@frontmcp/sdk 1.3.0 → 1.4.0

package/common/schemas/http-output.schema.d.ts

@@ -19,8 +19,8 @@ export declare const HttpCookieSchema: import("@frontmcp/lazy-zod").ZodObject<{
     secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
     sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
         strict: "strict";
-        lax: "lax";
         none: "none";
+        lax: "lax";
     }>>;
     maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
     expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -35,8 +35,8 @@ export declare const HttpCookies: import("@frontmcp/lazy-zod").ZodDefault<import
     secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
     sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
         strict: "strict";
-        lax: "lax";
         none: "none";
+        lax: "lax";
     }>>;
     maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
     expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -58,8 +58,8 @@ export declare const HttpRedirectSchema: import("@frontmcp/lazy-zod").ZodObject<
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -83,8 +83,8 @@ export declare const HttpJsonSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -117,8 +117,8 @@ export declare const HttpTextSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -140,8 +140,8 @@ export declare const HttpHtmlSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -177,8 +177,8 @@ export declare const HttpBinarySchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -209,8 +209,8 @@ export declare const HttpImageSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -254,8 +254,8 @@ export declare const HttpStreamSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -282,8 +282,8 @@ export declare const HttpSseSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -336,8 +336,8 @@ export declare const HttpJsonRpcSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -363,8 +363,8 @@ export declare const HttpProblemSchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -386,8 +386,8 @@ export declare const HttpEmptySchema: import("@frontmcp/lazy-zod").ZodObject<{
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -410,8 +410,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -431,8 +431,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -452,8 +452,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -471,8 +471,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -503,8 +503,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -531,8 +531,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -569,8 +569,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -593,8 +593,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -643,8 +643,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -666,8 +666,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -685,8 +685,8 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
         secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             strict: "strict";
-            lax: "lax";
             none: "none";
+            lax: "lax";
         }>>;
         maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
@@ -712,7 +712,7 @@ export declare const httpRespond: {
         headers?: Record<string, string>;
         body?: Record<string, unknown>;
     }) => z.infer<typeof HttpJsonSchema>;
-    html: (markup: string, status?: number) => z.infer<typeof HttpHtmlSchema>;
+    html: (markup: string, status?: number, headers?: Record<string, string>) => z.infer<typeof HttpHtmlSchema>;
     notFound: (message?: string) => z.infer<typeof HttpTextSchema>;
     noValidSessionError: () => JSONRPCError;
     rpcError: (message: string, requestId?: RequestId | null) => z.infer<typeof HttpJsonSchema>;

