@frontmcp/sdk 0.6.2 → 0.7.1

package/auth/session/transport-session.types.d.ts

@@ -135,6 +135,14 @@ export interface StoredSession {
     createdAt: number;
     /** Last accessed timestamp */
     lastAccessedAt: number;
+    /** Whether the MCP protocol initialization handshake was completed */
+    initialized?: boolean;
+    /**
+     * Absolute maximum lifetime timestamp (epoch ms).
+     * Session is invalid after this time regardless of access patterns.
+     * This prevents indefinite session extension via sliding expiration.
+     */
+    maxLifetimeAt?: number;
 }
 /**
  * Encrypted blob structure (AES-256-GCM)
@@ -206,6 +214,47 @@ export interface RedisConfig {
     /** Default TTL in milliseconds for session extension on access (sliding expiration) */
     defaultTtlMs?: number;
 }
+/**
+ * Security configuration options for session stores.
+ * These options enable additional security hardening features.
+ */
+export interface SessionSecurityConfig {
+    /**
+     * Default maximum session lifetime in milliseconds.
+     * Sessions will be invalidated after this time regardless of access.
+     * Set to prevent indefinite session extension via sliding expiration.
+     * @example 86400000 // 24 hours
+     */
+    maxLifetimeMs?: number;
+    /**
+     * Enable HMAC signing for stored sessions.
+     * When enabled, sessions are signed to detect tampering.
+     * Requires MCP_SESSION_SECRET environment variable or signing.secret config.
+     * @default false
+     */
+    enableSigning?: boolean;
+    /**
+     * Secret key for HMAC signing.
+     * If not provided, falls back to MCP_SESSION_SECRET environment variable.
+     */
+    signingSecret?: string;
+    /**
+     * Enable rate limiting for session lookups.
+     * Protects against session enumeration attacks.
+     * @default false
+     */
+    enableRateLimiting?: boolean;
+    /**
+     * Rate limiting configuration.
+     * Only used if enableRateLimiting is true.
+     */
+    rateLimiting?: {
+        /** Time window in milliseconds. @default 60000 */
+        windowMs?: number;
+        /** Maximum requests per window. @default 100 */
+        maxRequests?: number;
+    };
+}
 export declare const transportProtocolSchema: z.ZodEnum<{
     "legacy-sse": "legacy-sse";
     sse: "sse";
@@ -219,8 +268,8 @@ export declare const sseTransportStateSchema: z.ZodObject<{
     lastPing: z.ZodOptional<z.ZodNumber>;
     connectionState: z.ZodOptional<z.ZodEnum<{
         connecting: "connecting";
-        open: "open";
         closed: "closed";
+        open: "open";
     }>>;
 }, z.core.$strip>;
 export declare const streamableHttpTransportStateSchema: z.ZodObject<{
@@ -246,8 +295,8 @@ export declare const legacySseTransportStateSchema: z.ZodObject<{
     lastEventId: z.ZodOptional<z.ZodString>;
     connectionState: z.ZodOptional<z.ZodEnum<{
         connecting: "connecting";
-        open: "open";
         closed: "closed";
+        open: "open";
     }>>;
 }, z.core.$strip>;
 export declare const transportStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -256,8 +305,8 @@ export declare const transportStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
     lastPing: z.ZodOptional<z.ZodNumber>;
     connectionState: z.ZodOptional<z.ZodEnum<{
         connecting: "connecting";
-        open: "open";
         closed: "closed";
+        open: "open";
     }>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"streamable-http">;
@@ -279,8 +328,8 @@ export declare const transportStateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
     lastEventId: z.ZodOptional<z.ZodString>;
     connectionState: z.ZodOptional<z.ZodEnum<{
         connecting: "connecting";
-        open: "open";
         closed: "closed";
+        open: "open";
     }>>;
 }, z.core.$strip>], "type">;
 export declare const transportSessionSchema: z.ZodObject<{
@@ -303,8 +352,8 @@ export declare const transportSessionSchema: z.ZodObject<{
         lastPing: z.ZodOptional<z.ZodNumber>;
         connectionState: z.ZodOptional<z.ZodEnum<{
             connecting: "connecting";
-            open: "open";
             closed: "closed";
+            open: "open";
         }>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"streamable-http">;
@@ -326,8 +375,8 @@ export declare const transportSessionSchema: z.ZodObject<{
         lastEventId: z.ZodOptional<z.ZodString>;
         connectionState: z.ZodOptional<z.ZodEnum<{
             connecting: "connecting";
-            open: "open";
             closed: "closed";
+            open: "open";
         }>>;
     }, z.core.$strip>], "type">>;
 }, z.core.$strip>;
@@ -345,22 +394,6 @@ export declare const sessionJwtPayloadSchema: z.ZodObject<{
     iat: z.ZodNumber;
     exp: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
-export declare const statelessSessionJwtPayloadSchema: z.ZodObject<{
-    sid: z.ZodString;
-    aid: z.ZodString;
-    proto: z.ZodEnum<{
-        "legacy-sse": "legacy-sse";
-        sse: "sse";
-        "streamable-http": "streamable-http";
-        "stateful-http": "stateful-http";
-        "stateless-http": "stateless-http";
-    }>;
-    nid: z.ZodString;
-    iat: z.ZodNumber;
-    exp: z.ZodOptional<z.ZodNumber>;
-    state: z.ZodOptional<z.ZodString>;
-    tokens: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
 export declare const encryptedBlobSchema: z.ZodObject<{
     alg: z.ZodLiteral<"A256GCM">;
     kid: z.ZodOptional<z.ZodString>;
@@ -391,8 +424,8 @@ export declare const storedSessionSchema: z.ZodObject<{
             lastPing: z.ZodOptional<z.ZodNumber>;
             connectionState: z.ZodOptional<z.ZodEnum<{
                 connecting: "connecting";
-                open: "open";
                 closed: "closed";
+                open: "open";
             }>>;
         }, z.core.$strip>, z.ZodObject<{
             type: z.ZodLiteral<"streamable-http">;
@@ -414,8 +447,8 @@ export declare const storedSessionSchema: z.ZodObject<{
             lastEventId: z.ZodOptional<z.ZodString>;
             connectionState: z.ZodOptional<z.ZodEnum<{
                 connecting: "connecting";
-                open: "open";
                 closed: "closed";
+                open: "open";
             }>>;
         }, z.core.$strip>], "type">>;
     }, z.core.$strip>;
@@ -431,6 +464,8 @@ export declare const storedSessionSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     createdAt: z.ZodNumber;
     lastAccessedAt: z.ZodNumber;
+    initialized: z.ZodOptional<z.ZodBoolean>;
+    maxLifetimeAt: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export declare const redisConfigSchema: z.ZodObject<{
     host: z.ZodString;
@@ -441,21 +476,4 @@ export declare const redisConfigSchema: z.ZodObject<{
     keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, z.core.$strip>;
-export declare const sessionStorageConfigSchema: z.ZodUnion<readonly [z.ZodObject<{
-    mode: z.ZodLiteral<"stateless">;
-}, z.core.$strip>, z.ZodObject<{
-    mode: z.ZodLiteral<"stateful">;
-    store: z.ZodLiteral<"memory">;
-}, z.core.$strip>, z.ZodObject<{
-    mode: z.ZodLiteral<"stateful">;
-    store: z.ZodLiteral<"redis">;
-    config: z.ZodObject<{
-        host: z.ZodString;
-        port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        password: z.ZodOptional<z.ZodString>;
-        db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-        tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-        keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-        defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-    }, z.core.$strip>;
-}, z.core.$strip>]>;
+//# sourceMappingURL=transport-session.types.d.ts.map

