@frontmcp/plugin-feature-flags 1.8.2 → 1.8.4

package/esm/index.mjs

@@ -247,11 +247,13 @@ import {
   FlowHooksOf,
   FRONTMCP_CONTEXT,
   FrontMcpContextStorage,
+  isEntryGatedBy,
   ListResourcesHook,
   ListResourceTemplatesHook,
   ListToolsHook,
   Plugin,
   ProviderScope as ProviderScope2,
+  ScopeEntry,
   ToolHook
 } from "@frontmcp/sdk";
 
@@ -297,12 +299,21 @@ var StaticFeatureFlagAdapter = class {
 };
 
 // plugins/plugin-feature-flags/src/feature-flag.context.ts
+import { isAnonymousSubject, STATELESS_SESSION_ID } from "@frontmcp/sdk";
+function verifiedSessionId(ctx) {
+  const verified = ctx.authInfo?.sessionId ?? ctx.authInfo?.extra?.["sessionId"];
+  return typeof verified === "string" && verified.length > 0 && verified !== STATELESS_SESSION_ID ? verified : void 0;
+}
+function signedInUserId(ctx) {
+  const userId = ctx.authInfo?.extra?.["sub"] ?? ctx.authInfo?.extra?.["userId"] ?? ctx.authInfo?.clientId;
+  return isAnonymousSubject(userId) ? void 0 : userId;
+}
 function buildFeatureFlagContext(ctx, config) {
   if (!ctx) return {};
-  const userId = config.userIdResolver ? config.userIdResolver(ctx) : ctx.authInfo?.extra?.["sub"] ?? ctx.authInfo?.extra?.["userId"] ?? ctx.authInfo?.clientId;
+  const userId = config.userIdResolver ? config.userIdResolver(ctx) : signedInUserId(ctx);
   return {
     userId: userId ?? void 0,
-    sessionId: ctx.sessionId,
+    sessionId: verifiedSessionId(ctx),
     attributes: config.attributesResolver ? config.attributesResolver(ctx) : {}
   };
 }
@@ -410,13 +421,14 @@ var FeatureFlagPlugin = class extends DynamicPlugin {
   async filterListTools(flowCtx) {
     const { tools } = flowCtx.state;
     if (!tools || tools.length === 0) return;
-    const flaggedTools = this.collectFlagRefs(tools, (item) => item.tool.metadata?.featureFlag);
+    const judged = this.judgedItems(tools, (item) => ({ tool: item.tool }));
+    const flaggedTools = this.collectFlagRefs(judged, (item) => item.tool.metadata.featureFlag);
     if (flaggedTools.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedTools);
     const filtered = tools.filter((item) => {
       const ref = item.tool.metadata?.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("tools", filtered);
@@ -424,13 +436,14 @@ var FeatureFlagPlugin = class extends DynamicPlugin {
   async filterListResources(flowCtx) {
     const { resources } = flowCtx.state;
     if (!resources || resources.length === 0) return;
-    const flaggedResources = this.collectFlagRefs(resources, (item) => item.resource.metadata?.featureFlag);
+    const judged = this.judgedItems(resources, (item) => ({ resource: item.resource }));
+    const flaggedResources = this.collectFlagRefs(judged, (item) => item.resource.metadata.featureFlag);
     if (flaggedResources.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedResources);
     const filtered = resources.filter((item) => {
       const ref = item.resource.metadata?.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("resources", filtered);
@@ -438,13 +451,14 @@ var FeatureFlagPlugin = class extends DynamicPlugin {
   async filterListResourceTemplates(flowCtx) {
     const { templates } = flowCtx.state;
     if (!templates || templates.length === 0) return;
-    const flaggedTemplates = this.collectFlagRefs(templates, (item) => item.template.metadata.featureFlag);
+    const judged = this.judgedItems(templates, (item) => ({ resource: item.template }));
+    const flaggedTemplates = this.collectFlagRefs(judged, (item) => item.template.metadata.featureFlag);
     if (flaggedTemplates.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedTemplates);
     const filtered = templates.filter((item) => {
       const ref = item.template.metadata.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("templates", filtered);
@@ -452,13 +466,16 @@ var FeatureFlagPlugin = class extends DynamicPlugin {
   async filterListPrompts(flowCtx) {
     const { prompts } = flowCtx.state;
