@frontmcp/plugin-dashboard 1.8.7 → 1.9.1-rc.1

package/esm/index.mjs

@@ -1,3 +1,6 @@
+var __frontmcpModule = typeof process !== "undefined" && typeof process.getBuiltinModule === "function" ? process.getBuiltinModule("module") : undefined;
+const require = __frontmcpModule ? __frontmcpModule.createRequire(import.meta.url || 'file:///') : undefined;
+// __frontmcpCreateRequire
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -443,7 +446,6 @@ import { hkdf } from "@noble/hashes/hkdf.js";
 import { randomBytes as nobleRandomBytes } from "@noble/hashes/utils.js";
 import { gcm } from "@noble/ciphers/aes.js";
 import { analyzeForReDoS, REDOS_THRESHOLDS } from "@enclave-vm/ast";
-import { z as z3 } from "@frontmcp/lazy-zod";
 var __frontmcpModule = typeof process !== "undefined" && typeof process.getBuiltinModule === "function" ? process.getBuiltinModule("module") : void 0;
 var require2 = __frontmcpModule ? __frontmcpModule.createRequire(import.meta.url || "file:///") : void 0;
 var __defProp2 = Object.defineProperty;
@@ -781,8 +783,8 @@ var init_key_persistence = __esm({
        */
       async get(kid) {
         if (this.enableCache) {
-          const cached4 = this.cache.get(kid);
-          if (cached4) return cached4;
+          const cached = this.cache.get(kid);
+          if (cached) return cached;
         }
         const raw = await this.storage.get(kid);
         if (!raw) return null;
@@ -1038,6 +1040,61 @@ var init_errors = __esm({
     };
   }
 });
+function globToRegex(pattern) {
+  if (pattern.length > MAX_PATTERN_LENGTH) {
+    throw new StoragePatternError(
+      pattern.substring(0, 50) + "...",
+      `Pattern exceeds maximum length of ${MAX_PATTERN_LENGTH} characters`
+    );
+  }
+  const wildcardCount = (pattern.match(/[*?]/g) || []).length;
+  if (wildcardCount > MAX_WILDCARDS) {
+    throw new StoragePatternError(pattern, `Pattern has too many wildcards (max: ${MAX_WILDCARDS})`);
+  }
+  if (pattern === "" || pattern === "*") {
+    return /^.*$/;
+  }
+  let regexStr = "^";
+  let prevChar = "";
+  for (let i = 0; i < pattern.length; i++) {
+    const char = pattern[i];
+    switch (char) {
+      case "*":
+        if (prevChar !== "*") {
+          regexStr += ".*";
+        }
+        break;
+      case "?":
+        regexStr += ".";
+        break;
+      default:
+        regexStr += char.replace(REGEX_SPECIAL_CHARS, "\\$&");
+    }
+    prevChar = char;
+  }
+  regexStr += "$";
+  try {
+    return new RegExp(regexStr);
+  } catch {
+    throw new StoragePatternError(pattern, "Failed to compile pattern to regex");
+  }
+}
+function matchesPattern(key, pattern) {
+  const regex = globToRegex(pattern);
+  return regex.test(key);
+}
+var MAX_PATTERN_LENGTH;
+var MAX_WILDCARDS;
+var REGEX_SPECIAL_CHARS;
+var init_pattern = __esm({
+  "libs/utils/src/storage/utils/pattern.ts"() {
+    "use strict";
+    init_errors();
+    MAX_PATTERN_LENGTH = 500;
+    MAX_WILDCARDS = 20;
+    REGEX_SPECIAL_CHARS = /[.+^${}()|[\]\\]/g;
+  }
+});
 function validateTTL(ttlSeconds) {
   if (typeof ttlSeconds !== "number") {
     throw new StorageTTLError(ttlSeconds, `TTL must be a number, got ${typeof ttlSeconds}`);
@@ -1146,6 +1203,17 @@ var init_base = __esm({
         const matchedKeys = await this.keys(pattern);
         return matchedKeys.length;
       }
+      /**
+       * Default: not supported, since a read followed by a delete is not atomic.
+       * Override in adapters whose backend can compare and delete in one step.
+       */
+      async deleteIfEquals(_key, _expectedValue) {
+        throw new StorageNotSupportedError(
+          "deleteIfEquals",
+          this.backendName,
+          "Use the memory, Redis, Upstash or Vercel KV adapter for an atomic compare-and-delete."
+        );
+      }
       // ============================================
       // Pub/Sub (default: not supported)
       // ============================================
@@ -1193,71 +1261,16 @@ var init_base = __esm({
     };
   }
 });
-function globToRegex(pattern) {
-  if (pattern.length > MAX_PATTERN_LENGTH) {
-    throw new StoragePatternError(
-      pattern.substring(0, 50) + "...",
-      `Pattern exceeds maximum length of ${MAX_PATTERN_LENGTH} characters`
-    );
-  }
-  const wildcardCount = (pattern.match(/[*?]/g) || []).length;
-  if (wildcardCount > MAX_WILDCARDS) {
-    throw new StoragePatternError(pattern, `Pattern has too many wildcards (max: ${MAX_WILDCARDS})`);
-  }
-  if (pattern === "" || pattern === "*") {
-    return /^.*$/;
-  }
-  let regexStr = "^";
-  let prevChar = "";
-  for (let i = 0; i < pattern.length; i++) {
-    const char = pattern[i];
-    switch (char) {
-      case "*":
-        if (prevChar !== "*") {
-          regexStr += ".*";
-        }
-        break;
-      case "?":
-        regexStr += ".";
-        break;
-      default:
-        regexStr += char.replace(REGEX_SPECIAL_CHARS, "\\$&");
