mcp-pacemaker 2.1.1 → 2.1.2

package/CHANGELOG.md

@@ -7,8 +7,51 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.1.2] - 2026-10-26
+
+### Fixed
+
+- The bridge no longer crashes when a server exits while a request is being written to it, for
+  example when the server restarts mid-request. The write failed with `EPIPE` and nothing
+  handled the error, so the whole bridge restarted and calls in flight on every server failed.
+  A Streamable HTTP request now gets a "server exited before answering" error, and the bridge
+  keeps running.
+- A crash after startup now leaves its error and stack in `bridge.log`. They went only to
+  stderr, which nothing captures when the bridge runs as a Windows task.
+- The offline release verifier (`npm run publication:verify-local`) rejected every 2.1.x local
+  gate run with "Supporting command vector changed". The gate binds each Git command to its
+  checkout with `safe.directory`, and the verifier rebuilt the commands without it. Both now
+  build it with the same function.
+
+### Security
+
+- Web pages from other sites can no longer use the bridge. Host and Origin were checked only on
+  the admin and pooling routes, so a page open in the user's browser could call tools through
+  the bridge, including on HTTP servers the bridge adds credentials to. Every route now answers
+  403 when the Host is a DNS name other than `localhost` (DNS rebinding), when the Origin is
+  neither the bridge nor a `localhost` or loopback page, or when the browser marks the request
+  as cross-site, except opening the dashboard from a link. MCP clients, the CLI and the
+  dashboard work as before through `localhost` or an IP address; a client that reaches the
+  bridge by another host name, such as `host.docker.internal`, now gets 403 and should use an
+  IP address.
+- The dashboard is built with Vite 7.3.7. Vite's development server has advisories up to 7.3.6
+  (GHSA-9jrq-w75r-8gcw, GHSA-rq7h-c2jc-7f22, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw,
+  GHSA-587h-7wmj-h5pm). The published package ships the prebuilt dashboard and never runs that
+  server; the built dashboard is unchanged.
+
+### Changed
+
+- The README again compares mcp-pacemaker with Supergateway, mcp-proxy, MCP Hub and ToolHive.
+  Each cell was checked against the projects' October 2026 releases and is sourced in
+  `docs/comparison.md`, which now ships in the package.
+- The npm publishing tools accept 1.x release candidates. CI validation expects the 1.x Windows
+  job names, and the runtime file check asks only for the pooling modules a 1.x package has. The
+  1.x maintenance line now carries these same tools.
+
 ## [2.1.1] - 2026-10-15
 
+Published to npm on 2026-10-17.
+
 ### Added
 
 - `upgrade --fix-legacy-access` is a one-time step for a Windows 1.3 install that was set up from
@@ -640,7 +683,8 @@ one is a trap for anyone building something similar.
 - Do not report a teardown the bridge initiated as a crash. `taskkill /F` exits non-zero, so
   every recycle, idle reap and session close was recorded as a failure, burying real ones.
 
-[Unreleased]: https://github.com/girishkvs/mcp-pacemaker/compare/v2.1.1...HEAD
+[Unreleased]: https://github.com/girishkvs/mcp-pacemaker/compare/v2.1.2...HEAD
+[2.1.2]: https://github.com/girishkvs/mcp-pacemaker/releases/tag/v2.1.2
 [2.1.1]: https://github.com/girishkvs/mcp-pacemaker/releases/tag/v2.1.1
 [2.1.0]: https://github.com/girishkvs/mcp-pacemaker/releases/tag/v2.1.0
 [2.0.2]: https://github.com/girishkvs/mcp-pacemaker/releases/tag/v2.0.2

package/CONTRIBUTING.md

@@ -143,12 +143,12 @@ The same harness runs in both maintained branches:
 
 | Preparation | Selected legacy / current pair |
 |---|---|
-| Default in the selected 2.1.1 checkout | Immutable 1.3.0 / packed 2.1.1 |
-| Default in the 1.3.1 checkout | Packed 1.3.1 / immutable 2.0.0 |
+| Default in the selected 2.1.2 checkout | Immutable 1.3.0 / packed 2.1.2 |
+| Default in the 1.3.2 checkout | Packed 1.3.2 / immutable 2.0.0 |
 | `npm run compat:prepare:baseline` | Immutable 1.3.0 / immutable 2.0.0 |
-| `npm run compat:prepare -- --peer-root <opposite-patch-checkout>` | Packed explicit 1.x peer / packed 2.1.1 |
+| `npm run compat:prepare -- --peer-root <opposite-patch-checkout>` | Packed explicit 1.x peer / packed 2.1.2 |
 
-These selections are not qualification evidence. The 2.1.1 candidate requires fresh
+These selections are not qualification evidence. The 2.1.2 candidate requires fresh
 exact-byte gates; selecting it does not select an opposite-major patch pair.
 Earlier 1.3.1/2.0.2 and 1.3.1/2.0.1 results remain historical.
 

package/README.md

@@ -14,7 +14,7 @@ mcp-pacemaker init             # imports your servers, asks before rewiring any
 [Release notes](https://github.com/girishkvs/mcp-pacemaker/releases) ·
 [Demo and design write-up](https://girishkonda.com/projects/mcp-pacemaker/)
 
-> This README describes **2.1.1**.
+> This README describes **2.1.2**.
 > See the [release changes](CHANGELOG.md).
 