package/common/schemas/http-output.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-output.schema.d.ts","sourceRoot":"","sources":["../../../src/common/schemas/http-output.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAG5B;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAG,KAAc,CAAC;AACvC,eAAO,MAAM,SAAS,oCAAqC,CAAC;AAC5D,eAAO,MAAM,gBAAgB,qBAAsB,CAAC;AAcpD,eAAO,MAAM,UAAU,wCAAqC,CAAC;AAC7D,eAAO,MAAM,kBAAkB,iDAAuB,CAAC;AACvD,eAAO,MAAM,eAAe,+BAA8B,CAAC;AAE3D,eAAO,MAAM,WAAW,4XAEV,CAAC;AAEf,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;gCAU3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,WAAW;;;;;;;;;;;;;;kCAAwC,CAAC;AASjE;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;gCAMb,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;gCAST,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,cAAc;;gCAIX,CAAC;AAEjB,eAAO,MAAM,kBAAkB;;gCAA4C,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;gCAYT,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;gCAGzB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAaX,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAa1B,CAAC;AAEH;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AASjG,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;gCAWX,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;gCAGxB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCASZ,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;gCAWZ,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;gCAKV,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CAc3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,WAAW;WACf,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAC5B,CAAC,UACA,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC,KAC7C,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;eAItB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;6BAMhF;QACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;0BAQZ;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;mBAQnB,MAAM,sBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;oCAOjC,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;+BAOxC,YAAY;wBAMjB,MAAM,cAAc,SAAS,GAAG,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;IAWzF;;;;OAIG;8BACuB,MAAM,cAAc,SAAS,GAAG,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;IAW/F;;;;OAIG;+BACwB,MAAM,cAAc,SAAS,GAAG,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;4BAWxE,SAAS,UAAU,MAAM,WAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,cAAc;uBAMjF,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC;iBAOjD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;gBAGrD,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC;mBAGhC,GAAG,GAAG,GAAG,YAAkB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC;wBAG7E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC;CAG7E,CAAC"}
+{"version":3,"file":"http-output.schema.d.ts","sourceRoot":"","sources":["../../../src/common/schemas/http-output.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAG5B;;GAEG;AACH,eAAO,MAAM,QAAQ,EAAG,KAAc,CAAC;AACvC,eAAO,MAAM,SAAS,oCAAqC,CAAC;AAC5D,eAAO,MAAM,gBAAgB,qBAAsB,CAAC;AAcpD,eAAO,MAAM,UAAU,wCAAqC,CAAC;AAC7D,eAAO,MAAM,kBAAkB,iDAAuB,CAAC;AACvD,eAAO,MAAM,eAAe,+BAA8B,CAAC;AAE3D,eAAO,MAAM,WAAW,4XAEV,CAAC;AAEf,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;gCAU3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,WAAW;;;;;;;;;;;;;;kCAAwC,CAAC;AASjE;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;gCAMb,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;gCAST,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,cAAc;;gCAIX,CAAC;AAEjB,eAAO,MAAM,kBAAkB;;gCAA4C,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;gCAYT,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;gCAGzB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAaX,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAa1B,CAAC;AAEH;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAA;CAAE,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AASjG,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;gCAWX,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;gCAGxB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCASZ,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;gCAWZ,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;gCAKV,CAAC;AAEnB;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0CAc3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,WAAW;WACf,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,QAC5B,CAAC,UACA,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC,KAC7C,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;eAItB,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;6BAMhF;QACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;0BAQZ;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;mBAQnB,MAAM,6BAA0B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;oCAQnE,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;+BAOxC,YAAY;wBAMjB,MAAM,cAAc,SAAS,GAAG,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;IAWzF;;;;OAIG;8BACuB,MAAM,cAAc,SAAS,GAAG,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;IAW/F;;;;OAIG;+BACwB,MAAM,cAAc,SAAS,GAAG,IAAI,KAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;4BAWxE,SAAS,UAAU,MAAM,WAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,cAAc;uBAMjF,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC;iBAOjD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC;gBAGrD,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC;mBAGhC,GAAG,GAAG,GAAG,YAAkB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC;wBAG7E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC;CAG7E,CAAC"}

package/common/tokens/app.tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/app.tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGjD,eAAO,MAAM,sBAAsB,EAAE,gBAAgB,CAAC,gBAAgB,CAmB5D,CAAC;AAEX,eAAO,MAAM,uBAAuB,EAAE,gBAAgB,CAAC,iBAAiB,CAgB9D,CAAC"}
+{"version":3,"file":"app.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/app.tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGjD,eAAO,MAAM,sBAAsB,EAAE,gBAAgB,CAAC,gBAAgB,CAsB5D,CAAC;AAEX,eAAO,MAAM,uBAAuB,EAAE,gBAAgB,CAAC,iBAAiB,CAgB9D,CAAC"}

package/common/tokens/front-mcp.tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"front-mcp.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/front-mcp.tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGjD,eAAO,MAAM,cAAc,EAAE,gBAAgB,CAAC,gBAAgB,CAwD7D,CAAC"}
+{"version":3,"file":"front-mcp.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/front-mcp.tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGjD,eAAO,MAAM,cAAc,EAAE,gBAAgB,CAAC,gBAAgB,CA0D7D,CAAC"}

package/common/tokens/skill.tokens.d.ts

@@ -6,10 +6,12 @@ export declare const FrontMcpSkillTokens: {
     readonly instructions: symbol;
     readonly tools: symbol;
     readonly tags: symbol;
+    readonly referencedOperations: symbol;
     readonly parameters: symbol;
     readonly examples: symbol;
     readonly priority: symbol;
     readonly hideFromDiscovery: symbol;
+    readonly alwaysLoad: symbol;
     readonly toolValidation: symbol;
     readonly visibility: symbol;
     readonly license: symbol;

