@salesforcebob/remote-mcp-bridge-local 1.0.1

package/dist/__tests__/crypto.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=crypto.test.d.ts.map

package/dist/__tests__/crypto.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/crypto.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/crypto.test.js

@@ -0,0 +1,113 @@
+import { describe, it, expect, vi, afterEach } from 'vitest';
+import { Wallet } from 'ethers';
+import { canonicalize, verifyPayload, isTimestampValid, MAX_MESSAGE_AGE_MS } from '../crypto.js';
+// Reuse remote-server's signPayload logic for round-trip testing
+async function signPayload(message, privateKey) {
+    const wallet = new Wallet(privateKey);
+    const canonical = canonicalize(message);
+    return wallet.signMessage(canonical);
+}
+const TEST_PRIVATE_KEY = '0x5336e184210b834aca58a6f25983490f12ff21a84373703334dd67d543924423';
+const TEST_ADDRESS = '0xAf92293492B0cb01A3A22A91C05C93Fa02a85534';
+describe('canonicalize', () => {
+    it('sorts object keys alphabetically', () => {
+        const obj = { z: 1, a: 2, m: 3 };
+        const result = JSON.parse(canonicalize(obj));
+        expect(Object.keys(result)).toEqual(['a', 'm', 'z']);
+    });
+    it('produces identical output regardless of key insertion order', () => {
+        const a = { method: 'tools/list', id: '123', timestamp: 1000, type: 'request' };
+        const b = { id: '123', type: 'request', timestamp: 1000, method: 'tools/list' };
+        expect(canonicalize(a)).toBe(canonicalize(b));
+    });
+});
+describe('verifyPayload', () => {
+    it('verifies a correctly signed message', async () => {
+        const message = {
+            id: 'test-verify-1',
+            type: 'request',
+            method: 'tools/list',
+            timestamp: Date.now(),
+        };
+        const signature = await signPayload(message, TEST_PRIVATE_KEY);
+        const signed = { ...message, signature };
+        expect(verifyPayload(signed, TEST_ADDRESS)).toBe(true);
+    });
+    it('rejects a message signed by a different key', async () => {
+        const differentKey = Wallet.createRandom().privateKey;
+        const message = {
+            id: 'test-wrong-key',
+            type: 'request',
+            method: 'tools/list',
+            timestamp: Date.now(),
+        };
+        const signature = await signPayload(message, differentKey);
+        const signed = { ...message, signature };
+        expect(verifyPayload(signed, TEST_ADDRESS)).toBe(false);
+    });
+    it('rejects a tampered message', async () => {
+        const message = {
+            id: 'test-tampered',
+            type: 'request',
+            method: 'tools/list',
+            timestamp: Date.now(),
+        };
+        const signature = await signPayload(message, TEST_PRIVATE_KEY);
+        const signed = { ...message, signature };
+        // Tamper with the method
+        signed.method = 'tools/call';
+        expect(verifyPayload(signed, TEST_ADDRESS)).toBe(false);
+    });
+    it('is case-insensitive on the expected address', async () => {
+        const message = {
+            id: 'test-case',
+            type: 'request',
+            method: 'tools/list',
+            timestamp: Date.now(),
+        };
+        const signature = await signPayload(message, TEST_PRIVATE_KEY);
+        const signed = { ...message, signature };
+        expect(verifyPayload(signed, TEST_ADDRESS.toLowerCase())).toBe(true);
+        expect(verifyPayload(signed, TEST_ADDRESS.toUpperCase())).toBe(true);
+    });
+    it('handles messages with params', async () => {
+        const message = {
+            id: 'test-params',
+            type: 'request',
+            method: 'tools/call',
+            params: { name: 'browser_navigate', arguments: { url: 'https://example.com' } },
+            timestamp: Date.now(),
+        };
+        const signature = await signPayload(message, TEST_PRIVATE_KEY);
+        const signed = { ...message, signature };
+        expect(verifyPayload(signed, TEST_ADDRESS)).toBe(true);
+    });
+});
+describe('isTimestampValid', () => {
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('accepts a current timestamp', () => {
+        expect(isTimestampValid(Date.now())).toBe(true);
+    });
+    it('accepts a timestamp within the 30s window', () => {
+        const withinWindow = Date.now() - (MAX_MESSAGE_AGE_MS - 1000);
+        expect(isTimestampValid(withinWindow)).toBe(true);
+    });
+    it('rejects a timestamp older than 30s', () => {
+        const tooOld = Date.now() - (MAX_MESSAGE_AGE_MS + 1000);
+        expect(isTimestampValid(tooOld)).toBe(false);
+    });
+    it('rejects a timestamp too far in the future', () => {
+        const futureTimestamp = Date.now() + MAX_MESSAGE_AGE_MS + 1000;
+        expect(isTimestampValid(futureTimestamp)).toBe(false);
+    });
+    it('accepts a slightly future timestamp (clock skew)', () => {
+        const slightlyFuture = Date.now() + 5000;
+        expect(isTimestampValid(slightlyFuture)).toBe(true);
+    });
+    it('has a MAX_MESSAGE_AGE_MS of 30 seconds', () => {
+        expect(MAX_MESSAGE_AGE_MS).toBe(30_000);
+    });
+});
+//# sourceMappingURL=crypto.test.js.map

