@stackable-labs/mcp-app-extension 0.24.0 → 1.0.0

package/dist/server.js

@@ -1,8 +1,12 @@
-import { STANDALONE_CLIENT, MCP_AUTH_FILE, getToken, STANDALONE_CLIENT_AUTH_FILE } from './chunk-HOOVB46Z.js';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { IDENTITY_EVENT, ACTIVITY_EVENT, SURFACE_TARGET, PERMISSIONS, CAPABILITY_PERMISSION_MAP, ALLOWED_ICONS, UI_TAGS, UI_TAG_ATTRIBUTES, tagToComponentName } from '@stackable-labs/sdk-extension-contracts';
+import { IDENTITY_EVENT, ACTIVITY_EVENT, SURFACE_TARGET, TEMPLATE_FLAVORS, PERMISSIONS, CAPABILITY_PERMISSION_MAP, EVENT_HOOK_PERMISSION_MAP, ALLOWED_ICONS, UI_TAGS, UI_TAG_ATTRIBUTES, tagToComponentName } from '@stackable-labs/sdk-extension-contracts';
+import { readFile } from 'fs/promises';
+import { join } from 'path';
+import { homedir } from 'os';
 import { z } from 'zod';
 
+// src/server.ts
+
 // ../../sdk/extension/ai-docs/src/generated/template-content.ts
 var PATTERN_SECTIONS = [
   {
@@ -1736,8 +1740,6 @@ export const Header = () => {
 - **Use ScrollArea** \u2014 wrap content surfaces in \`<ui.ScrollArea>\` for overflow handling
 `;
 };
-
-// ../../sdk/extension/ai-docs/src/cli-commands.ts
 var DLX = "pnpm --config.dlx-cache-max-age=0 dlx";
 var CLI = {
   /** Scaffold a new extension project */
@@ -1766,11 +1768,14 @@ var CLI = {
     mcp: `${DLX} @stackable-labs/cli-app-extension@latest ai mcp`
   }
 };
-var TEMPLATE_FLAVORS = [
-  { name: "minimal", label: "Minimal", description: "Bare minimum \u2014 single surface, hello-world component" },
-  { name: "starter", label: "Starter", description: "Common patterns \u2014 store, api helpers, menu (default)" },
-  { name: "kitchen-sink", label: "Kitchen Sink", description: "Everything \u2014 every component, capability, surface, and hook" }
-];
+var TEMPLATE_FLAVOR_META = {
+  minimal: { label: "Minimal", description: "Bare minimum \u2014 single surface, hello-world component" },
+  starter: { label: "Starter", description: "Common patterns \u2014 store, api helpers, menu (default)" },
+  "kitchen-sink": { label: "Kitchen Sink", description: "Everything \u2014 every component, capability, surface, and hook" }
+};
+var TEMPLATE_FLAVOR_DETAILS = TEMPLATE_FLAVORS.map(
+  (name) => ({ name, ...TEMPLATE_FLAVOR_META[name] })
+);
 
 // ../../sdk/extension/ai-docs/src/generators/quick-start.ts
 var generateQuickStart = () => {
@@ -1962,7 +1967,7 @@ var generateCliReference = () => {
     description: "CLI commands for creating, developing, and deploying Stackable extensions",
     globs: ["packages/extension/src/**/*.tsx", "packages/extension/src/**/*.ts"]
   });
-  const templateRows = TEMPLATE_FLAVORS.map((t) => `| \`${t.name}\` | ${t.description} |`).join("\n");
+  const templateRows = TEMPLATE_FLAVOR_DETAILS.map((t) => `| \`${t.name}\` | ${t.description} |`).join("\n");
   return `${fm}
 
 # CLI Reference
@@ -3380,6 +3385,7 @@ var generateValidateExtensionCommand = () => {
     description: "Validate this extension for common errors before deploying (manifest, permissions, surfaces, imports)",
     targets: ["*"]
   });
+  const eventHookBullets = Object.keys(EVENT_HOOK_PERMISSION_MAP).map((hook) => `- \`${hook}\` \u2192 needs \`${EVENT_HOOK_PERMISSION_MAP[hook]}\` permission (also check manifest \`events\` array has matching entries)`).join("\n");
   return `${fm}
 
 # Validate Extension
@@ -3415,9 +3421,7 @@ Scan all \`.tsx\` files in \`packages/extension/src/\` for capability usage:
 - \`capabilities.actions.toast\` \u2192 needs \`actions:toast\` permission
 - \`capabilities.actions.invoke\` \u2192 needs \`actions:invoke\` permission
 - \`useExtendIdentity\` \u2192 needs \`extend:identity\` permission
-- \`useIdentityEvent\` \u2192 needs \`events:identity\` permission (also check manifest \`events\` array has matching entries)
-- \`useMessagingEvent\` \u2192 needs \`events:messaging\` permission (also check manifest \`events\` array has matching entries)
-- \`useActivityEvent\` \u2192 needs \`events:activity\` permission (also check manifest \`events\` array has matching entries)
+${eventHookBullets}
 
