@happyvertical/smrt-app-mcp 0.40.60 → 0.40.62

package/README.md

@@ -2,8 +2,11 @@
 
 App-runtime MCP server scaffolding for s-m-r-t apps. Provides:
 
-- **Core** — `createMcpAppServer({ smrtOptions, serverInfo, allowedClassNames, publicToolPatterns?, toolPolicy?, workflowAssertions? })` returning `{ listTools, callTool }` wired to `@happyvertical/smrt-core/generators/mcp`.
-- **SvelteKit adapters** (`./sveltekit`) — `mountMcpToolsRoute` / `mountMcpCallRoute` for `/api/mcp/{tools,call}/+server.ts`.
+- **Core** — `createMcpAppServer({ smrtOptions, serverInfo, allowedClassNames, publicToolPatterns?, toolListCache?, toolPolicy?, workflowAssertions? })` returning `{ listTools, callTool }` wired to `@happyvertical/smrt-core/generators/mcp`.
+- **SvelteKit adapters** (`./sveltekit`) — `mountMcpRoute` mounts a modern
+  2026-07-28 stateless Streamable HTTP MCP endpoint. The REST-shaped
+  `mountMcpToolsRoute` / `mountMcpCallRoute` aliases remain available for one
+  release while applications migrate.
 
 For piping a deployed app's MCP surface to a local stdio MCP client, see `@happyvertical/smrt-app-cli` — the client-side runtime CLI exposes a `startMcpBridge()` default and a generic `smrt-mcp-bridge` bin.
 
@@ -41,6 +44,57 @@ export const mcpServer = createMcpAppServer({
 });
 ```
 
+```ts
+// src/routes/api/mcp/+server.ts
+import { mountMcpRoute } from '@happyvertical/smrt-app-mcp/sveltekit';
+import { mcpServer } from '$lib/server/mcp';
+export const POST = mountMcpRoute(mcpServer);
+```
+
+`mountMcpRoute` is a modern-only, fetch-style Streamable HTTP endpoint. It
+serves `server/discover`, `tools/list`, and `tools/call` with the SDK's
+2026-07-28 envelope. It advertises the optional
+`io.modelcontextprotocol/tasks` extension only when an allowed object enables
+MCP tasks (`mcp: { tasks: [...] }`); task-aware clients can then call
+`tasks/get`, `tasks/update`, and `tasks/cancel`. Application deployments must
+run a `TaskRunner` for the `mcp-tasks` queue. Task lifecycle operations require
+a stable authenticated principal id; include its `tenantId` in the principal
+when the application uses tenant-scoped objects. Tool discovery is deterministically
+ordered by name. Stock MCP clients send the required
+`Mcp-Method` header (and `Mcp-Name` for `tools/call`); the mount validates them
+against the JSON-RPC body and returns the protocol `HeaderMismatch` error
+(`-32020`, HTTP 400) for a missing or mismatched header.
+
+`tools/list` emits the required cache metadata with a one-day, `private`
+default. Shared (`public`) caching is intentionally exceptional: set
+`toolListCache: { cacheScope: 'public', publicCatalog: true }` only for a
+reviewed catalog where every allowed tool is unauthenticated, read-only, and
+global. The server verifies that shape (including the absence of tenant-scoped
+tools and principal-aware policy) and falls back to `private` otherwise.
+
+The route constructs a fresh protocol server for every HTTP request. It does
+not issue or rely on `Mcp-Session-Id`, sticky load-balancer routing, or a held
+SSE connection, so it is safe behind ordinary round-robin deployment. This
+mount exposes no subscription capability; subscription requests are refused as
+a JSON-RPC error before any SSE stream opens. Persist stateful workflow
+progress in application objects, then pass their explicit s-m-r-t object id
+back to the next tool call:
+
+```ts
+// `basket_create` returns an object with id "basket-123".
+await client.callTool({
+  name: 'basket_additem',
+  arguments: { id: 'basket-123', productId: 'product-456' },
+});
+```
+
+## Deprecated REST compatibility
+
+For one release, applications that have not moved their route path can retain
+the old handlers below. They are REST-shaped compatibility aliases, not an MCP
+transport, and will be removed after the migration window. Direct calls to a
+tool outside the app allow-list continue to receive the safe 404 behavior.
+
 ```ts
 // src/routes/api/mcp/tools/+server.ts
 import { mountMcpToolsRoute } from '@happyvertical/smrt-app-mcp/sveltekit';

package/dist/chunks/protocol-DoieND6v.js

@@ -0,0 +1,99 @@
+import { ProtocolError, ProtocolErrorCode, Server } from "@modelcontextprotocol/server";
+//#region src/errors.ts
+var MCP_TOOL_ACCESS_DENIED_CODE = "mcp_tool_access_denied";
+var McpAccessError = class extends Error {
+	constructor(status, message, metadata = {}) {
+		super(message);
+		this.status = status;
+		this.metadata = metadata;
+		this.name = "McpAccessError";
+	}
+	status;
+	metadata;
+};
+//#endregion
+//#region src/tools.ts
+function matchesToolPattern(toolName, pattern) {
+	if (!pattern) return false;
+	if (pattern === "*") return true;
+	const parts = pattern.split("*");
+	if (parts.length === 1) return toolName === pattern;
+	let cursor = 0;
+	if (parts[0] && !toolName.startsWith(parts[0])) return false;
+	for (const part of parts) {
+		if (!part) continue;
+		const index = toolName.indexOf(part, cursor);
+		if (index < 0) return false;
+		cursor = index + part.length;
+	}
+	const last = parts.at(-1);
+	return !last || toolName.endsWith(last);
+}
+function isReadOnlyToolName(toolName) {
+	return toolName.endsWith("_list") || toolName.endsWith("_get");
+}
+function isPublicToolName(toolName, patterns) {
+	return isReadOnlyToolName(toolName) && patterns.some((pattern) => matchesToolPattern(toolName, pattern));
+}
+function classNamePrefixes(classNames) {
+	return new Set(classNames.map((className) => `${className.toLowerCase()}_`));
+}
+function isAllowedCoreTool(toolName, prefixes) {
+	for (const prefix of prefixes) if (toolName.startsWith(prefix)) return true;
+	return false;
+}
+function compareMcpToolNames(left, right) {
+	return left < right ? -1 : left > right ? 1 : 0;
+}
+//#endregion
+//#region src/protocol.ts
+var MCP_TASKS_EXTENSION = "io.modelcontextprotocol/tasks";
+var DEFAULT_TOOL_LIST_CACHE_HINT = {
+	ttlMs: 864e5,
+	cacheScope: "private"
+};
+async function resolvePrincipal(option, context) {
+	if (typeof option === "function") return await option(context) ?? null;
+	return option ?? null;
+}
+function createMcpProtocolServer(appServer, options = {}) {
+	const tasksEnabled = appServer.tasksEnabled && typeof options.principal !== "function" && Boolean(options.principal?.id);
+	const server = new Server(appServer.serverInfo, {
+		capabilities: {
+			tools: {},
+			...tasksEnabled ? { extensions: { [MCP_TASKS_EXTENSION]: {} } } : {}
+		},
+		cacheHints: { "tools/list": DEFAULT_TOOL_LIST_CACHE_HINT }
+	});
+	server.setRequestHandler("tools/list", async (_request, context) => {
+		const principal = await resolvePrincipal(options.principal, context);
+		const cacheHint = await appServer.getToolsListCacheHint?.() ?? DEFAULT_TOOL_LIST_CACHE_HINT;
+		return {
+			tools: [...await appServer.listTools({ principal })].sort((left, right) => compareMcpToolNames(left.name, right.name)),
+			...cacheHint
+		};
+	});
+	server.setRequestHandler("tools/call", async (request, context) => {
+		try {
+			return await appServer.callTool({
+				name: request.params.name,
+				arguments: request.params.arguments,
+				principal: await resolvePrincipal(options.principal, context)
+			});
+		} catch (error) {
+			if (error instanceof McpAccessError) {
+				const { code, retryable } = error.metadata;
+				throw new ProtocolError(error.status === 404 ? ProtocolErrorCode.InvalidParams : ProtocolErrorCode.InvalidRequest, error.message, {
+					...typeof code === "string" ? { code } : {},
+					...typeof retryable === "boolean" ? { retryable } : {}
+				});
+			}
+			throw error;
+		}
+	});
+	return server;
+}
+//#endregion
+export { isAllowedCoreTool as a, matchesToolPattern as c, compareMcpToolNames as i, MCP_TOOL_ACCESS_DENIED_CODE as l, createMcpProtocolServer as n, isPublicToolName as o, classNamePrefixes as r, isReadOnlyToolName as s, MCP_TASKS_EXTENSION as t, McpAccessError as u };
+
+//# sourceMappingURL=protocol-DoieND6v.js.map

package/dist/chunks/protocol-DoieND6v.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-DoieND6v.js","names":[],"sources":["../../src/errors.ts","../../src/tools.ts","../../src/protocol.ts"],"sourcesContent":["/** Machine-readable code for a principal policy denial. */\nexport const MCP_TOOL_ACCESS_DENIED_CODE = 'mcp_tool_access_denied';\n\n/**\n * Metadata that is safe to expose for an app-MCP access failure. Policy\n * implementations must not place principal, scope, tool, or internal-error\n * details here.\n */\nexport interface McpAccessErrorMetadata {\n  code?: string;\n  retryable?: boolean;\n}\n\n/**\n * Error returned by the MCP app server when a caller tries to use a tool\n * they are not allowed to access. The HTTP layer should map `status` onto\n * the response status code.\n */\nexport class McpAccessError extends Error {\n  constructor(\n    readonly status: number,\n    message: string,\n    readonly metadata: McpAccessErrorMetadata = {},\n  ) {\n    super(message);\n    this.name = 'McpAccessError';\n  }\n}\n","/**\n * Tool-name policy helpers — used by `McpAppServer` to filter the full set\n * of generated tools down to what the calling principal is allowed to see,\n * and to decide whether an unauthenticated tool call should be permitted.\n *\n * @packageDocumentation\n */\n\n/**\n * Match a tool name against a glob-ish pattern with `*` wildcards.\n *\n * - Empty pattern → never matches.\n * - `*` → matches everything.\n * - `prefix_*` → matches anything starting with `prefix_`.\n * - `*_suffix` → matches anything ending with `_suffix`.\n * - `a_*_b` → matches any name containing `a_`, then any text, then `_b`.\n *\n * No regex characters are special besides `*` — the input is treated as a\n * literal string with star wildcards.\n */\nexport function matchesToolPattern(toolName: string, pattern: string): boolean {\n  if (!pattern) return false;\n  if (pattern === '*') return true;\n\n  const parts = pattern.split('*');\n  if (parts.length === 1) return toolName === pattern;\n\n  let cursor = 0;\n  if (parts[0] && !toolName.startsWith(parts[0])) return false;\n  for (const part of parts) {\n    if (!part) continue;\n    const index = toolName.indexOf(part, cursor);\n    if (index < 0) return false;\n    cursor = index + part.length;\n  }\n\n  const last = parts.at(-1);\n  return !last || toolName.endsWith(last);\n}\n\n/**\n * Read-only tool detection. Generated SMRT MCP tools follow the naming\n * convention `<class>_<verb>`; we treat `_list` and `_get` as read-only.\n */\nexport function isReadOnlyToolName(toolName: string): boolean {\n  return toolName.endsWith('_list') || toolName.endsWith('_get');\n}\n\n/**\n * Check whether a tool name is currently allowed for unauthenticated callers\n * given the configured public-tool patterns. Only read-only tools may ever\n * be public, regardless of pattern.\n */\nexport function isPublicToolName(\n  toolName: string,\n  patterns: readonly string[],\n): boolean {\n  return (\n    isReadOnlyToolName(toolName) &&\n    patterns.some((pattern) => matchesToolPattern(toolName, pattern))\n  );\n}\n\n/**\n * Lower-case `<class>_` prefixes the app considers \"allowed core tools\"\n * given a list of SMRT class names. Used to build the allow-list for\n * `McpAppServer.listTools`.\n */\nexport function classNamePrefixes(\n  classNames: readonly string[],\n): ReadonlySet<string> {\n  return new Set(classNames.map((className) => `${className.toLowerCase()}_`));\n}\n\n/**\n * Whether a given tool name starts with any of the configured class\n * prefixes.\n */\nexport function isAllowedCoreTool(\n  toolName: string,\n  prefixes: ReadonlySet<string>,\n): boolean {\n  for (const prefix of prefixes) {\n    if (toolName.startsWith(prefix)) return true;\n  }\n  return false;\n}\n\n/**\n * Compare tool names by Unicode code unit, rather than the host locale, so a\n * catalog has one byte-stable order across every runtime.\n */\nexport function compareMcpToolNames(left: string, right: string): number {\n  return left < right ? -1 : left > right ? 1 : 0;\n}\n","/** MCP SDK v2 protocol adapter for the framework-neutral app server core. */\nimport {\n  type CallToolResult,\n  ProtocolError,\n  ProtocolErrorCode,\n  Server,\n  type ServerContext,\n  type Tool,\n} from '@modelcontextprotocol/server';\nimport { McpAccessError } from './errors.js';\nimport type { McpAppPrincipal, McpAppServer } from './server.js';\nimport { compareMcpToolNames } from './tools.js';\n\nexport const MCP_TASKS_EXTENSION = 'io.modelcontextprotocol/tasks';\n\nconst DEFAULT_TOOL_LIST_CACHE_HINT = {\n  ttlMs: 86_400_000,\n  cacheScope: 'private' as const,\n};\n\nexport interface McpProtocolServerOptions {\n  /** Resolve the authenticated application principal for each MCP request. */\n  principal?:\n    | McpAppPrincipal\n    | null\n    | ((\n        context: ServerContext,\n      ) => McpAppPrincipal | null | Promise<McpAppPrincipal | null>);\n}\n\nasync function resolvePrincipal(\n  option: McpProtocolServerOptions['principal'],\n  context: ServerContext,\n): Promise<McpAppPrincipal | null> {\n  if (typeof option === 'function') return (await option(context)) ?? null;\n  return option ?? null;\n}\n\n/**\n * Adapt an app MCP core to the SDK v2 low-level server protocol.\n *\n * Transport ownership remains with the caller. In particular, this does not\n * add a production HTTP endpoint; it is safe to compose with `serveStdio` or\n * `createMcpHandler` in a deployment that supplies its own authentication.\n */\nexport function createMcpProtocolServer(\n  appServer: McpAppServer,\n  options: McpProtocolServerOptions = {},\n): Server {\n  // Task lifecycle records are owner-scoped. Unlike ordinary public read-only\n  // tools, they cannot be safely exposed without a stable principal id.\n  const tasksEnabled =\n    appServer.tasksEnabled &&\n    typeof options.principal !== 'function' &&\n    Boolean(options.principal?.id);\n  const server = new Server(appServer.serverInfo, {\n    capabilities: {\n      tools: {},\n      ...(tasksEnabled ? { extensions: { [MCP_TASKS_EXTENSION]: {} } } : {}),\n    } as never,\n    cacheHints: { 'tools/list': DEFAULT_TOOL_LIST_CACHE_HINT },\n  });\n\n  server.setRequestHandler('tools/list', async (_request, context) => {\n    const principal = await resolvePrincipal(options.principal, context);\n    const cacheHint =\n      (await appServer.getToolsListCacheHint?.()) ??\n      DEFAULT_TOOL_LIST_CACHE_HINT;\n    return {\n      tools: [...(await appServer.listTools({ principal }))].sort(\n        (left, right) => compareMcpToolNames(left.name, right.name),\n      ) as Tool[],\n      ...cacheHint,\n    };\n  });\n\n  server.setRequestHandler('tools/call', async (request, context) => {\n    try {\n      return (await appServer.callTool({\n        name: request.params.name,\n        arguments: request.params.arguments,\n        principal: await resolvePrincipal(options.principal, context),\n      })) as CallToolResult;\n    } catch (error) {\n      if (error instanceof McpAccessError) {\n        const { code, retryable } = error.metadata;\n        throw new ProtocolError(\n          error.status === 404\n            ? ProtocolErrorCode.InvalidParams\n            : ProtocolErrorCode.InvalidRequest,\n          error.message,\n          {\n            ...(typeof code === 'string' ? { code } : {}),\n            ...(typeof retryable === 'boolean' ? { retryable } : {}),\n          },\n        );\n      }\n      throw error;\n    }\n  });\n\n  return server;\n}\n"],"mappings":";;AACO,IAAM,8BAA8B;AAiBpC,IAAM,iBAAN,cAA6B,MAAM;CACxC,YACW,QACT,SACS,WAAmC,CAAC,GAC7C;EACA,MAAM,OAAO;EAJJ,KAAA,SAAA;EAEA,KAAA,WAAA;EAGT,KAAK,OAAO;CACd;CANW;CAEA;AAKb;;;ACPO,SAAS,mBAAmB,UAAkB,SAA0B;CAC7E,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,YAAY,KAAK,OAAO;CAE5B,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,GAAG,OAAO,aAAa;CAE5C,IAAI,SAAS;CACb,IAAI,MAAM,MAAM,CAAC,SAAS,WAAW,MAAM,EAAE,GAAG,OAAO;CACvD,KAAA,MAAW,QAAQ,OAAO;EACxB,IAAI,CAAC,MAAM;EACX,MAAM,QAAQ,SAAS,QAAQ,MAAM,MAAM;EAC3C,IAAI,QAAQ,GAAG,OAAO;EACtB,SAAS,QAAQ,KAAK;CACxB;CAEA,MAAM,OAAO,MAAM,GAAG,EAAE;CACxB,OAAO,CAAC,QAAQ,SAAS,SAAS,IAAI;AACxC;AAMO,SAAS,mBAAmB,UAA2B;CAC5D,OAAO,SAAS,SAAS,OAAO,KAAK,SAAS,SAAS,MAAM;AAC/D;AAOO,SAAS,iBACd,UACA,UACS;CACT,OACE,mBAAmB,QAAQ,KAC3B,SAAS,MAAM,YAAY,mBAAmB,UAAU,OAAO,CAAC;AAEpE;AAOO,SAAS,kBACd,YACqB;CACrB,OAAO,IAAI,IAAI,WAAW,KAAK,cAAc,GAAG,UAAU,YAAY,EAAC,EAAG,CAAC;AAC7E;AAMO,SAAS,kBACd,UACA,UACS;CACT,KAAA,MAAW,UAAU,UACnB,IAAI,SAAS,WAAW,MAAM,GAAG,OAAO;CAE1C,OAAO;AACT;AAMO,SAAS,oBAAoB,MAAc,OAAuB;CACvE,OAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI;AAChD;;;ACjFO,IAAM,sBAAsB;AAEnC,IAAM,+BAA+B;CACnC,OAAO;CACP,YAAY;AACd;AAYA,eAAe,iBACb,QACA,SACiC;CACjC,IAAI,OAAO,WAAW,YAAY,OAAQ,MAAM,OAAO,OAAO,KAAM;CACpE,OAAO,UAAU;AACnB;AASO,SAAS,wBACd,WACA,UAAoC,CAAC,GAC7B;CAGR,MAAM,eACJ,UAAU,gBACV,OAAO,QAAQ,cAAc,cAC7B,QAAQ,QAAQ,WAAW,EAAE;CAC/B,MAAM,SAAS,IAAI,OAAO,UAAU,YAAY;EAC9C,cAAc;GACZ,OAAO,CAAC;GACR,GAAI,eAAe,EAAE,YAAY,GAAG,sBAAsB,CAAC,EAAE,EAAE,IAAI,CAAC;EACtE;EACA,YAAY,EAAE,cAAc,6BAA6B;CAC3D,CAAC;CAED,OAAO,kBAAkB,cAAc,OAAO,UAAU,YAAY;EAClE,MAAM,YAAY,MAAM,iBAAiB,QAAQ,WAAW,OAAO;EACnE,MAAM,YACH,MAAM,UAAU,wBAAwB,KACzC;EACF,OAAO;GACL,OAAO,CAAC,GAAI,MAAM,UAAU,UAAU,EAAE,UAAU,CAAC,CAAE,CAAA,CAAE,MACpD,MAAM,UAAU,oBAAoB,KAAK,MAAM,MAAM,IAAI,CAC5D;GACA,GAAG;EACL;CACF,CAAC;CAED,OAAO,kBAAkB,cAAc,OAAO,SAAS,YAAY;EACjE,IAAI;GACF,OAAQ,MAAM,UAAU,SAAS;IAC/B,MAAM,QAAQ,OAAO;IACrB,WAAW,QAAQ,OAAO;IAC1B,WAAW,MAAM,iBAAiB,QAAQ,WAAW,OAAO;GAC9D,CAAC;EACH,SAAS,OAAO;GACd,IAAI,iBAAiB,gBAAgB;IACnC,MAAM,EAAE,MAAM,cAAc,MAAM;IAClC,MAAM,IAAI,cACR,MAAM,WAAW,MACb,kBAAkB,gBAClB,kBAAkB,gBACtB,MAAM,SACN;KACE,GAAI,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,CAAC;KAC3C,GAAI,OAAO,cAAc,YAAY,EAAE,UAAU,IAAI,CAAC;IACxD,CACF;GACF;GACA,MAAM;EACR;CACF,CAAC;CAED,OAAO;AACT"}

