@happyvertical/smrt-cli 0.53.4 → 0.53.6

package/dist/app/runtime.d.ts

@@ -10,6 +10,12 @@ import type { ResolvedApplicationRuntime } from '@happyvertical/smrt-config';
 export interface AppCommandIo {
     stdout(text: string): void;
     stderr(text: string): void;
+    /**
+     * Operator-only sink for secret material (the one-time onboarding URL).
+     * Present only when it reaches an interactive terminal; never a log, pipe,
+     * or file. Absent means the secret is not printed.
+     */
+    operatorTerminal?(text: string): void;
 }
 /** Options for a child command run. */
 export interface RunOptions {
@@ -27,7 +33,7 @@ export type CommandRunner = (args: string[], options?: RunOptions) => SpawnSyncR
 /** Replaceable collaborators. Production values are filled in by default. */
 export interface AppCommandDependencies {
     /** `@happyvertical/smrt-app-runtime` entry points. */
-    runtime: Pick<typeof AppRuntime, 'initializeLocalApplicationRuntime' | 'initializeDeployedApplicationRuntime' | 'prepareLocalDatabaseStorage' | 'resolveLocalRuntimePaths' | 'validateLocalDatabaseStorage'>;
+    runtime: Pick<typeof AppRuntime, 'initializeLocalApplicationRuntime' | 'initializeDeployedApplicationRuntime' | 'prepareLocalDatabaseStorage' | 'resolveLocalRuntimePaths' | 'validateLocalDatabaseStorage'> & Partial<Pick<typeof AppRuntime, 'openLocalMcpTokenStore'>>;
     /** Resolve the configured runtime after (re)loading `smrt.config`. */
     resolveRuntime(sourceRoot: string): Promise<ResolvedApplicationRuntime>;
     /** Run the application's package manager (`pnpm <args>`). */
@@ -64,7 +70,16 @@ export declare function createPackageManagerRunner(sourceRoot: string): CommandR
 export declare function createSmrtRunner(sourceRoot: string): CommandRunner;
 /** Default browser opener (`SMRT_OPEN_STUB` writes the URL to a file instead). */
 export declare function createBrowserOpener(sourceRoot: string): (url: string) => void;
-/** Default runtime resolver: reload `smrt.config` without the cache. */
+/**
+ * Default runtime resolver: reload `smrt.config` without the cache.
+ *
+ * Profile selection is `resolveEffectiveApplicationRuntime()` from
+ * smrt-config — the rule the web process applies in app-runtime's SvelteKit
+ * entry — so the operator and the server it manages never disagree: no
+ * `runtime` block (or no config file) is the `local` profile, and a present
+ * value that is not a valid block (`null`, `false`, `0`, `''`, ...) fails
+ * closed.
+ */
 export declare function resolveConfiguredRuntime(sourceRoot: string): Promise<ResolvedApplicationRuntime>;
 /** Build the default dependency set for `sourceRoot`. */
 export declare function defaultDependencies(sourceRoot: string): Promise<AppCommandDependencies>;

package/dist/app/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/app/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,gBAAgB,EAAa,MAAM,oBAAoB,CAAC;AAKtE,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAQ7E,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kDAAkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,sCAAsC;AACtC,MAAM,MAAM,aAAa,GAAG,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,UAAU,KACjB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE9B,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,OAAO,EAAE,IAAI,CACX,OAAO,UAAU,EACf,mCAAmC,GACnC,sCAAsC,GACtC,6BAA6B,GAC7B,0BAA0B,GAC1B,8BAA8B,CACjC,CAAC;IACF,sEAAsE;IACtE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxE,6DAA6D;IAC7D,iBAAiB,EAAE,aAAa,CAAC;IACjC,uDAAuD;IACvD,OAAO,EAAE,aAAa,CAAC;IACvB,4CAA4C;IAC5C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,qCAAqC;IACrC,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,0CAA0C;IAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACnD;AAED,8BAA8B;AAC9B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;CACvC;AAED,yEAAyE;AACzE,wBAAgB,cAAc,IAAI,MAAM,CAmBvC;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wDAAwD;AACxD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAM9D;AAyBD,qEAAqE;AACrE,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAgB5E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAQlE;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAc7E;AAED,wEAAwE;AACxE,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC,CAMrC;AAED,yDAAyD;AACzD,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC,CAejC;AAED,qFAAqF;AACrF,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAStE;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAM7D;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,0BAA0B,GAClC,kBAAkB,CA4CpB"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/app/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,gBAAgB,EAAa,MAAM,oBAAoB,CAAC;AAKtE,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAQ7E,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kDAAkD;IAClD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,sCAAsC;AACtC,MAAM,MAAM,aAAa,GAAG,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,UAAU,KACjB,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAE9B,6EAA6E;AAC7E,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,OAAO,EAAE,IAAI,CACX,OAAO,UAAU,EACf,mCAAmC,GACnC,sCAAsC,GACtC,6BAA6B,GAC7B,0BAA0B,GAC1B,8BAA8B,CACjC,GAGC,OAAO,CAAC,IAAI,CAAC,OAAO,UAAU,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC7D,sEAAsE;IACtE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxE,6DAA6D;IAC7D,iBAAiB,EAAE,aAAa,CAAC;IACjC,uDAAuD;IACvD,OAAO,EAAE,aAAa,CAAC;IACvB,4CAA4C;IAC5C,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,qCAAqC;IACrC,KAAK,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,0CAA0C;IAC1C,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;CACnD;AAED,8BAA8B;AAC9B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;CACvC;AAED,yEAAyE;AACzE,wBAAgB,cAAc,IAAI,MAAM,CAmBvC;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wDAAwD;AACxD,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAM9D;AAyBD,qEAAqE;AACrE,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAgB5E;AAED,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAQlE;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAc7E;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC,CAQrC;AAED,yDAAyD;AACzD,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,sBAAsB,CAAC,CAejC;AAED,qFAAqF;AACrF,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAStE;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAM7D;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAC3C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,0BAA0B,GAClC,kBAAkB,CA4CpB"}

package/dist/app/tokens.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `smrt app token` — owner-minted bearer tokens for local MCP clients.
+ *
+ * ```
+ * smrt app token --scopes notes.read [--expires 30d] [--label "Claude Desktop"]
+ * smrt app token list
+ * smrt app token revoke <id>
+ * ```
+ *
+ * Local profile only. The token is printed once, in the `issued` JSON
+ * document on stdout, and is otherwise never written anywhere: the runtime
+ * stores only its HMAC. `list` and `revoke` output carries no token values.
+ */
+import { type AppContext } from './runtime.js';
+/** Usage text for `smrt app token`. */
+export declare const TOKEN_USAGE = "Usage: smrt app token [create] --scopes <scope[,scope...]> [--expires <n>s|m|h|d] [--label <text>] | token list | token revoke <id>";
+/** Parse `30d`, `12h`, `90m`, `3600s` or bare seconds. */
