@happyvertical/smrt-core 0.38.2 → 0.38.4

package/dist/generators/events-route.js

@@ -0,0 +1,234 @@
+import { subscribeToChangeSignals } from "../change-signals.js";
+import { resolveDispatchTenantScope } from "../dispatch/tenant-resolver.js";
+import { ensureChangeFeedTable, getChangesSince } from "../change-feed.js";
+import { resolveChangesDb } from "./changes-route.js";
+import { createLogger } from "@happyvertical/logger";
+//#region src/generators/events-route.ts
+/**
+* Generated `_events` SSE route — live change signals (issue #1763, SERVER
+* half; parent PRD #1755).
+*
+* Handles `GET {basePath}/_events` in the REST generator: an auth-guarded,
+* tenant-scoped Server-Sent-Events stream of coarse change signals ({table,
+* operation, rowId, tenantId} + a `seq` cursor in the SSE `id:` field). It is
+* the push companion to the pull-based `_changes` route (#1758): a subscriber
+* reacts to a signal by re-reading through the authorized collection routes,
+* so **no row payload ever crosses this channel** — authorization stays
+* entirely on the read path.
+*
+* The stream lifecycle (subscribe, catch-up replay, heartbeat, teardown) lives
+* in {@link buildChangeEventStream} so it is written and tested once; both the
+* REST generator here and the generated SvelteKit route import it. `rest.ts`
+* only registers the path.
+*
+* Contract:
+* - **Fail-closed auth** (identical to `_changes`, #1540 posture): no
+*   `authMiddleware` configured → 401; the middleware may return a Response to
+*   short-circuit (e.g. 403). The feed spans every table, so per-model
+*   `api: { public }` opt-outs deliberately do not apply.
+* - **Tenant scope is captured ONCE at connection open** — signal delivery
+*   happens from a different async context (the writer's afterSave, possibly
+*   another request or replica) with no tenant ALS active, so the filter must
+*   be the value resolved at subscribe time, not re-resolved per signal.
+* - **Same-origin only** for this slice: `rest.ts` does NOT wrap `_events` in
+*   CORS headers. `EventSource` cannot set request headers and credentialed
+*   cross-origin SSE needs `Access-Control-Allow-Credentials` the CORS helper
+*   does not emit; cross-origin SSE is a deliberate follow-up.
+*/
+var logger = createLogger({ level: "info" });
+/**
+* Pseudo object name passed to the auth middleware for the events route, so
+* middlewares can recognize and specially authorize it (mirrors `_changes`).
+*/
+var EVENTS_ROUTE_OBJECT_NAME = "_events";
+/** Default heartbeat interval (ms). Overridable via stream options. */
+var DEFAULT_EVENTS_HEARTBEAT_MS = 15e3;
+var encoder = new TextEncoder();
+/**
+* Whether a signal is visible to a captured tenant scope. Exact same rule as
+* `getChangesSince`'s tenantId filter, run **synchronously server-side** inside
+* the enqueue callback before any byte hits the wire:
+* - not enforced → visible.
+* - enforced, no active tenant (`tenantId === null`) → only global signals.
+* - enforced, tenant `T` → `T`'s signals plus global signals.
+*/
+function signalVisibleToTenant(sig, scope) {
+	if (!scope.enforced) return true;
+	if (scope.tenantId === null) return sig.tenantId === null;
+	return sig.tenantId === scope.tenantId || sig.tenantId === null;
+}
+/**
+* SSE frame for a change signal. The `data` JSON is EXACTLY
+* `{table, operation, rowId, tenantId}` — the `seq` lives only in the `id:`
+* field (the EventSource `Last-Event-ID` a client echoes to resume).
+*/
+function encodeSseEvent(sig) {
+	const data = JSON.stringify({
+		table: sig.table,
+		operation: sig.operation,
+		rowId: sig.rowId,
+		tenantId: sig.tenantId
+	});
+	return encoder.encode(`id: ${sig.seq}\nevent: change\ndata: ${data}\n\n`);
+}
+/** SSE resync frame. The id advances EventSource past an unservable cursor. */
+function encodeSseResyncEvent(cursor) {
+	return encoder.encode(`id: ${cursor}\nevent: resync\ndata: {}\n\n`);
+}
+/** SSE comment line (used for heartbeats — ignored by EventSource). */
+function encodeSseComment(text) {
+	return encoder.encode(`: ${text}\n\n`);
+}
+/**
+* Build the SSE body stream for an `_events` connection.
+*
+* `start(controller)`:
+*  a. **Subscribe FIRST**, before catch-up. Subscribing before the catch-up
+*     read closes the gap window: a write landing between subscribe and the
+*     catch-up read is delivered twice (once live, once in the replay) — which
+*     is safe, since the client dedupes by the SSE `id:`/seq.
+*  b. Write the `retry:` reconnection hint.
+*  c. If a cursor was supplied, replay changes after it (paging until
+*     exhausted); on `resyncRequired`, emit `event: resync` at the server's
+*     fresh horizon.
+*  d. Start the heartbeat interval.
+*
+* `cancel()` tears down on disconnect: clears the heartbeat and unsubscribes,
+* so a dropped client never leaks its subscription (which would pin the dead
+* controller and keep the cross-replica listener refcount above 0).
+*/
+function buildChangeEventStream(db, options) {
+	const { cursor, tenantScope } = options;
+	const heartbeatMs = options.heartbeatMs ?? 15e3;
+	let unsubscribe = null;
+	let heartbeat = null;
+	let closed = false;
+	const teardown = () => {
+		if (closed) return;
+		closed = true;
+		if (heartbeat) {
+			clearInterval(heartbeat);
+			heartbeat = null;
+		}
+		if (unsubscribe) {
+			unsubscribe();
+			unsubscribe = null;
+		}
+	};
+	return new ReadableStream({
+		async start(controller) {
+			unsubscribe = subscribeToChangeSignals(db, (sig) => {
+				if (closed) return;
+				if (!signalVisibleToTenant(sig, tenantScope)) return;
+				try {
+					controller.enqueue(encodeSseEvent(sig));
+				} catch {
+					teardown();
+				}
+			});
+			controller.enqueue(encoder.encode("retry: 3000\n\n"));
+			if (cursor != null) try {
+				const catchupTenantId = tenantScope.enforced ? tenantScope.tenantId : void 0;
+				let since = cursor;
+				for (;;) {
+					const page = await getChangesSince(db, {
+						since,
+						tenantId: catchupTenantId
+					});
+					if (page.resyncRequired) {
+						const resyncCursor = typeof page.resyncCursor === "number" && Number.isFinite(page.resyncCursor) && page.resyncCursor >= 0 ? page.resyncCursor : since;
+						controller.enqueue(encodeSseResyncEvent(resyncCursor));
+						break;
+					}
+					for (const change of page.changes) controller.enqueue(encodeSseEvent({
+						table: change.table,
+						operation: change.operation,
+						rowId: change.rowId,
+						tenantId: change.tenantId,
+						seq: change.seq
+					}));
+					if (closed) break;
+					if (page.cursor === since || page.changes.length === 0) break;
+					since = page.cursor;
+					while (!closed && controller.desiredSize !== null && controller.desiredSize <= 0) await new Promise((resolve) => setTimeout(resolve, 5));
+				}
+			} catch (error) {
+				logger.warn("_events: cursor catch-up failed", { error: error instanceof Error ? error.message : String(error) });
+			}
+			heartbeat = setInterval(() => {
+				if (closed) return;
+				try {
+					controller.enqueue(encodeSseComment("heartbeat"));
+				} catch {
+					teardown();
+				}
+			}, heartbeatMs);
+			heartbeat.unref?.();
+		},
+		cancel() {
+			teardown();
+		}
+	});
+}
+/**
+* Handle a request against the generated `_events` route.
+*
+* Returns 405 for non-GET; 401 when no auth middleware is configured
+* (fail-closed) or the middleware rejects; 503 when the generator has no
+* database; otherwise a 200 `text/event-stream` response whose body is the
+* live signal stream (built by {@link buildChangeEventStream}).
+*/
+async function handleEventsRoute(req, options) {
+	if (req.method !== "GET") return new Response(JSON.stringify({ error: "Method not allowed" }), {
+		status: 405,
+		headers: { "Content-Type": "application/json" }
+	});
+	if (!options.authMiddleware) return new Response(JSON.stringify({ error: "Authentication required" }), {
+		status: 401,
+		headers: { "Content-Type": "application/json" }
+	});
+	const authResult = await options.authMiddleware(EVENTS_ROUTE_OBJECT_NAME, req.method.toLowerCase())(req);
+	if (authResult instanceof Response) return authResult;
+	if (options.db == null) return new Response(JSON.stringify({ error: "Live events unavailable: no database configured for the API generator" }), {
+		status: 503,
+		headers: { "Content-Type": "application/json" }
+	});
+	const db = await resolveChangesDb(options.db);
+	await ensureChangeFeedTable(db);
+	const cursor = parseCursor(authResult);
+	const tenantScope = resolveDispatchTenantScope();
+	return new Response(buildChangeEventStream(db, {
+		cursor,
+		tenantScope
+	}), {
+		status: 200,
+		headers: {
+			"Content-Type": "text/event-stream",
+			"Cache-Control": "no-cache, no-transform",
+			Connection: "keep-alive",
+			"X-Accel-Buffering": "no"
+		}
+	});
+}
+/**
+* Resolve the catch-up cursor for a request: `Last-Event-ID` header first
+* (what an auto-reconnecting EventSource sends), then `?since=`. Returns a
+* non-negative integer, or `null` for live-forward only.
+*/
+function parseCursor(req) {
+	const lastEventId = req.headers.get("Last-Event-ID");
+	if (lastEventId !== null && lastEventId.trim() !== "") {
+		const n = Number(lastEventId);
+		if (Number.isFinite(n) && n >= 0) return Math.floor(n);
+	}
+	const since = new URL(req.url).searchParams.get("since");
+	if (since !== null && since.trim() !== "") {
+		const n = Number(since);
+		if (Number.isFinite(n) && n >= 0) return Math.floor(n);
+	}
+	return null;
+}
+//#endregion
+export { DEFAULT_EVENTS_HEARTBEAT_MS, EVENTS_ROUTE_OBJECT_NAME, buildChangeEventStream, handleEventsRoute, signalVisibleToTenant };
+
+//# sourceMappingURL=events-route.js.map