package/dist/index.d.ts

@@ -24,6 +24,7 @@
 
 import { MCPConfig } from '@happyvertical/smrt-core/generators/mcp';
 import { MCPResponse } from '@happyvertical/smrt-core/generators/mcp';
+import { McpTask } from '@happyvertical/smrt-jobs';
 import { MCPTool } from '@happyvertical/smrt-core/generators/mcp';
 import { Server } from '@modelcontextprotocol/server';
 import { ServerContext } from '@modelcontextprotocol/server';
@@ -75,6 +76,12 @@ export declare interface CreateMcpAppServerOptions {
      * (everything requires auth).
      */
     publicToolPatterns?: McpPublicToolPatternsThunk;
+    /**
+     * Cache policy for the MCP tools/list result. Public caching is honored only
+     * when this explicitly opts in and every allowed tool is a non-tenant,
+     * unauthenticated read-only tool with no principal-aware policy.
+     */
+    toolListCache?: McpToolListCacheOptions;
     /**
      * Optional generic principal-aware tool policy. It is evaluated for every
      * tool that passes the app allow-list and base public/authenticated policy,
@@ -177,6 +184,10 @@ export declare interface McpAccessErrorMetadata {
  */
 export declare interface McpAppPrincipal {
     id?: string;
+    /** Tenant boundary for task ownership and generated tenant-scoped actions. */
+    tenantId?: string;
+    /** Trusted operator override for generated tenant-scoped actions. */
+    allowCrossTenant?: boolean;
     kind?: string;
     roles?: string[];
     scopes?: string[];
@@ -186,6 +197,30 @@ export declare interface McpAppPrincipal {
 export declare interface McpAppServer {
     listTools(input: ListToolsInput): Promise<MCPTool[]>;
     callTool(input: CallToolInput): Promise<MCPResponse>;
+    /** Whether this app has any explicitly enabled Tasks extension action. */
+    hasTaskSupport?(): Promise<boolean>;
+    /** Whether a particular visible tool is task-enabled. */
+    isTaskTool?(name: string): Promise<boolean>;
+    /** Static declaration used by the protocol discovery capability surface. */
+    readonly tasksEnabled?: boolean;
+    /** Create a durable task after applying the same tool policy as tools/call. */
+    callTask?(input: CallToolInput): Promise<MCPResponse>;
+    /** Principal-scoped task lifecycle operations. */
+    getTask?(input: {
+        taskId: string;
+        principal?: McpAppPrincipal | null;
+    }): Promise<McpTask>;
+    updateTask?(input: {
+        taskId: string;
+        inputResponses: Record<string, unknown>;
+        principal?: McpAppPrincipal | null;
+    }): Promise<void>;
+    cancelTask?(input: {
+        taskId: string;
+        principal?: McpAppPrincipal | null;
+    }): Promise<void>;
+    /** Cache policy for protocol tools/list responses. */
+    getToolsListCacheHint?(): Promise<McpToolListCacheHint>;
     /** Read-only view of the configured server identity. */
     readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];
 }
@@ -210,6 +245,23 @@ export declare type McpPublicToolPatternsThunk = () => readonly string[];
  */
 export declare type McpSmrtOptionsThunk = () => Record<string, unknown>;
 
+export declare interface McpToolListCacheHint {
+    ttlMs: number;
+    cacheScope: 'private' | 'public';
+}
+
+export declare interface McpToolListCacheOptions {
+    /** Cache lifetime in milliseconds. Defaults to one day for a deploy-static catalog. */
+    ttlMs?: number;
+    /** Requested cache visibility. Defaults to private. */
+    cacheScope?: 'private' | 'public';
+    /**
+     * Explicit attestation that every allowed tool is global, unauthenticated,
+     * and safe to share through an intermediary cache.
+     */
+    publicCatalog?: true;
+}
+
 /**
  * Per-tool access policy. Return `true` to expose/allow the tool and `false`
  * to hide it from discovery and deny a direct call. A thrown error is treated

