@frontmcp/adapters 1.8.4 → 1.8.5

package/esm/index.mjs

@@ -420,11 +420,16 @@ function assertRequestHasCredential(tool2, url, headers) {
 }
 function validateSecurityConfiguration(tools, options) {
   const result = validateCredentialSources(tools, options);
-  const schemesInInput = options.securitySchemesInInput ?? [];
-  if (options.generateOptions?.includeSecurityInInput !== true && schemesInInput.length > 0) {
+  const schemesInInput = inputSecuritySchemes(options);
+  if (schemesInInput !== "all" && schemesInInput.size > 0) {
+    const include = options.generateOptions?.includeSecurityInInput;
+    const sources = [
+      (options.securitySchemesInInput?.length ?? 0) > 0 ? "securitySchemesInInput" : void 0,
+      Array.isArray(include) && include.length > 0 ? "an includeSecurityInInput list" : void 0
+    ].filter((source) => source !== void 0);
     result.securityRiskScore = "high";
     result.warnings.push(
-      `SECURITY WARNING: securitySchemesInInput is enabled. The model provides the credential for security schemes ${schemesInInput.join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
+      `SECURITY WARNING: ${sources.join(" and ")} ${sources.length > 1 ? "are" : "is"} enabled. The model provides the credential for security schemes ${[...schemesInInput].join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
     );
   }
   return result;
@@ -437,8 +442,8 @@ function validateCredentialSources(tools, options) {
     securityRiskScore: "low"
   };
   const securitySchemes = describeSecuritySchemes(tools);
-  const includeSecurityInInput = options.generateOptions?.includeSecurityInInput ?? false;
-  if (includeSecurityInInput) {
+  const inputSchemes = inputSecuritySchemes(options);
+  if (inputSchemes === "all") {
     result.securityRiskScore = "high";
     result.warnings.push(
       "SECURITY WARNING: includeSecurityInInput is enabled. Users will provide authentication directly in tool inputs (used for a scheme when the server supplies none). This increases security risk as credentials may be logged or exposed."
@@ -459,7 +464,7 @@ function validateCredentialSources(tools, options) {
     );
     return withPassthroughRisk(result, securitySchemes, options);
   }
-  const schemesInInput = new Set(options.securitySchemesInInput || []);
+  const schemesInInput = inputSchemes;
   if (options.authProviderMapper || schemesInInput.size > 0) {
     result.securityRiskScore = "low";
     const passthroughFallback = [];
@@ -552,8 +557,14 @@ async function resolveToolSecurity(tool2, ctx, options, request = {}) {
     cookies: { ...fromInput.cookies, ...resolved.cookies }
   };
 }
+function inputSecuritySchemes(options) {
+  const include = options.generateOptions?.includeSecurityInInput;
+  if (include === true) return "all";
+  return /* @__PURE__ */ new Set([...Array.isArray(include) ? include : [], ...options.securitySchemesInInput ?? []]);
+}
 function isInputScheme(scheme, options) {
-  return options.generateOptions?.includeSecurityInInput === true || (options.securitySchemesInInput ?? []).includes(scheme);
+  const schemes = inputSecuritySchemes(options);
+  return schemes === "all" || schemes.has(scheme);
 }
 function inputCredentialContext(security, value) {
   const bare = value.replace(/^(?:bearer|basic)\s+/i, "");
@@ -1341,8 +1352,9 @@ var OpenapiAdapter = class extends DynamicAdapter {
     if (!this.generator) {
       this.generator = await this.initializeGenerator();
     }
-    const hasPerSchemeControl = this.options.securitySchemesInInput && this.options.securitySchemesInInput.length > 0;
-    const includeSecurityInInput = hasPerSchemeControl || (this.options.generateOptions?.includeSecurityInInput ?? false);
+    const inputSchemes = inputSecuritySchemes(this.options);
+    const hasPerSchemeControl = inputSchemes !== "all" && inputSchemes.size > 0;
+    const includeSecurityInInput = inputSchemes === "all" || hasPerSchemeControl;
     let openapiTools = await this.generator.generateTools({
       includeOperations: this.options.generateOptions?.includeOperations,
       excludeOperations: this.options.generateOptions?.excludeOperations,
@@ -1358,7 +1370,7 @@ var OpenapiAdapter = class extends DynamicAdapter {
       formatResolvers: this.options.generateOptions?.formatResolvers
     });
     if (hasPerSchemeControl) {
-      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2));
+      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2, inputSchemes));
     }
     const validation = validateSecurityConfiguration(openapiTools, this.options);
     this.logger.info("Security Analysis:");
@@ -1669,12 +1681,12 @@ ${opDescription}`;
     };
   }
   /**
-   * Filter security schemes in tool input based on securitySchemesInInput option.
-   * Removes security inputs that should be resolved from context instead of user input.
+   * Filter security schemes in tool input to the ones named for it (`securitySchemesInInput`, or an
+   * `includeSecurityInInput` list). Removes security inputs that should be resolved from context
+   * instead of user input.
    * @private
    */
-  filterSecuritySchemes(tool2) {
-    const allowedSchemes = new Set(this.options.securitySchemesInInput || []);
+  filterSecuritySchemes(tool2, allowedSchemes) {
     if (allowedSchemes.size === 0) return tool2;
     const schemesToRemove = /* @__PURE__ */ new Set();
     const inputKeysToRemove = /* @__PURE__ */ new Set();

