${label}`]);\n  writeFileSync(plistPath, launchdPlist({ ...options, home }), { mode: 0o600 });\n  chmodSync(plistPath, 0o600);\n  launchctl([\"bootstrap\", `gui/${currentUserId()}`, plistPath]);\n  const healthEndpoint = endpoint(options.host, options.port, `${normalizePath(options.path)}/health`);\n  await waitForHealth(healthEndpoint);\n  return { label, plistPath, healthEndpoint };\n}\n\nasync function portIsOpen(host: string, port: number): Promise<boolean> {\n  return await new Promise((resolve) => {\n    const socket = connect({ host, port });\n    const finish = (open: boolean) => { socket.destroy(); resolve(open); };\n    socket.once(\"connect\", () => finish(true));\n    socket.once(\"error\", () => finish(false));\n    socket.setTimeout(1_000, () => finish(false));\n  });\n}\n\nasync function waitForPortClosed(host: string, port: number): Promise<void> {\n  for (let attempt = 0; attempt < 30; attempt += 1) {\n    if (!await portIsOpen(host, port)) return;\n    await new Promise((resolve) => setTimeout(resolve, 200));\n  }\n  throw new Error(`launchd unloaded but ${host}:${port} is still accepting connections`);\n}\n\nexport async function uninstallLaunchdHost(\n  serviceName: string,\n  port: number,\n  host = DEFAULT_HOST,\n  home = homedir(),\n): Promise<{ label: string; plistPath: string }> {\n  if (process.platform !== \"darwin\") throw new Error(\"--uninstall-launchd is supported only on macOS\");\n  if (!isLoopback(host)) throw new Error(\"--host must be 127.0.0.1, ::1, or localhost\");\n  if (!Number.isInteger(port) || port < 1 || port > 65535) throw new Error(\"--port must be an integer from 1 to 65535 for launchd\");\n  const label = serviceLabel(serviceName);\n  const plistPath = join(home, \"Library\", \"LaunchAgents\", `${label}.plist`);\n  launchctl([\"bootout\", `gui/${currentUserId()}/${label}`]);\n  rmSync(plistPath, { force: true });\n  await waitForPortClosed(host, port);\n  return { label, plistPath };\n}\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  try {\n    return import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href;\n  } catch {\n    return false;\n  }\n}\n\nif (isMainModule()) {\n  const args = process.argv.slice(2);\n  if (args.includes(\"--help\") || args.includes(\"-h\")) process.stdout.write(usage());\n  else if (args.includes(\"--install-launchd\")) {\n    void (async () => {\n      try {\n        const result = await installLaunchdHost({\n          serviceName: required(args, \"--service-name\"),\n          configPath: required(args, \"--config\"),\n          agent: required(args, \"--agent\"),\n          instance: required(args, \"--instance\"),\n          host: option(args, \"--host\", DEFAULT_HOST),\n          port: Number(option(args, \"--port\", String(DEFAULT_PORT))),\n          path: option(args, \"--path\", DEFAULT_PATH),\n          sessionIdleMs: Number(option(args, \"--session-idle-ms\", String(DEFAULT_SESSION_IDLE_MS))),\n        });\n        process.stdout.write(`${JSON.stringify({ status: \"installed\", ...result })}\\n`);\n      } catch (error) {\n        process.stderr.write(`agent-bridge-loopback-host: ${error instanceof Error ? error.message : String(error)}\\n`);\n        process.exitCode = 1;\n      }\n    })();\n  } else if (args.includes(\"--uninstall-launchd\")) {\n    void (async () => {\n      try {\n        const result = await uninstallLaunchdHost(\n          required(args, \"--service-name\"),\n          Number(required(args, \"--port\")),\n          option(args, \"--host\", DEFAULT_HOST),\n        );\n        process.stdout.write(`${JSON.stringify({ status: \"uninstalled\", ...result })}\\n`);\n      } catch (error) {\n        process.stderr.write(`agent-bridge-loopback-host: ${error instanceof Error ? error.message : String(error)}\\n`);\n        process.exitCode = 1;\n      }\n    })();\n  }\n  else void startLoopbackHost({\n    host: option(args, \"--host\", DEFAULT_HOST),\n    port: Number(option(args, \"--port\", String(DEFAULT_PORT))),\n    path: option(args, \"--path\", DEFAULT_PATH),\n    sessionIdleMs: Number(option(args, \"--session-idle-ms\", String(DEFAULT_SESSION_IDLE_MS))),\n  }).then((host) => {\n    const shutdown = () => void host.close().finally(() => process.exit(0));\n    process.once(\"SIGINT\", shutdown);\n    process.once(\"SIGTERM\", shutdown);\n  }).catch((error) => {\n    process.stderr.write(`agent-bridge-loopback-host: ${error instanceof Error ? error.message : String(error)}\\n`);\n    process.exitCode = 1;\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,WAAW,YAAY,WAAW,cAAc,QAAQ,qBAAqB;AACtF,SAAS,oBAA0F;AACnG,SAAS,eAAiC;AAC1C,SAAS,eAAe;AACxB,SAAkB,YAAY,YAAY;AAC1C,SAAS,iBAAiB;AAC1B,SAAS,eAAe,qBAAqB;AAC7C,SAAS,qCAAqC;AAC9C,SAAS,2BAA2B;AAIpC,IAAM,eAAe;AACrB,IAAM,eAAe;AACrB,IAAM,eAAe;AACrB,IAAM,0BAA0B,KAAK,KAAK,KAAK;AAC/C,IAAM,iBAAiB,OAAO;AAgC9B,SAAS,cAAc,KAAqB;AAC1C,QAAM,OAAO,IAAI,WAAW,GAAG,IAAI,MAAM,IAAI,GAAG;AAChD,SAAO,KAAK,SAAS,IAAI,KAAK,QAAQ,QAAQ,EAAE,IAAI;AACtD;AAEA,SAAS,WAAW,MAAuB;AACzC,SAAO,SAAS,eAAe,SAAS,SAAS,SAAS;AAC5D;AAEA,SAAS,SAAS,MAAc,MAAc,MAAsB;AAClE,SAAO,UAAU,KAAK,SAAS,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,GAAG,IAAI;AACzE;AAEA,SAAS,YAAY,KAA8B;AACjD,MAAI;AACF,WAAO,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB,EAAE;AAAA,EACrD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,KAA0C;AAC3D,QAAM,QAAQ,IAAI,QAAQ,gBAAgB;AAC1C,SAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC3C;AAEA,SAAS,MAAM,KAAqB,QAAgB,MAAqB;AACvE,QAAM,QAAQ,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC;AAC9C,MAAI,UAAU,QAAQ;AAAA,IACpB,gBAAgB;AAAA,IAChB,kBAAkB,MAAM;AAAA,EAC1B,CAAC;AACD,MAAI,IAAI,KAAK;AACf;AAEA,SAAS,aAAa,KAAqB,QAAgB,MAAc,SAAuB;AAC9F,QAAM,KAAK,QAAQ,EAAE,SAAS,OAAO,OAAO,EAAE,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC;AAC3E;AAEA,eAAe,SAAS,KAAwC;AAC9D,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS;AACb,mBAAiB,SAAS,KAAK;AAC7B,UAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;AAChE,cAAU,MAAM;AAChB,QAAI,SAAS,eAAgB,OAAM,IAAI,MAAM,wBAAwB,cAAc,QAAQ;AAC3F,WAAO,KAAK,KAAK;AAAA,EACnB;AACA,QAAM,QAAQ,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM,EAAE,KAAK;AAC1D,SAAO,QAAQ,KAAK,MAAM,KAAK,IAAI;AACrC;AAEA,SAAS,OAAO,QAAoB,MAAc,MAA6B;AAC7E,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,UAAU,CAAC,UAAiB;AAChC,aAAO,IAAI,aAAa,WAAW;AACnC,aAAO,KAAK;AAAA,IACd;AACA,UAAM,cAAc,MAAM;AACxB,aAAO,IAAI,SAAS,OAAO;AAC3B,cAAQ;AAAA,IACV;AACA,WAAO,KAAK,SAAS,OAAO;AAC5B,WAAO,KAAK,aAAa,WAAW;AACpC,WAAO,OAAO,MAAM,IAAI;AAAA,EAC1B,CAAC;AACH