@happyvertical/smrt-app-cli 0.43.6 → 0.43.8

package/README.md

@@ -17,6 +17,45 @@ pnpm add @happyvertical/smrt-app-cli
 
 Node.js 24.18 or newer is required.
 
+The published package also exposes a configuration-driven `smrt-app` binary.
+It lets policy runners and app operators use the canonical CLI outside a
+consumer repository without maintaining a branded wrapper:
+
+```bash
+SMRT_APP_NAME=work \
+SMRT_APP_ENV_PREFIX=WORK \
+SMRT_APP_CONFIG_DIR=happyvertical-work \
+SMRT_APP_DEFAULT_SERVER_URL=https://work.example \
+pnpm dlx --package @happyvertical/smrt-app-cli@X.Y.Z \
+  smrt-app -- auth status
+```
+
+Pin the exact published package version in automation. The four application
+settings are required and are non-secret; command arguments after `--` are
+forwarded unchanged to `createAppCli`. The same values may be passed as
+`--name`, `--env-prefix`, `--config-dir`, and `--default-server-url` before the
+delimiter. Invalid or incomplete configuration fails before the CLI performs
+network or credential access. The executable also applies the HTTPS/loopback
+policy to the effective server URL selected from app-specific environment or
+persisted configuration, and to command-level server overrides.
+
+To run the same CLI's stdio MCP bridge, configure its explicit identity and
+select bridge mode:
+
+```bash
+SMRT_APP_NAME=work \
+SMRT_APP_ENV_PREFIX=WORK \
+SMRT_APP_CONFIG_DIR=happyvertical-work \
+SMRT_APP_DEFAULT_SERVER_URL=https://work.example \
+SMRT_APP_MCP_SERVER_NAME=work-mcp \
+SMRT_APP_MCP_SERVER_VERSION=1.0.0 \
+smrt-app --stdio-mcp
+```
+
+`SMRT_APP_*` is reserved for non-secret executable configuration. Runtime
+credentials continue to use the app-specific environment/config resolution
+implemented by `createAppCli`; never pass bearer tokens as executable options.
+
 ## Quick start
 
 ```ts
@@ -114,6 +153,8 @@ await cli.startMcpBridge({ name: 'acme-mcp', version: '1.0.0' });
 The package also ships the generic `smrt-mcp-bridge` binary. The remote app
 surface is typically mounted with
 [`@happyvertical/smrt-app-mcp`](../smrt-app-mcp/README.md).
+The binary rejects non-loopback plaintext HTTP origins before resolving or
+sending stored credentials; use HTTPS for remote application servers.
 
 The bridge canonicalizes its `tools/list` catalog by tool name and emits a
 one-day `private` cache lifetime. The catalog is tied to the configured local

package/dist/bin/smrt-app.d.ts

@@ -0,0 +1,8 @@
+/**
+ * `smrt-app` — configuration-driven executable for a published SMRT app CLI.
+ *
+ * The wrapper accepts non-secret identity before `--`; everything after `--`
+ * is forwarded unchanged to the canonical `createAppCli` command dispatcher.
+ */
+export {};
+//# sourceMappingURL=smrt-app.d.ts.map

package/dist/bin/smrt-app.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import { i as runAppCliExecutable } from "../src-DCo67mp8.js";
+//#region src/bin/smrt-app.ts
+/**
+* `smrt-app` — configuration-driven executable for a published SMRT app CLI.
+*
+* The wrapper accepts non-secret identity before `--`; everything after `--`
+* is forwarded unchanged to the canonical `createAppCli` command dispatcher.
+*/
+try {
+	await runAppCliExecutable();
+} catch (error) {
+	const message = error instanceof Error ? error.message : "Unknown error.";
+	process.stderr.write(`smrt-app: ${message}\n`);
+	process.exitCode = 2;
+}
+//#endregion
+export {};

package/dist/bin/smrt-mcp-bridge.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { p as runMcpStdioBridge } from "../config-B6arU8x7.js";
+import { m as runMcpStdioBridge } from "../config-CuTFiGxX.js";
 //#region src/bin/smrt-mcp-bridge.ts
 /**
 * `smrt-mcp-bridge` — generic stdio MCP bridge.
