@particle-academy/agent-integrations 0.45.0 → 0.47.0

package/dist/relay-server-cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/relay-server/cli.ts"],"names":[],"mappings":";;;;AAuBA,eAAe,IAAA,GAAO;AACpB,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AACjC,EAAA,IAAI,IAAA,GAAO,MAAA,CAAO,OAAA,CAAQ,GAAA,CAAI,QAAQ,IAAI,CAAA;AAI1C,EAAA,IAAI,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,IAAA,IAAQ,WAAA;AAC/B,EAAA,IAAI,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,MAAA,IAAU,EAAA;AACnC,EAAA,IAAI,KAAA,GAAQ,OAAO,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA,GAAI,EAAA,GAAK,KAAK,GAAI,CAAA;AAC3D,EAAA,IAAI,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,GAAA;AAE5C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,CAAA,GAAI,KAAK,CAAC,CAAA;AAChB,IAAA,QAAQ,CAAA;AAAG,MACT,KAAK,QAAA;AAAU,QAAA,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,EAAE,CAAC,CAAC,CAAA;AAAG,QAAA;AAAA,MACzC,KAAK,QAAA;AAAU,QAAA,IAAA,GAAO,IAAA,CAAK,EAAE,CAAC,CAAA;AAAG,QAAA;AAAA,MACjC,KAAK,UAAA;AAAY,QAAA,MAAA,GAAS,IAAA,CAAK,EAAE,CAAC,CAAA;AAAG,QAAA;AAAA,MACrC,KAAK,UAAA;AAAY,QAAA,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAC,CAAC,CAAA;AAAG,QAAA;AAAA,MAC5C,KAAK,QAAA;AAAU,QAAA,IAAA,GAAO,IAAA,CAAK,EAAE,CAAC,CAAA;AAAG,QAAA;AAAA,MACjC,KAAK,IAAA;AAAA,MACL,KAAK,QAAA;AACH,QAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,IAAI,CAAA;AACzB,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,MAChB;AACE,QAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,sBAAA,EAAyB,CAAC;AAAA,CAAI,CAAA;AACnD,QAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA;AAClB,EACF;AAEA,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,IAAK,QAAQ,CAAA,EAAG;AACvC,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,wBAAA,EAA2B,IAAI;AAAA,CAAI,CAAA;AACxD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,KAAA,GAAQ,gBAAgB,EAAE,UAAA,EAAY,QAAQ,KAAA,EAAO,eAAA,EAAiB,MAAM,CAAA;AAElF,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,CAAC,GAAA,EAAK,GAAA,KAAQ;AAExC,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,IAAO,GAAA;AACvB,IAAA,IAAA,CAAK,GAAA,KAAQ,OAAO,GAAA,KAAQ,UAAA,IAAc,QAAS,MAAA,GAAS,GAAA,KAAS,GAAA,CAAI,MAAA,KAAW,KAAA,EAAO;AACzF,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,MAAA,GAAA,CAAI,GAAA,CAAI,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,EAAM,OAAA,EAAS,0BAAA,EAA4B,CAAC,CAAA;AACzE,MAAA;AAAA,IACF;AACA,IAAA,KAAA,CAAM,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,EACxB,CAAC,CAAA;AAED,EAAA,MAAM,UAAA,GAAa,IAAA,KAAS,WAAA,IAAe,IAAA,KAAS,SAAS,IAAA,KAAS,WAAA;AACtE,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb,4BAA4B,IAAI,CAAA;AAAA;AAAA,KAGlC;AAAA,EACF;AACA,EAAA,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,MAAM;AAC9B,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb,CAAA,4BAAA,EAA+B,IAAI,CAAA,CAAA,EAAI,IAAI,GAAG,MAAA,IAAU,EAAE,CAAA,MAAA,EAChD,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,GAAI,CAAC,WAAW,IAAI,CAAA;AAAA;AAAA,KACnD;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,WAAW,MAAM;AACrB,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,yBAAyB,CAAA;AAC9C,IAAA,KAAA,CAAM,OAAO,OAAA,EAAQ;AACrB,IAAA,MAAA,CAAO,KAAA,CAAM,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAC,CAAA;AAClC,IAAA,UAAA,CAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,EAAG,GAAI,EAAE,KAAA,EAAM;AAAA,EAChD,CAAA;AACA,EAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,QAAQ,CAAA;AAC9B,EAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,QAAQ,CAAA;AAC/B;AAEA,IAAM,IAAA,GAAO,CAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAuBb,IAAA,EAAK,CAAE,KAAA,CAAM,CAAC,CAAA,KAAM;AAClB,EAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,eAAA,EAAkB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,KAAA,IAAS,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC;AAAA,CAAI,CAAA;AAChG,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB,CAAC,CAAA","file":"relay-server-cli.js","sourcesContent":["#!/usr/bin/env node\nimport { createServer } from \"node:http\";\nimport { createNodeRelay } from \"./node\";\n\n/**\n * `agent-integrations-relay` — standalone Node HTTP server hosting the\n * SSE+POST relay broker. End users hit `Start share` on a /ui/demos\n * page, get a session URL pointing at this service, and paste it into\n * their MCP client. No state persists across restarts.\n *\n * Flags:\n *   --port <n>          Listen port. Default 8787.\n *   --host <addr>       Bind address. Default 127.0.0.1 (loopback). Pass\n *                       0.0.0.0 to expose on all interfaces (warns).\n *   --prefix <path>     URL path prefix (no trailing slash). Default \"\".\n *                       Useful when mounting behind a reverse proxy.\n *   --ttl-ms <n>        Session TTL ms. Default 14_400_000 (4h).\n *   --cors <origin>     Access-Control-Allow-Origin. Default \"*\".\n *   -h, --help          Show this help.\n *\n * Health: any request to `/` returns 200 OK so platform health checks\n * pass without authenticating.\n */\nasync function main() {\n  const argv = process.argv.slice(2);\n  let port = Number(process.env.PORT ?? 8787);\n  // Loopback by default: this relay fronts terminal_run (RCE) and register is\n  // unauthenticated, so it must not listen on all interfaces unless the operator\n  // explicitly opts in with --host 0.0.0.0.