@frontmcp/sdk 1.6.1 → 1.7.1

package/agent/flows/call-agent.flow.d.ts

@@ -123,14 +123,10 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
         arguments: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>>;
     }, import("zod/v4/core").$loose>;
     authInfo: z.ZodType<AuthInfo>;
-    agent: import("zod").ZodCustom<AgentEntry<Readonly<{
-        [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    }>, import("../../common").ToolOutputType, unknown, unknown>, AgentEntry<Readonly<{
+    agent: import("zod").ZodInstanceOf<AgentEntry<Readonly<{
         [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     }>, import("../../common").ToolOutputType, unknown, unknown>>;
-    agentContext: import("zod").ZodCustom<AgentContext<Readonly<{
-        [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    }>, import("../../common").ToolOutputType, unknown, unknown>, AgentContext<Readonly<{
+    agentContext: import("zod").ZodInstanceOf<AgentContext<Readonly<{
         [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     }>, import("../../common").ToolOutputType, unknown, unknown>>;
     rawOutput: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodAny>;

package/agent/flows/call-agent.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent.flow.d.ts","sourceRoot":"","sources":["../../../src/agent/flows/call-agent.flow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAA+C,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEhG,OAAO,EACL,YAAY,EACZ,UAAU,EAEV,QAAQ,EAGR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAetB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAuB,CAAC;AAE1C,QAAA,MAAM,WAAW;;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4BnD,CAAC;AAMH,QAAA,MAAM,IAAI;;;;CAY2B,CAAC;AAMtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,mBAAmB,EAAE,cAAc,CACjC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,mBAA4B,CAAC;AAc1C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAEjD;;OAEG;IAEG,UAAU;IAmDhB;;OAEG;IAEG,SAAS;IA0Cf;;;;OAIG;IAEG,qBAAqB;IAsD3B;;OAEG;IAEG,uBAAuB;IAuC7B;;OAEG;IAEG,kBAAkB;IAqDxB;;OAEG;IAEG,YAAY;IAoClB;;OAEG;IAEG,gBAAgB;IAqCtB;;OAEG;IAEG,aAAa;IAsBnB;;OAEG;IAEG,OAAO;IA6Cb;;OAEG;IAEG,cAAc;IAcpB;;OAEG;IAEG,gBAAgB;IAetB;;OAEG;IAEG,YAAY;IAOlB;;;;;;;;;OASG;IAEG,QAAQ;CAsEf"}
+{"version":3,"file":"call-agent.flow.d.ts","sourceRoot":"","sources":["../../../src/agent/flows/call-agent.flow.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAA+C,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEhG,OAAO,EACL,YAAY,EACZ,UAAU,EAEV,QAAQ,EAGR,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAetB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAuB,CAAC;AAE1C,QAAA,MAAM,WAAW;;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA4BnD,CAAC;AAMH,QAAA,MAAM,IAAI;;;;CAY2B,CAAC;AAMtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,mBAAmB,EAAE,cAAc,CACjC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,mBAA4B,CAAC;AAc1C,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAEjD;;OAEG;IAEG,UAAU;IAmDhB;;OAEG;IAEG,SAAS;IA0Cf;;;;OAIG;IAEG,qBAAqB;IAsD3B;;OAEG;IAEG,uBAAuB;IAuC7B;;OAEG;IAEG,kBAAkB;IAqDxB;;OAEG;IAEG,YAAY;IAoClB;;OAEG;IAEG,gBAAgB;IAqCtB;;OAEG;IAEG,aAAa;IAsBnB;;OAEG;IAEG,OAAO;IA6Cb;;OAEG;IAEG,cAAc;IAcpB;;OAEG;IAEG,gBAAgB;IAetB;;OAEG;IAEG,YAAY;IAOlB;;;;;;;;;OASG;IAEG,QAAQ;CAsEf"}

package/common/metadata/agent.metadata.d.ts

@@ -413,7 +413,7 @@ export declare const frontMcpAgentMetadataSchema: import("@frontmcp/lazy-zod").Z
     name: import("@frontmcp/lazy-zod").ZodString;
     description: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     systemInstructions: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
-    inputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<Object, Object>>;
+    inputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodInstanceOf<Object>>;
     outputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodAny>;
     llm: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
         provider: import("@frontmcp/lazy-zod").ZodEnum<{
@@ -440,7 +440,7 @@ export declare const frontMcpAgentMetadataSchema: import("@frontmcp/lazy-zod").Z
         temperature: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         maxTokens: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
-        adapter: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodCustom<Object, Object>, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>;
+        adapter: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodInstanceOf<Object>, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>;
     }, import("zod/v4/core").$strip>, import("zod").ZodCustom<symbol, symbol>, import("zod").ZodCustom<AgentLlmAdapterLocal, AgentLlmAdapterLocal>]>;
     providers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("zod").ZodCustom<Type<unknown>, Type<unknown>>>>;
     plugins: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("zod").ZodCustom<Type<unknown>, Type<unknown>>>>;

package/common/metadata/app.metadata.d.ts

@@ -147,7 +147,7 @@ export declare const frontMcpLocalAppMetadataSchema: import("@frontmcp/lazy-zod"
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>>;
         }, import("zod/v4/core").$strip>>;
-        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
         requireAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -252,7 +252,7 @@ export declare const frontMcpLocalAppMetadataSchema: import("@frontmcp/lazy-zod"
             maxDynamicClients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -427,7 +427,7 @@ export declare const frontMcpLocalAppMetadataSchema: import("@frontmcp/lazy-zod"
         mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -889,7 +889,7 @@ export declare const frontMcpRemoteAppMetadataSchema: import("@frontmcp/lazy-zod
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>>;
         }, import("zod/v4/core").$strip>>;
-        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
         requireAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -994,7 +994,7 @@ export declare const frontMcpRemoteAppMetadataSchema: import("@frontmcp/lazy-zod
             maxDynamicClients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -1169,7 +1169,7 @@ export declare const frontMcpRemoteAppMetadataSchema: import("@frontmcp/lazy-zod
         mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("libs/auth/dist/common/jwt.types").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;

