@objectstack/runtime 13.0.0 → 14.3.0

package/dist/index.d.cts

@@ -1065,6 +1065,18 @@ declare class HttpDispatcher {
      * OAuth 2.1 TLS rule), the dispatcher only relays it. Never throws.
      */
     private getMcpResourceMetadataUrl;
+    /**
+     * `GET /mcp/skill` — the environment-customized portable Agent Skill
+     * (`SKILL.md`), rendered by the MCP service (ADR-0036 Amendment C: ONE
+     * generic skill; only the connection URL is environment-specific).
+     *
+     * Served PUBLIC like `/discovery`: the content is generic agent
+     * instructions plus a URL the caller already knows — no schema, no
+     * tenant data. Gated on the same default-on switch as the `/mcp` route
+     * (404 when opted out, so the surface isn't advertised) and 501 when the
+     * MCP plugin isn't loaded, mirroring `handleMcp`.
+     */
+    handleMcpSkill(method: string, context: HttpProtocolContext): Promise<HttpDispatcherResult>;
     /**
      * Normalise the inbound request into a Web-standard `Request` for the MCP
      * transport. Accepts an already-Web `Request`, or a node/Hono-style req
@@ -1501,6 +1513,21 @@ declare class HttpDispatcher {
      *   POST /read/all   → markAllRead
      */
     handleNotification(path: string, method: string, body: any, query: any, context: HttpProtocolContext): Promise<HttpDispatcherResult>;
+    /**
+     * Handle the security admin surface (`/security/...`) — ADR-0090 D5/D9
+     * suggested audience bindings. A package's `isDefault: true` permission
+     * set is an install-time SUGGESTION to bind it to the `everyone` position;
+     * these routes let an admin see and resolve those suggestions. The
+     * `security` service does the real gating (tenant-admin pre-check, and the
+     * confirm write runs under the audience-anchor + delegated-admin gates
+     * with the caller's execution context — never auto-bound, never system).
+     *
+     * Routes:
+     *   GET  /security/suggested-bindings?status=&packageId=   → list (reconciles first)
+     *   POST /security/suggested-bindings/:id/confirm          → create the anchor binding
+     *   POST /security/suggested-bindings/:id/dismiss          → decline the suggestion
+     */
+    handleSecurity(path: string, method: string, _body: any, query: any, context: HttpProtocolContext): Promise<HttpDispatcherResult>;
     /**
      * Handles i18n requests
      * path: sub-path after /i18n/

package/dist/index.d.ts

@@ -1065,6 +1065,18 @@ declare class HttpDispatcher {
      * OAuth 2.1 TLS rule), the dispatcher only relays it. Never throws.
      */
     private getMcpResourceMetadataUrl;
+    /**
+     * `GET /mcp/skill` — the environment-customized portable Agent Skill
+     * (`SKILL.md`), rendered by the MCP service (ADR-0036 Amendment C: ONE
+     * generic skill; only the connection URL is environment-specific).
+     *
+     * Served PUBLIC like `/discovery`: the content is generic agent
+     * instructions plus a URL the caller already knows — no schema, no
+     * tenant data. Gated on the same default-on switch as the `/mcp` route
+     * (404 when opted out, so the surface isn't advertised) and 501 when the
+     * MCP plugin isn't loaded, mirroring `handleMcp`.
+     */
+    handleMcpSkill(method: string, context: HttpProtocolContext): Promise<HttpDispatcherResult>;
     /**
      * Normalise the inbound request into a Web-standard `Request` for the MCP
      * transport. Accepts an already-Web `Request`, or a node/Hono-style req
@@ -1501,6 +1513,21 @@ declare class HttpDispatcher {
      *   POST /read/all   → markAllRead
      */
     handleNotification(path: string, method: string, body: any, query: any, context: HttpProtocolContext): Promise<HttpDispatcherResult>;
+    /**
+     * Handle the security admin surface (`/security/...`) — ADR-0090 D5/D9
+     * suggested audience bindings. A package's `isDefault: true` permission
+     * set is an install-time SUGGESTION to bind it to the `everyone` position;
+     * these routes let an admin see and resolve those suggestions. The
+     * `security` service does the real gating (tenant-admin pre-check, and the
+     * confirm write runs under the audience-anchor + delegated-admin gates
+     * with the caller's execution context — never auto-bound, never system).
+     *
+     * Routes:
+     *   GET  /security/suggested-bindings?status=&packageId=   → list (reconciles first)
+     *   POST /security/suggested-bindings/:id/confirm          → create the anchor binding
+     *   POST /security/suggested-bindings/:id/dismiss          → decline the suggestion
+     */
+    handleSecurity(path: string, method: string, _body: any, query: any, context: HttpProtocolContext): Promise<HttpDispatcherResult>;
     /**
      * Handles i18n requests
      * path: sub-path after /i18n/

