@happyvertical/smrt-app-cli 0.53.3 → 0.53.5

package/AGENTS.md

@@ -15,6 +15,13 @@ Application CLI support for SMRT-based apps.
 - Do not persist tokens, server URLs, or app slugs outside the configured local CLI config path.
 - Bind persisted bearer tokens to the exact issuer emitted by the device flow
   and to the server selected during login. Never reuse them after either changes.
+- The modern bridge targets `mcpPath` (default `/api/mcp`): `createAppCli`
+  option, `startMcpBridge({ mcpPath })`, `smrt-mcp-bridge --mcp-path` /
+  `SMRT_MCP_PATH`, `smrt-app --mcp-path` / `SMRT_APP_MCP_PATH`. Validate it
+  with `resolveMcpPath` (same-server absolute path only) before listening.
+  `smrt-mcp-bridge` parses argv with `parseMcpBridgeArgs`: empty, missing or
+  repeated value options and an explicit invalid (even empty) path are usage
+  errors (exit 2) — never silently the default.
 - Keep command output stream-injectable so tests can assert behavior without writing to the real terminal.
 
 ## Gotchas

package/README.md

@@ -150,6 +150,35 @@ stdio clients:
 await cli.startMcpBridge({ name: 'acme-mcp', version: '1.0.0' });
 ```
 
+The bridge forwards to `/api/mcp` by default. When the app mounts its MCP
+route elsewhere, set `mcpPath` on `createAppCli()` or pass it per call
+(`startMcpBridge({ mcpPath: '/mcp' })`). The binaries take `--mcp-path=/mcp`
+(`smrt-mcp-bridge`, or `SMRT_MCP_PATH`) and `--mcp-path` / `SMRT_APP_MCP_PATH`
+(`smrt-app`). The path must be same-server and absolute.
+
+For a local-profile s-m-r-t app, mint a credential with
+`smrt app token --scopes <scope>` in the app checkout. The token is printed
+once. Then give the bridge the loopback server and that token through the
+app's environment prefix. This Claude Desktop entry is an example:
+
+```json
+{
+  "mcpServers": {
+    "notes": {
+      "command": "npx",
+      "args": ["smrt-mcp-bridge", "--env-prefix=NOTES", "--mcp-path=/mcp"],
+      "env": {
+        "NOTES_SERVER_URL": "http://127.0.0.1:5173",
+        "NOTES_TOKEN": "smrt_mcp_…"
+      }
+    }
+  }
+}
+```
+
+The token is sent only when `<PREFIX>_SERVER_URL` matches the target server.
+Revoke a token with `smrt app token revoke <id>`.
+
 The package also ships the generic `smrt-mcp-bridge` binary. The remote app
 surface is typically mounted with
 [`@happyvertical/smrt-app-mcp`](../smrt-app-mcp/README.md).

package/dist/bin/smrt-app.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { i as runAppCliExecutable } from "../src-CMc9Yx_3.js";
+import { i as runAppCliExecutable } from "../src-DjwsOuHK.js";
 //#region src/bin/smrt-app.ts
 /**
 * `smrt-app` — configuration-driven executable for a published SMRT app CLI.

package/dist/bin/smrt-mcp-bridge.d.ts

@@ -15,6 +15,10 @@
  *  - `SMRT_MCP_APP_SLUG` — directory name under `~/.config`.
  *  - `SMRT_MCP_SERVER_NAME` / `SMRT_MCP_SERVER_VERSION` — local server identity.
  *  - `SMRT_MCP_DEFAULT_SERVER_URL` — fallback server URL.
+ *  - `SMRT_MCP_PATH` (`--mcp-path`) — the app's MCP endpoint path, e.g.
+ *    `/mcp`. Defaults to `/api/mcp`. An explicit value (even an empty
+ *    environment value) must be valid; a malformed, missing or repeated
+ *    value option is a usage error (exit 2) before the bridge listens.