;AAEA,SAAS,YAAY,QAAmC;AACtD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW,OAAO,MAAM,CAAC,UAAU,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC;AACpG;AAEA,SAAS,UAAU,QAA4B;AAC7C,QAAM,UAAU,OAAO,QAAQ;AAC/B,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,OAAM,IAAI,MAAM,uCAAuC;AACpG,SAAQ,QAAwB;AAClC;AAEA,eAAsB,kBAAkB,UAA+B,CAAC,GAA0B;AAChG,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,OAAO,QAAQ,QAAQ;AAC7B,QAAM,UAAU,cAAc,QAAQ,QAAQ,YAAY;AAC1D,QAAM,aAAa,GAAG,OAAO;AAC7B,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,MAAI,CAAC,WAAW,IAAI,EAAG,OAAM,IAAI,MAAM,6CAA6C;AACpF,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,MAAO,OAAM,IAAI,MAAM,2CAA2C;AACpH,MAAI,CAAC,OAAO,UAAU,aAAa,KAAK,iBAAiB,EAAG,OAAM,IAAI,MAAM,8CAA8C;AAE1H,QAAM,WAAW,oBAAI,IAAqB;AAC1C,MAAI,iBAAiB;AACrB,MAAI,iBAAiB;AACrB,MAAI,UAAU;AACd,QAAM,eAAe,OAAO,YAAoC;AAC9D,QAAI,QAAQ,QAAS;AACrB,YAAQ,UAAU;AAClB,QAAI,QAAQ,GAAI,UAAS,OAAO,QAAQ,EAAE;AAC1C,sBAAkB;AAClB,UAAM,QAAQ,WAAW,CAAC,QAAQ,UAAU,MAAM,GAAG,QAAQ,OAAO,MAAM,CAAC,CAAC;AAAA,EAC9E;AACA,QAAM,QAAQ,MAAY;AACxB,UAAM,SAAS,KAAK,IAAI,IAAI;AAC5B,eAAW,WAAW,SAAS,OAAO,GAAG;AACvC,UAAI,QAAQ,aAAa,OAAQ,MAAK,aAAa,OAAO;AAAA,IAC5D;AAAA,EACF;AACA,QAAM,aAAa,YAAY,OAAO,KAAK,IAAI,eAAe,GAAM,CAAC;AACrE,aAAW,MAAM;AAEjB,QAAM,SAAS,aAAa,OAAO,KAAK,QAAQ;AAC9C,UAAM,OAAO,YAAY,GAAG;AAC5B,QAAI,SAAS,cAAc,SAAS,WAAW;AAC7C,YAAM,KAAK,KAAK;AAAA,QACd,QAAQ;AAAA,QACR,QAAQ;AAAA,UACN,eAAe;AAAA,UACf,WAAW;AAAA,UACX,UAAU,EAAE,QAAQ,SAAS,MAAM,QAAQ,gBAAgB,QAAQ,gBAAgB,eAAe,cAAc;AAAA,QAClH;AAAA,MACF,CAAC;AACD;AAAA,IACF;AACA,QAAI,SAAS,QAAS,QAAO,aAAa,KAAK,KAAK,OAAQ,WAAW;AACvE,QAAI,CAAC,CAAC,QAAQ,OAAO,QAAQ,EAAE,SAAS,IAAI,UAAU,EAAE,GAAG;AACzD,aAAO,aAAa,KAAK,KAAK,OAAQ,oBAAoB;AAAA,IAC5D;AACA,UAAM;AACN,QAAI;AACF,YAAM,OAAO,IAAI,WAAW,SAAS,MAAM,SAAS,GAAG,IAAI;AAC3D,YAAM,aAAa,UAAU,GAAG;AAChC,UAAI,YAAY;AACd,cAAMA,WAAU,SAAS,IAAI,UAAU;AACvC,YAAI,CAACA,SAAS,QAAO,aAAa,KAAK,KAAK,OAAQ,mBAAmB;AACvE,QAAAA,SAAQ,aAAa,KAAK,IAAI;AAC9B,cAAMA,SAAQ,UAAU,cAAc,KAAK,KAAK,IAAI;AACpD;AAAA,MACF;AACA,UAAI,IAAI,WAAW,UAAU,CAAC,oBAAoB,IAAI,GAAG;AACvD,eAAO,aAAa,KAAK,KAAK,OAAQ,4CAA4C;AAAA,MACpF;AACA,UAAI;AACJ,UAAI;AACF,cAAM,SAAS,wBAAwB,cAAc,CAAC;AACtD,kBAAU;AAAA,UACR;AAAA,UACA,WAAW,IAAI,8BAA8B;AAAA,YAC3C,oBAAoB;AAAA,YACpB,sBAAsB,CAAC,OAAO;AAC5B,kBAAI,CAAC,QAAS;AACd,sBAAQ,KAAK;AACb,sBAAQ,aAAa,KAAK,IAAI;AAC9B,uBAAS,IAAI,IAAI,OAAO;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,UACD,YAAY,KAAK,IAAI;AAAA,UACrB,SAAS;AAAA,QACX;AACA,gBAAQ,UAAU,UAAU,MAAM;AAAE,cAAI,QAAS,MAAK,aAAa,OAAO;AAAA,QAAG;AAC7E,cAAM,OAAO,QAAQ,QAAQ,SAAS;AACtC,0BAAkB;AAClB,cAAM,QAAQ,UAAU,cAAc,KAAK,KAAK,IAAI;AAAA,MACtD,UAAE;AACA,YAAI,WAAW,CAAC,QAAQ,MAAM,CAAC,QAAQ,QAAS,OAAM,aAAa,OAAO;AAAA,MAC5E;AAAA,IACF,SAAS,OAAO;AACd,UAAI,CAAC,IAAI,aAAa;AACpB,cAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,qBAAa,KAAK,KAAK,QAAQ,0BAA0B,OAAO,EAAE;AAAA,MACpE;AAAA,IACF;AAAA,EACF,CAAC;AACD,QAAM,OAAO,QAAQ,MAAM,IAAI;AAC/B,QAAM,aAAa,UAAU,MAAM;AACnC,QAAM,cAAc,SAAS,MAAM,YAAY,OAAO;AACtD,QAAM,iBAAiB,SAAS,MAAM,YAAY,UAAU;AAC5D,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,QAAQ,SAAS,UAAU,aAAa,eAAe,CAAC,CAAC;AAAA,CAAI;AAEtG,SAAO;AAAA,IACL,UAAU;AAAA,IACV;AAAA,IACA,OAAO,YAAY;AACjB,UAAI,QAAS;AACb,gBAAU;AACV,oBAAc,UAAU;AACxB,YAAM,QAAQ,WAAW,CAAC,GAAG,SAAS,OAAO,CAAC,EAAE,IAAI,YAAY,CAAC;AACjE,YAAM,YAAY,MAAM;