@executioncontrolprotocol/cli 0.10.0 → 0.10.1

package/README.md

@@ -74,6 +74,23 @@ ecp describe --env examples/01-echo/environment.ts
 ecp search "echo" --env examples/01-echo/environment.ts
 ```
 
+### Local daemon (`ecp up`)
+
+Start a loopback HTTP daemon that bridges Ollama for the browser demo (CORS + Private Network Access), then open the demo with a pairing token:
+
+```sh
+ecp up
+# Opens https://executioncontrolprotocol.github.io/browser-demo/?token=<uuid>&bridge=http://127.0.0.1:3090
+
+ecp up --open-url http://localhost:5173/
+ecp up --no-open
+```
+
+- `GET /health` — `{ ok, version, ollamaReachable }` (no auth; used by the demo to enable Ollama)
+- `POST /v1/invoke` — Bearer token required; body `{ capability, input?, provider? }`
+
+Default port **3090** (ECP leet). The demo reads `?token=` (and optional `?bridge=`) automatically. Hosted HTTPS demos need **Chromium** (Chrome/Edge) for Private Network Access. Add extra page origins with `--cors-origin`.
+
 ### Encode / decode formats
 
 Encoding and decoding uses **format extensions** bound in your environment.

package/dist/commands/up.d.ts

@@ -0,0 +1,18 @@
+import { Command } from "@oclif/core";
+/** Start the local ECP daemon (bridges Ollama for the browser demo). */
+export default class Up extends Command {
+    static summary: string;
+    static description: string;
+    static examples: string[];
+    static flags: {
+        port: import("@oclif/core/interfaces").OptionFlag<number, import("@oclif/core/interfaces").CustomOptions>;
+        host: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "ollama-url": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        "cors-origin": import("@oclif/core/interfaces").OptionFlag<string[], import("@oclif/core/interfaces").CustomOptions>;
+        token: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        "open-url": import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        open: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=up.d.ts.map

package/dist/commands/up.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"up.d.ts","sourceRoot":"","sources":["../../src/commands/up.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAA;AAU5C,wEAAwE;AACxE,MAAM,CAAC,OAAO,OAAO,EAAG,SAAQ,OAAO;IACrC,MAAM,CAAC,OAAO,SAA+B;IAE7C,MAAM,CAAC,WAAW,SAEmE;IAErF,MAAM,CAAC,QAAQ,WAId;IAED,MAAM,CAAC,KAAK;;;;;;;;MA8BX;IAEK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmD3B"}

package/dist/commands/up.js

@@ -0,0 +1,95 @@
+import { randomUUID } from "node:crypto";
+import { Command, Flags } from "@oclif/core";
+import { DEFAULT_DEMO_OPEN_URL, DEFAULT_ECP_UP_HOST, DEFAULT_ECP_UP_PORT, DEFAULT_OLLAMA_URL, } from "../lib/up/constants.js";
+import { startEcpUpDaemon } from "../lib/up/create-daemon.js";
+import { buildDemoOpenUrl, openBrowserUrl, originFromUrl } from "../lib/up/open-browser.js";
+/** Start the local ECP daemon (bridges Ollama for the browser demo). */
+export default class Up extends Command {
+    static summary = "Start the local ECP daemon";
+    static description = "Run a loopback HTTP daemon that exposes ECP invoke for local Ollama " +
+        "(CORS + Private Network Access). Opens the browser demo with ?token= for pairing.";
+    static examples = [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --open-url http://localhost:5173/",
+        "<%= config.bin %> <%= command.id %> --no-open",
+    ];
+    static flags = {
+        port: Flags.integer({
+            description: "Listen port (ECP leet default 3090)",
+            default: DEFAULT_ECP_UP_PORT,
+        }),
+        host: Flags.string({
+            description: "Bind host (loopback only by default)",
+            default: DEFAULT_ECP_UP_HOST,
+        }),
+        "ollama-url": Flags.string({
+            description: "Ollama HTTP API base URL",
+            default: DEFAULT_OLLAMA_URL,
+        }),
+        "cors-origin": Flags.string({
+            description: "Extra allowed CORS origin (repeatable)",
+            multiple: true,
+            default: [],
+        }),
+        token: Flags.string({
+            description: "Pairing token for /v1/invoke (auto-generated if omitted)",
+        }),
+        "open-url": Flags.string({
