@frontmcp/auth 1.8.1 → 1.8.3

package/index.js

@@ -248,6 +248,7 @@ __export(index_exports, {
   AuthoritiesProfileRegistry: () => AuthoritiesProfileRegistry,
   AuthorityDeniedError: () => AuthorityDeniedError,
   AuthorizationBase: () => AuthorizationBase,
+  BUILT_IN_AUTH_PAGE_CSP: () => BUILT_IN_AUTH_PAGE_CSP,
   CDN: () => CDN,
   CREDENTIALS_ACCESSOR: () => CREDENTIALS_ACCESSOR,
   CimdClientIdMismatchError: () => CimdClientIdMismatchError,
@@ -262,6 +263,7 @@ __export(index_exports, {
   CredentialProviderAlreadyRegisteredError: () => CredentialProviderAlreadyRegisteredError,
   CredentialStorageError: () => CredentialStorageError,
   CredentialsAccessorImpl: () => CredentialsAccessorImpl,
+  DEFAULT_ALLOWED_SCOPES: () => DEFAULT_ALLOWED_SCOPES,
   DEFAULT_INCREMENTAL_TICKET_TTL_MS: () => DEFAULT_INCREMENTAL_TICKET_TTL_MS,
   DEFAULT_RESUME_TTL_MS: () => DEFAULT_RESUME_TTL_MS,
   DEFAULT_THEME: () => DEFAULT_THEME,
@@ -269,9 +271,9 @@ __export(index_exports, {
   EagerCredentialLoader: () => EagerCredentialLoader,
   ElicitationSecretRequiredError: () => ElicitationSecretRequiredError,
   EncryptedRedisVault: () => EncryptedRedisVault,
-  EncryptedStorageError: () => import_utils24.EncryptedStorageError,
+  EncryptedStorageError: () => import_utils26.EncryptedStorageError,
   EncryptedStorageSecureStoreBackend: () => EncryptedStorageSecureStoreBackend,
-  EncryptedTypedStorage: () => import_utils24.EncryptedTypedStorage,
+  EncryptedTypedStorage: () => import_utils26.EncryptedTypedStorage,
   EncryptionContextNotSetError: () => EncryptionContextNotSetError,
   EncryptionKeyNotConfiguredError: () => EncryptionKeyNotConfiguredError,
   FetchCredentialMiddleware: () => FetchCredentialMiddleware,
@@ -300,6 +302,9 @@ __export(index_exports, {
   RedisAuthorizationStore: () => RedisAuthorizationStore,
   RedisSessionStore: () => RedisSessionStore,
   SECURE_STORE_ACCESSOR: () => SECURE_STORE_ACCESSOR,
+  SIGNIN_BINDING_COOKIE_PREFIX: () => SIGNIN_BINDING_COOKIE_PREFIX,
+  SIGNIN_BINDING_MAX_AGE_SECONDS: () => SIGNIN_BINDING_MAX_AGE_SECONDS,
+  SIGNIN_BINDING_SECURE_COOKIE_PREFIX: () => SIGNIN_BINDING_SECURE_COOKIE_PREFIX,
   ScopeDeniedError: () => ScopeDeniedError,
   SecureStoreAccessorImpl: () => SecureStoreAccessorImpl,
   SessionCredentialVault: () => SessionCredentialVault,
@@ -319,7 +324,7 @@ __export(index_exports, {
   TokenVault: () => TokenVault,
   TransparentAuthorization: () => TransparentAuthorization,
   TransportIdGenerator: () => TransportIdGenerator,
-  TypedStorage: () => import_utils23.TypedStorage,
+  TypedStorage: () => import_utils25.TypedStorage,
   VaultEncryption: () => VaultEncryption,
   VaultLoadError: () => VaultLoadError,
   VaultNotFoundError: () => VaultNotFoundError,
@@ -375,6 +380,7 @@ __export(index_exports, {
   buildToolConsentPage: () => buildToolConsentPage,
   buildUnauthorizedHeader: () => buildUnauthorizedHeader,
   buildWwwAuthenticate: () => buildWwwAuthenticate,
+  builtInAuthPageHeaders: () => builtInAuthPageHeaders,
   centeredCardLayout: () => centeredCardLayout,
   checkSsrfProtection: () => checkSsrfProtection,
   cimdCacheConfigSchema: () => cimdCacheConfigSchema,
@@ -394,6 +400,7 @@ __export(index_exports, {
   createLayout: () => createLayout,
   createSecureStore: () => createSecureStore,
   createSessionCredentialVault: () => createSessionCredentialVault,
+  createSigninBinding: () => createSigninBinding,
   createTokenStorageAdapter: () => createTokenStorageAdapter,
   credentialProviderConfigSchema: () => credentialProviderConfigSchema,
   credentialSchema: () => credentialSchema,
@@ -401,9 +408,9 @@ __export(index_exports, {
   credentialTypeSchema: () => credentialTypeSchema,
   customCredentialSchema: () => customCredentialSchema,
   decodeJwtPayloadSafe: () => decodeJwtPayloadSafe,
-  decryptAesGcm: () => import_utils34.decryptAesGcm,
+  decryptAesGcm: () => import_utils36.decryptAesGcm,
   decryptSessionJson: () => decryptSessionJson,
-  decryptValue: () => import_utils34.decryptValue,
+  decryptValue: () => import_utils36.decryptValue,
   defaultSessionRateLimiter: () => defaultSessionRateLimiter,
   deriveAuthorizationId: () => deriveAuthorizationId,
   deriveExpectedAudience: () => deriveExpectedAudience,
@@ -411,9 +418,9 @@ __export(index_exports, {
   deriveTypedUser: () => deriveTypedUser,
   detectAuthProviders: () => detectAuthProviders,
   detectedAuthProviderSchema: () => detectedAuthProviderSchema,
-  encryptAesGcm: () => import_utils34.encryptAesGcm,
+  encryptAesGcm: () => import_utils36.encryptAesGcm,
   encryptJson: () => encryptJson,
-  encryptValue: () => import_utils34.encryptValue,
+  encryptValue: () => import_utils36.encryptValue,
   encryptedBlobSchema: () => encryptedBlobSchema,
   encryptedDataSchema: () => encryptedDataSchema,
   encryptedVaultEntrySchema: () => encryptedVaultEntrySchema,
@@ -426,6 +433,8 @@ __export(index_exports, {
   federatedLoginStateSchema: () => federatedLoginStateSchema,
   federatedProviderItemSchema: () => federatedProviderItemSchema,
   federatedSelectionSchema: () => federatedSelectionSchema,
+  findAuthoritiesProfileProblems: () => findAuthoritiesProfileProblems,
+  findAuthoritiesRuleProblems: () => findAuthoritiesRuleProblems,
   flatRemoteProviderFields: () => flatRemoteProviderFields,
   fromSessionRecord: () => fromSessionRecord,
   generateAuthorizationCode: () => generateAuthorizationCode,
@@ -437,15 +446,17 @@ __export(index_exports, {
   getProviderApps: () => getProviderApps,
   getProviderScopes: () => getProviderScopes,
   getTokenSignatureFingerprint: () => getTokenSignatureFingerprint,
+  grantScopes: () => grantScopes,
   hasOnlyLocalhostRedirectUris: () => hasOnlyLocalhostRedirectUris,
   headerApplier: () => headerApplier,
-  hkdfSha256: () => import_utils34.hkdfSha256,
+  hkdfSha256: () => import_utils36.hkdfSha256,
   incrementalAuthConfigSchema: () => incrementalAuthConfigSchema,
   isAnonymousSubject: () => isAnonymousSubject,
   isCimdClientId: () => isCimdClientId,
   isFrontMcpCredentials: () => isFrontMcpCredentials,
   isJwt: () => isJwt,
   isLocalMode: () => isLocalMode,
+  isLoopbackRedirectUri: () => isLoopbackRedirectUri,
   isOrchestratedLocal: () => isOrchestratedLocal,
   isOrchestratedMode: () => isOrchestratedMode,
   isOrchestratedRemote: () => isOrchestratedRemote,
@@ -454,7 +465,7 @@ __export(index_exports, {
   isRedisTokenStorage: () => isRedisTokenStorage,
   isRemoteMode: () => isRemoteMode,
   isSessionComplete: () => isSessionComplete,
-  isSignedSession: () => import_utils16.isSignedData,
+  isSignedSession: () => import_utils18.isSignedData,
   isSoonExpiring: () => isSoonExpiring,
   isSoonExpiringProvider: () => isSoonExpiringProvider,
   isSqliteTokenStorage: () => isSqliteTokenStorage,
@@ -475,6 +486,7 @@ __export(index_exports, {
   noopLogger: () => noopLogger,
   normalizeIssuer: () => normalizeIssuer,
   oauthCredentialSchema: () => oauthCredentialSchema,
+  openPendingLogin: () => openPendingLogin,
   orchestratedLocalSchema: () => orchestratedLocalSchema,
   orchestratedRemoteSchema: () => orchestratedRemoteSchema,
   parseAuthOptions: () => parseAuthOptions,
@@ -502,6 +514,7 @@ __export(index_exports, {
   resolveRequiredScopes: () => resolveRequiredScopes,
   resourceIdRefSchema: () => resourceIdRefSchema,
   safeDecrypt: () => safeDecrypt,
+  sealPendingLogin: () => sealPendingLogin,
   secureStoreConfigSchema: () => secureStoreConfigSchema,
   secureStoreCustomBackendSchema: () => secureStoreCustomBackendSchema,
   secureStoreEncryptionSchema: () => secureStoreEncryptionSchema,
@@ -512,6 +525,8 @@ __export(index_exports, {
   signCredentialResumeToken: () => signCredentialResumeToken,
   signIncrementalAuthTicket: () => signIncrementalAuthTicket,
   signSession: () => signSession,
+  signinBindingCookieName: () => signinBindingCookieName,
+  signinBindingMatches: () => signinBindingMatches,
   skippedAppBehaviorSchema: () => skippedAppBehaviorSchema,
   sseTransportStateSchema: () => sseTransportStateSchema,
   sshKeyCredentialSchema: () => sshKeyCredentialSchema,
@@ -544,7 +559,8 @@ __export(index_exports, {
   verifyOrParseSession: () => verifyOrParseSession,
   verifyPkce: () => verifyPkce,
   verifySession: () => verifySession,
-  wideLayout: () => wideLayout
+  wideLayout: () => wideLayout,
+  withoutSecretFieldValues: () => withoutSecretFieldValues
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -1021,7 +1037,9 @@ var JwksService = class {
           // Pin to asymmetric algorithms so a symmetric key in the provider JWKS
           // can't be used to accept an HMAC-signed token, and `none` is refused.
           algorithms: [...TRANSPARENT_JWT_ALGS],
-          ...issuerConstraint ? { issuer: issuerConstraint } : {}
+          ...issuerConstraint ? { issuer: issuerConstraint } : {},
+          // A bearer token without `exp` would be valid forever (#272).
+          requiredClaims: ["exp"]
         });
         return {
           ok: true,
@@ -1124,7 +1142,10 @@ var JwksService = class {
         }
       }
       const nowSec = Math.floor(Date.now() / 1e3);
-      if (payload.exp !== void 0 && (typeof payload.exp !== "number" || !Number.isFinite(payload.exp) || payload.exp < nowSec)) {
+      if (payload.exp === void 0) {
+        return { ok: false, error: "missing_exp" };
+      }
+      if (typeof payload.exp !== "number" || !Number.isFinite(payload.exp) || payload.exp <= nowSec) {
         return { ok: false, error: "token_expired" };
       }
       if (payload.nbf !== void 0 && (typeof payload.nbf !== "number" || !Number.isFinite(payload.nbf) || payload.nbf > nowSec)) {
@@ -1380,6 +1401,26 @@ var CDN = {
     stylesheet: "https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap"
   }
 };
+var BUILT_IN_AUTH_PAGE_CSP = [
+  "default-src 'self'",
+  "script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net",
+  "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com",
+  "font-src 'self' https://fonts.gstatic.com",
+  "img-src 'self' data: https:",
+  "connect-src 'self'",
+  "object-src 'none'",
+  "base-uri 'none'",
+  "frame-ancestors 'none'"
+].join("; ");
+function builtInAuthPageHeaders(options = {}) {
+  return {
+    ...options.csp === false ? {} : { "Content-Security-Policy": BUILT_IN_AUTH_PAGE_CSP },
+    "X-Frame-Options": "DENY",
+    "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "same-origin",
+    "Cache-Control": "no-store"
+  };
+}
 var DEFAULT_THEME = {
   colors: {
     primary: "#3b82f6",
@@ -1617,7 +1658,7 @@ function buildIncrementalAuthPage(params) {
         </div>
       </div>
 