-    }
-    prevChar = char;
-  }
-  regexStr += "$";
-  try {
-    return new RegExp(regexStr);
-  } catch {
-    throw new StoragePatternError(pattern, "Failed to compile pattern to regex");
-  }
-}
-function matchesPattern(key, pattern) {
-  const regex = globToRegex(pattern);
-  return regex.test(key);
-}
-var MAX_PATTERN_LENGTH;
-var MAX_WILDCARDS;
-var REGEX_SPECIAL_CHARS;
-var init_pattern = __esm({
-  "libs/utils/src/storage/utils/pattern.ts"() {
-    "use strict";
-    init_errors();
-    MAX_PATTERN_LENGTH = 500;
-    MAX_WILDCARDS = 20;
-    REGEX_SPECIAL_CHARS = /[.+^${}()|[\]\\]/g;
-  }
-});
 var DEFAULT_SWEEP_INTERVAL_SECONDS;
 var MAX_TIMEOUT_MS;
 var MemoryStorageAdapter;
 var init_memory = __esm({
   "libs/utils/src/storage/adapters/memory.ts"() {
     "use strict";
-    init_base();
     init_errors();
     init_pattern();
     init_ttl();
+    init_base();
     DEFAULT_SWEEP_INTERVAL_SECONDS = 60;
     MAX_TIMEOUT_MS = 2147483647;
     MemoryStorageAdapter = class extends BaseStorageAdapter {
@@ -1349,6 +1362,12 @@ var init_memory = __esm({
         this.ensureConnected();
         return this.deleteEntry(key);
       }
+      async deleteIfEquals(key, expectedValue) {
+        this.ensureConnected();
+        const entry = this.store.get(key);
+        if (!entry || isExpired(entry.expiresAt) || entry.value !== expectedValue) return false;
+        return this.deleteEntry(key);
+      }
       async exists(key) {
         this.ensureConnected();
         const entry = this.store.get(key);
@@ -2726,6 +2745,13 @@ var init_utils = __esm({
     init_ttl();
   }
 });
+var COMPARE_AND_DELETE_SCRIPT;
+var init_compare_and_delete = __esm({
+  "libs/utils/src/storage/utils/compare-and-delete.ts"() {
+    "use strict";
+    COMPARE_AND_DELETE_SCRIPT = `if redis.call('GET', KEYS[1]) == ARGV[1] then return redis.call('DEL', KEYS[1]) end return 0`;
+  }
+});
 var redis_exports = {};
 __export(redis_exports, {
   RedisStorageAdapter: () => RedisStorageAdapter,
@@ -2768,6 +2794,7 @@ var init_redis = __esm({
     init_errors();
     init_redis_error_listener();
     init_utils();
+    init_compare_and_delete();
     init_base();
     RedisStorageAdapter = class extends BaseStorageAdapter {
       backendName = "redis";
@@ -2922,6 +2949,15 @@ var init_redis = __esm({
         const result = await this.getConnectedClient().del(this.prefixKey(key));
         return result > 0;
       }
+      async deleteIfEquals(key, expectedValue) {
+        const deleted = await this.getConnectedClient().eval(
+          COMPARE_AND_DELETE_SCRIPT,
+          1,
+          this.prefixKey(key),
+          expectedValue
+        );
+        return deleted === 1;
+      }
       async exists(key) {
         const result = await this.getConnectedClient().exists(this.prefixKey(key));
         return result > 0;
@@ -3128,9 +3164,12 @@ var vercel_kv_exports = {};
 __export(vercel_kv_exports, {
   VercelKvStorageAdapter: () => VercelKvStorageAdapter
 });
-function getVercelKv() {
+async function loadVercelKv() {
   try {
-    return __require2("@vercel/kv");
+    const mod = await import("@vercel/kv");
+    const resolved = typeof mod.createClient === "function" ? mod : mod.default;
+    if (!resolved || typeof resolved.createClient !== "function") throw new Error("createClient missing");
+    return resolved;
   } catch {
     throw new Error("@vercel/kv is required for Vercel KV storage adapter. Install it with: npm install @vercel/kv");
   }
@@ -3139,9 +3178,10 @@ var VercelKvStorageAdapter;
 var init_vercel_kv = __esm({
   "libs/utils/src/storage/adapters/vercel-kv.ts"() {
     "use strict";
-    init_base();
     init_errors();
+    init_compare_and_delete();
     init_ttl();
+    init_base();
     VercelKvStorageAdapter = class extends BaseStorageAdapter {
       backendName = "vercel-kv";
       client;
@@ -3166,17 +3206,13 @@ var init_vercel_kv = __esm({
       async connect() {
         if (this.connected) return;
         try {
-          const { createClient, kv } = getVercelKv();
-          if (this.options.url === process.env["KV_REST_API_URL"]) {
-            this.client = kv;
-          } else {
-            const url = this.options.url;
-            const token = this.options.token;
-            if (!url || !token) {
-              throw new StorageConfigError("vercel-kv", "URL and token are required");
-            }
-            this.client = createClient({ url, token });
+          const { createClient } = await loadVercelKv();
+          const url = this.options.url;
+          const token = this.options.token;
+          if (!url || !token) {
+            throw new StorageConfigError("vercel-kv", "URL and token are required");
           }
+          this.client = createClient({ url, token, cache: void 0, automaticDeserialization: false });
           await this.client.exists("__healthcheck__");
