@happyvertical/smrt-svelte 0.53.3 → 0.53.4

package/AGENTS.md

@@ -14,6 +14,7 @@ subpath you are editing. This file keeps what holds in every module.
 | `src/themes/` + `src/theme/` | which theme system is canonical and the full `--smrt-*` design-token vocabulary with its alias rules | [agents/themes.md](agents/themes.md) |
 | `src/test-support/` + `__tests__/` | the golden-test harness and pattern for Svelte component tests | [agents/testing.md](agents/testing.md) |
 | `src/components/settings/` (`./settings`) | `SettingsCatalog`, `paginateSettingsCatalog`, and the summary-vs-detail scalability contract | [agents/settings.md](agents/settings.md) |
+| `src/components/app/` (`./app`) | `AppShell` (Provider + ThemeProvider + theme CSS + AdminShell + nav/dock slots), `OwnerSetupForm` (props-driven first-run owner form), `ShellSettingsPage`, `RuntimeDiagnosticsWebMcp`. Browser-only; no `$app/*` or server imports | [agents/workspace.md](agents/workspace.md#app-shell-and-owner-setup-app) |
 | `src/components/workspace/` (`./workspace` + `./web`) | the AdminShell family and its principles, the legacy ToolsDock surface, the `./web` activity-feed and `updateAvailable` adapters, and server-side dock gates | [agents/workspace.md](agents/workspace.md) |
 | `src/web/remote-query.svelte.ts` | Svelte 5 binding for query-shaped remote pages: rows, page, totals, loading/refreshing/stale/error, retry, last-updated, and query-scoped live subscriptions (#2445) | — |
 | `src/web/list-data-surface.svelte.ts` (`mountListDataSurface`) | One-call registration of an existing, non-`DataTable` list (already mirroring a headless `DataTableController`) as a mounted `DataSurfaceDescriptor` — a same-behavior port of `registerContentListDataSurface`'s registration/translation logic (`@happyvertical/smrt-content/svelte`), generalized off ContentList's view-mode concept, so any custom list markup can adopt it directly instead of hand-mirroring the registry contract. Not yet unified behind a shared `@happyvertical/smrt-ui/data` implementation (#2917) — this copy is currently ahead; see its own module doc comment for the current, authoritative list of divergences #2917 must adopt rather than assume parity (#2906) | — |
@@ -44,7 +45,9 @@ versioned normalizers and the conformance fixture together.
 The explicit `./mcp-apps` subpath owns portable MCP Apps mount/dispose bindings.
 It reuses `compileViewIntentToolSpec` for local registry interactions, never
 advertises browser closures as remote tools, and does not use
-`document.modelContext`. See [bridge contract](../mcp-apps/README.md). Its browser
+`document.modelContext`. `McpAppsBridge` is the shipped view shell: portable
+display-mode request only when the host advertises it, otherwise inline status;
+no OpenAI helpers. See [bridge contract](../mcp-apps/README.md). Its browser
 gate is `e2e/mcp-apps.spec.ts`, including trusted human staged-review enforcement.
 
 ## The UI split — primitive-adoption contract (#1589)

package/README.md

@@ -505,6 +505,8 @@ importable, even if it appears in `dist/`.
 | `@happyvertical/smrt-svelte/forms` | Form inputs (TextInput, Select, MoneyInput, DateTimeInput, Toggle, etc.) |
 | `@happyvertical/smrt-svelte/settings` | Server-paged settings search, selection, and list/detail layout (`SettingsCatalog`, `paginateSettingsCatalog`) |
 | `@happyvertical/smrt-svelte/workspace` | AdminShell, ShellState, tenant nav, focus tools, settings, activities, and system/app panels |
+| `@happyvertical/smrt-svelte/app` | `AppShell` (Provider + themes + AdminShell + nav/dock slots), `OwnerSetupForm` (first-run owner setup), `ShellSettingsPage`, `RuntimeDiagnosticsWebMcp` |
+| `@happyvertical/smrt-svelte/app/runtime-diagnostics` | Svelte-free diagnostics WebMCP registration and its tool name/endpoint constants, importable from server routes |
 | `@happyvertical/smrt-svelte/workspace/legacy` | Opt-in ToolsDock compatibility surface for applications migrating to AdminShell |
 | `@happyvertical/smrt-svelte/workspace/server` | Server-side workspace helpers (Node only) |
 | `@happyvertical/smrt-svelte/workspace/live` | `systemFeed` — the AdminShell system scope (jobs/schedules/dispatch) polled from an app status endpoint; deliberately carries no `smrt-web` dependency |

package/agents/i18n.md

@@ -30,6 +30,9 @@ languages root is imported only by the Node-only `/i18n/server` subpath. See
   — a consumer's load function calls it for the request locale and passes the
   result to `<Provider>`. It seeds the languages registry from `defineMessages`
   defaults, then resolves each key through the override/tenant/locale chain.
+  `server.ts` side-effect-imports every shipped catalog (including
+  `mcp-apps/strings.ts`) so its keys resolve even when the components are
+  never imported server-side; add new catalogs there.
 - Enforcement: `scripts/check-hardcoded-strings.mjs` (`pnpm
   check:hardcoded-strings`) flags hardcoded prose in `.svelte` markup —
   report-only until a package's extraction completes, then add it to the

package/agents/workspace.md

@@ -149,3 +149,32 @@ failure; a context change or later successful refresh clears the signal, and
 success applies the new snapshot.
 Availability is never an authorization boundary—server operations must still
 enforce permissions.
+
+## App shell and owner setup (`./app`)
+
+`@happyvertical/smrt-svelte/app` (`src/components/app/`) is browser-only. It
+lives beside, not inside, `./workspace` so the AdminShell barrel stays free of
+`Provider` and its tests.
+
+- `AppShell` composes `Provider` (`webmcp`, `user`, `permissions` pass through
+  unchanged), `ThemeProvider`, the theme CSS (`themes/styles/{all,fonts}.css`
+  are imported by the component — forgetting them leaves `--smrt-*` unresolved),
+  `AdminShell`, `TenantNav` from the consumer's `nav`/`navGroups`/`currentHref`,
+  and an `AppScopePanel`. Panels start collapsed as in `AdminShell`; pass
+  `config` to change that. `dock` is a snippet rendered inside the shell: a host
+  places its assistant there in a `ShellDockTool`, so this package never
+  imports `smrt-chat`. `runtimeDiagnostics` (default false) mounts the
+  read-only `smrt.runtime.diagnostics.read` WebMCP tool. Server code that
+  lists that tool (the diagnostics route's `toolNames`) imports
+  `RUNTIME_DIAGNOSTICS_WEBMCP_TOOL_NAME` from `./app/runtime-diagnostics`,
+  which is plain TypeScript; the `./app` barrel loads Svelte components and
+  theme CSS.
+- `OwnerSetupForm` is props-driven and imports nothing server-side. Contract
+  (lane 3369 server): `default` form action; fields `token` (hidden), `name`,
+  `email`, optional `tenantName` (`askTenantName`); `load` data
+  `{ available, token }` (`available: false` renders a neutral unavailable
+  state); failures `fail(status, { code, message })`, `message` shown as given
+  and never branched on. Pass `data` and `form` straight from the route. The
+  form is a plain `method="POST"`; pass `enhance` from `$app/forms` to enhance
+  it. The token is a hidden field only and is never stored, logged or shown.
+  Single-use, loopback-only enforcement stays server-side.

