@happyvertical/smrt-app-cli 0.51.31 → 0.51.33

package/dist/__tests__/fixtures/mcp-stdio-bridge.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-stdio-bridge.d.ts.map

package/dist/__tests__/fixtures/mcp-stdio-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-stdio-bridge.d.ts","sourceRoot":"","sources":["../../../src/__tests__/fixtures/mcp-stdio-bridge.ts"],"names":[],"mappings":""}

package/dist/bin/smrt-app.d.ts

@@ -1 +1,8 @@
-export {}
+/**
+ * `smrt-app` — configuration-driven executable for a published SMRT app CLI.
+ *
+ * The wrapper accepts non-secret identity before `--`; everything after `--`
+ * is forwarded unchanged to the canonical `createAppCli` command dispatcher.
+ */
+export {};
+//# sourceMappingURL=smrt-app.d.ts.map

package/dist/bin/smrt-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smrt-app.d.ts","sourceRoot":"","sources":["../../src/bin/smrt-app.ts"],"names":[],"mappings":"AACA;;;;;GAKG"}

package/dist/bin/smrt-app.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as runAppCliExecutable } from "../src-DCo67mp8.js";
+import { i as runAppCliExecutable } from "../src-DRNQCkh6.js";
 //#region src/bin/smrt-app.ts
 /**
 * `smrt-app` — configuration-driven executable for a published SMRT app CLI.

package/dist/bin/smrt-mcp-bridge.d.ts

@@ -1 +1,24 @@
-export {}
+/**
+ * `smrt-mcp-bridge` — generic stdio MCP bridge.
+ *
+ * Usage:
+ *
+ * ```
+ * smrt-mcp-bridge --env-prefix=WILLGRIFFIN \
+ *   --name=willgriffin-mcp --version=0.1.0
+ * ```
+ *
+ * All options can also be passed as env vars:
+ *
+ *  - `SMRT_MCP_ENV_PREFIX` — env-prefix the bridge uses to look up the app's
+ *    server URL/token/config file.
+ *  - `SMRT_MCP_APP_SLUG` — directory name under `~/.config`.
+ *  - `SMRT_MCP_SERVER_NAME` / `SMRT_MCP_SERVER_VERSION` — local server identity.
+ *  - `SMRT_MCP_DEFAULT_SERVER_URL` — fallback server URL.
+ *
+ * Apps that want their own branded bin should call `runMcpStdioBridge`
+ * directly from `@happyvertical/smrt-app-cli` — this package's root export —
+ * instead of going through this generic entrypoint.
+ */
+export {};
+//# sourceMappingURL=smrt-mcp-bridge.d.ts.map

