@frontmcp/auth 1.9.3 → 1.9.5

package/README.md

@@ -72,14 +72,14 @@ Apache-2.0 — see [LICENSE](../../LICENSE).
 
 <!-- links -->
 
-[docs-overview]: https://docs.agentfront.dev/frontmcp/authentication/overview
-[docs-remote]: https://docs.agentfront.dev/frontmcp/authentication/remote
-[docs-local]: https://docs.agentfront.dev/frontmcp/authentication/local
-[docs-jwks]: https://docs.agentfront.dev/frontmcp/authentication/local
-[docs-stores]: https://docs.agentfront.dev/frontmcp/authentication/production
-[docs-vault]: https://docs.agentfront.dev/frontmcp/authentication/authorities
-[docs-pkce]: https://docs.agentfront.dev/frontmcp/authentication/local
-[docs-cimd]: https://docs.agentfront.dev/frontmcp/authentication/cimd
-[docs-ui]: https://docs.agentfront.dev/frontmcp/authentication/custom-ui
-[docs-audience]: https://docs.agentfront.dev/frontmcp/authentication/token
-[docs-token-vault]: https://docs.agentfront.dev/frontmcp/authentication/authorities
+[docs-overview]: https://frontmcp.dev/reference/auth
+[docs-remote]: https://frontmcp.dev/reference/auth/remote
+[docs-local]: https://frontmcp.dev/reference/auth/local
+[docs-jwks]: https://frontmcp.dev/reference/auth/local
+[docs-stores]: https://frontmcp.dev/reference/auth/production
+[docs-vault]: https://frontmcp.dev/reference/auth/authorities
+[docs-pkce]: https://frontmcp.dev/reference/auth/local
+[docs-cimd]: https://frontmcp.dev/reference/auth/cimd
+[docs-ui]: https://frontmcp.dev/reference/auth/login-ui
+[docs-audience]: https://frontmcp.dev/reference/auth/tokens
+[docs-token-vault]: https://frontmcp.dev/reference/auth/authorities

package/authorities/authorities.errors.d.ts

@@ -30,6 +30,11 @@ export interface AuthorityDeniedErrorParams {
  * with code -32003 (FORBIDDEN).
  */
 export declare class AuthorityDeniedError extends Error {
+    /**
+     * `instanceof AuthorityDeniedError` also recognises a denial from another copy of this package in the
+     * process, so every copy of `@frontmcp/sdk` answers it as a FORBIDDEN error (#802).
+     */
+    static [Symbol.hasInstance](value: unknown): boolean;
     /** MCP error code for JSON-RPC responses */
     readonly mcpErrorCode = -32003;
     /** HTTP status code equivalent */

package/authorities/authorities.errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorities.errors.d.ts","sourceRoot":"","sources":["../../src/authorities/authorities.errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAQ7D;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,4CAA4C;IAC5C,QAAQ,CAAC,YAAY,UAAkB;IACvC,kCAAkC;IAClC,QAAQ,CAAC,UAAU,OAAO;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,IAAI,sBAAsB;IACnC,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,2CAA2C;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;gBAEvB,MAAM,EAAE,0BAA0B;IAW9C;;OAEG;IACH,cAAc,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;CAcpF"}
+{"version":3,"file":"authorities.errors.d.ts","sourceRoot":"","sources":["../../src/authorities/authorities.errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAQ7D;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,2CAA2C;IAC3C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C;;;OAGG;WACa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAI7D,4CAA4C;IAC5C,QAAQ,CAAC,YAAY,UAAkB;IACvC,kCAAkC;IAClC,QAAQ,CAAC,UAAU,OAAO;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,IAAI,sBAAsB;IACnC,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IACpC,2CAA2C;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;gBAEvB,MAAM,EAAE,0BAA0B;IAW9C;;OAEG;IACH,cAAc,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;CAcpF"}

package/esm/index.mjs

@@ -3660,7 +3660,7 @@ async function createSecureStore(options) {
     pepper: readPepper(config) ?? pepper,
     logger
   });
-  return { backend, scope, ttlMs, kind };
+  return { backend, scope, ttlMs, kind, ...storage ? {} : { close: () => adapter.disconnect() } };
 }
 
 // libs/auth/src/session/token.vault.ts
@@ -11664,8 +11664,16 @@ var AuthoritiesEvaluatorRegistry = class {
 };
 
 // libs/auth/src/authorities/authorities.errors.ts
+import { brandClass, isBrandedInstance } from "@frontmcp/utils";
 var FORBIDDEN_CODE = -32003;
 var AuthorityDeniedError = class extends Error {
+  /**
+   * `instanceof AuthorityDeniedError` also recognises a denial from another copy of this package in the
+   * process, so every copy of `@frontmcp/sdk` answers it as a FORBIDDEN error (#802).
+   */
+  static [Symbol.hasInstance](value) {
+    return isBrandedInstance(this, value);
+  }
   /** MCP error code for JSON-RPC responses */
   mcpErrorCode = FORBIDDEN_CODE;
   /** HTTP status code equivalent */
@@ -11710,6 +11718,7 @@ var AuthorityDeniedError = class extends Error {
     };
   }
 };
+brandClass(AuthorityDeniedError, "@frontmcp/auth:AuthorityDeniedError");
 
