@nudge-ui/mcp 0.2.5 → 0.2.6

package/dist/adapterRouting.d.ts

@@ -3,7 +3,6 @@ export interface ProjectTarget {
     readonly workspaceRoot?: string;
     readonly sessionId?: string;
 }
-/** Keeps each explicit project selection independent for the lifetime of an MCP connection. */
 export declare class AdapterRouting {
     readonly registryRoot: string;
     private closing;

package/dist/adapterRouting.js

@@ -4,7 +4,6 @@ import { DiscoveredProjectRouter } from "./discovery.js";
 import { defaultSessionRegistryRoot, resolveWorkspaceRoot } from "./project.js";
 import { readLiveProjectSessions } from "./sessionRegistry.js";
 import { selectProjectSession } from "./sessionSelection.js";
-/** Keeps each explicit project selection independent for the lifetime of an MCP connection. */
 export class AdapterRouting {
     registryRoot;
     closing = false;

package/dist/bridge.d.ts

@@ -1,10 +1,9 @@
 import { type BridgeClock, type BridgeSessionControls } from "./bridgeSession.js";
 export interface BrowserBridgeOptions {
-    /** Stable project identity used to scope every browser message. */
     readonly projectId: string;
     /** Canonical app origin that pairing and Canvas routes must use. */
     readonly origin: string;
-    /** Other explicit browser origins accepted by the loopback HTTP server. */
+    /** Other explicit browser origins, such as loopback aliases on the same port. */
     readonly allowedOrigins?: readonly string[];
     readonly host?: "127.0.0.1" | "::1" | "localhost";
     /** Use port 0 in tests or when several projects run concurrently. */
@@ -23,15 +22,11 @@ export interface BridgeAddress {
     readonly port: number;
     readonly url: string;
 }
-/** A loopback HTTP server exposing one project session to its browser and MCP adapter. */
 export interface BrowserBridge extends BridgeSessionControls {
     readonly projectId: string;
     readonly address: BridgeAddress | null;
     start(): Promise<BridgeAddress>;
     close(): Promise<void>;
 }
-/**
- * Creates the local browser bridge. It binds only to loopback and keeps every
- * pairing, prompt, command, and acknowledgement in process memory.
- */
+/** Binds only to loopback and keeps every pairing, prompt, command, and acknowledgement in process memory. */
 export declare function createLoopbackBridge(options: BrowserBridgeOptions): BrowserBridge;

package/dist/bridge.js

@@ -187,10 +187,7 @@ function writeSse(response, envelope) {
         return false;
     }
 }
-/**
- * Creates the local browser bridge. It binds only to loopback and keeps every
- * pairing, prompt, command, and acknowledgement in process memory.
- */
+/** Binds only to loopback and keeps every pairing, prompt, command, and acknowledgement in process memory. */
 export function createLoopbackBridge(options) {
     const host = options.host ?? "127.0.0.1";
     if (!LOOPBACK_HOSTS.has(host))