-      <form method="GET" action="${escapeHtml3(callbackPath)}" class="flex gap-3 pt-4 border-t border-gray-100">
+      <form method="POST" action="${escapeHtml3(callbackPath)}" class="flex gap-3 pt-4 border-t border-gray-100">
         <input type="hidden" name="pending_auth_id" value="${escapeHtml3(sessionHint)}">
         <button type="button" onclick="window.close()"
           class="flex-1 px-4 py-2.5 text-gray-600 hover:text-gray-900 hover:bg-gray-100 font-medium rounded-lg transition-colors">
@@ -1663,7 +1704,7 @@ function buildFederatedLoginPage(params) {
       ${escapeHtml3(clientName)} uses multiple authentication providers. Select which ones you want to authorize.
     </p>
 
-    <form method="GET" action="${escapeHtml3(callbackPath)}" id="federated-form">
+    <form method="POST" action="${escapeHtml3(callbackPath)}" id="federated-form">
       <input type="hidden" name="pending_auth_id" value="${escapeHtml3(pendingAuthId)}">
       <input type="hidden" name="federated" value="true">
 
@@ -1808,7 +1849,7 @@ function buildToolConsentPage(params) {
     ${errorBanner}
     ${userInfo}
 
-    <form method="GET" action="${escapeHtml3(callbackPath)}" id="consent-form">
+    <form method="POST" action="${escapeHtml3(callbackPath)}" id="consent-form">
       <input type="hidden" name="csrf" value="${escapeHtml3(csrfToken)}">
       <input type="hidden" name="pending_auth_id" value="${escapeHtml3(pendingAuthId)}">
       <input type="hidden" name="consent_submitted" value="1">
@@ -1906,7 +1947,7 @@ function buildLoginPage(params) {
 
       ${scopesHtml}
 
-      <form method="GET" action="${escapeHtml3(callbackPath)}">
+      <form method="POST" action="${escapeHtml3(callbackPath)}">
         <input type="hidden" name="pending_auth_id" value="${escapeHtml3(pendingAuthId)}">
 ${fieldsHtml}
 
@@ -2003,7 +2044,17 @@ function toLoginExtraFields(fields, values) {
     value: values?.[name]
   }));
 }
-function renderLocalLoginPage(login, ctx, values) {
+function withoutSecretFieldValues(values, fields) {
+  if (!values) return void 0;
+  const kept = {};
+  for (const [name, value] of Object.entries(values)) {
+    if (fields?.[name]?.type === "password") continue;
+    kept[name] = value;
+  }
+  return kept;
+}
+function renderLocalLoginPage(login, ctx, submitted) {
+  const values = withoutSecretFieldValues(submitted, login?.fields);
   if (login?.render) {
     return login.render({ ...ctx, values });
   }
@@ -2110,7 +2161,8 @@ function buildPendingRecord(params) {
     priorAuthorizedAppIds: params.priorAuthorizedAppIds,
     federatedLogin: params.federatedLogin,
     consent: params.consent,
-    authUiCsrf: params.authUiCsrf
+    authUiCsrf: params.authUiCsrf,
+    signinBinding: params.signinBinding
   };
 }
 function buildRefreshTokenRecord(params) {
@@ -2340,8 +2392,58 @@ var RedisAuthorizationStore = class {
   }
 };
 
-// libs/auth/src/session/storage-authorization.store.ts
+// libs/auth/src/session/pending-login.ts
 var import_utils6 = require("@frontmcp/utils");
+var SALT = new TextEncoder().encode("frontmcp-pending-login");
+function keyFor(secret, pendingAuthId) {
+  return (0, import_utils6.hkdfSha256)(secret, SALT, new TextEncoder().encode(`pending-login:${pendingAuthId}`), 32);
+}
+function sealPendingLogin(secret, pendingAuthId, state) {
+  const iv = (0, import_utils6.randomBytes)(12);
+  const { ciphertext, tag } = (0, import_utils6.encryptAesGcm)(
+    keyFor(secret, pendingAuthId),
+    new TextEncoder().encode(JSON.stringify(state)),
+    iv
+  );
+  return [iv, tag, ciphertext].map((part) => (0, import_utils6.base64urlEncode)(part)).join(".");
+}
+function openPendingLogin(secret, pendingAuthId, sealed) {
+  try {
+    const [iv, tag, ciphertext] = sealed.split(".").map((part) => (0, import_utils6.base64urlDecode)(part));
+    if (!iv || !tag || !ciphertext) return void 0;
+    const plaintext = (0, import_utils6.decryptAesGcm)(keyFor(secret, pendingAuthId), ciphertext, iv, tag);
+    const state = JSON.parse(new TextDecoder().decode(plaintext));
+    return typeof state?.sub === "string" && state.sub.length > 0 ? state : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// libs/auth/src/session/signin-binding.ts
+var import_utils7 = require("@frontmcp/utils");
+var SIGNIN_BINDING_COOKIE_PREFIX = "frontmcp_signin_";
+var SIGNIN_BINDING_SECURE_COOKIE_PREFIX = `__Host-${SIGNIN_BINDING_COOKIE_PREFIX}`;
+var SIGNIN_BINDING_MAX_AGE_SECONDS = 30 * 60;
+function signinBindingCookieName(pendingAuthId, options = {}) {
+  const prefix = options.secure ? SIGNIN_BINDING_SECURE_COOKIE_PREFIX : SIGNIN_BINDING_COOKIE_PREFIX;
+  return `${prefix}${(0, import_utils7.sha256Hex)(`signin:${pendingAuthId}`).slice(0, 16)}`;
+}
+function createSigninBinding(pendingAuthId, options = {}) {
+  const value = (0, import_utils7.base64urlEncode)((0, import_utils7.randomBytes)(32));
+  return { cookieName: signinBindingCookieName(pendingAuthId, options), value, hash: (0, import_utils7.sha256Hex)(value) };
+}
+function signinBindingMatches(cookieHeader, pendingAuthId, expectedHash, options = {}) {
+  if (!expectedHash) return false;
+  const value = (0, import_utils7.getCookie)(cookieHeader, signinBindingCookieName(pendingAuthId, options));
+  if (!value) return false;
+  const encoder = new TextEncoder();
+  const actual = encoder.encode((0, import_utils7.sha256Hex)(value));
+  const expected = encoder.encode(expectedHash);
+  return actual.length === expected.length && (0, import_utils7.timingSafeEqual)(actual, expected);
+}
+
+// libs/auth/src/session/storage-authorization.store.ts
+var import_utils8 = require("@frontmcp/utils");
 var StorageAuthorizationStore = class {
   codeStore;
   pendingStore;
@@ -2352,9 +2454,9 @@ var StorageAuthorizationStore = class {
     this.namespace = options.namespace ?? "oauth";
     this.storageIsNamespaced = this.isNamespacedStorage(storage);
     const base = this.storageIsNamespaced ? storage.namespace(this.namespace) : storage;
-    this.codeStore = new import_utils6.TypedStorage(base);
-    this.pendingStore = new import_utils6.TypedStorage(base);
-    this.refreshStore = new import_utils6.TypedStorage(base);
+    this.codeStore = new import_utils8.TypedStorage(base);
+    this.pendingStore = new import_utils8.TypedStorage(base);
+    this.refreshStore = new import_utils8.TypedStorage(base);
   }
   // ============================================
   // Record builders (pure; shared with in-memory store)
@@ -2727,11 +2829,11 @@ var authorizationVaultEntrySchema = import_lazy_zod2.z.object({
 });
 
 // libs/auth/src/session/session-credential-vault.ts
-var import_utils8 = require("@frontmcp/utils");
+var import_utils10 = require("@frontmcp/utils");
 
