@frontmcp/sdk 0.1.0

package/src/types/options/auth.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.options.js","sourceRoot":"","sources":["../../../../src/types/options/auth.options.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,kCAA6E;AAsGhE,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,OAAC;SACR,KAAK,CAAC;QACL,OAAC,CAAC,MAAM,EAAE;QACV,OAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;KAAC,CAAC;SAC5E,QAAQ,EAAE;IACb,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/E,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,0BAAmB,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtG,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3C,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACU,CAAC,CAAC;AAwD/B,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtG,cAAc,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,0BAAmB,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,gBAAS,CAAC,EAAE,CAAC,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnB,CAAC,CAAC;AAG9B,QAAA,iBAAiB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC5D,+BAAuB;IACvB,8BAAsB;CACvB,CAAC,CAAC;AAsBH,MAAM,sBAAsB,GAAG;IAC7B,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACF,CAAC;AAE7B,QAAA,oBAAoB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,+BAAuB,CAAC,MAAM,CAAC,sBAAsB,CAAC;IACtD,8BAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC;CACtD,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { JSONWebKeySet, jsonWebKeySetSchema, JWK, jwkSchema } from '../auth';\nimport { RawZodShape } from '../common.types';\n\nexport type RemoteAuthOptions = {\n  type: 'remote';\n\n  /**\n   * unique id for the provider\n   */\n  id?: string;\n  /**\n   * human-readable name for the provider\n   */\n  name: string;\n  /**\n   * base url of the provider\n   * if the provider does not support dcr it will be used with local auth provider proxy\n   * to register client dynamically you have to provide client id for the registration flow\n   * @example https://my-company.frontegg.com\n   */\n  baseUrl: string;\n\n  /**\n   * enable dynamic client registration (DCR) flow, if your provider does not support DCR\n   * you can set this to false and provide clientId for authorization flow, we will use local auth provider proxy\n   * to register a dynamic client with the provided clientId or by called clientId function with client info\n   * by default, the provider will use the registration endpoint to register the client dynamically\n   */\n  dcrEnabled?: boolean;\n\n  /**\n   * Only used if your auth provider does not support DCR.\n   * for Dcr auth provider the client id acquired by the registration flow\n   */\n  clientId?: string | ((clientInfo: { clientId: string }) => string);\n\n  /**\n   * Set default gateway oauth server mode, this will be overridden by discovery flow.\n   * if set to transparent and the discovery flow detect orchestrated mode it will switch to orchestrated mode\n   * @default 'transparent'\n   */\n  mode?: 'orchestrated' | 'transparent';\n\n  /**\n   * allow anonymous access to the provider\n   * @default false - allowing anonymous access will make the provider to issue an orchestrated token\n   */\n  allowAnonymous?: boolean;\n\n  /**\n   * allow consent mode to select tools/resource/prompts after authorization\n   * for scoped based access token\n   * @default false - allowing anonymous access will make the provider to issue an orchestrated token\n   */\n  consent?: boolean;\n\n\n  /**\n   * scopes for the token endpoint\n   * @default undefined - all scopes supported by th provider\n   */\n  scopes?: string[];\n  /**\n   * authorization provider supported grant types, currently only authorization_code and refresh_token are supported\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  grantTypes?: ('authorization_code' | 'refresh_token')[];\n\n  /**\n   * authorization endpoint for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  authEndpoint?: string;\n  /**\n   * token endpoint for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  tokenEndpoint?: string;\n  /**\n   * registration endpoint for the provider (DCR)\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  registrationEndpoint?: string;\n  /**\n   * user info endpoint for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  userInfoEndpoint?: string;\n\n  /**\n   * Inline JWKS