 ## What it does
@@ -41,17 +41,17 @@ exits (every one-shot CLI run), **those servers die**.
 
 ## Quick start
 
-Install **mcp-pacemaker 2.1.1** from npm. Use a maintained **Node.js 22 or 24**
+Install **mcp-pacemaker 2.1.2** from npm. Use a maintained **Node.js 22 or 24**
 release; Windows also needs PowerShell 7 and Windows Script Host.
 See [installation requirements](docs/install.md) before setup.
 
 ```bash
-npm view mcp-pacemaker@2.1.1 version
-npm install -g mcp-pacemaker@2.1.1
+npm view mcp-pacemaker@2.1.2 version
+npm install -g mcp-pacemaker@2.1.2
 mcp-pacemaker --version
 ```
 
-The version check prints `2.1.1` without running setup.
+The version check prints `2.1.2` without running setup.
 
 > **Run it as an ordinary user.** From 2.1.0 the bridge, supervisor and default upgrades
 > refuse a privileged caller *at startup* — a non-administrator terminal on Windows and a
@@ -120,6 +120,32 @@ them in.
 
 </details>
 
+## How it compares
+
+Checked against each project's latest release on October 16, 2026. Every cell is sourced in
+[docs/comparison.md](docs/comparison.md). These projects overlap; `mcp-pacemaker` focuses on
+keeping MCP servers running on a developer workstation.
+
+| | [Supergateway](https://github.com/supercorp-ai/supergateway) | [mcp-proxy](https://github.com/sparfenyuk/mcp-proxy) | [MCP Hub](https://github.com/ravitemer/mcp-hub) | [ToolHive](https://github.com/stacklok/toolhive) | **mcp-pacemaker** |
+|---|---|---|---|---|---|
+| Serves stdio servers over Streamable HTTP | ✅ | ✅ | ❌ | ✅ | ✅ |
+| Serves stdio servers over SSE (legacy) | ✅ | ✅ | ✅ | ✅ (deprecated) | ✅ |
+| What you install | npm, binary or Docker | PyPI or Docker | npm or Nix | Go binary + Docker or Podman | npm; the bridge has **zero** dependencies |
+| Restarts crashed processes automatically | new child per connection | ❌ | manual restart (API) | ✅ | ✅ bridge and warm pools |
+| Starts at OS logon | ❌ | ❌ | ❌ | desktop app only | ✅ Windows, macOS, Linux |
+| Starts again after unlock or wake | ❌ | ❌ | ❌ | ❌ | ✅ Windows |
+| Auth header from your own command, auto-refreshed | ❌ | ❌ | at connect only | ❌ | ✅ |
+| Sessions survive a bridge restart without re-initializing | ❌ | ❌ | ❌ | Kubernetes with Redis only | ✅ |
+| Timed restart to refresh an interactive login | ❌ | ❌ | ❌ | ❌ | ✅ |
+| Reuses existing client MCP config files | ✅ | stdio entries only | ✅ | ❌ | ✅ |
+| Wires editors and CLIs for you | ❌ | ❌ | ❌ | ✅ | ✅ |
+| Web dashboard | ❌ | ❌ | ❌ | desktop app instead | ✅ |
+| Terminal dashboard | ❌ | ❌ | ❌ | ✅ (experimental) | ✅ |
+| HTTP control API | health checks only | `/status` only | ✅ | ✅ | ✅ |
+
+A surviving session re-establishes the client's handshake against a fresh server; it does not
+restore arbitrary tool state. A transport bridge is not a sandbox for untrusted tools.
+
 ## Everyday commands
 
 | Command | What it does |
@@ -167,19 +193,6 @@ loopback.
 **Topologies:** wire every host to one shared bridge (default), or give each host its own bridge
 (`install --client X --port N`) — or any mix. `status`/`doctor` report all bridges + wired hosts.
 
