@happyvertical/smrt-app-cli 0.51.37 → 0.51.38

package/README.md

@@ -156,10 +156,15 @@ surface is typically mounted with
 The binary rejects non-loopback plaintext HTTP origins before resolving or
 sending stored credentials; use HTTPS for remote application servers.
 
-The bridge canonicalizes its `tools/list` catalog by tool name and emits a
-one-day `private` cache lifetime. The catalog is tied to the configured local
-app credentials, so it never opts into shared caching even when an upstream
-app serves public tools.
+The default native MCP bridge preserves upstream tool catalog order and forwards
+`tools/list`, `tools/call`, `resources/list`, and `resources/read` through SDK v2.
+Tool catalogs and resource responses use a zero TTL with `private` cache scope
+so subsequent requests recheck upstream authorization. The bridge uses the
+configured local app credentials and never opts into shared caching.
+
+Only the explicit `transport: 'legacy-rest'` compatibility mode sorts its
+`tools/list` catalog by tool name and emits a one-day `private` cache lifetime.
+That mode uses the REST-shaped tools endpoints and does not forward resources.
 
 ## Configuration and authentication
 
@@ -202,3 +207,10 @@ pnpm --filter @happyvertical/smrt-app-cli build
 
 Maintainer patterns and authentication invariants are documented in
 [`AGENTS.md`](./AGENTS.md).
+
+For remote deployments with a known OAuth issuer, set
+`CliConfigContext.expectedCredentialIssuer` to its exact identifier. Stored
+credentials must match both server and issuer; environment credentials also
+require `${PREFIX}_TOKEN_ISSUER`. This does not replace the terminal device
+flow with browser OAuth. See the
+[remote authorization contract](../../docs/content/architecture/remote-mcp-authorization.md).

package/dist/__tests__/fixtures/mcp-resource-bridge.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-resource-bridge.d.ts.map

package/dist/__tests__/fixtures/mcp-resource-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-resource-bridge.d.ts","sourceRoot":"","sources":["../../../src/__tests__/fixtures/mcp-resource-bridge.ts"],"names":[],"mappings":""}

package/dist/bin/smrt-app.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as runAppCliExecutable } from "../src-DRNQCkh6.js";
+import { i as runAppCliExecutable } from "../src-CMc9Yx_3.js";
 //#region src/bin/smrt-app.ts
 /**
 * `smrt-app` — configuration-driven executable for a published SMRT app CLI.

package/dist/bin/smrt-mcp-bridge.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { m as runMcpStdioBridge } from "../config-CuTFiGxX.js";
+import { m as runMcpStdioBridge } from "../config-Ds7ofwtL.js";
 //#region src/bin/smrt-mcp-bridge.ts
 /**
 * `smrt-mcp-bridge` — generic stdio MCP bridge.
@@ -35,14 +35,19 @@ if (!envPrefix) {
 	console.error("smrt-mcp-bridge: --env-prefix=<PREFIX> (or SMRT_MCP_ENV_PREFIX) is required.");
 	process.exit(2);
 }
+var appSlug = readArg("app-slug") ?? process.env.SMRT_MCP_APP_SLUG;
+var defaultServerUrl = readArg("default-server-url") ?? process.env.SMRT_MCP_DEFAULT_SERVER_URL;
+var serverName = readArg("name") ?? process.env.SMRT_MCP_SERVER_NAME ?? "smrt-app-mcp";
+var serverVersion = readArg("version") ?? process.env.SMRT_MCP_SERVER_VERSION ?? "0.0.0";
 await runMcpStdioBridge({
+	transport: process.argv.includes("--legacy-rest") ? "legacy-rest" : "mcp",
 	envPrefix,
-	appSlug: readArg("app-slug") ?? process.env.SMRT_MCP_APP_SLUG,
-	defaultServerUrl: readArg("default-server-url") ?? process.env.SMRT_MCP_DEFAULT_SERVER_URL,
+	appSlug,
+	defaultServerUrl,
 	requireSecureServerUrl: true,
 	serverInfo: {
-		name: readArg("name") ?? process.env.SMRT_MCP_SERVER_NAME ?? "smrt-app-mcp",
-		version: readArg("version") ?? process.env.SMRT_MCP_SERVER_VERSION ?? "0.0.0"
+		name: serverName,
+		version: serverVersion
 	}
 });
 //#endregion

