@mcpbridgeapp/cli 0.0.0-stage → 0.1.1

package/dist/connect.js

@@ -0,0 +1,124 @@
+import { hostname } from 'node:os';
+import { setTimeout as sleep } from 'node:timers/promises';
+import WebSocket from 'ws';
+import { PROTOCOL_VERSION, parseRelayMessage } from './protocol.js';
+import { executeTool } from './tools.js';
+const MIN_BACKOFF_MS = 1_000;
+const MAX_BACKOFF_MS = 30_000;
+/** http -> ws, https -> wss; a URL with no path gets the relay's agent endpoint. */
+export function toWebSocketUrl(relayUrl) {
+    const url = new URL(relayUrl);
+    if (url.protocol === 'http:')
+        url.protocol = 'ws:';
+    if (url.protocol === 'https:')
+        url.protocol = 'wss:';
+    if (url.pathname === '/' || url.pathname === '')
+        url.pathname = '/agent';
+    return url.toString();
+}
+/**
+ * Keeps this machine connected to a relay and answers the calls it forwards.
+ *
+ * <p>The connection is outbound, so nothing here listens on a port and no firewall rule is
+ * needed. Each forwarded call runs the same executeTool as the local MCP server, so a
+ * delegation behaves identically whether it arrived from a client on this machine or from
+ * one on the other side of the relay.
+ */
+export async function connectToRelay(options) {
+    const log = options.log ?? ((line) => process.stderr.write(`${line}\n`));
+    const url = toWebSocketUrl(options.relayUrl);
+    const device = (options.device ?? hostname()).slice(0, 80);
+    let backoff = MIN_BACKOFF_MS;
+    while (!options.signal?.aborted) {
+        const outcome = await runSession({ ...options, device, url, log });
+        if (outcome.stop || options.once)
+            return;
+        if (outcome.welcomed)
+            backoff = MIN_BACKOFF_MS;
+        const wait = backoff + Math.floor(Math.random() * 500);
+        log(`relay: disconnected (${outcome.reason}); reconnecting in ${Math.round(wait / 1000)}s`);
+        try {
+            await sleep(wait, undefined, { signal: options.signal });
+        }
+        catch {
+            return;
+        }
+        backoff = Math.min(backoff * 2, MAX_BACKOFF_MS);
+    }
+}
+async function runSession(options) {
+    const { context, log, device, url } = options;
+    const refreshMs = options.refreshMs ?? 60_000;
+    return new Promise((resolve) => {
+        let welcomed = false;
+        let settled = false;
+        let refreshTimer;
+        const finish = (outcome) => {
+            if (settled)
+                return;
+            settled = true;
+            options.onState?.({ connected: false, reason: outcome.reason });
+            if (refreshTimer)
+                clearInterval(refreshTimer);
+            options.signal?.removeEventListener('abort', onAbort);
+            resolve(outcome);
+        };
+        const socket = new WebSocket(url, { headers: { Authorization: `Bearer ${options.token}` } });
+        const send = (message) => {
+            if (socket.readyState === WebSocket.OPEN)
+                socket.send(JSON.stringify(message));
+        };
+        const onAbort = () => {
+            socket.close(1000, 'shutting down');
+            finish({ reason: 'aborted', welcomed, stop: true });
+        };
+        options.signal?.addEventListener('abort', onAbort, { once: true });
+        socket.on('open', async () => {
+            const agents = await context.registry.statuses();
+            send({ type: 'hello', protocol: PROTOCOL_VERSION, agentVersion: options.agentVersion, device, agents });
+            refreshTimer = setInterval(async () => {
+                send({ type: 'agents', agents: await context.registry.statuses() });
+            }, refreshMs);
+        });
+        socket.on('message', async (data) => {
+            const message = parseRelayMessage(data.toString());
+            if (!message) {
+                log('relay: ignoring a message it could not parse');
+                return;
+            }
+            switch (message.type) {
+                case 'welcome':
+                    welcomed = true;
+                    log(`relay: connected as device "${message.device}"`);
+                    options.onState?.({ connected: true, device: message.device });
+                    return;
+                case 'goodbye':
+                    log(`relay: ${message.reason}`);
+                    finish({ reason: message.reason, welcomed, stop: !message.retry });
+                    socket.close(1000);
+                    return;
+                case 'call': {
+                    // each call is independent; the concurrency limit inside executeTool is what
+                    // keeps a burst of them from running every agent at once
+                    try {
+                        const payload = await executeTool(message.tool, message.args, context);
+                        send({ type: 'result', id: message.id, ok: true, payload });
+                    }
+                    catch (error) {
