@frontmcp/sdk 1.0.4 → 1.1.0

package/prompt/flows/prompts-list.flow.d.ts

@@ -1,65 +1,64 @@
-import { FlowBase, FlowRunOptions } from '../../common';
+import { FlowBase, type FlowRunOptions } from '../../common';
 import 'reflect-metadata';
-import { z } from 'zod';
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{
-        params: z.ZodOptional<z.ZodObject<{
-            _meta: z.ZodOptional<z.ZodObject<{
-                progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-                "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-                    taskId: z.ZodString;
-                }, z.core.$strip>>;
-            }, z.core.$loose>>;
-            cursor: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        method: z.ZodLiteral<"prompts/list">;
-    }, z.core.$strip>;
-    ctx: z.ZodUnknown;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodObject<{
-    _meta: z.ZodOptional<z.ZodObject<{
-        progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-        "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-            taskId: z.ZodString;
-        }, z.core.$strip>>;
-    }, z.core.$loose>>;
-    nextCursor: z.ZodOptional<z.ZodString>;
-    prompts: z.ZodArray<z.ZodObject<{
-        description: z.ZodOptional<z.ZodString>;
-        arguments: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            name: z.ZodString;
-            description: z.ZodOptional<z.ZodString>;
-            required: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strip>>>;
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-        icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            src: z.ZodString;
-            mimeType: z.ZodOptional<z.ZodString>;
-            sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            theme: z.ZodOptional<z.ZodEnum<{
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{
+        params: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+                "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                    taskId: import("@frontmcp/lazy-zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+            }, import("zod/v4/core").$loose>>;
+            cursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        method: import("@frontmcp/lazy-zod").ZodLiteral<"prompts/list">;
+    }, import("zod/v4/core").$strip>;
+    ctx: import("@frontmcp/lazy-zod").ZodUnknown;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+        "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            taskId: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$loose>>;
+    nextCursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    prompts: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        description: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        arguments: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+            name: import("@frontmcp/lazy-zod").ZodString;
+            description: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            required: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>>>;
+        _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>>;
+        icons: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+            src: import("@frontmcp/lazy-zod").ZodString;
+            mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            sizes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+            theme: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
                 light: "light";
                 dark: "dark";
             }>>;
-        }, z.core.$strip>>>;
-        name: z.ZodString;
-        title: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$loose>;
-declare const stateSchema: z.ZodObject<{
-    cursor: z.ZodOptional<z.ZodString>;
-    prompts: z.ZodArray<z.ZodObject<{
-        ownerName: z.ZodString;
-        prompt: z.ZodAny;
-    }, z.core.$strip>>;
-    resolvedPrompts: z.ZodArray<z.ZodObject<{
-        ownerName: z.ZodString;
-        prompt: z.ZodAny;
-        finalName: z.ZodString;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+        }, import("zod/v4/core").$strip>>>;
+        name: import("@frontmcp/lazy-zod").ZodString;
+        title: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$loose>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    cursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    prompts: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        ownerName: import("@frontmcp/lazy-zod").ZodString;
+        prompt: import("@frontmcp/lazy-zod").ZodAny;
+    }, import("zod/v4/core").$strip>>;
+    resolvedPrompts: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        ownerName: import("@frontmcp/lazy-zod").ZodString;
+        prompt: import("@frontmcp/lazy-zod").ZodAny;
+        finalName: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>;
 declare const plan: {
     readonly pre: ["parseInput", "ensureRemoteCapabilities"];
-    readonly execute: ["findPrompts", "resolveConflicts"];
+    readonly execute: ["findPrompts", "filterByAuthorities", "resolveConflicts"];
     readonly post: ["parsePrompts"];
 };
 declare global {
@@ -79,6 +78,11 @@ export default class PromptsListFlow extends FlowBase<typeof name> {
      */
     ensureRemoteCapabilities(): Promise<void>;
     findPrompts(): Promise<void>;
+    /**
+     * Filter prompts by entry-level authorities.
+     * Hookable: developers can use Will/Did/Around on 'filterByAuthorities'.
+     */
+    filterByAuthorities(): Promise<void>;
     resolveConflicts(): Promise<void>;
     parsePrompts(): Promise<void>;
 }

