@happyvertical/smrt-cli 0.53.3 → 0.53.5

package/dist/app/portability.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Logical application export/import (schemaVersion 2 bundles).
+ *
+ * Ported unchanged from the template's `scripts/smrt-portability.mjs`: the
+ * bundle shape, non-portable table/column rules, parent-first import plan,
+ * empty-target rule, and asset staging/recovery are a persisted contract.
+ */
+import type { DatabaseInterface } from '@happyvertical/sql';
+import { type AssetBundle, type PortableRow, type PortableTable } from './portability-assets.js';
+/** Column definition fields the import planner reads from the manifest. */
+export interface PortableColumnDefinition {
+    primaryKey?: boolean;
+    notNull?: boolean;
+    foreignKey?: {
+        table?: string;
+    };
+    [key: string]: unknown;
+}
+/** Manifest-derived application table. */
+export interface ManifestTable {
+    name: string;
+    columns: string[];
+    columnDefinitions: Record<string, PortableColumnDefinition>;
+    foreignKeys: Array<{
+        column: string;
+        referencesTable: string;
+    }>;
+    primaryKeys: string[];
+}
+/** Planned import step; `deferredColumns` are filled by a later UPDATE. */
+export interface PlannedImportTable extends ManifestTable {
+    deferredColumns: Set<string>;
+}
+/** A schemaVersion-2 logical bundle. */
+export interface LogicalExportBundle {
+    schemaVersion: 2;
+    application: string;
+    profile: string;
+    exportedAt: string;
+    tables: PortableTable[];
+    assets: AssetBundle;
+}
+/** Runtime selection the adapter needs. */
+export interface PortabilityRuntime {
+    profile: string;
+    providers: {
+        database: {
+            engine: string;
+        };
+    };
+}
+/** Context for {@link exportApplication} / {@link importApplication}. */
+export interface PortabilityContext {
+    appId: string;
+    sourceRoot: string;
+    stateRoot: string;
+    runtime: PortabilityRuntime;
+    env: Record<string, string | undefined>;
+    paths: {
+        root: string;
+        assets: string;
+    } | null;
+    assetRoot: string | null;
+    path?: string;
+    /** Test seam: observe import phases (`assets-staged`, …). */
+    onImportPhase?: (phase: string) => Promise<void> | void;
+    /** Test seam: replace the database opener. */
+    openDatabase?: (options: Record<string, unknown>) => Promise<DatabaseInterface>;
+}
+/** Read the application tables from `<sourceRoot>/.smrt/manifest.json`. */
+export declare function manifestTables(sourceRoot: string): ManifestTable[];
+/** Parent-first insertion plan with nullable cycle edges deferred to updates. */
+export declare function planImportTables(tables: ManifestTable[]): PlannedImportTable[];
+/** Reject bundles that do not exactly match the generated schema. */
+export declare function validateImportBundle(bundle: {
+    tables: unknown[];
+}, expected: Map<string, Pick<ManifestTable, 'name' | 'columns'>>): void;
+/** JSON cannot represent SQLite's lossless BigInt results; decimal strings do. */
+export declare function serializeExportBundle(bundle: unknown): string;
+/** Result reported by `smrt app export`. */
+export interface ExportResult {
+    path: string;
+    tableCount: number;
+    assetsIncluded: true;
+    assetCount: number;
+}
+/** Write a logical export bundle without replacing an existing file. */
+export declare function exportApplication(context: PortabilityContext): Promise<ExportResult>;
+/** Minimal query surface the import plan needs (a transaction handle). */
+export interface ImportExecutor {
+    query(sql: string, ...params: unknown[]): Promise<{
+        rows: Array<Record<string, unknown>>;
+    }>;
+}
+/** Execute a prevalidated parent-first import against one database transaction. */
+export declare function executeImportPlan(tx: ImportExecutor, plan: PlannedImportTable[], exportedByName: Map<string, {
+    rows: PortableRow[];
+}>): Promise<number>;
+/**
+ * True when every planned table holds exactly the bundle's rows (as a
+ * multiset over the bundle's columns). This is the evidence an interrupted
+ * import's recovery needs when no commit marker was recorded: matching
+ * per-table counts alone do not prove the rows are this bundle's.
+ */
+export declare function importedRowsMatchBundle(db: ImportExecutor, plan: PlannedImportTable[], exportedByName: Map<string, {
+    rows: PortableRow[];
+}>): Promise<boolean>;
+/** Result reported by `smrt app import`. */
+export interface ImportResult {
+    path: string;
+    rowCount: number;
+    assetsIncluded: true;
+    assetCount: number;
+}
+/** Import a logical bundle into an empty application database. */
+export declare function importApplication(context: PortabilityContext): Promise<ImportResult>;
+//# sourceMappingURL=portability.d.ts.map

