@frontmcp/auth 1.2.1 → 1.4.0

package/authorities/authorities.profiles.d.ts

@@ -4,7 +4,8 @@
  * Types for JWT claims mapping and pre-registered authority profiles.
  * Configured at server/app level via @FrontMcp({ authorities: { ... } })
  */
-import type { AuthoritiesPolicyMetadata } from './authorities.types';
+import type { ClaimsResolverFn } from './authorities.context';
+import type { AuthoritiesEvaluator, AuthoritiesPolicyMetadata, RelationshipResolver } from './authorities.types';
 /**
  * Maps IdP-specific JWT claim paths to standard authority fields.
  * Each value is a dot-path into the JWT claims object.
@@ -60,8 +61,20 @@ export interface AuthoritiesScopeMapping {
 export interface AuthoritiesConfig {
     /** JWT claims mapping for your IdP */
     claimsMapping?: AuthoritiesClaimsMapping;
+    /**
+     * Custom function to extract roles/permissions/claims from AuthInfo.
+     * Takes precedence over `claimsMapping` when provided.
+     */
+    claimsResolver?: ClaimsResolverFn;
     /** Pre-registered named authority profiles */
     profiles?: Record<string, AuthoritiesPolicyMetadata>;
+    /**
+     * Relationship resolver for ReBAC checks.
+     * Required when using `relationships` in policies.
+     */
+    relationshipResolver?: RelationshipResolver;
+    /** Custom evaluators for the `custom.*` field in policies (key = evaluator name). */
+    evaluators?: Record<string, AuthoritiesEvaluator>;
     /** Map authority denials to OAuth scope challenges */
     scopeMapping?: AuthoritiesScopeMapping;
     /**

package/authorities/authorities.profiles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorities.profiles.d.ts","sourceRoot":"","sources":["../../src/authorities/authorities.profiles.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAMrE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAMD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACrD,sDAAsD;IACtD,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,kCAAkC,EAAE,eAAe,EAAE,CAAC;CACtE"}
+{"version":3,"file":"authorities.profiles.d.ts","sourceRoot":"","sources":["../../src/authorities/authorities.profiles.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAMjH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAMD;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjC,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACrC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,sCAAsC;IACtC,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC;;;OAGG;IACH,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACrD;;;OAGG;IACH,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,sDAAsD;IACtD,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,kCAAkC,EAAE,eAAe,EAAE,CAAC;CACtE"}

package/authorization/dcr-client.registry.d.ts

@@ -0,0 +1,83 @@
+/** A registered OAuth client record held by the local AS. */
+export interface RegisteredClient {
+    client_id: string;
+    client_secret?: string;
+    token_endpoint_auth_method: 'none' | 'client_secret_basic' | 'client_secret_post' | 'private_key_jwt' | 'tls_client_auth';
+    grant_types: string[];
+    response_types: string[];
+    redirect_uris: string[];
+    client_name?: string;
+    scope?: string;
+    /** Seconds since epoch when the client was registered/seeded. */
+    created_at: number;
+    /** True for clients minted by DCR (vs pre-registered trusted clients). */
+    dev: boolean;
+    /** True for clients declared via `dcr.clients` (seeded at startup). */
+    preRegistered?: boolean;
+}
+/** Shape of a pre-registered client as declared in `dcr.clients`. */
+export interface PreRegisteredClientInput {
+    clientId: string;
+    clientSecret?: string;
+    redirectUris: string[];
+    clientName?: string;
+    tokenEndpointAuthMethod?: 'none' | 'client_secret_basic' | 'client_secret_post';
+    grantTypes?: Array<'authorization_code' | 'refresh_token'>;
+    responseTypes?: Array<'code'>;
+    scope?: string;
+}
+/** Resolved DCR configuration consumed by the registry. */
+export interface DcrRegistryConfig {
+    /**
+     * Whether DCR (`POST /oauth/register`) is active. `undefined` means "defer to
+     * the historical environment guard" (on in dev, off in production), which the
+     * register flow resolves; the registry treats `undefined` as "not explicitly
+     * disabled".
+     */
+    enabled?: boolean;
+    allowedRedirectUris?: string[];
+    allowedClientIds?: string[];
+    initialAccessToken?: string;
+    clients?: PreRegisteredClientInput[];
+}
+/**
+ * Local-AS DCR client registry. Seeded from `dcr.clients` at construction and
+ * mutated by `POST /oauth/register` at runtime.
+ */
+export declare class DcrClientRegistry {
+    private readonly config;
+    private readonly clients;
+    private readonly redirectMatchers;
+    constructor(config?: DcrRegistryConfig);
+    /** Seed `dcr.clients` so the authorize/token flows accept them without DCR. */
+    private seedPreRegisteredClients;
+    /** Look up a client by id (pre-registered or dynamically registered). */
+    get(clientId: string): RegisteredClient | undefined;
+    /** Whether a client id is known to the registry. */
+    has(clientId: string): boolean;
+    /** Add a dynamically-registered client (called by the register flow). */
+    register(client: RegisteredClient): void;
+    /** Whether a redirect_uri allowlist is configured. */
+    hasRedirectAllowlist(): boolean;
+    /**
+     * Whether `redirectUri` is permitted by the configured allowlist. Always
+     * `true` when no allowlist is configured (preserves default behavior).
+     */
+    isRedirectUriAllowed(redirectUri: string): boolean;
+    /** Whether a client-id allowlist is configured. */
+    hasClientIdAllowlist(): boolean;
+    /**
+     * Whether `clientId` is permitted by the configured client-id allowlist.
+     * Always `true` when no allowlist is configured (preserves default behavior).
+     */
+    isClientIdAllowed(clientId: string): boolean;
+    /** Whether an initial access token is required for DCR registration. */
+    requiresInitialAccessToken(): boolean;
+    /**
+     * Constant-time check of a presented bearer token against the configured
+     * initial access token. Returns `false` when none is configured (callers
+     * should gate on {@link requiresInitialAccessToken} first).
+     */
+    verifyInitialAccessToken(presented: string | undefined): boolean;
+}
+//# sourceMappingURL=dcr-client.registry.d.ts.map

