@frontmcp/sdk 0.4.0 → 0.5.0

package/src/common/schemas/http-output.schema.js

@@ -25,7 +25,9 @@ const zNumUnion = (vals) => {
 exports.HttpStatus = zod_1.z.number().int().min(100).max(599);
 exports.HttpRedirectStatus = zNumUnion(exports.REDIRECTS);
 exports.HttpEmptyStatus = zNumUnion(exports.NO_BODY_STATUSES);
-exports.HttpHeaders = zod_1.z.record(zod_1.z.union([zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())])])).default({});
+exports.HttpHeaders = zod_1.z
+    .record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())])]))
+    .default({});
 exports.HttpCookieSchema = zod_1.z.object({
     name: zod_1.z.string().min(1),
     value: zod_1.z.string(),
@@ -260,6 +262,36 @@ exports.httpRespond = {
             id: requestId ?? (0, crypto_1.randomUUID)(),
         },
     }),
+    /**
+     * Session expired error (HTTP 404).
+     * Per MCP Spec 2025-11-25: When server terminates session, respond with HTTP 404.
+     * This signals to clients that they should start a new session with InitializeRequest.
+     */
+    sessionExpired: (message, requestId) => ({
+        kind: 'json',
+        status: 404,
+        contentType: 'application/json; charset=utf-8',
+        body: {
+            jsonrpc: exports.JSON_RPC,
+            error: { code: -32001, message },
+            id: requestId ?? (0, crypto_1.randomUUID)(),
+        },
+    }),
+    /**
+     * Session not found/not initialized error (HTTP 404).
+     * Per user requirement: Invalid or missing session should return HTTP 404 (not 400).
+     * This signals to clients that they should start a new session with InitializeRequest.
+     */
+    sessionNotFound: (message, requestId) => ({
+        kind: 'json',
+        status: 404,
+        contentType: 'application/json; charset=utf-8',
+        body: {
+            jsonrpc: exports.JSON_RPC,
+            error: { code: -32000, message },
+            id: requestId ?? (0, crypto_1.randomUUID)(),
+        },
+    }),
     rpcRequest: (requestId, method, params) => ({
         jsonrpc: exports.JSON_RPC,
         id: requestId ?? (0, crypto_1.randomUUID)(),
@@ -279,5 +311,11 @@ exports.httpRespond = {
     consumed() {
         return { kind: 'consumed' };
     },
+    empty(status = 204, headers) {
+        return { kind: 'empty', status, headers };
+    },
+    noContent(headers) {
+        return { kind: 'empty', status: 204, headers };
+    },
 };
 //# sourceMappingURL=http-output.schema.js.map

