@frontmcp/sdk 0.6.1 → 0.6.2

package/src/common/entries/provider.entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider.entry.js","sourceRoot":"","sources":["../../../../src/common/entries/provider.entry.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AAMzC,MAAe,aAAc,SAAQ,sBAA8D;CAGlG;AAIC,sCAAa","sourcesContent":["import { BaseEntry } from './base.entry';\nimport { ProviderRecord } from '../records';\nimport { ProviderInterface } from '../interfaces';\nimport { ProviderMetadata } from '../metadata';\n\n\nabstract class ProviderEntry extends BaseEntry<ProviderRecord, ProviderInterface, ProviderMetadata> {\n\n\n}\n\n\nexport {\n  ProviderEntry,\n};"]}

package/src/common/entries/resource.entry.js

@@ -1,35 +0,0 @@
-"use strict";
-// file: libs/sdk/src/common/entries/resource.entry.ts
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResourceEntry = void 0;
-const base_entry_1 = require("./base.entry");
-/**
- * Base class for resource entries.
- * @template Params - Type for URI template parameters (e.g., `{ userId: string }`)
- * @template Out - Type for the resource output
- */
-class ResourceEntry extends base_entry_1.BaseEntry {
-    owner;
-    /**
-     * The name of the resource, as declared in the metadata.
-     */
-    name;
-    /**
-     * The full name of the resource, including the owner name as prefix.
-     */
-    fullName;
-    /**
-     * URI for static resources (from ResourceMetadata)
-     */
-    uri;
-    /**
-     * URI template for template resources (from ResourceTemplateMetadata)
-     */
-    uriTemplate;
-    /**
-     * Whether this resource is a template (has uriTemplate instead of uri)
-     */
-    isTemplate;
-}
-exports.ResourceEntry = ResourceEntry;
-//# sourceMappingURL=resource.entry.js.map

package/src/common/entries/resource.entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource.entry.js","sourceRoot":"","sources":["../../../../src/common/entries/resource.entry.ts"],"names":[],"mappings":";AAAA,sDAAsD;;;AAEtD,6CAAwD;AAexD;;;;GAIG;AACH,MAAsB,aAGpB,SAAQ,sBAAyG;IACjH,KAAK,CAAgB;IAErB;;OAEG;IACH,IAAI,CAAS;IAEb;;OAEG;IACH,QAAQ,CAAS;IAEjB;;OAEG;IACH,GAAG,CAAU;IAEb;;OAEG;IACH,WAAW,CAAU;IAErB;;OAEG;IACH,UAAU,CAAU;CA0BrB;AAvDD,sCAuDC","sourcesContent":["// file: libs/sdk/src/common/entries/resource.entry.ts\n\nimport { BaseEntry, EntryOwnerRef } from './base.entry';\nimport { AnyResourceRecord } from '../records';\nimport { ResourceContext, ResourceInterface } from '../interfaces';\nimport { ResourceMetadata, ResourceTemplateMetadata } from '../metadata';\nimport { ReadResourceResult, Request, Notification } from '@modelcontextprotocol/sdk/types.js';\nimport { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';\nimport { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';\n\nexport type ResourceReadExtra = RequestHandlerExtra<Request, Notification> & {\n  authInfo: AuthInfo;\n};\n\nexport type ParsedResourceResult = ReadResourceResult;\nexport type ResourceSafeTransformResult<T> = { success: true; data: T } | { success: false; error: Error };\n\n/**\n * Base class for resource entries.\n * @template Params - Type for URI template parameters (e.g., `{ userId: string }`)\n * @template Out - Type for the resource output\n */\nexport abstract class ResourceEntry<\n  Params extends Record<string, string> = Record<string, string>,\n  Out = unknown,\n> extends BaseEntry<AnyResourceRecord, ResourceInterface<Params, Out>, ResourceMetadata | ResourceTemplateMetadata> {\n  owner: EntryOwnerRef;\n\n  /**\n   * The name of the resource, as declared in the metadata.\n   */\n  name: string;\n\n  /**\n   * The full name of the resource, including the owner name as prefix.\n   */\n  fullName: string;\n\n  /**\n   * URI for static resources (from ResourceMetadata)\n   */\n  uri?: string;\n\n  /**\n   * URI template for template resources (from ResourceTemplateMetadata)\n   */\n  uriTemplate?: string;\n\n  /**\n   * Whether this resource is a template (has uriTemplate instead of uri)\n   */\n  isTemplate: boolean;\n\n  /**\n   * Create a resource context (class or function wrapper).\n   * @param uri The actual URI being read (for templates, this includes resolved params)\n   * @param params Extracted URI template parameters (empty for static resources)\n   * @param ctx Request context with auth info\n   */\n  abstract create(uri: string, params: Params, ctx: ResourceReadExtra): ResourceContext<Params, Out>;\n\n  /**\n   * Convert the raw resource return value (Out) into an MCP ReadResourceResult.\n   */\n  abstract parseOutput(result: Out): ParsedResourceResult;\n\n  /**\n   * Safe version of parseOutput that returns success/error instead of throwing.\n   */\n  abstract safeParseOutput(raw: Out): ResourceSafeTransformResult<ParsedResourceResult>;\n\n  /**\n   * Match a URI against this resource.\n   * For static resources: exact match against uri\n   * For templates: pattern match and extract parameters\n   */\n  abstract matchUri(uri: string): { matches: boolean; params: Params };\n}\n"]}

package/src/common/entries/scope.entry.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ScopeEntry = void 0;
-const base_entry_1 = require("./base.entry");
-const utils_1 = require("../utils");
-class ScopeEntry extends base_entry_1.BaseEntry {
-    get fullPath() {
-        const prefix = (0, utils_1.normalizeEntryPrefix)(this.entryPath ?? '');
-        const scope = (0, utils_1.normalizeScopeBase)(this.routeBase ?? '');
-        return `${prefix}${scope}`;
-    }
-}
-exports.ScopeEntry = ScopeEntry;
-//# sourceMappingURL=scope.entry.js.map