package/dist/__tests__/crypto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.js","sourceRoot":"","sources":["../../src/__tests__/crypto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGjG,iEAAiE;AACjE,KAAK,UAAU,WAAW,CAAC,OAAsB,EAAE,UAAkB;IACnE,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,gBAAgB,GAAG,oEAAoE,CAAC;AAC9F,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAElE,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAChF,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAChF,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,OAAO,GAAkB;YAC7B,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;QAExD,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC;QACtD,MAAM,OAAO,GAAkB;YAC7B,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;QAExD,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,OAAO,GAAkB;YAC7B,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;QAExD,yBAAyB;QACzB,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC;QAE7B,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,OAAO,GAAkB;YAC7B,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;QAExD,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,OAAO,GAAkB;YAC7B,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE;YAC/E,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAkB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC;QAExD,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,GAAG,IAAI,CAAC;QAC/D,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACzC,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,24 @@
+import type { SignedMessage } from './types.js';
+/**
+ * Deterministic JSON serialization.
+ * Sorts object keys recursively to ensure identical strings
+ * on both signing and verification sides.
+ */
+export declare function canonicalize(obj: unknown): string;
+/**
+ * Verify that a SignedMessage was signed by the expected Ethereum address.
+ *
+ * Extracts the signature, canonicalizes the remaining fields,
+ * recovers the signer address, and compares against expectedAddress.
+ *
+ * @returns true if signature is valid and matches expectedAddress
+ */
+export declare function verifyPayload(signedMessage: SignedMessage, expectedAddress: string): boolean;
+/** Maximum age of a message in milliseconds (30 seconds) */
+export declare const MAX_MESSAGE_AGE_MS = 30000;
+/**
+ * Check if a message timestamp is within the acceptable window.
+ * Rejects messages older than MAX_MESSAGE_AGE_MS to prevent replay attacks.
+ */
+export declare function isTimestampValid(timestamp: number): boolean;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,aAAa,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAYjD;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,aAAa,EAAE,aAAa,EAC5B,eAAe,EAAE,MAAM,GACtB,OAAO,CAUT;AAED,4DAA4D;AAC5D,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAI3D"}