package/dist/index.js

@@ -2557,6 +2557,73 @@ var _HttpDispatcher = class _HttpDispatcher {
       return null;
     }
   }
+  /**
+   * `GET /mcp/skill` — the environment-customized portable Agent Skill
+   * (`SKILL.md`), rendered by the MCP service (ADR-0036 Amendment C: ONE
+   * generic skill; only the connection URL is environment-specific).
+   *
+   * Served PUBLIC like `/discovery`: the content is generic agent
+   * instructions plus a URL the caller already knows — no schema, no
+   * tenant data. Gated on the same default-on switch as the `/mcp` route
+   * (404 when opted out, so the surface isn't advertised) and 501 when the
+   * MCP plugin isn't loaded, mirroring `handleMcp`.
+   */
+  async handleMcpSkill(method, context) {
+    if (!_HttpDispatcher.isMcpEnabled()) {
+      return { handled: true, response: this.error("MCP server is not enabled for this environment", 404) };
+    }
+    if (method !== "GET") {
+      return {
+        handled: true,
+        response: {
+          status: 405,
+          headers: { Allow: "GET" },
+          body: { success: false, error: { message: "Method not allowed \u2014 use GET", code: 405 } }
+        }
+      };
+    }
+    const mcp = await this.resolveService("mcp", context.environmentId);
+    if (!mcp || typeof mcp.renderSkill !== "function") {
+      return { handled: true, response: this.error("MCP server is not available", 501) };
+    }
+    let mcpUrl;
+    try {
+      const authService = await this.resolveService("auth", context.environmentId);
+      const url = authService?.getMcpResourceUrl?.();
+      if (typeof url === "string" && url) mcpUrl = url;
+    } catch {
+    }
+    if (!mcpUrl) {
+      try {
+        const webReq = this.toMcpWebRequest(context.request, void 0);
+        const host = webReq?.headers.get("host");
+        if (host) {
+          const proto = webReq?.headers.get("x-forwarded-proto") || "http";
+          mcpUrl = `${proto}://${host}/api/v1/mcp`;
+        }
+      } catch {
+      }
+    }
+    const markdown = mcp.renderSkill({ mcpUrl });
+    return {
+      handled: true,
+      result: {
+        type: "stream",
+        status: 200,
+        contentType: "text/markdown; charset=utf-8",
+        headers: {
+          "content-type": "text/markdown; charset=utf-8",
+          "content-disposition": 'inline; filename="SKILL.md"',
+          // Same reasoning as /discovery (cloud#152): reflects mutable
+          // runtime config (base URL), must never be edge-cached stale.
+          "cache-control": "no-store"
+        },
+        events: (async function* () {
+          yield markdown;
+        })()
+      }
+    };
+  }
   /**
    * Normalise the inbound request into a Web-standard `Request` for the MCP
    * transport. Accepts an already-Web `Request`, or a node/Hono-style req
@@ -3722,6 +3789,56 @@ var _HttpDispatcher = class _HttpDispatcher {
     }
     return { handled: false };
   }
+  /**
+   * Handle the security admin surface (`/security/...`) — ADR-0090 D5/D9
+   * suggested audience bindings. A package's `isDefault: true` permission
+   * set is an install-time SUGGESTION to bind it to the `everyone` position;
+   * these routes let an admin see and resolve those suggestions. The
+   * `security` service does the real gating (tenant-admin pre-check, and the
+   * confirm write runs under the audience-anchor + delegated-admin gates
+   * with the caller's execution context — never auto-bound, never system).
+   *
+   * Routes:
+   *   GET  /security/suggested-bindings?status=&packageId=   → list (reconciles first)
+   *   POST /security/suggested-bindings/:id/confirm          → create the anchor binding
+   *   POST /security/suggested-bindings/:id/dismiss          → decline the suggestion
+   */
+  async handleSecurity(path, method, _body, query, context) {
+    const service = await this.resolveService("security", context.environmentId);
+    if (!service || typeof service.listAudienceBindingSuggestions !== "function") {
+      return { handled: true, response: this.error("Security service not available", 503) };
+    }
+    const ec = context.executionContext;
+    if (!ec?.userId && !ec?.isSystem) {
+      return { handled: true, response: this.error("Authentication required", 401) };
+    }
+    const m = method.toUpperCase();
+    const parts = path.split("/").filter(Boolean);
+    if (parts[0] !== "suggested-bindings") return { handled: false };
+    try {
+      if (parts.length === 1 && m === "GET") {
+        const status = query?.status ? String(query.status) : void 0;
+        const packageId = query?.packageId ? String(query.packageId) : void 0;
+        const result = await service.listAudienceBindingSuggestions(ec, { status, packageId });
+        return { handled: true, response: this.success(result) };
+      }
+      if (parts.length === 3 && m === "POST") {