package/dist/index.js

@@ -1,72 +1,40 @@
-import { n as McpAccessError, t as MCP_TOOL_ACCESS_DENIED_CODE } from "./chunks/errors-CHYu0Vr2.js";
-import { ProtocolError, ProtocolErrorCode, Server } from "@modelcontextprotocol/server";
-import { MCPGenerator } from "@happyvertical/smrt-core/generators/mcp";
-//#region src/protocol.ts
-async function resolvePrincipal(option, context) {
-	if (typeof option === "function") return await option(context) ?? null;
-	return option ?? null;
-}
-function createMcpProtocolServer(appServer, options = {}) {
-	const server = new Server(appServer.serverInfo, { capabilities: { tools: {} } });
-	server.setRequestHandler("tools/list", async (_request, context) => ({ tools: await appServer.listTools({ principal: await resolvePrincipal(options.principal, context) }) }));
-	server.setRequestHandler("tools/call", async (request, context) => {
-		try {
-			return await appServer.callTool({
-				name: request.params.name,
-				arguments: request.params.arguments,
-				principal: await resolvePrincipal(options.principal, context)
-			});
-		} catch (error) {
-			if (error instanceof McpAccessError) {
-				const { code, retryable } = error.metadata;
-				throw new ProtocolError(error.status === 404 ? ProtocolErrorCode.InvalidParams : ProtocolErrorCode.InvalidRequest, error.message, {
-					...typeof code === "string" ? { code } : {},
-					...typeof retryable === "boolean" ? { retryable } : {}
-				});
-			}
-			throw error;
-		}
-	});
-	return server;
-}
-//#endregion
-//#region src/tools.ts
-function matchesToolPattern(toolName, pattern) {
-	if (!pattern) return false;
-	if (pattern === "*") return true;
-	const parts = pattern.split("*");
-	if (parts.length === 1) return toolName === pattern;
-	let cursor = 0;
-	if (parts[0] && !toolName.startsWith(parts[0])) return false;
-	for (const part of parts) {
-		if (!part) continue;
-		const index = toolName.indexOf(part, cursor);
-		if (index < 0) return false;
-		cursor = index + part.length;
-	}
-	const last = parts.at(-1);
-	return !last || toolName.endsWith(last);
-}
-function isReadOnlyToolName(toolName) {
-	return toolName.endsWith("_list") || toolName.endsWith("_get");
-}
-function isPublicToolName(toolName, patterns) {
-	return isReadOnlyToolName(toolName) && patterns.some((pattern) => matchesToolPattern(toolName, pattern));
-}
-function classNamePrefixes(classNames) {
-	return new Set(classNames.map((className) => `${className.toLowerCase()}_`));
+import { a as isAllowedCoreTool, c as matchesToolPattern, i as compareMcpToolNames, l as MCP_TOOL_ACCESS_DENIED_CODE, n as createMcpProtocolServer, o as isPublicToolName, r as classNamePrefixes, s as isReadOnlyToolName, u as McpAccessError } from "./chunks/protocol-DoieND6v.js";
+import { ObjectRegistry, isTenantScopedClassResolved } from "@happyvertical/smrt-core";
+import { MCPGenerator, MCP_STABLE_CATALOG_TTL_MS } from "@happyvertical/smrt-core/generators/mcp";
+import { McpTaskNotFoundError, McpTaskStore } from "@happyvertical/smrt-jobs";
+//#region src/server.ts
+function configuredToolListCacheHint(options) {
+	const ttlMs = options?.ttlMs ?? MCP_STABLE_CATALOG_TTL_MS;
+	if (!Number.isSafeInteger(ttlMs) || ttlMs < 0) throw new RangeError("MCP tools/list cache ttlMs must be a non-negative safe integer.");
+	if (options?.cacheScope !== void 0 && options.cacheScope !== "private" && options.cacheScope !== "public") throw new RangeError("MCP tools/list cacheScope must be 'private' or 'public'.");
+	return {
+		ttlMs,
+		cacheScope: options?.cacheScope === "public" && options.publicCatalog === true ? "public" : "private"
+	};
 }
-function isAllowedCoreTool(toolName, prefixes) {
-	for (const prefix of prefixes) if (toolName.startsWith(prefix)) return true;
+function isTenantScopedTool(tool) {
+	const separator = tool.name.indexOf("_");
+	if (separator <= 0) return false;
+	const objectName = tool.name.slice(0, separator).toLowerCase();
+	for (const [key, classInfo] of ObjectRegistry.getAllClasses()) {
+		const name = classInfo.name || key;
+		if (name.toLowerCase() === objectName) return ObjectRegistry.isTenantScoped(name) || isTenantScopedClassResolved(name);
+	}
 	return false;
 }
-//#endregion
-//#region src/server.ts
+function taskOwnerIdFor(principal) {
+	return JSON.stringify([principal.tenantId ?? null, principal.id]);
+}
 function createMcpAppServer(options) {
 	const allowedPrefixes = classNamePrefixes(options.allowedClassNames);
 	const getPublicPatterns = options.publicToolPatterns ?? (() => []);
 	const toolPolicy = options.toolPolicy;
 	const workflowAssertions = options.workflowAssertions ?? {};
+	const requestedToolListCacheHint = configuredToolListCacheHint(options.toolListCache);
+	const tasksEnabled = options.allowedClassNames.some((className) => {
+		const mcp = ObjectRegistry.getConfig(className).mcp;
+		return typeof mcp === "object" && (mcp.tasks === true || Array.isArray(mcp.tasks) && mcp.tasks.length > 0);
+	});
 	function userForGenerator(principal) {
 		if (!principal?.id) return void 0;
 		return {
@@ -74,11 +42,20 @@ function createMcpAppServer(options) {
 			roles: principal.roles
 		};
 	}
-	function makeGenerator(principal) {
+	async function taskStoreFor(principal) {
+		if (!principal?.id) throw new McpAccessError(401, "Authentication is required for MCP tasks.");
+		const db = options.smrtOptions().db;
+		if (!db) throw new Error("MCP Tasks requires smrtOptions() to provide a database");
+		return McpTaskStore.create(db, { ownerId: taskOwnerIdFor(principal) });
+	}
+	function makeGenerator(principal, taskStore) {
 		const user = userForGenerator(principal);
 		return new MCPGenerator(options.serverInfo, {
 			...options.smrtOptions(),
-			user
+			user,
+			tenantId: principal?.tenantId,
+			allowCrossTenant: principal?.allowCrossTenant,
+			...taskStore ? { taskStore } : {}
 		});
 	}
 	function principalForList(input) {
@@ -90,7 +67,7 @@ function createMcpAppServer(options) {
 		return input.user ?? null;
 	}
 	async function allowedTools() {
-		return (await makeGenerator().generateTools()).filter((tool) => isAllowedCoreTool(tool.name, allowedPrefixes));
+		return (await makeGenerator().generateTools()).filter((tool) => isAllowedCoreTool(tool.name.toLowerCase(), allowedPrefixes)).sort((left, right) => compareMcpToolNames(left.name, right.name));
 	}
 	function passesBasePolicy(tool, principal, publicPatterns) {
 		if (principal) return true;
@@ -117,11 +94,20 @@ function createMcpAppServer(options) {
 		}));
 		return tools.filter((_, index) => visible[index]);
 	}
+	async function getToolsListCacheHint() {
+		if (requestedToolListCacheHint.cacheScope !== "public") return requestedToolListCacheHint;
+		const tools = await allowedTools();
+		const publicPatterns = getPublicPatterns();
+		return !toolPolicy && tools.every((tool) => isPublicToolName(tool.name, publicPatterns) && !isTenantScopedTool(tool)) ? requestedToolListCacheHint : {
+			...requestedToolListCacheHint,
+			cacheScope: "private"
+		};
+	}
 	async function callTool(input) {
 		const args = input.arguments ?? {};
 		const principal = principalForCall(input);
 		const tool = (await allowedTools()).find((candidate) => candidate.name === input.name);
-		if (!tool) throw new McpAccessError(404, `Unknown MCP tool: ${input.name}`);
+		if (!tool) throw new McpAccessError(404, "Unknown MCP tool.");
 		if (!passesBasePolicy(tool, principal, principal ? void 0 : getPublicPatterns())) throw new McpAccessError(401, `Authentication is required for MCP tool: ${input.name}`);
 		if (!await passesToolPolicy(tool, principal)) throw new McpAccessError(403, "MCP tool access is not permitted.", {
 			code: MCP_TOOL_ACCESS_DENIED_CODE,
@@ -137,9 +123,72 @@ function createMcpAppServer(options) {
 			}
 		});
 	}
+	async function authorizeCall(input) {
+		const args = input.arguments ?? {};
+		const principal = principalForCall(input);
+		const tool = (await allowedTools()).find((candidate) => candidate.name === input.name);
+		if (!tool) throw new McpAccessError(404, "Unknown MCP tool.");
+		if (!passesBasePolicy(tool, principal, principal ? void 0 : getPublicPatterns())) throw new McpAccessError(401, `Authentication is required for MCP tool: ${input.name}`);
+		if (!await passesToolPolicy(tool, principal)) throw new McpAccessError(403, "MCP tool access is not permitted.", {
+			code: MCP_TOOL_ACCESS_DENIED_CODE,
+			retryable: false
+		});
+		const assertion = workflowAssertions[input.name];
+		if (assertion) assertion(args, userForGenerator(principal) ?? null);
+		return {
+			args,
+			principal,
+			tool
+		};
+	}
+	async function hasTaskSupport() {
+		const tools = await allowedTools();
+		const generator = makeGenerator();
+		for (const tool of tools) if (await generator.supportsTaskTool(tool.name)) return true;
+		return false;
+	}
+	async function isTaskTool(name) {
+		if (!(await allowedTools()).some((tool) => tool.name === name)) return false;
+		return makeGenerator().supportsTaskTool(name);
+	}
+	async function callTask(input) {
+		const { args, principal } = await authorizeCall(input);
+		return makeGenerator(principal, await taskStoreFor(principal)).createTask({
+			method: "tools/call",
+			params: {
+				arguments: args,
+				name: input.name
+			}
+		});
+	}
+	async function withTaskStore(principal, operation) {
+		try {
+			return await operation(await taskStoreFor(principal));
+		} catch (error) {
+			if (error instanceof McpTaskNotFoundError) throw new McpAccessError(404, "Unknown MCP task.");
+			throw error;
+		}
+	}
+	async function getTask(input) {
+		return withTaskStore(input.principal, (store) => store.getTask(input.taskId));
+	}
+	async function updateTask(input) {
+		await withTaskStore(input.principal, (store) => store.updateTask(input.taskId, input.inputResponses));
+	}
+	async function cancelTask(input) {
+		await withTaskStore(input.principal, (store) => store.cancelTask(input.taskId));
+	}
 	return {
 		listTools,
 		callTool,
+		hasTaskSupport,
+		isTaskTool,
+		callTask,
+		getTask,
+		updateTask,
+		cancelTask,
+		tasksEnabled,
+		getToolsListCacheHint,
 		serverInfo: options.serverInfo
 	};
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/protocol.ts","../src/tools.ts","../src/server.ts"],"sourcesContent":["/** MCP SDK v2 protocol adapter for the framework-neutral app server core. */\nimport {\n  type CallToolResult,\n  ProtocolError,\n  ProtocolErrorCode,\n  Server,\n  type ServerContext,\n  type Tool,\n} from '@modelcontextprotocol/server';\nimport { McpAccessError } from './errors.js';\nimport type { McpAppPrincipal, McpAppServer } from './server.js';\n\nexport interface McpProtocolServerOptions {\n  /** Resolve the authenticated application principal for each MCP request. */\n  principal?:\n    | McpAppPrincipal\n    | null\n    | ((\n        context: ServerContext,\n      ) => McpAppPrincipal | null | Promise<McpAppPrincipal | null>);\n}\n\nasync function resolvePrincipal(\n  option: McpProtocolServerOptions['principal'],\n  context: ServerContext,\n): Promise<McpAppPrincipal | null> {\n  if (typeof option === 'function') return (await option(context)) ?? null;\n  return option ?? null;\n}\n\n/**\n * Adapt an app MCP core to the SDK v2 low-level server protocol.\n *\n * Transport ownership remains with the caller. In particular, this does not\n * add a production HTTP endpoint; it is safe to compose with `serveStdio` or\n * `createMcpHandler` in a deployment that supplies its own authentication.\n */\nexport function createMcpProtocolServer(\n  appServer: McpAppServer,\n  options: McpProtocolServerOptions = {},\n): Server {\n  const server = new Server(appServer.serverInfo, {\n    capabilities: { tools: {} },\n  });\n\n  server.setRequestHandler('tools/list', async (_request, context) => ({\n    tools: (await appServer.listTools({\n      principal: await resolvePrincipal(options.principal, context),\n    })) as Tool[],\n  }));\n\n  server.setRequestHandler('tools/call', async (request, context) => {\n    try {\n      return (await appServer.callTool({\n        name: request.params.name,\n        arguments: request.params.arguments,\n        principal: await resolvePrincipal(options.principal, context),\n      })) as CallToolResult;\n    } catch (error) {\n      if (error instanceof McpAccessError) {\n        const { code, retryable } = error.metadata;\n        throw new ProtocolError(\n          error.status === 404\n            ? ProtocolErrorCode.InvalidParams\n            : ProtocolErrorCode.InvalidRequest,\n          error.message,\n          {\n            ...(typeof code === 'string' ? { code } : {}),\n            ...(typeof retryable === 'boolean' ? { retryable } : {}),\n          },\n        );\n      }\n      throw error;\n    }\n  });\n\n  return server;\n}\n","/**\n * Tool-name policy helpers — used by `McpAppServer` to filter the full set\n * of generated tools down to what the calling principal is allowed to see,\n * and to decide whether an unauthenticated tool call should be permitted.\n *\n * @packageDocumentation\n */\n\n/**\n * Match a tool name against a glob-ish pattern with `*` wildcards.\n *\n * - Empty pattern → never matches.\n * - `*` → matches everything.\n * - `prefix_*` → matches anything starting with `prefix_`.\n * - `*_suffix` → matches anything ending with `_suffix`.\n * - `a_*_b` → matches any name containing `a_`, then any text, then `_b`.\n *\n * No regex characters are special besides `*` — the input is treated as a\n * literal string with star wildcards.\n */\nexport function matchesToolPattern(toolName: string, pattern: string): boolean {\n  if (!pattern) return false;\n  if (pattern === '*') return true;\n\n  const parts = pattern.split('*');\n  if (parts.length === 1) return toolName === pattern;\n\n  let cursor = 0;\n  if (parts[0] && !toolName.startsWith(parts[0])) return false;\n  for (const part of parts) {\n    if (!part) continue;\n    const index = toolName.indexOf(part, cursor);\n    if (index < 0) return false;\n    cursor = index + part.length;\n  }\n\n  const last = parts.at(-1);\n  return !last || toolName.endsWith(last);\n}\n\n/**\n * Read-only tool detection. Generated SMRT MCP tools follow the naming\n * convention `<class>_<verb>`; we treat `_list` and `_get` as read-only.\n */\nexport function isReadOnlyToolName(toolName: string): boolean {\n  return toolName.endsWith('_list') || toolName.endsWith('_get');\n}\n\n/**\n * Check whether a tool name is currently allowed for unauthenticated callers\n * given the configured public-tool patterns. Only read-only tools may ever\n * be public, regardless of pattern.\n */\nexport function isPublicToolName(\n  toolName: string,\n  patterns: readonly string[],\n): boolean {\n  return (\n    isReadOnlyToolName(toolName) &&\n    patterns.some((pattern) => matchesToolPattern(toolName, pattern))\n  );\n}\n\n/**\n * Lower-case `<class>_` prefixes the app considers \"allowed core tools\"\n * given a list of SMRT class names. Used to build the allow-list for\n * `McpAppServer.listTools`.\n */\nexport function classNamePrefixes(\n  classNames: readonly string[],\n): ReadonlySet<string> {\n  return new Set(classNames.map((className) => `${className.toLowerCase()}_`));\n}\n\n/**\n * Whether a given tool name starts with any of the configured class\n * prefixes.\n */\nexport function isAllowedCoreTool(\n  toolName: string,\n  prefixes: ReadonlySet<string>,\n): boolean {\n  for (const prefix of prefixes) {\n    if (toolName.startsWith(prefix)) return true;\n  }\n  return false;\n}\n","/**\n * `createMcpAppServer` returns the framework-agnostic core that backs an\n * app's HTTP MCP endpoints and stdio bridge. It wraps `MCPGenerator` from\n * `@happyvertical/smrt-core` with:\n *\n *  - an allow-list of SMRT class names (so apps publish a subset of their\n *    objects, not everything decorated with `@smrt()`),\n *  - a public-tool policy for unauthenticated callers (read-only patterns\n *    via `publicToolPatterns`),\n *  - an optional principal-aware `toolPolicy`, used for both discovery and\n *    direct calls,\n *  - a pluggable `workflowAssertions` hook so apps can guard their own\n *    domain-specific tool calls (e.g. \"approval requires an authenticated\n *    user\") without that policy living in this package.\n *\n * @packageDocumentation\n */\n\nimport type {\n  MCPConfig,\n  MCPResponse,\n  MCPTool,\n} from '@happyvertical/smrt-core/generators/mcp';\nimport { MCPGenerator } from '@happyvertical/smrt-core/generators/mcp';\nimport { MCP_TOOL_ACCESS_DENIED_CODE, McpAccessError } from './errors.js';\nimport {\n  classNamePrefixes,\n  isAllowedCoreTool,\n  isPublicToolName,\n} from './tools.js';\n\n/**\n * Generic authenticated caller information available to app-MCP policy.\n *\n * `kind`, `roles`, and `scopes` are deliberately unconstrained so an app can\n * represent a human or a scoped service without this package encoding an\n * application's identity or capability model. A missing principal means the\n * request is unauthenticated.\n */\nexport interface McpAppPrincipal {\n  id?: string;\n  kind?: string;\n  roles?: string[];\n  scopes?: string[];\n}\n\n/** Minimal legacy user shape used for generated tool-call attribution. */\nexport interface McpAppUser extends McpAppPrincipal {\n  id: string;\n}\n\n/** Context supplied to the optional per-tool principal policy. */\nexport interface McpToolPolicyContext {\n  principal: McpAppPrincipal | null;\n  tool: MCPTool;\n}\n\n/**\n * Per-tool access policy. Return `true` to expose/allow the tool and `false`\n * to hide it from discovery and deny a direct call. A thrown error is treated\n * as a denial so policy implementation details cannot escape the app-MCP\n * boundary.\n */\nexport type McpToolPolicy = (\n  context: McpToolPolicyContext,\n) => boolean | Promise<boolean>;\n\n/**\n * Workflow assertion hook signature. Throw `McpAccessError` to reject the\n * call. Implementations may mutate `args` in place to inject server-trusted\n * fields (e.g. clamping `approvedByUserId` to the authenticated user's id).\n */\nexport type McpWorkflowAssertion = (\n  args: Record<string, unknown>,\n  user: McpAppUser | null,\n) => void;\n\n/**\n * SMRT options thunk — returns the `{ db }` (and similar) bag to pass into\n * MCPGenerator's per-request context. A function is used so apps can lazily\n * resolve env vars at call time.\n */\nexport type McpSmrtOptionsThunk = () => Record<string, unknown>;\n\n/** Public-tool patterns thunk — same lazy-evaluation rationale. */\nexport type McpPublicToolPatternsThunk = () => readonly string[];\n\n/**\n * Options for `createMcpAppServer`.\n */\nexport interface CreateMcpAppServerOptions {\n  /** SMRT context bag (db, etc.) passed to MCPGenerator per call. */\n  smrtOptions: McpSmrtOptionsThunk;\n  /** Server identity surfaced in the MCP protocol. */\n  serverInfo: Required<Pick<MCPConfig, 'name' | 'version'>> &\n    Pick<MCPConfig, 'description'>;\n  /**\n   * SMRT class names the app wants to publish. Tools whose name does not\n   * start with any of these classes (lowercased + underscore) are filtered\n   * out, even if SMRT generated them.\n   */\n  allowedClassNames: readonly string[];\n  /**\n   * Optional thunk returning glob-ish patterns for read-only tools that\n   * unauthenticated callers are allowed to use. Defaults to an empty list\n   * (everything requires auth).\n   */\n  publicToolPatterns?: McpPublicToolPatternsThunk;\n  /**\n   * Optional generic principal-aware tool policy. It is evaluated for every\n   * tool that passes the app allow-list and base public/authenticated policy,\n   * for both discovery and a direct call.\n   */\n  toolPolicy?: McpToolPolicy;\n  /**\n   * Optional per-tool guards. Keyed by tool name. The assertion runs after\n   * tool resolution and before `MCPGenerator.handleToolCall`; throwing\n   * `McpAccessError` aborts the call with the error's status. Implementations\n   * may mutate `args` to inject trusted fields.\n   */\n  workflowAssertions?: Record<string, McpWorkflowAssertion>;\n}\n\n/** Tool listing inputs. */\nexport interface ListToolsInput {\n  /** Caller used for public/authenticated and optional tool-policy checks. */\n  principal?: McpAppPrincipal | null;\n  /**\n   * Backwards-compatible authenticated marker. New mounts should pass\n   * `principal` so discovery and direct calls use the same identity.\n   */\n  authenticated?: boolean;\n}\n\n/** Tool call inputs. */\nexport interface CallToolInput {\n  name: string;\n  arguments?: Record<string, unknown>;\n  /** Caller used for public/authenticated and optional tool-policy checks. */\n  principal?: McpAppPrincipal | null;\n  /**\n   * Backwards-compatible user input. New callers should pass `principal`.\n   * Null/undefined means unauthenticated.\n   */\n  user?: McpAppUser | null;\n}\n\n/** Shape returned by `createMcpAppServer`. */\nexport interface McpAppServer {\n  listTools(input: ListToolsInput): Promise<MCPTool[]>;\n  callTool(input: CallToolInput): Promise<MCPResponse>;\n  /** Read-only view of the configured server identity. */\n  readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];\n}\n\n/**\n * Build the app-runtime MCP server core. The returned object is intentionally\n * framework-agnostic: HTTP wrappers live in `@happyvertical/smrt-app-mcp/sveltekit`\n * and a stdio bridge lives in `@happyvertical/smrt-app-mcp/bin/smrt-mcp-bridge`.\n */\nexport function createMcpAppServer(\n  options: CreateMcpAppServerOptions,\n): McpAppServer {\n  const allowedPrefixes = classNamePrefixes(options.allowedClassNames);\n  const getPublicPatterns =\n    options.publicToolPatterns ?? ((): readonly string[] => []);\n  const toolPolicy = options.toolPolicy;\n  const workflowAssertions = options.workflowAssertions ?? {};\n\n  function userForGenerator(\n    principal?: McpAppPrincipal | null,\n  ): McpAppUser | undefined {\n    if (!principal?.id) return undefined;\n    return { id: principal.id, roles: principal.roles };\n  }\n\n  function makeGenerator(principal?: McpAppPrincipal | null): MCPGenerator {\n    const user = userForGenerator(principal);\n    return new MCPGenerator(options.serverInfo as MCPConfig, {\n      ...options.smrtOptions(),\n      user,\n    });\n  }\n\n  function principalForList(input: ListToolsInput): McpAppPrincipal | null {\n    if (input.principal !== undefined) return input.principal;\n    // Preserve callers of the original boolean API without inventing an id.\n    return input.authenticated ? {} : null;\n  }\n\n  function principalForCall(input: CallToolInput): McpAppPrincipal | null {\n    if (input.principal !== undefined) return input.principal;\n    return input.user ?? null;\n  }\n\n  async function allowedTools(): Promise<MCPTool[]> {\n    const tools = await makeGenerator().generateTools();\n    return tools.filter((tool) =>\n      isAllowedCoreTool(tool.name, allowedPrefixes),\n    );\n  }\n\n  function passesBasePolicy(\n    tool: MCPTool,\n    principal: McpAppPrincipal | null,\n    publicPatterns?: readonly string[],\n  ): boolean {\n    if (principal) return true;\n    return isPublicToolName(tool.name, publicPatterns ?? []);\n  }\n\n  async function passesToolPolicy(\n    tool: MCPTool,\n    principal: McpAppPrincipal | null,\n  ): Promise<boolean> {\n    if (!toolPolicy) return true;\n    try {\n      return Boolean(await toolPolicy({ principal, tool }));\n    } catch {\n      // A policy failure must fail closed and never leak implementation detail.\n      return false;\n    }\n  }\n\n  async function listTools(input: ListToolsInput): Promise<MCPTool[]> {\n    const principal = principalForList(input);\n    const tools = await allowedTools();\n    // Keep the lazy thunk per request, not per tool. Besides avoiding repeated\n    // work, this gives one consistent public surface when a thunk reads a\n    // dynamic source such as an environment-backed configuration.\n    const publicPatterns = principal ? undefined : getPublicPatterns();\n    const visible = await Promise.all(\n      tools.map(async (tool) => {\n        if (!passesBasePolicy(tool, principal, publicPatterns)) return false;\n        return passesToolPolicy(tool, principal);\n      }),\n    );\n    return tools.filter((_, index) => visible[index]);\n  }\n\n  async function callTool(input: CallToolInput): Promise<MCPResponse> {\n    const args = input.arguments ?? {};\n    const principal = principalForCall(input);\n    const tools = await allowedTools();\n    const tool = tools.find((candidate) => candidate.name === input.name);\n    if (!tool) {\n      throw new McpAccessError(404, `Unknown MCP tool: ${input.name}`);\n    }\n\n    const publicPatterns = principal ? undefined : getPublicPatterns();\n    if (!passesBasePolicy(tool, principal, publicPatterns)) {\n      throw new McpAccessError(\n        401,\n        `Authentication is required for MCP tool: ${input.name}`,\n      );\n    }\n\n    if (!