package/dist/crypto.js

@@ -0,0 +1,48 @@
+import { verifyMessage } from 'ethers';
+/**
+ * Deterministic JSON serialization.
+ * Sorts object keys recursively to ensure identical strings
+ * on both signing and verification sides.
+ */
+export function canonicalize(obj) {
+    return JSON.stringify(obj, (_key, value) => {
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            return Object.keys(value)
+                .sort()
+                .reduce((sorted, k) => {
+                sorted[k] = value[k];
+                return sorted;
+            }, {});
+        }
+        return value;
+    });
+}
+/**
+ * Verify that a SignedMessage was signed by the expected Ethereum address.
+ *
+ * Extracts the signature, canonicalizes the remaining fields,
+ * recovers the signer address, and compares against expectedAddress.
+ *
+ * @returns true if signature is valid and matches expectedAddress
+ */
+export function verifyPayload(signedMessage, expectedAddress) {
+    // Extract signature and reconstruct the original unsigned message
+    const { signature, ...message } = signedMessage;
+    const canonical = canonicalize(message);
+    // verifyMessage recovers the signer address — it does NOT throw on invalid sigs,
+    // it just returns the wrong address. So we always compare explicitly.
+    const recoveredAddress = verifyMessage(canonical, signature);
+    return recoveredAddress.toLowerCase() === expectedAddress.toLowerCase();
+}
+/** Maximum age of a message in milliseconds (30 seconds) */
+export const MAX_MESSAGE_AGE_MS = 30_000;
+/**
+ * Check if a message timestamp is within the acceptable window.
+ * Rejects messages older than MAX_MESSAGE_AGE_MS to prevent replay attacks.
+ */
+export function isTimestampValid(timestamp) {
+    const now = Date.now();
+    const age = Math.abs(now - timestamp);
+    return age <= MAX_MESSAGE_AGE_MS;
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAGvC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACzC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;iBACtB,IAAI,EAAE;iBACN,MAAM,CAA0B,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;gBAC7C,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACrB,OAAO,MAAM,CAAC;YAChB,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,aAA4B,EAC5B,eAAuB;IAEvB,kEAAkE;IAClE,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;IAChD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAExC,iFAAiF;IACjF,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAE7D,OAAO,gBAAgB,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,CAAC;AAC1E,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;IACtC,OAAO,GAAG,IAAI,kBAAkB,CAAC;AACnC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+import { PlaywrightBridge } from './playwright-bridge.js';
+import { BridgeWsServer } from './ws-server.js';
+import { TunnelManager } from './tunnel.js';
+function loadConfig() {
+    const remotePublicAddress = process.env.REMOTE_PUBLIC_ADDRESS;
+    if (!remotePublicAddress) {
+        throw new Error('REMOTE_PUBLIC_ADDRESS environment variable is required');
+    }
+    const tunnelName = process.env.TUNNEL_NAME;
+    if (!tunnelName) {
+        throw new Error('TUNNEL_NAME environment variable is required (e.g. "mcp-bridge")');
+    }
+    const tunnelUrl = process.env.TUNNEL_URL;
+    if (!tunnelUrl) {
+        throw new Error('TUNNEL_URL environment variable is required (e.g. "https://mcp-bridge.yourdomain.com")');
+    }
+    const localPort = parseInt(process.env.LOCAL_PORT || '3100', 10);
+    const userDataDir = process.env.BROWSER_PROFILE_DIR || undefined;
+    return { remotePublicAddress, localPort, tunnelName, tunnelUrl, userDataDir };
+}
+async function main() {
+    console.log('=== MCP Bridge — Local Server ===\n');
+    const config = loadConfig();
+    console.log(`Remote public address: ${config.remotePublicAddress}`);
+    console.log(`Local WS port: ${config.localPort}`);
+    console.log(`Tunnel: ${config.tunnelName} → ${config.tunnelUrl}`);
+    console.log('');
+    // 1. Start the browser bridge (persistent profile at ~/.mcp-bridge/browser-profile)
+    const playwrightBridge = new PlaywrightBridge({
+        userDataDir: config.userDataDir,
+    });
+    await playwrightBridge.start();
+    // 2. Start the WebSocket server
+    const wsServer = new BridgeWsServer({
+        port: config.localPort,
+        remotePublicAddress: config.remotePublicAddress,
+        playwrightBridge,
+    });
+    await wsServer.start();
+    // 3. Start the Cloudflare named tunnel
+    const tunnel = new TunnelManager({
+        localPort: config.localPort,
+        tunnelName: config.tunnelName,
+        tunnelUrl: config.tunnelUrl,
+    });
+    try {
+        const tunnelUrl = await tunnel.start();
+        const wssUrl = tunnelUrl.replace(/^https:\/\//, 'wss://');
+        console.log(`\n========================================`);
+        console.log(`  Cloudflare Tunnel is live!`);
+        console.log(`  HTTPS: ${tunnelUrl}`);
+        console.log(`  WSS:   ${wssUrl}`);
+        console.log(`========================================\n`);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : 'Unknown tunnel error';
+        console.error(`\n[WARNING] Cloudflare tunnel failed: ${msg}`);
+        console.log('The WebSocket server is still running on localhost.');
+        console.log(`If on the same network, connect directly to ws://localhost:${config.localPort}\n`);
+    }
+    // Graceful shutdown
+    const shutdown = async () => {
+        console.log('\nShutting down...');
+        tunnel.stop();
+        wsServer.stop();
+        await playwrightBridge.stop();
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+}
+main().catch((err) => {
+    console.error('Fatal error:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,SAAS,UAAU;IACjB,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC9D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS,CAAC;IAEjE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAChF,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,oFAAoF;IACpF,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;QAC5C,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC,CAAC;IACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAE/B,gCAAgC;IAChC,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,SAAS;QACtB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEvB,uCAAuC;IACvC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,8DAA8D,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IAClG,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/playwright-bridge.d.ts