  *
  * Apps that want their own branded bin should call `runMcpStdioBridge`
  * directly from `@happyvertical/smrt-app-cli` — this package's root export —

package/dist/bin/smrt-mcp-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"smrt-mcp-bridge.d.ts","sourceRoot":"","sources":["../../src/bin/smrt-mcp-bridge.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;GAqBG"}
+{"version":3,"file":"smrt-mcp-bridge.d.ts","sourceRoot":"","sources":["../../src/bin/smrt-mcp-bridge.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG"}

package/dist/bin/smrt-mcp-bridge.js

@@ -1,5 +1,76 @@
 #!/usr/bin/env node
-import { m as runMcpStdioBridge } from "../config-Ds7ofwtL.js";
+import { h as runMcpStdioBridge, u as resolveMcpPath } from "../config-B9dESami.js";
+//#region src/bridge-args.ts
+/**
+* Argument parsing for the generic `smrt-mcp-bridge` binary. Every value
+* option requires a non-empty value and may appear once; an explicitly
+* supplied endpoint path (argument or `SMRT_MCP_PATH`, even when empty) is
+* validated and never replaced by the default.
+*
+* @internal
+*/
+var VALUE_OPTIONS = [
+	"env-prefix",
+	"app-slug",
+	"default-server-url",
+	"name",
+	"version",
+	"mcp-path"
+];
+/** A usage error: print the message and exit non-zero without listening. */
+var McpBridgeUsageError = class extends Error {
+	name = "McpBridgeUsageError";
+};
+/** Parse bridge argv and the `SMRT_MCP_PATH` environment value. */
+function parseMcpBridgeArgs(argv, env = {}) {
+	const values = /* @__PURE__ */ new Map();
+	let legacyRest = false;
+	for (let index = 0; index < argv.length; index += 1) {
+		const arg = argv[index];
+		if (arg === "--legacy-rest") {
+			legacyRest = true;
+			continue;
+		}
+		if (!arg.startsWith("--")) continue;
+		const equals = arg.indexOf("=");
+		const key = arg.slice(2, equals < 0 ? void 0 : equals);
+		if (!VALUE_OPTIONS.includes(key)) continue;
+		const option = key;
+		let value;
+		if (equals >= 0) value = arg.slice(equals + 1);
+		else {
+			value = argv[index + 1];
+			if (value !== void 0 && !value.startsWith("--")) index += 1;
+			else value = void 0;
+		}
+		if (!value) throw new McpBridgeUsageError(`--${option} requires a value.`);
+		if (values.has(option)) throw new McpBridgeUsageError(`--${option} was provided more than once.`);
+		values.set(option, value);
+	}
+	let mcpPath;
+	const explicit = values.has("mcp-path") ? {
+		source: "--mcp-path",
+		value: values.get("mcp-path")
+	} : env.SMRT_MCP_PATH !== void 0 ? {
+		source: "SMRT_MCP_PATH",
+		value: env.SMRT_MCP_PATH
+	} : void 0;
+	if (explicit) {
+		const invalid = new McpBridgeUsageError(`${explicit.source} must be a same-server absolute path such as /mcp.`);
+		if (!explicit.value) throw invalid;
+		try {
+			mcpPath = resolveMcpPath(explicit.value);
+		} catch {
+			throw invalid;
+		}
+	}
+	return {
+		values,
+		legacyRest,
+		...mcpPath ? { mcpPath } : {}
+	};
+}
+//#endregion
 //#region src/bin/smrt-mcp-bridge.ts
 /**
 * `smrt-mcp-bridge` — generic stdio MCP bridge.
@@ -18,33 +89,40 @@ import { m as runMcpStdioBridge } from "../config-Ds7ofwtL.js";
 *  - `SMRT_MCP_APP_SLUG` — directory name under `~/.config`.
 *  - `SMRT_MCP_SERVER_NAME` / `SMRT_MCP_SERVER_VERSION` — local server identity.
 *  - `SMRT_MCP_DEFAULT_SERVER_URL` — fallback server URL.
+*  - `SMRT_MCP_PATH` (`--mcp-path`) — the app's MCP endpoint path, e.g.
+*    `/mcp`. Defaults to `/api/mcp`. An explicit value (even an empty
+*    environment value) must be valid; a malformed, missing or repeated
+*    value option is a usage error (exit 2) before the bridge listens.
 *
 * Apps that want their own branded bin should call `runMcpStdioBridge`
 * directly from `@happyvertical/smrt-app-cli` — this package's root export —
 * instead of going through this generic entrypoint.