package/common/tokens/skill.tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/skill.tokens.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;CAwBiD,CAAC;AAElF,eAAO,MAAM,qBAAqB,QAA6C,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,QAAyC,CAAC"}
+{"version":3,"file":"skill.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/skill.tokens.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;CA0BiD,CAAC;AAElF,eAAO,MAAM,qBAAqB,QAA6C,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,QAAyC,CAAC"}

package/common/tokens/tool.tokens.d.ts

@@ -18,6 +18,7 @@ export declare const FrontMcpToolTokens: {
     readonly timeout: symbol;
     readonly availableWhen: symbol;
     readonly execution: symbol;
+    readonly output: symbol;
 };
 export declare const extendedToolMetadata: symbol;
 //# sourceMappingURL=tool.tokens.d.ts.map

package/common/tokens/tool.tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/tool.tokens.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;CAoBgD,CAAC;AAEhF,eAAO,MAAM,oBAAoB,QAA4C,CAAC"}
+{"version":3,"file":"tool.tokens.d.ts","sourceRoot":"","sources":["../../../src/common/tokens/tool.tokens.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;CAqBgD,CAAC;AAEhF,eAAO,MAAM,oBAAoB,QAA4C,CAAC"}

package/common/types/auth/session.types.d.ts

@@ -27,11 +27,11 @@ export declare const sessionIdSchema: import("@frontmcp/lazy-zod").ZodObject<{
         isPublic: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
         platformType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
             unknown: "unknown";
+            continue: "continue";
             openai: "openai";
             claude: "claude";
             gemini: "gemini";
             cursor: "cursor";
-            continue: "continue";
             cody: "cody";
             "generic-mcp": "generic-mcp";
             "ext-apps": "ext-apps";
@@ -61,11 +61,11 @@ export declare const authorizationSchema: import("@frontmcp/lazy-zod").ZodObject
             isPublic: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
             platformType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
                 unknown: "unknown";
+                continue: "continue";
                 openai: "openai";
                 claude: "claude";
                 gemini: "gemini";
                 cursor: "cursor";
-                continue: "continue";
                 cody: "cody";
                 "generic-mcp": "generic-mcp";
                 "ext-apps": "ext-apps";