package/dist/generators/events-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-route.js","names":[],"sources":["../../src/generators/events-route.ts"],"sourcesContent":["/**\n * Generated `_events` SSE route — live change signals (issue #1763, SERVER\n * half; parent PRD #1755).\n *\n * Handles `GET {basePath}/_events` in the REST generator: an auth-guarded,\n * tenant-scoped Server-Sent-Events stream of coarse change signals ({table,\n * operation, rowId, tenantId} + a `seq` cursor in the SSE `id:` field). It is\n * the push companion to the pull-based `_changes` route (#1758): a subscriber\n * reacts to a signal by re-reading through the authorized collection routes,\n * so **no row payload ever crosses this channel** — authorization stays\n * entirely on the read path.\n *\n * The stream lifecycle (subscribe, catch-up replay, heartbeat, teardown) lives\n * in {@link buildChangeEventStream} so it is written and tested once; both the\n * REST generator here and the generated SvelteKit route import it. `rest.ts`\n * only registers the path.\n *\n * Contract:\n * - **Fail-closed auth** (identical to `_changes`, #1540 posture): no\n *   `authMiddleware` configured → 401; the middleware may return a Response to\n *   short-circuit (e.g. 403). The feed spans every table, so per-model\n *   `api: { public }` opt-outs deliberately do not apply.\n * - **Tenant scope is captured ONCE at connection open** — signal delivery\n *   happens from a different async context (the writer's afterSave, possibly\n *   another request or replica) with no tenant ALS active, so the filter must\n *   be the value resolved at subscribe time, not re-resolved per signal.\n * - **Same-origin only** for this slice: `rest.ts` does NOT wrap `_events` in\n *   CORS headers. `EventSource` cannot set request headers and credentialed\n *   cross-origin SSE needs `Access-Control-Allow-Credentials` the CORS helper\n *   does not emit; cross-origin SSE is a deliberate follow-up.\n */\n\nimport { createLogger } from '@happyvertical/logger';\nimport type { DatabaseInterface } from '@happyvertical/sql';\nimport { ensureChangeFeedTable, getChangesSince } from '../change-feed.js';\nimport {\n  type ChangeSignal,\n  subscribeToChangeSignals,\n} from '../change-signals.js';\nimport {\n  type DispatchTenantScope,\n  resolveDispatchTenantScope,\n} from '../dispatch/tenant-resolver.js';\nimport {\n  type ChangesAuthMiddleware,\n  resolveChangesDb,\n} from './changes-route.js';\n\nconst logger = createLogger({ level: 'info' });\n\n/** Options for the `_events` route handler. */\nexport interface EventsRouteOptions {\n  /** The generator's configured auth middleware, if any. */\n  authMiddleware?: ChangesAuthMiddleware;\n  /** The generator's `APIContext.db` (instance, config object, or URL string). */\n  db?: unknown;\n}\n\n/**\n * Pseudo object name passed to the auth middleware for the events route, so\n * middlewares can recognize and specially authorize it (mirrors `_changes`).\n */\nexport const EVENTS_ROUTE_OBJECT_NAME = '_events';\n\n/** Default heartbeat interval (ms). Overridable via stream options. */\nexport const DEFAULT_EVENTS_HEARTBEAT_MS = 15000;\n\nconst encoder = new TextEncoder();\n\n/** Options for {@link buildChangeEventStream}. */\nexport interface ChangeEventStreamOptions {\n  /**\n   * Catch-up cursor. When a non-negative number, changes after it are replayed\n   * before going live; `null` means live-forward only (no catch-up).\n   */\n  cursor: number | null;\n  /**\n   * Tenant scope captured at connection open. Delivery filters against this\n   * fixed value — it must NOT be re-resolved per signal (delivery runs outside\n   * any tenant ALS context).\n   */\n  tenantScope: DispatchTenantScope;\n  /** Heartbeat interval (ms). Defaults to {@link DEFAULT_EVENTS_HEARTBEAT_MS}. */\n  heartbeatMs?: number;\n}\n\n/**\n * Whether a signal is visible to a captured tenant scope. Exact same rule as\n * `getChangesSince`'s tenantId filter, run **synchronously server-side** inside\n * the enqueue callback before any byte hits the wire:\n * - not enforced → visible.\n * - enforced, no active tenant (`tenantId === null`) → only global signals.\n * - enforced, tenant `T` → `T`'s signals plus global signals.\n */\nexport function signalVisibleToTenant(\n  sig: ChangeSignal,\n  scope: DispatchTenantScope,\n): boolean {\n  if (!scope.enforced) return true;\n  if (scope.tenantId === null) return sig.tenantId === null;\n  return sig.tenantId === scope.tenantId || sig.tenantId === null;\n}\n\n/**\n * SSE frame for a change signal. The `data` JSON is EXACTLY\n * `{table, operation, rowId, tenantId}` — the `seq` lives only in the `id:`\n * field (the EventSource `Last-Event-ID` a client echoes to resume).\n */\nfunction encodeSseEvent(sig: ChangeSignal): Uint8Array {\n  const data = JSON.stringify({\n    table: sig.table,\n    operation: sig.operation,\n    rowId: sig.rowId,\n    tenantId: sig.tenantId,\n  });\n  return encoder.encode(`id: ${sig.seq}\\nevent: change\\ndata: ${data}\\n\\n`);\n}\n\n/** SSE resync frame. The id advances EventSource past an unservable cursor. */\nfunction encodeSseResyncEvent(cursor: number): Uint8Array {\n  return encoder.encode(`id: ${cursor}\\nevent: resync\\ndata: {}\\n\\n`);\n}\n\n/** SSE comment line (used for heartbeats — ignored by EventSource). */\nfunction encodeSseComment(text: string): Uint8Array {\n  return encoder.encode(`: ${text}\\n\\n`);\n}\n\n/**\n * Build the SSE body stream for an `_events` connection.\n *\n * `start(controller)`:\n *  a. **Subscribe FIRST**, before catch-up. Subscribing before the catch-up\n *     read closes the gap window: a write landing between subscribe and the\n *     catch-up read is delivered twice (once live, once in the replay) — which\n *     is safe, since the client dedupes by the SSE `id:`/seq.\n *  b. Write the `retry:` reconnection hint.\n *  c. If a cursor was supplied, replay changes after it (paging until\n *     exhausted); on `resyncRequired`, emit `event: resync` at the server's\n *     fresh horizon.\n *  d. Start the heartbeat interval.\n *\n * `cancel()` tears down on disconnect: clears the heartbeat and unsubscribes,\n * so a dropped client never leaks its subscription (which would pin the dead\n * controller and keep the cross-replica listener refcount above 0).\n */\nexport function buildChangeEventStream(\n  db: DatabaseInterface,\n  options: ChangeEventStreamOptions,\n): ReadableStream<Uint8Array> {\n  const { cursor, tenantScope } = options;\n  const heartbeatMs = options.heartbeatMs ?? DEFAULT_EVENTS_HEARTBEAT_MS;\n\n  let unsubscribe: (() => void) | null = null;\n  let heartbeat: ReturnType<typeof setInterval> | null = null;\n  let closed = false;\n\n  const teardown = () => {\n    if (closed) return;\n    closed = true;\n    if (heartbeat) {\n      clearInterval(heartbeat);\n      heartbeat = null;\n    }\n    if (unsubscribe) {\n      unsubscribe();\n      unsubscribe = null;\n    }\n  };\n\n  return new ReadableStream<Uint8Array>({\n    async start(controller) {\n      // (a) Subscribe FIRST, before catch-up — closes the subscribe/catch-up\n      // gap window (a write in between is delivered twice; the client dedupes\n      // by seq). The tenant filter uses the scope captured at open, never a\n      // per-signal re-resolution.\n      unsubscribe = subscribeToChangeSignals(db, (sig) => {\n        if (closed) return;\n        if (!signalVisibleToTenant(sig, tenantScope)) return;\n        try {\n          controller.enqueue(encodeSseEvent(sig));\n        } catch {\n          // Controller already closed (client gone before cancel fired) —\n          // tear down so we stop trying to write to a dead controller.\n          teardown();\n        }\n      });\n\n      // (b) Reconnection hint.\n      controller.enqueue(encoder.encode('retry: 3000\\n\\n'));\n\n      // (c) Catch-up replay from the cursor, if one was supplied.\n      if (cursor != null) {\n        try {\n          // Catch-up MUST filter by the scope captured at connection open, not\n          // re-resolve the tenant via ALS at call time. start() happens to run\n          // in-request today, but relying on that is fragile — and it must match\n          // the live-signal filter exactly (signalVisibleToTenant): when\n          // enforced, `scope.tenantId` (a tenant id → that tenant + global; null\n          // → global only); when not enforced, undefined → no tenant filter.\n          const catchupTenantId = tenantScope.enforced\n            ? tenantScope.tenantId\n            : undefined;\n          let since = cursor;\n          // Page until exhausted (cursor stops advancing / resync).\n          for (;;) {\n            const page = await getChangesSince(db, {\n              since,\n              tenantId: catchupTenantId,\n            });\n            if (page.resyncRequired) {\n              const resyncCursor =\n                typeof page.resyncCursor === 'number' &&\n                Number.isFinite(page.resyncCursor) &&\n                page.resyncCursor >= 0\n                  ? page.resyncCursor\n                  : since;\n              controller.enqueue(encodeSseResyncEvent(resyncCursor));\n              break;\n            }\n            for (const change of page.changes) {\n              controller.enqueue(\n                encodeSseEvent({\n                  table: change.table,\n                  operation: change.operation,\n                  rowId: change.rowId,\n                  tenantId: change.tenantId,\n                  seq: change.seq,\n                }),\n              );\n            }\n            if (closed) break;\n            if (page.cursor === since || page.changes.length === 0) {\n              break;\n            }\n            since = page.cursor;\n            // NOTE: catch-up enqueues per-page without a hard cap. It is\n            // bounded — an over-old cursor hits `resyncRequired` and stops — but\n            // a large retention window replayed to a slow client could spike\n            // memory. Honor the controller's backpressure signal cheaply: when\n            // the internal queue is full (`desiredSize <= 0`), yield between\n            // pages so the consumer drains first. Bounded by `closed` (set on\n            // cancel/disconnect), so it can't spin on a client that never reads.\n            while (\n              !closed &&\n              controller.desiredSize !== null &&\n              controller.desiredSize <= 0\n            ) {\n              await new Promise((resolve) => setTimeout(resolve, 5));\n            }\n          }\n        } catch (error) {\n          logger.warn('_events: cursor catch-up failed', {\n            error: error instanceof Error ? error.message : String(error),\n          });\n        }\n      }\n\n      // (d) Heartbeat keeps intermediaries from idling the connection out.\n      heartbeat = setInterval(() => {\n        if (closed) return;\n        try {\n          controller.enqueue(encodeSseComment('heartbeat'));\n        } catch {\n          teardown();\n        }\n      }, heartbeatMs);\n      // Do not keep the event loop alive solely for heartbeats.\n      (heartbeat as { unref?: () => void }).unref?.();\n    },\n    cancel() {\n      // Client disconnected (abort) — release the subscription + heartbeat.\n      teardown();\n    },\n  });\n}\n\n/**\n * Handle a request against the generated `_events` route.\n *\n * Returns 405 for non-GET; 401 when no auth middleware is configured\n * (fail-closed) or the middleware rejects; 503 when the generator has no\n * database; otherwise a 200 `text/event-stream` response whose body is the\n * live signal stream (built by {@link buildChangeEventStream}).\n */\nexport async function handleEventsRoute(\n  req: Request,\n  options: EventsRouteOptions,\n): Promise<Response> {\n  if (req.method !== 'GET') {\n    return new Response(JSON.stringify({ error: 'Method not allowed' }), {\n      status: 405,\n      headers: { 'Content-Type': 'application/json' },\n    });\n  }\n\n  // Fail-closed (#1540): the signal stream spans every table, so it is never\n  // public — an auth middleware must be configured and must pass.\n  if (!options.authMiddleware) {\n    return new Response(JSON.stringify({ error: 'Authentication required' }), {\n      status: 401,\n      headers: { 'Content-Type': 'application/json' },\n    });\n  }\n  const authCheck = options.authMiddleware(\n    EVENTS_ROUTE_OBJECT_NAME,\n    req.method.toLowerCase(),\n  );\n  const authResult = await authCheck(req);\n  if (authResult instanceof Response) {\n    return authResult;\n  }\n\n  if (options.db == null) {\n    return new Response(\n      JSON.stringify({\n        error:\n          'Live events unavailable: no database configured for the API generator',\n      }),\n      { status: 503, headers: { 'Content-Type': 'application/json' } },\n    );\n  }\n\n  const db = await resolveChangesDb(options.db);\n  // A raw handle passed straight to the generator may not have gone through\n  // framework init; the feed table backs cursor catch-up.\n  await ensureChangeFeedTable(db);\n\n  // Cursor: Last-Event-ID (reconnection) takes precedence over ?since=.\n  // Default = live-forward only (no catch-up).\n  const cursor = parseCursor(authResult);\n\n  // Capture the tenant scope ONCE at connection open — delivery runs outside\n  // any tenant ALS context and must filter against this fixed value.\n  const tenantScope = resolveDispatchTenantScope();\n\n  return new Response(buildChangeEventStream(db, { cursor, tenantScope }), {\n    status: 200,\n    headers: {\n      'Content-Type': 'text/event-stream',\n      'Cache-Control': 'no-cache, no-transform',\n      Connection: 'keep-alive',\n      'X-Accel-Buffering': 'no',\n    },\n  });\n}\n\n/**\n * Resolve the catch-up cursor for a request: `Last-Event-ID` header first\n * (what an auto-reconnecting EventSource sends), then `?since=`. Returns a\n * non-negative integer, or `null` for live-forward only.\n */\nfunction parseCursor(req: Request): number | null {\n  const lastEventId = req.headers.get('Last-Event-ID');\n  if (lastEventId !== null && lastEventId.trim() !== '') {\n    const n = Number(lastEventId);\n    if (Number.isFinite(n) && n >= 0) return Math.floor(n);\n  }\n\n  const since = new URL(req.url).searchParams.get('since');\n  if (since !== null && since.trim() !== '') {\n    const n = Number(since);\n    if (Number.isFinite(n) && n >= 0) return Math.floor(n);\n  }\n\n  return null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDA,IAAM,SAAS,aAAa,EAAE,OAAO,OAAO,CAAC;;;;;AAc7C,IAAa,2BAA2B;;AAGxC,IAAa,8BAA8B;AAE3C,IAAM,UAAU,IAAI,YAAY;;;;;;;;;AA2BhC,SAAgB,sBACd,KACA,OACS;CACT,IAAI,CAAC,MAAM,UAAU,OAAO;CAC5B,IAAI,MAAM,aAAa,MAAM,OAAO,IAAI,aAAa;CACrD,OAAO,IAAI,aAAa,MAAM,YAAY,IAAI,aAAa;AAC7D;;;;;;AAOA,SAAS,eAAe,KAA+B;CACrD,MAAM,OAAO,KAAK,UAAU;EAC1B,OAAO,IAAI;EACX,WAAW,IAAI;EACf,OAAO,IAAI;EACX,UAAU,IAAI;CAChB,CAAC;CACD,OAAO,QAAQ,OAAO,OAAO,IAAI,IAAI,yBAAyB,KAAK,KAAK;AAC1E;;AAGA,SAAS,qBAAqB,QAA4B;CACxD,OAAO,QAAQ,OAAO,OAAO,OAAO,8BAA8B;AACpE;;AAGA,SAAS,iBAAiB,MAA0B;CAClD,OAAO,QAAQ,OAAO,KAAK,KAAK,KAAK;AACvC;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,uBACd,IACA,SAC4B;CAC5B,MAAM,EAAE,QAAQ,gBAAgB;CAChC,MAAM,cAAc,QAAQ,eAAA;CAE5B,IAAI,cAAmC;CACvC,IAAI,YAAmD;CACvD,IAAI,SAAS;CAEb,MAAM,iBAAiB;EACrB,IAAI,QAAQ;EACZ,SAAS;EACT,IAAI,WAAW;GACb,cAAc,SAAS;GACvB,YAAY;EACd;EACA,IAAI,aAAa;GACf,YAAY;GACZ,cAAc;EAChB;CACF;CAEA,OAAO,IAAI,eAA2B;EACpC,MAAM,MAAM,YAAY;GAKtB,cAAc,yBAAyB,KAAK,QAAQ;IAClD,IAAI,QAAQ;IACZ,IAAI,CAAC,sBAAsB,KAAK,WAAW,GAAG;IAC9C,IAAI;KACF,WAAW,QAAQ,eAAe,GAAG,CAAC;IACxC,QAAQ;KAGN,SAAS;IACX;GACF,CAAC;GAGD,WAAW,QAAQ,QAAQ,OAAO,iBAAiB,CAAC;GAGpD,IAAI,UAAU,MACZ,IAAI;IAOF,MAAM,kBAAkB,YAAY,WAChC,YAAY,WACZ,KAAA;IACJ,IAAI,QAAQ;IAEZ,SAAS;KACP,MAAM,OAAO,MAAM,gBAAgB,IAAI;MACrC;MACA,UAAU;KACZ,CAAC;KACD,IAAI,KAAK,gBAAgB;MACvB,MAAM,eACJ,OAAO,KAAK,iBAAiB,YAC7B,OAAO,SAAS,KAAK,YAAY,KACjC,KAAK,gBAAgB,IACjB,KAAK,eACL;MACN,WAAW,QAAQ,qBAAqB,YAAY,CAAC;MACrD;KACF;KACA,KAAK,MAAM,UAAU,KAAK,SACxB,WAAW,QACT,eAAe;MACb,OAAO,OAAO;MACd,WAAW,OAAO;MAClB,OAAO,OAAO;MACd,UAAU,OAAO;MACjB,KAAK,OAAO;KACd,CAAC,CACH;KAEF,IAAI,QAAQ;KACZ,IAAI,KAAK,WAAW,SAAS,KAAK,QAAQ,WAAW,GACnD;KAEF,QAAQ,KAAK;KAQb,OACE,CAAC,UACD,WAAW,gBAAgB,QAC3B,WAAW,eAAe,GAE1B,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,CAAC,CAAC;IAEzD;GACF,SAAS,OAAO;IACd,OAAO,KAAK,mCAAmC,EAC7C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAC9D,CAAC;GACH;GAIF,YAAY,kBAAkB;IAC5B,IAAI,QAAQ;IACZ,IAAI;KACF,WAAW,QAAQ,iBAAiB,WAAW,CAAC;IAClD,QAAQ;KACN,SAAS;IACX;GACF,GAAG,WAAW;GAEd,UAAsC,QAAQ;EAChD;EACA,SAAS;GAEP,SAAS;EACX;CACF,CAAC;AACH;;;;;;;;;AAUA,eAAsB,kBACpB,KACA,SACmB;CACnB,IAAI,IAAI,WAAW,OACjB,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,qBAAqB,CAAC,GAAG;EACnE,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;CAKH,IAAI,CAAC,QAAQ,gBACX,OAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,0BAA0B,CAAC,GAAG;EACxE,QAAQ;EACR,SAAS,EAAE,gBAAgB,mBAAmB;CAChD,CAAC;CAMH,MAAM,aAAa,MAJD,QAAQ,eACxB,0BACA,IAAI,OAAO,YAAY,CAEA,CAAA,CAAU,GAAG;CACtC,IAAI,sBAAsB,UACxB,OAAO;CAGT,IAAI,QAAQ,MAAM,MAChB,OAAO,IAAI,SACT,KAAK,UAAU,EACb,OACE,wEACJ,CAAC,GACD;EAAE,QAAQ;EAAK,SAAS,EAAE,gBAAgB,mBAAmB;CAAE,CACjE;CAGF,MAAM,KAAK,MAAM,iBAAiB,QAAQ,EAAE;CAG5C,MAAM,sBAAsB,EAAE;CAI9B,MAAM,SAAS,YAAY,UAAU;CAIrC,MAAM,cAAc,2BAA2B;CAE/C,OAAO,IAAI,SAAS,uBAAuB,IAAI;EAAE;EAAQ;CAAY,CAAC,GAAG;EACvE,QAAQ;EACR,SAAS;GACP,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;GACZ,qBAAqB;EACvB;CACF,CAAC;AACH;;;;;;AAOA,SAAS,YAAY,KAA6B;CAChD,MAAM,cAAc,IAAI,QAAQ,IAAI,eAAe;CACnD,IAAI,gBAAgB,QAAQ,YAAY,KAAK,MAAM,IAAI;EACrD,MAAM,IAAI,OAAO,WAAW;EAC5B,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,GAAG,OAAO,KAAK,MAAM,CAAC;CACvD;CAEA,MAAM,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,aAAa,IAAI,OAAO;CACvD,IAAI,UAAU,QAAQ,MAAM,KAAK,MAAM,IAAI;EACzC,MAAM,IAAI,OAAO,KAAK;EACtB,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,GAAG,OAAO,KAAK,MAAM,CAAC;CACvD;CAEA,OAAO;AACT"}