package/src/common/schemas/http-output.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"http-output.schema.js","sourceRoot":"","sources":["../../../../src/common/schemas/http-output.schema.ts"],"names":[],"mappings":";;;AAAA,oBAAoB;AACpB,6BAAwB;AACxB,iEAM4C;AAC5C,mCAAoC;AAEpC;;GAEG;AACU,QAAA,QAAQ,GAAG,KAAc,CAAC;AAC1B,QAAA,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAC/C,QAAA,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAC;AAEpD;;GAEG;AACH,+EAA+E;AAC/E,MAAM,SAAS,GAAG,CAAmD,IAAO,EAAwB,EAAE;IACpG,IAAI,MAAM,GAAyB,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAyB,CAAC;IAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAyB,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEW,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAChD,QAAA,kBAAkB,GAAG,SAAS,CAAC,iBAAS,CAAC,CAAC;AAC1C,QAAA,eAAe,GAAG,SAAS,CAAC,wBAAgB,CAAC,CAAC;AAE9C,QAAA,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEtG,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGU,QAAA,WAAW,GAAG,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEjE,MAAM,QAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;IACxB,OAAO,EAAE,mBAAW,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,mBAAW,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,wBAAgB,CAAC,QAAQ,CAAC,CAAsC,CAAC,CAAC;AAE3G;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,MAAM,EAAE,0BAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC3B,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,yDAAyD;KACnE,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,GAAG,EAAE,CAAC,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5F,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC;CACnE,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACxB,CAAC;KACD,WAAW,EAAE,CAAC;AAEJ,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAE5E;;GAEG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,yDAAyD;KACnE,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,KAAK,CAAC,sBAAsB,EAAE,wCAAwC,CAAC;SACvE,OAAO,CAAC,2BAA2B,CAAC;CACxC,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,cAAc,GAAG,sBAAc,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,WAAW,EAAE,OAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;CACvF,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,2DAA2D;KACrE,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,+BAA+B;IAC/B,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,eAAe,GAAG,wBAAgB,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC;QAClB,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,cAAc;KACf,CAAC;CACH,CAAC,CAAC;AAOH,MAAM,kBAAkB,GAAG,CAAC,CAAU,EAAyB,EAAE;IAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAI,CAAwB,CAAC,IAAI,CAAC;IACjD,MAAM,OAAO,GAAI,CAA0C,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClF,OAAO,OAAO,SAAS,KAAK,UAAU,IAAI,OAAO,OAAO,KAAK,UAAU,CAAC;AAC1E,CAAC,CAAC;AAEW,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,2DAA2D;KACrE,CAAC;IACF,MAAM,EAAE,OAAC,CAAC,MAAM,CAAmB,kBAAkB,EAAE,iDAAiD,CAAC;IACzG,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,aAAa,GAAG,wBAAgB,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,WAAW,EAAE,OAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;CACzE,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,6DAA6D;KACvE,CAAC;IACF,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAClE,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,gCAAqB,EAAE,6BAAkB,CAAC,CAAC;CAC3D,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,kBAAU;IAClB,WAAW,EAAE,OAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtF,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;KAClB,CAAC;SACD,WAAW,EAAE,EAAE,0BAA0B;CAC7C,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,MAAM,EAAE,uBAAe;CACxB,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,0BAAkB;IAClB,sBAAc;IACd,sBAAc;IACd,sBAAc;IACd,wBAAgB;IAChB,uBAAe;IACf,wBAAgB;IAChB,qBAAa;IACb,yBAAiB;IACjB,yBAAiB;IACjB,uBAAe;IACf,sBAAc;IACd,0BAAkB;CACnB,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,IAAI,EAAE,CAAgC,IAAO,EAAE,QAAiD,EAAE,EAAkC,EAAE;QACpI,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE,GAAG,KAAK,EAAE,CAAC;IACvG,CAAC;IAED,EAAE,EAAE,CAAC,IAAkC,EAAmE,EAAE;QAC1G,OAAO,OAAO,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;YAC/E,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;IAC1F,CAAC;IAED,YAAY,EAAE,CAAC,OAId,EAAkC,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG;QAC9B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE;QAChD,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,WAAW,EAAE,iCAAiC;KAC/C,CAAC;IAEF,IAAI,EAAE,CAAC,MAAc,EAAE,MAAM,GAAG,GAAG,EAAkC,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,MAAM;QACZ,MAAM;QACN,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,0BAA0B;KACxC,CAAC;IAEF,QAAQ,EAAE,CAAC,OAAO,GAAG,WAAW,EAAkC,EAAE,CAAC,CAAC;QACpE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,2BAA2B;KACzC,CAAC;IAEF,mBAAmB,EAAE,GAAiB,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,gBAAQ;QACjB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE;QAC7E,EAAE,EAAE,IAAA,mBAAU,GAAE;KACjB,CAAC;IAEF,QAAQ,EAAE,CAAC,OAAe,EAAE,SAA4B,EAAiC,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE;YACJ,OAAO,EAAE,gBAAQ;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE;YAChC,EAAE,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE;SAC9B;KACF,CAAC;IAEF,UAAU,EAAE,CAAC,SAAoB,EAAE,MAAc,EAAE,MAAW,EAAkB,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,gBAAQ;QACjB,EAAE,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE;QAC7B,MAAM;QACN,MAAM;KACP,CAAC;IACF,QAAQ,CAAC,QAAgB;QACvB,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG;YACX,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAA2B;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,QAAQ;QACN,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;CACF,CAAC","sourcesContent":["// output-schemas.ts\nimport { z } from 'zod';\nimport {\n  JSONRPCError,\n  JSONRPCMessage,\n  RequestId,\n  JSONRPCResponseSchema,\n  JSONRPCErrorSchema,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { randomUUID } from 'crypto';\n\n/**\n * Constants\n */\nexport const JSON_RPC = '2.0' as const;\nexport const REDIRECTS = [301, 302, 303, 307, 308] as const;\nexport const NO_BODY_STATUSES = [204, 304] as const;\n\n/**\n * Helpers\n */\n// numeric-literal union from a readonly tuple of at least TWO numbers (no any)\nconst zNumUnion = <T extends readonly [number, number, ...number[]]>(vals: T): z.ZodType<T[number]> => {\n  let schema: z.ZodType<T[number]> = z.literal(vals[0]) as z.ZodType<T[number]>;\n  for (let i = 1; i < vals.length; i++) {\n    schema = schema.or(z.literal(vals[i])) as z.ZodType<T[number]>;\n  }\n  return schema;\n};\n\nexport const HttpStatus = z.number().int().min(100).max(599);\nexport