 // libs/auth/src/session/vault-encryption.ts
 var import_lazy_zod3 = require("@frontmcp/lazy-zod");
-var import_utils7 = require("@frontmcp/utils");
+var import_utils9 = require("@frontmcp/utils");
 var encryptedDataSchema = import_lazy_zod3.z.object({
   /** Version for future algorithm changes */
   v: import_lazy_zod3.z.literal(1),
@@ -2771,7 +2873,7 @@ var VaultEncryption = class {
     ];
     const ikm = new TextEncoder().encode(ikmParts.join(""));
     const infoBytes = new TextEncoder().encode(this.hkdfInfo);
-    const key = await (0, import_utils7.hkdfSha256)(ikm, new Uint8Array(0), infoBytes, 32);
+    const key = await (0, import_utils9.hkdfSha256)(ikm, new Uint8Array(0), infoBytes, 32);
     return key;
   }
   /**
@@ -2798,7 +2900,7 @@ var VaultEncryption = class {
     ];
     const ikm = new TextEncoder().encode(ikmParts.join(""));
     const infoBytes = new TextEncoder().encode(this.hkdfInfo);
-    const key = await (0, import_utils7.hkdfSha256)(ikm, new Uint8Array(0), infoBytes, 32);
+    const key = await (0, import_utils9.hkdfSha256)(ikm, new Uint8Array(0), infoBytes, 32);
     return key;
   }
   /**
@@ -2812,14 +2914,14 @@ var VaultEncryption = class {
     if (key.length !== 32) {
       throw new Error("Encryption key must be 32 bytes");
     }
-    const iv = (0, import_utils7.randomBytes)(12);
-    const { ciphertext, tag } = await (0, import_utils7.encryptAesGcm)(key, new TextEncoder().encode(plaintext), iv);
+    const iv = (0, import_utils9.randomBytes)(12);
+    const { ciphertext, tag } = await (0, import_utils9.encryptAesGcm)(key, new TextEncoder().encode(plaintext), iv);
     return {
       v: 1,
       alg: "aes-256-gcm",
-      iv: (0, import_utils7.base64urlEncode)(iv),
-      ct: (0, import_utils7.base64urlEncode)(ciphertext),
-      tag: (0, import_utils7.base64urlEncode)(tag)
+      iv: (0, import_utils9.base64urlEncode)(iv),
+      ct: (0, import_utils9.base64urlEncode)(ciphertext),
+      tag: (0, import_utils9.base64urlEncode)(tag)
     };
   }
   /**
@@ -2839,11 +2941,11 @@ var VaultEncryption = class {
       throw new Error("Invalid encrypted data format");
     }
     const { iv, ct, tag } = parsed.data;
-    const ivBuffer = (0, import_utils7.base64urlDecode)(iv);
-    const ciphertext = (0, import_utils7.base64urlDecode)(ct);
-    const tagBuffer = (0, import_utils7.base64urlDecode)(tag);
+    const ivBuffer = (0, import_utils9.base64urlDecode)(iv);
+    const ciphertext = (0, import_utils9.base64urlDecode)(ct);
+    const tagBuffer = (0, import_utils9.base64urlDecode)(tag);
     try {
-      const plaintext = await (0, import_utils7.decryptAesGcm)(key, ciphertext, ivBuffer, tagBuffer);
+      const plaintext = await (0, import_utils9.decryptAesGcm)(key, ciphertext, ivBuffer, tagBuffer);
       return new TextDecoder().decode(plaintext);
     } catch (_error) {
       throw new Error("Decryption failed: invalid key or corrupted data");
@@ -2983,7 +3085,7 @@ var SessionCredentialVault = class {
    * it expires via TTL when configured.
    */
   async rotateVault(sub) {
-    const vaultId = (0, import_utils8.randomUUID)();
+    const vaultId = (0, import_utils10.randomUUID)();
     await this.storage.set(this.indexKey(sub), vaultId, this.credentialSetOpts);
     return vaultId;
   }
@@ -3132,19 +3234,19 @@ var SessionCredentialVault = class {
   }
 };
 function resolveVaultPepper(logger) {
-  const fromEnv = (0, import_utils8.getEnv)("VAULT_SECRET") ?? (0, import_utils8.getEnv)("JWT_SECRET");
+  const fromEnv = (0, import_utils10.getEnv)("VAULT_SECRET") ?? (0, import_utils10.getEnv)("JWT_SECRET");
   if (fromEnv && fromEnv.trim().length > 0) return fromEnv;
   logger.warn(
     "SessionCredentialVault: neither VAULT_SECRET nor JWT_SECRET is set; using a random per-process pepper. Stored credentials will NOT survive a restart and cannot be shared across instances. Set VAULT_SECRET (or JWT_SECRET) for persistent, multi-instance credential storage."
   );
-  return (0, import_utils8.randomUUID)() + (0, import_utils8.randomUUID)();
+  return (0, import_utils10.randomUUID)() + (0, import_utils10.randomUUID)();
 }
 function errMsg(err) {
   return err instanceof Error ? err.message : String(err);
 }
 
 // libs/auth/src/session/token-storage.factory.ts
-var import_utils9 = require("@frontmcp/utils");
+var import_utils11 = require("@frontmcp/utils");
 function isRedisTokenStorage(config) {
   return typeof config === "object" && config !== null && "redis" in config && !!config.redis;
 }
@@ -3156,7 +3258,7 @@ function isPersistentTokenStorage(config) {
 }
 async function createTokenStorageAdapter(config) {
   if (config === void 0 || config === "memory") {
-    const adapter = new import_utils9.MemoryStorageAdapter();
+    const adapter = new import_utils11.MemoryStorageAdapter();
     await adapter.connect();
     return adapter;
   }
@@ -3173,14 +3275,14 @@ async function createTokenStorageAdapter(config) {
   }
   if (isRedisTokenStorage(config)) {
     const { host, port, password, db, tls, keyPrefix } = config.redis;
-    const adapter = new import_utils9.RedisStorageAdapter({
+    const adapter = new import_utils11.RedisStorageAdapter({
       config: { host, port, password, db, tls },
       keyPrefix: keyPrefix ?? ""
     });
     await adapter.connect();
     return adapter;
   }
-  const fallback = new import_utils9.MemoryStorageAdapter();
+  const fallback = new import_utils11.MemoryStorageAdapter();
   await fallback.connect();
   return fallback;
 }
@@ -3200,7 +3302,7 @@ async function createSessionCredentialVault(options) {
 }
 
 // libs/auth/src/session/credential-resume-link.ts
-var import_utils10 = require("@frontmcp/utils");
+var import_utils12 = require("@frontmcp/utils");
 var DEFAULT_RESUME_TTL_MS = 6e5;
 function signCredentialResumeToken(input, secret) {
   const payload = {
@@ -3209,7 +3311,7 @@ function signCredentialResumeToken(input, secret) {
     ...input.context !== void 0 ? { context: input.context } : {},
     exp: Date.now() + (input.ttlMs ?? DEFAULT_RESUME_TTL_MS)
   };
-  const signedJson = (0, import_utils10.signData)(payload, { secret });
+  const signedJson = (0, import_utils12.signData)(payload, { secret });
   return Buffer.from(signedJson, "utf8").toString("base64url");
 }
 function verifyCredentialResumeToken(token, secret, now = Date.now()) {
@@ -3219,7 +3321,7 @@ function verifyCredentialResumeToken(token, secret, now = Date.now()) {
   } catch {
     return null;
   }
-  const payload = (0, import_utils10.verifyData)(signedJson, { secret });
+  const payload = (0, import_utils12.verifyData)(signedJson, { secret });
   if (!payload) return null;
   if (typeof payload.sub !== "string" || typeof payload.key !== "string" || !Number.isFinite(payload.exp)) {
     return null;
@@ -3238,7 +3340,7 @@ function buildCredentialResumeUrl(basePath, token) {
 }
 
 // libs/auth/src/session/incremental-auth-ticket.ts
-var import_utils11 = require("@frontmcp/utils");
+var import_utils13 = require("@frontmcp/utils");
 var DEFAULT_INCREMENTAL_TICKET_TTL_MS = 3e5;
 function signIncrementalAuthTicket(input, secret) {
   const payload = {
@@ -3246,10 +3348,10 @@ function signIncrementalAuthTicket(input, secret) {
     appId: input.appId,
     ...input.toolId !== void 0 ? { toolId: input.toolId } : {},
     ...input.priorAppIds !== void 0 ? { priorAppIds: input.priorAppIds } : {},
-    jti: (0, import_utils11.randomUUID)(),
+    jti: (0, import_utils13.randomUUID)(),
     exp: Date.now() + (input.ttlMs ?? DEFAULT_INCREMENTAL_TICKET_TTL_MS)
   };
-  const signedJson = (0, import_utils11.signData)(payload, { secret });
+  const signedJson = (0, import_utils13.signData)(payload, { secret });
   return Buffer.from(signedJson, "utf8").toString("base64url");
 }
 function verifyIncrementalAuthTicket(token, secret, now = Date.now()) {
@@ -3259,7 +3361,7 @@ function verifyIncrementalAuthTicket(token, secret, now = Date.now()) {
   } catch {
     return null;
   }
-  const payload = (0, import_utils11.verifyData)(signedJson, { secret });
+  const payload = (0, import_utils13.verifyData)(signedJson, { secret });
   if (!payload) return null;
   if (typeof payload.sub !== "string" || payload.sub.length === 0) return null;
   if (typeof payload.appId !== "string" || payload.appId.length === 0) return null;
@@ -3439,7 +3541,7 @@ function errMsg2(err) {
 var SECURE_STORE_ACCESSOR = /* @__PURE__ */ Symbol.for("frontmcp:SECURE_STORE_ACCESSOR");
 
 // libs/auth/src/session/secure-store-accessor.impl.ts
-var import_utils12 = require("@frontmcp/utils");
+var import_utils14 = require("@frontmcp/utils");
 var GLOBAL_NAMESPACE = "global";
 var SecureStoreAccessorImpl = class {
   backend;
@@ -3468,12 +3570,12 @@ var SecureStoreAccessorImpl = class {
         return GLOBAL_NAMESPACE;
       case "session": {
         const sid = this.resolveSessionId();
-        return sid ? `s:${(0, import_utils12.sha256Hex)(sid).slice(0, 32)}` : void 0;
+        return sid ? `s:${(0, import_utils14.sha256Hex)(sid).slice(0, 32)}` : void 0;
       }
       case "user":
       default: {
         const sub = this.resolveSub();
-        return sub ? `u:${(0, import_utils12.sha256Hex)(sub).slice(0, 32)}` : void 0;
+        return sub ? `u:${(0, import_utils14.sha256Hex)(sub).slice(0, 32)}` : void 0;
       }
     }
   }
@@ -3514,7 +3616,7 @@ function errMsg3(err) {
 }
 
 // libs/auth/src/session/secure-store.factory.ts
-var import_utils13 = require("@frontmcp/utils");
+var import_utils15 = require("@frontmcp/utils");
 function isCustomBackendConfig(config) {
   return typeof config === "object" && config !== null && "backend" in config && !!config.backend;
 }
@@ -3563,7 +3665,7 @@ async function createSecureStore(options) {
   if (storage) {
     adapter = storage;
   } else if (kind === "memory") {
-    adapter = new import_utils13.MemoryStorageAdapter();
+    adapter = new import_utils15.MemoryStorageAdapter();
     await adapter.connect();
   } else {
     adapter = await createTokenStorageAdapter(toTokenStorageConfig(config));
@@ -3577,7 +3679,7 @@ async function createSecureStore(options) {
 }
 
 // libs/auth/src/session/token.vault.ts
-var import_utils14 = require("@frontmcp/utils");
+var import_utils16 = require("@frontmcp/utils");
 var TokenVault = class {
   /** Active key used for new encryptions */
   active;
@@ -3606,14 +3708,14 @@ var TokenVault = class {
     this.keys.set(k.kid, k.key);
   }
   async encrypt(plaintext, opts) {
-    const iv = (0, import_utils14.randomBytes)(12);
-    const { ciphertext, tag } = await (0, import_utils14.encryptAesGcm)(this.active.key, new TextEncoder().encode(plaintext), iv);
+    const iv = (0, import_utils16.randomBytes)(12);
+    const { ciphertext, tag } = await (0, import_utils16.encryptAesGcm)(this.active.key, new TextEncoder().encode(plaintext), iv);
     return {
       alg: "A256GCM",
       kid: this.active.kid,
-      iv: (0, import_utils14.base64urlEncode)(iv),
-      tag: (0, import_utils14.base64urlEncode)(tag),
-      data: (0, import_utils14.base64urlEncode)(ciphertext),
+      iv: (0, import_utils16.base64urlEncode)(iv),
+      tag: (0, import_utils16.base64urlEncode)(tag),
+      data: (0, import_utils16.base64urlEncode)(ciphertext),
       exp: opts?.exp,
       meta: opts?.meta
     };
@@ -3627,16 +3729,16 @@ var TokenVault = class {
     }
     const key = this.keys.get(blob.kid);
     if (!key) throw new Error(`vault_unknown_kid:${blob.kid}`);
-    const iv = (0, import_utils14.base64urlDecode)(blob.iv);
-    const tag = (0, import_utils14.base64urlDecode)(blob.tag);
-    const data = (0, import_utils14.base64urlDecode)(blob.data);
-    const plaintext = await (0, import_utils14.decryptAesGcm)(key, data, iv, tag);
+    const iv = (0, import_utils16.base64urlDecode)(blob.iv);
+    const tag = (0, import_utils16.base64urlDecode)(blob.tag);
+    const data = (0, import_utils16.base64urlDecode)(blob.data);
+    const plaintext = await (0, import_utils16.decryptAesGcm)(key, data, iv, tag);
     return new TextDecoder().decode(plaintext);
   }
 };
 