package/common/types/options/auth/index.d.ts

@@ -1,11 +1,11 @@
-export type { PublicAccessConfig, LocalSigningConfig, ProviderConfig, RemoteProviderConfig, TokenStorageConfig, TokenRefreshConfig, SkippedAppBehavior, ConsentConfig, FederatedAuthConfig, IncrementalAuthConfig, PublicAuthOptionsInterface, TransparentAuthOptionsInterface, LocalAuthOptionsInterface, RemoteAuthOptionsInterface, LocalOrRemoteAuthOptionsInterface, AuthOptionsInterface, AuthMode, OrchestratedLocalOptionsInterface, OrchestratedRemoteOptionsInterface, OrchestratedAuthOptionsInterface, OrchestratedType, } from '@frontmcp/auth';
-export { publicAccessConfigSchema, localSigningConfigSchema, providerConfigSchema, remoteProviderConfigSchema, flatRemoteProviderFields, tokenStorageConfigSchema, tokenRefreshConfigSchema, skippedAppBehaviorSchema, consentConfigSchema, federatedAuthConfigSchema, incrementalAuthConfigSchema, } from '@frontmcp/auth';
-export type { PublicAccessConfigZod, PublicAccessConfigInput, LocalSigningConfigZod, LocalSigningConfigInput, ProviderConfigZod, ProviderConfigInput, RemoteProviderConfigZod, RemoteProviderConfigInput, TokenStorageConfigZod, TokenStorageConfigInput, TokenRefreshConfigZod, TokenRefreshConfigInput, SkippedAppBehaviorZod, ConsentConfigZod, ConsentConfigInput, FederatedAuthConfigZod, FederatedAuthConfigInput, IncrementalAuthConfigZod, IncrementalAuthConfigInput, RedisConfig, } from '@frontmcp/auth';
+export type { PublicAccessConfig, LocalSigningConfig, ProviderConfig, RemoteProviderConfig, TokenStorageConfig, TokenStorageSqliteConfig, SecureStoreConfig, SecureStoreScopeType, SecureStoreEncryptionConfig, SecureStoreCustomBackend, TokenRefreshConfig, SkippedAppBehavior, ConsentConfig, FederatedAuthConfig, IncrementalAuthConfig, UpstreamProviderOptions, LocalDcrConfig, LocalDcrClient, PublicAuthOptionsInterface, TransparentAuthOptionsInterface, LocalAuthOptionsInterface, RemoteAuthOptionsInterface, LocalOrRemoteAuthOptionsInterface, AuthOptionsInterface, AuthMode, LoginFieldConfig, LoginSubjectConfig, LoginConfig, LoginRenderContext, AuthenticateInput, AuthenticateContext, AuthenticateCredential, AuthenticateSuccess, AuthenticateFailure, AuthenticateResult, AuthenticateFn, AuthSlot, AuthUiMap, AuthExtraContext, AuthExtraResult, AuthExtraHandler, AuthExtrasMap, OrchestratedLocalOptionsInterface, OrchestratedRemoteOptionsInterface, OrchestratedAuthOptionsInterface, OrchestratedType, } from '@frontmcp/auth';
+export { publicAccessConfigSchema, localSigningConfigSchema, providerConfigSchema, remoteProviderConfigSchema, flatRemoteProviderFields, tokenStorageConfigSchema, tokenStorageSqliteSchema, secureStoreConfigSchema, secureStoreScopeSchema, secureStoreEncryptionSchema, secureStoreCustomBackendSchema, tokenRefreshConfigSchema, skippedAppBehaviorSchema, consentConfigSchema, federatedAuthConfigSchema, incrementalAuthConfigSchema, upstreamProviderSchema, localDcrClientSchema, localDcrConfigSchema, } from '@frontmcp/auth';
+export type { PublicAccessConfigZod, PublicAccessConfigInput, LocalSigningConfigZod, LocalSigningConfigInput, ProviderConfigZod, ProviderConfigInput, RemoteProviderConfigZod, RemoteProviderConfigInput, TokenStorageConfigZod, TokenStorageConfigInput, SecureStoreConfigZod, SecureStoreConfigInput, SecureStoreScopeZod, SecureStoreEncryptionConfigZod, TokenRefreshConfigZod, TokenRefreshConfigInput, SkippedAppBehaviorZod, ConsentConfigZod, ConsentConfigInput, FederatedAuthConfigZod, FederatedAuthConfigInput, IncrementalAuthConfigZod, IncrementalAuthConfigInput, UpstreamProviderOptionsZod, UpstreamProviderOptionsInput, LocalDcrClientConfigZod, LocalDcrClientConfigInput, LocalDcrConfigZod, LocalDcrConfigInput, RedisConfig, } from '@frontmcp/auth';
 export { publicAuthOptionsSchema } from '@frontmcp/auth';
 export type { PublicAuthOptions, PublicAuthOptionsInput } from '@frontmcp/auth';
 export { transparentAuthOptionsSchema } from '@frontmcp/auth';
 export type { TransparentAuthOptions, TransparentAuthOptionsInput } from '@frontmcp/auth';
-export { localAuthSchema, remoteAuthSchema, orchestratedLocalSchema, orchestratedRemoteSchema } from '@frontmcp/auth';
+export { localAuthSchema, remoteAuthSchema, loginConfigSchema, authenticateFnSchema, orchestratedLocalSchema, orchestratedRemoteSchema, } from '@frontmcp/auth';
 export type { LocalAuthOptions, LocalAuthOptionsInput, RemoteAuthOptions, RemoteAuthOptionsInput, LocalOrRemoteAuthOptions, LocalOrRemoteAuthOptionsInput, OrchestratedLocalOptions, OrchestratedLocalOptionsInput, OrchestratedRemoteOptions, OrchestratedRemoteOptionsInput, OrchestratedAuthOptions, OrchestratedAuthOptionsInput, } from '@frontmcp/auth';
 export { authOptionsSchema } from '@frontmcp/auth';
 export type { AuthOptions, AuthOptionsInput, AuthModeZod } from '@frontmcp/auth';

