@nekzus/liop 2.1.0-alpha.4 → 2.1.0-alpha.6

package/dist/chunk-72MNYFR6.js

@@ -0,0 +1,64 @@
+// src/utils/logger.ts
+var LiopLogger = class _LiopLogger {
+  static instance;
+  level = "info";
+  constructor() {
+    this.setLevelFromEnv();
+  }
+  static getInstance() {
+    if (!_LiopLogger.instance) {
+      _LiopLogger.instance = new _LiopLogger();
+    }
+    return _LiopLogger.instance;
+  }
+  setLevelFromEnv() {
+    const envLevel = process.env.LIOP_LOG_LEVEL?.toLowerCase();
+    if (envLevel === "silent" || envLevel === "error" || envLevel === "warn" || envLevel === "info" || envLevel === "debug") {
+      this.level = envLevel;
+    } else {
+      this.level = "info";
+    }
+  }
+  setLevel(level) {
+    this.level = level;
+  }
+  shouldLog(targetLevel) {
+    const levels = {
+      silent: 0,
+      error: 1,
+      warn: 2,
+      info: 3,
+      debug: 4
+    };
+    return levels[this.level] >= levels[targetLevel];
+  }
+  formatMessage(level, message) {
+    const ts = (/* @__PURE__ */ new Date()).toISOString();
+    return `[${ts}] [${level}] ${message}`;
+  }
+  error(message, ...args) {
+    if (this.shouldLog("error")) {
+      console.error(this.formatMessage("ERROR", message), ...args);
+    }
+  }
+  warn(message, ...args) {
+    if (this.shouldLog("warn")) {
+      console.error(this.formatMessage("WARN", message), ...args);
+    }
+  }
+  info(message, ...args) {
+    if (this.shouldLog("info")) {
+      console.error(this.formatMessage("INFO", message), ...args);
+    }
+  }
+  debug(message, ...args) {
+    if (this.shouldLog("debug")) {
+      console.error(this.formatMessage("DEBUG", message), ...args);
+    }
+  }
+};
+var log = LiopLogger.getInstance();
+
+export { log };
+//# sourceMappingURL=chunk-72MNYFR6.js.map
+//# sourceMappingURL=chunk-72MNYFR6.js.map

package/dist/chunk-72MNYFR6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/logger.ts"],"names":[],"mappings":";AAOO,IAAM,UAAA,GAAN,MAAM,WAAA,CAAW;AAAA,EACvB,OAAe,QAAA;AAAA,EACP,KAAA,GAAkB,MAAA;AAAA,EAElB,WAAA,GAAc;AACrB,IAAA,IAAA,CAAK,eAAA,EAAgB;AAAA,EACtB;AAAA,EAEA,OAAc,WAAA,GAA0B;AACvC,IAAA,IAAI,CAAC,YAAW,QAAA,EAAU;AACzB,MAAA,WAAA,CAAW,QAAA,GAAW,IAAI,WAAA,EAAW;AAAA,IACtC;AACA,IAAA,OAAO,WAAA,CAAW,QAAA;AAAA,EACnB;AAAA,EAEQ,eAAA,GAAkB;AACzB,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,EAAgB,WAAA,EAAY;AACzD,IAAA,IACC,QAAA,KAAa,YACb,QAAA,KAAa,OAAA,IACb,aAAa,MAAA,IACb,QAAA,KAAa,MAAA,IACb,QAAA,KAAa,OAAA,EACZ;AACD,MAAA,IAAA,CAAK,KAAA,GAAQ,QAAA;AAAA,IACd,CAAA,MAAO;AAEN,MAAA,IAAA,CAAK,KAAA,GAAQ,MAAA;AAAA,IACd;AAAA,EACD;AAAA,EAEO,SAAS,KAAA,EAAiB;AAChC,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACd;AAAA,EAEQ,UAAU,WAAA,EAAgC;AACjD,IAAA,MAAM,MAAA,GAAmC;AAAA,MACxC,MAAA,EAAQ,CAAA;AAAA,MACR,KAAA,EAAO,CAAA;AAAA,MACP,IAAA,EAAM,CAAA;AAAA,MACN,IAAA,EAAM,CAAA;AAAA,MACN,KAAA,EAAO;AAAA,KACR;AACA,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,IAAK,OAAO,WAAW,CAAA;AAAA,EAChD;AAAA,EAEQ,aAAA,CAAc,OAAe,OAAA,EAAyB;AAC7D,IAAA,MAAM,EAAA,GAAA,iBAAK,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAClC,IAAA,OAAO,CAAA,CAAA,EAAI,EAAE,CAAA,GAAA,EAAM,KAAK,KAAK,OAAO,CAAA,CAAA;AAAA,EACrC;AAAA,EAEO,KAAA,CAAM,YAAoB,IAAA,EAAiB;AACjD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG;AAC5B,MAAA,OAAA,CAAQ,MAAM,IAAA,CAAK,aAAA,CAAc,SAAS,OAAO,CAAA,EAAG,GAAG,IAAI,CAAA;AAAA,IAC5D;AAAA,EACD;AAAA,EAEO,IAAA,CAAK,YAAoB,IAAA,EAAiB;AAChD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,MAAM,IAAA,CAAK,aAAA,CAAc,QAAQ,OAAO,CAAA,EAAG,GAAG,IAAI,CAAA;AAAA,IAC3D;AAAA,EACD;AAAA,EAEO,IAAA,CAAK,YAAoB,IAAA,EAAiB;AAChD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA,EAAG;AAC3B,MAAA,OAAA,CAAQ,MAAM,IAAA,CAAK,aAAA,CAAc,QAAQ,OAAO,CAAA,EAAG,GAAG,IAAI,CAAA;AAAA,IAC3D;AAAA,EACD;AAAA,EAEO,KAAA,CAAM,YAAoB,IAAA,EAAiB;AACjD,IAAA,IAAI,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG;AAC5B,MAAA,OAAA,CAAQ,MAAM,IAAA,CAAK,aAAA,CAAc,SAAS,OAAO,CAAA,EAAG,GAAG,IAAI,CAAA;AAAA,IAC5D;AAAA,EACD;AACD,CAAA;AAEO,IAAM,GAAA,GAAM,WAAW,WAAA","file":"chunk-72MNYFR6.js","sourcesContent":["export type LogLevel = \"silent\" | \"error\" | \"warn\" | \"info\" | \"debug\";\n\n/**\n * LiopLogger - Structured Logging Abstraction\n * Configurable via `process.env.LIOP_LOG_LEVEL`.\n * Emits strictly to stderr to comply with MCP stdio protocols.\n */\nexport class LiopLogger {\n\tprivate static instance: LiopLogger;\n\tprivate level: LogLevel = \"info\";\n\n\tprivate constructor() {\n\t\tthis.setLevelFromEnv();\n\t}\n\n\tpublic static getInstance(): LiopLogger {\n\t\tif (!LiopLogger.instance) {\n\t\t\tLiopLogger.instance = new LiopLogger();\n\t\t}\n\t\treturn LiopLogger.instance;\n\t}\n\n\tprivate setLevelFromEnv() {\n\t\tconst envLevel = process.env.LIOP_LOG_LEVEL?.toLowerCase();\n\t\tif (\n\t\t\tenvLevel === \"silent\" ||\n\t\t\tenvLevel === \"error\" ||\n\t\t\tenvLevel === \"warn\" ||\n\t\t\tenvLevel === \"info\" ||\n\t\t\tenvLevel === \"debug\"\n\t\t) {\n\t\t\tthis.level = envLevel as LogLevel;\n\t\t} else {\n\t\t\t// Default level: info\n\t\t\tthis.level = \"info\";\n\t\t}\n\t}\n\n\tpublic setLevel(level: LogLevel) {\n\t\tthis.level = level;\n\t}\n\n\tprivate shouldLog(targetLevel: LogLevel): boolean {\n\t\tconst levels: Record<LogLevel, number> = {\n\t\t\tsilent: 0,\n\t\t\terror: 1,\n\t\t\twarn: 2,\n\t\t\tinfo: 3,\n\t\t\tdebug: 4,\n\t\t};\n\t\treturn levels[this.level] >= levels[targetLevel];\n\t}\n\n\tprivate formatMessage(level: string, message: string): string {\n\t\tconst ts = new Date().toISOString();\n\t\treturn `[${ts}] [${level}] ${message}`;\n\t}\n\n\tpublic error(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"error\")) {\n\t\t\tconsole.error(this.formatMessage(\"ERROR\", message), ...args);\n\t\t}\n\t}\n\n\tpublic warn(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"warn\")) {\n\t\t\tconsole.error(this.formatMessage(\"WARN\", message), ...args);\n\t\t}\n\t}\n\n\tpublic info(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"info\")) {\n\t\t\tconsole.error(this.formatMessage(\"INFO\", message), ...args);\n\t\t}\n\t}\n\n\tpublic debug(message: string, ...args: unknown[]) {\n\t\tif (this.shouldLog(\"debug\")) {\n\t\t\tconsole.error(this.formatMessage(\"DEBUG\", message), ...args);\n\t\t}\n\t}\n}\n\nexport const log = LiopLogger.getInstance();\n"]}

package/dist/chunk-AL7H7DTW.js

@@ -0,0 +1,463 @@
+import { log } from './chunk-72MNYFR6.js';
+import { randomUUID } from 'crypto';
+import { serve } from '@hono/node-server';
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+
+var DEFAULT_MAX_SESSIONS_PER_IP = 10;
+var DEFAULT_SESSION_TIMEOUT_MS = 30 * 60 * 1e3;
+var EVICTION_INTERVAL_MS = 60 * 1e3;
+var LiopStreamBridge = class {
+  constructor(internalServer, options = {}) {
+    this.options = options;
+    this.app = new Hono();
+    this.bridgeLogic = new LiopMcpBridge(internalServer);
+    this.activeSessions = /* @__PURE__ */ new Map();
+    this.maxSessionsPerIp = options.maxSessionsPerIp ?? DEFAULT_MAX_SESSIONS_PER_IP;
+    this.sessionTimeoutMs = options.sessionTimeoutMs ?? DEFAULT_SESSION_TIMEOUT_MS;
+    this.setupRoutes();
+  }
+  app;
+  httpServer = null;
+  bridgeLogic;
+  activeSessions;
+  evictionTimer = null;
+  maxSessionsPerIp;
+  sessionTimeoutMs;
+  /**
+   * Creates a new per-session transport instance and wires it to the LIOPMcpBridge logic.