@@ -0,0 +1,36 @@
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+export interface PlaywrightBridgeConfig {
+    /** Custom user data directory for the browser profile. Defaults to ~/.mcp-bridge/browser-profile */
+    userDataDir?: string;
+}
+/**
+ * PlaywrightBridge spawns @playwright/mcp as a child process
+ * and proxies tool calls to it via the MCP stdio transport.
+ *
+ * Uses a persistent user data directory so cookies, extensions,
+ * and other browser state are preserved between launches.
+ */
+export declare class PlaywrightBridge {
+    private client;
+    private transport;
+    private cachedTools;
+    private config;
+    constructor(config?: PlaywrightBridgeConfig);
+    start(): Promise<void>;
+    /**
+     * Get the list of available browser tools.
+     */
+    getTools(): Tool[];
+    /**
+     * Call a browser tool by name with the given arguments.
+     */
+    callTool(name: string, args?: Record<string, unknown>): Promise<{
+        content: unknown[];
+        isError?: boolean;
+    }>;
+    /**
+     * Shut down the subprocess.
+     */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=playwright-bridge.d.ts.map

package/dist/playwright-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-bridge.d.ts","sourceRoot":"","sources":["../src/playwright-bridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAI/D,MAAM,WAAW,sBAAsB;IACrC,oGAAoG;IACpG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,MAAM,CAAyB;gBAE3B,MAAM,GAAE,sBAA2B;IAIzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B5B;;OAEG;IACH,QAAQ,IAAI,IAAI,EAAE;IAIlB;;OAEG;IACG,QAAQ,CACZ,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAUrD;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAW5B"}

package/dist/playwright-bridge.js

@@ -0,0 +1,71 @@
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * PlaywrightBridge spawns @playwright/mcp as a child process
+ * and proxies tool calls to it via the MCP stdio transport.
+ *
+ * Uses a persistent user data directory so cookies, extensions,
+ * and other browser state are preserved between launches.
+ */
+export class PlaywrightBridge {
+    client = null;
+    transport = null;
+    cachedTools = [];
+    config;
+    constructor(config = {}) {
+        this.config = config;
+    }
+    async start() {
+        const userDataDir = this.config.userDataDir || join(homedir(), '.mcp-bridge', 'browser-profile');
+        const args = ['-y', '@playwright/mcp@latest', '--user-data-dir', userDataDir];
+        console.log(`[PlaywrightBridge] Launching browser with persistent profile: ${userDataDir}`);
+        this.transport = new StdioClientTransport({
+            command: 'npx',
+            args,
+        });
+        this.client = new Client({
+            name: 'local-mcp-bridge',
+            version: '1.0.0',
+        });
+        await this.client.connect(this.transport);
+        console.log('[PlaywrightBridge] Connected to @playwright/mcp');
+        // Cache the available tools
+        const toolsResult = await this.client.listTools();
+        this.cachedTools = toolsResult.tools;
+        console.log(`[PlaywrightBridge] Discovered ${this.cachedTools.length} tools`);
+    }
+    /**
+     * Get the list of available browser tools.
+     */
+    getTools() {
+        return this.cachedTools;
+    }
+    /**
+     * Call a browser tool by name with the given arguments.
+     */
+    async callTool(name, args) {
+        if (!this.client) {
+            throw new Error('PlaywrightBridge not started');
+        }
+        console.log(`[PlaywrightBridge] Calling tool: ${name}`);
+        const result = await this.client.callTool({ name, arguments: args ?? {} });
+        return result;
+    }
+    /**
+     * Shut down the subprocess.
+     */
+    async stop() {
+        if (this.client) {
+            await this.client.close();
+            this.client = null;
+        }
+        if (this.transport) {
+            await this.transport.close();
+            this.transport = null;
+        }
+        console.log('[PlaywrightBridge] Stopped');
+    }
+}
+//# sourceMappingURL=playwright-bridge.js.map