           this.connected = true;
         } catch (e) {
@@ -3217,8 +3253,7 @@ var init_vercel_kv = __esm({
       // Core Operations
       // ============================================
       async get(key) {
-        const result = await this.getConnectedClient().get(this.prefixKey(key));
-        return result;
+        return this.getConnectedClient().get(this.prefixKey(key));
       }
       async doSet(key, value, options) {
         const client = this.getConnectedClient();
@@ -3238,6 +3273,14 @@ var init_vercel_kv = __esm({
         const result = await this.getConnectedClient().del(this.prefixKey(key));
         return result > 0;
       }
+      async deleteIfEquals(key, expectedValue) {
+        const deleted = await this.getConnectedClient().eval(
+          COMPARE_AND_DELETE_SCRIPT,
+          [this.prefixKey(key)],
+          [expectedValue]
+        );
+        return deleted === 1;
+      }
       async exists(key) {
         const result = await this.getConnectedClient().exists(this.prefixKey(key));
         return result > 0;
@@ -3354,9 +3397,10 @@ var UpstashStorageAdapter;
 var init_upstash = __esm({
   "libs/utils/src/storage/adapters/upstash.ts"() {
     "use strict";
-    init_base();
     init_errors();
+    init_compare_and_delete();
     init_ttl();
+    init_base();
     PUBSUB_POLL_INTERVAL_MS = 100;
     UpstashStorageAdapter = class extends BaseStorageAdapter {
       backendName = "upstash";
@@ -3393,7 +3437,7 @@ var init_upstash = __esm({
           if (!url || !token) {
             throw new StorageConfigError("upstash", "URL and token are required");
           }
-          this.client = new Redis({ url, token });
+          this.client = new Redis({ url, token, automaticDeserialization: false });
           await this.client.exists("__healthcheck__");
           this.connected = true;
         } catch (e) {
@@ -3440,8 +3484,7 @@ var init_upstash = __esm({
       // Core Operations
       // ============================================
       async get(key) {
-        const result = await this.getConnectedClient().get(this.prefixKey(key));
-        return result;
+        return this.getConnectedClient().get(this.prefixKey(key));
       }
       async doSet(key, value, options) {
         const client = this.getConnectedClient();
@@ -3461,6 +3504,14 @@ var init_upstash = __esm({
         const result = await this.getConnectedClient().del(this.prefixKey(key));
         return result > 0;
       }
+      async deleteIfEquals(key, expectedValue) {
+        const deleted = await this.getConnectedClient().eval(
+          COMPARE_AND_DELETE_SCRIPT,
+          [this.prefixKey(key)],
+          [expectedValue]
+        );
+        return deleted === 1;
+      }
       async exists(key) {
         const result = await this.getConnectedClient().exists(this.prefixKey(key));
         return result > 0;
@@ -3649,7 +3700,9 @@ var init_cloudflare_kv = __esm({
       constructor(options) {
         super();
         if (!options?.namespace) {
-          throw new Error("CloudflareKvStorageAdapter: a bound KV `namespace` is required (resolve it from the Worker `env`).");
+          throw new Error(
+            "CloudflareKvStorageAdapter: a bound KV `namespace` is required (resolve it from the Worker `env`)."
+          );
         }
         this.kv = options.namespace;
         this.keyPrefix = options.keyPrefix ?? "";
@@ -3743,6 +3796,13 @@ var init_cloudflare_kv = __esm({
           "Cloudflare KV has no atomic increment (a get+put is racy under eventual consistency). Use a Durable Object for atomic counters."
         );
       }
+      async deleteIfEquals(_key, _expectedValue) {
+        throw new StorageNotSupportedError(
+          "deleteIfEquals",
+          this.backendName,
+          "Cloudflare KV has no compare-and-set; use a Durable Object for an atomic compare-and-delete."
+        );
+      }
       // ── Pub/Sub (unsupported) ────────────────────────────────────────────────
       getPubSubSuggestion() {
         return "Cloudflare KV does not support pub/sub. Use a Durable Object (or Queues) for fan-out.";
@@ -3856,16 +3916,7 @@ function compileBlocks(entries, parseNetwork) {
 }
 init_fs2();
 init_crypto();
-var entryAvailabilitySchema = z3.object({
-  os: z3.array(z3.string().min(1)).optional(),
-  platform: z3.array(z3.string().min(1)).optional(),
-  runtime: z3.array(z3.string().min(1)).optional(),
-  deployment: z3.array(z3.string().min(1)).optional(),
-  provider: z3.array(z3.string().min(1)).optional(),
-  target: z3.array(z3.string().min(1)).optional(),
-  surface: z3.array(z3.enum(["mcp", "cli", "http-trigger", "job", "agent"])).optional(),
-  env: z3.array(z3.string().min(1)).optional()
-}).strict();
+init_errors();
 init_errors();
 init_memory();
 init_redis_error_listener();
@@ -4838,11 +4889,11 @@ GraphDataProvider = __decorateClass([
 ], GraphDataProvider);
 