package/dist/bridgeSession.d.ts

@@ -1,11 +1,13 @@
 import type { AgentActivity, AgentDeliveredPrompt, AgentRequestOutcome, AgentSketchAttachment, AgentStatusSnapshot, AgentStatusUpdate, BridgeEnvelope, CanvasCommand, CanvasCommandResult, FitCanvasCommand, FocusCanvasGroupCommand, PairingResponse, PresentRoutesCommand, PromptDispatchResponse, ReadCanvasStateCommand, RemoveCanvasGroupCommand } from "./internal/agent-protocol.js";
 export declare const AGENT_CLAIM_TIMEOUT_MS = 30000;
 export declare const AGENT_ACKNOWLEDGMENT_TIMEOUT_MS = 60000;
+/** Timer handle: Node returns Timeout objects and test clocks use numeric IDs; only the creating clock interprets it. */
+export type BridgeTimeoutHandle = NodeJS.Timeout | number;
 /** A clock port keeps command timeout and claim expiry tests deterministic. */
 export interface BridgeClock {
     now(): number;
-    setTimeout(callback: () => void, delayMs: number): unknown;
-    clearTimeout(handle: unknown): void;
+    setTimeout(callback: () => void, delayMs: number): BridgeTimeoutHandle;
+    clearTimeout(handle: BridgeTimeoutHandle): void;
 }
 type WithOptionalCommandId<T extends CanvasCommand> = Omit<T, "commandId"> & {
     readonly commandId?: string;
@@ -22,7 +24,6 @@ export interface BrowserStream {
     send(envelope: BridgeEnvelope): boolean;
     end(): void;
 }
-/** Proof that a request came from the paired browser. */
 export interface BrowserGrant {
     readonly origin: string;
     readonly sessionToken: string;
@@ -35,31 +36,23 @@ export interface PromptDispatchInput {
 }
 export interface ListenOptions {
     readonly signal?: AbortSignal;
-    /** MCP client name shown in the browser while this listener is active. */
+    /** Shown in the browser while this listener is active. */
     readonly agentClientName?: string;
 }
-/** In-process controls a host or an embedded agent uses on one project session. */
 export interface BridgeSessionControls {
     getStatus(): AgentStatusSnapshot;
-    /** Host-side approval of a browser origin from the allow-list. */
     pairBrowser(origin: string, pageUrl?: string): PairingResponse;
     /** Revokes the pairing and interrupts any working request. */
     disconnectBrowser(sessionToken: string): void;
-    /** Blocks until the paired browser dispatches a prompt. */
     waitForPrompt(options?: ListenOptions): Promise<AgentDeliveredPrompt>;
     /** Retrieves an unacknowledged request, including its sketch attachments. */
     getRequest(requestId: string): AgentDeliveredPrompt;
-    /** Reports the status of the request currently in flight. */
     updateRequestStatus(update: AgentStatusUpdate | AgentRequestOutcome): void;
-    /** Emits temporary source attribution for the working request. */
     reportActivity(activity: AgentActivity): void;
     /** Sends a Canvas command to the browser and waits for one bounded acknowledgement. */
     dispatchCanvasCommand(input: CanvasCommandInput): Promise<CanvasCommandResult>;
 }
-/**
- * The transport-free state of one project bridge. Browser-facing transitions
- * trust their caller to have authorized the request first.
- */
+/** Browser-facing transitions trust their caller to have authorized the request first. */
 export interface BridgeSession extends BridgeSessionControls {
     readonly projectId: string;
     readonly agentClaimed: boolean;
@@ -83,9 +76,7 @@ export interface BridgeSession extends BridgeSessionControls {
 }
 export interface BridgeSessionOptions {
     readonly projectId: string;
-    /** Canonical app origin that pairing and Canvas routes must use. */
     readonly origin: string;
-    /** Other explicit browser origins, such as loopback aliases on the same port. */
     readonly allowedOrigins?: readonly string[];
     readonly commandTimeoutMs?: number;
     readonly clock?: BridgeClock;

package/dist/bridgeSession.js

@@ -20,10 +20,11 @@ function canonicalOrigins(options) {
     const origins = [options.origin, ...(options.allowedOrigins ?? [])].map((candidate) => canonicalOrigin(candidate));
     if (origins[0] === null)
         throw new TypeError("origin must be a canonical HTTP(S) origin");
-    if (origins.some((candidate) => candidate === null)) {
+    const canonical = origins.filter((candidate) => candidate !== null);
+    if (canonical.length !== origins.length) {
         throw new TypeError("allowedOrigins must contain canonical HTTP(S) origins");
     }
-    return origins;
+    return canonical;
 }
 export function createBridgeSession(options) {
     const { projectId } = options;
@@ -79,8 +80,7 @@ export function createBridgeSession(options) {
     };
     const publishStatus = () => publish({ type: "status", status: getStatus() });
     const authorizeOrigin = (candidate) => {
-        // Before pairing only a configured origin is eligible; an empty allow-list
-        // stays closed rather than trusting the first caller.
+        // An empty allow-list stays closed rather than trusting the first caller.
         if (candidate && (candidate === pairing?.origin || isAllowedOrigin(candidate, allowedOrigins)))
             return candidate;
         throw new BridgeSessionError("origin_not_allowed", "The browser origin is not allowed for this project.");

package/dist/cli.d.ts

@@ -7,5 +7,4 @@ export type CliEnvironment = Readonly<Record<string, string | undefined>>;
 /** Serving takes no options; `doctor` accepts a diagnostic scope. */
 export declare function parseCliArguments(argv?: readonly string[], environment?: CliEnvironment): CliOptions;
 export declare const CLI_USAGE = "Usage: nudge-mcp [doctor] [options]\n\nStarts a standard MCP stdio adapter that discovers the bridges owned by running\nprojects. Every tool call names the checkout or application it targets.\n\nOptions:\n  --workspace-root <path>       doctor only: limit diagnostics to one checkout or application\n  --help                        Show this message\n";
-/** Runs the CLI until the stdio MCP connection closes or the process stops. */
 export declare function runCli(argv?: readonly string[], environment?: CliEnvironment): Promise<void>;