package/dist/playwright-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright-bridge.js","sourceRoot":"","sources":["../src/playwright-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,GAAkB,IAAI,CAAC;IAC7B,SAAS,GAAgC,IAAI,CAAC;IAC9C,WAAW,GAAW,EAAE,CAAC;IACzB,MAAM,CAAyB;IAEvC,YAAY,SAAiC,EAAE;QAC7C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;QAEjG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAE9E,OAAO,CAAC,GAAG,CAAC,iEAAiE,WAAW,EAAE,CAAC,CAAC;QAE5F,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACxC,OAAO,EAAE,KAAK;YACd,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC;YACvB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAE/D,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,WAAW,CAAC,MAAM,QAAQ,CAAC,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,IAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO,MAAmD,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/tunnel.d.ts

@@ -0,0 +1,33 @@
+export interface TunnelConfig {
+    /** Local port to expose (the WebSocket server port) */
+    localPort: number;
+    /** Named tunnel identifier (e.g. "mcp-bridge") */
+    tunnelName: string;
+    /** Known tunnel URL (e.g. "https://mcp-bridge.sfse.dev") */
+    tunnelUrl: string;
+}
+/**
+ * Manages a cloudflared named tunnel subprocess.
+ *
+ * Spawns: cloudflared tunnel run --url http://localhost:<port> <tunnelName>
+ *
+ * Named tunnels require:
+ *   1. cloudflared tunnel login
+ *   2. cloudflared tunnel create <name>
+ *   3. cloudflared tunnel route dns <name> <hostname>
+ *
+ * Only makes outbound connections — works behind corporate firewalls.
+ */
+export declare class TunnelManager {
+    private process;
+    private config;
+    constructor(config: TunnelConfig);
+    /**
+     * Start the cloudflared named tunnel.
+     * Waits for the connection to register, then returns the known tunnel URL.
+     */
+    start(): Promise<string>;
+    getUrl(): string;
+    stop(): void;
+}
+//# sourceMappingURL=tunnel.d.ts.map

package/dist/tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../src/tunnel.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,YAAY;IAIhC;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAqExB,MAAM,IAAI,MAAM;IAIhB,IAAI,IAAI,IAAI;CAOb"}