package/dist/generators/index.d.ts

@@ -4,6 +4,7 @@
 export type { CLIConfig, CLIContext } from './cli';
 export { CLIGenerator, getCLIHandler, setupCLI } from './cli';
 export { canonicalReadRepresentation, computeBodyEtag, computeTableVersionEtag, conditionalJsonResponse, ifNoneMatchHasConcreteMatch, ifNoneMatchSatisfied, PRIVATE_READ_CACHE_CONTROL, type ReadCacheControlOptions, resolveReadCacheControl, resolveTenantEtagDiscriminator, versionConditionalResponse, warnIfSharedCacheNeutralized, } from './conditional-get';
+export { buildChangeEventStream, type ChangeEventStreamOptions, DEFAULT_EVENTS_HEARTBEAT_MS, signalVisibleToTenant, } from './events-route';
 export type { MCPConfig, MCPContext, MCPRequest, MCPResponse, MCPTool, } from './mcp';
 export { MCPGenerator } from './mcp';
 export type { APIConfig, APIContext, RestServerConfig } from './rest';

package/dist/generators/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/generators/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG9D,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,uBAAuB,EACvB,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,OAAO,GACR,MAAM,OAAO,CAAC;AAEf,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EACL,mBAAmB,EACnB,cAAc,GACf,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/generators/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAG9D,OAAO,EACL,2BAA2B,EAC3B,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,2BAA2B,EAC3B,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,uBAAuB,EACvB,8BAA8B,EAC9B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,sBAAsB,EACtB,KAAK,wBAAwB,EAC7B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,OAAO,GACR,MAAM,OAAO,CAAC;AAEf,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EACL,mBAAmB,EACnB,cAAc,GACf,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC"}

package/dist/generators/index.js

@@ -1,7 +1,8 @@
 import { runWithTenantGate, setTenantEntryPointRunner } from "./tenant-gate.js";
 import { CLIGenerator, getCLIHandler, setupCLI } from "./cli.js";
 import { PRIVATE_READ_CACHE_CONTROL, canonicalReadRepresentation, computeBodyEtag, computeTableVersionEtag, conditionalJsonResponse, ifNoneMatchHasConcreteMatch, ifNoneMatchSatisfied, resolveReadCacheControl, resolveTenantEtagDiscriminator, versionConditionalResponse, warnIfSharedCacheNeutralized } from "./conditional-get.js";
+import { DEFAULT_EVENTS_HEARTBEAT_MS, buildChangeEventStream, signalVisibleToTenant } from "./events-route.js";
 import { MCPGenerator } from "./mcp.js";
 import { APIGenerator, createRestServer, startRestServer } from "./rest.js";
 import { generateOpenAPISpec, setupSwaggerUI } from "./swagger.js";
-export { APIGenerator, CLIGenerator, MCPGenerator, PRIVATE_READ_CACHE_CONTROL, canonicalReadRepresentation, computeBodyEtag, computeTableVersionEtag, conditionalJsonResponse, createRestServer, generateOpenAPISpec, getCLIHandler, ifNoneMatchHasConcreteMatch, ifNoneMatchSatisfied, resolveReadCacheControl, resolveTenantEtagDiscriminator, runWithTenantGate, setTenantEntryPointRunner, setupCLI, setupSwaggerUI, startRestServer, versionConditionalResponse, warnIfSharedCacheNeutralized };
+export { APIGenerator, CLIGenerator, DEFAULT_EVENTS_HEARTBEAT_MS, MCPGenerator, PRIVATE_READ_CACHE_CONTROL, buildChangeEventStream, canonicalReadRepresentation, computeBodyEtag, computeTableVersionEtag, conditionalJsonResponse, createRestServer, generateOpenAPISpec, getCLIHandler, ifNoneMatchHasConcreteMatch, ifNoneMatchSatisfied, resolveReadCacheControl, resolveTenantEtagDiscriminator, runWithTenantGate, setTenantEntryPointRunner, setupCLI, setupSwaggerUI, signalVisibleToTenant, startRestServer, versionConditionalResponse, warnIfSharedCacheNeutralized };

package/dist/generators/mcp-runtime-template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-runtime-template.d.ts","sourceRoot":"","sources":["../../src/generators/mcp-runtime-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAStD,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,kCAAkC;IAClC,MAAM,CAAC,EAAE,SAAS,CAAC;IAEnB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,wDAAwD;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACtC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,cAAmB,GAAG,MAAM,CAyZ7E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,GAAE,MAA6B,GACxC,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CA0GR"}
+{"version":3,"file":"mcp-runtime-template.d.ts","sourceRoot":"","sources":["../../src/generators/mcp-runtime-template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAStD,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,kCAAkC;IAClC,MAAM,CAAC,EAAE,SAAS,CAAC;IAEnB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,wDAAwD;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACtC,CAAC,CAAC;IAEH;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,cAAmB,GAAG,MAAM,CA+Z7E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,GAAE,MAA6B,GACxC,MAAM,CAER;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CASR;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,MAAM,CA0GR"}

package/dist/generators/mcp-runtime-template.js

@@ -31,7 +31,7 @@ ${indent}    ai: aiConfig
 ${indent}  });
 