package/dist/bin/smrt-mcp-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smrt-mcp-bridge.d.ts","sourceRoot":"","sources":["../../src/bin/smrt-mcp-bridge.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/bridge.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Stdio MCP bridge — pipes a remote SMRT app's HTTP MCP surface
+ * (`/api/mcp/tools` + `/api/mcp/call`) to a local stdio MCP server so that
+ * editors and AI clients can connect to it.
+ *
+ * Apps wire this up by providing their own bin script:
+ *
+ * ```ts
+ * #!/usr/bin/env node
+ * import { runMcpStdioBridge } from '@happyvertical/smrt-app-cli';
+ * await runMcpStdioBridge({
+ *   envPrefix: 'WILLGRIFFIN',
+ *   serverInfo: { name: 'willgriffin-mcp', version: '0.1.0' },
+ * });
+ * ```
+ *
+ * The package also ships a `smrt-mcp-bridge` bin (see `bin/smrt-mcp-bridge`)
+ * that reads `--env-prefix=…` from argv for ad-hoc use without writing a
+ * package-specific entry point.
+ *
+ * @packageDocumentation
+ */
+import { type CallToolResult, ProtocolError, Server } from '@modelcontextprotocol/server';
+import { type AppCliResultMetadata, type CliConfigContext, type RequestJsonResult } from './config.js';
+/** Namespace shared with the published SMRT app-result contract. */
+export { SMRT_MCP_RESULT_METADATA_KEY } from '@happyvertical/smrt-users/app-contract';
+/**
+ * Configuration for the bridge.
+ *
+ * Combines the {@link CliConfigContext} (env var + config file resolution)
+ * with the local MCP server identity the bridge advertises to clients.
+ */
+export interface McpStdioBridgeOptions extends CliConfigContext {
+    /** MCP server identity advertised to local clients. */
+    serverInfo: {
+        name: string;
+        version: string;
+    };
+    /** Override the tools endpoint path. Defaults to `/api/mcp/tools`. */
+    toolsPath?: string;
+    /** Override the call endpoint path. Defaults to `/api/mcp/call`. */
+    callPath?: string;
+    /**
+     * Override fetch implementation (used by tests so we never hit the network).
+     */
+    fetch?: typeof fetch;
+}
+/**
+ * Wire up the stdio server. Use `runMcpStdioBridge` for a one-call entry
+ * point in `bin/` scripts; this lower-level form is exposed for tests.
+ */
+export declare function createMcpStdioBridge(options: McpStdioBridgeOptions): {
+    server: Server;
+    connect: () => Promise<void>;
+};
+/**
+ * Preserve the HTTP result/error envelope in protocol-permitted MCP metadata.
+ * This deliberately does not create `structuredContent`; #2149 owns declared
+ * output schema semantics for generated tools.
+ */
+export declare function formatMcpCallResult(outcome: RequestJsonResult<CallToolResult>): CallToolResult;
+/** Convert an HTTP transport failure into an MCP JSON-RPC error safely. */
+export declare function toMcpTransportError(metadata: AppCliResultMetadata): ProtocolError;
+/**
+ * One-call entry point — start the factory-owned stdio bridge. The returned
+ * promise resolves once the stdio listener is installed.
+ */
+export declare function runMcpStdioBridge(options: McpStdioBridgeOptions): Promise<void>;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAEL,KAAK,cAAc,EAGnB,aAAa,EAEb,MAAM,EACP,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAYtF;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,uDAAuD;IACvD,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAmDA;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC,GACzC,cAAc,CAiChB;AAuCD,2EAA2E;AAC3E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,oBAAoB,GAC7B,aAAa,CAOf;AAiCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `<name> auth login | status | logout` — terminal device-code flow against
+ * `/api/cli/auth/start` and `/api/cli/auth/token` (shipped by smrt-users).
+ *
+ * @packageDocumentation
+ */
+import { type CliConfigContext } from '../config.js';
+export interface AuthCommandsOptions {
+    context: CliConfigContext;
+    stdout?: NodeJS.WriteStream;
+    stderr?: NodeJS.WriteStream;
+    /** Skip auto-opening the browser; tests pass true. */
+    noOpenDefault?: boolean;
+    /** Override the polling sleep (tests pass 0). */
+    sleepMs?: (ms: number) => Promise<void>;
+}
+export declare function runAuthLogin(options: AuthCommandsOptions, args: string[]): Promise<void>;
+export declare function runAuthStatus(options: AuthCommandsOptions): Promise<void>;
+export declare function runAuthLogout(options: AuthCommandsOptions): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,KAAK,gBAAgB,EAOtB,MAAM,cAAc,CAAC;AAuBtB,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,IAAI,CAAC,CAyEf;AA6BD,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/commands/mcp.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `<name> mcp tools` / `<name> mcp call <tool> '<json>'` — thin HTTP proxy
+ * to `/api/mcp/tools` and `/api/mcp/call`. The stdio bridge lives in
+ * `bin/smrt-mcp-bridge` and `bridge.ts`; these are the equivalent
+ * one-shot HTTP commands for ad-hoc inspection.
+ *
+ * @packageDocumentation
+ */
+import type { CliConfigContext } from '../config.js';
+export interface McpCommandOptions {
+    context: CliConfigContext;
+    stdout?: NodeJS.WriteStream;
+    stderr?: NodeJS.WriteStream;
+    fetch?: typeof fetch;
+}
+export declare function runMcpCommand(options: McpCommandOptions, args: string[]): Promise<boolean>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/commands/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/commands/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,wBAAsB,aAAa,CACjC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,OAAO,CAAC,CA8ClB"}