\n  let host = process.env.HOST ?? \"127.0.0.1\";\n  let prefix = process.env.PREFIX ?? \"\";\n  let ttlMs = Number(process.env.TTL_MS ?? 4 * 60 * 60 * 1000);\n  let cors = process.env.CORS_ALLOW_ORIGIN ?? \"*\";\n\n  for (let i = 0; i < argv.length; i++) {\n    const a = argv[i];\n    switch (a) {\n      case \"--port\": port = Number(argv[++i]); break;\n      case \"--host\": host = argv[++i]; break;\n      case \"--prefix\": prefix = argv[++i]; break;\n      case \"--ttl-ms\": ttlMs = Number(argv[++i]); break;\n      case \"--cors\": cors = argv[++i]; break;\n      case \"-h\":\n      case \"--help\":\n        process.stdout.write(HELP);\n        process.exit(0);\n      default:\n        process.stderr.write(`[relay] unknown flag: ${a}\\n`);\n        process.exit(2);\n    }\n  }\n\n  if (!Number.isFinite(port) || port <= 0) {\n    process.stderr.write(`[relay] invalid --port: ${port}\\n`);\n    process.exit(2);\n  }\n\n  const relay = createNodeRelay({ pathPrefix: prefix, ttlMs, corsAllowOrigin: cors });\n\n  const server = createServer((req, res) => {\n    // Health: GET / always 200 so platform health checks succeed without auth.\n    const url = req.url || \"/\";\n    if ((url === \"/\" || url === \"/healthz\" || url === (prefix + \"/\")) && req.method === \"GET\") {\n      res.statusCode = 200;\n      res.setHeader(\"content-type\", \"application/json\");\n      res.end(JSON.stringify({ ok: true, service: \"agent-integrations-relay\" }));\n      return;\n    }\n    relay.handler(req, res);\n  });\n\n  const isLoopback = host === \"127.0.0.1\" || host === \"::1\" || host === \"localhost\";\n  if (!isLoopback) {\n    process.stderr.write(\n      `[relay] WARNING: binding ${host} exposes the relay on non-loopback interfaces. ` +\n        `register is unauthenticated and a leaked session token grants terminal_run. ` +\n        `Only do this behind an authenticating proxy / trusted network.\\n`,\n    );\n  }\n  server.listen(port, host, () => {\n    process.stdout.write(\n      `[relay] listening on http://${host}:${port}${prefix || \"\"} ` +\n        `(ttl=${Math.round(ttlMs / 1000)}s, cors=${cors})\\n`,\n    );\n  });\n\n  const shutdown = () => {\n    process.stdout.write(\"[relay] shutting down\\n\");\n    relay.broker.dispose();\n    server.close(() => process.exit(0));\n    setTimeout(() => process.exit(0), 2000).unref();\n  };\n  process.on(\"SIGTERM\", shutdown);\n  process.on(\"SIGINT\", shutdown);\n}\n\nconst HELP = `agent-integrations-relay — Node HTTP server for the MCP relay broker.\n\nUsage: agent-integrations-relay [options]\n\nOptions:\n  --port <n>          Listen port (env: PORT). Default 8787.\n  --host <addr>       Bind address (env: HOST). Default 127.0.0.1 (loopback).\n                      Pass 0.0.0.0 to expose on all interfaces (prints a warning).\n  --prefix <path>     URL path prefix (env: PREFIX). Default \"\".\n  --ttl-ms <n>        Session TTL ms (env: TTL_MS). Default 14_400_000.\n  --cors <origin>     CORS Access-Control-Allow-Origin (env: CORS_ALLOW_ORIGIN). Default \"*\".\n  -h, --help          Show this help.\n\nEndpoints (under --prefix):\n  POST  /register                          { session, token } → { ok: true }\n  POST  /<session>/inbox?token=...         body: JSON-RPC frame\n  POST  /<session>/outbox?token=...        body: JSON-RPC frame\n  GET   /<session>/events?token=...&direction=inbound|outbound\n                                           Server-sent events stream\n  POST  /<session>/unregister?token=...    Tear down session\n  GET   /                                  Healthcheck → 200\n`;\n\nmain().catch((e) => {\n  process.stderr.write(`[relay] fatal: ${e instanceof Error ? e.stack ?? e.message : String(e)}\\n`);\n  process.exit(1);\n});\n"]}
+{"version":3,"sources":["../src/relay-server/args.ts","../src/relay-server/cli.ts"],"names":[],"mappings":";;;;;AAmCA,IAAM,QAAA,GAAyE;AAAA,EAC7E,MAAM,EAAE,IAAA,EAAM,UAAU,GAAA,EAAK,MAAA,EAAQ,UAAU,MAAA,EAAO;AAAA;AAAA;AAAA;AAAA,EAItD,MAAM,EAAE,IAAA,EAAM,UAAU,GAAA,EAAK,MAAA,EAAQ,UAAU,WAAA,EAAY;AAAA,EAC3D,QAAQ,EAAE,IAAA,EAAM,YAAY,GAAA,EAAK,QAAA,EAAU,UAAU,EAAA,EAAG;AAAA,EACxD,KAAA,EAAO,EAAE,IAAA,EAAM,UAAA,EAAY,GAAA,EAAK,QAAA,EAAU,QAAA,EAAU,MAAA,CAAO,CAAA,GAAI,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA,EAAE;AAAA,EAC/E,MAAM,EAAE,IAAA,EAAM,UAAU,GAAA,EAAK,mBAAA,EAAqB,UAAU,GAAA;AAC9D,CAAA;AAEO,SAAS,cAAA,CAAe,MAAyB,GAAA,EAAgE;AACtH,EAAA,MAAM,QAAsC,EAAC;AAC7C,EAAA,IAAI,IAAA,GAAO,KAAA;AAEX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,GAAA,GAAM,KAAK,CAAC,CAAA;AAClB,IAAA,IAAI,GAAA,KAAQ,IAAA,IAAQ,GAAA,KAAQ,QAAA,EAAU;AACpC,MAAA,IAAA,GAAO,IAAA;AACP,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,GAAA,GAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,CAAY,IAAA,CAAK,CAAC,CAAA,KAAM,QAAA,CAAS,CAAC,CAAA,CAAE,IAAA,KAAS,GAAG,CAAA;AACjF,IAAA,IAAI,CAAC,KAAK,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,CAAA,cAAA,EAAiB,GAAG,CAAA,CAAA,EAAG;AAE5D,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,CAAA,GAAI,CAAC,CAAA;AACxB,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,CAAA,EAAG,GAAG,CAAA,cAAA,CAAA,EAAiB;AACrG,IAAA,CAAA,EAAA;AAIA,IAAA,KAAA,CAAM,GAAG,CAAA,GAAI,GAAA,KAAQ,MAAA,IAAU,KAAA,CAAM,IAAA,KAAS,MAAA,GAAY,CAAA,EAAG,KAAA,CAAM,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,GAAK,KAAA;AAAA,EACvF;AAEA,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,MAAM,MAAM,EAAC;AACb,EAAA,MAAM,UAAU,EAAC;AAEjB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA,EAAY;AAChD,IAAA,MAAM,EAAE,IAAA,EAAM,GAAA,EAAK,SAAS,QAAA,EAAS,GAAI,SAAS,GAAG,CAAA;AACrD,IAAA,MAAM,UAAU,GAAA,CAAI,OAAO,MAAM,EAAA,GAAK,MAAA,GAAY,IAAI,OAAO,CAAA;AAC7D,IAAA,MAAM,QAAA,GAAW,MAAM,GAAG,CAAA;AAE1B,IAAA,IAAI,aAAa,MAAA,EAAW;AAC1B,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,QAAA;AACX,MAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,MAAA;AACf,MAAA,IAAI,OAAA,KAAY,MAAA,IAAa,OAAA,KAAY,QAAA,EAAU;AACjD,QAAA,QAAA,CAAS,IAAA,CAAK,GAAG,OAAO,CAAA,CAAA,EAAI,OAAO,CAAA,aAAA,EAAgB,IAAI,CAAA,CAAA,EAAI,QAAQ,CAAA,8CAAA,CAAgD,CAAA;AAAA,MACrH;AAAA,IACF,CAAA,MAAA,IAAW,YAAY,MAAA,EAAW;AAChC,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,OAAA;AACX,MAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,KAAA;AAAA,IACjB,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,QAAA;AACX,MAAA,OAAA,CAAQ,GAAG,CAAA,GAAI,SAAA;AAAA,IACjB;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAc,OAAA,CAAQ,GAAG,CAAA,KAAM,KAAA,GAAQ,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,GAAM,QAAA,CAAS,GAAG,CAAA,CAAE,IAAA;AAExF,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA;AAC5B,EAAA,IAAI,CAAC,OAAO,SAAA,CAAU,IAAI,KAAK,IAAA,IAAQ,CAAA,IAAK,OAAO,KAAA,EAAO;AACxD,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,CAAA,QAAA,EAAW,KAAA,CAAM,MAAM,CAAC,CAAA,EAAA,EAAK,GAAA,CAAI,IAAI,CAAA,CAAA,EAAG;AAAA,EACrE;AAEA,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA;AAC9B,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,IAAK,SAAS,CAAA,EAAG;AACzC,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,CAAA,QAAA,EAAW,KAAA,CAAM,OAAO,CAAC,CAAA,EAAA,EAAK,GAAA,CAAI,KAAK,CAAA,CAAA,EAAG;AAAA,EACvE;AAEA,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,gBAAA,CAAiB,IAAI,IAAI,CAAA;AAAA,EAClC,SAAS,CAAA,EAAG;AACV,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,CAAA,QAAA,EAAW,MAAM,MAAM,CAAC,CAAA,EAAA,EAAK,CAAA,YAAa,QAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAA,EAAG;AAAA,EACvG;AAKA,EAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,IAAU,GAAA,CAAI,iBAAA,EAAmB;AACpD,IAAA,IAAI;AACF,MAAA,IAAI,kBAAA,CAAmB,iBAAiB,GAAA,CAAI,iBAAiB,CAAC,CAAA,KAAM,kBAAA,CAAmB,IAAI,CAAA,EAAG;AAC5F,QAAA,MAAM,CAAA,GAAI,SAAS,SAAA,CAAU,CAAC,MAAM,CAAA,CAAE,UAAA,CAAW,oBAAoB,CAAC,CAAA;AACtE,QAAA,IAAI,CAAA,KAAM,CAAA,CAAA,EAAI,QAAA,CAAS,MAAA,CAAO,GAAG,CAAC,CAAA;AAAA,MACpC;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,MAAA,EAAQ;AAAA,MACN,IAAA;AAAA,MACA,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,KAAA;AAAA,MACA,IAAA;AAAA,MACA,OAAA;AAAA,MACA,QAAA;AAAA,MACA;AAAA;AACF,GACF;AACF;;;AC1HA,eAAe,IAAA,GAAO;AACpB,EAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,IAAA,CAAK,MAAM,CAAC,CAAA,EAAG,QAAQ,GAAG,CAAA;AAChE,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,KAAK;AAAA,CAAI,CAAA;AAChD,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,MAAM,EAAE,QAAO,GAAI,MAAA;AACnB,EAAA,IAAI,OAAO,IAAA,EAAM;AACf,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,IAAI,CAAA;AACzB,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,OAAO,QAAA,EAAU;AACrC,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,iBAAA,EAAoB,OAAO;AAAA,CAAI,CAAA;AAAA,EACtD;AAEA,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,MAAA,EAAQ,KAAA,EAAO,MAAK,GAAI,MAAA;AAC5C,EAAA,MAAM,QAAQ,eAAA,CAAgB;AAAA,IAC5B,UAAA,EAAY,MAAA;AAAA,IACZ,KAAA;AAAA,IACA,eAAA,EAAiB,KAAK,IAAA,KAAS,KAAA,GAAQ,MAAM,IAAA,CAAK,OAAA,CAAQ,KAAK,GAAG;AAAA,GACnE,CAAA;AAED,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,CAAC,GAAA,EAAK,GAAA,KAAQ;AAExC,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,IAAO,GAAA;AACvB,IAAA,IAAA,CAAK,GAAA,KAAQ,OAAO,GAAA,KAAQ,UAAA,IAAc,QAAS,MAAA,GAAS,GAAA,KAAS,GAAA,CAAI,MAAA,KAAW,KAAA,EAAO;AACzF,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,MAAA,GAAA,CAAI,GAAA,CAAI,KAAK,SAAA,CAAU,EAAE,IAAI,IAAA,EAAM,OAAA,EAAS,0BAAA,EAA4B,CAAC,CAAA;AACzE,MAAA;AAAA,IACF;AACA,IAAA,KAAA,CAAM,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,EACxB,CAAC,CAAA;AAED,EAAA,MAAM,UAAA,GAAa,IAAA,KAAS,WAAA,IAAe,IAAA,KAAS,SAAS,IAAA,KAAS,WAAA;AACtE,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb,4BAA4B,IAAI,CAAA;AAAA;AAAA,KAGlC;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,EAAE,IAAA,EAAM,QAAA,EAAU,GAAA,EAAK,mBAAA,EAAqB,OAAA,EAAS,SAAA,EAAU,CAAE,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA;AACvG,EAAA,MAAA,CAAO,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,MAAM;AAC9B,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb,+BAA+B,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,EAAG,MAAA,IAAU,EAAE,CAAA,MAAA,EAChD,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,GAAI,CAAC,CAAA,QAAA,EAAW,mBAAmB,IAAI,CAAC,SAAS,UAAU,CAAA;AAAA;AAAA,KAC1F;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,WAAW,MAAM;AACrB,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,yBAAyB,CAAA;AAC9C,IAAA,KAAA,CAAM,OAAO,OAAA,EAAQ;AACrB,IAAA,MAAA,CAAO,KAAA,CAAM,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAC,CAAA;AAClC,IAAA,UAAA,CAAW,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,EAAG,GAAI,EAAE,KAAA,EAAM;AAAA,EAChD,CAAA;AACA,EAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,QAAQ,CAAA;AAC9B,EAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,QAAQ,CAAA;AAC/B;AAEA,IAAM,IAAA,GAAO,CAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA,CAAA;AAmCb,IAAA,EAAK,CAAE,KAAA,CAAM,CAAC,CAAA,KAAM;AAClB,EAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,eAAA,EAAkB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,KAAA,IAAS,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC;AAAA,CAAI,CAAA;AAChG,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB,CAAC,CAAA","file":"relay-server-cli.js","sourcesContent":["import { describeCorsPolicy, parseCorsOrigins, type CorsPolicy } from \"./cors\";\n\n/**\n * Settings resolution for `agent-integrations-relay`.\n *\n * **Precedence, for every setting: flag, then env var, then default.** A flag\n * is what the person starting the process typed; an env var is ambient and is\n * often set by a platform (Forge sets `PORT`; this package's Dockerfile sets\n * `HOST=0.0.0.0`), so the explicit one wins. When a flag overrides an env var\n * that is also set to something different, the override is reported in\n * `warnings` rather than applied silently — the relay's own deploy README once\n * told operators to set `CORS_ALLOW_ORIGIN` to override a start script that\n * passed `--cors`, and nothing ever said the env var was being ignored.\n *\n * An env var set to the empty string counts as unset, which is how platform\n * env editors write a cleared value.\n */\n\nexport type SettingSource = \"flag\" | \"env\" | \"default\";\n\nexport type RelayCliConfig = {\n  port: number;\n  host: string;\n  prefix: string;\n  ttlMs: number;\n  cors: CorsPolicy;\n  sources: { port: SettingSource; host: SettingSource; prefix: SettingSource; ttlMs: SettingSource; cors: SettingSource };\n  warnings: string[];\n  help: boolean;\n};\n\nexport type ParseResult = { ok: true; config: RelayCliConfig } | { ok: false; error: string };\n\ntype Key = \"port\" | \"host\" | \"prefix\" | \"ttlMs\" | \"cors\";\n\nconst SETTINGS: Record<Key, { flag: string; env: string; fallback: string }> = {\n  port: { flag: \"--port\", env: \"PORT\", fallback: \"8787\" },\n  // Loopback by default: this relay fronts terminal_run (RCE) and register is\n  // unauthenticated, so it must not listen on all interfaces unless the\n  // operator explicitly opts in with --host 0.0.0.0.\n  host: { flag: \"--host\", env: \"HOST\", fallback: \"127.0.0.1\" },\n  prefix: { flag: \"--prefix\", env: \"PREFIX\", fallback: \"\" },\n  ttlMs: { flag: \"--ttl-ms\", env: \"TTL_MS\", fallback: String(4 * 60 * 60 * 1000) },\n  cors: { flag: \"--cors\", env: \"CORS_ALLOW_ORIGIN\", fallback: \"*\" },\n};\n\nexport function parseRelayArgs(argv: readonly string[], env: Readonly<Record<string, string | undefined>>): ParseResult {\n  const flags: Partial<Record<Key, string>> = {};\n  let help = false;\n\n  for (let i = 0; i < argv.length; i++) {\n    const arg = argv[i]!;\n    if (arg === \"-h\" || arg === \"--help\") {\n      help = true;\n      continue;\n    }\n\n    const key = (Object.keys(SETTINGS) as Key[]).find((k) => SETTINGS[k].flag === arg);\n    if (!key) return { ok: false, error: `unknown flag: ${arg}` };\n\n    const value = argv[i + 1];\n    if (value === undefined || value.startsWith(\"--\")) return { ok: false, error: `${arg} needs a value` };\n    i++;\n\n    // --cors is a LIST, so repeating it adds origins. Every other flag is a\n    // single value, and the last one given wins.\n    flags[key] = key === \"cors\" && flags.cors !== undefined ? `${flags.cors},${value}` : value;\n  }\n\n  const warnings: string[] = [];\n  const raw = {} as Record<Key, string>;\n  const sources = {} as Record<Key, SettingSource>;\n\n  for (const key of Object.keys(SETTINGS) as Key[]) {\n    const { flag, env: envName, fallback } = SETTINGS[key];\n    const fromEnv = env[envName] === \"\" ? undefined : env[envName];\n    const fromFlag = flags[key];\n\n    if (fromFlag !== undefined) {\n      raw[key] = fromFlag;\n      sources[key] = \"flag\";\n      if (fromEnv !== undefined && fromEnv !== fromFlag) {\n        warnings.push(`${envName}=${fromEnv} is ignored: ${flag} ${fromFlag} was passed, and a flag wins over its env var.`);\n      }\n    } else if (fromEnv !== undefined) {\n      raw[key] = fromEnv;\n      sources[key] = \"env\";\n    } else {\n      raw[key] = fallback;\n      sources[key] = \"default\";\n    }\n  }\n\n  const named = (key: Key) => (sources[key] === \"env\" ? SETTINGS[key].env : SETTINGS[key].flag);\n\n  const port = Number(raw.port);\n  if (!Number.isInteger(port) || port <= 0 || port > 65535) {\n    return { ok: false, error: `invalid ${named(\"port\")}: ${raw.port}` };\n  }\n\n  const ttlMs = Number(raw.ttlMs);\n  if (!Number.isFinite(ttlMs) || ttlMs <= 0) {\n    return { ok: false, error: `invalid ${named(\"ttlMs\")}: ${raw.ttlMs}` };\n  }\n\n  let cors: CorsPolicy;\n  try {\n    cors = parseCorsOrigins(raw.cors);\n  } catch (e) {\n    return { ok: false, error: `invalid ${named(\"cors\")}: ${e instanceof Error ? e.message : String(e)}` };\n  }\n\n  // Same-value warnings compare raw strings; compare the parsed policies too, so\n  // `--cors \"https://a,https://b\"` against `CORS_ALLOW_ORIGIN=\"https://a, https://b\"`\n  // is not reported as a conflict.