package/prompt/flows/prompts-list.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompts-list.flow.d.ts","sourceRoot":"","sources":["../../../src/prompt/flows/prompts-list.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,QAAQ,EAAsC,cAAc,EAAe,MAAM,cAAc,CAAC;AAC/G,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;iBAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA0B,CAAC;AAE7C,QAAA,MAAM,WAAW;;;;;;;;;;;iBAiBf,CAAC;AAIH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,sBAAsB,EAAE,cAAc,CACpC,eAAe,EACf,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,sBAA+B,CAAC;AAU7C,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAChE,MAAM,wCAA6C;IAEnD,OAAO,CAAC,MAAM;IAKR,UAAU;IAwBhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,WAAW;IAoCX,gBAAgB;IAqChB,YAAY;CA2BnB"}
+{"version":3,"file":"prompts-list.flow.d.ts","sourceRoot":"","sources":["../../../src/prompt/flows/prompts-list.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,QAAQ,EAIR,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AAEtB,OAAO,kBAAkB,CAAC;AAO1B,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAA0B,CAAC;AAE7C,QAAA,MAAM,WAAW;;;;;;;;;;;gCAiBf,CAAC;AAIH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,sBAAsB,EAAE,cAAc,CACpC,eAAe,EACf,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,sBAA+B,CAAC;AAU7C,MAAM,CAAC,OAAO,OAAO,eAAgB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAChE,MAAM,wCAA6C;IAEnD,OAAO,CAAC,MAAM;IAKR,UAAU;IAwBhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,WAAW;IAmCjB;;;OAGG;IAEG,mBAAmB;IA+BnB,gBAAgB;IAqChB,YAAY;CA2BnB"}