package/dist/tunnel.js

@@ -0,0 +1,92 @@
+import { spawn } from 'node:child_process';
+/**
+ * Manages a cloudflared named tunnel subprocess.
+ *
+ * Spawns: cloudflared tunnel run --url http://localhost:<port> <tunnelName>
+ *
+ * Named tunnels require:
+ *   1. cloudflared tunnel login
+ *   2. cloudflared tunnel create <name>
+ *   3. cloudflared tunnel route dns <name> <hostname>
+ *
+ * Only makes outbound connections — works behind corporate firewalls.
+ */
+export class TunnelManager {
+    process = null;
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    /**
+     * Start the cloudflared named tunnel.
+     * Waits for the connection to register, then returns the known tunnel URL.
+     */
+    start() {
+        return new Promise((resolve, reject) => {
+            const args = [
+                'tunnel', 'run',
+                '--url', `http://localhost:${this.config.localPort}`,
+                this.config.tunnelName,
+            ];
+            console.log(`[Tunnel] Spawning: cloudflared ${args.join(' ')}`);
+            this.process = spawn('cloudflared', args, {
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            let resolved = false;
+            const timeout = setTimeout(() => {
+                if (!resolved) {
+                    resolved = true;
+                    reject(new Error('Timed out waiting for named tunnel to register (30s)'));
+                }
+            }, 30_000);
+            // Wait for "Registered tunnel connection" in stderr
+            this.process.stderr?.on('data', (data) => {
+                const output = data.toString();
+                const lines = output.split('\n').filter(l => l.trim());
+                for (const line of lines) {
+                    console.log(`[cloudflared] ${line.trim()}`);
+                }
+                if (output.includes('Registered tunnel connection') && !resolved) {
+                    resolved = true;
+                    clearTimeout(timeout);
+                    resolve(this.config.tunnelUrl);
+                }
+            });
+            this.process.stdout?.on('data', (data) => {
+                const output = data.toString();
+                if (output.includes('Registered tunnel connection') && !resolved) {
+                    resolved = true;
+                    clearTimeout(timeout);
+                    resolve(this.config.tunnelUrl);
+                }
+            });
+            this.process.on('error', (err) => {
+                clearTimeout(timeout);
+                if (!resolved) {
+                    resolved = true;
+                    reject(new Error(`Failed to start cloudflared: ${err.message}. ` +
+                        'Is cloudflared installed? See: https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/'));
+                }
+            });
+            this.process.on('exit', (code) => {
+                console.log(`[Tunnel] cloudflared exited with code ${code}`);
+                if (!resolved) {
+                    resolved = true;
+                    clearTimeout(timeout);
+                    reject(new Error(`cloudflared exited with code ${code} before registering`));
+                }
+            });
+        });
+    }
+    getUrl() {
+        return this.config.tunnelUrl;
+    }
+    stop() {
+        if (this.process) {
+            this.process.kill('SIGTERM');
+            this.process = null;
+            console.log('[Tunnel] cloudflared stopped');
+        }
+    }
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../src/tunnel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAW9D;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,GAAwB,IAAI,CAAC;IACpC,MAAM,CAAe;IAE7B,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG;gBACX,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;gBACpD,IAAI,CAAC,MAAM,CAAC,UAAU;aACvB,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE;gBACxC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,oDAAoD;YACpD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACjE,QAAQ,GAAG,IAAI,CAAC;oBAChB,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACjE,QAAQ,GAAG,IAAI,CAAC;oBAChB,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC/B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,CAAC,IAAI,KAAK,CACd,gCAAgC,GAAG,CAAC,OAAO,IAAI;wBAC/C,yHAAyH,CAC1H,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,OAAO,CAAC,GAAG,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,IAAI,qBAAqB,CAAC,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,39 @@
+/**
+ * WebSocket message envelope for the MCP bridge.
+ * Every message between remote and local servers uses this format.
+ */
+export interface BridgeMessage {
+    /** Unique ID for request/response correlation */
+    id: string;
+    /** Message direction */
+    type: 'request' | 'response';
+    /** MCP method (e.g., 'tools/list', 'tools/call') */
+    method: string;
+    /** JSON-RPC params (for requests) */
+    params?: unknown;
+    /** JSON-RPC result (for responses) */
+    result?: unknown;
+    /** JSON-RPC error (for responses) */
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+    /** Unix timestamp in ms — for replay protection */
+    timestamp: number;
+}
+/**
+ * A BridgeMessage with an attached cryptographic signature.
+ * The signature covers all fields except `signature` itself.
+ */
+export interface SignedMessage extends BridgeMessage {
+    /** ethers EIP-191 signature of the canonicalized message */
+    signature: string;
+}
+/**
+ * Convenience type for responses from local -> remote.
+ */
+export interface BridgeResponse extends BridgeMessage {
+    type: 'response';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,wBAAwB;IACxB,IAAI,EAAE,SAAS,GAAG,UAAU,CAAC;IAC7B,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,sCAAsC;IACtC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1D,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,IAAI,EAAE,UAAU,CAAC;CAClB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/ws-server.d.ts

@@ -0,0 +1,17 @@
+import type { PlaywrightBridge } from './playwright-bridge.js';
+export interface WsServerConfig {
+    port: number;
+    remotePublicAddress: string;
+    playwrightBridge: PlaywrightBridge;
+}
+export declare class BridgeWsServer {
+    private wss;
+    private config;
+    private heartbeatInterval;
+    constructor(config: WsServerConfig);
+    start(): Promise<void>;
+    private handleConnection;
+    private sendError;
+    stop(): void;
+}
+//# sourceMappingURL=ws-server.d.ts.map

package/dist/ws-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-server.d.ts","sourceRoot":"","sources":["../src/ws-server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAgC;IAC3C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,iBAAiB,CAA+B;gBAE5C,MAAM,EAAE,cAAc;IAIlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAkCtB,OAAO,CAAC,gBAAgB;IAoFxB,OAAO,CAAC,SAAS;IAWjB,IAAI,IAAI,IAAI;CAUb"}

