@happyvertical/smrt-cli 0.55.11 → 0.55.13

package/agents/kitchen.md

@@ -18,7 +18,8 @@ Checked before anything starts.
 
 1. Find the planner (below), import its plain-Node `./core`.
 2. Resolve the model; start the server on `127.0.0.1` (random port, or `--port`) with a random
-   one-time token; open the browser (`--no-open` to skip).
+   one-time token; open `http://127.0.0.1:<port>/#kitchen=<token>` in the browser (`--no-open`
+   skips opening; the same address is printed as `Open <url>`, because the token is in it).
 3. The page chats through `/api/planner/chat`, the user builds a cookbook and chooses
    **Send to kitchen**, which POSTs it to `/api/kitchen/cookbook`.
 4. The server validates (`validateCookbook` + recipe index, as `cookbook validate`), runs the
@@ -30,7 +31,7 @@ Checked before anything starts.
 
 | Path | |
 | --- | --- |
-| `GET /planner.config.json` | `{ inference, kitchen: { endpoint: "/api/kitchen/cookbook", token } }`; `inference` is `{ mode: "host", host: { endpoint: "/api/planner/chat" } }`, or `{ mode: "browser" }` with no model |
+| `GET /planner.config.json` | `{ inference, kitchen: { endpoint: "/api/kitchen/cookbook" } }`, **never a token**; `inference` is `{ mode: "host", host: { endpoint: "/api/planner/chat" } }`, or `{ mode: "browser" }` with no model |
 | `POST /api/planner/chat` | host contract v1: `parseHostRequest` -> `buildHostPrompt` -> model -> `parseHostReply` -> reply JSON. 400 bad request, 502 model failure (message not forwarded), 503 no model |
 | `POST /api/kitchen/cookbook` | header `x-kitchen-token`, same-origin JSON; 200 `{ ok, dir, mode, installed, added, nextSteps }`, 4xx `{ ok: false, errors }` |
 | everything else (GET/HEAD) | the planner's `app/` directory; `/` serves `index.html`; no path leaves `app/` |
@@ -39,11 +40,27 @@ Guards: every request's `Host` must be this server (DNS rebinding); the cookbook
 matching `Origin` header (chat: matching if present), `content-type: application/json`, a
 timing-safe token match, and is refused after a success. Bodies are capped (chat 256 KB,
 cookbook 2 MB). No CORS headers are sent. Only one cookbook POST applies at a time
-(the slot is claimed before the body is read). The token is served from
-`/planner.config.json`, which any local process that sends this server's `Host` can read:
-the kitchen defends against browsers, not against other users on the same machine, so run
-it on a machine you trust. Keeping the token out of that endpoint needs a planner contract
-change (token in the opened URL's fragment).
+(the slot is claimed before the body is read).
+
+### The token is in the URL fragment
+
+The one-time token is **not served by any endpoint**: `/planner.config.json` carries only the
+cookbook endpoint, so another local process that sends this server's `Host` cannot read it. The
+token is the fragment of the address the CLI opens and prints, `http://127.0.0.1:<port>/#kitchen=<token>`
+(`server.openUrl`; `server.url` has no secret). A fragment is never sent to a server. The planner reads
+`location.hash`, keeps the token in memory only (not in storage, not in any request but the cookbook
+POST's `x-kitchen-token` header), and strips the `kitchen` parameter from the address with
+a replacing navigation (`goto(..., { replaceState: true })`, because a bare `history.replaceState` would leave the
+token in SvelteKit's own copy of the address) before anything else reads the URL, so it is not in the history
+entry either.
+Opening the address without the fragment (or reloading after it was stripped) leaves the page without
+a token: the export panel then says so and offers Download. A planner older than this contract shows no Send
+button at all, and a planner at this contract served by an older CLI (which still puts `token` in the config)
+refuses to use it and says to update the CLI, so release this change before, or with, the planner's first
+publish. The contract is specified on the planner
+side in `happyvertical/smrt-planner` `docs/inference-host.md` ("Send to kitchen"); change both
+together. The kitchen defends against browsers, not against other users on the same machine
+(who can read your terminal and process list): run it on a machine you trust.
 