package/authorization/dcr-client.registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dcr-client.registry.d.ts","sourceRoot":"","sources":["../../src/authorization/dcr-client.registry.ts"],"names":[],"mappings":"AAgBA,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0BAA0B,EACtB,MAAM,GACN,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,GAAG,EAAE,OAAO,CAAC;IACb,uEAAuE;IACvE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,qEAAqE;AACrE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uBAAuB,CAAC,EAAE,MAAM,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;IAChF,UAAU,CAAC,EAAE,KAAK,CAAC,oBAAoB,GAAG,eAAe,CAAC,CAAC;IAC3D,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACtC;AAaD;;;GAGG;AACH,qBAAa,iBAAiB;IAIhB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuB;gBAE3B,MAAM,GAAE,iBAAsB;IAK3D,+EAA+E;IAC/E,OAAO,CAAC,wBAAwB;IAoBhC,yEAAyE;IACzE,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAInD,oDAAoD;IACpD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAIxC,sDAAsD;IACtD,oBAAoB,IAAI,OAAO;IAI/B;;;OAGG;IACH,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAOlD,mDAAmD;IACnD,oBAAoB,IAAI,OAAO;IAI/B;;;OAGG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAQ5C,wEAAwE;IACxE,0BAA0B,IAAI,OAAO;IAIrC;;;;OAIG;IACH,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO;CAajE"}

package/authorization/index.d.ts

@@ -15,4 +15,6 @@ export { OrchestratedAuthorization } from './orchestrated.authorization';
 export type { OrchestratedAuthorizationCreateCtx, OrchestratedProviderState, TokenStore as OrchestratedTokenStore, TokenRefreshCallback, } from './orchestrated.authorization';
 export type { OrchestratedAuthAccessor } from './orchestrated.accessor';
 export { OrchestratedAuthAccessorAdapter, NullOrchestratedAuthAccessor, ORCHESTRATED_AUTH_ACCESSOR, } from './orchestrated.accessor';
+export { DcrClientRegistry } from './dcr-client.registry';
+export type { RegisteredClient, PreRegisteredClientInput, DcrRegistryConfig } from './dcr-client.registry';
 //# sourceMappingURL=index.d.ts.map

package/authorization/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,OAAO,EACL,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,YAAY,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAEjH,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,YAAY,EACV,kCAAkC,EAClC,yBAAyB,EACzB,UAAU,IAAI,sBAAsB,EACpC,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAGtC,YAAY,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,YAAY,EACV,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,GACd,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,OAAO,EACL,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,YAAY,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,iCAAiC,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAEjH,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,YAAY,EACV,kCAAkC,EAClC,yBAAyB,EACzB,UAAU,IAAI,sBAAsB,EACpC,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AAGtC,YAAY,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,+BAA+B,EAC/B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC"}