 */
-function readArg(name) {
-	const prefix = `--${name}=`;
-	const match = process.argv.find((arg) => arg.startsWith(prefix));
-	if (match) return match.slice(prefix.length);
-	const flagIdx = process.argv.indexOf(`--${name}`);
-	if (flagIdx >= 0 && flagIdx + 1 < process.argv.length) return process.argv[flagIdx + 1];
+var parsed;
+try {
+	parsed = parseMcpBridgeArgs(process.argv.slice(2), process.env);
+} catch (error) {
+	if (!(error instanceof McpBridgeUsageError)) throw error;
+	console.error(`smrt-mcp-bridge: ${error.message}`);
+	process.exit(2);
 }
-var envPrefix = readArg("env-prefix") ?? process.env.SMRT_MCP_ENV_PREFIX ?? "";
+var arg = (name) => parsed.values.get(name);
+var envPrefix = arg("env-prefix") ?? process.env.SMRT_MCP_ENV_PREFIX ?? "";
 if (!envPrefix) {
 	console.error("smrt-mcp-bridge: --env-prefix=<PREFIX> (or SMRT_MCP_ENV_PREFIX) is required.");
 	process.exit(2);
 }
-var appSlug = readArg("app-slug") ?? process.env.SMRT_MCP_APP_SLUG;
-var defaultServerUrl = readArg("default-server-url") ?? process.env.SMRT_MCP_DEFAULT_SERVER_URL;
-var serverName = readArg("name") ?? process.env.SMRT_MCP_SERVER_NAME ?? "smrt-app-mcp";
-var serverVersion = readArg("version") ?? process.env.SMRT_MCP_SERVER_VERSION ?? "0.0.0";
+var appSlug = arg("app-slug") ?? process.env.SMRT_MCP_APP_SLUG;
+var defaultServerUrl = arg("default-server-url") ?? process.env.SMRT_MCP_DEFAULT_SERVER_URL;
+var serverName = arg("name") ?? process.env.SMRT_MCP_SERVER_NAME ?? "smrt-app-mcp";
+var serverVersion = arg("version") ?? process.env.SMRT_MCP_SERVER_VERSION ?? "0.0.0";
 await runMcpStdioBridge({
-	transport: process.argv.includes("--legacy-rest") ? "legacy-rest" : "mcp",
+	transport: parsed.legacyRest ? "legacy-rest" : "mcp",
 	envPrefix,
 	appSlug,
 	defaultServerUrl,
 	requireSecureServerUrl: true,
+	...parsed.mcpPath ? { mcpPath: parsed.mcpPath } : {},
 	serverInfo: {
 		name: serverName,
 		version: serverVersion

package/dist/bridge-Bl1p3Oun.js

@@ -0,0 +1,2 @@
+import { h as runMcpStdioBridge } from "./config-B9dESami.js";
+export { runMcpStdioBridge };

package/dist/bridge-args.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Argument parsing for the generic `smrt-mcp-bridge` binary. Every value
+ * option requires a non-empty value and may appear once; an explicitly
+ * supplied endpoint path (argument or `SMRT_MCP_PATH`, even when empty) is
+ * validated and never replaced by the default.
+ *
+ * @internal
+ */
+declare const VALUE_OPTIONS: readonly ["env-prefix", "app-slug", "default-server-url", "name", "version", "mcp-path"];
+type ValueOption = (typeof VALUE_OPTIONS)[number];
+/** Parsed bridge configuration (before environment defaults for identity). */
+export interface McpBridgeArgs {
+    readonly values: ReadonlyMap<ValueOption, string>;
+    readonly legacyRest: boolean;
+    /** Validated endpoint path, when one was supplied explicitly. */
+    readonly mcpPath?: string;
+}
+/** A usage error: print the message and exit non-zero without listening. */
+export declare class McpBridgeUsageError extends Error {
+    readonly name = "McpBridgeUsageError";
+}
+/** Parse bridge argv and the `SMRT_MCP_PATH` environment value. */
+export declare function parseMcpBridgeArgs(argv: readonly string[], env?: Readonly<Record<string, string | undefined>>): McpBridgeArgs;
+export {};
+//# sourceMappingURL=bridge-args.d.ts.map

package/dist/bridge-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-args.d.ts","sourceRoot":"","sources":["../src/bridge-args.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,QAAA,MAAM,aAAa,0FAOT,CAAC;AAEX,KAAK,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,iEAAiE;IACjE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,4EAA4E;AAC5E,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,SAAkB,IAAI,yBAAyB;CAChD;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAM,GACrD,aAAa,CAiDf"}

package/dist/bridge.d.ts

@@ -40,7 +40,10 @@ export interface McpStdioBridgeOptions extends CliConfigContext {
     toolsPath?: string;
     /** Modern SDK-v2 HTTP by default. Legacy REST requires explicit opt-in. */
     transport?: 'mcp' | 'legacy-rest';
-    /** Same-server modern endpoint. Defaults to /api/mcp. */
+    /**
+     * Same-server modern endpoint path, e.g. `/mcp`. Defaults to `/api/mcp`.