package/dist/app/portability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portability.d.ts","sourceRoot":"","sources":["../../src/app/portability.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAG5D,OAAO,EACL,KAAK,WAAW,EAOhB,KAAK,WAAW,EAChB,KAAK,aAAa,EAQnB,MAAM,yBAAyB,CAAC;AAQjC,2EAA2E;AAC3E,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC5D,WAAW,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC9B;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,2CAA2C;AAC3C,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QAAE,QAAQ,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;CAC7C;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxD,8CAA8C;IAC9C,YAAY,CAAC,EAAE,CACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACjC;AAkBD,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,EAAE,CA6ClE;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,aAAa,EAAE,GACtB,kBAAkB,EAAE,CAkCtB;AAiCD,qEAAqE;AACrE,wBAAgB,oBAAoB,CAClC,MAAM,EAAE;IAAE,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,EAC7B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAC7D,IAAI,CA6CN;AAED,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAM7D;AAED,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wEAAwE;AACxE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAmFvB;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,KAAK,CACH,GAAG,EAAE,MAAM,EACX,GAAG,MAAM,EAAE,OAAO,EAAE,GACnB,OAAO,CAAC;QAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC,CAAC;CACtD;AAED,mFAAmF;AACnF,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,kBAAkB,EAAE,EAC1B,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC,GACnD,OAAO,CAAC,MAAM,CAAC,CA+CjB;AA+CD;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,cAAc,EAClB,IAAI,EAAE,kBAAkB,EAAE,EAC1B,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC,GACnD,OAAO,CAAC,OAAO,CAAC,CAelB;AAED,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,kEAAkE;AAClE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAmJvB"}

package/dist/app/process-record.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Managed web-process record (`<state>/app.pid`).
+ *
+ * Ported from the template's `scripts/smrt-process.mjs`. A recorded pid is
+ * only trusted when the live process's command line proves it is the web
+ * launcher with this record's instance nonce, so a recycled pid is never
+ * signalled.
+ */
+/** Persisted web-process identity. */
+export interface ApplicationProcessRecord {
+    pid: number;
+    instance: string;
+}
+/** File name of the web launcher; part of the process-identity proof. */
+export declare const WEB_LAUNCHER_NAME = "smrt-web.mjs";
+/** Write the private (mode 0600) process record. */
+export declare function writeProcessRecord(path: string, record: ApplicationProcessRecord): void;
+/**
+ * Send SIGTERM. Returns `false` when the process had already exited; any
+ * other failure (e.g. EPERM) is rethrown.
+ */
+export declare function sendTerminationSignal(pid: number, killProcess?: (pid: number, signal: NodeJS.Signals) => unknown): boolean;
+/**
+ * True when `command` is exactly the web launcher started with this record's
+ * nonce: the final argument is `--smrt-instance=<instance>` and the argument
+ * before it is a path whose basename is `smrt-web.mjs` (the CLI's
+ * `bin/smrt-web.mjs`, or the template's `scripts/smrt-web.mjs`). Substring
+ * matches such as `evil-smrt-web.mjs` or a nonce with a suffix are rejected.
+ */
+export declare function matchesApplicationProcess(record: Pick<ApplicationProcessRecord, 'instance'>, command: unknown): boolean;
+/** Result of re-checking a recorded web process. */
+export type OwnedProcessState = 
+/** Live and provably the recorded launcher. */
+'owned'
+/** The pid no longer exists. */
+ | 'gone'
+/** The pid is live but runs something else (recycled pid). */
+ | 'mismatched'
+/** The pid is live but its command line could not be read. */
+ | 'unverifiable';
+/**
+ * Re-check `record` against the live process table. Only `gone` and
+ * `mismatched` justify dropping the record; `unverifiable` (the process
+ * query failed or returned nothing) must keep it and must not signal.
+ */
+export declare function checkOwnedProcess(record: ApplicationProcessRecord): OwnedProcessState;
+/** True only when {@link checkOwnedProcess} proves the record still owned. */
+export declare function verifyOwnedProcess(record: ApplicationProcessRecord): boolean;
+/**
+ * Return the recorded web process when it is live and provably ours;
+ * otherwise remove the stale record and return `null`.
+ */
+export declare function readOwnedProcess(path: string): ApplicationProcessRecord | null;
+//# sourceMappingURL=process-record.d.ts.map