-## Choosing a transport tool
-
-Documentation checked September 27, 2026; this is a use-case guide, not a feature benchmark.
-
-| Tool | Consider it when |
-|---|---|
-| [Supergateway](https://github.com/supercorp-ai/supergateway) | You want command-line conversion between stdio and HTTP/SSE/WebSocket transports |
-| [mcp-proxy](https://github.com/sparfenyuk/mcp-proxy) | You want a Python-based adapter between local stdio clients/servers and remote MCP transports |
-| **mcp-pacemaker** | You want workstation process supervision, host wiring, auto-start, lifecycle diagnostics and explicit isolation/pooling/sharing policies |
-
-These projects have overlapping capabilities. Reconnecting to a fresh server is not recovery
-of arbitrary application state, and a transport bridge is not a sandbox for untrusted tools.
-
 ## Upgrades
 
 > Package installation alone does not upgrade a running backend. Use explicit `upgrade --to`
@@ -241,6 +254,7 @@ See [SECURITY.md](SECURITY.md) for the threat model and how to report a vulnerab
 - [HTTP API](docs/http-api.md) — endpoints, pooling batches and the admin nonce
 - [Upgrades and rollback](docs/upgrades.md) — managed upgrades, `--sxs`, recovery and the Windows 1.3 migration
 - [Version compatibility](docs/compatibility.md) — 1.3.x and 2.x pairs, and upgrading from 1.3.0
+- [How it compares](docs/comparison.md) — sourced comparison with Supergateway, mcp-proxy, MCP Hub and ToolHive
 - [User-runtime contract](docs/execution-context.md) — what the ordinary-user check verifies
 - [Shared sessions](docs/shared-sessions.md) — the full shared-mode contract
 - [Account upgrades](docs/account-upgrades.md) — explicit original-account upgrades on Windows

package/SECURITY.md

@@ -36,6 +36,13 @@ so a few properties matter more than usual:
 - **There is no user authentication on the proxy path.** Any local process that can open the
   port can use the bridged servers. Treat access to the port as equivalent to access to every
   credential the bridge holds.
+- **Web pages from other sites are refused.** A page open in the browser can reach a loopback
+  port too, so every route refuses with 403 a `Host` that is a DNS name other than `localhost`
+  (DNS rebinding), an `Origin` that is neither the bridge itself nor a `localhost` or loopback
+  page, and a browser request marked `Sec-Fetch-Site: cross-site`, except opening the dashboard
+  from a link. This does not identify callers: with `--host 0.0.0.0`, a client that sends an IP
+  `Host` and no `Origin` is still served. MCP clients and the CLI send no `Origin`; have them
+  connect through `localhost` or an IP address.
 - **Administrative endpoints require a nonce.** `/admin/*` is guarded by a random nonce written
   to `~/.mcp-pacemaker/admin.nonce` on startup, readable only by the user running the bridge.
   This covers `/admin/reload`, which re-reads `servers.json` — see the note below on why that

package/THIRD_PARTY_NOTICES.txt

@@ -219,7 +219,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 ==============================================================================
-vite@7.3.6
+vite@7.3.7
 Declared license: MIT
 
 --- LICENSE.md: # Vite core license ---

package/bin/dependency-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "mcp-pacemaker",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "mcp-pacemaker",
-      "version": "2.1.1",
+      "version": "2.1.2",
       "license": "MIT",
       "dependencies": {
         "@clack/prompts": "^1.7.0",

package/bin/mcp-bridge.mjs

@@ -25,6 +25,7 @@
  */
 import http from 'node:http';
 import https from 'node:https';
+import { isIP } from 'node:net';
 import { spawn, exec, execFile, execFileSync } from 'node:child_process';
 import { createHash, randomUUID } from 'node:crypto';
 import { readFileSync, existsSync, writeFileSync, appendFileSync, statSync, renameSync, watch } from 'node:fs';
@@ -188,6 +189,16 @@ const log = (m) => {
   for (const c of logClients) { try { c.write(`data: ${JSON.stringify(line)}\n\n`); } catch { /* gone */ } }
 };
 
+// A crash left no trace: its stack went only to stderr, which nothing captures on Windows (see
+// LOG_FILE). The monitor only records the error. The process still exits as before, and the
+// supervisor restarts it.
+process.on('uncaughtExceptionMonitor', (error, origin) => {
+  try {
+    const detail = error instanceof Error ? error.stack : String(error);
+    appendLog(`[mcp-bridge] ${new Date().toISOString()} fatal ${origin}: ${detail}`);
+  } catch { /* recording must never replace the original error */ }
+});
+
 // Token expiry (seconds) for an http server's cached command/az token, if any — for the dashboard.
 //
 // A bare `audience` is shorthand for an Azure CLI token command. It is expanded in exactly one
@@ -651,6 +662,10 @@ function spawnServer(name, def) {
   child.once('error', () => {
     if (!spawned) serverMetrics.failedSpawn(name);
   });
+  // A child can exit between a write to it and the bridge handling that exit, for example when
+  // a server restarts mid-request. The write then fails with EPIPE, and a pipe 'error' with no
+  // listener crashes the whole bridge. The exit handler still fails the request that was waiting.
+  child.stdin.on('error', (error) => log(`[${name}] stdin write failed: ${error.message}`));
   child.__spawnedAt = Date.now(); // start of the cold-start clock; stopped when initialize lands
   return child;
 }
@@ -2092,7 +2107,69 @@ function proxyHttp(name, def, req, res) {
 }
 
