@oat-app/mcp-bridge 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 oat
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,122 @@
+# @oat-app/mcp-bridge
+
+`@oat-app/mcp-bridge` connects stdio MCP clients to the hosted oat MCP endpoint.
+
+The oat MCP server remains hosted at `https://oat-blond.vercel.app/api/mcp`.
+This package is only a local transport bridge.
+
+## Claude Code
+
+```bash
+claude mcp add oat \
+  --transport stdio \
+  --env OAT_MCP_TOKEN=oat_mcp_xxx \
+  -- npx -y @oat-app/mcp-bridge
+```
+
+Use a preview endpoint only when needed:
+
+```bash
+claude mcp add oat-preview \
+  --transport stdio \
+  --env OAT_MCP_TOKEN=oat_mcp_xxx \
+  --env OAT_MCP_URL=https://YOUR_PREVIEW_DOMAIN/api/mcp \
+  -- npx -y @oat-app/mcp-bridge
+```
+
+Verify with:
+
+```bash
+claude mcp list
+claude mcp get oat
+```
+
+## Generic MCP JSON
+
+Use this form for clients that accept `mcpServers` JSON.
+
+```json
+{
+  "mcpServers": {
+    "oat": {
+      "command": "npx",
+      "args": ["-y", "@oat-app/mcp-bridge"],
+      "env": {
+        "OAT_MCP_TOKEN": "oat_mcp_xxx"
+      }
+    }
+  }
+}
+```
+
+## Claude Desktop
+
+Add the same server entry to `claude_desktop_config.json`.
+
+```json
+{
+  "mcpServers": {
+    "oat": {
+      "command": "npx",
+      "args": ["-y", "@oat-app/mcp-bridge"],
+      "env": {
+        "OAT_MCP_TOKEN": "oat_mcp_xxx"
+      }
+    }
+  }
+}
+```
+
+## Codex
+
+Add this to `~/.codex/config.toml`:
+
+```toml
+[mcp_servers.oat]
+command = "npx"
+args = ["-y", "@oat-app/mcp-bridge"]
+env = { OAT_MCP_TOKEN = "oat_mcp_xxx" }
+```
+
+## ChatGPT
+
+ChatGPT does not use this stdio bridge package. For ChatGPT, test the hosted
+remote MCP endpoint directly:
+
+```text
+https://oat-blond.vercel.app/api/mcp
+```
+
+## Environment
+
+| Variable | Required | Description |
+| --- | --- | --- |
+| `OAT_MCP_TOKEN` | Yes | oat MCP token from `/settings/mcp` |
+| `OAT_MCP_URL` | No | Endpoint override. Defaults to `https://oat-blond.vercel.app/api/mcp` |
+| `OAT_MCP_DEBUG` | No | Set to `1` for stderr debug logs |
+| `OAT_MCP_TIMEOUT_MS` | No | Request timeout. Defaults to `30000` |
+
+Tokens are accepted only through environment variables. `--token` and `--url`
+arguments are intentionally not supported.
+
+## Debugging
+
+```json
+{
+  "env": {
+    "OAT_MCP_TOKEN": "oat_mcp_xxx",
+    "OAT_MCP_DEBUG": "1"
+  }
+}
+```
+
+Debug logs are written to stderr. stdout is reserved for MCP protocol messages.
+Token values are not printed.
+
+## Local Smoke Test
+
+```bash
+OAT_MCP_TOKEN=oat_mcp_xxx pnpm --filter @oat-app/mcp-bridge smoke
+```
+
+Use `OAT_MCP_URL` to test a preview deployment.

package/dist/bridge.d.ts

@@ -0,0 +1,3 @@
+import type { BridgeConfig } from "./config.js";
+import type { Logger } from "./logger.js";
+export declare function runBridge(config: BridgeConfig, logger: Logger): Promise<void>;