package/esm/openapi/index.mjs

@@ -420,11 +420,16 @@ function assertRequestHasCredential(tool2, url, headers) {
 }
 function validateSecurityConfiguration(tools, options) {
   const result = validateCredentialSources(tools, options);
-  const schemesInInput = options.securitySchemesInInput ?? [];
-  if (options.generateOptions?.includeSecurityInInput !== true && schemesInInput.length > 0) {
+  const schemesInInput = inputSecuritySchemes(options);
+  if (schemesInInput !== "all" && schemesInInput.size > 0) {
+    const include = options.generateOptions?.includeSecurityInInput;
+    const sources = [
+      (options.securitySchemesInInput?.length ?? 0) > 0 ? "securitySchemesInInput" : void 0,
+      Array.isArray(include) && include.length > 0 ? "an includeSecurityInInput list" : void 0
+    ].filter((source) => source !== void 0);
     result.securityRiskScore = "high";
     result.warnings.push(
-      `SECURITY WARNING: securitySchemesInInput is enabled. The model provides the credential for security schemes ${schemesInInput.join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
+      `SECURITY WARNING: ${sources.join(" and ")} ${sources.length > 1 ? "are" : "is"} enabled. The model provides the credential for security schemes ${[...schemesInInput].join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
     );
   }
   return result;
@@ -437,8 +442,8 @@ function validateCredentialSources(tools, options) {
     securityRiskScore: "low"
   };
   const securitySchemes = describeSecuritySchemes(tools);
-  const includeSecurityInInput = options.generateOptions?.includeSecurityInInput ?? false;
-  if (includeSecurityInInput) {
+  const inputSchemes = inputSecuritySchemes(options);
+  if (inputSchemes === "all") {
     result.securityRiskScore = "high";
     result.warnings.push(
       "SECURITY WARNING: includeSecurityInInput is enabled. Users will provide authentication directly in tool inputs (used for a scheme when the server supplies none). This increases security risk as credentials may be logged or exposed."
@@ -459,7 +464,7 @@ function validateCredentialSources(tools, options) {
     );
     return withPassthroughRisk(result, securitySchemes, options);
   }
-  const schemesInInput = new Set(options.securitySchemesInInput || []);
+  const schemesInInput = inputSchemes;
   if (options.authProviderMapper || schemesInInput.size > 0) {
     result.securityRiskScore = "low";
     const passthroughFallback = [];
@@ -552,8 +557,14 @@ async function resolveToolSecurity(tool2, ctx, options, request = {}) {
     cookies: { ...fromInput.cookies, ...resolved.cookies }
   };
 }
+function inputSecuritySchemes(options) {
+  const include = options.generateOptions?.includeSecurityInInput;
+  if (include === true) return "all";
+  return /* @__PURE__ */ new Set([...Array.isArray(include) ? include : [], ...options.securitySchemesInInput ?? []]);
+}
 function isInputScheme(scheme, options) {
-  return options.generateOptions?.includeSecurityInInput === true || (options.securitySchemesInInput ?? []).includes(scheme);
+  const schemes = inputSecuritySchemes(options);
+  return schemes === "all" || schemes.has(scheme);
 }
 function inputCredentialContext(security, value) {
   const bare = value.replace(/^(?:bearer|basic)\s+/i, "");
@@ -1341,8 +1352,9 @@ var OpenapiAdapter = class extends DynamicAdapter {
     if (!this.generator) {
       this.generator = await this.initializeGenerator();
     }
-    const hasPerSchemeControl = this.options.securitySchemesInInput && this.options.securitySchemesInInput.length > 0;
-    const includeSecurityInInput = hasPerSchemeControl || (this.options.generateOptions?.includeSecurityInInput ?? false);
+    const inputSchemes = inputSecuritySchemes(this.options);
+    const hasPerSchemeControl = inputSchemes !== "all" && inputSchemes.size > 0;
+    const includeSecurityInInput = inputSchemes === "all" || hasPerSchemeControl;
     let openapiTools = await this.generator.generateTools({
       includeOperations: this.options.generateOptions?.includeOperations,
       excludeOperations: this.options.generateOptions?.excludeOperations,
@@ -1358,7 +1370,7 @@ var OpenapiAdapter = class extends DynamicAdapter {
       formatResolvers: this.options.generateOptions?.formatResolvers
     });
     if (hasPerSchemeControl) {
-      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2));
+      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2, inputSchemes));
     }
     const validation = validateSecurityConfiguration(openapiTools, this.options);
     this.logger.info("Security Analysis:");
@@ -1669,12 +1681,12 @@ ${opDescription}`;
     };
   }
   /**
-   * Filter security schemes in tool input based on securitySchemesInInput option.
-   * Removes security inputs that should be resolved from context instead of user input.
+   * Filter security schemes in tool input to the ones named for it (`securitySchemesInInput`, or an
+   * `includeSecurityInInput` list). Removes security inputs that should be resolved from context
+   * instead of user input.
    * @private
    */
-  filterSecuritySchemes(tool2) {
-    const allowedSchemes = new Set(this.options.securitySchemesInInput || []);
+  filterSecuritySchemes(tool2, allowedSchemes) {
     if (allowedSchemes.size === 0) return tool2;
     const schemesToRemove = /* @__PURE__ */ new Set();
     const inputKeysToRemove = /* @__PURE__ */ new Set();