+   */
+  async createSessionTransport(clientIp) {
+    const { WebStandardStreamableHTTPServerTransport } = await import('@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js');
+    const transport = new WebStandardStreamableHTTPServerTransport({
+      sessionIdGenerator: () => randomUUID(),
+      onsessioninitialized: (sessionId) => {
+        this.activeSessions.set(sessionId, {
+          transport,
+          lastActivity: Date.now(),
+          clientIp
+        });
+        log.info(
+          `[LIOP-StreamBridge] Session opened: ${sessionId} (IP: ${clientIp})`
+        );
+      }
+    });
+    transport.onmessage = async (message) => {
+      if (transport.sessionId) {
+        const entry = this.activeSessions.get(transport.sessionId);
+        if (entry) entry.lastActivity = Date.now();
+      }
+      try {
+        const result = await this.bridgeLogic.handleJsonRpcRequest(
+          message
+        );
+        if (result !== void 0) {
+          await transport.send(result);
+        }
+      } catch (err) {
+        log.info("[LIOP-StreamBridge] JSON-RPC error:", err.message);
+      }
+    };
+    transport.onclose = () => {
+      if (transport.sessionId) {
+        this.activeSessions.delete(transport.sessionId);
+        log.info(`[LIOP-StreamBridge] Session closed: ${transport.sessionId}`);
+      }
+    };
+    return transport;
+  }
+  /**
+   * Returns the number of active sessions for a given IP.
+   */
+  countSessionsByIp(ip) {
+    let count = 0;
+    for (const entry of this.activeSessions.values()) {
+      if (entry.clientIp === ip) count++;
+    }
+    return count;
+  }
+  /**
+   * Extracts client IP from the request (supports X-Forwarded-For for reverse proxies).
+   */
+  getClientIp(c) {
+    return c.req.header("x-forwarded-for")?.split(",")[0]?.trim() || c.req.header("x-real-ip") || "unknown";
+  }
+  /**
+   * Evicts sessions that have been idle longer than the configured timeout.
+   */
+  evictIdleSessions() {
+    const now = Date.now();
+    for (const [sessionId, entry] of this.activeSessions) {
+      if (now - entry.lastActivity > this.sessionTimeoutMs) {
+        log.info(`[LIOP-StreamBridge] Evicting idle session: ${sessionId}`);
+        entry.transport.close().catch(() => {
+        });
+        this.activeSessions.delete(sessionId);
+      }
+    }
+  }
+  setupRoutes() {
+    this.app.use("*", cors());
+    if (!process.env.ZERO_TRUST_TOKEN) {
+      process.env.ZERO_TRUST_TOKEN = randomUUID();
+      log.info("=".repeat(60));
+      log.info("\u26A0\uFE0F STRICT ZERO-TRUST MODE ENABLED \u26A0\uFE0F");
+      log.info("No ZERO_TRUST_TOKEN found in environment.");
+      log.info("A secure ephemeral token has been generated for this session:");
+      log.info(`Token: ${process.env.ZERO_TRUST_TOKEN}`);
+      log.info("=".repeat(60));
+    }
+    this.app.use("/mcp", async (c, next) => {
+      const auth = c.req.header("Authorization");
+      if (!auth?.startsWith("Bearer ")) {
+        return c.json(
+          { error: "Unauthorized: LIOP Zero-Trust Policy Enforced" },
+          401
+        );
+      }
+      const token = auth.slice(7);
+      const expectedToken = process.env.ZERO_TRUST_TOKEN;
+      if (expectedToken && token === expectedToken) {
+        await next();
+        return;
+      }
+      const jwtValidator = this.bridgeLogic.getServer()?.jwtValidator;
+      if (jwtValidator) {
+        try {
+          await jwtValidator.validate(token);
+          await next();
+          return;
+        } catch (e) {
+          log.info(
+            `[LIOP-StreamBridge] JWT Validation failed: ${e.message}`
+          );
+          return c.json(
+            {
+              error: `Unauthorized: JWT Validation failed - ${e.message}`
+            },
+            401
+          );
+        }
+      }
+      log.info(
+        "[LIOP-StreamBridge] ALERT: Access denied - Invalid Zero-Trust token."
+      );
+      return c.json(
+        { error: "Unauthorized: LIOP Zero-Trust Policy Enforced" },
+        401
+      );
+    });
+    this.app.all("/mcp", async (c) => {
+      const sessionId = c.req.header("mcp-session-id");
+      if (sessionId) {
+        const existing = this.activeSessions.get(sessionId);
+        if (!existing) {
+          return c.json({ error: "Session not found" }, 404);
+        }
+        existing.lastActivity = Date.now();
+        const response = await existing.transport.handleRequest(c.req.raw);
+        if (c.req.method === "DELETE") {
+          this.activeSessions.delete(sessionId);
+          log.info(`[LIOP-StreamBridge] Session closed (DELETE): ${sessionId}`);
+        }
+        return response;
+      }
+      const clientIp = this.getClientIp(c);
+      const currentSessions = this.countSessionsByIp(clientIp);
+      if (currentSessions >= this.maxSessionsPerIp) {
+        log.info(
+          `[LIOP-StreamBridge] Rate limit hit for IP: ${clientIp} (${currentSessions} sessions)`
+        );
+        return c.json({ error: "Too Many Sessions: Rate limit exceeded" }, 429);
+      }
+      const transport = await this.createSessionTransport(clientIp);
+      return await transport.handleRequest(c.req.raw);
+    });
+  }
+  /**
+   * Starts the LiopStreamBridge HTTP server and session eviction timer.
+   */
+  async start(port) {
+    const listenPort = port ?? this.options.port ?? 3e3;
+    this.evictionTimer = setInterval(
+      () => this.evictIdleSessions(),
+      EVICTION_INTERVAL_MS
+    );
+    return new Promise((resolve) => {
+      this.httpServer = serve(
+        {
+          fetch: this.app.fetch,
+          port: listenPort
+        },
+        (info) => {
+          log.info(
+            `[LIOP-StreamBridge] Streamable HTTP Gateway on http://localhost:${info.port}/mcp`
+          );
+          resolve();
+        }
+      );
+    });
+  }
+  /**
+   * Graceful shutdown — closes all active sessions, stops timers, and releases port.
+   */
+  async stop() {
+    if (this.evictionTimer) {
+      clearInterval(this.evictionTimer);
+      this.evictionTimer = null;
+    }
+    for (const [id, entry] of this.activeSessions) {
+      await entry.transport.close();
+      this.activeSessions.delete(id);
+    }
+    if (this.httpServer) {
+      this.httpServer.close();
+      log.info("[LIOP-StreamBridge] HTTP ports released.");
+    }
+  }
+};
+
+// src/bridge/index.ts
+var LiopMcpBridge = class {
+  constructor(source, options = {}) {
+    this.options = options;
+    if (source?.constructor?.name === "LiopServer") {
+      this.liopServer = source;
+      log.info("[LIOP-Bridge] Mode: EXPOSE (LIOP -> MCP Stdio)");
+    } else if (source?.constructor?.name === "McpServer") {
+      this.legacyMcpServer = source;
+      log.info("[LIOP-Bridge] Mode: WRAP (Legacy MCP -> LIOP Mesh)");
+    } else {
+      this.legacyMcpServer = source;
+      log.info("[LIOP-Bridge] Mode: WRAP (Inferred Legacy MCP -> LIOP Mesh)");
+    }
+  }
+  liopServer = null;
+  legacyMcpServer = null;
+  /**
+   * Handles an incoming standard MCP JSON-RPC 2.0 payload.
+   * Pipes it to the underlying server (LIOP or Legacy MCP).
+   */
+  async handleJsonRpcRequest(payload) {
+    const id = payload.id;
+    const method = payload.method;
+    const params = payload.params;
+    if (payload.jsonrpc !== "2.0") {
+      return this.errorResponse(id, -32600, "Invalid Request");
+    }
+    if (this.liopServer) {
+      return this.handleLiopToMcp(id, method, params);
+    }
+    if (this.legacyMcpServer && this.liopServer) {
+      return this.handleLiopToMcp(id, method, params);
+    }
+    return this.errorResponse(id, -32601, "Bridge source not configured");
+  }
+  async handleLiopToMcp(id, method, params) {
+    if (!this.liopServer) return null;
+    if (method === "initialize") {
+      return this.successResponse(id, {
+        protocolVersion: "2025-11-25",
+        capabilities: {
+          prompts: {},
+          resources: {},
+          tools: {}
+        },
+        serverInfo: this.liopServer.getServerInfo()
+      });
+    }
+    if (method === "notifications/initialized") return void 0;
+    if (method === "ping") return this.successResponse(id, {});
+    if (method === "tools/list") {
+      const tools = this.liopServer.listTools();
+      return this.successResponse(id, { tools });
+    }
+    if (method === "resources/list") {
+      const resources = this.liopServer.listResources();
+      return this.successResponse(id, { resources });
+    }
+    if (method === "prompts/list") {
+      const prompts = this.liopServer.listPrompts();
+      return this.successResponse(id, { prompts });
+    }
+    if (method === "prompts/get") {
+      if (!params?.name) {
+        return this.errorResponse(id, -32602, "Missing prompt name");
+      }
+      try {
+        const result = await this.liopServer.getPrompt({
+          name: params.name,
+          arguments: params.arguments
+        });
+        return this.successResponse(id, result);
+      } catch (err) {
+        return this.errorResponse(id, -32e3, err.message);
+      }
+    }
+    if (method === "resources/read") {
+      if (!params?.uri) {
+        return this.errorResponse(id, -32602, "Missing resource URI");
+      }
+      try {
+        const result = await this.liopServer.readResource(params.uri);
+        return this.successResponse(id, result);
+      } catch (err) {
+        return this.errorResponse(id, -32e3, err.message);
+      }
+    }
+    if (method === "tools/call") {
+      if (!params?.name) {
+        return this.errorResponse(id, -32602, "Missing tool name");
+      }
+      const request = {
+        name: params.name,
+        arguments: params.arguments || {}
+      };
+      try {
+        const result = await this.liopServer.callTool(request);
+        const isVerified = result.isError ? true : await this.verifyZkReceipt(request, result);
+        if (!isVerified) {
+          return this.successResponse(id, {
+            content: [
+              {
+                type: "text",
+                text: "ALERT [LIOP ZERO-TRUST SHIELD] ZK Verification Failed. The mathematical ImageID does not match the original payload."
