@happyvertical/smrt-app-mcp 0.51.32 → 0.51.33

package/dist/errors.d.ts

@@ -0,0 +1,22 @@
+/** Machine-readable code for a principal policy denial. */
+export declare const MCP_TOOL_ACCESS_DENIED_CODE = "mcp_tool_access_denied";
+/**
+ * Metadata that is safe to expose for an app-MCP access failure. Policy
+ * implementations must not place principal, scope, tool, or internal-error
+ * details here.
+ */
+export interface McpAccessErrorMetadata {
+    code?: string;
+    retryable?: boolean;
+}
+/**
+ * Error returned by the MCP app server when a caller tries to use a tool
+ * they are not allowed to access. The HTTP layer should map `status` onto
+ * the response status code.
+ */
+export declare class McpAccessError extends Error {
+    readonly status: number;
+    readonly metadata: McpAccessErrorMetadata;
+    constructor(status: number, message: string, metadata?: McpAccessErrorMetadata);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAEvB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB;gBAFhC,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACN,QAAQ,GAAE,sBAA2B;CAKjD"}

package/dist/index.d.ts

@@ -1,291 +1,28 @@
-/**
- * `@happyvertical/smrt-app-mcp` — app-runtime MCP server scaffolding for
- * SMRT apps. Exposes a SMRT app's MCP surface over HTTP, regardless of how
- * the app is deployed.
- *
- * - **Core** (this module): `createMcpAppServer` wraps
- *   `@happyvertical/smrt-core/generators/mcp` with allow-listing, a public
- *   tool policy, and per-tool workflow assertions. Returns
- *   `{ listTools, callTool }` you can mount however you like.
- *
- * - **SvelteKit** (`@happyvertical/smrt-app-mcp/sveltekit`): thin route
- *   adapters that turn an `McpAppServer` into the GET/POST handlers a
- *   SvelteKit `+server.ts` expects. Additional transport adapters
- *   (standalone Node HTTP, serverless, Express/Hono/Fastify) can be added
- *   as sibling subpaths without changes to the core.
- *
- * For piping a deployed app's MCP surface to a local stdio MCP client
- * (e.g. for editor/AI client integration), see
- * `@happyvertical/smrt-app-cli` — the client-side counterpart owns the
- * stdio bridge.
- *
- * @packageDocumentation
- */
-
-import { MCPConfig } from '@happyvertical/smrt-core/generators/mcp';
-import { MCPResponse } from '@happyvertical/smrt-core/generators/mcp';
-import { McpTask } from '@happyvertical/smrt-jobs';
-import { MCPTool } from '@happyvertical/smrt-core/generators/mcp';
-import { Server } from '@modelcontextprotocol/server';
-import { ServerContext } from '@modelcontextprotocol/server';
-
-/** Tool call inputs. */
-export declare interface CallToolInput {
-    name: string;
-    arguments?: Record<string, unknown>;
-    /** Caller used for public/authenticated and optional tool-policy checks. */
-    principal?: McpAppPrincipal | null;
-    /**
-     * Backwards-compatible user input. New callers should pass `principal`.
-     * Null/undefined means unauthenticated.
-     */
-    user?: McpAppUser | null;
-}
-
-/**
- * Lower-case `<class>_` prefixes the app considers "allowed core tools"
- * given a list of SMRT class names. Used to build the allow-list for
- * `McpAppServer.listTools`.
- */
-export declare function classNamePrefixes(classNames: readonly string[]): ReadonlySet<string>;
-
-/**
- * Build the app-runtime MCP server core. The returned object is intentionally
- * framework-agnostic: HTTP wrappers live in `@happyvertical/smrt-app-mcp/sveltekit`,
- * this package's only other export.
- *
- * This package ships no stdio bridge. To pipe a deployed app's HTTP MCP surface
- * to a local stdio MCP client, use `@happyvertical/smrt-app-cli`, which provides
- * a generic `smrt-mcp-bridge` bin plus `runMcpStdioBridge` and
- * `createAppCli().startMcpBridge()` for branded entry points.
- */
-export declare function createMcpAppServer(options: CreateMcpAppServerOptions): McpAppServer;
-
-/**
- * Options for `createMcpAppServer`.
- */
-export declare interface CreateMcpAppServerOptions {
-    /** SMRT context bag (db, etc.) passed to MCPGenerator per call. */
-    smrtOptions: McpSmrtOptionsThunk;
-    /** Server identity surfaced in the MCP protocol. */
-    serverInfo: Required<Pick<MCPConfig, 'name' | 'version'>> & Pick<MCPConfig, 'description'>;
-    /**
-     * SMRT class names the app wants to publish. Tools whose name does not
-     * start with any of these classes (lowercased + underscore) are filtered
-     * out, even if SMRT generated them.
-     */
-    allowedClassNames: readonly string[];
-    /**
-     * Optional thunk returning glob-ish patterns for read-only tools that
-     * unauthenticated callers are allowed to use. Defaults to an empty list
-     * (everything requires auth).
-     */
-    publicToolPatterns?: McpPublicToolPatternsThunk;
-    /**
-     * Cache policy for the MCP tools/list result. Public caching is honored only
-     * when this explicitly opts in and every allowed tool is a non-tenant,
-     * unauthenticated read-only tool with no principal-aware policy.
-     */
-    toolListCache?: McpToolListCacheOptions;
-    /**
-     * Optional generic principal-aware tool policy. It is evaluated for every
-     * tool that passes the app allow-list and base public/authenticated policy,
-     * for both discovery and a direct call.
-     */
-    toolPolicy?: McpToolPolicy;
-    /**
-     * Optional per-tool guards. Keyed by tool name. The assertion runs after
-     * tool resolution and before `MCPGenerator.handleToolCall`; throwing
-     * `McpAccessError` aborts the call with the error's status. Implementations
-     * may mutate `args` to inject trusted fields.