package/src/common/entries/scope.entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scope.entry.js","sourceRoot":"","sources":["../../../../src/common/entries/scope.entry.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AAoBzC,oCAAoE;AAGpE,MAAsB,UAAW,SAAQ,sBAAqD;IAM5F,IAAI,QAAQ;QACV,MAAM,MAAM,GAAG,IAAA,4BAAoB,EAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAA,0BAAkB,EAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;IAC7B,CAAC;CA2BF;AArCD,gCAqCC","sourcesContent":["import { BaseEntry } from './base.entry';\nimport { ScopeRecord } from '../records';\nimport {\n  ScopeInterface,\n  ProviderRegistryInterface,\n  AppRegistryInterface,\n  AuthRegistryInterface,\n  FrontMcpAuth,\n  Token,\n  FlowInputOf,\n  FlowOutputOf,\n  Type,\n  FlowType,\n  FrontMcpLogger,\n  ToolRegistryInterface,\n  HookRegistryInterface,\n  ResourceRegistryInterface,\n  PromptRegistryInterface,\n} from '../interfaces';\nimport { FlowName, ScopeMetadata } from '../metadata';\nimport { normalizeEntryPrefix, normalizeScopeBase } from '../utils';\nimport type { NotificationService } from '../../notification';\n\nexport abstract class ScopeEntry extends BaseEntry<ScopeRecord, ScopeInterface, ScopeMetadata> {\n  abstract readonly id: string;\n  abstract readonly entryPath: string;\n  abstract readonly routeBase: string;\n  abstract readonly logger: FrontMcpLogger;\n\n  get fullPath(): string {\n    const prefix = normalizeEntryPrefix(this.entryPath ?? '');\n    const scope = normalizeScopeBase(this.routeBase ?? '');\n    return `${prefix}${scope}`;\n  }\n\n  abstract get auth(): FrontMcpAuth;\n\n  abstract get hooks(): HookRegistryInterface;\n\n  abstract get authProviders(): AuthRegistryInterface;\n\n  abstract get providers(): ProviderRegistryInterface;\n\n  abstract get apps(): AppRegistryInterface;\n\n  abstract get tools(): ToolRegistryInterface;\n\n  abstract get resources(): ResourceRegistryInterface;\n\n  abstract get prompts(): PromptRegistryInterface;\n\n  abstract get notifications(): NotificationService;\n\n  abstract registryFlows(...flows: FlowType[]): Promise<void>;\n\n  abstract runFlow<Name extends FlowName>(\n    name: Name,\n    input: FlowInputOf<Name>,\n    additionalDeps?: Map<Token, Type>,\n  ): Promise<FlowOutputOf<Name> | undefined>;\n}\n"]}

package/src/common/entries/tool.entry.js

@@ -1,31 +0,0 @@
-"use strict";
-// file: libs/sdk/src/common/entries/tool.entry.ts
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ToolEntry = void 0;
-const base_entry_1 = require("./base.entry");
-class ToolEntry extends base_entry_1.BaseEntry {
-    owner;
-    /**
-     * The name of the tool, as declared in the metadata.
-     */
-    name;
-    /**
-     * The full name of the tool, including the owner name as prefix.
-     */
-    fullName;
-    inputSchema;
-    // This is whatever JSON-schema-ish thing you store for input; keeping type loose
-    rawInputSchema;
-    // This is your *metadata* outputSchema (literals / zod / raw shapes / arrays)
-    outputSchema;
-    /**
-     * Accessor used by tools/list to expose the tool's declared outputSchema.
-     * This returns the exact value from metadata (string literal, zod schema,
-     * raw shape, or an array of those).
-     */
-    getOutputSchema() {
-        return this.outputSchema;
-    }
-}
-exports.ToolEntry = ToolEntry;
-//# sourceMappingURL=tool.entry.js.map

package/src/common/entries/tool.entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool.entry.js","sourceRoot":"","sources":["../../../../src/common/entries/tool.entry.ts"],"names":[],"mappings":";AAAA,kDAAkD;;;AAElD,6CAAwD;AAiBxD,MAAsB,SAKpB,SAAQ,sBAA8E;IACtF,KAAK,CAAgB;IACrB;;OAEG;IACH,IAAI,CAAS;IACb;;OAEG;IACH,QAAQ,CAAS;IAEjB,WAAW,CAAW;IACtB,iFAAiF;IACjF,cAAc,CAAM;IACpB,8EAA8E;IAC9E,YAAY,CAAa;IAEzB;;;;OAIG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CAsBF;AAnDD,8BAmDC","sourcesContent":["// file: libs/sdk/src/common/entries/tool.entry.ts\n\nimport { BaseEntry, EntryOwnerRef } from './base.entry';\nimport { ToolRecord } from '../records';\nimport { ToolContext } from '../interfaces';\nimport { ToolInputType, ToolMetadata, ToolOutputType } from '../metadata';\nimport { Request, Notification, CallToolRequest, CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { RequestHandlerExtra } from '@modelcontextprotocol/sdk/shared/protocol.js';\nimport { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';\nimport { ToolInputOf, ToolOutputOf } from '../decorators';\n\nexport type ToolCallArgs = CallToolRequest['params']['arguments'];\nexport type ToolCallExtra = RequestHandlerExtra<Request, Notification> & {\n  authInfo: AuthInfo;\n};\n\nexport type ParsedToolResult = CallToolResult;\nexport type SafeTransformResult<T> = { success: true; data: T } | { success: false; error: Error };\n\nexport abstract class ToolEntry<\n  InSchema extends ToolInputType = ToolInputType,\n  OutSchema extends ToolOutputType = ToolOutputType,\n  In = ToolInputOf<{ inputSchema: InSchema }>,\n  Out = ToolOutputOf<{ outputSchema: OutSchema }>,\n> extends BaseEntry<ToolRecord, ToolContext<InSchema, OutSchema, In, Out>, ToolMetadata> {\n  owner: EntryOwnerRef;\n  /**\n   * The name of the tool, as declared in the metadata.\n   */\n  name: string;\n  /**\n   * The full name of the tool, including the owner name as prefix.\n   */\n  fullName: string;\n\n  inputSchema: InSchema;\n  // This is whatever JSON-schema-ish thing you store for input; keeping type loose\n  rawInputSchema: any;\n  // This is your *metadata* outputSchema (literals / zod / raw shapes / arrays)\n  outputSchema?: OutSchema;\n\n  /**\n   * Accessor used by tools/list to expose the tool's declared outputSchema.\n   * This returns the exact value from metadata (string literal, zod schema,\n   * raw shape, or an array of those).\n   */\n  getOutputSchema(): OutSchema | undefined {\n    return this.outputSchema;\n  }\n\n  /**\n   * Create a tool context (class or function wrapper).\n   */\n  abstract create(input: ToolCallArgs, ctx: ToolCallExtra): ToolContext<InSchema, OutSchema, In, Out>;\n\n  /**\n   * Convert the raw tool request input into an MCP CallToolRequest-shaped object.\n   */\n  abstract parseInput(input: CallToolRequest['params']): CallToolRequest['params']['arguments'];\n\n  /**\n   * Convert the raw tool return value (Out) into an MCP CallToolResult-shaped object.\n   * Concrete logic is implemented in ToolInstance.\n   */\n  abstract parseOutput(result: Out | Partial<Out> | any): ParsedToolResult;\n  /**\n   * Convert the raw tool return value (Out) into an MCP CallToolResult-shaped object.\n   * Concrete logic is implemented in ToolInstance.\n   */\n  abstract safeParseOutput(raw: Out | Partial<Out> | any): SafeTransformResult<ParsedToolResult>;\n}\n"]}

