@happyvertical/smrt-app-runtime 0.60.10 → 0.60.11

package/AGENTS.md

@@ -77,7 +77,12 @@ Application infrastructure composition for the validated runtime profiles in
   `tenantBinding: 'direct'` and the
   `LOCAL_MCP_TOKEN_PRINCIPAL` brand; `runAsPrincipal` rejects a copy that
   widens the binding, so the two public APIs compose safely.
-  Never log or return the token outside `issue()`. The operator store opens an
+  Return bearer material only to the issuing operator or the authenticated
+  desktop credential response. The opt-in `createLocalMcpCredentialHandler`
+  requires a direct loopback peer, matching Host and exact Origin, and the sole
+  active owner's first-class session. Desktop slots use a disjoint ID namespace,
+  atomic hash replacement and terminal revocation. See the desktop protocol in
+  [README.md](README.md). The operator store opens an
   uncached connection and takes no writer lease (revocation is per request).
 - Background jobs and application-defined paid capabilities are default-off.
 - The embedded runner reuses `TaskRunner`; it is not a second job contract.

package/README.md

@@ -168,6 +168,73 @@ explicitly enabled. With embedded job topology, `createEmbeddedJobRunner()`
 returns the normal s-m-r-t `TaskRunner`, so the application keeps one enqueue
 and execution contract without requiring a separate worker service.
 
+### Local desktop MCP credentials
+
+A desktop product can mount this opt-in SvelteKit route in
+`src/routes/api/local/mcp-credentials/+server.ts`.
+
+```ts
+import { createLocalMcpCredentialHandler } from '@happyvertical/smrt-app-runtime/sveltekit';
+import { runtime } from '$lib/server/smrt';
+
+export const POST = createLocalMcpCredentialHandler(runtime);
+```
+
+Serve it on the desktop app's direct loopback listener, with the adapter's
+socket peer address and request Host. Keep forwarded address, host, and
+protocol configuration unset. Set adapter-node's
+`ORIGIN` to the actual desktop URL, such as `http://127.0.0.1:4678`, because
+adapter-node otherwise assumes HTTPS. The handler checks the socket peer,
+loopback URL host, matching Host and exact Origin. When the browser
+sends `Sec-Fetch-Site`, it must be `same-origin`. Call the endpoint from the
+app's signed-in, same-origin desktop webview using its normal session cookie.
+The session must use local bootstrap, password or passkey authentication,
+have a direct active membership, and match the sole active system Owner
+membership of the installation. Device, layered and permission-capped sessions
+are rejected.
+
+Send a JSON POST with an opaque lowercase UUIDv4 `id` generated by the
+desktop app, a nonempty array of permission slugs, and an explicit integer
+lifetime from 60 to 31,536,000 seconds.
+
+```json
+{
+  "action": "put",
+  "id": "2c70f518-b95a-445b-a75e-8126ae7c032a",
+  "scopes": ["notes.read"],
+  "expiresInSeconds": 3600
+}
+```
+
+The first PUT creates the slot. A later POST with the same `action: "put"`
+replaces its bearer, scopes and expiry atomically. Scopes must be held by
+both the live owner and the authenticated session. Successful replies carry
+`{ id, token, scopes, expiresAt }` in a private `Cache-Control: no-store`
+response. Pass the bearer directly to native credential handling for the MCP
+bridge. Keep it out of arguments, URLs, logs, browser storage, and generated
+plugin artifacts. The installation secret stays on the server, and the
+database stores only the bearer HMAC.
+
+Persist the non-secret slot ID before the first request and serialize actions
+per slot. A failed write preserves the previous credential. If the outcome is
+unknown or the response is lost, repeat PUT with the same ID. Each successful
+write produces a fresh credential, and only the latest committed write
+verifies. A retry therefore recovers the slot without leaving an extra active
+credential.
+
+Send `{ "action": "revoke", "id": "<slot-id>" }` with an unrestricted owner
+session to disconnect. Repeating it returns `{ "status": "revoked" }`.
+Revocation is permanent for the slot even if a PUT was delayed or no PUT
+completed, so use a new UUID to reconnect. The operator CLI can list or
+revoke the stored UUIDv8 record. Desktop slots and manual CLI token IDs are
+separate namespaces.
+
+Failures carry a fixed `code` and no credentials. A revoked slot returns
+`409 slot_unavailable`; validation failures return `400 invalid_request`
+or `400 invalid_scope`; requests failing the trust checks return
+`403 forbidden`. Deployed profiles return `404 unavailable` to requests
+that reach the profile check.
+
 ## SvelteKit entry
 
