@frontmcp/sdk 0.1.0

package/src/tokens/plugin.tokens.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrontMcpPluginTokens = void 0;
+const base_tokens_1 = require("./base.tokens");
+exports.FrontMcpPluginTokens = {
+    type: base_tokens_1.tokenFactory.type('plugin'),
+    id: base_tokens_1.tokenFactory.meta('id'),
+    name: base_tokens_1.tokenFactory.meta('name'),
+    description: base_tokens_1.tokenFactory.meta('description'),
+    providers: base_tokens_1.tokenFactory.meta('providers'),
+    exports: base_tokens_1.tokenFactory.meta('exports'),
+    plugins: base_tokens_1.tokenFactory.meta('plugins'),
+    adapters: base_tokens_1.tokenFactory.meta('adapters'),
+    tools: base_tokens_1.tokenFactory.meta('tools'),
+    resources: base_tokens_1.tokenFactory.meta('resources'),
+    prompts: base_tokens_1.tokenFactory.meta('prompts'),
+};
+//# sourceMappingURL=plugin.tokens.js.map

package/src/tokens/plugin.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.tokens.js","sourceRoot":"","sources":["../../../src/tokens/plugin.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAKhC,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;IACjC,EAAE,EAAE,0BAAY,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;IACzC,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IACrC,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IACrC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;IACzC,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;CACc,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { PluginMetadata } from '../metadata';\n\n\nexport const FrontMcpPluginTokens = {\n  type: tokenFactory.type('plugin'),\n  id: tokenFactory.meta('id'),\n  name: tokenFactory.meta('name'),\n  description: tokenFactory.meta('description'),\n  providers: tokenFactory.meta('providers'),\n  exports: tokenFactory.meta('exports'),\n  plugins: tokenFactory.meta('plugins'),\n  adapters: tokenFactory.meta('adapters'),\n  tools: tokenFactory.meta('tools'),\n  resources: tokenFactory.meta('resources'),\n  prompts: tokenFactory.meta('prompts'),\n} as const satisfies RawMetadataShape<PluginMetadata>;\n\n"]}

package/src/tokens/prompt.tokens.d.ts

@@ -0,0 +1,9 @@
+export declare const FrontMcpPromptTokens: {
+    readonly type: symbol;
+    readonly name: symbol;
+    readonly title: symbol;
+    readonly arguments: symbol;
+    readonly description: symbol;
+    readonly icons: symbol;
+    readonly metadata: symbol;
+};

package/src/tokens/prompt.tokens.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrontMcpPromptTokens = void 0;
+const base_tokens_1 = require("./base.tokens");
+exports.FrontMcpPromptTokens = {
+    type: base_tokens_1.tokenFactory.type('prompt'),
+    name: base_tokens_1.tokenFactory.meta('name'),
+    title: base_tokens_1.tokenFactory.meta('title'),
+    arguments: base_tokens_1.tokenFactory.meta('arguments'),
+    description: base_tokens_1.tokenFactory.meta('description'),
+    icons: base_tokens_1.tokenFactory.meta('icons'),
+    metadata: base_tokens_1.tokenFactory.meta('metadata'), // used in prompt({}) construction
+};
+//# sourceMappingURL=prompt.tokens.js.map

package/src/tokens/prompt.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.tokens.js","sourceRoot":"","sources":["../../../src/tokens/prompt.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,oBAAoB,GAAG;IAClC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;IACjC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;IACzC,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,kCAAkC;CACM,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { PromptMetadata } from '../metadata';\n\nexport const FrontMcpPromptTokens = {\n  type: tokenFactory.type('prompt'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  arguments: tokenFactory.meta('arguments'),\n  description: tokenFactory.meta('description'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in prompt({}) construction\n} as const satisfies RawMetadataShape<PromptMetadata, ExtendFrontMcpPromptMetadata>;\n"]}