package/src/common/flow/flow.utils.js

@@ -1,96 +0,0 @@
-"use strict";
-// file: libs/sdk/src/common/flow/flow.utils.ts
-// Shared utilities for list flows (tools/list, resources/list, etc.)
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseListInput = parseListInput;
-exports.resolveNameConflicts = resolveNameConflicts;
-exports.previewItems = previewItems;
-exports.detectConflicts = detectConflicts;
-const zod_1 = require("zod");
-const errors_1 = require("../../errors");
-/**
- * Parse list request input and validate method.
- * Common pattern used in tools/list, resources/list, etc.
- *
- * @param rawInput - Raw input from the flow
- * @param schema - Zod schema for the input
- * @param expectedMethod - Expected MCP method (e.g., 'tools/list', 'resources/list')
- * @returns Parsed params including cursor
- */
-function parseListInput(rawInput, schema, expectedMethod) {
-    let method;
-    let params;
-    try {
-        const inputData = schema.parse(rawInput);
-        method = inputData.request.method;
-        params = inputData.request.params ?? {};
-    }
-    catch (e) {
-        throw new errors_1.InvalidInputError('Invalid request format', e instanceof zod_1.z.ZodError ? e.issues : undefined);
-    }
-    if (method !== expectedMethod) {
-        throw new errors_1.InvalidMethodError(method, expectedMethod);
-    }
-    return {
-        cursor: params?.['cursor'],
-        params,
-    };
-}
-/**
- * Resolve name conflicts by prefixing with owner name.
- * Used for tools, resources, prompts, etc.
- *
- * @param entries - Array of entries with owner names
- * @param getBaseName - Function to extract base name from entry
- * @returns Resolved entries with final names
- */
-function resolveNameConflicts(entries, getBaseName) {
-    // Count occurrences of each base name
-    const counts = new Map();
-    for (const { entry } of entries) {
-        const baseName = getBaseName(entry);
-        counts.set(baseName, (counts.get(baseName) ?? 0) + 1);
-    }
-    // Find which names have conflicts (appear more than once)
-    const conflicts = new Set([...counts.entries()].filter(([, n]) => n > 1).map(([k]) => k));
-    // Resolve by prefixing conflicting names with owner
-    return entries.map(({ ownerName, entry }) => {
-        const baseName = getBaseName(entry);
-        const finalName = conflicts.has(baseName) ? `${ownerName}:${baseName}` : baseName;
-        return { ownerName, entry, finalName };
-    });
-}
-/**
- * Get a preview of items for logging (first N items).
- *
- * @param items - Array of items
- * @param getName - Function to extract display name from item
- * @param n - Number of items to preview (default: 5)
- * @returns Formatted preview string
- */
-function previewItems(items, getName, n = 5) {
-    const names = items.slice(0, n).map(getName);
-    const preview = names.join(', ');
-    const extra = items.length > n ? `, +${items.length - n} more` : '';
-    return `${preview}${extra}`;
-}
-/**
- * Get the count of conflicts from entries.
- *
- * @param entries - Array of entries
- * @param getBaseName - Function to extract base name from entry
- * @returns Object with conflict count and conflict names
- */
-function detectConflicts(entries, getBaseName) {
-    const counts = new Map();
-    for (const entry of entries) {
-        const baseName = getBaseName(entry);
-        counts.set(baseName, (counts.get(baseName) ?? 0) + 1);
-    }
-    const conflictNames = [...counts.entries()].filter(([, n]) => n > 1).map(([k]) => k);
-    return {
-        count: conflictNames.length,
-        names: conflictNames,
-    };
-}
-//# sourceMappingURL=flow.utils.js.map

