@frontmcp/plugin-approval 1.7.2 → 1.8.1

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-approval",
-  "version": "1.7.2",
+  "version": "1.8.1",
   "description": "Approval plugin for FrontMCP - tool authorization workflow with PKCE webhook security",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,13 +49,13 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.7.2",
-    "@frontmcp/utils": "1.7.2",
+    "@frontmcp/sdk": "1.8.1",
+    "@frontmcp/utils": "1.8.1",
     "ioredis": "^5.8.0",
     "reflect-metadata": "^0.2.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.7.2",
+    "@frontmcp/lazy-zod": "1.8.1",
     "@vercel/kv": "^2.0.0 || ^3.0.0"
   },
   "peerDependenciesMeta": {

package/hooks/approval-check.hook.d.ts

@@ -3,10 +3,11 @@
  *
  * @module @frontmcp/plugin-approval
  */
-import { DynamicPlugin, FlowCtxOf } from '@frontmcp/sdk';
+import { DynamicPlugin, type FlowCtxOf } from '@frontmcp/sdk';
 /**
  * Hook plugin that checks tool approval before execution.
  *
+ * `ApprovalPlugin` registers it, so it never needs to be listed on its own.
  * Priority 100 ensures this runs early (before cache at 1000).
  */
 export default class ApprovalCheckPlugin extends DynamicPlugin<Record<string, never>> {
@@ -14,11 +15,20 @@ export default class ApprovalCheckPlugin extends DynamicPlugin<Record<string, ne
      * Check tool approval before execution.
      */
     checkApproval(flowCtx: FlowCtxOf<'tools:call-tool'>): Promise<void>;
+    private enforceApproval;
     private resolveApprovalConfig;
     private isExpired;
+    /**
+     * The context this call is running in, as established by the SESSION (GHSA-r848-p7wf-96rc).
+     *
+     * Deliberately ignores `toolContext.input.context`. The only consumer of this value is
+     * `isPreApprovedContext`, which skips the approval prompt outright, so reading it from the
+     * arguments of the call being gated let a caller name its own pre-approved context and walk
+     * straight past the gate. Only `authInfo.extra.approvalContext`, which the server sets
+     * while authenticating, can say what context a call belongs to.
+     */
     private getCurrentContext;
     private isApprovalContext;
-    private getStringExtra;
     private isPreApprovedContext;
     private handleApprovalRequired;
 }

package/hooks/approval-check.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-check.hook.d.ts","sourceRoot":"","sources":["../../src/hooks/approval-check.hook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAoB,SAAS,EAAE,MAAM,eAAe,CAAC;AAO3E;;;;GAIG;AAKH,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnF;;OAEG;IAEG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAwDzD,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,SAAS;IAKjB,OAAO,CAAC,iBAAiB;IAazB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,cAAc;IAMtB,OAAO,CAAC,oBAAoB;YAUd,sBAAsB;CAsBrC"}
+{"version":3,"file":"approval-check.hook.d.ts","sourceRoot":"","sources":["../../src/hooks/approval-check.hook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAoB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAmBhF;;;;;GAKG;AAKH,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnF;;OAEG;IAEG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;YA2B3C,eAAe;IAqC7B,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,SAAS;IAKjB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,oBAAoB;YAUd,sBAAsB;CAsBrC"}