package/dist/components/app/AppShell.svelte

@@ -0,0 +1,149 @@
+<script lang="ts">
+import {
+  type ColorScheme,
+  type ThemePreset,
+  ThemeProvider,
+} from '@happyvertical/smrt-ui/themes';
+import '@happyvertical/smrt-ui/themes/styles/all.css';
+import '@happyvertical/smrt-ui/themes/styles/fonts.css';
+import { useI18n } from '@happyvertical/smrt-ui/i18n';
+import type { Snippet } from 'svelte';
+import { M } from '../../i18n/strings.workspace.js';
+import Provider from '../../Provider.svelte';
+import type { User } from '../../state/app-state.js';
+import type { WebMcpProviderConfig } from '../../web/webmcp-provider.js';
+import AdminShell from '../workspace/admin-shell/AdminShell.svelte';
+import AppScopePanel from '../workspace/admin-shell/AppScopePanel.svelte';
+import TenantNav from '../workspace/admin-shell/TenantNav.svelte';
+import type {
+  ShellNavGroup,
+  ShellNavItem,
+  ShellPanelDefaults,
+} from '../workspace/admin-shell/types.js';
+import RuntimeDiagnosticsWebMcp from './RuntimeDiagnosticsWebMcp.svelte';
+
+interface Props {
+  /** Application name shown in the shell brand and app panel. */
+  title?: string;
+  /** Secondary line under the application name in the shell brand. */
+  subtitle?: string;
+  /** localStorage key for the user's shell layout preferences. */
+  storageKey?: string;
+  /** Navigation rendered in the tenant (left) panel. */
+  nav?: ShellNavItem[];
+  /** Grouped navigation sections rendered below the flat `nav` items. */
+  navGroups?: ShellNavGroup[];
+  /** Current path, used to highlight the active link (e.g. `page.url.pathname`). */
+  currentHref?: string;
+  /** Tenant label shown in the app panel. */
+  tenantLabel?: string;
+  /** Environment badge text (e.g. `local`). */
+  environment?: string;
+  /** When set, the app panel links here (e.g. a settings route). */
+  settingsHref?: string;
+  /** Options for the Provider's WebMCP integration; passed through unchanged. */
+  webmcp?: boolean | WebMcpProviderConfig;
+  /** Authenticated user forwarded to the Provider; `null` renders the shell signed out. */
+  user?: User | null;
+  /** The user's resolved permission slugs, forwarded to the Provider for permission-gated UI. */
+  permissions?: string[];
+  /** Register the read-only runtime diagnostics WebMCP tool. */
+  runtimeDiagnostics?: boolean;
+  /** Initial panel states and presentation; forwarded to AdminShell. */
+  config?: ShellPanelDefaults;
+  /** Theme preset applied by the ThemeProvider. */
+  preset?: ThemePreset;
+  /** Light, dark or system color scheme; the user's persisted choice wins. */
+  colorScheme?: ColorScheme;
+  /** Extra app-panel content (e.g. selected-tenant notes). */
+  appPanelDocs?: Snippet;
+  /**
+   * Dock slot, rendered inside the shell so a host can place an assistant in
+   * a `ShellDockTool` without this package depending on it.
+   */
+  dock?: Snippet;
+  children: Snippet;
+}
+
+let {
+  title = 'SMRT',
+  subtitle,
+  storageKey = 'smrt-app-shell',
+  nav = [],
+  navGroups = [],
+  currentHref = '',
+  tenantLabel = '',
+  environment = 'local',
+  settingsHref,
+  webmcp = false,
+  user = null,
+  permissions = [],
+  runtimeDiagnostics = false,
+  config,
+  preset = 'smrt',
+  colorScheme = 'system',
+  appPanelDocs,
+  dock,
+  children,
+}: Props = $props();
+const { t } = useI18n();
+const hasNav = $derived(nav.length > 0 || navGroups.length > 0);
+</script>
+
+<Provider {webmcp} {user} {permissions}>
+  <RuntimeDiagnosticsWebMcp enabled={runtimeDiagnostics} />
+  <ThemeProvider {preset} {colorScheme} persist={true}>
+    <AdminShell {title} {subtitle} {storageKey} {config} path={currentHref}>
+      {#snippet appPanel()}
+        <AppScopePanel
+          appName={title}
+          tenantName={tenantLabel}
+          {environment}
+          showSettings={false}
+        >
+          {#snippet docs()}
+            {@render appPanelDocs?.()}
+            {#if settingsHref}
+              <a href={settingsHref}>{t(M['ui.app_shell.settings_link'])}</a>
+            {/if}
+          {/snippet}
+        </AppScopePanel>
+      {/snippet}
+
+      {#snippet tenantPanel()}
+        {#if hasNav}
+          <TenantNav
+            items={nav}
+            groups={navGroups}
+            {currentHref}
+            aria-label={t(M['ui.app_shell.navigation'])}
+          />
+        {/if}
+      {/snippet}
+
+      {@render dock?.()}
+      {@render children()}
+    </AdminShell>
+  </ThemeProvider>
+</Provider>
+
+<style>
+  :global(*),
+  :global(*::before),
+  :global(*::after) {
+    box-sizing: border-box;
+  }
+  :global(html),
+  :global(body) {
+    min-height: 100%;
+    margin: 0;
+  }
+  :global(body) {
+    background: var(--smrt-color-background);
+    color: var(--smrt-color-on-background);
+    font-family: var(--smrt-font-family, Inter, system-ui, sans-serif);
+  }
+  a {
+    color: var(--smrt-color-primary);
+  }
+</style>