+     * Must be an absolute path with no query, fragment, backslash or `//`.
+     */
     mcpPath?: string;
     /** Override the call endpoint path. Defaults to `/api/mcp/call`. */
     callPath?: string;

package/dist/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,EAEL,KAAK,cAAc,EAGnB,aAAa,EAEb,MAAM,EACP,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAIrB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAYtF;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,uDAAuD;IACvD,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAoDA;AAuFD;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC,GACzC,cAAc,CAiChB;AAuCD,2EAA2E;AAC3E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,oBAAoB,GAC7B,aAAa,CAOf;AAiCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAEf"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAOH,OAAO,EAEL,KAAK,cAAc,EAGnB,aAAa,EAEb,MAAM,EACP,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EAIrB,KAAK,iBAAiB,EAIvB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AAYtF;;;;;GAKG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,uDAAuD;IACvD,UAAU,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B,CAoDA;AA+ED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,iBAAiB,CAAC,cAAc,CAAC,GACzC,cAAc,CAiChB;AAuCD,2EAA2E;AAC3E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,oBAAoB,GAC7B,aAAa,CAOf;AAiCD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/{config-Ds7ofwtL.js → config-B9dESami.js}

@@ -75,8 +75,7 @@ function createMcpStdioBridge(options) {
 }
 /** Native SDK-v2 forwarding, with fresh credential resolution for each request. */
 function createModernBridge(options) {
-	const path = options.mcpPath ?? "/api/mcp";
-	if (!path.startsWith("/") || path.startsWith("//") || path.includes("\\") || path.includes("?") || path.includes("#")) throw new TypeError("mcpPath must be a same-server absolute path.");
+	const path = resolveMcpPath(options.mcpPath);
 	const server = new Server(options.serverInfo, {
 		capabilities: {
 			tools: {},
@@ -207,6 +206,7 @@ function isRecord$1(value) {
 * promise resolves once the stdio listener is installed.
 */
 async function runMcpStdioBridge(options) {
+	if (options.transport !== "legacy-rest") resolveMcpPath(options.mcpPath);
 	serveStdio(() => createMcpStdioBridge(options).server);
 }
 //#endregion
@@ -222,6 +222,15 @@ async function runMcpStdioBridge(options) {
 * @packageDocumentation
 */
 var DEFAULT_LOCAL_SERVER = "http://localhost:5173";
+/**
+* Validate a same-server MCP endpoint path (default `/api/mcp`): absolute,
+* with no scheme-relative `//`, backslash, query or fragment.
+*/
+function resolveMcpPath(value) {
+	const path = value ?? "/api/mcp";
+	if (typeof path !== "string" || !path.startsWith("/") || path.startsWith("//") || path.includes("\\") || path.includes("?") || path.includes("#")) throw new TypeError("mcpPath must be a same-server absolute path.");
+	return path;
+}
 /** Enforce the executable-safe server URL policy without echoing URL values. */
 function assertSecureServerUrl(value) {
 	let url;
@@ -520,4 +529,4 @@ async function readBodyWithCap(response, maxBytes) {
 	return new TextDecoder().decode(Buffer.concat(chunks.map((c) => Buffer.from(c))));
 }
 //#endregion
-export { getStoredToken as a, requestJson as c, saveCliConfig as d, createMcpStdioBridge as f, toMcpTransportError as h, getServerUrl as i, requestJsonResult as l, runMcpStdioBridge as m, assertSecureServerUrl as n, loadCliConfig as o, formatMcpCallResult as p, clearStoredToken as r, redactTransportValue as s, AppCliRequestError as t, saveAuth as u };
+export { getStoredToken as a, requestJson as c, saveAuth as d, saveCliConfig as f, toMcpTransportError as g, runMcpStdioBridge as h, getServerUrl as i, requestJsonResult as l, formatMcpCallResult as m, assertSecureServerUrl as n, loadCliConfig as o, createMcpStdioBridge as p, clearStoredToken as r, redactTransportValue as s, AppCliRequestError as t, resolveMcpPath as u };

package/dist/config.d.ts

@@ -50,6 +50,11 @@ export interface CliConfigContext {
      */
     expectedCredentialIssuer?: string;
 }
+/**
+ * Validate a same-server MCP endpoint path (default `/api/mcp`): absolute,
+ * with no scheme-relative `//`, backslash, query or fragment.