+                        send({ type: 'result', id: message.id, ok: false, payload: error.message });
+                    }
+                    return;
+                }
+            }
+        });
+        socket.on('error', (error) => {
+            finish({ reason: error.message, welcomed, stop: false });
+        });
+        socket.on('close', (code, reasonBuffer) => {
+            const reason = reasonBuffer.toString() || `socket closed (${code})`;
+            // 4001 is the relay refusing the token: retrying with the same one is pointless
+            finish({ reason, welcomed, stop: code === 4001 });
+        });
+    });
+}
+//# sourceMappingURL=connect.js.map

package/dist/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,SAAS,MAAM,IAAI,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAqB,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,WAAW,EAAoB,MAAM,YAAY,CAAC;AAoB3D,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;IACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACzE,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,OAAO,GAAG,cAAc,CAAC;IAE7B,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO;QACzC,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,GAAG,cAAc,CAAC;QAE/C,MAAM,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;QACvD,GAAG,CAAC,wBAAwB,OAAO,CAAC,MAAM,sBAAsB,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AASD,KAAK,UAAU,UAAU,CACvB,OAAsF;IAEtF,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAE9C,OAAO,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,YAAwC,CAAC;QAC7C,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAE,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAChE,IAAI,YAAY;gBAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,CAAC,OAAqB,EAAE,EAAE;YACrC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YACpC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACjD,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACxG,YAAY,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;gBACpC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtE,CAAC,EAAE,SAAS,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,SAAS;oBACZ,QAAQ,GAAG,IAAI,CAAC;oBAChB,GAAG,CAAC,+BAA+B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;oBACtD,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC/D,OAAO;gBACT,KAAK,SAAS;oBACZ,GAAG,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAChC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBACnE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACnB,OAAO;gBACT,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,6EAA6E;oBAC7E,yDAAyD;oBACzD,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;wBACvE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC9D,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;oBACzF,CAAC;oBACD,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,kBAAkB,IAAI,GAAG,CAAC;YACpE,gFAAgF;YAChF,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,269 @@
+#!/usr/bin/env node
+import { spawn } from 'node:child_process';
+import { createServer as createHttpServer } from 'node:http';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { AgentRegistry } from './agents/registry.js';
+import { configPath, loadConfig } from './config.js';
+import { connectToRelay } from './connect.js';
+import { applySecretsToEnv, loadSecrets } from './secrets.js';
+import { startUi } from './ui/server.js';
+import { ConcurrencyLimit } from './limit.js';
+import { createServer } from './server.js';
+import { TaskStore } from './tasks.js';
+const VERSION = '0.1.0';
+function flag(argv, name) {
+    const index = argv.indexOf(name);
+    return index === -1 ? undefined : argv[index + 1];
+}
+const USAGE = `mcpbridgeapp - delegate work to another AI agent over MCP
+
+  mcpbridgeapp                   run as an MCP server over stdio (default)
+  mcpbridgeapp --http [port]     run as an HTTP server on 127.0.0.1 (default port 8808)
+  mcpbridgeapp --agents          print the configured agents and whether each is usable
+  mcpbridgeapp --ask <agent> <prompt>
+                                 delegate once from the terminal, to check an agent works
+                                 before wiring it into a client
+  mcpbridgeapp --example-config  print a starter config; JSON on stdout, notes on stderr
+  mcpbridgeapp ui [--port N] [--no-open]
+                                 open a control panel on this computer: add agents and
+                                 their keys, test them, connect to the relay, all without
+                                 a terminal
+  mcpbridgeapp connect --relay <url> --token <token> [--device <name>]
+                                 keep this machine connected to a hosted relay, so clients
+                                 anywhere can delegate to the CLIs signed in here
+  mcpbridgeapp --help
+
+Register it with a client once, e.g.
+
+  claude mcp add -s user mcpbridgeapp -- npx -y @mcpbridgeapp/cli
+
+Agents come from ${configPath()} when it exists, otherwise from built-in defaults.