     if (!prompts || prompts.length === 0) return;
-    const flaggedPrompts = this.collectFlagRefs(prompts, (item) => item.prompt.metadata?.featureFlag);
+    const judged = this.judgedItems(prompts, (item) => ({
+      prompt: item.prompt
+    }));
+    const flaggedPrompts = this.collectFlagRefs(judged, (item) => item.prompt.metadata.featureFlag);
     if (flaggedPrompts.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedPrompts);
     const filtered = prompts.filter((item) => {
       const ref = item.prompt.metadata?.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("prompts", filtered);
@@ -466,13 +483,14 @@ var FeatureFlagPlugin = class extends DynamicPlugin {
   async filterSkills(flowCtx) {
     const { skills } = flowCtx.state;
     if (!skills || skills.length === 0) return;
-    const flaggedSkills = this.collectFlagRefs(skills, (skill) => skill.metadata.featureFlag);
+    const judged = this.judgedItems(skills, (skill) => ({ skill }));
+    const flaggedSkills = this.collectFlagRefs(judged, (skill) => skill.metadata.featureFlag);
     if (flaggedSkills.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedSkills);
     const filtered = skills.filter((skill) => {
       const ref = skill.metadata.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(skill)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("skills", filtered);
@@ -519,6 +537,26 @@ var FeatureFlagPlugin = class extends DynamicPlugin {
   // ─────────────────────────────────────────────────────────────────────────
   // Private Helpers
   // ─────────────────────────────────────────────────────────────────────────
+  /**
+   * The listed items this plugin instance judges: those whose gate (tools/call, resources/read,
+   * prompts/get, or `skills:filter` for skills) runs this instance's hook when the entry is served.
+   *
+   * List flows run every app's plugin over every app's entries, while a call is judged only by the
+   * plugin that covers the entry's app. With a FeatureFlagPlugin on each of two apps, filtering
+   * everything let one app's flags hide the other app's entries, which its own plugin still served
+   * by name. When the scope can't be read (a plugin used outside a server), every item is judged.
+   */
+  judgedItems(items, entryOf) {
+    let scope;
+    try {
+      scope = this.get(ScopeEntry);
+    } catch {
+      scope = void 0;
+    }
+    if (!scope?.hooks) return new Set(items);
+    const judgingScope = scope;
+    return new Set(items.filter((item) => isEntryGatedBy(judgingScope, entryOf(item), this)));
+  }
   /**
    * Collect unique flag keys from items that have a featureFlag metadata.
    */
@@ -658,24 +696,26 @@ __decorateClass([
   ListPromptsHook.Did("findPrompts", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListPrompts", 1);
 __decorateClass([
-  FilterSkillsHook.Did("filterSkills", { priority: 50 })
+  FilterSkillsHook.Did("filterSkills", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "filterSkills", 1);
 __decorateClass([
-  ToolHook.Will("execute", { priority: 50 })
+  ToolHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateToolExecution", 1);
 __decorateClass([
-  ReadResourceHook.Will("execute", { priority: 50 })
+  ReadResourceHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateResourceRead", 1);
 __decorateClass([
-  GetPromptHook.Will("execute", { priority: 50 })
+  GetPromptHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gatePromptGet", 1);
 __decorateClass([
-  CompleteHook.Will("complete", { priority: 50 })
+  CompleteHook.Will("complete", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateCompletion", 1);
 FeatureFlagPlugin = __decorateClass([
   Plugin({
     name: "feature-flags",
     description: "Feature flag-based capability filtering for MCP",
+    // A server where an entry declares `featureFlag` and none of these gates reaches it refuses to start.
+    enforcesMetadata: ["featureFlag"],
     providers: [],
     contextExtensions: [
       {