(await passesToolPolicy(tool, principal))) {\n      throw new McpAccessError(403, 'MCP tool access is not permitted.', {\n        code: MCP_TOOL_ACCESS_DENIED_CODE,\n        retryable: false,\n      });\n    }\n\n    const assertion = workflowAssertions[input.name];\n    if (assertion) {\n      assertion(args, userForGenerator(principal) ?? null);\n    }\n\n    return makeGenerator(principal).handleToolCall({\n      method: 'tools/call',\n      params: { arguments: args, name: input.name },\n    });\n  }\n\n  return {\n    listTools,\n    callTool,\n    serverInfo: options.serverInfo,\n  };\n}\n"],"mappings":";;;;AAsBA,eAAe,iBACb,QACA,SACiC;CACjC,IAAI,OAAO,WAAW,YAAY,OAAQ,MAAM,OAAO,OAAO,KAAM;CACpE,OAAO,UAAU;AACnB;AASO,SAAS,wBACd,WACA,UAAoC,CAAC,GAC7B;CACR,MAAM,SAAS,IAAI,OAAO,UAAU,YAAY,EAC9C,cAAc,EAAE,OAAO,CAAC,EAAE,EAC5B,CAAC;CAED,OAAO,kBAAkB,cAAc,OAAO,UAAU,aAAa,EACnE,OAAQ,MAAM,UAAU,UAAU,EAChC,WAAW,MAAM,iBAAiB,QAAQ,WAAW,OAAO,EAC9D,CAAC,EACH,EAAE;CAEF,OAAO,kBAAkB,cAAc,OAAO,SAAS,YAAY;EACjE,IAAI;GACF,OAAQ,MAAM,UAAU,SAAS;IAC/B,MAAM,QAAQ,OAAO;IACrB,WAAW,QAAQ,OAAO;IAC1B,WAAW,MAAM,iBAAiB,QAAQ,WAAW,OAAO;GAC9D,CAAC;EACH,SAAS,OAAO;GACd,IAAI,iBAAiB,gBAAgB;IACnC,MAAM,EAAE,MAAM,cAAc,MAAM;IAClC,MAAM,IAAI,cACR,MAAM,WAAW,MACb,kBAAkB,gBAClB,kBAAkB,gBACtB,MAAM,SACN;KACE,GAAI,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,CAAC;KAC3C,GAAI,OAAO,cAAc,YAAY,EAAE,UAAU,IAAI,CAAC;IACxD,CACF;GACF;GACA,MAAM;EACR;CACF,CAAC;CAED,OAAO;AACT;;;ACzDO,SAAS,mBAAmB,UAAkB,SAA0B;CAC7E,IAAI,CAAC,SAAS,OAAO;CACrB,IAAI,YAAY,KAAK,OAAO;CAE5B,MAAM,QAAQ,QAAQ,MAAM,GAAG;CAC/B,IAAI,MAAM,WAAW,GAAG,OAAO,aAAa;CAE5C,IAAI,SAAS;CACb,IAAI,MAAM,MAAM,CAAC,SAAS,WAAW,MAAM,EAAE,GAAG,OAAO;CACvD,KAAA,MAAW,QAAQ,OAAO;EACxB,IAAI,CAAC,MAAM;EACX,MAAM,QAAQ,SAAS,QAAQ,MAAM,MAAM;EAC3C,IAAI,QAAQ,GAAG,OAAO;EACtB,SAAS,QAAQ,KAAK;CACxB;CAEA,MAAM,OAAO,MAAM,GAAG,EAAE;CACxB,OAAO,CAAC,QAAQ,SAAS,SAAS,IAAI;AACxC;AAMO,SAAS,mBAAmB,UAA2B;CAC5D,OAAO,SAAS,SAAS,OAAO,KAAK,SAAS,SAAS,MAAM;AAC/D;AAOO,SAAS,iBACd,UACA,UACS;CACT,OACE,mBAAmB,QAAQ,KAC3B,SAAS,MAAM,YAAY,mBAAmB,UAAU,OAAO,CAAC;AAEpE;AAOO,SAAS,kBACd,YACqB;CACrB,OAAO,IAAI,IAAI,WAAW,KAAK,cAAc,GAAG,UAAU,YAAY,EAAC,EAAG,CAAC;AAC7E;AAMO,SAAS,kBACd,UACA,UACS;CACT,KAAA,MAAW,UAAU,UACnB,IAAI,SAAS,WAAW,MAAM,GAAG,OAAO;CAE1C,OAAO;AACT;;;AC0EO,SAAS,mBACd,SACc;CACd,MAAM,kBAAkB,kBAAkB,QAAQ,iBAAiB;CACnE,MAAM,oBACJ,QAAQ,6BAAgD,CAAC;CAC3D,MAAM,aAAa,QAAQ;CAC3B,MAAM,qBAAqB,QAAQ,sBAAsB,CAAC;CAE1D,SAAS,iBACP,WACwB;EACxB,IAAI,CAAC,WAAW,IAAI,OAAO,KAAA;EAC3B,OAAO;GAAE,IAAI,UAAU;GAAI,OAAO,UAAU;EAAM;CACpD;CAEA,SAAS,cAAc,WAAkD;EACvE,MAAM,OAAO,iBAAiB,SAAS;EACvC,OAAO,IAAI,aAAa,QAAQ,YAAyB;GACvD,GAAG,QAAQ,YAAY;GACvB;EACF,CAAC;CACH;CAEA,SAAS,iBAAiB,OAA+C;EACvE,IAAI,MAAM,cAAc,KAAA,GAAW,OAAO,MAAM;EAEhD,OAAO,MAAM,gBAAgB,CAAC,IAAI;CACpC;CAEA,SAAS,iBAAiB,OAA8C;EACtE,IAAI,MAAM,cAAc,KAAA,GAAW,OAAO,MAAM;EAChD,OAAO,MAAM,QAAQ;CACvB;CAEA,eAAe,eAAmC;EAEhD,QAAO,MADa,cAAc,CAAA,CAAE,cAAc,EAAA,CACrC,QAAQ,SACnB,kBAAkB,KAAK,MAAM,eAAe,CAC9C;CACF;CAEA,SAAS,iBACP,MACA,WACA,gBACS;EACT,IAAI,WAAW,OAAO;EACtB,OAAO,iBAAiB,KAAK,MAAM,kBAAkB,CAAC,CAAC;CACzD;CAEA,eAAe,iBACb,MACA,WACkB;EAClB,IAAI,CAAC,YAAY,OAAO;EACxB,IAAI;GACF,OAAO,QAAQ,MAAM,WAAW;IAAE;IAAW;GAAK,CAAC,CAAC;EACtD,QAAQ;GAEN,OAAO;EACT;CACF;CAEA,eAAe,UAAU,OAA2C;EAClE,MAAM,YAAY,iBAAiB,KAAK;EACxC,MAAM,QAAQ,MAAM,aAAa;EAIjC,MAAM,iBAAiB,YAAY,KAAA,IAAY,kBAAkB;EACjE,MAAM,UAAU,MAAM,QAAQ,IAC5B,MAAM,IAAI,OAAO,SAAS;GACxB,IAAI,CAAC,iBAAiB,MAAM,WAAW,cAAc,GAAG,OAAO;GAC/D,OAAO,iBAAiB,MAAM,SAAS;EACzC,CAAC,CACH;EACA,OAAO,MAAM,QAAQ,GAAG,UAAU,QAAQ,MAAM;CAClD;CAEA,eAAe,SAAS,OAA4C;EAClE,MAAM,OAAO,MAAM,aAAa,CAAC;EACjC,MAAM,YAAY,iBAAiB,KAAK;EAExC,MAAM,QAAO,MADO,aAAa,EAAA,CACd,MAAM,cAAc,UAAU,SAAS,MAAM,IAAI;EACpE,IAAI,CAAC,MACH,MAAM,IAAI,eAAe,KAAK,qBAAqB,MAAM,MAAM;EAIjE,IAAI,CAAC,iBAAiB,MAAM,WADL,YAAY,KAAA,IAAY,kBAAkB,CACZ,GACnD,MAAM,IAAI,eACR,KACA,4CAA4C,MAAM,MACpD;EAGF,IAAI,CAAE,MAAM,iBAAiB,MAAM,SAAS,GAC1C,MAAM,IAAI,eAAe,KAAK,qCAAqC;GACjE,MAAM;GACN,WAAW;EACb,CAAC;EAGH,MAAM,YAAY,mBAAmB,MAAM;EAC3C,IAAI,WACF,UAAU,MAAM,iBAAiB,SAAS,KAAK,IAAI;EAGrD,OAAO,cAAc,SAAS,CAAA,CAAE,eAAe;GAC7C,QAAQ;GACR,QAAQ;IAAE,WAAW;IAAM,MAAM,MAAM;GAAK;EAC9C,CAAC;CACH;CAEA,OAAO;EACL;EACA;EACA,YAAY,QAAQ;CACtB;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/server.ts"],"sourcesContent":["/**\n * `createMcpAppServer` returns the framework-agnostic core that backs an\n * app's HTTP MCP endpoints and stdio bridge. It wraps `MCPGenerator` from\n * `@happyvertical/smrt-core` with:\n *\n *  - an allow-list of SMRT class names (so apps publish a subset of their\n *    objects, not everything decorated with `@smrt()`),\n *  - a public-tool policy for unauthenticated callers (read-only patterns\n *    via `publicToolPatterns`),\n *  - an optional principal-aware `toolPolicy`, used for both discovery and\n *    direct calls,\n *  - a pluggable `workflowAssertions` hook so apps can guard their own\n *    domain-specific tool calls (e.g. \"approval requires an authenticated\n *    user\") without that policy living in this package.\n *\n * @packageDocumentation\n */\n\nimport {\n  isTenantScopedClassResolved,\n  ObjectRegistry,\n} from '@happyvertical/smrt-core';\nimport type {\n  MCPConfig,\n  MCPResponse,\n  MCPTool,\n} from '@happyvertical/smrt-core/generators/mcp';\nimport {\n  MCP_STABLE_CATALOG_TTL_MS,\n  MCPGenerator,\n} from '@happyvertical/smrt-core/generators/mcp';\nimport {\n  type McpTask,\n  McpTaskNotFoundError,\n  McpTaskStore,\n} from '@happyvertical/smrt-jobs';\nimport type { DatabaseInterface } from '@happyvertical/sql';\nimport { MCP_TOOL_ACCESS_DENIED_CODE, McpAccessError } from './errors.js';\nimport {\n  classNamePrefixes,\n  compareMcpToolNames,\n  isAllowedCoreTool,\n  isPublicToolName,\n} from './tools.js';\n\n/**\n * Generic authenticated caller information available to app-MCP policy.\n *\n * `kind`, `roles`, and `scopes` are deliberately unconstrained so an app can\n * represent a human or a scoped service without this package encoding an\n * application's identity or capability model. A missing principal means the\n * request is unauthenticated.\n */\nexport interface McpAppPrincipal {\n  id?: string;\n  /** Tenant boundary for task ownership and generated tenant-scoped actions. */\n  tenantId?: string;\n  /** Trusted operator override for generated tenant-scoped actions. */\n  allowCrossTenant?: boolean;\n  kind?: string;\n  roles?: string[];\n  scopes?: string[];\n}\n\n/** Minimal legacy user shape used for generated tool-call attribution. */\nexport interface McpAppUser extends McpAppPrincipal {\n  id: string;\n}\n\n/** Context supplied to the optional per-tool principal policy. */\nexport interface McpToolPolicyContext {\n  principal: McpAppPrincipal | null;\n  tool: MCPTool;\n}\n\n/**\n * Per-tool access policy. Return `true` to expose/allow the tool and `false`\n * to hide it from discovery and deny a direct call. A thrown error is treated\n * as a denial so policy implementation details cannot escape the app-MCP\n * boundary.\n */\nexport type McpToolPolicy = (\n  context: McpToolPolicyContext,\n) => boolean | Promise<boolean>;\n\n/**\n * Workflow assertion hook signature. Throw `McpAccessError` to reject the\n * call. Implementations may mutate `args` in place to inject server-trusted\n * fields (e.g. clamping `approvedByUserId` to the authenticated user's id).\n */\nexport type McpWorkflowAssertion = (\n  args: Record<string, unknown>,\n  user: McpAppUser | null,\n) => void;\n\n/**\n * SMRT options thunk — returns the `{ db }` (and similar) bag to pass into\n * MCPGenerator's per-request context. A function is used so apps can lazily\n * resolve env vars at call time.\n */\nexport type McpSmrtOptionsThunk = () => Record<string, unknown>;\n\n/** Public-tool patterns thunk — same lazy-evaluation rationale. */\nexport type McpPublicToolPatternsThunk = () => readonly string[];\n\nexport interface McpToolListCacheHint {\n  ttlMs: number;\n  cacheScope: 'private' | 'public';\n}\n\nexport interface McpToolListCacheOptions {\n  /** Cache lifetime in milliseconds. Defaults to one day for a deploy-static catalog. */\n  ttlMs?: number;\n  /** Requested cache visibility. Defaults to private. */\n  cacheScope?: 'private' | 'public';\n  /**\n   * Explicit attestation that every allowed tool is global, unauthenticated,\n   * and safe to share through an intermediary cache.\n   */\n  publicCatalog?: true;\n}\n\n/**\n * Options for `createMcpAppServer`.\n */\nexport interface CreateMcpAppServerOptions {\n  /** SMRT context bag (db, etc.) passed to MCPGenerator per call. */\n  smrtOptions: McpSmrtOptionsThunk;\n  /** Server identity surfaced in the MCP protocol. */\n  serverInfo: Required<Pick<MCPConfig, 'name' | 'version'>> &\n    Pick<MCPConfig, 'description'>;\n  /**\n   * SMRT class names the app wants to publish. Tools whose name does not\n   * start with any of these classes (lowercased + underscore) are filtered\n   * out, even if SMRT generated them.\n   */\n  allowedClassNames: readonly string[];\n  /**\n   * Optional thunk returning glob-ish patterns for read-only tools that\n   * unauthenticated callers are allowed to use. Defaults to an empty list\n   * (everything requires auth).\n   */\n  publicToolPatterns?: McpPublicToolPatternsThunk;\n  /**\n   * Cache policy for the MCP tools/list result. Public caching is honored only\n   * when this explicitly opts in and every allowed tool is a non-tenant,\n   * unauthenticated read-only tool with no principal-aware policy.\n   */\n  toolListCache?: McpToolListCacheOptions;\n  /**\n   * Optional generic principal-aware tool policy. It is evaluated for every\n   * tool that passes the app allow-list and base public/authenticated policy,\n   * for both discovery and a direct call.\n   */\n  toolPolicy?: McpToolPolicy;\n  /**\n   * Optional per-tool guards. Keyed by tool name. The assertion runs after\n   * tool resolution and before `MCPGenerator.handleToolCall`; throwing\n   * `McpAccessError` aborts the call with the error's status. Implementations\n   * may mutate `args` to inject trusted fields.\n   */\n  workflowAssertions?: Record<string, McpWorkflowAssertion>;\n}\n\n/** Tool listing inputs. */\nexport interface ListToolsInput {\n  /** Caller used for public/authenticated and optional tool-policy checks. */\n  principal?: McpAppPrincipal | null;\n  /**\n   * Backwards-compatible authenticated marker. New mounts should pass\n   * `principal` so discovery and direct calls use the same identity.\n   */\n  authenticated?: boolean;\n}\n\n/** Tool call inputs. */\nexport interface CallToolInput {\n  name: string;\n  arguments?: Record<string, unknown>;\n  /** Caller used for public/authenticated and optional tool-policy checks. */\n  principal?: McpAppPrincipal | null;\n  /**\n   * Backwards-compatible user input. New callers should pass `principal`.\n   * Null/undefined means unauthenticated.\n   */\n  user?: McpAppUser | null;\n}\n\n/** Shape returned by `createMcpAppServer`. */\nexport interface McpAppServer {\n  listTools(input: ListToolsInput): Promise<MCPTool[]>;\n  callTool(input: CallToolInput): Promise<MCPResponse>;\n  /** Whether this app has any explicitly enabled Tasks extension action. */\n  hasTaskSupport?(): Promise<boolean>;\n  /** Whether a particular visible tool is task-enabled. */\n  isTaskTool?(name: string): Promise<boolean>;\n  /** Static declaration used by the protocol discovery capability surface. */\n  readonly tasksEnabled?: boolean;\n  /** Create a durable task after applying the same tool policy as tools/call. */\n  callTask?(input: CallToolInput): Promise<MCPResponse>;\n  /** Principal-scoped task lifecycle operations. */\n  getTask?(input: {\n    taskId: string;\n    principal?: McpAppPrincipal | null;\n  }): Promise<McpTask>;\n  updateTask?(input: {\n    taskId: string;\n    inputResponses: Record<string, unknown>;\n    principal?: McpAppPrincipal | null;\n  }): Promise<void>;\n  cancelTask?(input: {\n    taskId: string;\n    principal?: McpAppPrincipal | null;\n  }): Promise<void>;\n  /** Cache policy for protocol tools/list responses. */\n  getToolsListCacheHint?(): Promise<McpToolListCacheHint>;\n  /** Read-only view of the configured server identity. */\n  readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];\n}\n\nfunction configuredToolListCacheHint(\n  options: McpToolListCacheOptions | undefined,\n): McpToolListCacheHint {\n  const ttlMs = options?.ttlMs ?? MCP_STABLE_CATALOG_TTL_MS;\n  if (!Number.isSafeInteger(ttlMs) || ttlMs < 0) {\n    throw new RangeError(\n      'MCP tools/list cache ttlMs must be a non-negative safe integer.',\n    );\n  }\n  if (\n    options?.cacheScope !== undefined &&\n    options.cacheScope !== 'private' &&\n    options.cacheScope !== 'public'\n  ) {\n    throw new RangeError(\n      \"MCP tools/list cacheScope must be 'private' or 'public'.\",\n    );\n  }\n  return {\n    ttlMs,\n    cacheScope:\n      options?.cacheScope === 'public' && options.publicCatalog === true\n        ? 'public'\n        : 'private',\n  };\n}\n\nfunction isTenantScopedTool(tool: MCPTool): boolean {\n  const separator = tool.name.indexOf('_');\n  if (separator <= 0) return false;\n  const objectName = tool.name.slice(0, separator).toLowerCase();\n  for (const [key, classInfo] of ObjectRegistry.getAllClasses()) {\n    const name = classInfo.name || key;\n    if (name.toLowerCase() === objectName) {\n      return (\n        ObjectRegistry.isTenantScoped(name) || isTenantScopedClassResolved(name)\n      );\n    }\n  }\n  return false;\n}\n\n/**\n * Scope task lookup to both the authenticated principal and its tenant. The\n * opaque value is stored in the existing job row, so no separate task table\n * can accidentally bypass a tenant boundary.\n */\nfunction taskOwnerIdFor(principal: McpAppPrincipal): string {\n  return JSON.stringify([principal.tenantId ?? null, principal.id]);\n}\n\n/**\n * Build the app-runtime MCP server core. The returned object is intentionally\n * framework-agnostic: HTTP wrappers live in `@happyvertical/smrt-app-mcp/sveltekit`\n * and a stdio bridge lives in `@happyvertical/smrt-app-mcp/bin/smrt-mcp-bridge`.\n */\nexport function createMcpAppServer(\n  options: CreateMcpAppServerOptions,\n): McpAppServer {\n  const allowedPrefixes = classNamePrefixes(options.allowedClassNames);\n  const getPublicPatterns =\n    options.publicToolPatterns ?? ((): readonly string[] => []);\n  const toolPolicy = options.toolPolicy;\n  const workflowAssertions = options.workflowAssertions ?? {};\n  const requestedToolListCacheHint = configuredToolListCacheHint(\n    options.toolListCache,\n  );\n  const tasksEnabled = options.allowedClassNames.some((className) => {\n    const mcp = ObjectRegistry.getConfig(className).mcp;\n    return (\n      typeof mcp === 'object' &&\n      (mcp.tasks === true || (Array.isArray(mcp.tasks) && mcp.tasks.length > 0))\n    );\n  });\n\n  function userForGenerator(\n    principal?: McpAppPrincipal | null,\n  ): McpAppUser | undefined {\n    if (!principal?.id) return undefined;\n    return { id: principal.id, roles: principal.roles };\n  }\n\n  async function taskStoreFor(\n    principal?: McpAppPrincipal | null,\n  ): Promise<McpTaskStore> {\n    if (!principal?.id) {\n      throw new McpAccessError(\n        401,\n        'Authentication is required for MCP tasks.',\n      );\n    }\n    const db = options.smrtOptions().db as DatabaseInterface | undefined;\n    if (!db) {\n      throw new Error('MCP Tasks requires smrtOptions() to provide a database');\n    }\n    return McpTaskStore.create(db, { ownerId: taskOwnerIdFor(principal) });\n  }\n\n  function makeGenerator(\n    principal?: McpAppPrincipal | null,\n    taskStore?: McpTaskStore,\n  ): MCPGenerator {\n    const user = userForGenerator(principal);\n    return new MCPGenerator(options.serverInfo as MCPConfig, {\n      ...options.smrtOptions(),\n      user,\n      tenantId: principal?.tenantId,\n      allowCrossTenant: principal?.allowCrossTenant,\n      ...(taskStore ? { taskStore } : {}),\n    });\n  }\n\n  function principalForList(input: ListToolsInput): McpAppPrincipal | null {\n    if (input.principal !== undefined) return input.principal;\n    // Preserve callers of the original boolean API without inventing an id.\n    return input.authenticated ? {} : null;\n  }\n\n  function principalForCall(input: CallToolInput): McpAppPrincipal | null {\n    if (input.principal !== undefined) return input.principal;\n    return input.user ?? null;\n  }\n\n  async function allowedTools(): Promise<MCPTool[]> {\n    const tools = await makeGenerator().generateTools();\n    return tools\n      .filter((tool) =>\n        isAllowedCoreTool(tool.name.toLowerCase(), allowedPrefixes),\n      )\n      .sort((left, right) => compareMcpToolNames(left.name, right.name));\n  }\n\n  function passesBasePolicy(\n    tool: MCPTool,\n    principal: McpAppPrincipal | null,\n    publicPatterns?: readonly string[],\n  ): boolean {\n    if (principal) return true;\n    return isPublicToolName(tool.name, publicPatterns ?? []);\n  }\n\n  async function passesToolPolicy(\n    tool: MCPTool,\n    principal: McpAppPrincipal | null,\n  ): Promise<boolean> {\n    if (!toolPolicy) return true;\n    try {\n      return Boolean(await toolPolicy({ principal, tool }));\n    } catch {\n      // A policy failure must fail closed and never leak implementation detail.\n      return false;\n    }\n  }\n\n  async function listTools(input: ListToolsInput): Promise<MCPTool[]> {\n    const principal = principalForList(input);\n    const tools = await allowedTools();\n    // Keep the lazy thunk per request, not per tool. Besides avoiding repeated\n    // work, this gives one consistent public surface when a thunk reads a\n    // dynamic source such as an environment-backed configuration.\n    const publicPatterns = principal ? undefined : getPublicPatterns();\n    const visible = await Promise.all(\n      tools.map(async (tool) => {\n        if (!passesBasePolicy(tool, principal, publicPatterns)) return false;\n        return passesToolPolicy(tool, principal);\n      }),\n    );\n    return tools.filter((_, index) => visible[index]);\n  }\n\n  async function getToolsListCacheHint(): Promise<McpToolListCacheHint> {\n    if (requestedToolListCacheHint.cacheScope !== 'public') {\n      return requestedToolListCacheHint;\n    }\n\n    // A principal-aware policy can make one caller's catalog differ from\n    // another's. Likewise, tenant-scoped reads must never be shared across\n    // tenants. The requested public scope is therefore honored only for a\n    // complete, unauthenticated, non-tenant read-only catalog.\n    const tools = await allowedTools();\n    const publicPatterns = getPublicPatterns();\n    const isSafePublicCatalog =\n      !toolPolicy &&\n      tools.every(\n        (tool) =>\n          isPublicToolName(tool.name, publicPatterns) &&\n          !isTenantScopedTool(tool),\n      );\n\n    return isSafePublicCatalog\n      ? requestedToolListCacheHint\n      : { ...requestedToolListCacheHint, cacheScope: 'private' };\n  }\n\n  async function callTool(input: CallToolInput): Promise<MCPResponse> {\n    const args = input.arguments ?? {};\n    const principal = principalForCall(input);\n    const tools = await allowedTools();\n    const tool = tools.find((candidate) => candidate.name === input.name);\n    if (!tool) {\n      throw new McpAccessError(404, 'Unknown MCP tool.');\n    }\n\n    const publicPatterns = principal ? undefined : getPublicPatterns();\n    if (!passesBasePolicy(tool, principal, publicPatterns)) {\n      throw new McpAccessError(\n        401,\n        `Authentication is required for MCP tool: ${input.name}`,\n      );\n    }\n\n    if (!(await passesToolPolicy(tool, principal))) {\n      throw new McpAccessError(403, 'MCP tool access is not permitted.', {\n        code: MCP_TOOL_ACCESS_DENIED_CODE,\n        retryable: false,\n      });\n    }\n\n    const assertion = workflowAssertions[input.name];\n    if (assertion) {\n      assertion(args, userForGenerator(principal) ?? null);\n    }\n\n    return makeGenerator(principal).handleToolCall({\n      method: 'tools/call',\n      params: { arguments: args, name: input.name },\n    });\n  }\n\n  async function authorizeCall(input: CallToolInput): Promise<{\n    args: Record<string, unknown>;\n    principal: McpAppPrincipal | null;\n    tool: MCPTool;\n  }> {\n    const args = input.arguments ?? {};\n    const principal = principalForCall(input);\n    const tools = await allowedTools();\n    const tool = tools.find((candidate) => candidate.name === input.name);\n    if (!tool) throw new McpAccessError(404, 'Unknown MCP tool.');\n    const publicPatterns = principal ? undefined : getPublicPatterns();\n    if (!passesBasePolicy(tool, principal, publicPatterns)) {\n      throw new McpAccessError(\n        401,\n        `Authentication is required for MCP tool: ${input.name}`,\n      );\n    }\n    if (!(await passesToolPolicy(tool, principal))) {\n      throw new McpAccessError(403, 'MCP tool access is not permitted.', {\n        code: MCP_TOOL_ACCESS_DENIED_CODE,\n        retryable: false,\n      });\n    }\n    const assertion = workflowAssertions[input.name];\n    if (assertion) assertion(args, userForGenerator(principal) ?? null);\n    return { args, principal, tool };\n  }\n\n  async function hasTaskSupport(): Promise<boolean> {\n    const tools = await allowedTools();\n    const generator = makeGenerator();\n    for (const tool of tools) {\n      if (await generator.supportsTaskTool(tool.name)) return true;\n    }\n    return false;\n  }\n\n  async function isTaskTool(name: string): Promise<boolean> {\n    const tools = await allowedTools();\n    if (!tools.some((tool) => tool.name === name)) return false;\n    return makeGenerator().supportsTaskTool(name);\n  }\n\n  async function callTask(input: CallToolInput): Promise<MCPResponse> {\n    const { args, principal } = await authorizeCall(input);\n    const taskStore = await taskStoreFor(principal);\n    return makeGenerator(principal, taskStore).createTask({\n      method: 'tools/call',\n      params: { arguments: args, name: input.name },\n    });\n  }\n\n  async function withTaskStore<T>(\n    principal: McpAppPrincipal | null | undefined,\n    operation: (store: McpTaskStore) => Promise<T>,\n  ): Promise<T> {\n    try {\n      return await operation(await taskStoreFor(principal));\n    } catch (error) {\n      if (error instanceof McpTaskNotFoundError) {\n        throw new McpAccessError(404, 'Unknown MCP task.');\n      }\n      throw error;\n    }\n  }\n\n  async function getTask(input: {\n    taskId: string;\n    principal?: McpAppPrincipal | null;\n  }): Promise<McpTask> {\n    return withTaskStore(input.principal, (store) =>\n      store.getTask(input.taskId),\n    );\n  }\n\n  async function updateTask(input: {\n    taskId: string;\n    inputResponses: Record<string, unknown>;\n    principal?: McpAppPrincipal | null;\n  }): Promise<void> {\n    await withTaskStore(input.principal, (store) =>\n      store.updateTask(input.taskId, input.inputResponses),\n    );\n  }\n\n  async function cancelTask(input: {\n    taskId: string;\n    principal?: McpAppPrincipal | null;\n  }): Promise<void> {\n    await withTaskStore(input.principal, (store) =>\n      store.cancelTask(input.taskId),\n    );\n  }\n\n  return {\n    listTools,\n    callTool,\n    hasTaskSupport,\n    isTaskTool,\n    callTask,\n    getTask,\n    updateTask,\n    cancelTask,\n    tasksEnabled,\n    getToolsListCacheHint,\n    serverInfo: options.serverInfo,\n  };\n}\n"],"mappings":";;;;;AA4NA,SAAS,4BACP,SACsB;CACtB,MAAM,QAAQ,SAAS,SAAS;CAChC,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,GAC1C,MAAM,IAAI,WACR,iEACF;CAEF,IACE,SAAS,eAAe,KAAA,KACxB,QAAQ,eAAe,aACvB,QAAQ,eAAe,UAEvB,MAAM,IAAI,WACR,0DACF;CAEF,OAAO;EACL;EACA,YACE,SAAS,eAAe,YAAY,QAAQ,kBAAkB,OAC1D,WACA;CACR;AACF;AAEA,SAAS,mBAAmB,MAAwB;CAClD,MAAM,YAAY,KAAK,KAAK,QAAQ,GAAG;CACvC,IAAI,aAAa,GAAG,OAAO;CAC3B,MAAM,aAAa,KAAK,KAAK,MAAM,GAAG,SAAS,CAAA,CAAE,YAAY;CAC7D,KAAA,MAAW,CAAC,KAAK,cAAc,eAAe,cAAc,GAAG;EAC7D,MAAM,OAAO,UAAU,QAAQ;EAC/B,IAAI,KAAK,YAAY,MAAM,YACzB,OACE,eAAe,eAAe,IAAI,KAAK,4BAA4B,IAAI;CAG7E;CACA,OAAO;AACT;AAOA,SAAS,eAAe,WAAoC;CAC1D,OAAO,KAAK,UAAU,CAAC,UAAU,YAAY,MAAM,UAAU,EAAE,CAAC;AAClE;AAOO,SAAS,mBACd,SACc;CACd,MAAM,kBAAkB,kBAAkB,QAAQ,iBAAiB;CACnE,MAAM,oBACJ,QAAQ,6BAAgD,CAAC;CAC3D,MAAM,aAAa,QAAQ;CAC3B,MAAM,qBAAqB,QAAQ,sBAAsB,CAAC;CAC1D,MAAM,6BAA6B,4BACjC,QAAQ,aACV;CACA,MAAM,eAAe,QAAQ,kBAAkB,MAAM,cAAc;EACjE,MAAM,MAAM,eAAe,UAAU,SAAS,CAAA,CAAE;EAChD,OACE,OAAO,QAAQ,aACd,IAAI,UAAU,QAAS,MAAM,QAAQ,IAAI,KAAK,KAAK,IAAI,MAAM,SAAS;CAE3E,CAAC;CAED,SAAS,iBACP,WACwB;EACxB,IAAI,CAAC,WAAW,IAAI,OAAO,KAAA;EAC3B,OAAO;GAAE,IAAI,UAAU;GAAI,OAAO,UAAU;EAAM;CACpD;CAEA,eAAe,aACb,WACuB;EACvB,IAAI,CAAC,WAAW,IACd,MAAM,IAAI,eACR,KACA,2CACF;EAEF,MAAM,KAAK,QAAQ,YAAY,CAAA,CAAE;EACjC,IAAI,CAAC,IACH,MAAM,IAAI,MAAM,wDAAwD;EAE1E,OAAO,aAAa,OAAO,IAAI,EAAE,SAAS,eAAe,SAAS,EAAE,CAAC;CACvE;CAEA,SAAS,cACP,WACA,WACc;EACd,MAAM,OAAO,iBAAiB,SAAS;EACvC,OAAO,IAAI,aAAa,QAAQ,YAAyB;GACvD,GAAG,QAAQ,YAAY;GACvB;GACA,UAAU,WAAW;GACrB,kBAAkB,WAAW;GAC7B,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;EACnC,CAAC;CACH;CAEA,SAAS,iBAAiB,OAA+C;EACvE,IAAI,MAAM,cAAc,KAAA,GAAW,OAAO,MAAM;EAEhD,OAAO,MAAM,gBAAgB,CAAC,IAAI;CACpC;CAEA,SAAS,iBAAiB,OAA8C;EACtE,IAAI,MAAM,cAAc,KAAA,GAAW,OAAO,MAAM;EAChD,OAAO,MAAM,QAAQ;CACvB;CAEA,eAAe,eAAmC;EAEhD,QAAO,MADa,cAAc,CAAA,CAAE,cAAc,EAAA,CAE/C,QAAQ,SACP,kBAAkB,KAAK,KAAK,YAAY,GAAG,eAAe,CAC5D,CAAA,CACC,MAAM,MAAM,UAAU,oBAAoB,KAAK,MAAM,MAAM,IAAI,CAAC;CACrE;CAEA,SAAS,iBACP,MACA,WACA,gBACS;EACT,IAAI,WAAW,OAAO;EACtB,OAAO,iBAAiB,KAAK,MAAM,kBAAkB,CAAC,CAAC;CACzD;CAEA,eAAe,iBACb,MACA,WACkB;EAClB,IAAI,CAAC,YAAY,OAAO;EACxB,IAAI;GACF,OAAO,QAAQ,MAAM,WAAW;IAAE;IAAW;GAAK,CAAC,CAAC;EACtD,QAAQ;GAEN,OAAO;EACT;CACF;CAEA,eAAe,UAAU,OAA2C;EAClE,MAAM,YAAY,iBAAiB,KAAK;EACxC,MAAM,QAAQ,MAAM,aAAa;EAIjC,MAAM,iBAAiB,YAAY,KAAA,IAAY,kBAAkB;EACjE,MAAM,UAAU,MAAM,QAAQ,IAC5B,MAAM,IAAI,OAAO,SAAS;GACxB,IAAI,CAAC,iBAAiB,MAAM,WAAW,cAAc,GAAG,OAAO;GAC/D,OAAO,iBAAiB,MAAM,SAAS;EACzC,CAAC,CACH;EACA,OAAO,MAAM,QAAQ,GAAG,UAAU,QAAQ,MAAM;CAClD;CAEA,eAAe,wBAAuD;EACpE,IAAI,2BAA2B,eAAe,UAC5C,OAAO;EAOT,MAAM,QAAQ,MAAM,aAAa;EACjC,MAAM,iBAAiB,kBAAkB;EASzC,OAPE,CAAC,cACD,MAAM,OACH,SACC,iBAAiB,KAAK,MAAM,cAAc,KAC1C,CAAC,mBAAmB,IAAI,CAC5B,IAGE,6BACA;GAAE,GAAG;GAA4B,YAAY;EAAU;CAC7D;CAEA,eAAe,SAAS,OAA4C;EAClE,MAAM,OAAO,MAAM,aAAa,CAAC;EACjC,MAAM,YAAY,iBAAiB,KAAK;EAExC,MAAM,QAAO,MADO,aAAa,EAAA,CACd,MAAM,cAAc,UAAU,SAAS,MAAM,IAAI;EACpE,IAAI,CAAC,MACH,MAAM,IAAI,eAAe,KAAK,mBAAmB;EAInD,IAAI,CAAC,iBAAiB,MAAM,WADL,YAAY,KAAA,IAAY,kBAAkB,CACZ,GACnD,MAAM,IAAI,eACR,KACA,4CAA4C,MAAM,MACpD;EAGF,IAAI,CAAE,MAAM,iBAAiB,MAAM,SAAS,GAC1C,MAAM,IAAI,eAAe,KAAK,qCAAqC;GACjE,MAAM;GACN,WAAW;EACb,CAAC;EAGH,MAAM,YAAY,mBAAmB,MAAM;EAC3C,IAAI,WACF,UAAU,MAAM,iBAAiB,SAAS,KAAK,IAAI;EAGrD,OAAO,cAAc,SAAS,CAAA,CAAE,eAAe;GAC7C,QAAQ;GACR,QAAQ;IAAE,WAAW;IAAM,MAAM,MAAM;GAAK;EAC9C,CAAC;CACH;CAEA,eAAe,cAAc,OAI1B;EACD,MAAM,OAAO,MAAM,aAAa,CAAC;EACjC,MAAM,YAAY,iBAAiB,KAAK;EAExC,MAAM,QAAO,MADO,aAAa,EAAA,CACd,MAAM,cAAc,UAAU,SAAS,MAAM,IAAI;EACpE,IAAI,CAAC,MAAM,MAAM,IAAI,eAAe,KAAK,mBAAmB;EAE5D,IAAI,CAAC,iBAAiB,MAAM,WADL,YAAY,KAAA,IAAY,kBAAkB,CACZ,GACnD,MAAM,IAAI,eACR,KACA,4CAA4C,MAAM,MACpD;EAEF,IAAI,CAAE,MAAM,iBAAiB,MAAM,SAAS,GAC1C,MAAM,IAAI,eAAe,KAAK,qCAAqC;GACjE,MAAM;GACN,WAAW;EACb,CAAC;EAEH,MAAM,YAAY,mBAAmB,MAAM;EAC3C,IAAI,WAAW,UAAU,MAAM,iBAAiB,SAAS,KAAK,IAAI;EAClE,OAAO;GAAE;GAAM;GAAW;EAAK;CACjC;CAEA,eAAe,iBAAmC;EAChD,MAAM,QAAQ,MAAM,aAAa;EACjC,MAAM,YAAY,cAAc;EAChC,KAAA,MAAW,QAAQ,OACjB,IAAI,MAAM,UAAU,iBAAiB,KAAK,IAAI,GAAG,OAAO;EAE1D,OAAO;CACT;CAEA,eAAe,WAAW,MAAgC;EAExD,IAAI,EAAC,MADe,aAAa,EAAA,CACtB,MAAM,SAAS,KAAK,SAAS,IAAI,GAAG,OAAO;EACtD,OAAO,cAAc,CAAA,CAAE,iBAAiB,IAAI;CAC9C;CAEA,eAAe,SAAS,OAA4C;EAClE,MAAM,EAAE,MAAM,cAAc,MAAM,cAAc,KAAK;EAErD,OAAO,cAAc,WAAW,MADR,aAAa,SAAS,CACL,CAAA,CAAE,WAAW;GACpD,QAAQ;GACR,QAAQ;IAAE,WAAW;IAAM,MAAM,MAAM;GAAK;EAC9C,CAAC;CACH;CAEA,eAAe,cACb,WACA,WACY;EACZ,IAAI;GACF,OAAO,MAAM,UAAU,MAAM,aAAa,SAAS,CAAC;EACtD,SAAS,OAAO;GACd,IAAI,iBAAiB,sBACnB,MAAM,IAAI,eAAe,KAAK,mBAAmB;GAEnD,MAAM;EACR;CACF;CAEA,eAAe,QAAQ,OAGF;EACnB,OAAO,cAAc,MAAM,YAAY,UACrC,MAAM,QAAQ,MAAM,MAAM,CAC5B;CACF;CAEA,eAAe,WAAW,OAIR;EAChB,MAAM,cAAc,MAAM,YAAY,UACpC,MAAM,WAAW,MAAM,QAAQ,MAAM,cAAc,CACrD;CACF;CAEA,eAAe,WAAW,OAGR;EAChB,MAAM,cAAc,MAAM,YAAY,UACpC,MAAM,WAAW,MAAM,MAAM,CAC/B;CACF;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY,QAAQ;CACtB;AACF"}