 // plugins/plugin-dashboard/src/tools/graph.tool.ts
-import { z as z4 } from "@frontmcp/lazy-zod";
+import { z as z3 } from "@frontmcp/lazy-zod";
 import { Tool, ToolContext } from "@frontmcp/sdk";
 var graphToolInputSchema = {
-  includeSchemas: z4.boolean().optional().default(false).describe("Include full input/output schemas in the response"),
-  refresh: z4.boolean().optional().default(false).describe("Force refresh the graph data (bypass cache)")
+  includeSchemas: z3.boolean().optional().default(false).describe("Include full input/output schemas in the response"),
+  refresh: z3.boolean().optional().default(false).describe("Force refresh the graph data (bypass cache)")
 };
 var GraphTool = class extends ToolContext {
   async execute(input) {
@@ -4880,7 +4931,7 @@ GraphTool = __decorateClass([
 ], GraphTool);
 
 // plugins/plugin-dashboard/src/tools/list-resources.tool.ts
-import { z as z5 } from "@frontmcp/lazy-zod";
+import { z as z4 } from "@frontmcp/lazy-zod";
 import { Tool as Tool2, ToolContext as ToolContext2 } from "@frontmcp/sdk";
 
 // plugins/plugin-dashboard/src/shared/safe-regex.ts
@@ -4899,20 +4950,20 @@ function safeRegex(pattern) {
 
 // plugins/plugin-dashboard/src/tools/list-resources.tool.ts
 var listResourcesInputSchema = {
-  filter: z5.string().optional().describe("Filter resources by name or URI pattern (regex supported)"),
-  includeTemplates: z5.boolean().default(true).describe("Include resource templates in the response")
+  filter: z4.string().optional().describe("Filter resources by name or URI pattern (regex supported)"),
+  includeTemplates: z4.boolean().default(true).describe("Include resource templates in the response")
 };
-var listResourcesOutputSchema = z5.object({
-  resources: z5.array(
-    z5.object({
-      name: z5.string(),
-      uri: z5.string(),
-      description: z5.string().optional(),
-      mimeType: z5.string().optional(),
-      isTemplate: z5.boolean()
+var listResourcesOutputSchema = z4.object({
+  resources: z4.array(
+    z4.object({
+      name: z4.string(),
+      uri: z4.string(),
+      description: z4.string().optional(),
+      mimeType: z4.string().optional(),
+      isTemplate: z4.boolean()
     })
   ),
-  count: z5.number()
+  count: z4.number()
 });
 var ListResourcesTool = class extends ToolContext2 {
   async execute(input) {
@@ -4974,25 +5025,25 @@ ListResourcesTool = __decorateClass([
 ], ListResourcesTool);
 
 // plugins/plugin-dashboard/src/tools/list-tools.tool.ts
-import { z as z6 } from "@frontmcp/lazy-zod";
+import { z as z5 } from "@frontmcp/lazy-zod";
 import { Tool as Tool3, ToolContext as ToolContext3 } from "@frontmcp/sdk";
 var listToolsInputSchema = {
-  filter: z6.string().optional().describe("Filter tools by name pattern (regex supported)"),
-  includePlugins: z6.boolean().default(true).describe("Include tools from plugins"),
-  includeSchemas: z6.boolean().default(false).describe("Include input/output schemas in the response")
+  filter: z5.string().optional().describe("Filter tools by name pattern (regex supported)"),
+  includePlugins: z5.boolean().default(true).describe("Include tools from plugins"),
+  includeSchemas: z5.boolean().default(false).describe("Include input/output schemas in the response")
 };
-var listToolsOutputSchema = z6.object({
-  tools: z6.array(
-    z6.object({
-      name: z6.string(),
-      fullName: z6.string(),
-      description: z6.string().optional(),
-      tags: z6.array(z6.string()).optional(),
-      inputSchema: z6.unknown().optional(),
-      outputSchema: z6.unknown().optional()
+var listToolsOutputSchema = z5.object({
+  tools: z5.array(
+    z5.object({
+      name: z5.string(),
+      fullName: z5.string(),
+      description: z5.string().optional(),
+      tags: z5.array(z5.string()).optional(),
+      inputSchema: z5.unknown().optional(),
+      outputSchema: z5.unknown().optional()
     })
   ),
-  count: z6.number()
+  count: z5.number()
 });
 var ListToolsTool = class extends ToolContext3 {
   async execute(input) {