 /* --------------------------------- server ---------------------------------- */
+// Browsers can reach a loopback server too. Without these checks any web page could use the
+// bridge, and the credentials it adds, through the user's browser: a cross-site POST runs a tool
+// without a CORS preflight, and DNS rebinding lets the page read the replies. The MCP spec
+// requires servers to check Origin for this reason.
+//
+// - Host: rebinding only works through a DNS name, so only `localhost` and IP addresses pass.
+// - Origin, when sent: the bridge itself (the dashboard) or another page on this machine.
+// - No Origin: clients that are not browsers send none. A browser also leaves it out of a
+//   cross-site GET, such as an image, a frame or a link, which Sec-Fetch-Site still marks. Only
+//   opening the dashboard itself from a link on another site is let through.
+function hostnameOf(urlText) {
+  try {
+    const { hostname } = new URL(urlText);
+    return hostname.startsWith('[') ? hostname.slice(1, -1) : hostname;
+  } catch { return ''; }
+}
+
+function isLoopback(hostname) {
+  const loopbackV4 = isIP(hostname) === 4 &&
+    hostname.startsWith('127.');
+  return hostname === 'localhost' ||
+    hostname === '::1' ||
+    loopbackV4;
+}
+
+function isLocalRequest(req) {
+  if (!req.headers.host) return false;
+  const host = hostnameOf(`http://${req.headers.host}`);
+  const hostIsSafe = host === 'localhost' ||
+    isIP(host) !== 0;
+  if (!hostIsSafe) return false;
+  const origin = req.headers.origin;
+  if (origin !== undefined) {
+    const sameOrigin = origin === `http://${req.headers.host}`;
+    const loopbackPage = isLoopback(hostnameOf(origin));
+    return sameOrigin ||
+      loopbackPage;
+  }
+  const path = req.url.split('?')[0];
+  const dashboardPath = path === '/ui' ||
+    path.startsWith('/ui/');
+  const opensDashboard = dashboardPath &&
+    req.headers['sec-fetch-mode'] === 'navigate' &&
+    req.headers['sec-fetch-dest'] === 'document';
+  const crossSiteFetch = req.headers['sec-fetch-site'] === 'cross-site' &&
+    !opensDashboard;
+  return !crossSiteFetch;
+}
+
+// One line a minute explains a refusal; a page retrying in a loop must not flood the log.
+let lastRefusalLog = 0;
+function noteRefusal(req) {
+  if (Date.now() - lastRefusalLog < 60000) return;
+  lastRefusalLog = Date.now();
+  log(`refused ${req.method} ${req.url} from Host ${req.headers.host ?? 'none'}, Origin ${req.headers.origin ?? 'none'}: not a local request`);
+}
+
 const server = http.createServer((req, res) => {
+  if (!isLocalRequest(req)) {
+    noteRefusal(req);
+    res.writeHead(403).end('forbidden: not a local request');
+    return;
+  }
   const url = new URL(req.url, `http://${req.headers.host}`);
   const [name, kind] = url.pathname.split('/').filter(Boolean);
   const readOnlyStatus = (name === 'status' && !kind) ||