package/src/tokens/provider.tokens.d.ts

@@ -0,0 +1,3 @@
+import { RawMetadataShape } from '../types';
+import { ProviderMetadata } from '../metadata';
+export declare const FrontMcpProviderTokens: RawMetadataShape<ProviderMetadata>;

package/src/tokens/provider.tokens.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrontMcpProviderTokens = void 0;
+const base_tokens_1 = require("./base.tokens");
+exports.FrontMcpProviderTokens = {
+    type: base_tokens_1.tokenFactory.type('provider'),
+    id: base_tokens_1.tokenFactory.meta('id'),
+    name: base_tokens_1.tokenFactory.meta('name'),
+    description: base_tokens_1.tokenFactory.meta('description'),
+    scope: base_tokens_1.tokenFactory.meta('scope'),
+};
+//# sourceMappingURL=provider.tokens.js.map

package/src/tokens/provider.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.tokens.js","sourceRoot":"","sources":["../../../src/tokens/provider.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAKhC,QAAA,sBAAsB,GAAuC;IACxE,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACnC,EAAE,EAAE,0BAAY,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;CACzB,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ProviderMetadata } from '../metadata';\n\n\nexport const FrontMcpProviderTokens: RawMetadataShape<ProviderMetadata> = {\n  type: tokenFactory.type('provider'),\n  id: tokenFactory.meta('id'),\n  name: tokenFactory.meta('name'),\n  description: tokenFactory.meta('description'),\n  scope: tokenFactory.meta('scope'),\n} as const;\n\n"]}

package/src/tokens/resource.tokens.d.ts

@@ -0,0 +1,20 @@
+export declare const FrontMcpResourceTokens: {
+    readonly type: symbol;
+    readonly name: symbol;
+    readonly title: symbol;
+    readonly uri: symbol;
+    readonly description: symbol;
+    readonly mimeType: symbol;
+    readonly icons: symbol;
+    readonly metadata: symbol;
+};
+export declare const FrontMcpResourceTemplateTokens: {
+    readonly type: symbol;
+    readonly name: symbol;
+    readonly title: symbol;
+    readonly uriTemplate: symbol;
+    readonly description: symbol;
+    readonly mimeType: symbol;
+    readonly icons: symbol;
+    readonly metadata: symbol;
+};

package/src/tokens/resource.tokens.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrontMcpResourceTemplateTokens = exports.FrontMcpResourceTokens = void 0;
+const base_tokens_1 = require("./base.tokens");
+exports.FrontMcpResourceTokens = {
+    type: base_tokens_1.tokenFactory.type('resource'),
+    name: base_tokens_1.tokenFactory.meta('name'),
+    title: base_tokens_1.tokenFactory.meta('title'),
+    uri: base_tokens_1.tokenFactory.meta('uri'),
+    description: base_tokens_1.tokenFactory.meta('description'),
+    mimeType: base_tokens_1.tokenFactory.meta('mimeType'),
+    icons: base_tokens_1.tokenFactory.meta('icons'),
+    metadata: base_tokens_1.tokenFactory.meta('metadata'), // used in resource({}) construction
+};
+exports.FrontMcpResourceTemplateTokens = {
+    type: base_tokens_1.tokenFactory.type('resourceTemplate'),
+    name: base_tokens_1.tokenFactory.meta('name'),
+    title: base_tokens_1.tokenFactory.meta('title'),
+    uriTemplate: base_tokens_1.tokenFactory.meta('uriTemplate'),
+    description: base_tokens_1.tokenFactory.meta('description'),
+    mimeType: base_tokens_1.tokenFactory.meta('mimeType'),
+    icons: base_tokens_1.tokenFactory.meta('icons'),
+    metadata: base_tokens_1.tokenFactory.meta('metadata'), // used in resourceTemplate({}) construction
+};
+//# sourceMappingURL=resource.tokens.js.map