package/dist/cli.js

@@ -57,7 +57,6 @@ Options:
   --workspace-root <path>       doctor only: limit diagnostics to one checkout or application
   --help                        Show this message
 `;
-/** Runs the CLI until the stdio MCP connection closes or the process stops. */
 export async function runCli(argv = process.argv.slice(2), environment = process.env) {
     const options = parseCliArguments(argv, environment);
     if (options.help) {
@@ -106,8 +105,8 @@ export async function runCli(argv = process.argv.slice(2), environment = process
         await adapter.start();
         await new Promise((resolveAdapter) => {
             const finish = () => resolveAdapter();
-            // Keep a direct resolver so signal handlers terminate even though
-            // installing a signal handler suppresses Node's default process exit.
+            // Installing a signal handler suppresses Node's default exit, so the
+            // handler needs this direct resolver to terminate.
             resolveAdapterWait = finish;
             process.stdin.once("end", finish);
             process.once("exit", finish);

package/dist/discovery.d.ts

@@ -9,7 +9,7 @@ export interface DiscoveredProjectSession extends ProjectSession {
     readonly status: Pick<AgentStatusSnapshot, "connection" | "listenerActive" | "paired">;
 }
 export declare function discoverProjectSessions(applicationRoot: string | undefined, registryRoot?: string): Promise<DiscoveredProjectSession[]>;
-/** Routes MCP tools to one selected live project, following it across bridge restarts. */
+/** Follows one selected live project across bridge restarts. */
 export declare class DiscoveredProjectRouter {
     readonly workspaceRoot: string;
     readonly applicationRoot: string;

package/dist/discovery.js

@@ -33,7 +33,7 @@ export async function discoverProjectSessions(applicationRoot, registryRoot = de
         };
     }).sort((left, right) => right.startedAt.localeCompare(left.startedAt));
 }
-/** Routes MCP tools to one selected live project, following it across bridge restarts. */
+/** Follows one selected live project across bridge restarts. */
 export class DiscoveredProjectRouter {
     workspaceRoot;
     applicationRoot;