package/docs/comparison.md

@@ -0,0 +1,167 @@
+# How mcp-pacemaker compares
+
+Checked on October 16, 2026, from each project's documentation and source. We did not run the
+other tools. Corrections are welcome: open an issue with a link.
+
+| Project | Release checked |
+|---|---|
+| [Supergateway](https://github.com/supercorp-ai/supergateway) | v4.2.0 (2026-10-15) |
+| [mcp-proxy](https://github.com/sparfenyuk/mcp-proxy) | v0.13.0 (2026-10-10) |
+| [MCP Hub](https://github.com/ravitemer/mcp-hub) | v4.2.1 (2025-08-22, no later commits) |
+| [ToolHive](https://github.com/stacklok/toolhive) | v0.54.0 (2026-10-14), desktop app v0.40.2 |
+
+✅ means documented or implemented. ❌ means we did not find it in the README, docs, CLI options
+or source; it does not mean the feature is impossible. Text in a cell describes partial support.
+ToolHive's desktop app counts as part of ToolHive.
+
+| | Supergateway | mcp-proxy | MCP Hub | ToolHive | **mcp-pacemaker** |
+|---|---|---|---|---|---|
+| Serves stdio servers over Streamable HTTP | ✅ | ✅ | ❌ | ✅ | ✅ |
+| Serves stdio servers over SSE (legacy) | ✅ | ✅ | ✅ | ✅ (deprecated) | ✅ |
+| What you install | npm, binary or Docker | PyPI or Docker | npm or Nix | Go binary + Docker or Podman | npm; the bridge has **zero** dependencies |
+| Restarts crashed processes automatically | new child per connection | ❌ | manual restart (API) | ✅ | ✅ bridge and warm pools |
+| Starts at OS logon | ❌ | ❌ | ❌ | desktop app only | ✅ Windows, macOS, Linux |
+| Starts again after unlock or wake | ❌ | ❌ | ❌ | ❌ | ✅ Windows |
+| Auth header from your own command, auto-refreshed | ❌ | ❌ | at connect only | ❌ | ✅ |
+| Sessions survive a bridge restart without re-initializing | ❌ | ❌ | ❌ | Kubernetes with Redis only | ✅ |
+| Timed restart to refresh an interactive login | ❌ | ❌ | ❌ | ❌ | ✅ |
+| Reuses existing client MCP config files | ✅ | stdio entries only | ✅ | ❌ | ✅ |
+| Wires editors and CLIs for you | ❌ | ❌ | ❌ | ✅ | ✅ |
+| Web dashboard | ❌ | ❌ | ❌ | desktop app instead | ✅ |
+| Terminal dashboard | ❌ | ❌ | ❌ | ✅ (experimental) | ✅ |
+| HTTP control API | health checks only | `/status` only | ✅ | ✅ | ✅ |
+
+## Sources
+
+### Supergateway v4.2.0
+
+- **Transports:** stdio → SSE is the default output
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L50-L63)); stdio →
+  Streamable HTTP in both directions
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L84-L130)).
+- **Install:** npm, standalone executables
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L258-L294)) or Docker
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L334-L380)).
+- **Crashed processes:** each SSE/WebSocket connection gets its own child and a reconnecting client
+  gets a fresh one ([CHANGELOG](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/CHANGELOG.md#L83));
+  when a child exits, its calls fail and the session ends
+  ([source](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/src/gateways/sseSession.ts#L120-L170)).
+- **Logon start, unlock, timed restart:** not in the option list
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L13-L48),
+  [options](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/src/cliOptions.ts)); the only
+  related option, `--sessionTimeout`, expires idle sessions.
+- **Auth:** static `--header` and `--oauth2Bearer`
+  ([options](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/src/cliOptions.ts#L106-L117));
+  `${VAR}` in the config file is expanded once at load
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L209)).
+- **Sessions:** stateful sessions are kept in memory, and an unknown session ID after a restart gets
+  404 ([source](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/src/gateways/statefulSessions.ts#L211-L232)).
+  Stateless mode has no session to lose
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L107-L129)).
+- **Config reuse and wiring:** `--config` reads a Claude Desktop `mcpServers` file
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L179-L218)); client
+  entries are written by hand
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L382-L467)).
+- **Dashboards and API:** health endpoints only
+  ([README](https://github.com/supercorp-ai/supergateway/blob/v4.2.0/README.md#L39-L40)).
+
+### mcp-proxy v0.13.0
+
+- **Transports:** `/sse` and `/mcp` server routes
+  ([source](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/src/mcp_proxy/mcp_server.py#L89-L93));
+  stdio → SSE server mode
+  ([README](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/README.md#L98-L170)).
+- **Install:** uv, pipx or Docker, Python 3.10 or newer
+  ([README](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/README.md#L222-L261)).
+- **Crashed processes, logon start, timed restart:** not in the option list
+  ([README](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/README.md#L318-L398)). The Docker
+  Compose example relies on Docker's `restart: unless-stopped`
+  ([README](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/README.md#L297-L316)).
+- **Auth:** static headers, `API_ACCESS_TOKEN`, OAuth2 client credentials and Basic/Digest
+  ([README](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/README.md#L56-L74)). OAuth2 tokens
+  refresh, but no user command produces the header.
+- **Sessions:** kept in memory (`event_store=None`)
+  ([source](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/src/mcp_proxy/mcp_server.py#L89-L93));
+  `--stateless` avoids sessions.