 ## Model
 

package/dist/{AuditLogCollection-WDHL-_AF-ClQNu_VR.js → AuditLogCollection-WDHL-_AF-_RXJ4g2q.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-DxkSjKQQ.js";
+import { i as tenantId, r as TenantScoped } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/AuditLogCollection-WDHL-_AF.js

package/dist/{OidcIdentity-BUblgQLs-br8RyLkA.js → OidcIdentity-BUblgQLs-Us7ZUvnh.js}

@@ -42,7 +42,7 @@ var OidcIdentity = class extends SmrtObject {
 	* Find identity by issuer and subject
 	*/
 	static async findBySubject(issuer, subject, options = {}) {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-BpQXB3mz.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-BmHrvh1o.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(options)).findBySubject(issuer, subject);
 	}
 	/** Build the collision-free natural key for one OIDC issuer subject. */
@@ -65,7 +65,7 @@ var OidcIdentity = class extends SmrtObject {
 	static async findOrCreate(profile, oidcData, options = {}) {
 		const profileId = profile.id;
 		if (typeof profileId !== "string" || !profileId) throw new Error("OidcIdentity.findOrCreate() requires a saved Profile.");
-		const { reuseExistingOidcIdentityForProfile } = await import("./resolveIdentity-CkyqvctR-B5btFsQd.js").then((n) => n.i).then((n) => n.i);
+		const { reuseExistingOidcIdentityForProfile } = await import("./resolveIdentity-CkyqvctR-BoHG4Xos.js").then((n) => n.i).then((n) => n.i);
 		const profileOptions = profile.options ?? {};
 		return (await reuseExistingOidcIdentityForProfile(profileId, {
 			email: oidcData.email,

package/dist/{OidcIdentityCollection-ClOyaHeF-BpQXB3mz.js → OidcIdentityCollection-ClOyaHeF-BmHrvh1o.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-br8RyLkA.js";
+import { t as OidcIdentity } from "./OidcIdentity-BUblgQLs-Us7ZUvnh.js";
 import { SmrtCollection } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/OidcIdentityCollection-ClOyaHeF.js
 var OidcIdentityCollection_ClOyaHeF_exports = /* @__PURE__ */ __exportAll({

package/dist/{ProfileAssetCollection-CRMcjLJ--C5ytBKfF.js → ProfileAssetCollection-CRMcjLJ--M64P0MlJ.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-DxkSjKQQ.js";
+import { i as tenantId, r as TenantScoped } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { a as getOwnedAssetsFromCollection, o as removeOwnedAssetFromCollection, t as addOwnedAssetFromCollection } from "./dist-ffh0LeC4.js";
+import { a as getOwnedAssetsFromCollection, o as removeOwnedAssetFromCollection, t as addOwnedAssetFromCollection } from "./dist-lltZIBRI.js";
 import { SmrtJunction, SmrtObject, crossPackageRef, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileAssetCollection-CRMcjLJ-.js
 var ProfileAssetCollection_CRMcjLJ__exports = /* @__PURE__ */ __exportAll({
@@ -84,7 +84,7 @@ var ProfileAssetCollection = class extends SmrtJunction {
 	profileCollectionPromise = null;
 	async getProfileCollection() {
 		if (!this.profileCollectionPromise) {
-			const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CfkyJilm.js").then((n) => n.o).then((n) => n.r);
+			const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-Xn37Xj2d.js").then((n) => n.o).then((n) => n.r);
 			this.profileCollectionPromise = ProfileCollection.create({ db: this.db });
 		}
 		return this.profileCollectionPromise;