package/dist/components/app/AppShell.svelte.d.ts

@@ -0,0 +1,53 @@
+import { type ColorScheme, type ThemePreset } from '@happyvertical/smrt-ui/themes';
+import '@happyvertical/smrt-ui/themes/styles/all.css';
+import '@happyvertical/smrt-ui/themes/styles/fonts.css';
+import type { Snippet } from 'svelte';
+import type { User } from '../../state/app-state.js';
+import type { WebMcpProviderConfig } from '../../web/webmcp-provider.js';
+import type { ShellNavGroup, ShellNavItem, ShellPanelDefaults } from '../workspace/admin-shell/types.js';
+interface Props {
+    /** Application name shown in the shell brand and app panel. */
+    title?: string;
+    /** Secondary line under the application name in the shell brand. */
+    subtitle?: string;
+    /** localStorage key for the user's shell layout preferences. */
+    storageKey?: string;
+    /** Navigation rendered in the tenant (left) panel. */
+    nav?: ShellNavItem[];
+    /** Grouped navigation sections rendered below the flat `nav` items. */
+    navGroups?: ShellNavGroup[];
+    /** Current path, used to highlight the active link (e.g. `page.url.pathname`). */
+    currentHref?: string;
+    /** Tenant label shown in the app panel. */
+    tenantLabel?: string;
+    /** Environment badge text (e.g. `local`). */
+    environment?: string;
+    /** When set, the app panel links here (e.g. a settings route). */
+    settingsHref?: string;
+    /** Options for the Provider's WebMCP integration; passed through unchanged. */
+    webmcp?: boolean | WebMcpProviderConfig;
+    /** Authenticated user forwarded to the Provider; `null` renders the shell signed out. */
+    user?: User | null;
+    /** The user's resolved permission slugs, forwarded to the Provider for permission-gated UI. */
+    permissions?: string[];
+    /** Register the read-only runtime diagnostics WebMCP tool. */
+    runtimeDiagnostics?: boolean;
+    /** Initial panel states and presentation; forwarded to AdminShell. */
+    config?: ShellPanelDefaults;
+    /** Theme preset applied by the ThemeProvider. */
+    preset?: ThemePreset;
+    /** Light, dark or system color scheme; the user's persisted choice wins. */
+    colorScheme?: ColorScheme;
+    /** Extra app-panel content (e.g. selected-tenant notes). */
+    appPanelDocs?: Snippet;
+    /**
+     * Dock slot, rendered inside the shell so a host can place an assistant in
+     * a `ShellDockTool` without this package depending on it.
+     */
+    dock?: Snippet;
+    children: Snippet;
+}
+declare const AppShell: import("svelte").Component<Props, {}, "">;
+type AppShell = ReturnType<typeof AppShell>;
+export default AppShell;
+//# sourceMappingURL=AppShell.svelte.d.ts.map

package/dist/components/app/AppShell.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppShell.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/app/AppShell.svelte.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,WAAW,EAEjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,8CAA8C,CAAC;AACtD,OAAO,gDAAgD,CAAC;AAExD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIzE,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,kBAAkB,EACnB,MAAM,mCAAmC,CAAC;AAI3C,UAAU,KAAK;IACb,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC;IACrB,uEAAuE;IACvE,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC;IAC5B,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC;IACxC,yFAAyF;IACzF,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACnB,+FAA+F;IAC/F,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sEAAsE;IACtE,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,iDAAiD;IACjD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AA0ED,QAAA,MAAM,QAAQ,2CAAwC,CAAC;AACvD,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;AAC5C,eAAe,QAAQ,CAAC"}

package/dist/components/app/OwnerSetupForm.svelte

@@ -0,0 +1,89 @@
+<script lang="ts">
+import { Input } from '@happyvertical/smrt-ui/forms';
+import { useI18n } from '@happyvertical/smrt-ui/i18n';
+import { Button } from '@happyvertical/smrt-ui/ui';
+import { M } from '../../i18n/strings.workspace.js';
+import type {
+  OwnerSetupData,
+  OwnerSetupFormResult,
+} from './owner-setup-types.js';
+
+interface Props {
+  /** The route's `load` data. The token is rendered only as a hidden field. */
+  data: OwnerSetupData;
+  /** The route's `form` prop (action failure data). */
+  form?: OwnerSetupFormResult | null;
+  /** Also ask for an optional workspace name (field `tenantName`). */
+  askTenantName?: boolean;
+  /** Form action URL; omit to post to the current route's default action. */
+  action?: string;
+  /**
+   * SvelteKit's `enhance` from `$app/forms`, for progressive enhancement.
+   * Optional: without it the form is a plain POST that works without JS.
+   */
+  enhance?: (form: HTMLFormElement) => { destroy?: () => void } | void;
+}
+
+let {
+  data,
+  form = null,
+  askTenantName = false,
+  action,
+  enhance,
+}: Props = $props();
+const { t } = useI18n();
+
+function enhanceForm(form: HTMLFormElement) {
+  const handle = enhance?.(form);
+  return () => handle?.destroy?.();
+}
+</script>
+
+<main class="smrt-owner-setup">
+  <h1>{t(M['ui.owner_setup.heading'])}</h1>
+  {#if !data.available}
+    <p data-owner-setup="unavailable">{t(M['ui.owner_setup.unavailable'])}</p>
+  {:else}
+    <p>{t(M['ui.owner_setup.intro'])}</p>
+    {#if form?.message}<p role="alert" data-owner-setup="error">{form.message}</p>{/if}
+    <!-- raw-primitive-allow: native POST form so owner setup works without JavaScript; the host's SvelteKit `enhance` is attached when available -->
+    <form method="POST" {action} {@attach enhanceForm}>
+      <!-- raw-primitive-allow: hidden, non-interactive carrier for the single-use bootstrap token -->
+      <input type="hidden" name="token" value={data.token} />
+      <label>
+        {t(M['ui.owner_setup.name'])}
+        <Input name="name" autocomplete="name" required />
+      </label>
+      <label>
+        {t(M['ui.owner_setup.email'])}
+        <Input name="email" type="email" autocomplete="email" required />
+      </label>
+      {#if askTenantName}
+        <label>
+          {t(M['ui.owner_setup.tenant_name'])}
+          <Input name="tenantName" autocomplete="organization" />
+        </label>
+      {/if}
+      <Button type="submit">{t(M['ui.owner_setup.submit'])}</Button>
+    </form>
+  {/if}
+</main>
+
+<style>
+  .smrt-owner-setup {
+    max-width: 36rem;
+    margin: 4rem auto;
+    padding: 1.5rem;
+  }
+  form {
+    display: grid;
+    gap: 1rem;
+  }
+  label {
+    display: grid;
+    gap: 0.35rem;
+  }
+  [role='alert'] {
+    color: var(--smrt-color-error, #b3261e);
+  }
+</style>