const HttpRedirectStatus = zNumUnion(REDIRECTS);\nexport const HttpEmptyStatus = zNumUnion(NO_BODY_STATUSES);\n\nexport const HttpHeaders = z.record(z.union([z.string(), z.union([z.string(), z.array(z.string())])])).default({});\n\nexport const HttpCookieSchema = z.object({\n  name: z.string().min(1),\n  value: z.string(),\n  path: z.string().default('/'),\n  domain: z.string().optional(),\n  httpOnly: z.boolean().default(true),\n  secure: z.boolean().optional(),\n  sameSite: z.enum(['lax', 'strict', 'none']).optional(),\n  maxAge: z.number().int().nonnegative().optional(),\n  expires: z.date().optional(),\n});\nexport type HttpCookie = z.infer<typeof HttpCookieSchema>;\n\nexport const HttpCookies = z.array(HttpCookieSchema).default([]);\n\nconst HttpMeta = z.object({\n  headers: HttpHeaders.optional(),\n  cookies: HttpCookies.optional(),\n});\n\nconst statusAllowsBody = (s: number) => !NO_BODY_STATUSES.includes(s as (typeof NO_BODY_STATUSES)[number]);\n\n/**\n * Redirect (3xx)\n */\nexport const HttpRedirectSchema = z\n  .object({\n    kind: z.literal('redirect'),\n    status: HttpRedirectStatus.default(302),\n    location: z.string().url(),\n  })\n  .merge(HttpMeta);\n\n/**\n * JSON (application/json)\n */\nexport const HttpJsonSchema = z\n  .object({\n    kind: z.literal('json'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'JSON responses must allow a body and not be a redirect.',\n    }),\n    body: z.union([z.object({}).passthrough(), z.array(z.any()), z.record(z.string(), z.any())]),\n    contentType: z.string().default('application/json; charset=utf-8'),\n  })\n  .merge(HttpMeta);\n\n/**\n * unknown — plain text, HTML, etc.\n */\nexport const HttpNextSchema = z\n  .object({\n    kind: z.literal('next'),\n  })\n  .passthrough();\n\nexport const HttpConsumedSchema = z.object({ kind: z.literal('consumed') });\n\n/**\n * Text (text/*) — plain text, HTML, etc.\n */\nexport const HttpTextSchema = z\n  .object({\n    kind: z.literal('text'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'Text responses must allow a body and not be a redirect.',\n    }),\n    body: z.string(),\n    contentType: z\n      .string()\n      .regex(/^text\\/[a-z0-9.+-]+/i, 'contentType must be a text/* MIME type')\n      .default('text/plain; charset=utf-8'),\n  })\n  .merge(HttpMeta);\n\n/**\n * HTML (text/html) — convenience specialization of Text\n */\nexport const HttpHtmlSchema = HttpTextSchema.extend({\n  kind: z.literal('html'),\n  contentType: z.literal('text/html; charset=utf-8').default('text/html; charset=utf-8'),\n});\n\n/**\n * Binary/file (Uint8Array or string with encoding)\n * Works for PDFs, archives, audio, video, etc.\n */\nexport const HttpBinarySchema = z\n  .object({\n    kind: z.literal('binary'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'Binary responses must allow a body and not be a redirect.',\n    }),\n    body: z.union([z.instanceof(Uint8Array), z.string()]),\n    // how to interpret string body\n    encoding: z.enum(['utf8', 'base64']).default('utf8'),\n    contentType: z.string().min(1),\n    disposition: z.enum(['inline', 'attachment']).default('inline'),\n    filename: z.string().optional(),\n  })\n  .merge(HttpMeta);\n\n/**\n * Images — narrowed binary with common image types\n */\nexport const HttpImageSchema = HttpBinarySchema.extend({\n  kind: z.literal('image'),\n  contentType: z.enum([\n    'image/png',\n    'image/jpeg',\n    'image/webp',\n    'image/gif',\n    'image/svg+xml',\n    'image/avif',\n    'image/apng',\n    'image/bmp',\n    'image/x-icon',\n  ]),\n});\n\n/**\n * Stream (Readable-like or AsyncIterable) — runtime-agnostic\n */\nexport type HttpReadableLike = { pipe?: (dest: unknown) => unknown } | AsyncIterable<Uint8Array>;\n\nconst isHttpReadableLike = (v: unknown): v is HttpReadableLike => {\n  if (typeof v !== 'object' || v === null) return false;\n  const maybePipe = (v as { pipe?: unknown }).pipe;\n  const maybeAI = (v as { [Symbol.asyncIterator]?: unknown })[Symbol.asyncIterator];\n  return typeof maybePipe === 'function' || typeof maybeAI === 'function';\n};\n\nexport const HttpStreamSchema = z\n  .object({\n    kind: z.literal('stream'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'Stream responses must allow a body and not be a redirect.',\n    }),\n    stream: z.custom<HttpReadableLike>(isHttpReadableLike, 'stream must be a Readable-like or AsyncIterable'),\n    contentType: z.string().min(1),\n    disposition: z.enum(['inline', 'attachment']).default('inline'),\n    filename: z.string().optional(),\n  })\n  .merge(HttpMeta);\n\n/**\n * Server-Sent Events (specialized stream)\n */\nexport const HttpSseSchema = HttpStreamSchema.extend({\n  kind: z.literal('sse'),\n  contentType: z.literal('text/event-stream').default('text/event-stream'),\n});\n\n/**\n * JSON-RPC 2.0 wrapped for HTTP union (kind='jsonrpc')\n */\nexport const HttpJsonRpcSchema = z\n  .object({\n    kind: z.literal('jsonrpc'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'JSON-RPC responses must allow a body and not be a redirect.',\n    }),\n    contentType: z.string().default('application/json; charset=utf-8'),\n    body: z.union([JSONRPCResponseSchema, JSONRPCErrorSchema]),\n  })\n  .merge(HttpMeta);\n\n/**\n * RFC 7807 Problem Details (application/problem+json)\n */\nexport const HttpProblemSchema = z\n  .object({\n    kind: z.literal('problem'),\n    status: HttpStatus,\n    contentType: z.literal('application/problem+json').default('application/problem+json'),\n    body: z\n      .object({\n        error: z.string(),\n      })\n      .passthrough(), // allow extension members\n  })\n  .merge(HttpMeta);\n\n/**\n * Empty responses (204/304) — MUST NOT include a body\n */\nexport const HttpEmptySchema = z\n  .object({\n    kind: z.literal('empty'),\n    status: HttpEmptyStatus,\n  })\n  .merge(HttpMeta);\n\n/**\n * Master union — validate all server outputs with this\n */\nexport const httpOutputSchema = z.discriminatedUnion('kind', [\n  HttpRedirectSchema,\n  HttpJsonSchema,\n  HttpTextSchema,\n  HttpHtmlSchema,\n  HttpBinarySchema,\n  HttpImageSchema,\n  HttpStreamSchema,\n  HttpSseSchema,\n  HttpJsonRpcSchema,\n  HttpProblemSchema,\n  HttpEmptySchema,\n  HttpNextSchema,\n  HttpConsumedSchema,\n]);\n\nexport type HttpOutput = z.infer<typeof httpOutputSchema>;\n\n/**\n * Convenience factories\n */\nexport const httpRespond = {\n  json: <T extends Record<string, any>>(body: T, extra: Partial<z.infer<typeof HttpJsonSchema>> = {}): z.infer<typeof HttpJsonSchema> => {\n    return { kind: 'json', status: 200, body, contentType: 'application/json; charset=utf-8', ...extra };\n  },\n\n  ok: (body: string | Record<string, any>): z.infer<typeof HttpJsonSchema> | z.infer<typeof HttpTextSchema> => {\n    return typeof body === 'string'\n      ? { kind: 'text', status: 200, body, contentType: 'text/plain; charset=utf-8' }\n      : { kind: 'json', status: 200, body, contentType: 'application/json; charset=utf-8' };\n  },\n\n  unauthorized: (options?: {\n    headers?: Record<string, string>;\n    body?: Record<string, string>;\n    status?: number;\n  }): z.infer<typeof HttpJsonSchema> => ({\n    kind: 'json',\n    status: options?.status ?? 