+            description: "Browser demo URL to open with ?token= (pairing)",
+            default: DEFAULT_DEMO_OPEN_URL,
+        }),
+        open: Flags.boolean({
+            description: "Open the browser demo after the daemon starts",
+            allowNo: true,
+            default: true,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Up);
+        const token = flags.token ?? randomUUID();
+        const openUrl = flags["open-url"];
+        const openOrigin = originFromUrl(openUrl);
+        const corsOrigins = [
+            ...flags["cors-origin"],
+            ...(openOrigin ? [openOrigin] : []),
+        ];
+        const daemon = await startEcpUpDaemon({
+            port: flags.port,
+            host: flags.host,
+            ollamaUrl: flags["ollama-url"],
+            corsOrigins,
+            token,
+        });
+        const bridgeBaseURL = `http://${daemon.host}:${daemon.port}`;
+        const demoUrl = buildDemoOpenUrl(openUrl, {
+            token: daemon.token,
+            bridgeBaseURL,
+        });
+        this.log(`ECP daemon on ${bridgeBaseURL}`);
+        this.log(`Pairing token: ${daemon.token}`);
+        this.log("GET /health (no auth) · POST /v1/invoke (Bearer token)");
+        if (flags.open) {
+            this.log(`Opening ${demoUrl}`);
+            try {
+                openBrowserUrl(demoUrl);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                this.warn(`Could not open browser: ${message}`);
+                this.log(`Open manually: ${demoUrl}`);
+            }
+        }
+        else {
+            this.log(`Demo URL: ${demoUrl}`);
+        }
+        this.log("Press Ctrl+C to stop.");
+        await new Promise((resolve) => {
+            const shutdown = () => {
+                void daemon.close().finally(() => resolve());
+            };
+            process.once("SIGINT", shutdown);
+            process.once("SIGTERM", shutdown);
+        });
+    }
+}
+//# sourceMappingURL=up.js.map

package/dist/commands/up.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"up.js","sourceRoot":"","sources":["../../src/commands/up.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAE3F,wEAAwE;AACxE,MAAM,CAAC,OAAO,OAAO,EAAG,SAAQ,OAAO;IACrC,MAAM,CAAC,OAAO,GAAG,4BAA4B,CAAA;IAE7C,MAAM,CAAC,WAAW,GAChB,sEAAsE;QACtE,mFAAmF,CAAA;IAErF,MAAM,CAAC,QAAQ,GAAG;QAChB,qCAAqC;QACrC,uEAAuE;QACvE,+CAA+C;KAChD,CAAA;IAED,MAAM,CAAC,KAAK,GAAG;QACb,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClB,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE,mBAAmB;SAC7B,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,WAAW,EAAE,sCAAsC;YACnD,OAAO,EAAE,mBAAmB;SAC7B,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC;YACzB,WAAW,EAAE,0BAA0B;YACvC,OAAO,EAAE,kBAAkB;SAC5B,CAAC;QACF,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC;YAC1B,WAAW,EAAE,wCAAwC;YACrD,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,EAAE;SACZ,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,0DAA0D;SACxE,CAAC;QACF,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACvB,WAAW,EAAE,iDAAiD;YAC9D,OAAO,EAAE,qBAAqB;SAC/B,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;YAClB,WAAW,EAAE,+CAA+C;YAC5D,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;SACd,CAAC;KACH,CAAA;IAED,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;QACjC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,aAAa,CAAC;YACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC;YAC9B,WAAW;YACX,KAAK;SACN,CAAC,CAAA;QAEF,MAAM,aAAa,GAAG,UAAU,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAA;QAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE;YACxC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,aAAa;SACd,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,iBAAiB,aAAa,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;QAC1C,IAAI,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAA;QAElE,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAA;YAC9B,IAAI,CAAC;gBACH,cAAc,CAAC,OAAO,CAAC,CAAA;YACzB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAChE,IAAI,CAAC,IAAI,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAA;gBAC/C,IAAI,CAAC,GAAG,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,aAAa,OAAO,EAAE,CAAC,CAAA;QAClC,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAA;QAEjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;YAC9C,CAAC,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;YAChC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC"}