package/dist/components/app/OwnerSetupForm.svelte.d.ts

@@ -0,0 +1,22 @@
+import type { OwnerSetupData, OwnerSetupFormResult } from './owner-setup-types.js';
+interface Props {
+    /** The route's `load` data. The token is rendered only as a hidden field. */
+    data: OwnerSetupData;
+    /** The route's `form` prop (action failure data). */
+    form?: OwnerSetupFormResult | null;
+    /** Also ask for an optional workspace name (field `tenantName`). */
+    askTenantName?: boolean;
+    /** Form action URL; omit to post to the current route's default action. */
+    action?: string;
+    /**
+     * SvelteKit's `enhance` from `$app/forms`, for progressive enhancement.
+     * Optional: without it the form is a plain POST that works without JS.
+     */
+    enhance?: (form: HTMLFormElement) => {
+        destroy?: () => void;
+    } | void;
+}
+declare const OwnerSetupForm: import("svelte").Component<Props, {}, "">;
+type OwnerSetupForm = ReturnType<typeof OwnerSetupForm>;
+export default OwnerSetupForm;
+//# sourceMappingURL=OwnerSetupForm.svelte.d.ts.map

package/dist/components/app/OwnerSetupForm.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnerSetupForm.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/app/OwnerSetupForm.svelte.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACrB,MAAM,wBAAwB,CAAC;AAGhC,UAAU,KAAK;IACb,6EAA6E;IAC7E,IAAI,EAAE,cAAc,CAAC;IACrB,qDAAqD;IACrD,IAAI,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACnC,oEAAoE;IACpE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK;QAAE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACtE;AA0DD,QAAA,MAAM,cAAc,2CAAwC,CAAC;AAC7D,KAAK,cAAc,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AACxD,eAAe,cAAc,CAAC"}

package/dist/components/app/RuntimeDiagnosticsWebMcp.svelte

@@ -0,0 +1,18 @@
+<script lang="ts">
+import { registerRuntimeDiagnosticsWebMcp } from './runtime-diagnostics-webmcp.js';
+
+interface Props {
+  /** Register the read-only diagnostics tool while true. */
+  enabled?: boolean;
+  /** Same-origin diagnostics endpoint. */
+  endpoint?: string;
+}
+
+let { enabled = true, endpoint }: Props = $props();
+
+$effect(() => {
+  if (!enabled) return;
+  const owner = registerRuntimeDiagnosticsWebMcp({ endpoint });
+  return () => owner?.dispose();
+});
+</script>

package/dist/components/app/RuntimeDiagnosticsWebMcp.svelte.d.ts

@@ -0,0 +1,10 @@
+interface Props {
+    /** Register the read-only diagnostics tool while true. */
+    enabled?: boolean;
+    /** Same-origin diagnostics endpoint. */
+    endpoint?: string;
+}
+declare const RuntimeDiagnosticsWebMcp: import("svelte").Component<Props, {}, "">;
+type RuntimeDiagnosticsWebMcp = ReturnType<typeof RuntimeDiagnosticsWebMcp>;
+export default RuntimeDiagnosticsWebMcp;
+//# sourceMappingURL=RuntimeDiagnosticsWebMcp.svelte.d.ts.map

package/dist/components/app/RuntimeDiagnosticsWebMcp.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimeDiagnosticsWebMcp.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/app/RuntimeDiagnosticsWebMcp.svelte.ts"],"names":[],"mappings":"AAMA,UAAU,KAAK;IACb,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAgBD,QAAA,MAAM,wBAAwB,2CAAwC,CAAC;AACvE,KAAK,wBAAwB,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC5E,eAAe,wBAAwB,CAAC"}

package/dist/components/app/ShellSettingsPage.svelte

@@ -0,0 +1,32 @@
+<script lang="ts">
+import { useI18n } from '@happyvertical/smrt-ui/i18n';
+import { M } from '../../i18n/strings.workspace.js';
+import ShellSettingsPanel from '../workspace/admin-shell/ShellSettingsPanel.svelte';
+
+const { t } = useI18n();
+</script>
+
+<section class="smrt-shell-settings-page">
+  <header>
+    <h1>{t(M['ui.shell_settings_page.heading'])}</h1>
+    <p>{t(M['ui.shell_settings_page.description'])}</p>
+  </header>
+  <ShellSettingsPanel />
+</section>
+
+<style>
+  .smrt-shell-settings-page {
+    display: grid;
+    gap: var(--smrt-spacing-6, 1.5rem);
+    max-width: 720px;
+    padding: var(--smrt-spacing-8, 2rem);
+  }
+  header {
+    display: grid;
+    gap: var(--smrt-spacing-2, 0.5rem);
+  }
+  h1,
+  p {
+    margin: 0;
+  }
+</style>

package/dist/components/app/ShellSettingsPage.svelte.d.ts

@@ -0,0 +1,19 @@
+interface $$__sveltets_2_IsomorphicComponent<Props extends Record<string, any> = any, Events extends Record<string, any> = any, Slots extends Record<string, any> = any, Exports = {}, Bindings = string> {
+    new (options: import('svelte').ComponentConstructorOptions<Props>): import('svelte').SvelteComponent<Props, Events, Slots> & {
+        $$bindings?: Bindings;
+    } & Exports;
+    (internal: unknown, props: {
+        $$events?: Events;
+        $$slots?: Slots;
+    }): Exports & {
+        $set?: any;
+        $on?: any;
+    };
+    z_$$bindings?: Bindings;
+}
+declare const ShellSettingsPage: $$__sveltets_2_IsomorphicComponent<Record<string, never>, {
+    [evt: string]: CustomEvent<any>;
+}, {}, {}, string>;
+type ShellSettingsPage = InstanceType<typeof ShellSettingsPage>;
+export default ShellSettingsPage;
+//# sourceMappingURL=ShellSettingsPage.svelte.d.ts.map

package/dist/components/app/ShellSettingsPage.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellSettingsPage.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/app/ShellSettingsPage.svelte.ts"],"names":[],"mappings":"AA2BA,UAAU,kCAAkC,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,MAAM;IACpM,KAAK,OAAO,EAAE,OAAO,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,GAAG,OAAO,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC;IACjK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAA;KAAC,GAAG,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,GAAG,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IACtG,YAAY,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAKD,QAAA,MAAM,iBAAiB;;kBAA+E,CAAC;AACrF,KAAK,iBAAiB,GAAG,YAAY,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAClE,eAAe,iBAAiB,CAAC"}

package/dist/components/app/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @happyvertical/smrt-svelte/app
+ *
+ * Packaged application shell and first-run owner setup UI. Browser-only: no
+ * server or `$app/*` imports. Pair with the server `load`/`actions` from
+ * `@happyvertical/smrt-app-runtime/sveltekit`.
+ */
+export { default as AppShell } from './AppShell.svelte';
+export { default as OwnerSetupForm } from './OwnerSetupForm.svelte';
+export type { OwnerSetupData, OwnerSetupFormResult, } from './owner-setup-types.js';
+export { default as RuntimeDiagnosticsWebMcp } from './RuntimeDiagnosticsWebMcp.svelte';
+export { createRuntimeDiagnosticsWebMcpTool, type RegisterRuntimeDiagnosticsWebMcpOptions, RUNTIME_DIAGNOSTICS_ENDPOINT, RUNTIME_DIAGNOSTICS_WEBMCP_TOOL_NAME, type RuntimeDiagnosticsWebMcpOwner, registerRuntimeDiagnosticsWebMcp, } from './runtime-diagnostics-webmcp.js';
+export { default as ShellSettingsPage } from './ShellSettingsPage.svelte';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/app/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/app/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACpE,YAAY,EACV,cAAc,EACd,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,IAAI,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EACL,kCAAkC,EAClC,KAAK,uCAAuC,EAC5C,4BAA4B,EAC5B,oCAAoC,EACpC,KAAK,6BAA6B,EAClC,gCAAgC,GACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/components/app/index.js