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-feature-flags",
-  "version": "1.8.2",
+  "version": "1.8.4",
   "description": "Feature flag plugin for FrontMCP - dynamically gate MCP capabilities behind feature flags",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,7 +49,7 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.8.2"
+    "@frontmcp/sdk": "1.8.4"
   },
   "peerDependencies": {
     "@launchdarkly/node-server-sdk": "^9.0.0 || ^10.0.0",

package/feature-flag.context.d.ts

@@ -1,4 +1,4 @@
-import type { FrontMcpContext } from '@frontmcp/sdk';
+import { type FrontMcpContext } from '@frontmcp/sdk';
 import type { FeatureFlagContext, FeatureFlagPluginOptions } from './feature-flag.types';
 /**
  * Build the adapter evaluation context for the current caller.

package/feature-flag.context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flag.context.d.ts","sourceRoot":"","sources":["../src/feature-flag.context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEzF;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,GAAG,oBAAoB,CAAC,GAC9E,kBAAkB,CAcpB"}
+{"version":3,"file":"feature-flag.context.d.ts","sourceRoot":"","sources":["../src/feature-flag.context.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAE/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAiCzF;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,GAAG,SAAS,EAChC,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,GAAG,oBAAoB,CAAC,GAC9E,kBAAkB,CAUpB"}

package/feature-flag.plugin.d.ts

@@ -89,6 +89,16 @@ export default class FeatureFlagPlugin extends DynamicPlugin<FeatureFlagPluginOp
      * the other two did not, and three copies would drift apart the same way.
      */
     private gateEntryExecution;
+    /**
+     * The listed items this plugin instance judges: those whose gate (tools/call, resources/read,
+     * prompts/get, or `skills:filter` for skills) runs this instance's hook when the entry is served.
+     *
+     * List flows run every app's plugin over every app's entries, while a call is judged only by the
+     * plugin that covers the entry's app. With a FeatureFlagPlugin on each of two apps, filtering
+     * everything let one app's flags hide the other app's entries, which its own plugin still served
+     * by name. When the scope can't be read (a plugin used outside a server), every item is judged.
+     */
+    private judgedItems;
     /**
      * Collect unique flag keys from items that have a featureFlag metadata.
      */

package/feature-flag.plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-flag.plugin.d.ts","sourceRoot":"","sources":["../src/feature-flag.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAUb,KAAK,SAAS,EACd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,KAAK,EAEV,wBAAwB,EACxB,6BAA6B,EAE9B,MAAM,sBAAsB,CAAC;AAa9B;;;;;;;;;;;;;;;;;;GAkBG;AAaH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,aAAa,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;IACnH,OAAO,EAAE,wBAAwB,CAAC;gBAEtB,OAAO,EAAE,6BAA6B;IAKlD;;OAEG;IACH,OAAgB,gBAAgB,GAAI,SAAS,6BAA6B,KAAG,YAAY,EAAE,CA0FzF;IAMF;;;OAGG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAmB5D;;OAEG;IAEG,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,0BAA0B,CAAC;IAmBxE;;;;OAIG;IAEG,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,mCAAmC,CAAC;IAmBzF;;OAEG;IAEG,iBAAiB,CAAC,OAAO,EAAE,GAAG;IAmBpC;;;;;;;;OAQG;IAEG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,eAAe,CAAC;IAmBtD;;;OAGG;IAEG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAI7D;;;;;;OAMG;IAEG,gBAAgB,CAAC,OAAO,EAAE,GAAG;IAInC;;;;;OAKG;IAEG,aAAa,CAAC,OAAO,EAAE,GAAG;IAIhC;;;;;OAKG;IAEG,cAAc,CAAC,OAAO,EAAE,GAAG;IAMjC;;;;;OAKG;YACW,kBAAkB;IA+BhC;;OAEG;IACH,OAAO,CAAC,eAAe;IAcvB;;OAEG;YACW,iBAAiB;IAQ/B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;CAWrB"}
+{"version":3,"file":"feature-flag.plugin.d.ts","sourceRoot":"","sources":["../src/feature-flag.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAYb,KAAK,SAAS,EAGd,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAMvB,OAAO,KAAK,EAEV,wBAAwB,EACxB,6BAA6B,EAE9B,MAAM,sBAAsB,CAAC;AAa9B;;;;;;;;;;;;;;;;;;GAkBG;AAeH,MAAM,CAAC,OAAO,OAAO,iBAAkB,SAAQ,aAAa,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;IACnH,OAAO,EAAE,wBAAwB,CAAC;gBAEtB,OAAO,EAAE,6BAA6B;IAKlD;;OAEG;IACH,OAAgB,gBAAgB,GAAI,SAAS,6BAA6B,KAAG,YAAY,EAAE,CA0FzF;IAMF;;;OAGG;IAEG,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,kBAAkB,CAAC;IAqB5D;;OAEG;IAEG,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,0BAA0B,CAAC;IAoBxE;;;;OAIG;IAEG,2BAA2B,CAAC,OAAO,EAAE,SAAS,CAAC,mCAAmC,CAAC;IAoBzF;;OAEG;IAEG,iBAAiB,CAAC,OAAO,EAAE,GAAG;IAsBpC;;;;;;;;OAQG;IAEG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,eAAe,CAAC;IAsBtD;;;OAGG;IAEG,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC;IAI7D;;;;;;OAMG;IAEG,gBAAgB,CAAC,OAAO,EAAE,GAAG;IAInC;;;;;OAKG;IAEG,aAAa,CAAC,OAAO,EAAE,GAAG;IAIhC;;;;;OAKG;IAEG,cAAc,CAAC,OAAO,EAAE,GAAG;IAMjC;;;;;OAKG;YACW,kBAAkB;IA+BhC;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAYnB;;OAEG;IACH,OAAO,CAAC,eAAe;IAiBvB;;OAEG;YACW,iBAAiB;IAQ/B;;;;;;;OAOG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;;;OAIG;IACH,OAAO,CAAC,YAAY;CAWrB"}