 // libs/auth/src/session/index.ts
-var import_utils34 = require("@frontmcp/utils");
+var import_utils36 = require("@frontmcp/utils");
 
 // libs/auth/src/session/transport-session.types.ts
 var import_lazy_zod4 = require("@frontmcp/lazy-zod");
@@ -3732,10 +3834,10 @@ var redisConfigSchema = import_lazy_zod4.z.object({
 });
 
 // libs/auth/src/session/session-crypto.ts
-var import_utils16 = require("@frontmcp/utils");
+var import_utils18 = require("@frontmcp/utils");
 
 // libs/auth/src/errors/auth-internal.error.ts
-var import_utils15 = require("@frontmcp/utils");
+var import_utils17 = require("@frontmcp/utils");
 var AuthInternalError = class extends Error {
   /**
    * Unique error ID for tracking in logs.
@@ -3757,7 +3859,7 @@ var AuthInternalError = class extends Error {
     super(message);
     this.name = this.constructor.name;
     this.code = code;
-    this.errorId = `err_${(0, import_utils15.bytesToHex)((0, import_utils15.randomBytes)(8))}`;
+    this.errorId = `err_${(0, import_utils17.bytesToHex)((0, import_utils17.randomBytes)(8))}`;
     Error.captureStackTrace(this, this.constructor);
   }
   /**
@@ -3896,9 +3998,9 @@ var AuthFlowError = class extends AuthInternalError {
 
 // libs/auth/src/session/session-crypto.ts
 function getSigningSecret(config) {
-  const secret = config?.secret || (0, import_utils16.getEnv)("MCP_SESSION_SECRET");
+  const secret = config?.secret || (0, import_utils18.getEnv)("MCP_SESSION_SECRET");
   if (!secret) {
-    if ((0, import_utils16.isProduction)()) {
+    if ((0, import_utils18.isProduction)()) {
       throw new SessionSecretRequiredError("session signing");
     }
     console.warn("[SessionCrypto] MCP_SESSION_SECRET not set. Using insecure default for development only.");
@@ -3910,13 +4012,13 @@ function resolveConfig(config) {
   return { secret: getSigningSecret(config) };
 }
 function signSession(session, config) {
-  return (0, import_utils16.signData)(session, resolveConfig(config));
+  return (0, import_utils18.signData)(session, resolveConfig(config));
 }
 function verifySession(signedData, config) {
-  return (0, import_utils16.verifyData)(signedData, resolveConfig(config));
+  return (0, import_utils18.verifyData)(signedData, resolveConfig(config));
 }
 function verifyOrParseSession(data, config) {
-  return (0, import_utils16.verifyOrParseData)(data, resolveConfig(config));
+  return (0, import_utils18.verifyOrParseData)(data, resolveConfig(config));
 }
 
 // libs/auth/src/session/session-rate-limiter.ts
@@ -4043,7 +4145,7 @@ var SessionRateLimiter = class {
 var defaultSessionRateLimiter = new SessionRateLimiter();
 
 // libs/auth/src/session/session.transport.ts
-var import_utils17 = require("@frontmcp/utils");
+var import_utils19 = require("@frontmcp/utils");
 var TransportIdGenerator = class {
   /**
    * Create a transport session ID.
@@ -4052,7 +4154,7 @@ var TransportIdGenerator = class {
    * @returns A transport session ID (UUID without dashes)
    */
   static createId() {
-    return (0, import_utils17.randomUUID)().replace(/-/g, "");
+    return (0, import_utils19.randomUUID)().replace(/-/g, "");
   }
 };
 
@@ -4101,7 +4203,7 @@ var TinyTtlCache = class {
 };
 
 // libs/auth/src/session/utils/auth-token.utils.ts
-var import_utils18 = require("@frontmcp/utils");
+var import_utils20 = require("@frontmcp/utils");
 function isJwt(token) {
   if (!token) return false;
   return token.split(".").length === 3;
@@ -4111,7 +4213,7 @@ function getTokenSignatureFingerprint(token) {
     const sig = token.split(".")[2];
     if (sig) return sig;
   }
-  return (0, import_utils18.sha256Base64url)(token);
+  return (0, import_utils20.sha256Base64url)(token);
 }
 function extractClaimValue(claims, key, validator) {
   const value = claims[key];
@@ -4143,26 +4245,26 @@ function extractBearerToken(header) {
 }
 
 // libs/auth/src/session/utils/session-crypto.utils.ts
-var import_utils19 = require("@frontmcp/utils");
+var import_utils21 = require("@frontmcp/utils");
 var cachedKey = null;
 function getKey() {
   if (cachedKey) return cachedKey;
-  const secret = (0, import_utils19.getEnv)("MCP_SESSION_SECRET");
+  const secret = (0, import_utils21.getEnv)("MCP_SESSION_SECRET");
   if (!secret) {
-    if ((0, import_utils19.isProduction)()) {
+    if ((0, import_utils21.isProduction)()) {
       throw new SessionSecretRequiredError("session ID encryption");
     }
     console.warn(
       "[SessionIdUtils] Using machine ID as session encryption secret - NOT SECURE FOR PRODUCTION. Set MCP_SESSION_SECRET environment variable for secure session encryption."
     );
   }
-  const base = secret || (0, import_utils19.getMachineId)();
-  cachedKey = (0, import_utils19.sha256)(new TextEncoder().encode(base));
+  const base = secret || (0, import_utils21.getMachineId)();
+  cachedKey = (0, import_utils21.sha256)(new TextEncoder().encode(base));
   return cachedKey;
 }
 function encryptJson(obj) {
   const key = getKey();
-  const encrypted = (0, import_utils19.encryptValue)(obj, key);
+  const encrypted = (0, import_utils21.encryptValue)(obj, key);
   return `${encrypted.iv}.${encrypted.tag}.${encrypted.data}`;
 }
 function decryptSessionJson(sessionId) {
@@ -4171,7 +4273,7 @@ function decryptSessionJson(sessionId) {
   const [ivB64, tagB64, ctB64] = parts;
   if (!ivB64 || !tagB64 || !ctB64) return null;
   const key = getKey();
-  return (0, import_utils19.decryptValue)({ alg: "A256GCM", iv: ivB64, tag: tagB64, data: ctB64 }, key);
+  return (0, import_utils21.decryptValue)({ alg: "A256GCM", iv: ivB64, tag: tagB64, data: ctB64 }, key);
 }
 function safeDecrypt(sessionId) {
   try {
@@ -4185,11 +4287,11 @@ function resetCachedKey() {
 }
 
 // libs/auth/src/session/storage/index.ts
-var import_utils23 = require("@frontmcp/utils");
-var import_utils24 = require("@frontmcp/utils");
+var import_utils25 = require("@frontmcp/utils");
+var import_utils26 = require("@frontmcp/utils");
 
 // libs/auth/src/session/storage/storage-token-store.ts
-var import_utils20 = require("@frontmcp/utils");
+var import_utils22 = require("@frontmcp/utils");
 var StorageTokenStore = class {
   storage;
   namespace;
@@ -4201,13 +4303,13 @@ var StorageTokenStore = class {
     this.defaultTtlSeconds = options.defaultTtlSeconds;
     this.storageIsNamespaced = "namespace" in storage && typeof storage.namespace === "function";
     const namespacedStorage = this.storageIsNamespaced ? storage.namespace(this.namespace) : storage;
-    this.storage = new import_utils20.TypedStorage(namespacedStorage);
+    this.storage = new import_utils22.TypedStorage(namespacedStorage);
   }
   /**
    * Allocate a new unique ID for a token record.
    */
   allocId() {
-    return (0, import_utils20.randomUUID)();
+    return (0, import_utils22.randomUUID)();
   }
   /**
    * Store an encrypted token blob.
@@ -4270,7 +4372,7 @@ var StorageTokenStore = class {
 };
 
 // libs/auth/src/session/storage/storage-authorization-vault.ts
-var import_utils21 = require("@frontmcp/utils");
+var import_utils23 = require("@frontmcp/utils");
 var StorageAuthorizationVault = class {
   storage;
   namespace;
@@ -4279,7 +4381,7 @@ var StorageAuthorizationVault = class {
     this.namespace = options.namespace ?? "vault";
     this.pendingAuthTtlMs = options.pendingAuthTtlMs ?? 10 * 60 * 1e3;
     const namespacedStorage = this.isNamespacedStorage(storage) ? storage.namespace(this.namespace) : storage;
-    this.storage = new import_utils21.TypedStorage(namespacedStorage, {
+    this.storage = new import_utils23.TypedStorage(namespacedStorage, {
       schema: options.validateOnRead ? authorizationVaultEntrySchema : void 0,
       throwOnInvalid: false
     });
@@ -4290,7 +4392,7 @@ var StorageAuthorizationVault = class {
   async create(params) {
     const now = Date.now();
     const entry = {
-      id: (0, import_utils21.randomUUID)(),
+      id: (0, import_utils23.randomUUID)(),
       userSub: params.userSub,
       userEmail: params.userEmail,
       userName: params.userName,
@@ -4364,7 +4466,7 @@ var StorageAuthorizationVault = class {
     }
     const now = Date.now();
     const pendingAuth = {
-      id: (0, import_utils21.randomUUID)(),
+      id: (0, import_utils23.randomUUID)(),
       appId: params.appId,
       toolId: params.toolId,
       authUrl: params.authUrl,
@@ -4568,11 +4670,11 @@ var StorageAuthorizationVault = class {
 };
 
 // libs/auth/src/session/storage/in-memory-authorization-vault.ts
-var import_utils22 = require("@frontmcp/utils");
+var import_utils24 = require("@frontmcp/utils");
 var InMemoryAuthorizationVault = class extends StorageAuthorizationVault {
   memoryAdapter;
   constructor(options = {}) {
-    const memoryAdapter = new import_utils22.MemoryStorageAdapter();
+    const memoryAdapter = new import_utils24.MemoryStorageAdapter();
     super(memoryAdapter, {
       namespace: options.namespace ?? "vault",
       pendingAuthTtlMs: options.pendingAuthTtlMs
@@ -4593,7 +4695,7 @@ var InMemoryAuthorizationVault = class extends StorageAuthorizationVault {
 };
 