package/src/tokens/resource.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.tokens.js","sourceRoot":"","sources":["../../../src/tokens/resource.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAKhC,QAAA,sBAAsB,GAAG;IACpC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,GAAG,EAAE,0BAAY,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,oCAAoC;CACQ,CAAC;AAE3E,QAAA,8BAA8B,GAAG;IAC5C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC3C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,4CAA4C;CACgB,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ResourceMetadata, ResourceTemplateMetadata } from '../metadata';\n\n\nexport const FrontMcpResourceTokens = {\n  type: tokenFactory.type('resource'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  uri: tokenFactory.meta('uri'),\n  description: tokenFactory.meta('description'),\n  mimeType: tokenFactory.meta('mimeType'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in resource({}) construction\n} as const satisfies RawMetadataShape<ResourceMetadata, ExtendFrontMcpResourceMetadata>;\n\nexport const FrontMcpResourceTemplateTokens = {\n  type: tokenFactory.type('resourceTemplate'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  uriTemplate: tokenFactory.meta('uriTemplate'),\n  description: tokenFactory.meta('description'),\n  mimeType: tokenFactory.meta('mimeType'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in resourceTemplate({}) construction\n} as const satisfies RawMetadataShape<ResourceTemplateMetadata, ExtendFrontMcpResourceTemplateMetadata>;\n\n"]}

package/src/tokens/server.tokens.d.ts

@@ -0,0 +1,6 @@
+export declare const ServerRequestTokens: {
+    type: symbol;
+    intent: symbol;
+    auth: symbol;
+    sessionId: symbol;
+};

package/src/tokens/server.tokens.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServerRequestTokens = void 0;
+const base_tokens_1 = require("./base.tokens");
+exports.ServerRequestTokens = {
+    type: base_tokens_1.tokenFactory.type('serverRequest'),
+    intent: base_tokens_1.tokenFactory.meta('intent'),
+    auth: base_tokens_1.tokenFactory.meta('auth'),
+    sessionId: base_tokens_1.tokenFactory.meta('sessionId'),
+};
+//# sourceMappingURL=server.tokens.js.map

package/src/tokens/server.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.tokens.js","sourceRoot":"","sources":["../../../src/tokens/server.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAUhC,QAAA,mBAAmB,GAAG;IACjC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,eAAe,CAAC;IACxC,MAAM,EAAE,0BAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;IACnC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;CACU,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { HttpRequestIntent } from '../utils';\nimport { Authorization, RawMetadataShape } from '../types';\n\ninterface ServerRequestTokenValue {\n  intent: HttpRequestIntent;\n  auth: Authorization;\n  sessionId: string;\n}\n\nexport const ServerRequestTokens = {\n  type: tokenFactory.type('serverRequest'),\n  intent: tokenFactory.meta('intent'),\n  auth: tokenFactory.meta('auth'),\n  sessionId: tokenFactory.meta('sessionId'),\n} satisfies RawMetadataShape<ServerRequestTokenValue>;"]}

package/src/tokens/tool.tokens.d.ts

@@ -0,0 +1,13 @@
+export declare const FrontMcpToolTokens: {
+    readonly type: symbol;
+    readonly id: symbol;
+    readonly name: symbol;
+    readonly description: symbol;
+    readonly inputSchema: symbol;
+    readonly rawInputSchema: symbol;
+    readonly outputSchema: symbol;
+    readonly tags: symbol;
+    readonly annotations: symbol;
+    readonly hideFromDiscovery: symbol;
+    readonly metadata: symbol;
+};

package/src/tokens/tool.tokens.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrontMcpToolTokens = void 0;
+const base_tokens_1 = require("./base.tokens");
+exports.FrontMcpToolTokens = {
+    type: base_tokens_1.tokenFactory.type('tool'),
+    id: base_tokens_1.tokenFactory.meta('id'),
+    name: base_tokens_1.tokenFactory.meta('name'),
+    description: base_tokens_1.tokenFactory.meta('description'),
+    inputSchema: base_tokens_1.tokenFactory.meta('inputSchema'),
+    rawInputSchema: base_tokens_1.tokenFactory.meta('rawInputSchema'),
+    outputSchema: base_tokens_1.tokenFactory.meta('outputSchema'),
+    tags: base_tokens_1.tokenFactory.meta('tags'),
+    annotations: base_tokens_1.tokenFactory.meta('annotations'),
+    hideFromDiscovery: base_tokens_1.tokenFactory.meta('hideFromDiscovery'),
+    metadata: base_tokens_1.tokenFactory.meta('metadata'), // used in tool({}) construction
+};
+//# sourceMappingURL=tool.tokens.js.map