\n  if (sources.cors === \"flag\" && env.CORS_ALLOW_ORIGIN) {\n    try {\n      if (describeCorsPolicy(parseCorsOrigins(env.CORS_ALLOW_ORIGIN)) === describeCorsPolicy(cors)) {\n        const i = warnings.findIndex((w) => w.startsWith(\"CORS_ALLOW_ORIGIN=\"));\n        if (i !== -1) warnings.splice(i, 1);\n      }\n    } catch {\n      /* an unparseable env var that lost to the flag stays reported */\n    }\n  }\n\n  return {\n    ok: true,\n    config: {\n      port,\n      host: raw.host,\n      prefix: raw.prefix,\n      ttlMs,\n      cors,\n      sources: sources as RelayCliConfig[\"sources\"],\n      warnings,\n      help,\n    },\n  };\n}\n","#!/usr/bin/env node\nimport { createServer } from \"node:http\";\nimport { parseRelayArgs } from \"./args\";\nimport { describeCorsPolicy } from \"./cors\";\nimport { createNodeRelay } from \"./node\";\n\n/**\n * `agent-integrations-relay` — standalone Node HTTP server hosting the relay\n * broker. End users hit `Start share` on a demo page, get a session URL pointing\n * at this service, and paste it into their MCP client. No state persists across\n * restarts.\n *\n * Settings resolve flag → env var → default; see ./args.ts and HELP below.\n *\n * Health: any request to `/` returns 200 OK so platform health checks pass\n * without authenticating.\n */\nasync function main() {\n  const parsed = parseRelayArgs(process.argv.slice(2), process.env);\n  if (!parsed.ok) {\n    process.stderr.write(`[relay] ${parsed.error}\\n`);\n    process.exit(2);\n  }\n\n  const { config } = parsed;\n  if (config.help) {\n    process.stdout.write(HELP);\n    process.exit(0);\n  }\n\n  for (const warning of config.warnings) {\n    process.stderr.write(`[relay] WARNING: ${warning}\\n`);\n  }\n\n  const { port, host, prefix, ttlMs, cors } = config;\n  const relay = createNodeRelay({\n    pathPrefix: prefix,\n    ttlMs,\n    corsAllowOrigin: cors.kind === \"any\" ? \"*\" : cors.origins.join(\",\"),\n  });\n\n  const server = createServer((req, res) => {\n    // Health: GET / always 200 so platform health checks succeed without auth.\n    const url = req.url || \"/\";\n    if ((url === \"/\" || url === \"/healthz\" || url === (prefix + \"/\")) && req.method === \"GET\") {\n      res.statusCode = 200;\n      res.setHeader(\"content-type\", \"application/json\");\n      res.end(JSON.stringify({ ok: true, service: \"agent-integrations-relay\" }));\n      return;\n    }\n    relay.handler(req, res);\n  });\n\n  const isLoopback = host === \"127.0.0.1\" || host === \"::1\" || host === \"localhost\";\n  if (!isLoopback) {\n    process.stderr.write(\n      `[relay] WARNING: binding ${host} exposes the relay on non-loopback interfaces. ` +\n        `register is unauthenticated and a leaked session token grants terminal_run. ` +\n        `Only do this behind an authenticating proxy / trusted network.\\n`,\n    );\n  }\n\n  const corsSource = { flag: \"--cors\", env: \"CORS_ALLOW_ORIGIN\", default: \"default\" }[config.sources.cors];\n  server.listen(port, host, () => {\n    process.stdout.write(\n      `[relay] listening on http://${host}:${port}${prefix || \"\"} ` +\n        `(ttl=${Math.round(ttlMs / 1000)}s, cors=${describeCorsPolicy(cors)} from ${corsSource})\\n`,\n    );\n  });\n\n  const shutdown = () => {\n    process.stdout.write(\"[relay] shutting down\\n\");\n    relay.broker.dispose();\n    server.close(() => process.exit(0));\n    setTimeout(() => process.exit(0), 2000).unref();\n  };\n  process.on(\"SIGTERM\", shutdown);\n  process.on(\"SIGINT\", shutdown);\n}\n\nconst HELP = `agent-integrations-relay — Node HTTP server for the MCP relay broker.\n\nUsage: agent-integrations-relay [options]\n\nOptions:\n  --port <n>          Listen port (env: PORT). Default 8787.\n  --host <addr>       Bind address (env: HOST). Default 127.0.0.1 (loopback).\n                      Pass 0.0.0.0 to expose on all interfaces (prints a warning).\n  --prefix <path>     URL path prefix (env: PREFIX). Default \"\".\n  --ttl-ms <n>        Session TTL ms (env: TTL_MS). Default 14_400_000.\n  --cors <origins>    Allowed browser origins (env: CORS_ALLOW_ORIGIN). Default \"*\".\n                      \"*\", or a comma-separated list such as\n                      \"https://example.com,https://www.example.com\". May be\n                      repeated. A listed Origin is echoed back with Vary: Origin;\n                      an unlisted one gets no Access-Control-Allow-Origin.\n  -h, --help          Show this help.\n\nPrecedence: a flag wins over its env var, which wins over the default. An env\nvar that a flag overrides is reported at startup. An empty env var is unset.\n\nEndpoints (under --prefix):\n  POST  /register                          { session, token } → { ok: true }\n  POST  /<session>/inbox?token=...         body: JSON-RPC frame\n  POST  /<session>/outbox?token=...        body: JSON-RPC frame\n  GET   /<session>/events?token=...&direction=inbound|outbound\n                                           Server-sent events stream\n  GET   /<session>/poll?token=...&direction=inbound|outbound&wait=<ms>&subscriber=<id>\n                                           Long-poll → { subscriber, frames }\n  POST  /<session>/unregister?token=...    Tear down session\n  GET   /                                  Healthcheck → 200\n\nA session that has ended answers 410 {\"error\":\"session_gone\"} on every session\nroute; a wrong or missing token answers 401.\n`;\n\nmain().catch((e) => {\n  process.stderr.write(`[relay] fatal: ${e instanceof Error ? e.stack ?? e.message : String(e)}\\n`);\n  process.exit(1);\n});\n"]}

