@cyanmycelium/mcp-broker 0.2.0 → 0.4.0

package/dist/broker/broker.server.js

@@ -1,7 +1,7 @@
-import { McpGrammar, McpServerBuilder, LoopbackTransport } from "@cyanmycelium/mcp-core";
+import { McpServerBuilder, LoopbackTransport } from "@cyanmycelium/mcp-core";
 import { BrokerInfoBehavior } from "./behaviors/broker.behavior.info.js";
 import { BrokerProvidersBehavior } from "./behaviors/broker.behavior.providers.js";
-import { brokerGrammarKey, defaultBrokerLocaleResolver, defaultBrokerUserAgentResolver, iterAvailableBrokerGrammars, iterBrokerGrammarsFrom } from "./broker.grammars.js";
+import { iterAvailableBrokerGrammars, iterBrokerGrammarsFrom } from "./broker.grammars.js";
 /**
  * Reserved provider slot name under which the broker exposes itself as an MCP
  * server. Clients reach it via `<host>/_broker/mcp` (or any other client transport).
@@ -27,80 +27,42 @@ export const BROKER_PROVIDER_NAME = "_broker";
  *          loopback transport to attach to the tunnel.
  */
 export async function startBrokerServer(context, options = {}) {
-    const localeResolver = options.localeResolver ?? defaultBrokerLocaleResolver;
-    const userAgentResolver = options.userAgentResolver ?? defaultBrokerUserAgentResolver;
-    const localeSource = options.localeSource ?? (() => process.env["MCP_BROKER_LOCALE"]);
     const [serverEnd, clientEnd] = LoopbackTransport.createPair();
-    const builder = new McpServerBuilder().withName(BROKER_PROVIDER_NAME).withTransport(serverEnd).register(new BrokerInfoBehavior(context), new BrokerProvidersBehavior(context));
-    // Discover every grammar by scanning two directories:
-    //   1. The packaged grammars shipped with the broker.
-    //   2. Optionally, a user-supplied directory whose entries are merged
-    //      ON TOP of the packaged ones (local wins on conflicts).
-    //
-    // Then build the (userAgent × locale) matrix. Within each user-agent,
-    // the grammar cascades on top of "default:<locale>" so per-user-agent
-    // files can stay partial.
-    const defaults = new Map(); // locale → grammar
-    const overrides = new Map(); // userAgent → locale → grammar
-    function ingest(entry, isOverride) {
-        if (entry.userAgent === "default") {
-            const existing = defaults.get(entry.locale);
-            const merged = existing && isOverride ? McpGrammar.merge(existing, entry.grammar) : entry.grammar;
-            defaults.set(entry.locale, merged);
-        }
-        else {
-            let byLocale = overrides.get(entry.userAgent);
-            if (!byLocale) {
-                byLocale = new Map();
-                overrides.set(entry.userAgent, byLocale);
-            }
-            const existing = byLocale.get(entry.locale);
-            const merged = existing && isOverride ? McpGrammar.merge(existing, entry.grammar) : entry.grammar;
-            byLocale.set(entry.locale, merged);
-        }
+    // Without an initializer, McpServerBuilder reports `version: "0.0.0"` in the
+    // `initialize` handshake. Supply the real package version from the context.
+    const builder = new McpServerBuilder()
+        .withName(BROKER_PROVIDER_NAME)
+        .withTransport(serverEnd)
+        .withInitializer({
+        initialize: () => ({
+            protocolVersion: "2024-11-05",
+            serverInfo: { name: BROKER_PROVIDER_NAME, version: context.version },
+        }),
+    })
+        .register(new BrokerInfoBehavior(context), new BrokerProvidersBehavior(context));
+    // Register every `(userAgent, locale)` JSON found on disk as a raw
+    // grammar layer. The candidate-chain resolution in
+    // McpServer.initialize (mcp-core@0.3.0) walks the resolver's chain
+    // and merges all matching layers — so partial user-agent files no
+    // longer need to be pre-merged with the default-locale baseline at
+    // boot. Local overrides come after packaged entries; identical keys
+    // get overlaid via the registry's last-write-wins.
+    for (const entry of iterAvailableBrokerGrammars()) {
+        builder.withGrammar(entry.key, entry.grammar);
     }
-    for (const entry of iterAvailableBrokerGrammars())
-        ingest(entry, false);
     if (options.localGrammarsDir) {
-        for (const entry of iterBrokerGrammarsFrom(options.localGrammarsDir))
-            ingest(entry, true);
-    }
-    const availableKeys = new Set();
-    // Register every "default:<locale>" as-is.
-    for (const [locale, grammar] of defaults) {
-        const key = brokerGrammarKey("default", locale);
-        builder.withGrammar(key, grammar);
-        availableKeys.add(key);
-    }
-    // Register every "<userAgent>:<locale>" as merge(default:<locale>, ua:<locale>).
-    // The user-agent grammar wins per entry; missing entries cascade from default.
-    for (const [agent, byLocale] of overrides) {
-        for (const [locale, uaGrammar] of byLocale) {
-            const baseline = defaults.get(locale);
-            const merged = baseline ? McpGrammar.merge(baseline, uaGrammar) : uaGrammar;
-            const key = brokerGrammarKey(agent, locale);
-            builder.withGrammar(key, merged);
-            availableKeys.add(key);
+        for (const entry of iterBrokerGrammarsFrom(options.localGrammarsDir)) {
+            builder.withGrammar(entry.key, entry.grammar);
         }
     }
-    builder.withGrammarResolver((clientInfo) => {
-        // localeResolver returns the full fallback chain (most specific first),
-        // ending with the universal "en". The user-agent axis is the broker's
-        // own concern: per locale, prefer the user-agent-specific grammar, then
-        // fall back to the "default" agent.
-        const locales = localeResolver(localeSource());
-        const userAgent = userAgentResolver(clientInfo);
-        const userAgents = userAgent === "default" ? ["default"] : [userAgent, "default"];
-        for (const locale of locales) {
-            for (const ua of userAgents) {
-                const key = brokerGrammarKey(ua, locale);
-                if (availableKeys.has(key))
-                    return key;
-            }
-        }
-        // None of the candidates is on disk → return an empty key. McpServer
-        // then falls back to the behavior's baseline descriptions (English).
-        return "";
+    // Wire the resolver via mcp-core's declarative helper. The broker
+    // ships sensible defaults (locale from MCP_BROKER_LOCALE env, agents
+    // from mcp-core's catalogue, BCP-47 narrowing, default:en fallback);
+    // anything the host application sets via `grammarResolverOptions`
+    // takes precedence.
+    builder.withGrammarResolver({
+        localeSource: () => process.env["MCP_BROKER_LOCALE"],
+        ...(options.grammarResolverOptions ?? {}),
     });
     // No reconnect policy → the McpServer does not attempt to reopen the loopback
     // when WsTunnel.stop() closes it. Clean shutdown.