401,\n    body: options?.body ?? { error: 'Unauthorized' },\n    headers: options?.headers,\n    contentType: 'application/json; charset=utf-8',\n  }),\n\n  html: (markup: string, status = 200): z.infer<typeof HttpHtmlSchema> => ({\n    kind: 'html',\n    status,\n    body: markup,\n    contentType: 'text/html; charset=utf-8',\n  }),\n\n  notFound: (message = 'Not Found'): z.infer<typeof HttpTextSchema> => ({\n    kind: 'text',\n    status: 404,\n    body: message,\n    contentType: 'text/plain; charset=utf-8',\n  }),\n\n  noValidSessionError: (): JSONRPCError => ({\n    jsonrpc: JSON_RPC,\n    error: { code: -32000, message: 'Bad Request: No valid session ID provided' },\n    id: randomUUID(),\n  }),\n\n  rpcError: (message: string, requestId?: RequestId | null):z.infer<typeof HttpJsonSchema> => ({\n    kind: 'json',\n    status: 400,\n    contentType: 'application/json; charset=utf-8',\n    body: {\n      jsonrpc: JSON_RPC,\n      error: { code: -32000, message },\n      id: requestId ?? randomUUID(),\n    },\n  }),\n\n  rpcRequest: (requestId: RequestId, method: string, params: any): JSONRPCMessage => ({\n    jsonrpc: JSON_RPC,\n    id: requestId ?? randomUUID(),\n    method,\n    params,\n  }),\n  redirect(location: string): z.infer<typeof HttpRedirectSchema> {\n    return {\n      kind: 'redirect',\n      status: 302,\n      location,\n    };\n  },\n  next(extra?: Record<string, any>): z.infer<typeof HttpNextSchema> {\n    return { kind: 'next', ...extra };\n  },\n  consumed(): z.infer<typeof HttpConsumedSchema> {\n    return { kind: 'consumed' };\n  },\n};\n"]}
+{"version":3,"file":"http-output.schema.js","sourceRoot":"","sources":["../../../../src/common/schemas/http-output.schema.ts"],"names":[],"mappings":";;;AAAA,oBAAoB;AACpB,6BAAwB;AACxB,iEAM4C;AAC5C,mCAAoC;AAEpC;;GAEG;AACU,QAAA,QAAQ,GAAG,KAAc,CAAC;AAC1B,QAAA,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAC/C,QAAA,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAC;AAEpD;;GAEG;AACH,+EAA+E;AAC/E,MAAM,SAAS,GAAG,CAAmD,IAAO,EAAwB,EAAE;IACpG,IAAI,MAAM,GAAyB,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAyB,CAAC;IAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAyB,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEW,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAChD,QAAA,kBAAkB,GAAG,SAAS,CAAC,iBAAS,CAAC,CAAC;AAC1C,QAAA,eAAe,GAAG,SAAS,CAAC,wBAAgB,CAAC,CAAC;AAE9C,QAAA,WAAW,GAAG,OAAC;KACzB,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACrF,OAAO,CAAC,EAAE,CAAC,CAAC;AAEF,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,OAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAGU,QAAA,WAAW,GAAG,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEjE,MAAM,QAAQ,GAAG,OAAC,CAAC,MAAM,CAAC;IACxB,OAAO,EAAE,mBAAW,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,mBAAW,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,wBAAgB,CAAC,QAAQ,CAAC,CAAsC,CAAC,CAAC;AAE3G;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,MAAM,EAAE,0BAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC3B,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,yDAAyD;KACnE,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,GAAG,EAAE,CAAC,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5F,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC;CACnE,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACxB,CAAC;KACD,WAAW,EAAE,CAAC;AAEJ,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAE5E;;GAEG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,yDAAyD;KACnE,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,KAAK,CAAC,sBAAsB,EAAE,wCAAwC,CAAC;SACvE,OAAO,CAAC,2BAA2B,CAAC;CACxC,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,cAAc,GAAG,sBAAc,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,WAAW,EAAE,OAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;CACvF,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,2DAA2D;KACrE,CAAC;IACF,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,+BAA+B;IAC/B,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,eAAe,GAAG,wBAAgB,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC;QAClB,WAAW;QACX,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,eAAe;QACf,YAAY;QACZ,YAAY;QACZ,WAAW;QACX,cAAc;KACf,CAAC;CACH,CAAC,CAAC;AAOH,MAAM,kBAAkB,GAAG,CAAC,CAAU,EAAyB,EAAE;IAC/D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAI,CAAwB,CAAC,IAAI,CAAC;IACjD,MAAM,OAAO,GAAI,CAA0C,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClF,OAAO,OAAO,SAAS,KAAK,UAAU,IAAI,OAAO,OAAO,KAAK,UAAU,CAAC;AAC1E,CAAC,CAAC;AAEW,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,2DAA2D;KACrE,CAAC;IACF,MAAM,EAAE,OAAC,CAAC,MAAM,CAAmB,kBAAkB,EAAE,iDAAiD,CAAC;IACzG,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,aAAa,GAAG,wBAAgB,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,WAAW,EAAE,OAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;CACzE,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,kBAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,QAAQ,CAAC,CAA+B,CAAC,EAAE;QAC5G,OAAO,EAAE,6DAA6D;KACvE,CAAC;IACF,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAClE,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,gCAAqB,EAAE,6BAAkB,CAAC,CAAC;CAC3D,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,kBAAU;IAClB,WAAW,EAAE,OAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtF,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;KAClB,CAAC;SACD,WAAW,EAAE,EAAE,0BAA0B;CAC7C,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,MAAM,EAAE,uBAAe;CACxB,CAAC;KACD,KAAK,CAAC,QAAQ,CAAC,CAAC;AAEnB;;GAEG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,0BAAkB;IAClB,sBAAc;IACd,sBAAc;IACd,sBAAc;IACd,wBAAgB;IAChB,uBAAe;IACf,wBAAgB;IAChB,qBAAa;IACb,yBAAiB;IACjB,yBAAiB;IACjB,uBAAe;IACf,sBAAc;IACd,0BAAkB;CACnB,CAAC,CAAC;AAIH;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB,IAAI,EAAE,CACJ,IAAO,EACP,QAAiD,EAAE,EACnB,EAAE;QAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE,GAAG,KAAK,EAAE,CAAC;IACvG,CAAC;IAED,EAAE,EAAE,CAAC,IAAkC,EAAmE,EAAE;QAC1G,OAAO,OAAO,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;YAC/E,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;IAC1F,CAAC;IAED,YAAY,EAAE,CAAC,OAId,EAAkC,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG;QAC9B,