package/dist/bridge-C80xQmmW.js

@@ -0,0 +1,2 @@
+import { m as runMcpStdioBridge } from "./config-Ds7ofwtL.js";
+export { runMcpStdioBridge };

package/dist/bridge.d.ts

@@ -1,6 +1,6 @@
 /**
  * Stdio MCP bridge — pipes a remote SMRT app's HTTP MCP surface
- * (`/api/mcp/tools` + `/api/mcp/call`) to a local stdio MCP server so that
+ * (`/api/mcp`) to a local stdio MCP server so that
  * editors and AI clients can connect to it.
  *
  * Apps wire this up by providing their own bin script:
@@ -38,6 +38,10 @@ export interface McpStdioBridgeOptions extends CliConfigContext {
     };
     /** Override the tools endpoint path. Defaults to `/api/mcp/tools`. */
     toolsPath?: string;
+    /** Modern SDK-v2 HTTP by default. Legacy REST requires explicit opt-in. */
+    transport?: 'mcp' | 'legacy-rest';
+    /** Same-server modern endpoint. Defaults to /api/mcp. */
+    mcpPath?: string;
     /** Override the call endpoint path. Defaults to `/api/mcp/call`. */
     callPath?: string;
     /**

package/dist/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAEL,KAAK,cAAc,EAGnB,aAAa,EAEb,MAAM,EACP,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAYtF;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,uDAAuD;IACvD,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAmDA;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC,GACzC,cAAc,CAiChB;AAuCD,2EAA2E;AAC3E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,oBAAoB,GAC7B,aAAa,CAOf;AAiCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAEf"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,EAEL,KAAK,cAAc,EAGnB,aAAa,EAEb,MAAM,EACP,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAIrB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAYtF;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,uDAAuD;IACvD,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAoDA;AAuFD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC,GACzC,cAAc,CAiChB;AAuCD,2EAA2E;AAC3E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,oBAAoB,GAC7B,aAAa,CAOf;AAiCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/{config-CuTFiGxX.js → config-Ds7ofwtL.js}