+              }
+            ],
+            isError: true
+          });
+        }
+        return this.successResponse(id, result);
+      } catch (err) {
+        return this.errorResponse(id, -32e3, err.message);
+      }
+    }
+    return this.errorResponse(id, -32601, "Method not found");
+  }
+  successResponse(id, result) {
+    return { jsonrpc: "2.0", id, result };
+  }
+  errorResponse(id, code, message) {
+    return { jsonrpc: "2.0", id, error: { code, message } };
+  }
+  async verifyZkReceipt(request, result) {
+    if (!request.arguments?.payload || typeof request.arguments.payload !== "string") {
+      return true;
+    }
+    try {
+      const payload = request.arguments.payload;
+      const contentText = result.content[0]?.text;
+      if (contentText && typeof contentText === "string") {
+        try {
+          const data = JSON.parse(contentText);
+          if (data.image_id || data.zk_receipt) {
+            const { LiopVerifier } = await import('./verifier-3FAKCFNN.js');
+            const verifier = new LiopVerifier();
+            const isAuthentic = await verifier.verifyZkReceipt(
+              Buffer.from(payload, "utf-8"),
+              data.image_id,
+              Buffer.from(data.zk_receipt || "", "base64"),
+              void 0,
+              data.computation_result
+            );
+            if (!isAuthentic) {
+              return false;
+            }
+            data.audit_status = "VERIFIED: ZK-Receipt & ImageID Mathematically Verified by LiopMcpBridge";
+            result.content[0].text = JSON.stringify(data);
+          }
+        } catch {
+        }
+      }
+      return true;
+    } catch (e) {
+      log.info("[LIOP-Bridge] ZK-Verifier Failure:", e);
+      return false;
+    }
+  }
+  /**
+   * Connects the bridge via stdio or Mesh depending on mode.
+   */
+  async connect() {
+    if (this.legacyMcpServer) {
+      const { LiopServer } = await import('./server.js');
+      this.liopServer = new LiopServer(
+        this.options.serverInfo || {
+          name: "liop-bridge",
+          version: "1.0.0"
+        },
+        { security: this.options.security }
+      );
+      if (this.options.publishToMesh) {
+        await this.liopServer.connect();
+        const legacy = this.legacyMcpServer;
+        if (legacy._registeredTools) {
+          for (const [name, tool] of Object.entries(legacy._registeredTools)) {
+            const t = tool;
+            this.liopServer.tool(
+              name,
+              t.description || "",
+              t.inputSchema || {},
+              // biome-ignore lint/suspicious/noExplicitAny: Opaque legacy callback args
+              async (args) => {
+                return await t.handler(args);
+              }
+            );
+          }
+        }
+        if (legacy._registeredResources) {
+          for (const [uri, resource] of Object.entries(
+            legacy._registeredResources
+          )) {
+            const r = resource;
+            this.liopServer.resource(
+              r.name,
+              uri,
+              r.metadata?.description || "",
+              r.metadata?.mimeType || "application/octet-stream",
+              async () => {
+                const res = await r.readCallback(new URL(uri));
+                return res.contents[0].text;
+              }
+            );
+          }
+        }
+      }
+      return;
+    }
+    const readline = await import('readline');
+    const rl = readline.createInterface({
+      input: process.stdin,
+      output: process.stdout,
+      terminal: false
+    });
+    const shutdown = async () => {
+      log.info("[LIOP-Bridge] Disconnecting session...");
+      if (this.liopServer) await this.liopServer.close();
+      process.exit(0);
+    };
+    rl.on("close", shutdown);
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+    rl.on("line", async (line) => {
+      if (!line.trim()) return;
+      try {
+        const payload = JSON.parse(line);
+        const response = await this.handleJsonRpcRequest(payload);
+        if (response) {
+          process.stdout.write(`${JSON.stringify(response)}
+`);
+        }
+      } catch (e) {
+        log.error(`[LIOP-Bridge] Error: ${e.message}`);
+      }
+    });
+  }
+  getServer() {
+    return this.liopServer;
+  }
+};
+
+export { LiopMcpBridge, LiopStreamBridge };
+//# sourceMappingURL=chunk-AL7H7DTW.js.map
+//# sourceMappingURL=chunk-AL7H7DTW.js.map

package/dist/chunk-AL7H7DTW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bridge/stream.ts","../src/bridge/index.ts"],"names":[],"mappings":";;;;;;AA6BA,IAAM,2BAAA,GAA8B,EAAA;AACpC,IAAM,0BAAA,GAA6B,KAAK,EAAA,GAAK,GAAA;AAC7C,IAAM,uBAAuB,EAAA,GAAK,GAAA;AAgB3B,IAAM,mBAAN,MAAuB;AAAA,EAS7B,WAAA,CACC,cAAA,EACQ,OAAA,GAAmC,EAAC,EAC3C;AADO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAER,IAAA,IAAA,CAAK,GAAA,GAAM,IAAI,IAAA,EAAK;AACpB,IAAA,IAAA,CAAK,WAAA,GAAc,IAAI,aAAA,CAAc,cAAc,CAAA;AACnD,IAAA,IAAA,CAAK,cAAA,uBAAqB,GAAA,EAAI;AAC9B,IAAA,IAAA,CAAK,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,2BAAA;AAC7B,IAAA,IAAA,CAAK,gBAAA,GACJ,QAAQ,gBAAA,IAAoB,0BAAA;AAE7B,IAAA,IAAA,CAAK,WAAA,EAAY;AAAA,EAClB;AAAA,EArBQ,GAAA;AAAA,EACA,UAAA,GAA8C,IAAA;AAAA,EAC9C,WAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA,GAAuD,IAAA;AAAA,EACvD,gBAAA;AAAA,EACA,gBAAA;AAAA;AAAA;AAAA;AAAA,EAoBR,MAAc,uBACb,QAAA,EACoD;AACpD,IAAA,MAAM,EAAE,wCAAA,EAAyC,GAAI,MAAM,OAC1D,+DACD,CAAA;AACA,IAAA,MAAM,SAAA,GAAY,IAAI,wCAAA,CAAyC;AAAA,MAC9D,kBAAA,EAAoB,MAAM,UAAA,EAAW;AAAA,MACrC,oBAAA,EAAsB,CAAC,SAAA,KAAsB;AAC5C,QAAA,IAAA,CAAK,cAAA,CAAe,IAAI,SAAA,EAAW;AAAA,UAClC,SAAA;AAAA,UACA,YAAA,EAAc,KAAK,GAAA,EAAI;AAAA,UACvB;AAAA,SACA,CAAA;AACD,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,oCAAA,EAAuC,SAAS,CAAA,MAAA,EAAS,QAAQ,CAAA,CAAA;AAAA,SAClE;AAAA,MACD;AAAA,KACA,CAAA;AAGD,IAAA,SAAA,CAAU,SAAA,GAAY,OAAO,OAAA,KAA4B;AAExD,MAAA,IAAI,UAAU,SAAA,EAAW;AACxB,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,UAAU,SAAS,CAAA;AACzD,QAAA,IAAI,KAAA,EAAO,KAAA,CAAM,YAAA,GAAe,IAAA,CAAK,GAAA,EAAI;AAAA,MAC1C;AAEA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,WAAA,CAAY,oBAAA;AAAA,UACrC;AAAA,SACD;AAEA,QAAA,IAAI,WAAW,KAAA,CAAA,EAAW;AACzB,UAAA,MAAM,SAAA,CAAU,KAAK,MAAwB,CAAA;AAAA,QAC9C;AAAA,MACD,SAAS,GAAA,EAAc;AACtB,QAAA,GAAA,CAAI,IAAA,CAAK,qCAAA,EAAwC,GAAA,CAAc,OAAO,CAAA;AAAA,MACvE;AAAA,IACD,CAAA;AAEA,IAAA,SAAA,CAAU,UAAU,MAAM;AACzB,MAAA,IAAI,UAAU,SAAA,EAAW;AACxB,QAAA,IAAA,CAAK,cAAA,CAAe,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAC9C,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,oCAAA,EAAuC,SAAA,CAAU,SAAS,CAAA,CAAE,CAAA;AAAA,MACtE;AAAA,IACD,CAAA;AAEA,IAAA,OAAO,SAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,EAAA,EAAoB;AAC7C,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,KAAA,IAAS,IAAA,CAAK,cAAA,CAAe,MAAA,EAAO,EAAG;AACjD,MAAA,IAAI,KAAA,CAAM,aAAa,EAAA,EAAI,KAAA,EAAA;AAAA,IAC5B;AACA,IAAA,OAAO,KAAA;AAAA,EACR;AAAA;AAAA;AAAA;AAAA,EAKQ,YAAY,CAAA,EAET;AACV,IAAA,OACC,EAAE,GAAA,CAAI,MAAA,CAAO,iBAAiB,CAAA,EAAG,MAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,MAAK,IACrD,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,WAAW,CAAA,IACxB,SAAA;AAAA,EAEF;AAAA;AAAA;AAAA;AAAA,EAKQ,iBAAA,GAA0B;AACjC,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,KAAA,MAAW,CAAC,SAAA,EAAW,KAAK,CAAA,IAAK,KAAK,cAAA,EAAgB;AACrD,MAAA,IAAI,GAAA,GAAM,KAAA,CAAM,YAAA,GAAe,IAAA,CAAK,gBAAA,EAAkB;AACrD,QAAA,GAAA,CAAI,IAAA,CAAK,CAAA,2CAAA,EAA8C,SAAS,CAAA,CAAE,CAAA;AAClE,QAAA,KAAA,CAAM,SAAA,CAAU,KAAA,EAAM,CAAE,KAAA,CAAM,MAAM;AAAA,QAEpC,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,cAAA,CAAe,OAAO,SAAS,CAAA;AAAA,MACrC;AAAA,IACD;AAAA,EACD;AAAA,EAEQ,WAAA,GAAc;AACrB,