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE;QAChD,OAAO,EAAE,OAAO,EAAE,OAAO;QACzB,WAAW,EAAE,iCAAiC;KAC/C,CAAC;IAEF,IAAI,EAAE,CAAC,MAAc,EAAE,MAAM,GAAG,GAAG,EAAkC,EAAE,CAAC,CAAC;QACvE,IAAI,EAAE,MAAM;QACZ,MAAM;QACN,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,0BAA0B;KACxC,CAAC;IAEF,QAAQ,EAAE,CAAC,OAAO,GAAG,WAAW,EAAkC,EAAE,CAAC,CAAC;QACpE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,2BAA2B;KACzC,CAAC;IAEF,mBAAmB,EAAE,GAAiB,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,gBAAQ;QACjB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,2CAA2C,EAAE;QAC7E,EAAE,EAAE,IAAA,mBAAU,GAAE;KACjB,CAAC;IAEF,QAAQ,EAAE,CAAC,OAAe,EAAE,SAA4B,EAAkC,EAAE,CAAC,CAAC;QAC5F,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE;YACJ,OAAO,EAAE,gBAAQ;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE;YAChC,EAAE,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE;SAC9B;KACF,CAAC;IAEF;;;;OAIG;IACH,cAAc,EAAE,CAAC,OAAe,EAAE,SAA4B,EAAkC,EAAE,CAAC,CAAC;QAClG,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE;YACJ,OAAO,EAAE,gBAAQ;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE;YAChC,EAAE,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE;SAC9B;KACF,CAAC;IAEF;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAe,EAAE,SAA4B,EAAkC,EAAE,CAAC,CAAC;QACnG,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE;YACJ,OAAO,EAAE,gBAAQ;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE;YAChC,EAAE,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE;SAC9B;KACF,CAAC;IAEF,UAAU,EAAE,CAAC,SAAoB,EAAE,MAAc,EAAE,MAAW,EAAkB,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,gBAAQ;QACjB,EAAE,EAAE,SAAS,IAAI,IAAA,mBAAU,GAAE;QAC7B,MAAM;QACN,MAAM;KACP,CAAC;IACF,QAAQ,CAAC,QAAgB;QACvB,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG;YACX,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAA2B;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,QAAQ;QACN,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,SAAoB,GAAG,EAAE,OAAgC;QAC7D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;IACD,SAAS,CAAC,OAAgC;QACxC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACjD,CAAC;CACF,CAAC","sourcesContent":["// output-schemas.ts\nimport { z } from 'zod';\nimport {\n  JSONRPCError,\n  JSONRPCMessage,\n  RequestId,\n  JSONRPCResponseSchema,\n  JSONRPCErrorSchema,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { randomUUID } from 'crypto';\n\n/**\n * Constants\n */\nexport const JSON_RPC = '2.0' as const;\nexport const REDIRECTS = [301, 302, 303, 307, 308] as const;\nexport const NO_BODY_STATUSES = [204, 304] as const;\n\n/**\n * Helpers\n */\n// numeric-literal union from a readonly tuple of at least TWO numbers (no any)\nconst zNumUnion = <T extends readonly [number, number, ...number[]]>(vals: T): z.ZodType<T[number]> => {\n  let schema: z.ZodType<T[number]> = z.literal(vals[0]) as z.ZodType<T[number]>;\n  for (let i = 1; i < vals.length; i++) {\n    schema = schema.or(z.literal(vals[i])) as z.ZodType<T[number]>;\n  }\n  return schema;\n};\n\nexport const HttpStatus = z.number().int().min(100).max(599);\nexport const HttpRedirectStatus = zNumUnion(REDIRECTS);\nexport const HttpEmptyStatus = zNumUnion(NO_BODY_STATUSES);\n\nexport const HttpHeaders = z\n  .record(z.string(), z.union([z.string(), z.union([z.string(), z.array(z.string())])]))\n  .default({});\n\nexport const HttpCookieSchema = z.object({\n  name: z.string().min(1),\n  value: z.string(),\n  path: z.string().default('/'),\n  domain: z.string().optional(),\n  httpOnly: z.boolean().default(true),\n  secure: z.boolean().optional(),\n  sameSite: z.enum(['lax', 'strict', 'none']).optional(),\n  maxAge: z.number().int().nonnegative().optional(),\n  expires: z.date().optional(),\n});\nexport type HttpCookie = z.infer<typeof HttpCookieSchema>;\n\nexport const HttpCookies = z.array(HttpCookieSchema).default([]);\n\nconst HttpMeta = z.object({\n  headers: HttpHeaders.optional(),\n  cookies: HttpCookies.optional(),\n});\n\nconst statusAllowsBody = (s: number) => !NO_BODY_STATUSES.includes(s as (typeof NO_BODY_STATUSES)[number]);\n\n/**\n * Redirect (3xx)\n */\nexport const HttpRedirectSchema = z\n  .object({\n    kind: z.literal('redirect'),\n    status: HttpRedirectStatus.default(302),\n    location: z.string().url(),\n  })\n  .merge(HttpMeta);\n\n/**\n * JSON (application/json)\n */\nexport const HttpJsonSchema = z\n  .object({\n    kind: z.literal('json'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'JSON responses must allow a body and not be a redirect.',\n    }),\n    body: z.union([z.object({}).passthrough(), z.array(z.any()), z.record(z.string(), z.any())]),\n    contentType: z.string().default('application/json; charset=utf-8'),\n  })\n  .merge(HttpMeta);\n\n/**\n * unknown — plain text, HTML, etc.\n */\nexport const HttpNextSchema = z\n  .object({\n    kind: z.literal('next'),\n  })\n  .passthrough();\n\nexport const HttpConsumedSchema = z.object({ kind: z.literal('consumed') });\n\n/**\n * Text (text/*) — plain text, HTML, etc.\n */\nexport const HttpTextSchema = z\n  .object({\n    kind: z.literal('text'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'Text responses must allow a body and not be a redirect.',\n    }),\n    body: z.string(),\n    contentType: z\n      .string()\n      .regex(/^text\\/[a-z0-9.+-]+/i, 'contentType must be a text/* MIME type')\n      .default('text/plain; charset=utf-8'),\n  })\n  .merge(HttpMeta);\n\n/**\n * HTML (text/html) — convenience specialization of Text\n */\nexport const HttpHtmlSchema = HttpTextSchema.extend({\n  kind: z.literal('html'),\n  contentType: z.literal('text/html; charset=utf-8').default('text/html; charset=utf-8'),\n});\n\n/**\n * Binary/file (Uint8Array or string with encoding)\n * Works for PDFs, archives, audio, video, etc.\n */\nexport const HttpBinarySchema = z\n  .object({\n    kind: z.literal('binary'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'Binary responses must allow a body and not be a redirect.',\n    }),\n    body: z.union([z.instanceof(Uint8Array), z.string()]),\n    // how to interpret string body\n    encoding: z.enum(['utf8', 'base64']).default('utf8'),\n    contentType: z.string().min(1),\n    disposition: z.enum(['inline', 'attachment']).default('inline'),\n    filename: z.string().optional(),\n  })\n  .merge(HttpMeta);\n\n/**\n * Images — narrowed binary with common image types\n */\nexport const HttpImageSchema = HttpBinarySchema.extend({\n  kind: z.literal('image'),\n  contentType: z.enum([\n    'image/png',\n    'image/jpeg',\n    'image/webp',\n    'image/gif',\n    'image/svg+xml',\n    'image/avif',\n    'image/apng',\n    'image/bmp',\n    'image/x-icon',\n  ]),\n});\n\n/**\n * Stream (Readable-like or AsyncIterable) — runtime-agnostic\n */\nexport type HttpReadableLike = { pipe?: (dest: unknown) => unknown } | AsyncIterable<Uint8Array>;\n\nconst isHttpReadableLike = (v: unknown): v is HttpReadableLike => {\n  if (typeof v !