+- **Config reuse and wiring:** `--named-server-config` reads the stdio entries of an `mcpServers` file
+  ([source](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/src/mcp_proxy/config_loader.py#L15-L70));
+  client entries are written by hand
+  ([README](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/README.md#L76-L96)).
+- **Dashboards and API:** a read-only `/status` JSON
+  ([source](https://github.com/sparfenyuk/mcp-proxy/blob/v0.13.0/src/mcp_proxy/mcp_server.py#L48-L73)).
+
+### MCP Hub v4.2.1
+
+- **Transports:** its single `/mcp` endpoint is SSE
+  ([source](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/src/server.js#L345-L372)); Streamable HTTP
+  is only used to connect to remote servers
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L19-L20)).
+- **Install:** npm (one bundled file) or a Nix flake
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L136-L140)).
+- **Crashed processes:** restart is manual through `POST /api/restart`
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L791)); we did not find an
+  automatic restart of a local server in the source
+  ([source](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/src/MCPConnection.js#L626-L631)).
+- **Logon start:** not documented; the 2.2.0 notes suggest running it under systemd yourself
+  ([CHANGELOG](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/CHANGELOG.md#L430-L436)).
+- **Auth:** headers accept `${cmd: …}`, which runs when the server connects
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L255-L262),
+  [source](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/src/MCPConnection.js#L161-L164)).
+- **Sessions:** SSE sessions are kept in memory
+  ([source](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/src/mcp/server.js#L473-L490)).
+- **Config reuse and wiring:** existing `.vscode/mcp.json` and `mcpServers` files work directly
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L168-L253)); clients are
+  pointed at the hub by hand
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L51-L60)).
+- **Dashboards and API:** REST API
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L422-L800)); a web UI and TUI
+  are listed as to-do items
+  ([README](https://github.com/ravitemer/mcp-hub/blob/v4.2.1/README.md#L1262-L1266)).
+
+### ToolHive v0.54.0 and desktop app v0.40.2
+
+- **Transports:** `--proxy-mode` is Streamable HTTP by default; SSE is deprecated
+  ([CLI docs](https://docs.stacklok.com/toolhive/reference/cli/thv_run)).
+- **Install:** a Go binary that needs a container runtime
+  ([install](https://docs.stacklok.com/toolhive/guides-cli/install#prerequisites)), or the desktop app
+  ([install](https://docs.stacklok.com/toolhive/guides-ui/install)).
+- **Crashed processes:** exited containers restart with backoff
+  ([source](https://github.com/stacklok/toolhive/blob/v0.54.0/pkg/workloads/manager.go#L534-L640)).
+- **Logon start:** the desktop app's "Start on login" setting
+  ([docs](https://docs.stacklok.com/toolhive/guides-ui/install#application-settings)); the CLI has no
+  autostart command.
+- **Auth:** OAuth/OIDC with automatic refresh, a static bearer token read once, forwarded headers
+  and token exchange
+  ([CLI docs](https://docs.stacklok.com/toolhive/reference/cli/thv_run)).
+- **Sessions:** with Redis session storage, clients can reconnect and resume; with local storage
+  they re-initialize
+  ([architecture](https://github.com/stacklok/toolhive/blob/v0.54.0/docs/arch/13-vmcp-scalability.md#L193-L210)).
+- **Timed restart:** restarts are on demand only
+  ([docs](https://docs.stacklok.com/toolhive/guides-cli/manage-mcp-servers#lifecycle-management)).
+- **Config reuse and wiring:** `thv client setup` and `thv client register` configure 26 clients
+  ([CLI docs](https://github.com/stacklok/toolhive/blob/v0.54.0/docs/cli/thv_client_register.md#L20-L46));
+  import and export cover only ToolHive's own run configuration
+  ([CLI docs](https://github.com/stacklok/toolhive/blob/v0.54.0/docs/cli/thv_export.md#L20-L24)).
+- **Dashboards and API:** `thv tui` (experimental)
+  ([CLI docs](https://github.com/stacklok/toolhive/blob/v0.54.0/docs/cli/thv_tui.md#L14-L20)) and
+  `thv serve`
+  ([CLI docs](https://github.com/stacklok/toolhive/blob/v0.54.0/docs/cli/thv_serve.md#L18-L36)); the
+  web console is in the enterprise edition only
+  ([platform](https://docs.stacklok.com/platform)).
+
+### mcp-pacemaker
+
+- **Transports and hosts:** see [Supported hosts](../README.md#supported-hosts).
+- **Install:** the npm dependencies belong to the setup CLI and terminal dashboard; the bridge
+  imports only Node.js built-ins.
+- **Crashed processes:** the supervisor restarts the bridge, and warm-pool children are replaced
+  with backoff. See [configuration](configuration.md).
+- **Logon and unlock:** a Windows scheduled task starts at logon and on workstation unlock, which
+  also covers wake from sleep; macOS uses a launchd agent and Linux a systemd user unit.
+- **Auth:** `auth.type: "command"` runs your command and refreshes the token on a schedule
+  ([configuration](configuration.md#serversjson)).
+- **Sessions and timed restart:** session resume (`MCP_RESUME`) and scheduled recycle
+  (`recycleMinutes`) in [configuration](configuration.md).
+- **Config reuse and wiring:** `import --from` and `install --client`; see the
+  [command reference](operations.md#command-reference).
+- **Dashboards and API:** [dashboards](dashboards.md) and [HTTP API](http-api.md).