package/resource/flows/read-resource.flow.d.ts

@@ -1,93 +1,93 @@
-import { FlowBase, FlowRunOptions, ResourceContext, ResourceEntry } from '../../common';
-import { z } from 'zod';
-import { AuthInfo } from '@frontmcp/protocol';
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{
-        method: z.ZodLiteral<"resources/read">;
-        params: z.ZodObject<{
-            _meta: z.ZodOptional<z.ZodObject<{
-                progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-                "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-                    taskId: z.ZodString;
-                }, z.core.$strip>>;
-            }, z.core.$loose>>;
-            uri: z.ZodString;
-        }, z.core.$strip>;
-    }, z.core.$strip>;
-    ctx: z.ZodAny;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodObject<{
-    _meta: z.ZodOptional<z.ZodObject<{
-        progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-        "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-            taskId: z.ZodString;
-        }, z.core.$strip>>;
-    }, z.core.$loose>>;
-    contents: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
-        uri: z.ZodString;
-        mimeType: z.ZodOptional<z.ZodString>;
-        _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        text: z.ZodString;
-    }, z.core.$strip>, z.ZodObject<{
-        uri: z.ZodString;
-        mimeType: z.ZodOptional<z.ZodString>;
-        _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-        blob: z.ZodString;
-    }, z.core.$strip>]>>;
-}, z.core.$loose>;
-declare const stateSchema: z.ZodObject<{
-    input: z.ZodObject<{
-        uri: z.ZodString;
-    }, z.core.$strip>;
+import { z } from '@frontmcp/lazy-zod';
+import { type AuthInfo } from '@frontmcp/protocol';
+import { FlowBase, type FlowRunOptions, type ResourceContext, type ResourceEntry } from '../../common';
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{
+        method: import("@frontmcp/lazy-zod").ZodLiteral<"resources/read">;
+        params: import("@frontmcp/lazy-zod").ZodObject<{
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+                "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                    taskId: import("@frontmcp/lazy-zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+            }, import("zod/v4/core").$loose>>;
+            uri: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>;
+    ctx: import("@frontmcp/lazy-zod").ZodAny;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+        "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            taskId: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$loose>>;
+    contents: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
+        uri: import("@frontmcp/lazy-zod").ZodString;
+        mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+        text: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        uri: import("@frontmcp/lazy-zod").ZodString;
+        mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+        blob: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>]>>;
+}, import("zod/v4/core").$loose>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    input: import("@frontmcp/lazy-zod").ZodObject<{
+        uri: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>;
     authInfo: z.ZodType<AuthInfo>;
-    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    params: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodString>>;
     resource: z.ZodType<ResourceEntry>;
     resourceContext: z.ZodType<ResourceContext>;
-    rawOutput: z.ZodOptional<z.ZodAny>;
-    output: z.ZodObject<{
-        _meta: z.ZodOptional<z.ZodObject<{
-            progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-            "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-                taskId: z.ZodString;
-            }, z.core.$strip>>;
-        }, z.core.$loose>>;
-        contents: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
-            uri: z.ZodString;
-            mimeType: z.ZodOptional<z.ZodString>;
-            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            text: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            uri: z.ZodString;
-            mimeType: z.ZodOptional<z.ZodString>;
-            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            blob: z.ZodString;
-        }, z.core.$strip>]>>;
-    }, z.core.$loose>;
-    resourceOwnerId: z.ZodOptional<z.ZodString>;
-    sessionId: z.ZodOptional<z.ZodString>;
-    isUIResource: z.ZodDefault<z.ZodBoolean>;
-    uiResourceResult: z.ZodOptional<z.ZodObject<{
-        _meta: z.ZodOptional<z.ZodObject<{
-            progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-            "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-                taskId: z.ZodString;
-            }, z.core.$strip>>;
-        }, z.core.$loose>>;
-        contents: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
-            uri: z.ZodString;
-            mimeType: z.ZodOptional<z.ZodString>;
-            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            text: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            uri: z.ZodString;
-            mimeType: z.ZodOptional<z.ZodString>;
-            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            blob: z.ZodString;
-        }, z.core.$strip>]>>;
-    }, z.core.$loose>>;
-}, z.core.$strip>;
+    rawOutput: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodAny>;
+    output: import("@frontmcp/lazy-zod").ZodObject<{
+        _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+            "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                taskId: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+        }, import("zod/v4/core").$loose>>;
+        contents: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
+            uri: import("@frontmcp/lazy-zod").ZodString;
+            mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+            text: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            uri: import("@frontmcp/lazy-zod").ZodString;
+            mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+            blob: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>]>>;
+    }, import("zod/v4/core").$loose>;
+    resourceOwnerId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    sessionId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    isUIResource: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    uiResourceResult: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+            "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                taskId: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+        }, import("zod/v4/core").$loose>>;
+        contents: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
+            uri: import("@frontmcp/lazy-zod").ZodString;
+            mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+            text: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+            uri: import("@frontmcp/lazy-zod").ZodString;
+            mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnknown>>;
+            blob: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>]>>;
+    }, import("zod/v4/core").$loose>>;
+}, import("zod/v4/core").$strip>;
 declare const plan: {
-    readonly pre: ["parseInput", "ensureRemoteCapabilities", "findResource", "createResourceContext"];
+    readonly pre: ["parseInput", "ensureRemoteCapabilities", "findResource", "checkEntryAuthorities", "createResourceContext"];
     readonly execute: ["execute", "validateOutput"];
     readonly finalize: ["finalize"];
 };
@@ -107,6 +107,11 @@ export default class ReadResourceFlow extends FlowBase<typeof name> {
      */
     ensureRemoteCapabilities(): Promise<void>;
     findResource(): Promise<void>;
+    /**
+     * Check entry-level authorities (RBAC/ABAC/ReBAC) declared in resource metadata.
+     * Hookable: developers can use Will/Did/Around on 'checkEntryAuthorities'.
+     */
+    checkEntryAuthorities(): Promise<void>;
     createResourceContext(): Promise<void>;
     execute(): Promise<void>;
     validateOutput(): Promise<void>;