package/src/common/flow/flow.utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"flow.utils.js","sourceRoot":"","sources":["../../../../src/common/flow/flow.utils.ts"],"names":[],"mappings":";AAAA,+CAA+C;AAC/C,qEAAqE;;AAcrE,wCAwBC;AAyBD,oDAoBC;AAUD,oCAKC;AASD,0CAgBC;AAzHD,6BAAiC;AACjC,yCAAqE;AAErE;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAC5B,QAAiB,EACjB,MAAS,EACT,cAAsB;IAEtB,IAAI,MAAc,CAAC;IACnB,IAAI,MAA+B,CAAC;IAEpC,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAqE,CAAC;QAC7G,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,0BAAiB,CAAC,wBAAwB,EAAE,CAAC,YAAY,OAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxG,CAAC;IAED,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9B,MAAM,IAAI,2BAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAuB;QAChD,MAAM;KACP,CAAC;AACJ,CAAC;AAiBD;;;;;;;GAOG;AACH,SAAgB,oBAAoB,CAClC,OAAwB,EACxB,WAAiC;IAEjC,sCAAsC;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,0DAA0D;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAElG,oDAAoD;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,YAAY,CAAI,KAAU,EAAE,OAA4B,EAAE,CAAC,GAAG,CAAC;IAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,GAAG,OAAO,GAAG,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,OAAY,EACZ,WAAiC;IAEjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAErF,OAAO;QACL,KAAK,EAAE,aAAa,CAAC,MAAM;QAC3B,KAAK,EAAE,aAAa;KACrB,CAAC;AACJ,CAAC","sourcesContent":["// file: libs/sdk/src/common/flow/flow.utils.ts\n// Shared utilities for list flows (tools/list, resources/list, etc.)\n\nimport { z, ZodType } from 'zod';\nimport { InvalidInputError, InvalidMethodError } from '../../errors';\n\n/**\n * Parse list request input and validate method.\n * Common pattern used in tools/list, resources/list, etc.\n *\n * @param rawInput - Raw input from the flow\n * @param schema - Zod schema for the input\n * @param expectedMethod - Expected MCP method (e.g., 'tools/list', 'resources/list')\n * @returns Parsed params including cursor\n */\nexport function parseListInput<T extends ZodType>(\n  rawInput: unknown,\n  schema: T,\n  expectedMethod: string,\n): { cursor?: string; params: Record<string, unknown> } {\n  let method: string;\n  let params: Record<string, unknown>;\n\n  try {\n    const inputData = schema.parse(rawInput) as { request: { method: string; params: Record<string, unknown> } };\n    method = inputData.request.method;\n    params = inputData.request.params ?? {};\n  } catch (e) {\n    throw new InvalidInputError('Invalid request format', e instanceof z.ZodError ? e.issues : undefined);\n  }\n\n  if (method !== expectedMethod) {\n    throw new InvalidMethodError(method, expectedMethod);\n  }\n\n  return {\n    cursor: params?.['cursor'] as string | undefined,\n    params,\n  };\n}\n\n/**\n * Entry with owner information for conflict resolution\n */\nexport interface OwnedEntry<T> {\n  ownerName: string;\n  entry: T;\n}\n\n/**\n * Resolved entry with final name after conflict resolution\n */\nexport interface ResolvedEntry<T> extends OwnedEntry<T> {\n  finalName: string;\n}\n\n/**\n * Resolve name conflicts by prefixing with owner name.\n * Used for tools, resources, prompts, etc.\n *\n * @param entries - Array of entries with owner names\n * @param getBaseName - Function to extract base name from entry\n * @returns Resolved entries with final names\n */\nexport function resolveNameConflicts<T>(\n  entries: OwnedEntry<T>[],\n  getBaseName: (entry: T) => string,\n): ResolvedEntry<T>[] {\n  // Count occurrences of each base name\n  const counts = new Map<string, number>();\n  for (const { entry } of entries) {\n    const baseName = getBaseName(entry);\n    counts.set(baseName, (counts.get(baseName) ?? 0) + 1);\n  }\n\n  // Find which names have conflicts (appear more than once)\n  const conflicts = new Set<string>([...counts.entries()].filter(([, n]) => n > 1).map(([k]) => k));\n\n  // Resolve by prefixing conflicting names with owner\n  return entries.map(({ ownerName, entry }) => {\n    const baseName = getBaseName(entry);\n    const finalName = conflicts.has(baseName) ? `${ownerName}:${baseName}` : baseName;\n    return { ownerName, entry, finalName };\n  });\n}\n\n/**\n * Get a preview of items for logging (first N items).\n *\n * @param items - Array of items\n * @param getName - Function to extract display name from item\n * @param n - Number of items to preview (default: 5)\n * @returns Formatted preview string\n */\nexport function previewItems<T>(items: T[], getName: (item: T) => string, n = 5): string {\n  const names = items.slice(0, n).map(getName);\n  const preview = names.join(', ');\n  const extra = items.length > n ? `, +${items.length - n} more` : '';\n  return `${preview}${extra}`;\n}\n\n/**\n * Get the count of conflicts from entries.\n *\n * @param entries - Array of entries\n * @param getBaseName - Function to extract base name from entry\n * @returns Object with conflict count and conflict names\n */\nexport function detectConflicts<T>(\n  entries: T[],\n  getBaseName: (entry: T) => string,\n): { count: number; names: string[] } {\n  const counts = new Map<string, number>();\n  for (const entry of entries) {\n    const baseName = getBaseName(entry);\n    counts.set(baseName, (counts.get(baseName) ?? 0) + 1);\n  }\n\n  const conflictNames = [...counts.entries()].filter(([, n]) => n > 1).map(([k]) => k);\n\n  return {\n    count: conflictNames.length,\n    names: conflictNames,\n  };\n}\n"]}

package/src/common/index.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("tslib");
-tslib_1.__exportStar(require("./constants"), exports);
-tslib_1.__exportStar(require("./decorators"), exports);
-tslib_1.__exportStar(require("./types"), exports);
-tslib_1.__exportStar(require("./metadata"), exports);
-tslib_1.__exportStar(require("./interfaces"), exports);
-tslib_1.__exportStar(require("./tokens"), exports);
-tslib_1.__exportStar(require("./dynamic"), exports);
-tslib_1.__exportStar(require("./records"), exports);
-tslib_1.__exportStar(require("./entries"), exports);
-tslib_1.__exportStar(require("./utils"), exports);
-tslib_1.__exportStar(require("./schemas"), exports);
-tslib_1.__exportStar(require("./flow/flow.utils"), exports);
-tslib_1.__exportStar(require("./interfaces/tool-hook.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/session-hook.interface"), exports);
-tslib_1.__exportStar(require("./interfaces/auth-hook.interface"), exports);
-tslib_1.__exportStar(require("./providers/base-config.provider"), exports);
-//# sourceMappingURL=index.js.map

package/src/common/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/common/index.ts"],"names":[],"mappings":";;;AAAA,sDAA4B;AAC5B,uDAA6B;AAC7B,kDAAwB;AACxB,qDAA2B;AAC3B,uDAA6B;AAC7B,mDAAyB;AACzB,oDAA0B;AAC1B,oDAA0B;AAC1B,oDAA0B;AAC1B,kDAAwB;AACxB,oDAA0B;AAC1B,4DAAkC;AAElC,2EAAiD;AACjD,8EAAoD;AACpD,2EAAiD;AAEjD,2EAAiD","sourcesContent":["export * from './constants';\nexport * from './decorators';\nexport * from './types';\nexport * from './metadata';\nexport * from './interfaces';\nexport * from './tokens';\nexport * from './dynamic';\nexport * from './records';\nexport * from './entries';\nexport * from './utils';\nexport * from './schemas';\nexport * from './flow/flow.utils';\n\nexport * from './interfaces/tool-hook.interface';\nexport * from './interfaces/session-hook.interface';\nexport * from './interfaces/auth-hook.interface';\n\nexport * from './providers/base-config.provider';\n"]}

package/src/common/interfaces/adapter.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=adapter.interface.js.map

package/src/common/interfaces/adapter.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter.interface.js","sourceRoot":"","sources":["../../../../src/common/interfaces/adapter.interface.ts"],"names":[],"mappings":"","sourcesContent":["import { ClassType, FactoryType, Token, Type, ValueType } from './base.interface';\nimport { ToolType } from './tool.interface';\nimport { ResourceType } from './resource.interface';\nimport { PromptType } from './prompt.interface';\nimport { AdapterMetadata } from '../metadata';\nimport { FrontMcpLogger } from './logger.interface';\n\nexport interface AdapterInterface {\n  options: { name: string } & Record<string, unknown>;\n  /**\n   * Optional method to receive the SDK logger.\n   * Called by the SDK before fetch() if implemented.\n   */\n  setLogger?: (logger: FrontMcpLogger) => void;\n  fetch: () => Promise<FrontMcpAdapterResponse> | FrontMcpAdapterResponse;\n}\n\nexport interface FrontMcpAdapterResponse {\n  tools?: ToolType[];\n  resources?: ResourceType[];\n  prompts?: PromptType[];\n}\n\nexport type AdapterClassType<Provide> = ClassType<Provide> & AdapterMetadata;\nexport type AdapterValueType<Provide> = ValueType<Provide> & AdapterMetadata;\nexport type AdapterFactoryType<Provide, Tokens extends readonly Token[]> = FactoryType<Provide, Tokens> &\n  AdapterMetadata;\n\nexport type AdapterType<Provide extends AdapterInterface = any> =\n  | Type<Provide>\n  | AdapterClassType<Provide>\n  | AdapterValueType<Provide>\n  | AdapterFactoryType<Provide, any[]>;\n"]}