== 'object' || v === null) return false;\n  const maybePipe = (v as { pipe?: unknown }).pipe;\n  const maybeAI = (v as { [Symbol.asyncIterator]?: unknown })[Symbol.asyncIterator];\n  return typeof maybePipe === 'function' || typeof maybeAI === 'function';\n};\n\nexport const HttpStreamSchema = z\n  .object({\n    kind: z.literal('stream'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'Stream responses must allow a body and not be a redirect.',\n    }),\n    stream: z.custom<HttpReadableLike>(isHttpReadableLike, 'stream must be a Readable-like or AsyncIterable'),\n    contentType: z.string().min(1),\n    disposition: z.enum(['inline', 'attachment']).default('inline'),\n    filename: z.string().optional(),\n  })\n  .merge(HttpMeta);\n\n/**\n * Server-Sent Events (specialized stream)\n */\nexport const HttpSseSchema = HttpStreamSchema.extend({\n  kind: z.literal('sse'),\n  contentType: z.literal('text/event-stream').default('text/event-stream'),\n});\n\n/**\n * JSON-RPC 2.0 wrapped for HTTP union (kind='jsonrpc')\n */\nexport const HttpJsonRpcSchema = z\n  .object({\n    kind: z.literal('jsonrpc'),\n    status: HttpStatus.refine((s) => statusAllowsBody(s) && !REDIRECTS.includes(s as (typeof REDIRECTS)[number]), {\n      message: 'JSON-RPC responses must allow a body and not be a redirect.',\n    }),\n    contentType: z.string().default('application/json; charset=utf-8'),\n    body: z.union([JSONRPCResponseSchema, JSONRPCErrorSchema]),\n  })\n  .merge(HttpMeta);\n\n/**\n * RFC 7807 Problem Details (application/problem+json)\n */\nexport const HttpProblemSchema = z\n  .object({\n    kind: z.literal('problem'),\n    status: HttpStatus,\n    contentType: z.literal('application/problem+json').default('application/problem+json'),\n    body: z\n      .object({\n        error: z.string(),\n      })\n      .passthrough(), // allow extension members\n  })\n  .merge(HttpMeta);\n\n/**\n * Empty responses (204/304) — MUST NOT include a body\n */\nexport const HttpEmptySchema = z\n  .object({\n    kind: z.literal('empty'),\n    status: HttpEmptyStatus,\n  })\n  .merge(HttpMeta);\n\n/**\n * Master union — validate all server outputs with this\n */\nexport const httpOutputSchema = z.discriminatedUnion('kind', [\n  HttpRedirectSchema,\n  HttpJsonSchema,\n  HttpTextSchema,\n  HttpHtmlSchema,\n  HttpBinarySchema,\n  HttpImageSchema,\n  HttpStreamSchema,\n  HttpSseSchema,\n  HttpJsonRpcSchema,\n  HttpProblemSchema,\n  HttpEmptySchema,\n  HttpNextSchema,\n  HttpConsumedSchema,\n]);\n\nexport type HttpOutput = z.infer<typeof httpOutputSchema>;\n\n/**\n * Convenience factories\n */\nexport const httpRespond = {\n  json: <T extends Record<string, any>>(\n    body: T,\n    extra: Partial<z.infer<typeof HttpJsonSchema>> = {},\n  ): z.infer<typeof HttpJsonSchema> => {\n    return { kind: 'json', status: 200, body, contentType: 'application/json; charset=utf-8', ...extra };\n  },\n\n  ok: (body: string | Record<string, any>): z.infer<typeof HttpJsonSchema> | z.infer<typeof HttpTextSchema> => {\n    return typeof body === 'string'\n      ? { kind: 'text', status: 200, body, contentType: 'text/plain; charset=utf-8' }\n      : { kind: 'json', status: 200, body, contentType: 'application/json; charset=utf-8' };\n  },\n\n  unauthorized: (options?: {\n    headers?: Record<string, string>;\n    body?: Record<string, string>;\n    status?: number;\n  }): z.infer<typeof HttpJsonSchema> => ({\n    kind: 'json',\n    status: options?.status ?? 401,\n    body: options?.body ?? { error: 'Unauthorized' },\n    headers: options?.headers,\n    contentType: 'application/json; charset=utf-8',\n  }),\n\n  html: (markup: string, status = 200): z.infer<typeof HttpHtmlSchema> => ({\n    kind: 'html',\n    status,\n    body: markup,\n    contentType: 'text/html; charset=utf-8',\n  }),\n\n  notFound: (message = 'Not Found'): z.infer<typeof HttpTextSchema> => ({\n    kind: 'text',\n    status: 404,\n    body: message,\n    contentType: 'text/plain; charset=utf-8',\n  }),\n\n  noValidSessionError: (): JSONRPCError => ({\n    jsonrpc: JSON_RPC,\n    error: { code: -32000, message: 'Bad Request: No valid session ID provided' },\n    id: randomUUID(),\n  }),\n\n  rpcError: (message: string, requestId?: RequestId | null): z.infer<typeof HttpJsonSchema> => ({\n    kind: 'json',\n    status: 400,\n    contentType: 'application/json; charset=utf-8',\n    body: {\n      jsonrpc: JSON_RPC,\n      error: { code: -32000, message },\n      id: requestId ?? randomUUID(),\n    },\n  }),\n\n  /**\n   * Session expired error (HTTP 404).\n   * Per MCP Spec 2025-11-25: When server terminates session, respond with HTTP 404.\n   * This signals to clients that they should start a new session with InitializeRequest.\n   */\n  sessionExpired: (message: string, requestId?: RequestId | null): z.infer<typeof HttpJsonSchema> => ({\n    kind: 'json',\n    status: 404,\n    contentType: 'application/json; charset=utf-8',\n    body: {\n      jsonrpc: JSON_RPC,\n      error: { code: -32001, message },\n      id: requestId ?? randomUUID(),\n    },\n  }),\n\n  /**\n   * Session not found/not initialized error (HTTP 404).\n   * Per user requirement: Invalid or missing session should return HTTP 404 (not 400).\n   * This signals to clients that they should start a new session with InitializeRequest.\n   */\n  sessionNotFound: (message: string, requestId?: RequestId | null): z.infer<typeof HttpJsonSchema> => ({\n    kind: 'json',\n    status: 404,\n    contentType: 'application/json; charset=utf-8',\n    body: {\n      jsonrpc: JSON_RPC,\n      error: { code: -32000, message },\n      id: requestId ?? randomUUID(),\n    },\n  }),\n\n  rpcRequest: (requestId: RequestId, method: string, params: any): JSONRPCMessage => ({\n    jsonrpc: JSON_RPC,\n    id: requestId ?? randomUUID(),\n    method,\n    params,\n  }),\n  redirect(location: string): z.infer<typeof HttpRedirectSchema> {\n    return {\n      kind: 'redirect',\n      status: 302,\n      location,\n    };\n  },\n  next(extra?: Record<string, any>): z.infer<typeof HttpNextSchema> {\n    return { kind: 'next', ...extra };\n  },\n  consumed(): z.infer<typeof HttpConsumedSchema> {\n    return { kind: 'consumed' };\n  },\n  empty(status: 204 | 304 = 204, headers?: Record<string, string>): z.infer<typeof HttpEmptySchema> {\n    return { kind: 'empty', status, headers };\n  },\n  noContent(headers?: Record<string, string>): z.infer<typeof HttpEmptySchema> {\n    return { kind: 'empty', status: 204, headers };\n  },\n};\n"]}