for the provider to verify tokens without automatic fetching\n   * @default undefined - default is what presented in the /.well-known/jwks.json\n   */\n  jwks?: JSONWebKeySet;\n\n  /**\n   * jwks uri for the provider\n   * @default undefined - default is what presented in the /.well-known/oauth-authorization-server\n   */\n  jwksUri?: string;\n};\n\nexport const remoteAuthOptionsSchema = z.object({\n  type: z.literal('remote'),\n  id: z.string().optional(),\n  name: z.string(),\n  baseUrl: z.string(),\n  dcrEnabled: z.boolean().optional(),\n  clientId: z\n    .union([\n      z.string(),\n      z.function().args(z.object({ clientId: z.string() })).returns(z.string())])\n    .optional(),\n  mode: z.union([z.literal('orchestrated'), z.literal('transparent')]).optional(),\n  allowAnonymous: z.boolean().optional(),\n  consent: z.boolean().optional(),\n  jwks: jsonWebKeySetSchema.optional(),\n  scopes: z.array(z.string()).optional(),\n  grantTypes: z.array(z.union([z.literal('authorization_code'), z.literal('refresh_token')])).optional(),\n  authEndpoint: z.string().optional(),\n  tokenEndpoint: z.string().optional(),\n  registrationEndpoint: z.string().optional(),\n  userInfoEndpoint: z.string().optional(),\n  jwksUri: z.string().optional(),\n} satisfies RawZodShape<RemoteAuthOptions>);\n\nexport type LocalAuthOptions = {\n  type: 'local';\n\n  /**\n   * unique id for the provider\n   */\n  id: string;\n\n  /**\n   * human-readable name for the provider\n   */\n  name: string;\n\n  /**\n   * scopes for the token endpoint\n   * @default undefined - all scopes supported by th provider\n   */\n  scopes?: string[];\n  /**\n   * currently only authorization_code and refresh_token are supported\n   * @default ['authorization_code', 'refresh_token']\n   */\n  grantTypes?: ('authorization_code' | 'refresh_token')[];\n\n  /**\n   * allow anonymous access to the provider\n   * in this case the provider will act as an authorization server\n   * @default true\n   */\n  allowAnonymous?: boolean;\n\n  /**\n   * allow consent mode to select tools/resource/prompts after authorization\n   * for scoped based access token\n   * @default false - allowing anonymous access will make the provider to issue an orchestrated token\n   */\n  consent?: boolean;\n\n  /**\n   * Inline JWKS for the provider to verify tokens for local provider\n   * it will also used in /.well-known/jwks.json\n   * @default undefined - default is auto generated keys and saved in the temp folder\n   */\n  jwks?: JSONWebKeySet;\n\n  /**\n   * private key signing tokens for local provider\n   * @default undefined - default is auto generated keys and saved in the temp folder\n   */\n  signKey?: JWK | Uint8Array;\n\n};\n\n\nexport const localAuthOptionsSchema = z.object({\n  type: z.literal('local'),\n  id: z.string(),\n  name: z.string(),\n  scopes: z.array(z.string()).optional(),\n  grantTypes: z.array(z.union([z.literal('authorization_code'), z.literal('refresh_token')])).optional(),\n  allowAnonymous: z.boolean().optional(),\n  consent: z.boolean().optional(),\n  jwks: jsonWebKeySetSchema.optional(),\n  signKey: jwkSchema.or(z.instanceof(Uint8Array)).optional(),\n} satisfies RawZodShape<LocalAuthOptions>);\n\n\nexport const authOptionsSchema = z.discriminatedUnion('type', [\n  remoteAuthOptionsSchema,\n  localAuthOptionsSchema,\n]);\n\nexport type AuthOptions = RemoteAuthOptions | LocalAuthOptions;\n\n\ntype StandaloneOption = {\n  /**\n   * if the provider is standalone or not, if standalone it will register an oauth service provider\n   * on app's entry path, if not standalone it will be registered as a child provider\n   * under the root provider\n   * @default false\n   */\n  standalone?: boolean;\n\n  /**\n   * if the provider should be excluded from the parent provider's discovery\n   * this used for standalone providers\n   * @default false\n   */\n  excludeFromParent?: boolean;\n};\n\nconst standaloneOptionSchema = {\n  standalone: z.boolean().optional(),\n  excludeFromParent: z.boolean().optional(),\n} satisfies RawZodShape<StandaloneOption>;\n\nexport const appAuthOptionsSchema = z.discriminatedUnion('type', [\n  remoteAuthOptionsSchema.extend(standaloneOptionSchema),\n  localAuthOptionsSchema.extend(standaloneOptionSchema),\n]);\n\n\nexport type AppAuthOptions = (RemoteAuthOptions | LocalAuthOptions) & StandaloneOption;"]}