package/resource/flows/read-resource.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"read-resource.flow.d.ts","sourceRoot":"","sources":["../../../src/resource/flows/read-resource.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,QAAQ,EAAyB,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAY9C,QAAA,MAAM,WAAW;;;;;;;;;;;;;;iBAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;iBAA2B,CAAC;AAE9C,QAAA,MAAM,WAAW;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;cAG9B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;qBAEjB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYtD,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,yBAAyB,EAAE,cAAc,CACvC,gBAAgB,EAChB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,yBAAkC,CAAC;AAUhD,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IACjE,MAAM,wCAA8C;IAG9C,UAAU;IA+BhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,YAAY;IA+DZ,qBAAqB;IAkDrB,OAAO;IA4BP,cAAc;IAuBd,QAAQ;CA6Cf"}
+{"version":3,"file":"read-resource.flow.d.ts","sourceRoot":"","sources":["../../../src/resource/flows/read-resource.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAAuD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAGxG,OAAO,EAEL,QAAQ,EAGR,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAWtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;gCAA2B,CAAC;AAE9C,QAAA,MAAM,WAAW;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;cAG9B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;qBAEjB,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAYtD,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,yBAAyB,EAAE,cAAc,CACvC,gBAAgB,EAChB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,yBAAkC,CAAC;AAUhD,MAAM,CAAC,OAAO,OAAO,gBAAiB,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IACjE,MAAM,wCAA8C;IAG9C,UAAU;IA+BhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,YAAY;IA8DlB;;;OAGG;IAEG,qBAAqB;IA6CrB,qBAAqB;IAkDrB,OAAO;IA4BP,cAAc;IAuBd,QAAQ;CA6Cf"}

package/resource/flows/resource-templates-list.flow.d.ts

@@ -1,70 +1,69 @@
-import { FlowBase, FlowRunOptions, ResourceEntry } from '../../common';
+import { FlowBase, ResourceEntry, type FlowRunOptions } from '../../common';
 import 'reflect-metadata';
-import { z } from 'zod';
-declare const inputSchema: z.ZodObject<{
-    request: z.ZodObject<{
-        params: z.ZodOptional<z.ZodObject<{
-            _meta: z.ZodOptional<z.ZodObject<{
-                progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-                "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-                    taskId: z.ZodString;
-                }, z.core.$strip>>;
-            }, z.core.$loose>>;
-            cursor: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>;
-        method: z.ZodLiteral<"resources/templates/list">;
-    }, z.core.$strip>;
-    ctx: z.ZodUnknown;
-}, z.core.$strip>;
-declare const outputSchema: z.ZodObject<{
-    _meta: z.ZodOptional<z.ZodObject<{
-        progressToken: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
-        "io.modelcontextprotocol/related-task": z.ZodOptional<z.ZodObject<{
-            taskId: z.ZodString;
-        }, z.core.$strip>>;
-    }, z.core.$loose>>;
-    nextCursor: z.ZodOptional<z.ZodString>;
-    resourceTemplates: z.ZodArray<z.ZodObject<{
-        uriTemplate: z.ZodString;
-        description: z.ZodOptional<z.ZodString>;
-        mimeType: z.ZodOptional<z.ZodString>;
-        annotations: z.ZodOptional<z.ZodObject<{
-            audience: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    request: import("@frontmcp/lazy-zod").ZodObject<{
+        params: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+                "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                    taskId: import("@frontmcp/lazy-zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+            }, import("zod/v4/core").$loose>>;
+            cursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        method: import("@frontmcp/lazy-zod").ZodLiteral<"resources/templates/list">;
+    }, import("zod/v4/core").$strip>;
+    ctx: import("@frontmcp/lazy-zod").ZodUnknown;
+}, import("zod/v4/core").$strip>;
+declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        progressToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodNumber]>>;
+        "io.modelcontextprotocol/related-task": import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            taskId: import("@frontmcp/lazy-zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$loose>>;
+    nextCursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    resourceTemplates: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        uriTemplate: import("@frontmcp/lazy-zod").ZodString;
+        description: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        annotations: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            audience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodEnum<{
                 user: "user";
                 assistant: "assistant";
             }>>>;
-            priority: z.ZodOptional<z.ZodNumber>;
-            lastModified: z.ZodOptional<z.ZodISODateTime>;
-        }, z.core.$strip>>;
-        _meta: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
-        icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            src: z.ZodString;
-            mimeType: z.ZodOptional<z.ZodString>;
-            sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            theme: z.ZodOptional<z.ZodEnum<{
+            priority: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            lastModified: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodISODateTime>;
+        }, import("zod/v4/core").$strip>>;
+        _meta: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>>;
+        icons: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+            src: import("@frontmcp/lazy-zod").ZodString;
+            mimeType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            sizes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+            theme: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
                 light: "light";
                 dark: "dark";
             }>>;
-        }, z.core.$strip>>>;
-        name: z.ZodString;
-        title: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$loose>;
-declare const stateSchema: z.ZodObject<{
-    cursor: z.ZodOptional<z.ZodString>;
-    templates: z.ZodArray<z.ZodObject<{
-        ownerName: z.ZodString;
-        template: z.ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
-    }, z.core.$strip>>;
-    resolvedTemplates: z.ZodArray<z.ZodObject<{
-        ownerName: z.ZodString;
-        template: z.ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
-        finalName: z.ZodString;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+        }, import("zod/v4/core").$strip>>>;
+        name: import("@frontmcp/lazy-zod").ZodString;
+        title: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$loose>;
+declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
+    cursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    templates: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        ownerName: import("@frontmcp/lazy-zod").ZodString;
+        template: import("zod").ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
+    }, import("zod/v4/core").$strip>>;
+    resolvedTemplates: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        ownerName: import("@frontmcp/lazy-zod").ZodString;
+        template: import("zod").ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
+        finalName: import("@frontmcp/lazy-zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>;
 declare const plan: {
     readonly pre: ["parseInput", "ensureRemoteCapabilities"];
-    readonly execute: ["findTemplates", "resolveConflicts"];
+    readonly execute: ["findTemplates", "filterByAuthorities", "resolveConflicts"];
     readonly post: ["parseTemplates"];
 };
 declare global {
@@ -84,6 +83,11 @@ export default class ResourceTemplatesListFlow extends FlowBase<typeof name> {
      */
     ensureRemoteCapabilities(): Promise<void>;
     findTemplates(): Promise<void>;
+    /**
+     * Filter resource templates by entry-level authorities.
+     * Hookable: developers can use Will/Did/Around on 'filterByAuthorities'.
+     */
+    filterByAuthorities(): Promise<void>;
     resolveConflicts(): Promise<void>;
     parseTemplates(): Promise<void>;
 }

