@frontmcp/plugin-approval 0.0.1 → 0.7.0

package/esm/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@frontmcp/plugin-approval",
+  "version": "0.7.0",
+  "description": "Approval plugin for FrontMCP - tool authorization workflow with PKCE webhook security",
+  "author": "AgentFront <info@agentfront.dev>",
+  "license": "Apache-2.0",
+  "keywords": [
+    "mcp",
+    "approval",
+    "authorization",
+    "pkce",
+    "webhook",
+    "plugin",
+    "frontmcp",
+    "agentfront"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentfront/frontmcp.git",
+    "directory": "plugins/plugin-approval"
+  },
+  "bugs": {
+    "url": "https://github.com/agentfront/frontmcp/issues"
+  },
+  "homepage": "https://github.com/agentfront/frontmcp/blob/main/plugins/plugin-approval/README.md",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "type": "module",
+  "main": "../index.js",
+  "module": "./index.mjs",
+  "types": "../index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    "./package.json": "../package.json",
+    ".": {
+      "require": {
+        "types": "../index.d.ts",
+        "default": "../index.js"
+      },
+      "import": {
+        "types": "../index.d.ts",
+        "default": "./index.mjs"
+      }
+    }
+  },
+  "dependencies": {
+    "ioredis": "^5.8.0",
+    "@frontmcp/sdk": "0.7.0",
+    "@frontmcp/utils": "0.7.0",
+    "reflect-metadata": "^0.2.2",
+    "zod": "^4.0.0"
+  },
+  "peerDependencies": {
+    "@vercel/kv": "^2.0.0 || ^3.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@vercel/kv": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "reflect-metadata": "^0.2.2"
+  }
+}

package/flows/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Flow exports for ApprovalPlugin.
+ *
+ * Flows for webhook and recheck approval modes.
+ *
+ * @module @frontmcp/plugin-approval
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/flows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/flows/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/hooks/approval-check.hook.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Hook plugin that checks tool approval before execution.
+ *
+ * @module @frontmcp/plugin-approval
+ */
+import { DynamicPlugin, FlowCtxOf } from '@frontmcp/sdk';
+/**
+ * Hook plugin that checks tool approval before execution.
+ *
+ * Priority 100 ensures this runs early (before cache at 1000).
+ */
+export default class ApprovalCheckPlugin extends DynamicPlugin<Record<string, never>> {
+    /**
+     * Check tool approval before execution.
+     */
+    checkApproval(flowCtx: FlowCtxOf<'tools:call-tool'>): Promise<void>;
+    private resolveApprovalConfig;
+    private isExpired;
+    private getCurrentContext;
+    private isApprovalContext;
+    private getStringExtra;
+    private isPreApprovedContext;
+    private handleApprovalRequired;
+}
+//# sourceMappingURL=approval-check.hook.d.ts.map

package/hooks/approval-check.hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-check.hook.d.ts","sourceRoot":"","sources":["../../src/hooks/approval-check.hook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAoB,SAAS,EAAE,MAAM,eAAe,CAAC;AAO3E;;;;GAIG;AAKH,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnF;;OAEG;IAEG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAwDzD,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,oBAAoB;YAUd,sBAAsB;CAsBrC"}

package/hooks/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Hook exports for ApprovalPlugin.
+ *
+ * @module @frontmcp/plugin-approval
+ */
+export { default as ApprovalCheckPlugin } from './approval-check.hook';
+//# sourceMappingURL=index.d.ts.map

package/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,IAAI,mBAAmB,EAAE,MAAM,uBAAuB,CAAC"}

package/index.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @frontmcp/plugin-approval
+ *
+ * Tool authorization workflow with PKCE webhook security.
+ *
+ * @module @frontmcp/plugin-approval
+ *
+ * @example
+ * ```typescript
+ * import { ApprovalPlugin } from '@frontmcp/plugin-approval';
+ *
+ * // Basic usage with auto-detected storage
+ * const plugin = ApprovalPlugin.init();
+ *
+ * // With webhook mode
+ * const plugin = ApprovalPlugin.init({
+ *   mode: 'webhook',
+ *   webhook: {
+ *     url: 'https://approval.example.com/webhook',
+ *     challengeTtl: 300,
+ *   },
+ * });
+ *
+ * // Install into scope
+ * await plugin.install(scope);
+ *
+ * // In tools, use this.approval
+ * class MyTool extends ToolContext {
+ *   async execute() {
+ *     const approved = await this.approval.isApproved('other-tool');
+ *     await this.approval.grantSessionApproval('helper-tool');
+ *   }
+ * }
+ * ```
+ */
+export { default as ApprovalPlugin, ApprovalPlugin as ApprovalPluginClass, type ApprovalPluginOptions, } from './approval.plugin';
+export { ApprovalStoreToken, ApprovalServiceToken, ChallengeServiceToken } from './approval.symbols';
+export * from './types';
+export { type ApprovalStore, type ApprovalQuery, type GrantApprovalOptions, type RevokeApprovalOptions, ApprovalStorageStore, type ApprovalStorageStoreOptions, createApprovalMemoryStore, } from './stores';
+export { ApprovalService, createApprovalService, type GrantOptions, type RevokeOptions, ChallengeService, createMemoryChallengeService, type ChallengeServiceOptions, type CreateChallengeOptions, } from './services';
+export { ApprovalCheckPlugin } from './hooks';
+export { installApprovalContextExtension } from './approval.context-extension';
+export { ApprovalError, ApprovalRequiredError, ApprovalOperationError, ApprovalScopeNotAllowedError, ApprovalExpiredError, ChallengeValidationError, userGrantor, adminGrantor, policyGrantor, systemGrantor, agentGrantor, apiGrantor, oauthGrantor, testGrantor, customGrantor, normalizeGrantor, userRevoker, adminRevoker, expiryRevoker, sessionEndRevoker, policyRevoker, normalizeRevoker, isGrantorSource, isHumanGrantor, isAutoGrantor, isDelegatedGrantor, isApiGrantor, } from './approval';
+//# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EACL,OAAO,IAAI,cAAc,EACzB,cAAc,IAAI,mBAAmB,EACrC,KAAK,qBAAqB,GAC3B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAGrG,cAAc,SAAS,CAAC;AAGxB,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,gBAAgB,EAChB,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAG9C,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAG/E,OAAO,EAEL,aAAa,EACb,qBAAqB,EACrB,sBAAsB,EACtB,4BAA4B,EAC5B,oBAAoB,EACpB,wBAAwB,EAExB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,gBAAgB,EAEhB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAEhB,eAAe,EACf,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,YAAY,GACb,MAAM,YAAY,CAAC"}