package/common/types/options/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/index.ts"],"names":[],"mappings":"AAMA,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,oBAAoB,EACpB,QAAQ,EAER,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC1B,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAKhF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC9D,YAAY,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAK1F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AACtH,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAK1E,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/index.ts"],"names":[],"mappings":"AAMA,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EAExB,iBAAiB,EACjB,oBAAoB,EACpB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EAEvB,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,oBAAoB,EACpB,QAAQ,EAER,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EAEd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,aAAa,EAEb,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EAExB,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EAEvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,8BAA8B,EAC9B,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAKhF,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC9D,YAAY,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAK1F,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AAKxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAKjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAK1E,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC"}

package/common/types/options/auth/interfaces.d.ts

@@ -1,2 +1,2 @@
-export type { PublicAccessConfig, LocalSigningConfig, ProviderConfig, RemoteProviderConfig, TokenStorageConfig, TokenRefreshConfig, SkippedAppBehavior, ConsentConfig, FederatedAuthConfig, IncrementalAuthConfig, PublicAuthOptionsInterface, TransparentAuthOptionsInterface, LocalAuthOptionsInterface, RemoteAuthOptionsInterface, LocalOrRemoteAuthOptionsInterface, AuthOptionsInterface, AuthMode, OrchestratedLocalOptionsInterface, OrchestratedRemoteOptionsInterface, OrchestratedAuthOptionsInterface, OrchestratedType, } from '@frontmcp/auth';
+export type { PublicAccessConfig, LocalSigningConfig, ProviderConfig, RemoteProviderConfig, TokenStorageConfig, SecureStoreConfig, SecureStoreEncryptionConfig, SecureStoreCustomBackend, TokenRefreshConfig, SkippedAppBehavior, ConsentConfig, FederatedAuthConfig, IncrementalAuthConfig, UpstreamProviderOptions, LocalDcrConfig, LocalDcrClient, PublicAuthOptionsInterface, TransparentAuthOptionsInterface, LocalAuthOptionsInterface, RemoteAuthOptionsInterface, LocalOrRemoteAuthOptionsInterface, AuthOptionsInterface, AuthMode, LoginFieldConfig, LoginSubjectConfig, LoginConfig, LoginRenderContext, AuthenticateInput, AuthenticateContext, AuthenticateCredential, AuthenticateSuccess, AuthenticateFailure, AuthenticateResult, AuthenticateFn, OrchestratedLocalOptionsInterface, OrchestratedRemoteOptionsInterface, OrchestratedAuthOptionsInterface, OrchestratedType, } from '@frontmcp/auth';
 //# sourceMappingURL=interfaces.d.ts.map

package/common/types/options/auth/interfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/interfaces.ts"],"names":[],"mappings":"AACA,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,oBAAoB,EACpB,QAAQ,EAER,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,gBAAgB,GACjB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/interfaces.ts"],"names":[],"mappings":"AACA,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAElB,iBAAiB,EACjB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,oBAAoB,EACpB,QAAQ,EAER,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EAEd,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,gBAAgB,GACjB,MAAM,gBAAgB,CAAC"}

package/common/types/options/auth/orchestrated.schema.d.ts

@@ -1,3 +1,3 @@
-export { localAuthSchema, remoteAuthSchema, orchestratedLocalSchema, orchestratedRemoteSchema } from '@frontmcp/auth';
+export { localAuthSchema, remoteAuthSchema, loginConfigSchema, authenticateFnSchema, orchestratedLocalSchema, orchestratedRemoteSchema, } from '@frontmcp/auth';
 export type { LocalAuthOptions, LocalAuthOptionsInput, RemoteAuthOptions, RemoteAuthOptionsInput, LocalOrRemoteAuthOptions, LocalOrRemoteAuthOptionsInput, OrchestratedLocalOptions, OrchestratedLocalOptionsInput, OrchestratedRemoteOptions, OrchestratedRemoteOptionsInput, OrchestratedAuthOptions, OrchestratedAuthOptionsInput, } from '@frontmcp/auth';
 //# sourceMappingURL=orchestrated.schema.d.ts.map