 ${indent}  const items = await collection.list({ where, limit, offset });
-${indent}  const itemsPublic = items.map((item) => item.toPublicJSON());
+${indent}  const itemsPublic = items.map((item) => item.toPublicJSON(PUBLIC_JSON_OPTIONS));
 ${indent}  return { content: [{ type: 'text', text: JSON.stringify(itemsPublic) }] };
 ${indent}}`;
 				case "get": return `${indent}case '${tool.name}': {
@@ -51,7 +51,7 @@ ${indent}  if (!item) {
 ${indent}    throw new Error('Object not found');
 ${indent}  }
 
-${indent}  return { content: [{ type: 'text', text: JSON.stringify(item.toPublicJSON()) }] };
+${indent}  return { content: [{ type: 'text', text: JSON.stringify(item.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };
 ${indent}}`;
 				case "create": return `${indent}case '${tool.name}': {
 ${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {
@@ -62,7 +62,7 @@ ${indent}  });
 ${indent}  const newItem = await collection.create(applyWritablePolicy('${capitalize(objectName)}', args));
 ${indent}  await newItem.save();
 
-${indent}  return { content: [{ type: 'text', text: JSON.stringify(newItem.toPublicJSON()) }] };
+${indent}  return { content: [{ type: 'text', text: JSON.stringify(newItem.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };
 ${indent}}`;
 				case "update": return `${indent}case '${tool.name}': {
 ${indent}  const { id, ...updateData } = args;
@@ -83,7 +83,7 @@ ${indent}  }
 ${indent}  Object.assign(existing, applyWritablePolicy('${capitalize(objectName)}', updateData));
 ${indent}  await existing.save();
 
-${indent}  return { content: [{ type: 'text', text: JSON.stringify(existing.toPublicJSON()) }] };
+${indent}  return { content: [{ type: 'text', text: JSON.stringify(existing.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };
 ${indent}}`;
 				case "delete": return `${indent}case '${tool.name}': {
 ${indent}  if (!args.id) {
@@ -176,6 +176,12 @@ const TENANT_SCOPED = new Set(${JSON.stringify(tenantScopedSet)});
 const MCP_TENANT_ID = process.env.SMRT_MCP_TENANT_ID || undefined;
 const MCP_ALLOW_CROSS_TENANT = process.env.SMRT_MCP_ALLOW_CROSS_TENANT === 'true';
 ` : ""}
+const PUBLIC_JSON_OPTIONS = {
+  permissions: (process.env.SMRT_MCP_PERMISSIONS || '')
+    .split(',')
+    .map((permission) => permission.trim())
+    .filter(Boolean),
+};
 
 /**
  * Mass-assignment guard (#1540): strip framework/server-managed and
@@ -217,7 +223,7 @@ function applyWritablePolicy(objectName: string, data: any): Record<string, any>
  */
 function toPublicResult(value: any, seen: WeakSet<object> = new WeakSet()): any {
   if (value === null || typeof value !== 'object') return value;
-  if (typeof value.toPublicJSON === 'function') return value.toPublicJSON();
+  if (typeof value.toPublicJSON === 'function') return value.toPublicJSON(PUBLIC_JSON_OPTIONS);
   if (Array.isArray(value)) {
     if (seen.has(value)) return value;
     seen.add(value);