package/index.js

@@ -255,7 +255,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // plugins/plugin-feature-flags/src/feature-flag.plugin.ts
-var import_sdk2 = require("@frontmcp/sdk");
+var import_sdk3 = require("@frontmcp/sdk");
 
 // plugins/plugin-feature-flags/src/adapters/static.adapter.ts
 var StaticFeatureFlagAdapter = class {
@@ -299,12 +299,21 @@ var StaticFeatureFlagAdapter = class {
 };
 
 // plugins/plugin-feature-flags/src/feature-flag.context.ts
+var import_sdk = require("@frontmcp/sdk");
+function verifiedSessionId(ctx) {
+  const verified = ctx.authInfo?.sessionId ?? ctx.authInfo?.extra?.["sessionId"];
+  return typeof verified === "string" && verified.length > 0 && verified !== import_sdk.STATELESS_SESSION_ID ? verified : void 0;
+}
+function signedInUserId(ctx) {
+  const userId = ctx.authInfo?.extra?.["sub"] ?? ctx.authInfo?.extra?.["userId"] ?? ctx.authInfo?.clientId;
+  return (0, import_sdk.isAnonymousSubject)(userId) ? void 0 : userId;
+}
 function buildFeatureFlagContext(ctx, config) {
   if (!ctx) return {};
-  const userId = config.userIdResolver ? config.userIdResolver(ctx) : ctx.authInfo?.extra?.["sub"] ?? ctx.authInfo?.extra?.["userId"] ?? ctx.authInfo?.clientId;
+  const userId = config.userIdResolver ? config.userIdResolver(ctx) : signedInUserId(ctx);
   return {
     userId: userId ?? void 0,
-    sessionId: ctx.sessionId,
+    sessionId: verifiedSessionId(ctx),
     attributes: config.attributesResolver ? config.attributesResolver(ctx) : {}
   };
 }
@@ -321,7 +330,7 @@ var FeatureFlagAccessorToken = /* @__PURE__ */ Symbol(
 );
 
 // plugins/plugin-feature-flags/src/providers/feature-flag-accessor.provider.ts
-var import_sdk = require("@frontmcp/sdk");
+var import_sdk2 = require("@frontmcp/sdk");
 var FeatureFlagAccessor = class {
   adapter;
   ctx;
@@ -387,10 +396,10 @@ var FeatureFlagAccessor = class {
   }
 };
 FeatureFlagAccessor = __decorateClass([
-  (0, import_sdk.Provider)({
+  (0, import_sdk2.Provider)({
     name: "provider:feature-flags:accessor",
     description: "Context-scoped accessor for feature flag evaluation",
-    scope: import_sdk.ProviderScope.CONTEXT
+    scope: import_sdk2.ProviderScope.CONTEXT
   })
 ], FeatureFlagAccessor);
 function createFeatureFlagAccessor(adapter, ctx, config) {
@@ -398,12 +407,12 @@ function createFeatureFlagAccessor(adapter, ctx, config) {
 }
 