package/auth/session/transport-session.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-session.types.d.ts","sourceRoot":"","sources":["../../../src/auth/session/transport-session.types.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,KAAK,GAAG,iBAAiB,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAE9G;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,UAAU,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IAEX,uDAAuD;IACvD,eAAe,EAAE,MAAM,CAAC;IAExB,0CAA0C;IAC1C,QAAQ,EAAE,iBAAiB,CAAC;IAE5B,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAElB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IAEf,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,+BAA+B;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,4BAA4B,GAC5B,0BAA0B,GAC1B,2BAA2B,GAC3B,uBAAuB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,KAAK,CAAC;IACZ,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uBAAuB;IACvB,eAAe,CAAC,EAAE,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,iBAAiB,CAAC;IACxB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,oCAAoC;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0BAA0B;IAC1B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,eAAe,CAAC;IACtB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,gBAAgB,CAAC;IACvB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB;IACvB,eAAe,CAAC,EAAE,YAAY,GAAG,MAAM,GAAG,QAAQ,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,yBAAyB;IACzB,KAAK,EAAE,iBAAiB,CAAC;IACzB,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB;IACnE,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,iCAAiC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,GAAG,EAAE,SAAS,CAAC;IACf,4BAA4B;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEtD;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9E;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzC;;OAEG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5C;;OAEG;IACH,OAAO,IAAI,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAE9D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B;;;OAGG;IACH,YAAY,CAAC,EAAE;QACb,kDAAkD;QAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,gDAAgD;QAChD,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAMD,eAAO,MAAM,uBAAuB;;;;;;EAMlC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;iBAKlC,CAAC;AAEH,eAAO,MAAM,kCAAkC;;;;;iBAK7C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;iBAK3C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;iBAI5C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;iBAKxC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAM/B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBASjC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAOlC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;iBAQ9B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ9B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;iBAQ5B,CAAC"}

package/auth/session/utils/auth-token.utils.d.ts

@@ -9,3 +9,4 @@ export declare function getTokenSignatureFingerprint(token: string): string;
 /** Best-effort typed user derivation from claims */
 export declare function deriveTypedUser(claims: Record<string, any>): UserClaim;
 export declare function extractBearerToken(header?: string): string | undefined;
+//# sourceMappingURL=auth-token.utils.d.ts.map

package/auth/session/utils/auth-token.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token.utils.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/utils/auth-token.utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGxD;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOlE;AAkBD,oDAAoD;AACpD,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,CAetE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAItE"}

package/auth/session/utils/session-id.utils.d.ts

@@ -38,3 +38,4 @@ export declare function extractSessionFromCookie(cookie?: string): string | unde
  * @returns true if the session was found and updated, false otherwise
  */
 export declare function updateSessionPayload(sessionId: string, updates: Partial<SessionIdPayload>): boolean;
+//# sourceMappingURL=session-id.utils.d.ts.map

package/auth/session/utils/session-id.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-id.utils.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/utils/session-id.utils.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAkB,MAAM,iBAAiB,CAAC;AAG1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAuB7F,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAShD;AAqDD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAe/E;AAiBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAAG,SAAS,CAgCvD;AAED,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CACnD;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB;;;EAwB7G;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,SAAU,GAAG,MAAM,CAGvF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAuBnG"}

package/auth/session/utils/tiny-ttl-cache.d.ts

@@ -5,3 +5,4 @@ export declare class TinyTtlCache<K, V> {
     get(k: K): V | undefined;
     set(k: K, v: V): void;
 }
+//# sourceMappingURL=tiny-ttl-cache.d.ts.map