package/common/metadata/flow.metadata.d.ts

@@ -54,11 +54,11 @@ export declare const frontMcpFlowMetadataSchema: import("@frontmcp/lazy-zod").Zo
         authorized: "authorized";
         public: "public";
     }>>>;
-    inputSchema: import("zod").ZodCustom<Object, Object>;
-    outputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<Object, Object>>;
-    plan: import("zod").ZodCustom<Object, Object>;
+    inputSchema: import("zod").ZodInstanceOf<Object>;
+    outputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodInstanceOf<Object>>;
+    plan: import("zod").ZodInstanceOf<Object>;
     dependsOn: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodUnknown>>;
-    middleware: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<Object, Object>>;
+    middleware: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodInstanceOf<Object>>;
 }, import("zod/v4/core").$loose>;
 export {};
 //# sourceMappingURL=flow.metadata.d.ts.map

package/common/metadata/front-mcp.metadata.d.ts

@@ -589,7 +589,7 @@ export declare const frontMcpBaseSchema: import("@frontmcp/lazy-zod").ZodObject<
         sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
         platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
                 platform: import("@frontmcp/lazy-zod").ZodEnum<{
                     unknown: "unknown";
                     continue: "continue";
@@ -1466,7 +1466,7 @@ declare const frontMcpMultiAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
         sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
         platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
                 platform: import("@frontmcp/lazy-zod").ZodEnum<{
                     unknown: "unknown";
                     continue: "continue";
@@ -2211,7 +2211,7 @@ declare const frontMcpMultiAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
         }, import("zod/v4/core").$strip>>;
-        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
         requireAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -2316,7 +2316,7 @@ declare const frontMcpMultiAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
             maxDynamicClients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -2491,7 +2491,7 @@ declare const frontMcpMultiAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
         mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -2830,7 +2830,7 @@ declare const frontMcpSplitByAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
         sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
         platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
                 platform: import("@frontmcp/lazy-zod").ZodEnum<{
                     unknown: "unknown";
                     continue: "continue";
@@ -3575,7 +3575,7 @@ declare const frontMcpSplitByAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
         }, import("zod/v4/core").$strip>>;
-        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
         requireAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -3680,7 +3680,7 @@ declare const frontMcpSplitByAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
             maxDynamicClients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -3855,7 +3855,7 @@ declare const frontMcpSplitByAppSchema: import("@frontmcp/lazy-zod").ZodObject<{
         mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -4191,7 +4191,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
         sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
         platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
                 platform: import("@frontmcp/lazy-zod").ZodEnum<{
                     unknown: "unknown";
                     continue: "continue";
@@ -4936,7 +4936,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
         }, import("zod/v4/core").$strip>>;
-        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
         requireAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -5041,7 +5041,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
             maxDynamicClients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -5216,7 +5216,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
         mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -5550,7 +5550,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
         sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
         platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+                pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
                 platform: import("@frontmcp/lazy-zod").ZodEnum<{
                     unknown: "unknown";
                     continue: "continue";
@@ -6295,7 +6295,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
             keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
         }, import("zod/v4/core").$strip>>;
-        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+        signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         expectedAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
         requireAudience: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -6400,7 +6400,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
             maxDynamicClients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;
@@ -6575,7 +6575,7 @@ export declare const frontMcpMetadataSchema: import("zod").ZodPipe<import("@fron
         mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
         local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
-            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
+            signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("@frontmcp/auth").JWK, unknown>, import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>]>>;
             jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                 keys: import("@frontmcp/lazy-zod").ZodArray<z.ZodType<import("@frontmcp/auth").JWK, unknown>>;
             }, import("zod/v4/core").$strip>>;

package/common/metadata/job.metadata.d.ts

@@ -79,8 +79,8 @@ export declare const frontMcpJobMetadataSchema: import("@frontmcp/lazy-zod").Zod
     id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     name: import("@frontmcp/lazy-zod").ZodString;
     description: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
-    inputSchema: import("zod").ZodCustom<Object, Object>;
-    outputSchema: import("zod").ZodCustom<Object, Object>;
+    inputSchema: import("zod").ZodInstanceOf<Object>;
+    outputSchema: import("zod").ZodInstanceOf<Object>;
     timeout: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
     retry: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         maxAttempts: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;

package/common/metadata/tool.metadata.d.ts

@@ -446,7 +446,7 @@ export declare const frontMcpToolMetadataSchema: import("@frontmcp/lazy-zod").Zo
     id: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     name: import("@frontmcp/lazy-zod").ZodString;
     description: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
-    inputSchema: import("zod").ZodCustom<Object, Object>;
+    inputSchema: import("zod").ZodInstanceOf<Object>;
     outputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodEnum<{
         string: "string";
         number: "number";
@@ -457,7 +457,7 @@ export declare const frontMcpToolMetadataSchema: import("@frontmcp/lazy-zod").Zo
         audio: "audio";
         resource: "resource";
         resource_link: "resource_link";
-    }>]>, import("zod").ZodCustom<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>, import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>, import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>>]>, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodEnum<{
+    }>]>, import("zod").ZodInstanceOf<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>>]>, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodEnum<{
         string: "string";
         number: "number";
         boolean: "boolean";
@@ -467,7 +467,7 @@ export declare const frontMcpToolMetadataSchema: import("@frontmcp/lazy-zod").Zo
         audio: "audio";
         resource: "resource";
         resource_link: "resource_link";
-    }>]>, import("zod").ZodCustom<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>, import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>, import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>>]>>]>>;
+    }>]>, import("zod").ZodInstanceOf<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<import("@frontmcp/lazy-zod").ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>>>]>>]>>;
     tags: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
     annotations: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         title: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;