package/dist/{ProfileCollection-C4INKh7Y-CfkyJilm.js → ProfileCollection-C4INKh7Y-Xn37Xj2d.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { a as queryGlobal, c as getTenantId, i as tenantId, n as resolvePrompt, o as queryWithGlobals, r as TenantScoped, t as definePrompt, u as withSystemContext } from "./dist-DxkSjKQQ.js";
+import { a as queryGlobal, c as getTenantId, i as tenantId, n as resolvePrompt, o as queryWithGlobals, r as TenantScoped, t as definePrompt, u as withSystemContext } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { a as getOwnedAssetsFromCollection, i as assertValidOwnedAssetSortOrder, n as assertAssetLinkable, o as removeOwnedAssetFromCollection, r as assertValidOwnedAssetRelationship, s as resolveOwnedAssetsById, t as addOwnedAssetFromCollection } from "./dist-ffh0LeC4.js";
+import { a as getOwnedAssetsFromCollection, i as assertValidOwnedAssetSortOrder, n as assertAssetLinkable, o as removeOwnedAssetFromCollection, r as assertValidOwnedAssetRelationship, s as resolveOwnedAssetsById, t as addOwnedAssetFromCollection } from "./dist-lltZIBRI.js";
 import { RuntimeError, SmrtCollection, SmrtObject, ValidationError, field, foreignKey, isAbortedTransactionError, oneToMany, smrt } from "@happyvertical/smrt-core";
 import { BackfillTableUnavailableError, BackfillTracker } from "@happyvertical/smrt-core/migrations";
 //#region ../profiles/dist/chunks/ProfileCollection-C4INKh7Y.js
@@ -435,7 +435,7 @@ var Profile = class extends SmrtObject {
 	async getTypeSlug() {
 		const tenantId2 = this.tenantId || getTenantId();
 		if (this.typeId && tenantId2) {
-			const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-KwPGcUkI.js").then((n) => n.n).then((n) => n.n);
+			const { ProfileTypeCollection } = await import("./ProfileTypeCollection-B7kwi1mU-BaT2OYDR.js").then((n) => n.n).then((n) => n.n);
 			return (await (await ProfileTypeCollection.create(this.options)).getAvailableById(this.typeId, tenantId2))?.slug ?? "";
 		}
 		return (await this.loadRelated("typeId"))?.slug || "";
@@ -458,8 +458,8 @@ var Profile = class extends SmrtObject {
 	* @param value - The value to set
 	*/
 	async addMetadata(metafieldSlug, value) {
-		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-C2tZc1PF.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-DXu5L2yx.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-BlJqn0f-.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-C4NyBsA_.js").then((n) => n.r).then((n) => n.n);
 		const metafield = await this.resolveMetafield(await ProfileMetafieldCollection.create(this.options), metafieldSlug);
 		if (!metafield) throw new Error(`Metafield '${metafieldSlug}' not found`);
 		await metafield.validateValue(value);
@@ -492,7 +492,7 @@ var Profile = class extends SmrtObject {
 	* @returns Object with metafield slugs as keys
 	*/
 	async getMetadata() {
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-DXu5L2yx.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-C4NyBsA_.js").then((n) => n.r).then((n) => n.n);
 		return await (await ProfileMetadataCollection.create(this.options)).getMetadataObject(this.id);
 	}
 	/**
@@ -509,8 +509,8 @@ var Profile = class extends SmrtObject {
 	* @param metafieldSlug - The slug of the metafield to remove
 	*/
 	async removeMetadata(metafieldSlug) {
-		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-C2tZc1PF.js").then((n) => n.r).then((n) => n.n);
-		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-DXu5L2yx.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetafieldCollection } = await import("./ProfileMetafieldCollection-Buz7gzag-BlJqn0f-.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileMetadataCollection } = await import("./ProfileMetadataCollection-BIYKy4Y3-C4NyBsA_.js").then((n) => n.r).then((n) => n.n);
 		const metafield = await this.resolveMetafield(await ProfileMetafieldCollection.create(this.options), metafieldSlug);
 		if (!metafield) throw new Error(`Metafield '${metafieldSlug}' not found`);
 		const existing = await (await ProfileMetadataCollection.create(this.options)).list({
@@ -535,7 +535,7 @@ var Profile = class extends SmrtObject {
 		return candidates.find((candidate) => ownerTenantId && candidate.tenantId === ownerTenantId) ?? candidates.find((candidate) => !candidate.tenantId) ?? null;
 	}
 	async getProfileLinkCollection() {
-		const { ProfileLinkCollection } = await import("./ProfileLinkCollection-DFfZRsgv-MQ2zhD9z.js").then((n) => n.i).then((n) => n.r);