+ */
+export declare function resolveMcpPath(value: string | undefined): string;
 /** Enforce the executable-safe server URL policy without echoing URL values. */
 export declare function assertSecureServerUrl(value: string): void;
 /** Read the CLI config file. Missing file → empty config. */

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EAEpB,MAAM,wCAAwC,CAAC;AAGhD,yDAAyD;AACzD,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAID,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBzD;AAeD,6DAA6D;AAC7D,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAgBpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAChC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,8DAA8D;AAC9D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,uEAAuE;AACvE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,SAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;CAC1B;AAID,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;AAE9E,0EAA0E;AAC1E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB;CAM3D;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAmG/B;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAqKD,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAaH,OAAO,KAAK,EACV,iBAAiB,EACjB,mBAAmB,EAEpB,MAAM,wCAAwC,CAAC;AAGhD,yDAAyD;AACzD,MAAM,WAAW,SAAS;IACxB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;OAEG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAYhE;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAoBzD;AAeD,6DAA6D;AAC7D,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAgBpB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,SAAS,GAChB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAChC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,GACjB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,+EAA+E;AAC/E,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,SAAS,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmC7B;AAED,8DAA8D;AAC9D,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,uEAAuE;AACvE,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,SAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,iCAAiC;AACjC,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,CAAC;CAC1B;AAID,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC;AAE9E,0EAA0E;AAC1E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB;CAM3D;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,CAAC,CAAC,CAMZ;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,GAAG,OAAO,EACjD,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAmG/B;AAED,gFAAgF;AAChF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW5D;AAqKD,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/executable.d.ts

@@ -9,7 +9,7 @@
  */
 import { type AppCli, type CreateAppCliOptions } from './index.js';
 export interface AppCliExecutableConfig {
-    cliOptions: Pick<CreateAppCliOptions, 'name' | 'envPrefix' | 'configDir' | 'defaultServerUrl' | 'requireSecureServerUrl'>;
+    cliOptions: Pick<CreateAppCliOptions, 'name' | 'envPrefix' | 'configDir' | 'defaultServerUrl' | 'requireSecureServerUrl' | 'mcpPath'>;
     argv: string[];
     mcp?: {
         name: string;

package/dist/executable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../src/executable.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,MAAM,EACX,KAAK,mBAAmB,EAEzB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,IAAI,CACd,mBAAmB,EACjB,MAAM,GACN,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,wBAAwB,CAC3B,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,CAAC;CACtD;AA2BD,4EAA4E;AAC5E,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,sBAAsB,CAqFxB;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CAWf"}
+{"version":3,"file":"executable.d.ts","sourceRoot":"","sources":["../src/executable.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,KAAK,MAAM,EACX,KAAK,mBAAmB,EAEzB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,IAAI,CACd,mBAAmB,EACjB,MAAM,GACN,WAAW,GACX,WAAW,GACX,kBAAkB,GAClB,wBAAwB,GACxB,SAAS,CACZ,CAAC;IACF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,MAAM,CAAC;CACtD;AA6BD,4EAA4E;AAC5E,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,sBAAsB,CA+FxB;AAED,gFAAgF;AAChF,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/index.d.ts

@@ -60,6 +60,12 @@ export interface CreateAppCliOptions {
     defaultServerUrl?: string;
     /** Enforce HTTPS or loopback HTTP for every effective server URL. */
     requireSecureServerUrl?: boolean;
+    /**
+     * Same-server path of the app's modern MCP endpoint used by
+     * `startMcpBridge()`. Defaults to `/api/mcp`; apps that mount
+     * `mountMcpAppRoute` elsewhere (for example `/mcp`) set it here or per call.
