@frontmcp/plugin-feature-flags 1.8.1 → 1.8.3

package/esm/index.mjs

@@ -297,12 +297,17 @@ var StaticFeatureFlagAdapter = class {
 };
 
 // plugins/plugin-feature-flags/src/feature-flag.context.ts
+import { STATELESS_SESSION_ID } from "@frontmcp/sdk";
+function verifiedSessionId(ctx) {
+  const verified = ctx.authInfo?.sessionId ?? ctx.authInfo?.extra?.["sessionId"];
+  return typeof verified === "string" && verified.length > 0 && verified !== STATELESS_SESSION_ID ? verified : void 0;
+}
 function buildFeatureFlagContext(ctx, config) {
   if (!ctx) return {};
   const userId = config.userIdResolver ? config.userIdResolver(ctx) : ctx.authInfo?.extra?.["sub"] ?? ctx.authInfo?.extra?.["userId"] ?? ctx.authInfo?.clientId;
   return {
     userId: userId ?? void 0,
-    sessionId: ctx.sessionId,
+    sessionId: verifiedSessionId(ctx),
     attributes: config.attributesResolver ? config.attributesResolver(ctx) : {}
   };
 }
@@ -661,21 +666,23 @@ __decorateClass([
   FilterSkillsHook.Did("filterSkills", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterSkills", 1);
 __decorateClass([
-  ToolHook.Will("execute", { priority: 50 })
+  ToolHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateToolExecution", 1);
 __decorateClass([
-  ReadResourceHook.Will("execute", { priority: 50 })
+  ReadResourceHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateResourceRead", 1);
 __decorateClass([
-  GetPromptHook.Will("execute", { priority: 50 })
+  GetPromptHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gatePromptGet", 1);
 __decorateClass([
-  CompleteHook.Will("complete", { priority: 50 })
+  CompleteHook.Will("complete", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateCompletion", 1);
 FeatureFlagPlugin = __decorateClass([
   Plugin({
     name: "feature-flags",
     description: "Feature flag-based capability filtering for MCP",
+    // A server where an entry declares `featureFlag` and none of these gates reaches it refuses to start.
+    enforcesMetadata: ["featureFlag"],
     providers: [],
     contextExtensions: [
       {

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-feature-flags",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Feature flag plugin for FrontMCP - dynamically gate MCP capabilities behind feature flags",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,7 +49,7 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.8.1"
+    "@frontmcp/sdk": "1.8.3"
   },
   "peerDependencies": {
     "@launchdarkly/node-server-sdk": "^9.0.0 || ^10.0.0",

package/feature-flag.context.d.ts

@@ -1,4 +1,4 @@
-import type { FrontMcpContext } from '@frontmcp/sdk';
+import { type FrontMcpContext } from '@frontmcp/sdk';
 import type { FeatureFlagContext, FeatureFlagPluginOptions } from './feature-flag.types';
 /**
  * Build the adapter evaluation context for the current caller.

package/feature-flag.context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flag.context.d.ts","sourceRoot":"","sources":["../src/feature-flag.context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEzF;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,GAAG,oBAAoB,CAAC,GAC9E,kBAAkB,CAcpB"}
+{"version":3,"file":"feature-flag.context.d.ts","sourceRoot":"","sources":["../src/feature-flag.context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAE3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAkBzF;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,GAAG,oBAAoB,CAAC,GAC9E,kBAAkB,CAcpB"}