package/auth/session/utils/tiny-ttl-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tiny-ttl-cache.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/utils/tiny-ttl-cache.ts"],"names":[],"mappings":"AACA,qBAAa,YAAY,CAAC,CAAC,EAAE,CAAC;IAEhB,OAAO,CAAC,QAAQ,CAAC,KAAK;IADlC,OAAO,CAAC,GAAG,CAAuC;gBACrB,KAAK,EAAE,MAAM;IAE1C,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,SAAS;IAUxB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;CAGf"}

package/auth/session/vault-encryption.d.ts

@@ -187,3 +187,4 @@ export interface VaultSensitiveData {
     /** Pending auth details (URLs, scopes, etc.) */
     pendingAuths: unknown[];
 }
+//# sourceMappingURL=vault-encryption.d.ts.map

package/auth/session/vault-encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-encryption.d.ts","sourceRoot":"","sources":["../../../src/auth/session/vault-encryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;iBAW9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,MAAM,GAAE,qBAA0B;IAM9C;;;;;;;;;OASG;IACH,SAAS,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM;IAwBnD;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,MAAM;IAuB3E;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa;IA0BtD;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM;IAiCtD;;;;;;OAMG;IACH,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa;IAIrD;;;;;;OAMG;IACH,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC;IAK1D;;;;;OAKG;IACH,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,aAAa;CAGlD;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;iBAuBpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,qBAAqB;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,YAAY,EAAE,OAAO,EAAE,CAAC;CACzB"}

package/auth/session/vercel-kv-session.store.d.ts

@@ -4,9 +4,15 @@
  * Session store implementation using Vercel KV (edge-compatible REST-based key-value store).
  * Uses dynamic import to avoid bundling @vercel/kv for non-Vercel deployments.
  *
+ * @warning **Atomicity Limitation**: Vercel KV does not support atomic GET+EXPIRE (GETEX).
+ * The `get()` method uses separate GET and PEXPIRE calls, creating a small race window
+ * where the session could expire between these two operations. For mission-critical
+ * session handling requiring strict atomicity guarantees, consider using Redis directly
+ * via `RedisSessionStore`.
+ *
  * @see https://vercel.com/docs/storage/vercel-kv
  */
-import { SessionStore, StoredSession } from './transport-session.types';
+import { SessionStore, StoredSession, SessionSecurityConfig } from './transport-session.types';
 import { FrontMcpLogger } from '../../common/interfaces/logger.interface';
 import type { VercelKvProviderOptions } from '../../common/types/options/redis.options';
 export interface VercelKvSessionConfig {
@@ -30,6 +36,10 @@ export interface VercelKvSessionConfig {
      * @default 3600000 (1 hour)
      */
     defaultTtlMs?: number;
+    /**
+     * Security hardening options
+     */
+    security?: SessionSecurityConfig;
 }
 /**
  * Vercel KV-backed session store implementation
@@ -44,6 +54,8 @@ export declare class VercelKvSessionStore implements SessionStore {
     private readonly defaultTtlMs;
     private readonly logger?;
     private readonly config;
+    private readonly security;
+    private readonly rateLimiter?;
     constructor(config: VercelKvSessionConfig | VercelKvProviderOptions, logger?: FrontMcpLogger);
     /**
      * Connect to Vercel KV
@@ -63,8 +75,16 @@ export declare class VercelKvSessionStore implements SessionStore {
      *
      * Note: Vercel KV doesn't support GETEX, so we use GET + PEXPIRE separately.
      * This is slightly less atomic than Redis GETEX but sufficient for most use cases.
+     *
+     * @param sessionId - The session ID to look up
+     * @param options - Optional parameters for rate limiting
+     * @param options.clientIdentifier - Client identifier (e.g., IP address) for rate limiting.
+     *   When provided, rate limiting is applied per-client to prevent session enumeration.
+     *   If not provided, falls back to sessionId which provides DoS protection per-session.
      */
-    get(sessionId: string): Promise<StoredSession | null>;
+    get(sessionId: string, options?: {
+        clientIdentifier?: string;
+    }): Promise<StoredSession | null>;
     /**
      * Store a session with optional TTL
      */
@@ -94,3 +114,4 @@ export declare class VercelKvSessionStore implements SessionStore {
      */
     ping(): Promise<boolean>;
 }
+//# sourceMappingURL=vercel-kv-session.store.d.ts.map

package/auth/session/vercel-kv-session.store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-kv-session.store.d.ts","sourceRoot":"","sources":["../../../src/auth/session/vercel-kv-session.store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAuB,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACpH,OAAO,EAAE,cAAc,EAAE,MAAM,0CAA0C,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AAcxF,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,EAAE,CAA+B;IACzC,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAiB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAG/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAqB;gBAEtC,MAAM,EAAE,qBAAqB,GAAG,uBAAuB,EAAE,MAAM,CAAC,EAAE,cAAc;IAkB5F;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;YAkBhB,SAAS;YAgBT,eAAe;IAQ7B;;;OAGG;IACH,OAAO,CAAC,GAAG;IAOX;;;;;;;;;;;OAWG;IACG,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAkHpG;;OAEG;IACG,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BnF;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9C;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjD;;OAEG;IACH,OAAO,IAAI,MAAM;IAIjB;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC;;;;;OAKG;IACG,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC;CAW/B"}

package/auth/ui/base-layout.d.ts

@@ -178,3 +178,4 @@ export declare function wideLayout(content: string, options: BaseLayoutOptions):
  * Extra wide layout for tool selection pages
  */
 export declare function extraWideLayout(content: string, options: BaseLayoutOptions): string;
+//# sourceMappingURL=base-layout.d.ts.map

