@happyvertical/smrt-app-mcp 0.53.3 → 0.53.4

package/dist/defaults.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Defaults for an application MCP server built from the app's own declared
+ * models. The defaults can only narrow what `createMcpAppServer` exposes:
+ * the allow-list is the explicit model list, and every authenticated caller
+ * must be a principal of an accepted kind with a stable id, a tenant, and
+ * every required scope. Applications that need a wider policy compose
+ * `createMcpAppServer` directly.
+ *
+ * @packageDocumentation
+ */
+import { ObjectRegistry } from '@happyvertical/smrt-core';
+import type { McpResourcePolicy } from './resources.js';
+import { type CreateMcpAppServerOptions, type McpAppPrincipal, type McpAppServer, type McpTaskPrincipalPolicy, type McpToolPolicy } from './server.js';
+/** A `@smrt()` model constructor whose generated tools the app publishes. */
+export type McpAppModel = Parameters<typeof ObjectRegistry.getClassByConstructor>[0];
+/** Server identity used when an application does not supply one. */
+export declare const DEFAULT_MCP_APP_SERVER_INFO: Readonly<{
+    name: "smrt-app";
+    version: "0.1.0";
+}>;
+/**
+ * Resolve the registered class names for an explicit list of model
+ * constructors. Every entry must be a registered `@smrt()` class; nothing is
+ * inferred from the registry, so an application never publishes framework or
+ * dependency models by accident.
+ */
+export declare function mcpAllowedClassNames(models: readonly McpAppModel[]): string[];
+/** Options for {@link mcpPrincipalScopePolicy}. */
+export interface McpPrincipalScopePolicyOptions {
+    /** Every scope an authenticated principal must hold. May be empty. */
+    requiredScopes: readonly string[];
+    /** Accepted principal kinds. Defaults to `['human']`. */
+    principalKinds?: readonly string[];
+}
+/**
+ * Build the default principal policy shared by tools and resources.
+ *
+ * An authenticated principal passes only with an accepted `kind`, a stable
+ * `id`, a `tenantId`, and every required scope. An absent principal passes
+ * this policy because the server's base rule has already restricted it to
+ * tools selected by `publicToolPatterns` that are read-only, and to resources
+ * explicitly declared `public: true`; with neither configured an anonymous
+ * caller reaches nothing.
+ */
+export declare function mcpPrincipalScopePolicy(options: McpPrincipalScopePolicyOptions): (context: {
+    principal: McpAppPrincipal | null;
+}) => boolean;
+/** Options for {@link createDefaultMcpAppServer}. */
+export interface CreateDefaultMcpAppServerOptions extends Omit<CreateMcpAppServerOptions, 'allowedClassNames' | 'serverInfo' | 'toolPolicy' | 'resourcePolicy' | 'taskPrincipalPolicy'> {
+    /**
+     * The app's own `@smrt()` models to publish. Explicit: nothing else that is
+     * registered (framework, dependency or fixture models) is exposed.
+     */
+    models: readonly McpAppModel[];
+    /**
+     * Scopes every authenticated principal must hold for every tool and
+     * resource. With the SvelteKit session default these are the permission
+     * slugs from `locals.permissions` (for example `items.read`); with bearer
+     * authentication they are the token's granted scopes. Required so the
+     * permission gate is always an explicit application decision; pass `[]`
+     * only when every authenticated tenant member may use every published tool.
+     */
+    requiredScopes: readonly string[];
+    /** Accepted principal kinds. Defaults to `['human']`. */
+    principalKinds?: readonly string[];
+    /** Server identity. Defaults to {@link DEFAULT_MCP_APP_SERVER_INFO}. */
+    serverInfo?: CreateMcpAppServerOptions['serverInfo'];
+    /** Additional tool policy. Composed with the default; it can only narrow. */
+    toolPolicy?: McpToolPolicy;
+    /** Additional resource policy. Composed with the default; it can only narrow. */
+    resourcePolicy?: McpResourcePolicy;
+    /**
+     * Additional task lifecycle predicate. Composed with the default principal
+     * scope policy, which already gates `tasks/get`/`update`/`cancel`; it can
+     * only narrow.
+     */
+    taskPrincipalPolicy?: McpTaskPrincipalPolicy;
+}
+/**
+ * Create an `McpAppServer` from the app's declared models with the default
+ * principal policy. Unauthenticated callers keep the base public read-only
+ * rule; mutating tools always require an authenticated principal. Because the
+ * default policy is principal-aware, `tools/list` stays privately cacheable
+ * even when `toolListCache` requests public caching.
+ */
+export declare function createDefaultMcpAppServer(options: CreateDefaultMcpAppServerOptions): McpAppServer;
+//# sourceMappingURL=defaults.d.ts.map

