@frontmcp/sdk 0.4.0 → 0.5.0

package/src/common/types/auth/session.types.d.ts

@@ -1,5 +1,27 @@
 import { z } from 'zod';
-import { HttpRequestIntent } from "../../utils";
+/**
+ * Transport protocol types (excludes non-transport intents like 'delete-session')
+ */
+export type TransportProtocolType = 'legacy-sse' | 'sse' | 'streamable-http' | 'stateful-http' | 'stateless-http';
+/**
+ * Known AI platform types that can be detected from client info.
+ * Used for platform-specific rendering and behavior customization.
+ */
+export type AIPlatformType = 'openai' | 'claude' | 'gemini' | 'cursor' | 'continue' | 'cody' | 'generic-mcp' | 'ext-apps' | 'unknown';
+/**
+ * Zod schema for AIPlatformType validation
+ */
+export declare const aiPlatformTypeSchema: z.ZodEnum<{
+    unknown: "unknown";
+    continue: "continue";
+    openai: "openai";
+    claude: "claude";
+    gemini: "gemini";
+    cursor: "cursor";
+    cody: "cody";
+    "generic-mcp": "generic-mcp";
+    "ext-apps": "ext-apps";
+}>;
 /**
  * Decoded JWT payload (if any) or empty object
  */
@@ -22,242 +44,125 @@ export declare const userClaimSchema: z.ZodObject<{
     sub: z.ZodString;
     exp: z.ZodOptional<z.ZodNumber>;
     iat: z.ZodOptional<z.ZodNumber>;
-    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+    aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
     email: z.ZodOptional<z.ZodString>;
     username: z.ZodOptional<z.ZodString>;
     preferred_username: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
     picture: z.ZodOptional<z.ZodString>;
-}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-    iss: z.ZodString;
-    sid: z.ZodOptional<z.ZodString>;
-    sub: z.ZodString;
-    exp: z.ZodOptional<z.ZodNumber>;
-    iat: z.ZodOptional<z.ZodNumber>;
-    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
-    email: z.ZodOptional<z.ZodString>;
-    username: z.ZodOptional<z.ZodString>;
-    preferred_username: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    picture: z.ZodOptional<z.ZodString>;
-}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-    iss: z.ZodString;
-    sid: z.ZodOptional<z.ZodString>;
-    sub: z.ZodString;
-    exp: z.ZodOptional<z.ZodNumber>;
-    iat: z.ZodOptional<z.ZodNumber>;
-    aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
-    email: z.ZodOptional<z.ZodString>;
-    username: z.ZodOptional<z.ZodString>;
-    preferred_username: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    picture: z.ZodOptional<z.ZodString>;
-}, z.ZodTypeAny, "passthrough">>;
+}, z.core.$loose>;
 export type SessionIdPayload = {
     nodeId: string;
     authSig: string;
     uuid: string;
     iat: number;
-    protocol: HttpRequestIntent;
+    protocol?: TransportProtocolType;
+    isPublic?: boolean;
+    platformType?: AIPlatformType;
 };
 export declare const sessionIdPayloadSchema: z.ZodObject<{
     nodeId: z.ZodString;
     authSig: z.ZodString;
     uuid: z.ZodString;
     iat: z.ZodNumber;
-    protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
-}, "strip", z.ZodTypeAny, {
-    uuid: string;
-    nodeId: string;
-    authSig: string;
-    iat: number;
-    protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-}, {
-    uuid: string;
-    nodeId: string;
-    authSig: string;
-    iat: number;
-    protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-}>;
+    protocol: z.ZodOptional<z.ZodEnum<{
+        "legacy-sse": "legacy-sse";
+        sse: "sse";
+        "streamable-http": "streamable-http";
+        "stateful-http": "stateful-http";
+        "stateless-http": "stateless-http";
+    }>>;
+    isPublic: z.ZodOptional<z.ZodBoolean>;
+    platformType: z.ZodOptional<z.ZodEnum<{
+        unknown: "unknown";
+        continue: "continue";
+        openai: "openai";
+        claude: "claude";
+        gemini: "gemini";
+        cursor: "cursor";
+        cody: "cody";
+        "generic-mcp": "generic-mcp";
+        "ext-apps": "ext-apps";
+    }>>;
+}, z.core.$strip>;
 export interface Authorization {
     token: string;
     user: UserClaim;
     session?: {
         id: string;
-        payload: SessionIdPayload;
+        /** Payload may be undefined when session validation failed but ID is passed for transport lookup */