package/src/common/interfaces/app.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=app.interface.js.map

package/src/common/interfaces/app.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.interface.js","sourceRoot":"","sources":["../../../../src/common/interfaces/app.interface.ts"],"names":[],"mappings":"","sourcesContent":["import { Type, ValueType } from './base.interface';\nimport { AppMetadata } from '../metadata';\n\nexport interface AppInterface {\n\n}\n\nexport type AppValueType<Provide> = ValueType<Provide> & AppMetadata;\n\nexport type AppType<T extends AppInterface = any> =\n  | Type<T>\n  | AppValueType<T>"]}

package/src/common/interfaces/auth-hook.interface.js

@@ -1,135 +0,0 @@
-"use strict";
-/**
- * Lifecycle stages for auth invocation.
- *
- * Ordering notes:
- * - "will*" stages run before the action; "did*" stages run after.
- * - Higher `priority()` runs earlier for "will*" (outermost), and later for "did*".
- * - Finalization stages (`willFinalize`, `willAudit`, `didAudit`, `onMetrics`) should be placed
- *   in your plan’s `finalize` array to run on both success and error paths.
- *
- * Control flow:
- * - Hooks may call `ctx.respond(value)` to short-circuit with a return value.
- * - Hooks may call `ctx.abort(reason, code?, httpStatus?)` to stop with an error.
- *
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthHookStage = void 0;
-var AuthHookStage;
-(function (AuthHookStage) {
-    /** Prepare a new session (or re-register an incoming secureJwt).
-     * Responsibilities:
-     * - Validate incoming token (if any); compute defaults; attach user hints.
-     * - Initialize per-session resources and attach to `ctx.data`.
-     * Failure modes:
-     * - `ctx.abort('invalid jwt', 'INVALID_SESSION', 401)`.
-     */
-    AuthHookStage["willCreateSession"] = "willCreateSession";
-    /** Session created and registered.
-     * Responsibilities:
-     * - Announce readiness (mount handlers/streams), emit side-effects if needed.
-     * - Optionally shape `ctx.output` with a `SessionContextView`.
-     */
-    AuthHookStage["didCreateSession"] = "didCreateSession";
-    /** Bind DI providers needed for this session/request.
-     * Responsibilities:
-     * - Resolve and bind providers so later hooks can `ctx.get(...)`.
-     * - May set `ctx.bindProvider/bindProviders` helpers.
-     */
-    AuthHookStage["willBindProviders"] = "willBindProviders";
-    // ---------- Auth (within a session) ----------
-    /** Signal the beginning of an auth sequence in the scope of this session.
-     * Responsibilities:
-     * - Initialize auth-related state (PKCE/state, CSRF, telemetry).
-     * - Decide transport (SSE/StreamableHTTP) for status/URL events if applicable.
-     */
-    AuthHookStage["willBeginAuth"] = "willBeginAuth";
-    /** Streamable authorization progress within the session.
-     * Responsibilities:
-     * - Emit URL/status events (e.g., “authorize_url”, “awaiting_callback”).
-     * - Optionally `ctx.respond({event: ...})` for push-style transports.
-     */
-    AuthHookStage["willAuthorize"] = "willAuthorize";
-    /** Prepare and gate the token exchange with the provider.
-     * Responsibilities:
-     * - Verify callback params; ensure prerequisites (sessionId present).
-     * - Compute exchange request; rate-limit/anti-replay checks.
-     * Failure modes:
-     * - `ctx.abort('invalid state/pkce', 'OAUTH_CALLBACK_ERROR', 400)`.
-     */
-    AuthHookStage["willExchangeToken"] = "willExchangeToken";
-    /** SecureMcp JWT has been minted/confirmed for this session.
-     * Responsibilities:
-     * - React to issuance (e.g., persist session claims, notify listeners).
-     * Notes:
-     * - Fired once the session’s secureJwt is known; avoid logging secrets.
-     */
-    AuthHookStage["didIssueSecureJwt"] = "didIssueSecureJwt";
-    /** Encrypt and store provider tokens for this session.
-     * Responsibilities:
-     * - Write encrypted blobs to the session record (per provider).
-     * - Derive minimal metadata (scopes/expiry) for later claims-only exposure.
-     */
-    AuthHookStage["willStoreTokens"] = "willStoreTokens";
-    // ---------- Access (read path) ----------
-    /** Authorize and prepare a session read.
-     * Responsibilities:
-     * - Validate access to the session; attach read-scoped providers if required.
-     * - Optionally shape a partial view before execute.
-     */
-    AuthHookStage["willGetSession"] = "willGetSession";
-    /** Post-process the session view.
-     * Responsibilities:
-     * - Redact/transform/derive fields for the final response.
-     * - Set `ctx.output` to a `SessionContextView`.
-     */
-    AuthHookStage["didGetSession"] = "didGetSession";
-    // ---------- Disposal ----------
-    /** Announce shutdown and allow flush/cleanup.
-     * Responsibilities:
-     * - Close streams, unsubscribe listeners, schedule disposers.
-     */
-    AuthHookStage["willDisposeSession"] = "willDisposeSession";
-    /** Confirm teardown and emit metrics.
-     * Responsibilities:
-     * - Final confirmation of resource release; summarize outcome.
-     */
-    AuthHookStage["didDisposeSession"] = "didDisposeSession";
-    // ---------- Finalize / audit / metrics / errors ----------
-    /** Optional “late finally” hook if you need a single place before audit/metrics.
-     * Responsibilities:
-     * - Last-chance cleanup across success/error paths (idempotent, non-throwing).
-     * Notes:
-     * - Include this stage in your plan’s `finalize` array to activate.
-     */
-    AuthHookStage["willFinalize"] = "willFinalize";
-    /** Centralized error handler.
-     * Responsibilities:
-     * - Redact sensitive data; map internal errors to public codes.
-     * - Optionally `ctx.respond({ error })` or `ctx.abort(...)`.
-     * Notes:
-     * - Should not throw; runs before audit/metrics finalize.
-     */
-    AuthHookStage["onError"] = "onError";
-    /** Pre-audit collection on both success and error paths.
-     * Responsibilities:
-     * - Build audit envelope (actor, sessionId, providers touched).
-     * - Normalize and strip secrets (no raw tokens).
-     */
-    AuthHookStage["willAudit"] = "willAudit";
-    /** Persist/emit the audit record.
-     * Responsibilities:
-     * - Write to audit sink(s) with outcome and timings.
-     * - Correlate via `ctx.requestId`/`ctx.sessionId`.
-     */
-    AuthHookStage["didAudit"] = "didAudit";
-    /** Telemetry/metrics emission for both success and errors.
-     * Responsibilities:
-     * - Counters & timings (create/get/dispose/auth/exchange/store).
-     * - Error code/tag cardinality kept small for SLOs/alerts.
-     * Constraints:
-     * - Non-throwing; must not alter control flow.
-     */
-    AuthHookStage["onMetrics"] = "onMetrics";
-})(AuthHookStage || (exports.AuthHookStage = AuthHookStage = {}));
-//# sourceMappingURL=auth-hook.interface.js.map