@@ -3,12 +3,13 @@ import { chmod, mkdir, readFile, rename, unlink, writeFile } from "node:fs/promi
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { SMRT_MCP_RESULT_METADATA_KEY } from "@happyvertical/smrt-users/app-contract";
+import { Client, StreamableHTTPClientTransport } from "@modelcontextprotocol/client";
 import { ProtocolError, ProtocolErrorCode, Server } from "@modelcontextprotocol/server";
 import { StdioServerTransport, serveStdio } from "@modelcontextprotocol/server/stdio";
 //#region src/bridge.ts
 /**
 * Stdio MCP bridge — pipes a remote SMRT app's HTTP MCP surface
-* (`/api/mcp/tools` + `/api/mcp/call`) to a local stdio MCP server so that
+* (`/api/mcp`) to a local stdio MCP server so that
 * editors and AI clients can connect to it.
 *
 * Apps wire this up by providing their own bin script:
@@ -40,6 +41,7 @@ function compareToolNames(left, right) {
 * point in `bin/` scripts; this lower-level form is exposed for tests.
 */
 function createMcpStdioBridge(options) {
+	if (options.transport !== "legacy-rest") return createModernBridge(options);
 	const toolsPath = options.toolsPath ?? "/api/mcp/tools";
 	const callPath = options.callPath ?? "/api/mcp/call";
 	const server = new Server(options.serverInfo, {
@@ -71,6 +73,67 @@ function createMcpStdioBridge(options) {
 		connect: () => server.connect(new StdioServerTransport())
 	};
 }
+/** Native SDK-v2 forwarding, with fresh credential resolution for each request. */
+function createModernBridge(options) {
+	const path = options.mcpPath ?? "/api/mcp";
+	if (!path.startsWith("/") || path.startsWith("//") || path.includes("\\") || path.includes("?") || path.includes("#")) throw new TypeError("mcpPath must be a same-server absolute path.");
+	const server = new Server(options.serverInfo, {
+		capabilities: {
+			tools: {},
+			resources: {}
+		},
+		cacheHints: { "tools/list": {
+			ttlMs: 0,
+			cacheScope: "private"
+		} }
+	});
+	async function forward(operation) {
+		const config = await loadCliConfig(options);
+		const serverUrl = await getServerUrl(options, config);
+		const target = new URL(`${serverUrl}${path}`);
+		const token = await getStoredToken(options, config, serverUrl);
+		const client = new Client(options.serverInfo, { versionNegotiation: { mode: { pin: "2026-07-28" } } });
+		const transport = new StreamableHTTPClientTransport(target, { fetch: async (input, init) => {
+			if (new URL(input instanceof Request ? input.url : String(input)).href !== target.href) throw new Error("MCP upstream target changed.");
+			const headers = new Headers(init?.headers);
+			headers.delete("authorization");
+			if (token) headers.set("authorization", `Bearer ${token}`);
+			return (options.fetch ?? fetch)(input, {
+				...init,
+				headers,
+				redirect: "error"
+			});
+		} });
+		try {
+			await client.connect(transport);
+			return await operation(client);
+		} catch {
+			throw new ProtocolError(ProtocolErrorCode.InternalError, "MCP upstream request failed.");
+		} finally {
+			await client.close().catch(() => void 0);
+		}
+	}
+	server.setRequestHandler("tools/list", (request) => forward(async (client) => ({
+		...await client.listTools(request.params),
+		ttlMs: 0,
+		cacheScope: "private"
+	})));
+	server.setRequestHandler("tools/call", (request) => forward((client) => client.callTool(request.params)));
+	server.setRequestHandler("resources/list", (request) => forward(async (client) => ({
+		...await client.listResources(request.params),
+		ttlMs: 0,
+		cacheScope: "private"
+	})));
+	server.setRequestHandler("resources/read", (request) => forward(async (client) => ({
+		...await client.readResource(request.params),
+		ttlMs: 0,
+		cacheScope: "private"
+	})));
+	return {
+		server,
+		connect: () => server.connect(new StdioServerTransport())
+	};
+}
 /**
 * Preserve the HTTP result/error envelope in protocol-permitted MCP metadata.
 * This deliberately does not create `structuredContent`; #2149 owns declared
@@ -230,9 +293,13 @@ async function getStoredToken(context, config, serverUrl) {
 	const targetServer = (serverUrl ?? await getServerUrl(context, resolved)).replace(/\/+$/u, "");
 	const environmentToken = process.env[`${context.envPrefix}_TOKEN`];
 	const environmentServer = process.env[`${context.envPrefix}_SERVER_URL`]?.replace(/\/+$/u, "");
-	if (environmentToken) return environmentServer === targetServer ? environmentToken : void 0;
+	if (environmentToken) {
+		if (context.expectedCredentialIssuer !== void 0 && process.env[`${context.envPrefix}_TOKEN_ISSUER`] !== context.expectedCredentialIssuer) return void 0;
+		return environmentServer === targetServer ? environmentToken : void 0;
+	}
 	const configuredServer = resolved.serverUrl?.replace(/\/+$/u, "");
 	if (!configuredServer || configuredServer !== targetServer) return void 0;
+	if (context.expectedCredentialIssuer !== void 0 && resolved.credentialIssuer !== context.expectedCredentialIssuer) return void 0;
 	if (resolved.credentialIssuer) return resolved.tokensByIssuer?.[resolved.credentialIssuer];
 	return resolved.token;
 }