-     */
-    workflowAssertions?: Record<string, McpWorkflowAssertion>;
-}
-
-/**
- * Adapt an app MCP core to the SDK v2 low-level server protocol.
- *
- * Transport ownership remains with the caller. In particular, this does not
- * add a production HTTP endpoint; it is safe to compose with `serveStdio` or
- * `createMcpHandler` in a deployment that supplies its own authentication.
- */
-export declare function createMcpProtocolServer(appServer: McpAppServer, options?: McpProtocolServerOptions): Server;
-
-/**
- * Whether a given tool name starts with any of the configured class
- * prefixes.
- */
-export declare function isAllowedCoreTool(toolName: string, prefixes: ReadonlySet<string>): boolean;
-
-/**
- * Check whether a tool name is currently allowed for unauthenticated callers
- * given the configured public-tool patterns. Only read-only tools may ever
- * be public, regardless of pattern.
- */
-export declare function isPublicToolName(toolName: string, patterns: readonly string[]): boolean;
-
-/**
- * Read-only tool detection. Generated SMRT MCP tools follow the naming
- * convention `<class>_<verb>`; we treat `_list` and `_get` as read-only.
- */
-export declare function isReadOnlyToolName(toolName: string): boolean;
-
-/** Tool listing inputs. */
-export declare interface ListToolsInput {
-    /** Caller used for public/authenticated and optional tool-policy checks. */
-    principal?: McpAppPrincipal | null;
-    /**
-     * Backwards-compatible authenticated marker. New mounts should pass
-     * `principal` so discovery and direct calls use the same identity.
-     */
-    authenticated?: boolean;
-}
-
-/**
- * Match a tool name against a glob-ish pattern with `*` wildcards.
- *
- * - Empty pattern → never matches.
- * - `*` → matches everything.
- * - `prefix_*` → matches anything starting with `prefix_`.
- * - `*_suffix` → matches anything ending with `_suffix`.
- * - `a_*_b` → matches any name containing `a_`, then any text, then `_b`.
- *
- * No regex characters are special besides `*` — the input is treated as a
- * literal string with star wildcards.
- */
-export declare function matchesToolPattern(toolName: string, pattern: string): boolean;
-
-/** Machine-readable code for a principal policy denial. */
-export declare const MCP_TOOL_ACCESS_DENIED_CODE = "mcp_tool_access_denied";
-
-/**
- * Error returned by the MCP app server when a caller tries to use a tool
- * they are not allowed to access. The HTTP layer should map `status` onto
- * the response status code.
- */
-export declare class McpAccessError extends Error {
-    readonly status: number;
-    readonly metadata: McpAccessErrorMetadata;
-    constructor(status: number, message: string, metadata?: McpAccessErrorMetadata);
-}
-
-/**
- * Metadata that is safe to expose for an app-MCP access failure. Policy
- * implementations must not place principal, scope, tool, or internal-error
- * details here.
- */
-export declare interface McpAccessErrorMetadata {
-    code?: string;
-    retryable?: boolean;
-}
-
-/**
- * Generic authenticated caller information available to app-MCP policy.
- *
- * `kind`, `roles`, and `scopes` are deliberately unconstrained so an app can
- * represent a human or a scoped service without this package encoding an
- * application's identity or capability model. A missing principal means the
- * request is unauthenticated.
- */
-export declare interface McpAppPrincipal {
-    id?: string;
-    /** Tenant boundary for task ownership and generated tenant-scoped actions. */
-    tenantId?: string;
-    /** Trusted operator override for generated tenant-scoped actions. */
-    allowCrossTenant?: boolean;
-    kind?: string;
-    roles?: string[];
-    scopes?: string[];
-}
-
-/** Shape returned by `createMcpAppServer`. */
-export declare interface McpAppServer {
-    listTools(input: ListToolsInput): Promise<MCPTool[]>;
-    callTool(input: CallToolInput): Promise<MCPResponse>;
-    /** Whether this app has any explicitly enabled Tasks extension action. */
-    hasTaskSupport?(): Promise<boolean>;
-    /** Whether a particular visible tool is task-enabled. */
-    isTaskTool?(name: string): Promise<boolean>;
-    /** Static declaration used by the protocol discovery capability surface. */
-    readonly tasksEnabled?: boolean;
-    /** Create a durable task after applying the same tool policy as tools/call. */
-    callTask?(input: CallToolInput): Promise<MCPResponse>;
-    /** Principal-scoped task lifecycle operations. */
-    getTask?(input: {
-        taskId: string;
-        principal?: McpAppPrincipal | null;
-    }): Promise<McpTask>;
-    updateTask?(input: {
-        taskId: string;
-        inputResponses: Record<string, unknown>;
-        principal?: McpAppPrincipal | null;
-    }): Promise<void>;
-    cancelTask?(input: {
-        taskId: string;
-        principal?: McpAppPrincipal | null;
-    }): Promise<void>;
-    /** Cache policy for protocol tools/list responses. */
-    getToolsListCacheHint?(): Promise<McpToolListCacheHint>;
-    /** Read-only view of the configured server identity. */
-    readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];
-}
-
-/** Minimal legacy user shape used for generated tool-call attribution. */
-export declare interface McpAppUser extends McpAppPrincipal {
-    id: string;
-}
-
-export declare interface McpProtocolServerOptions {
-    /** Resolve the authenticated application principal for each MCP request. */
-    principal?: McpAppPrincipal | null | ((context: ServerContext) => McpAppPrincipal | null | Promise<McpAppPrincipal | null>);
-}
-
-/** Public-tool patterns thunk — same lazy-evaluation rationale. */
-export declare type McpPublicToolPatternsThunk = () => readonly string[];
-
-/**
- * SMRT options thunk — returns the `{ db }` (and similar) bag to pass into
- * MCPGenerator's per-request context. A function is used so apps can lazily
- * resolve env vars at call time.