+        const id = decodeURIComponent(parts[1]);
+        if (parts[2] === "confirm") {
+          const result = await service.confirmAudienceBindingSuggestion(ec, id);
+          return { handled: true, response: this.success(result) };
+        }
+        if (parts[2] === "dismiss") {
+          const result = await service.dismissAudienceBindingSuggestion(ec, id);
+          return { handled: true, response: this.success(result) };
+        }
+      }
+      return { handled: false };
+    } catch (err) {
+      const status = typeof err?.statusCode === "number" ? err.statusCode : 500;
+      return { handled: true, response: this.error(err?.message ?? "Security operation failed", status) };
+    }
+  }
   /**
    * Handles i18n requests
    * path: sub-path after /i18n/
@@ -4727,8 +4844,16 @@ var _HttpDispatcher = class _HttpDispatcher {
         return Array.isArray(rows) ? rows : rows?.value ?? [];
       }
     };
-    const userIdFromAuth = _context?.user?.id ?? _context?.userId ?? "system";
-    const userFromAuth = _context?.user ?? { id: userIdFromAuth, name: userIdFromAuth };
+    const ec = _context?.executionContext;
+    const userFromAuth = ec?.userId ? {
+      id: ec.userId,
+      name: ec.userId,
+      email: ec.email,
+      roles: Array.isArray(ec.positions) ? ec.positions : [],
+      positions: Array.isArray(ec.positions) ? ec.positions : [],
+      permissions: Array.isArray(ec.permissions) ? ec.permissions : [],
+      tenantId: ec.tenantId
+    } : { id: "system", name: "system", roles: [], positions: [], permissions: [] };
     const actionContext = {
       record,
       user: userFromAuth,
@@ -5110,6 +5235,9 @@ var _HttpDispatcher = class _HttpDispatcher {
       if (cleanPath.startsWith("/data")) {
         return this.handleData(cleanPath.substring(5), method, body, query, context);
       }
+      if (cleanPath === "/mcp/skill" || cleanPath.startsWith("/mcp/skill?")) {
+        return this.handleMcpSkill(method, context);
+      }
       if (cleanPath === "/mcp" || cleanPath.startsWith("/mcp/") || cleanPath.startsWith("/mcp?")) {
         return this.handleMcp(body, context);
       }
@@ -5137,6 +5265,9 @@ var _HttpDispatcher = class _HttpDispatcher {
       if (cleanPath.startsWith("/notifications")) {
         return this.handleNotification(cleanPath.substring(14), method, body, query, context);
       }
+      if (cleanPath === "/security" || cleanPath.startsWith("/security/")) {
+        return this.handleSecurity(cleanPath.substring(9), method, body, query, context);
+      }
       if (cleanPath.startsWith("/packages")) {
         return this.handlePackages(cleanPath.substring(9), method, body, query, context);
       }
@@ -5855,6 +5986,14 @@ function createDispatcherPlugin(config = {}) {
       mountMcp("POST");
       mountMcp("GET");
       mountMcp("DELETE");
+      server.get(`${prefix}/mcp/skill`, async (req, res) => {
+        try {
+          const result = await dispatcher.dispatch("GET", "/mcp/skill", req.body, req.query, { request: req });
+          sendResult(result, res);
+        } catch (err) {
+          errorResponse(err, res);
+        }
+      });
       server.post(`${prefix}/keys`, async (req, res) => {
         try {
           const result = await dispatcher.dispatch("POST", "/keys", req.body, req.query, { request: req });
@@ -6159,9 +6298,7 @@ function createDispatcherPlugin(config = {}) {
       const registerActionRoutes = (base) => {
         server.post(`${base}/actions/:object/:action`, async (req, res) => {
           try {
-            const ctx2 = { request: req };
-            if (req.params?.environmentId) ctx2.environmentId = req.params.environmentId;
-            const result = await dispatcher.handleActions(`/${req.params.object}/${req.params.action}`, "POST", req.body, ctx2);
+            const result = await dispatcher.dispatch("POST", `/actions/${req.params.object}/${req.params.action}`, req.body, req.query, { request: req });
             sendResult(result, res);
           } catch (err) {
             errorResponse(err, res);
@@ -6169,9 +6306,7 @@ function createDispatcherPlugin(config = {}) {
         });
         server.post(`${base}/actions/:object/:action/:recordId`, async (req, res) => {
           try {
-            const ctx2 = { request: req };
-            if (req.params?.environmentId) ctx2.environmentId = req.params.environmentId;
-            const result = await dispatcher.handleActions(`/${req.params.object}/${req.params.action}/${req.params.recordId}`, "POST", req.body, ctx2);
+            const result = await dispatcher.dispatch("POST", `/actions/${req.params.object}/${req.params.action}/${req.params.recordId}`, req.body, req.query, { request: req });
             sendResult(result, res);
           } catch (err) {
             errorResponse(err, res);