package/dist/broker/broker.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"broker.server.js","sourceRoot":"","sources":["../../src/broker/broker.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAI1K;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAuC9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,OAAsB,EACtB,UAAoC,EAAE;IAKtC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,2BAA2B,CAAC;IAC7E,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,8BAA8B,CAAC;IACtF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAEtF,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,iBAAiB,CAAC,UAAU,EAAE,CAAC;IAE9D,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/K,sDAAsD;IACtD,sDAAsD;IACtD,sEAAsE;IACtE,8DAA8D;IAC9D,EAAE;IACF,sEAAsE;IACtE,sEAAsE;IACtE,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,mBAAmB;IACnE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4C,CAAC,CAAC,+BAA+B;IAEtG,SAAS,MAAM,CAAC,KAA0E,EAAE,UAAmB;QAC3G,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAClG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACJ,IAAI,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;gBACrB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAClG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,2BAA2B,EAAE;QAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,sBAAsB,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,2CAA2C;IAC3C,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,iFAAiF;IACjF,+EAA+E;IAC/E,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACjC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;IAED,OAAO,CAAC,mBAAmB,CAAC,CAAC,UAAU,EAAE,EAAE;QACvC,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,oCAAoC;QACpC,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAElF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC3B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO,GAAG,CAAC;YAC3C,CAAC;QACL,CAAC;QAED,qEAAqE;QACrE,qEAAqE;QACrE,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAE/B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC"}
+{"version":3,"file":"broker.server.js","sourceRoot":"","sources":["../../src/broker/broker.server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAG3F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAwC9C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,OAAsB,EACtB,UAAoC,EAAE;IAKtC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,iBAAiB,CAAC,UAAU,EAAE,CAAC;IAE9D,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE;SACjC,QAAQ,CAAC,oBAAoB,CAAC;SAC9B,aAAa,CAAC,SAAS,CAAC;SACxB,eAAe,CAAC;QACb,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACf,eAAe,EAAE,YAAY;YAC7B,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;SACvE,CAAC;KACL,CAAC;SACD,QAAQ,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAErF,mEAAmE;IACnE,mDAAmD;IACnD,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,oEAAoE;IACpE,mDAAmD;IACnD,KAAK,MAAM,KAAK,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAChD,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,sBAAsB,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,oBAAoB;IACpB,OAAO,CAAC,mBAAmB,CAAC;QACxB,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpD,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC;KAC5C,CAAC,CAAC;IAEH,8EAA8E;IAC9E,kDAAkD;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAE/B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC"}