package/auth/ui/base-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-layout.d.ts","sourceRoot":"","sources":["../../../src/auth/ui/base-layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAMH;;GAEG;AACH,eAAO,MAAM,GAAG;IACd,oFAAoF;;IAGpF,yCAAyC;;;;;CAKjC,CAAC;AAMX;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0BAA0B;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mBAAmB;IACnB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,WAa3B,CAAC;AAMF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IAEd,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,2CAA2C;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ9C;AAsCD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAkE9E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,YAAY,CAC1B,cAAc,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACzC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,KAAK,MAAM,CAmBzD;AAMD;;GAEG;AACH,eAAO,MAAM,UAAU,YA5BV,MAAM,WAAW,iBAAiB,KAAK,MA8BlD,CAAC;AAEH;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAYtF;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAS9E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,MAAM,CASnF"}

package/auth/ui/index.d.ts

@@ -8,3 +8,4 @@
  */
 export { CDN, DEFAULT_THEME, type ThemeColors, type ThemeFonts, type ThemeConfig, type BaseLayoutOptions, baseLayout, createLayout, authLayout, centeredCardLayout, wideLayout, extraWideLayout, escapeHtml, } from './base-layout';
 export { type AppAuthCard, type ProviderCard, type ToolCard, buildConsentPage, buildIncrementalAuthPage, buildFederatedLoginPage, buildToolConsentPage, buildLoginPage, buildErrorPage, renderToHtml, } from './templates';
+//# sourceMappingURL=index.d.ts.map

package/auth/ui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/ui/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACL,GAAG,EACH,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,UAAU,EACV,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,eAAe,EACf,UAAU,GACX,MAAM,eAAe,CAAC;AAGvB,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,QAAQ,EAEb,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,oBAAoB,EACpB,cAAc,EACd,cAAc,EAEd,YAAY,GACb,MAAM,aAAa,CAAC"}

package/auth/ui/templates.d.ts

@@ -132,3 +132,4 @@ export declare function buildErrorPage(params: {
 export declare function renderToHtml(html: string, _options?: {
     title?: string;
 }): string;
+//# sourceMappingURL=templates.d.ts.map

package/auth/ui/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/auth/ui/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAKL,UAAU,IAAI,cAAc,EAC7B,MAAM,eAAe,CAAC;AAMvB;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kDAAkD;IAClD,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;;GAGG;AACH,eAAO,MAAM,UAAU,uBAAiB,CAAC;AAMzC;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAoBT;AA6DD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,GAAG,EAAE,WAAW,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAwDT;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAkFT;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAgHT;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAkDT;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAsBrF;AAMD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEhF"}

package/auth/utils/audience.validator.d.ts

@@ -127,3 +127,4 @@ export declare class AudienceValidator {
      */
     static fromResourceUrl(resourceUrl: string, options?: Omit<AudienceValidatorOptions, 'expectedAudiences'>): AudienceValidator;
 }
+//# sourceMappingURL=audience.validator.d.ts.map

package/auth/utils/audience.validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audience.validator.d.ts","sourceRoot":"","sources":["../../../src/auth/utils/audience.validator.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,oCAAoC;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAE5B;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAC5C,OAAO,EAAE,wBAAwB,GAChC,wBAAwB,CAyC1B;AAqCD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,KAAK,wBAAwB,CAEvE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAsBpE;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAA2B;gBAE9B,OAAO,GAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG;QAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAO;IAS9F;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,wBAAwB;IAI3E;;OAEG;IACH,YAAY,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAI1C;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI;IAIvC;;OAEG;IACH,MAAM,CAAC,eAAe,CACpB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,IAAI,CAAC,wBAAwB,EAAE,mBAAmB,CAAM,GAChE,iBAAiB;CAMrB"}

package/auth/utils/index.d.ts

@@ -1,2 +1,3 @@
 export * from './www-authenticate.utils';
 export * from './audience.validator';
+//# sourceMappingURL=index.d.ts.map

package/auth/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/auth/utils/index.ts"],"names":[],"mappings":"AAEA,cAAc,0BAA0B,CAAC;AACzC,cAAc,sBAAsB,CAAC"}

package/auth/utils/www-authenticate.utils.d.ts

@@ -95,3 +95,4 @@ export declare function buildInvalidRequestHeader(prmUrl: string, description?:
  * @returns Parsed header options
  */
 export declare function parseWwwAuthenticate(header: string): WwwAuthenticateOptions;
+//# sourceMappingURL=www-authenticate.utils.d.ts.map

package/auth/utils/www-authenticate.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"www-authenticate.utils.d.ts","sourceRoot":"","sources":["../../../src/auth/utils/www-authenticate.utils.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,iBAAiB,GAAG,eAAe,GAAG,oBAAoB,CAAC;AAEzF;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B;;OAEG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IAExB;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,sBAA2B,GAAG,MAAM,CAwCjF;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAIzF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAI9D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAMpF;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAOnH;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAMtF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,CAwC3E"}

package/common/common.schema.d.ts

@@ -13,3 +13,4 @@ type CommonResponseResult = z.infer<typeof RedirectSchema> | z.infer<typeof NotF
 export declare const commonSuccessResponseHandler: (res: ServerResponse, result: CommonResponseResult) => void;
 export declare const commonFailResponseHandler: (res: ServerResponse, result: any) => void;
 export {};
+//# sourceMappingURL=common.schema.d.ts.map