package/common/metadata/workflow.metadata.d.ts

@@ -154,7 +154,7 @@ export declare const frontMcpWorkflowMetadataSchema: import("@frontmcp/lazy-zod"
         scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
         custom: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>>;
     }, import("zod/v4/core").$strip>>>;
-    inputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<Object, Object>>;
-    outputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<Object, Object>>;
+    inputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodInstanceOf<Object>>;
+    outputSchema: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodInstanceOf<Object>>;
 }, import("zod/v4/core").$loose>;
 //# sourceMappingURL=workflow.metadata.d.ts.map

package/common/schemas/http-output.schema.d.ts

@@ -169,7 +169,7 @@ export declare const HttpHtmlSchema: import("@frontmcp/lazy-zod").ZodObject<{
 export declare const HttpBinarySchema: import("@frontmcp/lazy-zod").ZodObject<{
     kind: import("@frontmcp/lazy-zod").ZodLiteral<"binary">;
     status: import("@frontmcp/lazy-zod").ZodNumber;
-    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
+    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
     encoding: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         utf8: "utf8";
         base64: "base64";
@@ -202,7 +202,7 @@ export declare const HttpBinarySchema: import("@frontmcp/lazy-zod").ZodObject<{
  */
 export declare const HttpImageSchema: import("@frontmcp/lazy-zod").ZodObject<{
     status: import("@frontmcp/lazy-zod").ZodNumber;
-    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
+    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
     encoding: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         utf8: "utf8";
         base64: "base64";
@@ -495,7 +495,7 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
 }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
     kind: import("@frontmcp/lazy-zod").ZodLiteral<"binary">;
     status: import("@frontmcp/lazy-zod").ZodNumber;
-    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
+    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
     encoding: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         utf8: "utf8";
         base64: "base64";
@@ -524,7 +524,7 @@ export declare const httpOutputSchema: import("@frontmcp/lazy-zod").ZodDiscrimin
     }, import("zod/v4/core").$strip>>>>;
 }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
     status: import("@frontmcp/lazy-zod").ZodNumber;
-    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
+    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("zod").ZodInstanceOf<Uint8Array<ArrayBuffer>>, import("@frontmcp/lazy-zod").ZodString]>;
     encoding: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
         utf8: "utf8";
         base64: "base64";

package/common/types/options/http/interfaces.d.ts

@@ -91,15 +91,24 @@ export interface HttpOptionsInterface {
     socketPath?: string;
     /**
      * CORS configuration.
-     * - `undefined` (default): permissive CORS enabled (all origins, no credentials)
-     * - `false`: CORS disabled entirely
-     * - `CorsOptions`: custom CORS configuration
+     * - `undefined` (default): NO CORS headers. A cross-origin request still REACHES the server and
+     *   is served normally — the browser simply refuses to let the calling page read the response.
+     *   CORS is a browser rule, not server-side access control; use auth for that. Set
+     *   `{ origin: true }` for the old permissive behaviour.
+     * - `false`: same runtime state as the default — no headers; kept so a config can say so
+     * - `CorsOptions`: custom CORS configuration. Headers are only sent when `origin` is set to
+     *   something other than `false` — `{}` and `{ origin: false }` install no middleware.
      */
     cors?: CorsOptions | false;
     /**
      * Security configuration for transport hardening.
-     * These options are opt-in — defaults remain backwards-compatible.
-     * Set `strict: true` to enable all security features at once.
+     *
+     * The defaults are the SAFE choice: the server binds loopback and sends no CORS headers. Reaching
+     * it from another host or another origin is something you opt into — `bindAddress: 'all'`, the
+     * `FRONTMCP_BIND_ADDRESS=all` env var (no rebuild; the right fit for a Dockerfile), or a
+     * distributed build — and an explicit `cors` config.
+     *
+     * Set `strict: true` to enable the remaining hardening (DNS rebinding protection) at once.
      */
     security?: SecurityOptions;
     /**
@@ -154,8 +163,12 @@ export interface HttpOptionsInterface {
  */
 export interface SecurityOptions {
     /**
-     * Enable strict security defaults.
-     * When true: loopback binding (standalone), restrictive CORS, DNS rebinding protection.
+     * Enable strict security defaults: DNS rebinding protection, and loopback binding for a
+     * standalone deployment. A distributed deployment still binds all interfaces — peers have to
+     * reach it — so strict mode does not change binding there.
+     *
+     * Strict mode does NOT change CORS. Omitting `cors` already sends no headers; an explicit
+     * `{ origin: true }` stays permissive whatever `strict` says.
      * @default false
      */
     strict?: boolean;
@@ -165,9 +178,12 @@ export interface SecurityOptions {
      * - `'all'`: bind to 0.0.0.0 (all interfaces)
      * - string: specific IP address
      *
-     * Default (no strict): '0.0.0.0' (backwards compatible)
-     * Default (strict, standalone): '127.0.0.1'
-     * Default (strict, distributed): '0.0.0.0'
+     * Resolved in this order, first match wins:
+     * 1. this option
+     * 2. the `FRONTMCP_BIND_ADDRESS` env var (`'all'` / `'loopback'` / an address)
+     * 3. strict mode — '0.0.0.0' when distributed, '127.0.0.1' otherwise
+     * 4. a distributed deployment — '0.0.0.0'
+     * 5. the default — '127.0.0.1'
      */
     bindAddress?: 'loopback' | 'all' | string;
     /**