package/src/common/tokens/front-mcp.tokens.js

@@ -14,6 +14,9 @@ exports.FrontMcpTokens = {
     logging: base_tokens_1.tokenFactory.meta('logging'),
     // global scoped providers
     providers: base_tokens_1.tokenFactory.meta('providers'),
-    // TODO: FEATURE/FRONT_MCP_METADATA - add support for global plugins across apps
+    // global scoped tools (shared across apps)
+    tools: base_tokens_1.tokenFactory.meta('tools'),
+    // global scoped resources (shared across apps)
+    resources: base_tokens_1.tokenFactory.meta('resources'),
 };
 //# sourceMappingURL=front-mcp.tokens.js.map

package/src/common/tokens/front-mcp.tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"front-mcp.tokens.js","sourceRoot":"","sources":["../../../../src/common/tokens/front-mcp.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,cAAc,GAAuC;IAChE,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IACrC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,UAAU,EAAE,0BAAY,CAAC,IAAI,CAAC,YAAY,CAAC;IAC3C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IAErC,0BAA0B;IAC1B,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;IACzC,gFAAgF;CACjF,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { FrontMcpMetadata } from '../metadata';\n\nexport const FrontMcpTokens: RawMetadataShape<FrontMcpMetadata> = {\n  type: tokenFactory.type('root'),\n  info: tokenFactory.meta('info'),\n  apps: tokenFactory.meta('apps'),\n  http: tokenFactory.meta('http'),\n  session: tokenFactory.meta('session'),\n  serve: tokenFactory.meta('serve'),\n  splitByApp: tokenFactory.meta('splitByApp'),\n  auth: tokenFactory.meta('auth'),\n  logging: tokenFactory.meta('logging'),\n\n  // global scoped providers\n  providers: tokenFactory.meta('providers'),\n  // TODO: FEATURE/FRONT_MCP_METADATA - add support for global plugins across apps\n};"]}
+{"version":3,"file":"front-mcp.tokens.js","sourceRoot":"","sources":["../../../../src/common/tokens/front-mcp.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,cAAc,GAAuC;IAChE,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IACrC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,UAAU,EAAE,0BAAY,CAAC,IAAI,CAAC,YAAY,CAAC;IAC3C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,0BAAY,CAAC,IAAI,CAAC,SAAS,CAAC;IAErC,0BAA0B;IAC1B,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;IACzC,2CAA2C;IAC3C,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,+CAA+C;IAC/C,SAAS,EAAE,0BAAY,CAAC,IAAI,CAAC,WAAW,CAAC;CAC1C,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { FrontMcpMetadata } from '../metadata';\n\nexport const FrontMcpTokens: RawMetadataShape<FrontMcpMetadata> = {\n  type: tokenFactory.type('root'),\n  info: tokenFactory.meta('info'),\n  apps: tokenFactory.meta('apps'),\n  http: tokenFactory.meta('http'),\n  session: tokenFactory.meta('session'),\n  serve: tokenFactory.meta('serve'),\n  splitByApp: tokenFactory.meta('splitByApp'),\n  auth: tokenFactory.meta('auth'),\n  logging: tokenFactory.meta('logging'),\n\n  // global scoped providers\n  providers: tokenFactory.meta('providers'),\n  // global scoped tools (shared across apps)\n  tools: tokenFactory.meta('tools'),\n  // global scoped resources (shared across apps)\n  resources: tokenFactory.meta('resources'),\n};\n"]}

package/src/common/tokens/resource.tokens.d.ts

@@ -18,3 +18,5 @@ export declare const FrontMcpResourceTemplateTokens: {
     readonly icons: symbol;
     readonly metadata: symbol;
 };
+export declare const extendedResourceMetadata: symbol;
+export declare const extendedResourceTemplateMetadata: symbol;

package/src/common/tokens/resource.tokens.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FrontMcpResourceTemplateTokens = exports.FrontMcpResourceTokens = void 0;
+exports.extendedResourceTemplateMetadata = exports.extendedResourceMetadata = exports.FrontMcpResourceTemplateTokens = exports.FrontMcpResourceTokens = void 0;
 const base_tokens_1 = require("./base.tokens");
 exports.FrontMcpResourceTokens = {
     type: base_tokens_1.tokenFactory.type('resource'),
@@ -22,4 +22,7 @@ exports.FrontMcpResourceTemplateTokens = {
     icons: base_tokens_1.tokenFactory.meta('icons'),
     metadata: base_tokens_1.tokenFactory.meta('metadata'), // used in resourceTemplate({}) construction
 };
+// Extended metadata symbols for class decorators
+exports.extendedResourceMetadata = base_tokens_1.tokenFactory.meta('extendedResourceMetadata');
+exports.extendedResourceTemplateMetadata = base_tokens_1.tokenFactory.meta('extendedResourceTemplateMetadata');
 //# sourceMappingURL=resource.tokens.js.map

package/src/common/tokens/resource.tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource.tokens.js","sourceRoot":"","sources":["../../../../src/common/tokens/resource.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAKhC,QAAA,sBAAsB,GAAG;IACpC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,GAAG,EAAE,0BAAY,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,oCAAoC;CACQ,CAAC;AAE3E,QAAA,8BAA8B,GAAG;IAC5C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC3C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,4CAA4C;CACgB,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ResourceMetadata, ResourceTemplateMetadata } from '../metadata';\n\n\nexport const FrontMcpResourceTokens = {\n  type: tokenFactory.type('resource'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  uri: tokenFactory.meta('uri'),\n  description: tokenFactory.meta('description'),\n  mimeType: tokenFactory.meta('mimeType'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in resource({}) construction\n} as const satisfies RawMetadataShape<ResourceMetadata, ExtendFrontMcpResourceMetadata>;\n\nexport const FrontMcpResourceTemplateTokens = {\n  type: tokenFactory.type('resourceTemplate'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  uriTemplate: tokenFactory.meta('uriTemplate'),\n  description: tokenFactory.meta('description'),\n  mimeType: tokenFactory.meta('mimeType'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in resourceTemplate({}) construction\n} as const satisfies RawMetadataShape<ResourceTemplateMetadata, ExtendFrontMcpResourceTemplateMetadata>;\n\n"]}
+{"version":3,"file":"resource.tokens.js","sourceRoot":"","sources":["../../../../src/common/tokens/resource.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,sBAAsB,GAAG;IACpC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,GAAG,EAAE,0BAAY,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,oCAAoC;CACQ,CAAC;AAE3E,QAAA,8BAA8B,GAAG;IAC5C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC3C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,KAAK,EAAE,0BAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,4CAA4C;CACgB,CAAC;AAExG,iDAAiD;AACpC,QAAA,wBAAwB,GAAG,0BAAY,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACzE,QAAA,gCAAgC,GAAG,0BAAY,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ResourceMetadata, ResourceTemplateMetadata } from '../metadata';\n\nexport const FrontMcpResourceTokens = {\n  type: tokenFactory.type('resource'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  uri: tokenFactory.meta('uri'),\n  description: tokenFactory.meta('description'),\n  mimeType: tokenFactory.meta('mimeType'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in resource({}) construction\n} as const satisfies RawMetadataShape<ResourceMetadata, ExtendFrontMcpResourceMetadata>;\n\nexport const FrontMcpResourceTemplateTokens = {\n  type: tokenFactory.type('resourceTemplate'),\n  name: tokenFactory.meta('name'),\n  title: tokenFactory.meta('title'),\n  uriTemplate: tokenFactory.meta('uriTemplate'),\n  description: tokenFactory.meta('description'),\n  mimeType: tokenFactory.meta('mimeType'),\n  icons: tokenFactory.meta('icons'),\n  metadata: tokenFactory.meta('metadata'), // used in resourceTemplate({}) construction\n} as const satisfies RawMetadataShape<ResourceTemplateMetadata, ExtendFrontMcpResourceTemplateMetadata>;\n\n// Extended metadata symbols for class decorators\nexport const extendedResourceMetadata = tokenFactory.meta('extendedResourceMetadata');\nexport const extendedResourceTemplateMetadata = tokenFactory.meta('extendedResourceTemplateMetadata');\n"]}