package/common/common.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.schema.d.ts","sourceRoot":"","sources":["../../src/common/common.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AAEH,KAAK,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,GAAG,GAAG,CAAC;AAClG,eAAO,MAAM,4BAA4B,GAAI,KAAK,cAAc,EAAE,QAAQ,oBAAoB,SAY7F,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAI,KAAK,cAAc,EAAE,QAAQ,GAAG,SAGzE,CAAC"}

package/common/decorators/adapter.decorator.d.ts

@@ -5,3 +5,4 @@ import { AdapterMetadata } from '../metadata';
  */
 declare function FrontMcpAdapter(providedMetadata: AdapterMetadata): ClassDecorator;
 export { FrontMcpAdapter, FrontMcpAdapter as Adapter, };
+//# sourceMappingURL=adapter.decorator.d.ts.map

package/common/decorators/adapter.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/adapter.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAiC,MAAM,aAAa,CAAC;AAE7E;;GAEG;AACH,iBAAS,eAAe,CAAC,gBAAgB,EAAE,eAAe,GAAG,cAAc,CAU1E;AAED,OAAO,EACL,eAAe,EACf,eAAe,IAAI,OAAO,GAC3B,CAAC"}

package/common/decorators/agent.decorator.d.ts

@@ -0,0 +1,116 @@
+import 'reflect-metadata';
+import { ToolInputType, ToolOutputType, AgentMetadata } from '../metadata';
+import z from 'zod';
+type AgentContextBase = {
+    execute: (...args: any[]) => any;
+};
+/**
+ * Handler type for function-based agents.
+ */
+export type FrontMcpAgentExecuteHandler<InSchema extends ToolInputType, OutSchema extends ToolOutputType, In = AgentInputOf<{
+    inputSchema: InSchema;
+}>, Out = AgentOutputOf<{
+    outputSchema: OutSchema;
+}>> = (input: In, ctx: AgentContextBase) => Out | Promise<Out>;
+/**
+ * Return type for function-based agents created with agent().
+ * Contains the handler function and agent metadata symbols.
+ */
+export type FrontMcpAgentFunction<InSchema extends ToolInputType = ToolInputType, OutSchema extends ToolOutputType = ToolOutputType> = (() => FrontMcpAgentExecuteHandler<InSchema, OutSchema>) & {};
+/**
+ * Function decorator that creates an agent from a handler function.
+ *
+ * @example
+ * ```typescript
+ * const researchAgent = agent({
+ *   name: 'research-agent',
+ *   inputSchema: { topic: z.string() },
+ *   llm: { adapter: 'openai', model: 'gpt-4-turbo', apiKey: { env: 'OPENAI_API_KEY' } },
+ * })((input, ctx) => {
+ *   // Agent implementation
+ *   return { result: 'done' };
+ * });
+ * ```
+ */
+declare function frontMcpAgent<T extends AgentMetadata<InSchema, OutSchema>, InSchema extends ToolInputType = T['inputSchema'] extends ToolInputType ? T['inputSchema'] : ToolInputType, OutSchema extends ToolOutputType = T['outputSchema']>(providedMetadata: T): (handler: FrontMcpAgentExecuteHandler<InSchema, OutSchema>) => FrontMcpAgentFunction<InSchema, OutSchema>;
+export { FrontMcpAgent, FrontMcpAgent as Agent, frontMcpAgent, frontMcpAgent as agent };
+/**
+ * This is a modified version following the tool decorator pattern.
+ * Provides type inference for agent input/output schemas.
+ */
+type __Shape = z.ZodRawShape;
+type __AsZodObj<T> = T extends z.ZodObject<any> ? T : T extends z.ZodRawShape ? z.ZodObject<T> : never;
+/**
+ * Infers the input type from an agent's inputSchema.
+ */
+export type AgentInputOf<Opt> = Opt extends {
+    inputSchema: infer I;
+} ? z.infer<__AsZodObj<I>> : never;
+/**
+ * Helper to infer the return type from any Zod schema.
+ */
+type __InferZod<S> = S extends z.ZodType ? z.infer<S> : S extends z.ZodRawShape ? z.infer<z.ZodObject<S>> : never;
+/**
+ * Infers the output type from a single schema definition.
+ */
+type __InferFromSingleSchema<S> = S extends 'string' ? string : S extends 'number' ? number : S extends 'boolean' ? boolean : S extends 'date' ? Date : S extends z.ZodType | z.ZodRawShape ? __InferZod<S> : any;
+/**
+ * Infers a tuple/array of output types from an array of schemas.
+ */