package/src/common/interfaces/auth-hook.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-hook.interface.js","sourceRoot":"","sources":["../../../../src/common/interfaces/auth-hook.interface.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAEH,IAAY,aAwIX;AAxID,WAAY,aAAa;IACvB;;;;;;OAMG;IACH,wDAAuC,CAAA;IAGvC;;;;OAIG;IACH,sDAAqC,CAAA;IAErC;;;;OAIG;IACH,wDAAuC,CAAA;IAEvC,gDAAgD;IAEhD;;;;OAIG;IACH,gDAA+B,CAAA;IAE/B;;;;OAIG;IACH,gDAA+B,CAAA;IAE/B;;;;;;OAMG;IACH,wDAAuC,CAAA;IAEvC;;;;;OAKG;IACH,wDAAuC,CAAA;IAEvC;;;;OAIG;IACH,oDAAmC,CAAA;IAEnC,2CAA2C;IAE3C;;;;OAIG;IACH,kDAAiC,CAAA;IAEjC;;;;OAIG;IACH,gDAA+B,CAAA;IAE/B,iCAAiC;IAEjC;;;OAGG;IACH,0DAAyC,CAAA;IAEzC;;;OAGG;IACH,wDAAuC,CAAA;IAEvC,4DAA4D;IAE5D;;;;;OAKG;IACH,8CAA6B,CAAA;IAE7B;;;;;;OAMG;IACH,oCAAmB,CAAA;IAEnB;;;;OAIG;IACH,wCAAuB,CAAA;IAEvB;;;;OAIG;IACH,sCAAqB,CAAA;IAErB;;;;;;OAMG;IACH,wCAAuB,CAAA;AACzB,CAAC,EAxIW,aAAa,6BAAb,aAAa,QAwIxB","sourcesContent":["/**\n * Lifecycle stages for auth invocation.\n *\n * Ordering notes:\n * - \"will*\" stages run before the action; \"did*\" stages run after.\n * - Higher `priority()` runs earlier for \"will*\" (outermost), and later for \"did*\".\n * - Finalization stages (`willFinalize`, `willAudit`, `didAudit`, `onMetrics`) should be placed\n *   in your plan’s `finalize` array to run on both success and error paths.\n *\n * Control flow:\n * - Hooks may call `ctx.respond(value)` to short-circuit with a return value.\n * - Hooks may call `ctx.abort(reason, code?, httpStatus?)` to stop with an error.\n *\n */\n\nexport enum AuthHookStage {\n  /** Prepare a new session (or re-register an incoming secureJwt).\n   * Responsibilities:\n   * - Validate incoming token (if any); compute defaults; attach user hints.\n   * - Initialize per-session resources and attach to `ctx.data`.\n   * Failure modes:\n   * - `ctx.abort('invalid jwt', 'INVALID_SESSION', 401)`.\n   */\n  willCreateSession = 'willCreateSession',\n\n\n  /** Session created and registered.\n   * Responsibilities:\n   * - Announce readiness (mount handlers/streams), emit side-effects if needed.\n   * - Optionally shape `ctx.output` with a `SessionContextView`.\n   */\n  didCreateSession = 'didCreateSession',\n\n  /** Bind DI providers needed for this session/request.\n   * Responsibilities:\n   * - Resolve and bind providers so later hooks can `ctx.get(...)`.\n   * - May set `ctx.bindProvider/bindProviders` helpers.\n   */\n  willBindProviders = 'willBindProviders',\n\n  // ---------- Auth (within a session) ----------\n\n  /** Signal the beginning of an auth sequence in the scope of this session.\n   * Responsibilities:\n   * - Initialize auth-related state (PKCE/state, CSRF, telemetry).\n   * - Decide transport (SSE/StreamableHTTP) for status/URL events if applicable.\n   */\n  willBeginAuth = 'willBeginAuth',\n\n  /** Streamable authorization progress within the session.\n   * Responsibilities:\n   * - Emit URL/status events (e.g., “authorize_url”, “awaiting_callback”).\n   * - Optionally `ctx.respond({event: ...})` for push-style transports.\n   */\n  willAuthorize = 'willAuthorize', // stream-able events (URL/status)\n\n  /** Prepare and gate the token exchange with the provider.\n   * Responsibilities:\n   * - Verify callback params; ensure prerequisites (sessionId present).\n   * - Compute exchange request; rate-limit/anti-replay checks.\n   * Failure modes:\n   * - `ctx.abort('invalid state/pkce', 'OAUTH_CALLBACK_ERROR', 400)`.\n   */\n  willExchangeToken = 'willExchangeToken',\n\n  /** SecureMcp JWT has been minted/confirmed for this session.\n   * Responsibilities:\n   * - React to issuance (e.g., persist session claims, notify listeners).\n   * Notes:\n   * - Fired once the session’s secureJwt is known; avoid logging secrets.\n   */\n  didIssueSecureJwt = 'didIssueSecureJwt',\n\n  /** Encrypt and store provider tokens for this session.\n   * Responsibilities:\n   * - Write encrypted blobs to the session record (per provider).\n   * - Derive minimal metadata (scopes/expiry) for later claims-only exposure.\n   */\n  willStoreTokens = 'willStoreTokens',\n\n  // ---------- Access (read path) ----------\n\n  /** Authorize and prepare a session read.\n   * Responsibilities:\n   * - Validate access to the session; attach read-scoped providers if required.\n   * - Optionally shape a partial view before execute.\n   */\n  willGetSession = 'willGetSession',\n\n  /** Post-process the session view.\n   * Responsibilities:\n   * - Redact/transform/derive fields for the final response.\n   * - Set `ctx.output` to a `SessionContextView`.\n   */\n  didGetSession = 'didGetSession',\n\n  // ---------- Disposal ----------\n\n  /** Announce shutdown and allow flush/cleanup.\n   * Responsibilities:\n   * - Close streams, unsubscribe listeners, schedule disposers.\n   */\n  willDisposeSession = 'willDisposeSession',\n\n  /** Confirm teardown and emit metrics.\n   * Responsibilities:\n   * - Final confirmation of resource release; summarize outcome.\n   */\n  didDisposeSession = 'didDisposeSession',\n\n  // ---------- Finalize / audit / metrics / errors ----------\n\n  /** Optional “late finally” hook if you need a single place before audit/metrics.\n   * Responsibilities:\n   * - Last-chance cleanup across success/error paths (idempotent, non-throwing).\n   * Notes:\n   * - Include this stage in your plan’s `finalize` array to activate.\n   */\n  willFinalize = 'willFinalize',\n\n  /** Centralized error handler.\n   * Responsibilities:\n   * - Redact sensitive data; map internal errors to public codes.\n   * - Optionally `ctx.respond({ error })` or `ctx.abort(...)`.\n   * Notes:\n   * - Should not throw; runs before audit/metrics finalize.\n   */\n  onError = 'onError',\n\n  /** Pre-audit collection on both success and error paths.\n   * Responsibilities:\n   * - Build audit envelope (actor, sessionId, providers touched).\n   * - Normalize and strip secrets (no raw tokens).\n   */\n  willAudit = 'willAudit',\n\n  /** Persist/emit the audit record.\n   * Responsibilities:\n   * - Write to audit sink(s) with outcome and timings.\n   * - Correlate via `ctx.requestId`/`ctx.sessionId`.\n   */\n  didAudit = 'didAudit',\n\n  /** Telemetry/metrics emission for both success and errors.\n   * Responsibilities:\n   * - Counters & timings (create/get/dispose/auth/exchange/store).\n   * - Error code/tag cardinality kept small for SLOs/alerts.\n   * Constraints:\n   * - Non-throwing; must not alter control flow.\n   */\n  onMetrics = 'onMetrics',\n}\n"]}

