@happyvertical/smrt-svelte 0.51.37 → 0.51.39

package/AGENTS.md

@@ -38,6 +38,12 @@ principal tools, opaque action preview/apply, and ContentList/report adapters.
 When changing a data-surface wire field or refusal reason, update the
 versioned normalizers and the conformance fixture together.
 
+The explicit `./mcp-apps` subpath owns portable MCP Apps mount/dispose bindings.
+It reuses `compileViewIntentToolSpec` for local registry interactions, never
+advertises browser closures as remote tools, and does not use
+`document.modelContext`. See [bridge contract](../mcp-apps/README.md). Its browser
+gate is `e2e/mcp-apps.spec.ts`, including trusted human staged-review enforcement.
+
 ## The UI split — primitive-adoption contract (#1589)
 
 SMRT's shared UI primitives are split by concern: **`smrt-ui` owns the

package/README.md

@@ -438,3 +438,12 @@ all other currencies render their ISO code for deterministic SSR hydration.
 
 - `@happyvertical/smrt-types` -- shared type definitions
 - Peer: `svelte` >=5.18.2, `@happyvertical/smrt-jobs`, `@happyvertical/smrt-profiles`, `@happyvertical/smrt-users` (all optional)
+
+## Portable MCP Apps
+
+The opt-in `@happyvertical/smrt-svelte/mcp-apps` entry exports `useMcpApp` for
+mount-owned host negotiation/disposal and `useMcpAppIntent` for component-local
+public registry interactions. It does not require `document.modelContext` or
+export mounted closures to remote MCP. Agent proposals retain trusted human
+staged review. See the [bridge contract](../mcp-apps/README.md) for origin
+configuration, capabilities, fallback and synthetic-browser evidence limits.

package/dist/components/workspace/README.md

@@ -15,6 +15,13 @@ presentation, focus tool registration, activity registry/watch components, and
 optional SMRT-fed content seams. It does not depend on jobs, users, tenancy, or
 SvelteKit route APIs; apps pass data, endpoints, and permission-filtered nav in.
 
+The explicit `@happyvertical/smrt-svelte/workspace/legacy` ToolsDock entry keeps
+its polite status live region visually clipped and anchored inside its
+positioning container. Mounting the dock at a flex container's trailing edge
+does not let that hidden region add horizontal scrolling. The package browser
+fixture checks its bounds and preserves announcement updates and Escape focus
+restoration at mobile and desktop widths.
+
 ## Main Exports
 
 - `AdminShell`

package/dist/components/workspace/tools-dock/ToolsDock.svelte

@@ -508,6 +508,8 @@
 
   .tools-dock__sr-only {
     position: absolute;
+    top: 0;
+    left: 0;
     width: 1px;
     height: 1px;
     padding: 0;

package/dist/mcp-apps/index.d.ts

@@ -0,0 +1,3 @@
+export type { McpAppState } from './mcp-apps.svelte.js';
+export { useMcpApp, useMcpAppIntent } from './mcp-apps.svelte.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp-apps/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/mcp-apps/index.js

@@ -0,0 +1 @@
+export { useMcpApp, useMcpAppIntent } from './mcp-apps.svelte.js';

package/dist/mcp-apps/mcp-apps.svelte.d.ts

@@ -0,0 +1,18 @@
+import type { McpAppBridgeOptions, McpAppSnapshot } from '@happyvertical/smrt-mcp-apps';
+import { McpAppBridge } from '@happyvertical/smrt-mcp-apps';
+import type { ViewIntent, ViewIntentBinding } from '@happyvertical/smrt-web/intents';
+export interface McpAppState {
+    readonly bridge: McpAppBridge | undefined;
+    readonly snapshot: McpAppSnapshot | undefined;
+    readonly error: string | undefined;
+}
+/** Mount-owned bridge. Options factory runs only in the browser; SSR stays inert. */
+export declare function useMcpApp(options: () => McpAppBridgeOptions): McpAppState;
+/**
+ * Component-local intent; never advertised to the remote host. The public compiler
+ * dispatches to ControlInteractionRegistry/DataSurfaceRegistry. Control commands
+ * retain source=agent, so staged edits require the existing trusted human review.
+ * Explicit bindings also work without Provider or document.modelContext.
+ */
+export declare function useMcpAppIntent(intent: ViewIntent, binding: ViewIntentBinding): (args?: Record<string, unknown>) => Promise<string>;
+//# sourceMappingURL=mcp-apps.svelte.d.ts.map

package/dist/mcp-apps/mcp-apps.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-apps.svelte.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/mcp-apps.svelte.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EACV,UAAU,EACV,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AAIzC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AACD,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,mBAAmB,GAAG,WAAW,CAiCzE;AACD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,iBAAiB,GACzB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAerD"}