package/dist/app/process-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-record.d.ts","sourceRoot":"","sources":["../../src/app/process-record.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,sCAAsC;AACtC,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAsBhD,oDAAoD;AACpD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,wBAAwB,GAC/B,IAAI,CAEN;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,WAAW,GAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,OAAsB,GAC3E,OAAO,CAQT;AAWD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,UAAU,CAAC,EAClD,OAAO,EAAE,OAAO,GACf,OAAO,CAST;AAED,oDAAoD;AACpD,MAAM,MAAM,iBAAiB;AAC3B,+CAA+C;AAC7C,OAAO;AACT,gCAAgC;GAC9B,MAAM;AACR,8DAA8D;GAC5D,YAAY;AACd,8DAA8D;GAC5D,cAAc,CAAC;AAYnB;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,wBAAwB,GAC/B,iBAAiB,CAOnB;AAED,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAE5E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GACX,wBAAwB,GAAG,IAAI,CAoCjC"}

package/dist/app/runtime.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Shared per-invocation context for the `smrt app` command group: source
+ * root, application identity, I/O, child-process runners, and the
+ * profile-aware runtime environment.
+ */
+import { type SpawnSyncReturns } from 'node:child_process';
+import type * as AppRuntime from '@happyvertical/smrt-app-runtime';
+import type { ResolvedApplicationRuntime } from '@happyvertical/smrt-config';
+/** Output sinks. Each call receives complete text including the newline. */
+export interface AppCommandIo {
+    stdout(text: string): void;
+    stderr(text: string): void;
+    /**
+     * Operator-only sink for secret material (the one-time onboarding URL).
+     * Present only when it reaches an interactive terminal; never a log, pipe,
+     * or file. Absent means the secret is not printed.
+     */
+    operatorTerminal?(text: string): void;
+}
+/** Options for a child command run. */
+export interface RunOptions {
+    env?: NodeJS.ProcessEnv;
+    /** Capture stdout/stderr instead of inheriting the terminal. */
+    capture?: boolean;
+    /** Return a failed result instead of throwing. */
+    allowFailure?: boolean;
+    /** Secret-free name used in the failure message. */
+    label?: string;
+    shell?: boolean;
+}
+/** Child-process runner signature. */
+export type CommandRunner = (args: string[], options?: RunOptions) => SpawnSyncReturns<string>;
+/** Replaceable collaborators. Production values are filled in by default. */
+export interface AppCommandDependencies {
+    /** `@happyvertical/smrt-app-runtime` entry points. */
+    runtime: Pick<typeof AppRuntime, 'initializeLocalApplicationRuntime' | 'initializeDeployedApplicationRuntime' | 'prepareLocalDatabaseStorage' | 'resolveLocalRuntimePaths' | 'validateLocalDatabaseStorage'> & Partial<Pick<typeof AppRuntime, 'openLocalMcpTokenStore'>>;
+    /** Resolve the configured runtime after (re)loading `smrt.config`. */
+    resolveRuntime(sourceRoot: string): Promise<ResolvedApplicationRuntime>;
+    /** Run the application's package manager (`pnpm <args>`). */
+    runPackageManager: CommandRunner;
+    /** Run this CLI (`smrt <args>`) as a child process. */
+    runSmrt: CommandRunner;
+    /** Open a URL in the operator's browser. */
+    openBrowser(url: string): void;
+    /** Health probe transport for `start`. */
+    fetch: typeof fetch;
+    /** Delay between readiness polls. */
+    sleep(milliseconds: number): Promise<void>;
+    /** Signal a process (`start` cleanup). */
+    signal(pid: number, signal: NodeJS.Signals): void;
+}
+/** Per-invocation context. */
+export interface AppContext {
+    readonly sourceRoot: string;
+    readonly appId: string;
+    readonly io: AppCommandIo;
+    readonly deps: AppCommandDependencies;
+}
+/** Locate this package's root (`…/smrt-cli`) from the running module. */
+export declare function cliPackageRoot(): string;
+/** Absolute path of the `smrt` executable shipped with this package. */
+export declare function cliExecutablePath(): string;
+/** Absolute path of the web launcher `start` spawns. */
+export declare function webLauncherPath(): string;
+/** Load `<sourceRoot>/.env` without overriding the shell; a missing file is fine. */
+export declare function loadSourceEnvironment(sourceRoot: string): void;
+/** Default package-manager runner: honours a pnpm `npm_execpath`. */
+export declare function createPackageManagerRunner(sourceRoot: string): CommandRunner;
+/** Default self-runner: this package's own `smrt` executable. */
+export declare function createSmrtRunner(sourceRoot: string): CommandRunner;
+/** Default browser opener (`SMRT_OPEN_STUB` writes the URL to a file instead). */
+export declare function createBrowserOpener(sourceRoot: string): (url: string) => void;
+/**
+ * Default runtime resolver: reload `smrt.config` without the cache.
+ *
+ * Profile selection is `resolveEffectiveApplicationRuntime()` from
+ * smrt-config — the rule the web process applies in app-runtime's SvelteKit
+ * entry — so the operator and the server it manages never disagree: no
+ * `runtime` block (or no config file) is the `local` profile, and a present
+ * value that is not a valid block (`null`, `false`, `0`, `''`, ...) fails
+ * closed.
+ */
+export declare function resolveConfiguredRuntime(sourceRoot: string): Promise<ResolvedApplicationRuntime>;
+/** Build the default dependency set for `sourceRoot`. */
+export declare function defaultDependencies(sourceRoot: string): Promise<AppCommandDependencies>;
+/** Resolve the application id from `<sourceRoot>/package.json` and `SMRT_APP_ID`. */
+export declare function resolveContextApplicationId(sourceRoot: string): string;
+/** Create or verify the private state root for this invocation. */
+export declare function preparedStateRoot(context: AppContext): string;
+/** Profile-aware child environment, with local storage paths when local. */
+export interface RuntimeEnvironment {
+    env: NodeJS.ProcessEnv;
+    paths: AppRuntime.LocalRuntimePaths | null;
+    assetRoot: string | null;
+}
+/** Compute the environment a web/migration child of this app runs with. */
+export declare function runtimeEnvironment(context: AppContext, runtime: ResolvedApplicationRuntime): RuntimeEnvironment;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/app/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/app/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,gBAAgB,EAAa,MAAM,oBAAoB,CAAC;AAKtE,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAQ7E,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kDAAkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,sCAAsC;AACtC,MAAM,MAAM,aAAa,GAAG,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,UAAU,KACjB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE9B,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,OAAO,EAAE,IAAI,CACX,OAAO,UAAU,EACf,mCAAmC,GACnC,sCAAsC,GACtC,6BAA6B,GAC7B,0BAA0B,GAC1B,8BAA8B,CACjC,GAGC,OAAO,CAAC,IAAI,CAAC,OAAO,UAAU,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC7D,sEAAsE;IACtE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxE,6DAA6D;IAC7D,iBAAiB,EAAE,aAAa,CAAC;IACjC,uDAAuD;IACvD,OAAO,EAAE,aAAa,CAAC;IACvB,4CAA4C;IAC5C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,qCAAqC;IACrC,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,0CAA0C;IAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACnD;AAED,8BAA8B;AAC9B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;CACvC;AAED,yEAAyE;AACzE,wBAAgB,cAAc,IAAI,MAAM,CAmBvC;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wDAAwD;AACxD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAM9D;AAyBD,qEAAqE;AACrE,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAgB5E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAQlE;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAc7E;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC,CAQrC;AAED,yDAAyD;AACzD,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC,CAejC;AAED,qFAAqF;AACrF,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAStE;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAM7D;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,0BAA0B,GAClC,kBAAkB,CA4CpB"}