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,GAAA,EAAK,IAAA,EAAM,CAAA;AAGxB,IAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,gBAAA,EAAkB;AAClC,MAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAA,EAAW;AAC1C,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA;AACvB,MAAA,GAAA,CAAI,KAAK,0DAAsC,CAAA;AAC/C,MAAA,GAAA,CAAI,KAAK,2CAA2C,CAAA;AACpD,MAAA,GAAA,CAAI,KAAK,+DAA+D,CAAA;AACxE,MAAA,GAAA,CAAI,IAAA,CAAK,CAAA,OAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA,CAAE,CAAA;AACjD,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,EAAE,CAAC,CAAA;AAAA,IACxB;AAGA,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,OAAO,GAAG,IAAA,KAAS;AACvC,MAAA,MAAM,IAAA,GAAO,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,eAAe,CAAA;AACzC,MAAA,IAAI,CAAC,IAAA,EAAM,UAAA,CAAW,SAAS,CAAA,EAAG;AACjC,QAAA,OAAO,CAAA,CAAE,IAAA;AAAA,UACR,EAAE,OAAO,+CAAA,EAAgD;AAAA,UACzD;AAAA,SACD;AAAA,MACD;AAEA,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAC1B,MAAA,MAAM,aAAA,GAAgB,QAAQ,GAAA,CAAI,gBAAA;AAGlC,MAAA,IAAI,aAAA,IAAiB,UAAU,aAAA,EAAe;AAC7C,QAAA,MAAM,IAAA,EAAK;AACX,QAAA;AAAA,MACD;AAGA,MAAA,MAAM,YAAA,GAAe,IAAA,CAAK,WAAA,CAAY,SAAA,EAAU,EAAG,YAAA;AACnD,MAAA,IAAI,YAAA,EAAc;AACjB,QAAA,IAAI;AACH,UAAA,MAAM,YAAA,CAAa,SAAS,KAAK,CAAA;AACjC,UAAA,MAAM,IAAA,EAAK;AACX,UAAA;AAAA,QACD,SAAS,CAAA,EAAY;AACpB,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,2CAAA,EAA+C,EAAY,OAAO,CAAA;AAAA,WACnE;AACA,UAAA,OAAO,CAAA,CAAE,IAAA;AAAA,YACR;AAAA,cACC,KAAA,EAAO,CAAA,sCAAA,EAA0C,CAAA,CAAY,OAAO,CAAA;AAAA,aACrE;AAAA,YACA;AAAA,WACD;AAAA,QACD;AAAA,MACD;AAEA,MAAA,GAAA,CAAI,IAAA;AAAA,QACH;AAAA,OACD;AACA,MAAA,OAAO,CAAA,CAAE,IAAA;AAAA,QACR,EAAE,OAAO,+CAAA,EAAgD;AAAA,QACzD;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAGD,IAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,MAAA,EAAQ,OAAO,CAAA,KAAM;AACjC,MAAA,MAAM,SAAA,GAAY,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB,CAAA;AAG/C,MAAA,IAAI,SAAA,EAAW;AACd,QAAA,MAAM,QAAA,GAAW,IAAA,CAAK,cAAA,CAAe,GAAA,CAAI,SAAS,CAAA;AAClD,QAAA,IAAI,CAAC,QAAA,EAAU;AACd,UAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,mBAAA,IAAuB,GAAG,CAAA;AAAA,QAClD;AAEA,QAAA,QAAA,CAAS,YAAA,GAAe,KAAK,GAAA,EAAI;AAEjC,QAAA,MAAM,WAAW,MAAM,QAAA,CAAS,UAAU,aAAA,CAAc,CAAA,CAAE,IAAI,GAAG,CAAA;AAIjE,QAAA,IAAI,CAAA,CAAE,GAAA,CAAI,MAAA,KAAW,QAAA,EAAU;AAC9B,UAAA,IAAA,CAAK,cAAA,CAAe,OAAO,SAAS,CAAA;AACpC,UAAA,GAAA,CAAI,IAAA,CAAK,CAAA,6CAAA,EAAgD,SAAS,CAAA,CAAE,CAAA;AAAA,QACrE;AAEA,QAAA,OAAO,QAAA;AAAA,MACR;AAIA,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,WAAA,CAAY,CAAC,CAAA;AACnC,MAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,iBAAA,CAAkB,QAAQ,CAAA;AACvD,MAAA,IAAI,eAAA,IAAmB,KAAK,gBAAA,EAAkB;AAC7C,QAAA,GAAA,CAAI,IAAA;AAAA,UACH,CAAA,2CAAA,EAA8C,QAAQ,CAAA,EAAA,EAAK,eAAe,CAAA,UAAA;AAAA,SAC3E;AACA,QAAA,OAAO,EAAE,IAAA,CAAK,EAAE,KAAA,EAAO,wCAAA,IAA4C,GAAG,CAAA;AAAA,MACvE;AAEA,MAAA,MAAM,SAAA,GAAY,MAAM,IAAA,CAAK,sBAAA,CAAuB,QAAQ,CAAA;AAC5D,MAAA,OAAO,MAAM,SAAA,CAAU,aAAA,CAAc,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,IAC/C,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,MAAM,IAAA,EAA8B;AAChD,IAAA,MAAM,UAAA,GAAa,IAAA,IAAQ,IAAA,CAAK,OAAA,CAAQ,IAAA,IAAQ,GAAA;AAGhD,IAAA,IAAA,CAAK,aAAA,GAAgB,WAAA;AAAA,MACpB,MAAM,KAAK,iBAAA,EAAkB;AAAA,MAC7B;AAAA,KACD;AAEA,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY;AAC/B,MAAA,IAAA,CAAK,UAAA,GAAa,KAAA;AAAA,QACjB;AAAA,UACC,KAAA,EAAO,KAAK,GAAA,CAAI,KAAA;AAAA,UAChB,IAAA,EAAM;AAAA,SACP;AAAA,QACA,CAAC,IAAA,KAAS;AACT,UAAA,GAAA,CAAI,IAAA;AAAA,YACH,CAAA,gEAAA,EAAmE,KAAK,IAAI,CAAA,IAAA;AAAA,WAC7E;AACA,UAAA,OAAA,EAAQ;AAAA,QACT;AAAA,OACD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,IAAA,GAAsB;AAClC,IAAA,IAAI,KAAK,aAAA,EAAe;AACvB,MAAA,aAAA,CAAc,KAAK,aAAa,CAAA;AAChC,MAAA,IAAA,CAAK,aAAA,GAAgB,IAAA;AAAA,IACtB;AAEA,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,CAAA,IAAK,KAAK,cAAA,EAAgB;AAC9C,MAAA,MAAM,KAAA,CAAM,UAAU,KAAA,EAAM;AAC5B,MAAA,IAAA,CAAK,cAAA,CAAe,OAAO,EAAE,CAAA;AAAA,IAC9B;AAEA,IAAA,IAAI,KAAK,UAAA,EAAY;AACpB,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,MAAA,GAAA,CAAI,KAAK,0CAA0C,CAAA;AAAA,IACpD;AAAA,EACD;AACD;;;ACvSO,IAAM,gBAAN,MAAoB;AAAA,EAG1B,WAAA,CAEC,MAAA,EACQ,OAAA,GAA6B,EAAC,EACrC;AADO,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAIR,IAAA,IAAI,MAAA,EAAQ,WAAA,EAAa,IAAA,KAAS,YAAA,EAAc;AAC/C,MAAA,IAAA,CAAK,UAAA,GAAa,MAAA;AAClB,MAAA,GAAA,CAAI,KAAK,gDAAgD,CAAA;AAAA,IAC1D,CAAA,MAAA,IAAW,MAAA,EAAQ,WAAA,EAAa,IAAA,KAAS,WAAA,EAAa;AACrD,MAAA,IAAA,CAAK,eAAA,GAAkB,MAAA;AACvB,MAAA,GAAA,CAAI,KAAK,oDAAoD,CAAA;AAAA,IAC9D,CAAA,MAAO;AAEN,MAAA,IAAA,CAAK,eAAA,GAAkB,MAAA;AACvB,MAAA,GAAA,CAAI,KAAK,6DAA6D,CAAA;AAAA,IACvE;AAAA,EACD;AAAA,EApBQ,UAAA,GAAgC,IAAA;AAAA,EAChC,eAAA,GAAoC,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAyB5C,MAAa,qBACZ,OAAA,EACmB;AACnB,IAAA,MAAM,KAAK,OAAA,CAAQ,EAAA;AACnB,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AACvB,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AAEvB,IAAA,IAAI,OAAA,CAAQ,YAAY,KAAA,EAAO;AAC9B,MAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,iBAAiB,CAAA;AAAA,IACxD;AAGA,IAAA,IAAI,KAAK,UAAA,EAAY;AACpB,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IAC/C;AAGA,IAAA,IAAI,IAAA,CAAK,eAAA,IAAmB,IAAA,CAAK,UAAA,EAAY;AAC5C,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAA,EAAQ,MAAM,CAAA;AAAA,IAC/C;AAEA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,8BAA8B,CAAA;AAAA,EACrE;AAAA,EAEA,MAAc,eAAA,CACb,EAAA,EACA,MAAA,EACA,MAAA,EACmB;AACnB,IAAA,IAAI,CAAC,IAAA,CAAK,UAAA,EAAY,OAAO,IAAA;AAE7B,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,QAC/B,eAAA,EAAiB,YAAA;AAAA,QACjB,YAAA,EAAc;AAAA,UACb,SAAS,EAAC;AAAA,UACV,WAAW,EAAC;AAAA,UACZ,OAAO;AAAC,SACT;AAAA,QACA,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,aAAA;AAAc,OAC1C,CAAA;AAAA,IACF;AAEA,IAAA,IAAI,MAAA,KAAW,6BAA6B,OAAO,MAAA;AACnD,IAAA,IAAI,WAAW,MAAA,EAAQ,OAAO,KAAK,eAAA,CAAgB,EAAA,EAAI,EAAE,CAAA;AAEzD,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,CAAW,SAAA,EAAU;AACxC,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,EAAE,OAAO,CAAA;AAAA,IAC1C;AAEA,IAAA,IAAI,WAAW,gBAAA,EAAkB;AAChC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,UAAA,CAAW,aAAA,EAAc;AAChD,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,EAAE,WAAW,CAAA;AAAA,IAC9C;AAEA,IAAA,IAAI,WAAW,cAAA,EAAgB;AAC9B,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AAC5C,MAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,EAAE,SAAS,CAAA;AAAA,IAC5C;AAEA,IAAA,IAAI,WAAW,aAAA,EAAe;AAC7B,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AAClB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,qBAAqB,CAAA;AAAA,MAC5D;AACA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,UAAA,CAAW,SAAA,CAAU;AAAA,UAC9C,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,WAAW,MAAA,CAAO;AAAA,SAClB,CAAA;AACD,QAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAM,CAAA;AAAA,MACvC,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,gBAAA,EAAkB;AAChC,MAAA,IAAI,CAAC,QAAQ,GAAA,EAAK;AACjB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,sBAAsB,CAAA;AAAA,MAC7D;AACA,MAAA,IAAI;AACH,QAAA,MAAM,SAAS,MAAM,IAAA,CAAK,UAAA,CAAW,YAAA,CAAa,OAAO,GAAa,CAAA;AACtE,QAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAM,CAAA;AAAA,MACvC,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,IAAI,WAAW,YAAA,EAAc;AAC5B,MAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AAClB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,mBAAmB,CAAA;AAAA,MAC1D;AACA,MAAA,MAAM,OAAA,GAA2B;AAAA,QAChC,MAAM,MAAA,CAAO,IAAA;AAAA,QACb,SAAA,EAAY,MAAA,CAAO,SAAA,IAAyC;AAAC,OAC9D;AAEA,MAAA,IAAI;AACH,QAAA,MAAM,MAAA,GAAyB,MAAM,IAAA,CAAK,UAAA,CAAW,SAAS,OAAO,CAAA;AAGrE,QAAA,MAAM,UAAA,GAAa,OAAO,OAAA,GACvB,IAAA,GACA,MAAM,IAAA,CAAK,eAAA,CAAgB,SAAS,MAAM,CAAA;AAE7C,QAAA,IAAI,CAAC,UAAA,EAAY;AAChB,UAAA,OAAO,IAAA,CAAK,gBAAgB,EAAA,EAAI;AAAA,YAC/B,OAAA,EAAS;AAAA,cACR;AAAA,gBACC,IAAA,EAAM,MAAA;AAAA,gBACN,IAAA,EAAM;AAAA;AACP,aACD;AAAA,YACA,OAAA,EAAS;AAAA,WACT,CAAA;AAAA,QACF;AAEA,QAAA,OAAO,IAAA,CAAK,eAAA,CAAgB,EAAA,EAAI,MAAM,CAAA;AAAA,MACvC,SAAS,GAAA,EAAc;AACtB,QAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,KAAA,EAAS,IAAc,OAAO,CAAA;AAAA,MAC7D;AAAA,IACD;AAEA,IAAA,OAAO,IAAA,CAAK,aAAA,CAAc,EAAA,EAAI,MAAA,EAAQ,kBAAkB,CAAA;AAAA,EACzD;AAAA,EAEQ,eAAA,CACP,IACA,MAAA,EACC;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,EAAA,EAAI,MAAA,EAAO;AAAA,EACrC;AAAA,EAEQ,aAAA,CAAc,EAAA,EAAqB,IAAA,EAAc,OAAA,EAAiB;AACzE,IAAA,OAAO,EAAE,SAAS,KAAA,EAAO,EAAA,EAAI,OAAO,EAAE,IAAA,EAAM,SAAQ,EAAE;AAAA,EACvD;AAAA,EAEA,MAAc,eAAA,CACb,OAAA,EACA,MAAA,EACmB;AACnB,IAAA,IACC,CAAC,QAAQ,SAAA,EAAW,OAAA,IACpB,OAAO,OAAA,CAAQ,SAAA,CAAU,YAAY,QAAA,EACpC;AACD,MAAA,OAAO,IAAA;AAAA,IACR;AAEA,IAAA,IAAI;AACH,MAAA,MAAM,OAAA,GAAU,QAAQ,SAAA,CAAU,OAAA;AAClC,MAAA,MAAM,WAAA,GAAc,MAAA,CAAO,OAAA,CAAQ,CAAC,CAAA,EAAG,IAAA;AAEvC,MAAA,IAAI,WAAA,IAAe,OAAO,WAAA,KAAgB,QAAA,EAAU;AACnD,QAAA,IAAI;AACH,UAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AAEnC,UAAA,IAAI,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,UAAA,EAAY;AAErC,YAAA,MAAM,EAAE,YAAA,EAAa,GAAI,MAAM,OAAO,wBAAuB,CAAA;AAC7D,YAAA,MAAM,QAAA,GAAW,IAAI,YAAA,EAAa;AAGlC,YAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,eAAA;AAAA,cAClC,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA;AAAA,cAC5B,IAAA,CAAK,QAAA;AAAA,cACL,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,UAAA,IAAc,IAAI,QAAQ,CAAA;AAAA,cAC3C,KAAA,CAAA;AAAA,cACA,IAAA,CAAK;AAAA,aACN;AAEA,YAAA,IAAI,CAAC,WAAA,EAAa;AACjB,cAAA,OAAO,KAAA;AAAA,YACR;AAEA,YAAA,IAAA,CAAK,YAAA,GACJ,yEAAA;AACD,YAAA,MAAA,CAAO,QAAQ,CAAC,CAAA,CAAE,IAAA,GAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,UAC7C;AAAA,QACD,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACD;AACA,MAAA,OAAO,IAAA;AAAA,IACR,SAAS,CAAA,EAAG;AACX,MAAA,GAAA,CAAI,IAAA,CAAK,sCAAsC,CAAC,CAAA;AAChD,MAAA,OAAO,KAAA;AAAA,IACR;AAAA,EACD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,OAAA,GAAyB;AAErC,IAAA,IAAI,KAAK,eAAA,EAAiB;AACzB,MAAA,MAAM,EAAE,UAAA,EAAW,GAAI,MAAM,OAAO,aAAoB,CAAA;AACxD,MAAA,IAAA,CAAK,aAAa,IAAI,UAAA;AAAA,QACrB,IAAA,CAAK,QAAQ,UAAA,IAAc;AAAA,UAC1B,IAAA,EAAM,aAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACV;AAAA,QACA,EAAE,QAAA,EAAU,IAAA,CAAK,OAAA,CAAQ,QAAA;AAAS,OACnC;AAEA,MAAA,IAAI,IAAA,CAAK,QAAQ,aAAA,EAAe;AAC/B,QAAA,MAAM,IAAA,CAAK,WAAW,OAAA,EAAQ;AAI9B,QAAA,MAAM,SAAS,IAAA,CAAK,eAAA;AAGpB,QAAA,IAAI,OAAO,gBAAA,EAAkB;AAC5B,UAAA,KAAA,MAAW,CAAC,MAAM,IAAI,CAAA,IAAK,OAAO,OAAA,CAAQ,MAAA,CAAO,gBAAgB,CAAA,EAAG;AAEnE,YAAA,MAAM,CAAA,GAAI,IAAA;AACV,YAAA,IAAA,CAAK,UAAA,CAAW,IAAA;AAAA,cACf,IAAA;AAAA,cACA,EAAE,WAAA,IAAe,EAAA;AAAA,cACjB,CAAA,CAAE,eAAe,EAAC;AAAA;AAAA,cAElB,OAAO,IAAA,KAAc;AACpB,gBAAA,OAAO,MAAM,CAAA,CAAE,OAAA,CAAQ,IAAI,CAAA;AAAA,cAC5B;AAAA,aACD;AAAA,UACD;AAAA,QACD;AAGA,QAAA,IAAI,OAAO,oBAAA,EAAsB;AAChC,UAAA,KAAA,MAAW,CAAC,GAAA,EAAK,QAAQ,CAAA,IAAK,MAAA,CAAO,OAAA;AAAA,YACpC,MAAA,CAAO;AAAA,WACR,EAAG;AAEF,YAAA,MAAM,CAAA,GAAI,QAAA;AACV,YAAA,IAAA,CAAK,UAAA,CAAW,QAAA;AAAA,cACf,CAAA,CAAE,IAAA;AAAA,cACF,GAAA;AAAA,cACA,CAAA,CAAE,UAAU,WAAA,IAAe,EAAA;AAAA,cAC3B,CAAA,CAAE,UAAU,QAAA,IAAY,0BAAA;AAAA,cACxB,YAAY;AACX,gBAAA,MAAM,MAAM,MAAM,CAAA,CAAE,aAAa,IAAI,GAAA,CAAI,GAAG,CAAC,CAAA;AAC7C,gBAAA,OAAO,GAAA,CAAI,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA;AAAA,cACxB;AAAA,aACD;AAAA,UACD;AAAA,QACD;AAAA,MACD;AACA,MAAA;AAAA,IACD;AAGA,IAAA,MAAM,QAAA,GAAW,MAAM,OAAO,UAAe,CAAA;AAC7C,IAAA,MAAM,EAAA,GAAK,SAAS,eAAA,CAAgB;AAAA,MACnC,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,QAAA,EAAU;AAAA,KACV,CAAA;AAED,IAAA,MAAM,WAAW,YAAY;AAC5B,MAAA,GAAA,CAAI,KAAK,wCAAwC,CAAA;AACjD,MAAA,IAAI,IAAA,CAAK,UAAA,EAAY,MAAM,IAAA,CAAK,WAAW,KAAA,EAAM;AACjD,MAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IACf,CAAA;AAEA,IAAA,EAAA,CAAG,EAAA,CAAG,SAAS,QAAQ,CAAA;AACvB,IAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,QAAQ,CAAA;AAC7B,IAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,QAAQ,CAAA;AAE9B,IAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,OAAO,IAAA,KAAS;AAC7B,MAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,MAAA,IAAI;AACH,QAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC/B,QAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,oBAAA,CAAqB,OAAO,CAAA;AACxD,QAAA,IAAI,QAAA,EAAU;AACb,UAAA,OAAA,CAAQ,OAAO,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC;AAAA,CAAI,CAAA;AAAA,QACrD;AAAA,MACD,SAAS,CAAA,EAAY;AACpB,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA,qBAAA,EAAyB,CAAA,CAAY,OAAO,CAAA,CAAE,CAAA;AAAA,MACzD;AAAA,IACD,CAAC,CAAA;AAAA,EACF;AAAA,EAEO,SAAA,GAA+B;AACrC,IAAA,OAAO,IAAA,CAAK,UAAA;AAAA,EACb;AACD","file":"chunk-AL7H7DTW.js","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { serve } from \"@hono/node-server\";\nimport type { WebStandardStreamableHTTPServerTransport } from \"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\";\nimport type { JSONRPCMessage } from \"@modelcontextprotocol/sdk/types.js\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport type { LiopServer } from \"../server/index.js\";\nimport { log } from \"../utils/logger.js\";\nimport { LiopMcpBridge } from \"./index.js\";\n\n/**\n * Configuration options for LiopStreamBridge.\n */\nexport interface LiopStreamBridgeOptions {\n\t/** Port to listen on (default: 3000) */\n\tport?: number;\n\t/** Max concurrent sessions per IP (default: 5) */\n\tmaxSessionsPerIp?: number;\n\t/** Session idle timeout in milliseconds (default: 30 min) */\n\tsessionTimeoutMs?: number;\n}\n\n/** Internal metadata for tracked sessions */\ninterface SessionEntry {\n\ttransport: WebStandardStreamableHTTPServerTransport;\n\tlastActivity: number;\n\tclientIp: string;\n}\n\nconst DEFAULT_MAX_SESSIONS_PER_IP = 10;\nconst DEFAULT_SESSION_TIMEOUT_MS = 30 * 60 * 1000; // 30 minutes\nconst EVICTION_INTERVAL_MS = 60 * 1000; // Check every minute\n\n/**\n * LiopStreamBridge\n *\n * Exposes a LiopServer over a remote HTTP network using the industry-standard\n * MCP Streamable HTTP Transport + Hono JS.\n *\n * Supports concurrent multi-client connections via per-session transport instances (Map pattern).\n * External agents connect using only a URL + Bearer Token (Zero-Trust).\n *\n * Security hardening:\n * - Zero-Trust Bearer Token enforcement\n * - Per-IP rate limiting on session creation\n * - Automatic eviction of idle sessions (TTL)\n */\nexport class LiopStreamBridge {\n\tprivate app: Hono;\n\tprivate httpServer: ReturnType<typeof serve> | null = null;\n\tprivate bridgeLogic: LiopMcpBridge;\n\tprivate activeSessions: Map<string, SessionEntry>;\n\tprivate evictionTimer: ReturnType<typeof setInterval> | null = null;\n\tprivate maxSessionsPerIp: number;\n\tprivate sessionTimeoutMs: number;\n\n\tconstructor(\n\t\tinternalServer: LiopServer,\n\t\tprivate options: LiopStreamBridgeOptions = {},\n\t) {\n\t\tthis.app = new Hono();\n\t\tthis.bridgeLogic = new LiopMcpBridge(internalServer);\n\t\tthis.activeSessions = new Map();\n\t\tthis.maxSessionsPerIp =\n\t\t\toptions.maxSessionsPerIp ?? DEFAULT_MAX_SESSIONS_PER_IP;\n\t\tthis.sessionTimeoutMs =\n\t\t\toptions.sessionTimeoutMs ?? DEFAULT_SESSION_TIMEOUT_MS;\n\n\t\tthis.setupRoutes();\n\t}\n\n\t/**\n\t * Creates a new per-session transport instance and wires it to the LIOPMcpBridge logic.