package/dist/mcp-apps/mcp-apps.svelte.js

@@ -0,0 +1,63 @@
+import { McpAppBridge } from '@happyvertical/smrt-mcp-apps';
+import { compileViewIntentToolSpec } from '@happyvertical/smrt-web/intents';
+import { onMount } from 'svelte';
+/** Mount-owned bridge. Options factory runs only in the browser; SSR stays inert. */
+export function useMcpApp(options) {
+    let bridge = $state();
+    let snapshot = $state();
+    let error = $state();
+    onMount(() => {
+        let active = true;
+        const current = new McpAppBridge(options());
+        bridge = current;
+        const unsubscribe = current.subscribe((next) => {
+            if (active)
+                snapshot = next;
+        });
+        void current.connect().catch((failure) => {
+            if (active)
+                error = failure instanceof Error ? failure.message : 'Host unavailable';
+        });
+        return () => {
+            active = false;
+            unsubscribe();
+            current.dispose();
+            bridge = undefined;
+        };
+    });
+    return {
+        get bridge() {
+            return bridge;
+        },
+        get snapshot() {
+            return snapshot;
+        },
+        get error() {
+            return error;
+        },
+    };
+}
+/**
+ * Component-local intent; never advertised to the remote host. The public compiler
+ * dispatches to ControlInteractionRegistry/DataSurfaceRegistry. Control commands
+ * retain source=agent, so staged edits require the existing trusted human review.
+ * Explicit bindings also work without Provider or document.modelContext.
+ */
+export function useMcpAppIntent(intent, binding) {
+    const spec = compileViewIntentToolSpec(intent, binding);
+    let active = false;
+    onMount(() => {
+        active = true;
+        return () => {
+            active = false;
+        };
+    });
+    return async (args = {}) => {
+        if (!active)
+            throw new Error('MCP App intent is not mounted');
+        const result = await spec.execute(args);
+        if (!active)
+            throw new Error('MCP App intent was unmounted');
+        return result;
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-svelte",
-  "version": "0.51.37",
+  "version": "0.51.39",
   "smrtJsdoc": "strict",
   "description": "Svelte 5 components for SMRT user management - auth, users, tenants, roles, permissions, groups",
   "type": "module",
@@ -89,6 +89,12 @@
       "svelte": "./dist/data-surface.js",
       "import": "./dist/data-surface.js",
       "default": "./dist/data-surface.js"
+    },
+    "./mcp-apps": {
+      "types": "./dist/mcp-apps/index.d.ts",
+      "svelte": "./dist/mcp-apps/index.js",
+      "import": "./dist/mcp-apps/index.js",
+      "default": "./dist/mcp-apps/index.js"
     }
   },
   "files": [
@@ -121,10 +127,11 @@
   },
   "dependencies": {
     "@happyvertical/logger": "^0.96.0",
-    "@happyvertical/smrt-languages": "0.51.37",
-    "@happyvertical/smrt-types": "0.51.37",
-    "@happyvertical/smrt-ui": "0.51.37",
-    "@happyvertical/smrt-web": "0.51.37",
+    "@happyvertical/smrt-languages": "0.51.39",
+    "@happyvertical/smrt-mcp-apps": "0.51.39",
+    "@happyvertical/smrt-types": "0.51.39",
+    "@happyvertical/smrt-ui": "0.51.39",
+    "@happyvertical/smrt-web": "0.51.39",
     "@tanstack/db": "^0.6.14",
     "@tanstack/svelte-db": "^0.1.91",
     "esm-env": "^1.2.2"
@@ -159,14 +166,14 @@
     }
   },
   "devDependencies": {
-    "@happyvertical/smrt-agents": "0.51.37",
-    "@happyvertical/smrt-chat": "0.51.37",
-    "@happyvertical/smrt-content": "0.51.37",
-    "@happyvertical/smrt-core": "0.51.37",
-    "@happyvertical/smrt-reports": "0.51.37",
-    "@happyvertical/smrt-scanner": "0.51.37",
-    "@happyvertical/smrt-tenancy": "0.51.37",
-    "@happyvertical/smrt-users": "0.51.37",
+    "@happyvertical/smrt-agents": "0.51.39",
+    "@happyvertical/smrt-chat": "0.51.39",
+    "@happyvertical/smrt-content": "0.51.39",
+    "@happyvertical/smrt-core": "0.51.39",
+    "@happyvertical/smrt-reports": "0.51.39",
+    "@happyvertical/smrt-scanner": "0.51.39",
+    "@happyvertical/smrt-tenancy": "0.51.39",
+    "@happyvertical/smrt-users": "0.51.39",
     "@sveltejs/package": "^2.5.8",
     "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@testing-library/jest-dom": "^7.0.1",