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-dashboard",
-  "version": "1.8.7",
+  "version": "1.9.1-rc.1",
   "description": "Dashboard plugin for FrontMCP - visual monitoring and introspection of MCP servers",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -47,12 +47,12 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.8.7"
+    "@frontmcp/sdk": "1.9.1-rc.1"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.8.7"
+    "@frontmcp/lazy-zod": "1.9.1-rc.1"
   }
 }

package/index.js

@@ -454,7 +454,6 @@ var import_utils = require("@noble/hashes/utils.js");
 var import_aes = require("@noble/ciphers/aes.js");
 var import_crypto_provider = __toESM(require_node(), 1);
 var import_ast = require("@enclave-vm/ast");
-var import_lazy_zod4 = require("@frontmcp/lazy-zod");
 var import_meta = {};
 var __frontmcpModule = typeof process !== "undefined" && typeof process.getBuiltinModule === "function" ? process.getBuiltinModule("module") : void 0;
 var require2 = __frontmcpModule ? __frontmcpModule.createRequire(import_meta.url || "file:///") : void 0;
@@ -793,8 +792,8 @@ var init_key_persistence = __esm({
        */
       async get(kid) {
         if (this.enableCache) {
-          const cached4 = this.cache.get(kid);
-          if (cached4) return cached4;
+          const cached = this.cache.get(kid);
+          if (cached) return cached;
         }
         const raw = await this.storage.get(kid);
         if (!raw) return null;
@@ -1050,6 +1049,61 @@ var init_errors = __esm({
     };
   }
 });
+function globToRegex(pattern) {
+  if (pattern.length > MAX_PATTERN_LENGTH) {
+    throw new StoragePatternError(
+      pattern.substring(0, 50) + "...",
+      `Pattern exceeds maximum length of ${MAX_PATTERN_LENGTH} characters`
+    );
+  }
+  const wildcardCount = (pattern.match(/[*?]/g) || []).length;
+  if (wildcardCount > MAX_WILDCARDS) {
+    throw new StoragePatternError(pattern, `Pattern has too many wildcards (max: ${MAX_WILDCARDS})`);
+  }
+  if (pattern === "" || pattern === "*") {
+    return /^.*$/;
+  }
+  let regexStr = "^";
+  let prevChar = "";
+  for (let i = 0; i < pattern.length; i++) {
+    const char = pattern[i];
+    switch (char) {
+      case "*":
+        if (prevChar !== "*") {
+          regexStr += ".*";
+        }
+        break;
+      case "?":
+        regexStr += ".";
+        break;
+      default:
+        regexStr += char.replace(REGEX_SPECIAL_CHARS, "\\$&");
+    }
+    prevChar = char;
+  }
+  regexStr += "$";
+  try {
+    return new RegExp(regexStr);
+  } catch {
+    throw new StoragePatternError(pattern, "Failed to compile pattern to regex");
+  }
+}
+function matchesPattern(key, pattern) {
+  const regex = globToRegex(pattern);
+  return regex.test(key);
+}
+var MAX_PATTERN_LENGTH;
+var MAX_WILDCARDS;
+var REGEX_SPECIAL_CHARS;
+var init_pattern = __esm({
+  "libs/utils/src/storage/utils/pattern.ts"() {
+    "use strict";
+    init_errors();
+    MAX_PATTERN_LENGTH = 500;
+    MAX_WILDCARDS = 20;
+    REGEX_SPECIAL_CHARS = /[.+^${}()|[\]\\]/g;
+  }
+});
 function validateTTL(ttlSeconds) {
   if (typeof ttlSeconds !== "number") {
     throw new StorageTTLError(ttlSeconds, `TTL must be a number, got ${typeof ttlSeconds}`);
@@ -1158,6 +1212,17 @@ var init_base = __esm({
         const matchedKeys = await this.keys(pattern);
         return matchedKeys.length;
       }
+      /**
+       * Default: not supported, since a read followed by a delete is not atomic.
+       * Override in adapters whose backend can compare and delete in one step.
+       */
+      async deleteIfEquals(_key, _expectedValue) {
+        throw new StorageNotSupportedError(
+          "deleteIfEquals",
+          this.backendName,
+          "Use the memory, Redis, Upstash or Vercel KV adapter for an atomic compare-and-delete."
+        );
+      }
       // ============================================
       // Pub/Sub (default: not supported)
       // ============================================
@@ -1205,71 +1270,16 @@ var init_base = __esm({
     };
   }
 });
-function globToRegex(pattern) {
-  if (pattern.length > MAX_PATTERN_LENGTH) {
-    throw new StoragePatternError(
-      pattern.substring(0, 50) + "...",
-      `Pattern exceeds maximum length of ${MAX_PATTERN_LENGTH} characters`
-    );
-  }
-  const wildcardCount = (pattern.match(/[*?]/g) || []).length;
-  if (wildcardCount > MAX_WILDCARDS) {
-    throw new StoragePatternError(pattern, `Pattern has too many wildcards (max: ${MAX_WILDCARDS})`);
-  }
-  if (pattern === "" || pattern === "*") {
-    return /^.*$/;
-  }
-  let regexStr = "^";
-  let prevChar = "";
-  for (let i = 0; i < pattern.length; i++) {
-    const char = pattern[i];
-    switch (char) {
-      case "*":
-        if (prevChar !== "*") {
-          regexStr += ".*";
-        }
-        break;
-      case "?":
-        regexStr += ".";
-        break;
-      default:
-        regexStr += char.replace(REGEX_SPECIAL_CHARS, "\\$&");
-    }
-    prevChar = char;