+		const { ProfileLinkCollection } = await import("./ProfileLinkCollection-DFfZRsgv-DTXdjPMD.js").then((n) => n.i).then((n) => n.r);
 		return ProfileLinkCollection.create({ db: this.db });
 	}
 	/** This profile's web links in display order. */
@@ -552,7 +552,7 @@ var Profile = class extends SmrtObject {
 		return (await this.getProfileLinkCollection()).replaceForProfile(this.id, links);
 	}
 	async getProfileAssetCollection() {
-		const { ProfileAssetCollection } = await import("./ProfileAssetCollection-CRMcjLJ--C5ytBKfF.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileAssetCollection } = await import("./ProfileAssetCollection-CRMcjLJ--M64P0MlJ.js").then((n) => n.r).then((n) => n.n);
 		return ProfileAssetCollection.create({ db: this.db });
 	}
 	async getAssets(relationship) {
@@ -584,7 +584,7 @@ var Profile = class extends SmrtObject {
 	*/
 	async addRelationship(toProfile, relationshipSlug, contextProfile) {
 		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-vTnkAIAh.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-BoadAuj8.js").then((n) => n.r).then((n) => n.n);
 		const { ProfileRelationshipType } = await import("./ProfileRelationshipType-U7IwF6Wf-DNavf24e.js").then((n) => n.n).then((n) => n.n);
 		const relationshipType = await (await ProfileRelationshipTypeCollection.create(this.options)).getBySlug(relationshipSlug);
 		if (!relationshipType) throw new Error(`Relationship type '${relationshipSlug}' not found`);
@@ -609,7 +609,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of ProfileRelationship instances
 	*/
 	async getRelationships(options) {
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-vTnkAIAh.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-BoadAuj8.js").then((n) => n.r).then((n) => n.n);
 		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
 		const direction = options?.direction || "all";
@@ -654,7 +654,7 @@ var Profile = class extends SmrtObject {
 	*/
 	async removeRelationship(toProfile, relationshipSlug) {
 		const { ProfileRelationshipTypeCollection } = await import("./ProfileRelationshipTypeCollection-_n22WqTb-DiZUWvev.js").then((n) => n.n).then((n) => n.n);
-		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-vTnkAIAh.js").then((n) => n.r).then((n) => n.n);
+		const { ProfileRelationshipCollection } = await import("./ProfileRelationshipCollection-C4g_QLI4-BoadAuj8.js").then((n) => n.r).then((n) => n.n);
 		const relationshipType = await (await ProfileRelationshipTypeCollection.create(this.options)).getBySlug(relationshipSlug);
 		if (!relationshipType) throw new Error(`Relationship type '${relationshipSlug}' not found`);
 		const relationshipCollection = await ProfileRelationshipCollection.create(this.options);
@@ -778,7 +778,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of OIDC identity records
 	*/
 	async getOidcIdentities() {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-BpQXB3mz.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-BmHrvh1o.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(this.options)).findByProfile(this.id);
 	}
 	/**
@@ -791,7 +791,7 @@ var Profile = class extends SmrtObject {
 	* type, but refuses to create or rebind authority.
 	*/
 	async linkOidcIdentity(oidcData) {
-		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-BpQXB3mz.js").then((n) => n.r).then((n) => n.r);
+		const { OidcIdentityCollection } = await import("./OidcIdentityCollection-ClOyaHeF-BmHrvh1o.js").then((n) => n.r).then((n) => n.r);
 		return await (await OidcIdentityCollection.create(this.options)).linkToProfile(this, oidcData);
 	}
 	/**
@@ -820,7 +820,7 @@ var Profile = class extends SmrtObject {
 	* @returns Array of audit log entries
 	*/
 	async getAuditLogs(limit = 50) {
-		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-ClQNu_VR.js").then((n) => n.r).then((n) => n.n);
+		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-_RXJ4g2q.js").then((n) => n.r).then((n) => n.n);
 		return await (await AuditLogCollection.create(this.options)).getRecentActivity(this.id, limit);
 	}
 	/**
@@ -830,7 +830,7 @@ var Profile = class extends SmrtObject {
 	* @returns The created audit log entry
 	*/
 	async recordAction(options) {
-		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-ClQNu_VR.js").then((n) => n.r).then((n) => n.n);
+		const { AuditLogCollection } = await import("./AuditLogCollection-WDHL-_AF-_RXJ4g2q.js").then((n) => n.r).then((n) => n.n);
 		return await (await AuditLogCollection.create(this.options)).record({
 			profile: this,
 			...options