@@ -0,0 +1,12 @@
+/**
+ * @happyvertical/smrt-svelte/app
+ *
+ * Packaged application shell and first-run owner setup UI. Browser-only: no
+ * server or `$app/*` imports. Pair with the server `load`/`actions` from
+ * `@happyvertical/smrt-app-runtime/sveltekit`.
+ */
+export { default as AppShell } from './AppShell.svelte';
+export { default as OwnerSetupForm } from './OwnerSetupForm.svelte';
+export { default as RuntimeDiagnosticsWebMcp } from './RuntimeDiagnosticsWebMcp.svelte';
+export { createRuntimeDiagnosticsWebMcpTool, RUNTIME_DIAGNOSTICS_ENDPOINT, RUNTIME_DIAGNOSTICS_WEBMCP_TOOL_NAME, registerRuntimeDiagnosticsWebMcp, } from './runtime-diagnostics-webmcp.js';
+export { default as ShellSettingsPage } from './ShellSettingsPage.svelte';

package/dist/components/app/owner-setup-types.d.ts

@@ -0,0 +1,14 @@
+/** Shape of the setup route's `load` data. */
+export interface OwnerSetupData {
+    /** False (with an empty token) when setup is not offered. */
+    available: boolean;
+    /** Single-use bootstrap token carried from the setup link. */
+    token: string;
+}
+/** Shape of the setup action's failure data (`fail(status, { code, message })`). */
+export interface OwnerSetupFormResult {
+    code?: string;
+    /** Fixed server-provided text; displayed as given. */
+    message?: string;
+}
+//# sourceMappingURL=owner-setup-types.d.ts.map

package/dist/components/app/owner-setup-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-setup-types.d.ts","sourceRoot":"","sources":["../../../src/components/app/owner-setup-types.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,CAAC;CACf;AAED,oFAAoF;AACpF,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}

package/dist/components/app/owner-setup-types.js

@@ -0,0 +1 @@
+export {};

package/dist/components/app/runtime-diagnostics-webmcp.d.ts

@@ -0,0 +1,33 @@
+export declare const RUNTIME_DIAGNOSTICS_WEBMCP_TOOL_NAME = "smrt.runtime.diagnostics.read";
+interface RuntimeDiagnosticsTool {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: Record<string, unknown>;
+    readonly annotations: {
+        readonly readOnlyHint: true;
+        readonly destructiveHint: false;
+        readonly idempotentHint: true;
+        readonly openWorldHint: false;
+    };
+    readonly execute: (args: Record<string, unknown>) => Promise<string>;
+}
+interface RuntimeDiagnosticsModelContext {
+    registerTool(tool: RuntimeDiagnosticsTool, options: {
+        signal: AbortSignal;
+    }): void | Promise<void>;
+}
+export interface RuntimeDiagnosticsWebMcpOwner {
+    readonly dispose: () => void;
+}
+export declare const RUNTIME_DIAGNOSTICS_ENDPOINT = "/api/_runtime/diagnostics";
+export interface RegisterRuntimeDiagnosticsWebMcpOptions {
+    readonly fetchFn?: typeof fetch;
+    /** Same-origin diagnostics endpoint. Defaults to `/api/_runtime/diagnostics`. */
+    readonly endpoint?: string;
+    readonly modelContext?: RuntimeDiagnosticsModelContext;
+}
+/** Register exactly one page-user, read-only diagnostics tool for its owner. */
+export declare function registerRuntimeDiagnosticsWebMcp(options?: RegisterRuntimeDiagnosticsWebMcpOptions): RuntimeDiagnosticsWebMcpOwner | null;
+export declare function createRuntimeDiagnosticsWebMcpTool(fetchFn: typeof fetch, endpoint?: string): RuntimeDiagnosticsTool;
+export {};
+//# sourceMappingURL=runtime-diagnostics-webmcp.d.ts.map

package/dist/components/app/runtime-diagnostics-webmcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-diagnostics-webmcp.d.ts","sourceRoot":"","sources":["../../../src/components/app/runtime-diagnostics-webmcp.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oCAAoC,kCAChB,CAAC;AAElC,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;QAC5B,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC;QAChC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC;QAC9B,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACtE;AAED,UAAU,8BAA8B;IACtC,YAAY,CACV,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE;QAAE,MAAM,EAAE,WAAW,CAAA;KAAE,GAC/B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AAED,eAAO,MAAM,4BAA4B,8BAA8B,CAAC;AAExE,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,8BAA8B,CAAC;CACxD;AAED,gFAAgF;AAChF,wBAAgB,gCAAgC,CAC9C,OAAO,GAAE,uCAA4C,GACpD,6BAA6B,GAAG,IAAI,CA0BtC;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,OAAO,KAAK,EACrB,QAAQ,GAAE,MAAqC,GAC9C,sBAAsB,CA2CxB"}

