@happyvertical/smrt-dev-mcp 0.47.1 → 0.47.2

package/AGENTS.md

@@ -29,6 +29,9 @@ deterministic SMRT ecosystem knowledge, and portable agent workflows.
 | `dispatch-health` | Live dispatch health from the `_smrt_dispatch`/`_smrt_dispatch_subscriptions` system tables — stuck/pending by type/status, subscription topology; payloads/metadata never read (runtime provenance; read-only, #1824) |
 | `recent-changes` | Tail of the `_smrt_changes` append-only change feed with cursor semantics, filterable by table and tenant (runtime provenance; read-only, #1824) |
 | `registry-drift` | Registry drift report — `_smrt_registry` is retired and reported as such, never queried or fabricated (read-only, #1824) |
+| `runtime-registry` | Sanitized snapshot of the booted `ObjectRegistry` from project + installed manifests; no project code executed (booted provenance; read-only, #1831) |
+| `runtime-object` | One booted object's sanitized definition plus generated DDL (booted provenance; read-only, #1831) |
+| `runtime-schema-diff` | Booted registry schemas vs live dev DB via the `db:diff` comparer; introspection only, no drops/relaxations (runtime provenance; read-only, #1831) |
 
 `pnpm knowledge:check --strict --format markdown` compares this catalog and the
 README parameter tables to the exported `TOOLS` definitions. Add or change a

package/README.md

@@ -535,6 +535,44 @@ static manifest tools. Read-only.
 | `dbUrl` | `string` | No | Optional dev database URL override (read-only diagnostics); prefer `SMRT_DEV_DB_URL` or `cli.database` config |
 | `dbType` | `'sqlite' \| 'postgres' \| 'duckdb'` | No | Optional engine hint for `dbUrl` or the environment connection; inferred from the URL scheme when omitted |
 
+### `runtime-registry`
+
+Sanitized snapshot of the booted `ObjectRegistry`: objects, packages, tables,
+fields, methods, tenancy, and inheritance, projected through a plain-JSON DTO.
+The boot registers the project's `.smrt/manifest.json` (or `dist/manifest.json`)
+and every installed s-m-r-t package manifest; no project code is imported. Booted
+provenance (`booted (registry)`); read-only.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `projectPath` | `string` | No | Project root to boot manifests from (default: the server working directory; ignored by the HTTP host, which boots once) |
+| `objects` | `string[]` | No | Restrict field/method detail to these simple or qualified object names |
+| `detail` | `boolean` | No | Include field and method detail for every object (default: only when `objects` is given) |
+
+### `runtime-object`
+
+One booted object: sanitized fields, methods, tenancy, inheritance, and the
+DDL the registry would generate for it. Booted provenance; read-only.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `projectPath` | `string` | No | Project root to boot manifests from (default: the server working directory; ignored by the HTTP host, which boots once) |
+| `name` | `string` | Yes | Simple or qualified object name |
+| `engine` | `'sqlite' \| 'postgres' \| 'duckdb'` | No | Engine for the DDL preview (default: registry default) |
+
+### `runtime-schema-diff`
+
+Booted registry schemas versus the live dev database, using the same comparer
+as `db:diff`/`db:migrate`. Introspection only: drops and relaxations are never
+proposed and nothing is executed. Runtime provenance; read-only. Without a
+configured connection it returns a successful static-only result.
+
+| Parameter | Type | Required | Description |
+|-----------|------|----------|-------------|
+| `projectPath` | `string` | No | Project root to boot manifests from (default: the server working directory; ignored by the HTTP host, which boots once) |
+| `dbUrl` | `string` | No | Optional dev database URL override (read-only diagnostics); prefer `SMRT_DEV_DB_URL` or `cli.database` config |
+| `dbType` | `'sqlite' \| 'postgres' \| 'duckdb'` | No | Optional engine hint for `dbUrl` or the environment connection; inferred from the URL scheme when omitted |
+
 ## Runtime Diagnostics (Optional Live DB)
 
 The six runtime-diagnostics tools above (`migration-status`, `job-health`,
@@ -569,6 +607,31 @@ not `smrt-app-mcp` and never writes.
 (passwords and token query params masked); driver errors pass through a
 redacting normalizer before they can appear in a diagnostic.
 
+## Runtime Dev-Plane Host (HTTP, Level 2)
+
+`smrt-dev-mcp --http [--port N] [--project DIR]` boots the confined runtime
+once and serves a **positive, read-only** catalog over the stateless
+Streamable HTTP transport (no SSE, no `Mcp-Session-Id`, no sticky routing):
+`runtime-registry`, `runtime-object`, `runtime-schema-diff`, and the six
+live-DB diagnostics above. The static stdio catalog is not mounted, and
+generated CRUD, custom actions, `do()`, and tool-backed `is()` are never
+exposed.
+
+- Binds loopback only; the SDK's localhost Host and Origin validation runs on
+  every request.
+- Every request needs `Authorization: Bearer <token>`. Set
+  `SMRT_DEV_MCP_TOKEN`, or let the process mint one and print it once to
+  stderr. A supplied token is never echoed.
+- No authenticated principal exists on this plane, so scope is fail-closed
+  global-only exactly as for the stdio diagnostics.
+- Per-request `projectPath` arguments are ignored: the booted project is fixed
+  at start. Restart the process to observe a rebuilt manifest.
+
+```bash
+SMRT_DEV_MCP_TOKEN=dev-secret smrt-dev-mcp --http --port 3939 --project .
+# → [smrt-dev-mcp] runtime dev-plane listening at http://127.0.0.1:3939/mcp
+```
+
 ## MCP Resources And Prompts
 