package/common/types/options/auth/orchestrated.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/orchestrated.schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAEtH,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"orchestrated.schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/orchestrated.schema.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC"}

package/common/types/options/auth/shared.schemas.d.ts

@@ -1,3 +1,3 @@
-export { publicAccessConfigSchema, localSigningConfigSchema, providerConfigSchema, remoteProviderConfigSchema, flatRemoteProviderFields, tokenStorageConfigSchema, tokenRefreshConfigSchema, skippedAppBehaviorSchema, consentConfigSchema, federatedAuthConfigSchema, incrementalAuthConfigSchema, cimdCacheConfigSchema, cimdSecurityConfigSchema, cimdNetworkConfigSchema, cimdConfigSchema, } from '@frontmcp/auth';
-export type { PublicAccessConfig, PublicAccessConfigInput, LocalSigningConfig, LocalSigningConfigInput, ProviderConfig, ProviderConfigInput, RemoteProviderConfig, RemoteProviderConfigInput, TokenStorageConfig, TokenStorageConfigInput, TokenRefreshConfig, TokenRefreshConfigInput, SkippedAppBehavior, ConsentConfig, ConsentConfigInput, FederatedAuthConfig, FederatedAuthConfigInput, IncrementalAuthConfig, IncrementalAuthConfigInput, CimdCacheConfig, CimdSecurityConfig, CimdNetworkConfig, CimdConfig, CimdConfigInput, RedisConfig, } from '@frontmcp/auth';
+export { publicAccessConfigSchema, localSigningConfigSchema, providerConfigSchema, remoteProviderConfigSchema, flatRemoteProviderFields, tokenStorageConfigSchema, tokenStorageSqliteSchema, tokenRefreshConfigSchema, skippedAppBehaviorSchema, consentConfigSchema, federatedAuthConfigSchema, incrementalAuthConfigSchema, upstreamProviderSchema, localDcrClientSchema, localDcrConfigSchema, cimdCacheConfigSchema, cimdSecurityConfigSchema, cimdNetworkConfigSchema, cimdConfigSchema, } from '@frontmcp/auth';
+export type { PublicAccessConfig, PublicAccessConfigInput, LocalSigningConfig, LocalSigningConfigInput, ProviderConfig, ProviderConfigInput, RemoteProviderConfig, RemoteProviderConfigInput, TokenStorageConfig, TokenStorageConfigInput, TokenStorageSqliteConfig, TokenRefreshConfig, TokenRefreshConfigInput, SkippedAppBehavior, ConsentConfig, ConsentConfigInput, FederatedAuthConfig, FederatedAuthConfigInput, IncrementalAuthConfig, IncrementalAuthConfigInput, UpstreamProviderOptionsZod, UpstreamProviderOptionsInput, LocalDcrClientConfigZod, LocalDcrClientConfigInput, LocalDcrConfigZod, LocalDcrConfigInput, CimdCacheConfig, CimdSecurityConfig, CimdNetworkConfig, CimdConfig, CimdConfigInput, RedisConfig, } from '@frontmcp/auth';
 //# sourceMappingURL=shared.schemas.d.ts.map

package/common/types/options/auth/shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/shared.schemas.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,WAAW,GACZ,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"shared.schemas.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/auth/shared.schemas.ts"],"names":[],"mappings":"AACA,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,WAAW,GACZ,MAAM,gBAAgB,CAAC"}

package/common/types/options/http/index.d.ts

@@ -1,4 +1,4 @@
-export type { HttpOptionsInterface, CorsOptions, SecurityOptions } from './interfaces';
+export type { HttpOptionsInterface, HttpRouteConfig, CorsOptions, SecurityOptions } from './interfaces';
 export { httpOptionsSchema } from './schema';
 export type { HttpOptions, HttpOptionsInput } from './schema';
 //# sourceMappingURL=index.d.ts.map