package/src/common/tokens/tool.tokens.d.ts

@@ -9,6 +9,8 @@ export declare const FrontMcpToolTokens: {
     readonly tags: symbol;
     readonly annotations: symbol;
     readonly hideFromDiscovery: symbol;
+    readonly examples: symbol;
+    readonly ui: symbol;
     readonly metadata: symbol;
 };
 export declare const extendedToolMetadata: symbol;

package/src/common/tokens/tool.tokens.js

@@ -13,6 +13,8 @@ exports.FrontMcpToolTokens = {
     tags: base_tokens_1.tokenFactory.meta('tags'),
     annotations: base_tokens_1.tokenFactory.meta('annotations'),
     hideFromDiscovery: base_tokens_1.tokenFactory.meta('hideFromDiscovery'),
+    examples: base_tokens_1.tokenFactory.meta('examples'),
+    ui: base_tokens_1.tokenFactory.meta('ui'), // UI template configuration
     metadata: base_tokens_1.tokenFactory.meta('metadata'), // used in tool({}) construction
 };
 exports.extendedToolMetadata = base_tokens_1.tokenFactory.meta('extendedToolMetadata');

package/src/common/tokens/tool.tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.tokens.js","sourceRoot":"","sources":["../../../../src/common/tokens/tool.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,0BAAY,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,cAAc,EAAE,0BAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACnD,YAAY,EAAE,0BAAY,CAAC,IAAI,CAAC,cAAc,CAAC;IAC/C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,iBAAiB,EAAE,0BAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACzD,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,gCAAgC;CACI,CAAC;AAEnE,QAAA,oBAAoB,GAAG,0BAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ToolMetadata } from '../metadata';\n\nexport const FrontMcpToolTokens = {\n  type: tokenFactory.type('tool'),\n  id: tokenFactory.meta('id'),\n  name: tokenFactory.meta('name'),\n  description: tokenFactory.meta('description'),\n  inputSchema: tokenFactory.meta('inputSchema'),\n  rawInputSchema: tokenFactory.meta('rawInputSchema'),\n  outputSchema: tokenFactory.meta('outputSchema'),\n  tags: tokenFactory.meta('tags'),\n  annotations: tokenFactory.meta('annotations'),\n  hideFromDiscovery: tokenFactory.meta('hideFromDiscovery'),\n  metadata: tokenFactory.meta('metadata'), // used in tool({}) construction\n} as const satisfies RawMetadataShape<ToolMetadata, ExtendFrontMcpToolMetadata>;\n\nexport const extendedToolMetadata = tokenFactory.meta('extendedToolMetadata');\n"]}
+{"version":3,"file":"tool.tokens.js","sourceRoot":"","sources":["../../../../src/common/tokens/tool.tokens.ts"],"names":[],"mappings":";;;AAAA,+CAA6C;AAIhC,QAAA,kBAAkB,GAAG;IAChC,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,0BAAY,CAAC,IAAI,CAAC,IAAI,CAAC;IAC3B,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,cAAc,EAAE,0BAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC;IACnD,YAAY,EAAE,0BAAY,CAAC,IAAI,CAAC,cAAc,CAAC;IAC/C,IAAI,EAAE,0BAAY,CAAC,IAAI,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,0BAAY,CAAC,IAAI,CAAC,aAAa,CAAC;IAC7C,iBAAiB,EAAE,0BAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACzD,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC;IACvC,EAAE,EAAE,0BAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,4BAA4B;IACzD,QAAQ,EAAE,0BAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,gCAAgC;CACI,CAAC;AAEnE,QAAA,oBAAoB,GAAG,0BAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC","sourcesContent":["import { tokenFactory } from './base.tokens';\nimport { RawMetadataShape } from '../types';\nimport { ToolMetadata } from '../metadata';\n\nexport const FrontMcpToolTokens = {\n  type: tokenFactory.type('tool'),\n  id: tokenFactory.meta('id'),\n  name: tokenFactory.meta('name'),\n  description: tokenFactory.meta('description'),\n  inputSchema: tokenFactory.meta('inputSchema'),\n  rawInputSchema: tokenFactory.meta('rawInputSchema'),\n  outputSchema: tokenFactory.meta('outputSchema'),\n  tags: tokenFactory.meta('tags'),\n  annotations: tokenFactory.meta('annotations'),\n  hideFromDiscovery: tokenFactory.meta('hideFromDiscovery'),\n  examples: tokenFactory.meta('examples'),\n  ui: tokenFactory.meta('ui'), // UI template configuration\n  metadata: tokenFactory.meta('metadata'), // used in tool({}) construction\n} as const satisfies RawMetadataShape<ToolMetadata, ExtendFrontMcpToolMetadata>;\n\nexport const extendedToolMetadata = tokenFactory.meta('extendedToolMetadata');\n"]}

package/src/common/types/auth/jwt.types.d.ts

@@ -28,37 +28,15 @@ export interface JWKParameters {
 export declare const jwkParametersSchema: z.ZodObject<{
     kty: z.ZodOptional<z.ZodString>;
     alg: z.ZodOptional<z.ZodString>;
-    key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
     ext: z.ZodOptional<z.ZodBoolean>;
     use: z.ZodOptional<z.ZodString>;
-    x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
     x5t: z.ZodOptional<z.ZodString>;
     'x5t#S256': z.ZodOptional<z.ZodString>;
     x5u: z.ZodOptional<z.ZodString>;
     kid: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    kty?: string | undefined;
-    alg?: string | undefined;
-    key_ops?: string[] | undefined;
-    ext?: boolean | undefined;
-    use?: string | undefined;
-    x5c?: string[] | undefined;
-    x5t?: string | undefined;
-    'x5t#S256'?: string | undefined;
-    x5u?: string | undefined;
-    kid?: string | undefined;
-}, {
-    kty?: string | undefined;
-    alg?: string | undefined;
-    key_ops?: string[] | undefined;
-    ext?: boolean | undefined;
-    use?: string | undefined;
-    x5c?: string[] | undefined;
-    x5t?: string | undefined;
-    'x5t#S256'?: string | undefined;
-    x5u?: string | undefined;
-    kid?: string | undefined;
-}>;
+}, z.core.$strip>;
 export interface JWK extends JWKParameters {
     /**
      * - EC JWK "crv" (Curve) Parameter
@@ -104,9 +82,5 @@ export interface JSONWebKeySet {
     keys: JWK[];
 }
 export declare const jsonWebKeySetSchema: z.ZodObject<{
-    keys: z.ZodArray<z.ZodType<JWK, z.ZodTypeDef, JWK>, "many">;
-}, "strip", z.ZodTypeAny, {
-    keys: JWK[];
-}, {
-    keys: JWK[];
-}>;
+    keys: z.ZodArray<z.ZodType<JWK, unknown, z.core.$ZodTypeInternals<JWK, unknown>>>;
+}, z.core.$strip>;