package/dist/generators/mcp-runtime-template.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-runtime-template.js","names":[],"sources":["../../src/generators/mcp-runtime-template.ts"],"sourcesContent":["/**\n * Runtime bootstrap template for generated MCP servers\n *\n * This template provides stdio transport integration for SMRT-generated MCP servers.\n * It handles:\n * - Server initialization with @modelcontextprotocol/sdk\n * - Tool registration from MCPGenerator\n * - Stdio transport connection\n * - Error handling and logging\n * - Graceful shutdown\n */\n\nimport type { MCPConfig, MCPContext } from './mcp.js';\n\n/**\n * Helper function to capitalize first letter\n */\nfunction capitalize(str: string): string {\n  return str.charAt(0).toUpperCase() + str.slice(1);\n}\n\nexport interface RuntimeOptions {\n  /** Server name (defaults to package name) */\n  name?: string;\n\n  /** Server version (defaults to package version) */\n  version?: string;\n\n  /** Server description */\n  description?: string;\n\n  /** MCP generator configuration */\n  config?: MCPConfig;\n\n  /** MCP context (database, AI client, etc.) */\n  context?: MCPContext;\n\n  /** Enable debug logging */\n  debug?: boolean;\n\n  /** Static tool definitions (generated at build time) */\n  tools?: Array<{\n    name: string;\n    description: string;\n    inputSchema: Record<string, unknown>;\n  }>;\n\n  /**\n   * Lowercased simple names of objects that are `@TenantScoped` (#1554). When\n   * non-empty, the generated server imports the tenancy fail-closed gate and\n   * wraps tenant-scoped tool calls so a stdio invocation cannot read across all\n   * tenants. The tenant is sourced from `SMRT_MCP_TENANT_ID` /\n   * `SMRT_MCP_ALLOW_CROSS_TENANT` env vars (this server has no auth principal).\n   */\n  tenantScopedObjects?: string[];\n}\n\n/**\n * Generate runtime bootstrap code for MCP server\n *\n * @param options - Runtime configuration options\n * @returns TypeScript code for server entry point\n */\nexport function generateRuntimeBootstrap(options: RuntimeOptions = {}): string {\n  const {\n    name = 'smrt-mcp-server',\n    version = '1.0.0',\n    description = 'Auto-generated MCP server from SMRT objects',\n    debug = false,\n    tools = [],\n    tenantScopedObjects = [],\n  } = options;\n\n  // Generate static tool array as TypeScript code\n  const toolsCode = tools.length > 0 ? JSON.stringify(tools, null, 2) : '[]';\n\n  // Fail-closed tenant context (#1554): only wire the tenancy gate when at\n  // least one exposed object is tenant-scoped, so apps without tenancy never\n  // get a dangling import.\n  const tenantScopedSet = Array.from(\n    new Set(tenantScopedObjects.map((n) => n.toLowerCase())),\n  );\n  const hasTenantScoped = tenantScopedSet.length > 0;\n\n  // Generate static switch cases using shared helper\n  const generateSwitchCases = (indent: string) => {\n    return tools\n      .map((tool) => {\n        const [objectName, action] = tool.name.split('_');\n\n        switch (action) {\n          case 'list':\n            return `${indent}case '${tool.name}': {\n${indent}  const limit = args.limit ?? 50;\n${indent}  const offset = args.offset ?? 0;\n${indent}  const where = args.where ?? {};\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const items = await collection.list({ where, limit, offset });\n${indent}  const itemsPublic = items.map((item) => item.toPublicJSON());\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(itemsPublic) }] };\n${indent}}`;\n\n          case 'get':\n            return `${indent}case '${tool.name}': {\n${indent}  if (!args.id && !args.slug) {\n${indent}    throw new Error('Either id or slug is required');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const filter = args.id || args.slug;\n${indent}  const item = await collection.get(filter);\n\n${indent}  if (!item) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(item.toPublicJSON()) }] };\n${indent}}`;\n\n          case 'create':\n            return `${indent}case '${tool.name}': {\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const newItem = await collection.create(applyWritablePolicy('${capitalize(objectName)}', args));\n${indent}  await newItem.save();\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(newItem.toPublicJSON()) }] };\n${indent}}`;\n\n          case 'update':\n            return `${indent}case '${tool.name}': {\n${indent}  const { id, ...updateData } = args;\n${indent}  if (!id) {\n${indent}    throw new Error('ID is required for update');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const existing = await collection.get(id);\n${indent}  if (!existing) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  Object.assign(existing, applyWritablePolicy('${capitalize(objectName)}', updateData));\n${indent}  await existing.save();\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(existing.toPublicJSON()) }] };\n${indent}}`;\n\n          case 'delete':\n            return `${indent}case '${tool.name}': {\n${indent}  if (!args.id) {\n${indent}    throw new Error('ID is required for delete');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const toDelete = await collection.get(args.id);\n${indent}  if (!toDelete) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  await toDelete.delete();\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify({ success: true, message: 'Object deleted successfully' }) }] };\n${indent}}`;\n\n          default:\n            // Custom action\n            return `${indent}case '${tool.name}': {\n${indent}  const { id, options = {}, ...directArgs } = args;\n\n${indent}  if (!id) {\n${indent}    throw new Error('ID is required for custom action ${action}');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const object = await collection.get(id);\n${indent}  if (!object) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  if (typeof object['${action}'] !== 'function') {\n${indent}    throw new Error('Method ${action} not found on object');\n${indent}  }\n\n${indent}  const methodArgs = Object.keys(options).length > 0 ? options : directArgs;\n${indent}  const result = await object['${action}'](methodArgs);\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(toPublicResult(result)) }] };\n${indent}}`;\n        }\n      })\n      .join('\\n\\n');\n  };\n\n  const switchCases = generateSwitchCases('          ');\n\n  return `#!/usr/bin/env node\n/**\n * Auto-generated MCP Server\n * Generated by @smrt/core MCPGenerator\n *\n * This server exposes SMRT objects as MCP tools for AI integration.\n *\n * SECURITY (#1540): tool responses exclude @field({ sensitive }) fields and\n * create/update bodies are mass-assignment guarded. This stdio server has NO\n * per-call authentication principal — its trust boundary is the host process /\n * MCP client that launches it. Run it only in a trusted context, or front it\n * with an authenticated gateway. Do not expose it directly to untrusted callers.\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n  type CallToolRequest,\n  type ListToolsRequest,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { ObjectRegistry } from '@happyvertical/smrt-core';\nimport { config } from '@happyvertical/smrt-config';\n${hasTenantScoped ? \"import { enableTenancy, runTenantScopedEntryPoint } from '@happyvertical/smrt-tenancy';\\n\" : ''}\n// Server configuration\nconst SERVER_NAME = ${JSON.stringify(name)};\nconst SERVER_VERSION = ${JSON.stringify(version)};\nconst SERVER_DESCRIPTION = ${JSON.stringify(description)};\nconst DEBUG = ${debug};\n\n// Static tool definitions (generated at build time)\nconst TOOLS = ${toolsCode};\n${\n  hasTenantScoped\n    ? `\n// Fail-closed tenant context (#1554): tenant-scoped objects must run inside a\n// tenant. This stdio server has no auth principal, so the tenant is taken from\n// the environment; without it (and with tenancy enabled) tenant-scoped tools\n// throw rather than reading across all tenants.\nconst TENANT_SCOPED = new Set(${JSON.stringify(tenantScopedSet)});\nconst MCP_TENANT_ID = process.env.SMRT_MCP_TENANT_ID || undefined;\nconst MCP_ALLOW_CROSS_TENANT = process.env.SMRT_MCP_ALLOW_CROSS_TENANT === 'true';\n`\n    : ''\n}\n\n/**\n * Mass-assignment guard (#1540): strip framework/server-managed and\n * \\`@field({ readonly: true })\\` fields from create/update bodies, intersecting\n * with the optional \\`@smrt({ api: { writable: [...] } })\\` allowlist.\n */\nfunction applyWritablePolicy(objectName: string, data: any): Record<string, any> {\n  if (!data || typeof data !== 'object') return {};\n  const serverManaged = new Set([\n    'id', 'tenantId', 'tenant_id',\n    'createdAt', 'created_at', 'updatedAt', 'updated_at',\n  ]);\n  const readonly = new Set<string>();\n  let writable: string[] | null = null;\n  const apiConfig = ObjectRegistry.getConfig(objectName)?.api as any;\n  if (apiConfig && typeof apiConfig === 'object' && Array.isArray(apiConfig.writable)) {\n    writable = apiConfig.writable;\n  }\n  for (const [name, def] of ObjectRegistry.getFields(objectName)) {\n    if (def && ((def as any).readonly === true || (def as any)._meta?.readonly === true)) {\n      readonly.add(name);\n    }\n  }\n  const result: Record<string, any> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (key.startsWith('_')) continue;\n    if (serverManaged.has(key)) continue;\n    if (readonly.has(key)) continue;\n    if (writable && !writable.includes(key)) continue;\n    result[key] = value;\n  }\n  return result;\n}\n\n/**\n * Sensitive-field-safe serialization for custom-action results (#1540).\n * Recurses through arrays and plain objects so nested SmrtObjects are stripped\n * too; non-plain instances (Date, etc.) and primitives pass through. Cycle-safe.\n */\nfunction toPublicResult(value: any, seen: WeakSet<object> = new WeakSet()): any {\n  if (value === null || typeof value !== 'object') return value;\n  if (typeof value.toPublicJSON === 'function') return value.toPublicJSON();\n  if (Array.isArray(value)) {\n    if (seen.has(value)) return value;\n    seen.add(value);\n    return value.map((entry: any) => toPublicResult(entry, seen));\n  }\n  const proto = Object.getPrototypeOf(value);\n  if (proto !== Object.prototype && proto !== null) return value;\n  if (seen.has(value)) return value;\n  seen.add(value);\n  const out: Record<string, any> = {};\n  for (const [key, entry] of Object.entries(value)) {\n    out[key] = toPublicResult(entry, seen);\n  }\n  return out;\n}\n\n/**\n * Main server startup function\n */\nasync function main() {\n  try {\n    if (DEBUG) {\n      console.error(\\`[MCP] Starting server: \\${SERVER_NAME} v\\${SERVER_VERSION}\\`);\n    }\n${\n  hasTenantScoped\n    ? `\n    // Fail-closed tenant context (#1554): install the tenancy interceptor so\n    // tenant-scoped tools are actually filtered, and so the entry-point gate\n    // throws (rather than passing through) when no tenant is supplied. Without\n    // this, a tenant set via SMRT_MCP_TENANT_ID would only set async context\n    // with no interceptor to enforce it.\n    enableTenancy();\n`\n    : ''\n}\n    // Load configuration from environment and .smrt.config files\n    const appConfig = await config.load();\n    const aiConfig = appConfig?.ai || {};\n\n    if (DEBUG) {\n      console.error(\\`[MCP] Loaded \\${TOOLS.length} static tools\\`);\n      console.error(\\`[MCP] Available tools:\\`, TOOLS.map(t => t.name).join(', '));\n    }\n\n    // Create MCP server\n    const server = new Server(\n      {\n        name: SERVER_NAME,\n        version: SERVER_VERSION,\n      },\n      {\n        capabilities: {\n          tools: {},\n        },\n      }\n    );\n\n    // Register ListTools handler\n    server.setRequestHandler(ListToolsRequestSchema, async (_request: ListToolsRequest) => {\n      if (DEBUG) {\n        console.error(\\`[MCP] ListTools request received\\`);\n      }\n\n      return {\n        tools: TOOLS,\n      };\n    });\n\n    // Register CallTool handler\n    server.setRequestHandler(CallToolRequestSchema, async (request: CallToolRequest) => {\n      const { name: toolName, arguments: args = {} } = request.params;\n\n      if (DEBUG) {\n        console.error(\\`[MCP] CallTool request: \\${toolName}\\`);\n        console.error(\\`[MCP] Arguments:\\`, JSON.stringify(args, null, 2));\n      }\n\n      try {\n        // Static switch statement for tool execution\n        const runToolBody = async () => {\n          switch (toolName) {\n${switchCases}\n\n            default:\n              throw new Error(\\`Unknown tool: \\${toolName}\\`);\n          }\n        };\n${\n  hasTenantScoped\n    ? `\n        // Fail-closed tenant context for tenant-scoped tools (#1554).\n        const [toolObject] = toolName.split('_');\n        const result =\n          toolObject && TENANT_SCOPED.has(toolObject.toLowerCase())\n            ? await runTenantScopedEntryPoint(\n                { tenantScoped: true, tenantId: MCP_TENANT_ID, allowCrossTenant: MCP_ALLOW_CROSS_TENANT, surface: 'MCP' },\n                runToolBody,\n              )\n            : await runToolBody();`\n    : `\n        const result = await runToolBody();`\n}\n\n        if (DEBUG) {\n          console.error(\\`[MCP] Tool executed successfully: \\${toolName}\\`);\n        }\n\n        return result;\n      } catch (error) {\n        const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n        console.error(\\`[MCP] Tool execution failed: \\${toolName}\\`, error);\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: \\`Error executing tool \\${toolName}: \\${errorMessage}\\`,\n            },\n          ],\n          isError: true,\n        };\n      }\n    });\n\n    // Setup stdio transport\n    const transport = new StdioServerTransport();\n\n    // Connect server to transport\n    await server.connect(transport);\n\n    if (DEBUG) {\n      console.error(\\`[MCP] Server connected via stdio transport\\`);\n      console.error(\\`[MCP] Ready to receive requests\\`);\n    }\n\n    // Handle graceful shutdown\n    process.on('SIGINT', async () => {\n      if (DEBUG) {\n        console.error(\\`[MCP] Received SIGINT, shutting down gracefully\\`);\n      }\n      await server.close();\n      process.exit(0);\n    });\n\n    process.on('SIGTERM', async () => {\n      if (DEBUG) {\n        console.error(\\`[MCP] Received SIGTERM, shutting down gracefully\\`);\n      }\n      await server.close();\n      process.exit(0);\n    });\n  } catch (error) {\n    console.error('[MCP] Fatal error during server startup:', error);\n    process.exit(1);\n  }\n}\n\n// Start the server\nmain().catch((error) => {\n  console.error('[MCP] Unhandled error:', error);\n  process.exit(1);\n});\n`;\n}\n\n/**\n * Generate package.json script for running MCP server\n *\n * @param serverPath - Path to generated server file (relative to package root)\n * @returns Script command for package.json\n */\nexport function generateMCPScript(\n  serverPath: string = 'dist/mcp-server.js',\n): string {\n  return `node ${serverPath}`;\n}\n\n/**\n * Generate Claude Desktop configuration example\n *\n * @param serverName - Name for the MCP server\n * @param serverPath - Absolute path to server file\n * @returns Configuration object for claude_desktop_config.json\n */\nexport function generateClaudeConfig(\n  serverName: string,\n  serverPath: string,\n): object {\n  return {\n    mcpServers: {\n      [serverName]: {\n        command: 'node',\n        args: [serverPath],\n      },\n    },\n  };\n}\n\n/**\n * Generate README documentation for MCP server setup\n *\n * @param serverName - Name of the MCP server\n * @param serverPath - Path to the server file\n * @returns Markdown documentation\n */\nexport function generateMCPDocumentation(\n  serverName: string,\n  serverPath: string,\n): string {\n  return `# MCP Server Setup\n\nThis project includes an auto-generated MCP (Model Context Protocol) server that exposes SMRT objects as tools for AI integration.