+type __InferFromArraySchema<A> = A extends readonly any[] ? {
+    [K in keyof A]: __InferFromSingleSchema<A[K]>;
+} : never;
+/**
+ * Main output type inference for agents.
+ * Handles single schemas, arrays of schemas, or no schema.
+ */
+export type AgentOutputOf<Opt> = Opt extends {
+    outputSchema: infer O;
+} ? O extends readonly any[] ? __InferFromArraySchema<O> : __InferFromSingleSchema<O> : any;
+type __Ctor = (new (...a: any[]) => any) | (abstract new (...a: any[]) => any);
+type __A<C extends __Ctor> = C extends new (...a: infer A) => any ? A : C extends abstract new (...a: infer A) => any ? A : never;
+type __R<C extends __Ctor> = C extends new (...a: any[]) => infer R ? R : C extends abstract new (...a: any[]) => infer R ? R : never;
+type __Param<C extends __Ctor> = __R<C> extends {
+    execute: (arg: infer P, ...r: any) => any;
+} ? P : never;
+type __Return<C extends __Ctor> = __R<C> extends {
+    execute: (...a: any) => infer R;
+} ? R : never;
+type __Unwrap<T> = T extends Promise<infer U> ? U : T;
+type __IsAny<T> = 0 extends 1 & T ? true : false;
+type __IsBaseClassDefault<P> = P extends Record<string, unknown> ? Record<string, unknown> extends P ? true : false : false;
+type __MustParam<C extends __Ctor, In> = __IsAny<In> extends true ? unknown : __IsAny<__Param<C>> extends true ? {
+    'execute() parameter error': "Parameter type must not be 'any'.";
+    expected_input_type: In;
+} : __IsBaseClassDefault<__Param<C>> extends true ? unknown : __Param<C> extends In ? In extends __Param<C> ? unknown : {
+    'execute() parameter error': 'Parameter type is too wide. It must exactly match the input schema.';
+    expected_input_type: In;
+    actual_parameter_type: __Param<C>;
+} : {
+    'execute() parameter error': 'Parameter type does not match the input schema.';
+    expected_input_type: In;
+    actual_parameter_type: __Param<C>;
+};
+type __MustReturn<C extends __Ctor, Out> = __IsAny<Out> extends true ? unknown : __Unwrap<__Return<C>> extends Out ? unknown : {
+    'execute() return type error': "The method's return type is not assignable to the expected output schema type.";
+    expected_output_type: Out;
+    'actual_return_type (unwrapped)': __Unwrap<__Return<C>>;
+};
+type __Rewrap<C extends __Ctor, In, Out> = C extends abstract new (...a: __A<C>) => __R<C> ? C & (abstract new (...a: __A<C>) => AgentContextBase & __R<C>) : C extends new (...a: __A<C>) => __R<C> ? C & (new (...a: __A<C>) => AgentContextBase & __R<C>) : never;
+type __PrimitiveOutputType = 'string' | 'number' | 'date' | 'boolean' | z.ZodString | z.ZodNumber | z.ZodBoolean | z.ZodBigInt | z.ZodDate;
+type __StructuredOutputType = z.ZodRawShape | z.ZodObject<any> | z.ZodArray<z.ZodType> | z.ZodUnion<[z.ZodObject<any>, ...z.ZodObject<any>[]]> | z.ZodDiscriminatedUnion<z.ZodObject<any>[]>;
+type __AgentSingleOutputType = __PrimitiveOutputType | __StructuredOutputType;
+type __OutputSchema = __AgentSingleOutputType | __AgentSingleOutputType[];
+/**
+ * Agent metadata options with type constraints.
+ */
+export type AgentMetadataOptions<I extends __Shape, O extends __OutputSchema> = AgentMetadata<I | z.ZodObject<I>, O>;
+declare module '@frontmcp/sdk' {
+    function Agent<I extends __Shape, O extends __OutputSchema, T extends AgentMetadataOptions<I, O> & {
+        outputSchema: any;
+    }>(opts: T): <C extends __Ctor>(cls: C & __MustParam<C, AgentInputOf<T>> & __MustReturn<C, AgentOutputOf<T>>) => __Rewrap<C, AgentInputOf<T>, AgentOutputOf<T>>;
+    function Agent<I extends __Shape, T extends AgentMetadataOptions<I, any> & {
+        outputSchema?: never;
+    }>(opts: T): <C extends __Ctor>(cls: C & __MustParam<C, AgentInputOf<T>> & __MustReturn<C, AgentOutputOf<T>>) => __Rewrap<C, AgentInputOf<T>, AgentOutputOf<T>>;
+}
+//# sourceMappingURL=agent.decorator.d.ts.map

