@frontmcp/sdk 0.7.2 → 0.8.0

package/common/metadata/app.metadata.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import { AuthOptionsInput } from '../types';
-import { AgentType, ProviderType, PromptType, ResourceType, ToolType, AuthProviderType, PluginType, AdapterType } from '../interfaces';
+import { AgentType, ProviderType, PromptType, ResourceType, ToolType, AuthProviderType, PluginType, AdapterType, SkillType } from '../interfaces';
 /**
  * Declarative metadata describing what a local mcp app contributes at app scope.
  *
@@ -72,6 +72,12 @@ export interface LocalAppMetadata {
      * and even other agents.
      */
     agents?: AgentType[];
+    /**
+     * Skills that teach AI how to perform multi-step tasks using tools.
+     * Skills are workflow guides that combine multiple tools into coherent
+     * recipes. They can be discovered via searchSkills and loaded via loadSkill.
+     */
+    skills?: SkillType[];
     /**
      * Configures the app's default authentication provider.
      * If not provided, the app will use the gateway's default auth provider.
@@ -97,6 +103,7 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
     resources: z.ZodOptional<z.ZodArray<z.ZodCustom<import("libs/di/dist/interfaces/base.interface").Type<unknown>, import("libs/di/dist/interfaces/base.interface").Type<unknown>>>>;
     prompts: z.ZodOptional<z.ZodArray<z.ZodCustom<import("libs/di/dist/interfaces/base.interface").Type<unknown>, import("libs/di/dist/interfaces/base.interface").Type<unknown>>>>;
     agents: z.ZodOptional<z.ZodArray<z.ZodCustom<AgentType, AgentType>>>;
+    skills: z.ZodOptional<z.ZodArray<z.ZodCustom<import("libs/di/dist/interfaces/base.interface").Type<unknown>, import("libs/di/dist/interfaces/base.interface").Type<unknown>>>>;
     auth: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
         mode: z.ZodLiteral<"public">;
         issuer: z.ZodOptional<z.ZodString>;
@@ -111,27 +118,6 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
             keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
         }, z.core.$strip>>;
         signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
-                redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         mode: z.ZodLiteral<"transparent">;
         remote: z.ZodObject<{
@@ -160,27 +146,6 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
             prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
             rateLimit: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
-                redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         local: z.ZodOptional<z.ZodObject<{
             signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
@@ -203,10 +168,6 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
                 defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">>;
-        sessionMode: z.ZodDefault<z.ZodEnum<{
-            stateful: "stateful";
-            stateless: "stateless";
-        }>>;
         allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
         anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
         publicAccess: z.ZodOptional<z.ZodObject<{
@@ -225,6 +186,12 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
             excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
+        federatedAuth: z.ZodOptional<z.ZodObject<{
+            stateValidation: z.ZodDefault<z.ZodEnum<{
+                format: "format";
+                strict: "strict";
+            }>>;
+        }, z.core.$strip>>;
         refresh: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             skewSeconds: z.ZodDefault<z.ZodNumber>;
@@ -239,26 +206,43 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
             allowSkip: z.ZodDefault<z.ZodBoolean>;
             showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
+        cimd: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            cache: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodEnum<{
+                    memory: "memory";
+                    redis: "redis";
+                }>>;
+                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+                maxTtlMs: z.ZodDefault<z.ZodNumber>;
+                minTtlMs: z.ZodDefault<z.ZodNumber>;
                 redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    url: z.ZodOptional<z.ZodString>;
+                    host: z.ZodOptional<z.ZodString>;
+                    port: z.ZodOptional<z.ZodNumber>;
                     password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    db: z.ZodOptional<z.ZodNumber>;
+                    tls: z.ZodOptional<z.ZodBoolean>;
+                    keyPrefix: z.ZodDefault<z.ZodString>;
                 }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+            security: z.ZodOptional<z.ZodObject<{
+                blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
+                allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
+                allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            network: z.ZodOptional<z.ZodObject<{
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+                maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
+                redirectPolicy: z.ZodDefault<z.ZodEnum<{
+                    deny: "deny";
+                    "same-origin": "same-origin";
+                    allow: "allow";
+                }>>;
+                maxRedirects: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"local">;
@@ -284,10 +268,6 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
                 defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">>;
-        sessionMode: z.ZodDefault<z.ZodEnum<{
-            stateful: "stateful";
-            stateless: "stateless";
-        }>>;
         allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
         anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
         publicAccess: z.ZodOptional<z.ZodObject<{
@@ -306,6 +286,12 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
             excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
+        federatedAuth: z.ZodOptional<z.ZodObject<{
+            stateValidation: z.ZodDefault<z.ZodEnum<{
+                format: "format";
+                strict: "strict";
+            }>>;
+        }, z.core.$strip>>;
         refresh: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             skewSeconds: z.ZodDefault<z.ZodNumber>;