\n\n## Quick Start\n\n### 1. Build the MCP Server\n\n\\`\\`\\`bash\nnpm run build\n\\`\\`\\`\n\nThis generates the MCP server at: \\`${serverPath}\\`\n\n### 2. Configure Claude Desktop\n\nAdd the following to your Claude Desktop configuration file:\n\n**macOS**: \\`~/.config/Claude/claude_desktop_config.json\\`\n**Windows**: \\`%APPDATA%\\\\Claude\\\\claude_desktop_config.json\\`\n\n\\`\\`\\`json\n{\n  \"mcpServers\": {\n    \"${serverName}\": {\n      \"command\": \"node\",\n      \"args\": [\"/absolute/path/to/${serverPath}\"]\n    }\n  }\n}\n\\`\\`\\`\n\nReplace \\`/absolute/path/to/\\` with the actual absolute path to your project directory.\n\n### 3. Restart Claude Desktop\n\nClose and reopen Claude Desktop to load the new MCP server.\n\n### 4. Test the Integration\n\nIn Claude Code, you can now use the auto-generated tools. For example:\n\n- \\`list_products\\` - List all products\n- \\`get_product\\` - Get a specific product by ID\n- \\`create_product\\` - Create a new product\n- And more...\n\n## Environment Variables\n\nThe MCP server supports optional environment variables:\n\n- \\`DATABASE_URL\\` - Database connection string\n\n**AI Provider Configuration (in priority order):**\n1. **Generic configuration** (supports any provider):\n   - \\`SMRT_AI_PROVIDER\\` - Provider name (e.g., 'openai', 'anthropic', 'claude-cli', 'gemini')\n   - \\`SMRT_AI_API_KEY\\` - API key for the provider\n   - \\`SMRT_AI_MODEL\\` - Model to use (optional)\n\n2. **Provider-specific fallbacks**:\n   - \\`OPENAI_API_KEY\\` - OpenAI API key (auto-detects provider as 'openai')\n   - \\`ANTHROPIC_API_KEY\\` - Anthropic API key (auto-detects provider as 'anthropic')\n   - \\`CLAUDE_API_KEY\\` + \\`CLAUDE_MODEL\\` - Claude CLI provider (defaults to 'sonnet')\n\n**Examples:**\n\\`\\`\\`bash\n# Using generic configuration (recommended)\nexport SMRT_AI_PROVIDER=claude-cli\nexport SMRT_AI_MODEL=sonnet\n\n# Using provider-specific configuration\nexport CLAUDE_API_KEY=your-key\nexport CLAUDE_MODEL=sonnet\n\n# Using OpenAI\nexport OPENAI_API_KEY=your-openai-key\n\\`\\`\\`\n\n## Troubleshooting\n\n### Server Not Appearing in Claude\n\n1. Check that the path in \\`claude_desktop_config.json\\` is absolute\n2. Verify the server file exists at the specified path\n3. Check Claude Desktop logs for errors\n\n### Tools Not Working\n\n1. Ensure your database is accessible (if using one)\n2. Check that SMRT objects are properly decorated with \\`@smrt()\\`\n3. Look for errors in the MCP server output\n\n### Debug Mode\n\nTo enable debug logging, set the \\`DEBUG\\` constant to \\`true\\` in the generated server file.\n\n## Generated Tools\n\nThe following tools are automatically generated from your SMRT objects:\n\n- **CRUD Operations**: \\`list_\\`, \\`get_\\`, \\`create_\\`, \\`update_\\`, \\`delete_\\` for each object type\n- **Custom Actions**: Any custom methods included in the \\`@smrt()\\` decorator configuration\n\nSee the SMRT object definitions for the complete list of available tools and their parameters.\n`;\n}\n"],"mappings":";;;;AAiBA,SAAS,WAAW,KAAqB;CACvC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;AAClD;;;;;;;AA4CA,SAAgB,yBAAyB,UAA0B,CAAC,GAAW;CAC7E,MAAM,EACJ,OAAO,mBACP,UAAU,SACV,cAAc,+CACd,QAAQ,OACR,QAAQ,CAAC,GACT,sBAAsB,CAAC,MACrB;CAGJ,MAAM,YAAY,MAAM,SAAS,IAAI,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI;CAKtE,MAAM,kBAAkB,MAAM,KAC5B,IAAI,IAAI,oBAAoB,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC,CACzD;CACA,MAAM,kBAAkB,gBAAgB,SAAS;CAGjD,MAAM,uBAAuB,WAAmB;EAC9C,OAAO,MACJ,KAAK,SAAS;GACb,MAAM,CAAC,YAAY,UAAU,KAAK,KAAK,MAAM,GAAG;GAEhD,QAAQ,QAAR;IACE,KAAK,QACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;IAEC,KAAK,OACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,KAAK,UACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,iEAAiE,WAAW,UAAU,EAAE;EAC/F,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,KAAK,UACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,iDAAiD,WAAW,UAAU,EAAE;EAC/E,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,KAAK,UACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,SAEE,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;;EAEP,OAAO;EACP,OAAO,wDAAwD,OAAO;EACtE,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,uBAAuB,OAAO;EACrC,OAAO,8BAA8B,OAAO;EAC5C,OAAO;;EAEP,OAAO;EACP,OAAO,iCAAiC,OAAO;;EAE/C,OAAO;EACP,OAAO;GACD;EACF,CAAC,CAAC,CACD,KAAK,MAAM;CAChB;CAEA,MAAM,cAAc,oBAAoB,YAAY;CAEpD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;EAwBP,kBAAkB,8FAA8F,GAAG;;sBAE/F,KAAK,UAAU,IAAI,EAAE;yBAClB,KAAK,UAAU,OAAO,EAAE;6BACpB,KAAK,UAAU,WAAW,EAAE;gBACzC,MAAM;;;gBAGN,UAAU;EAExB,kBACI;;;;;gCAK0B,KAAK,UAAU,eAAe,EAAE;;;IAI1D,GACL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoEC,kBACI;;;;;;;IAQA,GACL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+CC,YAAY;;;;;;EAOZ,kBACI;;;;;;;;;sCAUA;6CAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DD;;;;;;;AAQA,SAAgB,kBACd,aAAqB,sBACb;CACR,OAAO,QAAQ;AACjB;;;;;;;;AASA,SAAgB,qBACd,YACA,YACQ;CACR,OAAO,EACL,YAAY,GACT,aAAa;EACZ,SAAS;EACT,MAAM,CAAC,UAAU;CACnB,EACF,EACF;AACF;;;;;;;;AASA,SAAgB,yBACd,YACA,YACQ;CACR,OAAO;;;;;;;;;;;;sCAY6B,WAAW;;;;;;;;;;;;OAY1C,WAAW;;oCAEkB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+E/C"}
+{"version":3,"file":"mcp-runtime-template.js","names":[],"sources":["../../src/generators/mcp-runtime-template.ts"],"sourcesContent":["/**\n * Runtime bootstrap template for generated MCP servers\n *\n * This template provides stdio transport integration for SMRT-generated MCP servers.\n * It handles:\n * - Server initialization with @modelcontextprotocol/sdk\n * - Tool registration from MCPGenerator\n * - Stdio transport connection\n * - Error handling and logging\n * - Graceful shutdown\n */\n\nimport type { MCPConfig, MCPContext } from './mcp.js';\n\n/**\n * Helper function to capitalize first letter\n */\nfunction capitalize(str: string): string {\n  return str.charAt(0).toUpperCase() + str.slice(1);\n}\n\nexport interface RuntimeOptions {\n  /** Server name (defaults to package name) */\n  name?: string;\n\n  /** Server version (defaults to package version) */\n  version?: string;\n\n  /** Server description */\n  description?: string;\n\n  /** MCP generator configuration */\n  config?: MCPConfig;\n\n  /** MCP context (database, AI client, etc.) */\n  context?: MCPContext;\n\n  /** Enable debug logging */\n  debug?: boolean;\n\n  /** Static tool definitions (generated at build time) */\n  tools?: Array<{\n    name: string;\n    description: string;\n    inputSchema: Record<string, unknown>;\n  }>;\n\n  /**\n   * Lowercased simple names of objects that are `@TenantScoped` (#1554). When\n   * non-empty, the generated server imports the tenancy fail-closed gate and\n   * wraps tenant-scoped tool calls so a stdio invocation cannot read across all\n   * tenants. The tenant is sourced from `SMRT_MCP_TENANT_ID` /\n   * `SMRT_MCP_ALLOW_CROSS_TENANT` env vars (this server has no auth principal).\n   */\n  tenantScopedObjects?: string[];\n}\n\n/**\n * Generate runtime bootstrap code for MCP server\n *\n * @param options - Runtime configuration options\n * @returns TypeScript code for server entry point\n */\nexport function generateRuntimeBootstrap(options: RuntimeOptions = {}): string {\n  const {\n    name = 'smrt-mcp-server',\n    version = '1.0.0',\n    description = 'Auto-generated MCP server from SMRT objects',\n    debug = false,\n    tools = [],\n    tenantScopedObjects = [],\n  } = options;\n\n  // Generate static tool array as TypeScript code\n  const toolsCode = tools.length > 0 ? JSON.stringify(tools, null, 2) : '[]';\n\n  // Fail-closed tenant context (#1554): only wire the tenancy gate when at\n  // least one exposed object is tenant-scoped, so apps without tenancy never\n  // get a dangling import.\n  const tenantScopedSet = Array.from(\n    new Set(tenantScopedObjects.map((n) => n.toLowerCase())),\n  );\n  const hasTenantScoped = tenantScopedSet.length > 0;\n\n  // Generate static switch cases using shared helper\n  const generateSwitchCases = (indent: string) => {\n    return tools\n      .map((tool) => {\n        const [objectName, action] = tool.name.split('_');\n\n        switch (action) {\n          case 'list':\n            return `${indent}case '${tool.name}': {\n${indent}  const limit = args.limit ?? 50;\n${indent}  const offset = args.offset ?? 0;\n${indent}  const where = args.where ?? {};\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const items = await collection.list({ where, limit, offset });\n${indent}  const itemsPublic = items.map((item) => item.toPublicJSON(PUBLIC_JSON_OPTIONS));\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(itemsPublic) }] };\n${indent}}`;\n\n          case 'get':\n            return `${indent}case '${tool.name}': {\n${indent}  if (!args.id && !args.slug) {\n${indent}    throw new Error('Either id or slug is required');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const filter = args.id || args.slug;\n${indent}  const item = await collection.get(filter);\n\n${indent}  if (!item) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(item.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };\n${indent}}`;\n\n          case 'create':\n            return `${indent}case '${tool.name}': {\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const newItem = await collection.create(applyWritablePolicy('${capitalize(objectName)}', args));\n${indent}  await newItem.save();\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(newItem.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };\n${indent}}`;\n\n          case 'update':\n            return `${indent}case '${tool.name}': {\n${indent}  const { id, ...updateData } = args;\n${indent}  if (!id) {\n${indent}    throw new Error('ID is required for update');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const existing = await collection.get(id);\n${indent}  if (!existing) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  Object.assign(existing, applyWritablePolicy('${capitalize(objectName)}', updateData));\n${indent}  await existing.save();\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(existing.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };\n${indent}}`;\n\n          case 'delete':\n            return `${indent}case '${tool.name}': {\n${indent}  if (!args.id) {\n${indent}    throw new Error('ID is required for delete');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const toDelete = await collection.get(args.id);\n${indent}  if (!toDelete) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  await toDelete.delete();\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify({ success: true, message: 'Object deleted successfully' }) }] };\n${indent}}`;\n\n          default:\n            // Custom action\n            return `${indent}case '${tool.name}': {\n${indent}  const { id, options = {}, ...directArgs } = args;\n\n${indent}  if (!id) {\n${indent}    throw new Error('ID is required for custom action ${action}');\n${indent}  }\n\n${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {\n${indent}    persistence: { type: 'sql', url: process.env.DATABASE_URL || ':memory:' },\n${indent}    ai: aiConfig\n${indent}  });\n\n${indent}  const object = await collection.get(id);\n${indent}  if (!object) {\n${indent}    throw new Error('Object not found');\n${indent}  }\n\n${indent}  if (typeof object['${action}'] !== 'function') {\n${indent}    throw new Error('Method ${action} not found on object');\n${indent}  }\n\n${indent}  const methodArgs = Object.keys(options).length > 0 ? options : directArgs;\n${indent}  const result = await object['${action}'](methodArgs);\n\n${indent}  return { content: [{ type: 'text', text: JSON.stringify(toPublicResult(result)) }] };\n${indent}}`;\n        }\n      })\n      .join('\\n\\n');\n  };\n\n  const switchCases = generateSwitchCases('          ');\n\n  return `#!/usr/bin/env node\n/**\n * Auto-generated MCP Server\n * Generated by @smrt/core MCPGenerator\n *\n * This server exposes SMRT objects as MCP tools for AI integration.\n *\n * SECURITY (#1540): tool responses exclude @field({ sensitive }) fields and\n * create/update bodies are mass-assignment guarded. This stdio server has NO\n * per-call authentication principal — its trust boundary is the host process /\n * MCP client that launches it. Run it only in a trusted context, or front it\n * with an authenticated gateway. Do not expose it directly to untrusted callers.\n */\n\nimport { Server } from '@modelcontextprotocol/sdk/server/index.