package/dist/broker/index.d.ts

@@ -4,6 +4,6 @@ export { BrokerInfoAdapter, BROKER_INFO_URI } from "./adapters/broker.adapter.in
 export { BrokerProvidersAdapter, PROVIDERS_URI, PROVIDER_URI_TEMPLATE } from "./adapters/broker.adapter.providers.js";
 export { startBrokerServer, BROKER_PROVIDER_NAME } from "./broker.server.js";
 export type { StartBrokerServerOptions } from "./broker.server.js";
-export { brokerBaselineGrammar, brokerBaselinePropertyDescription, brokerBaselineResourceDescription, brokerBaselineResourceName, brokerBaselineResourceTemplateDescription, brokerBaselineResourceTemplateName, brokerBaselineToolDescription, brokerGrammarKey, defaultBrokerLocaleResolver, defaultBrokerUserAgentResolver, iterAvailableBrokerGrammars, loadBrokerGrammar, resolveBrokerLocale, resolveBrokerUserAgent, } from "./broker.grammars.js";
-export type { BrokerLocale, BrokerLocaleResolver, BrokerUserAgent, BrokerUserAgentResolver } from "./broker.grammars.js";
+export { brokerBaselineGrammar, brokerBaselinePropertyDescription, brokerBaselineResourceDescription, brokerBaselineResourceName, brokerBaselineResourceTemplateDescription, brokerBaselineResourceTemplateName, brokerBaselineToolDescription, brokerGrammarKey, iterAvailableBrokerGrammars, iterBrokerGrammarsFrom, loadBrokerGrammar, parseBrokerGrammarStem, } from "./broker.grammars.js";
+export type { BrokerGrammarEntry, BrokerLocale, BrokerUserAgent } from "./broker.grammars.js";
 export type { BrokerContext, BrokerProviderInfo, BrokerProviderTransport } from "./broker.context.js";

package/dist/broker/index.js

@@ -3,5 +3,5 @@ export { BrokerProvidersBehavior } from "./behaviors/broker.behavior.providers.j
 export { BrokerInfoAdapter, BROKER_INFO_URI } from "./adapters/broker.adapter.info.js";
 export { BrokerProvidersAdapter, PROVIDERS_URI, PROVIDER_URI_TEMPLATE } from "./adapters/broker.adapter.providers.js";
 export { startBrokerServer, BROKER_PROVIDER_NAME } from "./broker.server.js";
-export { brokerBaselineGrammar, brokerBaselinePropertyDescription, brokerBaselineResourceDescription, brokerBaselineResourceName, brokerBaselineResourceTemplateDescription, brokerBaselineResourceTemplateName, brokerBaselineToolDescription, brokerGrammarKey, defaultBrokerLocaleResolver, defaultBrokerUserAgentResolver, iterAvailableBrokerGrammars, loadBrokerGrammar, resolveBrokerLocale, resolveBrokerUserAgent, } from "./broker.grammars.js";
+export { brokerBaselineGrammar, brokerBaselinePropertyDescription, brokerBaselineResourceDescription, brokerBaselineResourceName, brokerBaselineResourceTemplateDescription, brokerBaselineResourceTemplateName, brokerBaselineToolDescription, brokerGrammarKey, iterAvailableBrokerGrammars, iterBrokerGrammarsFrom, loadBrokerGrammar, parseBrokerGrammarStem, } from "./broker.grammars.js";
 //# sourceMappingURL=index.js.map

package/dist/broker/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/broker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACtH,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE7E,OAAO,EACH,qBAAqB,EACrB,iCAAiC,EACjC,iCAAiC,EACjC,0BAA0B,EAC1B,yCAAyC,EACzC,kCAAkC,EAClC,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,8BAA8B,EAC9B,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,GACzB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/broker/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AACtH,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE7E,OAAO,EACH,qBAAqB,EACrB,iCAAiC,EACjC,iCAAiC,EACjC,0BAA0B,EAC1B,yCAAyC,EACzC,kCAAkC,EAClC,6BAA6B,EAC7B,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,GACzB,MAAM,sBAAsB,CAAC"}

package/dist/config.d.ts

@@ -61,6 +61,41 @@ export interface BrokerConfig {
         command: string;
         args?: string[];
         env?: Record<string, string>;
+        /** When `true`, the upstream joins the `_all` aggregate slot once connected. */
+        aggregate?: boolean;
+    }>;
+    /**
+     * Remote MCP servers the broker connects out to and exposes as provider
+     * slots. Each entry is reached by URL (Streamable HTTP / SSE / WebSocket);
+     * local servers should be shipped as `.mcpb` bundles instead.
+     */
+    mcpServers?: Array<{
+        name: string;
+        url: string;
+        transport?: "streamable-http" | "sse" | "websocket";
+        headers?: Record<string, string>;
+        /** Defaults to `true`; set to `false` to exclude this upstream from the `_all` aggregate slot. */
+        aggregate?: boolean;
+    }>;
+    /**
+     * Local `.mcpb` bundles the broker loads at startup and runs as stdio
+     * provider slots. A bundle is a ZIP with a `manifest.json`; the broker
+     * verifies a detached signature against a trusted public key before
+     * unpacking and spawning it.
+     */
+    mcpbBundles?: Array<{
+        /** Provider slot name the bundle is bound to. */
+        name: string;
+        /** Path to the `.mcpb` file (resolved against the config file's directory). */
+        path: string;
+        /** Path to the trusted public key (PEM) used to verify the detached signature. */
+        publicKey: string;
+        /** Path to the detached signature file. Defaults to `<path>.sig`. */
+        signature?: string;
+        /** Values substituted into the manifest's `${user_config.*}` placeholders. */
+        userConfig?: Record<string, string | number | boolean | Array<string | number>>;
+        /** Defaults to `true`; set to `false` to exclude this bundle from the `_all` aggregate slot. */
+        aggregate?: boolean;
     }>;
 }
 /**