package/dist/ws-server.js

@@ -0,0 +1,144 @@
+import { WebSocketServer } from 'ws';
+import { randomUUID } from 'crypto';
+import { verifyPayload, isTimestampValid } from './crypto.js';
+/**
+ * WebSocket server that accepts connections from the remote MCP server.
+ * Verifies every incoming message using ethers signature verification.
+ */
+/** Ping interval to keep Cloudflare tunnel alive (100s idle timeout) */
+const HEARTBEAT_INTERVAL_MS = 45_000;
+export class BridgeWsServer {
+    wss = null;
+    config;
+    heartbeatInterval = null;
+    constructor(config) {
+        this.config = config;
+    }
+    start() {
+        return new Promise((resolve) => {
+            this.wss = new WebSocketServer({ port: this.config.port });
+            this.wss.on('listening', () => {
+                console.log(`[WsServer] Listening on port ${this.config.port}`);
+                resolve();
+            });
+            this.wss.on('connection', (ws) => {
+                console.log('[WsServer] Remote client connected');
+                ws.isAlive = true;
+                ws.on('pong', () => { ws.isAlive = true; });
+                this.handleConnection(ws);
+            });
+            // Heartbeat: ping all clients every 45s to survive Cloudflare's 100s idle timeout
+            this.heartbeatInterval = setInterval(() => {
+                this.wss?.clients.forEach((ws) => {
+                    if (ws.isAlive === false) {
+                        console.log('[WsServer] Terminating unresponsive client');
+                        return ws.terminate();
+                    }
+                    ws.isAlive = false;
+                    ws.ping();
+                });
+            }, HEARTBEAT_INTERVAL_MS);
+            this.wss.on('error', (err) => {
+                console.error('[WsServer] Server error:', err.message);
+            });
+        });
+    }
+    handleConnection(ws) {
+        ws.on('message', async (data) => {
+            let raw;
+            try {
+                raw = data.toString('utf-8');
+            }
+            catch {
+                this.sendError(ws, 'invalid-parse', 'Failed to parse message buffer');
+                return;
+            }
+            let signedMessage;
+            try {
+                signedMessage = JSON.parse(raw);
+            }
+            catch {
+                this.sendError(ws, 'invalid-json', 'Invalid JSON');
+                return;
+            }
+            // Security Layer 1: Timestamp validation (replay protection)
+            if (!isTimestampValid(signedMessage.timestamp)) {
+                console.warn('[WsServer] Rejected: message timestamp out of range');
+                this.sendError(ws, signedMessage.id, 'Message timestamp expired or too far in future');
+                return;
+            }
+            // Security Layer 2: Signature verification
+            if (!signedMessage.signature) {
+                console.warn('[WsServer] Rejected: missing signature');
+                this.sendError(ws, signedMessage.id, 'Missing signature');
+                return;
+            }
+            const isValid = verifyPayload(signedMessage, this.config.remotePublicAddress);
+            if (!isValid) {
+                console.warn('[WsServer] Rejected: invalid signature');
+                this.sendError(ws, signedMessage.id, 'Invalid signature — address mismatch');
+                ws.close(4001, 'Unauthorized');
+                return;
+            }
+            console.log(`[WsServer] Verified message: ${signedMessage.method} (id: ${signedMessage.id})`);
+            // Route the request to the Playwright bridge
+            try {
+                let result;
+                let error;
+                if (signedMessage.method === 'tools/list') {
+                    const tools = this.config.playwrightBridge.getTools();
+                    result = { tools };
+                }
+                else if (signedMessage.method === 'tools/call') {
+                    const params = signedMessage.params;
+                    const toolResult = await this.config.playwrightBridge.callTool(params.name, params.arguments);
+                    result = toolResult;
+                }
+                else {
+                    error = { code: -32601, message: `Unknown method: ${signedMessage.method}` };
+                }
+                const response = {
+                    id: signedMessage.id,
+                    type: 'response',
+                    method: signedMessage.method,
+                    result,
+                    error,
+                    timestamp: Date.now(),
+                };
+                ws.send(JSON.stringify(response));
+            }
+            catch (err) {
+                const errorMessage = err instanceof Error ? err.message : 'Unknown error';
+                console.error(`[WsServer] Tool execution error: ${errorMessage}`);
+                this.sendError(ws, signedMessage.id, errorMessage, signedMessage.method);
+            }
+        });
+        ws.on('close', () => {
+            console.log('[WsServer] Remote client disconnected');
+        });
+        ws.on('error', (err) => {
+            console.error('[WsServer] WebSocket error:', err.message);
+        });
+    }
+    sendError(ws, id, message, method) {
+        const response = {
+            id: id || randomUUID(),
+            type: 'response',
+            method: method || 'error',
+            error: { code: -32000, message },
+            timestamp: Date.now(),
+        };
+        ws.send(JSON.stringify(response));
+    }
+    stop() {
+        if (this.heartbeatInterval) {
+            clearInterval(this.heartbeatInterval);
+            this.heartbeatInterval = null;
+        }
+        if (this.wss) {
+            this.wss.close();
+            console.log('[WsServer] Stopped');
+        }
+    }
+}
+//# sourceMappingURL=ws-server.js.map