package/src/tokens/tool.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.tokens.js","sourceRoot":"","sources":["../../../src/tokens/tool.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,0BAAY,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,cAAc,EAAE,0BAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACnD,YAAY,EAAE,0BAAY,CAAC,IAAI,CAAC,cAAc,CAAC;IAC/C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,iBAAiB,EAAE,0BAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACzD,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,gCAAgC;CACI,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ToolMetadata } from '../metadata';\n\nexport const FrontMcpToolTokens = {\n  type: tokenFactory.type('tool'),\n  id: tokenFactory.meta('id'),\n  name: tokenFactory.meta('name'),\n  description: tokenFactory.meta('description'),\n  inputSchema: tokenFactory.meta('inputSchema'),\n  rawInputSchema: tokenFactory.meta('rawInputSchema'),\n  outputSchema: tokenFactory.meta('outputSchema'),\n  tags: tokenFactory.meta('tags'),\n  annotations: tokenFactory.meta('annotations'),\n  hideFromDiscovery: tokenFactory.meta('hideFromDiscovery'),\n  metadata: tokenFactory.meta('metadata'), // used in tool({}) construction\n} as const satisfies RawMetadataShape<ToolMetadata, ExtendFrontMcpToolMetadata>;\n"]}

package/src/types/auth/index.d.ts

@@ -0,0 +1,2 @@
+export * from './jwt.types';
+export * from './session.types';

package/src/types/auth/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./jwt.types"), exports);
+tslib_1.__exportStar(require("./session.types"), exports);
+//# sourceMappingURL=index.js.map

package/src/types/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/types/auth/index.ts"],"names":[],"mappings":";;;AAAA,sDAA4B;AAC5B,0DAAgC","sourcesContent":["export * from './jwt.types';\nexport * from './session.types';"]}