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0F7C,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEhD,iEAAiE;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAErD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEjD,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,IAAI,IAAI,EAAE,CAAC;QACP,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACjB,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,UAAU,GAAG,MAAM,CAAC;QACxB,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,UAAU,GAAG,MAAM,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,uCAAuC,MAAM,IAAI,GAAG,cAAc,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,GAAG,GAAG,4BAA4B,CAChK,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,UAAU,KAAM,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/G,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;AACL,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+H7C,oFAAoF;AACpF,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEhD,iEAAiE;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAErD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAE/D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEjD,IAAI,UAAU,GAAkB,IAAI,CAAC;IAErC,IAAI,IAAI,EAAE,CAAC;QACP,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,OAAO,EAAE,CAAC;QACjB,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,UAAU,GAAG,MAAM,CAAC;QACxB,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,UAAU,GAAG,MAAM,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,uCAAuC,MAAM,IAAI,GAAG,cAAc,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,GAAG,GAAG,4BAA4B,CAChK,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEpC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAC/C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,UAAU,KAAM,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAC/G,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -3,10 +3,16 @@ export { WsTunnelBuilder } from "./ws.tunnel.builder.js";
 export type { WsTunnelOptions, StaticMount } from "./ws.tunnel.js";
 export { StdioUpstream } from "./stdio.upstream.js";
 export type { StdioUpstreamConfig } from "./stdio.upstream.js";
+export { RemoteUpstream } from "./remote.upstream.js";
+export type { RemoteUpstreamConfig } from "./remote.upstream.js";
+export type { Upstream } from "./upstream.js";
+export { loadMcpbBundle } from "./mcpb.loader.js";
+export type { McpbBundleConfig } from "./mcpb.loader.js";
+export { unzipMcpb } from "./mcpb.unzip.js";
 export { BrokerInfoBehavior, BrokerProvidersBehavior, startBrokerServer, BROKER_PROVIDER_NAME } from "./broker/index.js";
 export type { StartBrokerServerOptions } from "./broker/index.js";
-export { brokerGrammarKey, defaultBrokerLocaleResolver, defaultBrokerUserAgentResolver, iterAvailableBrokerGrammars, loadBrokerGrammar, resolveBrokerLocale, resolveBrokerUserAgent, } from "./broker/index.js";
-export type { BrokerContext, BrokerProviderInfo, BrokerProviderTransport, BrokerLocale, BrokerLocaleResolver, BrokerUserAgent, BrokerUserAgentResolver } from "./broker/index.js";
+export { brokerGrammarKey, iterAvailableBrokerGrammars, iterBrokerGrammarsFrom, loadBrokerGrammar } from "./broker/index.js";
+export type { BrokerContext, BrokerProviderInfo, BrokerProviderTransport, BrokerLocale, BrokerUserAgent } from "./broker/index.js";
 export { VERSION, PACKAGE_NAME } from "./version.js";
 export { loadBrokerConfig, DEFAULT_CONFIG_FILENAME } from "./config.js";
 export type { BrokerConfig } from "./config.js";

package/dist/index.js

@@ -1,9 +1,13 @@
 export { WsTunnel } from "./ws.tunnel.js";
 export { WsTunnelBuilder } from "./ws.tunnel.builder.js";
 export { StdioUpstream } from "./stdio.upstream.js";
+export { RemoteUpstream } from "./remote.upstream.js";
+// `.mcpb` bundle loading — verifies + unpacks a bundle into a stdio upstream.
+export { loadMcpbBundle } from "./mcpb.loader.js";
+export { unzipMcpb } from "./mcpb.unzip.js";
 // Broker introspection — tier 1.
 export { BrokerInfoBehavior, BrokerProvidersBehavior, startBrokerServer, BROKER_PROVIDER_NAME } from "./broker/index.js";
-export { brokerGrammarKey, defaultBrokerLocaleResolver, defaultBrokerUserAgentResolver, iterAvailableBrokerGrammars, loadBrokerGrammar, resolveBrokerLocale, resolveBrokerUserAgent, } from "./broker/index.js";
+export { brokerGrammarKey, iterAvailableBrokerGrammars, iterBrokerGrammarsFrom, loadBrokerGrammar } from "./broker/index.js";
 export { VERSION, PACKAGE_NAME } from "./version.js";
 // JSON config file used by `bin.ts` at startup. Exported so a programmatic
 // embedder can re-use the same loader against a custom path.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,iCAAiC;AACjC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzH,OAAO,EACH,gBAAgB,EAChB,2BAA2B,EAC3B,8BAA8B,EAC9B,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAErD,2EAA2E;AAC3E,6DAA6D;AAC7D,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,8EAA8E;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,iCAAiC;AACjC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzH,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG7H,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAErD,2EAA2E;AAC3E,6DAA6D;AAC7D,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcpb.loader.d.ts