@@ -39,6 +39,7 @@ await runMcpStdioBridge({
 	envPrefix,
 	appSlug: readArg("app-slug") ?? process.env.SMRT_MCP_APP_SLUG,
 	defaultServerUrl: readArg("default-server-url") ?? process.env.SMRT_MCP_DEFAULT_SERVER_URL,
+	requireSecureServerUrl: true,
 	serverInfo: {
 		name: readArg("name") ?? process.env.SMRT_MCP_SERVER_NAME ?? "smrt-app-mcp",
 		version: readArg("version") ?? process.env.SMRT_MCP_SERVER_VERSION ?? "0.0.0"

package/dist/bridge-Crwjtcyt.js

@@ -0,0 +1,2 @@
+import { m as runMcpStdioBridge } from "./config-CuTFiGxX.js";
+export { runMcpStdioBridge };

package/dist/{config-B6arU8x7.js → config-CuTFiGxX.js}

@@ -159,6 +159,27 @@ async function runMcpStdioBridge(options) {
 * @packageDocumentation
 */
 var DEFAULT_LOCAL_SERVER = "http://localhost:5173";
+/** Enforce the executable-safe server URL policy without echoing URL values. */
+function assertSecureServerUrl(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new Error("Invalid server URL configuration.");
+	}
+	if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new Error("Invalid server URL configuration.");
+	const localHosts = /* @__PURE__ */ new Set([
+		"localhost",
+		"127.0.0.1",
+		"[::1]"
+	]);
+	if (url.protocol === "http:" && !localHosts.has(url.hostname)) throw new Error("Invalid server URL configuration.");
+}
+function normalizeServerUrl(context, value) {
+	const normalized = value.replace(/\/+$/u, "");
+	if (context.requireSecureServerUrl) assertSecureServerUrl(normalized);
+	return normalized;
+}
 function configFilePath(context) {
 	const override = process.env[`${context.envPrefix}_CLI_CONFIG`];
 	if (override) return override;
@@ -201,7 +222,7 @@ async function saveCliConfig(context, config) {
 /** Resolve the server URL: env var → config file → `defaultServerUrl`. */
 async function getServerUrl(context, config) {
 	const resolved = config ?? await loadCliConfig(context);
-	return (process.env[`${context.envPrefix}_SERVER_URL`] ?? resolved.serverUrl ?? context.defaultServerUrl ?? DEFAULT_LOCAL_SERVER).replace(/\/+$/u, "");
+	return normalizeServerUrl(context, process.env[`${context.envPrefix}_SERVER_URL`] ?? resolved.serverUrl ?? context.defaultServerUrl ?? DEFAULT_LOCAL_SERVER);
 }
 /** Resolve a bearer token only when it is bound to the exact target server. */
 async function getStoredToken(context, config, serverUrl) {
@@ -271,7 +292,7 @@ async function requestJson(context, path, init = {}, options = {}) {
 */
 async function requestJsonResult(context, path, init = {}, options = {}) {
 	const config = options.loadedConfig ?? await loadCliConfig(context);
-	const serverUrl = (options.serverUrl ?? await getServerUrl(context, config)).replace(/\/+$/u, "");
+	const serverUrl = normalizeServerUrl(context, options.serverUrl ?? await getServerUrl(context, config));
 	const token = await getStoredToken(context, config, serverUrl);
 	const headers = new Headers(init.headers);
 	if (options.requireAuth && options.auth !== false && !token) return failure(401, {
@@ -432,4 +453,4 @@ async function readBodyWithCap(response, maxBytes) {
 	return new TextDecoder().decode(Buffer.concat(chunks.map((c) => Buffer.from(c))));
 }
 //#endregion
-export { loadCliConfig as a, requestJsonResult as c, createMcpStdioBridge as d, formatMcpCallResult as f, getStoredToken as i, saveAuth as l, toMcpTransportError as m, clearStoredToken as n, redactTransportValue as o, runMcpStdioBridge as p, getServerUrl as r, requestJson as s, AppCliRequestError as t, saveCliConfig as u };