package/src/types/auth/jwt.types.d.ts

@@ -0,0 +1,112 @@
+import { z } from 'zod';
+export interface JWKParameters {
+    /** JWK "kty" (Key Type) Parameter */
+    kty?: string;
+    /**
+     * JWK "alg" (Algorithm) Parameter
+     *
+     * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+     */
+    alg?: string;
+    /** JWK "key_ops" (Key Operations) Parameter */
+    key_ops?: string[];
+    /** JWK "ext" (Extractable) Parameter */
+    ext?: boolean;
+    /** JWK "use" (Public Key Use) Parameter */
+    use?: string;
+    /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+    x5c?: string[];
+    /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+    x5t?: string;
+    /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+    'x5t#S256'?: string;
+    /** JWK "x5u" (X.509 URL) Parameter */
+    x5u?: string;
+    /** JWK "kid" (Key ID) Parameter */
+    kid?: string;
+}
+export declare const jwkParametersSchema: z.ZodObject<{
+    kty: z.ZodOptional<z.ZodString>;
+    alg: z.ZodOptional<z.ZodString>;
+    key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    ext: z.ZodOptional<z.ZodBoolean>;
+    use: z.ZodOptional<z.ZodString>;
+    x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    x5t: z.ZodOptional<z.ZodString>;
+    'x5t#S256': z.ZodOptional<z.ZodString>;
+    x5u: z.ZodOptional<z.ZodString>;
+    kid: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kty?: string | undefined;
+    alg?: string | undefined;
+    key_ops?: string[] | undefined;
+    ext?: boolean | undefined;
+    use?: string | undefined;
+    x5c?: string[] | undefined;
+    x5t?: string | undefined;
+    'x5t#S256'?: string | undefined;
+    x5u?: string | undefined;
+    kid?: string | undefined;
+}, {
+    kty?: string | undefined;
+    alg?: string | undefined;
+    key_ops?: string[] | undefined;
+    ext?: boolean | undefined;
+    use?: string | undefined;
+    x5c?: string[] | undefined;
+    x5t?: string | undefined;
+    'x5t#S256'?: string | undefined;
+    x5u?: string | undefined;
+    kid?: string | undefined;
+}>;
+export interface JWK extends JWKParameters {
+    /**
+     * - EC JWK "crv" (Curve) Parameter
+     * - OKP JWK "crv" (The Subtype of Key Pair) Parameter
+     */
+    crv?: string;
+    /**
+     * - Private RSA JWK "d" (Private Exponent) Parameter
+     * - Private EC JWK "d" (ECC Private Key) Parameter
+     * - Private OKP JWK "d" (The Private Key) Parameter
+     */
+    d?: string;
+    /** Private RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+    dp?: string;
+    /** Private RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+    dq?: string;
+    /** RSA JWK "e" (Exponent) Parameter */
+    e?: string;
+    /** Oct JWK "k" (Key Value) Parameter */
+    k?: string;
+    /** RSA JWK "n" (Modulus) Parameter */
+    n?: string;
+    /** Private RSA JWK "p" (First Prime Factor) Parameter */
+    p?: string;
+    /** Private RSA JWK "q" (Second Prime Factor) Parameter */
+    q?: string;
+    /** Private RSA JWK "qi" (First CRT Coefficient) Parameter */
+    qi?: string;
+    /**
+     * - EC JWK "x" (X Coordinate) Parameter
+     * - OKP JWK "x" (The public key) Parameter
+     */
+    x?: string;
+    /** EC JWK "y" (Y Coordinate) Parameter */
+    y?: string;
+    /** AKP JWK "pub" (Public Key) Parameter */
+    pub?: string;
+    /** AKP JWK "priv" (Private key) Parameter */
+    priv?: string;
+}
+export declare const jwkSchema: z.ZodType<JWK>;
+export interface JSONWebKeySet {
+    keys: JWK[];
+}
+export declare const jsonWebKeySetSchema: z.ZodObject<{
+    keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
+}, "strip", z.ZodTypeAny, {
+    keys: JWK[];
+}, {
+    keys: JWK[];
+}>;

package/src/types/auth/jwt.types.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jsonWebKeySetSchema = exports.jwkSchema = exports.jwkParametersSchema = void 0;
+const zod_1 = require("zod");
+exports.jwkParametersSchema = zod_1.z.object({
+    kty: zod_1.z.string().optional(),
+    alg: zod_1.z.string().optional(),
+    key_ops: zod_1.z.array(zod_1.z.string()).optional(),
+    ext: zod_1.z.boolean().optional(),
+    use: zod_1.z.string().optional(),
+    x5c: zod_1.z.array(zod_1.z.string()).optional(),
+    x5t: zod_1.z.string().optional(),
+    'x5t#S256': zod_1.z.string().optional(),
+    x5u: zod_1.z.string().optional(),
+    kid: zod_1.z.string().optional(),
+});
+exports.jwkSchema = exports.jwkParametersSchema.extend({
+    crv: zod_1.z.string().optional(),
+    d: zod_1.z.string().optional(),
+    dp: zod_1.z.string().optional(),
+    dq: zod_1.z.string().optional(),
+    e: zod_1.z.string().optional(),
+    k: zod_1.z.string().optional(),
+    n: zod_1.z.string().optional(),
+    p: zod_1.z.string().optional(),
+    q: zod_1.z.string().optional(),
+    qi: zod_1.z.string().optional(),
+    x: zod_1.z.string().optional(),
+    y: zod_1.z.string().optional(),
+    pub: zod_1.z.string().optional(),
+    priv: zod_1.z.string().optional(),
+});
+exports.jsonWebKeySetSchema = zod_1.z.object({
+    keys: zod_1.z.array(exports.jwkSchema),
+});
+//# sourceMappingURL=jwt.types.js.map