package/src/types/options/http.options.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import { FrontMcpServer } from '../../interfaces';
+export type HttpOptions = {
+    port?: number;
+    /** MCP JSON-RPC entry ('' or '/mcp'); MUST match PRM resourcePath returned in well-known */
+    entryPath?: string;
+    hostFactory?: FrontMcpServer | ((config: HttpOptions) => FrontMcpServer);
+};
+export declare const httpOptionsSchema: z.ZodObject<{
+    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    entryPath: z.ZodDefault<z.ZodString>;
+    hostFactory: z.ZodOptional<z.ZodAny>;
+}, "strip", z.ZodTypeAny, {
+    port: number;
+    entryPath: string;
+    hostFactory?: any;
+}, {
+    port?: number | undefined;
+    entryPath?: string | undefined;
+    hostFactory?: any;
+}>;
+export type HttpConfig = z.infer<typeof httpOptionsSchema>;

package/src/types/options/http.options.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.httpOptionsSchema = void 0;
+const zod_1 = require("zod");
+exports.httpOptionsSchema = zod_1.z.object({
+    port: zod_1.z.number().optional().default(3001),
+    entryPath: zod_1.z.string().default(''),
+    hostFactory: zod_1.z.any().optional(),
+});
+//# sourceMappingURL=http.options.js.map

package/src/types/options/http.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.options.js","sourceRoot":"","sources":["../../../../src/types/options/http.options.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAYX,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,WAAW,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { FrontMcpServer, ServerResponse } from '../../interfaces';\n\nexport type HttpOptions = {\n  port?: number;\n  /** MCP JSON-RPC entry ('' or '/mcp'); MUST match PRM resourcePath returned in well-known */\n  entryPath?: string;\n\n  hostFactory?: FrontMcpServer | ((config: HttpOptions) => FrontMcpServer);\n};\n\n\nexport const httpOptionsSchema = z.object({\n  port: z.number().optional().default(3001),\n  entryPath: z.string().default(''),\n  hostFactory: z.any().optional(),\n});\n\n\n\nexport type HttpConfig = z.infer<typeof httpOptionsSchema>;"]}

package/src/types/options/index.d.ts

@@ -0,0 +1,5 @@
+export * from './server-info.options';
+export * from './session.options';
+export * from './http.options';
+export * from './auth.options';
+export * from './logging.options';

package/src/types/options/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./server-info.options"), exports);
+tslib_1.__exportStar(require("./session.options"), exports);
+tslib_1.__exportStar(require("./http.options"), exports);
+tslib_1.__exportStar(require("./auth.options"), exports);
+tslib_1.__exportStar(require("./logging.options"), exports);
+//# sourceMappingURL=index.js.map

package/src/types/options/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/types/options/index.ts"],"names":[],"mappings":";;;AAAA,gEAAsC;AACtC,4DAAkC;AAClC,yDAA+B;AAC/B,yDAA+B;AAC/B,4DAAkC","sourcesContent":["export * from './server-info.options';\nexport * from './session.options';\nexport * from './http.options';\nexport * from './auth.options';\nexport * from './logging.options';\n\n\n\n\n\n"]}