 // libs/auth/src/session/redis-session.store.ts
-var import_utils25 = require("@frontmcp/utils");
+var import_utils27 = require("@frontmcp/utils");
 var RedisSessionStore = class {
   storage;
   keyPrefix;
@@ -4615,14 +4717,14 @@ var RedisSessionStore = class {
       });
     }
     if ("redis" in config && config.redis) {
-      this.storage = new import_utils25.RedisStorageAdapter({
+      this.storage = new import_utils27.RedisStorageAdapter({
         client: config.redis,
         keyPrefix: this.keyPrefix
       });
       this.externalInstance = true;
     } else {
       const redisConfig = config;
-      this.storage = new import_utils25.RedisStorageAdapter({
+      this.storage = new import_utils27.RedisStorageAdapter({
         config: {
           host: redisConfig.host,
           port: redisConfig.port ?? 6379,
@@ -4804,7 +4906,7 @@ var RedisSessionStore = class {
    * Allocate a new session ID
    */
   allocId() {
-    return (0, import_utils25.randomUUID)();
+    return (0, import_utils27.randomUUID)();
   }
   /**
    * Disconnect from Redis (only if we created the connection)
@@ -4840,7 +4942,7 @@ var RedisSessionStore = class {
 };
 
 // libs/auth/src/session/vercel-kv-session.store.ts
-var import_utils26 = require("@frontmcp/utils");
+var import_utils28 = require("@frontmcp/utils");
 var VercelKvSessionStore = class {
   storage;
   keyPrefix;
@@ -4860,7 +4962,7 @@ var VercelKvSessionStore = class {
         maxRequests: this.security.rateLimiting?.maxRequests
       });
     }
-    this.storage = new import_utils26.VercelKvStorageAdapter({
+    this.storage = new import_utils28.VercelKvStorageAdapter({
       url: config.url,
       token: config.token,
       keyPrefix: this.keyPrefix
@@ -5034,7 +5136,7 @@ var VercelKvSessionStore = class {
    * Allocate a new session ID
    */
   allocId() {
-    return (0, import_utils26.randomUUID)();
+    return (0, import_utils28.randomUUID)();
   }
   /**
    * Disconnect from Vercel KV
@@ -5063,7 +5165,7 @@ var VercelKvSessionStore = class {
 };
 
 // libs/auth/src/session/orchestrated-token.store.ts
-var import_utils27 = require("@frontmcp/utils");
+var import_utils29 = require("@frontmcp/utils");
 var InMemoryOrchestratedTokenStore = class {
   /** Token storage: Map<compositeKey, ProviderTokenRecord> */
   tokens = /* @__PURE__ */ new Map();
@@ -5105,7 +5207,7 @@ var InMemoryOrchestratedTokenStore = class {
     }
     const info = new TextEncoder().encode(`orchestrated-token:${compositeKey}`);
     const salt = new TextEncoder().encode("frontmcp-token-store");
-    const derivedKey = (0, import_utils27.hkdfSha256)(this.encryptionKey, salt, info, 32);
+    const derivedKey = (0, import_utils29.hkdfSha256)(this.encryptionKey, salt, info, 32);
     this.derivedKeys.set(compositeKey, derivedKey);
     return derivedKey;
   }
@@ -5115,8 +5217,8 @@ var InMemoryOrchestratedTokenStore = class {
   async encryptRecord(compositeKey, record) {
     const key = await this.deriveKeyForRecord(compositeKey);
     const plaintext = JSON.stringify(record);
-    const iv = (0, import_utils27.randomBytes)(12);
-    const { ciphertext, tag } = (0, import_utils27.encryptAesGcm)(key, new TextEncoder().encode(plaintext), iv);
+    const iv = (0, import_utils29.randomBytes)(12);
+    const { ciphertext, tag } = (0, import_utils29.encryptAesGcm)(key, new TextEncoder().encode(plaintext), iv);
     return JSON.stringify({
       iv: Buffer.from(iv).toString("base64url"),
       tag: Buffer.from(tag).toString("base64url"),
@@ -5132,7 +5234,7 @@ var InMemoryOrchestratedTokenStore = class {
     const ivBytes = Buffer.from(iv, "base64url");
     const tagBytes = Buffer.from(tag, "base64url");
     const ciphertextBytes = Buffer.from(data, "base64url");
-    const plaintext = (0, import_utils27.decryptAesGcm)(key, ciphertextBytes, ivBytes, tagBytes);
+    const plaintext = (0, import_utils29.decryptAesGcm)(key, ciphertextBytes, ivBytes, tagBytes);
     return JSON.parse(new TextDecoder().decode(plaintext));
   }
   /**
@@ -5334,7 +5436,7 @@ var InMemoryOrchestratedTokenStore = class {
 };
 
 // libs/auth/src/session/orchestrated-token.crypto.ts
-var import_utils28 = require("@frontmcp/utils");
+var import_utils30 = require("@frontmcp/utils");
 var HKDF_SALT = new TextEncoder().encode("frontmcp-token-store");
 function deriveKeyForRecord(masterKey, compositeKey, cache) {
   const cached = cache.get(compositeKey);
@@ -5342,14 +5444,14 @@ function deriveKeyForRecord(masterKey, compositeKey, cache) {
     return cached;
   }
   const info = new TextEncoder().encode(`orchestrated-token:${compositeKey}`);
-  const derived = (0, import_utils28.hkdfSha256)(masterKey, HKDF_SALT, info, 32);
+  const derived = (0, import_utils30.hkdfSha256)(masterKey, HKDF_SALT, info, 32);
   cache.set(compositeKey, derived);
   return derived;
 }
 function encryptRecord(key, record) {
   const plaintext = JSON.stringify(record);
-  const iv = (0, import_utils28.randomBytes)(12);
-  const { ciphertext, tag } = (0, import_utils28.encryptAesGcm)(key, new TextEncoder().encode(plaintext), iv);
+  const iv = (0, import_utils30.randomBytes)(12);
+  const { ciphertext, tag } = (0, import_utils30.encryptAesGcm)(key, new TextEncoder().encode(plaintext), iv);
   return JSON.stringify({
     iv: Buffer.from(iv).toString("base64url"),
     tag: Buffer.from(tag).toString("base64url"),
@@ -5361,7 +5463,7 @@ function decryptRecord(key, encrypted) {
   const ivBytes = Buffer.from(iv, "base64url");
   const tagBytes = Buffer.from(tag, "base64url");
   const ciphertextBytes = Buffer.from(data, "base64url");
-  const plaintext = (0, import_utils28.decryptAesGcm)(key, ciphertextBytes, ivBytes, tagBytes);
+  const plaintext = (0, import_utils30.decryptAesGcm)(key, ciphertextBytes, ivBytes, tagBytes);
   return JSON.parse(new TextDecoder().decode(plaintext));
 }
 
@@ -5540,7 +5642,7 @@ var StorageOrchestratedTokenStore = class {
 };
 
 // libs/auth/src/session/federated-auth.session.ts
-var import_utils29 = require("@frontmcp/utils");
+var import_utils31 = require("@frontmcp/utils");
 function toSessionRecord(session) {
   return {
     ...session,
@@ -5615,7 +5717,7 @@ var InMemoryFederatedAuthSessionStore = class {
   createSession(params) {
     const now = Date.now();
     return {
-      id: (0, import_utils29.randomUUID)(),
+      id: (0, import_utils31.randomUUID)(),
       pendingAuthId: params.pendingAuthId,
       clientId: params.clientId,
       redirectUri: params.redirectUri,
@@ -5627,6 +5729,7 @@ var InMemoryFederatedAuthSessionStore = class {
       providerQueue: [...params.providerIds],
       completedProviders: /* @__PURE__ */ new Map(),
       skippedProviders: [],
+      signinBinding: params.signinBinding,
       createdAt: now,
       expiresAt: now + this.sessionTtlMs
     };
@@ -5647,7 +5750,7 @@ var InMemoryFederatedAuthSessionStore = class {
 function createFederatedAuthSession(params, ttlMs = 15 * 60 * 1e3) {
   const now = Date.now();
   return {
-    id: (0, import_utils29.randomUUID)(),
+    id: (0, import_utils31.randomUUID)(),
     pendingAuthId: params.pendingAuthId,
     clientId: params.clientId,
     redirectUri: params.redirectUri,
@@ -5659,6 +5762,7 @@ function createFederatedAuthSession(params, ttlMs = 15 * 60 * 1e3) {
     providerQueue: [...params.providerIds],
     completedProviders: /* @__PURE__ */ new Map(),
     skippedProviders: [],
+    signinBinding: params.signinBinding,
     createdAt: now,
     expiresAt: now + ttlMs
   };
@@ -5704,7 +5808,7 @@ function startNextProvider(session, pkce, state) {
 }
 
 // libs/auth/src/session/storage-federated-auth.session.ts
-var import_utils30 = require("@frontmcp/utils");
+var import_utils32 = require("@frontmcp/utils");
 var StorageFederatedAuthSessionStore = class {
   storage;
   namespace;
@@ -5713,7 +5817,7 @@ var StorageFederatedAuthSessionStore = class {
     this.namespace = options.namespace ?? "fed";
     this.storageIsNamespaced = this.isNamespacedStorage(storage);
     const namespacedStorage = this.storageIsNamespaced ? storage.namespace(this.namespace) : storage;
-    this.storage = new import_utils30.TypedStorage(namespacedStorage);
+    this.storage = new import_utils32.TypedStorage(namespacedStorage);
   }
   async store(session) {
     await this.put(session);
@@ -5784,7 +5888,7 @@ var InMemoryConsentStore = class {
 };
 
 // libs/auth/src/session/storage-consent.store.ts
-var import_utils31 = require("@frontmcp/utils");
+var import_utils33 = require("@frontmcp/utils");
 var StorageConsentStore = class {
   storage;
   namespace;
@@ -5793,7 +5897,7 @@ var StorageConsentStore = class {
     this.namespace = options.namespace ?? "remembered-consent";
     this.storageIsNamespaced = this.isNamespacedStorage(storage);
     const namespacedStorage = this.storageIsNamespaced ? storage.namespace(this.namespace) : storage;
-    this.storage = new import_utils31.TypedStorage(namespacedStorage);
+    this.storage = new import_utils33.TypedStorage(namespacedStorage);
   }
   async get(userSub, clientId) {
     return this.storage.get(this.key(userSub, clientId));
@@ -5815,7 +5919,7 @@ var StorageConsentStore = class {
 
