@frontmcp/plugin-approval 1.8.0 → 1.8.1

package/README.md

@@ -4,7 +4,7 @@ Tool authorization workflow with PKCE webhook security for FrontMCP.
 
 ## Features
 
-- **Tool Approval Checking**: Automatic approval check before tool execution via hook
+- **Tool Approval Checking**: Automatic approval check before tool execution via hook, registered by `ApprovalPlugin.init()` (no need to list `ApprovalCheckPlugin`)
 - **Multiple Approval Scopes**: SESSION, USER, TIME_LIMITED, TOOL_SPECIFIC, CONTEXT_SPECIFIC
 - **PKCE Webhook Security**: RFC 7636 compliant PKCE for secure external approval systems
 - **Recheck Mode**: Poll external API for approval status
@@ -47,13 +47,14 @@ const plugin = ApprovalPlugin.init({
 ### Using in Tools
 
 ```typescript
+import { ApprovalScope } from '@frontmcp/plugin-approval';
 import { Tool, ToolContext } from '@frontmcp/sdk';
 
 @Tool({
   name: 'dangerous_operation',
   approval: {
     required: true,
-    defaultScope: 'session',
+    defaultScope: ApprovalScope.SESSION,
     category: 'write',
     riskLevel: 'high',
     approvalMessage: 'Allow dangerous operation?',

package/approval.identity.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Who a call's approvals belong to.
+ *
+ * @module @frontmcp/plugin-approval
+ */
+import { type FrontMcpContext } from '@frontmcp/sdk';
+export interface ApprovalIdentity {
+    /** Key for session-scoped approvals. */
+    sessionId: string;
+    /** Key for user-scoped approvals, when the call has an authenticated principal. */
+    userId: string | undefined;
+}
+type ApprovalCallerContext = Pick<FrontMcpContext, 'sessionId' | 'authInfo'>;
+/**
+ * The session and user that a call's approvals are read from and granted to.
+ *
+ * The stateless transport gives every request the same session id, so keying session
+ * approvals on it let one caller's approval admit every other stateless caller. A stateless
+ * call is keyed by its authenticated principal instead, and a call with neither a session nor
+ * a principal gets a key of its own that no other call can match.
+ */
+export declare function resolveApprovalIdentity(ctx: ApprovalCallerContext | undefined): ApprovalIdentity;
+export {};
+//# sourceMappingURL=approval.identity.d.ts.map

package/approval.identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.identity.d.ts","sourceRoot":"","sources":["../src/approval.identity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAG3E,MAAM,WAAW,gBAAgB;IAC/B,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,KAAK,qBAAqB,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,UAAU,CAAC,CAAC;AAM7E;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,qBAAqB,GAAG,SAAS,GAAG,gBAAgB,CAWhG"}

package/approval.plugin.d.ts

@@ -3,8 +3,8 @@
  *
  * @module @frontmcp/plugin-approval
  */
-import { DynamicPlugin, ProviderType } from '@frontmcp/sdk';
-import type { StorageConfig, RootStorage, NamespacedStorage } from '@frontmcp/utils';
+import { DynamicPlugin, type ProviderType } from '@frontmcp/sdk';
+import type { NamespacedStorage, RootStorage, StorageConfig } from '@frontmcp/utils';
 import type { ApprovalMode } from './types';
 /**
  * Configuration options for ApprovalPlugin.
@@ -117,12 +117,6 @@ export default class ApprovalPlugin extends DynamicPlugin<ApprovalPluginOptions>
      * Dynamic providers based on plugin options.
      */
     static dynamicProviders: (options: ApprovalPluginOptions) => ProviderType[];
-    /**
-     * Get plugin metadata including nested plugins.
-     */
-    static getPluginMetadata(_options: ApprovalPluginOptions): {
-        plugins?: unknown[];
-    };
 }
 export { ApprovalPlugin };
 //# sourceMappingURL=approval.plugin.d.ts.map

package/approval.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval.plugin.d.ts","sourceRoot":"","sources":["../src/approval.plugin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAU,YAAY,EAAoD,MAAM,eAAe,CAAC;AACtH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAOrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM5C;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB;;OAEG;IACH,eAAe,CAAC,EAAE,WAAW,GAAG,iBAAiB,CAAC;IAElD;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,uCAAuC;QACvC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,4BAA4B;QAC5B,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;QAC5C,qCAAqC;QACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,+BAA+B;QAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,oCAAoC;QACpC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,qCAAqC;QACrC,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,+BAA+B;QAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,2CAA2C;QAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAEF;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAYH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,CAAC;IAC9E,MAAM,CAAC,cAAc,EAAE,qBAAqB,CAM1C;IAEF,OAAO,EAAE,qBAAqB,CAAC;gBAEnB,OAAO,GAAE,qBAA0B;IAQ/C;;OAEG;IACH,OAAgB,gBAAgB,GAAI,SAAS,qBAAqB,KAAG,YAAY,EAAE,CAoEjF;IAEF;;OAEG;IACH,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,qBAAqB,GAAG;QAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE;CAInF;AAGD,OAAO,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"approval.plugin.d.ts","sourceRoot":"","sources":["../src/approval.plugin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,aAAa,EAKb,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAQrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM5C;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IAExB;;OAEG;IACH,eAAe,CAAC,EAAE,WAAW,GAAG,iBAAiB,CAAC;IAElD;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IAEpB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,uCAAuC;QACvC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,4BAA4B;QAC5B,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;QAC5C,qCAAqC;QACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,+BAA+B;QAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IAEF;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,oCAAoC;QACpC,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,qCAAqC;QACrC,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,+BAA+B;QAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,2CAA2C;QAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAEF;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAaH,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,aAAa,CAAC,qBAAqB,CAAC;IAC9E,MAAM,CAAC,cAAc,EAAE,qBAAqB,CAM1C;IAEF,OAAO,EAAE,qBAAqB,CAAC;gBAEnB,OAAO,GAAE,qBAA0B;IAQ/C;;OAEG;IACH,OAAgB,gBAAgB,GAAI,SAAS,qBAAqB,KAAG,YAAY,EAAE,CAiEjF;CACH;AAGD,OAAO,EAAE,cAAc,EAAE,CAAC"}