package/dist/relay-server.cjs

@@ -24,6 +24,7 @@ var MemoryStore = class {
   }
 };
 var SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{4,64}$/;
+var SUBSCRIBER_ID_PATTERN = /^[a-f0-9]{16}$/;
 var RelayBroker = class {
   constructor(opts = {}) {
     /** Per-session, per-direction subscriber list. */
@@ -31,6 +32,7 @@ var RelayBroker = class {
     /** Per-session map of JSON-RPC request id -> the client that asked. */
     this.callers = /* @__PURE__ */ new Map();
     this.ttlMs = opts.ttlMs ?? 4 * 60 * 60 * 1e3;
+    this.pollIdleMs = opts.pollIdleMs ?? 6e4;
     this.store = opts.store ?? new MemoryStore();
     const tick = opts.reapIntervalMs ?? 6e4;
     if (tick > 0) {
@@ -42,6 +44,7 @@ var RelayBroker = class {
   }
   dispose() {
     if (this.reaper) clearInterval(this.reaper);
+    for (const id of [...this.subs.keys()]) this.endSubscribers(id);
     this.subs.clear();
     this.callers.clear();
   }
@@ -66,6 +69,7 @@ var RelayBroker = class {
   unregister(id, token) {
     if (!this.validate(id, token)) return false;
     this.store.deleteSession(id);
+    this.endSubscribers(id);
     this.subs.delete(id);
     this.callers.delete(id);
     return true;
@@ -115,6 +119,7 @@ var RelayBroker = class {
   /** Drop a session — the page closed, or a test needs it gone. */
   dropSession(id) {
     this.store.deleteSession(id);
+    this.endSubscribers(id);
     this.subs.delete(id);
     this.callers.delete(id);
   }
@@ -145,7 +150,8 @@ var RelayBroker = class {
    * the caller (an HTTP handler) pumps as SSE.
    */
   subscribe(id, token, direction, opts = {}) {
-    if (!this.validate(id, token)) return { ok: false, reason: "invalid_token" };
+    const auth = this.check(id, token);
+    if (!auth.ok) return auth;
     const subscriberId = crypto.randomBytes(8).toString("hex");
     const subscriber = {
       id: subscriberId,
@@ -155,31 +161,7 @@ var RelayBroker = class {
       client: opts.client
     };
     this.getDirSubs(id, direction).set(subscriberId, subscriber);
-    if (direction === "outbound") {
-      this.fanOut(
-        id,
-        "inbound",
-        JSON.stringify({
-          jsonrpc: "2.0",
-          method: "notifications/peer_joined",
-          params: { subscriberId, ts: Date.now() }
-        })
-      );
-    }
-    const unsubscribe = () => {
-      this.getDirSubs(id, direction).delete(subscriberId);
-      if (direction === "outbound") {
-        this.fanOut(
-          id,
-          "inbound",
-          JSON.stringify({
-            jsonrpc: "2.0",
-            method: "notifications/peer_left",
-            params: { subscriberId, ts: Date.now() }
-          })
-        );
-      }
-    };
+    if (direction === "outbound") this.announcePeer(id, "notifications/peer_joined", subscriberId);
     const frames = async function* () {
       while (true) {
         if (this.queue.length > 0) {
@@ -187,6 +169,7 @@ var RelayBroker = class {
           if (next2 !== void 0) yield next2;
           continue;
         }
+        if (this.ended) return;
         const next = await new Promise((resolve) => {
           this.resolveNext = resolve;
         });
@@ -200,8 +183,88 @@ var RelayBroker = class {
       subscriberId,
       frames: frames(),
       unsubscribe: () => {
-        subscriber.resolveNext?.(null);
-        unsubscribe();
+        this.endSubscriber(subscriber);
+        this.removeSubscriber(id, subscriber);
+      }
+    };
+  }
+  /**
+   * Attach a LONG-POLL subscriber, or re-attach the one a previous poll created.
+   *
+   * The CDN-safe receive leg: a series of short requests instead of one open
+   * stream, because Cloudflare's HTTP/3 edge resets long-lived SSE. Same
+   * contract as the PHP relay in px-ui-sandbox and the one
+   * `@particle-academy/fancy-cf-relay` and `mcp-relay-client` speak:
+   *
+   * - The first poll gets a fresh 16-hex subscriber id; the client echoes it back
+   *   as `subscriber` on every later poll and reads the same queue.
+   * - An id in that shape that this session does not know (pruned, say) is
+   *   adopted as a NEW subscriber under that id, as the PHP relay does, so a
+   *   client that went quiet and came back keeps its identity.
+   * - An id belonging to a STREAMING subscriber is never adopted: one queue read
+   *   by two consumers splits its frames between them.
+   *
+   * Frames queue on the subscriber between polls, so nothing is lost in the gap
+   * between one request ending and the next arriving. A poller that stops is
+   * pruned after `pollIdleMs`.