 // libs/auth/src/session/encrypted-authorization-vault.ts
 var import_lazy_zod5 = require("@frontmcp/lazy-zod");
-var import_utils32 = require("@frontmcp/utils");
+var import_utils34 = require("@frontmcp/utils");
 var redisVaultEntrySchema = import_lazy_zod5.z.object({
   /** Vault ID */
   id: import_lazy_zod5.z.string(),
@@ -5840,7 +5944,7 @@ var redisVaultEntrySchema = import_lazy_zod5.z.object({
   /** Encrypted sensitive data blob */
   encrypted: encryptedDataSchema
 });
-var encryptionContextStorage = new import_utils32.AsyncLocalStorage();
+var encryptionContextStorage = new import_utils34.AsyncLocalStorage();
 var EncryptedRedisVault = class {
   constructor(redis, encryption, namespace = "vault:") {
     this.redis = redis;
@@ -5976,7 +6080,7 @@ var EncryptedRedisVault = class {
   async create(params) {
     const now = Date.now();
     const entry = {
-      id: (0, import_utils32.randomUUID)(),
+      id: (0, import_utils34.randomUUID)(),
       userSub: params.userSub,
       userEmail: params.userEmail,
       userName: params.userName,
@@ -6035,7 +6139,7 @@ var EncryptedRedisVault = class {
     }
     const now = Date.now();
     const pendingAuth = {
-      id: (0, import_utils32.randomUUID)(),
+      id: (0, import_utils34.randomUUID)(),
       appId: params.appId,
       toolId: params.toolId,
       authUrl: params.authUrl,
@@ -6213,7 +6317,7 @@ function createEncryptedVault(redis, config = {}) {
 }
 
 // libs/auth/src/session/token.refresh.ts
-var import_utils33 = require("@frontmcp/utils");
+var import_utils35 = require("@frontmcp/utils");
 function toEpochSeconds(exp) {
   if (exp == null) return void 0;
   if (exp instanceof Date) return Math.floor(exp.getTime() / 1e3);
@@ -6235,7 +6339,7 @@ function tryJwtExp(token) {
   const parts = token.split(".");
   if (parts.length < 2) return void 0;
   try {
-    const json = JSON.parse(new TextDecoder().decode((0, import_utils33.base64urlDecode)(parts[1])));
+    const json = JSON.parse(new TextDecoder().decode((0, import_utils35.base64urlDecode)(parts[1])));
     const e = json?.exp;
     return typeof e === "number" ? toEpochSeconds(e) : void 0;
   } catch {
@@ -6298,7 +6402,7 @@ var progressiveAuthStateSchema = import_lazy_zod6.z.object({
 });
 
 // libs/auth/src/authorization/authorization.class.ts
-var import_utils36 = require("@frontmcp/utils");
+var import_utils38 = require("@frontmcp/utils");
 var AuthorizationBase = class _AuthorizationBase {
   id;
   isAnonymous;
@@ -6346,14 +6450,14 @@ var AuthorizationBase = class _AuthorizationBase {
    * @param fingerprint - Optional client fingerprint for tracking
    */
   createTransportSession(protocol, fingerprint) {
-    const sessionId = (0, import_utils36.randomUUID)();
+    const sessionId = (0, import_utils38.randomUUID)();
     const session = {
       id: sessionId,
       authorizationId: this.id,
       protocol,
       createdAt: Date.now(),
       expiresAt: this.expiresAt,
-      nodeId: (0, import_utils36.getMachineId)(),
+      nodeId: (0, import_utils38.getMachineId)(),
       clientFingerprint: fingerprint
     };
     this.#sessions.set(session.id, session);
@@ -6494,7 +6598,7 @@ var AuthorizationBase = class _AuthorizationBase {
    */
   static isJwtHeader(segment) {
     try {
-      const bytes = (0, import_utils36.base64urlDecode)(segment);
+      const bytes = (0, import_utils38.base64urlDecode)(segment);
       const text = new TextDecoder().decode(bytes);
       const parsed = JSON.parse(text);
       return typeof parsed === "object" && parsed !== null && typeof parsed.alg === "string";
@@ -6546,7 +6650,7 @@ var AuthorizationBase = class _AuthorizationBase {
 };
 
 // libs/auth/src/authorization/public.authorization.ts
-var import_utils37 = require("@frontmcp/utils");
+var import_utils39 = require("@frontmcp/utils");
 var PublicAuthorization = class _PublicAuthorization extends AuthorizationBase {
   mode = "public";
   /**
@@ -6582,7 +6686,7 @@ var PublicAuthorization = class _PublicAuthorization extends AuthorizationBase {
       allowedTools = "all",
       allowedPrompts = "all"
     } = ctx;
-    const uuid = (0, import_utils37.randomUUID)();
+    const uuid = (0, import_utils39.randomUUID)();
     const sub = `${prefix}:${uuid}`;
     const user = {
       sub,
@@ -6666,7 +6770,7 @@ var PublicAuthorization = class _PublicAuthorization extends AuthorizationBase {
 };
 
 // libs/auth/src/authorization/transparent.authorization.ts
-var import_utils38 = require("@frontmcp/utils");
+var import_utils40 = require("@frontmcp/utils");
 var TransparentAuthorization = class _TransparentAuthorization extends AuthorizationBase {
   mode = "transparent";
   /**
@@ -6766,7 +6870,7 @@ var TransparentAuthorization = class _TransparentAuthorization extends Authoriza
   static generateAuthorizationId(token) {
     const parts = token.split(".");
     const signature = parts[2] || token;
-    return (0, import_utils38.sha256Hex)(signature).substring(0, 16);
+    return (0, import_utils40.sha256Hex)(signature).substring(0, 16);
   }
   /**
    * Get the issuer from the token claims
@@ -6792,11 +6896,11 @@ var TransparentAuthorization = class _TransparentAuthorization extends Authoriza
 };
 
 // libs/auth/src/utils/authorization-id.utils.ts
-var import_utils39 = require("@frontmcp/utils");
+var import_utils41 = require("@frontmcp/utils");
 function deriveAuthorizationId(token) {
   const parts = token.split(".");
   const signature = parts[2] || token;
-  return (0, import_utils39.sha256Hex)(signature).substring(0, 16);
+  return (0, import_utils41.sha256Hex)(signature).substring(0, 16);
 }
 
 // libs/auth/src/authorization/orchestrated.authorization.ts
@@ -7165,7 +7269,7 @@ var OrchestratedAuthAccessorAdapter = class {
 };
 
 // libs/auth/src/authorization/dcr-client.registry.ts
-var import_utils40 = require("@frontmcp/utils");
+var import_utils42 = require("@frontmcp/utils");
 var DEFAULT_MAX_DYNAMIC_CLIENTS = 1e3;
 function globMatch(pattern, input) {
   let p = 0;
@@ -7291,7 +7395,7 @@ var DcrClientRegistry = class {
     if (!isConfidential) return "ok";
     if (!client.client_secret) return "invalid";
     if (!presentedSecret) return "invalid";
-    return (0, import_utils40.timingSafeEqual)((0, import_utils40.sha256)(presentedSecret), (0, import_utils40.sha256)(client.client_secret)) ? "ok" : "invalid";
+    return (0, import_utils42.timingSafeEqual)((0, import_utils42.sha256)(presentedSecret), (0, import_utils42.sha256)(client.client_secret)) ? "ok" : "invalid";
   }
   /** Whether a client id is known to the registry. */
   has(clientId) {
@@ -7379,7 +7483,7 @@ var DcrClientRegistry = class {
     if (typeof presented !== "string" || presented.length === 0) {
       return false;
     }
-    return (0, import_utils40.timingSafeEqual)((0, import_utils40.sha256)(presented), (0, import_utils40.sha256)(expected));
+    return (0, import_utils42.timingSafeEqual)((0, import_utils42.sha256)(presented), (0, import_utils42.sha256)(expected));
   }
 };
 
@@ -7708,7 +7812,7 @@ var cimdConfigSchema = import_lazy_zod9.z.object({
 init_cimd_cache();
 
 // libs/auth/src/cimd/cimd.service.ts
-var import_utils41 = require("@frontmcp/utils");
+var import_utils43 = require("@frontmcp/utils");
 init_cimd_cache();
 var CimdService = class {
   config;
@@ -7883,7 +7987,7 @@ var CimdService = class {
             httpStatus: 304
           });
         }
-        if ((0, import_utils41.isRedirectResponse)(response)) {
+        if ((0, import_utils43.isRedirectResponse)(response)) {
           const location = response.headers.get("location");
           if (!location) {
             throw new CimdFetchError(clientId, "Redirect response missing Location header", {
@@ -8196,7 +8300,16 @@ var upstreamProviderSchema = import_lazy_zod10.z.object({
   /** User info endpoint (optional, used to enrich the session identity). */
   userInfoEndpoint: import_lazy_zod10.z.string().url().optional(),
   /** JWKS URI for upstream id_token validation (optional). */
-  jwksUri: import_lazy_zod10.z.string().url().optional()
+  jwksUri: import_lazy_zod10.z.string().url().optional(),
+  /**
+   * The provider's issuer identifier (its OIDC `iss`). When set, an RFC 9207
+   * `iss` on the provider's callback and the `iss` of its `id_token` must name
+   * it (or one of {@link additionalIssuers}). Without it the provider's
+   * `id_token` is not used for identity; `userInfoEndpoint` is asked instead.
+   */
+  issuer: import_lazy_zod10.z.string().url().optional(),
+  /** Other issuer values this provider legitimately uses. */
+  additionalIssuers: import_lazy_zod10.z.array(import_lazy_zod10.z.string().trim().min(1, "additionalIssuers entries must be non-empty")).optional()
 }).refine((p) => !!(p.authorizationEndpoint ?? p.authorizeUrl), {
   message: "authorizationEndpoint (or authorizeUrl) is required",
   path: ["authorizationEndpoint"]
@@ -8605,17 +8718,21 @@ var sharedAuthFields = {
    * Require the OAuth client to be KNOWN (registered via DCR / pre-registered,
    * or a CIMD client-id URL) before an authorization request is accepted.
    *
-   * @default false (backward compatible — unknown client ids are accepted).
+   * @default true
    *
-   * SECURITY: with the default, an unregistered client id has no trusted
-   * `redirect_uris` to validate against, so its (attacker-chosen) redirect_uri
-   * is accepted and a real authorization code can be delivered to an attacker
-   * (auth-code interception → account takeover in real-IdP modes). Set this to
-   * `true` (recommended for production) to enforce OAuth 2.1 exact redirect-uri
-   * matching for every client. Clients on a configured
-   * `dcr.allowedRedirectUris` allowlist still pass.
-   */
-  requireRegisteredClients: import_lazy_zod14.z.boolean().default(false),
+   * SECURITY: an unregistered client id has no trusted `redirect_uris` to
+   * validate against, so accepting it lets anyone start a sign-in whose
+   * authorization code is delivered to a redirect_uri of their choosing
+   * (auth-code interception). `false` is for local development only; a
+   * `dcr.allowedRedirectUris` allowlist still constrains such clients.
+   */
+  requireRegisteredClients: import_lazy_zod14.z.boolean().default(true),
+  /**
+   * Scopes the server may grant (exact values or `*` globs). Requested scopes
+   * outside this list are dropped from the grant. Unset → the standard OpenID
+   * scopes only (see `DEFAULT_ALLOWED_SCOPES`).
+   */
+  allowedScopes: import_lazy_zod14.z.array(import_lazy_zod14.z.string().trim().min(1, "allowedScopes entries must be non-empty")).optional(),
   cimd: cimdConfigSchema.optional(),
   // #469 — custom auth UI as a slot→file map + extras name→handler map (per-app
   // under splitByApp). Both optional; omitting them serves the built-in pages.
@@ -9226,6 +9343,43 @@ var AudienceValidator = class _AudienceValidator {
   }
 };
 