@@ -0,0 +1,24 @@
+import type { StdioUpstreamConfig } from "./stdio.upstream.js";
+/** A `.mcpb` bundle entry from the broker config file. */
+export interface McpbBundleConfig {
+    /** Provider slot name the bundle is bound to. */
+    name: string;
+    /** Path to the `.mcpb` file. */
+    path: string;
+    /** Path to the trusted public key (PEM) verifying the detached signature. */
+    publicKey: string;
+    /** Path to the detached signature file. Defaults to `<path>.sig`. */
+    signature?: string;
+    /** Values substituted into the manifest's `${user_config.*}` placeholders. */
+    userConfig?: Record<string, string | number | boolean | Array<string | number>>;
+    /** When `false`, the bundle stays out of the `_all` aggregate slot. Defaults to `true`. */
+    aggregate?: boolean;
+}
+/**
+ * Verifies, unpacks and resolves a `.mcpb` bundle into a `StdioUpstreamConfig`.
+ *
+ * @param cfg      The bundle entry from the broker config.
+ * @param baseDir  Directory the bundle paths are resolved against.
+ * @returns        A ready upstream config, or `null` when the bundle is refused.
+ */
+export declare function loadMcpbBundle(cfg: McpbBundleConfig, baseDir: string): Promise<StdioUpstreamConfig | null>;