+export declare function parseTokenLifetime(value: string): number;
+/** Run `smrt app token <args…>` and resolve to the exit code. */
+export declare function runTokenOperation(context: AppContext, args: string[]): Promise<number>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/app/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/app/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,KAAK,UAAU,EAAqB,MAAM,cAAc,CAAC;AAElE,uCAAuC;AACvC,eAAO,MAAM,WAAW,wIAC+G,CAAC;AAexI,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMxD;AAyCD,iEAAiE;AACjE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,MAAM,CAAC,CAqFjB"}

package/dist/app.js

@@ -1,4 +1,4 @@
-import { A as AppCommandError, C as runtimeEnvironment, D as resolveApplicationId, E as prepareApplicationStateRoot, M as redactSecrets, O as resolveApplicationStateRoot, S as cliExecutablePath, T as assertExternalArtifactPath, _ as launchVite, a as renderAppHelp, b as runWorker, c as runApplicationOperation, d as matchesApplicationProcess, f as readOwnedProcess, g as ViteLauncherError, h as writeProcessRecord, i as errorEnvelope, k as runtimeConfigurationFingerprint, l as WEB_LAUNCHER_NAME, m as verifyOwnedProcess, n as APP_RECOVERY, o as runAppCommand, p as sendTerminationSignal, s as APP_OPERATIONS, t as APP_COMMANDS, u as checkOwnedProcess, v as prepareMigration, w as webLauncherPath, x as validateMcpAppsIfPresent, y as resolveViteEntry } from "./cli-BRFsobey.js";
-import { C as publishFilesystemAssets, D as stageFilesystemAssets, E as rollbackFilesystemAssets, O as verifyFilesystemAssets, S as markFilesystemAssetsCommitted, T as recoverFilesystemAssets, _ as bundleContentDigest, a as manifestTables, b as finishFilesystemAssets, c as serializeExportBundle, d as AssetPortabilityError, f as MAX_ASSET_BYTES, g as assertAssetRoot, h as MAX_TOTAL_ASSET_BYTES, i as importedRowsMatchBundle, k as verifyPublishedFilesystemAssets, l as validateImportBundle, m as MAX_BUNDLE_BYTES, n as exportApplication, o as planImportTables, p as MAX_ASSET_COUNT, r as importApplication, t as executeImportPlan, u as ASSET_MANIFEST_SCHEMA_VERSION, v as collectFilesystemAssets, w as readSensitiveBundle, x as hasCommittedImportJournal, y as digestBytes } from "./portability-DmQWSSXA.js";
+import { A as assertExternalArtifactPath, C as prepareMigration, D as cliExecutablePath, E as validateMcpAppsIfPresent, F as AppCommandError, I as ApplicationStartError, M as resolveApplicationId, N as resolveApplicationStateRoot, O as runtimeEnvironment, P as runtimeConfigurationFingerprint, R as redactSecrets, S as launchVite, T as runWorker, _ as sendTerminationSignal, a as renderAppHelp, b as ViteLauncherError, c as parseTokenLifetime, d as START_OUTPUT_TAIL_BYTES, f as runApplicationOperation, g as readOwnedProcess, h as matchesApplicationProcess, i as errorEnvelope, j as prepareApplicationStateRoot, k as webLauncherPath, l as runTokenOperation, m as checkOwnedProcess, n as APP_RECOVERY, o as runAppCommand, p as WEB_LAUNCHER_NAME, s as TOKEN_USAGE, t as APP_COMMANDS, u as APP_OPERATIONS, v as verifyOwnedProcess, w as resolveViteEntry, x as devServerArguments, y as writeProcessRecord } from "./cli-OZsH5cdL.js";
+import { C as publishFilesystemAssets, D as stageFilesystemAssets, E as rollbackFilesystemAssets, O as verifyFilesystemAssets, S as markFilesystemAssetsCommitted, T as recoverFilesystemAssets, _ as bundleContentDigest, a as manifestTables, b as finishFilesystemAssets, c as serializeExportBundle, d as AssetPortabilityError, f as MAX_ASSET_BYTES, g as assertAssetRoot, h as MAX_TOTAL_ASSET_BYTES, i as importedRowsMatchBundle, k as verifyPublishedFilesystemAssets, l as validateImportBundle, m as MAX_BUNDLE_BYTES, n as exportApplication, o as planImportTables, p as MAX_ASSET_COUNT, r as importApplication, t as executeImportPlan, u as ASSET_MANIFEST_SCHEMA_VERSION, v as collectFilesystemAssets, w as readSensitiveBundle, x as hasCommittedImportJournal, y as digestBytes } from "./portability-CES1YC2m.js";