@@ -320,26 +306,43 @@ export declare const frontMcpLocalAppMetadataSchema: z.ZodObject<{
             allowSkip: z.ZodDefault<z.ZodBoolean>;
             showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
+        cimd: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            cache: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodEnum<{
+                    memory: "memory";
+                    redis: "redis";
+                }>>;
+                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+                maxTtlMs: z.ZodDefault<z.ZodNumber>;
+                minTtlMs: z.ZodDefault<z.ZodNumber>;
                 redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    url: z.ZodOptional<z.ZodString>;
+                    host: z.ZodOptional<z.ZodString>;
+                    port: z.ZodOptional<z.ZodNumber>;
                     password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    db: z.ZodOptional<z.ZodNumber>;
+                    tls: z.ZodOptional<z.ZodBoolean>;
+                    keyPrefix: z.ZodDefault<z.ZodString>;
                 }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+            security: z.ZodOptional<z.ZodObject<{
+                blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
+                allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
+                allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            network: z.ZodOptional<z.ZodObject<{
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+                maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
+                redirectPolicy: z.ZodDefault<z.ZodEnum<{
+                    deny: "deny";
+                    "same-origin": "same-origin";
+                    allow: "allow";
+                }>>;
+                maxRedirects: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"remote">;
@@ -563,27 +566,6 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
             keys: z.ZodArray<z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>>;
         }, z.core.$strip>>;
         signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
-                redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         mode: z.ZodLiteral<"transparent">;
         remote: z.ZodObject<{
@@ -612,27 +594,6 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
             prompts: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
             rateLimit: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
-                redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         local: z.ZodOptional<z.ZodObject<{
             signKey: z.ZodOptional<z.ZodUnion<[z.ZodType<import("../types").JWK, unknown, z.core.$ZodTypeInternals<import("../types").JWK, unknown>>, z.ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
@@ -655,10 +616,6 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
                 defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">>;
-        sessionMode: z.ZodDefault<z.ZodEnum<{
-            stateful: "stateful";
-            stateless: "stateless";
-        }>>;
         allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
         anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
         publicAccess: z.ZodOptional<z.ZodObject<{
@@ -677,6 +634,12 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
             excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
+        federatedAuth: z.ZodOptional<z.ZodObject<{
+            stateValidation: z.ZodDefault<z.ZodEnum<{
+                format: "format";
+                strict: "strict";
+            }>>;
+        }, z.core.$strip>>;
         refresh: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             skewSeconds: z.ZodDefault<z.ZodNumber>;
@@ -691,26 +654,43 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
             allowSkip: z.ZodDefault<z.ZodBoolean>;
             showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
+        cimd: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            cache: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodEnum<{
+                    memory: "memory";
+                    redis: "redis";
+                }>>;
+                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+                maxTtlMs: z.ZodDefault<z.ZodNumber>;
+                minTtlMs: z.ZodDefault<z.ZodNumber>;
                 redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    url: z.ZodOptional<z.ZodString>;
+                    host: z.ZodOptional<z.ZodString>;
+                    port: z.ZodOptional<z.ZodNumber>;
                     password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    db: z.ZodOptional<z.ZodNumber>;
+                    tls: z.ZodOptional<z.ZodBoolean>;
+                    keyPrefix: z.ZodDefault<z.ZodString>;
                 }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+            security: z.ZodOptional<z.ZodObject<{
+                blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
+                allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
+                allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            network: z.ZodOptional<z.ZodObject<{
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+                maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
+                redirectPolicy: z.ZodDefault<z.ZodEnum<{
+                    deny: "deny";
+                    "same-origin": "same-origin";
+                    allow: "allow";
+                }>>;
+                maxRedirects: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"local">;
@@ -736,10 +716,6 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
                 defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
             }, z.core.$strip>;
         }, z.core.$strip>], "type">>;
-        sessionMode: z.ZodDefault<z.ZodEnum<{
-            stateful: "stateful";
-            stateless: "stateless";
-        }>>;
         allowDefaultPublic: z.ZodDefault<z.ZodBoolean>;
         anonymousScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
         publicAccess: z.ZodOptional<z.ZodObject<{
@@ -758,6 +734,12 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
             excludedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
             defaultSelectedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
+        federatedAuth: z.ZodOptional<z.ZodObject<{
+            stateValidation: z.ZodDefault<z.ZodEnum<{
+                format: "format";