- */
-export declare type McpSmrtOptionsThunk = () => Record<string, unknown>;
-
-export declare interface McpToolListCacheHint {
-    ttlMs: number;
-    cacheScope: 'private' | 'public';
-}
-
-export declare interface McpToolListCacheOptions {
-    /** Cache lifetime in milliseconds. Defaults to one day for a deploy-static catalog. */
-    ttlMs?: number;
-    /** Requested cache visibility. Defaults to private. */
-    cacheScope?: 'private' | 'public';
-    /**
-     * Explicit attestation that every allowed tool is global, unauthenticated,
-     * and safe to share through an intermediary cache.
-     */
-    publicCatalog?: true;
-}
-
-/**
- * Per-tool access policy. Return `true` to expose/allow the tool and `false`
- * to hide it from discovery and deny a direct call. A thrown error is treated
- * as a denial so policy implementation details cannot escape the app-MCP
- * boundary.
- */
-export declare type McpToolPolicy = (context: McpToolPolicyContext) => boolean | Promise<boolean>;
-
-/** Context supplied to the optional per-tool principal policy. */
-export declare interface McpToolPolicyContext {
-    principal: McpAppPrincipal | null;
-    tool: MCPTool;
-}
-
-/**
- * Workflow assertion hook signature. Throw `McpAccessError` to reject the
- * call. Implementations may mutate `args` in place to inject server-trusted
- * fields (e.g. clamping `approvedByUserId` to the authenticated user's id).
- */
-export declare type McpWorkflowAssertion = (args: Record<string, unknown>, user: McpAppUser | null) => void;
-
-export { }
+/**
+ * `@happyvertical/smrt-app-mcp` — app-runtime MCP server scaffolding for
+ * SMRT apps. Exposes a SMRT app's MCP surface over HTTP, regardless of how
+ * the app is deployed.
+ *
+ * - **Core** (this module): `createMcpAppServer` wraps
+ *   `@happyvertical/smrt-core/generators/mcp` with allow-listing, a public
+ *   tool policy, and per-tool workflow assertions. Returns
+ *   `{ listTools, callTool }` you can mount however you like.
+ *
+ * - **SvelteKit** (`@happyvertical/smrt-app-mcp/sveltekit`): thin route
+ *   adapters that turn an `McpAppServer` into the GET/POST handlers a
+ *   SvelteKit `+server.ts` expects. Additional transport adapters
+ *   (standalone Node HTTP, serverless, Express/Hono/Fastify) can be added
+ *   as sibling subpaths without changes to the core.
+ *
+ * For piping a deployed app's MCP surface to a local stdio MCP client
+ * (e.g. for editor/AI client integration), see
+ * `@happyvertical/smrt-app-cli` — the client-side counterpart owns the
+ * stdio bridge.
+ *
+ * @packageDocumentation
+ */
+export { MCP_TOOL_ACCESS_DENIED_CODE, McpAccessError, type McpAccessErrorMetadata, } from './errors.js';
+export { createMcpProtocolServer, type McpProtocolServerOptions, } from './protocol.js';
+export { type CallToolInput, type CreateMcpAppServerOptions, createMcpAppServer, type ListToolsInput, type McpAppPrincipal, type McpAppServer, type McpAppUser, type McpPublicToolPatternsThunk, type McpSmrtOptionsThunk, type McpToolListCacheHint, type McpToolListCacheOptions, type McpToolPolicy, type McpToolPolicyContext, type McpWorkflowAssertion, } from './server.js';
+export { classNamePrefixes, isAllowedCoreTool, isPublicToolName, isReadOnlyToolName, matchesToolPattern, } from './tools.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,2BAA2B,EAC3B,cAAc,EACd,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC"}

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-app-mcp",
-  "packageVersion": "0.51.32",
+  "packageVersion": "0.51.33",
   "objects": {},
   "moduleType": "smrt",
   "smrtDependencies": [

package/dist/protocol.d.ts

@@ -0,0 +1,17 @@
+/** MCP SDK v2 protocol adapter for the framework-neutral app server core. */
+import { Server, type ServerContext } from '@modelcontextprotocol/server';
+import type { McpAppPrincipal, McpAppServer } from './server.js';
+export declare const MCP_TASKS_EXTENSION = "io.modelcontextprotocol/tasks";
+export interface McpProtocolServerOptions {
+    /** Resolve the authenticated application principal for each MCP request. */
+    principal?: McpAppPrincipal | null | ((context: ServerContext) => McpAppPrincipal | null | Promise<McpAppPrincipal | null>);
+}
+/**
+ * Adapt an app MCP core to the SDK v2 low-level server protocol.
+ *
+ * Transport ownership remains with the caller. In particular, this does not
+ * add a production HTTP endpoint; it is safe to compose with `serveStdio` or
+ * `createMcpHandler` in a deployment that supplies its own authentication.
+ */
+export declare function createMcpProtocolServer(appServer: McpAppServer, options?: McpProtocolServerOptions): Server;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAIL,MAAM,EACN,KAAK,aAAa,EAEnB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGjE,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AAOnE,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,SAAS,CAAC,EACN,eAAe,GACf,IAAI,GACJ,CAAC,CACC,OAAO,EAAE,aAAa,KACnB,eAAe,GAAG,IAAI,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC;CACpE;AAUD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,YAAY,EACvB,OAAO,GAAE,wBAA6B,GACrC,MAAM,CAsDR"}

package/dist/server.d.ts

@@ -0,0 +1,187 @@
+/**
+ * `createMcpAppServer` returns the framework-agnostic core that backs an
+ * app's HTTP MCP endpoints and transport-neutral protocol adapter. It wraps
+ * `MCPGenerator` from `@happyvertical/smrt-core` with:
+ *
+ *  - an allow-list of SMRT class names (so apps publish a subset of their
+ *    objects, not everything decorated with `@smrt()`),
+ *  - a public-tool policy for unauthenticated callers (read-only patterns
+ *    via `publicToolPatterns`),
+ *  - an optional principal-aware `toolPolicy`, used for both discovery and
+ *    direct calls,
+ *  - a pluggable `workflowAssertions` hook so apps can guard their own
+ *    domain-specific tool calls (e.g. "approval requires an authenticated
+ *    user") without that policy living in this package.