package/src/types/options/logging.options.d.ts

@@ -0,0 +1,39 @@
+import { z } from 'zod';
+import { LogTransportType } from '@frontmcp/sdk';
+export declare enum LogLevel {
+    Debug = 0,
+    VERBOSE = 1,
+    Info = 2,
+    Warn = 3,
+    Error = 4,
+    Off = 100
+}
+export declare const LogLevelName: Record<LogLevel, string>;
+export declare const LogLevelValue: Record<string, LogLevel>;
+export type LoggingOptions = {
+    level?: LogLevel;
+    enableConsole?: boolean;
+    prefix?: string;
+    /**
+     * Additional custom LogTransport types to register.
+     * @default []
+     */
+    transports?: LogTransportType[];
+};
+export declare const loggingOptionsSchema: z.ZodObject<{
+    level: z.ZodDefault<z.ZodOptional<z.ZodNativeEnum<typeof LogLevel>>>;
+    prefix: z.ZodOptional<z.ZodString>;
+    enableConsole: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    transports: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodType<import("@frontmcp/sdk").Type<unknown>, z.ZodTypeDef, import("@frontmcp/sdk").Type<unknown>>, "many">>>;
+}, "strip", z.ZodTypeAny, {
+    level: LogLevel;
+    enableConsole: boolean;
+    transports: import("@frontmcp/sdk").Type<unknown>[];
+    prefix?: string | undefined;
+}, {
+    level?: LogLevel | undefined;
+    enableConsole?: boolean | undefined;
+    prefix?: string | undefined;
+    transports?: import("@frontmcp/sdk").Type<unknown>[] | undefined;
+}>;
+export type LoggingConfigType = Omit<z.infer<typeof loggingOptionsSchema>, 'transports'>;

package/src/types/options/logging.options.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loggingOptionsSchema = exports.LogLevelValue = exports.LogLevelName = exports.LogLevel = void 0;
+const zod_1 = require("zod");
+const schemas_1 = require("../../schemas");
+var LogLevel;
+(function (LogLevel) {
+    LogLevel[LogLevel["Debug"] = 0] = "Debug";
+    LogLevel[LogLevel["VERBOSE"] = 1] = "VERBOSE";
+    LogLevel[LogLevel["Info"] = 2] = "Info";
+    LogLevel[LogLevel["Warn"] = 3] = "Warn";
+    LogLevel[LogLevel["Error"] = 4] = "Error";
+    LogLevel[LogLevel["Off"] = 100] = "Off";
+})(LogLevel || (exports.LogLevel = LogLevel = {}));
+exports.LogLevelName = {
+    [LogLevel.Debug]: 'debug',
+    [LogLevel.VERBOSE]: 'verbose',
+    [LogLevel.Info]: 'info',
+    [LogLevel.Warn]: 'warn',
+    [LogLevel.Error]: 'error',
+    [LogLevel.Off]: 'off',
+};
+exports.LogLevelValue = {
+    'debug': LogLevel.Debug,
+    'verbose': LogLevel.VERBOSE,
+    'info': LogLevel.Info,
+    'warn': LogLevel.Warn,
+    'error': LogLevel.Error,
+    'off': LogLevel.Off,
+};
+exports.loggingOptionsSchema = zod_1.z.object({
+    level: zod_1.z.nativeEnum(LogLevel).optional().default(LogLevel.Info),
+    prefix: zod_1.z.string().optional(),
+    enableConsole: zod_1.z.boolean().optional().default(true),
+    transports: zod_1.z.array(schemas_1.annotatedFrontMcpLoggerSchema).optional().default([]),
+});
+//# sourceMappingURL=logging.options.js.map