package/src/common/interfaces/auth-provider.interface.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AsyncAuthProvider = AsyncAuthProvider;
-/**
- * Helper to define factory providers without tuple widening.
- * Enforces that `useFactory` params follow the `inject()` tokens (order + arity).
- *
- * Usage:
- *   const p = AsyncMcpProvider({
- *     provide: RedisProviderRef,
- *     inject: () => [ExpenseConfigRef, RedisType] as const,
- *     useFactory: async (config, redis) => new RedisProvider(redis),
- *   });
- */
-function AsyncAuthProvider(cfg) {
-    return cfg;
-}
-//# sourceMappingURL=auth-provider.interface.js.map

package/src/common/interfaces/auth-provider.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-provider.interface.js","sourceRoot":"","sources":["../../../../src/common/interfaces/auth-provider.interface.ts"],"names":[],"mappings":";;AAuCA,8CAIC;AAfD;;;;;;;;;;GAUG;AACH,SAAgB,iBAAiB,CAC/B,GAA6C;IAE7C,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { Type, Token, ClassType, ValueType, FactoryType, ClassToken } from './base.interface';\nimport { AuthProviderMetadata } from '../metadata';\n\n\nexport interface AuthProviderInterface {\n  headers(): Record<string, string>;\n\n  refreshToken?(): Promise<string | undefined>;\n}\n\n\nexport type AuthProviderClassType<Provide> = ClassType<Provide> & AuthProviderMetadata;\nexport type AuthProviderValueType<Provide> = ValueType<Provide> & AuthProviderMetadata;\nexport type AuthProviderFactoryType<Provide, Tokens extends readonly (ClassToken | Token)[]> =\n  FactoryType<Provide, Tokens>\n  & AuthProviderMetadata;\n\n\nexport type AuthProviderType<\n  Provide extends AuthProviderInterface = any,\n  Tokens extends readonly (ClassToken | Token)[] = readonly (ClassToken | Token)[]\n> =\n  | Type<Provide>\n  | AuthProviderClassType<Provide>\n  | AuthProviderValueType<Provide>\n  | AuthProviderFactoryType<Provide, Tokens>\n\n\n/**\n * Helper to define factory providers without tuple widening.\n * Enforces that `useFactory` params follow the `inject()` tokens (order + arity).\n *\n * Usage:\n *   const p = AsyncMcpProvider({\n *     provide: RedisProviderRef,\n *     inject: () => [ExpenseConfigRef, RedisType] as const,\n *     useFactory: async (config, redis) => new RedisProvider(redis),\n *   });\n */\nexport function AsyncAuthProvider<Provide, const Tokens extends readonly (ClassToken | Token)[]>(\n  cfg: AuthProviderFactoryType<Provide, Tokens>,\n): AuthProviderFactoryType<Provide, Tokens> {\n  return cfg;\n}\n"]}

package/src/common/interfaces/base.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=base.interface.js.map

package/src/common/interfaces/base.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.interface.js","sourceRoot":"","sources":["../../../../src/common/interfaces/base.interface.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * Constructor type for a concrete class that produces instances of T.\n *\n * Useful anywhere a factory/DI container expects a class reference that can be\n * `new`-ed. For example: `getProvider(UserRepo as Type<UserRepo>)`.\n */\nexport interface Type<T = unknown> extends Function {\n  new(...args: any[]): T;\n}\n\n/**\n * Constructor type for a concrete class that produces instances of T.\n *\n * Useful anywhere a factory/DI container expects a class reference that can be\n * `new`-ed. For example: `getProvider(UserRepo as Type<UserRepo>)`.\n */\nexport type FuncType<T> = (...args: any[]) => any | Promise<any>;\n\n\nexport type PartialStagesType<T extends string> = Partial<Record<T, Type[]>>;\n\n/**\n * Empty Constructor type for a concrete class that produces instances of T.\n *\n * Useful anywhere a factory/DI container expects a class reference that can be\n * `new`-ed. For example: `getProvider(UserRepo as Type<UserRepo>)`.\n */\nexport interface CtorType<T = unknown> extends Function {\n  new(): T;\n}\n\nexport type Ctor<T> = new (...args: any[]) => T;\n\n/**\n * Shape of an abstract class (or interface-like constructor) whose instances\n * cannot be created directly but still expose a prototype of T.\n *\n * This is handy when accepting references that may point at abstract bases\n * instead of concrete implementors.\n */\nexport interface Abstract<T> extends Function {\n  prototype: T;\n}\n\n/**\n * A reference token that may be used to look up or identify a dependency.\n *\n * Typical usages:\n * - string | symbol: named tokens (e.g., provider IDs like \"provider:redis\").\n * - Type<T>: a concrete class constructor (can be instantiated).\n * - Abstract<T>: an abstract base reference (resolved to a concrete impl).\n * - Function: generic function references when needed.\n */\nexport type Reference<T = unknown> = string | symbol | Type<T> | Abstract<T> | Function;\n\n/** A DI token that can be either a class constructor or a logical reference. */\nexport type Token<T = any> = Type<T> | Reference<T>;\n\n\nexport interface ClassType<Provide> {\n  provide: Reference<Provide>;\n  useClass: Type<Provide>;\n}\n\nexport interface ValueType<Provide> {\n  provide: Reference<Provide>;\n  useValue: Provide;\n}\n\n/** Map a tuple of tokens to a tuple of their instance types (order preserved). */\n\nexport type ClassToken<T = any> = abstract new (...a: any) => T;\n// Branded symbol token that carries the payload type T\n\n// export type Resolve<Tokens extends readonly Token[]> = {\n//   [K in keyof Tokens]: Tokens[K] extends Token<infer R> ? R : never;\n// };\n\n/** 2) Map tokens -> runtime parameter types **/\ntype ResolveToken<T> =\n  T extends ClassToken<infer R> ? R\n  : T extends symbol & { readonly __di_type?: infer R } ? R\n  : never;\n\ntype ResolveTokens<Tokens extends readonly unknown[]> = {\n  [K in keyof Tokens]: Tokens[K] extends Token<infer R> ? R : ResolveToken<Tokens[K]>;\n};\n\n// Rest parameters can't be readonly tuples; strip readonly.\ntype Mutable<T extends readonly unknown[]> = { -readonly [K in keyof T]: T[K] };\n\n/** 3) FactoryType with correct useFactory shape **/\nexport interface FactoryType<Provide, Tokens extends readonly (ClassToken | Token)[]> {\n  provide: Reference<Provide>;\n  inject: () => Tokens;\n  useFactory: (...args: Mutable<ResolveTokens<Tokens>>) => Provide | Promise<Provide>;\n}\n\n\n\nexport type RequiredByKey<T, K extends keyof T> = T & Required<Omit<T, K>>;\n"]}