package/dist/commands/resources.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `<name> resources [--json] [--debug]` — print the discovered resource
+ * list. Default mode is a compact human-readable summary; `--json` dumps
+ * the raw discovery payload; `--debug` adds the full warnings list.
+ *
+ * @packageDocumentation
+ */
+import type { CliConfigContext } from '../config.js';
+import type { ResourceListResponse } from '../discovery.js';
+export interface ResourcesCommandOptions {
+    context: CliConfigContext;
+    stdout?: NodeJS.WriteStream;
+    stderr?: NodeJS.WriteStream;
+    /** Tests: pre-supplied response, skips network. */
+    injectResponse?: ResourceListResponse;
+    /** Tests: custom fetch. */
+    fetch?: typeof fetch;
+}
+export declare function runResourcesCommand(options: ResourcesCommandOptions, args: string[]): Promise<void>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/commands/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../src/commands/resources.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAGzE,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC;IAC5B,mDAAmD;IACnD,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,IAAI,CAAC,CA+Cf"}

package/dist/config.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Shared CLI helpers for SMRT apps: a small config file format, env var
+ * resolution with a configurable prefix, and a minimal JSON HTTP client
+ * that knows how to bear the stored CLI token.
+ *
+ * The same helpers back the stdio bridge (`smrt-mcp-bridge`) and any
+ * app-specific `data`-style commands that talk to the app's HTTP API.
+ *
+ * @packageDocumentation
+ */
+import type { AppResultMetadata, DeclaredActionField } from '@happyvertical/smrt-users/app-contract';
+/** Shape stored on disk in the app's CLI config file. */
+export interface CliConfig {
+    /** Issuer selected for the currently configured server. */
+    credentialIssuer?: string;
+    serverUrl?: string;
+    /** Legacy single-token field. Read only when its stored server still matches. */
+    token?: string;
+    /** Bearer credentials keyed by their exact issuer identifier. */
+    tokensByIssuer?: Record<string, string>;
+}
+/**
+ * Configuration for the env-var/config-file resolution chain.
+ *
+ * Env vars derived from `envPrefix`:
+ *
+ *  - `${PREFIX}_SERVER_URL`
+ *  - `${PREFIX}_TOKEN`
+ *  - `${PREFIX}_CLI_CONFIG` (overrides config file path)
+ */
+export interface CliConfigContext {
+    /**
+     * Uppercase prefix for env vars and the app's namespaced config dir.
+     * Example: `WILLGRIFFIN` → reads `WILLGRIFFIN_SERVER_URL`, defaults the
+     * config file to `~/.config/willgriffin/config.json` unless `appSlug`
+     * overrides the directory name.
+     */
+    envPrefix: string;
+    /** Directory name under `~/.config`. Defaults to lowercased `envPrefix`. */
+    appSlug?: string;
+    /** Fallback server URL if neither env nor config sets one. */
+    defaultServerUrl?: string;
+    /**
+     * Require HTTPS for every resolved or request-level server URL, while still
+     * permitting loopback HTTP for local development.
+     */
+    requireSecureServerUrl?: boolean;
+}
+/** Enforce the executable-safe server URL policy without echoing URL values. */
+export declare function assertSecureServerUrl(value: string): void;
+/** Read the CLI config file. Missing file → empty config. */
+export declare function loadCliConfig(context: CliConfigContext): Promise<CliConfig>;
+/**
+ * Write the CLI config to disk with 0600 permissions (the token is a bearer
+ * credential — anyone who can read the file can impersonate the user).
+ */
+export declare function saveCliConfig(context: CliConfigContext, config: CliConfig): Promise<void>;
+/** Resolve the server URL: env var → config file → `defaultServerUrl`. */
+export declare function getServerUrl(context: CliConfigContext, config?: CliConfig): Promise<string>;
+/** Resolve a bearer token only when it is bound to the exact target server. */
+export declare function getStoredToken(context: CliConfigContext, config?: CliConfig, serverUrl?: string): Promise<string | undefined>;
+/** Remove the token from the config file (e.g. on logout). */
+export declare function clearStoredToken(context: CliConfigContext): Promise<void>;
+/** Persist a login with the bearer token keyed by its exact issuer. */
+export declare function saveAuth(context: CliConfigContext, serverUrl: string, token: string, issuer?: string): Promise<void>;
+/** Options for `requestJson`. */
+export interface RequestJsonOptions {
+    /**
+     * When false, skip sending the Authorization header even if a token is
+     * present. Defaults to true.
+     */
+    auth?: boolean;
+    /**
+     * When true, throw if no token is available and `auth` is not false.
+     * Defaults to false.
+     */
+    requireAuth?: boolean;
+    /** Override the server URL for this request. */
+    serverUrl?: string;
+    /** Override the fetch implementation (tests). */
+    fetch?: typeof fetch;
+    /**
+     * Cap on response body size in bytes. The CLI buffers the full body
+     * before JSON-parsing, so without this cap a misbehaving or malicious
+     * server could OOM the CLI process with a multi-GB payload (auth and
+     * discovery both use this code path). Defaults to 10MB — large enough
+     * for any sensible discovery response, small enough that overflow is
+     * a clear signal something's wrong. Pass `Infinity` to disable.
+     * (#1311 review A4.)
+     */
+    maxResponseBytes?: number;
+    /**
+     * Pre-loaded config to avoid re-reading from disk. Set by callers that
+     * already have it (e.g. `buildAppContext`); leave undefined for the
+     * default behavior of loading per-call. (#1311 review P2.)
+     */
+    loadedConfig?: CliConfig;
+}
+/** Structured metadata preserved for CLI JSON and MCP bridge consumers. */
+export type AppCliResultMetadata = AppResultMetadata;
+export type { DeclaredActionField };