package/dist/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../src/defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EACL,KAAK,yBAAyB,EAE9B,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAErB,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG,UAAU,CAClC,OAAO,cAAc,CAAC,qBAAqB,CAC5C,CAAC,CAAC,CAAC,CAAC;AAEL,oEAAoE;AACpE,eAAO,MAAM,2BAA2B;;;EAGtC,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,EAAE,CAkB7E;AAED,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,sEAAsE;IACtE,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,yDAAyD;IACzD,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAuBD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,8BAA8B,GACtC,CAAC,OAAO,EAAE;IAAE,SAAS,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,KAAK,OAAO,CAoB7D;AAED,qDAAqD;AACrD,MAAM,WAAW,gCACf,SAAQ,IAAI,CACV,yBAAyB,EACvB,mBAAmB,GACnB,YAAY,GACZ,YAAY,GACZ,gBAAgB,GAChB,qBAAqB,CACxB;IACD;;;OAGG;IACH,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IAC/B;;;;;;;OAOG;IACH,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,yDAAyD;IACzD,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,wEAAwE;IACxE,UAAU,CAAC,EAAE,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACrD,6EAA6E;IAC7E,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,iFAAiF;IACjF,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,sBAAsB,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gCAAgC,GACxC,YAAY,CA6Bd"}

package/dist/errors.d.ts

@@ -1,5 +1,7 @@
 /** Machine-readable code for a principal policy denial. */
 export declare const MCP_TOOL_ACCESS_DENIED_CODE = "mcp_tool_access_denied";
+/** Machine-readable code for a request refused by the endpoint's origin check. */
+export declare const MCP_ORIGIN_DENIED_CODE = "mcp_origin_denied";
 /**
  * Metadata that is safe to expose for an app-MCP access failure. Policy
  * implementations must not place principal, scope, tool, or internal-error

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAEvB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB;gBAFhC,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACN,QAAQ,GAAE,sBAA2B;CAKjD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,KAAK;IAErC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAEvB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB;gBAFhC,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EACN,QAAQ,GAAE,sBAA2B;CAKjD"}

package/dist/index.d.ts

@@ -22,10 +22,11 @@
  * @packageDocumentation
  */
 export { continueMcpWorkflow, createMcpContinuationTool, type McpWorkflowContinuation, } from './continuation.js';
-export { MCP_TOOL_ACCESS_DENIED_CODE, McpAccessError, type McpAccessErrorMetadata, } from './errors.js';
+export { type CreateDefaultMcpAppServerOptions, createDefaultMcpAppServer, DEFAULT_MCP_APP_SERVER_INFO, type McpAppModel, type McpPrincipalScopePolicyOptions, mcpAllowedClassNames, mcpPrincipalScopePolicy, } from './defaults.js';
+export { MCP_ORIGIN_DENIED_CODE, MCP_TOOL_ACCESS_DENIED_CODE, McpAccessError, type McpAccessErrorMetadata, } from './errors.js';
 export { createMcpProtocolServer, createMcpProtocolServerForRequest, type McpProtocolRequestOptions, type McpProtocolServerOptions, } from './protocol.js';
 export { MCP_APP_RESOURCE_MAX_BYTES, MCP_APP_RESOURCE_MIME, type McpAppResource, type McpAppResourceContent, type McpAppResourceCsp, type McpAppResourceDefinition, type McpResourcePolicy, prepareMcpAppResource, } from './resources.js';
-export { type CallToolInput, type CreateMcpAppServerOptions, createMcpAppServer, type ListToolsInput, type McpAppPrincipal, type McpAppServer, type McpAppUser, type McpPublicToolPatternsThunk, type McpSmrtOptionsThunk, type McpToolListCacheHint, type McpToolListCacheOptions, type McpToolPolicy, type McpToolPolicyContext, type McpWorkflowAssertion, } from './server.js';
-export { classNamePrefixes, isAllowedCoreTool, isPublicMcpTool, isPublicToolName, isReadOnlyToolName, matchesToolPattern, } from './tools.js';
+export { type CallToolInput, type CreateMcpAppServerOptions, createMcpAppServer, type ListToolsInput, type McpAppPrincipal, type McpAppServer, type McpAppUser, type McpPublicToolPatternsThunk, type McpSmrtOptionsThunk, type McpTaskPrincipalPolicy, type McpToolListCacheHint, type McpToolListCacheOptions, type McpToolPolicy, type McpToolPolicyContext, type McpWorkflowAssertion, } from './server.js';
+export { classNamePrefixes, isAllowedCoreTool, isPublicMcpTool, isPublicToolName, isReadOnlyToolName, MCP_TOOL_EFFECTS, type McpToolEffect, matchesToolPattern, mcpToolEffect, } from './tools.js';
 export { createMcpWorkflowTool, type McpWorkflowTool, type McpWorkflowToolContext, type McpWorkflowToolDefinition, type McpWorkflowToolVisibility, } from './workflow-tools.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,2BAA2B,EAC3B,cAAc,EACd,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,gCAAgC,EACrC,yBAAyB,EACzB,2BAA2B,EAC3B,KAAK,WAAW,EAChB,KAAK,8BAA8B,EACnC,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,cAAc,EACd,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,GAC9B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,aAAa,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,qBAAqB,CAAC"}