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,SAAS,OAAO,MAAgB,MAAc,UAA0B;AACtE,QAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,MAAI,QAAQ,EAAG,QAAO;AACtB,SAAO,KAAK,QAAQ,CAAC,MAAM,MAAM;AAAE,UAAM,IAAI,MAAM,GAAG,IAAI,mBAAmB;AAAA,EAAG,GAAG;AACrF;AAEA,SAAS,QAAgB;AACvB,SAAO;AAAA;AAAA;AAAA;AAAA;AAKT;AAEA,SAAS,SAAS,MAAgB,MAAsB;AACtD,QAAM,QAAQ,OAAO,MAAM,MAAM,EAAE;AACnC,MAAI,CAAC,MAAO,OAAM,IAAI,MAAM,GAAG,IAAI,mBAAmB;AACtD,SAAO;AACT;AAEA,SAAS,aAAa,MAAsB;AAC1C,MAAI,CAAC,mBAAmB,KAAK,IAAI,EAAG,OAAM,IAAI,MAAM,2DAA2D;AAC/G,SAAO,iCAAiC,IAAI;AAC9C;AAEA,SAAS,UAAU,MAAsB;AACvC,QAAM,SAAS,UAAU,aAAa,MAAM,EAAE,UAAU,OAAO,CAAC;AAChE,MAAI,OAAO,WAAW,KAAK,OAAO,WAAW,KAAK,OAAO,WAAW,KAAK;AACvE,UAAM,IAAI,MAAM,aAAa,KAAK,CAAC,CAAC,aAAa,OAAO,UAAU,OAAO,UAAU,iBAAiB,KAAK,CAAC,EAAE;AAAA,EAC9G;AACF;AAEA,SAAS,gBAAwB;AAC/B,MAAI,CAAC,QAAQ,OAAQ,OAAM,IAAI,MAAM,wCAAwC;AAC7E,SAAO,QAAQ,OAAO;AACxB;AAEO,SAAS,aAAa,SAAwC;AACnE,QAAM,aAAa,QAAQ,kBAAkB,cAAc,YAAY,GAAG;AAC1E,QAAM,QAAQ,aAAa,QAAQ,WAAW;AAC9C,QAAM,cAAc;AAAA,IAClB,qBAAqB,QAAQ;AAAA,IAC7B,oBAAoB,QAAQ;AAAA,IAC5B,uBAAuB,QAAQ;AAAA,EACjC;AACA,QAAM,SAAS,CAAC,UAA0B,MAAM,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM;AACjH,QAAM,UAAU,CAAC,WAA6B,OAAO,IAAI,CAAC,UAAU,eAAe,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI;AACtH,QAAM,MAAM,OAAO,QAAQ,WAAW,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,YAAY,GAAG;AAAA,cAAuB,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI;AACvI,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA,YAKG,KAAK;AAAA;AAAA;AAAA,EAGf,QAAQ,CAAC,QAAQ,UAAU,YAAY,UAAU,QAAQ,MAAM,UAAU,OAAO,QAAQ,IAAI,GAAG,UAAU,QAAQ,MAAM,qBAAqB,OAAO,QAAQ,aAAa,CAAC,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI3K,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAOO,OAAO,KAAK,QAAQ,QAAQ,QAAQ,GAAG,iBAAiB,QAAQ,GAAG,QAAQ,WAAW,UAAU,CAAC,CAAC;AAAA;AAAA,YAElG,OAAO,KAAK,QAAQ,QAAQ,QAAQ,GAAG,iBAAiB,QAAQ,GAAG,QAAQ,WAAW,UAAU,CAAC,CAAC;AAAA;AAAA;AAAA;AAI9G;AAEA,eAAe,cAAc,gBAAuC;AAClE,MAAI,YAAY;AAChB,WAAS,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;AAChD,QAAI;AACF,YAAM,WAAW,MAAM,MAAM,gBAAgB,EAAE,QAAQ,YAAY,QAAQ,GAAK,EAAE,CAAC;AACnF,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAI,SAAS,MAAM,KAAK,WAAW,UAAW;AAC9C,kBAAY,QAAQ,SAAS,MAAM;AAAA,IACrC,SAAS,OAAO;AACd,kBAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,IACnE;AACA,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,GAAG,CAAC;AAAA,EACzD;AACA,QAAM,IAAI,MAAM,uBAAuB,cAAc,4BAA4B,SAAS,EAAE;AAC9F;AAEA,eAAsB,mBAAmB,SAAuG;AAC9I,MAAI,QAAQ,aAAa,SAAU,OAAM,IAAI,MAAM,8CAA8C;AACjG,MAAI,CAAC,WAAW,QAAQ,IAAI,EAAG,OAAM,IAAI,MAAM,6CAA6C;AAC5F,MAAI,CAAC,OAAO,UAAU,QAAQ,IAAI,KAAK,QAAQ,OAAO,KAAK,QAAQ,OAAO,MAAO,OAAM,IAAI,MAAM,uDAAuD;AACxJ,MAAI,CAAC,WAAW,QAAQ,UAAU,KAAK,CAAC,WAAW,QAAQ,UAAU,EAAG,OAAM,IAAI,MAAM,+CAA+C,QAAQ,UAAU,EAAE;AAC3J,0BAAwB,QAAQ,YAAY,MAAM;AAClD,QAAM,OAAO,QAAQ,QAAQ,QAAQ;AACrC,QAAM,QAAQ,aAAa,QAAQ,WAAW;AAC9C,QAAM,SAAS,KAAK,MAAM,WAAW,cAAc;AACnD,QAAM,OAAO,KAAK,MAAM,iBAAiB,MAAM;AAC/C,QAAM,YAAY,KAAK,QAAQ,GAAG,KAAK,QAAQ;AAC/C,YAAU,QAAQ,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAClD,YAAU,MAAM,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAChD,YAAU,QAAQ,GAAK;AACvB,YAAU,MAAM,GAAK;AACrB,YAAU,CAAC,WAAW,OAAO,cAAc,CAAC,IAAI,KAAK,EAAE,CAAC;AACxD,gBAAc,WAAW,aAAa,EAAE,GAAG,SAAS,KAAK,