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -64,15 +64,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.8.4",
-    "@frontmcp/di": "1.8.4",
-    "@frontmcp/sdk": "1.8.4",
-    "@frontmcp/utils": "1.8.4",
+    "@frontmcp/auth": "1.8.5",
+    "@frontmcp/di": "1.8.5",
+    "@frontmcp/sdk": "1.8.5",
+    "@frontmcp/utils": "1.8.5",
     "js-yaml": "^4.1.0",
     "mcp-from-openapi": "2.8.0",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.8.4"
+    "@frontmcp/lazy-zod": "1.8.5"
   }
 }

package/index.js

@@ -452,11 +452,16 @@ function assertRequestHasCredential(tool2, url, headers) {
 }
 function validateSecurityConfiguration(tools, options) {
   const result = validateCredentialSources(tools, options);
-  const schemesInInput = options.securitySchemesInInput ?? [];
-  if (options.generateOptions?.includeSecurityInInput !== true && schemesInInput.length > 0) {
+  const schemesInInput = inputSecuritySchemes(options);
+  if (schemesInInput !== "all" && schemesInInput.size > 0) {
+    const include = options.generateOptions?.includeSecurityInInput;
+    const sources = [
+      (options.securitySchemesInInput?.length ?? 0) > 0 ? "securitySchemesInInput" : void 0,
+      Array.isArray(include) && include.length > 0 ? "an includeSecurityInInput list" : void 0
+    ].filter((source) => source !== void 0);
     result.securityRiskScore = "high";
     result.warnings.push(
-      `SECURITY WARNING: securitySchemesInInput is enabled. The model provides the credential for security schemes ${schemesInInput.join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
+      `SECURITY WARNING: ${sources.join(" and ")} ${sources.length > 1 ? "are" : "is"} enabled. The model provides the credential for security schemes ${[...schemesInInput].join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
     );
   }
   return result;
@@ -469,8 +474,8 @@ function validateCredentialSources(tools, options) {
     securityRiskScore: "low"
   };
   const securitySchemes = describeSecuritySchemes(tools);
-  const includeSecurityInInput = options.generateOptions?.includeSecurityInInput ?? false;
-  if (includeSecurityInInput) {
+  const inputSchemes = inputSecuritySchemes(options);
+  if (inputSchemes === "all") {
     result.securityRiskScore = "high";
     result.warnings.push(
       "SECURITY WARNING: includeSecurityInInput is enabled. Users will provide authentication directly in tool inputs (used for a scheme when the server supplies none). This increases security risk as credentials may be logged or exposed."
@@ -491,7 +496,7 @@ function validateCredentialSources(tools, options) {
     );
     return withPassthroughRisk(result, securitySchemes, options);
   }
-  const schemesInInput = new Set(options.securitySchemesInInput || []);
+  const schemesInInput = inputSchemes;
   if (options.authProviderMapper || schemesInInput.size > 0) {
     result.securityRiskScore = "low";
     const passthroughFallback = [];