package/src/types/auth/jwt.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.types.js","sourceRoot":"","sources":["../../../../src/types/auth/jwt.types.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AA+BX,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,GAAG,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACU,CAAC,CAAC;AA6C3B,QAAA,SAAS,GAAmB,2BAAmB,CAAC,MAAM,CAAC;IAClE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACc,CAAC,CAAC;AAOhC,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,iBAAS,CAAC;CACY,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { RawZodShape } from '../common.types';\n\n\nexport interface JWKParameters {\n  /** JWK \"kty\" (Key Type) Parameter */\n  kty?: string;\n  /**\n   * JWK \"alg\" (Algorithm) Parameter\n   *\n   * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}\n   */\n  alg?: string;\n  /** JWK \"key_ops\" (Key Operations) Parameter */\n  key_ops?: string[];\n  /** JWK \"ext\" (Extractable) Parameter */\n  ext?: boolean;\n  /** JWK \"use\" (Public Key Use) Parameter */\n  use?: string;\n  /** JWK \"x5c\" (X.509 Certificate Chain) Parameter */\n  x5c?: string[];\n  /** JWK \"x5t\" (X.509 Certificate SHA-1 Thumbprint) Parameter */\n  x5t?: string;\n  /** JWK \"x5t#S256\" (X.509 Certificate SHA-256 Thumbprint) Parameter */\n  'x5t#S256'?: string;\n  /** JWK \"x5u\" (X.509 URL) Parameter */\n  x5u?: string;\n  /** JWK \"kid\" (Key ID) Parameter */\n  kid?: string;\n}\n\nexport const jwkParametersSchema = z.object({\n  kty: z.string().optional(),\n  alg: z.string().optional(),\n  key_ops: z.array(z.string()).optional(),\n  ext: z.boolean().optional(),\n  use: z.string().optional(),\n  x5c: z.array(z.string()).optional(),\n  x5t: z.string().optional(),\n  'x5t#S256': z.string().optional(),\n  x5u: z.string().optional(),\n  kid: z.string().optional(),\n} satisfies RawZodShape<JWKParameters>);\n\n\nexport interface JWK extends JWKParameters {\n  /**\n   * - EC JWK \"crv\" (Curve) Parameter\n   * - OKP JWK \"crv\" (The Subtype of Key Pair) Parameter\n   */\n  crv?: string;\n  /**\n   * - Private RSA JWK \"d\" (Private Exponent) Parameter\n   * - Private EC JWK \"d\" (ECC Private Key) Parameter\n   * - Private OKP JWK \"d\" (The Private Key) Parameter\n   */\n  d?: string;\n  /** Private RSA JWK \"dp\" (First Factor CRT Exponent) Parameter */\n  dp?: string;\n  /** Private RSA JWK \"dq\" (Second Factor CRT Exponent) Parameter */\n  dq?: string;\n  /** RSA JWK \"e\" (Exponent) Parameter */\n  e?: string;\n  /** Oct JWK \"k\" (Key Value) Parameter */\n  k?: string;\n  /** RSA JWK \"n\" (Modulus) Parameter */\n  n?: string;\n  /** Private RSA JWK \"p\" (First Prime Factor) Parameter */\n  p?: string;\n  /** Private RSA JWK \"q\" (Second Prime Factor) Parameter */\n  q?: string;\n  /** Private RSA JWK \"qi\" (First CRT Coefficient) Parameter */\n  qi?: string;\n  /**\n   * - EC JWK \"x\" (X Coordinate) Parameter\n   * - OKP JWK \"x\" (The public key) Parameter\n   */\n  x?: string;\n  /** EC JWK \"y\" (Y Coordinate) Parameter */\n  y?: string;\n  /** AKP JWK \"pub\" (Public Key) Parameter */\n  pub?: string;\n  /** AKP JWK \"priv\" (Private key) Parameter */\n  priv?: string;\n}\n\n\nexport const jwkSchema: z.ZodType<JWK> = jwkParametersSchema.extend({\n  crv: z.string().optional(),\n  d: z.string().optional(),\n  dp: z.string().optional(),\n  dq: z.string().optional(),\n  e: z.string().optional(),\n  k: z.string().optional(),\n  n: z.string().optional(),\n  p: z.string().optional(),\n  q: z.string().optional(),\n  qi: z.string().optional(),\n  x: z.string().optional(),\n  y: z.string().optional(),\n  pub: z.string().optional(),\n  priv: z.string().optional(),\n} satisfies RawZodShape<JWK, JWKParameters>);\n\n\nexport interface JSONWebKeySet {\n  keys: JWK[];\n}\n\nexport const jsonWebKeySetSchema = z.object({\n  keys: z.array(jwkSchema),\n} satisfies RawZodShape<JSONWebKeySet>);\n"]}