-  }
-  regexStr += "$";
-  try {
-    return new RegExp(regexStr);
-  } catch {
-    throw new StoragePatternError(pattern, "Failed to compile pattern to regex");
-  }
-}
-function matchesPattern(key, pattern) {
-  const regex = globToRegex(pattern);
-  return regex.test(key);
-}
-var MAX_PATTERN_LENGTH;
-var MAX_WILDCARDS;
-var REGEX_SPECIAL_CHARS;
-var init_pattern = __esm({
-  "libs/utils/src/storage/utils/pattern.ts"() {
-    "use strict";
-    init_errors();
-    MAX_PATTERN_LENGTH = 500;
-    MAX_WILDCARDS = 20;
-    REGEX_SPECIAL_CHARS = /[.+^${}()|[\]\\]/g;
-  }
-});
 var DEFAULT_SWEEP_INTERVAL_SECONDS;
 var MAX_TIMEOUT_MS;
 var MemoryStorageAdapter;
 var init_memory = __esm({
   "libs/utils/src/storage/adapters/memory.ts"() {
     "use strict";
-    init_base();
     init_errors();
     init_pattern();
     init_ttl();
+    init_base();
     DEFAULT_SWEEP_INTERVAL_SECONDS = 60;
     MAX_TIMEOUT_MS = 2147483647;
     MemoryStorageAdapter = class extends BaseStorageAdapter {
@@ -1361,6 +1371,12 @@ var init_memory = __esm({
         this.ensureConnected();
         return this.deleteEntry(key);
       }
+      async deleteIfEquals(key, expectedValue) {
+        this.ensureConnected();
+        const entry = this.store.get(key);
+        if (!entry || isExpired(entry.expiresAt) || entry.value !== expectedValue) return false;
+        return this.deleteEntry(key);
+      }
       async exists(key) {
         this.ensureConnected();
         const entry = this.store.get(key);
@@ -2738,6 +2754,13 @@ var init_utils = __esm({
     init_ttl();
   }
 });
+var COMPARE_AND_DELETE_SCRIPT;
+var init_compare_and_delete = __esm({
+  "libs/utils/src/storage/utils/compare-and-delete.ts"() {
+    "use strict";
+    COMPARE_AND_DELETE_SCRIPT = `if redis.call('GET', KEYS[1]) == ARGV[1] then return redis.call('DEL', KEYS[1]) end return 0`;
+  }
+});
 var redis_exports = {};
 __export2(redis_exports, {
   RedisStorageAdapter: () => RedisStorageAdapter,
@@ -2780,6 +2803,7 @@ var init_redis = __esm({
     init_errors();
     init_redis_error_listener();
     init_utils();
+    init_compare_and_delete();
     init_base();
     RedisStorageAdapter = class extends BaseStorageAdapter {
       backendName = "redis";
@@ -2934,6 +2958,15 @@ var init_redis = __esm({
         const result = await this.getConnectedClient().del(this.prefixKey(key));
         return result > 0;
       }
+      async deleteIfEquals(key, expectedValue) {
+        const deleted = await this.getConnectedClient().eval(
+          COMPARE_AND_DELETE_SCRIPT,
+          1,
+          this.prefixKey(key),
+          expectedValue
+        );
+        return deleted === 1;
+      }
       async exists(key) {
         const result = await this.getConnectedClient().exists(this.prefixKey(key));
         return result > 0;
@@ -3140,9 +3173,12 @@ var vercel_kv_exports = {};
 __export2(vercel_kv_exports, {
   VercelKvStorageAdapter: () => VercelKvStorageAdapter
 });
-function getVercelKv() {
+async function loadVercelKv() {
   try {
-    return __require("@vercel/kv");
+    const mod = await import("@vercel/kv");
+    const resolved = typeof mod.createClient === "function" ? mod : mod.default;
+    if (!resolved || typeof resolved.createClient !== "function") throw new Error("createClient missing");
+    return resolved;
   } catch {
     throw new Error("@vercel/kv is required for Vercel KV storage adapter. Install it with: npm install @vercel/kv");
   }
@@ -3151,9 +3187,10 @@ var VercelKvStorageAdapter;
 var init_vercel_kv = __esm({
   "libs/utils/src/storage/adapters/vercel-kv.ts"() {
     "use strict";
-    init_base();
     init_errors();
+    init_compare_and_delete();
     init_ttl();
+    init_base();
     VercelKvStorageAdapter = class extends BaseStorageAdapter {
       backendName = "vercel-kv";
       client;
@@ -3178,17 +3215,13 @@ var init_vercel_kv = __esm({
       async connect() {
         if (this.connected) return;
         try {
-          const { createClient, kv } = getVercelKv();
-          if (this.options.url === process.env["KV_REST_API_URL"]) {
-            this.client = kv;
-          } else {
-            const url = this.options.url;
-            const token = this.options.token;
-            if (!url || !token) {
-              throw new StorageConfigError("vercel-kv", "URL and token are required");
-            }
-            this.client = createClient({ url, token });
+          const { createClient } = await loadVercelKv();
+          const url = this.options.url;
+          const token = this.options.token;
+          if (!url || !token) {
+            throw new StorageConfigError("vercel-kv", "URL and token are required");
           }
+          this.client = createClient({ url, token, cache: void 0, automaticDeserialization: false });
           await this.client.exists("__healthcheck__");
           this.connected = true;
         } catch (e) {
@@ -3229,8 +3262,7 @@ var init_vercel_kv = __esm({
       // Core Operations
