@frontmcp/plugin-dashboard 1.7.2 → 1.8.0

package/auth/dashboard-auth.d.ts

@@ -18,15 +18,5 @@ export interface DashboardAuthResult {
     status?: 401;
     message?: string;
 }
-/**
- * Create the dashboard's HTTP auth check.
- *
- * Returns `undefined` when authentication is not enabled, so the caller can skip
- * the check entirely rather than branch on a permissive validator.
- *
- * A token may be presented as `Authorization: Bearer <token>` (preferred — a URL
- * token lands in access logs, `Referer` headers and browser history) or as
- * `?token=<token>`, which is what the documented dashboard link uses.
- */
 export declare function createDashboardAuthValidator(auth: DashboardAuth | undefined): ((req: DashboardAuthRequest) => DashboardAuthResult) | undefined;
 //# sourceMappingURL=dashboard-auth.d.ts.map

package/auth/dashboard-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-auth.d.ts","sourceRoot":"","sources":["../../src/auth/dashboard-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;CACnE;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6BD;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,aAAa,GAAG,SAAS,GAC9B,CAAC,CAAC,GAAG,EAAE,oBAAoB,KAAK,mBAAmB,CAAC,GAAG,SAAS,CAsBlE"}
+{"version":3,"file":"dashboard-auth.d.ts","sourceRoot":"","sources":["../../src/auth/dashboard-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;CACnE;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAyDD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,aAAa,GAAG,SAAS,GAC9B,CAAC,CAAC,GAAG,EAAE,oBAAoB,KAAK,mBAAmB,CAAC,GAAG,SAAS,CAqBlE"}

package/dashboard.config-store.d.ts

@@ -20,6 +20,13 @@ export declare function publishDashboardOptions(options: DashboardPluginOptions)
  * otherwise the defaults merged with whatever the caller supplied.
  */
 export declare function resolveDashboardOptions(fallback?: DashboardPluginOptionsInput): DashboardPluginOptions;
-/** Test seam — clears the published options between cases. */
+/**
+ * Clear the published options.
+ *
+ * Dashboard options are process-wide, and a second CONFLICTING auth
+ * configuration now throws rather than silently replacing the first (BC-036).
+ * A host that builds several servers serially — a test suite, a CLI that
+ * reconfigures between runs — calls this between constructions.
+ */
 export declare function resetDashboardOptions(): void;
 //# sourceMappingURL=dashboard.config-store.d.ts.map

package/dashboard.config-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.config-store.d.ts","sourceRoot":"","sources":["../src/dashboard.config-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EACjC,MAAM,mBAAmB,CAAC;AAmB3B;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAuB7E;AAyBD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,GAAE,2BAAgC,GAAG,sBAAsB,CAG1G;AAED,8DAA8D;AAC9D,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}
+{"version":3,"file":"dashboard.config-store.d.ts","sourceRoot":"","sources":["../src/dashboard.config-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EACjC,MAAM,mBAAmB,CAAC;AAmB3B;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAuB7E;AAyBD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,GAAE,2BAAgC,GAAG,sBAAsB,CAG1G;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}

package/esm/index.mjs

@@ -368,6 +368,9 @@ function resolveDashboardOptions(fallback = {}) {
   if (publishedOptions) return publishedOptions;
   return dashboardPluginOptionsSchema.parse({ ...defaultDashboardPluginOptions, ...fallback });
 }
+function resetDashboardOptions() {
+  publishedOptions = void 0;
+}
 
 // plugins/plugin-dashboard/src/dashboard.symbol.ts
 var DashboardConfigToken = /* @__PURE__ */ Symbol("DashboardConfig");
@@ -3724,6 +3727,14 @@ function tokenMatches(presented, expected) {
   if (presented.length === 0 || expected.length === 0) return false;
   return timingSafeEqual(sha256(presented), sha256(expected));
 }
+function readBearerToken(header) {
+  if (!header) return void 0;
+  const separator = header.indexOf(" ");
+  if (separator === -1) return void 0;
+  if (header.slice(0, separator).toLowerCase() !== "bearer") return void 0;
+  const token = header.slice(separator + 1).trim();
+  return token.length > 0 ? token : void 0;
+}
 function createDashboardAuthValidator(auth) {
   if (!auth?.enabled) return void 0;
   const expected = auth.token;
@@ -3731,8 +3742,7 @@ function createDashboardAuthValidator(auth) {
     if (!expected) {
       return { authorized: false, status: 401, message: "Dashboard authentication is misconfigured" };
     }
-    const header = readHeader(req.headers, "authorization");
-    const bearer = header?.startsWith("Bearer ") ? header.slice("Bearer ".length) : void 0;
+    const bearer = readBearerToken(readHeader(req.headers, "authorization"));
     if (bearer && tokenMatches(bearer, expected)) return AUTHORIZED;
     const queryToken = readQuery(req.query, "token");
     if (queryToken && tokenMatches(queryToken, expected)) return AUTHORIZED;
@@ -4915,5 +4925,6 @@ export {
   dashboardPluginOptionsSchema,
   DashboardPlugin as default,
   defaultDashboardPluginOptions,
-  isDashboardEnabled
+  isDashboardEnabled,
+  resetDashboardOptions
 };