+                strict: "strict";
+            }>>;
+        }, z.core.$strip>>;
         refresh: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             skewSeconds: z.ZodDefault<z.ZodNumber>;
@@ -772,26 +754,43 @@ export declare const frontMcpRemoteAppMetadataSchema: z.ZodObject<{
             allowSkip: z.ZodDefault<z.ZodBoolean>;
             showAllAppsAtOnce: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
-        transport: z.ZodOptional<z.ZodObject<{
-            enableLegacySSE: z.ZodDefault<z.ZodBoolean>;
-            enableSseListener: z.ZodDefault<z.ZodBoolean>;
-            enableStreamableHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatelessHttp: z.ZodDefault<z.ZodBoolean>;
-            enableStatefulHttp: z.ZodDefault<z.ZodBoolean>;
-            requireSessionForStreamable: z.ZodDefault<z.ZodBoolean>;
-            recreation: z.ZodOptional<z.ZodLazy<z.ZodObject<{
-                enabled: z.ZodDefault<z.ZodBoolean>;
+        cimd: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            cache: z.ZodOptional<z.ZodObject<{
+                type: z.ZodDefault<z.ZodEnum<{
+                    memory: "memory";
+                    redis: "redis";
+                }>>;
+                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+                maxTtlMs: z.ZodDefault<z.ZodNumber>;
+                minTtlMs: z.ZodDefault<z.ZodNumber>;
                 redis: z.ZodOptional<z.ZodObject<{
-                    host: z.ZodString;
-                    port: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    url: z.ZodOptional<z.ZodString>;
+                    host: z.ZodOptional<z.ZodString>;
+                    port: z.ZodOptional<z.ZodNumber>;
                     password: z.ZodOptional<z.ZodString>;
-                    db: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
-                    tls: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-                    keyPrefix: z.ZodDefault<z.ZodOptional<z.ZodString>>;
-                    defaultTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+                    db: z.ZodOptional<z.ZodNumber>;
+                    tls: z.ZodOptional<z.ZodBoolean>;
+                    keyPrefix: z.ZodDefault<z.ZodString>;
                 }, z.core.$strip>>;
-                defaultTtlMs: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+            security: z.ZodOptional<z.ZodObject<{
+                blockPrivateIPs: z.ZodDefault<z.ZodBoolean>;
+                allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                blockedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                warnOnLocalhostRedirects: z.ZodDefault<z.ZodBoolean>;
+                allowInsecureForTesting: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            network: z.ZodOptional<z.ZodObject<{
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+                maxResponseSizeBytes: z.ZodDefault<z.ZodNumber>;
+                redirectPolicy: z.ZodDefault<z.ZodEnum<{
+                    deny: "deny";
+                    "same-origin": "same-origin";
+                    allow: "allow";
+                }>>;
+                maxRedirects: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         mode: z.ZodLiteral<"orchestrated">;
         type: z.ZodLiteral<"remote">;

package/common/metadata/app.metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.metadata.d.ts","sourceRoot":"","sources":["../../../src/common/metadata/app.metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAkC,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,WAAW,EACZ,MAAM,eAAe,CAAC;AAYvB;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAE3B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IAEvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IAEzB;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IAEvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IAErB;;;OAGG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IAExB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;CAC1C;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiBD,CAAC;AAM3C;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE;;;OAGG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,uBAAuB,CAAC;CACtC,GACD;IACE;;;OAGG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACE;;;OAGG;IACH,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,OAAO,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAE1C;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAE1C;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAE9B;;;OAGG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IAExB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC;CACzC;AA+BD,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBD,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,iBAAiB,CAAC"}
+{"version":3,"file":"app.metadata.d.ts","sourceRoot":"","sources":["../../../src/common/metadata/app.metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAkC,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,SAAS,EACV,MAAM,eAAe,CAAC;AAavB;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAE3B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAEnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IAEvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IAEzB;;;;OAIG;IACH,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IAEvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IAErB;;;;OAIG;IACH,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IAErB;;;OAGG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IAExB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC;CAC1C;AAED,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBD,CAAC;AAM3C;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE;;;OAGG;IACH,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,uBAAuB,CAAC;CACtC,GACD;IACE;;;OAGG;IACH,IAAI,EAAE,SAAS,CAAC;IAChB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACE;;;OAGG;IACH,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEN;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;OAMG;IACH,OAAO,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;IAE1C;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAE1C;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAE9B;;;OAGG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC;IAExB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAAC;CACzC;AA+BD,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBD,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,iBAAiB,CAAC"}