package/dist/bridge.js

@@ -0,0 +1,39 @@
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { PACKAGE_NAME, PACKAGE_VERSION } from "./constants.js";
+import { RemoteMcpClient } from "./remote.js";
+export async function runBridge(config, logger) {
+    const remote = new RemoteMcpClient(config, logger);
+    await remote.connect();
+    const server = new Server({
+        name: PACKAGE_NAME,
+        version: PACKAGE_VERSION,
+    }, {
+        capabilities: {
+            tools: {},
+        },
+    });
+    server.setRequestHandler(ListToolsRequestSchema, (request) => remote.listTools(request.params));
+    server.setRequestHandler(CallToolRequestSchema, (request) => remote.callTool(request.params));
+    const transport = new StdioServerTransport();
+    transport.onerror = (error) => {
+        logger.error("stdio transport error", { message: error.message });
+    };
+    const close = async () => {
+        await server.close();
+        await remote.close();
+    };
+    process.once("SIGINT", () => {
+        close()
+            .catch((error) => {
+            logger.error("failed to close bridge", {
+                message: error instanceof Error ? error.message : String(error),
+            });
+        })
+            .finally(() => process.exit(0));
+    });
+    await server.connect(transport);
+    logger.debug("stdio bridge started", { url: config.url.toString() });
+}
+//# sourceMappingURL=bridge.js.map

package/dist/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAoB,EACpB,MAAc;IAEd,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,eAAe;KACzB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CACF,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC3D,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CACjC,CAAC;IACF,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC1D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAChC,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,SAAS,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE;QAC5B,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC1B,KAAK,EAAE;aACJ,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBACrC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;QACL,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,12 @@
+export interface BridgeConfig {
+    url: URL;
+    token: string;
+    debug: boolean;
+    timeoutMs: number;
+    protocolVersion: string;
+    userAgent: string;
+}
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+export declare function loadConfig(env?: Record<string, string | undefined>): BridgeConfig;

package/dist/config.js

@@ -0,0 +1,39 @@
+import { DEFAULT_MCP_URL, DEFAULT_TIMEOUT_MS, MCP_PROTOCOL_VERSION, PACKAGE_NAME, PACKAGE_VERSION, } from "./constants.js";
+export class ConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ConfigError";
+    }
+}
+function parseTimeout(value) {
+    if (!value)
+        return DEFAULT_TIMEOUT_MS;
+    const timeoutMs = Number(value);
+    if (!Number.isInteger(timeoutMs) || timeoutMs <= 0) {
+        throw new ConfigError("OAT_MCP_TIMEOUT_MS must be a positive integer.");
+    }
+    return timeoutMs;
+}
+function parseUrl(value) {
+    try {
+        return new URL(value ?? DEFAULT_MCP_URL);
+    }
+    catch {
+        throw new ConfigError("OAT_MCP_URL must be a valid URL.");
+    }
+}
+export function loadConfig(env = process.env) {
+    const token = env.OAT_MCP_TOKEN?.trim();
+    if (!token) {
+        throw new ConfigError("OAT_MCP_TOKEN is required.");
+    }
+    return {
+        url: parseUrl(env.OAT_MCP_URL?.trim() || undefined),
+        token,
+        debug: env.OAT_MCP_DEBUG === "1" || env.OAT_MCP_DEBUG === "true",
+        timeoutMs: parseTimeout(env.OAT_MCP_TIMEOUT_MS),
+        protocolVersion: MCP_PROTOCOL_VERSION,
+        userAgent: `${PACKAGE_NAME}/${PACKAGE_VERSION}`,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAWxB,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC;IAEtC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,WAAW,CAAC,gDAAgD,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACtD,CAAC;IAED,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QACnD,KAAK;QACL,KAAK,EAAE,GAAG,CAAC,aAAa,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM;QAChE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC/C,eAAe,EAAE,oBAAoB;QACrC,SAAS,EAAE,GAAG,YAAY,IAAI,eAAe,EAAE;KAChD,CAAC;AACJ,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,5 @@
+export declare const PACKAGE_NAME = "@oat-app/mcp-bridge";
+export declare const PACKAGE_VERSION = "0.1.0";
+export declare const DEFAULT_MCP_URL = "https://oat-blond.vercel.app/api/mcp";
+export declare const MCP_PROTOCOL_VERSION = "2025-06-18";
+export declare const DEFAULT_TIMEOUT_MS = 30000;