package/dist/app/tokens.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `smrt app token` — owner-minted bearer tokens for local MCP clients.
+ *
+ * ```
+ * smrt app token --scopes notes.read [--expires 30d] [--label "Claude Desktop"]
+ * smrt app token list
+ * smrt app token revoke <id>
+ * ```
+ *
+ * Local profile only. The token is printed once, in the `issued` JSON
+ * document on stdout, and is otherwise never written anywhere: the runtime
+ * stores only its HMAC. `list` and `revoke` output carries no token values.
+ */
+import { type AppContext } from './runtime.js';
+/** Usage text for `smrt app token`. */
+export declare const TOKEN_USAGE = "Usage: smrt app token [create] --scopes <scope[,scope...]> [--expires <n>s|m|h|d] [--label <text>] | token list | token revoke <id>";
+/** Parse `30d`, `12h`, `90m`, `3600s` or bare seconds. */
+export declare function parseTokenLifetime(value: string): number;
+/** Run `smrt app token <args…>` and resolve to the exit code. */
+export declare function runTokenOperation(context: AppContext, args: string[]): Promise<number>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/app/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/app/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,cAAc,CAAC;AAElE,uCAAuC;AACvC,eAAO,MAAM,WAAW,wIAC+G,CAAC;AAexI,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMxD;AAyCD,iEAAiE;AACjE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,MAAM,CAAC,CAqFjB"}

package/dist/app.d.ts

@@ -0,0 +1 @@
+export * from './app/index.js';