+ *
+ * @packageDocumentation
+ */
+import type { MCPConfig, MCPResponse, MCPTool } from '@happyvertical/smrt-core/generators/mcp';
+import { type McpTask } from '@happyvertical/smrt-jobs';
+/**
+ * Generic authenticated caller information available to app-MCP policy.
+ *
+ * `kind`, `roles`, and `scopes` are deliberately unconstrained so an app can
+ * represent a human or a scoped service without this package encoding an
+ * application's identity or capability model. A missing principal means the
+ * request is unauthenticated.
+ */
+export interface McpAppPrincipal {
+    id?: string;
+    /** Tenant boundary for task ownership and generated tenant-scoped actions. */
+    tenantId?: string;
+    /** Trusted operator override for generated tenant-scoped actions. */
+    allowCrossTenant?: boolean;
+    kind?: string;
+    roles?: string[];
+    scopes?: string[];
+}
+/** Minimal legacy user shape used for generated tool-call attribution. */
+export interface McpAppUser extends McpAppPrincipal {
+    id: string;
+}
+/** Context supplied to the optional per-tool principal policy. */
+export interface McpToolPolicyContext {
+    principal: McpAppPrincipal | null;
+    tool: MCPTool;
+}
+/**
+ * Per-tool access policy. Return `true` to expose/allow the tool and `false`
+ * to hide it from discovery and deny a direct call. A thrown error is treated
+ * as a denial so policy implementation details cannot escape the app-MCP
+ * boundary.
+ */
+export type McpToolPolicy = (context: McpToolPolicyContext) => boolean | Promise<boolean>;
+/**
+ * Workflow assertion hook signature. Throw `McpAccessError` to reject the
+ * call. Implementations may mutate `args` in place to inject server-trusted
+ * fields (e.g. clamping `approvedByUserId` to the authenticated user's id).
+ */
+export type McpWorkflowAssertion = (args: Record<string, unknown>, user: McpAppUser | null) => void;
+/**
+ * SMRT options thunk — returns the `{ db }` (and similar) bag to pass into
+ * MCPGenerator's per-request context. A function is used so apps can lazily
+ * resolve env vars at call time.
+ */
+export type McpSmrtOptionsThunk = () => Record<string, unknown>;
+/** Public-tool patterns thunk — same lazy-evaluation rationale. */
+export type McpPublicToolPatternsThunk = () => readonly string[];
+export interface McpToolListCacheHint {
+    ttlMs: number;
+    cacheScope: 'private' | 'public';
+}
+export interface McpToolListCacheOptions {
+    /** Cache lifetime in milliseconds. Defaults to one day for a deploy-static catalog. */
+    ttlMs?: number;
+    /** Requested cache visibility. Defaults to private. */
+    cacheScope?: 'private' | 'public';
+    /**
+     * Explicit attestation that every allowed tool is global, unauthenticated,
+     * and safe to share through an intermediary cache.
+     */
+    publicCatalog?: true;
+}
+/**
+ * Options for `createMcpAppServer`.
+ */
+export interface CreateMcpAppServerOptions {
+    /** SMRT context bag (db, etc.) passed to MCPGenerator per call. */
+    smrtOptions: McpSmrtOptionsThunk;
+    /** Server identity surfaced in the MCP protocol. */
+    serverInfo: Required<Pick<MCPConfig, 'name' | 'version'>> & Pick<MCPConfig, 'description'>;
+    /**
+     * SMRT class names the app wants to publish. Tools whose name does not
+     * start with any of these classes (lowercased + underscore) are filtered
+     * out, even if SMRT generated them.
+     */
+    allowedClassNames: readonly string[];
+    /**
+     * Optional thunk returning glob-ish patterns for read-only tools that
+     * unauthenticated callers are allowed to use. Defaults to an empty list
+     * (everything requires auth).
+     */
+    publicToolPatterns?: McpPublicToolPatternsThunk;
+    /**
+     * Cache policy for the MCP tools/list result. Public caching is honored only
+     * when this explicitly opts in and every allowed tool is a non-tenant,
+     * unauthenticated read-only tool with no principal-aware policy.
+     */
+    toolListCache?: McpToolListCacheOptions;
+    /**
+     * Optional generic principal-aware tool policy. It is evaluated for every
+     * tool that passes the app allow-list and base public/authenticated policy,
+     * for both discovery and a direct call.
+     */
+    toolPolicy?: McpToolPolicy;
+    /**
+     * Optional per-tool guards. Keyed by tool name. The assertion runs after
+     * tool resolution and before `MCPGenerator.handleToolCall`; throwing
+     * `McpAccessError` aborts the call with the error's status. Implementations
+     * may mutate `args` to inject trusted fields.
+     */
+    workflowAssertions?: Record<string, McpWorkflowAssertion>;
+}
+/** Tool listing inputs. */
+export interface ListToolsInput {
+    /** Caller used for public/authenticated and optional tool-policy checks. */
+    principal?: McpAppPrincipal | null;
+    /**
+     * Backwards-compatible authenticated marker. New mounts should pass
+     * `principal` so discovery and direct calls use the same identity.
+     */
+    authenticated?: boolean;
+}
+/** Tool call inputs. */
+export interface CallToolInput {
+    name: string;
+    arguments?: Record<string, unknown>;
+    /** Caller used for public/authenticated and optional tool-policy checks. */
+    principal?: McpAppPrincipal | null;
+    /**
+     * Backwards-compatible user input. New callers should pass `principal`.