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport {\n  CallToolRequestSchema,\n  ListToolsRequestSchema,\n  type CallToolRequest,\n  type ListToolsRequest,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { ObjectRegistry } from '@happyvertical/smrt-core';\nimport { config } from '@happyvertical/smrt-config';\n${hasTenantScoped ? \"import { enableTenancy, runTenantScopedEntryPoint } from '@happyvertical/smrt-tenancy';\\n\" : ''}\n// Server configuration\nconst SERVER_NAME = ${JSON.stringify(name)};\nconst SERVER_VERSION = ${JSON.stringify(version)};\nconst SERVER_DESCRIPTION = ${JSON.stringify(description)};\nconst DEBUG = ${debug};\n\n// Static tool definitions (generated at build time)\nconst TOOLS = ${toolsCode};\n${\n  hasTenantScoped\n    ? `\n// Fail-closed tenant context (#1554): tenant-scoped objects must run inside a\n// tenant. This stdio server has no auth principal, so the tenant is taken from\n// the environment; without it (and with tenancy enabled) tenant-scoped tools\n// throw rather than reading across all tenants.\nconst TENANT_SCOPED = new Set(${JSON.stringify(tenantScopedSet)});\nconst MCP_TENANT_ID = process.env.SMRT_MCP_TENANT_ID || undefined;\nconst MCP_ALLOW_CROSS_TENANT = process.env.SMRT_MCP_ALLOW_CROSS_TENANT === 'true';\n`\n    : ''\n}\nconst PUBLIC_JSON_OPTIONS = {\n  permissions: (process.env.SMRT_MCP_PERMISSIONS || '')\n    .split(',')\n    .map((permission) => permission.trim())\n    .filter(Boolean),\n};\n\n/**\n * Mass-assignment guard (#1540): strip framework/server-managed and\n * \\`@field({ readonly: true })\\` fields from create/update bodies, intersecting\n * with the optional \\`@smrt({ api: { writable: [...] } })\\` allowlist.\n */\nfunction applyWritablePolicy(objectName: string, data: any): Record<string, any> {\n  if (!data || typeof data !== 'object') return {};\n  const serverManaged = new Set([\n    'id', 'tenantId', 'tenant_id',\n    'createdAt', 'created_at', 'updatedAt', 'updated_at',\n  ]);\n  const readonly = new Set<string>();\n  let writable: string[] | null = null;\n  const apiConfig = ObjectRegistry.getConfig(objectName)?.api as any;\n  if (apiConfig && typeof apiConfig === 'object' && Array.isArray(apiConfig.writable)) {\n    writable = apiConfig.writable;\n  }\n  for (const [name, def] of ObjectRegistry.getFields(objectName)) {\n    if (def && ((def as any).readonly === true || (def as any)._meta?.readonly === true)) {\n      readonly.add(name);\n    }\n  }\n  const result: Record<string, any> = {};\n  for (const [key, value] of Object.entries(data)) {\n    if (key.startsWith('_')) continue;\n    if (serverManaged.has(key)) continue;\n    if (readonly.has(key)) continue;\n    if (writable && !writable.includes(key)) continue;\n    result[key] = value;\n  }\n  return result;\n}\n\n/**\n * Sensitive-field-safe serialization for custom-action results (#1540).\n * Recurses through arrays and plain objects so nested SmrtObjects are stripped\n * too; non-plain instances (Date, etc.) and primitives pass through. Cycle-safe.\n */\nfunction toPublicResult(value: any, seen: WeakSet<object> = new WeakSet()): any {\n  if (value === null || typeof value !== 'object') return value;\n  if (typeof value.toPublicJSON === 'function') return value.toPublicJSON(PUBLIC_JSON_OPTIONS);\n  if (Array.isArray(value)) {\n    if (seen.has(value)) return value;\n    seen.add(value);\n    return value.map((entry: any) => toPublicResult(entry, seen));\n  }\n  const proto = Object.getPrototypeOf(value);\n  if (proto !== Object.prototype && proto !== null) return value;\n  if (seen.has(value)) return value;\n  seen.add(value);\n  const out: Record<string, any> = {};\n  for (const [key, entry] of Object.entries(value)) {\n    out[key] = toPublicResult(entry, seen);\n  }\n  return out;\n}\n\n/**\n * Main server startup function\n */\nasync function main() {\n  try {\n    if (DEBUG) {\n      console.error(\\`[MCP] Starting server: \\${SERVER_NAME} v\\${SERVER_VERSION}\\`);\n    }\n${\n  hasTenantScoped\n    ? `\n    // Fail-closed tenant context (#1554): install the tenancy interceptor so\n    // tenant-scoped tools are actually filtered, and so the entry-point gate\n    // throws (rather than passing through) when no tenant is supplied. Without\n    // this, a tenant set via SMRT_MCP_TENANT_ID would only set async context\n    // with no interceptor to enforce it.\n    enableTenancy();\n`\n    : ''\n}\n    // Load configuration from environment and .smrt.config files\n    const appConfig = await config.load();\n    const aiConfig = appConfig?.ai || {};\n\n    if (DEBUG) {\n      console.error(\\`[MCP] Loaded \\${TOOLS.length} static tools\\`);\n      console.error(\\`[MCP] Available tools:\\`, TOOLS.map(t => t.name).join(', '));\n    }\n\n    // Create MCP server\n    const server = new Server(\n      {\n        name: SERVER_NAME,\n        version: SERVER_VERSION,\n      },\n      {\n        capabilities: {\n          tools: {},\n        },\n      }\n    );\n\n    // Register ListTools handler\n    server.setRequestHandler(ListToolsRequestSchema, async (_request: ListToolsRequest) => {\n      if (DEBUG) {\n        console.error(\\`[MCP] ListTools request received\\`);\n      }\n\n      return {\n        tools: TOOLS,\n      };\n    });\n\n    // Register CallTool handler\n    server.setRequestHandler(CallToolRequestSchema, async (request: CallToolRequest) => {\n      const { name: toolName, arguments: args = {} } = request.params;\n\n      if (DEBUG) {\n        console.error(\\`[MCP] CallTool request: \\${toolName}\\`);\n        console.error(\\`[MCP] Arguments:\\`, JSON.stringify(args, null, 2));\n      }\n\n      try {\n        // Static switch statement for tool execution\n        const runToolBody = async () => {\n          switch (toolName) {\n${switchCases}\n\n            default:\n              throw new Error(\\`Unknown tool: \\${toolName}\\`);\n          }\n        };\n${\n  hasTenantScoped\n    ? `\n        // Fail-closed tenant context for tenant-scoped tools (#1554).\n        const [toolObject] = toolName.split('_');\n        const result =\n          toolObject && TENANT_SCOPED.has(toolObject.toLowerCase())\n            ? await runTenantScopedEntryPoint(\n                { tenantScoped: true, tenantId: MCP_TENANT_ID, allowCrossTenant: MCP_ALLOW_CROSS_TENANT, surface: 'MCP' },\n                runToolBody,\n              )\n            : await runToolBody();`\n    : `\n        const result = await runToolBody();`\n}\n\n        if (DEBUG) {\n          console.error(\\`[MCP] Tool executed successfully: \\${toolName}\\`);\n        }\n\n        return result;\n      } catch (error) {\n        const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n        console.error(\\`[MCP] Tool execution failed: \\${toolName}\\`, error);\n\n        return {\n          content: [\n            {\n              type: 'text',\n              text: \\`Error executing tool \\${toolName}: \\${errorMessage}\\`,\n            },\n          ],\n          isError: true,\n        };\n      }\n    });\n\n    // Setup stdio transport\n    const transport = new StdioServerTransport();\n\n    // Connect server to transport\n    await server.connect(transport);\n\n    if (DEBUG) {\n      console.error(\\`[MCP] Server connected via stdio transport\\`);\n      console.error(\\`[MCP] Ready to receive requests\\`);\n    }\n\n    // Handle graceful shutdown\n    process.on('SIGINT', async () => {\n      if (DEBUG) {\n        console.error(\\`[MCP] Received SIGINT, shutting down gracefully\\`);\n      }\n      await server.close();\n      process.exit(0);\n    });\n\n    process.on('SIGTERM', async () => {\n      if (DEBUG) {\n        console.error(\\`[MCP] Received SIGTERM, shutting down gracefully\\`);\n      }\n      await server.close();\n      process.exit(0);\n    });\n  } catch (error) {\n    console.error('[MCP] Fatal error during server startup:', error);\n    process.exit(1);\n  }\n}\n\n// Start the server\nmain().catch((error) => {\n  console.error('[MCP] Unhandled error:', error);\n  process.exit(1);\n});\n`;\n}\n\n/**\n * Generate package.json script for running MCP server\n *\n * @param serverPath - Path to generated server file (relative to package root)\n * @returns Script command for package.json\n */\nexport function generateMCPScript(\n  serverPath: string = 'dist/mcp-server.js',\n): string {\n  return `node ${serverPath}`;\n}\n\n/**\n * Generate Claude Desktop configuration example\n *\n * @param serverName - Name for the MCP server\n * @param serverPath - Absolute path to server file\n * @returns Configuration object for claude_desktop_config.json\n */\nexport function generateClaudeConfig(\n  serverName: string,\n  serverPath: string,\n): object {\n  return {\n    mcpServers: {\n      [serverName]: {\n        command: 'node',\n        args: [serverPath],\n      },\n    },\n  };\n}\n\n/**\n * Generate README documentation for MCP server setup\n *\n * @param serverName - Name of the MCP server\n * @param serverPath - Path to the server file\n * @returns Markdown documentation\n */\nexport function generateMCPDocumentation(\n  serverName: string,\n  serverPath: string,\n): string {\n  return `# MCP Server Setup\n\nThis project includes an auto-generated MCP (Model Context Protocol) server that exposes SMRT objects as tools for AI integration.\n\n## Quick Start\n\n### 1. Build the MCP Server\n\n\\`\\`\\`bash\nnpm run build\n\\`\\`\\`\n\nThis generates the MCP server at: \\`${serverPath}\\`\n\n### 2. Configure Claude Desktop\n\nAdd the following to your Claude Desktop configuration file:\n\n**macOS**: \\`~/.config/Claude/claude_desktop_config.json\\`\n**Windows**: \\`%APPDATA%\\\\Claude\\\\claude_desktop_config.json\\`\n\n\\`\\`\\`json\n{\n  \"mcpServers\": {\n    \"${serverName}\": {\n      \"command\": \"node\",\n      \"args\": [\"/absolute/path/to/${serverPath}\"]\n    }\n  }\n}\n\\`\\`\\`\n\nReplace \\`/absolute/path/to/\\` with the actual absolute path to your project directory.\n\n### 3. Restart Claude Desktop\n\nClose and reopen Claude Desktop to load the new MCP server.\n\n### 4. Test the Integration\n\nIn Claude Code, you can now use the auto-generated tools. For example:\n\n- \\`list_products\\` - List all products\n- \\`get_product\\` - Get a specific product by ID\n- \\`create_product\\` - Create a new product\n- And more...\n\n## Environment Variables\n\nThe MCP server supports optional environment variables:\n\n- \\`DATABASE_URL\\` - Database connection string\n\n**AI Provider Configuration (in priority order):**\n1. **Generic configuration** (supports any provider):\n   - \\`SMRT_AI_PROVIDER\\` - Provider name (e.g., 'openai', 'anthropic', 'claude-cli', 'gemini')\n   - \\`SMRT_AI_API_KEY\\` - API key for the provider\n   - \\`SMRT_AI_MODEL\\` - Model to use (optional)\n\n2. **Provider-specific fallbacks**:\n   - \\`OPENAI_API_KEY\\` - OpenAI API key (auto-detects provider as 'openai')\n   - \\`ANTHROPIC_API_KEY\\` - Anthropic API key (auto-detects provider as 'anthropic')\n   - \\`CLAUDE_API_KEY\\` + \\`CLAUDE_MODEL\\` - Claude CLI provider (defaults to 'sonnet')\n\n**Examples:**\n\\`\\`\\`bash\n# Using generic configuration (recommended)\nexport SMRT_AI_PROVIDER=claude-cli\nexport SMRT_AI_MODEL=sonnet\n\n# Using provider-specific configuration\nexport CLAUDE_API_KEY=your-key\nexport CLAUDE_MODEL=sonnet\n\n# Using OpenAI\nexport OPENAI_API_KEY=your-openai-key\n\\`\\`\\`\n\n## Troubleshooting\n\n### Server Not Appearing in Claude\n\n1. Check that the path in \\`claude_desktop_config.json\\` is absolute\n2. Verify the server file exists at the specified path\n3. Check Claude Desktop logs for errors\n\n### Tools Not Working\n\n1. Ensure your database is accessible (if using one)\n2. Check that SMRT objects are properly decorated with \\`@smrt()\\`\n3. Look for errors in the MCP server output\n\n### Debug Mode\n\nTo enable debug logging, set the \\`DEBUG\\` constant to \\`true\\` in the generated server file.\n\n## Generated Tools\n\nThe following tools are automatically generated from your SMRT objects:\n\n- **CRUD Operations**: \\`list_\\`, \\`get_\\`, \\`create_\\`, \\`update_\\`, \\`delete_\\` for each object type\n- **Custom Actions**: Any custom methods included in the \\`@smrt()\\` decorator configuration\n\nSee the SMRT object definitions for the complete list of available tools and their parameters.\n`;\n}\n"],"mappings":";;;;AAiBA,SAAS,WAAW,KAAqB;CACvC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,MAAM,CAAC;AAClD;;;;;;;AA4CA,SAAgB,yBAAyB,UAA0B,CAAC,GAAW;CAC7E,MAAM,EACJ,OAAO,mBACP,UAAU,SACV,cAAc,+CACd,QAAQ,OACR,QAAQ,CAAC,GACT,sBAAsB,CAAC,MACrB;CAGJ,MAAM,YAAY,MAAM,SAAS,IAAI,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI;CAKtE,MAAM,kBAAkB,MAAM,KAC5B,IAAI,IAAI,oBAAoB,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC,CACzD;CACA,MAAM,kBAAkB,gBAAgB,SAAS;CAGjD,MAAM,uBAAuB,WAAmB;EAC9C,OAAO,MACJ,KAAK,SAAS;GACb,MAAM,CAAC,YAAY,UAAU,KAAK,KAAK,MAAM,GAAG;GAEhD,QAAQ,QAAR;IACE,KAAK,QACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;IAEC,KAAK,OACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,KAAK,UACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,iEAAiE,WAAW,UAAU,EAAE;EAC/F,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,KAAK,UACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,iDAAiD,WAAW,UAAU,EAAE;EAC/E,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,KAAK,UACH,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;;EAEP,OAAO;EACP,OAAO;IAEC,SAEE,OAAO,GAAG,OAAO,QAAQ,KAAK,KAAK;EAC7C,OAAO;;EAEP,OAAO;EACP,OAAO,wDAAwD,OAAO;EACtE,OAAO;;EAEP,OAAO,2DAA2D,WAAW,UAAU,EAAE;EACzF,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;;EAEP,OAAO,uBAAuB,OAAO;EACrC,OAAO,8BAA8B,OAAO;EAC5C,OAAO;;EAEP,OAAO;EACP,OAAO,iCAAiC,OAAO;;EAE/C,OAAO;EACP,OAAO;GACD;EACF,CAAC,CAAC,CACD,KAAK,MAAM;CAChB;CAEA,MAAM,cAAc,oBAAoB,YAAY;CAEpD,OAAO;;;;;;;;;;;;;;;;;;;;;;;;EAwBP,kBAAkB,8FAA8F,GAAG;;sBAE/F,KAAK,UAAU,IAAI,EAAE;yBAClB,KAAK,UAAU,OAAO,EAAE;6BACpB,KAAK,UAAU,WAAW,EAAE;gBACzC,MAAM;;;gBAGN,UAAU;EAExB,kBACI;;;;;gCAK0B,KAAK,UAAU,eAAe,EAAE;;;IAI1D,GACL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0EC,kBACI;;;;;;;IAQA,GACL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+CC,YAAY;;;;;;EAOZ,kBACI;;;;;;;;;sCAUA;6CAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DD;;;;;;;AAQA,SAAgB,kBACd,aAAqB,sBACb;CACR,OAAO,QAAQ;AACjB;;;;;;;;AASA,SAAgB,qBACd,YACA,YACQ;CACR,OAAO,EACL,YAAY,GACT,aAAa;EACZ,SAAS;EACT,MAAM,CAAC,UAAU;CACnB,EACF,EACF;AACF;;;;;;;;AASA,SAAgB,yBACd,YACA,YACQ;CACR,OAAO;;;;;;;;;;;;sCAY6B,WAAW;;;;;;;;;;;;OAY1C,WAAW;;oCAEkB,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+E/C"}