package/common/decorators/agent.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/agent.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAA+B,MAAM,aAAa,CAAC;AACxG,OAAO,CAAC,MAAM,KAAK,CAAC;AAGpB,KAAK,gBAAgB,GAAG;IAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;CAAE,CAAC;AAuC7D;;GAEG;AACH,MAAM,MAAM,2BAA2B,CACrC,QAAQ,SAAS,aAAa,EAC9B,SAAS,SAAS,cAAc,EAChC,EAAE,GAAG,YAAY,CAAC;IAAE,WAAW,EAAE,QAAQ,CAAA;CAAE,CAAC,EAC5C,GAAG,GAAG,aAAa,CAAC;IAAE,YAAY,EAAE,SAAS,CAAA;CAAE,CAAC,IAC9C,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,gBAAgB,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;AAE7D;;;GAGG;AACH,MAAM,MAAM,qBAAqB,CAC/B,QAAQ,SAAS,aAAa,GAAG,aAAa,EAC9C,SAAS,SAAS,cAAc,GAAG,cAAc,IAC/C,CAAC,MAAM,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,GAAG,EAG9D,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,iBAAS,aAAa,CACpB,CAAC,SAAS,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC5C,QAAQ,SAAS,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,SAAS,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,aAAa,EAC1G,SAAS,SAAS,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,EAEpD,gBAAgB,EAAE,CAAC,GAClB,CAAC,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAY3G;AAED,OAAO,EAAE,aAAa,EAAE,aAAa,IAAI,KAAK,EAAE,aAAa,EAAE,aAAa,IAAI,KAAK,EAAE,CAAC;AAMxF;;;GAGG;AAGH,KAAK,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC;AAC7B,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAEvG;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,GAAG,IAAI,GAAG,SAAS;IAAE,WAAW,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAItG;;GAEG;AACH,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAElH;;GAEG;AACH,KAAK,uBAAuB,CAAC,CAAC,IAAI,CAAC,SAAS,QAAQ,GAChD,MAAM,GACN,CAAC,SAAS,QAAQ,GAClB,MAAM,GACN,CAAC,SAAS,SAAS,GACnB,OAAO,GACP,CAAC,SAAS,MAAM,GAChB,IAAI,GACJ,CAAC,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,WAAW,GACnC,UAAU,CAAC,CAAC,CAAC,GACb,GAAG,CAAC;AAER;;GAEG;AACH,KAAK,sBAAsB,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,GAAG,EAAE,GAAG;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,KAAK,CAAC;AAEtH;;;GAGG;AACH,MAAM,MAAM,aAAa,CAAC,GAAG,IAAI,GAAG,SAAS;IAAE,YAAY,EAAE,MAAM,CAAC,CAAA;CAAE,GAClE,CAAC,SAAS,SAAS,GAAG,EAAE,GACtB,sBAAsB,CAAC,CAAC,CAAC,GACzB,uBAAuB,CAAC,CAAC,CAAC,GAC5B,GAAG,CAAC;AAOR,KAAK,MAAM,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC;AAC/E,KAAK,GAAG,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,GAC7D,CAAC,GACD,CAAC,SAAS,QAAQ,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,GAC7C,CAAC,GACD,KAAK,CAAC;AACV,KAAK,GAAG,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,MAAM,CAAC,GAC/D,CAAC,GACD,CAAC,SAAS,QAAQ,MAAM,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,MAAM,CAAC,GAC/C,CAAC,GACD,KAAK,CAAC;AACV,KAAK,OAAO,CAAC,CAAC,SAAS,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS;IAAE,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,GAAG,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AAC1G,KAAK,QAAQ,CAAC,CAAC,SAAS,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS;IAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,MAAM,CAAC,CAAA;CAAE,GAAG,CAAC,GAAG,KAAK,CAAC;AACjG,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtD,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC;AAKjD,KAAK,oBAAoB,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,GAC/B,IAAI,GACJ,KAAK,GACP,KAAK,CAAC;AAGV,KAAK,WAAW,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,SAAS,IAAI,GAC7D,OAAO,GACP,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,GAChC;IAAE,2BAA2B,EAAE,mCAAmC,CAAC;IAAC,mBAAmB,EAAE,EAAE,CAAA;CAAE,GAC7F,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,GAC7C,OAAO,GACP,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,GACrB,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,GACP;IACE,2BAA2B,EAAE,qEAAqE,CAAC;IACnG,mBAAmB,EAAE,EAAE,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACnC,GACH;IACE,2BAA2B,EAAE,iDAAiD,CAAC;IAC/E,mBAAmB,EAAE,EAAE,CAAC;IACxB,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACnC,CAAC;AAGN,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,GAChE,OAAO,GACP,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,GACjC,OAAO,GACP;IACE,6BAA6B,EAAE,gFAAgF,CAAC;IAChH,oBAAoB,EAAE,GAAG,CAAC;IAC1B,gCAAgC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;CACzD,CAAC;AAGN,KAAK,QAAQ,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,QAAQ,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GACtF,CAAC,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAC9D,CAAC,SAAS,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GACtC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GACrD,KAAK,CAAC;AAGV,KAAK,qBAAqB,GACtB,QAAQ,GACR,QAAQ,GACR,MAAM,GACN,SAAS,GACT,CAAC,CAAC,SAAS,GACX,CAAC,CAAC,SAAS,GACX,CAAC,CAAC,UAAU,GACZ,CAAC,CAAC,SAAS,GACX,CAAC,CAAC,OAAO,CAAC;AACd,KAAK,sBAAsB,GACvB,CAAC,CAAC,WAAW,GACb,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAChB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GACrB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GACrD,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAEhD,KAAK,uBAAuB,GAAG,qBAAqB,GAAG,sBAAsB,CAAC;AAC9E,KAAK,cAAc,GAAG,uBAAuB,GAAG,uBAAuB,EAAE,CAAC;AAE1E;;GAEG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,SAAS,cAAc,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAErH,OAAO,QAAQ,eAAe,CAAC;IAK7B,SAAgB,KAAK,CACnB,CAAC,SAAS,OAAO,EACjB,CAAC,SAAS,cAAc,EACxB,CAAC,SAAS,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;QAAE,YAAY,EAAE,GAAG,CAAA;KAAE,EAE5D,IAAI,EAAE,CAAC,GACN,CAAC,CAAC,SAAS,MAAM,EAClB,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,KACzE,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAIpD,SAAgB,KAAK,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,SAAS,oBAAoB,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;QAAE,YAAY,CAAC,EAAE,KAAK,CAAA;KAAE,EACxG,IAAI,EAAE,CAAC,GACN,CAAC,CAAC,SAAS,MAAM,EAClB,GAAG,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,KACzE,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACrD"}