+export interface RequestJsonSuccess<T> {
+    ok: true;
+    result: T;
+    metadata: AppCliResultMetadata;
+}
+export interface RequestJsonFailure {
+    ok: false;
+    status: number;
+    error: AppCliResultMetadata;
+}
+/** Generic result/error envelope for a JSON request. */
+export type RequestJsonResult<T> = RequestJsonSuccess<T> | RequestJsonFailure;
+/** Error compatibility wrapper returned by the legacy throwing helper. */
+export declare class AppCliRequestError extends Error {
+    readonly status: number;
+    readonly metadata: AppCliResultMetadata;
+    constructor(status: number, metadata: AppCliResultMetadata);
+}
+/**
+ * JSON request helper that injects the stored bearer token. Returns the
+ * parsed JSON body on success; throws an `Error` with the server's `error`
+ * field (or `HTTP <status>`) on failure.
+ */
+export declare function requestJson<T = unknown>(context: CliConfigContext, path: string, init?: RequestInit, options?: RequestJsonOptions): Promise<T>;
+/**
+ * Issue a JSON request without flattening a failure to an Error message.
+ *
+ * Metadata is deliberately copied only from conventional result/error fields
+ * and response headers. Every value crossing this boundary is redacted before
+ * a CLI or MCP client can observe it.
+ */
+export declare function requestJsonResult<T = unknown>(context: CliConfigContext, path: string, init?: RequestInit, options?: RequestJsonOptions): Promise<RequestJsonResult<T>>;
+/** Redact conventional credential fields before emitting transport metadata. */
+export declare function redactTransportValue(value: unknown): unknown;
+export { createMcpStdioBridge, type McpStdioBridgeOptions, runMcpStdioBridge, } from './bridge.js';
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EAEpB,MAAM,wCAAwC,CAAC;AAGhD,yDAAyD;AACzD,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAID,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBzD;AAeD,6DAA6D;AAC7D,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAgBpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAChC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuB7B;AAED,8DAA8D;AAC9D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,uEAAuE;AACvE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,SAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;CAC1B;AAID,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;AAE9E,0EAA0E;AAC1E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB;CAM3D;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAmG/B;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAqKD,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Fetches the resource list from `GET /api/_resources` and re-exports the
+ * wire types so consumers can build typed extensions on top of the discovery
+ * output.
+ *
+ * Types are imported type-only from `@happyvertical/smrt-users/sveltekit`
+ * — the single source of truth for the wire contract. The CLI does not
+ * depend on smrt-users at runtime (the peer dep is `optional` in the
+ * package.json) so importing types is free of bundle cost.
+ *
+ * Importing type-only means a new field added to `CommandDefinition` /
+ * `CliResource` on the handler side automatically propagates to the CLI's
+ * typecheck — no manual mirror-update required. (#1311 review D-1.)
+ *
+ * @packageDocumentation
+ */
+import type { CliResource as HandlerCliResource, CommandDefinition as HandlerCommandDefinition, CommandKind as HandlerCommandKind, CommandScope as HandlerCommandScope, ResourceListResponseBody } from '@happyvertical/smrt-users/sveltekit';
+import type { CliConfigContext } from './config.js';
+export type CommandKind = HandlerCommandKind;
+export type CommandScope = HandlerCommandScope;
+export type CommandDefinition = HandlerCommandDefinition;
+export type CliResource = HandlerCliResource;
+export type ResourceListResponse = ResourceListResponseBody;
+export interface FetchResourceListOptions {
+    /** Endpoint path on the server. Default `/api/_resources`. */
+    path?: string;
+    /** Custom fetch (tests). */
+    fetch?: typeof fetch;
+    /** When true, the request fails if no token is available. */
+    requireAuth?: boolean;
+    /**
+     * Pre-loaded config to avoid re-reading from disk. Set by
+     * `buildAppContext`, which has already loaded it. (#1311 review P2.)
+     */
+    loadedConfig?: import('./config.js').CliConfig;
+}
+/**
+ * Fetch the discovery payload.
+ *
+ * Translates a 401 into a friendlier error so the CLI can prompt the
+ * user to log in rather than dumping a raw HTTP error.
+ */
+export declare function fetchResourceList(context: CliConfigContext, options?: FetchResourceListOptions): Promise<ResourceListResponse>;
+/**
+ * Find a resource by slug in the discovery payload. Returns `undefined`
+ * if the slug isn't present.
+ */
+export declare function findResourceBySlug(response: ResourceListResponse, slug: string): CliResource | undefined;
+/**
+ * Find a command on a resource by its CLI-facing name. Returns
+ * `undefined` if not found.
+ */
+export declare function findCommand(resource: CliResource, commandName: string): CommandDefinition | undefined;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EACV,WAAW,IAAI,kBAAkB,EACjC,iBAAiB,IAAI,wBAAwB,EAC7C,WAAW,IAAI,kBAAkB,EACjC,YAAY,IAAI,mBAAmB,EACnC,wBAAwB,EACzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGpD,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAC7C,MAAM,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAC/C,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AACzD,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAC7C,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAI5D,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,aAAa,EAAE,SAAS,CAAC;CAChD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAwB/B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,oBAAoB,EAC9B,IAAI,EAAE,MAAM,GACX,WAAW,GAAG,SAAS,CAEzB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAE,MAAM,GAClB,iBAAiB,GAAG,SAAS,CAE/B"}