 `@happyvertical/smrt-app-runtime/sveltekit` composes the profile runtime,

package/dist/chunks/{src-DOepXMDO.js → src-DG72tyzB.js}

@@ -708,6 +708,8 @@ var MAX_SCOPE_LENGTH = 128;
 var MAX_LABEL_LENGTH = 80;
 var SCOPE_PATTERN = /^[\x21\x23-\x5b\x5d-\x7e]+$/u;
 var TOKEN_PATTERN = /^smrt_mcp_[A-Za-z0-9_-]{43}$/u;
+var DESKTOP_SLOT_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;
+var DESKTOP_SLOT_LABEL = "Desktop integration";
 var TOKEN_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u;
 var HMAC_DOMAIN = "smrt.local-mcp-token.v1\0";
 var LOCAL_MCP_TOKEN_PRINCIPAL = /* @__PURE__ */ Symbol.for("@happyvertical/smrt-app-runtime/local-mcp-token-principal");
@@ -764,7 +766,7 @@ function createLocalMcpTokenStore(deps) {
 			if (fields === null || typeof fields !== "object") throw fail("invalid_configuration", "MCP token input must be an object.");
 			const scopes = normalizeScopes(ownValue(fields, "scopes"), fail);
 			const ttl = ownValue(fields, "expiresInSeconds") ?? 2592e3;
-			if (!Number.isSafeInteger(ttl) || ttl < 60 || ttl > 31536e3) throw fail("invalid_configuration", "MCP token lifetime must be between one minute and 365 days.");
+			validateTtl(ttl, fail);
 			const label = normalizeLabel(ownValue(fields, "label"), fail);
 			const owner = await deps.findOwner(db);
 			if (!owner) throw fail("owner_unavailable", "No local owner exists yet; finish owner setup before issuing MCP tokens.");
@@ -789,6 +791,58 @@ function createLocalMcpTokenStore(deps) {
 				expiresAt
 			});
 		},
+		async manageDesktopCredential(session, input) {
+			let request;
+			try {
+				request = deepFrozenPlainCopy(input);
+			} catch (error) {
+				if (!(error instanceof PlainDataError)) throw error;
+				throw fail("invalid_configuration", "Invalid desktop MCP input.");
+			}
+			if (typeof request?.id !== "string" || !DESKTOP_SLOT_ID_PATTERN.test(request.id)) throw fail("invalid_configuration", "Invalid desktop MCP slot id.");
+			const id = `${request.id.slice(0, 14)}8${request.id.slice(15)}`;
+			const { userId, tenantId, permissions } = session;
+			const allowed = new Set(permissions);
+			const owner = await deps.findOwner(db, true);
+			if (!owner || owner.userId !== userId || owner.tenantId !== tenantId) throw fail("owner_unavailable", "The local owner session is required.");
+			const user = await (await UserCollection.create({ db })).get({ id: owner.userId });
+			const held = await livePermissions(owner.userId, owner.tenantId);
+			if (!user?.isActive() || !held) throw fail("owner_unavailable", "The local owner session is required.");
+			const created = now();
+			const createdAt = created.toISOString();
+			if (request.action === "revoke") return (await db.query(`INSERT INTO _smrt_local_mcp_tokens
+             (id, token_hash, user_id, tenant_id, scopes, label, created_at, expires_at, revoked_at)
+           VALUES (?, ?, ?, ?, '[]', ?, ?, ?, ?)
+           ON CONFLICT(id) DO UPDATE SET revoked_at =
+             coalesce(_smrt_local_mcp_tokens.revoked_at, excluded.revoked_at)
+           WHERE _smrt_local_mcp_tokens.user_id = excluded.user_id
+             AND _smrt_local_mcp_tokens.tenant_id = excluded.tenant_id
+           RETURNING id`, id, randomBytes(32).toString("hex"), owner.userId, owner.tenantId, DESKTOP_SLOT_LABEL, createdAt, createdAt, createdAt)).rows.length > 0 ? "revoked" : "slot_unavailable";
+			if (request.action !== "put") throw fail("invalid_configuration", "Invalid desktop MCP action.");
+			const scopes = normalizeScopes(request.scopes, fail);
+			validateTtl(request.expiresInSeconds, fail);
+			if (scopes.some((scope) => !held.has(scope) || !allowed.has(scope))) throw fail("invalid_scope", "Desktop MCP scopes are not authorized.");
+			const expiresAt = new Date(created.getTime() + request.expiresInSeconds * 1e3).toISOString();
+			const token = `${LOCAL_MCP_TOKEN_PREFIX}${randomBytes(32).toString("base64url")}`;
+			if ((await db.query(`INSERT INTO _smrt_local_mcp_tokens
+           (id, token_hash, user_id, tenant_id, scopes, label, created_at, expires_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(id) DO UPDATE SET