package/dist/generators/mcp.d.ts

@@ -30,6 +30,8 @@ export interface MCPContext {
         id: string;
         roles?: string[];
     };
+    /** Resolved permission slugs held by the caller. */
+    permissions?: Iterable<string>;
     /**
      * Tenant the calling principal is scoped to (#1554). When set, tenant-scoped
      * tools run inside this tenant's context. Hosts that authenticate a principal
@@ -114,6 +116,7 @@ export declare class MCPGenerator {
      * primitives pass through unchanged; a cycle guard prevents infinite loops.
      */
     private toPublicData;
+    private getPublicJsonOptions;
     /**
      * Mass-assignment guard (#1540): strip framework/server-managed and
      * `@field({ readonly: true })` fields from a create/update body, and — when an

package/dist/generators/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/generators/mcp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH;;;;GAIG;AACH,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C;;;GAGG;AACH,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AASxC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,QAAQ,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,WAAW,CAAiD;gBAExD,MAAM,GAAE,SAAc,EAAE,OAAO,GAAE,UAAe;IAc5D;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IA4CzC;;OAEG;YACW,mBAAmB;IAmQjC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAoC5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA8CxB;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IA8E/D;;OAEG;YACW,aAAa;IAuC3B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAyBpB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAiD3B;;OAEG;IACH;;;;;OAKG;IACH,OAAO,CAAC,eAAe;YAmBT,aAAa;IAyB3B;;;;;;;;;;;;;OAaG;YACW,uBAAuB;IAqCrC;;;OAGG;YACW,SAAS;IAiIvB;;OAEG;YACW,mBAAmB;IAiEjC;;OAEG;IACH,aAAa;;;;;IAQb;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,cAAc,CAClB,OAAO,GAAE;QACP,wDAAwD;QACxD,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,oCAAoC;QACpC,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,qBAAqB;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QAEvB,2BAA2B;QAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;QAEhB,oDAAoD;QACpD,wBAAwB,CAAC,EAAE,OAAO,CAAC;QAEnC,oCAAoC;QACpC,cAAc,CAAC,EAAE,OAAO,CAAC;QAEzB,0EAA0E;QAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;KACd,GACL,OAAO,CAAC,IAAI,CAAC;IA0EhB;;;;;;;;;;OAUG;YACW,qBAAqB;IA6CnC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;YACW,iBAAiB;IAgB/B;;OAEG;YACW,uBAAuB;IA8IrC;;OAEG;YACW,oBAAoB;IAoJlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;CA4G7B"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/generators/mcp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH;;;;GAIG;AACH,KAAK,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7C;;;GAGG;AACH,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AASxC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,oDAAoD;IACpD,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC1C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,QAAQ,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,WAAW,CAAiD;gBAExD,MAAM,GAAE,SAAc,EAAE,OAAO,GAAE,UAAe;IAc5D;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,GAAG,SAAS,CAE7B;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IA4CzC;;OAEG;YACW,mBAAmB;IAmQjC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAoC5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA8CxB;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IA8E/D;;OAEG;YACW,aAAa;IAuC3B;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IA4BpB,OAAO,CAAC,oBAAoB;IAI5B;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAiD3B;;OAEG;IACH;;;;;OAKG;IACH,OAAO,CAAC,eAAe;YAmBT,aAAa;IAyB3B;;;;;;;;;;;;;OAaG;YACW,uBAAuB;IAqCrC;;;OAGG;YACW,SAAS;IAiIvB;;OAEG;YACW,mBAAmB;IAiEjC;;OAEG;IACH,aAAa;;;;;IAQb;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,cAAc,CAClB,OAAO,GAAE;QACP,wDAAwD;QACxD,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,oCAAoC;QACpC,UAAU,CAAC,EAAE,MAAM,CAAC;QAEpB,qBAAqB;QACrB,aAAa,CAAC,EAAE,MAAM,CAAC;QAEvB,2BAA2B;QAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;QAEhB,oDAAoD;QACpD,wBAAwB,CAAC,EAAE,OAAO,CAAC;QAEnC,oCAAoC;QACpC,cAAc,CAAC,EAAE,OAAO,CAAC;QAEzB,0EAA0E;QAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;KACd,GACL,OAAO,CAAC,IAAI,CAAC;IA0EhB;;;;;;;;;;OAUG;YACW,qBAAqB;IA6CnC;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;YACW,iBAAiB;IAgB/B;;OAEG;YACW,uBAAuB;IA8IrC;;OAEG;YACW,oBAAoB;IA0JlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;CA4G7B"}

package/dist/generators/mcp.js

@@ -353,23 +353,26 @@ var MCPGenerator = class {
 	* would otherwise call its `toJSON()`. Non-plain instances (Date, etc.) and
 	* primitives pass through unchanged; a cycle guard prevents infinite loops.
 	*/
-	toPublicData(value, seen = /* @__PURE__ */ new WeakSet()) {
+	toPublicData(value, seen = /* @__PURE__ */ new WeakSet(), options = this.getPublicJsonOptions()) {
 		if (value === null || typeof value !== "object") return value;
 		const publicSource = value;
-		if (typeof publicSource.toPublicJSON === "function") return publicSource.toPublicJSON();
+		if (typeof publicSource.toPublicJSON === "function") return publicSource.toPublicJSON(options);
 		if (Array.isArray(value)) {
 			if (seen.has(value)) return value;
 			seen.add(value);
-			return value.map((entry) => this.toPublicData(entry, seen));
+			return value.map((entry) => this.toPublicData(entry, seen, options));
 		}
 		const proto = Object.getPrototypeOf(value);
 		if (proto !== Object.prototype && proto !== null) return value;
 		if (seen.has(value)) return value;
 		seen.add(value);
 		const out = {};
-		for (const [key, entry] of Object.entries(value)) out[key] = this.toPublicData(entry, seen);
+		for (const [key, entry] of Object.entries(value)) out[key] = this.toPublicData(entry, seen, options);
 		return out;
 	}
+	getPublicJsonOptions() {
+		return { permissions: this.context.permissions };
+	}
 	/**
 	* Mass-assignment guard (#1540): strip framework/server-managed and
 	* `@field({ readonly: true })` fields from a create/update body, and — when an
@@ -718,7 +721,7 @@ ${indent}    ai: aiConfig
 ${indent}  });
 
 ${indent}  const items = await collection.list({ where, limit, offset });
-${indent}  const itemsPublic = items.map((item) => item.toPublicJSON());
+${indent}  const itemsPublic = items.map((item) => item.toPublicJSON(PUBLIC_JSON_OPTIONS));
 ${indent}  return { content: [{ type: 'text', text: JSON.stringify(itemsPublic) }] };
 ${indent}}`;
 				case "get": return `${indent}case '${tool.name}': {
@@ -738,7 +741,7 @@ ${indent}  if (!item) {
 ${indent}    throw new Error('Object not found');
 ${indent}  }
 
-${indent}  return { content: [{ type: 'text', text: JSON.stringify(item.toPublicJSON()) }] };
+${indent}  return { content: [{ type: 'text', text: JSON.stringify(item.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };
 ${indent}}`;
 				case "create": return `${indent}case '${tool.name}': {
 ${indent}  const collection = await ObjectRegistry.getCollection('${capitalize(objectName)}', {
@@ -749,7 +752,7 @@ ${indent}  });
 ${indent}  const newItem = await collection.create(applyWritablePolicy('${capitalize(objectName)}', args));
 ${indent}  await newItem.save();
 
-${indent}  return { content: [{ type: 'text', text: JSON.stringify(newItem.toPublicJSON()) }] };
+${indent}  return { content: [{ type: 'text', text: JSON.stringify(newItem.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };
 ${indent}}`;
 				case "update": return `${indent}case '${tool.name}': {
 ${indent}  const { id, ...updateData } = args;
@@ -770,7 +773,7 @@ ${indent}  }
 ${indent}  Object.assign(existing, applyWritablePolicy('${capitalize(objectName)}', updateData));
 ${indent}  await existing.save();
 
-${indent}  return { content: [{ type: 'text', text: JSON.stringify(existing.toPublicJSON()) }] };
+${indent}  return { content: [{ type: 'text', text: JSON.stringify(existing.toPublicJSON(PUBLIC_JSON_OPTIONS)) }] };
 ${indent}}`;
 				case "delete": return `${indent}case '${tool.name}': {
 ${indent}  if (!args.id) {
@@ -851,6 +854,12 @@ const TENANT_SCOPED = new Set(${JSON.stringify(tenantScopedSet)});
 const MCP_TENANT_ID = process.env.SMRT_MCP_TENANT_ID || undefined;
 const MCP_ALLOW_CROSS_TENANT = process.env.SMRT_MCP_ALLOW_CROSS_TENANT === 'true';
 ` : ""}
+const PUBLIC_JSON_OPTIONS = {
+  permissions: (process.env.SMRT_MCP_PERMISSIONS || '')
+    .split(',')
+    .map((permission) => permission.trim())
+    .filter(Boolean),
+};
 
 /**
  * Mass-assignment guard (#1540): strip framework/server-managed and
@@ -892,7 +901,7 @@ function applyWritablePolicy(objectName: string, data: any): Record<string, any>
  */
 function toPublicResult(value: any, seen: WeakSet<object> = new WeakSet()): any {
   if (value === null || typeof value !== 'object') return value;
-  if (typeof value.toPublicJSON === 'function') return value.toPublicJSON();
+  if (typeof value.toPublicJSON === 'function') return value.toPublicJSON(PUBLIC_JSON_OPTIONS);
   if (Array.isArray(value)) {
     if (seen.has(value)) return value;
     seen.add(value);