+     */
+    mcpPath?: string;
     /**
      * App-specific commands. Dispatched BEFORE built-ins (`auth`,
      * `resources`, `mcp`) and before the resource-slug dispatcher, so an
@@ -92,6 +98,8 @@ export interface AppCli {
     startMcpBridge(serverInfo?: {
         name?: string;
         version?: string;
+        /** Endpoint path; overrides `CreateAppCliOptions.mcpPath` (default `/api/mcp`). */
+        mcpPath?: string;
     }): Promise<void>;
 }
 export declare function createAppCli(options: CreateAppCliOptions): AppCli;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,KAAK,SAAS,EAKd,KAAK,kBAAkB,EAExB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,QAAQ,EACR,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gCAAgC,EACrC,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,KAAK,iBAAiB,EACtB,eAAe,EACf,cAAc,EACd,KAAK,UAAU,EACf,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AASrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,sBAAsB,EAC3B,2BAA2B,EAC3B,KAAK,0BAA0B,EAC/B,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9C,kDAAkD;IAClD,WAAW,CAAC,CAAC,GAAG,OAAO,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,MAAM;IACrB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,UAAU,CAAC,EAAE;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CA4BjE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,KAAK,SAAS,EAKd,KAAK,kBAAkB,EAExB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,QAAQ,EACR,aAAa,GACd,MAAM,aAAa,CAAC;AAErB,OAAO,EAIL,KAAK,oBAAoB,EAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,gCAAgC,EACrC,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,KAAK,iBAAiB,EACtB,eAAe,EACf,cAAc,EACd,KAAK,UAAU,EACf,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AASrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EACL,oBAAoB,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,sBAAsB,EAC3B,2BAA2B,EAC3B,KAAK,0BAA0B,EAC/B,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC9C,kDAAkD;IAClD,WAAW,CAAC,CAAC,GAAG,OAAO,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,EAAE,aAAa,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,MAAM;IACrB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,cAAc,CAAC,UAAU,CAAC,EAAE;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,mFAAmF;QACnF,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CA8BjE"}

package/dist/index.js

@@ -1,3 +1,3 @@
-import { a as getStoredToken, c as requestJson, d as saveCliConfig, f as createMcpStdioBridge, i as getServerUrl, l as requestJsonResult, m as runMcpStdioBridge, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, s as redactTransportValue, t as AppCliRequestError, u as saveAuth } from "./config-Ds7ofwtL.js";
-import { a as buildFlagParser, c as createMcpClientIdMetadataDocument, d as buildUrl, f as invokeCommand, h as findResourceBySlug, i as runAppCliExecutable, l as registerMcpClient, m as findCommand, n as createAppCli, o as classifySchema, p as fetchResourceList, r as parseAppCliExecutableConfig, s as renderResponse, t as SMRT_MCP_RESULT_METADATA_KEY, u as resolveMcpClientRegistration } from "./src-CMc9Yx_3.js";
+import { a as getStoredToken, c as requestJson, d as saveAuth, f as saveCliConfig, h as runMcpStdioBridge, i as getServerUrl, l as requestJsonResult, n as assertSecureServerUrl, o as loadCliConfig, p as createMcpStdioBridge, r as clearStoredToken, s as redactTransportValue, t as AppCliRequestError } from "./config-B9dESami.js";
+import { a as buildFlagParser, c as createMcpClientIdMetadataDocument, d as buildUrl, f as invokeCommand, h as findResourceBySlug, i as runAppCliExecutable, l as registerMcpClient, m as findCommand, n as createAppCli, o as classifySchema, p as fetchResourceList, r as parseAppCliExecutableConfig, s as renderResponse, t as SMRT_MCP_RESULT_METADATA_KEY, u as resolveMcpClientRegistration } from "./src-DjwsOuHK.js";