+   */
+  poll(id, token, direction, opts = {}) {
+    const auth = this.check(id, token);
+    if (!auth.ok) return auth;
+    const dir = this.getDirSubs(id, direction);
+    const requested = opts.subscriber && SUBSCRIBER_ID_PATTERN.test(opts.subscriber) ? opts.subscriber : void 0;
+    const existing = requested ? dir.get(requested) : void 0;
+    let subscriber;
+    let created;
+    if (existing?.poll) {
+      subscriber = existing;
+      created = false;
+    } else {
+      const subscriberId = requested && !existing ? requested : crypto.randomBytes(8).toString("hex");
+      subscriber = {
+        id: subscriberId,
+        direction,
+        queue: [],
+        resolveNext: null,
+        client: opts.client,
+        poll: { lastSeen: Date.now(), parked: 0, wakers: /* @__PURE__ */ new Set() }
+      };
+      dir.set(subscriberId, subscriber);
+      created = true;
+      if (direction === "outbound") this.announcePeer(id, "notifications/peer_joined", subscriberId);
+    }
+    const state = subscriber.poll;
+    state.lastSeen = Date.now();
+    return {
+      ok: true,
+      subscriberId: subscriber.id,
+      created,
+      wait: async (ms, signal) => {
+        state.parked++;
+        state.lastSeen = Date.now();
+        try {
+          if (subscriber.queue.length === 0 && ms > 0 && !subscriber.ended && !signal?.aborted) {
+            await new Promise((resolve) => {
+              const done = () => {
+                clearTimeout(timer);
+                signal?.removeEventListener("abort", done);
+                state.wakers.delete(done);
+                resolve();
+              };
+              const timer = setTimeout(done, ms);
+              state.wakers.add(done);
+              signal?.addEventListener("abort", done, { once: true });
+            });
+          }
+          if (signal?.aborted) return [];
+          return subscriber.queue.splice(0);
+        } finally {
+          state.parked--;
+          state.lastSeen = Date.now();
+        }
+      },
+      requeue: (frames) => {
+        if (frames.length > 0 && !subscriber.ended) subscriber.queue.unshift(...frames);
       }
     };
   }
@@ -294,16 +357,78 @@ var RelayBroker = class {
     if (!dir) return;
     for (const sub of dir.values()) {
       if (sub.client !== client) continue;
-      sub.queue.push(payload);
-      sub.resolveNext?.(sub.queue.shift() ?? null);
+      this.deliver(sub, payload);
     }
   }
   fanOut(sessionId, direction, payload) {
     const dir = this.subs.get(sessionId)?.get(direction);
     if (!dir) return;
-    for (const sub of dir.values()) {
-      sub.queue.push(payload);
-      sub.resolveNext?.(sub.queue.shift() ?? null);
+    for (const sub of dir.values()) this.deliver(sub, payload);
+  }
+  /**
+   * Hand one frame to one subscriber.
+   *
+   * The resolver is CLEARED before it is called. It used to stay set until the
+   * generator resumed on a later microtask, so a second frame in the same tick
+   * called an already-settled resolver — a no-op — after shifting its frame out
+   * of the queue, and that frame was lost. Cleared first, the second frame just
+   * waits in the queue for the generator to come back for it.
+   */
+  deliver(sub, payload) {
+    if (sub.ended) return;
+    sub.queue.push(payload);
+    const resolve = sub.resolveNext;
+    if (resolve) {
+      sub.resolveNext = null;
+      resolve(sub.queue.shift() ?? null);
+      return;
+    }
+    if (sub.poll) for (const wake of [...sub.poll.wakers]) wake();
+  }
+  /** Tell the page (the inbound side) that an agent arrived or left. */
+  announcePeer(sessionId, method, subscriberId) {
+    this.fanOut(sessionId, "inbound", JSON.stringify({ jsonrpc: "2.0", method, params: { subscriberId, ts: Date.now() } }));
+  }
+  /** End one subscriber: close its stream, or release its parked polls. Idempotent. */
+  endSubscriber(sub) {
+    if (sub.ended) return;
+    sub.ended = true;
+    const resolve = sub.resolveNext;
+    sub.resolveNext = null;
+    resolve?.(null);
+    if (sub.poll) for (const wake of [...sub.poll.wakers]) wake();
+  }
+  /**
+   * End every subscriber of a session whose session is going away.
+   *
+   * Streams used to be dropped from the map WITHOUT being woken, so an SSE leg
+   * stayed open, heartbeating, for a session that no longer existed — and its
+   * client could not learn the page had closed. Ended, the stream closes, the
+   * client reconnects, and `events` answers 410.
+   */
+  endSubscribers(sessionId) {
+    const dirs = this.subs.get(sessionId);
+    if (!dirs) return;
+    for (const dir of dirs.values()) for (const sub of dir.values()) this.endSubscriber(sub);
+  }
+  /** Remove a subscriber from its session, announcing an agent's departure once. */
+  removeSubscriber(sessionId, sub) {
+    const dir = this.subs.get(sessionId)?.get(sub.direction);
+    if (!dir || dir.get(sub.id) !== sub) return;
+    dir.delete(sub.id);
+    if (sub.direction === "outbound") this.announcePeer(sessionId, "notifications/peer_left", sub.id);
+  }
+  /** Drop long-poll subscribers that stopped polling. Never one with a poll parked. */
+  prunePollers(now) {
+    for (const [sessionId, dirs] of this.subs) {
+      for (const dir of dirs.values()) {
+        for (const sub of [...dir.values()]) {
+          if (!sub.poll || sub.poll.parked > 0) continue;
+          if (now - sub.poll.lastSeen <= this.pollIdleMs) continue;
+          this.endSubscriber(sub);
+          this.removeSubscriber(sessionId, sub);
+        }
+      }
     }
   }
   /**
@@ -339,18 +464,15 @@ var RelayBroker = class {
     return "id" in o && hasResult !== hasError;
   }
   reap() {
-    const cutoff = Date.now() - this.ttlMs;
+    const now = Date.now();
+    const cutoff = now - this.ttlMs;
     for (const id of this.store.expiredSessionIds(cutoff)) {
-      const dirs = this.subs.get(id);
-      if (dirs) {
-        for (const dir of dirs.values()) {
-          for (const sub of dir.values()) sub.resolveNext?.(null);
-        }
-      }
+      this.endSubscribers(id);
       this.subs.delete(id);
       this.callers.delete(id);
       this.store.deleteSession(id);
     }
+    this.prunePollers(now);
   }
 };
 function sha256Hex(input) {
@@ -360,19 +482,68 @@ function timingSafeEqualHex(a, b) {
   if (a.length !== b.length) return false;
   return crypto.timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
 }
+
+// src/relay-server/cors.ts
+function parseCorsOrigins(value) {
+  const entries = (typeof value === "string" ? value.split(",") : [...value]).map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+  if (entries.length === 0) {
+    throw new Error("CORS origin list is empty: pass `*` or one or more origins, e.g. https://example.com");
+  }
+  if (entries.includes("*")) {
+    if (entries.length === 1) return { kind: "any" };
+    throw new Error(
+      "CORS `*` cannot be combined with named origins \u2014 `*` already allows every origin, so the list would mean nothing. Pass either `*` or the origins."