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAC5E,YAAU,WAAW,GAAK;AAC1B,YAAU,CAAC,aAAa,OAAO,cAAc,CAAC,IAAI,SAAS,CAAC;AAC5D,QAAM,iBAAiB,SAAS,QAAQ,MAAM,QAAQ,MAAM,GAAG,cAAc,QAAQ,IAAI,CAAC,SAAS;AACnG,QAAM,cAAc,cAAc;AAClC,SAAO,EAAE,OAAO,WAAW,eAAe;AAC5C;AAEA,eAAe,WAAW,MAAc,MAAgC;AACtE,SAAO,MAAM,IAAI,QAAQ,CAAC,YAAY;AACpC,UAAM,SAAS,QAAQ,EAAE,MAAM,KAAK,CAAC;AACrC,UAAM,SAAS,CAAC,SAAkB;AAAE,aAAO,QAAQ;AAAG,cAAQ,IAAI;AAAA,IAAG;AACrE,WAAO,KAAK,WAAW,MAAM,OAAO,IAAI,CAAC;AACzC,WAAO,KAAK,SAAS,MAAM,OAAO,KAAK,CAAC;AACxC,WAAO,WAAW,KAAO,MAAM,OAAO,KAAK,CAAC;AAAA,EAC9C,CAAC;AACH;AAEA,eAAe,kBAAkB,MAAc,MAA6B;AAC1E,WAAS,UAAU,GAAG,UAAU,IAAI,WAAW,GAAG;AAChD,QAAI,CAAC,MAAM,WAAW,MAAM,IAAI,EAAG;AACnC,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,GAAG,CAAC;AAAA,EACzD;AACA,QAAM,IAAI,MAAM,wBAAwB,IAAI,IAAI,IAAI,iCAAiC;AACvF;AAEA,eAAsB,qBACpB,aACA,MACA,OAAO,cACP,OAAO,QAAQ,GACgC;AAC/C,MAAI,QAAQ,aAAa,SAAU,OAAM,IAAI,MAAM,gDAAgD;AACnG,MAAI,CAAC,WAAW,IAAI,EAAG,OAAM,IAAI,MAAM,6CAA6C;AACpF,MAAI,CAAC,OAAO,UAAU,IAAI,KAAK,OAAO,KAAK,OAAO,MAAO,OAAM,IAAI,MAAM,uDAAuD;AAChI,QAAM,QAAQ,aAAa,WAAW;AACtC,QAAM,YAAY,KAAK,MAAM,WAAW,gBAAgB,GAAG,KAAK,QAAQ;AACxE,YAAU,CAAC,WAAW,OAAO,cAAc,CAAC,IAAI,KAAK,EAAE,CAAC;AACxD,SAAO,WAAW,EAAE,OAAO,KAAK,CAAC;AACjC,QAAM,kBAAkB,MAAM,IAAI;AAClC,SAAO,EAAE,OAAO,UAAU;AAC5B;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,MAAI;AACF,WAAO,YAAY,QAAQ,cAAc,aAAa,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAI,aAAa,GAAG;AAClB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,EAAG,SAAQ,OAAO,MAAM,MAAM,CAAC;AAAA,WACvE,KAAK,SAAS,mBAAmB,GAAG;AAC3C,UAAM,YAAY;AAChB,UAAI;AACF,cAAM,SAAS,MAAM,mBAAmB;AAAA,UACtC,aAAa,SAAS,MAAM,gBAAgB;AAAA,UAC5C,YAAY,SAAS,MAAM,UAAU;AAAA,UACrC,OAAO,SAAS,MAAM,SAAS;AAAA,UAC/B,UAAU,SAAS,MAAM,YAAY;AAAA,UACrC,MAAM,OAAO,MAAM,UAAU,YAAY;AAAA,UACzC,MAAM,OAAO,OAAO,MAAM,UAAU,OAAO,YAAY,CAAC,CAAC;AAAA,UACzD,MAAM,OAAO,MAAM,UAAU,YAAY;AAAA,UACzC,eAAe,OAAO,OAAO,MAAM,qBAAqB,OAAO,uBAAuB,CAAC,CAAC;AAAA,QAC1F,CAAC;AACD,gBAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,QAAQ,aAAa,GAAG,OAAO,CAAC,CAAC;AAAA,CAAI;AAAA,MAChF,SAAS,OAAO;AACd,gBAAQ,OAAO,MAAM,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAC9G,gBAAQ,WAAW;AAAA,MACrB;AAAA,IACF,GAAG;AAAA,EACL,WAAW,KAAK,SAAS,qBAAqB,GAAG;AAC/C,UAAM,YAAY;AAChB,UAAI;AACF,cAAM,SAAS,MAAM;AAAA,UACnB,SAAS,MAAM,gBAAgB;AAAA,UAC/B,OAAO,SAAS,MAAM,QAAQ,CAAC;AAAA,UAC/B,OAAO,MAAM,UAAU,YAAY;AAAA,QACrC;AACA,gBAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,QAAQ,eAAe,GAAG,OAAO,CAAC,CAAC;AAAA,CAAI;AAAA,MAClF,SAAS,OAAO;AACd,gBAAQ,OAAO,MAAM,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAC9G,gBAAQ,WAAW;AAAA,MACrB;AAAA,IACF,GAAG;AAAA,EACL,MACK,MAAK,kBAAkB;AAAA,IAC1B,MAAM,OAAO,MAAM,UAAU,YAAY;AAAA,IACzC,MAAM,OAAO,OAAO,MAAM,UAAU,OAAO,YAAY,CAAC,CAAC;AAAA,IACzD,MAAM,OAAO,MAAM,UAAU,YAAY;AAAA,IACzC,eAAe,OAAO,OAAO,MAAM,qBAAqB,OAAO,uBAAuB,CAAC,CAAC;AAAA,EAC1F,CAAC,EAAE,KAAK,CAAC,SAAS;AAChB,UAAM,WAAW,MAAM,KAAK,KAAK,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AACtE,YAAQ,KAAK,UAAU,QAAQ;AAC/B,YAAQ,KAAK,WAAW,QAAQ;AAAA,EAClC,CAAC,EAAE,MAAM,CAAC,UAAU;AAClB,YAAQ,OAAO,MAAM,+BAA+B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAC9G,YAAQ,WAAW;AAAA,EACrB,CAAC;AACH;","names":["session"]}

package/dist/stdio-http-proxy.d.ts

@@ -0,0 +1,10 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+