package/dist/lib/up/constants.d.ts

@@ -0,0 +1,15 @@
+/** Default loopback port for `ecp up` (ECP leet: E=3, C=0, P=9). @category CLI */
+export declare const DEFAULT_ECP_UP_PORT = 3090;
+/** Default bind host (loopback only). @category CLI */
+export declare const DEFAULT_ECP_UP_HOST = "127.0.0.1";
+/** Default Ollama HTTP API base URL. @category CLI */
+export declare const DEFAULT_OLLAMA_URL = "http://127.0.0.1:11434";
+/** Default browser demo URL opened by `ecp up`. @category CLI */
+export declare const DEFAULT_DEMO_OPEN_URL = "https://executioncontrolprotocol.github.io/browser-demo/";
+/** Built-in CORS origins for local Vite + hosted demo. @category CLI */
+export declare const DEFAULT_CORS_ORIGINS: readonly string[];
+/** JSON MIME type for daemon responses. @category CLI */
+export declare const JSON_MIME = "application/json";
+/** Daemon package version string for /health (from `@executioncontrolprotocol/cli` package.json). @category CLI */
+export declare const ECP_UP_VERSION: string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/lib/up/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/lib/up/constants.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,eAAO,MAAM,mBAAmB,OAAO,CAAA;AAEvC,uDAAuD;AACvD,eAAO,MAAM,mBAAmB,cAAc,CAAA;AAE9C,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,2BAA2B,CAAA;AAE1D,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,6DAA6D,CAAA;AAE/F,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAIjD,CAAA;AAED,yDAAyD;AACzD,eAAO,MAAM,SAAS,qBAAqB,CAAA;AAI3C,mHAAmH;AACnH,eAAO,MAAM,cAAc,QAAoE,CAAA"}

package/dist/lib/up/constants.js

@@ -0,0 +1,21 @@
+import { createRequire } from "node:module";
+/** Default loopback port for `ecp up` (ECP leet: E=3, C=0, P=9). @category CLI */
+export const DEFAULT_ECP_UP_PORT = 3090;
+/** Default bind host (loopback only). @category CLI */
+export const DEFAULT_ECP_UP_HOST = "127.0.0.1";
+/** Default Ollama HTTP API base URL. @category CLI */
+export const DEFAULT_OLLAMA_URL = "http://127.0.0.1:11434";
+/** Default browser demo URL opened by `ecp up`. @category CLI */
+export const DEFAULT_DEMO_OPEN_URL = "https://executioncontrolprotocol.github.io/browser-demo/";
+/** Built-in CORS origins for local Vite + hosted demo. @category CLI */
+export const DEFAULT_CORS_ORIGINS = [
+    "http://localhost:5173",
+    "http://127.0.0.1:5173",
+    "https://executioncontrolprotocol.github.io",
+];
+/** JSON MIME type for daemon responses. @category CLI */
+export const JSON_MIME = "application/json";
+const require = createRequire(import.meta.url);
+/** Daemon package version string for /health (from `@executioncontrolprotocol/cli` package.json). @category CLI */
+export const ECP_UP_VERSION = require("../../../package.json").version;
+//# sourceMappingURL=constants.js.map

package/dist/lib/up/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/lib/up/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C,kFAAkF;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAEvC,uDAAuD;AACvD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAA;AAE9C,sDAAsD;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAA;AAE1D,iEAAiE;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,0DAA0D,CAAA;AAE/F,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,uBAAuB;IACvB,uBAAuB;IACvB,4CAA4C;CAC7C,CAAA;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,SAAS,GAAG,kBAAkB,CAAA;AAE3C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAE9C,mHAAmH;AACnH,MAAM,CAAC,MAAM,cAAc,GAAI,OAAO,CAAC,uBAAuB,CAAyB,CAAC,OAAO,CAAA"}

package/dist/lib/up/cors.d.ts

@@ -0,0 +1,12 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/**
+ * Apply CORS + Private Network Access headers for Chromium loopback access.
+ * @category CLI
+ */
+export declare function setCorsAndPna(req: IncomingMessage, res: ServerResponse, allowOrigins: ReadonlySet<string>): void;
+/**
+ * Extract Bearer token from Authorization header.