package/dist/constants.js

@@ -0,0 +1,6 @@
+export const PACKAGE_NAME = "@oat-app/mcp-bridge";
+export const PACKAGE_VERSION = "0.1.0";
+export const DEFAULT_MCP_URL = "https://oat-blond.vercel.app/api/mcp";
+export const MCP_PROTOCOL_VERSION = "2025-06-18";
+export const DEFAULT_TIMEOUT_MS = 30_000;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,sCAAsC,CAAC;AACtE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import { runBridge } from "./bridge.js";
+import { loadConfig } from "./config.js";
+import { PACKAGE_NAME, PACKAGE_VERSION } from "./constants.js";
+import { createLogger } from "./logger.js";
+function printHelp() {
+    process.stdout.write(`${PACKAGE_NAME} ${PACKAGE_VERSION}
+
+Usage:
+  npx -y ${PACKAGE_NAME}
+
+Environment:
+  OAT_MCP_TOKEN       Required oat MCP token.
+  OAT_MCP_URL         Optional endpoint override.
+  OAT_MCP_DEBUG       Set to 1 for stderr debug logs.
+  OAT_MCP_TIMEOUT_MS  Optional request timeout in milliseconds.
+`);
+}
+async function main() {
+    const [arg] = process.argv.slice(2);
+    if (arg === "--help" || arg === "-h") {
+        printHelp();
+        return;
+    }
+    if (arg === "--version" || arg === "-v") {
+        process.stdout.write(`${PACKAGE_VERSION}\n`);
+        return;
+    }
+    if (arg) {
+        process.stderr.write(`Unknown argument: ${arg}\n`);
+        process.exitCode = 1;
+        return;
+    }
+    const config = loadConfig();
+    const logger = createLogger(config.debug);
+    await runBridge(config, logger);
+}
+main().catch((error) => {
+    process.stderr.write(`[oat-mcp-bridge] ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,SAAS,SAAS;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,IAAI,eAAe;;;WAG9C,YAAY;;;;;;;CAOtB,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpC,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACrC,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,IAAI,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;QACnD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC/E,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/json-rpc.d.ts

@@ -0,0 +1,14 @@
+export type JsonRpcId = string | number | null;
+export interface JsonRpcErrorObject {
+    code: number;
+    message: string;
+    data?: unknown;
+}
+export interface JsonRpcResponse {
+    jsonrpc: "2.0";
+    id: JsonRpcId;
+    result?: unknown;
+    error?: JsonRpcErrorObject;
+}
+export declare function isJsonRpcResponse(value: unknown): value is JsonRpcResponse;
+export declare function jsonRpcError(id: JsonRpcId, code: number, message: string, data?: unknown): JsonRpcResponse;

package/dist/json-rpc.js

@@ -0,0 +1,15 @@
+export function isJsonRpcResponse(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const candidate = value;
+    return (candidate.jsonrpc === "2.0" &&
+        ("result" in candidate || "error" in candidate));
+}
+export function jsonRpcError(id, code, message, data) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: data === undefined ? { code, message } : { code, message, data },
+    };
+}
+//# sourceMappingURL=json-rpc.js.map

package/dist/json-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-rpc.js","sourceRoot":"","sources":["../src/json-rpc.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEtD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,OAAO,CACL,SAAS,CAAC,OAAO,KAAK,KAAK;QAC3B,CAAC,QAAQ,IAAI,SAAS,IAAI,OAAO,IAAI,SAAS,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,EAAa,EACb,IAAY,EACZ,OAAe,EACf,IAAc;IAEd,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;KACxE,CAAC;AACJ,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,5 @@
+export interface Logger {
+    debug(message: string, fields?: Record<string, unknown>): void;
+    error(message: string, fields?: Record<string, unknown>): void;
+}
+export declare function createLogger(debugEnabled: boolean): Logger;

package/dist/logger.js

@@ -0,0 +1,21 @@
+function safeFields(fields) {
+    if (!fields)
+        return "";
+    const sanitized = Object.fromEntries(Object.entries(fields).filter(([key]) => !key.toLowerCase().includes("token")));
+    if (Object.keys(sanitized).length === 0)
+        return "";
+    return ` ${JSON.stringify(sanitized)}`;
+}
+export function createLogger(debugEnabled) {
+    return {
+        debug(message, fields) {
+            if (!debugEnabled)
+                return;
+            process.stderr.write(`[oat-mcp-bridge] ${message}${safeFields(fields)}\n`);
+        },
+        error(message, fields) {
+            process.stderr.write(`[oat-mcp-bridge] ${message}${safeFields(fields)}\n`);
+        },
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAKA,SAAS,UAAU,CAAC,MAA2C;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3B,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAChD,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,YAAqB;IAChD,OAAO;QACL,KAAK,CAAC,OAAO,EAAE,MAAM;YACnB,IAAI,CAAC,YAAY;gBAAE,OAAO;YAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CACrD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,EAAE,MAAM;YACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oBAAoB,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CACrD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/remote.d.ts