package/src/types/options/logging.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.options.js","sourceRoot":"","sources":["../../../../src/types/options/logging.options.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,2CAA8D;AAE9D,IAAY,QAOX;AAPD,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,6CAAW,CAAA;IACX,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,uCAAS,CAAA;AACX,CAAC,EAPW,QAAQ,wBAAR,QAAQ,QAOnB;AAEY,QAAA,YAAY,GAA6B;IACpD,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IACzB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;IAC7B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACvB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACvB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;IACzB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK;CACtB,CAAC;AAEW,QAAA,aAAa,GAA6B;IACrD,OAAO,EAAE,QAAQ,CAAC,KAAK;IACvB,SAAS,EAAE,QAAQ,CAAC,OAAO;IAC3B,MAAM,EAAE,QAAQ,CAAC,IAAI;IACrB,MAAM,EAAE,QAAQ,CAAC,IAAI;IACrB,OAAO,EAAE,QAAQ,CAAC,KAAK;IACvB,KAAK,EAAE,QAAQ,CAAC,GAAG;CACpB,CAAC;AAcW,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,OAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC/D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,aAAa,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,uCAA6B,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { LogTransportType, RawZodShape } from '@frontmcp/sdk';\nimport { annotatedFrontMcpLoggerSchema } from '../../schemas';\n\nexport enum LogLevel {\n  Debug = 0,\n  VERBOSE = 1,\n  Info = 2,\n  Warn = 3,\n  Error = 4,\n  Off = 100, // never log\n}\n\nexport const LogLevelName: Record<LogLevel, string> = {\n  [LogLevel.Debug]: 'debug',\n  [LogLevel.VERBOSE]: 'verbose',\n  [LogLevel.Info]: 'info',\n  [LogLevel.Warn]: 'warn',\n  [LogLevel.Error]: 'error',\n  [LogLevel.Off]: 'off',\n};\n\nexport const LogLevelValue: Record<string, LogLevel> = {\n  'debug': LogLevel.Debug,\n  'verbose': LogLevel.VERBOSE,\n  'info': LogLevel.Info,\n  'warn': LogLevel.Warn,\n  'error': LogLevel.Error,\n  'off': LogLevel.Off,\n};\n\n\nexport type LoggingOptions = {\n  level?: LogLevel; // default to 'info'\n  enableConsole?: boolean;\n  prefix?: string;\n  /**\n   * Additional custom LogTransport types to register.\n   * @default []\n   */\n  transports?: LogTransportType[]\n};\n\nexport const loggingOptionsSchema = z.object({\n  level: z.nativeEnum(LogLevel).optional().default(LogLevel.Info),\n  prefix: z.string().optional(),\n  enableConsole: z.boolean().optional().default(true),\n  transports: z.array(annotatedFrontMcpLoggerSchema).optional().default([]),\n} satisfies RawZodShape<LoggingOptions>);\n\n\nexport type LoggingConfigType = Omit<z.infer<typeof loggingOptionsSchema>, 'transports'>;"]}

package/src/types/options/server-info.options.d.ts

@@ -0,0 +1,48 @@
+import { Icon } from '@modelcontextprotocol/sdk/types.js';
+import { z } from 'zod';
+export type ServerInfoOptions = {
+    name: string;
+    title?: string;
+    version: string;
+    websiteUrl?: string;
+    icons?: Icon[];
+};
+export declare const serverInfoOptionsSchema: z.ZodObject<{
+    name: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    version: z.ZodString;
+    websiteUrl: z.ZodOptional<z.ZodString>;
+    icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    version: string;
+    title?: string | undefined;
+    websiteUrl?: string | undefined;
+    icons?: z.objectOutputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}, {
+    name: string;
+    version: string;
+    title?: string | undefined;
+    websiteUrl?: string | undefined;
+    icons?: z.objectInputType<{
+        src: z.ZodString;
+        mimeType: z.ZodOptional<z.ZodString>;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">[] | undefined;
+}>;

package/src/types/options/server-info.options.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serverInfoOptionsSchema = void 0;
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const zod_1 = require("zod");
+exports.serverInfoOptionsSchema = zod_1.z.object({
+    name: zod_1.z.string(),
+    title: zod_1.z.string().optional(),
+    version: zod_1.z.string(),
+    websiteUrl: zod_1.z.string().optional(),
+    icons: zod_1.z.array(types_js_1.IconSchema).optional(),
+});
+//# sourceMappingURL=server-info.options.js.map

package/src/types/options/server-info.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-info.options.js","sourceRoot":"","sources":["../../../../src/types/options/server-info.options.ts"],"names":[],"mappings":";;;AAAA,iEAAsE;AACtE,6BAAwB;AAgBX,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAU,CAAC,CAAC,QAAQ,EAAE;CACG,CAAC,CAAC","sourcesContent":["import { Icon, IconSchema } from '@modelcontextprotocol/sdk/types.js';\nimport { z } from 'zod';\nimport { RawZodShape } from '../common.types';\n\nexport type ServerInfoOptions = {\n  /* The name of the server */\n  name: string;\n  /* The name of the server */\n  title?: string;\n  /* The version of the server */\n  version: string;\n  /* The description of the server*/\n  websiteUrl?: string;\n  icons?: Icon[];\n}\n\n\nexport const serverInfoOptionsSchema = z.object({\n  name: z.string(),\n  title: z.string().optional(),\n  version: z.string(),\n  websiteUrl: z.string().optional(),\n  icons: z.array(IconSchema).optional(),\n} satisfies RawZodShape<ServerInfoOptions>);"]}