+// libs/auth/src/utils/scope-grant.utils.ts
+var DEFAULT_ALLOWED_SCOPES = Object.freeze([
+  "openid",
+  "profile",
+  "email",
+  "offline_access"
+]);
+function grantScopes(requested, allowed) {
+  const patterns = allowed ?? DEFAULT_ALLOWED_SCOPES;
+  const granted = [];
+  for (const scope of requested) {
+    if (!scope || granted.includes(scope)) continue;
+    if (patterns.some((pattern) => globMatch(pattern, scope))) granted.push(scope);
+  }
+  return granted;
+}
+
+// libs/auth/src/utils/redirect-uri.utils.ts
+function isLoopbackRedirectUri(uri) {
+  let url;
+  try {
+    url = new URL(uri);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return false;
+  if (url.username || url.password) return false;
+  const host = url.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  if (host === "localhost" || host === "::1") return true;
+  const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (m) {
+    const octets = m.slice(1).map((n) => Number(n));
+    return octets.every((o) => o >= 0 && o <= 255) && octets[0] === 127;
+  }
+  return false;
+}
+
 // libs/auth/src/vault/auth-providers.types.ts
 var import_lazy_zod19 = require("@frontmcp/lazy-zod");
 var credentialScopeSchema = import_lazy_zod19.z.enum(["global", "user", "session"]);
@@ -9468,7 +9622,7 @@ var CredentialCache = class {
 var AUTH_PROVIDERS_ACCESSOR = /* @__PURE__ */ Symbol.for("frontmcp:AUTH_PROVIDERS_ACCESSOR");
 
 // libs/auth/src/vault/auth-providers.accessor.impl.ts
-var import_utils44 = require("@frontmcp/utils");
+var import_utils46 = require("@frontmcp/utils");
 var AuthProvidersAccessorImpl = class {
   constructor(registry, vault, cache, loader, context, logger) {
     this.registry = registry;
@@ -9683,7 +9837,7 @@ var AuthProvidersAccessorImpl = class {
         return { [credential.headerName]: credential.key };
       case "basic": {
         const value = `${credential.username}:${credential.password}`;
-        const encoded = credential.encodedValue ?? (0, import_utils44.base64Encode)(new TextEncoder().encode(value));
+        const encoded = credential.encodedValue ?? (0, import_utils46.base64Encode)(new TextEncoder().encode(value));
         return { Authorization: `Basic ${encoded}` };
       }
       case "custom":
@@ -10791,6 +10945,211 @@ async function evaluateRebac(policy, ctx) {
   return { granted: true, evaluatedPolicies: ["relationships"] };
 }
 
+// libs/auth/src/authorities/authorities.validation.ts
+var ABAC_OPERATORS = /* @__PURE__ */ new Set([
+  "eq",
+  "neq",
+  "in",
+  "notIn",
+  "gt",
+  "gte",
+  "lt",
+  "lte",
+  "contains",
+  "startsWith",
+  "endsWith",
+  "exists",
+  "matches"
+]);
+var CHECK_FIELDS = [
+  "roles",
+  "permissions",
+  "attributes",
+  "relationships",
+  "custom",
+  "guards",
+  "allOf",
+  "anyOf",
+  "not"
+];
+var RULE_FIELDS = /* @__PURE__ */ new Set([...CHECK_FIELDS, "operator"]);
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function unknownFields(value, known, path) {
+  const prefix = path ? `${path} has` : "has";
+  return Object.keys(value).filter((key) => !known.has(key)).map((key) => `${prefix} an unknown field "${key}"`);
+}
+function checkStringList(value, path) {
+  if (!Array.isArray(value)) return [`${path} must be a list of names`];
+  if (value.length === 0) return [`${path} is empty`];
+  return value.every(isNonEmptyString) ? [] : [`${path} must contain only non-empty names`];
+}
+var ALL_OR_ANY = /* @__PURE__ */ new Set(["all", "any"]);
+function checkAllOrAny(value, path) {
+  if (!isPlainObject(value)) return [`${path} must be an object with "all" or "any"`];
+  const problems = unknownFields(value, ALL_OR_ANY, path);
+  if (value["all"] === void 0 && value["any"] === void 0) {
+    problems.push(`${path} needs "all" or "any"`);
+  }
+  if (value["all"] !== void 0) problems.push(...checkStringList(value["all"], `${path}.all`));
+  if (value["any"] !== void 0) problems.push(...checkStringList(value["any"], `${path}.any`));
+  return problems;
+}
+var ATTRIBUTE_FIELDS = /* @__PURE__ */ new Set(["match", "conditions"]);
+var CONDITION_FIELDS = /* @__PURE__ */ new Set(["path", "op", "value"]);
+function isValueReference(value) {
+  return isPlainObject(value) && ("fromInput" in value || "fromClaims" in value);
+}
+function checkValueReference(value, path) {
+  const ref = value["fromInput"] ?? value["fromClaims"];
+  return Object.keys(value).length === 1 && isNonEmptyString(ref) ? [] : [`${path} must be { fromInput: "<name>" } or { fromClaims: "<path>" }`];
+}
+var OPERATOR_VALUES = {
+  in: { accepts: Array.isArray, needs: "a list" },
+  notIn: { accepts: Array.isArray, needs: "a list" },
+  gt: { accepts: (value) => typeof value === "number", needs: "a number" },
+  gte: { accepts: (value) => typeof value === "number", needs: "a number" },
+  lt: { accepts: (value) => typeof value === "number", needs: "a number" },
+  lte: { accepts: (value) => typeof value === "number", needs: "a number" },
+  startsWith: { accepts: (value) => typeof value === "string", needs: "a string" },
+  endsWith: { accepts: (value) => typeof value === "string", needs: "a string" },
+  matches: { accepts: (value) => typeof value === "string", needs: "a string" }
+};
+function checkConditionValue(op, condition, path) {
+  const value = condition["value"];
+  if (value === void 0) return [`${path} is missing`];
+  if (op === "exists") {
+    return typeof value === "boolean" ? [] : [`${path} must be true or false for "exists"`];
+  }
+  if (isValueReference(value)) return checkValueReference(value, path);
+  const expected = OPERATOR_VALUES[op];
+  if (expected && !expected.accepts(value)) return [`${path} must be ${expected.needs} for "${op}"`];
+  if (Array.isArray(value) && value.length === 0 && (op === "in" || op === "notIn")) return [`${path} is empty`];
+  return [];
+}
+function checkAttributes(value, path) {
+  if (!isPlainObject(value)) return [`${path} must be an object with "match" or "conditions"`];
+  const problems = unknownFields(value, ATTRIBUTE_FIELDS, path);
+  const { match, conditions } = value;
+  if (match === void 0 && conditions === void 0) {
+    problems.push(`${path} needs "match" or "conditions"`);
+  }
+  if (match !== void 0) {
+    if (!isPlainObject(match)) problems.push(`${path}.match must be an object`);
+    else if (Object.keys(match).length === 0) problems.push(`${path}.match is empty`);
+    else {
+      for (const [attribute, expected] of Object.entries(match)) {
+        const at = `${path}.match[${JSON.stringify(attribute)}]`;
+        if (expected === void 0) problems.push(`${at} has no value`);
+        else if (isValueReference(expected)) problems.push(...checkValueReference(expected, at));
+      }
+    }
+  }
+  if (conditions !== void 0) {
+    if (!Array.isArray(conditions)) problems.push(`${path}.conditions must be a list`);
+    else if (conditions.length === 0) problems.push(`${path}.conditions is empty`);
+    else {
+      conditions.forEach((condition, index) => {
+        const at = `${path}.conditions[${index}]`;
+        if (!isPlainObject(condition)) {
+          problems.push(`${at} must be an object with "path" and "op"`);
+          return;
+        }
+        problems.push(...unknownFields(condition, CONDITION_FIELDS, at));
+        if (!isNonEmptyString(condition["path"])) problems.push(`${at}.path must be a non-empty string`);
+        const op = condition["op"];
+        if (!ABAC_OPERATORS.has(op)) {
+          problems.push(`${at}.op "${String(condition["op"])}" is not an operator`);
+        } else {
+          problems.push(...checkConditionValue(op, condition, `${at}.value`));
+        }
+      });
+    }
+  }
+  return problems;
+}
+var RELATIONSHIP_FIELDS = /* @__PURE__ */ new Set(["type", "resource", "resourceId"]);
+function checkResourceId(value, path) {
+  if (isNonEmptyString(value)) return [];
+  if (isPlainObject(value) && Object.keys(value).length === 1) {
+    const ref = value["fromInput"] ?? value["fromClaims"];
+    if (isNonEmptyString(ref)) return [];
+  }
+  return [`${path} must be a string, { fromInput } or { fromClaims }`];
+}
+function checkRelationship(value, path) {
+  if (!isPlainObject(value)) return [`${path} must be an object with "type", "resource" and "resourceId"`];
+  const problems = unknownFields(value, RELATIONSHIP_FIELDS, path);
+  if (!isNonEmptyString(value["type"])) problems.push(`${path}.type must be a non-empty string`);
+  if (!isNonEmptyString(value["resource"])) problems.push(`${path}.resource must be a non-empty string`);
+  problems.push(...checkResourceId(value["resourceId"], `${path}.resourceId`));
+  return problems;
+}
+function checkRelationships(value, path) {
+  if (!Array.isArray(value)) return checkRelationship(value, path);
+  if (value.length === 0) return [`${path} is empty`];
+  return value.flatMap((relationship, index) => checkRelationship(relationship, `${path}[${index}]`));
+}
+function checkRuleList(value, path) {
+  if (!Array.isArray(value)) return [`${path} must be a list of rules`];
+  if (value.length === 0) return [`${path} is empty`];
+  return value.flatMap((rule, index) => checkRule(rule, `${path}[${index}]`));
+}
+function checkRule(rule, path) {
+  if (!isPlainObject(rule)) {
+    return [`${path || "the rule"} must be a rule object${typeof rule === "string" ? ", not a profile name" : ""}`];
+  }
+  const problems = unknownFields(rule, RULE_FIELDS, path);
+  if (!CHECK_FIELDS.some((field) => rule[field] !== void 0)) {
+    problems.push(`${path ? `${path} ` : ""}checks nothing`);
+  }
+  if (rule["operator"] !== void 0 && rule["operator"] !== "AND" && rule["operator"] !== "OR") {
+    problems.push(`${path}.operator must be "AND" or "OR"`);
+  }
+  if (rule["roles"] !== void 0) problems.push(...checkAllOrAny(rule["roles"], `${path}.roles`));
+  if (rule["permissions"] !== void 0) problems.push(...checkAllOrAny(rule["permissions"], `${path}.permissions`));
+  if (rule["attributes"] !== void 0) problems.push(...checkAttributes(rule["attributes"], `${path}.attributes`));
+  if (rule["relationships"] !== void 0) {
+    problems.push(...checkRelationships(rule["relationships"], `${path}.relationships`));
+  }
+  if (rule["custom"] !== void 0) {
+    if (!isPlainObject(rule["custom"])) problems.push(`${path}.custom must be an object`);
+    else if (Object.keys(rule["custom"]).length === 0) problems.push(`${path}.custom is empty`);
+  }
+  if (rule["guards"] !== void 0) {
+    const guards = rule["guards"];
+    if (!Array.isArray(guards)) problems.push(`${path}.guards must be a list of functions`);
+    else if (guards.length === 0) problems.push(`${path}.guards is empty`);
+    else if (!guards.every((guard) => typeof guard === "function")) {
+      problems.push(`${path}.guards must contain only functions`);
+    }
+  }
+  if (rule["allOf"] !== void 0) problems.push(...checkRuleList(rule["allOf"], `${path}.allOf`));
+  if (rule["anyOf"] !== void 0) problems.push(...checkRuleList(rule["anyOf"], `${path}.anyOf`));
+  if (rule["not"] !== void 0) problems.push(...checkRule(rule["not"], `${path}.not`));
+  return problems;
+}
+function findAuthoritiesRuleProblems(authorities) {
+  if (typeof authorities === "string") {
+    return authorities.length > 0 ? [] : ["the profile name is empty"];
+  }
+  if (Array.isArray(authorities)) {
+    if (authorities.length === 0) return ["the list of profiles is empty"];
+    return authorities.every(isNonEmptyString) ? [] : ["a list of profiles must contain only non-empty profile names"];
+  }
+  if (!isPlainObject(authorities)) {
+    return ["must be a profile name, a list of profile names, or a rule object"];
+  }
+  return checkRule(authorities, "");
+}
+function findAuthoritiesProfileProblems(name, policy) {
+  return checkRule(policy, "").map((problem) => `profile "${name}": ${problem.replace(/^\./, "")}`);
+}
+
 // libs/auth/src/authorities/authorities.engine.ts
 function mergeResult(base, ...others) {
   const evaluatedPolicies = [...base.evaluatedPolicies];
@@ -10799,8 +11158,12 @@ function mergeResult(base, ...others) {
   }
   return { ...base, evaluatedPolicies };
 }
-function granted(policies) {
-  return { granted: true, evaluatedPolicies: policies };
+function invalidRule(problems, policies = []) {
+  return {
+    granted: false,
+    deniedBy: `invalid authorities rule: ${problems.join("; ")}`,
+    evaluatedPolicies: policies
+  };
 }
 var AuthoritiesEngine = class {
   constructor(profiles, evaluators) {
@@ -10809,10 +11172,32 @@ var AuthoritiesEngine = class {
   }
   profiles;
   evaluators;
+  /** Problems found per rule object, so a rule is validated once however often it is evaluated. */
+  ruleProblems = /* @__PURE__ */ new WeakMap();
+  /**
+   * Problems with an `authorities` value declared on an entry (see {@link findAuthoritiesRuleProblems}).
+   * The server reports them when it starts; {@link evaluate} denies such a value.
+   */
+  findRuleProblems(authorities) {
+    return findAuthoritiesRuleProblems(authorities);
+  }
+  /**
+   * Problems with every registered profile's rule (see {@link findAuthoritiesRuleProblems}).
+   * The server reports them when it starts.
+   */
+  findProfileProblems() {
+    return Object.entries(this.profiles.getAll()).flatMap(
+      ([name, policy]) => findAuthoritiesProfileProblems(name, policy)
+    );
+  }
   /**
    * Evaluate an AuthoritiesMetadata value (string, string[], or policy object).
+   *
+   * A value that is malformed or checks nothing (see {@link findAuthoritiesRuleProblems}) is denied.
    */
   async evaluate(authorities, ctx) {
+    const problems = this.problemsOf(authorities, findAuthoritiesRuleProblems);
+    if (problems.length > 0) return invalidRule(problems);
     if (typeof authorities === "string") {
       return this.evaluateProfile(authorities, ctx);
     }
@@ -10833,6 +11218,8 @@ var AuthoritiesEngine = class {
         evaluatedPolicies: [`profile:${name}`]
       };
     }
+    const problems = this.problemsOf(policy, (rule) => findAuthoritiesProfileProblems(name, rule));
+    if (problems.length > 0) return invalidRule(problems, [`profile:${name}`]);
     const result = await this.evaluatePolicy(policy, ctx);
     if (!result.granted) {
       return {
@@ -10843,6 +11230,16 @@ var AuthoritiesEngine = class {
     }
     return mergeResult(result, { granted: true, evaluatedPolicies: [`profile:${name}`] });
   }
+  /** Validate a rule, reusing the result for a rule object seen before. */
+  problemsOf(rule, find) {
+    if (typeof rule !== "object" || rule === null) return find(rule);
+    let problems = this.ruleProblems.get(rule);
+    if (!problems) {
+      problems = find(rule);
+      this.ruleProblems.set(rule, problems);
+    }
+    return problems;
+  }
   /**
    * Evaluate an array of profile names (AND semantics).
    */
@@ -10891,7 +11288,7 @@ var AuthoritiesEngine = class {
       results.push(await this.evaluateNot(policy.not, ctx));
     }
     if (results.length === 0) {
-      return granted([]);
+      return invalidRule(["checks nothing"]);
     }
     return this.combineResults(results, operator);
   }
@@ -10942,14 +11339,15 @@ var AuthoritiesEngine = class {
   }
   /**
    * Evaluate async guard functions in sequence.
-   * Each guard returns true (granted) or a string (denial message).
+   * Only `true` grants. A string is the denial message; anything else (`false`, but also
+   * `undefined` from a guard that forgot to return, `null`, `0` or an object) denies.
    */
   async evaluateGuards(guards, ctx) {
     for (let i = 0; i < guards.length; i++) {
       const guard = guards[i];
       const result = await guard(ctx);
-      if (result === false || typeof result === "string") {
-        const denialMessage = typeof result === "string" ? result : `guard[${i}] denied`;
+      if (result !== true) {
+        const denialMessage = typeof result === "string" ? result : result === false ? `guard[${i}] denied` : `guard[${i}] did not return true (returned ${result === null ? "null" : typeof result})`;
         return {
           granted: false,
           deniedBy: `guards[${i}]: ${denialMessage}`,
@@ -11007,6 +11405,13 @@ var AuthoritiesEngine = class {
       evaluatedPolicies: ["not", ...result.evaluatedPolicies]
     };
   }
+  /**
+   * The policy a profile name stands for when `evaluate()` is given that name, or `undefined`
+   * when no such profile is registered. Lets callers inspect a named rule without evaluating it.
+   */
+  resolveProfile(name) {
+    return this.profiles.resolve(name);
+  }
 };
 