package/dist/{ProfileLinkCollection-DFfZRsgv-MQ2zhD9z.js → ProfileLinkCollection-DFfZRsgv-DTXdjPMD.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-DxkSjKQQ.js";
+import { i as tenantId, r as TenantScoped } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, isEmbeddedDatabase, smrt, withEmbeddedWriteTransaction } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileLinkCollection-DFfZRsgv.js
@@ -203,7 +203,7 @@ var ProfileLinkCollection = class ProfileLinkCollection extends SmrtCollection {
 	/** The profile's tenant; throws when the profile is not visible here. */
 	async requireProfileTenant(profileId) {
 		if (!profileId) throw new Error("A profile link needs a profile");
-		const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-CfkyJilm.js").then((n) => n.o).then((n) => n.r);
+		const { ProfileCollection } = await import("./ProfileCollection-C4INKh7Y-Xn37Xj2d.js").then((n) => n.o).then((n) => n.r);
 		const profile = await (await ProfileCollection.create({ db: this.db })).get({ id: profileId });
 		if (!profile) throw new Error(`Profile '${profileId}' not found`);
 		return profile.tenantId ?? null;

package/dist/{ProfileMetadataCollection-BIYKy4Y3-DXu5L2yx.js → ProfileMetadataCollection-BIYKy4Y3-C4NyBsA_.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-DxkSjKQQ.js";
+import { i as tenantId, r as TenantScoped } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, foreignKey, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileMetadataCollection-BIYKy4Y3.js

package/dist/{ProfileMetafieldCollection-Buz7gzag-C2tZc1PF.js → ProfileMetafieldCollection-Buz7gzag-BlJqn0f-.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-DxkSjKQQ.js";
+import { i as tenantId, r as TenantScoped } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, field, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileMetafieldCollection-Buz7gzag.js

package/dist/{ProfileRelationshipCollection-C4g_QLI4-vTnkAIAh.js → ProfileRelationshipCollection-C4g_QLI4-BoadAuj8.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as tenantId, r as TenantScoped } from "./dist-DxkSjKQQ.js";
+import { i as tenantId, r as TenantScoped } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
 import { SmrtCollection, SmrtObject, foreignKey, oneToMany, smrt } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileRelationshipCollection-C4g_QLI4.js