+interface StdioHttpProxyRuntime {
+    server: Server;
+    close(): Promise<void>;
+}
+declare function createStdioHttpProxyRuntime(endpoint: string): Promise<StdioHttpProxyRuntime>;
+declare function startStdioHttpProxy(endpoint: string): Promise<void>;
+
+export { type StdioHttpProxyRuntime, createStdioHttpProxyRuntime, startStdioHttpProxy };

package/dist/stdio-http-proxy.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+import {
+  validateLoopbackMcpUrl
+} from "./chunk-JKKIGIO5.js";
+import "./chunk-UKFRCP6X.js";
+import "./chunk-GTK4KOED.js";
+import {
+  packageVersion
+} from "./chunk-7B3XRRNI.js";
+
+// src/stdio-http-proxy.ts
+import { realpathSync } from "fs";
+import { pathToFileURL } from "url";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+async function createStdioHttpProxyRuntime(endpoint) {
+  const url = validateLoopbackMcpUrl(endpoint, "--endpoint");
+  const upstreamTransport = new StreamableHTTPClientTransport(new URL(url));
+  const upstream = new Client({ name: "agent-bridge-stdio-http-proxy", version: packageVersion() });
+  await upstream.connect(upstreamTransport);
+  const listed = await upstream.listTools();
+  const server = new Server(
+    { name: "agent-bridge-stdio-http-proxy", version: packageVersion() },
+    { capabilities: { tools: {} } }
+  );
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: listed.tools }));
+  server.setRequestHandler(CallToolRequestSchema, async (request) => upstream.callTool(request.params));
+  return {
+    server,
+    close: async () => {
+      await Promise.allSettled([server.close(), upstream.close(), upstreamTransport.close()]);
+    }
+  };
+}
+async function startStdioHttpProxy(endpoint) {
+  const runtime = await createStdioHttpProxyRuntime(endpoint);
+  const transport = new StdioServerTransport();
+  const shutdown = () => void Promise.allSettled([transport.close(), runtime.close()]).finally(() => process.exit(0));
+  process.once("SIGINT", shutdown);
+  process.once("SIGTERM", shutdown);
+  await runtime.server.connect(transport);
+}
+function usage() {
+  return "Usage: agent-bridge-stdio-http-proxy --endpoint http://127.0.0.1:<port>/mcp\n";
+}
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  try {
+    return import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href;
+  } catch {
+    return false;
+  }
+}
+if (isMainModule()) {
+  const args = process.argv.slice(2);
+  if (args.includes("--help") || args.includes("-h")) process.stdout.write(usage());
+  else {
+    const index = args.indexOf("--endpoint");
+    const endpoint = index < 0 ? void 0 : args[index + 1];
+    if (!endpoint || args.length !== 2) {
+      process.stderr.write(`agent-bridge-stdio-http-proxy: ${usage()}`);
+      process.exitCode = 1;
+    } else {
+      void startStdioHttpProxy(endpoint).catch((error) => {
+        process.stderr.write(`agent-bridge-stdio-http-proxy: ${error instanceof Error ? error.message : String(error)}
+`);
+        process.exitCode = 1;
+      });
+    }
+  }
+}
+export {
+  createStdioHttpProxyRuntime,
+  startStdioHttpProxy
+};
+//# sourceMappingURL=stdio-http-proxy.js.map