@@ -584,8 +589,14 @@ async function resolveToolSecurity(tool2, ctx, options, request = {}) {
     cookies: { ...fromInput.cookies, ...resolved.cookies }
   };
 }
+function inputSecuritySchemes(options) {
+  const include = options.generateOptions?.includeSecurityInInput;
+  if (include === true) return "all";
+  return /* @__PURE__ */ new Set([...Array.isArray(include) ? include : [], ...options.securitySchemesInInput ?? []]);
+}
 function isInputScheme(scheme, options) {
-  return options.generateOptions?.includeSecurityInInput === true || (options.securitySchemesInInput ?? []).includes(scheme);
+  const schemes = inputSecuritySchemes(options);
+  return schemes === "all" || schemes.has(scheme);
 }
 function inputCredentialContext(security, value) {
   const bare = value.replace(/^(?:bearer|basic)\s+/i, "");
@@ -1373,8 +1384,9 @@ var OpenapiAdapter = class extends import_sdk5.DynamicAdapter {
     if (!this.generator) {
       this.generator = await this.initializeGenerator();
     }
-    const hasPerSchemeControl = this.options.securitySchemesInInput && this.options.securitySchemesInInput.length > 0;
-    const includeSecurityInInput = hasPerSchemeControl || (this.options.generateOptions?.includeSecurityInInput ?? false);
+    const inputSchemes = inputSecuritySchemes(this.options);
+    const hasPerSchemeControl = inputSchemes !== "all" && inputSchemes.size > 0;
+    const includeSecurityInInput = inputSchemes === "all" || hasPerSchemeControl;
     let openapiTools = await this.generator.generateTools({
       includeOperations: this.options.generateOptions?.includeOperations,
       excludeOperations: this.options.generateOptions?.excludeOperations,
@@ -1390,7 +1402,7 @@ var OpenapiAdapter = class extends import_sdk5.DynamicAdapter {
       formatResolvers: this.options.generateOptions?.formatResolvers
     });
     if (hasPerSchemeControl) {
-      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2));
+      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2, inputSchemes));
     }
     const validation = validateSecurityConfiguration(openapiTools, this.options);
     this.logger.info("Security Analysis:");
@@ -1701,12 +1713,12 @@ ${opDescription}`;
     };
   }
   /**
-   * Filter security schemes in tool input based on securitySchemesInInput option.
-   * Removes security inputs that should be resolved from context instead of user input.
+   * Filter security schemes in tool input to the ones named for it (`securitySchemesInInput`, or an
+   * `includeSecurityInInput` list). Removes security inputs that should be resolved from context
+   * instead of user input.
    * @private
    */
-  filterSecuritySchemes(tool2) {
-    const allowedSchemes = new Set(this.options.securitySchemesInInput || []);
+  filterSecuritySchemes(tool2, allowedSchemes) {
     if (allowedSchemes.size === 0) return tool2;
     const schemesToRemove = /* @__PURE__ */ new Set();
     const inputKeysToRemove = /* @__PURE__ */ new Set();