package/common/types/options/http/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,oBAAoB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/index.ts"],"names":[],"mappings":"AAGA,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}

package/common/types/options/http/interfaces.d.ts

@@ -1,4 +1,4 @@
-import { type FrontMcpServer } from '../../../interfaces';
+import { type FrontMcpServer, type HttpMethod, type ServerRequestHandler } from '../../../interfaces';
 /**
  * Framework-agnostic CORS configuration options.
  */
@@ -21,6 +21,47 @@ export interface CorsOptions {
      */
     maxAge?: number;
 }
+/**
+ * A single first-class custom HTTP route mounted alongside the MCP endpoint.
+ *
+ * Handlers run on the same Express app as the MCP JSON-RPC entry, so they share
+ * the configured CORS policy, body limits, and security middleware. The handler
+ * uses the framework-agnostic `(req, res, next)` signature; respond with
+ * `res.status(...).send(...)` / `res.json(...)` or call `next()` to fall through.
+ *
+ * @see HttpOptionsInterface.routes
+ */
+export interface HttpRouteConfig {
+    /** HTTP method to match (e.g. `'GET'`, `'POST'`). */
+    method: HttpMethod;
+    /**
+     * Express-style path to mount the handler at (e.g. `'/download/:id'`).
+     *
+     * Paths that collide with FrontMCP's reserved surfaces — the resolved MCP
+     * entry path (and its `/sse` + `/message` siblings), `/oauth/*`,
+     * `/.well-known/*`, `/health`, and `/metrics` — are rejected at startup with
+     * a fail-fast error.
+     */
+    path: string;
+    /**
+     * Route handler. `(req, res, next) => void | Promise<void>`.
+     *
+     * **Content-Type gotcha:** the built-in Express adapter defaults every
+     * response to `application/json; charset=utf-8`. HTML, binary, or streaming
+     * handlers MUST set their own content type via `res.type(...)` /
+     * `res.setHeader('Content-Type', ...)` before sending the body.
+     */
+    handler: ServerRequestHandler;
+    /**
+     * When `true`, the request is run through the same `session:verify` flow the
+     * MCP endpoint uses. Unauthorized/forbidden requests are short-circuited with
+     * a `401`/`403` and a `WWW-Authenticate` header; on success the verified
+     * authorization is attached to `req.authSession` before the handler runs.
+     *
+     * @default false (public)
+     */
+    auth?: boolean;
+}
 /**
  * HTTP server configuration options.
  */
@@ -93,6 +134,20 @@ export interface HttpOptionsInterface {
      * When omitted, falls back to {@link bodyLimit}.
      */
     urlencodedLimit?: number | string;
+    /**
+     * First-class custom HTTP routes mounted on the same Express app as the MCP
+     * endpoint. Each route shares the configured CORS, body limits, and security
+     * middleware. Use these for out-of-band byte delivery (file/stream/binary
+     * downloads), health probes beyond `/health`, webhooks, or any non-JSON-RPC
+     * surface the MCP channel cannot serve.
+     *
+     * Routes are public by default; set `auth: true` to gate a route behind the
+     * MCP `session:verify` flow. Paths that collide with reserved FrontMCP
+     * surfaces are rejected at startup.
+     *
+     * @see HttpRouteConfig
+     */
+    routes?: HttpRouteConfig[];
 }
 /**
  * Security options for transport hardening.