+`;
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv.includes('--help') || argv.includes('-h')) {
+        process.stdout.write(USAGE);
+        return;
+    }
+    if (argv.includes('--example-config')) {
+        printExampleConfig();
+        return;
+    }
+    // keys and the relay token saved from `mcpbridgeapp ui` work in every command and window
+    let secrets = { keys: {} };
+    try {
+        secrets = loadSecrets();
+        applySecretsToEnv(secrets);
+    }
+    catch (error) {
+        console.error(`ignoring saved keys: ${error.message}`);
+    }
+    if (argv[0] === 'ui') {
+        const portFlag = flag(argv, '--port');
+        const port = portFlag === undefined ? 8809 : Number(portFlag);
+        if (!Number.isInteger(port) || port < 0 || port > 65535) {
+            console.error(`not a usable port: ${portFlag}`);
+            process.exitCode = 1;
+            return;
+        }
+        const ui = await startUi({ port, agentVersion: VERSION });
+        console.error(`mcpbridgeapp control panel: ${ui.url}`);
+        console.error('Keep this window open while you use it; Ctrl+C stops the page and the relay connection.');
+        if (!argv.includes('--no-open'))
+            openInBrowser(ui.url);
+        const stop = () => void ui.close().then(() => process.exit(0));
+        process.on('SIGINT', stop);
+        process.on('SIGTERM', stop);
+        return;
+    }
+    const { config, source } = loadConfig();
+    const registry = new AgentRegistry(config);
+    const limit = new ConcurrencyLimit(config.maxConcurrent);
+    const tasks = new TaskStore(limit);
+    if (argv.includes('--agents')) {
+        process.stdout.write(`agents from ${source}\n\n`);
+        for (const status of await registry.statuses()) {
+            process.stdout.write(`${status.available ? '✓' : '✗'} ${status.name.padEnd(10)} ${status.detail}\n`);
+            // only meaningful for an agent that can actually be used
+            if (status.available && !status.readsFiles) {
+                process.stdout.write(`${''.padEnd(13)}cannot read files — inline context in the prompt\n`);
+            }
+            else if (status.available) {
+                const may = [status.writesFiles ? 'edit files' : '', status.runsCommands ? 'run commands' : ''].filter(Boolean);
+                process.stdout.write(`${''.padEnd(13)}${may.length ? `may ${may.join(' and ')}` : 'read-only: reads and reports, cannot edit or run anything'}\n`);
+            }
+        }
+        return;
+    }
+    const askIndex = argv.indexOf('--ask');
+    if (askIndex !== -1) {
+        const name = argv[askIndex + 1];
+        const prompt = argv.slice(askIndex + 2).join(' ');
+        if (!name || !prompt) {
+            console.error('usage: mcpbridgeapp --ask <agent> <prompt>');
+            process.exitCode = 1;
+            return;
+        }
+        const agent = registry.find(name);
+        if (!agent) {
+            console.error(`no agent named "${name}". Available: ${registry.names().join(', ')}`);
+            process.exitCode = 1;
+            return;
+        }
+        process.stderr.write(`asking ${agent.name}...\n`);
+        const result = await limit.run(() => agent.run(prompt, { cwd: process.cwd() }));
+        if (result.output)
+            process.stdout.write(`${result.output}\n`);
+        if (result.notes)
+            process.stderr.write(`\nnote: ${result.notes}\n`);
+        if (!result.succeeded) {
+            process.stderr.write(`\nfailed after ${result.durationMs}ms: ${result.diagnostics}\n`);
+            process.exitCode = 1;
+            return;
+        }
+        process.stderr.write(`\nok in ${result.durationMs}ms\n`);
+        return;
+    }
+    if (argv[0] === 'connect') {
+        // flags, then the environment, then what `mcpbridgeapp ui` saved
+        const relay = flag(argv, '--relay') ?? process.env['MCPBRIDGE_RELAY'] ?? secrets.relay?.url;
+        const token = flag(argv, '--token') ?? process.env['MCPBRIDGE_TOKEN'] ?? secrets.relay?.token;
+        const device = flag(argv, '--device') ?? process.env['MCPBRIDGE_DEVICE'] ?? secrets.relay?.device;
+        if (!relay || !token) {
+            console.error('usage: mcpbridgeapp connect --relay <url> --token <token> [--device <name>]');
+            console.error('       (or set MCPBRIDGE_RELAY and MCPBRIDGE_TOKEN, or save them once in `mcpbridgeapp ui`)');
+            process.exitCode = 1;
+            return;
+        }
+        const controller = new AbortController();
+        process.on('SIGINT', () => controller.abort());
+        process.on('SIGTERM', () => controller.abort());
+        console.error(`mcpbridgeapp connecting to ${relay}, agents from ${source}`);
+        await connectToRelay({
+            relayUrl: relay,
+            token,
+            ...(device ? { device } : {}),
+            agentVersion: VERSION,
+            context: { registry, tasks, limit },
+            signal: controller.signal,
+        });
+        return;
+    }
+    const httpIndex = argv.indexOf('--http');
+    // anything left over is a mistake -- a typo, or a command this version does not have yet.