package/common/types/options/http/interfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/interfaces.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEtG;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EACH,OAAO,GACP,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC;IAEnG;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,MAAM,EAAE,UAAU,CAAC;IAEnB;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;OAOG;IACH,OAAO,EAAE,oBAAoB,CAAC;IAE9B;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,KAAK,cAAc,CAAC,CAAC;IAElF;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE3B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAElC;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;IAE1C;;;OAGG;IACH,sBAAsB,CAAC,EAAE;QACvB,2DAA2D;QAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,+EAA+E;QAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,uEAAuE;QACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH"}
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/interfaces.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEtG;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,MAAM,CAAC,EACH,OAAO,GACP,MAAM,GACN,MAAM,EAAE,GACR,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC;IAEnG;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,MAAM,EAAE,UAAU,CAAC;IAEnB;;;;;;;OAOG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;;;;;OAOG;IACH,OAAO,EAAE,oBAAoB,CAAC;IAE9B;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,oBAAoB,KAAK,cAAc,CAAC,CAAC;IAElF;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE5B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAElC;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;IAE1C;;;OAGG;IACH,sBAAsB,CAAC,EAAE;QACvB,2DAA2D;QAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,+EAA+E;QAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,uEAAuE;QACvE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC3B,CAAC;CACH"}

package/common/types/options/http/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/schema.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,KAAK,EAAc,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAqEtE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;iWA3DG,CAAC,6FAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAwHY,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../../src/common/types/options/http/schema.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAEvC,OAAO,KAAK,EAAc,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE5E,OAAO,KAAK,EAAe,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAqEtE;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;iWA3DG,CAAC,6FAAD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA6HY,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,CAAC"}

package/common/types/options/session/schema.d.ts

@@ -4,7 +4,7 @@ import { z } from '@frontmcp/lazy-zod';
  * Note: RegExp cannot be validated by zod, so we use passthrough for pattern.
  */
 export declare const platformMappingEntrySchema: import("@frontmcp/lazy-zod").ZodObject<{
-    pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+    pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
     platform: import("@frontmcp/lazy-zod").ZodEnum<{
         unknown: "unknown";
         continue: "continue";
@@ -22,7 +22,7 @@ export declare const platformMappingEntrySchema: import("@frontmcp/lazy-zod").Zo
  */
 export declare const platformDetectionConfigSchema: import("@frontmcp/lazy-zod").ZodObject<{
     mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-        pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+        pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
         platform: import("@frontmcp/lazy-zod").ZodEnum<{
             unknown: "unknown";
             continue: "continue";
@@ -44,7 +44,7 @@ export declare const sessionOptionsSchema: import("@frontmcp/lazy-zod").ZodObjec
     sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
     platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-            pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+            pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
             platform: import("@frontmcp/lazy-zod").ZodEnum<{
                 unknown: "unknown";
                 continue: "continue";

package/common/types/options/transport/schema.d.ts

@@ -154,7 +154,7 @@ export declare const transportOptionsSchema: import("@frontmcp/lazy-zod").ZodObj
     sessionMode: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"stateful">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless">, import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>]>>>;
     platformDetection: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         mappings: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
-            pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<RegExp, RegExp>]>;
+            pattern: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("zod").ZodInstanceOf<RegExp>]>;
             platform: import("@frontmcp/lazy-zod").ZodEnum<{
                 unknown: "unknown";
                 continue: "continue";

package/esm/index.mjs

@@ -1864,14 +1864,19 @@ var init_schema3 = __esm({
       socketPath: z8.string().optional(),
       /**
        * CORS configuration.
-       * - undefined (default): permissive CORS (all origins, no credentials)
-       * - false: CORS disabled
+       * - undefined (default): NO CORS headers — same-origin only. A browser will not let another
+       *   origin read the response. Set `{ origin: true }` for the old permissive behaviour.
+       * - false: CORS disabled (same effect as the default; kept for explicitness)
        * - CorsOptions object: custom CORS config
        */
       cors: z8.union([z8.literal(false), corsOptionsSchema]).optional(),
       /**
        * Security configuration for transport hardening.
-       * Opt-in — defaults remain backwards-compatible.
+       *
+       * The defaults are the SAFE choice: the server binds loopback and sends no CORS headers. Reaching
+       * it from another host or another origin is something you opt into — `bindAddress: 'all'`, the
+       * `FRONTMCP_BIND_ADDRESS=all` env var (no rebuild; the right fit for a Dockerfile), or a
+       * distributed build — and an explicit `cors` config.
        */
       security: z8.object({
         strict: z8.boolean().optional(),
@@ -60231,26 +60236,20 @@ function auditSecurityDefaults(config, isProduction5) {
     return findings;
   }
   const strict = config.security?.strict === true;
-  if (config.cors === void 0 && !strict) {
+  const corsOrigin = config.cors === false ? void 0 : config.cors?.origin;
+  if (corsOrigin === void 0 || corsOrigin === false) {
     findings.push({
-      level: "warn",
-      code: "CORS_PERMISSIVE_DEFAULT",
-      message: "CORS is using the permissive default (origin: true), which allows all origins.",
-      recommendation: "Set explicit cors.origin to restrict allowed origins in production."
+      level: "info",
+      code: "CORS_DISABLED",
+      message: "No CORS headers are sent. Cross-origin requests still reach the server \u2014 a browser just will not let the calling page read the response. CORS is not server-side access control."
     });
-  } else if (config.cors !== false && config.cors?.origin === true && !strict) {
+  } else if (corsOrigin === true) {
     findings.push({
       level: "warn",
       code: "CORS_ORIGIN_TRUE",
       message: "CORS origin=true allows all origins to make cross-origin requests.",
       recommendation: "Set cors.origin to specific allowed origins."
     });
-  } else if (config.cors === false) {
-    findings.push({
-      level: "info",
-      code: "CORS_DISABLED",
-      message: "CORS is disabled. Cross-origin requests will be blocked by browsers."
-    });
   } else {
     findings.push({
       level: "info",
@@ -60258,7 +60257,7 @@ function auditSecurityDefaults(config, isProduction5) {
       message: "CORS is explicitly configured."
     });
   }
-  const bindAddress = config.resolvedBindAddress ?? "0.0.0.0";
+  const bindAddress = config.resolvedBindAddress ?? "127.0.0.1";
   if (bindAddress === "0.0.0.0" || bindAddress === "::") {
     if (config.deploymentMode !== "distributed") {
       findings.push({
@@ -60300,7 +60299,7 @@ function auditSecurityDefaults(config, isProduction5) {
     findings.push({
       level: "info",
       code: "STRICT_MODE_ENABLED",
-      message: "Strict security mode is enabled: loopback binding, restrictive CORS, DNS rebinding protection."
+      message: config.deploymentMode === "distributed" ? "Strict security mode is enabled: DNS rebinding protection. Binding is unchanged for a distributed deployment \u2014 it still listens on all interfaces so peers can reach it." : "Strict security mode is enabled: loopback binding and DNS rebinding protection."
     });
   } else {
     findings.push({
@@ -60323,16 +60322,24 @@ function logSecurityFindings(findings, logger) {
     }
   }
 }
+function toBindAddress(value) {
+  if (value === "loopback") return "127.0.0.1";
+  if (value === "all") return "0.0.0.0";
+  return value;
+}
 function resolveBindAddress(security, deploymentMode) {
   if (security?.bindAddress) {
-    if (security.bindAddress === "loopback") return "127.0.0.1";
-    if (security.bindAddress === "all") return "0.0.0.0";
-    return security.bindAddress;
+    return toBindAddress(security.bindAddress);
+  }
+  const envBindAddress = process.env["FRONTMCP_BIND_ADDRESS"]?.trim();
+  if (envBindAddress) {
+    return toBindAddress(envBindAddress);
   }
   if (security?.strict) {
     return deploymentMode === "distributed" ? "0.0.0.0" : "127.0.0.1";
   }
-  return "0.0.0.0";
+  if (deploymentMode === "distributed") return "0.0.0.0";
+  return "127.0.0.1";
 }
 var init_security_audit = __esm({
   "libs/sdk/src/server/security/security-audit.ts"() {
@@ -60572,7 +60579,7 @@ var init_server_instance = __esm({
     init_health2();
     init_metrics2();
     init_security_audit();
-    DEFAULT_CORS = { origin: true, credentials: false };
+    DEFAULT_CORS = void 0;
     FrontMcpServerInstance = class extends FrontMcpServer {
       config;
       host;