+    );
+  }
+  const origins = [];
+  for (const entry of entries) {
+    const origin = normalizeOrigin(entry);
+    if (!origins.includes(origin)) origins.push(origin);
+  }
+  return { kind: "list", origins };
+}
+function normalizeOrigin(raw) {
+  if (raw.toLowerCase() === "null") {
+    throw new Error("CORS origin `null` is refused: it is what sandboxed iframes and file:// pages send.");
+  }
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    throw new Error(`CORS origin "${raw}" is not an origin \u2014 expected scheme://host[:port], e.g. https://example.com`);
+  }
+  if (url.pathname !== "/" && url.pathname !== "" || url.search || url.hash || url.username || url.password) {
+    throw new Error(`CORS origin "${raw}" has a path, query or credentials \u2014 an origin is only scheme://host[:port]`);
+  }
+  if (url.origin !== "null") return url.origin;
+  if (url.host) return `${url.protocol}//${url.host}`;
+  throw new Error(`CORS origin "${raw}" is not an origin \u2014 expected scheme://host[:port], e.g. https://example.com`);
+}
+function allowOriginFor(policy, requestOrigin) {
+  if (policy.kind === "any") return "*";
+  return requestOrigin !== void 0 && policy.origins.includes(requestOrigin) ? requestOrigin : null;
+}
+
+// src/relay-server/node.ts
+var POLL_MAX_WAIT_MS = 25e3;
+var POLL_DEFAULT_WAIT_MS = 2e4;
+function pollWaitMs(raw) {
+  if (raw === null || raw === void 0) return POLL_DEFAULT_WAIT_MS;
+  const n = Number.parseInt(raw, 10);
+  if (!Number.isFinite(n)) return 0;
+  return Math.min(Math.max(n, 0), POLL_MAX_WAIT_MS);
+}
 function createNodeRelay(opts = {}) {
   const broker = new RelayBroker(opts);
   const prefix = (opts.pathPrefix ?? "").replace(/\/$/, "");
-  const cors = opts.corsAllowOrigin ?? "*";
-  const allowedOrigins = opts.allowedOrigins;
+  const cors = opts.allowedOrigins && opts.allowedOrigins.length > 0 ? parseCorsOrigins(opts.allowedOrigins) : parseCorsOrigins(opts.corsAllowOrigin ?? "*");
   function setCorsHeaders(res, req) {
-    if (allowedOrigins && allowedOrigins.length) {
-      const origin = req?.headers.origin;
-      res.setHeader("access-control-allow-origin", origin && allowedOrigins.includes(origin) ? origin : "null");
-      res.setHeader("vary", "origin");
-    } else {
-      res.setHeader("access-control-allow-origin", cors);
+    if (cors.kind === "list") {
+      res.setHeader("vary", "Origin");
     }
+    const origin = req?.headers.origin;
+    const allow = allowOriginFor(cors, typeof origin === "string" ? origin : void 0);
+    if (allow !== null) res.setHeader("access-control-allow-origin", allow);
     res.setHeader("access-control-allow-methods", "GET, POST, OPTIONS");
     res.setHeader("access-control-allow-headers", "content-type, x-csrf-token, accept, authorization");
     res.setHeader("access-control-max-age", "86400");
@@ -489,7 +660,7 @@ function createNodeRelay(opts = {}) {
       client: getQuery(req).get("client") ?? void 0
     });
     if (!sub.ok) {
-      res.statusCode = 401;
+      res.statusCode = sub.reason === "session_gone" ? 410 : 401;
       res.setHeader("content-type", "text/event-stream");
       res.write(`event: error
 data: ${sub.reason}
@@ -534,6 +705,38 @@ data: ${frame}
       res.end();
     }
   };
+  const poll = async (req, res) => {
+    setCorsHeaders(res, req);
+    if (req.method === "OPTIONS") {
+      res.statusCode = 204;
+      return res.end();
+    }
+    if (req.method !== "GET") return json(res, 405, { error: "method_not_allowed" });
+    const session = extractSession(req, prefix);
+    if (!session) return json(res, 400, { error: "missing_session" });
+    const q = getQuery(req);
+    const direction = q.get("direction") === "outbound" ? "outbound" : "inbound";
+    const attached = broker.poll(session, q.get("token") ?? "", direction, {
+      subscriber: q.get("subscriber") ?? void 0,
+      client: q.get("client") ?? void 0
+    });
+    if (!attached.ok) {
+      return json(res, attached.reason === "session_gone" ? 410 : 401, { error: attached.reason });
+    }
+    const gone = new AbortController();
+    const onClose = () => {
+      if (!res.writableEnded) gone.abort();
+    };
+    res.on("close", onClose);
+    const frames = await attached.wait(pollWaitMs(q.get("wait")), gone.signal);
+    res.off("close", onClose);
+    if (gone.signal.aborted || res.destroyed) {
+      attached.requeue(frames);
+      return;
+    }
+    res.setHeader("cache-control", "no-store");
+    return json(res, 200, { subscriber: attached.subscriberId, frames });
+  };
   const handler = async (req, res) => {
     const pathname = getPathname(req);
     if (!pathname.startsWith(prefix + "/")) {
@@ -541,16 +744,17 @@ data: ${frame}
     }
     const rest = pathname.slice(prefix.length);
     if (rest === "/register") return register(req, res);
-    const m = /^\/([A-Za-z0-9_-]{4,64})\/(inbox|outbox|events|unregister)$/.exec(rest);
+    const m = /^\/([A-Za-z0-9_-]{4,64})\/(inbox|outbox|events|poll|unregister)$/.exec(rest);
     if (!m) return json(res, 404, { error: "not_found" });
     const route = m[2];
     if (route === "inbox") return inbox(req, res);
     if (route === "outbox") return outbox(req, res);
     if (route === "events") return events(req, res);
+    if (route === "poll") return poll(req, res);
     if (route === "unregister") return unregister(req, res);
     return json(res, 404, { error: "not_found" });
   };
-  return { broker, handler, register, inbox, outbox, events, unregister };
+  return { broker, handler, register, inbox, outbox, events, poll, unregister };
 }
 function extractSession(req, prefix) {
   const host = req.headers.host || "x";