package/dist/internal/agent-protocol.d.ts

@@ -1,11 +1,4 @@
-/**
- * Public, host-neutral contracts shared by the Nudge browser inspector and
- * its local MCP companion.
- *
- * This module deliberately has no Node, browser, MCP SDK, or framework
- * imports. Hosts can use the same validation and message shapes without
- * pulling the companion into a browser bundle.
- */
+/** Host-neutral contracts shared by the browser inspector and the local MCP companion; no Node, browser, MCP SDK, or framework imports. */
 export declare const AGENT_PROTOCOL_VERSION: 3;
 export declare const AGENT_PROTOCOL_LIMITS: {
     readonly projectId: 256;
@@ -38,6 +31,18 @@ export declare const AGENT_PROTOCOL_LIMITS: {
     readonly agentClientName: 120;
 };
 export type AgentProtocolVersion = typeof AGENT_PROTOCOL_VERSION;
+/** Stable loopback endpoint names shared by the browser client and the MCP bridge. */
+export declare const BRIDGE_ENDPOINTS: {
+    readonly health: "/health";
+    readonly pair: "/pair";
+    readonly takeover: "/takeover";
+    readonly events: "/events";
+    readonly prompt: "/prompt";
+    readonly status: "/status";
+    readonly canvasAcknowledgement: "/canvas/ack";
+    readonly disconnect: "/disconnect";
+};
+export type BridgeEndpoint = (typeof BRIDGE_ENDPOINTS)[keyof typeof BRIDGE_ENDPOINTS];
 /** A project identity is the pairing boundary for one companion process. */
 export interface AgentProjectIdentity {
     readonly projectId: string;
@@ -54,14 +59,12 @@ export interface AgentRoute {
 }
 /** The owner marker lets the browser remove only groups created by the agent. */
 export type CanvasGroupOwner = "agent" | "user";
-/** A browser-reported comparison group. */
 export interface CanvasGroup {
     readonly id: string;
     readonly label: string;
     readonly owner: CanvasGroupOwner;
     readonly routes: readonly AgentRoute[];
 }
-/** A compact, serialisable Canvas snapshot returned by the browser. */
 export interface CanvasState {
     readonly mode: "inspect" | "canvas";
     readonly groups: readonly CanvasGroup[];
@@ -287,32 +290,16 @@ export interface ProjectBridgeHandle {
     };
     close(): Promise<void>;
 }
-/**
- * The `startProjectBridge` export of `@nudge-ui/mcp/project`. Hosts load it
- * dynamically from the application's own dependencies, so this type is the
- * only compile-time link between the two packages.
- */
+/** The `@nudge-ui/mcp/project` export; hosts load it dynamically, so this is the only compile-time link between the packages. */
 export type StartProjectBridge = (options: ProjectBridgeStartOptions) => Promise<ProjectBridgeHandle>;
-/**
- * Returns a canonical origin or null. Credentials, paths, and fragments are
- * rejected so the browser cannot broaden the pairing boundary accidentally.
- */
+/** Canonical origin or null; credentials, paths, and fragments are rejected so pairing cannot broaden accidentally. */
 export declare function canonicalOrigin(value: unknown): string | null;
-/** Returns true only for exact, canonical HTTP(S) origins. */
 export declare function isCanonicalOrigin(value: unknown): value is string;
-/**
- * Checks an origin against an explicit allow-list. An empty allow-list does
- * not mean wildcard access; callers must choose an origin before pairing.
- */
+/** An empty allow-list is not wildcard access; callers must choose an origin before pairing. */
 export declare function isAllowedOrigin(value: unknown, allowedOrigins: readonly string[]): value is string;
-/**
- * Validates an agent route and ensures it belongs to the paired origin.
- * Fragments are retained because they are useful initial Canvas locations.
- */
+/** Fragments are retained because they are useful initial Canvas locations. */
 export declare function isSameOriginRoute(value: unknown, origin: string): value is AgentRoute;
-/** Validates and normalises route values for a presentation command. */
 export declare function validateRoutes(value: unknown, origin: string): AgentRoute[];
-/** Validates the fields shared by every companion message. */
 export declare function isProtocolVersion(value: unknown): value is AgentProtocolVersion;
 export declare function isProjectIdentity(value: unknown): value is AgentProjectIdentity;
 export declare function isAgentSketchCaptureMetadata(value: unknown): value is AgentSketchCaptureMetadata;
@@ -326,21 +313,12 @@ export declare function isCanvasState(value: unknown): value is CanvasState;
 export declare function isCanvasGroup(value: unknown): value is CanvasGroup;
 export declare function isCanvasCommand(value: unknown): value is CanvasCommand;
 export declare function isAgentDeliveredPrompt(value: unknown): value is AgentDeliveredPrompt;
-/** A Canvas acknowledgement or result; a successful one never carries an error. */
+/** A successful result never carries an error. */
 export declare function isCanvasCommandResult(value: unknown): value is CanvasCommandResult;
-/** The connection state shown for a pairing, a listener, and the current request. */
 export declare function deriveConnectionState(status: Pick<AgentStatusSnapshot, "listenerActive" | "paired" | "request">): AgentConnectionState;
-/**
- * Decodes a status snapshot from any peer. Unknown fields are dropped and the
- * connection state is recomputed, so a snapshot can never claim a state its
- * own fields contradict.
- */
+/** Unknown fields are dropped and the connection state is recomputed, so a snapshot cannot claim a state its own fields contradict. */
 export declare function decodeAgentStatusSnapshot(value: unknown): AgentStatusSnapshot | null;
-/**
- * Decodes the event inside a bridge envelope. A Canvas command is passed
- * through as received: the Canvas controller validates it so a malformed
- * command still receives an error acknowledgement instead of a timeout.
- */
+/** A Canvas command is passed through as received: the Canvas controller validates it so a malformed command still receives an error acknowledgement. */
 export declare function decodeBridgeEvent(value: unknown): BridgeEvent | null;
 /** Decodes a pairing or takeover response for the exact project and origin requested. */
 export declare function decodePairingResponse(value: unknown, expected: Pick<PairingRequest, "projectId" | "origin">): PairingResponse | null;