package/src/types/auth/session.types.d.ts

@@ -0,0 +1,263 @@
+import { z } from 'zod';
+import { HttpRequestIntent } from '@frontmcp/sdk';
+/**
+ * Decoded JWT payload (if any) or empty object
+ */
+export type UserClaim = {
+    iss: string;
+    sid?: string;
+    sub: string;
+    exp?: number;
+    iat?: number;
+    aud?: string | string[];
+    email?: string;
+    username?: string;
+    preferred_username?: string;
+    name?: string;
+    picture?: string;
+};
+export declare const userClaimSchema: z.ZodObject<{
+    iss: z.ZodString;
+    sid: z.ZodOptional<z.ZodString>;
+    sub: z.ZodString;
+    exp: z.ZodOptional<z.ZodNumber>;
+    iat: z.ZodOptional<z.ZodNumber>;
+    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+    email: z.ZodOptional<z.ZodString>;
+    username: z.ZodOptional<z.ZodString>;
+    preferred_username: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    picture: z.ZodOptional<z.ZodString>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    iss: z.ZodString;
+    sid: z.ZodOptional<z.ZodString>;
+    sub: z.ZodString;
+    exp: z.ZodOptional<z.ZodNumber>;
+    iat: z.ZodOptional<z.ZodNumber>;
+    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+    email: z.ZodOptional<z.ZodString>;
+    username: z.ZodOptional<z.ZodString>;
+    preferred_username: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    picture: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    iss: z.ZodString;
+    sid: z.ZodOptional<z.ZodString>;
+    sub: z.ZodString;
+    exp: z.ZodOptional<z.ZodNumber>;
+    iat: z.ZodOptional<z.ZodNumber>;
+    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+    email: z.ZodOptional<z.ZodString>;
+    username: z.ZodOptional<z.ZodString>;
+    preferred_username: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    picture: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
+export type SessionIdPayload = {
+    nodeId: string;
+    authSig: string;
+    uuid: string;
+    iat: number;
+    protocol: HttpRequestIntent;
+};
+export declare const sessionIdPayloadSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    authSig: z.ZodString;
+    uuid: z.ZodString;
+    iat: z.ZodNumber;
+    protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
+}, "strip", z.ZodTypeAny, {
+    iat: number;
+    nodeId: string;
+    authSig: string;
+    uuid: string;
+    protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+}, {
+    iat: number;
+    nodeId: string;
+    authSig: string;
+    uuid: string;
+    protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+}>;
+export interface Authorization {
+    token: string;
+    user: UserClaim;
+    session?: {
+        id: string;
+        payload: SessionIdPayload;
+    };
+}
+export declare const sessionIdSchema: z.ZodObject<{
+    id: z.ZodString;
+    payload: z.ZodObject<{
+        nodeId: z.ZodString;
+        authSig: z.ZodString;
+        uuid: z.ZodString;
+        iat: z.ZodNumber;
+        protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
+    }, "strip", z.ZodTypeAny, {
+        iat: number;
+        nodeId: string;
+        authSig: string;
+        uuid: string;
+        protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+    }, {
+        iat: number;
+        nodeId: string;
+        authSig: string;
+        uuid: string;
+        protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+    }>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    payload: {
+        iat: number;
+        nodeId: string;
+        authSig: string;
+        uuid: string;
+        protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+    };
+}, {
+    id: string;
+    payload: {
+        iat: number;
+        nodeId: string;
+        authSig: string;
+        uuid: string;
+        protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+    };
+}>;
+export declare const authorizationSchema: z.ZodObject<{
+    token: z.ZodString;
+    session: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        payload: z.ZodObject<{
+            nodeId: z.ZodString;