 Report:
 - **Missing permissions:** capabilities used in code but not declared in manifest
@@ -4431,6 +4435,64 @@ pair(EXAMPLE_SNIPPETS, EXAMPLE_SNIPPETS2);
 pair(CAPABILITY_SNIPPETS, CAPABILITY_SNIPPETS2);
 pair(EVENT_SNIPPETS, EVENT_SNIPPETS2);
 
+// ../../lib/contracts/src/custom.ts
+var CUSTOM_ROLE = {
+  SUPER_ADMIN: "super_admin"
+};
+new Set(Object.values(CUSTOM_ROLE));
+
+// ../../lib/utils-auth/src/constants.ts
+var STANDALONE_CLIENT_DATA = {
+  CLI: { name: "@stackable-labs/cli-app-extension", authFile: "cli-auth.json" },
+  MCP: { name: "@stackable-labs/mcp-app-extension", authFile: "mcp-auth.json" }
+};
+var STANDALONE_CLIENT = Object.fromEntries(
+  Object.entries(STANDALONE_CLIENT_DATA).map(([k, v]) => [k, v.name])
+);
+var STANDALONE_CLIENT_AUTH_FILE = Object.fromEntries(
+  Object.entries(STANDALONE_CLIENT_DATA).map(([k, v]) => [k, v.authFile])
+);
+Object.values(STANDALONE_CLIENT);
+
+// ../../lib/utils-auth/src/index.ts
+var AUTH_DIR = join(homedir(), ".stackable");
+join(AUTH_DIR, STANDALONE_CLIENT_AUTH_FILE.CLI);
+var MCP_AUTH_FILE = join(AUTH_DIR, STANDALONE_CLIENT_AUTH_FILE.MCP);
+var resolveAuthFile = (filename) => join(AUTH_DIR, filename ?? STANDALONE_CLIENT_AUTH_FILE.CLI);
+var readAuthState = async (filename) => {
+  try {
+    const content = await readFile(resolveAuthFile(filename), "utf8");
+    return JSON.parse(content);
+  } catch {
+    return null;
+  }
+};
+var decodeJwtPayload = (token) => {
+  try {
+    const [, payload] = token.split(".");
+    if (!payload) {
+      return null;
+    }
+    const json = Buffer.from(payload, "base64url").toString("utf8");
+    return JSON.parse(json);
+  } catch {
+    return null;
+  }
+};
+var getToken = async (filename) => {
+  const state = await readAuthState(filename);
+  if (!state) {
+    throw new Error("Not authenticated. Run `stackable-app-extension auth login` first.");
+  }
+  const payload = decodeJwtPayload(state.token);
+  if (payload?.exp && typeof payload.exp === "number") {
+    if (Date.now() >= payload.exp * 1e3) {
+      throw new Error("Session expired. Run `stackable-app-extension auth login` to re-authenticate.");
+    }
+  }
+  return state.token;
+};
+
 // package.json
 var package_default = {
   version: "0.0.0"};
@@ -4454,9 +4516,13 @@ var createMcpServer = (options = {}) => {
       return await getToken(STANDALONE_CLIENT_AUTH_FILE.MCP);
     } catch {
     }
-    const { performOAuthFlow } = await import('./auth-DWIWIJNN.js');
+    if (!options.performOAuthFlow) {
+      throw new Error(
+        "No auth token available. Provide authContext (server) or performOAuthFlow (CLI)."
+      );
+    }
     const MCP_API_BASE_URL = process.env.MCP_API_BASE_URL ?? DEFAULT_MCP_API_BASE_URL;
-    return performOAuthFlow(`${MCP_API_BASE_URL}/.well-known/oauth-authorization-server`);
+    return options.performOAuthFlow(`${MCP_API_BASE_URL}/.well-known/oauth-authorization-server`);
   };
   const authHeaders = (token) => ({
     authorization: `Bearer ${token}`,
@@ -4593,12 +4659,7 @@ ${errors.map((e) => `- ${e}`).join("\n")}`);
         usedPermissions.add(permission);
       }
     }
-    const eventHookMap = {
-      useIdentityEvent: "events:identity",
-      useMessagingEvent: "events:messaging",
-      useActivityEvent: "events:activity"
-    };
-    for (const [hook, permission] of Object.entries(eventHookMap)) {
+    for (const [hook, permission] of Object.entries(EVENT_HOOK_PERMISSION_MAP)) {
       if (allSource.includes(hook)) {
         usedPermissions.add(permission);
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackable-labs/mcp-app-extension",
-  "version": "0.24.0",
+  "version": "1.0.0",
   "type": "module",
   "bin": {
     "mcp-app-extension": "./dist/index.js"