 // libs/auth/src/fetch/fetch-credential-middleware.ts
 var bearerApplier = {

package/esm/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@frontmcp/auth",
-  "version": "1.9.3",
+  "version": "1.9.5",
   "description": "FrontMCP Auth - Authentication, session management, and credential vault",
   "author": "AgentFront <info@agentfront.dev>",
-  "homepage": "https://docs.agentfront.dev",
+  "homepage": "https://frontmcp.dev/reference/auth",
   "license": "Apache-2.0",
   "keywords": [
     "mcp",
@@ -47,8 +47,8 @@
     "node": ">=24.0.0"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.3",
-    "@frontmcp/storage-sqlite": "1.9.3",
+    "@frontmcp/lazy-zod": "1.9.5",
+    "@frontmcp/storage-sqlite": "1.9.5",
     "@vercel/kv": "^3.0.0",
     "ioredis": "^5.0.0"
   },
@@ -64,8 +64,8 @@
     }
   },
   "dependencies": {
-    "@frontmcp/di": "1.9.3",
-    "@frontmcp/utils": "1.9.3",
+    "@frontmcp/di": "1.9.5",
+    "@frontmcp/utils": "1.9.5",
     "jose": "^6.0.0"
   },
   "devDependencies": {

package/index.js

@@ -3983,7 +3983,7 @@ async function createSecureStore(options) {
     pepper: readPepper(config) ?? pepper,
     logger
   });
-  return { backend, scope, ttlMs, kind };
+  return { backend, scope, ttlMs, kind, ...storage ? {} : { close: () => adapter.disconnect() } };
 }
 
 // libs/auth/src/session/token.vault.ts
@@ -11974,8 +11974,16 @@ var AuthoritiesEvaluatorRegistry = class {
 };
 
 // libs/auth/src/authorities/authorities.errors.ts
+var import_utils50 = require("@frontmcp/utils");
 var FORBIDDEN_CODE = -32003;
 var AuthorityDeniedError = class extends Error {
+  /**
+   * `instanceof AuthorityDeniedError` also recognises a denial from another copy of this package in the
+   * process, so every copy of `@frontmcp/sdk` answers it as a FORBIDDEN error (#802).
+   */
+  static [Symbol.hasInstance](value) {
+    return (0, import_utils50.isBrandedInstance)(this, value);
+  }
   /** MCP error code for JSON-RPC responses */
   mcpErrorCode = FORBIDDEN_CODE;
   /** HTTP status code equivalent */
@@ -12020,6 +12028,7 @@ var AuthorityDeniedError = class extends Error {
     };
   }
 };
+(0, import_utils50.brandClass)(AuthorityDeniedError, "@frontmcp/auth:AuthorityDeniedError");
 
 // libs/auth/src/fetch/fetch-credential-middleware.ts
 var bearerApplier = {

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@frontmcp/auth",
-  "version": "1.9.3",
+  "version": "1.9.5",
   "description": "FrontMCP Auth - Authentication, session management, and credential vault",
   "author": "AgentFront <info@agentfront.dev>",
-  "homepage": "https://docs.agentfront.dev",
+  "homepage": "https://frontmcp.dev/reference/auth",
   "license": "Apache-2.0",
   "keywords": [
     "mcp",
@@ -47,8 +47,8 @@
     "node": ">=24.0.0"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.9.3",
-    "@frontmcp/storage-sqlite": "1.9.3",
+    "@frontmcp/lazy-zod": "1.9.5",
+    "@frontmcp/storage-sqlite": "1.9.5",
     "@vercel/kv": "^3.0.0",
     "ioredis": "^5.0.0"
   },
@@ -64,8 +64,8 @@
     }
   },
   "dependencies": {
-    "@frontmcp/di": "1.9.3",
-    "@frontmcp/utils": "1.9.3",
+    "@frontmcp/di": "1.9.5",
+    "@frontmcp/utils": "1.9.5",
     "jose": "^6.0.0"
   },
   "devDependencies": {

package/session/secure-store.factory.d.ts

@@ -31,6 +31,8 @@ export interface ResolvedSecureStore {
     scope: SecureStoreScope;
     ttlMs?: number;
     kind: SecureStoreBackendKind;
+    /** Closes the storage the factory opened for the backing; absent for a custom backend or a passed `storage`. */
+    close?: () => Promise<void>;
 }
 /**
  * Options for {@link createSecureStore}.

package/session/secure-store.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secure-store.factory.d.ts","sourceRoot":"","sources":["../../src/session/secure-store.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,KAAK,iBAAiB,EAA0D,MAAM,uBAAuB,CAAC;AACvH,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAKhF,gEAAgE;AAChE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9E;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,sEAAsE;IACtE,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,qBAAqB;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AA8DD;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8BvG"}
+{"version":3,"file":"secure-store.factory.d.ts","sourceRoot":"","sources":["../../src/session/secure-store.factory.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE5E,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,KAAK,iBAAiB,EAA0D,MAAM,uBAAuB,CAAC;AACvH,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAKhF,gEAAgE;AAChE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9E;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,sBAAsB,CAAC;IAC7B,gHAAgH;IAChH,KAAK,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,sEAAsE;IACtE,MAAM,EAAE,iBAAiB,GAAG,SAAS,CAAC;IACtC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,qBAAqB;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AA8DD;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA8BvG"}