package/dist/components/app/runtime-diagnostics-webmcp.js

@@ -0,0 +1,68 @@
+export const RUNTIME_DIAGNOSTICS_WEBMCP_TOOL_NAME = 'smrt.runtime.diagnostics.read';
+export const RUNTIME_DIAGNOSTICS_ENDPOINT = '/api/_runtime/diagnostics';
+/** Register exactly one page-user, read-only diagnostics tool for its owner. */
+export function registerRuntimeDiagnosticsWebMcp(options = {}) {
+    const modelContext = options.modelContext ??
+        globalThis.document?.modelContext;
+    if (!modelContext || typeof modelContext.registerTool !== 'function') {
+        return null;
+    }
+    const controller = new AbortController();
+    const tool = createRuntimeDiagnosticsWebMcpTool(options.fetchFn ?? fetch, options.endpoint);
+    try {
+        const registration = modelContext.registerTool(tool, {
+            signal: controller.signal,
+        });
+        void Promise.resolve(registration).catch(() => controller.abort());
+    }
+    catch {
+        controller.abort();
+    }
+    return Object.freeze({ dispose: () => controller.abort() });
+}
+export function createRuntimeDiagnosticsWebMcpTool(fetchFn, endpoint = RUNTIME_DIAGNOSTICS_ENDPOINT) {
+    return Object.freeze({
+        name: RUNTIME_DIAGNOSTICS_WEBMCP_TOOL_NAME,
+        description: 'Read the authenticated, redacted application runtime diagnostics.',
+        inputSchema: Object.freeze({
+            type: 'object',
+            properties: Object.freeze({}),
+            additionalProperties: false,
+        }),
+        annotations: Object.freeze({
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        }),
+        async execute() {
+            let response;
+            try {
+                response = await fetchFn(endpoint, {
+                    method: 'GET',
+                    credentials: 'same-origin',
+                    headers: { accept: 'application/json' },
+                });
+            }
+            catch {
+                return stableToolError('diagnostics_unavailable');
+            }
+            if (!response.ok) {
+                return stableToolError(response.status === 401
+                    ? 'authentication_required'
+                    : response.status === 403
+                        ? 'authorization_denied'
+                        : 'diagnostics_unavailable');
+            }
+            try {
+                return JSON.stringify(await response.json());
+            }
+            catch {
+                return stableToolError('diagnostics_unavailable');
+            }
+        },
+    });
+}
+function stableToolError(code) {
+    return JSON.stringify({ ok: false, error: { code } });
+}

package/dist/i18n/server.d.ts

@@ -21,6 +21,7 @@ import '@happyvertical/smrt-ui/i18n';
 import './strings.forms.js';
 import './strings.board.js';
 import './strings.workspace.js';
+import '../mcp-apps/strings.js';
 export interface BuildI18nSnapshotOptions {
     /** Target locale (BCP-47-ish, e.g. `fr-CA`). */
     locale: string;

package/dist/i18n/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/i18n/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAGL,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,6BAA6B,CAAC;AAMrC,OAAO,6BAA6B,CAAC;AACrC,OAAO,oBAAoB,CAAC;AAC5B,OAAO,oBAAoB,CAAC;AAC5B,OAAO,wBAAwB,CAAC;AAEhC,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACpD;;;OAGG;IACH,EAAE,CAAC,EAAE,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACxC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,YAAY,CAAC,CA4BvB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/i18n/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAGL,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,6BAA6B,CAAC;AAMrC,OAAO,6BAA6B,CAAC;AACrC,OAAO,oBAAoB,CAAC;AAC5B,OAAO,oBAAoB,CAAC;AAC5B,OAAO,wBAAwB,CAAC;AAChC,OAAO,wBAAwB,CAAC;AAEhC,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACpD;;;OAGG;IACH,EAAE,CAAC,EAAE,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACxC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,YAAY,CAAC,CA4BvB"}

package/dist/i18n/server.js

@@ -26,6 +26,7 @@ import '@happyvertical/smrt-ui/i18n';
 import './strings.forms.js';
 import './strings.board.js';
 import './strings.workspace.js';
+import '../mcp-apps/strings.js';
 /**
  * Resolve a per-locale dictionary of message **templates** for the keys an app
  * uses. Seeds `LanguageRegistry` from the English defaults registered via

package/dist/i18n/strings.workspace.d.ts

@@ -53,6 +53,17 @@ export declare const M: {
     readonly 'ui.activity_item.cancel': "ui.activity_item.cancel";
     readonly 'ui.activity_list.empty': "ui.activity_list.empty";
     readonly 'ui.app_scope_panel.app_scope': "ui.app_scope_panel.app_scope";
+    readonly 'ui.app_shell.settings_link': "ui.app_shell.settings_link";
+    readonly 'ui.app_shell.navigation': "ui.app_shell.navigation";
+    readonly 'ui.owner_setup.heading': "ui.owner_setup.heading";
+    readonly 'ui.owner_setup.unavailable': "ui.owner_setup.unavailable";
+    readonly 'ui.owner_setup.intro': "ui.owner_setup.intro";
+    readonly 'ui.owner_setup.name': "ui.owner_setup.name";
+    readonly 'ui.owner_setup.email': "ui.owner_setup.email";
+    readonly 'ui.owner_setup.tenant_name': "ui.owner_setup.tenant_name";
+    readonly 'ui.owner_setup.submit': "ui.owner_setup.submit";
+    readonly 'ui.shell_settings_page.heading': "ui.shell_settings_page.heading";
+    readonly 'ui.shell_settings_page.description': "ui.shell_settings_page.description";
     readonly 'ui.hotkey_input.capture_title': "ui.hotkey_input.capture_title";
     readonly 'ui.hotkey_input.conflicts_with': "ui.hotkey_input.conflicts_with";
     readonly 'ui.shell_settings_panel.shell_settings': "ui.shell_settings_panel.shell_settings";

package/dist/i18n/strings.workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strings.workspace.d.ts","sourceRoot":"","sources":["../../src/i18n/strings.workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,eAAO,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0GZ,CAAC"}
+{"version":3,"file":"strings.workspace.d.ts","sourceRoot":"","sources":["../../src/i18n/strings.workspace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,eAAO,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0HZ,CAAC"}

package/dist/i18n/strings.workspace.js

@@ -58,6 +58,18 @@ export const M = defineMessages({
     'ui.activity_item.cancel': 'Cancel',
     'ui.activity_list.empty': 'No activities',
     'ui.app_scope_panel.app_scope': 'App scope',
+    // components/app/*.svelte
+    'ui.app_shell.settings_link': 'Shell settings',
+    'ui.app_shell.navigation': 'Application navigation',
+    'ui.owner_setup.heading': 'Set up your local application',
+    'ui.owner_setup.unavailable': 'Local owner setup is unavailable or has already been completed.',
+    'ui.owner_setup.intro': 'Create the real local owner account. This invitation works once and stays on this device.',
+    'ui.owner_setup.name': 'Name',
+    'ui.owner_setup.email': 'Email',
+    'ui.owner_setup.tenant_name': 'Workspace name (optional)',
+    'ui.owner_setup.submit': 'Create owner',
+    'ui.shell_settings_page.heading': 'Settings',
+    'ui.shell_settings_page.description': 'Adjust the workspace shell — panel layout and keyboard shortcuts.',
     'ui.hotkey_input.capture_title': 'Press a key to capture it',
     'ui.hotkey_input.conflicts_with': 'Conflicts with',
     'ui.shell_settings_panel.shell_settings': 'Shell settings',