package/docs/compatibility.md

@@ -4,13 +4,13 @@ How the 1.3.x and 2.x lines work together. For npm channels and exact-version in
 [install details](install.md). To replace a running installation, see
 [upgrades and rollback](upgrades.md).
 
-This documentation describes **2.1.1**. For 1.3.x immediate-save behavior, see the
+This documentation describes **2.1.2**. For 1.3.x immediate-save behavior, see the
 [legacy documentation](https://github.com/girishkvs/mcp-pacemaker/blob/v1.3.1/README.md)
 and [support policy](../SECURITY.md#supported-versions). Those documents do not establish
 that a legacy version is available on npm.
 
 The historical baselines remain **1.3.0 / 2.0.0**. The earlier **1.3.1 / 2.0.1** and
-**1.3.1 / 2.0.2** patch-pair evidence is not transferable to a new release. The **2.1.1**
+**1.3.1 / 2.0.2** patch-pair evidence is not transferable to a new release. The **2.1.2**
 candidate requires fresh exact-byte compatibility and service-replacement gates.
 A 2.x client handles legacy immediate saves. A 1.x client cannot write pooling settings to a
 2.x bridge: update the CLI and refresh old dashboard tabs. Before downgrading, settle pending

package/docs/install.md

@@ -21,8 +21,8 @@ Its repository link should point to
 Use an exact version for a repeatable installation:
 
 ```bash
-npm view mcp-pacemaker@2.1.1 version
-npm install -g mcp-pacemaker@2.1.1
+npm view mcp-pacemaker@2.1.2 version
+npm install -g mcp-pacemaker@2.1.2
 mcp-pacemaker --version
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-pacemaker",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "Keeps your MCP servers alive across editor restarts, reboots, and token expiry — pluggable auth, cross-platform auto-start, one-command setup. Zero-dependency bridge; a small CLI for setup.",
   "type": "module",
   "bin": {
@@ -33,7 +33,8 @@
     "docs/http-api.md",
     "docs/install.md",
     "docs/operations.md",
-    "docs/upgrades.md"
+    "docs/upgrades.md",
+    "docs/comparison.md"
   ],
   "engines": {
     "node": ">=20"
@@ -69,7 +70,7 @@
     "compat:clean": "node tools/compatibility/prepare.mjs --clean",
     "test:compat": "node --test --test-concurrency=1 test/compat/gates.test.mjs test/compat/cli-api.test.mjs",
     "test:compat:browser": "node --test --test-concurrency=1 test/compat/browser.test.mjs",
-    "test": "node --test --test-concurrency=4 test/bridge.test.mjs test/bridge-controls.test.mjs test/kill-tree.test.mjs test/keepalive.test.mjs test/auth-token.test.mjs test/cold-start.test.mjs test/crash-report.test.mjs test/resume.test.mjs test/config-checks.test.mjs test/config-reload.test.mjs test/health.test.mjs test/cli.test.mjs test/logs.test.mjs test/prewarm.test.mjs test/pooling-batch-scheduler.test.mjs test/pooling-batch-api.test.mjs test/pooling-batch-store.test.mjs test/pooling-batches.test.mjs test/pooling-stage-publication.test.mjs test/pooling-batch-startup.test.mjs test/pooling-postcommit-recovery.test.mjs test/pooling-config.test.mjs test/pooling-writer.test.mjs test/pooling-api.test.mjs test/pooling-deadlines.test.mjs test/pooling-queue-budget.test.mjs test/windows-security-helper.test.mjs test/windows-batch-security.test.mjs test/tui.test.mjs test/warm-pool.test.mjs test/server-metrics.test.mjs test/admission.test.mjs test/shared-sessions.test.mjs test/shared-http.test.mjs test/cross-host.test.mjs test/suite-integrity.test.mjs test/consumer-package.test.mjs test/notices.test.mjs test/notices-runtime.test.mjs test/npm-publication.test.mjs test/npm-publication-proof.test.mjs test/update-check.test.mjs test/service-lifecycle.test.mjs test/service-supervisor.test.mjs test/npm-publication-gates.test.mjs test/npm-publication-matrix.test.mjs test/publication-scanners-advisories.test.mjs test/publication-scanners.test.mjs test/service-replacement.test.mjs test/consumer-environment.test.mjs test/npm-publication-external.test.mjs test/npm-publication-peer.test.mjs test/publication-scanners-diagnostics.test.mjs test/publication-scanners-publication.test.mjs test/publication-scanners-paths.test.mjs test/npm-publication-local-enforcement.test.mjs test/publication-scanners-admission.test.mjs test/windows-process-lifetime.test.mjs test/windows-lifetime-startup.test.mjs test/managed-upgrade.test.mjs test/windows-lifetime-identity.test.mjs test/windows-legacy-process.test.mjs test/legacy-upgrade.test.mjs test/legacy-access.test.mjs test/legacy-task-security.test.mjs test/windows-task-channel.test.mjs test/task-controller.test.mjs test/account-task-adapter.test.mjs test/account-upgrade.test.mjs test/account-rollback-launch.test.mjs test/account-recovery.test.mjs test/runtime-context.test.mjs test/ci-contracts.test.mjs",