package/common/decorators/app.decorator.d.ts

@@ -5,3 +5,4 @@ import { LocalAppMetadata } from '../metadata';
  */
 declare function FrontMcpApp(providedMetadata: LocalAppMetadata): ClassDecorator;
 export { FrontMcpApp, FrontMcpApp as App, };
+//# sourceMappingURL=app.decorator.d.ts.map

package/common/decorators/app.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/app.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAkC,MAAM,aAAa,CAAC;AAE/E;;GAEG;AACH,iBAAS,WAAW,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,cAAc,CAkCvE;AAED,OAAO,EACL,WAAW,EACX,WAAW,IAAI,GAAG,GACnB,CAAC"}

package/common/decorators/auth-provider.decorator.d.ts

@@ -5,3 +5,4 @@ import { AuthProviderMetadata } from '../metadata';
  */
 declare function FrontMcpAuthProvider(providedMetadata: AuthProviderMetadata): ClassDecorator;
 export { FrontMcpAuthProvider, FrontMcpAuthProvider as AuthProvider, };
+//# sourceMappingURL=auth-provider.decorator.d.ts.map

package/common/decorators/auth-provider.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-provider.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/auth-provider.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,oBAAoB,EAAsC,MAAM,aAAa,CAAC;AAEvF;;GAEG;AACH,iBAAS,oBAAoB,CAAC,gBAAgB,EAAE,oBAAoB,GAAG,cAAc,CAUpF;AAED,OAAO,EACL,oBAAoB,EACpB,oBAAoB,IAAI,YAAY,GACrC,CAAC"}

package/common/decorators/decorator-utils.d.ts

@@ -129,3 +129,4 @@ export declare class PendingMetadataRegistry<T> {
  * Creates a class decorator that works with both legacy TypeScript and TC39 Stage 3 decorators.
  */
 export declare function createDualModeClassDecorator<TOptions>(handler: (ctor: Function, options: TOptions, context?: TC39ClassContext) => Function | void): (options: TOptions) => ClassDecorator;
+//# sourceMappingURL=decorator-utils.d.ts.map

package/common/decorators/decorator-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decorator-utils.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/decorator-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,WAAW,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,cAAc,CAAC,WAAW,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,MAAM,EAAE,QAAQ,CAAC;IACjB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,qBAAqB;IACrB,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB,CAAC,QAAQ,EAAE,SAAS;IACxD;;OAEG;IACH,cAAc,EAAE,CAAC,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC;IAE5E;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC;IAEnE;;;OAGG;IACH,oBAAoB,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,KAAK,IAAI,CAAC;CACvE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,iBAAiB,CAE1E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,gBAAgB,CAExE;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,SAAS,EAC/D,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,GACjD,CAAC,OAAO,EAAE,QAAQ,KAAK,eAAe,CAiDxC;AAED;;;GAGG;AACH,qBAAa,uBAAuB,CAAC,CAAC;IACpC,OAAO,CAAC,OAAO,CAAgC;IAE/C;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI;IAM1C;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,EAAE;IAM9B;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,UAAO,GAAG,CAAC,EAAE;CAsCrD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,QAAQ,EACnD,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,QAAQ,GAAG,IAAI,GAC1F,CAAC,OAAO,EAAE,QAAQ,KAAK,cAAc,CAYvC"}

package/common/decorators/flow.decorator.d.ts

@@ -4,3 +4,4 @@ import { FlowMetadata, FlowName } from '../metadata';
  */
 declare function FrontMcpFlow<Name extends FlowName>(providedMetadata: FlowMetadata<Name>): ClassDecorator;
 export { FrontMcpFlow, FrontMcpFlow as Flow, };
+//# sourceMappingURL=flow.decorator.d.ts.map

package/common/decorators/flow.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/flow.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAA8B,MAAM,aAAa,CAAC;AAKjF;;GAEG;AACH,iBAAS,YAAY,CAAC,IAAI,SAAS,QAAQ,EAAE,gBAAgB,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,cAAc,CAWjG;AAED,OAAO,EACL,YAAY,EACZ,YAAY,IAAI,IAAI,GACrB,CAAA"}

package/common/decorators/front-mcp.decorator.d.ts

@@ -4,3 +4,4 @@ import { FrontMcpMetadata } from '../metadata';
  * Decorator that marks a class as a FrontMcp Server and provides metadata
  */
 export declare function FrontMcp(providedMetadata: FrontMcpMetadata): ClassDecorator;
+//# sourceMappingURL=front-mcp.decorator.d.ts.map

package/common/decorators/front-mcp.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"front-mcp.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/front-mcp.decorator.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAA0B,MAAM,aAAa,CAAC;AAqCvE;;GAEG;AACH,wBAAgB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,cAAc,CA6D3E"}

package/common/decorators/hook.decorator.d.ts

@@ -66,3 +66,4 @@ export declare function FlowHooksOf<Name extends FlowName>(name: Name): {
     Did: (stage: ExtendFlows[Name]["stage"], opts?: HookOptions<ExtendFlows[Name]["ctx"]>) => MethodDecorator;
     Around: (stage: ExtendFlows[Name]["stage"], opts?: HookOptions<ExtendFlows[Name]["ctx"]>) => MethodDecorator;
 };
+//# sourceMappingURL=hook.decorator.d.ts.map

package/common/decorators/hook.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/hook.decorator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAiB,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmBjF;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,EAAE,CAE9E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAElF;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,QAAQ,GAAG,YAAY,EAAE,CAExE;AAkED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,IAAI,SAAS,QAAQ,EAAE,IAAI,EAAE,IAAI,IAI1C,iCAAQ,EAAE,OAAM,WAAW,0BAAU,qBAGvD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,SAAS,QAAQ,EAAE,IAAI,EAAE,IAAI,IAIzC,iCAAQ,EAAE,OAAM,WAAW,0BAAU,qBAGvD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,SAAS,QAAQ,EAAE,IAAI,EAAE,IAAI,IAIxC,iCAAQ,EAAE,OAAM,WAAW,0BAAU,qBAGvD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,SAAS,QAAQ,EAAE,IAAI,EAAE,IAAI,IAI3C,iCAAQ,EAAE,OAAM,WAAW,0BAAU,qBAGvD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,IAAI,SAAS,QAAQ,EAAE,IAAI,EAAE,IAAI;;;;;EAO5D"}

package/common/decorators/index.d.ts

@@ -10,3 +10,5 @@ export * from './tool.decorator';
 export * from './resource.decorator';
 export * from './prompt.decorator';
 export * from './logger.decorator';
+export * from './agent.decorator';
+//# sourceMappingURL=index.d.ts.map

package/common/decorators/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC"}