+        payload?: SessionIdPayload;
     };
 }
 export declare const sessionIdSchema: z.ZodObject<{
     id: z.ZodString;
-    payload: z.ZodObject<{
+    payload: z.ZodOptional<z.ZodObject<{
         nodeId: z.ZodString;
         authSig: z.ZodString;
         uuid: z.ZodString;
         iat: z.ZodNumber;
-        protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
-    }, "strip", z.ZodTypeAny, {
-        uuid: string;
-        nodeId: string;
-        authSig: string;
-        iat: number;
-        protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-    }, {
-        uuid: string;
-        nodeId: string;
-        authSig: string;
-        iat: number;
-        protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-    }>;
-}, "strip", z.ZodTypeAny, {
-    id: string;
-    payload: {
-        uuid: string;
-        nodeId: string;
-        authSig: string;
-        iat: number;
-        protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-    };
-}, {
-    id: string;
-    payload: {
-        uuid: string;
-        nodeId: string;
-        authSig: string;
-        iat: number;
-        protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-    };
-}>;
+        protocol: z.ZodOptional<z.ZodEnum<{
+            "legacy-sse": "legacy-sse";
+            sse: "sse";
+            "streamable-http": "streamable-http";
+            "stateful-http": "stateful-http";
+            "stateless-http": "stateless-http";
+        }>>;
+        isPublic: z.ZodOptional<z.ZodBoolean>;
+        platformType: z.ZodOptional<z.ZodEnum<{
+            unknown: "unknown";
+            continue: "continue";
+            openai: "openai";
+            claude: "claude";
+            gemini: "gemini";
+            cursor: "cursor";
+            cody: "cody";
+            "generic-mcp": "generic-mcp";
+            "ext-apps": "ext-apps";
+        }>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export declare const authorizationSchema: z.ZodObject<{
     token: z.ZodString;
     session: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
-        payload: z.ZodObject<{
+        payload: z.ZodOptional<z.ZodObject<{
             nodeId: z.ZodString;
             authSig: z.ZodString;
             uuid: z.ZodString;
             iat: z.ZodNumber;
-            protocol: z.ZodEnum<["legacy-sse", "sse", "streamable-http", "stateful-http", "stateless-http"]>;
-        }, "strip", z.ZodTypeAny, {
-            uuid: string;
-            nodeId: string;
-            authSig: string;
-            iat: number;
-            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-        }, {
-            uuid: string;
-            nodeId: string;
-            authSig: string;
-            iat: number;
-            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-        }>;
-    }, "strip", z.ZodTypeAny, {
-        id: string;
-        payload: {
-            uuid: string;
-            nodeId: string;
-            authSig: string;
-            iat: number;
-            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-        };
-    }, {
-        id: string;
-        payload: {
-            uuid: string;
-            nodeId: string;
-            authSig: string;
-            iat: number;
-            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-        };
-    }>>;
+            protocol: z.ZodOptional<z.ZodEnum<{
+                "legacy-sse": "legacy-sse";
+                sse: "sse";
+                "streamable-http": "streamable-http";
+                "stateful-http": "stateful-http";
+                "stateless-http": "stateless-http";
+            }>>;
+            isPublic: z.ZodOptional<z.ZodBoolean>;
+            platformType: z.ZodOptional<z.ZodEnum<{
+                unknown: "unknown";
+                continue: "continue";
+                openai: "openai";
+                claude: "claude";
+                gemini: "gemini";
+                cursor: "cursor";
+                cody: "cody";
+                "generic-mcp": "generic-mcp";
+                "ext-apps": "ext-apps";
+            }>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
     user: z.ZodObject<{
         iss: z.ZodString;
         sid: z.ZodOptional<z.ZodString>;
         sub: z.ZodString;