 // plugins/plugin-feature-flags/src/feature-flag.plugin.ts
-var ListPromptsHook = (0, import_sdk2.FlowHooksOf)("prompts:list-prompts");
-var ReadResourceHook = (0, import_sdk2.FlowHooksOf)("resources:read-resource");
-var GetPromptHook = (0, import_sdk2.FlowHooksOf)("prompts:get-prompt");
-var CompleteHook = (0, import_sdk2.FlowHooksOf)("completion:complete");
-var FilterSkillsHook = (0, import_sdk2.FlowHooksOf)("skills:filter");
-var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
+var ListPromptsHook = (0, import_sdk3.FlowHooksOf)("prompts:list-prompts");
+var ReadResourceHook = (0, import_sdk3.FlowHooksOf)("resources:read-resource");
+var GetPromptHook = (0, import_sdk3.FlowHooksOf)("prompts:get-prompt");
+var CompleteHook = (0, import_sdk3.FlowHooksOf)("completion:complete");
+var FilterSkillsHook = (0, import_sdk3.FlowHooksOf)("skills:filter");
+var FeatureFlagPlugin = class extends import_sdk3.DynamicPlugin {
   options;
   constructor(options) {
     super();
@@ -412,13 +421,14 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
   async filterListTools(flowCtx) {
     const { tools } = flowCtx.state;
     if (!tools || tools.length === 0) return;
-    const flaggedTools = this.collectFlagRefs(tools, (item) => item.tool.metadata?.featureFlag);
+    const judged = this.judgedItems(tools, (item) => ({ tool: item.tool }));
+    const flaggedTools = this.collectFlagRefs(judged, (item) => item.tool.metadata.featureFlag);
     if (flaggedTools.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedTools);
     const filtered = tools.filter((item) => {
       const ref = item.tool.metadata?.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("tools", filtered);
@@ -426,13 +436,14 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
   async filterListResources(flowCtx) {
     const { resources } = flowCtx.state;
     if (!resources || resources.length === 0) return;
-    const flaggedResources = this.collectFlagRefs(resources, (item) => item.resource.metadata?.featureFlag);
+    const judged = this.judgedItems(resources, (item) => ({ resource: item.resource }));
+    const flaggedResources = this.collectFlagRefs(judged, (item) => item.resource.metadata.featureFlag);
     if (flaggedResources.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedResources);
     const filtered = resources.filter((item) => {
       const ref = item.resource.metadata?.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("resources", filtered);
@@ -440,13 +451,14 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
   async filterListResourceTemplates(flowCtx) {
     const { templates } = flowCtx.state;
     if (!templates || templates.length === 0) return;
-    const flaggedTemplates = this.collectFlagRefs(templates, (item) => item.template.metadata.featureFlag);
+    const judged = this.judgedItems(templates, (item) => ({ resource: item.template }));
+    const flaggedTemplates = this.collectFlagRefs(judged, (item) => item.template.metadata.featureFlag);
     if (flaggedTemplates.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedTemplates);
     const filtered = templates.filter((item) => {
       const ref = item.template.metadata.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("templates", filtered);
@@ -454,13 +466,16 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
   async filterListPrompts(flowCtx) {
     const { prompts } = flowCtx.state;
     if (!prompts || prompts.length === 0) return;
-    const flaggedPrompts = this.collectFlagRefs(prompts, (item) => item.prompt.metadata?.featureFlag);
+    const judged = this.judgedItems(prompts, (item) => ({
+      prompt: item.prompt
+    }));
+    const flaggedPrompts = this.collectFlagRefs(judged, (item) => item.prompt.metadata.featureFlag);
     if (flaggedPrompts.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedPrompts);
     const filtered = prompts.filter((item) => {
       const ref = item.prompt.metadata?.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(item)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("prompts", filtered);
@@ -468,13 +483,14 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
   async filterSkills(flowCtx) {
     const { skills } = flowCtx.state;
     if (!skills || skills.length === 0) return;
-    const flaggedSkills = this.collectFlagRefs(skills, (skill) => skill.metadata.featureFlag);
+    const judged = this.judgedItems(skills, (skill) => ({ skill }));
+    const flaggedSkills = this.collectFlagRefs(judged, (skill) => skill.metadata.featureFlag);
     if (flaggedSkills.size === 0) return;
     const adapter = this.get(FeatureFlagAdapterToken);
     const flagResults = await this.batchEvaluateRefs(adapter, flaggedSkills);
     const filtered = skills.filter((skill) => {
       const ref = skill.metadata.featureFlag;
-      if (!ref) return true;
+      if (!ref || !judged.has(skill)) return true;
       return this.isRefEnabled(ref, flagResults);