package/dist/stdio-http-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/stdio-http-proxy.ts"],"sourcesContent":["import { realpathSync } from \"node:fs\";\nimport { pathToFileURL } from \"node:url\";\nimport { Client } from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { StreamableHTTPClientTransport } from \"@modelcontextprotocol/sdk/client/streamableHttp.js\";\nimport { Server } from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { CallToolRequestSchema, ListToolsRequestSchema, type CallToolResult } from \"@modelcontextprotocol/sdk/types.js\";\nimport { validateLoopbackMcpUrl } from \"./client-lifecycle.js\";\nimport { packageVersion } from \"./package-metadata.js\";\n\nexport interface StdioHttpProxyRuntime {\n  server: Server;\n  close(): Promise<void>;\n}\n\nexport async function createStdioHttpProxyRuntime(endpoint: string): Promise<StdioHttpProxyRuntime> {\n  const url = validateLoopbackMcpUrl(endpoint, \"--endpoint\");\n  const upstreamTransport = new StreamableHTTPClientTransport(new URL(url));\n  const upstream = new Client({ name: \"agent-bridge-stdio-http-proxy\", version: packageVersion() });\n  await upstream.connect(upstreamTransport);\n  const listed = await upstream.listTools();\n  const server = new Server(\n    { name: \"agent-bridge-stdio-http-proxy\", version: packageVersion() },\n    { capabilities: { tools: {} } },\n  );\n  server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: listed.tools }));\n  server.setRequestHandler(CallToolRequestSchema, async (request) =>\n    upstream.callTool(request.params) as Promise<CallToolResult>);\n  return {\n    server,\n    close: async () => {\n      await Promise.allSettled([server.close(), upstream.close(), upstreamTransport.close()]);\n    },\n  };\n}\n\nexport async function startStdioHttpProxy(endpoint: string): Promise<void> {\n  const runtime = await createStdioHttpProxyRuntime(endpoint);\n  const transport = new StdioServerTransport();\n  const shutdown = () => void Promise.allSettled([transport.close(), runtime.close()]).finally(() => process.exit(0));\n  process.once(\"SIGINT\", shutdown);\n  process.once(\"SIGTERM\", shutdown);\n  await runtime.server.connect(transport);\n}\n\nfunction usage(): string {\n  return \"Usage: agent-bridge-stdio-http-proxy --endpoint http://127.0.0.1:<port>/mcp\\n\";\n}\n\nfunction isMainModule(): boolean {\n  if (!process.argv[1]) return false;\n  try {\n    return import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href;\n  } catch {\n    return false;\n  }\n}\n\nif (isMainModule()) {\n  const args = process.argv.slice(2);\n  if (args.includes(\"--help\") || args.includes(\"-h\")) process.stdout.write(usage());\n  else {\n    const index = args.indexOf(\"--endpoint\");\n    const endpoint = index < 0 ? undefined : args[index + 1];\n    if (!endpoint || args.length !== 2) {\n      process.stderr.write(`agent-bridge-stdio-http-proxy: ${usage()}`);\n      process.exitCode = 1;\n    } else {\n      void startStdioHttpProxy(endpoint).catch((error) => {\n        process.stderr.write(`agent-bridge-stdio-http-proxy: ${error instanceof Error ? error.message : String(error)}\\n`);\n        process.exitCode = 1;\n      });\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;AAAA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,cAAc;AACvB,SAAS,qCAAqC;AAC9C,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC,SAAS,uBAAuB,8BAAmD;AASnF,eAAsB,4BAA4B,UAAkD;AAClG,QAAM,MAAM,uBAAuB,UAAU,YAAY;AACzD,QAAM,oBAAoB,IAAI,8BAA8B,IAAI,IAAI,GAAG,CAAC;AACxE,QAAM,WAAW,IAAI,OAAO,EAAE,MAAM,iCAAiC,SAAS,eAAe,EAAE,CAAC;AAChG,QAAM,SAAS,QAAQ,iBAAiB;AACxC,QAAM,SAAS,MAAM,SAAS,UAAU;AACxC,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,iCAAiC,SAAS,eAAe,EAAE;AAAA,IACnE,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE;AAAA,EAChC;AACA,SAAO,kBAAkB,wBAAwB,aAAa,EAAE,OAAO,OAAO,MAAM,EAAE;AACtF,SAAO,kBAAkB,uBAAuB,OAAO,YACrD,SAAS,SAAS,QAAQ,MAAM,CAA4B;AAC9D,SAAO;AAAA,IACL;AAAA,IACA,OAAO,YAAY;AACjB,YAAM,QAAQ,WAAW,CAAC,OAAO,MAAM,GAAG,SAAS,MAAM,GAAG,kBAAkB,MAAM,CAAC,CAAC;AAAA,IACxF;AAAA,EACF;AACF;AAEA,eAAsB,oBAAoB,UAAiC;AACzE,QAAM,UAAU,MAAM,4BAA4B,QAAQ;AAC1D,QAAM,YAAY,IAAI,qBAAqB;AAC3C,QAAM,WAAW,MAAM,KAAK,QAAQ,WAAW,CAAC,UAAU,MAAM,GAAG,QAAQ,MAAM,CAAC,CAAC,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AAClH,UAAQ,KAAK,UAAU,QAAQ;AAC/B,UAAQ,KAAK,WAAW,QAAQ;AAChC,QAAM,QAAQ,OAAO,QAAQ,SAAS;AACxC;AAEA,SAAS,QAAgB;AACvB,SAAO;AACT;AAEA,SAAS,eAAwB;AAC/B,MAAI,CAAC,QAAQ,KAAK,CAAC,EAAG,QAAO;AAC7B,MAAI;AACF,WAAO,YAAY,QAAQ,cAAc,aAAa,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE;AAAA,EAC1E,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAI,aAAa,GAAG;AAClB,QAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;AACjC,MAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,EAAG,SAAQ,OAAO,MAAM,MAAM,CAAC;AAAA,OAC3E;AACH,UAAM,QAAQ,KAAK,QAAQ,YAAY;AACvC,UAAM,WAAW,QAAQ,IAAI,SAAY,KAAK,QAAQ,CAAC;AACvD,QAAI,CAAC,YAAY,KAAK,WAAW,GAAG;AAClC,cAAQ,OAAO,MAAM,kCAAkC,MAAM,CAAC,EAAE;AAChE,cAAQ,WAAW;AAAA,IACrB,OAAO;AACL,WAAK,oBAAoB,QAAQ,EAAE,MAAM,CAAC,UAAU;AAClD,gBAAQ,OAAO,MAAM,kCAAkC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AACjH,gBAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH;AAAA,EACF;AACF;","names":[]}

package/docs/architecture-v2.md

@@ -405,6 +405,17 @@ explicit loopback HTTP URL with a port and `/mcp` path, without user information
 query, fragment, bearer-token setting, or custom header. Backend credentials remain in
 their existing private file and do not enter the native HTTP registration.
 
+The public loopback host is an optional client-side process boundary for native HTTP
+targets. One host process owns one exact client identity, private backend file, stable
+instance, and local edge store. It binds only an explicit loopback address and exposes
+`/mcp/health` as socket-backed liveness. It creates an MCP server per transport session
+and closes that server when the session closes or becomes idle. The host does not share
+one credential across client identities, hold SQLite's write lease during gateway I/O,
+or replace the durable edge outbox and inbox semantics. On macOS, its public launchd
+installer avoids scheduler priority hints and requires a successful health request
+before a client registration may depend on the endpoint. Optional wrappers belong above
+this host boundary and cannot be required for client availability.
+
 Claude Desktop represents an endpoint-backed target as an exact stdio proxy launch.
 The proxy command must be an existing absolute executable. Its bounded arguments must
 contain the exact loopback endpoint and no credential-like flags or values. Claude