@nanobpm/urban 0.84.0 → 0.85.0

package/dist/runtime/core/modules/surfaces.js

@@ -12,6 +12,7 @@ import { completeUserTaskResponse, resolveFormResponse } from "./forms.js";
 import { mountActions } from "./actions.js";
 import { mountAgent } from "./agent.js";
 import { mountApi } from "./api.js";
+import { mountMcp } from "./mcp.js";
 import { mountPages } from "./pages.js";
 /** Escape HTML-significant characters before embedding a value in markup. */
 function escapeHtml(s) {
@@ -190,6 +191,16 @@ export function mountSurfaces(ctx, app) {
     const agent = mountAgent(ctx);
     routes.push(...agent.routes);
     enabled.push("agent@/app/agent");
+    // The runtime-served MCP surface (ADR 0067): `/app/mcp`, a Streamable-HTTP MCP endpoint mounted
+    // unconditionally (like `/app/agent`) so an MCP client always has a stable address. It projects
+    // the app's read-only OpenAPI operations as tools from the SAME enumeration `mountApi` routes
+    // from, plus framework-owned read-only process-debugging tools — zero app-side MCP code.
+    const mcp = mountMcp(ctx, app, api.routes);
+    routes.push(...mcp.routes);
+    // The route is always mounted (stable address), but only claim MCP as an active surface when it
+    // actually answers — a config-disabled surface 404s, so listing it here would be inaccurate.
+    if (mcp.enabled)
+        enabled.push("mcp@/app/mcp");
     // The pages surface (the schema-driven page runtime) mounts its own routes.
     const pages = mountPages(ctx, app);
     if (pages.routes.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@nanobpm/urban",
-	"version": "0.84.0",
+	"version": "0.85.0",
 	"description": "Urban: build and run code-first apps on Nano — runtime, derivation toolkit, and CLI in one. Author durable processes with @nanobpm/workflow (defineFlow), a typed datasource, forms, triggers and surfaces from a nano.app.json manifest, on Node or Deno.",
 	"license": "Apache-2.0",
 	"type": "module",
@@ -99,6 +99,7 @@
 		"test:deno": "deno test -A --no-check src/"
 	},
 	"dependencies": {
+		"@modelcontextprotocol/sdk": "^1.30.0",
 		"@nanobpm/nano-app-schema": "^0.9.0",
 		"@nanobpm/nano-sdk": "^1.2.5",
 		"@nanobpm/workflow": "^0.14.0",

package/src/runtime/core/modules/api.ts

@@ -55,7 +55,7 @@ export interface ApiBinding {
 /** The canonical, non-configurable mount prefix for an app's OpenAPI operations. Operations always
  *  live under `/app/api` so page actions, links, and any `callRoute` can name an operation path as a
  *  stable framework constant (`/app/api/<op path>`) — there is no per-app `base` knob to drift. */
-const API_BASE = "/app/api";
+export const API_BASE = "/app/api";
 
 /** Pinned Swagger UI dist served from a CDN, so the docs UI adds zero bundle/runtime deps to an
  *  Urban app (matching the deps-free spirit of the rest of the surface — validators are standalone,
@@ -250,7 +250,7 @@ export function resolveOperationHandler(mod: Record<string, unknown>): Operation
   return undefined;
 }
 
-function readApiBinding(manifest: unknown): ApiBinding | undefined {
+export function readApiBinding(manifest: unknown): ApiBinding | undefined {
   const raw = manifest && typeof manifest === "object" ? Reflect.get(manifest, "api") : undefined;
   if (!raw || typeof raw !== "object") return undefined;
   const spec = Reflect.get(raw, "spec");