 Resources:

package/dist/http.d.ts

@@ -0,0 +1,95 @@
+import { Server } from '@modelcontextprotocol/server';
+import { RuntimeBoot } from './tools/runtime/boot.js';
+/**
+ * The complete Level 2 catalog. A tool is exposed over HTTP only if it is
+ * named here; the static stdio catalog is deliberately not mounted.
+ */
+export declare const RUNTIME_HTTP_TOOL_NAMES: readonly ["runtime-registry", "runtime-object", "runtime-schema-diff", "migration-status", "job-health", "schedule-health", "dispatch-health", "recent-changes", "registry-drift"];
+export type RuntimeHttpToolName = (typeof RUNTIME_HTTP_TOOL_NAMES)[number];
+/** Catalog definitions for the HTTP plane, in catalog order. */
+export declare function runtimeHttpTools(): {
+    inputSchema: {
+        [x: string]: unknown;
+        type: "object";
+        properties?: {
+            [x: string]: string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | (string | number | boolean | /*elided*/ any | /*elided*/ any | null)[] | null;
+            } | (string | number | boolean | {
+                [x: string]: string | number | boolean | /*elided*/ any | /*elided*/ any | null;
+            } | /*elided*/ any | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null)[] | null;
+        } | undefined;
+        required?: string[] | undefined;
+    };
+    name: string;
+    description?: string | undefined;
+    outputSchema?: {
+        [x: string]: unknown;
+        $schema?: string | undefined;
+    } | undefined;
+    annotations?: {
+        title?: string | undefined;
+        readOnlyHint?: boolean | undefined;
+        destructiveHint?: boolean | undefined;
+        idempotentHint?: boolean | undefined;
+        openWorldHint?: boolean | undefined;
+    } | undefined;
+    execution?: {
+        taskSupport?: "optional" | "required" | "forbidden" | undefined;
+    } | undefined;
+    _meta?: {
+        [x: string]: unknown;
+    } | undefined;
+    icons?: {
+        src: string;
+        mimeType?: string | undefined;
+        sizes?: string[] | undefined;
+        theme?: "light" | "dark" | undefined;
+    }[] | undefined;
+    title?: string | undefined;
+}[];
+/**
+ * Build a fresh protocol server per request (stateless transport contract).
+ * `projectRoot` is fixed at host start; per-request `projectPath` arguments
+ * are ignored so a client cannot re-point the booted process.
+ */
+export declare function createRuntimeProtocolServer(projectRoot: string): Server;
+export interface RuntimeHttpHostOptions {
+    projectRoot?: string;
+    /** Loopback interface only; anything else is refused at startup. */
+    host?: '127.0.0.1' | 'localhost' | '::1';
+    /** `0` (default) picks a free port. */
+    port?: number;
+    /** Bearer token; defaults to `SMRT_DEV_MCP_TOKEN` or a per-process random token. */
+    token?: string;
+    /** Path the MCP endpoint is mounted on (default `/mcp`). */
+    path?: string;
+}
+export interface RuntimeHttpHost {
+    url: string;
+    token: string;
+    boot: RuntimeBoot;
+    close(): Promise<void>;
+}
+/** Start the Level 2 host. Boots the confined runtime before listening. */
+export declare function startRuntimeHttpHost(options?: RuntimeHttpHostOptions): Promise<RuntimeHttpHost>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH,OAAO,EAAoB,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAGxE,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAexE;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oLAU1B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAiB3E,gEAAgE;AAChE,wBAAgB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA0BvE;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,IAAI,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,KAAK,CAAC;IACzC,uCAAuC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAsBD,2EAA2E;AAC3E,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CAiE1B"}

package/dist/index.d.ts

@@ -1,5 +1,15 @@
 import { Server } from '@modelcontextprotocol/server';
+export { SERVER_VERSION } from './server-info.js';
 export { TOOLS } from './tool-catalog.js';
-export declare const SERVER_VERSION: string;
 export declare function createServer(): Server;
+/**
+ * `smrt-dev-mcp --http [--port N] [--project DIR]` starts the Level 2 runtime
+ * dev-plane host (#1831) instead of the stdio server. Loopback-only, bearer
+ * protected, positive read-only catalog; see `http.ts`.
+ */
+export declare function parseHttpCliArgs(argv: readonly string[]): {
+    http: boolean;
+    port?: number;
+    projectRoot?: string;
+};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACP,MAAM,8BAA8B,CAAC;AA+BtC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAG1C,eAAO,MAAM,cAAc,QAAuB,CAAC;AA6BnD,wBAAgB,YAAY,IAAI,MAAM,CA4qBrC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAGL,MAAM,EACP,MAAM,8BAA8B,CAAC;AAqCtC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AA8B1C,wBAAgB,YAAY,IAAI,MAAM,CA0sBrC;AAyND;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IACzD,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAsBA"}