package/src/types/options/session.options.d.ts

@@ -0,0 +1,67 @@
+import { z } from 'zod';
+export type SessionMode = 'stateful' | 'stateless';
+export type TransportIdMode = 'uuid' | 'jwt';
+export type SessionOptions = {
+    /**
+     * Defines how the session lifecycle and nested tokens are managed.
+     *
+     * Modes:
+     * - `'stateful'`: Session and nested tokens are stored in a server-side store (e.g., Redis).
+     * - `'stateless'`: All session data (including nested tokens) is embedded within a signed/encrypted JWT.
+     *
+     * **Behavior:**
+     * - When using `'stateful'`:
+     *   - Nested OAuth tokens are **never exposed** in the JWT.
+     *   - Tokens are encrypted and persisted in Redis under a session key.
+     *   - The client receives only a lightweight reference (session key) instead of full credentials.
+     *   - Results in smaller JWT payloads and reduces token leakage risk.
+     *   - Allows seamless refresh of nested provider tokens without requiring user re-authorization.
+     *   - Recommended for multi-application environments or setups using short-lived OAuth tokens.
+     *
+     * - When using `'stateless'`:
+     *   - Stores all nested tokens directly within the JWT, enabling fully client-managed sessions.
+     *   - Does **not support token refresh** — once a nested provider token expires, re-authorization is required.
+     *   - Simplifies implementation but may degrade UX when tokens are short-lived.
+     *   - Best suited for lightweight or single-application environments where token rotation is less critical.
+     *
+     * @default 'stateful'
+     */
+    sessionMode?: SessionMode | ((issuer: string) => Promise<SessionMode> | SessionMode);
+    /**
+     * Defines how the Transport ID is generated, verified, and used across sessions.
+     *
+     * Modes:
+     * - `'uuid'`: Generates a random UUID per session.
+     * - `'jwt'`: Uses a signed JWT for stateless sessions, signed with a generated session key.
+     *
+     * **Behavior: **
+     * - When using `'jwt'`:
+     *   - Requires an active Redis connection to support distributed, stateless transport sessions.
+     *   - Each token is verified using a generated public key associated with the existing session.
+     *   - Enables access to a streamable HTTP transport session ID.
+     *   - For distributed systems, verification is optimized by checking if the session is already
+     *     verified by an existing live transport ID. This allows fast validation when multiple
+     *     transports are connected to a shared queue (high-availability setup).
+     *   - If the JWT’s transport ID is not found on the current worker node, the system attempts
+     *     to connect to the corresponding remote transport in the distributed infrastructure.
+     *
+     * - When using `'uuid'`:
+     *   - Provides a strict, node-bound session transport (single-node mode).
+     *   - Each request verifies the `Authorization` header and searches for a matching transport ID
+     *     derived from the hashed authorization header and the generated transport UUID.
+     *   - If no matching transport ID is found, an error (`TransportNotInitialized`) is thrown.
+     *
+     * @default 'uuid'
+     */
+    transportIdMode?: TransportIdMode | ((issuer: string) => Promise<TransportIdMode> | TransportIdMode);
+};
+export declare const sessionOptionsSchema: z.ZodObject<{
+    sessionMode: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"stateful">, z.ZodLiteral<"stateless">, z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>]>>>;
+    transportIdMode: z.ZodDefault<z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"uuid">, z.ZodLiteral<"jwt">, z.ZodFunction<z.ZodTuple<[], z.ZodUnknown>, z.ZodUnknown>]>>>;
+}, "strip", z.ZodTypeAny, {
+    sessionMode: "stateful" | "stateless" | ((...args: unknown[]) => unknown);
+    transportIdMode: "uuid" | "jwt" | ((...args: unknown[]) => unknown);
+}, {
+    sessionMode?: "stateful" | "stateless" | ((...args: unknown[]) => unknown) | undefined;
+    transportIdMode?: "uuid" | "jwt" | ((...args: unknown[]) => unknown) | undefined;
+}>;