package/dist/manifest.json

@@ -2,10 +2,11 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-app-mcp",
-  "packageVersion": "0.40.60",
+  "packageVersion": "0.40.62",
   "objects": {},
   "moduleType": "smrt",
   "smrtDependencies": [
-    "@happyvertical/smrt-core"
+    "@happyvertical/smrt-core",
+    "@happyvertical/smrt-jobs"
   ]
 }

package/dist/smrt-knowledge.json

@@ -2,12 +2,12 @@
   "schemaVersion": 1,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-app-mcp",
-  "packageVersion": "0.40.60",
+  "packageVersion": "0.40.62",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "98fe6f9633d2cb128908beedc694351ef37d538d1935147c21b48848ee4b640c",
-    "packageJson": "4f1731b2730f637cf051dcabca311ba3671e58bd11793b91b7f04279698c2f5a",
+    "manifest": "7b0a9d90c52e22dbb71c6448680fac49c00b58eb96c468d822e08403402c5464",
+    "packageJson": "adf8bad9c61b71023c06d1c244b4b15943132e7e0e80fd8a585c6b3a340b6704",
     "agents": "fd1dc36d1530f81aae49e6efa2e2f5011a8a62d30816f25649d4cb597fc5662a"
   },
   "exports": [
@@ -16,7 +16,10 @@
   ],
   "dependencies": {
     "@happyvertical/smrt-core": "workspace:*",
+    "@happyvertical/smrt-jobs": "workspace:*",
+    "@happyvertical/sql": "catalog:",
     "@modelcontextprotocol/server": "2.0.0",
+    "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/conformance": "0.2.0-alpha.10",
     "@modelcontextprotocol/node": "2.0.0",
     "@types/node": "24.13.2",
@@ -25,9 +28,12 @@
     "vitest": "4.1.10"
   },
   "smrtDependencies": [
-    "@happyvertical/smrt-core"
+    "@happyvertical/smrt-core",
+    "@happyvertical/smrt-jobs"
+  ],
+  "sdkDependencies": [
+    "@happyvertical/sql"
   ],
-  "sdkDependencies": [],
   "tags": [],
   "risks": [],
   "objects": [],

package/dist/sveltekit.d.ts

@@ -1,5 +1,6 @@
 import { MCPConfig } from '@happyvertical/smrt-core/generators/mcp';
 import { MCPResponse } from '@happyvertical/smrt-core/generators/mcp';
+import { McpTask } from '@happyvertical/smrt-jobs';
 import { MCPTool } from '@happyvertical/smrt-core/generators/mcp';
 