+     * Null/undefined means unauthenticated.
+     */
+    user?: McpAppUser | null;
+}
+/** Shape returned by `createMcpAppServer`. */
+export interface McpAppServer {
+    listTools(input: ListToolsInput): Promise<MCPTool[]>;
+    callTool(input: CallToolInput): Promise<MCPResponse>;
+    /** Whether this app has any explicitly enabled Tasks extension action. */
+    hasTaskSupport?(): Promise<boolean>;
+    /** Whether a particular visible tool is task-enabled. */
+    isTaskTool?(name: string): Promise<boolean>;
+    /** Static declaration used by the protocol discovery capability surface. */
+    readonly tasksEnabled?: boolean;
+    /** Create a durable task after applying the same tool policy as tools/call. */
+    callTask?(input: CallToolInput): Promise<MCPResponse>;
+    /** Principal-scoped task lifecycle operations. */
+    getTask?(input: {
+        taskId: string;
+        principal?: McpAppPrincipal | null;
+    }): Promise<McpTask>;
+    updateTask?(input: {
+        taskId: string;
+        inputResponses: Record<string, unknown>;
+        principal?: McpAppPrincipal | null;
+    }): Promise<void>;
+    cancelTask?(input: {
+        taskId: string;
+        principal?: McpAppPrincipal | null;
+    }): Promise<void>;
+    /** Cache policy for protocol tools/list responses. */
+    getToolsListCacheHint?(): Promise<McpToolListCacheHint>;
+    /** Read-only view of the configured server identity. */
+    readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];
+}
+/**
+ * Build the app-runtime MCP server core. The returned object is intentionally
+ * framework-agnostic: HTTP wrappers live in `@happyvertical/smrt-app-mcp/sveltekit`,
+ * this package's only other export.
+ *
+ * This package ships no stdio bridge. To pipe a deployed app's HTTP MCP surface
+ * to a local stdio MCP client, use `@happyvertical/smrt-app-cli`, which provides
+ * a generic `smrt-mcp-bridge` bin plus `runMcpStdioBridge` and
+ * `createAppCli().startMcpBridge()` for branded entry points.
+ */
+export declare function createMcpAppServer(options: CreateMcpAppServerOptions): McpAppServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,KAAK,EACV,SAAS,EACT,WAAW,EACX,OAAO,EACR,MAAM,yCAAyC,CAAC;AAKjD,OAAO,EACL,KAAK,OAAO,EAGb,MAAM,0BAA0B,CAAC;AAUlC;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAW,SAAQ,eAAe;IACjD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAClC,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,OAAO,EAAE,oBAAoB,KAC1B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,CACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE,UAAU,GAAG,IAAI,KACpB,IAAI,CAAC;AAEV;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEhE,mEAAmE;AACnE,MAAM,MAAM,0BAA0B,GAAG,MAAM,SAAS,MAAM,EAAE,CAAC;AAEjE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,UAAU,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAClC;;;OAGG;IACH,aAAa,CAAC,EAAE,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,mEAAmE;IACnE,WAAW,EAAE,mBAAmB,CAAC;IACjC,oDAAoD;IACpD,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GACvD,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACjC;;;;OAIG;IACH,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;IAChD;;;;OAIG;IACH,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC;;;;OAIG;IACH,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CAC3D;AAED,2BAA2B;AAC3B,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wBAAwB;AACxB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CAC1B;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,0EAA0E;IAC1E,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,yDAAyD;IACzD,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,kDAAkD;IAClD,OAAO,CAAC,CAAC,KAAK,EAAE;QACd,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;KACpC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB,UAAU,CAAC,CAAC,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxC,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;KACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,UAAU,CAAC,CAAC,KAAK,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;KACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,sDAAsD;IACtD,qBAAqB,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxD,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC,YAAY,CAAC,CAAC;CAC9D;AAqDD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,yBAAyB,GACjC,YAAY,CAsRd"}

package/dist/smrt-knowledge.json

@@ -3,12 +3,12 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-app-mcp",
-  "packageVersion": "0.51.32",
+  "packageVersion": "0.51.33",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "ff679d29e866c2fee7c465e1860d8f036cac83610dfbdfaba577fef4e7a668fa",
-    "packageJson": "837f8bf64bd6996a2be0dce093a69251e1c1bdbc363da8942e9304fa673939b8",
+    "manifest": "fc2779973c05bfe3e70eca1edaa988f026a9f7ea579ceb3e2e17bbd29953b982",
+    "packageJson": "3ff32319c69910aec08b54929baa3d05372995cf3c63418aed7ca860b481251a",
     "agents": "b4f2b874e2c5c83b91b77ccf4aeaae3fd58ad9eb2aba2e5d1efd118564aa0730"
   },
   "exports": [
@@ -24,7 +24,7 @@
     "@modelcontextprotocol/conformance": "0.2.0-alpha.11",
     "@modelcontextprotocol/node": "2.0.0",
     "@types/node": "24.13.6",
-    "typescript": "5.9.3",
+    "typescript": "6.0.3",
     "vite": "8.1.4",
     "vitest": "4.1.10"
   },

package/dist/sveltekit.d.ts

@@ -1,257 +1,72 @@
-import { MCPConfig } from '@happyvertical/smrt-core/generators/mcp';
-import { MCPResponse } from '@happyvertical/smrt-core/generators/mcp';
-import { McpTask } from '@happyvertical/smrt-jobs';
-import { MCPTool } from '@happyvertical/smrt-core/generators/mcp';
-
-/** Tool call inputs. */
-declare interface CallToolInput {
-    name: string;
-    arguments?: Record<string, unknown>;
-    /** Caller used for public/authenticated and optional tool-policy checks. */
-    principal?: McpAppPrincipal | null;
-    /**
-     * Backwards-compatible user input. New callers should pass `principal`.