package/dist/internal/agent-protocol.js

@@ -1,11 +1,4 @@
-/**
- * Public, host-neutral contracts shared by the Nudge browser inspector and
- * its local MCP companion.
- *
- * This module deliberately has no Node, browser, MCP SDK, or framework
- * imports. Hosts can use the same validation and message shapes without
- * pulling the companion into a browser bundle.
- */
+/** Host-neutral contracts shared by the browser inspector and the local MCP companion; no Node, browser, MCP SDK, or framework imports. */
 export const AGENT_PROTOCOL_VERSION = 3;
 export const AGENT_PROTOCOL_LIMITS = {
     projectId: 256,
@@ -37,6 +30,17 @@ export const AGENT_PROTOCOL_LIMITS = {
     canvasCardCount: 128,
     agentClientName: 120,
 };
+/** Stable loopback endpoint names shared by the browser client and the MCP bridge. */
+export const BRIDGE_ENDPOINTS = {
+    health: "/health",
+    pair: "/pair",
+    takeover: "/takeover",
+    events: "/events",
+    prompt: "/prompt",
+    status: "/status",
+    canvasAcknowledgement: "/canvas/ack",
+    disconnect: "/disconnect",
+};
 export const CANVAS_COMMAND_TYPES = [
     "read-state",
     "present-routes",
@@ -93,10 +97,7 @@ function encodedByteLength(value) {
     const padding = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
     return Math.max(0, Math.floor(value.length * 3 / 4) - padding);
 }
-/**
- * Returns a canonical origin or null. Credentials, paths, and fragments are
- * rejected so the browser cannot broaden the pairing boundary accidentally.
- */
+/** Canonical origin or null; credentials, paths, and fragments are rejected so pairing cannot broaden accidentally. */
 export function canonicalOrigin(value) {
     if (!nonEmptyString(value, AGENT_PROTOCOL_LIMITS.origin))
         return null;
@@ -113,24 +114,17 @@ export function canonicalOrigin(value) {
         return null;
     return parsed.origin;
 }
-/** Returns true only for exact, canonical HTTP(S) origins. */
 export function isCanonicalOrigin(value) {
     return canonicalOrigin(value) === value;
 }
-/**
- * Checks an origin against an explicit allow-list. An empty allow-list does
- * not mean wildcard access; callers must choose an origin before pairing.
- */
+/** An empty allow-list is not wildcard access; callers must choose an origin before pairing. */
 export function isAllowedOrigin(value, allowedOrigins) {
     const origin = canonicalOrigin(value);
     if (!origin || allowedOrigins.length === 0)
         return false;
     return allowedOrigins.some((candidate) => canonicalOrigin(candidate) === origin);
 }
-/**
- * Validates an agent route and ensures it belongs to the paired origin.
- * Fragments are retained because they are useful initial Canvas locations.
- */
+/** Fragments are retained because they are useful initial Canvas locations. */
 export function isSameOriginRoute(value, origin) {
     if (!isRecord(value) || !hasOnlyKeys(value, ["url", "title", "label"]))
         return false;
@@ -154,7 +148,6 @@ export function isSameOriginRoute(value, origin) {
         return false;
     return true;
 }
-/** Validates and normalises route values for a presentation command. */
 export function validateRoutes(value, origin) {
     if (!Array.isArray(value) || value.length === 0 || value.length > AGENT_PROTOCOL_LIMITS.routeCount) {
         throw new TypeError(`routes must contain between 1 and ${AGENT_PROTOCOL_LIMITS.routeCount} items`);
@@ -175,7 +168,6 @@ export function validateRoutes(value, origin) {
         };
     });
 }
-/** Validates the fields shared by every companion message. */
 export function isProtocolVersion(value) {
     return value === AGENT_PROTOCOL_VERSION;
 }
@@ -418,7 +410,7 @@ function isCanvasCommandError(value) {
         && nonEmptyString(value.code, 128)
         && typeof value.message === "string" && value.message.length <= AGENT_PROTOCOL_LIMITS.prompt;
 }
-/** A Canvas acknowledgement or result; a successful one never carries an error. */
+/** A successful result never carries an error. */
 export function isCanvasCommandResult(value) {
     if (!isRecord(value) || !hasOnlyKeys(value, ["commandId", "ok", "state", "group", "error"]))
         return false;
@@ -428,7 +420,6 @@ export function isCanvasCommandResult(value) {
         && (value.group === undefined || isCanvasGroup(value.group))
         && (value.error === undefined || (!value.ok && isCanvasCommandError(value.error)));
 }
-/** The connection state shown for a pairing, a listener, and the current request. */
 export function deriveConnectionState(status) {
     if (status.request?.status === "delivered")
         return "delivered";
@@ -460,11 +451,7 @@ function decodeStatusRequest(value) {
         ...(error === undefined ? {} : { error }),
     };
 }
-/**
- * Decodes a status snapshot from any peer. Unknown fields are dropped and the
- * connection state is recomputed, so a snapshot can never claim a state its
- * own fields contradict.
- */
+/** Unknown fields are dropped and the connection state is recomputed, so a snapshot cannot claim a state its own fields contradict. */
 export function decodeAgentStatusSnapshot(value) {
     if (!isRecord(value)
         || value.protocolVersion !== AGENT_PROTOCOL_VERSION
@@ -491,11 +478,7 @@ export function decodeAgentStatusSnapshot(value) {
             : {}),
     };
 }
-/**
- * Decodes the event inside a bridge envelope. A Canvas command is passed
- * through as received: the Canvas controller validates it so a malformed
- * command still receives an error acknowledgement instead of a timeout.
- */
+/** A Canvas command is passed through as received: the Canvas controller validates it so a malformed command still receives an error acknowledgement. */
 export function decodeBridgeEvent(value) {
     if (!isRecord(value))
         return null;