package/feature-flag.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flag.plugin.d.ts","sourceRoot":"","sources":["../src/feature-flag.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAUb,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,KAAK,EAEV,wBAAwB,EACxB,6BAA6B,EAE9B,MAAM,sBAAsB,CAAC;AAa9B;;;;;;;;;;;;;;;;;;GAkBG;AAaH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,aAAa,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;IACnH,OAAO,EAAE,wBAAwB,CAAC;gBAEtB,OAAO,EAAE,6BAA6B;IAKlD;;OAEG;IACH,OAAgB,gBAAgB,GAAI,SAAS,6BAA6B,KAAG,YAAY,EAAE,CA0FzF;IAMF;;;OAGG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAmB5D;;OAEG;IAEG,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,0BAA0B,CAAC;IAmBxE;;;;OAIG;IAEG,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,mCAAmC,CAAC;IAmBzF;;OAEG;IAEG,iBAAiB,CAAC,OAAO,EAAE,GAAG;IAmBpC;;;;;;;;OAQG;IAEG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,eAAe,CAAC;IAmBtD;;;OAGG;IAEG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAI7D;;;;;;OAMG;IAEG,gBAAgB,CAAC,OAAO,EAAE,GAAG;IAInC;;;;;OAKG;IAEG,aAAa,CAAC,OAAO,EAAE,GAAG;IAIhC;;;;;OAKG;IAEG,cAAc,CAAC,OAAO,EAAE,GAAG;IAMjC;;;;;OAKG;YACW,kBAAkB;IA+BhC;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;YACW,iBAAiB;IAQ/B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;CAWrB"}
+{"version":3,"file":"feature-flag.plugin.d.ts","sourceRoot":"","sources":["../src/feature-flag.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAUb,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,KAAK,EAEV,wBAAwB,EACxB,6BAA6B,EAE9B,MAAM,sBAAsB,CAAC;AAa9B;;;;;;;;;;;;;;;;;;GAkBG;AAeH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,aAAa,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;IACnH,OAAO,EAAE,wBAAwB,CAAC;gBAEtB,OAAO,EAAE,6BAA6B;IAKlD;;OAEG;IACH,OAAgB,gBAAgB,GAAI,SAAS,6BAA6B,KAAG,YAAY,EAAE,CA0FzF;IAMF;;;OAGG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAmB5D;;OAEG;IAEG,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,0BAA0B,CAAC;IAmBxE;;;;OAIG;IAEG,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,mCAAmC,CAAC;IAmBzF;;OAEG;IAEG,iBAAiB,CAAC,OAAO,EAAE,GAAG;IAmBpC;;;;;;;;OAQG;IAEG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,eAAe,CAAC;IAmBtD;;;OAGG;IAEG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAI7D;;;;;;OAMG;IAEG,gBAAgB,CAAC,OAAO,EAAE,GAAG;IAInC;;;;;OAKG;IAEG,aAAa,CAAC,OAAO,EAAE,GAAG;IAIhC;;;;;OAKG;IAEG,cAAc,CAAC,OAAO,EAAE,GAAG;IAMjC;;;;;OAKG;YACW,kBAAkB;IA+BhC;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;YACW,iBAAiB;IAQ/B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;CAWrB"}

package/index.js

@@ -255,7 +255,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // plugins/plugin-feature-flags/src/feature-flag.plugin.ts
-var import_sdk2 = require("@frontmcp/sdk");
+var import_sdk3 = require("@frontmcp/sdk");
 
 // plugins/plugin-feature-flags/src/adapters/static.adapter.ts
 var StaticFeatureFlagAdapter = class {
@@ -299,12 +299,17 @@ var StaticFeatureFlagAdapter = class {
 };
 
 // plugins/plugin-feature-flags/src/feature-flag.context.ts
+var import_sdk = require("@frontmcp/sdk");
+function verifiedSessionId(ctx) {
+  const verified = ctx.authInfo?.sessionId ?? ctx.authInfo?.extra?.["sessionId"];
+  return typeof verified === "string" && verified.length > 0 && verified !== import_sdk.STATELESS_SESSION_ID ? verified : void 0;
+}
 function buildFeatureFlagContext(ctx, config) {
   if (!ctx) return {};
   const userId = config.userIdResolver ? config.userIdResolver(ctx) : ctx.authInfo?.extra?.["sub"] ?? ctx.authInfo?.extra?.["userId"] ?? ctx.authInfo?.clientId;
   return {
     userId: userId ?? void 0,
-    sessionId: ctx.sessionId,
+    sessionId: verifiedSessionId(ctx),
     attributes: config.attributesResolver ? config.attributesResolver(ctx) : {}
   };
 }
@@ -321,7 +326,7 @@ var FeatureFlagAccessorToken = /* @__PURE__ */ Symbol(
 );
 
 // plugins/plugin-feature-flags/src/providers/feature-flag-accessor.provider.ts
-var import_sdk = require("@frontmcp/sdk");
+var import_sdk2 = require("@frontmcp/sdk");
 var FeatureFlagAccessor = class {
   adapter;
   ctx;
@@ -387,10 +392,10 @@ var FeatureFlagAccessor = class {
   }
 };
 FeatureFlagAccessor = __decorateClass([
-  (0, import_sdk.Provider)({
+  (0, import_sdk2.Provider)({
     name: "provider:feature-flags:accessor",
     description: "Context-scoped accessor for feature flag evaluation",
-    scope: import_sdk.ProviderScope.CONTEXT
+    scope: import_sdk2.ProviderScope.CONTEXT
   })
 ], FeatureFlagAccessor);
 function createFeatureFlagAccessor(adapter, ctx, config) {
@@ -398,12 +403,12 @@ function createFeatureFlagAccessor(adapter, ctx, config) {
 }
 