package/common/types/options/http/interfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/interfaces.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EACH,OAAO,GACP,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC;IAEnG;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,KAAK,cAAc,CAAC,CAAC;IAElF;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE3B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;IAE1C;;;OAGG;IACH,sBAAsB,CAAC,EAAE;QACvB,2DAA2D;QAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,+EAA+E;QAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,uEAAuE;QACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH"}
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/interfaces.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEtG;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EACH,OAAO,GACP,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC;IAEnG;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,MAAM,EAAE,UAAU,CAAC;IAEnB;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;OAOG;IACH,OAAO,EAAE,oBAAoB,CAAC;IAE9B;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,KAAK,cAAc,CAAC,CAAC;IAElF;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE3B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAElC;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;IAE1C;;;OAGG;IACH,sBAAsB,CAAC,EAAE;QACvB,2DAA2D;QAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,+EAA+E;QAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,uEAAuE;QACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH"}

package/common/types/options/http/schema.d.ts

@@ -1,4 +1,5 @@
 import { z } from '@frontmcp/lazy-zod';
+import type { ServerRequestHandler } from '../../../interfaces';
 import type { HttpOptionsInterface } from './interfaces';
 /**
  * HTTP options Zod schema.
@@ -24,6 +25,20 @@ export declare const httpOptionsSchema: import("@frontmcp/lazy-zod").ZodObject<{
     }, import("zod/v4/core").$strip>>;
     bodyLimit: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodNumber, import("@frontmcp/lazy-zod").ZodString]>>;
     urlencodedLimit: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodNumber, import("@frontmcp/lazy-zod").ZodString]>>;
+    routes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        method: import("@frontmcp/lazy-zod").ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+            OPTIONS: "OPTIONS";
+            HEAD: "HEAD";
+        }>;
+        path: import("@frontmcp/lazy-zod").ZodString;
+        handler: import("zod").ZodCustom<ServerRequestHandler, ServerRequestHandler>;
+        auth: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+    }, import("zod/v4/core").$strip>>>;
 }, import("zod/v4/core").$strip>;
 /**
  * HTTP configuration type (with defaults applied).

package/common/types/options/http/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/schema.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAGvC,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA2CtE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;iWAtCuC,CAAC,6FAAD,CAAC;;;;;;;;;;;;;;;gCAuFxB,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/schema.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,KAAK,EAAc,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAqEtE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;iWA3DG,CAAC,6FAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAwHY,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC"}

package/common/types/options/session/schema.d.ts

@@ -7,11 +7,11 @@ export declare const platformMappingEntrySchema: import("@frontmcp/lazy-zod").Zo
     pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
     platform: import("@frontmcp/lazy-zod").ZodEnum<{
         unknown: "unknown";
+        continue: "continue";
         openai: "openai";
         claude: "claude";
         gemini: "gemini";
         cursor: "cursor";
-        continue: "continue";
         cody: "cody";
         "generic-mcp": "generic-mcp";
         "ext-apps": "ext-apps";
@@ -25,11 +25,11 @@ export declare const platformDetectionConfigSchema: import("@frontmcp/lazy-zod")
         pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
         platform: import("@frontmcp/lazy-zod").ZodEnum<{
             unknown: "unknown";
+            continue: "continue";
             openai: "openai";
             claude: "claude";
             gemini: "gemini";
             cursor: "cursor";
-            continue: "continue";
             cody: "cody";
             "generic-mcp": "generic-mcp";
             "ext-apps": "ext-apps";
@@ -47,11 +47,11 @@ export declare const sessionOptionsSchema: import("@frontmcp/lazy-zod").ZodObjec
             pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
             platform: import("@frontmcp/lazy-zod").ZodEnum<{
                 unknown: "unknown";
+                continue: "continue";
                 openai: "openai";
                 claude: "claude";
                 gemini: "gemini";
                 cursor: "cursor";
-                continue: "continue";
                 cody: "cody";
                 "generic-mcp": "generic-mcp";
                 "ext-apps": "ext-apps";

package/common/types/options/transport/schema.d.ts

@@ -157,11 +157,11 @@ export declare const transportOptionsSchema: import("@frontmcp/lazy-zod").ZodObj
             pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
             platform: import("@frontmcp/lazy-zod").ZodEnum<{
                 unknown: "unknown";
+                continue: "continue";
                 openai: "openai";
                 claude: "claude";
                 gemini: "gemini";
                 cursor: "cursor";
-                continue: "continue";
                 cody: "cody";
                 "generic-mcp": "generic-mcp";
                 "ext-apps": "ext-apps";