       // ============================================
       async get(key) {
-        const result = await this.getConnectedClient().get(this.prefixKey(key));
-        return result;
+        return this.getConnectedClient().get(this.prefixKey(key));
       }
       async doSet(key, value, options) {
         const client = this.getConnectedClient();
@@ -3250,6 +3282,14 @@ var init_vercel_kv = __esm({
         const result = await this.getConnectedClient().del(this.prefixKey(key));
         return result > 0;
       }
+      async deleteIfEquals(key, expectedValue) {
+        const deleted = await this.getConnectedClient().eval(
+          COMPARE_AND_DELETE_SCRIPT,
+          [this.prefixKey(key)],
+          [expectedValue]
+        );
+        return deleted === 1;
+      }
       async exists(key) {
         const result = await this.getConnectedClient().exists(this.prefixKey(key));
         return result > 0;
@@ -3366,9 +3406,10 @@ var UpstashStorageAdapter;
 var init_upstash = __esm({
   "libs/utils/src/storage/adapters/upstash.ts"() {
     "use strict";
-    init_base();
     init_errors();
+    init_compare_and_delete();
     init_ttl();
+    init_base();
     PUBSUB_POLL_INTERVAL_MS = 100;
     UpstashStorageAdapter = class extends BaseStorageAdapter {
       backendName = "upstash";
@@ -3405,7 +3446,7 @@ var init_upstash = __esm({
           if (!url || !token) {
             throw new StorageConfigError("upstash", "URL and token are required");
           }
-          this.client = new Redis({ url, token });
+          this.client = new Redis({ url, token, automaticDeserialization: false });
           await this.client.exists("__healthcheck__");
           this.connected = true;
         } catch (e) {
@@ -3452,8 +3493,7 @@ var init_upstash = __esm({
       // Core Operations
       // ============================================
       async get(key) {
-        const result = await this.getConnectedClient().get(this.prefixKey(key));
-        return result;
+        return this.getConnectedClient().get(this.prefixKey(key));
       }
       async doSet(key, value, options) {
         const client = this.getConnectedClient();
@@ -3473,6 +3513,14 @@ var init_upstash = __esm({
         const result = await this.getConnectedClient().del(this.prefixKey(key));
         return result > 0;
       }
+      async deleteIfEquals(key, expectedValue) {
+        const deleted = await this.getConnectedClient().eval(
+          COMPARE_AND_DELETE_SCRIPT,
+          [this.prefixKey(key)],
+          [expectedValue]
+        );
+        return deleted === 1;
+      }
       async exists(key) {
         const result = await this.getConnectedClient().exists(this.prefixKey(key));
         return result > 0;
@@ -3661,7 +3709,9 @@ var init_cloudflare_kv = __esm({
       constructor(options) {
         super();
         if (!options?.namespace) {
-          throw new Error("CloudflareKvStorageAdapter: a bound KV `namespace` is required (resolve it from the Worker `env`).");
+          throw new Error(
+            "CloudflareKvStorageAdapter: a bound KV `namespace` is required (resolve it from the Worker `env`)."
+          );
         }
         this.kv = options.namespace;
         this.keyPrefix = options.keyPrefix ?? "";
@@ -3755,6 +3805,13 @@ var init_cloudflare_kv = __esm({
           "Cloudflare KV has no atomic increment (a get+put is racy under eventual consistency). Use a Durable Object for atomic counters."
         );
       }
+      async deleteIfEquals(_key, _expectedValue) {
+        throw new StorageNotSupportedError(
+          "deleteIfEquals",
+          this.backendName,
+          "Cloudflare KV has no compare-and-set; use a Durable Object for an atomic compare-and-delete."
+        );
+      }
       // ── Pub/Sub (unsupported) ────────────────────────────────────────────────
       getPubSubSuggestion() {
         return "Cloudflare KV does not support pub/sub. Use a Durable Object (or Queues) for fan-out.";
@@ -3868,16 +3925,7 @@ function compileBlocks(entries, parseNetwork) {
 }
 init_fs2();
 init_crypto();
-var entryAvailabilitySchema = import_lazy_zod4.z.object({
-  os: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional(),
-  platform: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional(),
-  runtime: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional(),
-  deployment: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional(),
-  provider: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional(),
-  target: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional(),
-  surface: import_lazy_zod4.z.array(import_lazy_zod4.z.enum(["mcp", "cli", "http-trigger", "job", "agent"])).optional(),
-  env: import_lazy_zod4.z.array(import_lazy_zod4.z.string().min(1)).optional()
-}).strict();
+init_errors();
 init_errors();
 init_memory();
 init_redis_error_listener();
@@ -4850,11 +4898,11 @@ GraphDataProvider = __decorateClass([
 ], GraphDataProvider);
 