+ * @category CLI
+ */
+export declare function readBearerToken(req: IncomingMessage): string | undefined;
+//# sourceMappingURL=cors.d.ts.map

package/dist/lib/up/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../../src/lib/up/cors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,IAAI,CAWN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAKxE"}

package/dist/lib/up/cors.js

@@ -0,0 +1,28 @@
+/**
+ * Apply CORS + Private Network Access headers for Chromium loopback access.
+ * @category CLI
+ */
+export function setCorsAndPna(req, res, allowOrigins) {
+    const origin = req.headers.origin;
+    if (typeof origin === "string" && allowOrigins.has(origin)) {
+        res.setHeader("Access-Control-Allow-Origin", origin);
+        res.setHeader("Vary", "Origin");
+    }
+    res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "Authorization, Content-Type");
+    if (req.headers["access-control-request-private-network"] === "true") {
+        res.setHeader("Access-Control-Allow-Private-Network", "true");
+    }
+}
+/**
+ * Extract Bearer token from Authorization header.
+ * @category CLI
+ */
+export function readBearerToken(req) {
+    const header = req.headers.authorization;
+    if (typeof header !== "string")
+        return undefined;
+    const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+    return match?.[1]?.trim() || undefined;
+}
+//# sourceMappingURL=cors.js.map

package/dist/lib/up/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../../src/lib/up/cors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAoB,EACpB,GAAmB,EACnB,YAAiC;IAEjC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;QACpD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAA;IACnE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,6BAA6B,CAAC,CAAA;IAC5E,IAAI,GAAG,CAAC,OAAO,CAAC,wCAAwC,CAAC,KAAK,MAAM,EAAE,CAAC;QACrE,GAAG,CAAC,SAAS,CAAC,sCAAsC,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAA;IACxC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACpD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;AACxC,CAAC"}

package/dist/lib/up/create-daemon.d.ts

@@ -0,0 +1,37 @@
+import { type Server } from "node:http";
+import type { Ecp } from "@executioncontrolprotocol/core";
+import "@executioncontrolprotocol/extension-ollama";
+/** Options for {@link startEcpUpDaemon}. @category CLI */
+export interface StartEcpUpDaemonOptions {
+    /** Listen port (default 3090). */
+    port?: number;
+    /** Bind host (default 127.0.0.1). */
+    host?: string;
+    /** Ollama API base URL. */
+    ollamaUrl?: string;
+    /** Extra CORS origins (merged with Vite defaults). */
+    corsOrigins?: string[];
+    /** Pairing token for `/v1/invoke`. */
+    token: string;
+}
+/** Result of starting the daemon. @category CLI */
+export interface EcpUpDaemon {
+    /** Listening HTTP server. */
+    server: Server;
+    /** Operational ECP instance. */
+    ecp: Ecp;
+    /** Resolved listen port. */
+    port: number;
+    /** Resolved bind host. */
+    host: string;
+    /** Pairing token. */
+    token: string;
+    /** Close the server and terminate ECP. */
+    close: () => Promise<void>;
+}
+/**
+ * Start the local ECP daemon (`ecp up`).
+ * @category CLI
+ */
+export declare function startEcpUpDaemon(options: StartEcpUpDaemonOptions): Promise<EcpUpDaemon>;
+//# sourceMappingURL=create-daemon.d.ts.map

package/dist/lib/up/create-daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-daemon.d.ts","sourceRoot":"","sources":["../../../src/lib/up/create-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAA;AAErD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAA;AACzD,OAAO,4CAA4C,CAAA;AAUnD,0DAA0D;AAC1D,MAAM,WAAW,uBAAuB;IACtC,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2BAA2B;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,gCAAgC;IAChC,GAAG,EAAE,GAAG,CAAA;IACR,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,0CAA0C;IAC1C,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC,CA0DtB"}

package/dist/lib/up/create-daemon.js

@@ -0,0 +1,63 @@
+import { createServer } from "node:http";
+import { environment, extension } from "@executioncontrolprotocol/node";
+import "@executioncontrolprotocol/extension-ollama";
+import { registerOllamaExtension } from "@executioncontrolprotocol/extension-ollama";
+import { DEFAULT_CORS_ORIGINS, DEFAULT_ECP_UP_HOST, DEFAULT_ECP_UP_PORT, DEFAULT_OLLAMA_URL, } from "./constants.js";
+import { createUpRequestHandler } from "./handle-request.js";
+/**
+ * Start the local ECP daemon (`ecp up`).