package/openapi/index.js

@@ -452,11 +452,16 @@ function assertRequestHasCredential(tool2, url, headers) {
 }
 function validateSecurityConfiguration(tools, options) {
   const result = validateCredentialSources(tools, options);
-  const schemesInInput = options.securitySchemesInInput ?? [];
-  if (options.generateOptions?.includeSecurityInInput !== true && schemesInInput.length > 0) {
+  const schemesInInput = inputSecuritySchemes(options);
+  if (schemesInInput !== "all" && schemesInInput.size > 0) {
+    const include = options.generateOptions?.includeSecurityInInput;
+    const sources = [
+      (options.securitySchemesInInput?.length ?? 0) > 0 ? "securitySchemesInInput" : void 0,
+      Array.isArray(include) && include.length > 0 ? "an includeSecurityInInput list" : void 0
+    ].filter((source) => source !== void 0);
     result.securityRiskScore = "high";
     result.warnings.push(
-      `SECURITY WARNING: securitySchemesInInput is enabled. The model provides the credential for security schemes ${schemesInInput.join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
+      `SECURITY WARNING: ${sources.join(" and ")} ${sources.length > 1 ? "are" : "is"} enabled. The model provides the credential for security schemes ${[...schemesInInput].join(", ")} in tool inputs, used when the server supplies none. Credentials may be logged or exposed, and the model chooses whose account a call uses.`
     );
   }
   return result;
@@ -469,8 +474,8 @@ function validateCredentialSources(tools, options) {
     securityRiskScore: "low"
   };
   const securitySchemes = describeSecuritySchemes(tools);
-  const includeSecurityInInput = options.generateOptions?.includeSecurityInInput ?? false;
-  if (includeSecurityInInput) {
+  const inputSchemes = inputSecuritySchemes(options);
+  if (inputSchemes === "all") {
     result.securityRiskScore = "high";
     result.warnings.push(
       "SECURITY WARNING: includeSecurityInInput is enabled. Users will provide authentication directly in tool inputs (used for a scheme when the server supplies none). This increases security risk as credentials may be logged or exposed."
@@ -491,7 +496,7 @@ function validateCredentialSources(tools, options) {
     );
     return withPassthroughRisk(result, securitySchemes, options);
   }
-  const schemesInInput = new Set(options.securitySchemesInInput || []);
+  const schemesInInput = inputSchemes;
   if (options.authProviderMapper || schemesInInput.size > 0) {
     result.securityRiskScore = "low";
     const passthroughFallback = [];
@@ -584,8 +589,14 @@ async function resolveToolSecurity(tool2, ctx, options, request = {}) {
     cookies: { ...fromInput.cookies, ...resolved.cookies }
   };
 }
+function inputSecuritySchemes(options) {
+  const include = options.generateOptions?.includeSecurityInInput;
+  if (include === true) return "all";
+  return /* @__PURE__ */ new Set([...Array.isArray(include) ? include : [], ...options.securitySchemesInInput ?? []]);
+}
 function isInputScheme(scheme, options) {
-  return options.generateOptions?.includeSecurityInInput === true || (options.securitySchemesInInput ?? []).includes(scheme);
+  const schemes = inputSecuritySchemes(options);
+  return schemes === "all" || schemes.has(scheme);
 }
 function inputCredentialContext(security, value) {
   const bare = value.replace(/^(?:bearer|basic)\s+/i, "");
@@ -1373,8 +1384,9 @@ var OpenapiAdapter = class extends import_sdk5.DynamicAdapter {
     if (!this.generator) {
       this.generator = await this.initializeGenerator();
     }
-    const hasPerSchemeControl = this.options.securitySchemesInInput && this.options.securitySchemesInInput.length > 0;
-    const includeSecurityInInput = hasPerSchemeControl || (this.options.generateOptions?.includeSecurityInInput ?? false);
+    const inputSchemes = inputSecuritySchemes(this.options);
+    const hasPerSchemeControl = inputSchemes !== "all" && inputSchemes.size > 0;
+    const includeSecurityInInput = inputSchemes === "all" || hasPerSchemeControl;
     let openapiTools = await this.generator.generateTools({
       includeOperations: this.options.generateOptions?.includeOperations,
       excludeOperations: this.options.generateOptions?.excludeOperations,
@@ -1390,7 +1402,7 @@ var OpenapiAdapter = class extends import_sdk5.DynamicAdapter {
       formatResolvers: this.options.generateOptions?.formatResolvers
     });
     if (hasPerSchemeControl) {
-      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2));
+      openapiTools = openapiTools.map((tool2) => this.filterSecuritySchemes(tool2, inputSchemes));
     }
     const validation = validateSecurityConfiguration(openapiTools, this.options);
     this.logger.info("Security Analysis:");
@@ -1701,12 +1713,12 @@ ${opDescription}`;
     };
   }
   /**
-   * Filter security schemes in tool input based on securitySchemesInInput option.
-   * Removes security inputs that should be resolved from context instead of user input.
+   * Filter security schemes in tool input to the ones named for it (`securitySchemesInInput`, or an
+   * `includeSecurityInInput` list). Removes security inputs that should be resolved from context
+   * instead of user input.
    * @private
    */
-  filterSecuritySchemes(tool2) {
-    const allowedSchemes = new Set(this.options.securitySchemesInInput || []);
+  filterSecuritySchemes(tool2, allowedSchemes) {
     if (allowedSchemes.size === 0) return tool2;
     const schemesToRemove = /* @__PURE__ */ new Set();
     const inputKeysToRemove = /* @__PURE__ */ new Set();