 /** Tool call inputs. */
@@ -35,6 +36,12 @@ declare interface CreateMcpAppServerOptions {
      * (everything requires auth).
      */
     publicToolPatterns?: McpPublicToolPatternsThunk;
+    /**
+     * Cache policy for the MCP tools/list result. Public caching is honored only
+     * when this explicitly opts in and every allowed tool is a non-tenant,
+     * unauthenticated read-only tool with no principal-aware policy.
+     */
+    toolListCache?: McpToolListCacheOptions;
     /**
      * Optional generic principal-aware tool policy. It is evaluated for every
      * tool that passes the app allow-list and base public/authenticated policy,
@@ -92,6 +99,10 @@ declare interface McpAccessErrorMetadata {
  */
 export declare interface McpAppPrincipal {
     id?: string;
+    /** Tenant boundary for task ownership and generated tenant-scoped actions. */
+    tenantId?: string;
+    /** Trusted operator override for generated tenant-scoped actions. */
+    allowCrossTenant?: boolean;
     kind?: string;
     roles?: string[];
     scopes?: string[];
@@ -101,6 +112,30 @@ export declare interface McpAppPrincipal {
 export declare interface McpAppServer {
     listTools(input: ListToolsInput): Promise<MCPTool[]>;
     callTool(input: CallToolInput): Promise<MCPResponse>;
+    /** Whether this app has any explicitly enabled Tasks extension action. */
+    hasTaskSupport?(): Promise<boolean>;
+    /** Whether a particular visible tool is task-enabled. */
+    isTaskTool?(name: string): Promise<boolean>;
+    /** Static declaration used by the protocol discovery capability surface. */
+    readonly tasksEnabled?: boolean;
+    /** Create a durable task after applying the same tool policy as tools/call. */
+    callTask?(input: CallToolInput): Promise<MCPResponse>;
+    /** Principal-scoped task lifecycle operations. */
+    getTask?(input: {
+        taskId: string;
+        principal?: McpAppPrincipal | null;
+    }): Promise<McpTask>;
+    updateTask?(input: {
+        taskId: string;
+        inputResponses: Record<string, unknown>;
+        principal?: McpAppPrincipal | null;
+    }): Promise<void>;
+    cancelTask?(input: {
+        taskId: string;
+        principal?: McpAppPrincipal | null;
+    }): Promise<void>;
+    /** Cache policy for protocol tools/list responses. */
+    getToolsListCacheHint?(): Promise<McpToolListCacheHint>;
     /** Read-only view of the configured server identity. */
     readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];
 }
@@ -123,6 +158,26 @@ declare type McpPublicToolPatternsThunk = () => readonly string[];
  */
 declare type McpSmrtOptionsThunk = () => Record<string, unknown>;
 
+/** A SvelteKit `+server.ts` request handler with no SvelteKit dependency. */
+export declare type McpSvelteKitHandler = (event: SvelteKitRequestEvent) => Promise<Response>;
+
+declare interface McpToolListCacheHint {
+    ttlMs: number;
+    cacheScope: 'private' | 'public';
+}
+
+declare interface McpToolListCacheOptions {
+    /** Cache lifetime in milliseconds. Defaults to one day for a deploy-static catalog. */
+    ttlMs?: number;
+    /** Requested cache visibility. Defaults to private. */
+    cacheScope?: 'private' | 'public';
+    /**
+     * Explicit attestation that every allowed tool is global, unauthenticated,
+     * and safe to share through an intermediary cache.
+     */
+    publicCatalog?: true;
+}
+
 /**
  * Per-tool access policy. Return `true` to expose/allow the tool and `false`
  * to hide it from discovery and deny a direct call. A thrown error is treated
@@ -150,8 +205,20 @@ declare type McpWorkflowAssertion = (args: Record<string, unknown>, user: McpApp
 /**
  * Mount `server.callTool` as a `POST` handler that expects
  * `{ name, arguments }` in the JSON body.
+ *
+ * @deprecated Use {@link mountMcpRoute}; retained for one release so existing
+ * REST-shaped mounts can migrate without a coordinated cutover.
  */
-export declare function mountMcpCallRoute(server: McpAppServer, options?: MountMcpRouteOptions): SvelteKitHandler;
+export declare function mountMcpCallRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
+
+/**
+ * Mount a modern, stateless Streamable HTTP MCP endpoint as a SvelteKit
+ * `POST` handler. The scoped SDK validates the 2026-07-28 envelope plus the
+ * required `Mcp-Method` and `Mcp-Name` headers, returning `-32020` on a
+ * mismatch. A fresh protocol server is created for each HTTP request, so this
+ * route holds neither MCP sessions nor request principal state between nodes.
+ */
+export declare function mountMcpRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
 
 /** Options shared by both route mounts. */
 export declare interface MountMcpRouteOptions {
@@ -174,10 +241,11 @@ export declare interface MountMcpRouteOptions {
 /**
  * Mount `server.listTools` as a `GET` handler. Returns the tool list shape
  * `{ tools }` for compatibility with the stock MCP bridge.
+ *
+ * @deprecated Use {@link mountMcpRoute}; retained for one release so existing
+ * REST-shaped mounts can migrate without a coordinated cutover.
  */
-export declare function mountMcpToolsRoute(server: McpAppServer, options?: MountMcpRouteOptions): SvelteKitHandler;
-
-declare type SvelteKitHandler = (event: SvelteKitRequestEvent) => Promise<Response>;
+export declare function mountMcpToolsRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
 
 /** Minimal subset of a SvelteKit RequestEvent we actually touch. */
 declare type SvelteKitRequestEvent = {

package/dist/sveltekit.js

@@ -1,4 +1,5 @@
-import { n as McpAccessError } from "./chunks/errors-CHYu0Vr2.js";
+import { n as createMcpProtocolServer, t as MCP_TASKS_EXTENSION, u as McpAccessError } from "./chunks/protocol-DoieND6v.js";
+import { classifyInboundRequest, createMcpHandler, isJsonContentType } from "@modelcontextprotocol/server";
 //#region src/sveltekit.ts
 var defaultResolvePrincipal = (event) => event.locals?.user ?? null;
 function resolveRequestPrincipal(event, options) {
@@ -16,6 +17,155 @@ function listToolsInput(resolved) {
 	if (!resolved.principal && resolved.legacyAuthenticated) return { authenticated: true };
 	return { principal: resolved.principal };
 }
+function protocolServerForRequest(server, resolved) {
+	if (!resolved.legacyAuthenticated || resolved.principal) return server;
+	return {
+		serverInfo: server.serverInfo,
+		listTools: () => server.listTools({ authenticated: true }),
+		callTool: (input) => server.callTool(input)
+	};
+}
+function mountMcpRoute(server, options = {}) {
+	return async (event) => {
+		const resolved = resolveRequestPrincipal(event, options);
+		const taskResponse = await maybeHandleTaskRequest(server, resolved.principal, event.request);
+		if (taskResponse) return taskResponse;
+		return createMcpHandler(() => createMcpProtocolServer(protocolServerForRequest(server, resolved), { principal: resolved.principal }), {
+			legacy: "reject",
+			maxSubscriptions: 0
+		}).fetch(event.request);
+	};
+}
+async function maybeHandleTaskRequest(server, principal, request) {
+	if (!server.tasksEnabled || !server.callTask || !server.getTask || !server.updateTask || !server.cancelTask || request.method !== "POST") return null;
+	const body = await request.clone().json().catch(() => null);
+	if (body?.jsonrpc !== "2.0" || body.id === void 0) return null;
+	const params = body.params ?? {};
+	const taskTool = body.method === "tools/call" && typeof params.name === "string" && await server.isTaskTool?.(params.name) === true;
+	const taskMethod = [
+		"tasks/get",
+		"tasks/update",
+		"tasks/cancel"
+	].includes(body.method ?? "");
+	if (!taskTool && !taskMethod) return null;
+	if (!isJsonContentType(request.headers.get("content-type"))) return null;
+	const classification = classifyInboundRequest({
+		httpMethod: request.method,
+		protocolVersionHeader: request.headers.get("mcp-protocol-version") ?? void 0,
+		mcpMethodHeader: request.headers.get("mcp-method") ?? void 0,
+		mcpNameHeader: request.headers.get("mcp-name") ?? void 0,
+		body
+	});
+	if (classification.kind === "reject") return jsonRpcResponse(body.id, void 0, {
+		code: classification.code,
+		message: classification.message,
+		...classification.data === void 0 ? {} : { data: classification.data }
+	}, classification.httpStatus);
+	if (classification.kind !== "modern" || classification.classification.revision !== "2026-07-28") return null;
+	const headerMismatch = taskHeaderMismatch(request, body.method, params);
+	if (headerMismatch) return jsonRpcResponse(body.id, void 0, headerMismatch, 400);
+	const clientCapabilities = asRecord(params._meta)["io.modelcontextprotocol/clientCapabilities"];
+	const clientSupportsTasks = Object.hasOwn(asRecord(asRecord(clientCapabilities).extensions), MCP_TASKS_EXTENSION);
+	if (!clientSupportsTasks && body.method === "tools/call") return null;
+	if (!clientSupportsTasks) return jsonRpcResponse(body.id, void 0, {
+		code: -32021,
+		message: "Missing required client capability",
+		data: { requiredCapabilities: { extensions: { [MCP_TASKS_EXTENSION]: {} } } }
+	}, 400);
+	try {
+		if (body.method === "tools/call") {
+			const result = await server.callTask({
+				name: params.name,
+				arguments: params.arguments ?? {},
+				principal
+			});
+			return jsonRpcResponse(body.id, result);
+		}
+		if (typeof params.taskId !== "string") return jsonRpcResponse(body.id, void 0, {
+			code: -32602,
+			message: "taskId is required"
+		});
+		if (body.method === "tasks/get") {
+			const task = await server.getTask({
+				taskId: params.taskId,
+				principal
+			});
+			return jsonRpcResponse(body.id, {
+				resultType: "complete",
+				...task
+			});
+		}
+		if (body.method === "tasks/update") {
+			await server.updateTask({
+				taskId: params.taskId,
+				inputResponses: params.inputResponses && typeof params.inputResponses === "object" ? params.inputResponses : {},
+				principal
+			});
+			return jsonRpcResponse(body.id, { resultType: "complete" });
+		}
+		await server.cancelTask({
+			taskId: params.taskId,
+			principal
+		});
+		return jsonRpcResponse(body.id, { resultType: "complete" });
+	} catch (error) {
+		if (error instanceof McpAccessError) {
+			const { code, retryable } = error.metadata;
+			return jsonRpcResponse(body.id, void 0, {
+				code: error.status === 404 ? -32602 : -32600,
+				message: error.message,
+				data: {
+					...typeof code === "string" ? { code } : {},
+					...typeof retryable === "boolean" ? { retryable } : {}
+				}
+			});
+		}
+		const message = error instanceof Error ? error.message : "Task operation failed";
+		return jsonRpcResponse(body.id, void 0, {
+			code: -32602,
+			message
+		});
+	}
+}
+function taskHeaderMismatch(request, method, params) {
+	if (!method || normalizeHeaderValue(request.headers.get("mcp-method") ?? "") !== method) return {
+		code: -32020,
+		message: "Mcp-Method header must match the JSON-RPC method."
+	};
+	const toolName = method === "tools/call" && typeof params.name === "string" ? params.name : void 0;
+	const headerName = request.headers.get("mcp-name");
+	if (toolName !== void 0 && (headerName === null || decodeMcpHeaderValue(headerName) !== toolName)) return {
+		code: -32020,
+		message: "Mcp-Name header must match the tools/call name."
+	};
+}
+function normalizeHeaderValue(value) {
+	return value.replace(/^[\t ]+|[\t ]+$/g, "");
+}
+function decodeMcpHeaderValue(value) {
+	const normalized = normalizeHeaderValue(value);
+	if (!normalized.startsWith("=?base64?") || !normalized.endsWith("?=")) return normalized;
+	const encoded = normalized.slice(9, -2);
+	if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(encoded)) return;
+	try {
+		return new TextDecoder("utf-8", { fatal: true }).decode(Uint8Array.from(atob(encoded), (character) => character.charCodeAt(0)));
+	} catch {
+		return;
+	}
+}
+function jsonRpcResponse(id, result, error, status = 200) {
+	return new Response(JSON.stringify({
+		jsonrpc: "2.0",
+		id,
+		...error ? { error } : { result }
+	}), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+}
+function asRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
 function mountMcpToolsRoute(server, options = {}) {
 	return async (event) => {
 		try {
@@ -61,6 +211,6 @@ function jsonResponse(body, status = 200) {
 	});
 }
 //#endregion
-export { McpAccessError, mountMcpCallRoute, mountMcpToolsRoute };
+export { McpAccessError, mountMcpCallRoute, mountMcpRoute, mountMcpToolsRoute };
 