package/dist/mcp-apps/McpAppsBridge.svelte

@@ -0,0 +1,123 @@
+<!--
+  @component
+  Shipped portable MCP Apps view shell. Owns one mount-scoped host bridge
+  (`useMcpApp`), renders the app's own content, and offers a portable
+  display-mode request only when the bound host advertises that mode. Any
+  host failure or missing capability keeps the view inline with a status
+  message; the view never requires host controls. Browser-only: imports no
+  server code, credentials, or OpenAI-specific helpers.
+-->
+<script lang="ts">
+import type { DisplayMode } from '@happyvertical/smrt-mcp-apps';
+import { useI18n } from '@happyvertical/smrt-ui/i18n';
+import { Button } from '@happyvertical/smrt-ui/ui';
+import type { Snippet } from 'svelte';
+import { type McpAppState, useMcpApp } from './mcp-apps.svelte.js';
+import { M } from './strings.js';
+
+interface McpAppsBridgeProps {
+  /** Exact, application-configured host origin. Never derive this from URL input. */
+  hostOrigin: string;
+  /** View identity sent in `ui/initialize`. */
+  appInfo: { name: string; version: string };
+  /** Visible view heading, already localized by the application. */
+  title: string;
+  /** Optional lead text, already localized by the application. */
+  description?: string;
+  /** Modes this view supports. Defaults to `['inline', 'fullscreen']`. */
+  availableDisplayModes?: DisplayMode[];
+  /** Mode offered by the expand control. Defaults to `'fullscreen'`. */
+  expandMode?: Exclude<DisplayMode, 'inline'>;
+  /** Host window override for tests. Defaults to the immediate parent. */
+  hostWindow?: () => Window;
+  /** Request timeout in milliseconds (1–120000). */
+  timeoutMs?: number;
+  /** App content; receives the bridge state for capability-gated calls. */
+  children?: Snippet<[McpAppState]>;
+}
+
+let {
+  hostOrigin,
+  appInfo,
+  title,
+  description,
+  availableDisplayModes = ['inline', 'fullscreen'],
+  expandMode = 'fullscreen',
+  hostWindow,
+  timeoutMs,
+  children,
+}: McpAppsBridgeProps = $props();
+
+const { t } = useI18n();
+const headingId = $props.id();
+let requestFailed = $state(false);
+let requesting = $state(false);
+
+// Options are read once, at mount, in the browser; SSR constructs nothing.
+const app = useMcpApp(() => ({
+  appInfo: { ...appInfo },
+  availableDisplayModes: [...availableDisplayModes],
+  hostOrigin,
+  hostWindow: hostWindow ? hostWindow() : window.parent,
+  ...(timeoutMs === undefined ? {} : { timeoutMs }),
+}));
+
+const ready = $derived(app.snapshot?.state === 'ready');
+const canExpand = $derived(
+  ready &&
+    !app.error &&
+    !requestFailed &&
+    availableDisplayModes.includes(expandMode) &&
+    (app.snapshot?.hostContext.availableDisplayModes ?? ['inline']).includes(
+      expandMode,
+    ) &&
+    app.snapshot?.hostContext.displayMode !== expandMode,
+);
+const inlineOnly = $derived(
+  Boolean(app.error) ||
+    requestFailed ||
+    (ready &&
+      !(app.snapshot?.hostContext.availableDisplayModes ?? ['inline']).includes(
+        expandMode,
+      )),
+);
+
+async function expand() {
+  const bridge = app.bridge;
+  if (!bridge || requesting) return;
+  requesting = true;
+  try {
+    await bridge.requestDisplayMode(expandMode);
+  } catch {
+    requestFailed = true;
+  } finally {
+    requesting = false;
+  }
+}
+</script>
+
+<section aria-labelledby={headingId} class="smrt-mcp-apps-bridge">
+  <h1 id={headingId}>{title}</h1>
+  {#if description}<p>{description}</p>{/if}
+  {#if inlineOnly}
+    <p role="status">{t(M['ui.mcp_apps.inline_only'])}</p>
+  {:else if canExpand}
+    <Button type="button" onclick={expand} loading={requesting}>
+      {t(M['ui.mcp_apps.expand'])}
+    </Button>
+  {:else if !ready}
+    <p role="status" class="smrt-mcp-apps-bridge__pending">
+      {t(M['ui.mcp_apps.connecting'])}
+    </p>
+  {/if}
+  {@render children?.(app)}
+</section>
+
+<style>
+.smrt-mcp-apps-bridge {
+  display: grid;
+  gap: var(--smrt-spacing-3, 0.75rem);
+  min-width: 0;
+  overflow-wrap: anywhere;
+}
+</style>

package/dist/mcp-apps/McpAppsBridge.svelte.d.ts

@@ -0,0 +1,38 @@
+import type { DisplayMode } from '@happyvertical/smrt-mcp-apps';
+import type { Snippet } from 'svelte';
+import { type McpAppState } from './mcp-apps.svelte.js';
+interface McpAppsBridgeProps {
+    /** Exact, application-configured host origin. Never derive this from URL input. */
+    hostOrigin: string;
+    /** View identity sent in `ui/initialize`. */
+    appInfo: {
+        name: string;
+        version: string;
+    };
+    /** Visible view heading, already localized by the application. */
+    title: string;
+    /** Optional lead text, already localized by the application. */
+    description?: string;
+    /** Modes this view supports. Defaults to `['inline', 'fullscreen']`. */
+    availableDisplayModes?: DisplayMode[];
+    /** Mode offered by the expand control. Defaults to `'fullscreen'`. */
+    expandMode?: Exclude<DisplayMode, 'inline'>;
+    /** Host window override for tests. Defaults to the immediate parent. */
+    hostWindow?: () => Window;
+    /** Request timeout in milliseconds (1–120000). */
+    timeoutMs?: number;
+    /** App content; receives the bridge state for capability-gated calls. */
+    children?: Snippet<[McpAppState]>;
+}
+/**
+ * Shipped portable MCP Apps view shell. Owns one mount-scoped host bridge
+ * (`useMcpApp`), renders the app's own content, and offers a portable
+ * display-mode request only when the bound host advertises that mode. Any
+ * host failure or missing capability keeps the view inline with a status
+ * message; the view never requires host controls. Browser-only: imports no
+ * server code, credentials, or OpenAI-specific helpers.
+ */
+declare const McpAppsBridge: import("svelte").Component<McpAppsBridgeProps, {}, "">;
+type McpAppsBridge = ReturnType<typeof McpAppsBridge>;
+export default McpAppsBridge;
+//# sourceMappingURL=McpAppsBridge.svelte.d.ts.map

package/dist/mcp-apps/McpAppsBridge.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"McpAppsBridge.svelte.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/McpAppsBridge.svelte.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAGhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,KAAK,WAAW,EAAa,MAAM,sBAAsB,CAAC;AAInE,UAAU,kBAAkB;IAC1B,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3C,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC;IACtC,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5C,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;IAC1B,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;CACnC;AA4FD;;;;;;;GAOG;AACH,QAAA,MAAM,aAAa,wDAAwC,CAAC;AAC5D,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,eAAe,aAAa,CAAC"}

package/dist/mcp-apps/index.d.ts

@@ -1,3 +1,4 @@
+export { default as McpAppsBridge } from './McpAppsBridge.svelte';
 export type { McpAppState } from './mcp-apps.svelte.js';
 export { useMcpApp, useMcpAppIntent } from './mcp-apps.svelte.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/mcp-apps/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAClE,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/mcp-apps/index.js