 // plugins/plugin-feature-flags/src/feature-flag.plugin.ts
-var ListPromptsHook = (0, import_sdk2.FlowHooksOf)("prompts:list-prompts");
-var ReadResourceHook = (0, import_sdk2.FlowHooksOf)("resources:read-resource");
-var GetPromptHook = (0, import_sdk2.FlowHooksOf)("prompts:get-prompt");
-var CompleteHook = (0, import_sdk2.FlowHooksOf)("completion:complete");
-var FilterSkillsHook = (0, import_sdk2.FlowHooksOf)("skills:filter");
-var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
+var ListPromptsHook = (0, import_sdk3.FlowHooksOf)("prompts:list-prompts");
+var ReadResourceHook = (0, import_sdk3.FlowHooksOf)("resources:read-resource");
+var GetPromptHook = (0, import_sdk3.FlowHooksOf)("prompts:get-prompt");
+var CompleteHook = (0, import_sdk3.FlowHooksOf)("completion:complete");
+var FilterSkillsHook = (0, import_sdk3.FlowHooksOf)("skills:filter");
+var FeatureFlagPlugin = class extends import_sdk3.DynamicPlugin {
   options;
   constructor(options) {
     super();
@@ -554,7 +559,7 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
    */
   currentFlagContext() {
     try {
-      const ctx = this.get(import_sdk2.FrontMcpContextStorage)?.getStore();
+      const ctx = this.get(import_sdk3.FrontMcpContextStorage)?.getStore();
       if (!ctx) return {};
       return buildFeatureFlagContext(ctx, this.options);
     } catch {
@@ -641,20 +646,20 @@ __publicField(FeatureFlagPlugin, "dynamicProviders", (options) => {
   providers.push({
     name: "feature-flags:accessor",
     provide: FeatureFlagAccessorToken,
-    scope: import_sdk2.ProviderScope.CONTEXT,
-    inject: () => [FeatureFlagAdapterToken, import_sdk2.FRONTMCP_CONTEXT, FeatureFlagConfigToken],
+    scope: import_sdk3.ProviderScope.CONTEXT,
+    inject: () => [FeatureFlagAdapterToken, import_sdk3.FRONTMCP_CONTEXT, FeatureFlagConfigToken],
     useFactory: (adapter, ctx, cfg) => createFeatureFlagAccessor(adapter, ctx, cfg)
   });
   return providers;
 });
 __decorateClass([
-  import_sdk2.ListToolsHook.Did("findTools", { priority: 50 })
+  import_sdk3.ListToolsHook.Did("findTools", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListTools", 1);
 __decorateClass([
-  import_sdk2.ListResourcesHook.Did("findResources", { priority: 50 })
+  import_sdk3.ListResourcesHook.Did("findResources", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListResources", 1);
 __decorateClass([
-  import_sdk2.ListResourceTemplatesHook.Did("findTemplates", { priority: 50 })
+  import_sdk3.ListResourceTemplatesHook.Did("findTemplates", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListResourceTemplates", 1);
 __decorateClass([
   ListPromptsHook.Did("findPrompts", { priority: 50 })
@@ -663,21 +668,23 @@ __decorateClass([
   FilterSkillsHook.Did("filterSkills", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterSkills", 1);
 __decorateClass([
-  import_sdk2.ToolHook.Will("execute", { priority: 50 })
+  import_sdk3.ToolHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateToolExecution", 1);
 __decorateClass([
-  ReadResourceHook.Will("execute", { priority: 50 })
+  ReadResourceHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateResourceRead", 1);
 __decorateClass([
-  GetPromptHook.Will("execute", { priority: 50 })
+  GetPromptHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gatePromptGet", 1);
 __decorateClass([
-  CompleteHook.Will("complete", { priority: 50 })
+  CompleteHook.Will("complete", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateCompletion", 1);
 FeatureFlagPlugin = __decorateClass([
-  (0, import_sdk2.Plugin)({
+  (0, import_sdk3.Plugin)({
     name: "feature-flags",
     description: "Feature flag-based capability filtering for MCP",
+    // A server where an entry declares `featureFlag` and none of these gates reaches it refuses to start.
+    enforcesMetadata: ["featureFlag"],
     providers: [],
     contextExtensions: [
       {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-feature-flags",
-  "version": "1.8.1",
+  "version": "1.8.3",
   "description": "Feature flag plugin for FrontMCP - dynamically gate MCP capabilities behind feature flags",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,7 +49,7 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.8.1"
+    "@frontmcp/sdk": "1.8.3"
   },
   "peerDependencies": {
     "@launchdarkly/node-server-sdk": "^9.0.0 || ^10.0.0",