-     * Null/undefined means unauthenticated.
-     */
-    user?: McpAppUser | null;
-}
-
-/**
- * Options for `createMcpAppServer`.
- */
-declare interface CreateMcpAppServerOptions {
-    /** SMRT context bag (db, etc.) passed to MCPGenerator per call. */
-    smrtOptions: McpSmrtOptionsThunk;
-    /** Server identity surfaced in the MCP protocol. */
-    serverInfo: Required<Pick<MCPConfig, 'name' | 'version'>> & Pick<MCPConfig, 'description'>;
-    /**
-     * SMRT class names the app wants to publish. Tools whose name does not
-     * start with any of these classes (lowercased + underscore) are filtered
-     * out, even if SMRT generated them.
-     */
-    allowedClassNames: readonly string[];
-    /**
-     * Optional thunk returning glob-ish patterns for read-only tools that
-     * unauthenticated callers are allowed to use. Defaults to an empty list
-     * (everything requires auth).
-     */
-    publicToolPatterns?: McpPublicToolPatternsThunk;
-    /**
-     * Cache policy for the MCP tools/list result. Public caching is honored only
-     * when this explicitly opts in and every allowed tool is a non-tenant,
-     * unauthenticated read-only tool with no principal-aware policy.
-     */
-    toolListCache?: McpToolListCacheOptions;
-    /**
-     * Optional generic principal-aware tool policy. It is evaluated for every
-     * tool that passes the app allow-list and base public/authenticated policy,
-     * for both discovery and a direct call.
-     */
-    toolPolicy?: McpToolPolicy;
-    /**
-     * Optional per-tool guards. Keyed by tool name. The assertion runs after
-     * tool resolution and before `MCPGenerator.handleToolCall`; throwing
-     * `McpAccessError` aborts the call with the error's status. Implementations
-     * may mutate `args` to inject trusted fields.
-     */
-    workflowAssertions?: Record<string, McpWorkflowAssertion>;
-}
-
-/** Tool listing inputs. */
-declare interface ListToolsInput {
-    /** Caller used for public/authenticated and optional tool-policy checks. */
-    principal?: McpAppPrincipal | null;
-    /**
-     * Backwards-compatible authenticated marker. New mounts should pass
-     * `principal` so discovery and direct calls use the same identity.
-     */
-    authenticated?: boolean;
-}
-
-/**
- * Error returned by the MCP app server when a caller tries to use a tool
- * they are not allowed to access. The HTTP layer should map `status` onto
- * the response status code.
- */
-export declare class McpAccessError extends Error {
-    readonly status: number;
-    readonly metadata: McpAccessErrorMetadata;
-    constructor(status: number, message: string, metadata?: McpAccessErrorMetadata);
-}
-
-/**
- * Metadata that is safe to expose for an app-MCP access failure. Policy
- * implementations must not place principal, scope, tool, or internal-error
- * details here.
- */
-declare interface McpAccessErrorMetadata {
-    code?: string;
-    retryable?: boolean;
-}
-
-/**
- * Generic authenticated caller information available to app-MCP policy.
- *
- * `kind`, `roles`, and `scopes` are deliberately unconstrained so an app can
- * represent a human or a scoped service without this package encoding an
- * application's identity or capability model. A missing principal means the
- * request is unauthenticated.
- */
-export declare interface McpAppPrincipal {
-    id?: string;
-    /** Tenant boundary for task ownership and generated tenant-scoped actions. */
-    tenantId?: string;
-    /** Trusted operator override for generated tenant-scoped actions. */
-    allowCrossTenant?: boolean;
-    kind?: string;
-    roles?: string[];
-    scopes?: string[];
-}
-
-/** Shape returned by `createMcpAppServer`. */
-export declare interface McpAppServer {
-    listTools(input: ListToolsInput): Promise<MCPTool[]>;
-    callTool(input: CallToolInput): Promise<MCPResponse>;
-    /** Whether this app has any explicitly enabled Tasks extension action. */
-    hasTaskSupport?(): Promise<boolean>;
-    /** Whether a particular visible tool is task-enabled. */
-    isTaskTool?(name: string): Promise<boolean>;
-    /** Static declaration used by the protocol discovery capability surface. */
-    readonly tasksEnabled?: boolean;
-    /** Create a durable task after applying the same tool policy as tools/call. */
-    callTask?(input: CallToolInput): Promise<MCPResponse>;
-    /** Principal-scoped task lifecycle operations. */
-    getTask?(input: {
-        taskId: string;
-        principal?: McpAppPrincipal | null;
-    }): Promise<McpTask>;
-    updateTask?(input: {
-        taskId: string;
-        inputResponses: Record<string, unknown>;
-        principal?: McpAppPrincipal | null;
-    }): Promise<void>;
-    cancelTask?(input: {
-        taskId: string;
-        principal?: McpAppPrincipal | null;
-    }): Promise<void>;
-    /** Cache policy for protocol tools/list responses. */
-    getToolsListCacheHint?(): Promise<McpToolListCacheHint>;
-    /** Read-only view of the configured server identity. */
-    readonly serverInfo: CreateMcpAppServerOptions['serverInfo'];
-}
-
-/** Minimal legacy user shape used for generated tool-call attribution. */
-declare interface McpAppUser extends McpAppPrincipal {
-    id: string;
-}
-
-/** Locals reader used to pull the request principal out of `event.locals`. */
-export declare type McpPrincipalResolver = (event: SvelteKitRequestEvent) => McpAppPrincipal | null | undefined;
-
-/** Public-tool patterns thunk — same lazy-evaluation rationale. */
-declare type McpPublicToolPatternsThunk = () => readonly string[];
-
-/**
- * SMRT options thunk — returns the `{ db }` (and similar) bag to pass into
- * MCPGenerator's per-request context. A function is used so apps can lazily
- * resolve env vars at call time.