package/dist/{ProfileTypeCollection-B7kwi1mU-KwPGcUkI.js → ProfileTypeCollection-B7kwi1mU-BaT2OYDR.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { l as isSystemContext, s as withTenantGlobalRead } from "./dist-DxkSjKQQ.js";
+import { l as isSystemContext, s as withTenantGlobalRead } from "./dist-D56nENIY.js";
 import { n as __exportAll$1 } from "./NostrIdentity-AC8fAdxe-DKxKyu_a.js";
-import { s as ProfileType } from "./ProfileCollection-C4INKh7Y-CfkyJilm.js";
+import { s as ProfileType } from "./ProfileCollection-C4INKh7Y-Xn37Xj2d.js";
 import { SmrtCollection } from "@happyvertical/smrt-core";
 //#region ../profiles/dist/chunks/ProfileTypeCollection-B7kwi1mU.js
 var ProfileTypeCollection_B7kwi1mU_exports = /* @__PURE__ */ __exportAll({

package/dist/commands/kitchen/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/kitchen/run.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAE,KAAK,SAAS,EAAoB,MAAM,SAAS,CAAC;AAC3D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,eAAe,EAErB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,aAAa,CAAC;AAErE,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C,+DAA+D;IAC/D,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,IAAI,CAAC,EAAE,WAAW,CAAC;QACnB,EAAE,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,eAAe,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;KACrC,CAAC;IACF,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACvB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAWhD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU/C;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAC9B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,CAyDtB"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/kitchen/run.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAE,KAAK,SAAS,EAAoB,MAAM,SAAS,CAAC;AAC3D,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,eAAe,EAErB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,KAAK,WAAW,EAEhB,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,aAAa,CAAC;AAErE,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;IAC1C,+DAA+D;IAC/D,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,cAAc,CAAC;QACzB,IAAI,CAAC,EAAE,WAAW,CAAC;QACnB,EAAE,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;QACtB,KAAK,CAAC,EAAE,eAAe,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;KACrC,CAAC;IACF,qEAAqE;IACrE,IAAI,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;CACvB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAWhD;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU/C;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAC9B,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,CA2DtB"}

package/dist/commands/kitchen/server.d.ts

@@ -13,6 +13,8 @@ export declare const CHAT_PATH = "/api/planner/chat";
 export declare const COOKBOOK_PATH = "/api/kitchen/cookbook";
 export declare const CONFIG_PATH = "/planner.config.json";
 export declare const TOKEN_HEADER = "x-kitchen-token";
+/** The fragment key the planner reads the one-time token from (`#kitchen=<token>`). */
+export declare const KITCHEN_FRAGMENT = "kitchen";
 export interface KitchenServerOptions {
     planner: PlannerInstall;
     core: PlannerCore;
@@ -26,7 +28,14 @@ export interface KitchenServerOptions {
     log?: (line: string) => void;
 }
 export interface KitchenServer {
+    /** The server's address, with no secret in it. */
     url: string;
+    /**
+     * The address to open: `url` plus `#kitchen=<token>`. A fragment is never
+     * sent to a server, so the token reaches the page without being readable
+     * from any endpoint; the planner reads it from `location.hash` and strips it.
+     */
+    openUrl: string;
     port: number;
     token: string;
     /** `host` when the chat endpoint is served, else `browser`. */

package/dist/commands/kitchen/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/commands/kitchen/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEhE,eAAO,MAAM,SAAS,sBAAsB,CAAC;AAC7C,eAAO,MAAM,aAAa,0BAA0B,CAAC;AACrD,eAAO,MAAM,WAAW,yBAAyB,CAAC;AAClD,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAK9C,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,wEAAwE;IACxE,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAsDD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAoNxB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/commands/kitchen/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEhE,eAAO,MAAM,SAAS,sBAAsB,CAAC;AAC7C,eAAO,MAAM,aAAa,0BAA0B,CAAC;AACrD,eAAO,MAAM,WAAW,yBAAyB,CAAC;AAClD,eAAO,MAAM,YAAY,oBAAoB,CAAC;AAC9C,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAK1C,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,wEAAwE;IACxE,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,aAAa;IAC5B,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,4EAA4E;IAC5E,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAsDD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC,CAqNxB"}