package/dist/mcpb.loader.js

@@ -0,0 +1,161 @@
+/**
+ * Loads a local `.mcpb` bundle into a {@link StdioUpstreamConfig}.
+ *
+ * A `.mcpb` bundle is a ZIP holding a `manifest.json` whose `server.mcp_config`
+ * describes a stdio MCP server process. The broker:
+ *
+ * 1. verifies a **detached signature** of the `.mcpb` file against a trusted
+ *    public key (PEM) — integrity *and* provenance, using `node:crypto` only;
+ * 2. unpacks the archive;
+ * 3. reads the manifest, expands the `mcp_config` placeholders, and produces a
+ *    `StdioUpstreamConfig` that the existing upstream wiring spawns.
+ *
+ * The broker stays compatible with the `.mcpb` format without depending on the
+ * `@anthropic-ai/mcpb` package: the bundle's *own* (native PKCS#7) signature is
+ * never parsed — the detached signature layer is the broker's trust anchor.
+ *
+ * Any failure (missing files, bad signature, malformed manifest, missing
+ * `user_config` value) is logged and yields `null`: the bundle is refused and
+ * no process is ever spawned. Never auto-runs an unverified bundle.
+ */
+import { createPublicKey, verify, X509Certificate } from "node:crypto";
+import { existsSync, readFileSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve, sep } from "node:path";
+import { unzipMcpb } from "./mcpb.unzip.js";
+/** Loads a PEM that holds either an X.509 certificate or a bare public key. */
+function loadPublicKey(pem) {
+    if (pem.includes("BEGIN CERTIFICATE")) {
+        return new X509Certificate(pem).publicKey;
+    }
+    return createPublicKey(pem);
+}
+/** Verifies the detached `signature` of `data` against `publicKey`. */
+function verifyDetachedSignature(data, signature, publicKey) {
+    // Ed25519/Ed448 are used without a separate hash algorithm; RSA/EC need one.
+    const keyType = publicKey.asymmetricKeyType;
+    const algorithm = keyType === "ed25519" || keyType === "ed448" ? null : "sha256";
+    return verify(algorithm, data, publicKey, signature);
+}
+/** Resolves a single `${...}` placeholder key, or `undefined` when unknown. */
+function resolvePlaceholder(key, dirname, userConfig) {
+    if (key === "__dirname")
+        return dirname;
+    if (key === "HOME")
+        return homedir();
+    if (key === "DESKTOP")
+        return join(homedir(), "Desktop");
+    if (key === "DOCUMENTS")
+        return join(homedir(), "Documents");
+    if (key === "DOWNLOADS")
+        return join(homedir(), "Downloads");
+    if (key === "pathSeparator" || key === "/")
+        return sep;
+    if (key.startsWith("user_config.")) {
+        const name = key.slice("user_config.".length);
+        const value = userConfig?.[name];
+        if (value === undefined)
+            throw new Error(`missing user_config value: "${name}"`);
+        return value;
+    }
+    return undefined;
+}
+/** Expands placeholders in a scalar string (command, env value). */
+function expandScalar(input, dirname, userConfig) {
+    return input.replace(/\$\{([^}]+)\}/g, (match, key) => {
+        const value = resolvePlaceholder(key, dirname, userConfig);
+        if (value === undefined)
+            return match; // unknown placeholder — leave verbatim
+        if (Array.isArray(value))
+            throw new Error(`placeholder "\${${key}}" is multi-valued and cannot be used here`);
+        return String(value);
+    });
+}
+/** Expands one manifest argument; a standalone multi-valued placeholder spreads. */
+function expandArg(arg, dirname, userConfig) {
+    const standalone = /^\$\{(user_config\.[^}]+)\}$/.exec(arg);
+    if (standalone) {
+        const value = resolvePlaceholder(standalone[1], dirname, userConfig);
+        if (Array.isArray(value))
+            return value.map(String);
+        return [String(value)];
+    }
+    return [expandScalar(arg, dirname, userConfig)];
+}
+/**
+ * Verifies, unpacks and resolves a `.mcpb` bundle into a `StdioUpstreamConfig`.
+ *
+ * @param cfg      The bundle entry from the broker config.
+ * @param baseDir  Directory the bundle paths are resolved against.
+ * @returns        A ready upstream config, or `null` when the bundle is refused.
+ */
+export async function loadMcpbBundle(cfg, baseDir) {
+    const tag = `[mcp-broker] mcpb bundle "${cfg.name}"`;
+    try {
+        const mcpbPath = resolve(baseDir, cfg.path);
+        const publicKeyPath = resolve(baseDir, cfg.publicKey);
+        const signaturePath = cfg.signature ? resolve(baseDir, cfg.signature) : `${mcpbPath}.sig`;
+        for (const [label, file] of [
+            ["bundle", mcpbPath],
+            ["public key", publicKeyPath],
+            ["signature", signaturePath],
+        ]) {
+            if (!existsSync(file)) {
+                console.error(`${tag}: ${label} file not found at ${file} — bundle refused.`);
+                return null;
+            }
+        }
+        // ── Signature verification (mandatory) ──────────────────────────────
+        const bundleBytes = readFileSync(mcpbPath);
+        const signatureBytes = readFileSync(signaturePath);
+        const publicKey = loadPublicKey(readFileSync(publicKeyPath, "utf8"));
+        if (!verifyDetachedSignature(bundleBytes, signatureBytes, publicKey)) {
+            console.error(`${tag}: detached signature is invalid for the configured public key — bundle refused.`);
+            return null;
+        }
+        // ── Unpack ──────────────────────────────────────────────────────────
+        const outputDir = resolve(baseDir, ".cache", "mcpb", cfg.name);
+        rmSync(outputDir, { recursive: true, force: true });
+        unzipMcpb(mcpbPath, outputDir);
+        // ── Manifest → mcp_config ───────────────────────────────────────────
+        const manifestPath = join(outputDir, "manifest.json");
+        if (!existsSync(manifestPath)) {
+            console.error(`${tag}: manifest.json missing inside the bundle — bundle refused.`);
+            return null;
+        }
+        const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+        const mcpConfig = manifest.server?.mcp_config;
+        if (!mcpConfig) {
+            console.error(`${tag}: manifest has no server.mcp_config — bundle refused.`);
+            return null;
+        }
+        // Platform-specific overrides replace the base fields when present.
+        const override = mcpConfig.platform_overrides?.[process.platform];
+        const command = override?.command ?? mcpConfig.command;
+        const rawArgs = override?.args ?? mcpConfig.args ?? [];
+        const rawEnv = { ...mcpConfig.env, ...override?.env };
+        if (!command) {
+            console.error(`${tag}: manifest mcp_config has no command — bundle refused.`);
+            return null;
+        }
+        // ── Placeholder expansion ───────────────────────────────────────────
+        const expandedCommand = expandScalar(command, outputDir, cfg.userConfig);
+        const expandedArgs = rawArgs.flatMap((arg) => expandArg(arg, outputDir, cfg.userConfig));
+        const expandedEnv = {};
+        for (const [key, value] of Object.entries(rawEnv)) {
+            expandedEnv[key] = expandScalar(value, outputDir, cfg.userConfig);
+        }
+        return {
+            name: cfg.name,
+            command: expandedCommand,
+            args: expandedArgs,
+            env: Object.keys(expandedEnv).length > 0 ? expandedEnv : undefined,
+            aggregate: cfg.aggregate ?? true,
+        };
+    }
+    catch (err) {
+        console.error(`${tag}: ${err.message} — bundle refused.`);
+        return null;
+    }
+}
+//# sourceMappingURL=mcpb.loader.js.map