package/index.js

@@ -1863,14 +1863,19 @@ var init_schema3 = __esm({
       socketPath: import_lazy_zod8.z.string().optional(),
       /**
        * CORS configuration.
-       * - undefined (default): permissive CORS (all origins, no credentials)
-       * - false: CORS disabled
+       * - undefined (default): NO CORS headers — same-origin only. A browser will not let another
+       *   origin read the response. Set `{ origin: true }` for the old permissive behaviour.
+       * - false: CORS disabled (same effect as the default; kept for explicitness)
        * - CorsOptions object: custom CORS config
        */
       cors: import_lazy_zod8.z.union([import_lazy_zod8.z.literal(false), corsOptionsSchema]).optional(),
       /**
        * Security configuration for transport hardening.
-       * Opt-in — defaults remain backwards-compatible.
+       *
+       * The defaults are the SAFE choice: the server binds loopback and sends no CORS headers. Reaching
+       * it from another host or another origin is something you opt into — `bindAddress: 'all'`, the
+       * `FRONTMCP_BIND_ADDRESS=all` env var (no rebuild; the right fit for a Dockerfile), or a
+       * distributed build — and an explicit `cors` config.
        */
       security: import_lazy_zod8.z.object({
         strict: import_lazy_zod8.z.boolean().optional(),
@@ -60069,26 +60074,20 @@ function auditSecurityDefaults(config, isProduction5) {
     return findings;
   }
   const strict = config.security?.strict === true;
-  if (config.cors === void 0 && !strict) {
+  const corsOrigin = config.cors === false ? void 0 : config.cors?.origin;
+  if (corsOrigin === void 0 || corsOrigin === false) {
     findings.push({
-      level: "warn",
-      code: "CORS_PERMISSIVE_DEFAULT",
-      message: "CORS is using the permissive default (origin: true), which allows all origins.",
-      recommendation: "Set explicit cors.origin to restrict allowed origins in production."
+      level: "info",
+      code: "CORS_DISABLED",
+      message: "No CORS headers are sent. Cross-origin requests still reach the server \u2014 a browser just will not let the calling page read the response. CORS is not server-side access control."
     });
-  } else if (config.cors !== false && config.cors?.origin === true && !strict) {
+  } else if (corsOrigin === true) {
     findings.push({
       level: "warn",
       code: "CORS_ORIGIN_TRUE",
       message: "CORS origin=true allows all origins to make cross-origin requests.",
       recommendation: "Set cors.origin to specific allowed origins."
     });
-  } else if (config.cors === false) {
-    findings.push({
-      level: "info",
-      code: "CORS_DISABLED",
-      message: "CORS is disabled. Cross-origin requests will be blocked by browsers."
-    });
   } else {
     findings.push({
       level: "info",
@@ -60096,7 +60095,7 @@ function auditSecurityDefaults(config, isProduction5) {
       message: "CORS is explicitly configured."
     });
   }
-  const bindAddress = config.resolvedBindAddress ?? "0.0.0.0";
+  const bindAddress = config.resolvedBindAddress ?? "127.0.0.1";
   if (bindAddress === "0.0.0.0" || bindAddress === "::") {
     if (config.deploymentMode !== "distributed") {
       findings.push({
@@ -60138,7 +60137,7 @@ function auditSecurityDefaults(config, isProduction5) {
     findings.push({
       level: "info",
       code: "STRICT_MODE_ENABLED",
-      message: "Strict security mode is enabled: loopback binding, restrictive CORS, DNS rebinding protection."
+      message: config.deploymentMode === "distributed" ? "Strict security mode is enabled: DNS rebinding protection. Binding is unchanged for a distributed deployment \u2014 it still listens on all interfaces so peers can reach it." : "Strict security mode is enabled: loopback binding and DNS rebinding protection."
     });
   } else {
     findings.push({
@@ -60161,16 +60160,24 @@ function logSecurityFindings(findings, logger) {
     }
   }
 }
+function toBindAddress(value) {
+  if (value === "loopback") return "127.0.0.1";
+  if (value === "all") return "0.0.0.0";
+  return value;
+}
 function resolveBindAddress(security, deploymentMode) {
   if (security?.bindAddress) {
-    if (security.bindAddress === "loopback") return "127.0.0.1";
-    if (security.bindAddress === "all") return "0.0.0.0";
-    return security.bindAddress;
+    return toBindAddress(security.bindAddress);
+  }
+  const envBindAddress = process.env["FRONTMCP_BIND_ADDRESS"]?.trim();
+  if (envBindAddress) {
+    return toBindAddress(envBindAddress);
   }
   if (security?.strict) {
     return deploymentMode === "distributed" ? "0.0.0.0" : "127.0.0.1";
   }
-  return "0.0.0.0";
+  if (deploymentMode === "distributed") return "0.0.0.0";
+  return "127.0.0.1";
 }
 var init_security_audit = __esm({
   "libs/sdk/src/server/security/security-audit.ts"() {
@@ -60410,7 +60417,7 @@ var init_server_instance = __esm({
     init_health2();
     init_metrics2();
     init_security_audit();
-    DEFAULT_CORS = { origin: true, credentials: false };
+    DEFAULT_CORS = void 0;
     FrontMcpServerInstance = class extends FrontMcpServer {
       config;
       host;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/sdk",
-  "version": "1.6.1",
+  "version": "1.7.1",
   "description": "FrontMCP SDK",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -90,8 +90,8 @@
   "peerDependencies": {
     "@anthropic-ai/sdk": "^0.30.0 || ^0.78.0",
     "@enclave-vm/core": "^2.15.2",
-    "@frontmcp/observability": "1.6.1",
-    "@frontmcp/storage-sqlite": "1.6.1",
+    "@frontmcp/observability": "1.7.1",
+    "@frontmcp/storage-sqlite": "1.7.1",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/sdk-trace-base": "^2.8.0",
     "@vercel/kv": "^3.0.0",
@@ -132,13 +132,13 @@
     }
   },
   "dependencies": {
-    "@frontmcp/auth": "1.6.1",
-    "@frontmcp/di": "1.6.1",
-    "@frontmcp/guard": "1.6.1",
-    "@frontmcp/lazy-zod": "1.6.1",
-    "@frontmcp/protocol": "1.6.1",
-    "@frontmcp/uipack": "1.6.1",
-    "@frontmcp/utils": "1.6.1",
+    "@frontmcp/auth": "1.7.1",
+    "@frontmcp/di": "1.7.1",
+    "@frontmcp/guard": "1.7.1",
+    "@frontmcp/lazy-zod": "1.7.1",
+    "@frontmcp/protocol": "1.7.1",
+    "@frontmcp/uipack": "1.7.1",
+    "@frontmcp/utils": "1.7.1",
     "@types/cors": "^2.8.17",
     "ioredis": "^5.8.0",
     "jose": "^6.1.3",