package/dist/{commands-pbRVQvix.js → commands-CZtXU3Is.js}

@@ -7086,6 +7086,8 @@ async function resolveKitchenAI(options = {}) {
 */
 var CHAT_PATH = "/api/planner/chat";
 var COOKBOOK_PATH = "/api/kitchen/cookbook";
+/** The fragment key the planner reads the one-time token from (`#kitchen=<token>`). */
+var KITCHEN_FRAGMENT = "kitchen";
 var CHAT_LIMIT = 256 * 1024;
 var COOKBOOK_LIMIT = 2 * 1024 * 1024;
 var TYPES = {
@@ -7152,10 +7154,7 @@ async function startKitchenServer(options) {
 			mode: "host",
 			host: { endpoint: CHAT_PATH }
 		} : { mode: "browser" },
-		kitchen: {
-			endpoint: COOKBOOK_PATH,
-			token
-		}
+		kitchen: { endpoint: COOKBOOK_PATH }
 	});
 	function checkToken(supplied) {
 		if (!supplied) return false;
@@ -7290,6 +7289,7 @@ async function startKitchenServer(options) {
 	port = server.address().port;
 	return {
 		url: `http://127.0.0.1:${port}/`,
+		openUrl: `http://127.0.0.1:${port}/#${KITCHEN_FRAGMENT}=${token}`,
 		port,
 		token,
 		mode,
@@ -7351,11 +7351,12 @@ async function runKitchen(options) {
 	});
 	try {
 		log(`Planner ${planner.version ?? ""} (${planner.source}) at ${server.url}`.replace("  ", " "));
+		log(`Open ${server.openUrl}`);
 		log(ai ? `Chat is answered by ${ai.label}.` : "No AI provider is configured (set an `ai` block in smrt.config.ts, SMRT_AI_PROVIDER, or e.g. OPENAI_API_KEY), so the planner runs its in-browser model. You can also build the cookbook by hand.");
 		log(`Project directory: ${dir}`);
 		log("Build your app in the planner, then choose \"Send to kitchen\". Ctrl-C to stop.");
 		options.onReady?.(server);
-		if (options.open) (options.overrides?.openBrowser ?? openInBrowser)(server.url);
+		if (options.open) (options.overrides?.openBrowser ?? openInBrowser)(server.openUrl);
 		return await (options.stop ? Promise.race([server.applied, options.stop]) : server.applied);
 	} finally {
 		await server.close();
@@ -7887,7 +7888,7 @@ var dbMaterializeTenantHierarchyCommand = {
 			if (!config.database?.url || config.database.url === ":memory:") throw new Error("Database configuration required for db:materialize-tenant-hierarchy. Configure database.url in smrt.config.ts (or DATABASE_URL).");
 			const dbType = config.database.type || "sqlite";
 			const { getDatabase } = await import("@happyvertical/sql");
-			const { materializeTenantHierarchy, TenantHierarchyMaterializationError } = await import("./dist-BsRSQ_hE.js");
+			const { materializeTenantHierarchy, TenantHierarchyMaterializationError } = await import("./dist-BCW7OSeu.js");
 			db = await getDatabase({
 				type: dbType,
 				url: config.database.url
@@ -8096,7 +8097,7 @@ var dbMigrateLedgerAccountsCommand = {
 			if (dbType !== "postgres") throw new Error("db:migrate-ledger-accounts currently supports PostgreSQL only; no changes were made. See the smrt-ledgers README for SQLite.");
 			await autoDiscoverAndLoad();
 			const { getDatabase } = await import("@happyvertical/sql");
-			const { migrateLedgerAccountsTable, planLedgerAccountsTableMove } = await import("./dist-CYVIKmvy.js");
+			const { migrateLedgerAccountsTable, planLedgerAccountsTableMove } = await import("./dist-6XMOPmAQ.js");
 			db = await getDatabase({
 				type: dbType,
 				url: config.database.url