+    // Falling through to the stdio server would look like it worked while doing nothing asked.
+    const leftover = httpIndex === -1 ? argv : argv.filter((_, i) => i !== httpIndex && i !== httpIndex + 1);
+    if (leftover.length > 0) {
+        console.error(`mcpbridgeapp: unknown command or option: ${leftover.join(' ')}`);
+        console.error('Run `mcpbridgeapp --help` for the commands this version has. An older checkout may');
+        console.error('not have them yet: update it (git pull, then npm install) or use npx -y @mcpbridgeapp/cli.');
+        process.exitCode = 2;
+        return;
+    }
+    if (httpIndex === -1) {
+        // stdio: the transport owns stdout, so every diagnostic must go to stderr or it
+        // corrupts the protocol stream
+        console.error(`mcpbridgeapp on stdio, agents from ${source}`);
+        await createServer(registry, tasks, limit).connect(new StdioServerTransport());
+        return;
+    }
+    const port = Number(argv[httpIndex + 1] ?? 8808);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        console.error(`not a usable port: ${argv[httpIndex + 1]}`);
+        process.exitCode = 1;
+        return;
+    }
+    // Stateless: sessionIdGenerator is omitted, so nothing is kept between requests and a
+    // fresh server per request is correct.
+    const http = createHttpServer((req, res) => {
+        void (async () => {
+            if (!req.url?.startsWith('/mcp')) {
+                res.writeHead(404).end();
+                return;
+            }
+            const transport = new StreamableHTTPServerTransport({
+                // Loopback binding alone does not protect this server: a web page the user
+                // visits can make their browser POST to 127.0.0.1, which would run ask_agent
+                // on their machine. Rejecting unexpected Host headers is what stops that.
+                enableDnsRebindingProtection: true,
+                allowedHosts: [`127.0.0.1:${port}`, `localhost:${port}`],
+            });
+            res.on('close', () => void transport.close());
+            await createServer(registry, tasks, limit).connect(transport);
+            await transport.handleRequest(req, res);
+        })().catch((error) => {
+            console.error('request failed:', error.message);
+            if (!res.headersSent)
+                res.writeHead(500).end();
+        });
+    });
+    // Loopback only: reaching this server means running the configured commands, so a
+    // socket on 0.0.0.0 would hand that to the whole network.
+    http.listen(port, '127.0.0.1', () => {
+        console.error(`mcpbridgeapp on http://127.0.0.1:${port}/mcp, agents from ${source}`);
+    });
+}
+/**
+ * JSON on stdout, guidance on stderr, so `mcpbridgeapp --example-config > config.json` writes
+ * a usable file while the person still sees what to fill in.