package/src/common/interfaces/execution-context.interface.js

@@ -1,166 +0,0 @@
-"use strict";
-// file: libs/sdk/src/common/interfaces/execution-context.interface.ts
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ExecutionContextBase = void 0;
-const crypto_1 = require("crypto");
-const flow_interface_1 = require("./flow.interface");
-const context_1 = require("../../context");
-const mcp_error_1 = require("../../errors/mcp.error");
-/**
- * Abstract base class for execution contexts (tools, resources, prompts, etc.).
- * Provides common functionality for dependency injection, logging, and flow control.
- */
-class ExecutionContextBase {
-    providers;
-    /**
-     * @deprecated Use `context.authInfo` instead. Will be removed in v2.0.
-     */
-    _authInfo;
-    /** Unique identifier for this execution run */
-    runId;
-    logger;
-    /** Current stage name for tracking/debugging */
-    activeStage = 'init';
-    /** Error if execution failed */
-    _error;
-    constructor(args) {
-        const { providers, logger, authInfo } = args;
-        this.runId = (0, crypto_1.randomUUID)();
-        this.providers = providers;
-        this.logger = logger;
-        this._authInfo = authInfo;
-    }
-    /**
-     * Get the current FrontMcpContext.
-     *
-     * Provides access to requestId, traceId, sessionId, authInfo,
-     * timing marks, request metadata, transport, and context-aware fetch.
-     *
-     * @throws RequestContextNotAvailableError if called outside of a context scope
-     */
-    get context() {
-        try {
-            return this.providers.get(context_1.FRONTMCP_CONTEXT);
-        }
-        catch {
-            // Context not available (likely called during initialization or outside request scope)
-            throw new mcp_error_1.RequestContextNotAvailableError();
-        }
-    }
-    /**
-     * Try to get the context, returning undefined if not available.
-     *
-     * Use this when context may not be available (e.g., during initialization).
-     */
-    tryGetContext() {
-        try {
-            return this.providers.get(context_1.FRONTMCP_CONTEXT);
-        }
-        catch {
-            return undefined;
-        }
-    }
-    /**
-     * @deprecated Use `context.authInfo` instead. Will be removed in v2.0.
-     *
-     * Get authentication information for the current request.
-     */
-    get authInfo() {
-        return this._authInfo;
-    }
-    /**
-     * Get authentication information for the current request.
-     *
-     * Prefers context.authInfo when available (the recommended source),
-     * falls back to the legacy authInfo property for backward compatibility.
-     *
-     * Returns Partial<AuthInfo> because auth info is progressively populated
-     * during the request lifecycle. Callers should check for required fields.
-     */
-    getAuthInfo() {
-        const ctx = this.tryGetContext();
-        if (ctx) {
-            return ctx.authInfo;
-        }
-        return this._authInfo;
-    }
-    /**
-     * Get a child logger with request context attached.
-     *
-     * The logger includes requestId, traceId, and sessionId in its context.
-     */
-    get contextLogger() {
-        try {
-            return this.context.getLogger(this.logger);
-        }
-        catch {
-            // Fallback if context not available
-            return this.logger;
-        }
-    }
-    /**
-     * Get a dependency from the provider registry.
-     * @throws Error if the dependency is not found
-     */
-    get(token) {
-        return this.providers.get(token);
-    }
-    /**
-     * Get the current scope.
-     */
-    get scope() {
-        return this.providers.getScope();
-    }
-    /**
-     * Try to get a dependency, returning undefined if not found.
-     */
-    tryGet(token) {
-        try {
-            return this.providers.get(token);
-        }
-        catch (e) {
-            const msg = e instanceof Error ? e.message : String(e);
-            this.logger.warn(`Failed to get provider ${String(token)}: ${msg}`);
-            return undefined;
-        }
-    }
-    /**
-     * Fail the execution and trigger error handling.
-     */
-    fail(err) {
-        this._error = err;
-        flow_interface_1.FlowControl.fail(err);
-    }
-    /**
-     * Mark the current execution stage (for debugging/tracking).
-     */
-    mark(stage) {
-        this.activeStage = stage;
-    }
-    /**
-     * Fetch a URL with context-aware header injection.
-     *
-     * When FrontMcpContext is available, delegates to ctx.fetch() which:
-     * - Auto-injects Authorization header (if authInfo.token is available)
-     * - Auto-injects W3C traceparent header for distributed tracing
-     * - Auto-injects x-request-id header
-     * - Auto-injects custom headers from request metadata
-     *
-     * Falls back to standard fetch if context is not available.
-     */
-    fetch(input, init) {
-        const ctx = this.tryGetContext();
-        if (ctx) {
-            return ctx.fetch(input, init);
-        }
-        return fetch(input, init);
-    }
-    /**
-     * Get the current error, if any.
-     */
-    get error() {
-        return this._error;
-    }
-}
-exports.ExecutionContextBase = ExecutionContextBase;
-//# sourceMappingURL=execution-context.interface.js.map