- */
-declare type McpSmrtOptionsThunk = () => Record<string, unknown>;
-
-/** A SvelteKit `+server.ts` request handler with no SvelteKit dependency. */
-export declare type McpSvelteKitHandler = (event: SvelteKitRequestEvent) => Promise<Response>;
-
-declare interface McpToolListCacheHint {
-    ttlMs: number;
-    cacheScope: 'private' | 'public';
-}
-
-declare interface McpToolListCacheOptions {
-    /** Cache lifetime in milliseconds. Defaults to one day for a deploy-static catalog. */
-    ttlMs?: number;
-    /** Requested cache visibility. Defaults to private. */
-    cacheScope?: 'private' | 'public';
-    /**
-     * Explicit attestation that every allowed tool is global, unauthenticated,
-     * and safe to share through an intermediary cache.
-     */
-    publicCatalog?: true;
-}
-
-/**
- * Per-tool access policy. Return `true` to expose/allow the tool and `false`
- * to hide it from discovery and deny a direct call. A thrown error is treated
- * as a denial so policy implementation details cannot escape the app-MCP
- * boundary.
- */
-declare type McpToolPolicy = (context: McpToolPolicyContext) => boolean | Promise<boolean>;
-
-/** Context supplied to the optional per-tool principal policy. */
-declare interface McpToolPolicyContext {
-    principal: McpAppPrincipal | null;
-    tool: MCPTool;
-}
-
-/** Backwards-compatible alias for callers that name the principal a user. */
-export declare type McpUserResolver = McpPrincipalResolver;
-
-/**
- * Workflow assertion hook signature. Throw `McpAccessError` to reject the
- * call. Implementations may mutate `args` in place to inject server-trusted
- * fields (e.g. clamping `approvedByUserId` to the authenticated user's id).
- */
-declare type McpWorkflowAssertion = (args: Record<string, unknown>, user: McpAppUser | null) => void;
-
-/**
- * Mount `server.callTool` as a `POST` handler that expects
- * `{ name, arguments }` in the JSON body.
- *
- * @deprecated Use {@link mountMcpRoute}. Existing REST-shaped mounts can use
- * this compatibility alias while migrating without a coordinated cutover.
- */
-export declare function mountMcpCallRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
-
-/**
- * Mount a modern, stateless Streamable HTTP MCP endpoint as a SvelteKit
- * `POST` handler. The scoped SDK validates the 2026-07-28 envelope plus the
- * required `Mcp-Method` and `Mcp-Name` headers, returning `-32020` on a
- * mismatch. A fresh protocol server is created for each HTTP request, so this
- * route holds neither MCP sessions nor request principal state between nodes.
- */
-export declare function mountMcpRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
-
-/** Options shared by both route mounts. */
-export declare interface MountMcpRouteOptions {
-    /**
-     * Resolve the request principal once for both discovery and direct calls.
-     * Defaults to `event.locals.user`.
-     */
-    resolvePrincipal?: McpPrincipalResolver;
-    /**
-     * Backwards-compatible alias for `resolvePrincipal`.
-     */
-    resolveUser?: McpUserResolver;
-    /**
-     * Deprecated legacy authentication gate. When `resolvePrincipal` is not
-     * supplied, a false result makes the principal null for both routes.
-     */
-    resolveAuthenticated?: (event: SvelteKitRequestEvent) => boolean;
-}
-
-/**
- * Mount `server.listTools` as a `GET` handler. Returns the tool list shape
- * `{ tools }` for compatibility with the stock MCP bridge.
- *
- * @deprecated Use {@link mountMcpRoute}. Existing REST-shaped mounts can use
- * this compatibility alias while migrating without a coordinated cutover.
- */
-export declare function mountMcpToolsRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
-
-/** Minimal subset of a SvelteKit RequestEvent we actually touch. */
-declare type SvelteKitRequestEvent = {
-    locals?: Record<string, unknown>;
-    request: Request;
-    url: URL;
-};
-
-export { }
+/**
+ * SvelteKit route adapters for an `McpAppServer`. Mirrors the
+ * `@happyvertical/smrt-users/sveltekit` pattern: minimal `HandleInput` type
+ * so we never need `@sveltejs/kit` as a real dependency.
+ *
+ * @packageDocumentation
+ *
+ * @example
+ * ```ts
+ * // src/routes/api/mcp/+server.ts
+ * import { mountMcpRoute } from '@happyvertical/smrt-app-mcp/sveltekit';
+ * import { mcpServer } from '$lib/server/mcp';
+ * export const POST = mountMcpRoute(mcpServer);
+ * ```
+ */
+import type { McpAppPrincipal, McpAppServer } from './server.js';
+/** Minimal subset of a SvelteKit RequestEvent we actually touch. */
+type SvelteKitRequestEvent = {
+    locals?: Record<string, unknown>;
+    request: Request;
+    url: URL;
+};
+/** A SvelteKit `+server.ts` request handler with no SvelteKit dependency. */
+export type McpSvelteKitHandler = (event: SvelteKitRequestEvent) => Promise<Response>;
+/** Locals reader used to pull the request principal out of `event.locals`. */
+export type McpPrincipalResolver = (event: SvelteKitRequestEvent) => McpAppPrincipal | null | undefined;
+/** Backwards-compatible alias for callers that name the principal a user. */
+export type McpUserResolver = McpPrincipalResolver;
+/** Options shared by both route mounts. */
+export interface MountMcpRouteOptions {
+    /**
+     * Resolve the request principal once for both discovery and direct calls.
+     * Defaults to `event.locals.user`.
+     */
+    resolvePrincipal?: McpPrincipalResolver;
+    /**
+     * Backwards-compatible alias for `resolvePrincipal`.