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-dashboard",
-  "version": "1.7.2",
+  "version": "1.8.0",
   "description": "Dashboard plugin for FrontMCP - visual monitoring and introspection of MCP servers",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -47,12 +47,12 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.7.2"
+    "@frontmcp/sdk": "1.8.0"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.7.2"
+    "@frontmcp/lazy-zod": "1.8.0"
   }
 }

package/index.d.ts

@@ -1,6 +1,7 @@
 export { default, default as DashboardPlugin } from './dashboard.plugin';
 export { DashboardApp } from './app';
 export { DashboardPluginOptions, DashboardPluginOptionsInput, dashboardPluginOptionsSchema, defaultDashboardPluginOptions, isDashboardEnabled, } from './dashboard.types';
+export { resetDashboardOptions } from './dashboard.config-store';
 export { DashboardConfigToken, GraphDataProviderToken, ParentScopeToken } from './dashboard.symbol';
 export type { GraphData, GraphNode, GraphEdge, GraphMetadata } from './shared/types';
 export { GraphDataProvider } from './providers';

package/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAGrC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGpG,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGzE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAGrC,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGpG,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,MAAM,6BAA6B,CAAC"}

package/index.js

@@ -297,7 +297,8 @@ __export(index_exports, {
   dashboardPluginOptionsSchema: () => dashboardPluginOptionsSchema,
   default: () => DashboardPlugin,
   defaultDashboardPluginOptions: () => defaultDashboardPluginOptions,
-  isDashboardEnabled: () => isDashboardEnabled
+  isDashboardEnabled: () => isDashboardEnabled,
+  resetDashboardOptions: () => resetDashboardOptions
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -387,6 +388,9 @@ function resolveDashboardOptions(fallback = {}) {
   if (publishedOptions) return publishedOptions;
   return dashboardPluginOptionsSchema.parse({ ...defaultDashboardPluginOptions, ...fallback });
 }
+function resetDashboardOptions() {
+  publishedOptions = void 0;
+}
 
 // plugins/plugin-dashboard/src/dashboard.symbol.ts
 var DashboardConfigToken = /* @__PURE__ */ Symbol("DashboardConfig");
@@ -3737,6 +3741,14 @@ function tokenMatches(presented, expected) {
   if (presented.length === 0 || expected.length === 0) return false;
   return timingSafeEqual(sha256(presented), sha256(expected));
 }
+function readBearerToken(header) {
+  if (!header) return void 0;
+  const separator = header.indexOf(" ");
+  if (separator === -1) return void 0;
+  if (header.slice(0, separator).toLowerCase() !== "bearer") return void 0;
+  const token = header.slice(separator + 1).trim();
+  return token.length > 0 ? token : void 0;
+}
 function createDashboardAuthValidator(auth) {
   if (!auth?.enabled) return void 0;
   const expected = auth.token;
@@ -3744,8 +3756,7 @@ function createDashboardAuthValidator(auth) {
     if (!expected) {
       return { authorized: false, status: 401, message: "Dashboard authentication is misconfigured" };
     }
-    const header = readHeader(req.headers, "authorization");
-    const bearer = header?.startsWith("Bearer ") ? header.slice("Bearer ".length) : void 0;
+    const bearer = readBearerToken(readHeader(req.headers, "authorization"));
     if (bearer && tokenMatches(bearer, expected)) return AUTHORIZED;
     const queryToken = readQuery(req.query, "token");
     if (queryToken && tokenMatches(queryToken, expected)) return AUTHORIZED;
@@ -4928,5 +4939,6 @@ DashboardApp = __decorateClass([
   ParentScopeToken,
   dashboardPluginOptionsSchema,
   defaultDashboardPluginOptions,
-  isDashboardEnabled
+  isDashboardEnabled,
+  resetDashboardOptions
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-dashboard",
-  "version": "1.7.2",
+  "version": "1.8.0",
   "description": "Dashboard plugin for FrontMCP - visual monitoring and introspection of MCP servers",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -47,12 +47,12 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.7.2"
+    "@frontmcp/sdk": "1.8.0"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.7.2"
+    "@frontmcp/lazy-zod": "1.8.0"
   }
 }