package/src/types/options/session.options.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionOptionsSchema = void 0;
+const zod_1 = require("zod");
+exports.sessionOptionsSchema = zod_1.z.object({
+    sessionMode: zod_1.z.union([zod_1.z.literal('stateful'), zod_1.z.literal('stateless'), zod_1.z.function()]).optional().default('stateless'),
+    transportIdMode: zod_1.z.union([zod_1.z.literal('uuid'), zod_1.z.literal('jwt'), zod_1.z.function()]).optional().default('uuid'),
+});
+//# sourceMappingURL=session.options.js.map

package/src/types/options/session.options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.options.js","sourceRoot":"","sources":["../../../../src/types/options/session.options.ts"],"names":[],"mappings":";;;AACA,6BAAwB;AA4DX,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,OAAC,CAAC,KAAK,CAClB,CAAC,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAC,CAAC,QAAQ,EAAE,CAAC,CAC9D,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACjC,eAAe,EAAE,OAAC,CAAC,KAAK,CACtB,CAAC,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAC,CAAC,QAAQ,EAAE,CAAC,CACpD,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACS,CAAC,CAAC","sourcesContent":["import { RawZodShape } from '../common.types';\nimport { z } from 'zod';\n\nexport type SessionMode = 'stateful' | 'stateless';\nexport type TransportIdMode = 'uuid' | 'jwt';\n\nexport type SessionOptions = {\n  /**\n   * Defines how the session lifecycle and nested tokens are managed.\n   *\n   * Modes:\n   * - `'stateful'`: Session and nested tokens are stored in a server-side store (e.g., Redis).\n   * - `'stateless'`: All session data (including nested tokens) is embedded within a signed/encrypted JWT.\n   *\n   * **Behavior:**\n   * - When using `'stateful'`:\n   *   - Nested OAuth tokens are **never exposed** in the JWT.\n   *   - Tokens are encrypted and persisted in Redis under a session key.\n   *   - The client receives only a lightweight reference (session key) instead of full credentials.\n   *   - Results in smaller JWT payloads and reduces token leakage risk.\n   *   - Allows seamless refresh of nested provider tokens without requiring user re-authorization.\n   *   - Recommended for multi-application environments or setups using short-lived OAuth tokens.\n   *\n   * - When using `'stateless'`:\n   *   - Stores all nested tokens directly within the JWT, enabling fully client-managed sessions.\n   *   - Does **not support token refresh** — once a nested provider token expires, re-authorization is required.\n   *   - Simplifies implementation but may degrade UX when tokens are short-lived.\n   *   - Best suited for lightweight or single-application environments where token rotation is less critical.\n   *\n   * @default 'stateful'\n   */\n  sessionMode?: SessionMode | ((issuer: string) => Promise<SessionMode> | SessionMode);\n  /**\n   * Defines how the Transport ID is generated, verified, and used across sessions.\n   *\n   * Modes:\n   * - `'uuid'`: Generates a random UUID per session.\n   * - `'jwt'`: Uses a signed JWT for stateless sessions, signed with a generated session key.\n   *\n   * **Behavior: **\n   * - When using `'jwt'`:\n   *   - Requires an active Redis connection to support distributed, stateless transport sessions.\n   *   - Each token is verified using a generated public key associated with the existing session.\n   *   - Enables access to a streamable HTTP transport session ID.\n   *   - For distributed systems, verification is optimized by checking if the session is already\n   *     verified by an existing live transport ID. This allows fast validation when multiple\n   *     transports are connected to a shared queue (high-availability setup).\n   *   - If the JWT’s transport ID is not found on the current worker node, the system attempts\n   *     to connect to the corresponding remote transport in the distributed infrastructure.\n   *\n   * - When using `'uuid'`:\n   *   - Provides a strict, node-bound session transport (single-node mode).\n   *   - Each request verifies the `Authorization` header and searches for a matching transport ID\n   *     derived from the hashed authorization header and the generated transport UUID.\n   *   - If no matching transport ID is found, an error (`TransportNotInitialized`) is thrown.\n   *\n   * @default 'uuid'\n   */\n  transportIdMode?: TransportIdMode | ((issuer: string) => Promise<TransportIdMode> | TransportIdMode);\n};\n\nexport const sessionOptionsSchema = z.object({\n  sessionMode: z.union(\n    [z.literal('stateful'), z.literal('stateless'), z.function()],\n  ).optional().default('stateless'),\n  transportIdMode: z.union(\n    [z.literal('uuid'), z.literal('jwt'), z.function()],\n  ).optional().default('uuid'),\n} satisfies RawZodShape<SessionOptions>);"]}