+           token_hash = excluded.token_hash, scopes = excluded.scopes,
+           created_at = excluded.created_at, expires_at = excluded.expires_at
+         WHERE _smrt_local_mcp_tokens.revoked_at IS NULL
+           AND _smrt_local_mcp_tokens.user_id = excluded.user_id
+           AND _smrt_local_mcp_tokens.tenant_id = excluded.tenant_id
+         RETURNING id`, id, await hashToken(token), owner.userId, owner.tenantId, JSON.stringify(scopes), DESKTOP_SLOT_LABEL, createdAt, expiresAt)).rows.length === 0) return "slot_unavailable";
+			return Object.freeze({
+				id,
+				token,
+				scopes: Object.freeze(scopes),
+				label: DESKTOP_SLOT_LABEL,
+				createdAt,
+				expiresAt
+			});
+		},
 		async list() {
 			await ensureLocalMcpTokenTable(db);
 			const result = await db.query(`SELECT id, scopes, label, created_at, expires_at, revoked_at
@@ -848,6 +902,9 @@ function createLocalMcpTokenStore(deps) {
 		}
 	});
 }
+function validateTtl(ttl, fail) {
+	if (!Number.isSafeInteger(ttl) || ttl < 60 || ttl > 31536e3) throw fail("invalid_configuration", "MCP token lifetime must be between one minute and 365 days.");
+}
 function normalizeScopes(value, fail) {
 	if (!Array.isArray(value) || value.length === 0) throw fail("invalid_scope", "An MCP token needs at least one scope.");
 	if (value.length > MAX_SCOPES) throw fail("invalid_scope", "An MCP token may carry at most 64 scopes.");
@@ -2063,11 +2120,12 @@ function resolveOwnerTenant(options) {
 		adoptExisting: options?.adoptExisting === true
 	});
 }
-async function findExistingOwner(db) {
+async function findExistingOwner(db, requireUnique = false) {
 	const ownerRole = await (await RoleCollection.create({ db })).findSystemRoleBySlug(DEFAULT_ROLE_SLUGS.OWNER);
 	if (!ownerRole?.id) return null;
-	const active = (await (await MembershipCollection.create({ db })).findByRole(ownerRole.id)).find((membership) => membership.status === MembershipStatus.ACTIVE && typeof membership.userId === "string" && typeof membership.tenantId === "string");
-	return active ? {
+	const activeOwners = (await (await MembershipCollection.create({ db })).findByRole(ownerRole.id)).filter((membership) => membership.status === MembershipStatus.ACTIVE && typeof membership.userId === "string" && typeof membership.tenantId === "string");
+	const active = activeOwners[0];
+	return active && (!requireUnique || activeOwners.length === 1) ? {
 		userId: active.userId,
 		tenantId: active.tenantId
 	} : null;
@@ -2817,4 +2875,4 @@ function isDirectoryNotEmpty(error) {
 //#endregion
 export { reclaimStaleRecord as A, deepFrozenPlainCopy as B, findInstalledPackage as C, processExists as D, lockOwnerPid as E, LOCAL_MCP_TOKEN_PRINCIPAL as F, initializeDeployedApplicationRuntime as G, resolveBoundMembershipPermissions as H, LOCAL_MCP_TOKEN_TABLE as I, isSessionTenantAuthorized as K, MAX_LOCAL_MCP_TOKEN_TTL_SECONDS as L, runtimeConfigurationFingerprint as M, DEFAULT_LOCAL_MCP_TOKEN_TTL_SECONDS as N, withOperationLock as O, LOCAL_MCP_TOKEN_PREFIX as P, isLocalMcpTokenPrincipal as R, createProviderReadinessProbe as S, isStaleOperationLock as T, DeployedRuntimeCleanupError as U, ownValue as V, DeployedRuntimeError as W, MAX_RUNTIME_DIAGNOSTIC_TOOLS as _, openLocalMcpTokenStore as a, projectRuntimeDiagnostics as b, validateApplicationId as c, readActiveWriterLease as d, ONBOARDING_HANDOFF_FILES as f, MAX_RUNTIME_DIAGNOSTIC_ERRORS as g, resolveApplicationStateRoot as h, initializeLocalApplicationRuntime as i, resolveApplicationId as j, RECLAIM_MUTEX_FILE as k, validateLocalDatabaseStorage as l, removeOnboardingHandoff as m, MIGRATION_FAILED_MESSAGE as n, prepareLocalDatabaseStorage as o, prepareApplicationStateRoot as p, encodeApplicationId as r, resolveLocalRuntimePaths as s, LocalRuntimeError as t, acquireWriterLease as u, RUNTIME_DIAGNOSTICS_SCHEMA_VERSION as v, resolveReadinessModule as w, PROVIDER_READINESS_SETTINGS as x, RUNTIME_WORKER_FRESHNESS_SECONDS as y, PlainDataError as z };
 
-//# sourceMappingURL=src-DOepXMDO.js.map
+//# sourceMappingURL=src-DG72tyzB.js.map