package/dist/executable.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Configuration-driven executable support for published SMRT app CLIs.
+ *
+ * This adapter deliberately owns no command schemas or transport behavior. It
+ * validates non-secret application identity, creates the canonical app CLI,
+ * and forwards the remaining argv unchanged.
+ *
+ * @packageDocumentation
+ */
+import { type AppCli, type CreateAppCliOptions } from './index.js';
+export interface AppCliExecutableConfig {
+    cliOptions: Pick<CreateAppCliOptions, 'name' | 'envPrefix' | 'configDir' | 'defaultServerUrl' | 'requireSecureServerUrl'>;
+    argv: string[];
+    mcp?: {
+        name: string;
+        version: string;
+    };
+    stdioMcp: boolean;
+}
+export interface RunAppCliExecutableOptions {
+    argv?: string[];
+    env?: NodeJS.ProcessEnv;
+    createCli?: (options: CreateAppCliOptions) => AppCli;
+}
+/** Parse and validate the generic executable's non-secret configuration. */
+export declare function parseAppCliExecutableConfig(argv: string[], env?: NodeJS.ProcessEnv): AppCliExecutableConfig;
+/** Create the canonical app CLI and execute its forwarded command or bridge. */
+export declare function runAppCliExecutable(options?: RunAppCliExecutableOptions): Promise<void>;
+//# sourceMappingURL=executable.d.ts.map

package/dist/executable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../src/executable.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,MAAM,EACX,KAAK,mBAAmB,EAEzB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,IAAI,CACd,mBAAmB,EACjB,MAAM,GACN,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,wBAAwB,CAC3B,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,CAAC;CACtD;AA2BD,4EAA4E;AAC5E,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,sBAAsB,CAqFxB;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CAWf"}