+            authSig: z.ZodString;
+            uuid: z.ZodString;
+            iat: z.ZodNumber;
+            protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
+        }, "strip", z.ZodTypeAny, {
+            iat: number;
+            nodeId: string;
+            authSig: string;
+            uuid: string;
+            protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        }, {
+            iat: number;
+            nodeId: string;
+            authSig: string;
+            uuid: string;
+            protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        payload: {
+            iat: number;
+            nodeId: string;
+            authSig: string;
+            uuid: string;
+            protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    }, {
+        id: string;
+        payload: {
+            iat: number;
+            nodeId: string;
+            authSig: string;
+            uuid: string;
+            protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    }>>;
+    user: z.ZodObject<{
+        iss: z.ZodString;
+        sid: z.ZodOptional<z.ZodString>;
+        sub: z.ZodString;
+        exp: z.ZodOptional<z.ZodNumber>;
+        iat: z.ZodOptional<z.ZodNumber>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        email: z.ZodOptional<z.ZodString>;
+        username: z.ZodOptional<z.ZodString>;
+        preferred_username: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        picture: z.ZodOptional<z.ZodString>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        iss: z.ZodString;
+        sid: z.ZodOptional<z.ZodString>;
+        sub: z.ZodString;
+        exp: z.ZodOptional<z.ZodNumber>;
+        iat: z.ZodOptional<z.ZodNumber>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        email: z.ZodOptional<z.ZodString>;
+        username: z.ZodOptional<z.ZodString>;
+        preferred_username: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        picture: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        iss: z.ZodString;
+        sid: z.ZodOptional<z.ZodString>;
+        sub: z.ZodString;
+        exp: z.ZodOptional<z.ZodNumber>;
+        iat: z.ZodOptional<z.ZodNumber>;
+        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        email: z.ZodOptional<z.ZodString>;
+        username: z.ZodOptional<z.ZodString>;
+        preferred_username: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        picture: z.ZodOptional<z.ZodString>;
+    }, z.ZodTypeAny, "passthrough">>;
+}, "strip", z.ZodTypeAny, {
+    token: string;
+    user: {
+        sub: string;
+        iss: string;
+        name?: string | undefined;
+        sid?: string | undefined;
+        exp?: number | undefined;
+        iat?: number | undefined;
+        aud?: string | string[] | undefined;
+        email?: string | undefined;
+        username?: string | undefined;
+        preferred_username?: string | undefined;
+        picture?: string | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    session?: {
+        id: string;
+        payload: {
+            iat: number;
+            nodeId: string;
+            authSig: string;
+            uuid: string;
+            protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    } | undefined;
+}, {
+    token: string;
+    user: {
+        sub: string;
+        iss: string;
+        name?: string | undefined;
+        sid?: string | undefined;
+        exp?: number | undefined;
+        iat?: number | undefined;
+        aud?: string | string[] | undefined;
+        email?: string | undefined;
+        username?: string | undefined;
+        preferred_username?: string | undefined;
+        picture?: string | undefined;
+    } & {
+        [k: string]: unknown;
+    };
+    session?: {
+        id: string;
+        payload: {
+            iat: number;
+            nodeId: string;
+            authSig: string;
+            uuid: string;
+            protocol: "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+        };
+    } | undefined;
+}>;