+    "test": "node --test --test-concurrency=4 test/bridge.test.mjs test/bridge-controls.test.mjs test/kill-tree.test.mjs test/keepalive.test.mjs test/auth-token.test.mjs test/cold-start.test.mjs test/crash-report.test.mjs test/child-write-race.test.mjs test/resume.test.mjs test/config-checks.test.mjs test/config-reload.test.mjs test/health.test.mjs test/cli.test.mjs test/logs.test.mjs test/prewarm.test.mjs test/pooling-batch-scheduler.test.mjs test/pooling-batch-api.test.mjs test/pooling-batch-store.test.mjs test/pooling-batches.test.mjs test/pooling-stage-publication.test.mjs test/pooling-batch-startup.test.mjs test/pooling-postcommit-recovery.test.mjs test/pooling-config.test.mjs test/pooling-writer.test.mjs test/pooling-api.test.mjs test/pooling-deadlines.test.mjs test/pooling-queue-budget.test.mjs test/windows-security-helper.test.mjs test/windows-batch-security.test.mjs test/tui.test.mjs test/warm-pool.test.mjs test/server-metrics.test.mjs test/admission.test.mjs test/shared-sessions.test.mjs test/shared-http.test.mjs test/cross-host.test.mjs test/request-origin.test.mjs test/suite-integrity.test.mjs test/consumer-package.test.mjs test/notices.test.mjs test/notices-runtime.test.mjs test/npm-publication.test.mjs test/npm-publication-proof.test.mjs test/update-check.test.mjs test/service-lifecycle.test.mjs test/service-supervisor.test.mjs test/npm-publication-gates.test.mjs test/npm-publication-matrix.test.mjs test/publication-scanners-advisories.test.mjs test/publication-scanners.test.mjs test/service-replacement.test.mjs test/consumer-environment.test.mjs test/npm-publication-external.test.mjs test/npm-publication-peer.test.mjs test/publication-scanners-diagnostics.test.mjs test/publication-scanners-publication.test.mjs test/publication-scanners-paths.test.mjs test/npm-publication-local-enforcement.test.mjs test/publication-scanners-admission.test.mjs test/windows-process-lifetime.test.mjs test/windows-lifetime-startup.test.mjs test/managed-upgrade.test.mjs test/windows-lifetime-identity.test.mjs test/windows-legacy-process.test.mjs test/legacy-upgrade.test.mjs test/legacy-access.test.mjs test/legacy-task-security.test.mjs test/windows-task-channel.test.mjs test/task-controller.test.mjs test/account-task-adapter.test.mjs test/account-upgrade.test.mjs test/account-rollback-launch.test.mjs test/account-recovery.test.mjs test/runtime-context.test.mjs test/ci-contracts.test.mjs",
     "notices:check": "node tools/third-party-notices/check.mjs",
     "publication:source-gates": "node tools/npm-publication/source-gates.mjs",
     "publication:artifact-gates": "node tools/npm-publication/artifact-gates.mjs",

package/ui/dist/THIRD_PARTY_NOTICES.txt

@@ -219,7 +219,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 ==============================================================================
-vite@7.3.6
+vite@7.3.7
 Declared license: MIT
 
 --- LICENSE.md: # Vite core license ---

package/ui/dist/third-party-manifest.json

@@ -32,12 +32,12 @@
     },
     {
       "name": "vite",
-      "version": "7.3.6"
+      "version": "7.3.7"
     }
   ],
-  "producerLockSha256": "c2162e5015b4d015058c6ba539d42dfd9afdc8c8c2ecd23a44acbebfbb6f0088",
+  "producerLockSha256": "f9176a69ff877b2596b7b00190ba5a9f88ae99f579aa06f947a6ba78f17ac6fa",
   "projectLicenseSha256": "590ad9c29ee5580f83b9c05e403ca259d89e8366d1ed4c7207aa5e0a07afbf79",
-  "noticesSha256": "2843c26d27582cd029efa8d82408817ac82af0d5b9c4e7cd7962103b70244dfe",
+  "noticesSha256": "f114a23088813c16f46ac1b7d2749938b1c846afaa0a2a03349fddb9d51cdf90",
   "chunks": [
     {
       "file": "assets/index-CcwMo2sI.js",
@@ -116,7 +116,7 @@
         },
         {
           "id": "commonjsHelpers.js",
-          "package": "vite@7.3.6",
+          "package": "vite@7.3.7",
           "generated": true,
           "renderedLength": 140
         },
@@ -282,7 +282,7 @@
         },
         {
           "id": "vite/modulepreload-polyfill.js",
-          "package": "vite@7.3.6",
+          "package": "vite@7.3.7",
           "generated": true,
           "renderedLength": 1168
         }
@@ -533,7 +533,7 @@
     },
     {
       "name": "vite",
-      "version": "7.3.6",
+      "version": "7.3.7",
       "license": "MIT",
       "lockPath": "node_modules/vite",
       "licenses": [