 import { PROVIDER_READINESS_SETTINGS, RECLAIM_MUTEX_FILE, acquireWriterLease, createProviderReadinessProbe, findInstalledPackage, isStaleOperationLock, lockOwnerPid, processExists, readActiveWriterLease, reclaimStaleRecord, resolveReadinessModule, withOperationLock } from "@happyvertical/smrt-app-runtime";
-export { APP_COMMANDS, APP_OPERATIONS, APP_RECOVERY, ASSET_MANIFEST_SCHEMA_VERSION, AppCommandError, AssetPortabilityError, MAX_ASSET_BYTES, MAX_ASSET_COUNT, MAX_BUNDLE_BYTES, MAX_TOTAL_ASSET_BYTES, PROVIDER_READINESS_SETTINGS, RECLAIM_MUTEX_FILE, ViteLauncherError, WEB_LAUNCHER_NAME, acquireWriterLease, assertAssetRoot, assertExternalArtifactPath, bundleContentDigest, checkOwnedProcess, cliExecutablePath, collectFilesystemAssets, createProviderReadinessProbe, digestBytes, errorEnvelope, executeImportPlan, exportApplication, findInstalledPackage, finishFilesystemAssets, hasCommittedImportJournal, importApplication, importedRowsMatchBundle, isStaleOperationLock, launchVite, lockOwnerPid, manifestTables, markFilesystemAssetsCommitted, matchesApplicationProcess, planImportTables, prepareApplicationStateRoot, prepareMigration, processExists, publishFilesystemAssets, readActiveWriterLease, readOwnedProcess, readSensitiveBundle, reclaimStaleRecord, recoverFilesystemAssets, redactSecrets, renderAppHelp, resolveApplicationId, resolveApplicationStateRoot, resolveReadinessModule, resolveViteEntry, rollbackFilesystemAssets, runAppCommand, runApplicationOperation, runWorker, runtimeConfigurationFingerprint, runtimeEnvironment, sendTerminationSignal, serializeExportBundle, stageFilesystemAssets, validateImportBundle, validateMcpAppsIfPresent, verifyFilesystemAssets, verifyOwnedProcess, verifyPublishedFilesystemAssets, webLauncherPath, withOperationLock, writeProcessRecord };
+export { APP_COMMANDS, APP_OPERATIONS, APP_RECOVERY, ASSET_MANIFEST_SCHEMA_VERSION, AppCommandError, ApplicationStartError, AssetPortabilityError, MAX_ASSET_BYTES, MAX_ASSET_COUNT, MAX_BUNDLE_BYTES, MAX_TOTAL_ASSET_BYTES, PROVIDER_READINESS_SETTINGS, RECLAIM_MUTEX_FILE, START_OUTPUT_TAIL_BYTES, TOKEN_USAGE, ViteLauncherError, WEB_LAUNCHER_NAME, acquireWriterLease, assertAssetRoot, assertExternalArtifactPath, bundleContentDigest, checkOwnedProcess, cliExecutablePath, collectFilesystemAssets, createProviderReadinessProbe, devServerArguments, digestBytes, errorEnvelope, executeImportPlan, exportApplication, findInstalledPackage, finishFilesystemAssets, hasCommittedImportJournal, importApplication, importedRowsMatchBundle, isStaleOperationLock, launchVite, lockOwnerPid, manifestTables, markFilesystemAssetsCommitted, matchesApplicationProcess, parseTokenLifetime, planImportTables, prepareApplicationStateRoot, prepareMigration, processExists, publishFilesystemAssets, readActiveWriterLease, readOwnedProcess, readSensitiveBundle, reclaimStaleRecord, recoverFilesystemAssets, redactSecrets, renderAppHelp, resolveApplicationId, resolveApplicationStateRoot, resolveReadinessModule, resolveViteEntry, rollbackFilesystemAssets, runAppCommand, runApplicationOperation, runTokenOperation, runWorker, runtimeConfigurationFingerprint, runtimeEnvironment, sendTerminationSignal, serializeExportBundle, stageFilesystemAssets, validateImportBundle, validateMcpAppsIfPresent, verifyFilesystemAssets, verifyOwnedProcess, verifyPublishedFilesystemAssets, webLauncherPath, withOperationLock, writeProcessRecord };