package/openapi/openapi.adapter.d.ts

@@ -63,8 +63,9 @@ export default class OpenapiAdapter extends DynamicAdapter<OpenApiAdapterOptions
      */
     private applyInputTransforms;
     /**
-     * Filter security schemes in tool input based on securitySchemesInInput option.
-     * Removes security inputs that should be resolved from context instead of user input.
+     * Filter security schemes in tool input to the ones named for it (`securitySchemesInInput`, or an
+     * `includeSecurityInInput` list). Removes security inputs that should be resolved from context
+     * instead of user input.
      * @private
      */
     private filterSecuritySchemes;

package/openapi/openapi.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.adapter.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,cAAc,EAAE,KAAK,uBAAuB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAK3G,OAAO,EAIL,KAAK,qBAAqB,EAQ3B,MAAM,iBAAiB,CAAC;AAwBzB,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,cAAc,CAAC,qBAAqB,CAAC;IAC/E,OAAO,CAAC,SAAS,CAAC,CAAuB;IACzC,OAAO,CAAC,MAAM,CAAiB;IACxB,OAAO,EAAE,qBAAqB,CAAC;IACtC,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,eAAe,CAA0D;IACjF,OAAO,CAAC,YAAY,CAAoC;gBAE5C,OAAO,EAAE,qBAAqB;IAc1C;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAIjC,KAAK,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAsH/C;;;OAGG;IACH;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;YAId,mBAAmB;IA4BjC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IA0C5B;;;OAGG;IACH,OAAO,CAAC,cAAc;IAMtB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA6D7B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsC3B;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAwBhC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAoD5B;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IA2D7B;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IA0C7B;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAkBnC;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAoBpC;;;;OAIG;YACW,wBAAwB;IAiFtC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAgBlC;;;OAGG;IACH,OAAO,CAAC,0CAA0C;IA+BlD;;;OAGG;IACH,OAAO,CAAC,2CAA2C;IAyCnD;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,MAAM,IAAI;IAO3E;;;;OAIG;IACH,YAAY,IAAI,IAAI;IA6CpB;;OAEG;IACH,WAAW,IAAI,IAAI;CAOpB"}
+{"version":3,"file":"openapi.adapter.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,cAAc,EAAE,KAAK,uBAAuB,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAS3G,OAAO,EAIL,KAAK,qBAAqB,EAQ3B,MAAM,iBAAiB,CAAC;AAwBzB,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,cAAc,CAAC,qBAAqB,CAAC;IAC/E,OAAO,CAAC,SAAS,CAAC,CAAuB;IACzC,OAAO,CAAC,MAAM,CAAiB;IACxB,OAAO,EAAE,qBAAqB,CAAC;IACtC,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,eAAe,CAA0D;IACjF,OAAO,CAAC,YAAY,CAAoC;gBAE5C,OAAO,EAAE,qBAAqB;IAc1C;;OAEG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAIjC,KAAK,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAuH/C;;;OAGG;IACH;;;;;;;;;;OAUG;IACH,OAAO,CAAC,oBAAoB;YAId,mBAAmB;IA4BjC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IA0C5B;;;OAGG;IACH,OAAO,CAAC,cAAc;IAMtB;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IA6D7B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAsC3B;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IAwBhC;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAoD5B;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IA0D7B;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IA0C7B;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAkBnC;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAoBpC;;;;OAIG;YACW,wBAAwB;IAiFtC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAgBlC;;;OAGG;IACH,OAAO,CAAC,0CAA0C;IA+BlD;;;OAGG;IACH,OAAO,CAAC,2CAA2C;IAyCnD;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,MAAM,IAAI;IAO3E;;;;OAIG;IACH,YAAY,IAAI,IAAI;IA6CpB;;OAEG;IACH,WAAW,IAAI,IAAI;CAOpB"}