+ * @category CLI
+ */
+export async function startEcpUpDaemon(options) {
+    const port = options.port ?? DEFAULT_ECP_UP_PORT;
+    const host = options.host ?? DEFAULT_ECP_UP_HOST;
+    const ollamaUrl = options.ollamaUrl ?? DEFAULT_OLLAMA_URL;
+    const token = options.token;
+    await registerOllamaExtension();
+    const env = (await environment("ecp-up")).withExtensions([
+        extension("@executioncontrolprotocol/ollama").with({
+            baseURL: ollamaUrl,
+        }),
+    ]);
+    const ecp = await env.init();
+    const allowOrigins = new Set([
+        ...DEFAULT_CORS_ORIGINS,
+        ...(options.corsOrigins ?? []),
+    ]);
+    const handler = createUpRequestHandler({
+        ecp,
+        allowOrigins,
+        token,
+        ollamaUrl,
+    });
+    const server = createServer((req, res) => {
+        void handler(req, res).catch((err) => {
+            const message = err instanceof Error ? err.message : String(err);
+            if (!res.headersSent) {
+                res.writeHead(500, { "Content-Type": "application/json" });
+            }
+            res.end(JSON.stringify({ error: message }));
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, host, () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+    return {
+        server,
+        ecp,
+        port,
+        host,
+        token,
+        close: async () => {
+            await new Promise((resolve, reject) => {
+                server.close((err) => (err ? reject(err) : resolve()));
+            });
+            await ecp.terminate();
+        },
+    };
+}
+//# sourceMappingURL=create-daemon.js.map

package/dist/lib/up/create-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-daemon.js","sourceRoot":"","sources":["../../../src/lib/up/create-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAEvE,OAAO,4CAA4C,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAA;AACpF,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAgC5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAA;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAA;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAE3B,MAAM,uBAAuB,EAAE,CAAA;IAE/B,MAAM,GAAG,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;QACvD,SAAS,CAAC,kCAAkC,CAAC,CAAC,IAAI,CAAC;YACjD,OAAO,EAAE,SAAS;SACnB,CAAC;KACH,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAE5B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS;QACnC,GAAG,oBAAoB;QACvB,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;KAC/B,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,GAAG;QACH,YAAY;QACZ,KAAK;QACL,SAAS;KACV,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,KAAK,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC3B,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,GAAG;QACH,IAAI;QACJ,IAAI;QACJ,KAAK;QACL,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACxD,CAAC,CAAC,CAAA;YACF,MAAM,GAAG,CAAC,SAAS,EAAE,CAAA;QACvB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/lib/up/handle-request.d.ts

@@ -0,0 +1,19 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { Ecp } from "@executioncontrolprotocol/core";
+/** Dependencies for {@link createUpRequestHandler}. @category CLI */
+export interface UpRequestHandlerOptions {
+    /** Operational ECP instance. */
+    ecp: Ecp;
+    /** Allowlisted CORS origins. */
+    allowOrigins: ReadonlySet<string>;
+    /** Pairing token for `/v1/*`. */
+    token: string;
+    /** Ollama base URL used for `/health` reachability. */
+    ollamaUrl: string;
+}
+/**
+ * Create the HTTP request handler for `ecp up`.
+ * @category CLI
+ */
+export declare function createUpRequestHandler(options: UpRequestHandlerOptions): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+//# sourceMappingURL=handle-request.d.ts.map

package/dist/lib/up/handle-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-request.d.ts","sourceRoot":"","sources":["../../../src/lib/up/handle-request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAA;AAMzD,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,gCAAgC;IAChC,GAAG,EAAE,GAAG,CAAA;IACR,gCAAgC;IAChC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACjC,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAA;CAClB;AAQD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,IAInE,KAAK,eAAe,EACpB,KAAK,cAAc,KAClB,OAAO,CAAC,IAAI,CAAC,CA2DjB"}

package/dist/lib/up/handle-request.js

@@ -0,0 +1,74 @@
+import { listOllamaModels } from "@executioncontrolprotocol/extension-ollama";
+import { ECP_UP_VERSION, JSON_MIME } from "./constants.js";
+import { readBearerToken, setCorsAndPna } from "./cors.js";
+import { readRequestBody } from "./read-body.js";
+/**
+ * Create the HTTP request handler for `ecp up`.