package/cimd/cimd.service.d.ts

@@ -1,12 +1,5 @@
-/**
- * CIMD (Client ID Metadata Documents) Service
- *
- * Core service for resolving and validating OAuth Client ID Metadata Documents.
- *
- * @see https://datatracker.ietf.org/doc/html/draft-ietf-oauth-client-id-metadata-document-00
- */
-import type { CimdLogger } from './cimd.logger';
-import { type ClientMetadataDocument, type CimdConfigInput, type CimdResolutionResult } from './cimd.types';
+import { type CimdLogger } from './cimd.logger';
+import { type CimdConfigInput, type CimdResolutionResult, type ClientMetadataDocument } from './cimd.types';
 /**
  * CIMD Service for resolving and validating client metadata documents.
  *

package/cimd/cimd.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cimd.service.d.ts","sourceRoot":"","sources":["../../src/cimd/cimd.service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAUhD,OAAO,EAML,KAAK,sBAAsB,EAE3B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAI1B,MAAM,cAAc,CAAC;AAGtB;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IAEpC;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;gBACS,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IA4BlE;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIzC;;;;;;;;OAQG;IACG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoD5E;;;;;;OAMG;IACH,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAUhF;;;;OAIG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhD;;;;OAIG;YACW,qBAAqB;IAmJnC;;OAEG;YACW,qBAAqB;IAyCnC;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;CAiBzB"}
+{"version":3,"file":"cimd.service.d.ts","sourceRoot":"","sources":["../../src/cimd/cimd.service.ts"],"names":[],"mappings":"AAeA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAQL,KAAK,eAAe,EAEpB,KAAK,oBAAoB,EAEzB,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAGtB;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkB;IAC9C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IAEpC;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;gBACS,MAAM,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IA4BlE;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIzC;;;;;;;;OAQG;IACG,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoD5E;;;;;;OAMG;IACH,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,IAAI;IAUhF;;;;OAIG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAMhD;;;;OAIG;YACW,qBAAqB;IAmJnC;;OAEG;YACW,qBAAqB;IAyCnC;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;CAiBzB"}

package/common/session.types.d.ts

@@ -12,11 +12,11 @@ export type AIPlatformType = 'openai' | 'claude' | 'gemini' | 'cursor' | 'contin
  */
 export declare const aiPlatformTypeSchema: import("@frontmcp/lazy-zod").ZodEnum<{
     unknown: "unknown";
+    continue: "continue";
     openai: "openai";
     claude: "claude";
     gemini: "gemini";
     cursor: "cursor";
-    continue: "continue";
     cody: "cody";
     "generic-mcp": "generic-mcp";
     "ext-apps": "ext-apps";
@@ -83,11 +83,11 @@ export declare const sessionIdPayloadSchema: import("@frontmcp/lazy-zod").ZodObj
     isPublic: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
     platformType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
         unknown: "unknown";
+        continue: "continue";
         openai: "openai";
         claude: "claude";
         gemini: "gemini";
         cursor: "cursor";
-        continue: "continue";
         cody: "cody";
         "generic-mcp": "generic-mcp";
         "ext-apps": "ext-apps";
@@ -123,11 +123,11 @@ export declare const sessionIdSchema: import("@frontmcp/lazy-zod").ZodObject<{
         isPublic: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         platformType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             unknown: "unknown";
+            continue: "continue";
             openai: "openai";
             claude: "claude";
             gemini: "gemini";
             cursor: "cursor";
-            continue: "continue";
             cody: "cody";
             "generic-mcp": "generic-mcp";
             "ext-apps": "ext-apps";
@@ -157,11 +157,11 @@ export declare const authorizationSchema: import("@frontmcp/lazy-zod").ZodObject
             isPublic: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
             platformType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
                 unknown: "unknown";
+                continue: "continue";
                 openai: "openai";
                 claude: "claude";
                 gemini: "gemini";
                 cursor: "cursor";
-                continue: "continue";
                 cody: "cody";
                 "generic-mcp": "generic-mcp";
                 "ext-apps": "ext-apps";