package/dist/project.d.ts

@@ -19,7 +19,6 @@ export interface ProjectBridgeOptions {
     readonly workspaceRoot?: string;
     readonly projectId?: string;
     readonly origin: string;
-    /** Other explicit browser origins, such as loopback aliases on the same port. */
     readonly allowedOrigins?: readonly string[];
     readonly host?: "127.0.0.1" | "::1" | "localhost";
     readonly port?: number;
@@ -45,10 +44,6 @@ export interface StoredProjectSession extends ProjectSession {
 export declare function defaultSessionRegistryRoot(): string;
 /** Resolves a checkout or worktree without conflating related worktrees. */
 export declare function resolveWorkspaceRoot(input: string): Promise<string>;
-/**
- * Starts the project-owned browser bridge and registers it for local MCP
- * adapters. The descriptor contains a private control credential and is never
- * suitable for browser bundles or user-facing tool results.
- */
+/** The descriptor carries a private control credential; never expose it to browser bundles or tool results. */
 export declare const startProjectBridge: (options: ProjectBridgeOptions) => Promise<ProjectBridgeRuntime>;
 export {};

package/dist/project.js

@@ -9,9 +9,8 @@ import { createLoopbackBridge } from "./bridge.js";
 const execFileAsync = promisify(execFile);
 const REGISTRY_SCHEMA_VERSION = 1;
 export function defaultSessionRegistryRoot() {
-    // MCP hosts commonly sanitize TMPDIR and XDG_RUNTIME_DIR for stdio child
-    // processes. The OS account home is stable across the development server
-    // and agent adapter, so both processes discover the same private registry.
+    // MCP hosts sanitize TMPDIR and XDG_RUNTIME_DIR for stdio child processes;
+    // the OS account home is stable across the development server and adapter.
     return join(userInfo().homedir, ".cache", "nudge-ui", "sessions");
 }
 async function gitValue(cwd, args) {
@@ -92,11 +91,7 @@ async function closeProjectBridge(descriptorPath, bridge) {
         await bridge.close();
     }
 }
-/**
- * Starts the project-owned browser bridge and registers it for local MCP
- * adapters. The descriptor contains a private control credential and is never
- * suitable for browser bundles or user-facing tool results.
- */
+/** The descriptor carries a private control credential; never expose it to browser bundles or tool results. */
 export const startProjectBridge = (async (options) => {
     const origin = canonicalOrigin(options.origin);
     if (!origin)

package/dist/projectSessionClient.d.ts

@@ -7,14 +7,11 @@ export interface SessionHealth {
     readonly claimed: boolean;
     readonly status: AgentStatusSnapshot;
 }
-/** Represents an HTTP response from a project bridge that could be classified. */
 export declare class ProjectSessionResponseError extends Error {
     readonly status: number;
     constructor(status: number, message: string);
 }
-/** Reads and validates a bridge's health; an invalid body is a classified response error. */
 export declare function readSessionHealth(session: StoredProjectSession, timeoutMs?: number): Promise<SessionHealth>;
-/** Owns one project's claim, heartbeat, and authenticated control requests. */
 export declare class ProjectSessionClient {
     readonly descriptor: StoredProjectSession;
     readonly agentId: string;