@@ -0,0 +1,150 @@
+import type { CallToolRequest, ListToolsRequest } from "@modelcontextprotocol/sdk/types.js";
+import type { BridgeConfig } from "./config.js";
+import type { Logger } from "./logger.js";
+export declare class RemoteMcpClient {
+    private readonly config;
+    private readonly logger;
+    private readonly client;
+    private readonly transport;
+    constructor(config: BridgeConfig, logger: Logger);
+    connect(): Promise<void>;
+    close(): Promise<void>;
+    listTools(params?: ListToolsRequest["params"]): Promise<{
+        [x: string]: unknown;
+        tools: {
+            inputSchema: {
+                [x: string]: unknown;
+                type: "object";
+                properties?: Record<string, object> | undefined;
+                required?: string[] | undefined;
+            };
+            name: string;
+            description?: string | undefined;
+            outputSchema?: {
+                [x: string]: unknown;
+                type: "object";
+                properties?: Record<string, object> | undefined;
+                required?: string[] | undefined;
+            } | undefined;
+            annotations?: {
+                title?: string | undefined;
+                readOnlyHint?: boolean | undefined;
+                destructiveHint?: boolean | undefined;
+                idempotentHint?: boolean | undefined;
+                openWorldHint?: boolean | undefined;
+            } | undefined;
+            execution?: {
+                taskSupport?: "optional" | "required" | "forbidden" | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+            icons?: {
+                src: string;
+                mimeType?: string | undefined;
+                sizes?: string[] | undefined;
+                theme?: "light" | "dark" | undefined;
+            }[] | undefined;
+            title?: string | undefined;
+        }[];
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+        nextCursor?: string | undefined;
+    }>;
+    callTool(params: CallToolRequest["params"]): Promise<{
+        [x: string]: unknown;
+        content: ({
+            type: "text";
+            text: string;
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            type: "image";
+            data: string;
+            mimeType: string;
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            type: "audio";
+            data: string;
+            mimeType: string;
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            type: "resource";
+            resource: {
+                uri: string;
+                text: string;
+                mimeType?: string | undefined;
+                _meta?: Record<string, unknown> | undefined;
+            } | {
+                uri: string;
+                blob: string;
+                mimeType?: string | undefined;
+                _meta?: Record<string, unknown> | undefined;
+            };
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: Record<string, unknown> | undefined;
+        } | {
+            uri: string;
+            name: string;
+            type: "resource_link";
+            description?: string | undefined;
+            mimeType?: string | undefined;
+            size?: number | undefined;
+            annotations?: {
+                audience?: ("user" | "assistant")[] | undefined;
+                priority?: number | undefined;
+                lastModified?: string | undefined;
+            } | undefined;
+            _meta?: {
+                [x: string]: unknown;
+            } | undefined;
+            icons?: {
+                src: string;
+                mimeType?: string | undefined;
+                sizes?: string[] | undefined;
+                theme?: "light" | "dark" | undefined;
+            }[] | undefined;
+            title?: string | undefined;
+        })[];
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+        structuredContent?: Record<string, unknown> | undefined;
+        isError?: boolean | undefined;
+    } | {
+        [x: string]: unknown;
+        toolResult: unknown;
+        _meta?: {
+            [x: string]: unknown;
+            progressToken?: string | number | undefined;
+            "io.modelcontextprotocol/related-task"?: {
+                taskId: string;
+            } | undefined;
+        } | undefined;
+    }>;
+}