     });
     flowCtx.state.set("skills", filtered);
@@ -521,6 +537,26 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
   // ─────────────────────────────────────────────────────────────────────────
   // Private Helpers
   // ─────────────────────────────────────────────────────────────────────────
+  /**
+   * The listed items this plugin instance judges: those whose gate (tools/call, resources/read,
+   * prompts/get, or `skills:filter` for skills) runs this instance's hook when the entry is served.
+   *
+   * List flows run every app's plugin over every app's entries, while a call is judged only by the
+   * plugin that covers the entry's app. With a FeatureFlagPlugin on each of two apps, filtering
+   * everything let one app's flags hide the other app's entries, which its own plugin still served
+   * by name. When the scope can't be read (a plugin used outside a server), every item is judged.
+   */
+  judgedItems(items, entryOf) {
+    let scope;
+    try {
+      scope = this.get(import_sdk3.ScopeEntry);
+    } catch {
+      scope = void 0;
+    }
+    if (!scope?.hooks) return new Set(items);
+    const judgingScope = scope;
+    return new Set(items.filter((item) => (0, import_sdk3.isEntryGatedBy)(judgingScope, entryOf(item), this)));
+  }
   /**
    * Collect unique flag keys from items that have a featureFlag metadata.
    */
@@ -554,7 +590,7 @@ var FeatureFlagPlugin = class extends import_sdk2.DynamicPlugin {
    */
   currentFlagContext() {
     try {
-      const ctx = this.get(import_sdk2.FrontMcpContextStorage)?.getStore();
+      const ctx = this.get(import_sdk3.FrontMcpContextStorage)?.getStore();
       if (!ctx) return {};
       return buildFeatureFlagContext(ctx, this.options);
     } catch {
@@ -641,43 +677,45 @@ __publicField(FeatureFlagPlugin, "dynamicProviders", (options) => {
   providers.push({
     name: "feature-flags:accessor",
     provide: FeatureFlagAccessorToken,
-    scope: import_sdk2.ProviderScope.CONTEXT,
-    inject: () => [FeatureFlagAdapterToken, import_sdk2.FRONTMCP_CONTEXT, FeatureFlagConfigToken],
+    scope: import_sdk3.ProviderScope.CONTEXT,
+    inject: () => [FeatureFlagAdapterToken, import_sdk3.FRONTMCP_CONTEXT, FeatureFlagConfigToken],
     useFactory: (adapter, ctx, cfg) => createFeatureFlagAccessor(adapter, ctx, cfg)
   });
   return providers;
 });
 __decorateClass([
-  import_sdk2.ListToolsHook.Did("findTools", { priority: 50 })
+  import_sdk3.ListToolsHook.Did("findTools", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListTools", 1);
 __decorateClass([
-  import_sdk2.ListResourcesHook.Did("findResources", { priority: 50 })
+  import_sdk3.ListResourcesHook.Did("findResources", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListResources", 1);
 __decorateClass([
-  import_sdk2.ListResourceTemplatesHook.Did("findTemplates", { priority: 50 })
+  import_sdk3.ListResourceTemplatesHook.Did("findTemplates", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListResourceTemplates", 1);
 __decorateClass([
   ListPromptsHook.Did("findPrompts", { priority: 50 })
 ], FeatureFlagPlugin.prototype, "filterListPrompts", 1);
 __decorateClass([
-  FilterSkillsHook.Did("filterSkills", { priority: 50 })
+  FilterSkillsHook.Did("filterSkills", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "filterSkills", 1);
 __decorateClass([
-  import_sdk2.ToolHook.Will("execute", { priority: 50 })
+  import_sdk3.ToolHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateToolExecution", 1);
 __decorateClass([
-  ReadResourceHook.Will("execute", { priority: 50 })
+  ReadResourceHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateResourceRead", 1);
 __decorateClass([
-  GetPromptHook.Will("execute", { priority: 50 })
+  GetPromptHook.Will("execute", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gatePromptGet", 1);
 __decorateClass([
-  CompleteHook.Will("complete", { priority: 50 })
+  CompleteHook.Will("complete", { priority: 50, appliesTo: "uncovered-apps" })
 ], FeatureFlagPlugin.prototype, "gateCompletion", 1);
 FeatureFlagPlugin = __decorateClass([
-  (0, import_sdk2.Plugin)({
+  (0, import_sdk3.Plugin)({
     name: "feature-flags",
     description: "Feature flag-based capability filtering for MCP",
+    // A server where an entry declares `featureFlag` and none of these gates reaches it refuses to start.
+    enforcesMetadata: ["featureFlag"],
     providers: [],
     contextExtensions: [
       {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/plugin-feature-flags",
-  "version": "1.8.2",
+  "version": "1.8.4",
   "description": "Feature flag plugin for FrontMCP - dynamically gate MCP capabilities behind feature flags",
   "author": "AgentFront <info@agentfront.dev>",
   "license": "Apache-2.0",
@@ -49,7 +49,7 @@
     }
   },
   "dependencies": {
-    "@frontmcp/sdk": "1.8.2"
+    "@frontmcp/sdk": "1.8.4"
   },
   "peerDependencies": {
     "@launchdarkly/node-server-sdk": "^9.0.0 || ^10.0.0",