package/dist/app.js

@@ -0,0 +1,4 @@
+import { A as assertExternalArtifactPath, C as prepareMigration, D as cliExecutablePath, E as validateMcpAppsIfPresent, F as AppCommandError, I as ApplicationStartError, M as resolveApplicationId, N as resolveApplicationStateRoot, O as runtimeEnvironment, P as runtimeConfigurationFingerprint, R as redactSecrets, S as launchVite, T as runWorker, _ as sendTerminationSignal, a as renderAppHelp, b as ViteLauncherError, c as parseTokenLifetime, d as START_OUTPUT_TAIL_BYTES, f as runApplicationOperation, g as readOwnedProcess, h as matchesApplicationProcess, i as errorEnvelope, j as prepareApplicationStateRoot, k as webLauncherPath, l as runTokenOperation, m as checkOwnedProcess, n as APP_RECOVERY, o as runAppCommand, p as WEB_LAUNCHER_NAME, s as TOKEN_USAGE, t as APP_COMMANDS, u as APP_OPERATIONS, v as verifyOwnedProcess, w as resolveViteEntry, x as devServerArguments, y as writeProcessRecord } from "./cli-OZsH5cdL.js";
+import { C as publishFilesystemAssets, D as stageFilesystemAssets, E as rollbackFilesystemAssets, O as verifyFilesystemAssets, S as markFilesystemAssetsCommitted, T as recoverFilesystemAssets, _ as bundleContentDigest, a as manifestTables, b as finishFilesystemAssets, c as serializeExportBundle, d as AssetPortabilityError, f as MAX_ASSET_BYTES, g as assertAssetRoot, h as MAX_TOTAL_ASSET_BYTES, i as importedRowsMatchBundle, k as verifyPublishedFilesystemAssets, l as validateImportBundle, m as MAX_BUNDLE_BYTES, n as exportApplication, o as planImportTables, p as MAX_ASSET_COUNT, r as importApplication, t as executeImportPlan, u as ASSET_MANIFEST_SCHEMA_VERSION, v as collectFilesystemAssets, w as readSensitiveBundle, x as hasCommittedImportJournal, y as digestBytes } from "./portability-CES1YC2m.js";
+import { PROVIDER_READINESS_SETTINGS, RECLAIM_MUTEX_FILE, acquireWriterLease, createProviderReadinessProbe, findInstalledPackage, isStaleOperationLock, lockOwnerPid, processExists, readActiveWriterLease, reclaimStaleRecord, resolveReadinessModule, withOperationLock } from "@happyvertical/smrt-app-runtime";
+export { APP_COMMANDS, APP_OPERATIONS, APP_RECOVERY, ASSET_MANIFEST_SCHEMA_VERSION, AppCommandError, ApplicationStartError, AssetPortabilityError, MAX_ASSET_BYTES, MAX_ASSET_COUNT, MAX_BUNDLE_BYTES, MAX_TOTAL_ASSET_BYTES, PROVIDER_READINESS_SETTINGS, RECLAIM_MUTEX_FILE, START_OUTPUT_TAIL_BYTES, TOKEN_USAGE, ViteLauncherError, WEB_LAUNCHER_NAME, acquireWriterLease, assertAssetRoot, assertExternalArtifactPath, bundleContentDigest, checkOwnedProcess, cliExecutablePath, collectFilesystemAssets, createProviderReadinessProbe, devServerArguments, digestBytes, errorEnvelope, executeImportPlan, exportApplication, findInstalledPackage, finishFilesystemAssets, hasCommittedImportJournal, importApplication, importedRowsMatchBundle, isStaleOperationLock, launchVite, lockOwnerPid, manifestTables, markFilesystemAssetsCommitted, matchesApplicationProcess, parseTokenLifetime, planImportTables, prepareApplicationStateRoot, prepareMigration, processExists, publishFilesystemAssets, readActiveWriterLease, readOwnedProcess, readSensitiveBundle, reclaimStaleRecord, recoverFilesystemAssets, redactSecrets, renderAppHelp, resolveApplicationId, resolveApplicationStateRoot, resolveReadinessModule, resolveViteEntry, rollbackFilesystemAssets, runAppCommand, runApplicationOperation, runTokenOperation, runWorker, runtimeConfigurationFingerprint, runtimeEnvironment, sendTerminationSignal, serializeExportBundle, stageFilesystemAssets, validateImportBundle, validateMcpAppsIfPresent, verifyFilesystemAssets, verifyOwnedProcess, verifyPublishedFilesystemAssets, webLauncherPath, withOperationLock, writeProcessRecord };