package/dist/remote.js

@@ -0,0 +1,72 @@
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { PACKAGE_NAME, PACKAGE_VERSION } from "./constants.js";
+export class RemoteMcpClient {
+    config;
+    logger;
+    client;
+    transport;
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+        this.client = new Client({
+            name: PACKAGE_NAME,
+            version: PACKAGE_VERSION,
+        });
+        this.transport = new StreamableHTTPClientTransport(config.url, {
+            requestInit: {
+                headers: {
+                    Authorization: `Bearer ${config.token}`,
+                    "User-Agent": config.userAgent,
+                    "X-Oat-Mcp-Bridge": PACKAGE_NAME,
+                },
+            },
+        });
+        this.transport.setProtocolVersion(config.protocolVersion);
+    }
+    async connect() {
+        const startedAt = Date.now();
+        this.logger.debug("connecting remote MCP", {
+            url: this.config.url.toString(),
+            timeoutMs: this.config.timeoutMs,
+        });
+        await this.client.connect(this.transport, {
+            timeout: this.config.timeoutMs,
+        });
+        this.logger.debug("connected remote MCP", {
+            durationMs: Date.now() - startedAt,
+        });
+    }
+    async close() {
+        try {
+            await this.transport.terminateSession();
+        }
+        catch {
+            // The oat v0 endpoint is stateless and may not support session DELETE.
+        }
+        await this.client.close();
+    }
+    async listTools(params) {
+        const startedAt = Date.now();
+        const result = await this.client.listTools(params, {
+            timeout: this.config.timeoutMs,
+        });
+        this.logger.debug("forwarded tools/list", {
+            durationMs: Date.now() - startedAt,
+            toolCount: result.tools.length,
+        });
+        return result;
+    }
+    async callTool(params) {
+        const startedAt = Date.now();
+        const result = await this.client.callTool(params, undefined, {
+            timeout: this.config.timeoutMs,
+        });
+        this.logger.debug("forwarded tools/call", {
+            durationMs: Date.now() - startedAt,
+            toolName: params.name,
+        });
+        return result;
+    }
+}
+//# sourceMappingURL=remote.js.map

package/dist/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AAMnG,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG/D,MAAM,OAAO,eAAe;IAKP;IACA;IALF,MAAM,CAAS;IACf,SAAS,CAAgC;IAE1D,YACmB,MAAoB,EACpB,MAAc;QADd,WAAM,GAAN,MAAM,CAAc;QACpB,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,GAAG,IAAI,6BAA6B,CAAC,MAAM,CAAC,GAAG,EAAE;YAC7D,WAAW,EAAE;gBACX,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;oBACvC,YAAY,EAAE,MAAM,CAAC,SAAS;oBAC9B,kBAAkB,EAAE,YAAY;iBACjC;aACF;SACF,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;YACzC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SACjC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;YACxC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACxC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAmC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;YACjD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACxC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAiC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE;YAC3D,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;YACxC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,QAAQ,EAAE,MAAM,CAAC,IAAI;SACtB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/response.d.ts

@@ -0,0 +1,2 @@
+import { type JsonRpcId, type JsonRpcResponse } from "./json-rpc.js";
+export declare function normalizeRemoteResponse(requestId: JsonRpcId, bodyText: string): JsonRpcResponse;

package/dist/response.js

@@ -0,0 +1,15 @@
+import { isJsonRpcResponse, jsonRpcError, } from "./json-rpc.js";
+export function normalizeRemoteResponse(requestId, bodyText) {
+    let parsed;
+    try {
+        parsed = JSON.parse(bodyText);
+    }
+    catch {
+        return jsonRpcError(requestId, -32603, "oat MCP server returned a non-JSON response.");
+    }
+    if (isJsonRpcResponse(parsed)) {
+        return parsed;
+    }
+    return jsonRpcError(requestId, -32603, "oat MCP server returned an invalid JSON-RPC response.");
+}
+//# sourceMappingURL=response.js.map

package/dist/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../src/response.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAGjB,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,MAAM,UAAU,uBAAuB,CACrC,SAAoB,EACpB,QAAgB;IAEhB,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CACjB,SAAS,EACT,CAAC,KAAK,EACN,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,YAAY,CACjB,SAAS,EACT,CAAC,KAAK,EACN,uDAAuD,CACxD,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@oat-app/mcp-bridge",
+  "version": "0.1.0",
+  "description": "stdio MCP bridge for the hosted oat MCP endpoint",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "oat-mcp-bridge": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.23.3"
+  },
+  "devDependencies": {
+    "@types/node": "^20",
+    "tsx": "^4.21.0",
+    "typescript": "^5",
+    "vitest": "^4.1.3"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "smoke": "tsx scripts/smoke.ts"
+  }
+}