@frontmcp/sdk 0.6.0 → 0.6.2

package/{src/auth → auth}/instances/instance.local-primary-auth.d.ts

@@ -1,6 +1,6 @@
 import { URL } from 'url';
 import { FrontMcpAuth, FrontMcpLogger, ScopeEntry, ServerRequest, JWK } from '../../common';
-import { PublicAuthOptions, OrchestratedLocalOptions, OrchestratedRemoteOptions } from '../../common/types/options/auth.options';
+import { PublicAuthOptions, OrchestratedLocalOptions, OrchestratedRemoteOptions } from '../../common/types/options/auth';
 import ProviderRegistry from '../../provider/provider.registry';
 import { AuthorizationStore } from '../session/authorization.store';
 /**

package/{src/auth → auth}/instances/instance.remote-primary-auth.d.ts

@@ -1,5 +1,5 @@
 import { FrontMcpAuth, ScopeEntry, ServerRequest } from '../../common';
-import { TransparentAuthOptions } from '../../common/types/options/auth.options';
+import { TransparentAuthOptions } from '../../common/types/options/auth';
 import { URL } from 'url';
 import ProviderRegistry from '../../provider/provider.registry';
 export declare class RemotePrimaryAuth extends FrontMcpAuth<TransparentAuthOptions> {

package/{src/auth → auth}/session/index.d.ts

@@ -1,5 +1,6 @@
 export * from './transport-session.types';
 export { TransportSessionManager, InMemorySessionStore } from './transport-session.manager';
 export { RedisSessionStore } from './redis-session.store';
+export { VercelKvSessionStore } from './vercel-kv-session.store';
 export * from './authorization.store';
 export * from './authorization-vault';

package/auth/session/vercel-kv-session.store.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Vercel KV Session Store
+ *
+ * Session store implementation using Vercel KV (edge-compatible REST-based key-value store).
+ * Uses dynamic import to avoid bundling @vercel/kv for non-Vercel deployments.
+ *
+ * @see https://vercel.com/docs/storage/vercel-kv
+ */
+import { SessionStore, StoredSession } from './transport-session.types';
+import { FrontMcpLogger } from '../../common/interfaces/logger.interface';
+import type { VercelKvProviderOptions } from '../../common/types/options/redis.options';
+export interface VercelKvSessionConfig {
+    /**
+     * KV REST API URL
+     * @default process.env.KV_REST_API_URL
+     */
+    url?: string;
+    /**
+     * KV REST API Token
+     * @default process.env.KV_REST_API_TOKEN
+     */
+    token?: string;
+    /**
+     * Key prefix for session keys
+     * @default 'mcp:session:'
+     */
+    keyPrefix?: string;
+    /**
+     * Default TTL in milliseconds for session extension on access
+     * @default 3600000 (1 hour)
+     */
+    defaultTtlMs?: number;
+}
+/**
+ * Vercel KV-backed session store implementation
+ *
+ * Provides persistent session storage for edge deployments using Vercel KV.
+ * Sessions are stored as JSON with optional TTL.
+ */
+export declare class VercelKvSessionStore implements SessionStore {
+    private kv;
+    private connectPromise;
+    private readonly keyPrefix;
+    private readonly defaultTtlMs;
+    private readonly logger?;
+    private readonly config;
+    constructor(config: VercelKvSessionConfig | VercelKvProviderOptions, logger?: FrontMcpLogger);
+    /**
+     * Connect to Vercel KV
+     * Uses dynamic import to avoid bundling @vercel/kv when not used.
+     * Thread-safe: concurrent calls will share the same connection promise.
+     */
+    connect(): Promise<void>;
+    private doConnect;
+    private ensureConnected;
+    /**
+     * Get the full key for a session ID
+     * @throws Error if sessionId is empty
+     */
+    private key;
+    /**
+     * Get a stored session by ID
+     *
+     * Note: Vercel KV doesn't support GETEX, so we use GET + PEXPIRE separately.
+     * This is slightly less atomic than Redis GETEX but sufficient for most use cases.
+     */
+    get(sessionId: string): Promise<StoredSession | null>;
+    /**
+     * Store a session with optional TTL
+     */
+    set(sessionId: string, session: StoredSession, ttlMs?: number): Promise<void>;
+    /**
+     * Delete a session
+     */
+    delete(sessionId: string): Promise<void>;
+    /**
+     * Check if a session exists
+     */
+    exists(sessionId: string): Promise<boolean>;
+    /**
+     * Allocate a new session ID
+     */
+    allocId(): string;
+    /**
+     * Disconnect from Vercel KV
+     * Vercel KV uses REST API, so there's no persistent connection to close
+     */
+    disconnect(): Promise<void>;
+    /**
+     * Test Vercel KV connection by setting and getting a test key.
+     * Useful for validating connection on startup.
+     *
+     * @returns true if connection is healthy, false otherwise
+     */
+    ping(): Promise<boolean>;
+}

package/{src/common → common}/interfaces/internal/primary-auth-provider.interface.d.ts

@@ -26,13 +26,10 @@ export declare abstract class FrontMcpAuth<Options extends AuthOptions = AuthOpt
     abstract fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
     abstract validate(request: ServerRequest): Promise<void>;
     abstract get issuer(): string;
-    /**
-     * Default transport configuration when not specified
-     */
-    private static readonly DEFAULT_TRANSPORT;
     /**
      * Get transport configuration with all defaults applied.
      * Returns default values when transport is not configured.
+     * Uses DEFAULT_TRANSPORT_CONFIG as single source of truth for defaults.
      */
     get transport(): TransportConfig;
 }