         exp: z.ZodOptional<z.ZodNumber>;
         iat: z.ZodOptional<z.ZodNumber>;
-        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
-        email: z.ZodOptional<z.ZodString>;
-        username: z.ZodOptional<z.ZodString>;
-        preferred_username: z.ZodOptional<z.ZodString>;
-        name: z.ZodOptional<z.ZodString>;
-        picture: z.ZodOptional<z.ZodString>;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        iss: z.ZodString;
-        sid: z.ZodOptional<z.ZodString>;
-        sub: z.ZodString;
-        exp: z.ZodOptional<z.ZodNumber>;
-        iat: z.ZodOptional<z.ZodNumber>;
-        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
-        email: z.ZodOptional<z.ZodString>;
-        username: z.ZodOptional<z.ZodString>;
-        preferred_username: z.ZodOptional<z.ZodString>;
-        name: z.ZodOptional<z.ZodString>;
-        picture: z.ZodOptional<z.ZodString>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        iss: z.ZodString;
-        sid: z.ZodOptional<z.ZodString>;
-        sub: z.ZodString;
-        exp: z.ZodOptional<z.ZodNumber>;
-        iat: z.ZodOptional<z.ZodNumber>;
-        aud: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>>;
+        aud: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodArray<z.ZodString>]>>;
         email: z.ZodOptional<z.ZodString>;
         username: z.ZodOptional<z.ZodString>;
         preferred_username: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         picture: z.ZodOptional<z.ZodString>;
-    }, z.ZodTypeAny, "passthrough">>;
-}, "strip", z.ZodTypeAny, {
-    token: string;
-    user: {
-        sub: string;
-        iss: string;
-        name?: string | undefined;
-        email?: string | undefined;
-        iat?: number | undefined;
-        sid?: string | undefined;
-        exp?: number | undefined;
-        aud?: string | string[] | undefined;
-        username?: string | undefined;
-        preferred_username?: string | undefined;
-        picture?: string | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-    session?: {
-        id: string;
-        payload: {
-            uuid: string;
-            nodeId: string;
-            authSig: string;
-            iat: number;
-            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-        };
-    } | undefined;
-}, {
-    token: string;
-    user: {
-        sub: string;
-        iss: string;
-        name?: string | undefined;
-        email?: string | undefined;
-        iat?: number | undefined;
-        sid?: string | undefined;
-        exp?: number | undefined;
-        aud?: string | string[] | undefined;
-        username?: string | undefined;
-        preferred_username?: string | undefined;
-        picture?: string | undefined;
-    } & {
-        [k: string]: unknown;
-    };
-    session?: {
-        id: string;
-        payload: {
-            uuid: string;
-            nodeId: string;
-            authSig: string;
-            iat: number;
-            protocol: "sse" | "legacy-sse" | "streamable-http" | "stateful-http" | "stateless-http";
-        };
-    } | undefined;
-}>;
+    }, z.core.$loose>;
+}, z.core.$strip>;

package/src/common/types/auth/session.types.js

@@ -1,8 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.authorizationSchema = exports.sessionIdSchema = exports.sessionIdPayloadSchema = exports.userClaimSchema = void 0;
+exports.authorizationSchema = exports.sessionIdSchema = exports.sessionIdPayloadSchema = exports.userClaimSchema = exports.aiPlatformTypeSchema = void 0;
 const zod_1 = require("zod");
-exports.userClaimSchema = zod_1.z.object({
+/**
+ * Zod schema for AIPlatformType validation
+ */
+exports.aiPlatformTypeSchema = zod_1.z.enum([
+    'openai',
+    'claude',
+    'gemini',
+    'cursor',
+    'continue',
+    'cody',
+    'generic-mcp',
+    'ext-apps',
+    'unknown',
+]);
+exports.userClaimSchema = zod_1.z
+    .object({
     iss: zod_1.z.string(),
     sid: zod_1.z.string().optional(),
     sub: zod_1.z.string(),
@@ -14,23 +29,21 @@ exports.userClaimSchema = zod_1.z.object({
     preferred_username: zod_1.z.string().optional(),
     name: zod_1.z.string().optional(),
     picture: zod_1.z.string().optional(),
-}).passthrough();
+})
+    .passthrough();