package/src/utils/decide-request-intent.utils.d.ts

@@ -0,0 +1,79 @@
+import { ServerRequest } from '@frontmcp/sdk';
+import { z } from 'zod';
+export declare const intentSchema: z.ZodUnion<[z.ZodLiteral<"legacy-sse">, z.ZodLiteral<"sse">, z.ZodLiteral<"streamable-http">, z.ZodLiteral<"stateful-http">, z.ZodLiteral<"stateless-http">, z.ZodLiteral<"unknown">]>;
+export declare const decisionSchema: z.ZodObject<{
+    intent: z.ZodUnion<[z.ZodLiteral<"legacy-sse">, z.ZodLiteral<"sse">, z.ZodLiteral<"streamable-http">, z.ZodLiteral<"stateful-http">, z.ZodLiteral<"stateless-http">, z.ZodLiteral<"unknown">]>;
+    reasons: z.ZodArray<z.ZodString, "many">;
+    recommendation: z.ZodOptional<z.ZodObject<{
+        httpStatus: z.ZodNumber;
+        message: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        message: string;
+        httpStatus: number;
+    }, {
+        message: string;
+        httpStatus: number;
+    }>>;
+    debug: z.ZodOptional<z.ZodObject<{
+        key: z.ZodNumber;
+        channel: z.ZodNumber;
+        flags: z.ZodNumber;
+    }, "strip", z.ZodTypeAny, {
+        key: number;
+        channel: number;
+        flags: number;
+    }, {
+        key: number;
+        channel: number;
+        flags: number;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    intent: "unknown" | "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+    reasons: string[];
+    debug?: {
+        key: number;
+        channel: number;
+        flags: number;
+    } | undefined;
+    recommendation?: {
+        message: string;
+        httpStatus: number;
+    } | undefined;
+}, {
+    intent: "unknown" | "legacy-sse" | "sse" | "streamable-http" | "stateful-http" | "stateless-http";
+    reasons: string[];
+    debug?: {
+        key: number;
+        channel: number;
+        flags: number;
+    } | undefined;
+    recommendation?: {
+        message: string;
+        httpStatus: number;
+    } | undefined;
+}>;
+export type HttpRequestIntent = 'legacy-sse' | 'sse' | 'streamable-http' | 'stateful-http' | 'stateless-http';
+export type Intent = HttpRequestIntent | 'unknown';
+export type Decision = {
+    intent: Intent;
+    reasons: string[];
+    recommendation?: {
+        httpStatus: number;
+        message: string;
+    };
+    debug?: {
+        key: number;
+        channel: number;
+        flags: number;
+    };
+};
+export interface Config {
+    enableLegacySSE: boolean;
+    enableSseListener: boolean;
+    enableStreamableHttp: boolean;
+    enableStatefulHttp: boolean;
+    enableStatelessHttp: boolean;
+    requireSessionForStreamable: boolean;
+    tolerateMissingAccept: boolean;
+}
+export declare function decideIntent(req: ServerRequest, cfg: Config): Decision;