 export { AppCliRequestError, SMRT_MCP_RESULT_METADATA_KEY, assertSecureServerUrl, buildFlagParser, buildUrl, classifySchema, clearStoredToken, createAppCli, createMcpClientIdMetadataDocument, createMcpStdioBridge, fetchResourceList, findCommand, findResourceBySlug, getServerUrl, getStoredToken, invokeCommand, loadCliConfig, parseAppCliExecutableConfig, redactTransportValue, registerMcpClient, renderResponse, requestJson, requestJsonResult, resolveMcpClientRegistration, runAppCliExecutable, runMcpStdioBridge, saveAuth, saveCliConfig };

package/dist/{src-CMc9Yx_3.js → src-DjwsOuHK.js}

@@ -1,4 +1,4 @@
-import { a as getStoredToken, c as requestJson, i as getServerUrl, l as requestJsonResult, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, u as saveAuth } from "./config-Ds7ofwtL.js";
+import { a as getStoredToken, c as requestJson, d as saveAuth, i as getServerUrl, l as requestJsonResult, n as assertSecureServerUrl, o as loadCliConfig, r as clearStoredToken, u as resolveMcpPath } from "./config-B9dESami.js";
 import { SMRT_MCP_RESULT_METADATA_KEY as SMRT_MCP_RESULT_METADATA_KEY$1, validateDiscoveryConformanceArtifact } from "@happyvertical/smrt-users/app-contract";
 import { spawn, spawnSync } from "node:child_process";
 //#region src/discovery.ts
@@ -860,7 +860,8 @@ var CONFIG_KEYS = [
 	"config-dir",
 	"default-server-url",
 	"mcp-server-name",
-	"mcp-server-version"
+	"mcp-server-version",
+	"mcp-path"
 ];
 var ENV_BY_KEY = {
 	name: "SMRT_APP_NAME",
@@ -868,7 +869,8 @@ var ENV_BY_KEY = {
 	"config-dir": "SMRT_APP_CONFIG_DIR",
 	"default-server-url": "SMRT_APP_DEFAULT_SERVER_URL",
 	"mcp-server-name": "SMRT_APP_MCP_SERVER_NAME",
-	"mcp-server-version": "SMRT_APP_MCP_SERVER_VERSION"
+	"mcp-server-version": "SMRT_APP_MCP_SERVER_VERSION",
+	"mcp-path": "SMRT_APP_MCP_PATH"
 };
 var APP_NAME_RE = /^[A-Za-z][A-Za-z0-9_-]*$/u;
 var ENV_PREFIX_RE = /^[A-Z][A-Z0-9_]*$/u;
@@ -916,6 +918,12 @@ function parseAppCliExecutableConfig(argv, env = process.env) {
 	if (stdioMcp && (!mcpName || !mcpVersion)) throw new Error("MCP stdio mode requires a server name and version.");
 	if (mcpName) validate(mcpName, MCP_IDENTITY_RE, "MCP server name");
 	if (mcpVersion) validate(mcpVersion, MCP_IDENTITY_RE, "MCP server version");
+	const mcpPath = values.get("mcp-path");
+	if (mcpPath !== void 0) try {
+		resolveMcpPath(mcpPath);
+	} catch {
+		throw new Error("Invalid MCP path configuration.");
+	}
 	const commandArgv = argv.slice(cursor);
 	if (stdioMcp && commandArgv.length > 0) throw new Error("MCP stdio mode does not accept command arguments.");
 	return {
@@ -924,7 +932,8 @@ function parseAppCliExecutableConfig(argv, env = process.env) {
 			envPrefix,
 			configDir,
 			defaultServerUrl,
-			requireSecureServerUrl: true
+			requireSecureServerUrl: true,
+			...mcpPath === void 0 ? {} : { mcpPath }
 		},
 		argv: commandArgv,
 		mcp: mcpName && mcpVersion ? {
@@ -983,9 +992,11 @@ function createAppCli(options) {
 	return {
 		run: (argv) => runCli(context, options, extraByName, argv),
 		startMcpBridge: async (serverInfo) => {
-			const { runMcpStdioBridge } = await import("./bridge-C80xQmmW.js");
+			const { runMcpStdioBridge } = await import("./bridge-Bl1p3Oun.js");
+			const mcpPath = serverInfo?.mcpPath ?? options.mcpPath;
 			await runMcpStdioBridge({
 				...context,
+				...mcpPath === void 0 ? {} : { mcpPath },
 				serverInfo: {
 					name: serverInfo?.name ?? `${options.name}-mcp`,
 					version: serverInfo?.version ?? "0.0.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-app-cli",
-  "version": "0.53.3",
+  "version": "0.53.5",
   "description": "Reusable CLI factory for SMRT apps — branded `<name> <resource> <command>` CLI + stdio MCP bridge with decorator-driven resource discovery",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,12 +21,12 @@
     "AGENTS.md"
   ],
   "dependencies": {
-    "@happyvertical/smrt-users": "0.53.3",
+    "@happyvertical/smrt-users": "0.53.5",
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/server": "2.0.0"
   },
   "devDependencies": {
-    "@happyvertical/smrt-core": "0.53.3",
+    "@happyvertical/smrt-core": "0.53.5",
     "@types/node": "24.13.6",
     "typescript": "6.0.3",
     "vite": "8.1.4",

package/dist/bridge-C80xQmmW.js

@@ -1,2 +0,0 @@
-import { m as runMcpStdioBridge } from "./config-Ds7ofwtL.js";
-export { runMcpStdioBridge };