+     */
+    resolveUser?: McpUserResolver;
+    /**
+     * Deprecated legacy authentication gate. When `resolvePrincipal` is not
+     * supplied, a false result makes the principal null for both routes.
+     */
+    resolveAuthenticated?: (event: SvelteKitRequestEvent) => boolean;
+}
+/**
+ * Mount a modern, stateless Streamable HTTP MCP endpoint as a SvelteKit
+ * `POST` handler. The scoped SDK validates the 2026-07-28 envelope plus the
+ * required `Mcp-Method` and `Mcp-Name` headers, returning `-32020` on a
+ * mismatch. A fresh protocol server is created for each HTTP request, so this
+ * route holds neither MCP sessions nor request principal state between nodes.
+ */
+export declare function mountMcpRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
+/**
+ * Mount `server.listTools` as a `GET` handler. Returns the tool list shape
+ * `{ tools }` for compatibility with the stock MCP bridge.
+ *
+ * @deprecated Use {@link mountMcpRoute}. Existing REST-shaped mounts can use
+ * this compatibility alias while migrating without a coordinated cutover.
+ */
+export declare function mountMcpToolsRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
+/**
+ * Mount `server.callTool` as a `POST` handler that expects
+ * `{ name, arguments }` in the JSON body.
+ *
+ * @deprecated Use {@link mountMcpRoute}. Existing REST-shaped mounts can use
+ * this compatibility alias while migrating without a coordinated cutover.
+ */
+export declare function mountMcpCallRoute(server: McpAppServer, options?: MountMcpRouteOptions): McpSvelteKitHandler;
+export { McpAccessError } from './errors.js';
+export type { McpAppPrincipal, McpAppServer } from './server.js';
+//# sourceMappingURL=sveltekit.d.ts.map

package/dist/sveltekit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sveltekit.d.ts","sourceRoot":"","sources":["../src/sveltekit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,OAAO,KAAK,EAAiB,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhF,oEAAoE;AACpE,KAAK,qBAAqB,GAAG;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;CACV,CAAC;AAEF,6EAA6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,CAChC,KAAK,EAAE,qBAAqB,KACzB,OAAO,CAAC,QAAQ,CAAC,CAAC;AAQvB,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,qBAAqB,KACzB,eAAe,GAAG,IAAI,GAAG,SAAS,CAAC;AAExC,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAwCnD,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC;;OAEG;IACH,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC;CAClE;AAiBD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,oBAAyB,GACjC,mBAAmB,CA0BrB;AA6OD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,oBAAyB,GACjC,mBAAmB,CAcrB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,oBAAyB,GACjC,mBAAmB,CA0BrB;AAyBD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Tool-name policy helpers — used by `McpAppServer` to filter the full set
+ * of generated tools down to what the calling principal is allowed to see,
+ * and to decide whether an unauthenticated tool call should be permitted.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Match a tool name against a glob-ish pattern with `*` wildcards.
+ *
+ * - Empty pattern → never matches.
+ * - `*` → matches everything.
+ * - `prefix_*` → matches anything starting with `prefix_`.
+ * - `*_suffix` → matches anything ending with `_suffix`.
+ * - `a_*_b` → matches any name containing `a_`, then any text, then `_b`.
+ *
+ * No regex characters are special besides `*` — the input is treated as a
+ * literal string with star wildcards.
+ */
+export declare function matchesToolPattern(toolName: string, pattern: string): boolean;
+/**
+ * Read-only tool detection. Generated SMRT MCP tools follow the naming
+ * convention `<class>_<verb>`; we treat `_list` and `_get` as read-only.
+ */
+export declare function isReadOnlyToolName(toolName: string): boolean;
+/**
+ * Check whether a tool name is currently allowed for unauthenticated callers
+ * given the configured public-tool patterns. Only read-only tools may ever
+ * be public, regardless of pattern.
+ */
+export declare function isPublicToolName(toolName: string, patterns: readonly string[]): boolean;
+/**
+ * Lower-case `<class>_` prefixes the app considers "allowed core tools"
+ * given a list of SMRT class names. Used to build the allow-list for
+ * `McpAppServer.listTools`.
+ */
+export declare function classNamePrefixes(classNames: readonly string[]): ReadonlySet<string>;
+/**
+ * Whether a given tool name starts with any of the configured class
+ * prefixes.
+ */
+export declare function isAllowedCoreTool(toolName: string, prefixes: ReadonlySet<string>): boolean;
+/**
+ * Compare tool names by Unicode code unit, rather than the host locale, so a
+ * catalog has one byte-stable order across every runtime.
+ */
+export declare function compareMcpToolNames(left: string, right: string): number;
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAkB7E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,OAAO,CAKT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,WAAW,CAAC,MAAM,CAAC,CAErB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAC5B,OAAO,CAKT;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-app-mcp",
-  "version": "0.51.32",
+  "version": "0.51.33",
   "description": "App-runtime MCP server scaffolding for SMRT apps — `createMcpAppServer` plus transport adapters (SvelteKit today) for exposing a SMRT app's MCP surface over HTTP.",
   "type": "module",
   "main": "./dist/index.js",
@@ -43,8 +43,8 @@
   ],
   "author": "HappyVertical",
   "dependencies": {
-    "@happyvertical/smrt-core": "0.51.32",
-    "@happyvertical/smrt-jobs": "0.51.32",
+    "@happyvertical/smrt-core": "0.51.33",
+    "@happyvertical/smrt-jobs": "0.51.33",
     "@happyvertical/sql": "^0.94.1",
     "@modelcontextprotocol/server": "2.0.0"
   },
@@ -53,7 +53,7 @@
     "@modelcontextprotocol/conformance": "0.2.0-alpha.11",
     "@modelcontextprotocol/node": "2.0.0",
     "@types/node": "24.13.6",
-    "typescript": "5.9.3",
+    "typescript": "6.0.3",
     "vite": "8.1.4",
     "vitest": "4.1.10"
   },