package/resource/flows/resource-templates-list.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-templates-list.flow.d.ts","sourceRoot":"","sources":["../../../src/resource/flows/resource-templates-list.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,QAAQ,EAAsC,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjH,OAAO,kBAAkB,CAAC;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;iBAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAoC,CAAC;AAEvD,QAAA,MAAM,WAAW;;;;;;;;;;;iBAef,CAAC;AAIH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,mCAAmC,EAAE,cAAc,CACjD,yBAAyB,EACzB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,mCAA4C,CAAC;AAU1D,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC1E,MAAM,wCAAuD;IAE7D,OAAO,CAAC,MAAM;IAKR,UAAU;IAwBhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,aAAa;IA4Bb,gBAAgB;IAqChB,cAAc;CAgDrB"}
+{"version":3,"file":"resource-templates-list.flow.d.ts","sourceRoot":"","sources":["../../../src/resource/flows/resource-templates-list.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,QAAQ,EAGR,aAAa,EAEb,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,kBAAkB,CAAC;AAW1B,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAoC,CAAC;AAEvD,QAAA,MAAM,WAAW;;;;;;;;;;;gCAef,CAAC;AAIH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,mCAAmC,EAAE,cAAc,CACjD,yBAAyB,EACzB,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,mCAA4C,CAAC;AAU1D,MAAM,CAAC,OAAO,OAAO,yBAA0B,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC1E,MAAM,wCAAuD;IAE7D,OAAO,CAAC,MAAM;IAKR,UAAU;IAwBhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,aAAa;IA2BnB;;;OAGG;IAEG,mBAAmB;IAiCnB,gBAAgB;IAqChB,cAAc;CAgDrB"}