\n\t */\n\tprivate async createSessionTransport(\n\t\tclientIp: string,\n\t): Promise<WebStandardStreamableHTTPServerTransport> {\n\t\tconst { WebStandardStreamableHTTPServerTransport } = await import(\n\t\t\t\"@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js\"\n\t\t);\n\t\tconst transport = new WebStandardStreamableHTTPServerTransport({\n\t\t\tsessionIdGenerator: () => randomUUID(),\n\t\t\tonsessioninitialized: (sessionId: string) => {\n\t\t\t\tthis.activeSessions.set(sessionId, {\n\t\t\t\t\ttransport,\n\t\t\t\t\tlastActivity: Date.now(),\n\t\t\t\t\tclientIp,\n\t\t\t\t});\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-StreamBridge] Session opened: ${sessionId} (IP: ${clientIp})`,\n\t\t\t\t);\n\t\t\t},\n\t\t});\n\n\t\t// Wire the transport's incoming messages to the LiopMcpBridge JSON-RPC router\n\t\ttransport.onmessage = async (message: JSONRPCMessage) => {\n\t\t\t// Touch activity timestamp on every message\n\t\t\tif (transport.sessionId) {\n\t\t\t\tconst entry = this.activeSessions.get(transport.sessionId);\n\t\t\t\tif (entry) entry.lastActivity = Date.now();\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tconst result = await this.bridgeLogic.handleJsonRpcRequest(\n\t\t\t\t\tmessage as unknown as Record<string, unknown>,\n\t\t\t\t);\n\t\t\t\t// Notifications return undefined — no response needed\n\t\t\t\tif (result !== undefined) {\n\t\t\t\t\tawait transport.send(result as JSONRPCMessage);\n\t\t\t\t}\n\t\t\t} catch (err: unknown) {\n\t\t\t\tlog.info(\"[LIOP-StreamBridge] JSON-RPC error:\", (err as Error).message);\n\t\t\t}\n\t\t};\n\n\t\ttransport.onclose = () => {\n\t\t\tif (transport.sessionId) {\n\t\t\t\tthis.activeSessions.delete(transport.sessionId);\n\t\t\t\tlog.info(`[LIOP-StreamBridge] Session closed: ${transport.sessionId}`);\n\t\t\t}\n\t\t};\n\n\t\treturn transport;\n\t}\n\n\t/**\n\t * Returns the number of active sessions for a given IP.\n\t */\n\tprivate countSessionsByIp(ip: string): number {\n\t\tlet count = 0;\n\t\tfor (const entry of this.activeSessions.values()) {\n\t\t\tif (entry.clientIp === ip) count++;\n\t\t}\n\t\treturn count;\n\t}\n\n\t/**\n\t * Extracts client IP from the request (supports X-Forwarded-For for reverse proxies).\n\t */\n\tprivate getClientIp(c: {\n\t\treq: { header: (name: string) => string | undefined };\n\t}): string {\n\t\treturn (\n\t\t\tc.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ||\n\t\t\tc.req.header(\"x-real-ip\") ||\n\t\t\t\"unknown\"\n\t\t);\n\t}\n\n\t/**\n\t * Evicts sessions that have been idle longer than the configured timeout.\n\t */\n\tprivate evictIdleSessions(): void {\n\t\tconst now = Date.now();\n\t\tfor (const [sessionId, entry] of this.activeSessions) {\n\t\t\tif (now - entry.lastActivity > this.sessionTimeoutMs) {\n\t\t\t\tlog.info(`[LIOP-StreamBridge] Evicting idle session: ${sessionId}`);\n\t\t\t\tentry.transport.close().catch(() => {\n\t\t\t\t\t/* Swallow close errors */\n\t\t\t\t});\n\t\t\t\tthis.activeSessions.delete(sessionId);\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate setupRoutes() {\n\t\tthis.app.use(\"*\", cors());\n\n\t\t// Initialize strict zero-trust token if not provided\n\t\tif (!process.env.ZERO_TRUST_TOKEN) {\n\t\t\tprocess.env.ZERO_TRUST_TOKEN = randomUUID();\n\t\t\tlog.info(\"=\".repeat(60));\n\t\t\tlog.info(\"⚠️ STRICT ZERO-TRUST MODE ENABLED ⚠️\");\n\t\t\tlog.info(\"No ZERO_TRUST_TOKEN found in environment.\");\n\t\t\tlog.info(\"A secure ephemeral token has been generated for this session:\");\n\t\t\tlog.info(`Token: ${process.env.ZERO_TRUST_TOKEN}`);\n\t\t\tlog.info(\"=\".repeat(60));\n\t\t}\n\n\t\t// ZTA (Zero-Trust Architecture) Security Middleware\n\t\tthis.app.use(\"/mcp\", async (c, next) => {\n\t\t\tconst auth = c.req.header(\"Authorization\");\n\t\t\tif (!auth?.startsWith(\"Bearer \")) {\n\t\t\t\treturn c.json(\n\t\t\t\t\t{ error: \"Unauthorized: LIOP Zero-Trust Policy Enforced\" },\n\t\t\t\t\t401,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tconst token = auth.slice(7);\n\t\t\tconst expectedToken = process.env.ZERO_TRUST_TOKEN;\n\n\t\t\t// Check static token fallback first (retrocompatibility)\n\t\t\tif (expectedToken && token === expectedToken) {\n\t\t\t\tawait next();\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\t// Validate with JWT Validator if configured on the server\n\t\t\tconst jwtValidator = this.bridgeLogic.getServer()?.jwtValidator;\n\t\t\tif (jwtValidator) {\n\t\t\t\ttry {\n\t\t\t\t\tawait jwtValidator.validate(token);\n\t\t\t\t\tawait next();\n\t\t\t\t\treturn;\n\t\t\t\t} catch (e: unknown) {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-StreamBridge] JWT Validation failed: ${(e as Error).message}`,\n\t\t\t\t\t);\n\t\t\t\t\treturn c.json(\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\terror: `Unauthorized: JWT Validation failed - ${(e as Error).message}`,\n\t\t\t\t\t\t},\n\t\t\t\t\t\t401,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tlog.info(\n\t\t\t\t\"[LIOP-StreamBridge] ALERT: Access denied - Invalid Zero-Trust token.\",\n\t\t\t);\n\t\t\treturn c.json(\n\t\t\t\t{ error: \"Unauthorized: LIOP Zero-Trust Policy Enforced\" },\n\t\t\t\t401,\n\t\t\t);\n\t\t});\n\n\t\t// Multi-Session Streamable HTTP Handler\n\t\tthis.app.all(\"/mcp\", async (c) => {\n\t\t\tconst sessionId = c.req.header(\"mcp-session-id\");\n\n\t\t\t// Route to existing session if session ID is present\n\t\t\tif (sessionId) {\n\t\t\t\tconst existing = this.activeSessions.get(sessionId);\n\t\t\t\tif (!existing) {\n\t\t\t\t\treturn c.json({ error: \"Session not found\" }, 404);\n\t\t\t\t}\n\t\t\t\t// Touch activity on every routed request\n\t\t\t\texisting.lastActivity = Date.now();\n\n\t\t\t\tconst response = await existing.transport.handleRequest(c.req.raw);\n\n\t\t\t\t// If DELETE, the transport closes internally but onclose may not fire.\n\t\t\t\t// Explicitly clean up the session from the Map.\n\t\t\t\tif (c.req.method === \"DELETE\") {\n\t\t\t\t\tthis.activeSessions.delete(sessionId);\n\t\t\t\t\tlog.info(`[LIOP-StreamBridge] Session closed (DELETE): ${sessionId}`);\n\t\t\t\t}\n\n\t\t\t\treturn response;\n\t\t\t}\n\n\t\t\t// No session ID → New client initializing.\n\t\t\t// Rate-limit: enforce max sessions per IP\n\t\t\tconst clientIp = this.getClientIp(c);\n\t\t\tconst currentSessions = this.countSessionsByIp(clientIp);\n\t\t\tif (currentSessions >= this.maxSessionsPerIp) {\n\t\t\t\tlog.info(\n\t\t\t\t\t`[LIOP-StreamBridge] Rate limit hit for IP: ${clientIp} (${currentSessions} sessions)`,\n\t\t\t\t);\n\t\t\t\treturn c.json({ error: \"Too Many Sessions: Rate limit exceeded\" }, 429);\n\t\t\t}\n\n\t\t\tconst transport = await this.createSessionTransport(clientIp);\n\t\t\treturn await transport.handleRequest(c.req.raw);\n\t\t});\n\t}\n\n\t/**\n\t * Starts the LiopStreamBridge HTTP server and session eviction timer.\n\t */\n\tpublic async start(port?: number): Promise<void> {\n\t\tconst listenPort = port ?? this.options.port ?? 3000;\n\n\t\t// Start the idle session eviction timer\n\t\tthis.evictionTimer = setInterval(\n\t\t\t() => this.evictIdleSessions(),\n\t\t\tEVICTION_INTERVAL_MS,\n\t\t);\n\n\t\treturn new Promise((resolve) => {\n\t\t\tthis.httpServer = serve(\n\t\t\t\t{\n\t\t\t\t\tfetch: this.app.fetch,\n\t\t\t\t\tport: listenPort,\n\t\t\t\t},\n\t\t\t\t(info) => {\n\t\t\t\t\tlog.info(\n\t\t\t\t\t\t`[LIOP-StreamBridge] Streamable HTTP Gateway on http://localhost:${info.port}/mcp`,\n\t\t\t\t\t);\n\t\t\t\t\tresolve();\n\t\t\t\t},\n\t\t\t);\n\t\t});\n\t}\n\n\t/**\n\t * Graceful shutdown — closes all active sessions, stops timers, and releases port.\n\t */\n\tpublic async stop(): Promise<void> {\n\t\tif (this.evictionTimer) {\n\t\t\tclearInterval(this.evictionTimer);\n\t\t\tthis.evictionTimer = null;\n\t\t}\n\n\t\tfor (const [id, entry] of this.activeSessions) {\n\t\t\tawait entry.transport.close();\n\t\t\tthis.activeSessions.delete(id);\n\t\t}\n\n\t\tif (this.httpServer) {\n\t\t\tthis.httpServer.close();\n\t\t\tlog.info(\"[LIOP-StreamBridge] HTTP ports released.