+export { getStoredToken as a, requestJson as c, saveCliConfig as d, createMcpStdioBridge as f, toMcpTransportError as h, getServerUrl as i, requestJsonResult as l, runMcpStdioBridge as m, assertSecureServerUrl as n, loadCliConfig as o, formatMcpCallResult as p, clearStoredToken as r, redactTransportValue as s, AppCliRequestError as t, saveAuth as u };

package/dist/index.d.ts

@@ -43,6 +43,16 @@ export declare interface AppCliContext {
     stderr: NodeJS.WriteStream;
 }
 
+export declare interface AppCliExecutableConfig {
+    cliOptions: Pick<CreateAppCliOptions, 'name' | 'envPrefix' | 'configDir' | 'defaultServerUrl' | 'requireSecureServerUrl'>;
+    argv: string[];
+    mcp?: {
+        name: string;
+        version: string;
+    };
+    stdioMcp: boolean;
+}
+
 /** Error compatibility wrapper returned by the legacy throwing helper. */
 export declare class AppCliRequestError extends Error {
     readonly status: number;
@@ -79,6 +89,9 @@ declare interface AppResultMetadata {
     expectedVersion?: DeclaredActionField;
 }
 
+/** Enforce the executable-safe server URL policy without echoing URL values. */
+export declare function assertSecureServerUrl(value: string): void;
+
 export declare function buildFlagParser(schema: Record<string, unknown> | undefined, options?: ParserOptions): BuildParserResult;
 
 export declare interface BuildParserResult {
@@ -134,6 +147,11 @@ export declare interface CliConfigContext {
     appSlug?: string;
     /** Fallback server URL if neither env nor config sets one. */
     defaultServerUrl?: string;
+    /**
+     * Require HTTPS for every resolved or request-level server URL, while still
+     * permitting loopback HTTP for local development.
+     */
+    requireSecureServerUrl?: boolean;
 }
 
 export declare type CliResource = CliResource_2;
@@ -194,6 +212,8 @@ export declare interface CreateAppCliOptions {
     configDir?: string;
     /** Baked-in default server URL when neither env nor config sets one. */
     defaultServerUrl?: string;
+    /** Enforce HTTPS or loopback HTTP for every effective server URL. */
+    requireSecureServerUrl?: boolean;
     /**
      * App-specific commands. Dispatched BEFORE built-ins (`auth`,
      * `resources`, `mcp`) and before the resource-slug dispatcher, so an
@@ -393,6 +413,9 @@ declare interface OutputOptions {
     stdoutIsTty?: boolean;
 }
 
+/** Parse and validate the generic executable's non-secret configuration. */
+export declare function parseAppCliExecutableConfig(argv: string[], env?: NodeJS.ProcessEnv): AppCliExecutableConfig;
+
 export declare interface ParsedArgs {
     /** Body to send (JSON serialised, for POST/PUT/PATCH). May be empty. */
     body: Record<string, unknown>;
@@ -511,6 +534,15 @@ declare interface ResourceListResponseBody {
     artifact?: DiscoveryConformanceArtifact;
 }
 
+/** Create the canonical app CLI and execute its forwarded command or bridge. */
+export declare function runAppCliExecutable(options?: RunAppCliExecutableOptions): Promise<void>;
+
+export declare interface RunAppCliExecutableOptions {
+    argv?: string[];
+    env?: NodeJS.ProcessEnv;
+    createCli?: (options: CreateAppCliOptions) => AppCli;
+}
+
 /**
  * One-call entry point — start the factory-owned stdio bridge. The returned
  * promise resolves once the stdio listener is installed.