+ * @category CLI
+ */
+export function createUpRequestHandler(options) {
+    const { ecp, allowOrigins, token, ollamaUrl } = options;
+    return async function handleUpRequest(req, res) {
+        setCorsAndPna(req, res, allowOrigins);
+        if (req.method === "OPTIONS") {
+            res.writeHead(204);
+            res.end();
+            return;
+        }
+        const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "127.0.0.1"}`);
+        const pathname = url.pathname;
+        if (req.method === "GET" && pathname === "/health") {
+            let ollamaReachable = false;
+            try {
+                await listOllamaModels(ollamaUrl, { signal: AbortSignal.timeout(2000) });
+                ollamaReachable = true;
+            }
+            catch {
+                ollamaReachable = false;
+            }
+            writeJson(res, 200, {
+                ok: true,
+                version: ECP_UP_VERSION,
+                ollamaReachable,
+            });
+            return;
+        }
+        if (req.method === "POST" && pathname === "/v1/invoke") {
+            const presented = readBearerToken(req);
+            if (!presented || presented !== token) {
+                writeJson(res, 401, { error: "Unauthorized" });
+                return;
+            }
+            let body;
+            try {
+                const raw = await readRequestBody(req);
+                body = raw.trim() ? JSON.parse(raw) : {};
+            }
+            catch {
+                writeJson(res, 400, { error: "Invalid JSON body" });
+                return;
+            }
+            if (typeof body.capability !== "string" || !body.capability.trim()) {
+                writeJson(res, 400, { error: "capability is required" });
+                return;
+            }
+            try {
+                const builder = ecp.invoke(body.capability).with(body.input ?? {});
+                const result = await (body.provider ? builder.uses(body.provider) : builder).process();
+                writeJson(res, 200, result);
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : String(err);
+                writeJson(res, 500, { error: message });
+            }
+            return;
+        }
+        writeJson(res, 404, { error: "Not found" });
+    };
+}
+function writeJson(res, status, body) {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, { "Content-Type": JSON_MIME });
+    res.end(payload);
+}
+//# sourceMappingURL=handle-request.js.map

package/dist/lib/up/handle-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-request.js","sourceRoot":"","sources":["../../../src/lib/up/handle-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAoBhD;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAEvD,OAAO,KAAK,UAAU,eAAe,CACnC,GAAoB,EACpB,GAAmB;QAEnB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QAErC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YAClB,GAAG,CAAC,GAAG,EAAE,CAAA;YACT,OAAM;QACR,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;QAChF,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;QAE7B,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnD,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACxE,eAAe,GAAG,IAAI,CAAA;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,eAAe,GAAG,KAAK,CAAA;YACzB,CAAC;YACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE;gBAClB,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,cAAc;gBACvB,eAAe;aAChB,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;YACtC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;gBACtC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;gBAC9C,OAAM;YACR,CAAC;YACD,IAAI,IAAgB,CAAA;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAA;gBACtC,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;gBACnD,OAAM;YACR,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAA;gBACxD,OAAM;YACR,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;gBAClE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAA;gBACtF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAChE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;YACzC,CAAC;YACD,OAAM;QACR,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IAC7C,CAAC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACpC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAA;IACpD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAClB,CAAC"}

package/dist/lib/up/open-browser.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Open a URL in the default browser (best-effort, fire-and-forget).
+ * @category CLI
+ */
+export declare function openBrowserUrl(url: string): void;
+/**
+ * Build the demo open URL with pairing token (and optional bridge base).
+ * @category CLI
+ */
+export declare function buildDemoOpenUrl(openUrl: string, options: {
+    token: string;
+    bridgeBaseURL?: string;
+}): string;
+/**
+ * Origin (scheme + host + port) for CORS allowlisting from an open URL.