 exports.sessionIdPayloadSchema = zod_1.z.object({
     nodeId: zod_1.z.string(),
     authSig: zod_1.z.string(),
     uuid: zod_1.z.string().uuid(),
     iat: zod_1.z.number(),
-    protocol: zod_1.z.enum([
-        'legacy-sse',
-        'sse',
-        'streamable-http',
-        'stateful-http',
-        'stateless-http',
-    ]),
+    protocol: zod_1.z.enum(['legacy-sse', 'sse', 'streamable-http', 'stateful-http', 'stateless-http']).optional(),
+    isPublic: zod_1.z.boolean().optional(),
+    platformType: exports.aiPlatformTypeSchema.optional(),
 });
 exports.sessionIdSchema = zod_1.z.object({
     id: zod_1.z.string(),
-    payload: exports.sessionIdPayloadSchema,
+    /** Payload is optional - may be undefined when session validation failed but ID is passed for transport lookup */
+    payload: exports.sessionIdPayloadSchema.optional(),
 });
 exports.authorizationSchema = zod_1.z.object({
     token: zod_1.z.string(),

package/src/common/types/auth/session.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.types.js","sourceRoot":"","sources":["../../../../../src/common/types/auth/session.types.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAoBX,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACE,CAAC,CAAC,WAAW,EAAE,CAAC;AAerC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACvB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC;QACf,YAAY;QACZ,KAAK;QACL,iBAAiB;QACjB,eAAe;QACf,gBAAgB;KACjB,CAAC;CACqC,CAAC,CAAC;AAY9B,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,8BAAsB;CACiC,CAAC,CAAC;AAEvD,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,uBAAe,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,uBAAe;CACe,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport {RawZodShape} from \"../common.types\";\nimport {HttpRequestIntent} from \"../../utils\";\n\n/**\n * Decoded JWT payload (if any) or empty object\n */\nexport type UserClaim = {\n  iss: string;\n  sid?: string;\n  sub: string;\n  exp?: number;\n  iat?: number;\n  aud?: string | string[];\n  email?: string;\n  username?: string;\n  preferred_username?: string;\n  name?: string;\n  picture?: string;\n}\nexport const userClaimSchema = z.object({\n  iss: z.string(),\n  sid: z.string().optional(),\n  sub: z.string(),\n  exp: z.number().optional(),\n  iat: z.number().optional(),\n  aud: z.union([z.string(), z.array(z.string())]).optional(),\n  email: z.string().optional(),\n  username: z.string().optional(),\n  preferred_username: z.string().optional(),\n  name: z.string().optional(),\n  picture: z.string().optional(),\n} satisfies RawZodShape<UserClaim>).passthrough();\n\n\nexport type SessionIdPayload = {\n  /* The actual node id that handle the transport session */\n  nodeId: string;\n  /* The signature of the token used to create the session */\n  authSig: string;\n  /* The unique id of the session */\n  uuid: string;\n  /* The timestamp of the session creation */\n  iat: number;\n  /* The protocol used in existing transport */\n  protocol: HttpRequestIntent;\n}\nexport const sessionIdPayloadSchema = z.object({\n  nodeId: z.string(),\n  authSig: z.string(),\n  uuid: z.string().uuid(),\n  iat: z.number(),\n  protocol: z.enum([\n    'legacy-sse',\n    'sse',\n    'streamable-http',\n    'stateful-http',\n    'stateless-http',\n  ]),\n} satisfies RawZodShape<SessionIdPayload>);\n\n\nexport interface Authorization {\n  token: string;\n  user: UserClaim;\n  session?: {\n    id: string;\n    payload: SessionIdPayload;\n  };\n}\n\nexport const sessionIdSchema = z.object({\n  id: z.string(),\n  payload: sessionIdPayloadSchema,\n} satisfies RawZodShape<{ id: string, payload: SessionIdPayload }>);\n\nexport const authorizationSchema = z.object({\n  token: z.string(),\n  session: sessionIdSchema.optional(),\n  user: userClaimSchema,\n} satisfies RawZodShape<Authorization>);\n"]}