\");\n\t\t}\n\t}\n}\n","import type { McpServer } from \"@modelcontextprotocol/sdk/server/mcp.js\";\nimport type { LiopServer, LiopServerOptions } from \"../server/index.js\";\nimport type { CallToolRequest, CallToolResult } from \"../types.js\";\nimport { log } from \"../utils/logger.js\";\n\nexport interface LiopBridgeOptions {\n\tpublishToMesh?: boolean;\n\tmeshIdentity?: string;\n\tserverInfo?: {\n\t\tname: string;\n\t\tversion: string;\n\t};\n\tsecurity?: LiopServerOptions[\"security\"];\n}\n\n/**\n * LIOP MCP Bridge\n * A bi-directional bridge that allows legacy MCP servers to join the LIOP mesh,\n * or exposes a LIOP server as an MCP-compatible stdio process for tools like Claude Desktop.\n */\nexport class LiopMcpBridge {\n\tprivate liopServer: LiopServer | null = null;\n\tprivate legacyMcpServer: McpServer | null = null;\n\tconstructor(\n\t\t// biome-ignore lint/suspicious/noExplicitAny: polymorphic source detection\n\t\tsource: LiopServer | McpServer | any,\n\t\tprivate options: LiopBridgeOptions = {},\n\t) {\n\t\t// Determine mode: Exposing LIOP to MCP (Claude) or Wrapping MCP to LIOP (Mesh)\n\t\t// We use constructor name check to avoid hard dependency on optional SDK at runtime start\n\t\tif (source?.constructor?.name === \"LiopServer\") {\n\t\t\tthis.liopServer = source as LiopServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: EXPOSE (LIOP -> MCP Stdio)\");\n\t\t} else if (source?.constructor?.name === \"McpServer\") {\n\t\t\tthis.legacyMcpServer = source as McpServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: WRAP (Legacy MCP -> LIOP Mesh)\");\n\t\t} else {\n\t\t\t// Fallback for inferred legacy MCP servers\n\t\t\tthis.legacyMcpServer = source as McpServer;\n\t\t\tlog.info(\"[LIOP-Bridge] Mode: WRAP (Inferred Legacy MCP -> LIOP Mesh)\");\n\t\t}\n\t}\n\n\t/**\n\t * Handles an incoming standard MCP JSON-RPC 2.0 payload.\n\t * Pipes it to the underlying server (LIOP or Legacy MCP).\n\t */\n\tpublic async handleJsonRpcRequest(\n\t\tpayload: Record<string, unknown>,\n\t): Promise<unknown> {\n\t\tconst id = payload.id as string | number;\n\t\tconst method = payload.method as string;\n\t\tconst params = payload.params as Record<string, unknown> | undefined;\n\n\t\tif (payload.jsonrpc !== \"2.0\") {\n\t\t\treturn this.errorResponse(id, -32600, \"Invalid Request\");\n\t\t}\n\n\t\t// Mode: EXPOSE (Standard behavior used by Claude Desktop)\n\t\tif (this.liopServer) {\n\t\t\treturn this.handleLiopToMcp(id, method, params);\n\t\t}\n\n\t\t// Mode: WRAP (Redirecting via internal LiopServer after connect())\n\t\tif (this.legacyMcpServer && this.liopServer) {\n\t\t\treturn this.handleLiopToMcp(id, method, params);\n\t\t}\n\n\t\treturn this.errorResponse(id, -32601, \"Bridge source not configured\");\n\t}\n\n\tprivate async handleLiopToMcp(\n\t\tid: string | number,\n\t\tmethod: string,\n\t\tparams: Record<string, unknown> | undefined,\n\t): Promise<unknown> {\n\t\tif (!this.liopServer) return null;\n\n\t\tif (method === \"initialize\") {\n\t\t\treturn this.successResponse(id, {\n\t\t\t\tprotocolVersion: \"2025-11-25\",\n\t\t\t\tcapabilities: {\n\t\t\t\t\tprompts: {},\n\t\t\t\t\tresources: {},\n\t\t\t\t\ttools: {},\n\t\t\t\t},\n\t\t\t\tserverInfo: this.liopServer.getServerInfo(),\n\t\t\t});\n\t\t}\n\n\t\tif (method === \"notifications/initialized\") return undefined;\n\t\tif (method === \"ping\") return this.successResponse(id, {});\n\n\t\tif (method === \"tools/list\") {\n\t\t\tconst tools = this.liopServer.listTools();\n\t\t\treturn this.successResponse(id, { tools });\n\t\t}\n\n\t\tif (method === \"resources/list\") {\n\t\t\tconst resources = this.liopServer.listResources();\n\t\t\treturn this.successResponse(id, { resources });\n\t\t}\n\n\t\tif (method === \"prompts/list\") {\n\t\t\tconst prompts = this.liopServer.listPrompts();\n\t\t\treturn this.successResponse(id, { prompts });\n\t\t}\n\n\t\tif (method === \"prompts/get\") {\n\t\t\tif (!params?.name) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing prompt name\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst result = await this.liopServer.getPrompt({\n\t\t\t\t\tname: params.name as string,\n\t\t\t\t\targuments: params.arguments as Record<string, string> | undefined,\n\t\t\t\t});\n\t\t\t\treturn this.successResponse(id, result);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\tif (method === \"resources/read\") {\n\t\t\tif (!params?.uri) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing resource URI\");\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst result = await this.liopServer.readResource(params.uri as string);\n\t\t\t\treturn this.successResponse(id, result);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\tif (method === \"tools/call\") {\n\t\t\tif (!params?.name) {\n\t\t\t\treturn this.errorResponse(id, -32602, \"Missing tool name\");\n\t\t\t}\n\t\t\tconst request: CallToolRequest = {\n\t\t\t\tname: params.name as string,\n\t\t\t\targuments: (params.arguments as Record<string, unknown>) || {},\n\t\t\t};\n\n\t\t\ttry {\n\t\t\t\tconst result: CallToolResult = await this.liopServer.callTool(request);\n\t\t\t\t// If the tool execution returned an error (e.g. policy violation), we bypass\n\t\t\t\t// ZK-Receipt verification because no cryptographic proof is generated for errors.\n\t\t\t\tconst isVerified = result.isError\n\t\t\t\t\t? true\n\t\t\t\t\t: await this.verifyZkReceipt(request, result);\n\n\t\t\t\tif (!isVerified) {\n\t\t\t\t\treturn this.successResponse(id, {\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: \"ALERT [LIOP ZERO-TRUST SHIELD] ZK Verification Failed. The mathematical ImageID does not match the original payload.\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\treturn this.successResponse(id, result);\n\t\t\t} catch (err: unknown) {\n\t\t\t\treturn this.errorResponse(id, -32000, (err as Error).message);\n\t\t\t}\n\t\t}\n\n\t\treturn this.errorResponse(id, -32601, \"Method not found\");\n\t}\n\n\tprivate successResponse(\n\t\tid: string | number | null | undefined,\n\t\tresult: unknown,\n\t) {\n\t\treturn { jsonrpc: \"2.0\", id, result };\n\t}\n\n\tprivate errorResponse(id: string | number, code: number, message: string) {\n\t\treturn { jsonrpc: \"2.0\", id, error: { code, message } };\n\t}\n\n\tprivate async verifyZkReceipt(\n\t\trequest: CallToolRequest,\n\t\tresult: CallToolResult,\n\t): Promise<boolean> {\n\t\tif (\n\t\t\t!request.arguments?.payload ||\n\t\t\ttypeof request.arguments.payload !== \"string\"\n\t\t) {\n\t\t\treturn true;\n\t\t}\n\n\t\ttry {\n\t\t\tconst payload = request.arguments.payload as string;\n\t\t\tconst contentText = result.content[0]?.text;\n\n\t\t\tif (contentText && typeof contentText === \"string\") {\n\t\t\t\ttry {\n\t\t\t\t\tconst data = JSON.parse(contentText);\n\n\t\t\t\t\tif (data.image_id || data.zk_receipt) {\n\t\t\t\t\t\t// 1. Instantiate the Industrial Verifier ( backed by Piscina Worker Pool )\n\t\t\t\t\t\tconst { LiopVerifier } = await import(\"../crypto/verifier.js\");\n\t\t\t\t\t\tconst verifier = new LiopVerifier();\n\n\t\t\t\t\t\t// 2. Delegate the heavy mathematical check (ZK Journal + Seal)\n\t\t\t\t\t\tconst isAuthentic = await verifier.verifyZkReceipt(\n\t\t\t\t\t\t\tBuffer.from(payload, \"utf-8\"),\n\t\t\t\t\t\t\tdata.image_id,\n\t\t\t\t\t\t\tBuffer.from(data.zk_receipt || \"\", \"base64\"),\n\t\t\t\t\t\t\tundefined,\n\t\t\t\t\t\t\tdata.computation_result,\n\t\t\t\t\t\t);\n\n\t\t\t\t\t\tif (!isAuthentic) {\n\t\t\t\t\t\t\treturn false;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tdata.audit_status =\n\t\t\t\t\t\t\t\"VERIFIED: ZK-Receipt & ImageID Mathematically Verified by LiopMcpBridge\";\n\t\t\t\t\t\tresult.content[0].text = JSON.stringify(data);\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Output not JSON\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn true;\n\t\t} catch (e) {\n\t\t\tlog.info(\"[LIOP-Bridge] ZK-Verifier Failure:\", e);\n\t\t\treturn false;\n\t\t}\n\t}\n\n\t/**\n\t * Connects the bridge via stdio or Mesh depending on mode.