package/dist/config.d.ts

@@ -45,6 +45,10 @@ export interface CliConfigContext {
      * permitting loopback HTTP for local development.
      */
     requireSecureServerUrl?: boolean;
+    /** Exact expected issuer from trusted deployment configuration/discovery.
+     * When set, legacy and environment credentials without an issuer are denied.
+     */
+    expectedCredentialIssuer?: string;
 }
 /** Enforce the executable-safe server URL policy without echoing URL values. */
 export declare function assertSecureServerUrl(value: string): void;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EAEpB,MAAM,wCAAwC,CAAC;AAGhD,yDAAyD;AACzD,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAID,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBzD;AAeD,6DAA6D;AAC7D,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAgBpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAChC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuB7B;AAED,8DAA8D;AAC9D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,uEAAuE;AACvE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,SAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;CAC1B;AAID,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;AAE9E,0EAA0E;AAC1E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB;CAM3D;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAmG/B;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAqKD,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EAEpB,MAAM,wCAAwC,CAAC;AAGhD,yDAAyD;AACzD,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAID,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBzD;AAeD,6DAA6D;AAC7D,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAgBpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAChC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,8DAA8D;AAC9D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,uEAAuE;AACvE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,SAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;CAC1B;AAID,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;AAE9E,0EAA0E;AAC1E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB;CAM3D;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAmG/B;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAqKD,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,3 +1,3 @@
-import { a as getStoredToken, c as requestJson, d as saveCliConfig, f as createMcpStdioBridge, i as getServerUrl, l as requestJsonResult, m as runMcpStdioBridge, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, s as redactTransportValue, t as AppCliRequestError, u as saveAuth } from "./config-CuTFiGxX.js";
-import { a as buildFlagParser, c as createMcpClientIdMetadataDocument, d as buildUrl, f as invokeCommand, h as findResourceBySlug, i as runAppCliExecutable, l as registerMcpClient, m as findCommand, n as createAppCli, o as classifySchema, p as fetchResourceList, r as parseAppCliExecutableConfig, s as renderResponse, t as SMRT_MCP_RESULT_METADATA_KEY, u as resolveMcpClientRegistration } from "./src-DRNQCkh6.js";
+import { a as getStoredToken, c as requestJson, d as saveCliConfig, f as createMcpStdioBridge, i as getServerUrl, l as requestJsonResult, m as runMcpStdioBridge, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, s as redactTransportValue, t as AppCliRequestError, u as saveAuth } from "./config-Ds7ofwtL.js";
+import { a as buildFlagParser, c as createMcpClientIdMetadataDocument, d as buildUrl, f as invokeCommand, h as findResourceBySlug, i as runAppCliExecutable, l as registerMcpClient, m as findCommand, n as createAppCli, o as classifySchema, p as fetchResourceList, r as parseAppCliExecutableConfig, s as renderResponse, t as SMRT_MCP_RESULT_METADATA_KEY, u as resolveMcpClientRegistration } from "./src-CMc9Yx_3.js";
 export { AppCliRequestError, SMRT_MCP_RESULT_METADATA_KEY, assertSecureServerUrl, buildFlagParser, buildUrl, classifySchema, clearStoredToken, createAppCli, createMcpClientIdMetadataDocument, createMcpStdioBridge, fetchResourceList, findCommand, findResourceBySlug, getServerUrl, getStoredToken, invokeCommand, loadCliConfig, parseAppCliExecutableConfig, redactTransportValue, registerMcpClient, renderResponse, requestJson, requestJsonResult, resolveMcpClientRegistration, runAppCliExecutable, runMcpStdioBridge, saveAuth, saveCliConfig };

package/dist/{src-DRNQCkh6.js → src-CMc9Yx_3.js}

@@ -1,4 +1,4 @@
-import { a as getStoredToken, c as requestJson, i as getServerUrl, l as requestJsonResult, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, u as saveAuth } from "./config-CuTFiGxX.js";
+import { a as getStoredToken, c as requestJson, i as getServerUrl, l as requestJsonResult, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, u as saveAuth } from "./config-Ds7ofwtL.js";
 import { SMRT_MCP_RESULT_METADATA_KEY as SMRT_MCP_RESULT_METADATA_KEY$1, validateDiscoveryConformanceArtifact } from "@happyvertical/smrt-users/app-contract";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/discovery.ts
@@ -983,7 +983,7 @@ function createAppCli(options) {
 	return {
 		run: (argv) => runCli(context, options, extraByName, argv),
 		startMcpBridge: async (serverInfo) => {
-			const { runMcpStdioBridge } = await import("./bridge-Crwjtcyt.js");
+			const { runMcpStdioBridge } = await import("./bridge-C80xQmmW.js");
 			await runMcpStdioBridge({
 				...context,
 				serverInfo: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-app-cli",
-  "version": "0.51.37",
+  "version": "0.51.38",
   "description": "Reusable CLI factory for SMRT apps — branded `<name> <resource> <command>` CLI + stdio MCP bridge with decorator-driven resource discovery",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,12 +21,12 @@
     "AGENTS.md"
   ],
   "dependencies": {
-    "@happyvertical/smrt-users": "0.51.37",
+    "@happyvertical/smrt-users": "0.51.38",
+    "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0"
   },
   "devDependencies": {
-    "@happyvertical/smrt-core": "0.51.37",
-    "@modelcontextprotocol/client": "2.0.0",
+    "@happyvertical/smrt-core": "0.51.38",
     "@types/node": "24.13.6",
     "typescript": "6.0.3",
     "vite": "8.1.4",

package/dist/bridge-Crwjtcyt.js

@@ -1,2 +0,0 @@
-import { m as runMcpStdioBridge } from "./config-CuTFiGxX.js";
-export { runMcpStdioBridge };