 // libs/auth/src/authorities/authorities.registry.ts
@@ -11252,6 +11657,7 @@ var FetchCredentialMiddleware = class {
   AuthoritiesProfileRegistry,
   AuthorityDeniedError,
   AuthorizationBase,
+  BUILT_IN_AUTH_PAGE_CSP,
   CDN,
   CREDENTIALS_ACCESSOR,
   CimdClientIdMismatchError,
@@ -11266,6 +11672,7 @@ var FetchCredentialMiddleware = class {
   CredentialProviderAlreadyRegisteredError,
   CredentialStorageError,
   CredentialsAccessorImpl,
+  DEFAULT_ALLOWED_SCOPES,
   DEFAULT_INCREMENTAL_TICKET_TTL_MS,
   DEFAULT_RESUME_TTL_MS,
   DEFAULT_THEME,
@@ -11304,6 +11711,9 @@ var FetchCredentialMiddleware = class {
   RedisAuthorizationStore,
   RedisSessionStore,
   SECURE_STORE_ACCESSOR,
+  SIGNIN_BINDING_COOKIE_PREFIX,
+  SIGNIN_BINDING_MAX_AGE_SECONDS,
+  SIGNIN_BINDING_SECURE_COOKIE_PREFIX,
   ScopeDeniedError,
   SecureStoreAccessorImpl,
   SessionCredentialVault,
@@ -11379,6 +11789,7 @@ var FetchCredentialMiddleware = class {
   buildToolConsentPage,
   buildUnauthorizedHeader,
   buildWwwAuthenticate,
+  builtInAuthPageHeaders,
   centeredCardLayout,
   checkSsrfProtection,
   cimdCacheConfigSchema,
@@ -11398,6 +11809,7 @@ var FetchCredentialMiddleware = class {
   createLayout,
   createSecureStore,
   createSessionCredentialVault,
+  createSigninBinding,
   createTokenStorageAdapter,
   credentialProviderConfigSchema,
   credentialSchema,
@@ -11430,6 +11842,8 @@ var FetchCredentialMiddleware = class {
   federatedLoginStateSchema,
   federatedProviderItemSchema,
   federatedSelectionSchema,
+  findAuthoritiesProfileProblems,
+  findAuthoritiesRuleProblems,
   flatRemoteProviderFields,
   fromSessionRecord,
   generateAuthorizationCode,
@@ -11441,6 +11855,7 @@ var FetchCredentialMiddleware = class {
   getProviderApps,
   getProviderScopes,
   getTokenSignatureFingerprint,
+  grantScopes,
   hasOnlyLocalhostRedirectUris,
   headerApplier,
   hkdfSha256,
@@ -11450,6 +11865,7 @@ var FetchCredentialMiddleware = class {
   isFrontMcpCredentials,
   isJwt,
   isLocalMode,
+  isLoopbackRedirectUri,
   isOrchestratedLocal,
   isOrchestratedMode,
   isOrchestratedRemote,
@@ -11479,6 +11895,7 @@ var FetchCredentialMiddleware = class {
   noopLogger,
   normalizeIssuer,
   oauthCredentialSchema,
+  openPendingLogin,
   orchestratedLocalSchema,
   orchestratedRemoteSchema,
   parseAuthOptions,
@@ -11506,6 +11923,7 @@ var FetchCredentialMiddleware = class {
   resolveRequiredScopes,
   resourceIdRefSchema,
   safeDecrypt,
+  sealPendingLogin,
   secureStoreConfigSchema,
   secureStoreCustomBackendSchema,
   secureStoreEncryptionSchema,
@@ -11516,6 +11934,8 @@ var FetchCredentialMiddleware = class {
   signCredentialResumeToken,
   signIncrementalAuthTicket,
   signSession,
+  signinBindingCookieName,
+  signinBindingMatches,
   skippedAppBehaviorSchema,
   sseTransportStateSchema,
   sshKeyCredentialSchema,
@@ -11548,5 +11968,6 @@ var FetchCredentialMiddleware = class {
   verifyOrParseSession,
   verifyPkce,
   verifySession,
-  wideLayout
+  wideLayout,
+  withoutSecretFieldValues
 });