\n\t */\n\tpublic async connect(): Promise<void> {\n\t\t// In WRAP mode, we actually need to create a LiopServer and join the mesh\n\t\tif (this.legacyMcpServer) {\n\t\t\tconst { LiopServer } = await import(\"../server/index.js\");\n\t\t\tthis.liopServer = new LiopServer(\n\t\t\t\tthis.options.serverInfo || {\n\t\t\t\t\tname: \"liop-bridge\",\n\t\t\t\t\tversion: \"1.0.0\",\n\t\t\t\t},\n\t\t\t\t{ security: this.options.security },\n\t\t\t);\n\n\t\t\tif (this.options.publishToMesh) {\n\t\t\t\tawait this.liopServer.connect();\n\n\t\t\t\t// Automatically Bridge Legacy Capabilities to LIOP Mesh\n\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Internal legacy MCP properties are completely opaque and unexported\n\t\t\t\tconst legacy = this.legacyMcpServer as any;\n\n\t\t\t\t// 1. Sync Tools\n\t\t\t\tif (legacy._registeredTools) {\n\t\t\t\t\tfor (const [name, tool] of Object.entries(legacy._registeredTools)) {\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy structure\n\t\t\t\t\t\tconst t = tool as any;\n\t\t\t\t\t\tthis.liopServer.tool(\n\t\t\t\t\t\t\tname,\n\t\t\t\t\t\t\tt.description || \"\",\n\t\t\t\t\t\t\tt.inputSchema || {},\n\t\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy callback args\n\t\t\t\t\t\t\tasync (args: any) => {\n\t\t\t\t\t\t\t\treturn await t.handler(args);\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// 2. Sync Resources\n\t\t\t\tif (legacy._registeredResources) {\n\t\t\t\t\tfor (const [uri, resource] of Object.entries(\n\t\t\t\t\t\tlegacy._registeredResources,\n\t\t\t\t\t)) {\n\t\t\t\t\t\t// biome-ignore lint/suspicious/noExplicitAny: Opaque legacy structure\n\t\t\t\t\t\tconst r = resource as any;\n\t\t\t\t\t\tthis.liopServer.resource(\n\t\t\t\t\t\t\tr.name,\n\t\t\t\t\t\t\turi,\n\t\t\t\t\t\t\tr.metadata?.description || \"\",\n\t\t\t\t\t\t\tr.metadata?.mimeType || \"application/octet-stream\",\n\t\t\t\t\t\t\tasync () => {\n\t\t\t\t\t\t\t\tconst res = await r.readCallback(new URL(uri));\n\t\t\t\t\t\t\t\treturn res.contents[0].text;\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\t// In EXPOSE mode, listen to stdio (Claude Desktop)\n\t\tconst readline = await import(\"node:readline\");\n\t\tconst rl = readline.createInterface({\n\t\t\tinput: process.stdin,\n\t\t\toutput: process.stdout,\n\t\t\tterminal: false,\n\t\t});\n\n\t\tconst shutdown = async () => {\n\t\t\tlog.info(\"[LIOP-Bridge] Disconnecting session...\");\n\t\t\tif (this.liopServer) await this.liopServer.close();\n\t\t\tprocess.exit(0);\n\t\t};\n\n\t\trl.on(\"close\", shutdown);\n\t\tprocess.on(\"SIGINT\", shutdown);\n\t\tprocess.on(\"SIGTERM\", shutdown);\n\n\t\trl.on(\"line\", async (line) => {\n\t\t\tif (!line.trim()) return;\n\t\t\ttry {\n\t\t\t\tconst payload = JSON.parse(line);\n\t\t\t\tconst response = await this.handleJsonRpcRequest(payload);\n\t\t\t\tif (response) {\n\t\t\t\t\tprocess.stdout.write(`${JSON.stringify(response)}\\n`);\n\t\t\t\t}\n\t\t\t} catch (e: unknown) {\n\t\t\t\tlog.error(`[LIOP-Bridge] Error: ${(e as Error).message}`);\n\t\t\t}\n\t\t});\n\t}\n\n\tpublic getServer(): LiopServer | null {\n\t\treturn this.liopServer;\n\t}\n}\n\nexport * from \"./stream.js\";\n"]}

package/dist/chunk-CT6NHSYP.js

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+
+// src/types.ts
+var ToolSchema = z.object({
+  name: z.string(),
+  description: z.string().optional(),
+  inputSchema: z.record(z.string(), z.unknown())
+  // Represents a JSON Schema
+});
+var ResourceSchema = z.object({
+  uri: z.string(),
+  name: z.string(),
+  description: z.string().optional(),
+  mimeType: z.string().optional()
+});
+var PromptSchema = z.object({
+  name: z.string(),
+  description: z.string().optional(),
+  arguments: z.array(
+    z.object({
+      name: z.string(),
+      description: z.string().optional(),
+      required: z.boolean().optional()
+    })
+  ).optional()
+});
+
+export { PromptSchema, ResourceSchema, ToolSchema };
+//# sourceMappingURL=chunk-CT6NHSYP.js.map
+//# sourceMappingURL=chunk-CT6NHSYP.js.map

package/dist/chunk-CT6NHSYP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"names":[],"mappings":";;;AAMO,IAAM,UAAA,GAAa,EAAE,MAAA,CAAO;AAAA,EAClC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAA,EAAa,EAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,SAAS;AAAA;AAC9C,CAAC;AAIM,IAAM,cAAA,GAAiB,EAAE,MAAA,CAAO;AAAA,EACtC,GAAA,EAAK,EAAE,MAAA,EAAO;AAAA,EACd,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACtB,CAAC;AAIM,IAAM,YAAA,GAAe,EAAE,MAAA,CAAO;AAAA,EACpC,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,EACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EACjC,WAAW,CAAA,CACT,KAAA;AAAA,IACA,EAAE,MAAA,CAAO;AAAA,MACR,IAAA,EAAM,EAAE,MAAA,EAAO;AAAA,MACf,WAAA,EAAa,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MACjC,QAAA,EAAU,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,KAC/B;AAAA,IAED,QAAA;AACH,CAAC","file":"chunk-CT6NHSYP.js","sourcesContent":["import { z } from \"zod\";\n\n/**\n * Base Protocol Types representing parity with Model Context Protocol\n */\n\nexport const ToolSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tinputSchema: z.record(z.string(), z.unknown()), // Represents a JSON Schema\n});\n\nexport type Tool = z.infer<typeof ToolSchema>;\n\nexport const ResourceSchema = z.object({\n\turi: z.string(),\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\tmimeType: z.string().optional(),\n});\n\nexport type Resource = z.infer<typeof ResourceSchema>;\n\nexport const PromptSchema = z.object({\n\tname: z.string(),\n\tdescription: z.string().optional(),\n\targuments: z\n\t\t.array(\n\t\t\tz.object({\n\t\t\t\tname: z.string(),\n\t\t\t\tdescription: z.string().optional(),\n\t\t\t\trequired: z.boolean().optional(),\n\t\t\t}),\n\t\t)\n\t\t.optional(),\n});\n\nexport type Prompt = z.infer<typeof PromptSchema>;\n\nexport interface CallToolRequest {\n\tname: string;\n\targuments?: Record<string, unknown>;\n}\n\nexport interface CallToolResult {\n\tcontent: Array<{\n\t\ttype: \"text\" | \"image\" | \"resource\";\n\t\ttext?: string;\n\t\tdata?: string;\n\t\tmimeType?: string;\n\t\tresource?: {\n\t\t\turi: string;\n\t\t\ttext?: string;\n\t\t\tblob?: string;\n\t\t};\n\t}>;\n\tisError?: boolean;\n}\n\nexport interface GetPromptRequest {\n\tname: string;\n\targuments?: Record<string, string>;\n}\n\nexport interface GetPromptResult {\n\tdescription?: string;\n\tmessages: Array<{\n\t\trole: \"user\" | \"assistant\";\n\t\tcontent:\n\t\t\t| { type: \"text\"; text: string }\n\t\t\t| { type: \"image\"; data: string; mimeType: string }\n\t\t\t| {\n\t\t\t\t\ttype: \"resource\";\n\t\t\t\t\tresource: { uri: string; text?: string; blob?: string };\n\t\t\t  };\n\t}>;\n}\n\nexport interface ServerInfo {\n\tname: string;\n\tversion: string;\n\tcapabilities?: {\n\t\tprompts?: { listChanged?: boolean };\n\t\tresources?: { subscribe?: boolean; listChanged?: boolean };\n\t\ttools?: { listChanged?: boolean };\n\t\tlogging?: Record<string, unknown>;\n\t};\n}\n\nexport interface McpRequest {\n\tmethod: string;\n\tparams?: unknown;\n\tid?: string | number | null;\n\tjsonrpc?: \"2.0\";\n}\n\nexport interface McpResponse {\n\tjsonrpc: \"2.0\";\n\tid?: string | number | null;\n\tresult?: unknown;\n\terror?: {\n\t\tcode: number;\n\t\tmessage: string;\n\t\tdata?: unknown;\n\t};\n}\n\n/**\n * Re-export AuthInfo from the security module for convenience.\n * Compatible with MCP TypeScript SDK AuthInfo interface shape.\n */\nexport type { AuthInfo } from \"./security/jwt-validator.js\";\n"]}