package/dist/projectSessionClient.js

@@ -3,7 +3,6 @@ import { decodeAgentStatusSnapshot, isAgentDeliveredPrompt, isCanvasCommandResul
 import { AGENT_CONTROL_ENDPOINTS } from "./protocol.js";
 const CONTROL_TIMEOUT_MS = 5_000;
 const CANVAS_TIMEOUT_MS = 65_000;
-/** Represents an HTTP response from a project bridge that could be classified. */
 export class ProjectSessionResponseError extends Error {
     status;
     constructor(status, message) {
@@ -48,11 +47,9 @@ async function requestJson(session, path, decode, init = {}, { signal, timeoutMs
     }
     return decoded;
 }
-/** Reads and validates a bridge's health; an invalid body is a classified response error. */
 export async function readSessionHealth(session, timeoutMs = CONTROL_TIMEOUT_MS) {
     return await requestJson(session, AGENT_CONTROL_ENDPOINTS.health, decodeSessionHealth, {}, { timeoutMs });
 }
-/** Owns one project's claim, heartbeat, and authenticated control requests. */
 export class ProjectSessionClient {
     descriptor;
     agentId;

package/dist/protocol.d.ts

@@ -1,23 +1,8 @@
-/**
- * Companion-facing aliases and transport envelopes.
- *
- * The domain contracts live in the private shared protocol module. This public
- * subpath keeps transport names discoverable for Node consumers while
- * preserving one protocol vocabulary for browser and agent adapters.
- */
 export { AGENT_PROTOCOL_LIMITS, AGENT_PROTOCOL_VERSION, CANVAS_COMMAND_TYPES, canonicalOrigin, isAgentPromptRequest, isAgentSketchAttachment, isAgentSketchCaptureMetadata, isAgentSketchMetadata, isAgentStatusUpdate, isAgentActivity, isAllowedOrigin, isCanvasCommand, isCanvasGroup, isCanvasState, isCanonicalOrigin, isProjectIdentity, isSameOriginRoute, protocolError, validateSketchAttachments, validateRoutes, } from "./internal/agent-protocol.js";
 export type { AgentActivity, BridgeActivityEvent, AgentConnectionState, AgentProjectIdentity, AgentPromptRequest, AgentDeliveredPrompt, AgentSketchAttachment, AgentSketchCaptureMetadata, AgentSketchMetadata, AgentRequestOutcome, AgentRequestStatus, AgentRoute, AgentStatusSnapshot, AgentStatusUpdate, BridgeCanvasCommandEvent, BridgeConnectedEvent, BridgeDisconnectedEvent, BridgeEnvelope, BridgeEvent, BridgeEventType, BridgeStatusEvent, CanvasCommand, CanvasCommandAcknowledgement, CanvasCommandError, CanvasCommandResult, CanvasGroup, CanvasGroupOwner, CanvasState, FitCanvasCommand, FocusCanvasGroupCommand, PairingRequest, PairingResponse, PresentRoutesCommand, PromptDispatchRequest, PromptDispatchResponse, ReadCanvasStateCommand, RemoveCanvasGroupCommand, StatusEventRequest, } from "./internal/agent-protocol.js";
 /** Stable endpoint names used by the loopback browser bridge. */
-export declare const BRIDGE_ENDPOINTS: {
-    readonly health: "/health";
-    readonly pair: "/pair";
-    readonly takeover: "/takeover";
-    readonly events: "/events";
-    readonly prompt: "/prompt";
-    readonly status: "/status";
-    readonly canvasAcknowledgement: "/canvas/ack";
-    readonly disconnect: "/disconnect";
-};
+export { BRIDGE_ENDPOINTS } from "./internal/agent-protocol.js";
+export type { BridgeEndpoint } from "./internal/agent-protocol.js";
 /** Private, loopback-only endpoints used by an MCP adapter process. */
 export declare const AGENT_CONTROL_ENDPOINTS: {
     readonly health: "/__nudge/agent/health";
@@ -31,8 +16,6 @@ export declare const AGENT_CONTROL_ENDPOINTS: {
     readonly activity: "/__nudge/agent/activity";
     readonly canvas: "/__nudge/agent/canvas";
 };
-export type BridgeEndpoint = (typeof BRIDGE_ENDPOINTS)[keyof typeof BRIDGE_ENDPOINTS];
-/** Error body returned by every rejected bridge request. */
 export interface BridgeHttpError {
     readonly error: {
         readonly code: string;