 //# sourceMappingURL=sveltekit.js.map

package/dist/sveltekit.js.map

@@ -1 +1 @@
-{"version":3,"file":"sveltekit.js","names":[],"sources":["../src/sveltekit.ts"],"sourcesContent":["/**\n * SvelteKit route adapters for an `McpAppServer`. Mirrors the\n * `@happyvertical/smrt-users/sveltekit` pattern: minimal `HandleInput` type\n * so we never need `@sveltejs/kit` as a real dependency.\n *\n * @packageDocumentation\n *\n * @example\n * ```ts\n * // src/routes/api/mcp/tools/+server.ts\n * import { mountMcpToolsRoute } from '@happyvertical/smrt-app-mcp/sveltekit';\n * import { mcpServer } from '$lib/server/mcp';\n * export const GET = mountMcpToolsRoute(mcpServer);\n * ```\n */\n\nimport { McpAccessError } from './errors.js';\nimport type { CallToolInput, McpAppPrincipal, McpAppServer } from './server.js';\n\n/** Minimal subset of a SvelteKit RequestEvent we actually touch. */\ntype SvelteKitRequestEvent = {\n  locals?: Record<string, unknown>;\n  request: Request;\n  url: URL;\n};\n\ntype SvelteKitHandler = (event: SvelteKitRequestEvent) => Promise<Response>;\n\ntype ResolvedRequestPrincipal = {\n  principal: McpAppPrincipal | null;\n  /** Defined only for the legacy discovery-only authentication adapter. */\n  legacyAuthenticated?: boolean;\n};\n\n/** Locals reader used to pull the request principal out of `event.locals`. */\nexport type McpPrincipalResolver = (\n  event: SvelteKitRequestEvent,\n) => McpAppPrincipal | null | undefined;\n\n/** Backwards-compatible alias for callers that name the principal a user. */\nexport type McpUserResolver = McpPrincipalResolver;\n\nconst defaultResolvePrincipal: McpPrincipalResolver = (event) =>\n  (event.locals?.user ?? null) as McpAppPrincipal | null;\n\nfunction resolveRequestPrincipal(\n  event: SvelteKitRequestEvent,\n  options: MountMcpRouteOptions,\n): ResolvedRequestPrincipal {\n  const resolvePrincipal =\n    options.resolvePrincipal ?? options.resolveUser ?? defaultResolvePrincipal;\n  const principal = resolvePrincipal(event) ?? null;\n  // Keep the legacy boolean gate for existing apps, but apply it to the same\n  // principal that both routes receive. A new principal resolver supersedes it.\n  if (\n    !options.resolvePrincipal &&\n    options.resolveAuthenticated &&\n    !options.resolveAuthenticated(event)\n  ) {\n    return { principal: null, legacyAuthenticated: false };\n  }\n  return {\n    principal,\n    ...(options.resolvePrincipal || !options.resolveAuthenticated\n      ? {}\n      : { legacyAuthenticated: true }),\n  };\n}\n\nfunction listToolsInput(resolved: ResolvedRequestPrincipal) {\n  // Before principal-aware routes, `resolveAuthenticated` affected discovery\n  // independently of `resolveUser`. Preserve a true legacy result only when\n  // there is no principal to pass; new routes should use `resolvePrincipal`\n  // for a single identity on both discovery and calls.\n  if (!resolved.principal && resolved.legacyAuthenticated) {\n    return { authenticated: true };\n  }\n  return { principal: resolved.principal };\n}\n\n/** Options shared by both route mounts. */\nexport interface MountMcpRouteOptions {\n  /**\n   * Resolve the request principal once for both discovery and direct calls.\n   * Defaults to `event.locals.user`.\n   */\n  resolvePrincipal?: McpPrincipalResolver;\n  /**\n   * Backwards-compatible alias for `resolvePrincipal`.\n   */\n  resolveUser?: McpUserResolver;\n  /**\n   * Deprecated legacy authentication gate. When `resolvePrincipal` is not\n   * supplied, a false result makes the principal null for both routes.\n   */\n  resolveAuthenticated?: (event: SvelteKitRequestEvent) => boolean;\n}\n\n/**\n * Mount `server.listTools` as a `GET` handler. Returns the tool list shape\n * `{ tools }` for compatibility with the stock MCP bridge.\n */\nexport function mountMcpToolsRoute(\n  server: McpAppServer,\n  options: MountMcpRouteOptions = {},\n): SvelteKitHandler {\n  return async (event) => {\n    try {\n      const tools = await server.listTools(\n        listToolsInput(resolveRequestPrincipal(event, options)),\n      );\n      return jsonResponse({ tools });\n    } catch (error) {\n      if (error instanceof McpAccessError) {\n        return jsonResponse(mcpAccessErrorBody(error), error.status);\n      }\n      throw error;\n    }\n  };\n}\n\n/**\n * Mount `server.callTool` as a `POST` handler that expects\n * `{ name, arguments }` in the JSON body.\n */\nexport function mountMcpCallRoute(\n  server: McpAppServer,\n  options: MountMcpRouteOptions = {},\n): SvelteKitHandler {\n  return async (event) => {\n    const body = (await event.request.json().catch(() => null)) as {\n      arguments?: Record<string, unknown>;\n      name?: string;\n    } | null;\n\n    if (!body?.name) {\n      return jsonResponse({ error: 'name is required.' }, 400);\n    }\n\n    const input: CallToolInput = {\n      arguments: body.arguments ?? {},\n      name: body.name,\n      principal: resolveRequestPrincipal(event, options).principal,\n    };\n\n    try {\n      return jsonResponse(await server.callTool(input));\n    } catch (error) {\n      if (error instanceof McpAccessError) {\n        return jsonResponse(mcpAccessErrorBody(error), error.status);\n      }\n      throw error;\n    }\n  };\n}\n\nfunction mcpAccessErrorBody(error: McpAccessError): unknown {\n  const { code, retryable } = error.metadata;\n  // Preserve the legacy shape unless an error deliberately opts into the\n  // shared structured failure contract.\n  if (!code) return { error: error.message };\n  return {\n    error: {\n      ok: false,\n      code,\n      message: error.message,\n      status: error.status,\n      ...(retryable === undefined ? {} : { retryable }),\n    },\n  };\n}\n\nfunction jsonResponse(body: unknown, status = 200): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  });\n}\n\nexport { McpAccessError } from './errors.js';\nexport type { McpAppPrincipal, McpAppServer } from './server.js';\n"],"mappings":";;AA0CA,IAAM,2BAAiD,UACpD,MAAM,QAAQ,QAAQ;AAEzB,SAAS,wBACP,OACA,SAC0B;CAG1B,MAAM,aADJ,QAAQ,oBAAoB,QAAQ,eAAe,wBAAA,CAClB,KAAK,KAAK;CAG7C,IACE,CAAC,QAAQ,oBACT,QAAQ,wBACR,CAAC,QAAQ,qBAAqB,KAAK,GAEnC,OAAO;EAAE,WAAW;EAAM,qBAAqB;CAAM;CAEvD,OAAO;EACL;EACA,GAAI,QAAQ,oBAAoB,CAAC,QAAQ,uBACrC,CAAC,IACD,EAAE,qBAAqB,KAAK;CAClC;AACF;AAEA,SAAS,eAAe,UAAoC;CAK1D,IAAI,CAAC,SAAS,aAAa,SAAS,qBAClC,OAAO,EAAE,eAAe,KAAK;CAE/B,OAAO,EAAE,WAAW,SAAS,UAAU;AACzC;AAwBO,SAAS,mBACd,QACA,UAAgC,CAAC,GACf;CAClB,OAAO,OAAO,UAAU;EACtB,IAAI;GAIF,OAAO,aAAa,EAAE,OAAA,MAHF,OAAO,UACzB,eAAe,wBAAwB,OAAO,OAAO,CAAC,CACxD,EAC4B,CAAC;EAC/B,SAAS,OAAO;GACd,IAAI,iBAAiB,gBACnB,OAAO,aAAa,mBAAmB,KAAK,GAAG,MAAM,MAAM;GAE7D,MAAM;EACR;CACF;AACF;AAMO,SAAS,kBACd,QACA,UAAgC,CAAC,GACf;CAClB,OAAO,OAAO,UAAU;EACtB,MAAM,OAAQ,MAAM,MAAM,QAAQ,KAAK,CAAA,CAAE,YAAY,IAAI;EAKzD,IAAI,CAAC,MAAM,MACT,OAAO,aAAa,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAGzD,MAAM,QAAuB;GAC3B,WAAW,KAAK,aAAa,CAAC;GAC9B,MAAM,KAAK;GACX,WAAW,wBAAwB,OAAO,OAAO,CAAA,CAAE;EACrD;EAEA,IAAI;GACF,OAAO,aAAa,MAAM,OAAO,SAAS,KAAK,CAAC;EAClD,SAAS,OAAO;GACd,IAAI,iBAAiB,gBACnB,OAAO,aAAa,mBAAmB,KAAK,GAAG,MAAM,MAAM;GAE7D,MAAM;EACR;CACF;AACF;AAEA,SAAS,mBAAmB,OAAgC;CAC1D,MAAM,EAAE,MAAM,cAAc,MAAM;CAGlC,IAAI,CAAC,MAAM,OAAO,EAAE,OAAO,MAAM,QAAQ;CACzC,OAAO,EACL,OAAO;EACL,IAAI;EACJ;EACA,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;CACjD,EACF;AACF;AAEA,SAAS,aAAa,MAAe,SAAS,KAAe;CAC3D,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC;EACA,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;AACH"}
+{"version":3,"file":"sveltekit.js","names":[],"sources":["../src/sveltekit.ts"],"sourcesContent":["/**\n * SvelteKit route adapters for an `McpAppServer`. Mirrors the\n * `@happyvertical/smrt-users/sveltekit` pattern: minimal `HandleInput` type\n * so we never need `@sveltejs/kit` as a real dependency.\n *\n * @packageDocumentation\n *\n * @example\n * ```ts\n * // src/routes/api/mcp/+server.ts\n * import { mountMcpRoute } from '@happyvertical/smrt-app-mcp/sveltekit';\n * import { mcpServer } from '$lib/server/mcp';\n * export const POST = mountMcpRoute(mcpServer);\n * ```\n */\n\nimport {\n  classifyInboundRequest,\n  createMcpHandler,\n  isJsonContentType,\n} from '@modelcontextprotocol/server';\nimport { McpAccessError } from './errors.js';\nimport { createMcpProtocolServer, MCP_TASKS_EXTENSION } from './protocol.js';\nimport type { CallToolInput, McpAppPrincipal, McpAppServer } from './server.js';\n\n/** Minimal subset of a SvelteKit RequestEvent we actually touch. */\ntype SvelteKitRequestEvent = {\n  locals?: Record<string, unknown>;\n  request: Request;\n  url: URL;\n};\n\n/** A SvelteKit `+server.ts` request handler with no SvelteKit dependency. */\nexport type McpSvelteKitHandler = (\n  event: SvelteKitRequestEvent,\n) => Promise<Response>;\n\ntype ResolvedRequestPrincipal = {\n  principal: McpAppPrincipal | null;\n  /** Defined only for the legacy discovery-only authentication adapter. */\n  legacyAuthenticated?: boolean;\n};\n\n/** Locals reader used to pull the request principal out of `event.locals`. */\nexport type McpPrincipalResolver = (\n  event: SvelteKitRequestEvent,\n) => McpAppPrincipal | null | undefined;\n\n/** Backwards-compatible alias for callers that name the principal a user. */\nexport type McpUserResolver = McpPrincipalResolver;\n\nconst defaultResolvePrincipal: McpPrincipalResolver = (event) =>\n  (event.locals?.user ?? null) as McpAppPrincipal | null;\n\nfunction resolveRequestPrincipal(\n  event: SvelteKitRequestEvent,\n  options: MountMcpRouteOptions,\n): ResolvedRequestPrincipal {\n  const resolvePrincipal =\n    options.resolvePrincipal ?? options.resolveUser ?? defaultResolvePrincipal;\n  const principal = resolvePrincipal(event) ?? null;\n  // Keep the legacy boolean gate for existing apps, but apply it to the same\n  // principal that both routes receive. A new principal resolver supersedes it.\n  if (\n    !options.resolvePrincipal &&\n    options.resolveAuthenticated &&\n    !options.resolveAuthenticated(event)\n  ) {\n    return { principal: null, legacyAuthenticated: false };\n  }\n  return {\n    principal,\n    ...(options.resolvePrincipal || !options.resolveAuthenticated\n      ? {}\n      : { legacyAuthenticated: true }),\n  };\n}\n\nfunction listToolsInput(resolved: ResolvedRequestPrincipal) {\n  // Before principal-aware routes, `resolveAuthenticated` affected discovery\n  // independently of `resolveUser`. Preserve a true legacy result only when\n  // there is no principal to pass; new routes should use `resolvePrincipal`\n  // for a single identity on both discovery and calls.\n  if (!resolved.principal && resolved.legacyAuthenticated) {\n    return { authenticated: true };\n  }\n  return { principal: resolved.principal };\n}\n\n/** Options shared by both route mounts. */\nexport interface MountMcpRouteOptions {\n  /**\n   * Resolve the request principal once for both discovery and direct calls.\n   * Defaults to `event.locals.user`.\n   */\n  resolvePrincipal?: McpPrincipalResolver;\n  /**\n   * Backwards-compatible alias for `resolvePrincipal`.\n   */\n  resolveUser?: McpUserResolver;\n  /**\n   * Deprecated legacy authentication gate. When `resolvePrincipal` is not\n   * supplied, a false result makes the principal null for both routes.\n   */\n  resolveAuthenticated?: (event: SvelteKitRequestEvent) => boolean;\n}\n\nfunction protocolServerForRequest(\n  server: McpAppServer,\n  resolved: ResolvedRequestPrincipal,\n): McpAppServer {\n  // Older applications sometimes used a boolean discovery-only adapter. Keep\n  // its positive result intact for the deprecated resolver while new mounts\n  // consistently use the principal on both MCP methods.\n  if (!resolved.legacyAuthenticated || resolved.principal) return server;\n  return {\n    serverInfo: server.serverInfo,\n    listTools: () => server.listTools({ authenticated: true }),\n    callTool: (input) => server.callTool(input),\n  };\n}\n\n/**\n * Mount a modern, stateless Streamable HTTP MCP endpoint as a SvelteKit\n * `POST` handler. The scoped SDK validates the 2026-07-28 envelope plus the\n * required `Mcp-Method` and `Mcp-Name` headers, returning `-32020` on a\n * mismatch. A fresh protocol server is created for each HTTP request, so this\n * route holds neither MCP sessions nor request principal state between nodes.\n */\nexport function mountMcpRoute(\n  server: McpAppServer,\n  options: MountMcpRouteOptions = {},\n): McpSvelteKitHandler {\n  return async (event) => {\n    const resolved = resolveRequestPrincipal(event, options);\n    const taskResponse = await maybeHandleTaskRequest(\n      server,\n      resolved.principal,\n      event.request,\n    );\n    if (taskResponse) return taskResponse;\n    const handler = createMcpHandler(\n      () =>\n        createMcpProtocolServer(protocolServerForRequest(server, resolved), {\n          principal: resolved.principal,\n        }),\n      {\n        // The legacy REST-shaped mounts below remain the migration path for\n        // one release. This endpoint is deliberately 2026-07-28-only.\n        legacy: 'reject',\n        // The SDK validates every request before consulting its listen router.\n        // Zero capacity keeps this tools-only mount stateless by refusing a\n        // listen request before it can open an SSE response.\n        maxSubscriptions: 0,\n      },\n    );\n    return handler.fetch(event.request);\n  };\n}\n\n/**\n * The installed MCP SDK validates tools/call against a pre-Tasks result codec.\n * Intercept the extension before the SDK handler so the regular stateless HTTP\n * protocol stays untouched for every other method.\n */\nasync function maybeHandleTaskRequest(\n  server: McpAppServer,\n  principal: McpAppPrincipal | null,\n  request: Request,\n): Promise<Response | null> {\n  if (\n    !server.tasksEnabled ||\n    !server.callTask ||\n    !server.getTask ||\n    !server.updateTask ||\n    !server.cancelTask ||\n    request.method !== 'POST'\n  ) {\n    return null;\n  }\n  const body = (await request\n    .clone()\n    .json()\n    .catch(() => null)) as {\n    id?: string | number | null;\n    jsonrpc?: string;\n    method?: string;\n    params?: Record<string, unknown>;\n  } | null;\n  if (body?.jsonrpc !== '2.0' || body.id === undefined) return null;\n  const params = body.params ?? {};\n  const taskTool =\n    body.method === 'tools/call' &&\n    typeof params.name === 'string' &&\n    (await server.isTaskTool?.(params.name)) === true;\n  const taskMethod = ['tasks/get', 'tasks/update', 'tasks/cancel'].includes(\n    body.method ?? '',\n  );\n  if (!taskTool && !taskMethod) return null;\n\n  // Keep task requests on the SDK's protocol-validation path until their\n  // 2026 request envelope is known-good. In particular, never enqueue durable\n  // work for malformed envelopes, unsupported revisions, or non-JSON bodies.\n  // The fallback handler owns its wire-exact error response for those cases.\n  if (!isJsonContentType(request.headers.get('content-type'))) return null;\n  const classification = classifyInboundRequest({\n    httpMethod: request.method,\n    protocolVersionHeader:\n      request.headers.get('mcp-protocol-version') ?? undefined,\n    mcpMethodHeader: request.headers.get('mcp-method') ?? undefined,\n    mcpNameHeader: request.headers.get('mcp-name') ?? undefined,\n    body: body as never,\n  });\n  if (classification.kind === 'reject') {\n    return jsonRpcResponse(\n      body.id,\n      undefined,\n      {\n        code: classification.code,\n        message: classification.message,\n        ...(classification.data === undefined\n          ? {}\n          : { data: classification.data }),\n      },\n      classification.httpStatus,\n    );\n  }\n  if (\n    classification.kind !== 'modern' ||\n    classification.classification.revision !== '2026-07-28'\n  ) {\n    return null;\n  }\n\n  // The SDK normally performs this modern HTTP routing validation before\n  // dispatch. Task responses are intercepted ahead of that SDK handler, so\n  // retain the same fail-closed header/body contract here.\n  const headerMismatch = taskHeaderMismatch(request, body.method, params);\n  if (headerMismatch) {\n    return jsonRpcResponse(body.id, undefined, headerMismatch, 400);\n  }\n\n  const clientCapabilities = asRecord(params._meta)[\n    'io.modelcontextprotocol/clientCapabilities'\n  ];\n  const clientSupportsTasks = Object.hasOwn(\n    asRecord(asRecord(clientCapabilities).extensions),\n    MCP_TASKS_EXTENSION,\n  );\n\n  // A synchronous fallback exists for tools/call; lifecycle methods do not.\n  if (!clientSupportsTasks && body.method === 'tools/call') return null;\n  if (!clientSupportsTasks) {\n    return jsonRpcResponse(\n      body.id,\n      undefined,\n      {\n        code: -32021,\n        message: 'Missing required client capability',\n        data: {\n          requiredCapabilities: { extensions: { [MCP_TASKS_EXTENSION]: {} } },\n        },\n      },\n      400,\n    );\n  }\n\n  try {\n    if (body.method === 'tools/call') {\n      const result = await server.callTask({\n        name: params.name as string,\n        arguments: (params.arguments as Record<string, unknown>) ?? {},\n        principal,\n      });\n      return jsonRpcResponse(body.id, result);\n    }\n    if (typeof params.taskId !== 'string') {\n      return jsonRpcResponse(body.id, undefined, {\n        code: -32602,\n        message: 'taskId is required',\n      });\n    }\n    if (body.method === 'tasks/get') {\n      const task = await server.getTask({ taskId: params.taskId, principal });\n      return jsonRpcResponse(body.id, { resultType: 'complete', ...task });\n    }\n    if (body.method === 'tasks/update') {\n      await server.updateTask({\n        taskId: params.taskId,\n        inputResponses:\n          params.inputResponses && typeof params.inputResponses === 'object'\n            ? (params.inputResponses as Record<string, unknown>)\n            : {},\n        principal,\n      });\n      return jsonRpcResponse(body.id, { resultType: 'complete' });\n    }\n    await server.cancelTask({ taskId: params.taskId, principal });\n    return jsonRpcResponse(body.id, { resultType: 'complete' });\n  } catch (error) {\n    if (error instanceof McpAccessError) {\n      const { code, retryable } = error.metadata;\n      return jsonRpcResponse(body.id, undefined, {\n        code: error.status === 404 ? -32602 : -32600,\n        message: error.message,\n        data: {\n          ...(typeof code === 'string' ? { code } : {}),\n          ...(typeof retryable === 'boolean' ? { retryable } : {}),\n        },\n      });\n    }\n    const message =\n      error instanceof Error ? error.message : 'Task operation failed';\n    return jsonRpcResponse(body.id, undefined, { code: -32602, message });\n  }\n}\n\nfunction taskHeaderMismatch(\n  request: Request,\n  method: string | undefined,\n  params: Record<string, unknown>,\n): { code: number; message: string } | undefined {\n  if (\n    !method ||\n    normalizeHeaderValue(request.headers.get('mcp-method') ?? '') !== method\n  ) {\n    return {\n      code: -32020,\n      message: 'Mcp-Method header must match the JSON-RPC method.',\n    };\n  }\n  const toolName =\n    method === 'tools/call' && typeof params.name === 'string'\n      ? params.name\n      : undefined;\n  const headerName = request.headers.get('mcp-name');\n  if (\n    toolName !== undefined &&\n    (headerName === null || decodeMcpHeaderValue(headerName) !== toolName)\n  ) {\n    return {\n      code: -32020,\n      message: 'Mcp-Name header must match the tools/call name.',\n    };\n  }\n  return undefined;\n}\n\n/** Match the SDK's RFC 9110 optional-whitespace handling for MCP headers. */\nfunction normalizeHeaderValue(value: string): string {\n  return value.replace(/^[\\t ]+|[\\t ]+$/g, '');\n}\n\n/** Decode the SDK's canonical Base64 sentinel for an MCP header value. */\nfunction decodeMcpHeaderValue(value: string): string | undefined {\n  const normalized = normalizeHeaderValue(value);\n  const prefix = '=?base64?';\n  if (!normalized.startsWith(prefix) || !normalized.endsWith('?=')) {\n    return normalized;\n  }\n  const encoded = normalized.slice(prefix.length, -2);\n  if (\n    !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(\n      encoded,\n    )\n  ) {\n    return undefined;\n  }\n  try {\n    return new TextDecoder('utf-8', { fatal: true }).decode(\n      Uint8Array.from(atob(encoded), (character) => character.charCodeAt(0)),\n    );\n  } catch {\n    return undefined;\n  }\n}\n\nfunction jsonRpcResponse(\n  id: string | number | null,\n  result?: unknown,\n  error?: { code: number; message: string; data?: unknown },\n  status = 200,\n): Response {\n  return new Response(\n    JSON.stringify({ jsonrpc: '2.0', id, ...(error ? { error } : { result }) }),\n    { status, headers: { 'content-type': 'application/json' } },\n  );\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : {};\n}\n\n/**\n * Mount `server.listTools` as a `GET` handler. Returns the tool list shape\n * `{ tools }` for compatibility with the stock MCP bridge.\n *\n * @deprecated Use {@link mountMcpRoute}; retained for one release so existing\n * REST-shaped mounts can migrate without a coordinated cutover.\n */\nexport function mountMcpToolsRoute(\n  server: McpAppServer,\n  options: MountMcpRouteOptions = {},\n): McpSvelteKitHandler {\n  return async (event) => {\n    try {\n      const tools = await server.listTools(\n        listToolsInput(resolveRequestPrincipal(event, options)),\n      );\n      return jsonResponse({ tools });\n    } catch (error) {\n      if (error instanceof McpAccessError) {\n        return jsonResponse(mcpAccessErrorBody(error), error.status);\n      }\n      throw error;\n    }\n  };\n}\n\n/**\n * Mount `server.callTool` as a `POST` handler that expects\n * `{ name, arguments }` in the JSON body.\n *\n * @deprecated Use {@link mountMcpRoute}; retained for one release so existing\n * REST-shaped mounts can migrate without a coordinated cutover.\n */\nexport function mountMcpCallRoute(\n  server: McpAppServer,\n  options: MountMcpRouteOptions = {},\n): McpSvelteKitHandler {\n  return async (event) => {\n    const body = (await event.request.json().catch(() => null)) as {\n      arguments?: Record<string, unknown>;\n      name?: string;\n    } | null;\n\n    if (!body?.name) {\n      return jsonResponse({ error: 'name is required.' }, 400);\n    }\n\n    const input: CallToolInput = {\n      arguments: body.arguments ?? {},\n      name: body.name,\n      principal: resolveRequestPrincipal(event, options).principal,\n    };\n\n    try {\n      return jsonResponse(await server.callTool(input));\n    } catch (error) {\n      if (error instanceof McpAccessError) {\n        return jsonResponse(mcpAccessErrorBody(error), error.status);\n      }\n      throw error;\n    }\n  };\n}\n\nfunction mcpAccessErrorBody(error: McpAccessError): unknown {\n  const { code, retryable } = error.metadata;\n  // Preserve the legacy shape unless an error deliberately opts into the\n  // shared structured failure contract.\n  if (!code) return { error: error.message };\n  return {\n    error: {\n      ok: false,\n      code,\n      message: error.message,\n      status: error.status,\n      ...(retryable === undefined ? {} : { retryable }),\n    },\n  };\n}\n\nfunction jsonResponse(body: unknown, status = 200): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  });\n}\n\nexport { McpAccessError } from './errors.js';\nexport type { McpAppPrincipal, McpAppServer } from './server.js';\n"],"mappings":";;;AAmDA,IAAM,2BAAiD,UACpD,MAAM,QAAQ,QAAQ;AAEzB,SAAS,wBACP,OACA,SAC0B;CAG1B,MAAM,aADJ,QAAQ,oBAAoB,QAAQ,eAAe,wBAAA,CAClB,KAAK,KAAK;CAG7C,IACE,CAAC,QAAQ,oBACT,QAAQ,wBACR,CAAC,QAAQ,qBAAqB,KAAK,GAEnC,OAAO;EAAE,WAAW;EAAM,qBAAqB;CAAM;CAEvD,OAAO;EACL;EACA,GAAI,QAAQ,oBAAoB,CAAC,QAAQ,uBACrC,CAAC,IACD,EAAE,qBAAqB,KAAK;CAClC;AACF;AAEA,SAAS,eAAe,UAAoC;CAK1D,IAAI,CAAC,SAAS,aAAa,SAAS,qBAClC,OAAO,EAAE,eAAe,KAAK;CAE/B,OAAO,EAAE,WAAW,SAAS,UAAU;AACzC;AAoBA,SAAS,yBACP,QACA,UACc;CAId,IAAI,CAAC,SAAS,uBAAuB,SAAS,WAAW,OAAO;CAChE,OAAO;EACL,YAAY,OAAO;EACnB,iBAAiB,OAAO,UAAU,EAAE,eAAe,KAAK,CAAC;EACzD,WAAW,UAAU,OAAO,SAAS,KAAK;CAC5C;AACF;AASO,SAAS,cACd,QACA,UAAgC,CAAC,GACZ;CACrB,OAAO,OAAO,UAAU;EACtB,MAAM,WAAW,wBAAwB,OAAO,OAAO;EACvD,MAAM,eAAe,MAAM,uBACzB,QACA,SAAS,WACT,MAAM,OACR;EACA,IAAI,cAAc,OAAO;EAgBzB,OAfgB,uBAEZ,wBAAwB,yBAAyB,QAAQ,QAAQ,GAAG,EAClE,WAAW,SAAS,UACtB,CAAC,GACH;GAGE,QAAQ;GAIR,kBAAkB;EACpB,CAEK,CAAA,CAAQ,MAAM,MAAM,OAAO;CACpC;AACF;AAOA,eAAe,uBACb,QACA,WACA,SAC0B;CAC1B,IACE,CAAC,OAAO,gBACR,CAAC,OAAO,YACR,CAAC,OAAO,WACR,CAAC,OAAO,cACR,CAAC,OAAO,cACR,QAAQ,WAAW,QAEnB,OAAO;CAET,MAAM,OAAQ,MAAM,QACjB,MAAM,CAAA,CACN,KAAK,CAAA,CACL,YAAY,IAAI;CAMnB,IAAI,MAAM,YAAY,SAAS,KAAK,OAAO,KAAA,GAAW,OAAO;CAC7D,MAAM,SAAS,KAAK,UAAU,CAAC;CAC/B,MAAM,WACJ,KAAK,WAAW,gBAChB,OAAO,OAAO,SAAS,YACtB,MAAM,OAAO,aAAa,OAAO,IAAI,MAAO;CAC/C,MAAM,aAAa;EAAC;EAAa;EAAgB;CAAc,CAAA,CAAE,SAC/D,KAAK,UAAU,EACjB;CACA,IAAI,CAAC,YAAY,CAAC,YAAY,OAAO;CAMrC,IAAI,CAAC,kBAAkB,QAAQ,QAAQ,IAAI,cAAc,CAAC,GAAG,OAAO;CACpE,MAAM,iBAAiB,uBAAuB;EAC5C,YAAY,QAAQ;EACpB,uBACE,QAAQ,QAAQ,IAAI,sBAAsB,KAAK,KAAA;EACjD,iBAAiB,QAAQ,QAAQ,IAAI,YAAY,KAAK,KAAA;EACtD,eAAe,QAAQ,QAAQ,IAAI,UAAU,KAAK,KAAA;EAClD;CACF,CAAC;CACD,IAAI,eAAe,SAAS,UAC1B,OAAO,gBACL,KAAK,IACL,KAAA,GACA;EACE,MAAM,eAAe;EACrB,SAAS,eAAe;EACxB,GAAI,eAAe,SAAS,KAAA,IACxB,CAAC,IACD,EAAE,MAAM,eAAe,KAAK;CAClC,GACA,eAAe,UACjB;CAEF,IACE,eAAe,SAAS,YACxB,eAAe,eAAe,aAAa,cAE3C,OAAO;CAMT,MAAM,iBAAiB,mBAAmB,SAAS,KAAK,QAAQ,MAAM;CACtE,IAAI,gBACF,OAAO,gBAAgB,KAAK,IAAI,KAAA,GAAW,gBAAgB,GAAG;CAGhE,MAAM,qBAAqB,SAAS,OAAO,KAAK,CAAA,CAC9C;CAEF,MAAM,sBAAsB,OAAO,OACjC,SAAS,SAAS,kBAAkB,CAAA,CAAE,UAAU,GAChD,mBACF;CAGA,IAAI,CAAC,uBAAuB,KAAK,WAAW,cAAc,OAAO;CACjE,IAAI,CAAC,qBACH,OAAO,gBACL,KAAK,IACL,KAAA,GACA;EACE,MAAM;EACN,SAAS;EACT,MAAM,EACJ,sBAAsB,EAAE,YAAY,GAAG,sBAAsB,CAAC,EAAE,EAAE,EACpE;CACF,GACA,GACF;CAGF,IAAI;EACF,IAAI,KAAK,WAAW,cAAc;GAChC,MAAM,SAAS,MAAM,OAAO,SAAS;IACnC,MAAM,OAAO;IACb,WAAY,OAAO,aAAyC,CAAC;IAC7D;GACF,CAAC;GACD,OAAO,gBAAgB,KAAK,IAAI,MAAM;EACxC;EACA,IAAI,OAAO,OAAO,WAAW,UAC3B,OAAO,gBAAgB,KAAK,IAAI,KAAA,GAAW;GACzC,MAAM;GACN,SAAS;EACX,CAAC;EAEH,IAAI,KAAK,WAAW,aAAa;GAC/B,MAAM,OAAO,MAAM,OAAO,QAAQ;IAAE,QAAQ,OAAO;IAAQ;GAAU,CAAC;GACtE,OAAO,gBAAgB,KAAK,IAAI;IAAE,YAAY;IAAY,GAAG;GAAK,CAAC;EACrE;EACA,IAAI,KAAK,WAAW,gBAAgB;GAClC,MAAM,OAAO,WAAW;IACtB,QAAQ,OAAO;IACf,gBACE,OAAO,kBAAkB,OAAO,OAAO,mBAAmB,WACrD,OAAO,iBACR,CAAC;IACP;GACF,CAAC;GACD,OAAO,gBAAgB,KAAK,IAAI,EAAE,YAAY,WAAW,CAAC;EAC5D;EACA,MAAM,OAAO,WAAW;GAAE,QAAQ,OAAO;GAAQ;EAAU,CAAC;EAC5D,OAAO,gBAAgB,KAAK,IAAI,EAAE,YAAY,WAAW,CAAC;CAC5D,SAAS,OAAO;EACd,IAAI,iBAAiB,gBAAgB;GACnC,MAAM,EAAE,MAAM,cAAc,MAAM;GAClC,OAAO,gBAAgB,KAAK,IAAI,KAAA,GAAW;IACzC,MAAM,MAAM,WAAW,MAAM,SAAS;IACtC,SAAS,MAAM;IACf,MAAM;KACJ,GAAI,OAAO,SAAS,WAAW,EAAE,KAAK,IAAI,CAAC;KAC3C,GAAI,OAAO,cAAc,YAAY,EAAE,UAAU,IAAI,CAAC;IACxD;GACF,CAAC;EACH;EACA,MAAM,UACJ,iBAAiB,QAAQ,MAAM,UAAU;EAC3C,OAAO,gBAAgB,KAAK,IAAI,KAAA,GAAW;GAAE,MAAM;GAAQ;EAAQ,CAAC;CACtE;AACF;AAEA,SAAS,mBACP,SACA,QACA,QAC+C;CAC/C,IACE,CAAC,UACD,qBAAqB,QAAQ,QAAQ,IAAI,YAAY,KAAK,EAAE,MAAM,QAElE,OAAO;EACL,MAAM;EACN,SAAS;CACX;CAEF,MAAM,WACJ,WAAW,gBAAgB,OAAO,OAAO,SAAS,WAC9C,OAAO,OACP,KAAA;CACN,MAAM,aAAa,QAAQ,QAAQ,IAAI,UAAU;CACjD,IACE,aAAa,KAAA,MACZ,eAAe,QAAQ,qBAAqB,UAAU,MAAM,WAE7D,OAAO;EACL,MAAM;EACN,SAAS;CACX;AAGJ;AAGA,SAAS,qBAAqB,OAAuB;CACnD,OAAO,MAAM,QAAQ,oBAAoB,EAAE;AAC7C;AAGA,SAAS,qBAAqB,OAAmC;CAC/D,MAAM,aAAa,qBAAqB,KAAK;CAE7C,IAAI,CAAC,WAAW,WAAW,WAAM,KAAK,CAAC,WAAW,SAAS,IAAI,GAC7D,OAAO;CAET,MAAM,UAAU,WAAW,MAAM,GAAe,EAAE;CAClD,IACE,CAAC,mEAAmE,KAClE,OACF,GAEA;CAEF,IAAI;EACF,OAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,CAAA,CAAE,OAC/C,WAAW,KAAK,KAAK,OAAO,IAAI,cAAc,UAAU,WAAW,CAAC,CAAC,CACvE;CACF,QAAQ;EACN;CACF;AACF;AAEA,SAAS,gBACP,IACA,QACA,OACA,SAAS,KACC;CACV,OAAO,IAAI,SACT,KAAK,UAAU;EAAE,SAAS;EAAO;EAAI,GAAI,QAAQ,EAAE,MAAM,IAAI,EAAE,OAAO;CAAG,CAAC,GAC1E;EAAE;EAAQ,SAAS,EAAE,gBAAgB,mBAAmB;CAAE,CAC5D;AACF;AAEA,SAAS,SAAS,OAAyC;CACzD,OAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD,CAAC;AACP;AASO,SAAS,mBACd,QACA,UAAgC,CAAC,GACZ;CACrB,OAAO,OAAO,UAAU;EACtB,IAAI;GAIF,OAAO,aAAa,EAAE,OAAA,MAHF,OAAO,UACzB,eAAe,wBAAwB,OAAO,OAAO,CAAC,CACxD,EAC4B,CAAC;EAC/B,SAAS,OAAO;GACd,IAAI,iBAAiB,gBACnB,OAAO,aAAa,mBAAmB,KAAK,GAAG,MAAM,MAAM;GAE7D,MAAM;EACR;CACF;AACF;AASO,SAAS,kBACd,QACA,UAAgC,CAAC,GACZ;CACrB,OAAO,OAAO,UAAU;EACtB,MAAM,OAAQ,MAAM,MAAM,QAAQ,KAAK,CAAA,CAAE,YAAY,IAAI;EAKzD,IAAI,CAAC,MAAM,MACT,OAAO,aAAa,EAAE,OAAO,oBAAoB,GAAG,GAAG;EAGzD,MAAM,QAAuB;GAC3B,WAAW,KAAK,aAAa,CAAC;GAC9B,MAAM,KAAK;GACX,WAAW,wBAAwB,OAAO,OAAO,CAAA,CAAE;EACrD;EAEA,IAAI;GACF,OAAO,aAAa,MAAM,OAAO,SAAS,KAAK,CAAC;EAClD,SAAS,OAAO;GACd,IAAI,iBAAiB,gBACnB,OAAO,aAAa,mBAAmB,KAAK,GAAG,MAAM,MAAM;GAE7D,MAAM;EACR;CACF;AACF;AAEA,SAAS,mBAAmB,OAAgC;CAC1D,MAAM,EAAE,MAAM,cAAc,MAAM;CAGlC,IAAI,CAAC,MAAM,OAAO,EAAE,OAAO,MAAM,QAAQ;CACzC,OAAO,EACL,OAAO;EACL,IAAI;EACJ;EACA,SAAS,MAAM;EACf,QAAQ,MAAM;EACd,GAAI,cAAc,KAAA,IAAY,CAAC,IAAI,EAAE,UAAU;CACjD,EACF;AACF;AAEA,SAAS,aAAa,MAAe,SAAS,KAAe;CAC3D,OAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;EACxC;EACA,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;AACH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-app-mcp",
-  "version": "0.40.60",
+  "version": "0.40.62",
   "description": "App-runtime MCP server scaffolding for SMRT apps — `createMcpAppServer` plus transport adapters (SvelteKit today) for exposing a SMRT app's MCP surface over HTTP.",
   "type": "module",
   "main": "./dist/index.js",
@@ -43,10 +43,13 @@
   ],
   "author": "HappyVertical",
   "dependencies": {
+    "@happyvertical/sql": "^0.85.5",
     "@modelcontextprotocol/server": "2.0.0",
-    "@happyvertical/smrt-core": "0.40.60"
+    "@happyvertical/smrt-core": "0.40.62",
+    "@happyvertical/smrt-jobs": "0.40.62"
   },
   "devDependencies": {
+    "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/conformance": "0.2.0-alpha.10",
     "@modelcontextprotocol/node": "2.0.0",
     "@types/node": "24.13.2",