+{"version":3,"file":"session.types.js","sourceRoot":"","sources":["../../../../../src/common/types/auth/session.types.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAuBxB;;GAEG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC;IACzC,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,aAAa;IACb,UAAU;IACV,SAAS;CACV,CAAC,CAAC;AAkBU,QAAA,eAAe,GAAG,OAAC;KAC7B,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACE,CAAC;KAClC,WAAW,EAAE,CAAC;AAkBJ,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACvB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE;IACf,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxG,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,4BAAoB,CAAC,QAAQ,EAAE;CACN,CAAC,CAAC;AAY9B,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,kHAAkH;IAClH,OAAO,EAAE,8BAAsB,CAAC,QAAQ,EAAE;CACuB,CAAC,CAAC;AAExD,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,uBAAe,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,uBAAe;CACe,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\nimport { RawZodShape } from '../common.types';\n\n/**\n * Transport protocol types (excludes non-transport intents like 'delete-session')\n */\nexport type TransportProtocolType = 'legacy-sse' | 'sse' | 'streamable-http' | 'stateful-http' | 'stateless-http';\n\n/**\n * Known AI platform types that can be detected from client info.\n * Used for platform-specific rendering and behavior customization.\n */\nexport type AIPlatformType =\n  | 'openai' // ChatGPT, OpenAI API clients\n  | 'claude' // Claude Desktop, Claude API clients\n  | 'gemini' // Google Gemini clients\n  | 'cursor' // Cursor IDE\n  | 'continue' // Continue.dev\n  | 'cody' // Sourcegraph Cody\n  | 'generic-mcp' // Generic MCP client\n  | 'ext-apps' // MCP Apps spec compliant clients (io.modelcontextprotocol/ui extension)\n  | 'unknown'; // Unknown client\n\n/**\n * Zod schema for AIPlatformType validation\n */\nexport const aiPlatformTypeSchema = z.enum([\n  'openai',\n  'claude',\n  'gemini',\n  'cursor',\n  'continue',\n  'cody',\n  'generic-mcp',\n  'ext-apps',\n  'unknown',\n]);\n\n/**\n * Decoded JWT payload (if any) or empty object\n */\nexport type UserClaim = {\n  iss: string;\n  sid?: string;\n  sub: string;\n  exp?: number;\n  iat?: number;\n  aud?: string | string[];\n  email?: string;\n  username?: string;\n  preferred_username?: string;\n  name?: string;\n  picture?: string;\n};\nexport const userClaimSchema = z\n  .object({\n    iss: z.string(),\n    sid: z.string().optional(),\n    sub: z.string(),\n    exp: z.number().optional(),\n    iat: z.number().optional(),\n    aud: z.union([z.string(), z.array(z.string())]).optional(),\n    email: z.string().optional(),\n    username: z.string().optional(),\n    preferred_username: z.string().optional(),\n    name: z.string().optional(),\n    picture: z.string().optional(),\n  } satisfies RawZodShape<UserClaim>)\n  .passthrough();\n\nexport type SessionIdPayload = {\n  /* The actual node id that handle the transport session */\n  nodeId: string;\n  /* The signature of the token used to create the session */\n  authSig: string;\n  /* The unique id of the session */\n  uuid: string;\n  /* The timestamp of the session creation */\n  iat: number;\n  /* The protocol used in existing transport - optional for stateless mode */\n  protocol?: TransportProtocolType;\n  /* True if session was created in public mode (anonymous access) */\n  isPublic?: boolean;\n  /* The detected AI platform type from MCP initialize clientInfo */\n  platformType?: AIPlatformType;\n};\nexport const sessionIdPayloadSchema = z.object({\n  nodeId: z.string(),\n  authSig: z.string(),\n  uuid: z.string().uuid(),\n  iat: z.number(),\n  protocol: z.enum(['legacy-sse', 'sse', 'streamable-http', 'stateful-http', 'stateless-http']).optional(),\n  isPublic: z.boolean().optional(),\n  platformType: aiPlatformTypeSchema.optional(),\n} satisfies RawZodShape<SessionIdPayload>);\n\nexport interface Authorization {\n  token: string;\n  user: UserClaim;\n  session?: {\n    id: string;\n    /** Payload may be undefined when session validation failed but ID is passed for transport lookup */\n    payload?: SessionIdPayload;\n  };\n}\n\nexport const sessionIdSchema = z.object({\n  id: z.string(),\n  /** Payload is optional - may be undefined when session validation failed but ID is passed for transport lookup */\n  payload: sessionIdPayloadSchema.optional(),\n} satisfies RawZodShape<{ id: string; payload?: SessionIdPayload }>);\n\nexport const authorizationSchema = z.object({\n  token: z.string(),\n  session: sessionIdSchema.optional(),\n  user: userClaimSchema,\n} satisfies RawZodShape<Authorization>);\n"]}