package/dist/mcpb.loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpb.loader.js","sourceRoot":"","sources":["../src/mcpb.loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAkB,MAAM,aAAa,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AA0B5C,+EAA+E;AAC/E,SAAS,aAAa,CAAC,GAAW;IAC9B,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,SAAS,uBAAuB,CAAC,IAAY,EAAE,SAAiB,EAAE,SAAoB;IAClF,6EAA6E;IAC7E,MAAM,OAAO,GAAG,SAAS,CAAC,iBAAiB,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,OAAO,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACzD,CAAC;AAED,+EAA+E;AAC/E,SAAS,kBAAkB,CAAC,GAAW,EAAE,OAAe,EAAE,UAA0C;IAChG,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,OAAO,EAAE,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,GAAG,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,GAAG,KAAK,eAAe,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IACvD,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe,EAAE,UAA0C;IAC5F,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE;QAC1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,uCAAuC;QAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,4CAA4C,CAAC,CAAC;QAC9G,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,GAAW,EAAE,OAAe,EAAE,UAA0C;IACvF,MAAM,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,UAAU,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAqB,EAAE,OAAe;IACvE,MAAM,GAAG,GAAG,6BAA6B,GAAG,CAAC,IAAI,GAAG,CAAC;IACrD,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,MAAM,CAAC;QAE1F,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI;YACxB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACpB,CAAC,YAAY,EAAE,aAAa,CAAC;YAC7B,CAAC,WAAW,EAAE,aAAa,CAAC;SACtB,EAAE,CAAC;YACT,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,KAAK,sBAAsB,IAAI,oBAAoB,CAAC,CAAC;gBAC9E,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QAED,uEAAuE;QACvE,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,cAAc,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,aAAa,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,uBAAuB,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,iFAAiF,CAAC,CAAC;YACvG,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,uEAAuE;QACvE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE/B,uEAAuE;QACvE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,6DAA6D,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA4C,CAAC;QAC3G,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,uDAAuD,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,oEAAoE;QACpE,MAAM,QAAQ,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC;QACvD,MAAM,OAAO,GAAG,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,wDAAwD,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,uEAAuE;QACvE,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACzF,MAAM,WAAW,GAA2B,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,WAAW,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC;QAED,OAAO;YACH,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,eAAe;YACxB,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAClE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;SACnC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,KAAM,GAAa,CAAC,OAAO,oBAAoB,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/mcpb.unzip.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Extracts every entry of the `.mcpb` archive at `mcpbPath` into `destDir`.
+ * `destDir` is created if missing. Entries whose resolved path would escape
+ * `destDir` (zip-slip) are rejected.
+ */
+export declare function unzipMcpb(mcpbPath: string, destDir: string): void;