+ * @category CLI
+ */
+export declare function originFromUrl(raw: string): string | undefined;
+//# sourceMappingURL=open-browser.d.ts.map

package/dist/lib/up/open-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-browser.d.ts","sourceRoot":"","sources":["../../../src/lib/up/open-browser.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAWhD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,MAAM,CAOR;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO7D"}

package/dist/lib/up/open-browser.js

@@ -0,0 +1,43 @@
+import { spawn } from "node:child_process";
+/**
+ * Open a URL in the default browser (best-effort, fire-and-forget).
+ * @category CLI
+ */
+export function openBrowserUrl(url) {
+    const platform = process.platform;
+    if (platform === "win32") {
+        spawn("cmd", ["/c", "start", "", url], { detached: true, stdio: "ignore" }).unref();
+        return;
+    }
+    if (platform === "darwin") {
+        spawn("open", [url], { detached: true, stdio: "ignore" }).unref();
+        return;
+    }
+    spawn("xdg-open", [url], { detached: true, stdio: "ignore" }).unref();
+}
+/**
+ * Build the demo open URL with pairing token (and optional bridge base).
+ * @category CLI
+ */
+export function buildDemoOpenUrl(openUrl, options) {
+    const url = new URL(openUrl);
+    url.searchParams.set("token", options.token);
+    if (options.bridgeBaseURL) {
+        url.searchParams.set("bridge", options.bridgeBaseURL);
+    }
+    return url.toString();
+}
+/**
+ * Origin (scheme + host + port) for CORS allowlisting from an open URL.
+ * @category CLI
+ */
+export function originFromUrl(raw) {
+    try {
+        const url = new URL(raw);
+        return url.origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=open-browser.js.map

package/dist/lib/up/open-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-browser.js","sourceRoot":"","sources":["../../../src/lib/up/open-browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAE1C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACjC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA;QACnF,OAAM;IACR,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA;QACjE,OAAM;IACR,CAAC;IACD,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,OAAkD;IAElD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACxB,OAAO,GAAG,CAAC,MAAM,CAAA;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/lib/up/read-body.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingMessage } from "node:http";
+/**
+ * Read the full request body as UTF-8 text.
+ * @category CLI
+ */
+export declare function readRequestBody(req: IncomingMessage): Promise<string>;
+//# sourceMappingURL=read-body.d.ts.map

package/dist/lib/up/read-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-body.d.ts","sourceRoot":"","sources":["../../../src/lib/up/read-body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD;;;GAGG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAM3E"}

package/dist/lib/up/read-body.js

@@ -0,0 +1,12 @@
+/**
+ * Read the full request body as UTF-8 text.
+ * @category CLI
+ */
+export async function readRequestBody(req) {
+    const chunks = [];
+    for await (const chunk of req) {
+        chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8");
+}
+//# sourceMappingURL=read-body.js.map

package/dist/lib/up/read-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-body.js","sourceRoot":"","sources":["../../../src/lib/up/read-body.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAoB;IACxD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AAC/C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@executioncontrolprotocol/cli",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "ECP command-line interface",
   "license": "Apache-2.0",
   "type": "module",
@@ -19,18 +19,19 @@
     "start": "node ./bin/dev.js"
   },
   "peerDependencies": {
-    "@executioncontrolprotocol/core": "^0.10.0",
-    "@executioncontrolprotocol/types": "^0.10.0",
+    "@executioncontrolprotocol/core": "^0.10.1",
+    "@executioncontrolprotocol/types": "^0.10.1",
     "zod": "^3.24.0"
   },
   "dependencies": {
-    "@executioncontrolprotocol/node": "0.10.0",
-    "@executioncontrolprotocol/secrets": "0.10.0",
+    "@executioncontrolprotocol/node": "0.10.1",
+    "@executioncontrolprotocol/secrets": "0.10.1",
+    "@executioncontrolprotocol/extension-ollama": "0.10.1",
     "@oclif/core": "^4.10.0"
   },
   "devDependencies": {
-    "@executioncontrolprotocol/core": "0.10.0",
-    "@executioncontrolprotocol/types": "0.10.0",
+    "@executioncontrolprotocol/core": "0.10.1",
+    "@executioncontrolprotocol/types": "0.10.1",
     "typescript": "^5.7.0",
     "zod": "^3.24.0"
   },