package/resource/flows/resource-templates-list.flow.d.ts

@@ -53,11 +53,11 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
     cursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     templates: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
         ownerName: import("@frontmcp/lazy-zod").ZodString;
-        template: import("zod").ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
+        template: import("zod").ZodInstanceOf<ResourceEntry<Record<string, string>, unknown>>;
     }, import("zod/v4/core").$strip>>;
     resolvedTemplates: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
         ownerName: import("@frontmcp/lazy-zod").ZodString;
-        template: import("zod").ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
+        template: import("zod").ZodInstanceOf<ResourceEntry<Record<string, string>, unknown>>;
         finalName: import("@frontmcp/lazy-zod").ZodString;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>;

package/resource/flows/resources-list.flow.d.ts

@@ -54,11 +54,11 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
     cursor: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     resources: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
         ownerName: import("@frontmcp/lazy-zod").ZodString;
-        resource: import("zod").ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
+        resource: import("zod").ZodInstanceOf<ResourceEntry<Record<string, string>, unknown>>;
     }, import("zod/v4/core").$strip>>;
     resolvedResources: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
         ownerName: import("@frontmcp/lazy-zod").ZodString;
-        resource: import("zod").ZodCustom<ResourceEntry<Record<string, string>, unknown>, ResourceEntry<Record<string, string>, unknown>>;
+        resource: import("zod").ZodInstanceOf<ResourceEntry<Record<string, string>, unknown>>;
         finalName: import("@frontmcp/lazy-zod").ZodString;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>;

package/server/adapters/express.host.adapter.d.ts

@@ -14,8 +14,8 @@ export declare const DEFAULT_EXPRESS_BODY_LIMIT = "4mb";
 export interface ExpressHostAdapterOptions {
     /**
      * CORS configuration.
-     * At the adapter level, CORS is disabled by default (no middleware installed).
-     * Note: FrontMcpServerInstance provides a permissive default when `cors` is omitted.
+     * The middleware is installed only when `origin` is set to something other than `false`, so
+     * omitting `cors` — or passing `{}` / `{ origin: false }` — sends no CORS headers at all.
      */
     cors?: CorsOptions;
     /**

package/server/security/security-audit.d.ts

@@ -1,16 +1,17 @@
 /**
  * Security Audit — Production Readiness Warnings
  *
- * Logs security-relevant configuration at server startup.
- * Warn-only approach: no defaults are changed, but insecure
- * configurations are flagged in production environments.
+ * Logs security-relevant configuration at server startup so an operator can see
+ * what the transport actually exposes. The audit only reports — it never changes
+ * behaviour; the safe choices are the defaults themselves (loopback binding, no
+ * CORS headers), and this flags where a config opts out of them.
  */
 import type { CorsOptions } from '../../common';
 /**
  * Security configuration for the audit.
  */
 export interface SecurityAuditConfig {
-    /** CORS configuration (undefined = permissive default) */
+    /** CORS configuration (undefined = the default: no CORS headers, same-origin only) */
     cors?: CorsOptions | false;
     /** Security options from HttpOptionsInterface */
     security?: {
@@ -58,6 +59,8 @@ export declare function logSecurityFindings(findings: SecurityFinding[], logger:
 /**
  * Resolve the effective bind address based on configuration and deployment mode.
  *
+ * Precedence: explicit config > FRONTMCP_BIND_ADDRESS > strict mode > deployment mode > loopback.
+ *
  * @param security - Security configuration
  * @param deploymentMode - Current deployment mode
  * @returns Resolved IP address string