@@ -1 +1,2 @@
+export { default as McpAppsBridge } from './McpAppsBridge.svelte';
 export { useMcpApp, useMcpAppIntent } from './mcp-apps.svelte.js';

package/dist/mcp-apps/mcp-apps.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-apps.svelte.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/mcp-apps.svelte.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EACV,UAAU,EACV,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AAIzC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AACD,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,mBAAmB,GAAG,WAAW,CAiCzE;AACD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,iBAAiB,GACzB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAerD"}
+{"version":3,"file":"mcp-apps.svelte.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/mcp-apps.svelte.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,KAAK,EACV,UAAU,EACV,iBAAiB,EAClB,MAAM,iCAAiC,CAAC;AAIzC,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AACD,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,mBAAmB,GAAG,WAAW,CAyCzE;AACD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,iBAAiB,GACzB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAerD"}

package/dist/mcp-apps/mcp-apps.svelte.js

@@ -8,7 +8,16 @@ export function useMcpApp(options) {
     let error = $state();
     onMount(() => {
         let active = true;
-        const current = new McpAppBridge(options());
+        let current;
+        try {
+            current = new McpAppBridge(options());
+        }
+        catch (failure) {
+            // E.g. opened top-level (no embedding host) or an invalid origin: keep
+            // the view's ordinary fallback instead of failing the component mount.
+            error = failure instanceof Error ? failure.message : 'Host unavailable';
+            return;
+        }
         bridge = current;
         const unsubscribe = current.subscribe((next) => {
             if (active)

package/dist/mcp-apps/strings.d.ts

@@ -0,0 +1,7 @@
+/** English defaults for the shipped MCP Apps bridge component. */
+export declare const M: {
+    readonly 'ui.mcp_apps.expand': "ui.mcp_apps.expand";
+    readonly 'ui.mcp_apps.connecting': "ui.mcp_apps.connecting";
+    readonly 'ui.mcp_apps.inline_only': "ui.mcp_apps.inline_only";
+};
+//# sourceMappingURL=strings.d.ts.map

package/dist/mcp-apps/strings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strings.d.ts","sourceRoot":"","sources":["../../src/mcp-apps/strings.ts"],"names":[],"mappings":"AAEA,kEAAkE;AAClE,eAAO,MAAM,CAAC;;;;CAKZ,CAAC"}

package/dist/mcp-apps/strings.js

@@ -0,0 +1,7 @@
+import { defineMessages } from '@happyvertical/smrt-ui/i18n';
+/** English defaults for the shipped MCP Apps bridge component. */
+export const M = defineMessages({
+    'ui.mcp_apps.expand': 'Expand view',
+    'ui.mcp_apps.connecting': 'Connecting to the host…',
+    'ui.mcp_apps.inline_only': 'Host controls are unavailable; this view remains inline.',
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-svelte",
-  "version": "0.53.3",
+  "version": "0.53.4",
   "smrtJsdoc": "strict",
   "description": "Svelte 5 components for SMRT user management - auth, users, tenants, roles, permissions, groups",
   "type": "module",
@@ -55,6 +55,17 @@
       "import": "./dist/components/workspace/server/index.js",
       "default": "./dist/components/workspace/server/index.js"
     },
+    "./app": {
+      "types": "./dist/components/app/index.d.ts",
+      "svelte": "./dist/components/app/index.js",
+      "import": "./dist/components/app/index.js",
+      "default": "./dist/components/app/index.js"
+    },
+    "./app/runtime-diagnostics": {
+      "types": "./dist/components/app/runtime-diagnostics-webmcp.d.ts",
+      "import": "./dist/components/app/runtime-diagnostics-webmcp.js",
+      "default": "./dist/components/app/runtime-diagnostics-webmcp.js"
+    },
     "./workspace/live": {
       "types": "./dist/components/workspace/live/index.d.ts",
       "svelte": "./dist/components/workspace/live/index.js",
@@ -127,11 +138,11 @@
   },
   "dependencies": {
     "@happyvertical/logger": "^0.98.0",
-    "@happyvertical/smrt-languages": "0.53.3",
-    "@happyvertical/smrt-mcp-apps": "0.53.3",
-    "@happyvertical/smrt-types": "0.53.3",
-    "@happyvertical/smrt-ui": "0.53.3",
-    "@happyvertical/smrt-web": "0.53.3",
+    "@happyvertical/smrt-languages": "0.53.4",
+    "@happyvertical/smrt-mcp-apps": "0.53.4",
+    "@happyvertical/smrt-types": "0.53.4",
+    "@happyvertical/smrt-ui": "0.53.4",
+    "@happyvertical/smrt-web": "0.53.4",
     "@tanstack/db": "^0.6.14",
     "@tanstack/svelte-db": "^0.1.91",
     "esm-env": "^1.2.2"
@@ -166,14 +177,14 @@
     }
   },
   "devDependencies": {
-    "@happyvertical/smrt-agents": "0.53.3",
-    "@happyvertical/smrt-chat": "0.53.3",
-    "@happyvertical/smrt-content": "0.53.3",
-    "@happyvertical/smrt-core": "0.53.3",
-    "@happyvertical/smrt-reports": "0.53.3",
-    "@happyvertical/smrt-scanner": "0.53.3",
-    "@happyvertical/smrt-tenancy": "0.53.3",
-    "@happyvertical/smrt-users": "0.53.3",
+    "@happyvertical/smrt-agents": "0.53.4",
+    "@happyvertical/smrt-chat": "0.53.4",
+    "@happyvertical/smrt-content": "0.53.4",
+    "@happyvertical/smrt-core": "0.53.4",
+    "@happyvertical/smrt-reports": "0.53.4",
+    "@happyvertical/smrt-scanner": "0.53.4",
+    "@happyvertical/smrt-tenancy": "0.53.4",
+    "@happyvertical/smrt-users": "0.53.4",
     "@sveltejs/package": "^2.5.8",
     "@sveltejs/vite-plugin-svelte": "^7.3.0",
     "@testing-library/jest-dom": "^7.0.1",