package/dist/mcpb.unzip.js

@@ -0,0 +1,95 @@
+/**
+ * Minimal ZIP extractor for `.mcpb` bundles, built on `node:zlib` only.
+ *
+ * A `.mcpb` bundle is an ordinary ZIP archive. The broker deliberately avoids
+ * the `@anthropic-ai/mcpb` package so it stays compatible with the format
+ * without being coupled to Anthropic's tooling — hence this small reader.
+ *
+ * Supports the two compression methods used in practice: stored (0) and
+ * deflate (8). ZIP64 archives are rejected with a clear error (`.mcpb` bundles
+ * are small and never need it). Any trailing bytes after the End Of Central
+ * Directory record — e.g. a native PKCS#7 signature block — are ignored, since
+ * extraction is driven entirely by the central directory.
+ */
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { inflateRawSync } from "node:zlib";
+const EOCD_SIGNATURE = 0x06054b50;
+const CENTRAL_HEADER_SIGNATURE = 0x02014b50;
+const LOCAL_HEADER_SIGNATURE = 0x04034b50;
+/** Locates the End Of Central Directory record by scanning backwards. */
+function findEocd(buf) {
+    // The EOCD is 22 bytes plus a comment of up to 65535 bytes.
+    const minPos = Math.max(0, buf.length - 22 - 0xffff);
+    for (let pos = buf.length - 22; pos >= minPos; pos--) {
+        if (buf.readUInt32LE(pos) === EOCD_SIGNATURE)
+            return pos;
+    }
+    throw new Error("not a ZIP archive (no End Of Central Directory record found)");
+}
+/**
+ * Extracts every entry of the `.mcpb` archive at `mcpbPath` into `destDir`.
+ * `destDir` is created if missing. Entries whose resolved path would escape
+ * `destDir` (zip-slip) are rejected.
+ */
+export function unzipMcpb(mcpbPath, destDir) {
+    const buf = readFileSync(mcpbPath);
+    const eocd = findEocd(buf);
+    const totalEntries = buf.readUInt16LE(eocd + 10);
+    const centralDirOffset = buf.readUInt32LE(eocd + 16);
+    if (centralDirOffset === 0xffffffff || totalEntries === 0xffff) {
+        throw new Error("ZIP64 archives are not supported");
+    }
+    const absDest = resolve(destDir);
+    mkdirSync(absDest, { recursive: true });
+    let pos = centralDirOffset;
+    for (let i = 0; i < totalEntries; i++) {
+        if (buf.readUInt32LE(pos) !== CENTRAL_HEADER_SIGNATURE) {
+            throw new Error(`corrupt ZIP: bad central directory header at offset ${pos}`);
+        }
+        const method = buf.readUInt16LE(pos + 10);
+        const compressedSize = buf.readUInt32LE(pos + 20);
+        const uncompressedSize = buf.readUInt32LE(pos + 24);
+        const nameLen = buf.readUInt16LE(pos + 28);
+        const extraLen = buf.readUInt16LE(pos + 30);
+        const commentLen = buf.readUInt16LE(pos + 32);
+        const localHeaderOffset = buf.readUInt32LE(pos + 42);
+        const name = buf.toString("utf8", pos + 46, pos + 46 + nameLen);
+        pos += 46 + nameLen + extraLen + commentLen;
+        if (compressedSize === 0xffffffff || uncompressedSize === 0xffffffff || localHeaderOffset === 0xffffffff) {
+            throw new Error("ZIP64 archives are not supported");
+        }
+        // Resolve the destination path and reject zip-slip escapes.
+        const target = resolve(absDest, name);
+        const rel = relative(absDest, target);
+        if (rel.startsWith("..") || isAbsolute(rel)) {
+            throw new Error(`unsafe ZIP entry path (zip-slip): ${name}`);
+        }
+        // Directory entry.
+        if (name.endsWith("/")) {
+            mkdirSync(target, { recursive: true });
+            continue;
+        }
+        // Parse the local header to locate the entry's data.
+        if (buf.readUInt32LE(localHeaderOffset) !== LOCAL_HEADER_SIGNATURE) {
+            throw new Error(`corrupt ZIP: bad local header for "${name}"`);
+        }
+        const localNameLen = buf.readUInt16LE(localHeaderOffset + 26);
+        const localExtraLen = buf.readUInt16LE(localHeaderOffset + 28);
+        const dataStart = localHeaderOffset + 30 + localNameLen + localExtraLen;
+        const compressed = buf.subarray(dataStart, dataStart + compressedSize);
+        let data;
+        if (method === 0) {
+            data = compressed;
+        }
+        else if (method === 8) {
+            data = inflateRawSync(compressed);
+        }
+        else {
+            throw new Error(`unsupported ZIP compression method ${method} for "${name}"`);
+        }
+        mkdirSync(dirname(target), { recursive: true });
+        writeFileSync(target, data);
+    }
+}
+//# sourceMappingURL=mcpb.unzip.js.map

package/dist/mcpb.unzip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpb.unzip.js","sourceRoot":"","sources":["../src/mcpb.unzip.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAC5C,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAE1C,yEAAyE;AACzE,SAAS,QAAQ,CAAC,GAAW;IACzB,4DAA4D;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IACrD,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,GAAG,IAAI,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,cAAc;YAAE,OAAO,GAAG,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,OAAe;IACvD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE3B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACrD,IAAI,gBAAgB,KAAK,UAAU,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,IAAI,GAAG,GAAG,gBAAgB,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,wBAAwB,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,uDAAuD,GAAG,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAClD,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC9C,MAAM,iBAAiB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QAChE,GAAG,IAAI,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;QAE5C,IAAI,cAAc,KAAK,UAAU,IAAI,gBAAgB,KAAK,UAAU,IAAI,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACvG,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxD,CAAC;QAED,4DAA4D;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,SAAS;QACb,CAAC;QAED,qDAAqD;QACrD,IAAI,GAAG,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,sBAAsB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,iBAAiB,GAAG,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,iBAAiB,GAAG,EAAE,GAAG,YAAY,GAAG,aAAa,CAAC;QACxE,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,CAAC,CAAC;QAEvE,IAAI,IAAY,CAAC;QACjB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACf,IAAI,GAAG,UAAU,CAAC;QACtB,CAAC;aAAM,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,SAAS,IAAI,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;AACL,CAAC"}

package/dist/remote.transports.d.ts

@@ -0,0 +1,16 @@
+/** Lifecycle + callbacks shared by every remote client transport. */
+export interface RemoteTransport {
+    onMessage: ((data: string) => void) | null;
+    onOpen: (() => void) | null;
+    onClose: (() => void) | null;
+    onError: ((error: Error) => void) | null;
+    connect(): void;
+    send(data: string): void;
+    close(): void;
+}
+/** The three supported remote transports. */
+export type RemoteTransportKind = "streamable-http" | "sse" | "websocket";
+/** Builds the transport of the given kind. */
+export declare function createRemoteTransport(url: string, kind: RemoteTransportKind, headers: Record<string, string>): RemoteTransport;
+/** Heuristic transport detection from the URL when none is configured. */
+export declare function detectTransport(url: string): RemoteTransportKind;