package/server/security/security-audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security-audit.d.ts","sourceRoot":"","sources":["../../../src/server/security/security-audit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,0DAA0D;IAC1D,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;QAC1C,sBAAsB,CAAC,EAAE;YACvB,OAAO,CAAC,EAAE,OAAO,CAAC;YAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;SAC3B,CAAC;KACH,CAAC;IACF,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,OAAO,GAAG,eAAe,EAAE,CAmG3G;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EAAE,EAC3B,MAAM,EAAE;IACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GACA,IAAI,CAeN;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAe9G"}
+{"version":3,"file":"security-audit.d.ts","sourceRoot":"","sources":["../../../src/server/security/security-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;QAC1C,sBAAsB,CAAC,EAAE;YACvB,OAAO,CAAC,EAAE,OAAO,CAAC;YAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;YACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;SAC3B,CAAC;KACH,CAAC;IACF,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,OAAO,GAAG,eAAe,EAAE,CA8G3G;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,eAAe,EAAE,EAC3B,MAAM,EAAE;IACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7B,GACA,IAAI,CAeN;AAYD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAkC9G"}

package/server/server.instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.instance.d.ts","sourceRoot":"","sources":["../../src/server/server.instance.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,cAAc,EAEd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKtE,qBAAa,sBAAuB,SAAQ,cAAc;IACxD,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,aAAa,CAAC,CAAyB;IAC/C,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,eAAe,CAAC,CAAiB;IACzC,OAAO,CAAC,cAAc,CAAC,CAA0B;gBAErC,UAAU,EAAE,WAAW;IAMnC,OAAO,CAAC,aAAa;IAwBrB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;IAInE,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;IAIpE,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,oBAAoB;IAI7E;;;OAGG;IACH,gBAAgB,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,GAAG,IAAI;IAK1F;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,sBAAsB,GAAG,IAAI;IAI3D;;;OAGG;IACH,iBAAiB,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,GAAG,IAAI;IAK/F;;;;OAIG;IACH,gBAAgB,CAAC,aAAa,EAAE,uBAAuB,GAAG,IAAI;IAI9D,OAAO;IA0BP,UAAU,IAAI,OAAO;IAIf,KAAK;CAqBZ"}
+{"version":3,"file":"server.instance.d.ts","sourceRoot":"","sources":["../../src/server/server.instance.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,cAAc,EAEd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,oBAAoB,EAC1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAYtE,qBAAa,sBAAuB,SAAQ,cAAc;IACxD,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,aAAa,CAAC,CAAyB;IAC/C,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,eAAe,CAAC,CAAiB;IACzC,OAAO,CAAC,cAAc,CAAC,CAA0B;gBAErC,UAAU,EAAE,WAAW;IAMnC,OAAO,CAAC,aAAa;IAwBrB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;IAInE,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB;IAIpE,eAAe,CAAC,OAAO,EAAE,oBAAoB,GAAG,oBAAoB;IAI7E;;;OAGG;IACH,gBAAgB,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,sBAAsB,GAAG,IAAI;IAK1F;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,sBAAsB,GAAG,IAAI;IAI3D;;;OAGG;IACH,iBAAiB,CAAC,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,GAAG,IAAI;IAK/F;;;;OAIG;IACH,gBAAgB,CAAC,aAAa,EAAE,uBAAuB,GAAG,IAAI;IAI9D,OAAO;IA0BP,UAAU,IAAI,OAAO;IAIf,KAAK;CAqBZ"}

package/tool/flows/call-tool.flow.d.ts

@@ -124,14 +124,10 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
         arguments: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>>;
     }, import("zod/v4/core").$loose>;
     authInfo: z.ZodType<AuthInfo>;
-    tool: import("zod").ZodCustom<ToolEntry<Readonly<{
-        [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    }>, import("../../common").ToolOutputType, unknown, unknown>, ToolEntry<Readonly<{
+    tool: import("zod").ZodInstanceOf<ToolEntry<Readonly<{
         [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     }>, import("../../common").ToolOutputType, unknown, unknown>>;
-    toolContext: import("zod").ZodCustom<ToolContext<Readonly<{
-        [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-    }>, import("../../common").ToolOutputType, unknown, unknown>, ToolContext<Readonly<{
+    toolContext: import("zod").ZodInstanceOf<ToolContext<Readonly<{
         [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
     }>, import("../../common").ToolOutputType, unknown, unknown>>;
     rawOutput: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodAny>;