+ */
+function printExampleConfig() {
+    const example = {
+        maxConcurrent: 2,
+        maxOutputChars: 60_000,
+        agents: {
+            claude: { command: ['claude', '-p'], promptVia: 'stdin', timeoutMs: 300_000 },
+            gemini: { command: ['gemini', '-p', '{prompt}'], timeoutMs: 300_000 },
+            local: { type: 'ollama', description: 'A model running in Ollama' },
+            grok: {
+                type: 'openai',
+                description: 'Grok, via the xAI API — no CLI exists, so this is the only route',
+                baseUrl: 'https://api.x.ai/v1',
+                apiKeyEnv: 'XAI_API_KEY',
+            },
+            openrouter: {
+                type: 'openai',
+                description: 'One key, many providers',
+                baseUrl: 'https://openrouter.ai/api/v1',
+                apiKeyEnv: 'OPENROUTER_API_KEY',
+            },
+        },
+    };
+    process.stdout.write(`${JSON.stringify(example, null, 2)}\n`);
+    process.stderr.write([
+        '',
+        `Save this to ${configPath()} and edit it.`,
+        '',
+        'The CLI agents need nothing but the tool installed and signed in.',
+        'The "openai" agents need a key, exported under the name in apiKeyEnv — never put the',
+        'key in this file, which is easy to copy into a repo or an issue by accident.',
+        '',
+        'The "openai" agents have no model set, so they report unavailable until you add one.',
+        'With the key exported, `mcpbridgeapp --agents` lists the ids that endpoint offers, where',
+        'the provider exposes a listing; otherwise take one from its documentation.',
+        '',
+    ].join('\n'));
+}
+/**
+ * Best effort: the address is printed either way. On Windows this goes through the URL
+ * protocol handler rather than `cmd /c start`, so nothing in the address meets cmd.exe.
+ */
+function openInBrowser(url) {
+    const [command, args] = process.platform === 'win32' ? ['rundll32', ['url.dll,FileProtocolHandler', url]]
+        : process.platform === 'darwin' ? ['open', [url]]
+            : ['xdg-open', [url]];
+    try {
+        const child = spawn(command, args, { detached: true, stdio: 'ignore' });
+        child.on('error', () => { });
+        child.unref();
+    }
+    catch {
+        // same
+    }
+}
+main().catch((error) => {
+    console.error(`mcpbridgeapp failed to start: ${error.message}`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAEnG,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAgB,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,IAAI,CAAC,IAAc,EAAE,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;mBAsBK,UAAU,EAAE;CAC9B,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,kBAAkB,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IAED,yFAAyF;IACzF,IAAI,OAAO,GAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,EAAE,CAAC;QACxB,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wBAAyB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QACzG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,MAAM,CAAC,CAAC;QAClD,KAAK,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,CAC/E,CAAC;YACF,yDAAyD;YACzD,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,oDAAoD,CAAC,CAAC;YAC7F,CAAC;iBAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,2DAA2D,IAAI,CAAC,CAAC;YACrJ,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,mBAAmB,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;YACvF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,UAAU,MAAM,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1B,iEAAiE;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;QAClG,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;YAC7F,OAAO,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC;YAC7G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,8BAA8B,KAAK,iBAAiB,MAAM,EAAE,CAAC,CAAC;QAC5E,MAAM,cAAc,CAAC;YACnB,QAAQ,EAAE,KAAK;YACf,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,YAAY,EAAE,OAAO;YACrB,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;YACnC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,0FAA0F;IAC1F,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,GAAG,CAAC,CAAC,CAAC;IACzG,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,4CAA4C,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACpG,OAAO,CAAC,KAAK,CAAC,4FAA4F,CAAC,CAAC;QAC5G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,gFAAgF;QAChF,+BAA+B;QAC/B,OAAO,CAAC,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;QAC9D,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,sFAAsF;IACtF,uCAAuC;IACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAClD,2EAA2E;gBAC3E,6EAA6E;gBAC7E,0EAA0E;gBAC1E,4BAA4B,EAAE,IAAI;gBAClC,YAAY,EAAE,CAAC,aAAa,IAAI,EAAE,EAAE,aAAa,IAAI,EAAE,CAAC;aACzD,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9C,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9D,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,kFAAkF;IAClF,0DAA0D;IAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,qBAAqB,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,MAAM;QACtB,MAAM,EAAE;YACN,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE;YAC7E,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE;YACrE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;YACnE,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,kEAAkE;gBAC/E,OAAO,EAAE,qBAAqB;gBAC9B,SAAS,EAAE,aAAa;aACzB;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yBAAyB;gBACtC,OAAO,EAAE,8BAA8B;gBACvC,SAAS,EAAE,oBAAoB;aAChC;SACF;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB;QACE,EAAE;QACF,gBAAgB,UAAU,EAAE,eAAe;QAC3C,EAAE;QACF,mEAAmE;QACnE,sFAAsF;QACtF,8EAA8E;QAC9E,EAAE;QACF,sFAAsF;QACtF,0FAA0F;QAC1F,4EAA4E;QAC5E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GACnB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAgB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA0D,CAAC,CAAC,CAAC;QACpF,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/limit.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Caps how many delegations run at once. Each one is a full model doing real work, so an
+ * unbounded number of them saturates the machine and spends the quota of whatever account
+ * is behind them — and a caller that decides to ask five agents at once has no idea how
+ * expensive that is.