 // plugins/plugin-dashboard/src/tools/graph.tool.ts
-var import_lazy_zod5 = require("@frontmcp/lazy-zod");
+var import_lazy_zod4 = require("@frontmcp/lazy-zod");
 var import_sdk4 = require("@frontmcp/sdk");
 var graphToolInputSchema = {
-  includeSchemas: import_lazy_zod5.z.boolean().optional().default(false).describe("Include full input/output schemas in the response"),
-  refresh: import_lazy_zod5.z.boolean().optional().default(false).describe("Force refresh the graph data (bypass cache)")
+  includeSchemas: import_lazy_zod4.z.boolean().optional().default(false).describe("Include full input/output schemas in the response"),
+  refresh: import_lazy_zod4.z.boolean().optional().default(false).describe("Force refresh the graph data (bypass cache)")
 };
 var GraphTool = class extends import_sdk4.ToolContext {
   async execute(input) {
@@ -4892,7 +4940,7 @@ GraphTool = __decorateClass([
 ], GraphTool);
 
 // plugins/plugin-dashboard/src/tools/list-resources.tool.ts
-var import_lazy_zod6 = require("@frontmcp/lazy-zod");
+var import_lazy_zod5 = require("@frontmcp/lazy-zod");
 var import_sdk5 = require("@frontmcp/sdk");
 
 // plugins/plugin-dashboard/src/shared/safe-regex.ts
@@ -4911,20 +4959,20 @@ function safeRegex(pattern) {
 
 // plugins/plugin-dashboard/src/tools/list-resources.tool.ts
 var listResourcesInputSchema = {
-  filter: import_lazy_zod6.z.string().optional().describe("Filter resources by name or URI pattern (regex supported)"),
-  includeTemplates: import_lazy_zod6.z.boolean().default(true).describe("Include resource templates in the response")
+  filter: import_lazy_zod5.z.string().optional().describe("Filter resources by name or URI pattern (regex supported)"),
+  includeTemplates: import_lazy_zod5.z.boolean().default(true).describe("Include resource templates in the response")
 };
-var listResourcesOutputSchema = import_lazy_zod6.z.object({
-  resources: import_lazy_zod6.z.array(
-    import_lazy_zod6.z.object({
-      name: import_lazy_zod6.z.string(),
-      uri: import_lazy_zod6.z.string(),
-      description: import_lazy_zod6.z.string().optional(),
-      mimeType: import_lazy_zod6.z.string().optional(),
-      isTemplate: import_lazy_zod6.z.boolean()
+var listResourcesOutputSchema = import_lazy_zod5.z.object({
+  resources: import_lazy_zod5.z.array(
+    import_lazy_zod5.z.object({
+      name: import_lazy_zod5.z.string(),
+      uri: import_lazy_zod5.z.string(),
+      description: import_lazy_zod5.z.string().optional(),
+      mimeType: import_lazy_zod5.z.string().optional(),
+      isTemplate: import_lazy_zod5.z.boolean()
     })
   ),
-  count: import_lazy_zod6.z.number()
+  count: import_lazy_zod5.z.number()
 });
 var ListResourcesTool = class extends import_sdk5.ToolContext {
   async execute(input) {
@@ -4986,25 +5034,25 @@ ListResourcesTool = __decorateClass([
 ], ListResourcesTool);
 
 // plugins/plugin-dashboard/src/tools/list-tools.tool.ts
-var import_lazy_zod7 = require("@frontmcp/lazy-zod");
+var import_lazy_zod6 = require("@frontmcp/lazy-zod");
 var import_sdk6 = require("@frontmcp/sdk");
 var listToolsInputSchema = {
-  filter: import_lazy_zod7.z.string().optional().describe("Filter tools by name pattern (regex supported)"),
-  includePlugins: import_lazy_zod7.z.boolean().default(true).describe("Include tools from plugins"),
-  includeSchemas: import_lazy_zod7.z.boolean().default(false).describe("Include input/output schemas in the response")
+  filter: import_lazy_zod6.z.string().optional().describe("Filter tools by name pattern (regex supported)"),
+  includePlugins: import_lazy_zod6.z.boolean().default(true).describe("Include tools from plugins"),
+  includeSchemas: import_lazy_zod6.z.boolean().default(false).describe("Include input/output schemas in the response")
 };
-var listToolsOutputSchema = import_lazy_zod7.z.object({
-  tools: import_lazy_zod7.z.array(
-    import_lazy_zod7.z.object({
-      name: import_lazy_zod7.z.string(),
-      fullName: import_lazy_zod7.z.string(),
-      description: import_lazy_zod7.z.string().optional(),
-      tags: import_lazy_zod7.z.array(import_lazy_zod7.z.string()).optional(),
-      inputSchema: import_lazy_zod7.z.unknown().optional(),
-      outputSchema: import_lazy_zod7.z.unknown().optional()
+var listToolsOutputSchema = import_lazy_zod6.z.object({
+  tools: import_lazy_zod6.z.array(
+    import_lazy_zod6.z.object({
+      name: import_lazy_zod6.z.string(),
+      fullName: import_lazy_zod6.z.string(),
+      description: import_lazy_zod6.z.string().optional(),
+      tags: import_lazy_zod6.z.array(import_lazy_zod6.z.string()).optional(),
+      inputSchema: import_lazy_zod6.z.unknown().optional(),
+      outputSchema: import_lazy_zod6.z.unknown().optional()
     })
   ),
-  count: import_lazy_zod7.z.number()
+  count: import_lazy_zod6.z.number()
 });
 var ListToolsTool = class extends import_sdk6.ToolContext {
   async execute(input) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-dashboard",
-  "version": "1.8.7",
+  "version": "1.9.1-rc.1",
   "description": "Dashboard plugin for FrontMCP - visual monitoring and introspection of MCP servers",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -47,12 +47,12 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.8.7"
+    "@frontmcp/sdk": "1.9.1-rc.1"
   },
   "devDependencies": {
     "reflect-metadata": "^0.2.2"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.8.7"
+    "@frontmcp/lazy-zod": "1.9.1-rc.1"
   }
 }