package/tool/flows/call-tool.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"call-tool.flow.d.ts","sourceRoot":"","sources":["../../../src/tool/flows/call-tool.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAA+C,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAEL,QAAQ,EAIR,WAAW,EACX,SAAS,EAET,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAsEtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAuB,CAAC;AAE1C,QAAA,MAAM,WAAW;;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cASnB,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;;;;;;;;gCAoB1E,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAuB2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,iBAAiB,EAAE,cAAc,CAC/B,YAAY,EACZ,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,iBAA0B,CAAC;AAUxC,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC7D,MAAM,wCAA0C;IAG1C,UAAU;IAsDhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,QAAQ;IAkHd;;;;;;;;OAQG;IAEG,qBAAqB;IAqJ3B;;;;OAIG;IAEG,sBAAsB;IAiJ5B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAK/B;;;;OAIG;IAEG,qBAAqB;IAwDrB,qBAAqB;IAkE3B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IAEG,oBAAoB;IA2DpB,YAAY;IA4CZ,gBAAgB;IA0ChB,aAAa;IAuBb,OAAO;IAwIP,cAAc;IAed,gBAAgB;IAgBhB,YAAY;IAOlB;;;;OAIG;IAEG,OAAO;IAyLb;;;;;;;;OAQG;IAEG,QAAQ;CAsGf"}
+{"version":3,"file":"call-tool.flow.d.ts","sourceRoot":"","sources":["../../../src/tool/flows/call-tool.flow.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACvC,OAAO,EAA+C,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAEL,QAAQ,EAIR,WAAW,EACX,SAAS,EAET,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AAsEtB,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;gCAIf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAuB,CAAC;AAE1C,QAAA,MAAM,WAAW;;;;;cAKiB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cASnB,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;;;;;;;;gCAoB1E,CAAC;AAEH,QAAA,MAAM,IAAI;;;;CAuB2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,iBAAiB,EAAE,cAAc,CAC/B,YAAY,EACZ,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,iBAA0B,CAAC;AAUxC,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC7D,MAAM,wCAA0C;IAG1C,UAAU;IAsDhB;;;;OAIG;IAEG,wBAAwB;IA2CxB,QAAQ;IAkHd;;;;;;;;OAQG;IAEG,qBAAqB;IAqJ3B;;;;OAIG;IAEG,sBAAsB;IAiJ5B;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAK/B;;;;OAIG;IAEG,qBAAqB;IAwDrB,qBAAqB;IAkE3B;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IAEG,oBAAoB;IA2DpB,YAAY;IA4CZ,gBAAgB;IA0ChB,aAAa;IAuBb,OAAO;IAwIP,cAAc;IAed,gBAAgB;IAgBhB,YAAY;IAOlB;;;;OAIG;IAEG,OAAO;IAyLb;;;;;;;;OAQG;IAEG,QAAQ;CAsGf"}

package/tool/flows/tools-list.flow.d.ts

@@ -72,17 +72,13 @@ declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
     platformType: z.ZodType<AIPlatformType | undefined>;
     tools: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
         appName: import("@frontmcp/lazy-zod").ZodString;
-        tool: import("zod").ZodCustom<ToolEntry<Readonly<{
-            [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-        }>, import("../../common").ToolOutputType, unknown, unknown>, ToolEntry<Readonly<{
+        tool: import("zod").ZodInstanceOf<ToolEntry<Readonly<{
             [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
         }>, import("../../common").ToolOutputType, unknown, unknown>>;
     }, import("zod/v4/core").$strip>>;
     resolvedTools: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
         appName: import("@frontmcp/lazy-zod").ZodString;
-        tool: import("zod").ZodCustom<ToolEntry<Readonly<{
-            [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
-        }>, import("../../common").ToolOutputType, unknown, unknown>, ToolEntry<Readonly<{
+        tool: import("zod").ZodInstanceOf<ToolEntry<Readonly<{
             [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
         }>, import("../../common").ToolOutputType, unknown, unknown>>;
         finalName: import("@frontmcp/lazy-zod").ZodString;

package/tool/flows/tools-list.flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools-list.flow.d.ts","sourceRoot":"","sources":["../../../src/tool/flows/tools-list.flow.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,QAAQ,EAMR,SAAS,EAET,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AAEtB,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAgB,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAiD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAyB,KAAK,mBAAmB,IAAI,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAQ9G,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAwB,CAAC;AAE3C,QAAA,MAAM,WAAW;;cAIM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;kBACD,CAAC,CAAC,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;;;;;;;;;;;;;;;;;;gCAc5E,CAAC;AAkBH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,kBAAkB,EAAE,cAAc,CAChC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,kBAA2B,CAAC;AAUzC,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAEjD,OAAO,CAAC,MAAM;IAId;;OAEG;IACH,OAAO,CAAC,cAAc;IAoBtB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAuBnB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKd,UAAU;IA+ChB;;;;OAIG;IAEG,wBAAwB;IA2CxB,SAAS;IAmDf;;;;OAIG;IAEG,mBAAmB;IA+BnB,gBAAgB;IAqChB,UAAU;CA+RjB"}
+{"version":3,"file":"tools-list.flow.d.ts","sourceRoot":"","sources":["../../../src/tool/flows/tools-list.flow.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,QAAQ,EAMR,SAAS,EAET,KAAK,cAAc,EAEpB,MAAM,cAAc,CAAC;AAEtB,OAAO,kBAAkB,CAAC;AAE1B,OAAO,EAAgB,CAAC,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAiD,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAyB,KAAK,mBAAmB,IAAI,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAQ9G,QAAA,MAAM,WAAW;;;;;;;;;;;;;;gCAGf,CAAC;AAEH,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAAwB,CAAC;AAE3C,QAAA,MAAM,WAAW;;cAIM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;kBACD,CAAC,CAAC,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;;;;;;;;;;;;;;gCAc5E,CAAC;AAkBH,QAAA,MAAM,IAAI;;;;CAI2B,CAAC;AAEtC,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,WAAW;QACnB,kBAAkB,EAAE,cAAc,CAChC,aAAa,EACb,OAAO,IAAI,EACX,OAAO,WAAW,EAClB,OAAO,YAAY,EACnB,OAAO,WAAW,CACnB,CAAC;KACH;CACF;AAED,QAAA,MAAM,IAAI,EAAG,kBAA2B,CAAC;AAUzC,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,QAAQ,CAAC,OAAO,IAAI,CAAC;IAC9D,MAAM,wCAA2C;IAEjD,OAAO,CAAC,MAAM;IAId;;OAEG;IACH,OAAO,CAAC,cAAc;IAoBtB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAuBnB;;OAEG;IACH,OAAO,CAAC,YAAY;IAKd,UAAU;IA+ChB;;;;OAIG;IAEG,wBAAwB;IA2CxB,SAAS;IAmDf;;;;OAIG;IAEG,mBAAmB;IA+BnB,gBAAgB;IAqChB,UAAU;CA+RjB"}