+ */
+export declare class ConcurrencyLimit {
+    private readonly max;
+    private active;
+    private readonly waiting;
+    constructor(max: number);
+    get queueDepth(): number;
+    run<T>(work: () => Promise<T>): Promise<T>;
+}

package/dist/limit.js

@@ -0,0 +1,33 @@
+/**
+ * Caps how many delegations run at once. Each one is a full model doing real work, so an
+ * unbounded number of them saturates the machine and spends the quota of whatever account
+ * is behind them — and a caller that decides to ask five agents at once has no idea how
+ * expensive that is.
+ */
+export class ConcurrencyLimit {
+    max;
+    active = 0;
+    waiting = [];
+    constructor(max) {
+        this.max = max;
+        if (max < 1)
+            throw new Error('maxConcurrent must be at least 1');
+    }
+    get queueDepth() {
+        return this.waiting.length;
+    }
+    async run(work) {
+        if (this.active >= this.max) {
+            await new Promise((resolve) => this.waiting.push(resolve));
+        }
+        this.active += 1;
+        try {
+            return await work();
+        }
+        finally {
+            this.active -= 1;
+            this.waiting.shift()?.();
+        }
+    }
+}
+//# sourceMappingURL=limit.js.map

package/dist/limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limit.js","sourceRoot":"","sources":["../src/limit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IAIE;IAHrB,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAAmB,EAAE,CAAC;IAE9C,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;QACtC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAsB;QACjC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;CACF"}

package/dist/protocol.d.ts

@@ -0,0 +1,175 @@
+import { z } from 'zod';
+/**
+ * The wire protocol between a local agent (`mcpbridgeapp connect`, running where the AI CLIs
+ * are signed in) and a relay (the hosted endpoint clients talk to). JSON messages over a
+ * WebSocket the agent opens outbound, so nothing on the user's machine listens.
+ *
+ * The relay only ever forwards: it never sees a credential, only prompts and answers.
+ */
+export declare const PROTOCOL_VERSION: 1;
+export declare const AgentStatusSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodString;
+    requires: z.ZodString;
+    available: z.ZodBoolean;
+    readsFiles: z.ZodBoolean;
+    detail: z.ZodString;
+    status: z.ZodOptional<z.ZodString>;
+    writesFiles: z.ZodOptional<z.ZodBoolean>;
+    runsCommands: z.ZodOptional<z.ZodBoolean>;
+    timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+    lastError: z.ZodOptional<z.ZodString>;
+    lastErrorAt: z.ZodOptional<z.ZodString>;
+    retryAt: z.ZodOptional<z.ZodString>;
+    lastSuccessAt: z.ZodOptional<z.ZodString>;
+    calls: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type AgentStatus = z.infer<typeof AgentStatusSchema>;
+export declare const TOOL_NAME: z.ZodEnum<{
+    list_agents: "list_agents";
+    ask_agent: "ask_agent";
+    start_task: "start_task";
+    get_task: "get_task";
+}>;
+/** First message after the socket opens. */
+export declare const HelloMessage: z.ZodObject<{
+    type: z.ZodLiteral<"hello">;
+    protocol: z.ZodLiteral<1>;
+    agentVersion: z.ZodString;
+    device: z.ZodString;
+    agents: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        requires: z.ZodString;
+        available: z.ZodBoolean;
+        readsFiles: z.ZodBoolean;
+        detail: z.ZodString;
+        status: z.ZodOptional<z.ZodString>;
+        writesFiles: z.ZodOptional<z.ZodBoolean>;
+        runsCommands: z.ZodOptional<z.ZodBoolean>;
+        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+        lastError: z.ZodOptional<z.ZodString>;
+        lastErrorAt: z.ZodOptional<z.ZodString>;
+        retryAt: z.ZodOptional<z.ZodString>;
+        lastSuccessAt: z.ZodOptional<z.ZodString>;
+        calls: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** A refreshed agent list, so a dashboard can show what is installed without a call. */
+export declare const AgentsMessage: z.ZodObject<{
+    type: z.ZodLiteral<"agents">;