package/dist/ws-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-server.js","sourceRoot":"","sources":["../src/ws-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAa,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAU9D;;;GAGG;AACH,wEAAwE;AACxE,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC,MAAM,OAAO,cAAc;IACjB,GAAG,GAA2B,IAAI,CAAC;IACnC,MAAM,CAAiB;IACvB,iBAAiB,GAA0B,IAAI,CAAC;IAExD,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK;QACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAE3D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,gCAAgC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAa,EAAE,EAAE;gBAC1C,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;gBACjD,EAAU,CAAC,OAAO,GAAG,IAAI,CAAC;gBAC3B,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAI,EAAU,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrD,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,kFAAkF;YAClF,IAAI,CAAC,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE;gBACxC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;oBAC/B,IAAK,EAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;wBAClC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;wBAC1D,OAAO,EAAE,CAAC,SAAS,EAAE,CAAC;oBACxB,CAAC;oBACA,EAAU,CAAC,OAAO,GAAG,KAAK,CAAC;oBAC5B,EAAE,CAAC,IAAI,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAE1B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3B,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,EAAa;QACpC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YACtC,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,gCAAgC,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,IAAI,aAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBACpE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,gDAAgD,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;YAED,2CAA2C;YAC3C,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBACvD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBACvD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,sCAAsC,CAAC,CAAC;gBAC7E,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,gCAAgC,aAAa,CAAC,MAAM,SAAS,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;YAE9F,6CAA6C;YAC7C,IAAI,CAAC;gBACH,IAAI,MAAe,CAAC;gBACpB,IAAI,KAAoE,CAAC;gBAEzE,IAAI,aAAa,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;oBACtD,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC;gBACrB,CAAC;qBAAM,IAAI,aAAa,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBACjD,MAAM,MAAM,GAAG,aAAa,CAAC,MAA+D,CAAC;oBAC7F,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9F,MAAM,GAAG,UAAU,CAAC;gBACtB,CAAC;qBAAM,CAAC;oBACN,KAAK,GAAG,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/E,CAAC;gBAED,MAAM,QAAQ,GAAmB;oBAC/B,EAAE,EAAE,aAAa,CAAC,EAAE;oBACpB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,MAAM;oBACN,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC;gBAEF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC1E,OAAO,CAAC,KAAK,CAAC,oCAAoC,YAAY,EAAE,CAAC,CAAC;gBAClE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,EAAa,EAAE,EAAU,EAAE,OAAe,EAAE,MAAe;QAC3E,MAAM,QAAQ,GAAmB;YAC/B,EAAE,EAAE,EAAE,IAAI,UAAU,EAAE;YACtB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM,IAAI,OAAO;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE;YAChC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACtC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@salesforcebob/remote-mcp-bridge-local",
+  "version": "1.0.1",
+  "description": "Local MCP bridge server — browser control via Playwright + Cloudflare tunnel",
+  "type": "module",
+  "main": "./dist/index.js",
+  "bin": {
+    "remote-mcp-bridge-local": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "node --env-file=.env --import tsx/esm src/index.ts",
+    "start": "node dist/index.js",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@playwright/mcp": "^0.0.28",
+    "ethers": "^6.13.0",
+    "ws": "^8.18.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.3.1",
+    "@types/ws": "^8.5.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.5.0"
+  },
+  "license": "ISC"
+}