package/dist/protocol.js

@@ -1,22 +1,6 @@
-/**
- * Companion-facing aliases and transport envelopes.
- *
- * The domain contracts live in the private shared protocol module. This public
- * subpath keeps transport names discoverable for Node consumers while
- * preserving one protocol vocabulary for browser and agent adapters.
- */
 export { AGENT_PROTOCOL_LIMITS, AGENT_PROTOCOL_VERSION, CANVAS_COMMAND_TYPES, canonicalOrigin, isAgentPromptRequest, isAgentSketchAttachment, isAgentSketchCaptureMetadata, isAgentSketchMetadata, isAgentStatusUpdate, isAgentActivity, isAllowedOrigin, isCanvasCommand, isCanvasGroup, isCanvasState, isCanonicalOrigin, isProjectIdentity, isSameOriginRoute, protocolError, validateSketchAttachments, validateRoutes, } from "./internal/agent-protocol.js";
 /** Stable endpoint names used by the loopback browser bridge. */
-export const BRIDGE_ENDPOINTS = {
-    health: "/health",
-    pair: "/pair",
-    takeover: "/takeover",
-    events: "/events",
-    prompt: "/prompt",
-    status: "/status",
-    canvasAcknowledgement: "/canvas/ack",
-    disconnect: "/disconnect",
-};
+export { BRIDGE_ENDPOINTS } from "./internal/agent-protocol.js";
 /** Private, loopback-only endpoints used by an MCP adapter process. */
 export const AGENT_CONTROL_ENDPOINTS = {
     health: "/__nudge/agent/health",

package/dist/server.d.ts

@@ -11,7 +11,6 @@ export interface DiscoveredAgentAdapter {
     start(transport?: Transport): Promise<void>;
     close(): Promise<void>;
 }
-/** Creates a stdio MCP adapter that discovers project-owned bridges. */
 export declare function createDiscoveredAgentAdapter(options?: {
     readonly registryRoot?: string;
     readonly serverName?: string;

package/dist/server.js

@@ -278,7 +278,6 @@ function installTools(mcpServer, routing) {
         }
     });
 }
-/** Creates a stdio MCP adapter that discovers project-owned bridges. */
 export function createDiscoveredAgentAdapter(options = {}) {
     const router = new AdapterRouting(options.registryRoot);
     const mcpServer = new McpServer({

package/dist/sessionRegistry.d.ts

@@ -11,7 +11,5 @@ export interface SessionInspection {
     readonly unreachable: readonly Pick<StoredProjectSession, "workspaceRoot" | "appRoot" | "sessionId">[];
     readonly live: LiveProjectSession[];
 }
-/** Separates absent, invalid, incompatible, and unreachable registrations. */
 export declare function inspectProjectSessions(registryRoot: string): Promise<SessionInspection>;
-/** Keeps only compatible bridges that answer authenticated probes. */
 export declare function readLiveProjectSessions(registryRoot: string): Promise<LiveProjectSession[]>;

package/dist/sessionRegistry.js

@@ -4,7 +4,6 @@ import { AGENT_PROTOCOL_VERSION } from "./internal/agent-protocol.js";
 import { ProjectSessionResponseError, readSessionHealth } from "./projectSessionClient.js";
 const PROBE_TIMEOUT_MS = 750;
 const MAX_DESCRIPTOR_BYTES = 32 * 1024;
-/** Separates absent, invalid, incompatible, and unreachable registrations. */
 export async function inspectProjectSessions(registryRoot) {
     const names = (await readRegistryDirectory(registryRoot)).filter((name) => name.endsWith(".json"));
     const records = await Promise.all(names.map((name) => readDescriptor(resolve(registryRoot, name))));
@@ -20,7 +19,6 @@ export async function inspectProjectSessions(registryRoot) {
         live: probes.flatMap((probe) => probe.kind === "live" ? [probe.session] : []),
     };
 }
-/** Keeps only compatible bridges that answer authenticated probes. */
 export async function readLiveProjectSessions(registryRoot) {
     return (await inspectProjectSessions(registryRoot)).live;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nudge-ui/mcp",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Optional local MCP companion for pairing Nudge UI with coding agents.",
   "license": "MIT",
   "repository": {