+    agents: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        requires: z.ZodString;
+        available: z.ZodBoolean;
+        readsFiles: z.ZodBoolean;
+        detail: z.ZodString;
+        status: z.ZodOptional<z.ZodString>;
+        writesFiles: z.ZodOptional<z.ZodBoolean>;
+        runsCommands: z.ZodOptional<z.ZodBoolean>;
+        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+        lastError: z.ZodOptional<z.ZodString>;
+        lastErrorAt: z.ZodOptional<z.ZodString>;
+        retryAt: z.ZodOptional<z.ZodString>;
+        lastSuccessAt: z.ZodOptional<z.ZodString>;
+        calls: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/** The answer to a call. `ok: false` means the tool itself threw; `payload` is the message. */
+export declare const ResultMessage: z.ZodObject<{
+    type: z.ZodLiteral<"result">;
+    id: z.ZodString;
+    ok: z.ZodBoolean;
+    payload: z.ZodUnknown;
+}, z.core.$strip>;
+export declare const AgentToRelay: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"hello">;
+    protocol: z.ZodLiteral<1>;
+    agentVersion: z.ZodString;
+    device: z.ZodString;
+    agents: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        requires: z.ZodString;
+        available: z.ZodBoolean;
+        readsFiles: z.ZodBoolean;
+        detail: z.ZodString;
+        status: z.ZodOptional<z.ZodString>;
+        writesFiles: z.ZodOptional<z.ZodBoolean>;
+        runsCommands: z.ZodOptional<z.ZodBoolean>;
+        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+        lastError: z.ZodOptional<z.ZodString>;
+        lastErrorAt: z.ZodOptional<z.ZodString>;
+        retryAt: z.ZodOptional<z.ZodString>;
+        lastSuccessAt: z.ZodOptional<z.ZodString>;
+        calls: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"agents">;
+    agents: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        requires: z.ZodString;
+        available: z.ZodBoolean;
+        readsFiles: z.ZodBoolean;
+        detail: z.ZodString;
+        status: z.ZodOptional<z.ZodString>;
+        writesFiles: z.ZodOptional<z.ZodBoolean>;
+        runsCommands: z.ZodOptional<z.ZodBoolean>;
+        timeoutSeconds: z.ZodOptional<z.ZodNumber>;
+        lastError: z.ZodOptional<z.ZodString>;
+        lastErrorAt: z.ZodOptional<z.ZodString>;
+        retryAt: z.ZodOptional<z.ZodString>;
+        lastSuccessAt: z.ZodOptional<z.ZodString>;
+        calls: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"result">;
+    id: z.ZodString;
+    ok: z.ZodBoolean;
+    payload: z.ZodUnknown;
+}, z.core.$strip>], "type">;
+export type AgentToRelay = z.infer<typeof AgentToRelay>;
+export declare const WelcomeMessage: z.ZodObject<{
+    type: z.ZodLiteral<"welcome">;
+    device: z.ZodString;
+}, z.core.$strip>;
+export declare const CallMessage: z.ZodObject<{
+    type: z.ZodLiteral<"call">;
+    id: z.ZodString;
+    tool: z.ZodEnum<{
+        list_agents: "list_agents";
+        ask_agent: "ask_agent";
+        start_task: "start_task";
+        get_task: "get_task";
+    }>;
+    args: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>;
+/** Sent before the relay closes the socket on purpose, so the agent knows not to retry. */
+export declare const GoodbyeMessage: z.ZodObject<{
+    type: z.ZodLiteral<"goodbye">;
+    reason: z.ZodString;
+    retry: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const RelayToAgent: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"welcome">;
+    device: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"call">;
+    id: z.ZodString;
+    tool: z.ZodEnum<{
+        list_agents: "list_agents";
+        ask_agent: "ask_agent";
+        start_task: "start_task";
+        get_task: "get_task";
+    }>;
+    args: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"goodbye">;
+    reason: z.ZodString;
+    retry: z.ZodBoolean;
+}, z.core.$strip>], "type">;
+export type RelayToAgent = z.infer<typeof RelayToAgent>;
+export declare function parseAgentMessage(raw: string): AgentToRelay | null;
+export declare function parseRelayMessage(raw: string): RelayToAgent | null;