package/openapi/openapi.security.d.ts

@@ -93,4 +93,10 @@ export interface ResolveToolSecurityRequest {
  * @throws Error if security cannot be resolved
  */
 export declare function resolveToolSecurity(tool: McpOpenAPITool, ctx: FrontMcpContext, options: Pick<OpenApiAdapterOptions, 'securityResolver' | 'authProviderMapper' | 'staticAuth' | 'passthroughCallerToken' | 'generateOptions' | 'securitySchemesInInput'>, request?: ResolveToolSecurityRequest): Promise<ResolvedSecurity>;
+/**
+ * The security schemes whose credential the tool input carries: `'all'` for
+ * `generateOptions.includeSecurityInInput: true`, otherwise the schemes an `includeSecurityInInput`
+ * list and `securitySchemesInInput` name (possibly none).
+ */
+export declare function inputSecuritySchemes(options: Pick<OpenApiAdapterOptions, 'generateOptions' | 'securitySchemesInInput'>): 'all' | ReadonlySet<string>;
 //# sourceMappingURL=openapi.security.d.ts.map

package/openapi/openapi.security.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.security.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.security.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EAEnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAErB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAErE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,IAAI,CACX,qBAAqB,EACrB,kBAAkB,GAAG,oBAAoB,GAAG,YAAY,GAAG,wBAAwB,CACpF,GACA,OAAO,CAAC,eAAe,CAAC,CA+G1B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAY3E;AA8DD;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,cAAc,EAAE,EACvB,eAAe,EAAE,MAAM,EAAE,GACxB,MAAM,CAgCR;AAqED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAOpG;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,cAAc,EAAE,EACvB,OAAO,EAAE,IAAI,CACX,qBAAqB,EACnB,kBAAkB,GAClB,oBAAoB,GACpB,YAAY,GACZ,iBAAiB,GACjB,wBAAwB,GACxB,wBAAwB,GACxB,mBAAmB,GACnB,eAAe,CAClB,GACA,wBAAwB,CAY1B;AAkLD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,IAAI,CACX,qBAAqB,EACnB,kBAAkB,GAClB,oBAAoB,GACpB,YAAY,GACZ,wBAAwB,GACxB,iBAAiB,GACjB,wBAAwB,CAC3B,EACD,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,gBAAgB,CAAC,CA8C3B"}
+{"version":3,"file":"openapi.security.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.security.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,cAAc,EAEnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EAErB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAErE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,IAAI,CACX,qBAAqB,EACrB,kBAAkB,GAAG,oBAAoB,GAAG,YAAY,GAAG,wBAAwB,CACpF,GACA,OAAO,CAAC,eAAe,CAAC,CA+G1B;AAwBD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAY3E;AA8DD;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,cAAc,EAAE,EACvB,eAAe,EAAE,MAAM,EAAE,GACxB,MAAM,CAgCR;AAqED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAOpG;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,cAAc,EAAE,EACvB,OAAO,EAAE,IAAI,CACX,qBAAqB,EACnB,kBAAkB,GAClB,oBAAoB,GACpB,YAAY,GACZ,iBAAiB,GACjB,wBAAwB,GACxB,wBAAwB,GACxB,mBAAmB,GACnB,eAAe,CAClB,GACA,wBAAwB,CAiB1B;AAmLD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE,IAAI,CACX,qBAAqB,EACnB,kBAAkB,GAClB,oBAAoB,GACpB,YAAY,GACZ,wBAAwB,GACxB,iBAAiB,GACjB,wBAAwB,CAC3B,EACD,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,gBAAgB,CAAC,CA8C3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,GAAG,wBAAwB,CAAC,GACjF,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAI7B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.8.4",
+  "version": "1.8.5",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -64,15 +64,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.8.4",
-    "@frontmcp/di": "1.8.4",
-    "@frontmcp/sdk": "1.8.4",
-    "@frontmcp/utils": "1.8.4",
+    "@frontmcp/auth": "1.8.5",
+    "@frontmcp/di": "1.8.5",
+    "@frontmcp/sdk": "1.8.5",
+    "@frontmcp/utils": "1.8.5",
     "js-yaml": "^4.1.0",
     "mcp-from-openapi": "2.8.0",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.8.4"
+    "@frontmcp/lazy-zod": "1.8.5"
   }
 }