package/dist/chunks/errors-CHYu0Vr2.js

@@ -1,16 +0,0 @@
-//#region src/errors.ts
-var MCP_TOOL_ACCESS_DENIED_CODE = "mcp_tool_access_denied";
-var McpAccessError = class extends Error {
-	constructor(status, message, metadata = {}) {
-		super(message);
-		this.status = status;
-		this.metadata = metadata;
-		this.name = "McpAccessError";
-	}
-	status;
-	metadata;
-};
-//#endregion
-export { McpAccessError as n, MCP_TOOL_ACCESS_DENIED_CODE as t };
-
-//# sourceMappingURL=errors-CHYu0Vr2.js.map

package/dist/chunks/errors-CHYu0Vr2.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors-CHYu0Vr2.js","names":[],"sources":["../../src/errors.ts"],"sourcesContent":["/** Machine-readable code for a principal policy denial. */\nexport const MCP_TOOL_ACCESS_DENIED_CODE = 'mcp_tool_access_denied';\n\n/**\n * Metadata that is safe to expose for an app-MCP access failure. Policy\n * implementations must not place principal, scope, tool, or internal-error\n * details here.\n */\nexport interface McpAccessErrorMetadata {\n  code?: string;\n  retryable?: boolean;\n}\n\n/**\n * Error returned by the MCP app server when a caller tries to use a tool\n * they are not allowed to access. The HTTP layer should map `status` onto\n * the response status code.\n */\nexport class McpAccessError extends Error {\n  constructor(\n    readonly status: number,\n    message: string,\n    readonly metadata: McpAccessErrorMetadata = {},\n  ) {\n    super(message);\n    this.name = 'McpAccessError';\n  }\n}\n"],"mappings":";AACO,IAAM,8BAA8B;AAiBpC,IAAM,iBAAN,cAA6B,MAAM;CACxC,YACW,QACT,SACS,WAAmC,CAAC,GAC7C;EACA,MAAM,OAAO;EAJJ,KAAA,SAAA;EAEA,KAAA,WAAA;EAGT,KAAK,OAAO;CACd;CANW;CAEA;AAKb"}